Function at 0x41721a
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5f1002
push eax
mov eax, dword [0x687630]
mov dword fs:[0], esp
sub esp, 0x68c
push ebp
xor ebp, ebp
push esi
mov esi, dword [esp + 0x6a4]
cmp eax, ebp
je 0x417229
push esi
push str.GetAppLinkInfo_1___s_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x14
cmp esi, ebp
jne 0x417246
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x68c]
mov dword fs:[0], ecx
add esp, 0x698
ret
push ebx
push edi
push esi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x18], ebp
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebx, dword [esp + 0x6b0]
cmp eax, 0xffffffff
je 0x4176c4
push ebp
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, ebp
mov dword [esp + 0x20], eax
jge 0x4172a7
cmp dword [0x687630], ebp
je 0x4172a7
push str.GetAppLinkInfo__WARNING___CoInitialize_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
lea eax, [esp + 0x10]
push eax
push 0x60aca8
push 1
push ebp
push 0x60ac98
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebp
jl 0x4176eb
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x24]
push edx
push 0x60b0c8
mov ecx, dword [eax]
push eax
call dword [ecx]
cmp eax, ebp
jl 0x41770e
push esi
lea ecx, [esp + 0x2c]
call fcn.004669e0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
push ebp
push edx
mov ecx, dword [eax]
push eax
mov dword [esp + 0x6b0], ebp
call dword [ecx + 0x14]
cmp eax, ebp
jl 0x417731
mov esi, dword [esp + 0x6d4]
cmp esi, ebp
je 0x417348
mov eax, dword [esp + 0x10]
push esi
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0x4c]
cmp eax, ebp
jge 0x417348
cmp dword [0x687630], ebp
je 0x417348
push esi
push str.GetAppLinkInfo__WARNING___Resolve_failed____08x_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x14
cmp ebx, ebp
je 0x4174e0
mov esi, dword [esp + 0x6b4]
cmp esi, ebp
jbe 0x4174e0
lea ecx, [esi + esi]
xor eax, eax
mov edx, ecx
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [esp + 0x38], ebp
and ecx, 3
lea edx, [esp + 0x38]
rep stosb byte es:[edi], al
mov ecx, 0x93
xor eax, eax
lea edi, [esp + 0x3c]
push 4
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14]
push edx
push esi
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov edi, eax
mov eax, dword [0x687630]
cmp eax, ebp
je 0x4173bd
push ebx
push str.GetAppLinkInfo_2__lpszAppPath:__s_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x14
cmp edi, ebp
jge 0x4173e4
cmp dword [0x687630], ebp
je 0x417417
push str.GetAppLinkInfo__WARNING___GetPath_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
jmp 0x417417
push ebx
call fcn.0044cf30
add esp, 4
test eax, eax
je 0x417417
push 0x7b
push ebx
call fcn.0044dab0
add esp, 8
test eax, eax
je 0x4174e0
push 0x7d
push ebx
call fcn.0044dab0
add esp, 8
test eax, eax
je 0x4174e0
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
cmp eax, ebp
jl 0x4174bf
mov ecx, 0x104
xor eax, eax
lea edi, [esp + 0x28a]
mov word [esp + 0x288], bp
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x288]
push eax
push ecx
mov dword [esp + 0x24], 1
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x41747a
dec esi
lea edx, [esp + 0x288]
push esi
push edx
push ebx
call fcn.0044cef3
add esp, 0xc
jmp 0x41749b
cmp dword [0x687630], ebp
je 0x4174e0
push str.GetAppLinkInfo__WARNING___SHGetPathFromIDListW_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
cmp dword [0x687630], ebp
je 0x4174e0
push ebx
push str.GetAppLinkInfo_3__lpszAppPath:__s_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x14
jmp 0x4174e0
cmp dword [0x687630], ebp
je 0x4174e0
push str.GetAppLinkInfo__WARNING___GetIDList_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
mov edi, dword [esp + 0x6b8]
cmp edi, ebp
je 0x417541
mov edx, dword [esp + 0x6bc]
cmp edx, ebp
jbe 0x417541
lea ecx, [edx + edx]
xor eax, eax
mov esi, ecx
push edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov edx, dword [esp + 0x6bc]
mov ecx, esi
and ecx, 3
push edx
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
cmp eax, ebp
jge 0x417541
cmp dword [0x687630], ebp
je 0x417541
push str.GetAppLinkInfo__WARNING___GetArguments_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
mov edi, dword [esp + 0x6c0]
cmp edi, ebp
je 0x4175ab
mov edx, dword [esp + 0x6c4]
cmp edx, ebp
jbe 0x4175ab
lea ecx, [edx + edx]
xor eax, eax
mov esi, ecx
mov dword [esp + 0x18], ebp
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
lea esi, [esp + 0x18]
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x14]
push edx
mov edx, dword [esp + 0x6c8]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x40]
cmp eax, ebp
jge 0x4175ab
cmp dword [0x687630], ebp
je 0x4175ab
push str.GetAppLinkInfo__WARNING___GetIconLocation_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
mov edi, dword [esp + 0x6c8]
cmp edi, ebp
je 0x41765b
mov edx, dword [esp + 0x6cc]
cmp edx, ebp
jbe 0x41765b
lea ecx, [edx + edx]
xor eax, eax
mov esi, ecx
push edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
mov esi, dword [esp + 0x6cc]
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
cmp eax, ebp
jge 0x417614
cmp dword [0x687630], ebp
je 0x417614
push str.GetAppLinkInfo__WARNING___GetWorkingDirectory_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
push esi
call fcn.0044cf30
add esp, 4
test eax, eax
je 0x41765b
mov edx, dword [esp + 0x6c8]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x41765b
mov esi, dword [esp + 0x6c8]
push esi
call fcn.0044cf30
add esp, 4
dec eax
cmp word [esi + eax*2], 0x5c
je 0x41765b
mov eax, esi
push 0x6464a8
push eax
call fcn.0044cea4
add esp, 8
mov eax, dword [esp + 0x6d0]
cmp eax, ebp
je 0x4176b7
mov ecx, dword [esp + 0x1c]
mov dword [eax], ebp
cmp ecx, ebp
je 0x417687
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x14], ebp
mov dword [eax], ecx
mov dword [esp + 0x18], 1
jmp 0x417752
mov ecx, dword [esp + 0x10]
push eax
push ecx
mov edx, dword [ecx]
call dword [edx + 0x10]
cmp eax, ebp
jge 0x4176b7
cmp dword [0x687630], ebp
je 0x4176b7
push str.GetAppLinkInfo__WARNING___GetIDList_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
mov dword [esp + 0x18], 1
jmp 0x417752
cmp dword [0x687630], ebp
je 0x417766
push str.GetAppLinkInfo__ERROR___File_Not_Exist_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
jmp 0x417766
cmp dword [0x687630], ebp
je 0x417766
push str.GetAppLinkInfo__ERROR___CoCreateInstance_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
jmp 0x417766
cmp dword [0x687630], ebp
je 0x417766
push str.GetAppLinkInfo__ERROR___QueryInterface_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
jmp 0x417766
cmp dword [0x687630], ebp
je 0x417752
push str.GetAppLinkInfo__ERROR___Load_failed_
push str.CheckModule
push 0xf
push 0x6875c4
call fcn.00431af0
add esp, 0x10
lea ecx, [esp + 0x28]
mov dword [esp + 0x6a4], 0xffffffff
call fcn.00467250
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x417778
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp + 0x24], ebp
mov eax, dword [esp + 0x10]
cmp eax, ebp
je 0x41778a
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [esp + 0x10], ebp
mov eax, dword [esp + 0x14]
cmp eax, ebp
je 0x417799
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
cmp dword [esp + 0x20], ebp
jl 0x4177a5
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [0x687630], ebp
je 0x4178b8
mov eax, dword [esp + 0x6c8]
lea ecx, [esp + 0x30]
push eax
call fcn.004669e0
mov esi, eax
mov ecx, dword [esp + 0x6c0]
mov dword [esp + 0x6a4], 1
push ecx
lea ecx, [esp + 0x38]
call fcn.004669e0
mov edi, eax
mov edx, dword [esp + 0x6b8]
lea ecx, [esp + 0x2c]
push edx
mov byte [esp + 0x6a8], 2
call fcn.004669e0
mov ebp, eax
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x6a8], 3
call fcn.004669e0
mov ebx, eax
mov eax, dword [esp + 0x6ac]
lea ecx, [esp + 0x20]
push eax
mov byte [esp + 0x6a8], 4
call fcn.004669e0
mov ecx, dword [esi]
mov edx, dword [edi]
mov eax, dword [eax]
push ecx
mov ecx, dword [ebp]
push edx
mov edx, dword [ebx]
push ecx
mov ecx, dword [esp + 0x24]
push edx
push eax
push ecx
push str.GetAppLinkInfo___ret_d____s____s____s____s____s_
push str.CheckModule
push 0xf
push 0x6875c4
mov byte [esp + 0x6cc], 5
call fcn.00431af0
add esp, 0x28
lea ecx, [esp + 0x20]
mov byte [esp + 0x6a4], 4
call fcn.00467250
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6a4], 3
call fcn.00467250
lea ecx, [esp + 0x2c]
mov byte [esp + 0x6a4], 2
call fcn.00467250
lea ecx, [esp + 0x34]
mov byte [esp + 0x6a4], 1
call fcn.00467250
lea ecx, [esp + 0x30]
mov dword [esp + 0x6a4], 0xffffffff
call fcn.00467250
mov ecx, dword [esp + 0x69c]
mov eax, dword [esp + 0x18]
pop edi
pop ebx
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x698
ret