Function at 0x51d390
Capabilities:
Get common file path
Identify system language via api

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6eadc1
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x208
mov eax, dword [0x82d084]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x1c1], dl
mov esi, ecx
mov dword [ebp - 0x1b8], 0
push 0x854390
mov dword [ebp - 0x1f8], 0x854390
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x51fc7c
cmp byte [ebp - 0x1c1], 0
mov edi, 0x838bbc
mov dword [ebp - 4], eax
mov eax, 0x838b14
cmove edi, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x21c]
mov eax, dword [edi + 0x10]
add eax, 4
mov dword [ebp - 0x20c], 0
push eax
mov dword [ebp - 0x208], 0xf
mov byte [ebp - 0x21c], 0
mov dword [ebp - 0x1b8], 0x10
call fcn.00458200
push 4
push str.CEF:
lea ecx, [ebp - 0x21c]
call fcn.00441450
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x51d474
mov eax, dword [edi]
push dword [edi + 0x10]
lea ecx, [ebp - 0x21c]
push eax
call fcn.00441450
push 1
push 0x77c980
lea ecx, [ebp - 0x21c]
call fcn.00441450
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1b8], 0x30
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1dc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1cc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1dc]
cmp dword [0x838b58], 0x10
mov eax, 0x838b44
push dword [0x838b54]
cmovae eax, dword [0x838b44]
push eax
call fcn.00441450
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x198], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x188], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x51d56a
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51d560
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fc82
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x208]
cmp edx, 0x10
jb 0x51d5c3
mov ecx, dword [ebp - 0x21c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51d5b9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fc82
push edx
push ecx
call fcn.0067bc93
add esp, 8
cmp byte [ebx + 8], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0xf
mov byte [ebp - 0x21c], 0
je 0x51dd12
cmp byte [0x838ab0], 0
jne 0x51d5fe
cmp dword [0x838cec], 0
jne 0x51d942
push 0
push 0x761dc7
lea ecx, [ebp - 0x180]
mov byte [0x838ab0], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
call fcn.00430160
xor eax, eax
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 7
mov word [ebp - 0x150], ax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1f4]
push 0xa
push str.svcVersion
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], 7
mov word [ebp - 0x1f4], ax
call fcn.0042fe00
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x138]
push 0x24
xor eax, eax
mov dword [ebp - 0x1b8], 0x61
push str.SOFTWAREMicrosoftInternet_Explorer
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
call fcn.0042fe00
lea eax, [ebp - 0x150]
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x138]
call fcn.00523e70
add esp, 4
test eax, eax
jne 0x51d6e7
mov byte [ebp - 0x1c1], 1
cmp dword [ebp - 0x140], eax
jne 0x51d6ee
mov byte [ebp - 0x1c1], 0
lea ecx, [ebp - 0x138]
call fcn.0042fd70
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 4], 7
call fcn.0042fd70
cmp byte [ebp - 0x1c1], 0
jne 0x51d7df
push 7
xor eax, eax
mov dword [ebp - 0x1e4], 0
push str.Version
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e0], 7
mov word [ebp - 0x1f4], ax
call fcn.0042fe00
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x138]
push 0x24
xor eax, eax
mov dword [ebp - 0x1b8], 0x64
push str.SOFTWAREMicrosoftInternet_Explorer
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
call fcn.0042fe00
lea eax, [ebp - 0x150]
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x138]
call fcn.00523e70
add esp, 4
test eax, eax
jne 0x51d7b2
mov byte [ebp - 0x1c1], 1
cmp dword [ebp - 0x140], eax
jne 0x51d7b9
mov byte [ebp - 0x1c1], 0
lea ecx, [ebp - 0x138]
call fcn.0042fd70
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 4], 7
call fcn.0042fd70
cmp byte [ebp - 0x1c1], 0
je 0x51d7fe
cmp dword [ebp - 0x13c], 8
lea ecx, [ebp - 0x150]
lea edx, [ebp - 0x180]
cmovae ecx, dword [ebp - 0x150]
call fcn.0050b660
mov esi, dword [ebp - 0x170]
mov ecx, 0x838cdc
test esi, esi
je 0x51d855
cmp dword [0x838cf0], 0x10
mov eax, ecx
push 3
cmovae eax, dword [0x838cdc]
mov dword [0x838cec], 0
push 0x7810fc
mov byte [eax], 0
call fcn.00441450
cmp dword [ebp - 0x16c], 0x10
lea ecx, [ebp - 0x180]
push esi
cmovae ecx, dword [ebp - 0x180]
push ecx
mov ecx, eax
call fcn.00441450
jmp 0x51d861
push 0xa
push str.IE_8.0.0.0
call fcn.00430160
mov edx, 0x20
mov dword [ebp - 0x158], 0
cmp dword [0x838cec], edx
lea ecx, [ebp - 0x168]
mov eax, 0x838cdc
mov dword [ebp - 0x154], 0xf
cmovb edx, dword [0x838cec]
cmp dword [0x838cf0], 0x10
push edx
cmovae eax, dword [0x838cdc]
push eax
mov byte [ebp - 0x168], 0
call fcn.00430160
lea eax, [ebp - 0x168]
mov ecx, 0x838cdc
push eax
call fcn.00444ab0
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51d8f9
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51d8ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fc87
push edx
push ecx
call fcn.0067bc93
add esp, 8
lea ecx, [ebp - 0x150]
call fcn.0042fd70
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x16c]
cmp edx, 0x10
jb 0x51d942
mov ecx, dword [ebp - 0x180]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51d938
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fc87
push edx
push ecx
call fcn.0067bc93
add esp, 8
push 0x854764
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x51fc8c
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
call fcn.00430160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x150]
push 0
push 0x761dc7
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00430160
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x180]
push 6
push str.OSUtil
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
call fcn.00430160
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0xc
push eax
lea edx, [ebp - 0x150]
lea ecx, [ebp - 0x180]
call fcn.005f8830
add esp, 4
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x16c]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x51da51
mov ecx, dword [ebp - 0x180]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51da47
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fc92
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
cmp edx, 0x10
jb 0x51daaa
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51daa0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fc92
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51dae8
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51dade
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fc92
push edx
push ecx
call fcn.0067bc93
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x51dc9f
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
call fcn.00430160
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x150]
push 0
push 0x761dc7
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00430160
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x180]
push 6
push str.OSUtil
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
call fcn.00430160
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0xf
push eax
lea edx, [ebp - 0x150]
lea ecx, [ebp - 0x180]
call fcn.005f8830
add esp, 4
mov edx, 0x838cdc
cmp dword [0x838cf0], 0x10
cmovae edx, dword [0x838cdc]
mov ecx, dword [eax]
push edx
push str.SetEmbeddedBrowserVersion:_EmbeddedBrowserVersion:__s
push eax
call dword [ecx + 0x14]
mov byte [ebp - 4], 0xe
add esp, 0xc
mov edx, dword [ebp - 0x16c]
cmp edx, 0x10
jb 0x51dc08
mov ecx, dword [ebp - 0x180]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51dbfe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fc97
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
cmp edx, 0x10
jb 0x51dc61
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51dc57
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fc97
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51dc9f
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51dc95
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fc97
push edx
push ecx
call fcn.0067bc93
add esp, 8
push 0x854764
call fcn.0067f62b
add esp, 4
test eax, eax
jne 0x51fc9c
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x51dcf1
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51dce7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fca2
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov dword [ebp - 4], 0x10
push 0x854390
call fcn.0067f62b
add esp, 4
test eax, eax
jne 0x51fca7
jmp 0x51f5a9
cmp dword [esi + 0x10], 0
je 0x51fc43
cmp byte [0x838ab0], 0
je 0x51e0f1
cmp dword [0x838cec], 0
je 0x51e0f1
push 0x854764
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x51fcad
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1f4]
push 0
push 0x761dc7
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x150]
push 6
push str.OSUtil
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00430160
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x13
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x150]
call fcn.005f8830
add esp, 4
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x13c]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x51de45
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51de3b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcb3
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x1e0]
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
cmp edx, 0x10
jb 0x51de9e
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51de94
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcb3
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x124]
cmp edx, 0x10
jb 0x51dedc
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ded2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcb3
push edx
push ecx
call fcn.0067bc93
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x51e093
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x138]
push 0
push 0x761dc7
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x150]
push 6
push str.OSUtil
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x16
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x150]
call fcn.005f8830
add esp, 4
mov edx, 0x838cdc
cmp dword [0x838cf0], 0x10
cmovae edx, dword [0x838cdc]
mov ecx, dword [eax]
push edx
push str.SetEmbeddedBrowserVersion:_Already_fetched_EmbeddedBrowserVersion:__s
push eax
call dword [ecx + 0x14]
mov byte [ebp - 4], 0x15
add esp, 0xc
mov edx, dword [ebp - 0x13c]
cmp edx, 0x10
jb 0x51dffc
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51dff2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcb8
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
cmp edx, 0x10
jb 0x51e055
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e04b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcb8
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51e093
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e089
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcb8
push edx
push ecx
call fcn.0067bc93
add esp, 8
push 0x854764
call fcn.0067f62b
add esp, 4
test eax, eax
jne 0x51fcbd
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x51e0e5
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e0db
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fccd
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov dword [ebp - 4], 0x17
jmp 0x51dcf8
push 0
push 0x761dc7
lea ecx, [ebp - 0x150]
mov byte [0x838ab0], 1
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00430160
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x168]
push 0
push 0x761dc7
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
call fcn.00430160
movups xmm0, xmmword [0x781620]
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x1b8], 0
push eax
push 0
push 0
lea eax, [ebp - 0x1b4]
mov byte [ebp - 4], 0x1a
push eax
movups xmmword [ebp - 0x1b4], xmm0
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x51f5b0
mov edx, dword [ebp - 0x1b8]
test edx, edx
je 0x51f5b0
mov ecx, edx
mov dword [ebp - 0x128], 0
xor eax, eax
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
lea eax, [ecx + 2]
mov dword [ebp - 0x1c0], eax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x51e1d0
sub ecx, dword [ebp - 0x1c0]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x138]
call fcn.0042fe00
lea edx, [ebp - 0x168]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x138]
call fcn.0050ba50
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x1a
call fcn.0042fd70
push 1
push 0x77fe64
lea ecx, [ebp - 0x168]
call fcn.00441450
push 0xb
push str.version.dll
lea ecx, [ebp - 0x168]
call fcn.00441450
push dword [ebp - 0x1b8]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
mov dword [ebp - 4], 0x19
push eax
push 0x75b10c
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 7
mov word [ebp - 0x180], ax
call fcn.0042fe00
lea edx, [ebp - 0x180]
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x168]
call fcn.0050b960
cmp dword [ebp - 0x16c], 8
lea eax, [ebp - 0x180]
cmovae eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryW]
mov dword [ebp - 0x200], eax
test eax, eax
jne 0x51e74f
push 0x854764
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x51fca7
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x138]
push 0
push 0x761dc7
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x2d
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005f8830
add esp, 4
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x1c8]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x51e3d0
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e3c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcc3
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x51e429
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e41f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcc3
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51e467
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e45d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcc3
push edx
push ecx
call fcn.0067bc93
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x51e614
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x138]
push 0
push 0x761dc7
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x30
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005f8830
add esp, 4
mov ecx, dword [eax]
push str.SetEmbeddedBrowserVersion
push str._s:_Could_not_load_Version.dll
push 0x761dc7
push eax
call dword [ecx + 0x24]
mov byte [ebp - 4], 0x2f
add esp, 0x10
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x51e57d
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e573
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcc8
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x51e5d6
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e5cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcc8
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51e614
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e60a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcc8
push edx
push ecx
call fcn.0067bc93
add esp, 8
push 0x854764
call fcn.0067f62b
add esp, 4
test eax, eax
jne 0x51fca7
cmp dword [ebp - 0x184], 0x10
lea eax, [ebp - 0x198]
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
mov ecx, 0x838cdc
push eax
call fcn.00430160
lea ecx, [ebp - 0x180]
call fcn.0042fd70
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51e697
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e68d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fccd
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
cmp edx, 0x10
jb 0x51e6f0
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e6e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fccd
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x51e72e
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e724
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fccd
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov dword [ebp - 4], 0x31
push 0x854390
call fcn.0067f62b
add esp, 4
test eax, eax
je 0x51fc59
jmp 0x51fca7
cmp dword [esi + 0x14], 0x10
mov dword [ebp - 0x19c], 0
jb 0x51e761
mov esi, dword [esi]
push str.GetFileVersionInfoSizeA
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea ecx, [ebp - 0x19c]
push ecx
push esi
call eax
mov dword [ebp - 0x1bc], eax
test eax, eax
jne 0x51ec07
push 0x854764
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x51fca7
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x138]
push 0
push 0x761dc7
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x34
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005f8830
add esp, 4
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x1c8]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x51e894
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e88a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcd2
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x51e8ed
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e8e3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcd2
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51e92b
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51e921
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcd2
push edx
push ecx
call fcn.0067bc93
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x51eae1
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x138]
push 0
push 0x761dc7
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x37
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005f8830
mov esi, eax
add esp, 4
mov edi, dword [esi]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.SetEmbeddedBrowserVersion
push str._s:_GetFileVersionInfoSizeA_failed_with_error_code__lu
push 0x761dc7
push esi
call dword [edi + 0x24]
mov byte [ebp - 4], 0x36
add esp, 0x14
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x51ea4a
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ea40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcd7
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x51eaa3
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ea99
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcd7
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51eae1
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ead7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcd7
push edx
push ecx
call fcn.0067bc93
add esp, 8
push 0x854764
call fcn.0067f62b
add esp, 4
test eax, eax
jne 0x51fca7
cmp dword [ebp - 0x184], 0x10
lea eax, [ebp - 0x198]
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
mov ecx, 0x838cdc
push eax
call fcn.00430160
lea ecx, [ebp - 0x180]
call fcn.0042fd70
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51eb64
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51eb5a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcdc
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
cmp edx, 0x10
jb 0x51ebbd
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ebb3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcdc
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x51ebfb
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ebf1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcdc
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov dword [ebp - 4], 0x38
jmp 0x51e735
push eax
call fcn.0067beb9
add esp, 4
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1c0], 0
push str.GetFileVersionInfoA
push dword [ebp - 0x200]
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
test eax, eax
je 0x51f3b9
push dword [ebp - 0x1fc]
push dword [ebp - 0x1bc]
push dword [ebp - 0x19c]
push esi
call eax
test eax, eax
jne 0x51f0e2
push 0x854764
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x51fca7
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x138]
push 0
push 0x761dc7
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x3b
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005f8830
add esp, 4
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x1c8]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x51ed6f
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ed65
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fce1
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x51edc8
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51edbe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fce1
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51ee06
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51edfc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fce1
push edx
push ecx
call fcn.0067bc93
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x51efbc
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x138]
push 0
push 0x761dc7
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x3e
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005f8830
mov esi, eax
add esp, 4
mov edi, dword [esi]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.SetEmbeddedBrowserVersion
push str._s:_GetFileVersionInfoA_failed_with_error_code__lu
push 0x761dc7
push esi
call dword [edi + 0x24]
mov byte [ebp - 4], 0x3d
add esp, 0x14
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x51ef25
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ef1b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fce6
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x51ef7e
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ef74
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fce6
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51efbc
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51efb2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fce6
push edx
push ecx
call fcn.0067bc93
add esp, 8
push 0x854764
call fcn.0067f62b
add esp, 4
test eax, eax
jne 0x51fca7
cmp dword [ebp - 0x184], 0x10
lea eax, [ebp - 0x198]
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
mov ecx, 0x838cdc
push eax
call fcn.00430160
lea ecx, [ebp - 0x180]
call fcn.0042fd70
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51f03f
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f035
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fceb
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
cmp edx, 0x10
jb 0x51f098
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f08e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fceb
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x51f0d6
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f0cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fceb
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov dword [ebp - 4], 0x3f
jmp 0x51e735
push 0x781240
push 0x855310
call fcn.004a4080
add esp, 8
mov dword [ebp - 0x1bc], 0
push str.VerQueryValueA
push dword [ebp - 0x200]
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov esi, dword [ebp - 0x1fc]
lea ecx, [ebp - 0x1a4]
push ecx
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x204], eax
push ecx
push 0x855310
push esi
call eax
test eax, eax
je 0x51f174
cmp dword [ebp - 0x1a4], 4
jne 0x51f174
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [eax]
mov eax, ecx
shr eax, 0x10
movzx eax, al
push eax
mov eax, ecx
shr eax, 0x18
push eax
movzx eax, cl
push eax
shr ecx, 8
movzx eax, cl
push eax
push str.StringFileInfo_02X_02X_02X_02XProductVersion
push 0x855310
call fcn.004a4080
add esp, 0x18
jmp 0x51f190
call dword [sym.imp.KERNEL32.DLL_GetUserDefaultLangID]
movzx eax, ax
push eax
push str.StringFileInfo_04X04B0ProductVersion
push 0x855310
call fcn.004a4080
add esp, 0xc
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0x855310
push esi
call dword [ebp - 0x204]
test eax, eax
jne 0x51f34e
push 0x854764
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x51fca7
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x138]
push 0x761dc7
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430130
push str.OSUtil
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x41
call fcn.0042fd30
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x42
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005f8830
add esp, 4
lea ecx, [ebp - 0x1dc]
mov esi, eax
call fcn.0042fce0
lea ecx, [ebp - 0x138]
call fcn.0042fce0
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
test esi, esi
je 0x51f323
call fcn.005f8600
push 0x761dc7
lea ecx, [ebp - 0x1dc]
call fcn.0042fd30
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x43
call fcn.0042fd30
push str.OSUtil
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x44
call fcn.0042fd30
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x45
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x138]
call fcn.005f8830
add esp, 4
mov ecx, dword [eax]
push str.SetEmbeddedBrowserVersion
push str._s:_VerQueryValueA_failed
push 0x761dc7
push eax
call dword [ecx + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x138]
call fcn.0042fce0
lea ecx, [ebp - 0x1f4]
call fcn.0042fce0
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
mov ecx, 0x854764
call fcn.004ba3c0
lea eax, [ebp - 0x198]
mov ecx, 0x838cdc
push eax
call fcn.00451f60
lea ecx, [ebp - 0x180]
call fcn.0042fd70
jmp 0x51fc2d
mov esi, dword [ebp - 0x1a0]
test esi, esi
je 0x51f3b9
push esi
push dword [ebp - 0x1c0]
lea eax, [ebp - 0x120]
push eax
call fcn.0068dd00
add esp, 0xc
cmp esi, 0x100
jae 0x51fcf0
lea eax, [ebp - 0x120]
mov byte [ebp + esi - 0x120], 0
push eax
lea ecx, [ebp - 0x138]
call fcn.0042fd30
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x150]
call fcn.00451f60
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
push dword [ebp - 0x1fc]
call fcn.0067bcc4
add esp, 4
push dword [ebp - 0x200]
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
push edi
lea eax, [ebp - 0x1f4]
push str.CEF:
push eax
call fcn.004580c0
add esp, 0xc
push 0x77c980
push eax
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x47
push eax
call fcn.00458180
add esp, 0xc
mov ecx, 0x838cdc
push eax
call fcn.00444ab0
lea ecx, [ebp - 0x138]
call fcn.0042fce0
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
lea eax, [ebp - 0x150]
mov ecx, 0x838cdc
push eax
call fcn.00440bc0
mov ecx, 0x854764
call fcn.004ba3a0
call fcn.005f8600
push 0x761dc7
lea ecx, [ebp - 0x1dc]
call fcn.0042fd30
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x48
call fcn.0042fd30
push str.OSUtil
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x49
call fcn.0042fd30
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x4a
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x138]
call fcn.005f8830
add esp, 4
lea ecx, [ebp - 0x138]
mov esi, eax
call fcn.0042fce0
lea ecx, [ebp - 0x1f4]
call fcn.0042fce0
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
test esi, esi
je 0x51f568
call fcn.005f8600
push 0x761dc7
lea ecx, [ebp - 0x1dc]
call fcn.0042fd30
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x4b
call fcn.0042fd30
push str.OSUtil
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x4c
call fcn.0042fd30
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x4d
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x138]
call fcn.005f8830
mov esi, eax
add esp, 4
mov ecx, 0x838cdc
mov edi, dword [esi]
call fcn.00440b80
push eax
push str.SetEmbeddedBrowserVersion:_EmbeddedBrowserVersion:__s
push esi
call dword [edi + 0x14]
add esp, 0xc
lea ecx, [ebp - 0x138]
call fcn.0042fce0
lea ecx, [ebp - 0x1f4]
call fcn.0042fce0
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
mov ecx, 0x854764
call fcn.004ba3c0
lea ecx, [ebp - 0x180]
call fcn.0042fd70
lea ecx, [ebp - 0x168]
call fcn.0042fce0
lea ecx, [ebp - 0x150]
call fcn.0042fce0
lea ecx, [ebp - 0x198]
call fcn.0042fce0
lea ecx, [ebp - 0x1f8]
call fcn.004e0b00
xor eax, eax
jmp 0x51fc5e
push 0x854764
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x51fca7
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x138]
push 0
push 0x761dc7
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x1e
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005f8830
add esp, 4
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x1c8]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x51f6bf
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f6b5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcf5
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x51f718
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f70e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcf5
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51f756
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f74c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcf5
push edx
push ecx
call fcn.0067bc93
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x51f903
call fcn.005f8600
push 0
push 0x761dc7
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x138]
push 0
push 0x761dc7
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x21
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005f8830
add esp, 4
mov ecx, dword [eax]
push str.SetEmbeddedBrowserVersion
push str._s:_Could_not_get_System32_path
push 0x761dc7
push eax
call dword [ecx + 0x24]
mov byte [ebp - 4], 0x20
add esp, 0x10
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x51f86c
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f862
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcfa
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x51f8c5
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f8bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcfa
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51f903
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f8f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcfa
push edx
push ecx
call fcn.0067bc93
add esp, 8
push 0x854764
call fcn.0067f62b
add esp, 4
test eax, eax
jne 0x51fca7
cmp dword [ebp - 0x184], 0x10
lea eax, [ebp - 0x198]
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
mov ecx, 0x838cdc
push eax
call fcn.00430160
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51f97b
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f971
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcff
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
cmp edx, 0x10
jb 0x51f9d4
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f9ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcff
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x51fa12
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51fa08
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51fcff
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov dword [ebp - 4], 0x22
jmp 0x51e735
lea ecx, [ebp - 0x168]
call fcn.0042fce0
lea ecx, [ebp - 0x150]
call fcn.0042fce0
lea ecx, [ebp - 0x198]
call fcn.0042fce0
lea ecx, [ebp - 0x1f8]
call fcn.004e0b00
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0067ba01
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push eax
call fcn.0067f8f8
call fcn.00691015
call fcn.00691015
push eax
call fcn.0067f8f8
call fcn.00691015
call fcn.00691015
push eax
call fcn.0067f8f8
call fcn.00691015
push eax
call fcn.0067f8f8
push eax
call fcn.0067f8f8
call fcn.00691015
call fcn.00691015
push eax
call fcn.0067f8f8
call fcn.00691015
call fcn.00691015
call fcn.00691015
call fcn.00691015
call fcn.00691015
call fcn.00691015
call fcn.00691015
call fcn.00691015
call fcn.00691015
call fcn.0067c1ec
call fcn.00691015
call fcn.00691015
call fcn.00691015
int3