Function at 0x1032aa3
Capabilities:
Get file version info

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xe4
mov eax, dword [0x1046190]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor esi, esi
cmp edi, esi
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
je 0x1032d6b
cmp eax, esi
je 0x1032d6b
cmp ecx, esi
je 0x1032d6b
lea eax, [ebp - 0xd4]
push eax
push edi
mov dword [ebp - 0xd4], esi
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov ebx, eax
cmp ebx, esi
jne 0x1032ce4
push edi
call fcn.010326f3
test eax, eax
jne 0x1032b1b
mov eax, 0x80070002
jmp 0x1032d70
push esi
push 0x80
push 3
push esi
push 1
push esi
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0xc8], eax
je 0x1032d6b
lea ecx, [ebp - 0xdc]
push ecx
push esi
push esi
push eax
mov dword [ebp - 0xc4], 0x80004005
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x1032ccd
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x1032ccd
push 0xac
lea eax, [ebp - 0xb0]
push esi
push eax
call sub.msvcrt.dll_memset
movzx eax, word [ebp - 0xc0]
mov edi, dword [ebp - 0xd0]
movzx ecx, word [ebp - 0xba]
mov ebx, dword [ebp - 0xcc]
mov dword [edi], eax
movzx eax, word [ebp - 0xbe]
shl eax, 0x10
or eax, ecx
mov dword [ebx], eax
add esp, 0xc
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xc4], esi
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
cmp eax, 0xffffffff
je 0x1032ccd
mov ecx, dword [ebp - 0xb0]
cmp ecx, esi
jle 0x1032be5
movzx eax, cx
jmp 0x1032bec
mov eax, ecx
neg eax
movzx eax, ax
movzx eax, ax
cdq
push 0x3c
pop esi
idiv esi
cmp ecx, 1
movzx eax, ax
jge 0x1032c06
add word [ebp - 0xb8], ax
jmp 0x1032c25
cmp word [ebp - 0xb8], ax
jae 0x1032c1e
dec word [ebp - 0xba]
add word [ebp - 0xb8], 0x18
sub word [ebp - 0xb8], ax
cmp word [ebp - 0xb8], 0x17
jbe 0x1032c73
add word [ebp - 0xb8], 0xffe8
inc word [ebp - 0xba]
cmp word [ebp - 0xba], 0x20
jne 0x1032c73
inc word [ebp - 0xbe]
cmp word [ebp - 0xbe], 0xd
mov word [ebp - 0xba], 1
jne 0x1032c73
inc word [ebp - 0xc0]
mov word [ebp - 0xbe], 1
fldz
lea eax, [ebp - 0xe4]
push eax
fstp qword [ebp - 0xe4]
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToSystemTime]
test eax, eax
je 0x1032ccd
fld qword [ebp - 0xe4]
lea eax, [ebp - 0xc0]
push eax
push ecx
push ecx
fstp qword [esp]
call dword [sym.imp.OLEAUT32.dll_UnRegisterTypeLib]
test eax, eax
je 0x1032ccd
movzx eax, word [ebp - 0xc0]
movzx ecx, word [ebp - 0xba]
mov dword [edi], eax
movzx eax, word [ebp - 0xbe]
shl eax, 0x10
or eax, ecx
mov dword [ebx], eax
push dword [ebp - 0xc8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xc4]
jmp 0x1032d70
push ebx
call sub.msvcrt.dll_void____cdecl_operator_new___unsigned_int_
cmp eax, esi
pop ecx
mov dword [ebp - 0xc4], eax
jne 0x1032cfc
mov eax, 0x8007000e
jmp 0x1032d70
push eax
push ebx
push esi
push edi
mov dword [ebp - 0xc8], 0x80004005
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x1032d57
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0x100623c
push dword [ebp - 0xc4]
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x1032d57
mov eax, dword [ebp - 0xd8]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0xd0]
mov dword [edx], ecx
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xcc]
mov dword [ecx], eax
mov dword [ebp - 0xc8], esi
push dword [ebp - 0xc4]
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
mov eax, dword [ebp - 0xc8]
pop ecx
jmp 0x1032d70
mov eax, 0x80004005
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01031a01
leave
ret 0xc