Function at 0x431320
Capabilities:
Get common file path
Get file version info

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5eca0b
mov eax, dword fs:[0]
push eax
mov eax, 0x1470
call fcn.005bd1d0
mov eax, dword [0x677010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1478], edx
mov eax, ecx
mov dword [ebp - 0x1474], eax
mov ecx, dword [ebp + 8]
mov dword [eax], 0
lea eax, [ebp - 0x1460]
push 0x1450
mov dword [edx], 0
push eax
mov dword [ebp - 0x147c], ecx
mov dword [ecx], 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
jne 0x431398
xor al, al
jmp 0x4315c2
lea eax, [ebp - 0x1460]
push eax
lea ecx, [ebp - 0x1464]
call fcn.0040d2b0
mov dword [ebp - 4], 0
xor edi, edi
mov esi, dword [ebp - 0x1464]
cmp word [esi], di
je 0x431400
nop
movzx eax, word [esi]
push eax
push 0x63f39c
call fcn.005c078c
add esp, 8
test eax, eax
je 0x4313dd
test edi, edi
jne 0x4313df
mov edi, esi
jmp 0x4313df
xor edi, edi
add esi, 2
cmp word [esi], 0
jne 0x4313c0
test edi, edi
je 0x431400
sub edi, dword [ebp - 0x1464]
lea ecx, [ebp - 0x1464]
sar edi, 1
push edi
call fcn.00416b30
lea eax, [ebp - 0x1464]
push eax
mov ecx, eax
call fcn.00410610
mov eax, dword [ebp - 0x1464]
mov edi, 0x63f3a4
sub edi, eax
push 0xd
push 0x63f3a4
mov ebx, dword [eax - 0xc]
sar edi, 1
call fcn.005c69c1
mov ecx, SysReAllocString
mov dword [ebp - 0x1468], eax
sub ecx, eax
add esp, 8
cmp ecx, ebx
jge 0x43144a
push 0x80070057
call fcn.004022e2
lea esi, [ebx + eax]
test esi, esi
jns 0x43145b
push 0x80070057
call fcn.004022e2
mov eax, dword [ebp - 0x1464]
mov edx, 1
mov ecx, dword [eax - 8]
sub edx, dword [eax - 4]
sub ecx, esi
or ecx, edx
jge 0x431484
push esi
lea ecx, [ebp - 0x1464]
call fcn.00401fda
mov eax, dword [ebp - 0x1464]
lea edx, [eax + edi*2]
cmp edi, ebx
jbe 0x431490
mov edx, 0x63f3a4
mov ecx, dword [ebp - 0x1468]
lea eax, [eax + ebx*2]
push ecx
push edx
push ecx
push eax
call fcn.004021b7
mov eax, dword [ebp - 0x1464]
add esp, 0x10
cmp esi, dword [eax - 8]
jg 0x431440
mov dword [eax - 0xc], esi
xor ecx, ecx
mov eax, dword [ebp - 0x1464]
mov word [eax + esi*2], cx
lea eax, [ebp - 0x1470]
push eax
push dword [ebp - 0x1464]
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov esi, eax
push esi
call fcn.00476ee6
add esp, 4
mov edi, eax
push edi
push esi
push dword [ebp - 0x1470]
push dword [ebp - 0x1464]
call dword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x431569
lea eax, [ebp - 0x146c]
mov dword [ebp - 0x1468], 0
push eax
lea eax, [ebp - 0x1468]
mov dword [ebp - 0x146c], 0
push eax
push 0x63fe60
push edi
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x43155c
cmp dword [ebp - 0x146c], 0
je 0x43155c
mov ecx, dword [ebp - 0x1468]
mov edx, dword [ebp - 0x1474]
movzx eax, word [ecx + 0x12]
mov dword [edx], eax
movzx eax, word [ecx + 0x10]
mov edx, dword [ebp - 0x1478]
mov dword [edx], eax
movzx eax, word [ecx + 0x16]
mov ecx, dword [ebp - 0x147c]
mov dword [ecx], eax
push edi
call fcn.00476ee1
add esp, 4
mov bl, 1
jmp 0x431574
push edi
call fcn.00476ee1
add esp, 4
xor bl, bl
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov ecx, dword [ebp - 0x1464]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4315c0
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x4315bc
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x4315bc
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x4315c0
mov ecx, edx
call esi
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005bc745
mov esp, ebp
pop ebp
ret