Function at 0x40f1c0
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x22c
mov eax, dword [0x4b249c]
xor eax, ebp
mov dword [ebp - 0x18], eax
call fcn.0040ee00
mov dword [ebp - 8], eax
xor eax, eax
mov word [ebp - 0x220], ax
push 0x206
push 0
lea ecx, [ebp - 0x21e]
push ecx
call fcn.00426300
add esp, 0xc
mov dword [ebp - 0x224], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0
push 0x104
lea edx, [ebp - 0x220]
push edx
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0xc]
push ecx
lea edx, [ebp - 0x220]
push edx
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x40f256
xor eax, eax
jmp 0x40f3bb
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00425db2
add esp, 4
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
jne 0x40f294
xor eax, eax
jmp 0x40f3bb
mov ecx, dword [ebp - 0x224]
push ecx
mov edx, dword [ebp - 0x10]
push edx
push 0
lea eax, [ebp - 0x220]
push eax
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x40f386
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 4]
push edx
push 0x43ea10
mov eax, dword [ebp - 0x224]
push eax
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x40f386
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x30]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x2c]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x24]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x20]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x14]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc]
and edx, 0xffff
movzx eax, dx
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc]
shr edx, 0x10
and edx, 0xffff
movzx eax, dx
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 8]
and edx, 0xffff
movzx eax, dx
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 8]
shr edx, 0x10
and edx, 0xffff
movzx eax, dx
push eax
push str.FileVersion_:__d._d._d._d___FileVersionMS_:_0x_08x__FileVersionLS_:_0x_08x__ProductVersionMS_:_0x_08x__ProductVersionLS_:_0x_08x__Signature_:_0x_08x__FileFlags_:_0x_08x__FileFlagsMask_:_0x_08x__FileOS_:_0x_08x__FileType_:_0x_08x__FileSubType_:_0x_08x__FileDateMS_:_0x_08x__FileDateLS_:_0x_08x__
push 0x168
push 0x4b3ef0
call fcn.0042934a
add esp, 0x4c
mov ecx, dword [ebp - 0x224]
mov dword [ebp - 0x22c], ecx
mov edx, dword [ebp - 0x22c]
push edx
call fcn.00425e5e
add esp, 4
mov dword [ebp - 0x224], 0
movzx eax, word [0x4b3ef0]
neg eax
sbb eax, eax
and eax, 0x4b3ef0
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0042624f
mov esp, ebp
pop ebp
ret