Function at 0x4a8bd8
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x36
push 0
push 0
dec ecx
jne 0x4a8be0
push ecx
push ebx
push esi
push edi
mov ebx, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.0040475c
lea eax, [ebp - 0x164]
mov edx, dword [0x407ce4]
call fcn.00404e68
xor eax, eax
push ebp
push 0x4a8fd1
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebx], 0
mov word [ebx + 2], 0
mov word [ebx + 4], 0
mov word [ebx + 6], 0
mov word [ebx + 8], 0
call fcn.0040b0a0
fstp qword [ebx + 0x10]
wait
push dword [ebx + 0x14]
push dword [ebx + 0x10]
lea eax, [ebp - 0x174]
call fcn.0040afc8
lea eax, [ebx + 0x18]
mov edx, 0x4a8fe8
call fcn.00404300
lea eax, [ebx + 0x1c]
mov edx, 0x4a9004
call fcn.00404300
lea eax, [ebx + 0x20]
mov edx, 0x4a9014
call fcn.00404300
lea eax, [ebx + 0x24]
mov edx, 0x4a9024
call fcn.00404300
lea ecx, [ebp - 0x178]
movzx eax, word [ebp - 0x174]
mov edx, 4
call fcn.0046c10c
push dword [ebp - 0x178]
push 0x4a9030
lea ecx, [ebp - 0x17c]
movzx eax, word [ebp - 0x172]
mov edx, 2
call fcn.0046c10c
push dword [ebp - 0x17c]
push 0x4a9030
lea ecx, [ebp - 0x180]
movzx eax, word [ebp - 0x16e]
mov edx, 2
call fcn.0046c10c
push dword [ebp - 0x180]
push 0x4a903c
lea ecx, [ebp - 0x184]
movzx eax, word [ebp - 0x16c]
mov edx, 2
call fcn.0046c10c
push dword [ebp - 0x184]
push 0x4a9048
lea ecx, [ebp - 0x188]
movzx eax, word [ebp - 0x16a]
mov edx, 2
call fcn.0046c10c
push dword [ebp - 0x188]
push 0x4a9048
lea ecx, [ebp - 0x18c]
movzx eax, word [ebp - 0x168]
mov edx, 2
call fcn.0046c10c
push dword [ebp - 0x18c]
lea eax, [ebx + 0x28]
mov edx, 0xb
call fcn.0040462c
mov eax, dword [ebp - 4]
call fcn.00409500
test al, al
je 0x4a8f9a
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
call fcn.0040476c
push eax
call sub.version.dll_GetFileVersionInfoSizeA
mov esi, eax
test esi, esi
jbe 0x4a8f9a
mov eax, esi
call fcn.004027a8
mov edi, eax
push edi
push esi
push 0
mov eax, dword [ebp - 4]
call fcn.0040476c
push eax
call sub.version.dll_GetFileVersionInfoA
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x4a904c
push edi
call sub.version.dll_VerQueryValueA
mov esi, dword [ebp - 0xc]
mov eax, dword [esi + 8]
call fcn.004076a4
mov word [ebx + 2], ax
mov ax, word [esi + 8]
mov word [ebx + 4], ax
mov eax, dword [esi + 0xc]
call fcn.004076a4
mov word [ebx + 6], ax
mov ax, word [esi + 0xc]
mov word [ebx + 8], ax
lea edx, [ebp - 0x190]
movzx eax, word [ebx + 8]
call fcn.00408f94
mov edx, dword [ebp - 0x190]
lea eax, [ebx + 0x24]
call fcn.00404300
lea edx, [ebp - 0x194]
movzx eax, word [ebx + 2]
call fcn.00408f94
push dword [ebp - 0x194]
push 0x4a9030
lea edx, [ebp - 0x198]
movzx eax, word [ebx + 4]
call fcn.00408f94
push dword [ebp - 0x198]
push 0x4a9030
lea edx, [ebp - 0x19c]
movzx eax, word [ebx + 6]
call fcn.00408f94
push dword [ebp - 0x19c]
lea eax, [ebx + 0x20]
mov edx, 5
call fcn.0040462c
push dword [ebx + 0x20]
push 0x4a9030
push dword [ebx + 0x24]
lea eax, [ebx + 0x1c]
mov edx, 3
call fcn.0040462c
push 0x4a9058
push dword [ebx + 0x20]
push 0x4a9068
push dword [ebx + 0x24]
lea eax, [ebx + 0x18]
mov edx, 4
call fcn.0040462c
lea ecx, [ebp - 0x164]
mov edx, 0x3f
mov eax, dword [ebp - 4]
call fcn.00409680
mov eax, dword [ebp - 0x164]
call fcn.004098d0
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x174]
call fcn.0040afc8
lea eax, [ebp - 0x164]
call fcn.004096d0
lea ecx, [ebp - 0x1a0]
movzx eax, word [ebp - 0x174]
mov edx, 4
call fcn.0046c10c
push dword [ebp - 0x1a0]
push 0x4a9030
lea ecx, [ebp - 0x1a4]
movzx eax, word [ebp - 0x172]
mov edx, 2
call fcn.0046c10c
push dword [ebp - 0x1a4]
push 0x4a9030
lea ecx, [ebp - 0x1a8]
movzx eax, word [ebp - 0x16e]
mov edx, 2
call fcn.0046c10c
push dword [ebp - 0x1a8]
push 0x4a903c
lea ecx, [ebp - 0x1ac]
movzx eax, word [ebp - 0x16c]
mov edx, 2
call fcn.0046c10c
push dword [ebp - 0x1ac]
push 0x4a9030
lea ecx, [ebp - 0x1b0]
movzx eax, word [ebp - 0x16a]
mov edx, 2
call fcn.0046c10c
push dword [ebp - 0x1b0]
push 0x4a9030
lea ecx, [ebp - 0x1b4]
movzx eax, word [ebp - 0x168]
mov edx, 2
call fcn.0046c10c
push dword [ebp - 0x1b4]
lea eax, [ebx + 0x28]
mov edx, 0xb
call fcn.0040462c
mov byte [ebx], 1
mov eax, edi
call fcn.004027c8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a8fd8
lea eax, [ebp - 0x1b4]
mov edx, 0x10
call fcn.004042d0
lea eax, [ebp - 0x164]
mov edx, dword [0x407ce4]
call fcn.00404f38
lea eax, [ebp - 4]
call fcn.004042ac
ret