Function at 0x403afe
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
cmp dword [ebp + 0x10], 1
jne 0x403d25
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp + 8]
push ecx
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov dword [ebp - 0x158], eax
mov edx, dword [ebp - 0x158]
push edx
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jne 0x403b51
or eax, 0xffffffff
jmp 0x403dd0
mov eax, dword [ebp - 0x150]
push eax
mov ecx, dword [ebp - 0x158]
push ecx
push 0
mov edx, dword [ebp + 8]
push edx
call sub.VERSION.dll_GetFileVersionInfoA
test eax, eax
jne 0x403b8c
mov eax, dword [ebp - 0x150]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
or eax, 0xffffffff
jmp 0x403dd0
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x164]
push edx
push 0x409454
mov eax, dword [ebp - 0x150]
push eax
call sub.VERSION.dll_VerQueryValueA
test eax, eax
jne 0x403bcd
mov ecx, dword [ebp - 0x150]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
or eax, 0xffffffff
jmp 0x403dd0
mov edx, dword [ebp - 0x164]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x16c], eax
mov ecx, dword [ebp - 0x164]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x150]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea ecx, [ebp - 4]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
push eax
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jne 0x403c41
or eax, 0xffffffff
jmp 0x403dd0
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp - 0x158]
push edx
push 0
mov eax, dword [ebp + 0xc]
push eax
call sub.VERSION.dll_GetFileVersionInfoA
test eax, eax
jne 0x403c7c
mov ecx, dword [ebp - 0x150]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
or eax, 0xffffffff
jmp 0x403dd0
lea edx, [ebp - 0x154]
push edx
lea eax, [ebp - 0x164]
push eax
push 0x409458
mov ecx, dword [ebp - 0x150]
push ecx
call sub.VERSION.dll_VerQueryValueA
test eax, eax
jne 0x403cbd
mov edx, dword [ebp - 0x150]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
or eax, 0xffffffff
jmp 0x403dd0
mov eax, dword [ebp - 0x164]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x160], ecx
mov edx, dword [ebp - 0x164]
mov eax, dword [edx + 8]
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x150]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea edx, [ebp - 0x160]
push edx
lea eax, [ebp - 0x16c]
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jle 0x403d18
mov eax, 1
jmp 0x403dd0
cmp dword [ebp - 8], 0
jge 0x403d25
xor eax, eax
jmp 0x403dd0
lea ecx, [ebp - 0x14c]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffff
jne 0x403d47
or eax, 0xffffffff
jmp 0x403dd0
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x16c], ecx
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0x168], edx
lea eax, [ebp - 0x14c]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffff
jne 0x403d88
or eax, 0xffffffff
jmp 0x403dd0
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x160], eax
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x15c], ecx
lea edx, [ebp - 0x160]
push edx
lea eax, [ebp - 0x16c]
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jle 0x403dce
mov eax, 1
jmp 0x403dd0
xor eax, eax
mov esp, ebp
pop ebp
ret