Function at 0x1017285
Capabilities:
Get file version info

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xe4
mov eax, dword [0x102a0ec]
mov ecx, dword [ebp + 0x10]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
xor esi, esi
cmp edi, esi
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
je 0x1017538
cmp eax, esi
je 0x1017538
cmp ecx, esi
je 0x1017538
lea eax, [ebp - 0xd4]
push eax
push edi
mov dword [ebp - 0xd4], esi
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov ebx, eax
cmp ebx, esi
jne 0x10174b1
push edi
call fcn.01016f8a
test eax, eax
jne 0x10172fb
mov eax, 0x80070002
jmp 0x101753d
push esi
push 0x80
push 3
push esi
push 1
push esi
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0xc8], eax
je 0x1017538
lea ecx, [ebp - 0xdc]
push ecx
push esi
push esi
push eax
mov dword [ebp - 0xc4], 0x80004005
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x101749a
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x101749a
mov ebx, dword [ebp - 0xcc]
xor eax, eax
push 0x2b
pop ecx
lea edi, [ebp - 0xb0]
rep stosd dword es:[edi], eax
movzx eax, word [ebp - 0xc0]
mov edi, dword [ebp - 0xd0]
movzx ecx, word [ebp - 0xba]
mov dword [edi], eax
movzx eax, word [ebp - 0xbe]
shl eax, 0x10
or eax, ecx
mov dword [ebx], eax
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xc4], esi
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
cmp eax, 0xffffffff
je 0x101749a
mov ecx, dword [ebp - 0xb0]
cmp ecx, esi
mov eax, ecx
jg 0x10173bc
neg eax
movzx eax, ax
push 0x3c
cdq
pop esi
idiv esi
cmp ecx, 1
jge 0x10173d3
add word [ebp - 0xb8], ax
jmp 0x10173f2
cmp word [ebp - 0xb8], ax
jae 0x10173eb
dec word [ebp - 0xba]
add word [ebp - 0xb8], 0x18
sub word [ebp - 0xb8], ax
cmp word [ebp - 0xb8], 0x17
jbe 0x1017440
add word [ebp - 0xb8], 0xffe8
inc word [ebp - 0xba]
cmp word [ebp - 0xba], 0x20
jne 0x1017440
inc word [ebp - 0xbe]
cmp word [ebp - 0xbe], 0xd
mov word [ebp - 0xba], 1
jne 0x1017440
inc word [ebp - 0xc0]
mov word [ebp - 0xbe], 1
lea eax, [ebp - 0xe4]
fldz
push eax
fstp qword [ebp - 0xe4]
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToSystemTime]
test eax, eax
je 0x101749a
fld qword [ebp - 0xe4]
lea eax, [ebp - 0xc0]
push eax
push ecx
push ecx
fstp qword [esp]
call dword [sym.imp.OLEAUT32.dll_UnRegisterTypeLib]
test eax, eax
je 0x101749a
movzx eax, word [ebp - 0xc0]
movzx ecx, word [ebp - 0xba]
mov dword [edi], eax
movzx eax, word [ebp - 0xbe]
shl eax, 0x10
or eax, ecx
mov dword [ebx], eax
push dword [ebp - 0xc8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xc4]
jmp 0x101753d
push ebx
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, esi
pop ecx
mov dword [ebp - 0xc4], eax
jne 0x10174c9
mov eax, 0x8007000e
jmp 0x101753d
push eax
push ebx
push esi
push edi
mov dword [ebp - 0xc8], 0x80004005
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x1017524
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0x1005a78
push dword [ebp - 0xc4]
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x1017524
mov eax, dword [ebp - 0xd8]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0xd0]
mov dword [edx], ecx
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xcc]
mov dword [ecx], eax
mov dword [ebp - 0xc8], esi
push dword [ebp - 0xc4]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
mov eax, dword [ebp - 0xc8]
pop ecx
jmp 0x101753d
mov eax, 0x80004005
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0101672d
leave
ret 0xc