Function at 0x45c680
Capabilities:
Check os version
Get common file path
Get startup folder
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f4489
mov eax, dword fs:[0]
push eax
sub esp, 0x3cc
mov eax, dword [0x54b1b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x2b4]
push eax
mov edi, ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push pe_nt_image_headers32
lea ecx, [ebp - 0x3d4]
push 0
push ecx
mov dword [ebp - 0x3d8], 0x11c
call fcn.004c24e0
add esp, 0xc
lea edx, [ebp - 0x3d8]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x45c799
cmp dword [ebp - 0x3d4], 6
setae al
test al, al
je 0x45c799
lea esi, [ebp - 0x258]
call fcn.00403d70
mov ebx, 8
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], ebx
jb 0x45c722
mov eax, dword [eax]
add edi, 0x1c
cmp dword [edi + 0x14], ebx
jb 0x45c72e
mov ecx, dword [edi]
jmp 0x45c730
mov ecx, edi
push eax
push ecx
call fcn.0040e220
add esp, 8
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x244], ebx
jb 0x45c758
mov eax, dword [ebp - 0x258]
push eax
call fcn.004ba3a4
add esp, 4
lea esi, [ebp - 0x258]
call fcn.00403d70
mov dword [ebp - 4], 1
cmp dword [eax + 0x14], ebx
jb 0x45c771
mov eax, dword [eax]
cmp dword [edi + 0x14], ebx
jb 0x45c778
mov edi, dword [edi]
push eax
push edi
call fcn.0040e220
add esp, 8
cmp dword [ebp - 0x244], ebx
jb 0x45c799
mov ecx, dword [ebp - 0x258]
push ecx
call fcn.004ba3a4
add esp, 4
xor edx, edx
mov dword [ebp - 0x228], 7
mov dword [ebp - 0x22c], 0
mov word [ebp - 0x23c], dx
mov ebx, 2
mov dword [ebp - 4], ebx
cmp dword [0x54c6bc], edx
je 0x45c8f9
mov esi, dword [0x54c684]
mov eax, esi
cmp esi, 6
jb 0x45c7da
lea eax, [edx + 6]
cmp dword [0x54c688], 0x10
mov edx, dword [0x54c674]
jae 0x45c7ee
mov edx, 0x54c674
mov ecx, str.soyiba
call fcn.00406ef0
test eax, eax
jne 0x45c810
cmp esi, 6
jae 0x45c806
or eax, 0xffffffff
jmp 0x45c80e
xor eax, eax
cmp esi, 6
setne al
test eax, eax
sete al
test al, al
jne 0x45c848
mov ecx, 0x5108fc
call fcn.00445790
test al, al
je 0x45c8f9
mov ecx, 0x510900
call fcn.00445790
test al, al
je 0x45c8f9
call fcn.0045d4a0
test al, al
jne 0x45c8f9
mov ecx, 0x54c6ac
lea esi, [ebp - 0x258]
call fcn.00403c40
mov edi, eax
lea esi, [ebp - 0x23c]
mov byte [ebp - 4], 3
call fcn.00407640
mov byte [ebp - 4], bl
cmp dword [ebp - 0x244], 8
jb 0x45c884
mov eax, dword [ebp - 0x258]
push eax
call fcn.004ba3a4
add esp, 4
mov esi, dword [ebp - 0x23c]
mov edi, 8
cmp dword [ebp - 0x228], edi
jae 0x45c89d
lea esi, [ebp - 0x23c]
push 0x10
call fcn.00431ca0
mov esi, dword [ebp - 0x23c]
add esp, 4
cmp dword [ebp - 0x228], edi
jae 0x45c8bb
lea esi, [ebp - 0x23c]
push 0xb
call fcn.00431ca0
mov eax, dword [ebp - 0x23c]
add esp, 4
cmp dword [ebp - 0x228], edi
jae 0x45c8d9
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x49
push 0x51a5e8
push str.UnSetupUnSetupModule.cpp
lea esi, [edx - 0x45]
mov eax, 0x54eee0
call fcn.0042bb60
add esp, 0xc
lea esi, [ebp - 0x258]
call fcn.00403c60
mov edi, eax
lea esi, [ebp - 0x23c]
mov byte [ebp - 4], 4
call fcn.00407640
mov byte [ebp - 4], bl
cmp dword [ebp - 0x244], 8
jb 0x45c930
mov ecx, dword [ebp - 0x258]
push ecx
call fcn.004ba3a4
add esp, 4
mov esi, dword [ebp - 0x23c]
mov edi, 8
cmp dword [ebp - 0x228], edi
jae 0x45c949
lea esi, [ebp - 0x23c]
push 0x10
call fcn.00431ca0
mov esi, dword [ebp - 0x23c]
add esp, 4
cmp dword [ebp - 0x228], edi
jae 0x45c967
lea esi, [ebp - 0x23c]
push 0xb
call fcn.00431ca0
mov eax, dword [ebp - 0x23c]
add esp, 4
cmp dword [ebp - 0x228], edi
jae 0x45c985
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x4e
push 0x51a5e8
push str.UnSetupUnSetupModule.cpp
lea esi, [edx - 0x4a]
mov eax, 0x54eee0
call fcn.0042bb60
add esp, 0xc
push 0x208
xor esi, esi
lea eax, [ebp - 0x21e]
xor edx, edx
push esi
push eax
mov word [ebp - 0x220], dx
call fcn.004c24e0
add esp, 0xc
push esi
push ebx
lea ecx, [ebp - 0x220]
push ecx
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov edi, 7
xor edx, edx
mov dword [ebp - 0x27c], edi
mov dword [ebp - 0x280], esi
mov word [ebp - 0x290], dx
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 5
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, ebx
cmp cx, si
jne 0x45ca00
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x290]
call fcn.00408440
push 1
mov eax, 0x510884
lea ecx, [ebp - 0x290]
call fcn.00407450
xor ecx, ecx
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x264], esi
mov word [ebp - 0x274], cx
mov byte [ebp - 4], 6
cmp dword [0x54c6bc], esi
je 0x45cb91
mov esi, dword [0x54c684]
mov eax, esi
cmp esi, 6
jb 0x45ca68
lea eax, [ecx + 6]
cmp dword [0x54c688], 0x10
mov edx, dword [0x54c674]
jae 0x45ca7c
mov edx, 0x54c674
mov ecx, str.soyiba
call fcn.00406ef0
test eax, eax
jne 0x45ca9e
cmp esi, 6
jae 0x45ca94
or eax, 0xffffffff
jmp 0x45ca9c
xor eax, eax
cmp esi, 6
setne al
test eax, eax
sete al
test al, al
jne 0x45cad6
mov ecx, 0x5108fc
call fcn.00445790
test al, al
je 0x45cb91
mov ecx, 0x510900
call fcn.00445790
test al, al
je 0x45cb91
call fcn.0045d4a0
test al, al
jne 0x45cb91
lea esi, [ebp - 0x258]
call fcn.00403de0
mov edi, eax
lea esi, [ebp - 0x274]
mov byte [ebp - 4], 7
call fcn.00407640
mov byte [ebp - 4], 6
cmp dword [ebp - 0x244], 8
jb 0x45cb0e
mov edx, dword [ebp - 0x258]
push edx
call fcn.004ba3a4
add esp, 4
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x258]
push ecx
lea ebx, [ebp - 0x274]
call fcn.0042e640
add esp, 8
mov ebx, 8
mov byte [ebp - 4], bl
cmp dword [eax + 0x14], ebx
jb 0x45cb39
mov eax, dword [eax]
push eax
call fcn.00402580
add esp, 4
mov byte [ebp - 4], 6
cmp dword [ebp - 0x244], ebx
jb 0x45cb5d
mov edx, dword [ebp - 0x258]
push edx
call fcn.004ba3a4
add esp, 4
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x260], ebx
jae 0x45cb71
lea eax, [ebp - 0x274]
push eax
mov edx, 0x5a
push 0x51a678
push str.UnSetupUnSetupModule.cpp
lea esi, [edx - 0x56]
mov eax, 0x54eee0
call fcn.0042bb60
add esp, 0xc
lea esi, [ebp - 0x258]
call fcn.00403e00
mov edi, eax
lea esi, [ebp - 0x274]
mov byte [ebp - 4], 9
call fcn.00407640
mov byte [ebp - 4], 6
cmp dword [ebp - 0x244], 8
jb 0x45cbc9
mov eax, dword [ebp - 0x258]
push eax
call fcn.004ba3a4
add esp, 4
lea ecx, [ebp - 0x290]
push ecx
lea edx, [ebp - 0x2ac]
push edx
lea ebx, [ebp - 0x274]
call fcn.0042e640
add esp, 8
mov edi, 8
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], edi
jb 0x45cbf5
mov eax, dword [eax]
push eax
call fcn.00402580
add esp, 4
mov byte [ebp - 4], 6
cmp dword [ebp - 0x298], edi
jb 0x45cc19
mov eax, dword [ebp - 0x2ac]
push eax
call fcn.004ba3a4
add esp, 4
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x260], edi
jae 0x45cc2d
lea eax, [ebp - 0x274]
push eax
mov edx, 0x5e
push 0x51a678
push str.UnSetupUnSetupModule.cpp
lea esi, [edx - 0x5a]
mov eax, 0x54eee0
call fcn.0042bb60
add esp, 0xc
cmp dword [ebp - 0x260], edi
jb 0x45cc64
mov ecx, dword [ebp - 0x274]
push ecx
call fcn.004ba3a4
add esp, 4
xor ebx, ebx
xor edx, edx
mov esi, 7
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x264], ebx
mov word [ebp - 0x274], dx
cmp dword [ebp - 0x27c], edi
jb 0x45cc97
mov eax, dword [ebp - 0x290]
push eax
call fcn.004ba3a4
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x27c], esi
mov dword [ebp - 0x280], ebx
mov word [ebp - 0x290], cx
cmp dword [ebp - 0x228], edi
jb 0x45ccc3
mov edx, dword [ebp - 0x23c]
push edx
call fcn.004ba3a4
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ba3af
mov esp, ebp
pop ebp
ret