Function at 0x48be10
Capabilities:
Check if file exists
Print debug messages

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x509944
mov eax, dword fs:[0]
push eax
sub esp, 0x4b0
mov eax, dword [0x5522c0]
xor eax, esp
mov dword [esp + 0x4a8], eax
push ebx
push esi
push edi
mov eax, dword [0x5522c0]
xor eax, esp
push eax
lea eax, [esp + 0x4c0]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov edi, ecx
mov ecx, dword [eax - 0xc]
xor ebx, ebx
mov dword [esp + 0x20], edi
cmp ecx, ebx
je 0x48be85
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x20], esp
mov esi, esp
call fcn.0045d030
add eax, 0x10
mov dword [esi], eax
call fcn.0048d3c0
cmp eax, ebx
je 0x48c3fe
push 0x206
lea ecx, [esp + 0x2b2]
xor eax, eax
push ebx
push ecx
mov word [esp + 0x2b8], ax
call fcn.004e9a40
mov eax, dword [edi + 0xb4]
push 0xffffffffffffffff
push eax
lea edx, [esp + 0x2c0]
push 0x104
push edx
call fcn.004e8fd0
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
add esp, 0x1c
push str.MediaLibraryIcon.dll_del
lea eax, [esp + 0x2b0]
push eax
call esi
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea ecx, [esp + 0x2ac]
push ecx
call edi
test eax, eax
je 0x48c19b
mov dword [esp + 0x24], vtable.CModuleVersion.0
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x4c8], ebx
lea eax, [esp + 0x2ac]
lea ebx, [esp + 0x24]
call fcn.00492740
test eax, eax
je 0x48c179
mov edx, dword [0x551f18]
mov eax, dword [edx + 0xc]
mov ecx, 0x551f18
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0x4c8], 1
mov edx, dword [0x551f18]
mov eax, dword [edx + 0xc]
mov ecx, 0x551f18
call eax
lea ebx, [eax + 0x10]
mov dword [esp + 0x10], ebx
lea ecx, [esp + 0x1c]
push ecx
lea esi, [esp + 0x28]
mov byte [esp + 0x4cc], 2
call fcn.00492800
lea edi, [esp + 0x14]
mov byte [esp + 0x4c8], 3
call fcn.0045cf40
mov byte [esp + 0x4c8], 2
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x48bf9d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x14]
push ecx
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov eax, esi
mov edi, esp
mov dword [esp + 0x1c], esi
call fcn.0045d030
add eax, 0x10
mov dword [edi], eax
call fcn.0048d3c0
test eax, eax
jne 0x48c01b
lea eax, [ebx - 0x10]
mov byte [esp + 0x4c8], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48bfe8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x4c8], 0
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48c009
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
mov eax, dword [esp + 0x5c]
push eax
call fcn.004e4db0
add esp, 4
jmp 0x48c3fe
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0xae]
push edx
mov word [esp + 0xb0], cx
call fcn.004e9a40
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0xb4]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0xb8]
push 0x104
push ecx
call fcn.004e8fd0
add esp, 0x1c
push 0x5261dc
lea edx, [esp + 0xa8]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [esp + 0xa4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x48c0f4
mov dword [esp + 0x64], vtable.CModuleVersion.0
mov dword [esp + 0x9c], 0
lea eax, [esp + 0xa4]
lea ebx, [esp + 0x64]
mov byte [esp + 0x4c8], 4
call fcn.00492740
test eax, eax
je 0x48c0d8
lea ecx, [esp + 0x1c]
push ecx
mov esi, ebx
call fcn.00492800
lea edi, [esp + 0x10]
mov byte [esp + 0x4c8], 5
call fcn.0045cf40
lea ecx, [esp + 0x1c]
call fcn.00459240
mov esi, dword [esp + 0x18]
mov byte [esp + 0x4c8], 2
mov edx, dword [esp + 0x9c]
push edx
call fcn.004e4db0
mov ebx, dword [esp + 0x14]
add esp, 4
xor eax, eax
test ebx, ebx
setne al
test eax, eax
jne 0x48c109
push 0x80004005
call fcn.0045a4a0
mov eax, dword [esp + 0x14]
push ebx
push eax
call fcn.004e7923
xor ecx, ecx
add esp, 8
test eax, eax
setne cl
add ebx, 0xfffffff0
mov byte [esp + 0x4c8], 1
lea edx, [ebx + 0xc]
or eax, 0xffffffff
mov edi, ecx
lock xadd dword [edx], eax
dec eax
test eax, eax
jg 0x48c144
mov ecx, dword [ebx]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push ebx
call eax
mov byte [esp + 0x4c8], 0
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48c165
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
mov eax, dword [esp + 0x5c]
push eax
call fcn.004e4db0
add esp, 4
mov eax, edi
jmp 0x48c400
push str.MediaLibrary:_GetFileVersionInfoEx_failed_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.004e4db0
add esp, 4
mov eax, 1
jmp 0x48c400
lea edx, [esp + 0x2ac]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push str.MediaLibraryIcon64.dll_del
lea eax, [esp + 0x2b0]
push eax
call esi
lea ecx, [esp + 0x2ac]
push ecx
call edi
test eax, eax
je 0x48c3f3
mov dword [esp + 0x24], vtable.CModuleVersion.0
mov dword [esp + 0x5c], ebx
lea eax, [esp + 0x2ac]
lea ebx, [esp + 0x24]
mov dword [esp + 0x4c8], 6
call fcn.00492740
test eax, eax
je 0x48c3e9
mov edx, dword [0x551f18]
mov eax, dword [edx + 0xc]
mov ecx, 0x551f18
call eax
add eax, 0x10
mov dword [esp + 0x10], eax
mov byte [esp + 0x4c8], 7
mov edx, dword [0x551f18]
mov eax, dword [edx + 0xc]
mov ecx, 0x551f18
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x18]
mov bl, 8
push ecx
lea esi, [esp + 0x28]
mov byte [esp + 0x4cc], bl
call fcn.00492800
lea edi, [esp + 0x10]
mov byte [esp + 0x4c8], 9
call fcn.0045cf40
mov byte [esp + 0x4c8], bl
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x48c27e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x10]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
call fcn.0045d030
add eax, 0x10
mov dword [esi], eax
call fcn.0048d3c0
test eax, eax
jne 0x48c2c3
lea ecx, [esp + 0x14]
call fcn.00459240
lea ecx, [esp + 0x10]
call fcn.00459240
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.004e4db0
add esp, 4
jmp 0x48c3fe
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xae]
push eax
mov word [esp + 0xb0], dx
call fcn.004e9a40
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx + 0xb4]
push 0xffffffffffffffff
push eax
lea edx, [esp + 0xb8]
push 0x104
push edx
call fcn.004e8fd0
add esp, 0x1c
push 0x526078
lea eax, [esp + 0xa8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea ecx, [esp + 0xa4]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x48c394
mov dword [esp + 0x64], vtable.CModuleVersion.0
mov dword [esp + 0x9c], 0
lea eax, [esp + 0xa4]
lea ebx, [esp + 0x64]
mov byte [esp + 0x4c8], 0xa
call fcn.00492740
test eax, eax
je 0x48c37c
lea edx, [esp + 0x18]
push edx
mov esi, ebx
call fcn.00492800
lea edi, [esp + 0x14]
mov byte [esp + 0x4c8], 0xb
call fcn.0045cf40
lea ecx, [esp + 0x18]
call fcn.00459240
mov byte [esp + 0x4c8], 8
mov eax, dword [esp + 0x9c]
push eax
call fcn.004e4db0
add esp, 4
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x18]
call fcn.00459120
lea ecx, [esp + 0x14]
test eax, eax
je 0x48c3cc
call fcn.00459240
lea ecx, [esp + 0x10]
call fcn.00459240
mov edx, dword [esp + 0x5c]
push edx
call fcn.004e4db0
add esp, 4
mov eax, 1
jmp 0x48c400
call fcn.00459240
lea ecx, [esp + 0x10]
call fcn.00459240
mov eax, dword [esp + 0x5c]
push eax
call fcn.004e4db0
add esp, 4
jmp 0x48c3fe
push str.MediaLibrary:_GetFileVersionInfoEx_failed_64_n
jmp 0x48c17e
push str.MediaLibrary:_MediaLibraryIcon64.dll_del_not_exists_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
xor eax, eax
mov ecx, dword [esp + 0x4c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4a8]
xor ecx, esp
call fcn.004e4d50
mov esp, ebp
pop ebp
ret 4