Function at 0x1003a7a0
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa38
mov eax, dword [0x1007b00c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x208
xor edi, edi
mov dword [ebp - 0xa2c], edx
lea eax, [ebp - 0x20c]
mov esi, ecx
push edi
push eax
mov dword [ebp - 0xa38], esi
xor ebx, ebx
call sub.VCRUNTIME140.dll_memset
push 0x800
lea eax, [ebp - 0xa0c]
mov dword [ebp - 0xa18], ebx
push edi
push eax
mov dword [ebp - 0xa1c], ebx
mov dword [ebp - 0xa20], ebx
mov dword [ebp - 0xa14], ebx
mov dword [ebp - 0xa24], ebx
mov dword [ebp - 0xa28], ebx
mov dword [ebp - 0xa30], ebx
mov dword [ebp - 0xa34], ebx
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
cmp dword [ebp - 0xa2c], ebx
je 0x1003ab39
push edi
push esi
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov esi, eax
test esi, esi
je 0x1003aaf2
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
add esp, 4
test edi, edi
je 0x1003aaf2
push edi
push esi
push ebx
push dword [ebp - 0xa38]
call dword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x1003aaf2
lea eax, [ebp - 0xa10]
push eax
lea eax, [ebp - 0xa20]
push eax
push 0x100697e8
push edi
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x1003aaf2
push 0x208
lea eax, [ebp - 0x20c]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor esi, esi
test dword [ebp - 0xa10], 0xfffffffc
jbe 0x1003aaf2
mov eax, dword [ebp - 0xa20]
push 0x1006988c
lea ecx, [eax + esi*4]
movzx eax, word [ecx + 2]
push eax
movzx eax, word [ecx]
push eax
push str.StringFileInfo_04x_04x_s
push 0xffffffffffffffff
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.1000f290
add esp, 0x1c
mov dword [ebp - 0xa18], ebx
lea eax, [ebp - 0xa1c]
push eax
lea eax, [ebp - 0xa18]
push eax
lea eax, [ebp - 0x20c]
push eax
push edi
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
jne 0x1003a91c
mov eax, dword [ebp - 0xa10]
inc esi
shr eax, 2
cmp esi, eax
jb 0x1003a8b1
jmp 0x1003aaf2
mov eax, dword [ebp - 0xa18]
test eax, eax
je 0x1003aaf2
cmp dword [ebp - 0xa1c], ebx
je 0x1003aaf2
push 0x400
push eax
lea eax, [ebp - 0xa0c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push ecx
lea ecx, [ebp - 0xa0c]
call fcn.1003dc50
lea eax, [ebp - 0xa0c]
push 0x10069934
push eax
mov dword [ebp - 0xa18], eax
call dword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov edx, eax
add esp, 0xc
mov dword [ebp - 0xa14], edx
test edx, edx
je 0x1003aaf2
mov ecx, dword [ebp - 0xa18]
mov eax, dword [ebp - 0xa1c]
lea eax, [ecx + eax*2]
cmp edx, eax
jae 0x1003aaf2
push 0xa
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa0c]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
mov ecx, dword [ebp - 0xa14]
add esp, 0xc
mov dword [ebp - 0xa24], eax
test ecx, ecx
je 0x1003aaf2
cmp word [ecx], bx
je 0x1003aaf2
lea esi, [ecx + 2]
push 0x10069934
push esi
call dword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov edx, eax
add esp, 8
mov dword [ebp - 0xa14], edx
test edx, edx
je 0x1003aaf2
mov ecx, dword [ebp - 0xa18]
mov eax, dword [ebp - 0xa1c]
lea eax, [ecx + eax*2]
cmp edx, eax
jae 0x1003aaf2
push 0xa
lea eax, [ebp - 0xa14]
push eax
push esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
mov ecx, dword [ebp - 0xa14]
add esp, 0xc
mov dword [ebp - 0xa28], eax
test ecx, ecx
je 0x1003aaf2
cmp word [ecx], bx
je 0x1003aaf2
lea esi, [ecx + 2]
push 0x10069934
push esi
call dword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov edx, eax
add esp, 8
mov dword [ebp - 0xa14], edx
test edx, edx
je 0x1003aaf2
mov ecx, dword [ebp - 0xa18]
mov eax, dword [ebp - 0xa1c]
lea eax, [ecx + eax*2]
cmp edx, eax
jae 0x1003aaf2
push 0xa
lea eax, [ebp - 0xa14]
push eax
push esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
mov ecx, dword [ebp - 0xa14]
add esp, 0xc
mov dword [ebp - 0xa30], eax
test ecx, ecx
je 0x1003aaf2
cmp word [ecx], bx
je 0x1003aaf2
lea ebx, [ecx + 2]
mov ecx, ebx
mov dword [ebp - 0xa14], ecx
movzx eax, word [ebx]
cmp eax, 0x30
jb 0x1003aad4
mov edx, dword [ebp - 0xa18]
mov esi, dword [ebp - 0xa1c]
cmp ax, 0x39
ja 0x1003aad4
lea eax, [edx + esi*2]
cmp ecx, eax
jae 0x1003aad4
add ecx, 2
mov dword [ebp - 0xa14], ecx
movzx eax, word [ecx]
cmp eax, 0x30
jae 0x1003aab6
push 0xa
lea eax, [ebp - 0xa14]
push eax
push ebx
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
add esp, 0xc
mov dword [ebp - 0xa34], eax
mov ebx, 1
mov eax, dword [ebp - 0xa24]
mov esi, dword [ebp - 0xa2c]
movzx ecx, ax
mov eax, dword [ebp - 0xa28]
shl ecx, 0x10
movzx eax, ax
or ecx, eax
mov eax, dword [ebp - 0xa30]
movzx edx, ax
mov eax, dword [ebp - 0xa34]
mov dword [esi + 4], ecx
shl edx, 0x10
movzx ecx, ax
or edx, ecx
mov dword [esi], edx
test edi, edi
je 0x1003ab39
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1005b6db
mov esp, ebp
pop ebp
ret