Function at 0x51ebc0
Capabilities:
Get common file path
Identify system language via api

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6ecc31
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x208
mov eax, dword [0x82f084]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x1c1], dl
mov esi, ecx
mov dword [ebp - 0x1b8], 0
push 0x856390
mov dword [ebp - 0x1f8], 0x856390
call fcn.00681256
add esp, 4
test eax, eax
jne 0x5214ac
cmp byte [ebp - 0x1c1], 0
mov edi, 0x83abbc
mov dword [ebp - 4], eax
mov eax, 0x83ab14
cmove edi, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x21c]
mov eax, dword [edi + 0x10]
add eax, 4
mov dword [ebp - 0x20c], 0
push eax
mov dword [ebp - 0x208], 0xf
mov byte [ebp - 0x21c], 0
mov dword [ebp - 0x1b8], 0x10
call fcn.004585b0
push 4
push str.CEF:
lea ecx, [ebp - 0x21c]
call fcn.00441730
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x51eca4
mov eax, dword [edi]
push dword [edi + 0x10]
lea ecx, [ebp - 0x21c]
push eax
call fcn.00441730
push 1
push 0x77e54c
lea ecx, [ebp - 0x21c]
call fcn.00441730
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1b8], 0x30
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1dc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1cc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1dc]
cmp dword [0x83ab58], 0x10
mov eax, 0x83ab44
push dword [0x83ab54]
cmovae eax, dword [0x83ab44]
push eax
call fcn.00441730
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x198], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x188], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x51ed9a
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ed90
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214b2
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x208]
cmp edx, 0x10
jb 0x51edf3
mov ecx, dword [ebp - 0x21c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ede9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214b2
push edx
push ecx
call fcn.0067d8e3
add esp, 8
cmp byte [ebx + 8], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0xf
mov byte [ebp - 0x21c], 0
je 0x51f542
cmp byte [0x83aab0], 0
jne 0x51ee2e
cmp dword [0x83acec], 0
jne 0x51f172
push 0
push 0x762e6f
lea ecx, [ebp - 0x180]
mov byte [0x83aab0], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
call fcn.00430160
xor eax, eax
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 7
mov word [ebp - 0x150], ax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1f4]
push 0xa
push str.svcVersion
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], 7
mov word [ebp - 0x1f4], ax
call fcn.0042fe00
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x138]
push 0x24
xor eax, eax
mov dword [ebp - 0x1b8], 0x61
push str.SOFTWAREMicrosoftInternet_Explorer
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
call fcn.0042fe00
lea eax, [ebp - 0x150]
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x138]
call fcn.005256a0
add esp, 4
test eax, eax
jne 0x51ef17
mov byte [ebp - 0x1c1], 1
cmp dword [ebp - 0x140], eax
jne 0x51ef1e
mov byte [ebp - 0x1c1], 0
lea ecx, [ebp - 0x138]
call fcn.0042fd70
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 4], 7
call fcn.0042fd70
cmp byte [ebp - 0x1c1], 0
jne 0x51f00f
push 7
xor eax, eax
mov dword [ebp - 0x1e4], 0
push str.Version
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e0], 7
mov word [ebp - 0x1f4], ax
call fcn.0042fe00
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x138]
push 0x24
xor eax, eax
mov dword [ebp - 0x1b8], 0x64
push str.SOFTWAREMicrosoftInternet_Explorer
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
call fcn.0042fe00
lea eax, [ebp - 0x150]
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x138]
call fcn.005256a0
add esp, 4
test eax, eax
jne 0x51efe2
mov byte [ebp - 0x1c1], 1
cmp dword [ebp - 0x140], eax
jne 0x51efe9
mov byte [ebp - 0x1c1], 0
lea ecx, [ebp - 0x138]
call fcn.0042fd70
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 4], 7
call fcn.0042fd70
cmp byte [ebp - 0x1c1], 0
je 0x51f02e
cmp dword [ebp - 0x13c], 8
lea ecx, [ebp - 0x150]
lea edx, [ebp - 0x180]
cmovae ecx, dword [ebp - 0x150]
call fcn.0050cea0
mov esi, dword [ebp - 0x170]
mov ecx, 0x83acdc
test esi, esi
je 0x51f085
cmp dword [0x83acf0], 0x10
mov eax, ecx
push 3
cmovae eax, dword [0x83acdc]
mov dword [0x83acec], 0
push 0x782c80
mov byte [eax], 0
call fcn.00441730
cmp dword [ebp - 0x16c], 0x10
lea ecx, [ebp - 0x180]
push esi
cmovae ecx, dword [ebp - 0x180]
push ecx
mov ecx, eax
call fcn.00441730
jmp 0x51f091
push 0xa
push str.IE_8.0.0.0
call fcn.00430160
mov edx, 0x20
mov dword [ebp - 0x158], 0
cmp dword [0x83acec], edx
lea ecx, [ebp - 0x168]
mov eax, 0x83acdc
mov dword [ebp - 0x154], 0xf
cmovb edx, dword [0x83acec]
cmp dword [0x83acf0], 0x10
push edx
cmovae eax, dword [0x83acdc]
push eax
mov byte [ebp - 0x168], 0
call fcn.00430160
lea eax, [ebp - 0x168]
mov ecx, 0x83acdc
push eax
call fcn.00444e20
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51f129
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f11f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214b7
push edx
push ecx
call fcn.0067d8e3
add esp, 8
lea ecx, [ebp - 0x150]
call fcn.0042fd70
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x16c]
cmp edx, 0x10
jb 0x51f172
mov ecx, dword [ebp - 0x180]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f168
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214b7
push edx
push ecx
call fcn.0067d8e3
add esp, 8
push 0x856764
call fcn.00681256
add esp, 4
test eax, eax
jne 0x5214bc
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
call fcn.00430160
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x150]
push 0
push 0x762e6f
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00430160
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x180]
push 6
push str.OSUtil
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
call fcn.00430160
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0xc
push eax
lea edx, [ebp - 0x150]
lea ecx, [ebp - 0x180]
call fcn.005fa030
add esp, 4
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x16c]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x51f281
mov ecx, dword [ebp - 0x180]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f277
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214c2
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
cmp edx, 0x10
jb 0x51f2da
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f2d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214c2
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51f318
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f30e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214c2
push edx
push ecx
call fcn.0067d8e3
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x51f4cf
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
call fcn.00430160
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x150]
push 0
push 0x762e6f
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00430160
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x180]
push 6
push str.OSUtil
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
call fcn.00430160
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0xf
push eax
lea edx, [ebp - 0x150]
lea ecx, [ebp - 0x180]
call fcn.005fa030
add esp, 4
mov edx, 0x83acdc
cmp dword [0x83acf0], 0x10
cmovae edx, dword [0x83acdc]
mov ecx, dword [eax]
push edx
push str.SetEmbeddedBrowserVersion:_EmbeddedBrowserVersion:__s
push eax
call dword [ecx + 0x14]
mov byte [ebp - 4], 0xe
add esp, 0xc
mov edx, dword [ebp - 0x16c]
cmp edx, 0x10
jb 0x51f438
mov ecx, dword [ebp - 0x180]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f42e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214c7
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
cmp edx, 0x10
jb 0x51f491
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f487
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214c7
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51f4cf
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f4c5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214c7
push edx
push ecx
call fcn.0067d8e3
add esp, 8
push 0x856764
call fcn.0068127b
add esp, 4
test eax, eax
jne 0x5214cc
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x51f521
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f517
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214d2
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov dword [ebp - 4], 0x10
push 0x856390
call fcn.0068127b
add esp, 4
test eax, eax
jne 0x5214d7
jmp 0x520dd9
cmp dword [esi + 0x10], 0
je 0x521473
cmp byte [0x83aab0], 0
je 0x51f921
cmp dword [0x83acec], 0
je 0x51f921
push 0x856764
call fcn.00681256
add esp, 4
test eax, eax
jne 0x5214dd
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1f4]
push 0
push 0x762e6f
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x150]
push 6
push str.OSUtil
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00430160
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x13
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x150]
call fcn.005fa030
add esp, 4
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x13c]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x51f675
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f66b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214e3
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x1e0]
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
cmp edx, 0x10
jb 0x51f6ce
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f6c4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214e3
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x124]
cmp edx, 0x10
jb 0x51f70c
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f702
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214e3
push edx
push ecx
call fcn.0067d8e3
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x51f8c3
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x138]
push 0
push 0x762e6f
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x150]
push 6
push str.OSUtil
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x16
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x150]
call fcn.005fa030
add esp, 4
mov edx, 0x83acdc
cmp dword [0x83acf0], 0x10
cmovae edx, dword [0x83acdc]
mov ecx, dword [eax]
push edx
push str.SetEmbeddedBrowserVersion:_Already_fetched_EmbeddedBrowserVersion:__s
push eax
call dword [ecx + 0x14]
mov byte [ebp - 4], 0x15
add esp, 0xc
mov edx, dword [ebp - 0x13c]
cmp edx, 0x10
jb 0x51f82c
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f822
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214e8
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
cmp edx, 0x10
jb 0x51f885
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f87b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214e8
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51f8c3
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f8b9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214e8
push edx
push ecx
call fcn.0067d8e3
add esp, 8
push 0x856764
call fcn.0068127b
add esp, 4
test eax, eax
jne 0x5214ed
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x51f915
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51f90b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214fd
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov dword [ebp - 4], 0x17
jmp 0x51f528
push 0
push 0x762e6f
lea ecx, [ebp - 0x150]
mov byte [0x83aab0], 1
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
call fcn.00430160
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x168]
push 0
push 0x762e6f
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
call fcn.00430160
movups xmm0, xmmword [0x7831f8]
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x1b8], 0
push eax
push 0
push 0
lea eax, [ebp - 0x1b4]
mov byte [ebp - 4], 0x1a
push eax
movups xmmword [ebp - 0x1b4], xmm0
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x520de0
mov edx, dword [ebp - 0x1b8]
test edx, edx
je 0x520de0
mov ecx, edx
mov dword [ebp - 0x128], 0
xor eax, eax
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
lea eax, [ecx + 2]
mov dword [ebp - 0x1c0], eax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x51fa00
sub ecx, dword [ebp - 0x1c0]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x138]
call fcn.0042fe00
lea edx, [ebp - 0x168]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x138]
call fcn.0050d290
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x1a
call fcn.0042fd70
push 1
push 0x781a34
lea ecx, [ebp - 0x168]
call fcn.00441730
push 0xb
push str.version.dll
lea ecx, [ebp - 0x168]
call fcn.00441730
push dword [ebp - 0x1b8]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
mov dword [ebp - 4], 0x19
push eax
push 0x75c10c
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 7
mov word [ebp - 0x180], ax
call fcn.0042fe00
lea edx, [ebp - 0x180]
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x168]
call fcn.0050d1a0
cmp dword [ebp - 0x16c], 8
lea eax, [ebp - 0x180]
cmovae eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryW]
mov dword [ebp - 0x200], eax
test eax, eax
jne 0x51ff7f
push 0x856764
call fcn.00681256
add esp, 4
test eax, eax
jne 0x5214d7
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x138]
push 0
push 0x762e6f
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x2d
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005fa030
add esp, 4
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x1c8]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x51fc00
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51fbf6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214f3
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x51fc59
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51fc4f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214f3
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51fc97
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51fc8d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214f3
push edx
push ecx
call fcn.0067d8e3
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x51fe44
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x138]
push 0
push 0x762e6f
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x30
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005fa030
add esp, 4
mov ecx, dword [eax]
push str.SetEmbeddedBrowserVersion
push str._s:_Could_not_load_Version.dll
push 0x762e6f
push eax
call dword [ecx + 0x24]
mov byte [ebp - 4], 0x2f
add esp, 0x10
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x51fdad
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51fda3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214f8
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x51fe06
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51fdfc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214f8
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x51fe44
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51fe3a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214f8
push edx
push ecx
call fcn.0067d8e3
add esp, 8
push 0x856764
call fcn.0068127b
add esp, 4
test eax, eax
jne 0x5214d7
cmp dword [ebp - 0x184], 0x10
lea eax, [ebp - 0x198]
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
mov ecx, 0x83acdc
push eax
call fcn.00430160
lea ecx, [ebp - 0x180]
call fcn.0042fd70
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x51fec7
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51febd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214fd
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
cmp edx, 0x10
jb 0x51ff20
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ff16
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214fd
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x51ff5e
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x51ff54
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5214fd
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov dword [ebp - 4], 0x31
push 0x856390
call fcn.0068127b
add esp, 4
test eax, eax
je 0x521489
jmp 0x5214d7
cmp dword [esi + 0x14], 0x10
mov dword [ebp - 0x19c], 0
jb 0x51ff91
mov esi, dword [esi]
push str.GetFileVersionInfoSizeA
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea ecx, [ebp - 0x19c]
push ecx
push esi
call eax
mov dword [ebp - 0x1bc], eax
test eax, eax
jne 0x520437
push 0x856764
call fcn.00681256
add esp, 4
test eax, eax
jne 0x5214d7
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x138]
push 0
push 0x762e6f
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x34
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005fa030
add esp, 4
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x1c8]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x5200c4
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5200ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521502
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x52011d
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x520113
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521502
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x52015b
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x520151
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521502
push edx
push ecx
call fcn.0067d8e3
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x520311
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x138]
push 0
push 0x762e6f
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x37
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005fa030
mov esi, eax
add esp, 4
mov edi, dword [esi]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.SetEmbeddedBrowserVersion
push str._s:_GetFileVersionInfoSizeA_failed_with_error_code__lu
push 0x762e6f
push esi
call dword [edi + 0x24]
mov byte [ebp - 4], 0x36
add esp, 0x14
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x52027a
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x520270
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521507
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x5202d3
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5202c9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521507
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x520311
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x520307
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521507
push edx
push ecx
call fcn.0067d8e3
add esp, 8
push 0x856764
call fcn.0068127b
add esp, 4
test eax, eax
jne 0x5214d7
cmp dword [ebp - 0x184], 0x10
lea eax, [ebp - 0x198]
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
mov ecx, 0x83acdc
push eax
call fcn.00430160
lea ecx, [ebp - 0x180]
call fcn.0042fd70
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x520394
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x52038a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52150c
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
cmp edx, 0x10
jb 0x5203ed
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5203e3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52150c
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x52042b
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x520421
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52150c
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov dword [ebp - 4], 0x38
jmp 0x51ff65
push eax
call fcn.0067db09
add esp, 4
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1c0], 0
push str.GetFileVersionInfoA
push dword [ebp - 0x200]
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
test eax, eax
je 0x520be9
push dword [ebp - 0x1fc]
push dword [ebp - 0x1bc]
push dword [ebp - 0x19c]
push esi
call eax
test eax, eax
jne 0x520912
push 0x856764
call fcn.00681256
add esp, 4
test eax, eax
jne 0x5214d7
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x138]
push 0
push 0x762e6f
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x3b
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005fa030
add esp, 4
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x1c8]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x52059f
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x520595
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521511
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x5205f8
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5205ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521511
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x520636
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x52062c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521511
push edx
push ecx
call fcn.0067d8e3
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x5207ec
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x138]
push 0
push 0x762e6f
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x3e
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005fa030
mov esi, eax
add esp, 4
mov edi, dword [esi]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.SetEmbeddedBrowserVersion
push str._s:_GetFileVersionInfoA_failed_with_error_code__lu
push 0x762e6f
push esi
call dword [edi + 0x24]
mov byte [ebp - 4], 0x3d
add esp, 0x14
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x520755
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x52074b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521516
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x5207ae
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5207a4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521516
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x5207ec
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5207e2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521516
push edx
push ecx
call fcn.0067d8e3
add esp, 8
push 0x856764
call fcn.0068127b
add esp, 4
test eax, eax
jne 0x5214d7
cmp dword [ebp - 0x184], 0x10
lea eax, [ebp - 0x198]
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
mov ecx, 0x83acdc
push eax
call fcn.00430160
lea ecx, [ebp - 0x180]
call fcn.0042fd70
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x52086f
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x520865
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52151b
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
cmp edx, 0x10
jb 0x5208c8
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5208be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52151b
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x520906
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5208fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52151b
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov dword [ebp - 4], 0x3f
jmp 0x51ff65
push 0x782dd4
push 0x857310
call fcn.004a5740
add esp, 8
mov dword [ebp - 0x1bc], 0
push str.VerQueryValueA
push dword [ebp - 0x200]
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov esi, dword [ebp - 0x1fc]
lea ecx, [ebp - 0x1a4]
push ecx
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x204], eax
push ecx
push 0x857310
push esi
call eax
test eax, eax
je 0x5209a4
cmp dword [ebp - 0x1a4], 4
jne 0x5209a4
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [eax]
mov eax, ecx
shr eax, 0x10
movzx eax, al
push eax
mov eax, ecx
shr eax, 0x18
push eax
movzx eax, cl
push eax
shr ecx, 8
movzx eax, cl
push eax
push str.StringFileInfo_02X_02X_02X_02XProductVersion
push 0x857310
call fcn.004a5740
add esp, 0x18
jmp 0x5209c0
call dword [sym.imp.KERNEL32.DLL_GetUserDefaultLangID]
movzx eax, ax
push eax
push str.StringFileInfo_04X04B0ProductVersion
push 0x857310
call fcn.004a5740
add esp, 0xc
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0x857310
push esi
call dword [ebp - 0x204]
test eax, eax
jne 0x520b7e
push 0x856764
call fcn.00681256
add esp, 4
test eax, eax
jne 0x5214d7
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x138]
push 0x762e6f
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430130
push str.OSUtil
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x41
call fcn.0042fd30
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x42
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005fa030
add esp, 4
lea ecx, [ebp - 0x1dc]
mov esi, eax
call fcn.0042fce0
lea ecx, [ebp - 0x138]
call fcn.0042fce0
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
test esi, esi
je 0x520b53
call fcn.005f9e00
push 0x762e6f
lea ecx, [ebp - 0x1dc]
call fcn.0042fd30
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x43
call fcn.0042fd30
push str.OSUtil
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x44
call fcn.0042fd30
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x45
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x138]
call fcn.005fa030
add esp, 4
mov ecx, dword [eax]
push str.SetEmbeddedBrowserVersion
push str._s:_VerQueryValueA_failed
push 0x762e6f
push eax
call dword [ecx + 0x24]
add esp, 0x10
lea ecx, [ebp - 0x138]
call fcn.0042fce0
lea ecx, [ebp - 0x1f4]
call fcn.0042fce0
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
mov ecx, 0x856764
call fcn.004bbbe0
lea eax, [ebp - 0x198]
mov ecx, 0x83acdc
push eax
call fcn.00452310
lea ecx, [ebp - 0x180]
call fcn.0042fd70
jmp 0x52145d
mov esi, dword [ebp - 0x1a0]
test esi, esi
je 0x520be9
push esi
push dword [ebp - 0x1c0]
lea eax, [ebp - 0x120]
push eax
call fcn.0068f950
add esp, 0xc
cmp esi, 0x100
jae 0x521520
lea eax, [ebp - 0x120]
mov byte [ebp + esi - 0x120], 0
push eax
lea ecx, [ebp - 0x138]
call fcn.0042fd30
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x150]
call fcn.00452310
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
push dword [ebp - 0x1fc]
call fcn.0067d914
add esp, 4
push dword [ebp - 0x200]
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
push edi
lea eax, [ebp - 0x1f4]
push str.CEF:
push eax
call fcn.00458470
add esp, 0xc
push 0x77e54c
push eax
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x47
push eax
call fcn.00458530
add esp, 0xc
mov ecx, 0x83acdc
push eax
call fcn.00444e20
lea ecx, [ebp - 0x138]
call fcn.0042fce0
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
lea eax, [ebp - 0x150]
mov ecx, 0x83acdc
push eax
call fcn.00440ea0
mov ecx, 0x856764
call fcn.004bbbc0
call fcn.005f9e00
push 0x762e6f
lea ecx, [ebp - 0x1dc]
call fcn.0042fd30
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x48
call fcn.0042fd30
push str.OSUtil
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x49
call fcn.0042fd30
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x4a
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x138]
call fcn.005fa030
add esp, 4
lea ecx, [ebp - 0x138]
mov esi, eax
call fcn.0042fce0
lea ecx, [ebp - 0x1f4]
call fcn.0042fce0
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
test esi, esi
je 0x520d98
call fcn.005f9e00
push 0x762e6f
lea ecx, [ebp - 0x1dc]
call fcn.0042fd30
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x4b
call fcn.0042fd30
push str.OSUtil
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x4c
call fcn.0042fd30
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x4d
push eax
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x138]
call fcn.005fa030
mov esi, eax
add esp, 4
mov ecx, 0x83acdc
mov edi, dword [esi]
call fcn.00440e60
push eax
push str.SetEmbeddedBrowserVersion:_EmbeddedBrowserVersion:__s
push esi
call dword [edi + 0x14]
add esp, 0xc
lea ecx, [ebp - 0x138]
call fcn.0042fce0
lea ecx, [ebp - 0x1f4]
call fcn.0042fce0
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2a
call fcn.0042fce0
mov ecx, 0x856764
call fcn.004bbbe0
lea ecx, [ebp - 0x180]
call fcn.0042fd70
lea ecx, [ebp - 0x168]
call fcn.0042fce0
lea ecx, [ebp - 0x150]
call fcn.0042fce0
lea ecx, [ebp - 0x198]
call fcn.0042fce0
lea ecx, [ebp - 0x1f8]
call fcn.004e2330
xor eax, eax
jmp 0x52148e
push 0x856764
call fcn.00681256
add esp, 4
test eax, eax
jne 0x5214d7
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x138]
push 0
push 0x762e6f
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x1e
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005fa030
add esp, 4
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x1c8]
test eax, eax
setne byte [ebp - 0x1c1]
cmp edx, 0x10
jb 0x520eef
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x520ee5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521525
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x520f48
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x520f3e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521525
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x520f86
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x520f7c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x521525
push edx
push ecx
call fcn.0067d8e3
add esp, 8
cmp byte [ebp - 0x1c1], 0
je 0x521133
call fcn.005f9e00
push 0
push 0x762e6f
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.00430160
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x138]
push 0
push 0x762e6f
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
call fcn.00430160
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1dc]
push 6
push str.OSUtil
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.00430160
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x21
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1dc]
call fcn.005fa030
add esp, 4
mov ecx, dword [eax]
push str.SetEmbeddedBrowserVersion
push str._s:_Could_not_get_System32_path
push 0x762e6f
push eax
call dword [ecx + 0x24]
mov byte [ebp - 4], 0x20
add esp, 0x10
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x52109c
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x521092
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52152a
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp edx, 0x10
jb 0x5210f5
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5210eb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52152a
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x521133
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x521129
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52152a
push edx
push ecx
call fcn.0067d8e3
add esp, 8
push 0x856764
call fcn.0068127b
add esp, 4
test eax, eax
jne 0x5214d7
cmp dword [ebp - 0x184], 0x10
lea eax, [ebp - 0x198]
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
mov ecx, 0x83acdc
push eax
call fcn.00430160
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x5211ab
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5211a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52152f
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
cmp edx, 0x10
jb 0x521204
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5211fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52152f
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x184]
cmp edx, 0x10
jb 0x521242
mov ecx, dword [ebp - 0x198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x521238
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52152f
push edx
push ecx
call fcn.0067d8e3
add esp, 8
mov dword [ebp - 4], 0x22
jmp 0x51ff65
lea ecx, [ebp - 0x168]
call fcn.0042fce0
lea ecx, [ebp - 0x150]
call fcn.0042fce0
lea ecx, [ebp - 0x198]
call fcn.0042fce0
lea ecx, [ebp - 0x1f8]
call fcn.004e2330
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0067d651
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push eax
call fcn.00681548
call fcn.00692c65
call fcn.00692c65
push eax
call fcn.00681548
call fcn.00692c65
call fcn.00692c65
push eax
call fcn.00681548
call fcn.00692c65
push eax
call fcn.00681548
push eax
call fcn.00681548
call fcn.00692c65
call fcn.00692c65
push eax
call fcn.00681548
call fcn.00692c65
call fcn.00692c65
call fcn.00692c65
call fcn.00692c65
call fcn.00692c65
call fcn.00692c65
call fcn.00692c65
call fcn.00692c65
call fcn.00692c65
call fcn.0067de3c
call fcn.00692c65
call fcn.00692c65
call fcn.00692c65
int3