Function at 0x45d8f0
Capabilities:
Check os version
Get common file path
Get startup folder
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f5629
mov eax, dword fs:[0]
push eax
sub esp, 0x3cc
mov eax, dword [0x54c1b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x2b4]
push eax
mov edi, ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push pe_nt_image_headers32
lea ecx, [ebp - 0x3d4]
push 0
push ecx
mov dword [ebp - 0x3d8], 0x11c
call fcn.004c3610
add esp, 0xc
lea edx, [ebp - 0x3d8]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x45da09
cmp dword [ebp - 0x3d4], 6
setae al
test al, al
je 0x45da09
lea esi, [ebp - 0x258]
call fcn.00403d70
mov ebx, 8
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], ebx
jb 0x45d992
mov eax, dword [eax]
add edi, 0x1c
cmp dword [edi + 0x14], ebx
jb 0x45d99e
mov ecx, dword [edi]
jmp 0x45d9a0
mov ecx, edi
push eax
push ecx
call fcn.0040e600
add esp, 8
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x244], ebx
jb 0x45d9c8
mov eax, dword [ebp - 0x258]
push eax
call fcn.004bb4d8
add esp, 4
lea esi, [ebp - 0x258]
call fcn.00403d70
mov dword [ebp - 4], 1
cmp dword [eax + 0x14], ebx
jb 0x45d9e1
mov eax, dword [eax]
cmp dword [edi + 0x14], ebx
jb 0x45d9e8
mov edi, dword [edi]
push eax
push edi
call fcn.0040e600
add esp, 8
cmp dword [ebp - 0x244], ebx
jb 0x45da09
mov ecx, dword [ebp - 0x258]
push ecx
call fcn.004bb4d8
add esp, 4
xor edx, edx
mov dword [ebp - 0x228], 7
mov dword [ebp - 0x22c], 0
mov word [ebp - 0x23c], dx
mov ebx, 2
mov dword [ebp - 4], ebx
cmp dword [0x54d6bc], edx
je 0x45db69
mov esi, dword [0x54d684]
mov eax, esi
cmp esi, 6
jb 0x45da4a
lea eax, [edx + 6]
cmp dword [0x54d688], 0x10
mov edx, dword [0x54d674]
jae 0x45da5e
mov edx, 0x54d674
mov ecx, str.soyiba
call fcn.004072c0
test eax, eax
jne 0x45da80
cmp esi, 6
jae 0x45da76
or eax, 0xffffffff
jmp 0x45da7e
xor eax, eax
cmp esi, 6
setne al
test eax, eax
sete al
test al, al
jne 0x45dab8
mov ecx, 0x511968
call fcn.00446240
test al, al
je 0x45db69
mov ecx, 0x51196c
call fcn.00446240
test al, al
je 0x45db69
call fcn.0045e710
test al, al
jne 0x45db69
mov ecx, 0x54d6ac
lea esi, [ebp - 0x258]
call fcn.00403c40
mov edi, eax
lea esi, [ebp - 0x23c]
mov byte [ebp - 4], 3
call fcn.00407a10
mov byte [ebp - 4], bl
cmp dword [ebp - 0x244], 8
jb 0x45daf4
mov eax, dword [ebp - 0x258]
push eax
call fcn.004bb4d8
add esp, 4
mov esi, dword [ebp - 0x23c]
mov edi, 8
cmp dword [ebp - 0x228], edi
jae 0x45db0d
lea esi, [ebp - 0x23c]
push 0x10
call fcn.00432750
mov esi, dword [ebp - 0x23c]
add esp, 4
cmp dword [ebp - 0x228], edi
jae 0x45db2b
lea esi, [ebp - 0x23c]
push 0xb
call fcn.00432750
mov eax, dword [ebp - 0x23c]
add esp, 4
cmp dword [ebp - 0x228], edi
jae 0x45db49
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x49
push 0x51b8f8
push str.UnSetupUnSetupModule.cpp
lea esi, [edx - 0x45]
mov eax, 0x54fee0
call fcn.0042c610
add esp, 0xc
lea esi, [ebp - 0x258]
call fcn.00403c60
mov edi, eax
lea esi, [ebp - 0x23c]
mov byte [ebp - 4], 4
call fcn.00407a10
mov byte [ebp - 4], bl
cmp dword [ebp - 0x244], 8
jb 0x45dba0
mov ecx, dword [ebp - 0x258]
push ecx
call fcn.004bb4d8
add esp, 4
mov esi, dword [ebp - 0x23c]
mov edi, 8
cmp dword [ebp - 0x228], edi
jae 0x45dbb9
lea esi, [ebp - 0x23c]
push 0x10
call fcn.00432750
mov esi, dword [ebp - 0x23c]
add esp, 4
cmp dword [ebp - 0x228], edi
jae 0x45dbd7
lea esi, [ebp - 0x23c]
push 0xb
call fcn.00432750
mov eax, dword [ebp - 0x23c]
add esp, 4
cmp dword [ebp - 0x228], edi
jae 0x45dbf5
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x4e
push 0x51b8f8
push str.UnSetupUnSetupModule.cpp
lea esi, [edx - 0x4a]
mov eax, 0x54fee0
call fcn.0042c610
add esp, 0xc
push 0x208
xor esi, esi
lea eax, [ebp - 0x21e]
xor edx, edx
push esi
push eax
mov word [ebp - 0x220], dx
call fcn.004c3610
add esp, 0xc
push esi
push ebx
lea ecx, [ebp - 0x220]
push ecx
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov edi, 7
xor edx, edx
mov dword [ebp - 0x27c], edi
mov dword [ebp - 0x280], esi
mov word [ebp - 0x290], dx
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 5
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, ebx
cmp cx, si
jne 0x45dc70
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x290]
call fcn.00408810
push 1
mov eax, 0x5118c0
lea ecx, [ebp - 0x290]
call fcn.00407820
xor ecx, ecx
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x264], esi
mov word [ebp - 0x274], cx
mov byte [ebp - 4], 6
cmp dword [0x54d6bc], esi
je 0x45de01
mov esi, dword [0x54d684]
mov eax, esi
cmp esi, 6
jb 0x45dcd8
lea eax, [ecx + 6]
cmp dword [0x54d688], 0x10
mov edx, dword [0x54d674]
jae 0x45dcec
mov edx, 0x54d674
mov ecx, str.soyiba
call fcn.004072c0
test eax, eax
jne 0x45dd0e
cmp esi, 6
jae 0x45dd04
or eax, 0xffffffff
jmp 0x45dd0c
xor eax, eax
cmp esi, 6
setne al
test eax, eax
sete al
test al, al
jne 0x45dd46
mov ecx, 0x511968
call fcn.00446240
test al, al
je 0x45de01
mov ecx, 0x51196c
call fcn.00446240
test al, al
je 0x45de01
call fcn.0045e710
test al, al
jne 0x45de01
lea esi, [ebp - 0x258]
call fcn.00403de0
mov edi, eax
lea esi, [ebp - 0x274]
mov byte [ebp - 4], 7
call fcn.00407a10
mov byte [ebp - 4], 6
cmp dword [ebp - 0x244], 8
jb 0x45dd7e
mov edx, dword [ebp - 0x258]
push edx
call fcn.004bb4d8
add esp, 4
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x258]
push ecx
lea ebx, [ebp - 0x274]
call fcn.0042f0f0
add esp, 8
mov ebx, 8
mov byte [ebp - 4], bl
cmp dword [eax + 0x14], ebx
jb 0x45dda9
mov eax, dword [eax]
push eax
call fcn.00402580
add esp, 4
mov byte [ebp - 4], 6
cmp dword [ebp - 0x244], ebx
jb 0x45ddcd
mov edx, dword [ebp - 0x258]
push edx
call fcn.004bb4d8
add esp, 4
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x260], ebx
jae 0x45dde1
lea eax, [ebp - 0x274]
push eax
mov edx, 0x5a
push 0x51b988
push str.UnSetupUnSetupModule.cpp
lea esi, [edx - 0x56]
mov eax, 0x54fee0
call fcn.0042c610
add esp, 0xc
lea esi, [ebp - 0x258]
call fcn.00403e00
mov edi, eax
lea esi, [ebp - 0x274]
mov byte [ebp - 4], 9
call fcn.00407a10
mov byte [ebp - 4], 6
cmp dword [ebp - 0x244], 8
jb 0x45de39
mov eax, dword [ebp - 0x258]
push eax
call fcn.004bb4d8
add esp, 4
lea ecx, [ebp - 0x290]
push ecx
lea edx, [ebp - 0x2ac]
push edx
lea ebx, [ebp - 0x274]
call fcn.0042f0f0
add esp, 8
mov edi, 8
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], edi
jb 0x45de65
mov eax, dword [eax]
push eax
call fcn.00402580
add esp, 4
mov byte [ebp - 4], 6
cmp dword [ebp - 0x298], edi
jb 0x45de89
mov eax, dword [ebp - 0x2ac]
push eax
call fcn.004bb4d8
add esp, 4
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x260], edi
jae 0x45de9d
lea eax, [ebp - 0x274]
push eax
mov edx, 0x5e
push 0x51b988
push str.UnSetupUnSetupModule.cpp
lea esi, [edx - 0x5a]
mov eax, 0x54fee0
call fcn.0042c610
add esp, 0xc
cmp dword [ebp - 0x260], edi
jb 0x45ded4
mov ecx, dword [ebp - 0x274]
push ecx
call fcn.004bb4d8
add esp, 4
xor ebx, ebx
xor edx, edx
mov esi, 7
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x264], ebx
mov word [ebp - 0x274], dx
cmp dword [ebp - 0x27c], edi
jb 0x45df07
mov eax, dword [ebp - 0x290]
push eax
call fcn.004bb4d8
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x27c], esi
mov dword [ebp - 0x280], ebx
mov word [ebp - 0x290], cx
cmp dword [ebp - 0x228], edi
jb 0x45df33
mov edx, dword [ebp - 0x23c]
push edx
call fcn.004bb4d8
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bb4e3
mov esp, ebp
pop ebp
ret