Function at 0x43c480
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d8d00
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0xc4b4
call fcn.004d4ce0
push ebx
push esi
push edi
xor ebx, ebx
mov ecx, 0x411
xor eax, eax
lea edi, [ebp - 0x24c2]
mov word [ebp - 0x24c4], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, dword [ebp + 0xc]
mov ecx, 0x411
xor eax, eax
lea edi, [ebp - 0x147a]
mov word [ebp - 0x147c], bx
cmp esi, ebx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
stosw word es:[edi], ax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], ebx
je 0x43c6ea
push 0x3a
push esi
call dword [sym.imp.MSVCRT.dll_wcschr]
add esp, 8
cmp eax, ebx
je 0x43c51f
cmp word [eax + 2], 0x2f
je 0x43c51f
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x20]
push eax
push ecx
call dword [sym.imp.ole32.dll_StringFromCLSID]
cmp eax, ebx
jne 0x43c6ea
cmp dword [ebp - 0x20], ebx
je 0x43c6ea
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x432]
mov word [ebp - 0x434], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x22a]
mov word [ebp - 0x22c], bx
rep stosd dword es:[edi], eax
push 0x824
lea edx, [ebp - 0x24c4]
push esi
push edx
stosw word es:[edi], ax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
lea eax, [ebp - 0x24c4]
mov cx, word [eax]
cmp cx, bx
je 0x43c59a
cmp cx, 0x23
je 0x43c59a
add eax, 2
jmp 0x43c587
cmp word [eax], 0x23
jne 0x43c619
mov word [eax], bx
add eax, 2
mov edi, eax
mov cx, word [eax]
cmp cx, bx
je 0x43c5bb
cmp cx, 0x3d
je 0x43c5bb
add eax, 2
jmp 0x43c5a8
cmp word [eax], bx
je 0x43c619
mov word [eax], bx
add eax, 2
push eax
push 0x4ed128
lea eax, [ebp - 0x147c]
push 0x824
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
mov esi, dword [sym.imp.MSVCRT.dll__wcsicmp]
push str.version
push edi
call esi
add esp, 0x18
test eax, eax
je 0x43c602
push str.exactversion
push edi
call esi
add esp, 8
test eax, eax
jne 0x43c619
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x147c]
push edx
push eax
call fcn.00435b70
add esp, 0xc
mov edx, dword [ebp - 0x20]
lea ecx, [ebp - 0x434]
push 0x103
push ecx
push edx
call fcn.00435f20
add esp, 0xc
cmp eax, ebx
je 0x43c6d9
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
add ecx, eax
test ecx, ecx
jbe 0x43c6e0
lea edx, [ebp - 0x22c]
push 0x103
lea eax, [ebp - 0x434]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
lea ecx, [ebp + 8]
lea edx, [ebp - 0x22c]
push ecx
push edx
mov dword [ebp + 0xc], ebx
call sub.VERSION.dll_GetFileVersionInfoSizeW
cmp eax, 0xa000
mov dword [ebp - 0x24], eax
ja 0x43c6d9
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0xc4c4]
push eax
push 0xa000
lea edx, [ebp - 0x22c]
push ecx
push edx
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x43c6d9
lea eax, [ebp - 0x24]
lea ecx, [ebp + 0xc]
push eax
push ecx
lea edx, [ebp - 0xc4c4]
push 0x4ef314
push edx
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x43c6d9
mov edx, dword [ebp + 0xc]
cmp edx, ebx
je 0x43c6d9
mov eax, dword [edx + 8]
mov ecx, dword [ebp - 0x18]
cmp eax, ecx
jb 0x43c6d9
jne 0x43c6e0
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x1c]
cmp eax, ecx
jae 0x43c6e0
mov dword [ebp - 0x14], 1
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret