Function at 0x41c084
Capabilities:
Check os version
Get common file path

Disassembly:
mov eax, 0x466325
call fcn.0043540c
sub esp, 0xe2c
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
push 0xe
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0xf2]
mov word [ebp - 0xf4], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x636]
mov word [ebp - 0x638], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0xf4]
push eax
push str.Msi.DLL
call fcn.004307f9
lea eax, [ebp - 0xf4]
push eax
push dword [ebp + 8]
call fcn.004311b1
add esp, 0x14
cmp eax, ebx
jge 0x41c3c0
mov ecx, dword [ebp - 0x10]
call fcn.00401083
mov edi, eax
mov ecx, edi
mov dword [ebp - 0x18], edi
call fcn.004278b0
mov ecx, edi
mov esi, eax
call fcn.0042ad04
test eax, eax
je 0x41c16b
cmp dword [esi + 8], 5
jne 0x41c129
cmp dword [esi + 0xc], 2
jae 0x41c132
call fcn.004480fc
test al, al
je 0x41c164
call fcn.004480fc
test al, al
jne 0x41c3bb
lea eax, [ebp - 0x238]
mov dword [ebp - 0x238], 0x11c
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp word [ebp - 0x124], 1
jae 0x41c3bb
mov eax, str.SupportOSMsi30
jmp 0x41c180
mov ecx, edi
call fcn.0042acaa
test eax, eax
mov eax, str.SupportOSMsi12
jne 0x41c180
mov eax, str.SupportOS
push edi
push eax
call fcn.0043235c
pop ecx
test eax, eax
pop ecx
je 0x41c230
cmp dword [esi], 2
jne 0x41c229
call fcn.00431727
test eax, eax
jne 0x41c1bb
mov eax, 0x4b2
push eax
mov dword [0x48b730], eax
call fcn.00430471
pop ecx
push 1
jmp 0x41c3c2
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0xe36]
mov word [ebp - 0xe38], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xe38]
mov esi, 0x400
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x41c1fd
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xe38]
push eax
call fcn.0041bd93
test eax, eax
je 0x41c222
lea eax, [ebp - 0xe38]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x41c229
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xe38]
push eax
call fcn.0041bd93
test eax, eax
jne 0x41c229
push 2
jmp 0x41c3c2
xor eax, eax
jmp 0x41c3c3
cmp dword [esi + 0x14], 2
jne 0x41c23c
cmp dword [esi + 8], 4
je 0x41c247
mov ecx, edi
call fcn.0042ad04
test eax, eax
je 0x41c255
mov ecx, edi
call fcn.0042ac71
push 3
jmp 0x41c3c2
mov eax, dword [str.SuppressWrongOS]
mov edi, 0x46b57c
mov esi, 0x46b574
cmp eax, ebx
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x48], esi
jne 0x41c273
mov eax, 0x486618
lea ecx, [ebp + 0xb]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x68]
call fcn.004010c6
mov eax, dword [str.Startup]
mov dword [ebp - 4], ebx
cmp eax, ebx
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x70], esi
jne 0x41c29b
mov eax, 0x486618
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x90]
call fcn.004010c6
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x68]
push ebx
push eax
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 1
push eax
call fcn.0042b229
and byte [ebp - 4], 0
lea ecx, [ebp - 0x90]
mov bl, al
call fcn.00401306
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.00401306
test bl, bl
je 0x41c3bb
lea eax, [ebp + 0xb]
mov ebx, 0x4b7
push 0
push eax
lea ecx, [ebp - 0x40]
mov dword [0x48b730], ebx
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x20], esi
call fcn.00401af4
lea eax, [ebp - 0xf4]
mov dword [ebp - 4], 2
test eax, eax
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0x98], esi
lea eax, [ebp - 0xf4]
jne 0x41c330
mov eax, 0x486618
lea ecx, [ebp - 0x12]
push 0
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.004010c6
mov edi, dword [ebp - 0xb0]
mov byte [ebp - 4], 3
test edi, edi
mov esi, 0x46b598
jne 0x41c357
mov edi, esi
lea eax, [ebp - 0x11c]
push ebx
push eax
call fcn.004305a3
pop ecx
pop ecx
mov eax, dword [eax + 8]
mov byte [ebp - 4], 4
test eax, eax
jne 0x41c373
mov eax, esi
push edi
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00420b02
add esp, 0xc
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 3
call fcn.00401306
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 2
call fcn.00401306
cmp dword [ebp - 0x38], 0
je 0x41c3a8
mov esi, dword [ebp - 0x38]
push esi
call fcn.00430251
or dword [ebp - 4], 0xffffffff
pop ecx
lea ecx, [ebp - 0x40]
call fcn.00401306
or eax, 0xffffffff
jmp 0x41c3c3
push 0xfffffffffffffffe
pop eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4