Function at 0x41b3cd
Capabilities:
Get file version info

Disassembly:
push 0x94
mov eax, 0x439c9b
call fcn.00423b6c
mov ebx, dword [ebp + 8]
xor edx, edx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x98], ebx
lea edi, [ebx + 0x10]
mov dword [ebp - 0x8c], ecx
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], edx
cmp dword [edi + 0x14], 0x10
jb 0x41b40d
mov eax, dword [edi]
jmp 0x41b40f
mov eax, edi
mov byte [eax], dl
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], edx
push eax
push ecx
mov dword [ebp - 0x88], 1
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov dword [ebp - 0x84], eax
test eax, eax
jne 0x41b458
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x84]
call fcn.00402c97
push 0x44b5a0
lea eax, [ebp - 0x84]
push eax
call fcn.00425e44
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov dword [ebp - 0x94], esi
test esi, esi
jne 0x41b47f
lea ecx, [ebp - 0x7d]
call fcn.00402c71
push 0x44b568
lea eax, [ebp - 0x7d]
jmp 0x41b452
push esi
push dword [ebp - 0x84]
push 0
push dword [ebp - 0x8c]
call sub.VERSION.dll_GetFileVersionInfoA
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x90]
push eax
push 0x441a6c
push esi
call sub.VERSION.dll_VerQueryValueA
mov ecx, dword [ebp - 0x90]
and dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
movzx eax, word [ecx + 0xa]
mov dword [ebx], eax
movzx eax, word [ecx + 8]
mov dword [ebx + 4], eax
movzx eax, word [ecx + 0xe]
mov dword [ebx + 8], eax
movzx eax, word [ecx + 0xc]
mov dword [ebx + 0xc], eax
push dword [ebx]
mov esi, 0x43b72c
mov dword [ebp - 4], 1
push esi
lea eax, [ebp - 0x1c]
push 0xffffffffffffffff
push eax
call fcn.00402b8e
add esp, 0x10
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x4c]
push eax
call fcn.004015b0
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 2
call fcn.0041b6c6
push 0
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 1
call fcn.00401ef4
push dword [ebx + 4]
lea eax, [ebp - 0x1c]
push esi
push 0xffffffffffffffff
push eax
call fcn.00402b8e
add esp, 0x10
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x7c]
push eax
call fcn.004015b0
mov esi, eax
push 0x443130
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 3
call fcn.004015b0
push esi
push eax
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 4
push eax
call fcn.0041b223
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 5
push esi
push eax
lea ecx, [ebp - 0x34]
call fcn.0041b6c6
push esi
push 1
lea ecx, [ebp - 0x4c]
call fcn.00401ef4
push esi
push 1
lea ecx, [ebp - 0x64]
call fcn.00401ef4
push esi
push 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 1
call fcn.00401ef4
push dword [ebx + 8]
lea eax, [ebp - 0x1c]
push 0x43b72c
push 0xffffffffffffffff
push eax
call fcn.00402b8e
add esp, 0x10
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x4c]
push eax
call fcn.004015b0
mov esi, eax
push 0x443130
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 6
call fcn.004015b0
push esi
push eax
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 7
push eax
call fcn.0041b223
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 8
push esi
push eax
lea ecx, [ebp - 0x34]
call fcn.0041b6c6
push esi
push 1
lea ecx, [ebp - 0x7c]
call fcn.00401ef4
push esi
push 1
lea ecx, [ebp - 0x64]
call fcn.00401ef4
push esi
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 1
call fcn.00401ef4
push dword [ebx + 0xc]
lea eax, [ebp - 0x1c]
push 0x43b72c
push 0xffffffffffffffff
push eax
call fcn.00402b8e
add esp, 0x10
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x4c]
push eax
call fcn.004015b0
mov esi, eax
push 0x443130
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 9
call fcn.004015b0
push esi
push eax
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x7c]
push eax
call fcn.0041b223
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 0xb
push esi
push eax
lea ecx, [ebp - 0x34]
call fcn.0041b6c6
push esi
push 1
lea ecx, [ebp - 0x7c]
call fcn.00401ef4
push esi
push 1
lea ecx, [ebp - 0x64]
call fcn.00401ef4
push esi
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 1
call fcn.00401ef4
lea eax, [ebp - 0x34]
cmp edi, eax
je 0x41b6a5
push 0xffffffffffffffff
push esi
push eax
mov ecx, edi
call fcn.00401f96
push dword [ebp - 0x94]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
push 1
lea ecx, [ebp - 0x34]
call fcn.00401ef4
mov eax, ebx
call fcn.00423b1e
ret 8