Function at 0x10145fd0
Capabilities:
Check os version
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x140
mov eax, dword [0x102519c8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x13c], ecx
call fcn.100db460
mov ecx, dword [ebp + 8]
dec ecx
mov dword [ebp - 0x140], eax
cmp ecx, 5
ja case.default.0x1014600d
jmp dword [ecx*4 + 0x10146378]
test edi, edi
je case.default.0x1014600d
test ebx, ebx
je case.default.0x1014600d
mov esi, dword [ebp - 0x13c]
push 0x20019
push 0x2c
mov dword [ebp - 0x14], 0
lea eax, [esi + 4]
mov dword [ebp - 0x10], 0
push eax
push 3
push str.Window_Placement
push str.SoftwareMicrosoftInternet_ExplorerMain
push SysReAllocString
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.10176900
add esp, 0x1c
lea eax, [ebp - 0x24]
push 0
push eax
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
lea eax, [esi + 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_CopyRect]
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
mov dword [edi], 0
cmp eax, 0x400
jne 0x101460be
mov ecx, 1
jmp 0x10146101
cmp eax, 0x500
jne 0x101460da
mov eax, dword [ebp - 8]
xor ecx, ecx
sub eax, dword [ebp - 0x10]
cmp eax, 0x320
setne cl
add ecx, 3
jmp 0x10146101
cmp eax, 0x556
jne 0x101460e8
mov ecx, 5
jmp 0x10146101
cmp eax, 0x5a0
jne 0x101460f6
mov ecx, 6
jmp 0x10146101
xor ecx, ecx
cmp eax, 0x320
sete cl
inc ecx
lea eax, [ebp - 0x24]
mov dword [ebx], ecx
push eax
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_EqualRect]
test eax, eax
je 0x10146134
mov dword [edi], 0
pop edi
pop esi
mov dword [ebx], 0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0x14
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x24]
jne 0x10146163
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp eax, dword [ebp - 0x20]
setne cl
lea ecx, [ecx*2 + 1]
mov dword [edi], ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0x14
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x1c]
jne case.default.0x1014600d
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp eax, dword [ebp - 0x20]
setne cl
lea ecx, [ecx*2 + 2]
mov dword [edi], ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0x14
test esi, esi
je case.default.0x1014600d
mov edi, dword [ebp + 0x18]
push 0x20019
lea eax, [edi + edi]
push eax
push esi
push 1
push str.Window_Title
push str.SoftwareMicrosoftInternet_ExplorerMain
push SysReAllocString
call fcn.10176900
add esp, 0x1c
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne case.default.0x1014600d
cmp dword [ebp - 0x140], 6
jne 0x101461fb
push str.Microsoft_Internet_Explorer
push edi
push esi
call fcn.10026b00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0x14
push str.Windows_Internet_Explorer
push edi
push esi
call fcn.10026b00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0x14
test esi, esi
je case.default.0x1014600d
call fcn.100db460
mov ecx, dword [ebp + 0x18]
mov edi, eax
lea edx, [ecx + ecx]
cmp edi, 9
jne 0x10146240
mov eax, str.SoftwareMicrosoftInternet_ExplorerMain
mov ecx, str.Default_Download_Directory
jmp 0x1014624a
mov eax, str.SoftwareMicrosoftInternet_Explorer
mov ecx, str.Download_Directory
push 0x20019
push edx
push esi
push 1
push ecx
push eax
push SysReAllocString
call fcn.10176900
add esp, 0x1c
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne case.default.0x1014600d
push esi
push 1
push eax
push eax
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp edi, 9
jne case.default.0x1014600d
push str...Downloads
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0x14
test esi, esi
je case.default.0x1014600d
push esi
push 0
push 0
push 0x20
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0x14
test esi, esi
je case.default.0x1014600d
push esi
push 0
push 0
push 6
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0x14
test edi, edi
je case.default.0x1014600d
push 0x20019
push 4
push edi
push 4
push str.MaxConnectionsPer1_0Server
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push SysReAllocString
call fcn.10176900
add esp, 0x1c
test eax, eax
jne case.default.0x1014600d
push 0x110
push eax
lea eax, [ebp - 0x134]
mov dword [edi], 2
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x138], 0x114
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x134], 5
jbe case.default.0x1014600d
mov dword [edi], 0xa
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0x14