Function at 0x41b190
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x5a0f18
push 0x534c00
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x5adf10]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x250], eax
mov ebx, ecx
mov dword [ebp - 0x244], ebx
xor esi, esi
mov dword [ebp - 0x238], esi
mov ecx, dword [str.mshtml.dll]
mov dword [ebp - 0x28], ecx
mov edx, dword [0x588604]
mov dword [ebp - 0x24], edx
mov ax, word [0x588608]
mov word [ebp - 0x20], ax
mov cl, byte [0x58860a]
mov byte [ebp - 0x1e], cl
xor edi, edi
mov dword [ebp - 0x248], esi
mov dword [ebp - 0x23c], esi
mov byte [ebp - 0x234], 0
push 0x208
push esi
lea edx, [ebp - 0x233]
push edx
call fcn.005344b0
add esp, 0xc
test ebx, ebx
jne 0x41b23a
lea eax, [ebx + 0x57]
jmp 0x41b3c5
mov dword [ebp - 4], esi
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov ebx, eax
test ebx, ebx
jne 0x41b270
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 0x28]
push edx
push 0x58860c
push eax
push 2
push 0x627
jmp 0x41b39b
push ebx
call fcn.0052f6c5
add esp, 4
mov dword [ebp - 0x23c], eax
test eax, eax
jne 0x41b2a1
mov dword [ebp - 0x238], 8
push ebx
push 0x5882d0
push 8
push 2
push 0x62f
jmp 0x41b3a1
push eax
push ebx
mov eax, dword [ebp - 0x248]
push eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.VERSION.dll_GetFileVersionInfoA]
test eax, eax
je 0x41b384
xor ebx, ebx
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x24c], ebx
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 0x240]
push eax
push 0x586cac
mov ecx, dword [ebp - 0x23c]
push ecx
call dword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x41b304
cmp dword [ebp - 0x24c], ebx
je 0x41b304
mov eax, dword [ebp - 0x240]
movzx esi, word [eax + 0xa]
movzx edi, word [eax + 8]
push edi
push esi
push str.Internet_Explorer__d._d
push 0x208
lea edx, [ebp - 0x234]
push edx
call fcn.0052e5e5
add esp, 0x14
mov edi, dword [ebp - 0x250]
cmp edi, ebx
je 0x41b367
mov eax, dword [ebp - 0x244]
mov edx, dword [eax]
cmp edx, ebx
jbe 0x41b367
lea eax, [ebp - 0x234]
lea esi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b340
sub eax, esi
lea ecx, [eax + 1]
cmp ecx, edx
jbe 0x41b354
mov eax, edx
jmp 0x41b355
inc eax
push eax
lea eax, [ebp - 0x234]
push eax
push edx
push edi
call fcn.005308e4
add esp, 0x10
lea eax, [ebp - 0x234]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b370
sub eax, edx
inc eax
mov ecx, dword [ebp - 0x244]
mov dword [ecx], eax
jmp 0x41b3b3
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 0x28]
push edx
push 0x588638
push eax
push 2
push 0x642
mov dword [ebp - 0x238], eax
push str.YWAssistant.c
push str.B_GetVersion
call fcn.0041c870
add esp, 0x1c
mov dword [ebp - 4], 0xfffffffe
call fcn.0041b3e1
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0052d75c
mov esp, ebp
pop ebp
ret