Function at 0x41f170
Capabilities:
Check if file exists
Get file attributes
Get file version info

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x5c
mov eax, dword [0x4bf100]
xor eax, esp
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0x18], edx
xorps xmm0, xmm0
mov byte [esp + 7], 0
movq qword [esp + 0x34], xmm0
movups xmmword [esp + 0x40], xmm0
mov word [esp + 0x40], ax
mov eax, dword [esp + 0x34]
push ebx
mov dword [edx], eax
lea ebx, [edx + 0xc]
mov eax, dword [esp + 0x3c]
push esi
mov esi, dword [ebp + 8]
mov dword [edx + 4], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 7
mov dword [edx + 8], 0
push edi
mov edi, ecx
cmp ebx, eax
je 0x41f1f3
mov ecx, ebx
call fcn.004037b0
movups xmm0, xmmword [esp + 0x4c]
movups xmmword [ebx], xmm0
movq xmm0, qword [esp + 0x5c]
movq qword [ebx + 0x10], xmm0
cmp dword [esi + 0x14], 7
mov eax, esi
jbe 0x41f1fd
mov eax, dword [esi]
xor ecx, ecx
mov dword [esi + 0x10], 0
mov word [eax], cx
mov eax, edi
cmp dword [edi + 0x14], 7
jbe 0x41f213
mov eax, dword [edi]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x41f4cc
cmp ebx, 0x10
je 0x41f4cc
cmp dword [edi + 0x14], 7
mov eax, edi
mov dword [esp + 0x20], 0
jbe 0x41f240
mov eax, dword [edi]
lea ecx, [esp + 0x20]
push ecx
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov ebx, eax
lea eax, [ebx - 1]
cmp eax, 0x1ffffff
ja 0x41f424
push ebx
call fcn.00471fe3
add esp, 4
mov dword [esp + 0x1c], eax
cmp dword [edi + 0x14], 7
jbe 0x41f271
mov edi, dword [edi]
push eax
push ebx
push 0
push edi
call dword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x41f3d7
mov edi, dword [esp + 0x1c]
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0
push eax
push 0x4b41e8
push edi
mov dword [esp + 0x24], 0
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x41f38e
mov eax, dword [esp + 0x14]
cmp eax, 0x34
jb 0x41f34b
mov ecx, dword [esp + 0x18]
cmp dword [ecx], 0xfeef04bd
jne 0x41f34b
mov esi, dword [esp + 0x24]
movzx eax, word [ecx + 0xa]
mov byte [esp + 0x13], 1
mov dword [esi], eax
movzx eax, word [ecx + 8]
mov dword [esi + 4], eax
movzx eax, word [ecx + 0xe]
mov dword [esi + 8], eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x1c]
push eax
push str.StringFileInfo040904b0InternalName
push edi
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x41f405
cmp dword [esp + 0x14], 2
jbe 0x41f405
mov eax, dword [esp + 0x18]
cmp word [eax], 0
je 0x41f405
push eax
lea ecx, [esi + 0xc]
call fcn.0040a2e0
push edi
call fcn.00471fde
mov al, byte [esp + 0x17]
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00471b48
mov esp, ebp
pop ebp
ret
push eax
lea eax, [esp + 0x2c]
push str.VS_FIXEDFILEINFO_invalid._ValueLen:__i
push eax
call fcn.0041f5e0
add esp, 0xc
mov ecx, esi
push eax
call fcn.004094d0
lea ecx, [esp + 0x28]
call fcn.004037b0
push edi
call fcn.00471fde
mov al, byte [esp + 0x17]
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00471b48
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [esp + 0x2c]
push str.VerQueryValueW_failed._LastErrorCode:__i.
push eax
call fcn.0041f5e0
add esp, 0xc
mov ecx, esi
push eax
call fcn.004094d0
lea ecx, [esp + 0x28]
call fcn.004037b0
push edi
call fcn.00471fde
mov al, byte [esp + 0x17]
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00471b48
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [esp + 0x2c]
push str.GetFileVersionInfoW_failed._LastErrorCode:__i.
push eax
call fcn.0041f5e0
add esp, 0xc
mov ecx, esi
push eax
call fcn.004094d0
lea ecx, [esp + 0x28]
call fcn.004037b0
mov edi, dword [esp + 0x1c]
push edi
call fcn.00471fde
mov al, byte [esp + 0x17]
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00471b48
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
lea eax, [esp + 0x30]
push str.GetFileVersionInfoSizeW_returned__i._LastErrorCode:__i.
push eax
call fcn.0041f5e0
mov edi, eax
add esp, 0x10
cmp esi, edi
je 0x41f4ad
mov ecx, dword [esi + 0x14]
cmp ecx, 7
jbe 0x41f47d
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x41f473
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f564
mov eax, edx
push ecx
push eax
call fcn.00471b8b
add esp, 8
mov dword [esi + 0x10], 0
xor eax, eax
mov dword [esi + 0x14], 7
mov word [esi], ax
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 7
mov word [edi], ax
lea ecx, [esp + 0x28]
call fcn.004037b0
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.00471b48
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
lea eax, [esp + 0x30]
push str.Invalid_file_attributes__X_for_QueryFileVersionInfo._LastErrorCode:__i.
push eax
call fcn.0041f5e0
mov edi, eax
add esp, 0x10
cmp esi, edi
je 0x41f516
mov ecx, esi
call fcn.004037b0
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov ecx, dword [esp + 0x3c]
cmp ecx, 7
jbe 0x41f54e
mov edx, dword [esp + 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41f544
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f564
push ecx
push edx
call fcn.00471b8b
add esp, 8
mov ecx, dword [esp + 0x64]
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00471b48
mov esp, ebp
pop ebp
ret
call fcn.00477334
int3