Function at 0x5dd220
Capabilities:
Get common file path
Get file version info

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x637a48
mov eax, dword fs:[0]
push eax
sub esp, 0x280
mov eax, dword [0x6ce488]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x27c], edi
mov dword [ebp - 0x258], 0
push 0xa
push str.svcVersion
mov dword [ebp - 4], 0
mov dword [ebp - 0x278], edi
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 0xf
mov byte [ebp - 0x220], 0
call fcn.00417150
push 0x24
push str.SoftwareMicrosoftInternet_Explorer
lea ecx, [ebp - 0x208]
mov dword [ebp - 4], 1
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1f4], 0xf
mov byte [ebp - 0x208], 0
call fcn.00417150
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x208]
push eax
push reloc.WS2_32.dll_bind
push edi
call fcn.005dc410
add esp, 0x10
mov edx, dword [ebp - 0x1f4]
mov dword [ebp - 0x258], 1
mov byte [ebp - 4], 1
cmp edx, 0x10
jb 0x5dd336
mov ecx, dword [ebp - 0x208]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5dd32c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf5f
push edx
push ecx
call fcn.005c385c
add esp, 8
mov edx, dword [ebp - 0x20c]
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1f4], 0xf
mov byte [ebp - 0x208], 0
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x5dd38f
mov ecx, dword [ebp - 0x220]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5dd385
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf64
push edx
push ecx
call fcn.005c385c
add esp, 8
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 0xf
mov byte [ebp - 0x220], 0
test eax, eax
jne 0x5ddf42
push 0x105
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.005feb40
add esp, 0xc
lea eax, [ebp - 0x118]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1c4], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x1d8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5dd400
sub ecx, edx
lea eax, [ebp - 0x118]
push ecx
push eax
lea ecx, [ebp - 0x1d8]
call fcn.00417150
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 4], 3
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 0xf
lea ecx, [eax - 1]
mov byte [ebp - 0x1a8], 0
cmp eax, ecx
jb 0x5ddf69
cmp dword [ebp - 0x1c4], 0x10
lea eax, [ebp - 0x1d8]
push 1
cmovae eax, dword [ebp - 0x1d8]
add eax, ecx
lea ecx, [ebp - 0x1a8]
push eax
call fcn.00417150
mov edx, dword [ebp - 0x194]
lea eax, [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1a8]
cmp edx, 0x10
mov esi, 3
cmovae eax, ecx
mov dword [ebp - 0x264], esi
cmp dword [ebp - 0x198], 1
mov dword [ebp - 0x258], esi
jne 0x5dd4c0
movzx eax, byte [eax]
cmp al, 0x5c
jne 0x5dd4b0
xor eax, eax
jmp 0x5dd4b5
sbb eax, eax
or eax, 1
mov byte [ebp - 0x251], 0
test eax, eax
je 0x5dd4c7
mov byte [ebp - 0x251], 1
cmp edx, 0x10
jb 0x5dd4f5
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5dd4eb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf6e
push edx
push ecx
call fcn.005c385c
add esp, 8
cmp byte [ebp - 0x251], 0
je 0x5dd510
push 1
push 0x6a03a4
lea ecx, [ebp - 0x1d8]
call fcn.00417520
push 0xa
push 0x691f74
lea ecx, [ebp - 0x1d8]
call fcn.00417520
cmp dword [ebp - 0x1c4], 0x10
lea eax, [ebp - 0x1d8]
cmovae eax, dword [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x1c0]
push eax
call fcn.005d9b00
add esp, 8
cmp dword [ebp - 0x1b0], 0
mov byte [ebp - 4], 4
jne 0x5dd64c
push 0x105
lea eax, [ebp - 0x118]
push 0
push eax
call fcn.005feb40
add esp, 0xc
cmp dword [0x6d86d8], 0
jne 0x5dd607
lea eax, [ebp - 0x260]
mov dword [ebp - 0x260], 0
push eax
push str.mshtml.dll
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov edi, eax
test edi, edi
je 0x5dd607
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
test esi, esi
je 0x5dd607
push esi
push edi
push dword [ebp - 0x260]
push str.mshtml.dll
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x5dd600
lea eax, [ebp - 0x268]
mov dword [ebp - 0x268], 0
push eax
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x25c], 0
push eax
push 0x6a2f8c
push esi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x5dd600
mov eax, dword [ebp - 0x25c]
movzx eax, word [eax + 0xa]
mov dword [0x6d86d8], eax
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [0x6d86d8]
lea eax, [ebp - 0x118]
push 0x6468c4
push eax
call fcn.005dc5d0
lea ecx, [ebp - 0x118]
add esp, 0xc
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5dd630
sub ecx, edx
lea eax, [ebp - 0x118]
push ecx
push eax
lea ecx, [ebp - 0x1c0]
call fcn.00417150
push fcn.00417a20
push 0x417a70
push 4
push 0x18
lea eax, [ebp - 0x178]
push eax
call fcn.005c3e3c
xor edx, edx
mov byte [ebp - 4], 5
xor eax, eax
mov dword [ebp - 0x25c], edx
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x178]
mov dword [ebp - 0x268], eax
nop word [eax + eax]
cmp dword [ebp - 0x1ac], 0x10
lea ecx, [ebp - 0x1c0]
mov edi, dword [ebp - 0x1b0]
cmovae ecx, dword [ebp - 0x1c0]
mov dword [ebp - 0x270], ecx
cmp edi, 1
jb 0x5dd719
lea eax, [edi - 1]
cmp edx, eax
ja 0x5dd719
lea eax, [edi + ecx]
add ecx, edx
mov dword [ebp - 0x26c], eax
sub eax, ecx
push eax
push 0x2e
push ecx
call fcn.005ff1a0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x5dd713
nop dword [eax + eax]
movzx eax, byte [esi]
cmp al, 0x2e
jne 0x5dd6eb
xor eax, eax
jmp 0x5dd6f0
sbb eax, eax
or eax, 1
test eax, eax
je 0x5dd7ee
mov eax, dword [ebp - 0x26c]
inc esi
sub eax, esi
push eax
push 0x2e
push esi
call fcn.005ff1a0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x5dd6e0
mov edx, dword [ebp - 0x25c]
or esi, 0xffffffff
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0xf
mov byte [ebp - 0x190], 0
cmp esi, 0xffffffff
je 0x5dd86c
cmp edi, edx
jb 0x5ddf69
sub edi, edx
lea eax, [ebp - 0x1c0]
mov ecx, esi
sub ecx, edx
cmp edi, ecx
cmovb ecx, edi
cmp dword [ebp - 0x1ac], 0x10
push ecx
cmovae eax, dword [ebp - 0x1c0]
lea ecx, [ebp - 0x190]
add eax, edx
push eax
call fcn.00417150
mov eax, dword [ebp - 0x264]
mov edi, dword [ebp - 0x268]
or eax, 8
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x190]
cmp edi, eax
je 0x5dd7ff
mov ecx, dword [edi + 0x14]
cmp ecx, 0x10
jb 0x5dd7ce
mov eax, dword [edi]
inc ecx
cmp ecx, 0x1000
jb 0x5dd7c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf5f
mov eax, edx
push ecx
push eax
call fcn.005c385c
add esp, 8
movups xmm0, xmmword [ebp - 0x190]
mov dword [edi + 0x10], 0
movups xmmword [edi], xmm0
movq xmm0, qword [ebp - 0x180]
movq qword [edi + 0x10], xmm0
jmp 0x5dd839
sub esi, dword [ebp - 0x270]
mov edx, dword [ebp - 0x25c]
jmp 0x5dd71c
mov edx, dword [ebp - 0x17c]
cmp edx, 0x10
jb 0x5dd839
mov ecx, dword [ebp - 0x190]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5dd82f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf5f
push edx
push ecx
call fcn.005c385c
add esp, 8
lea edx, [esi + 1]
add edi, 0x18
mov esi, dword [ebp - 0x260]
inc esi
mov dword [ebp - 0x25c], edx
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x268], edi
cmp esi, 4
jl 0x5dd690
mov esi, dword [ebp - 0x264]
jmp 0x5dd944
cmp edi, edx
jb 0x5ddf73
sub edi, edx
lea eax, [ebp - 0x1c0]
cmp dword [ebp - 0x1ac], 0x10
lea ecx, [ebp - 0x190]
push edi
cmovae eax, dword [ebp - 0x1c0]
add eax, edx
push eax
call fcn.00417150
mov eax, dword [ebp - 0x260]
lea edi, [ebp - 0x178]
mov esi, dword [ebp - 0x264]
or esi, 4
lea eax, [eax + eax*2]
lea edi, [edi + eax*8]
lea eax, [ebp - 0x190]
cmp edi, eax
je 0x5dd90a
mov ecx, dword [edi + 0x14]
cmp ecx, 0x10
jb 0x5dd8f1
mov eax, dword [edi]
inc ecx
cmp ecx, 0x1000
jb 0x5dd8e7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf5f
mov eax, edx
push ecx
push eax
call fcn.005c385c
add esp, 8
movups xmm0, xmmword [ebp - 0x190]
movups xmmword [edi], xmm0
movq xmm0, qword [ebp - 0x180]
movq qword [edi + 0x10], xmm0
jmp 0x5dd944
mov edx, dword [ebp - 0x17c]
cmp edx, 0x10
jb 0x5dd944
mov ecx, dword [ebp - 0x190]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5dd93a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf78
push edx
push ecx
call fcn.005c385c
add esp, 8
mov edi, esi
mov eax, dword [ebp - 0x168]
lea ecx, [ebp - 0x1a8]
inc eax
mov byte [ebp - 4], 6
or esi, 0x10
mov dword [ebp - 0x198], 0
push eax
mov dword [ebp - 0x194], 0xf
mov byte [ebp - 0x1a8], 0
mov dword [ebp - 0x258], esi
call fcn.00478140
cmp dword [ebp - 0x164], 0x10
lea eax, [ebp - 0x178]
push dword [ebp - 0x168]
cmovae eax, dword [ebp - 0x178]
lea ecx, [ebp - 0x1a8]
push eax
call fcn.00417520
push 1
push 0x6ac664
lea ecx, [ebp - 0x1a8]
call fcn.00417520
cmp dword [ebp - 0x11c], 0x10
lea eax, [ebp - 0x130]
push dword [ebp - 0x120]
cmovae eax, dword [ebp - 0x130]
lea ecx, [ebp - 0x1a8]
push eax
call fcn.00417520
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x190], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x180], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, edi
or eax, 0x30
mov dword [ebp - 0x258], eax
push 1
push 0x6ac664
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 7
call fcn.00417520
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1dc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1f0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1e0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, edi
or eax, 0x70
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x134], 0x10
lea eax, [ebp - 0x148]
push dword [ebp - 0x138]
cmovae eax, dword [ebp - 0x148]
lea ecx, [ebp - 0x1f0]
push eax
mov byte [ebp - 4], 8
call fcn.00417520
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x250], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x240], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, edi
or eax, 0xf0
mov dword [ebp - 0x258], eax
push 1
push 0x6ac664
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 9
call fcn.00417520
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x238], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x228], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, edi
or eax, 0x1f0
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x14c], 0x10
lea eax, [ebp - 0x160]
push dword [ebp - 0x150]
cmovae eax, dword [ebp - 0x160]
lea ecx, [ebp - 0x238]
push eax
mov byte [ebp - 4], 0xa
call fcn.00417520
or edi, 0x3f0
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x1ac]
movq qword [ebp - 0x274], xmm1
movups xmmword [ebp - 0x28c], xmm0
cmp edx, 0x10
jb 0x5ddbf6
mov ecx, dword [ebp - 0x1c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5ddbdd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf7d
push edx
push ecx
call fcn.005c385c
movups xmm0, xmmword [ebp - 0x28c]
add esp, 8
movq xmm1, qword [ebp - 0x274]
mov edx, dword [ebp - 0x224]
movq qword [ebp - 0x1b0], xmm1
mov byte [ebp - 4], 9
movups xmmword [ebp - 0x1c0], xmm0
cmp edx, 0x10
jb 0x5ddc43
mov ecx, dword [ebp - 0x238]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5ddc39
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf82
push edx
push ecx
call fcn.005c385c
add esp, 8
mov edx, dword [ebp - 0x23c]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0xf
mov byte [ebp - 0x238], 0
mov byte [ebp - 4], 8
cmp edx, 0x10
jb 0x5ddc9c
mov ecx, dword [ebp - 0x250]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5ddc92
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf87
push edx
push ecx
call fcn.005c385c
add esp, 8
mov edx, dword [ebp - 0x1dc]
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0xf
mov byte [ebp - 0x250], 0
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x5ddcf5
mov ecx, dword [ebp - 0x1f0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5ddceb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf8c
push edx
push ecx
call fcn.005c385c
add esp, 8
mov edx, dword [ebp - 0x17c]
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1dc], 0xf
mov byte [ebp - 0x1f0], 0
mov byte [ebp - 4], 6
cmp edx, 0x10
jb 0x5ddd4e
mov ecx, dword [ebp - 0x190]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5ddd44
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf91
push edx
push ecx
call fcn.005c385c
add esp, 8
mov edx, dword [ebp - 0x194]
and edi, 0xffffffef
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0xf
mov byte [ebp - 0x190], 0
mov dword [ebp - 0x258], edi
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x5dddb0
mov ecx, dword [ebp - 0x1a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5ddda6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf96
push edx
push ecx
call fcn.005c385c
add esp, 8
push fcn.00417a20
push 4
push 0x18
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 4
push eax
call fcn.005c38a3
mov edx, dword [ebp - 0x1ac]
mov byte [ebp - 4], 3
cmp edx, 0x10
jb 0x5dde07
mov ecx, dword [ebp - 0x1c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5dddfd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddf9b
push edx
push ecx
call fcn.005c385c
add esp, 8
mov edx, dword [ebp - 0x1c4]
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], 0
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x5dde60
mov ecx, dword [ebp - 0x1d8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5dde56
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5ddfa0
push edx
push ecx
call fcn.005c385c
add esp, 8
mov edi, dword [ebp - 0x278]
mov eax, dword [edi + 0x10]
test eax, eax
jne 0x5ddf42
push 7
push 0x641d5c
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], 0xf
mov byte [ebp - 0x190], al
call fcn.00417150
push 0x24
push str.SoftwareMicrosoftInternet_Explorer
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 0xf
mov byte [ebp - 0x1a8], 0
call fcn.00417150
lea eax, [ebp - 0x190]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x1f0]
push reloc.WS2_32.dll_bind
push eax
call fcn.005dc410
mov esi, eax
add esp, 0x10
cmp edi, esi
je 0x5ddf21
mov ecx, edi
call fcn.00417a20
movups xmm0, xmmword [esi]
movups xmmword [edi], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x1f0]
call fcn.00417a20
lea ecx, [ebp - 0x1a8]
call fcn.00417a20
lea ecx, [ebp - 0x190]
call fcn.00417a20
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c358e
mov esp, ebp
pop ebp
ret
call fcn.00606fc9
call fcn.00606fc9
call fcn.00416590
call fcn.00606fc9
call fcn.00416590
call fcn.00606fc9
call fcn.00606fc9
call fcn.00606fc9
call fcn.00606fc9
call fcn.00606fc9
call fcn.00606fc9
call fcn.00606fc9
call fcn.00606fc9
call fcn.00606fc9
int3