Function at 0x1003da00
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b961e
mov eax, dword fs:[0]
push eax
sub esp, 0x160
mov eax, dword [0x10101404]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x14c], ebx
mov esi, ecx
cmp dword [esi + 0x14], 8
mov dword [ebp - 0x168], eax
mov byte [ebp - 0x145], bl
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
jb 0x1003da63
mov eax, dword [esi]
jmp 0x1003da65
mov eax, esi
lea ecx, [ebp - 0x158]
push ecx
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov edi, eax
cmp edi, ebx
je 0x1003dcd6
push edi
call fcn.100aa6c6
add esp, 4
cmp dword [esi + 0x14], 8
mov ebx, eax
mov dword [ebp - 0x160], ebx
jb 0x1003da96
mov esi, dword [esi]
mov edx, dword [ebp - 0x158]
push ebx
push edi
push edx
push esi
call dword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x1003dcc4
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x150]
push ecx
push 0x100cffa0
push ebx
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x1003dcc4
cmp dword [ebp - 0x154], 0
je 0x1003dcc4
mov eax, dword [ebp - 0x150]
cmp dword [eax], 0xfeef04bd
jne 0x1003dcc4
movzx edx, word [eax + 0xa]
movzx ecx, word [eax + 8]
mov dword [ebp - 0x15c], edx
movzx edx, word [eax + 0xe]
mov dword [ebp - 0x164], ecx
push 0x100cfcd0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x16c], edx
call fcn.10003460
mov edi, eax
mov dword [ebp - 4], 2
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x16c]
mov dword [ebp - 0x14c], 4
call fcn.10042240
mov esi, eax
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x9c]
push ecx
lea ecx, [ebp - 0x164]
call fcn.10042240
mov ebx, eax
mov byte [ebp - 4], 4
lea edx, [ebp - 0x64]
push edx
lea ecx, [ebp - 0x15c]
call fcn.10042240
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x48]
push eax
mov edx, 0x100d3b30
call fcn.100121a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb8]
push ecx
mov edx, ebx
mov ecx, eax
call fcn.1002e8f0
mov byte [ebp - 4], 7
push eax
lea edx, [ebp - 0xf0]
push edx
mov edx, 0x100d3b30
call fcn.100121a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x80]
push ecx
mov edx, esi
mov ecx, eax
call fcn.1002e8f0
mov bl, 9
mov byte [ebp - 4], bl
lea edx, [ebp - 0x2c]
push edx
mov edx, edi
mov ecx, eax
call fcn.1002e8f0
add esp, 0x28
mov byte [ebp - 4], 0xa
mov esi, dword [ebp - 0x168]
mov edi, eax
call fcn.100111a0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x2c]
call fcn.10002d90
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x80]
call fcn.10002d90
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xf0]
call fcn.10002d90
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb8]
call fcn.10002d90
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x48]
call fcn.10002d90
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x64]
call fcn.10002d90
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9c]
call fcn.10002d90
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd4]
call fcn.10002d90
mov dword [ebp - 4], 1
mov ebx, 4
mov dword [ebp - 0x14c], ebx
and ebx, 0xfffffffb
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x14c], ebx
call fcn.10002d90
mov dword [ebp - 4], 0
test bl, 2
je 0x1003dc97
and ebx, 0xfffffffd
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x14c], ebx
call fcn.10002d90
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x1003dcb7
and ebx, 0xfffffffe
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x14c], ebx
call fcn.10002d90
mov ebx, dword [ebp - 0x160]
mov byte [ebp - 0x145], 1
push ebx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete___void__]
mov al, byte [ebp - 0x145]
add esp, 4
jmp 0x1003dcd8
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100af1c6
mov esp, ebp
pop ebp
ret