Function at 0x1000488c
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 8
call fcn.10027369
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x100512e1
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
push 8
call fcn.10027369
add esp, 4
mov dword [ebp - 0x34], eax
mov edi, eax
mov esi, 0x100512e1
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], esp
lea eax, [ebp - 8]
push eax
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
je 0x10004940
add eax, 8
push eax
xor eax, eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
nop
nop
cmp dword [ebp - 0x44], esp
je 0x10004967
push 0x19
push 0x402ff7d
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jle 0x1000524b
mov dword [ebp - 0x44], esp
push dword [ebp - 4]
push 0x40
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_LocalAlloc]
nop
nop
cmp dword [ebp - 0x44], esp
je 0x100049a5
push 0x8a
push 0x402ff7d
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x44], esp
push dword [ebp - 0xc]
push dword [ebp - 4]
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
je 0x100049c2
add eax, 8
push eax
xor eax, eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoW]
nop
nop
cmp dword [ebp - 0x44], esp
je 0x100049e9
push 0xbc
push 0x402ff7d
push 6
call fcn.1002737b
add esp, 0xc
test eax, eax
je 0x1000521f
mov eax, 0x10051429
push eax
mov ebx, eax
call fcn.100012da
pop eax
sub ebx, eax
push ecx
push ebx
push eax
shl ecx, 2
add ecx, ebx
push ecx
call fcn.10027369
add esp, 4
pop esi
mov edi, eax
pop ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
pop ecx
test ecx, ecx
je 0x10004a4e
push eax
lodsd eax, dword [esi]
push esi
push edi
push ecx
test eax, eax
je 0x10004a42
push eax
mov ebx, eax
call fcn.10001121
inc eax
push eax
call fcn.10027369
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop ecx
pop edi
pop esi
stosd dword es:[edi], eax
dec ecx
jne 0x10004a25
pop eax
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x10004a6d
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x10004a69
imul eax, dword [ebx]
jmp 0x10004a5e
mov ecx, eax
test ecx, ecx
je 0x10004a8c
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x10004a85
push ebx
push eax
call fcn.1002736f
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x10004a73
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
cmp dword [ebp + 0xc], 0
jle 0x10004ae0
fild dword [ebp + 0xc]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fadd qword [0x100512f6]
fstp qword [ebp - 0x54]
mov ebx, dword [ebp - 0x10]
call fcn.100012c1
mov dword [ebp - 0x60], eax
fild dword [ebp - 0x60]
fstp qword [ebp - 0x60]
fld qword [ebp - 0x54]
fsub qword [ebp - 0x60]
fcomp qword [0x100512fe]
fnstsw ax
test ah, 0x41
je 0x10004ae0
xor eax, eax
jmp 0x10004ae5
mov eax, 1
test eax, eax
je 0x10004cf7
mov ebx, dword [ebp - 0x10]
call fcn.100012da
mov eax, 0
cmp eax, ecx
jl 0x10004b15
push 0x292
push 0x402ff7d
push 1
call fcn.1002737b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push dword [ebp - 0x44]
call fcn.1000434e
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10004b48
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], esp
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x10004b61
add eax, 8
push eax
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.VERSION.dll_VerQueryValueW]
nop
nop
cmp dword [ebp - 0x44], esp
je 0x10004b8b
push 0x2c6
push 0x402ff7d
push 6
call fcn.1002737b
add esp, 0xc
test eax, eax
je 0x10004cf2
push 8
push dword [ebp - 0x18]
call fcn.100052f3
mov dword [ebp - 0x20], eax
push 0xc
push dword [ebp - 0x18]
call fcn.100052f3
mov dword [ebp - 0x24], eax
push dword [ebp - 0x20]
call fcn.10005313
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x168
call fcn.10028060
add esp, 0x10
mov dword [ebp - 0x48], eax
push dword [ebp - 0x20]
call fcn.10005333
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x168
call fcn.10028060
add esp, 0x10
mov dword [ebp - 0x50], eax
push dword [ebp - 0x24]
call fcn.10005313
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x168
call fcn.10028060
add esp, 0x10
mov dword [ebp - 0x58], eax
push dword [ebp - 0x24]
call fcn.10005333
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x168
call fcn.10028060
add esp, 0x10
mov dword [ebp - 0x60], eax
push dword [ebp - 0x60]
push 0x100512f1
push dword [ebp - 0x58]
push 0x100512f1
push dword [ebp - 0x50]
push 0x100512f1
push dword [ebp - 0x48]
mov ecx, 7
call fcn.100017b8
add esp, 0x1c
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10004c82
push ebx
call fcn.1002736f
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10004c92
push ebx
call fcn.1002736f
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10004ca2
push ebx
call fcn.1002736f
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10004cb2
push ebx
call fcn.1002736f
add esp, 4
mov dword [ebp - 0x68], 0
push 0
push dword [ebp - 0x68]
lea eax, [ebp - 0x64]
push eax
call fcn.1000434e
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x10004cda
push ebx
call fcn.1002736f
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10004cee
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x1000521f
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov eax, str.VarFileInfoTranslation
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
call fcn.1000434e
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10004d27
push ebx
call fcn.1002736f
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10004d3b
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], esp
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x10004d54
add eax, 8
push eax
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.VERSION.dll_VerQueryValueW]
nop
nop
cmp dword [ebp - 0x44], esp
je 0x10004d7e
push 0x4ee
push 0x402ff7d
push 6
call fcn.1002737b
add esp, 0xc
test eax, eax
je 0x1000521f
push 0
push dword [ebp - 0x18]
call fcn.10005350
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x10]
call fcn.100012da
push ebx
push ecx
fild dword [ebp + 0xc]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fadd qword [0x100512f6]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
call fcn.10001bb8
dec eax
jns 0x10004dd4
push 0x593
push 0x402ff7d
push 4
call fcn.1002737b
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x10004df1
push 0x593
push 0x402ff7d
push 1
call fcn.1002737b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x54], ebx
push 0x100512e0
mov ebx, dword [ebp - 0x54]
push dword [ebx]
call fcn.1000118c
add esp, 8
cmp eax, 0
jne 0x10004f15
mov dword [ebp - 0x44], esp
push 0x100
push 0x40
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_LocalAlloc]
nop
nop
cmp dword [ebp - 0x44], esp
je 0x10004e47
push 0x5ef
push 0x402ff7d
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x44], esp
push 0x7f
push dword [ebp - 0x18]
push dword [ebp - 0x2c]
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_VerLanguageNameW]
nop
nop
cmp dword [ebp - 0x44], esp
je 0x10004e7e
push 0x62f
push 0x402ff7d
push 6
call fcn.1002737b
add esp, 0xc
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jle 0x10004ee4
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fmul qword [0x10051306]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
call fcn.10001bb8
push 0x80000301
push 0
push eax
push 0x80000301
push 0
push dword [ebp - 0x18]
push 2
mov ebx, 0x910
call fcn.100289d0
add esp, 0x1c
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10004ee0
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x44], esp
push dword [ebp - 0x18]
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_LocalFree]
nop
nop
cmp dword [ebp - 0x44], esp
je 0x10004f10
push 0x6e9
push 0x402ff7d
push 6
call fcn.1002737b
add esp, 0xc
jmp 0x1000521f
push 2
push dword [ebp - 0x18]
call fcn.10005350
mov word [ebp - 0x30], ax
mov eax, 0x1005147a
push eax
push eax
mov ebx, eax
call fcn.100012da
pop eax
sub ebx, eax
shl ecx, 1
add ecx, ebx
push ecx
call fcn.10027369
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x34]
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x2c], 0x804
je 0x10004f79
cmp dword [ebp - 0x2c], 0x409
je 0x10004f79
mov eax, 1
jmp 0x10004f7e
mov eax, 0
test eax, eax
je 0x10004ff5
lea eax, [ebp - 0x34]
push eax
push 2
mov eax, 2
call fcn.100278c0
add esp, 8
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x48], ebx
call fcn.100012da
mov dword [ebp - 0x4c], ecx
mov edi, dword [ebp - 0x48]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004fcb
mov esi, ebx
shl ecx, 1
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x4c]
inc eax
shl eax, 1
add eax, 8
push eax
push dword [ebp - 0x48]
call fcn.10027381
add esp, 8
mov dword [ebp - 0x34], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x4c]
shl eax, 1
add edi, eax
mov eax, dword [ebp - 0x44]
mov word [edi], ax
mov ebx, dword [ebp - 0x34]
call fcn.100012c1
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
push eax
lea eax, [ebp - 0x3c]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x1000521c
mov ebx, dword [ebp - 0x34]
call fcn.100012da
push ebx
push ecx
mov eax, dword [ebp - 0x3c]
dec eax
jns 0x10005041
push 0x8b8
push 0x402ff7d
push 4
call fcn.1002737b
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x1000505e
push 0x8b8
push 0x402ff7d
push 1
call fcn.1002737b
add esp, 0xc
shl eax, 1
add ebx, eax
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
mov ax, word [ebx]
cwde
push eax
mov eax, dword [ebp - 0x30]
cwde
push eax
call fcn.10005373
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], edx
push 1
push 1
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
call fcn.1000539c
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100050a6
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x10]
call fcn.100012da
push ebx
push ecx
fild dword [ebp + 0xc]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fadd qword [0x100512f6]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
call fcn.10001bb8
dec eax
jns 0x100050e8
push 0x94d
push 0x402ff7d
push 4
call fcn.1002737b
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x10005105
push 0x94d
push 0x402ff7d
push 1
call fcn.1002737b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x54]
push dword [ebx]
push 0x100512eb
push dword [ebp - 0x40]
push str.StringFileInfo_
mov ecx, 4
call fcn.100017b8
add esp, 0x10
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
lea eax, [ebp - 0x58]
push eax
call fcn.1000434e
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10005157
push ebx
call fcn.1002736f
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1000516b
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], esp
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x10005184
add eax, 8
push eax
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.VERSION.dll_VerQueryValueW]
nop
nop
cmp dword [ebp - 0x44], esp
je 0x100051ae
push 0x987
push 0x402ff7d
push 6
call fcn.1002737b
add esp, 0xc
test eax, eax
je 0x10005214
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fmul qword [0x10051306]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
call fcn.10001bb8
push 0x80000301
push 0
push eax
push 0x80000301
push 0
push dword [ebp - 0x18]
push 2
mov ebx, 0x910
call fcn.100289d0
add esp, 0x1c
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000520b
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x1000521c
pop eax
pop ebx
pop ecx
jmp 0x1000500c
add esp, 0xc
mov dword [ebp - 0x44], esp
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.KERNEL32.DLL_LocalFree]
nop
nop
cmp dword [ebp - 0x44], esp
je 0x1000524b
push 0xa8b
push 0x402ff7d
push 6
call fcn.1002737b
add esp, 0xc
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x10005265
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.10027369
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x1000526a
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x10005289
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x10005285
imul eax, dword [ebx]
jmp 0x1000527a
mov ecx, eax
test ecx, ecx
je 0x100052a8
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x100052a1
push ebx
push eax
call fcn.1002736f
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x1000528f
call fcn.1002736f
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100052c0
push ebx
call fcn.1002736f
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100052d0
push ebx
call fcn.1002736f
add esp, 4
mov ebx, dword [ebp - 0x34]
push ebx
call fcn.1002736f
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100052ec
push ebx
call fcn.1002736f
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0xc