Function at 0x412660
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
sub esp, 0x14c
push ebx
push esi
xor ebx, ebx
push ebx
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov esi, eax
cmp esi, ebx
jne 0x412689
pop esi
or eax, reloc.NETAPI32.dll_NetApiBufferFree
pop ebx
mov esp, ebp
pop ebp
ret 8
push edi
push esi
call dword [sym.imp.MSVCR100.dll_malloc]
mov edi, eax
add esp, 4
mov dword [ebp - 0x2c], edi
cmp edi, ebx
je 0x4127fa
mov ecx, dword [ebp + 8]
push edi
push esi
push ebx
push ecx
call dword [sym.imp.VERSION.dll_GetFileVersionInfoA]
test eax, eax
je 0x4127fa
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 4]
push eax
push str.VarFileInfoTranslation
push edi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], ebx
call dword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x4127fa
push 0xff
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ebx
push ecx
mov byte [ebp - 0x14c], bl
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 4]
mov esi, dword [sym.imp.MSVCR100.dll_sprintf_s]
xor eax, eax
mov byte [ebp - 0x4c], bl
mov dword [ebp - 0x4b], eax
mov dword [ebp - 0x47], eax
mov dword [ebp - 0x43], eax
mov dword [ebp - 0x3f], eax
mov dword [ebp - 0x3b], eax
mov dword [ebp - 0x37], eax
mov dword [ebp - 0x33], eax
mov byte [ebp - 0x2f], al
mov byte [ebp - 0x24], bl
mov dword [ebp - 0x23], eax
mov dword [ebp - 0x1f], eax
mov dword [ebp - 0x1b], eax
mov dword [ebp - 0x17], eax
mov dword [ebp - 0x13], eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov byte [ebp - 7], al
movzx eax, word [edx]
push eax
push str.000_x
lea ecx, [ebp - 0x24]
push 0x1e
push ecx
call esi
lea eax, [ebp - 0x24]
add esp, 0x1c
lea edi, [eax + 1]
jmp 0x412750
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x412750
sub eax, edi
lea edx, [ebp + eax - 0x28]
push edx
lea eax, [ebp - 0x4c]
push 0x1e
push eax
call dword [sym.imp.MSVCR100.dll_strcpy_s]
mov ecx, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov word [ebp - 8], ax
mov byte [ebp - 0x2f], bl
movzx edx, word [ecx + 2]
push edx
push str.000_x
lea eax, [ebp - 0x24]
push 0x1e
push eax
call esi
lea eax, [ebp - 0x24]
add esp, 0x1c
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4127a6
sub eax, edi
lea ecx, [ebp + eax - 0x28]
push ecx
lea edx, [ebp - 0x4c]
push 0x1e
push edx
call dword [sym.imp.MSVCR100.dll_strcat_s]
lea eax, [ebp - 0x4c]
push eax
push str.StringFileInfo_sProductVersion
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push 0x100
push ecx
mov byte [ebp - 0x2f], bl
call esi
mov esi, dword [ebp - 0x2c]
add esp, 0x1c
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 4]
push eax
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
push esi
call dword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
jne 0x412806
pop edi
pop esi
or eax, reloc.NETAPI32.dll_NetApiBufferFree
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebp - 4]
mov eax, dword [ebp + 0xc]
push edx
push 0x32
push eax
call dword [sym.imp.MSVCR100.dll_strcpy_s]
push esi
call dword [sym.imp.MSVCR100.dll_free]
add esp, 0x10
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 8