Function at 0x4520e9
Capabilities:
Get file version info

Disassembly:
push 0x854
mov eax, 0x4a2722
call fcn.0045cd4f
mov esi, edx
mov ebx, ecx
mov dword [ebp - 0x83c], ebx
push 0x208
lea eax, [ebp - 0x820]
push eax
push dword [esi + 4]
push dword [esi]
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExW]
test eax, eax
je 0x4525ee
push 0xfde9
push 0xffffffffffffffff
lea edx, [ebp - 0x820]
lea ecx, [ebp - 0x28]
call fcn.0041a8aa
pop ecx
pop ecx
mov edx, 0x4bdaa8
mov ecx, ebx
call fcn.00415f57
lea edx, [ebp - 0x28]
mov ecx, eax
call fcn.0041c6a9
mov edi, 0x4bc964
mov ecx, eax
mov edx, edi
call fcn.00415f57
lea ecx, [ebp - 0x28]
call fcn.004134bc
push 0xc
lea eax, [ebp - 0x860]
push eax
push dword [esi + 4]
push dword [esi]
call dword [sym.imp.PSAPI.DLL_GetModuleInformation]
test eax, eax
je 0x4521e7
mov eax, dword [ebp - 0x85c]
mov edx, str.___________Image_Base:_______0x
push 8
pop ecx
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x840], ecx
mov dword [ebp - 0x848], ecx
mov ecx, ebx
mov dword [ebp - 0x84c], eax
call fcn.00415f57
lea edx, [ebp - 0x84c]
mov ecx, eax
call fcn.00452770
mov edx, edi
mov ecx, eax
call fcn.00415f57
mov edx, str.___________Image_Size:_______0x
mov ecx, eax
call fcn.00415f57
lea edx, [ebp - 0x844]
mov ecx, eax
call fcn.00452770
mov edx, edi
mov ecx, eax
call fcn.00415f57
lea eax, [ebp - 0x850]
push eax
lea eax, [ebp - 0x820]
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov edi, eax
test edi, edi
je 0x4525ee
lea eax, [edi + 1]
push eax
call fcn.0045c5fc
pop ecx
mov esi, eax
lea eax, [ebp - 0x820]
push esi
push edi
push dword [ebp - 0x850]
mov dword [ebp - 0x838], esi
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoW]
xor eax, eax
mov dword [ebp - 0x830], eax
lea eax, [ebp - 0x834]
push eax
lea eax, [ebp - 0x830]
push eax
push 0x4b894c
push esi
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x452401
mov eax, dword [ebp - 0x830]
mov edx, str.___________File_Version:
mov ecx, ebx
movzx edi, word [eax + 0xa]
call fcn.00415f57
push 0xa
push 0x20
pop ebx
mov esi, eax
lea eax, [ebp - 0x70]
push ebx
push eax
push edi
call fcn.00462229
lea edx, [ebp - 0x70]
mov ecx, esi
call fcn.00415f57
mov ecx, eax
mov dl, 0x2e
mov eax, dword [ebp - 0x830]
movzx edi, word [eax + 8]
call fcn.0041cf6b
push 0xa
mov esi, eax
lea eax, [ebp - 0x50]
push ebx
push eax
push edi
call fcn.00462229
lea edx, [ebp - 0x50]
mov ecx, esi
call fcn.00415f57
mov ecx, eax
mov dl, 0x2e
mov eax, dword [ebp - 0x830]
movzx edi, word [eax + 0xe]
call fcn.0041cf6b
push 0xa
mov esi, eax
lea eax, [ebp - 0x30]
push ebx
push eax
push edi
call fcn.00462229
lea edx, [ebp - 0x30]
mov ecx, esi
call fcn.00415f57
mov ecx, eax
mov dl, 0x2e
mov eax, dword [ebp - 0x830]
movzx edi, word [eax + 0xc]
call fcn.0041cf6b
push 0xa
mov esi, eax
lea eax, [ebp - 0x90]
push ebx
push eax
push edi
call fcn.00462229
add esp, 0x40
lea edx, [ebp - 0x90]
mov ecx, esi
call fcn.00415f57
mov ecx, eax
mov edx, 0x4bc964
mov eax, dword [ebp - 0x830]
movzx edi, word [eax + 0x12]
call fcn.00415f57
mov edx, str.___________Product_Version:
mov ecx, eax
call fcn.00415f57
push 0xa
mov esi, eax
lea eax, [ebp - 0xb0]
push ebx
push eax
push edi
call fcn.00462229
lea edx, [ebp - 0xb0]
mov ecx, esi
call fcn.00415f57
mov ecx, eax
mov dl, 0x2e
mov eax, dword [ebp - 0x830]
movzx edi, word [eax + 0x10]
call fcn.0041cf6b
push 0xa
mov esi, eax
lea eax, [ebp - 0xd0]
push ebx
push eax
push edi
call fcn.00462229
lea edx, [ebp - 0xd0]
mov ecx, esi
call fcn.00415f57
mov ecx, eax
mov dl, 0x2e
mov eax, dword [ebp - 0x830]
movzx edi, word [eax + 0x16]
call fcn.0041cf6b
push 0xa
mov esi, eax
lea eax, [ebp - 0xf0]
push ebx
push eax
push edi
call fcn.00462229
lea edx, [ebp - 0xf0]
mov ecx, esi
call fcn.00415f57
mov ecx, eax
mov dl, 0x2e
mov eax, dword [ebp - 0x830]
movzx edi, word [eax + 0x14]
call fcn.0041cf6b
push 0xa
mov esi, eax
lea eax, [ebp - 0x110]
push ebx
push eax
push edi
call fcn.00462229
add esp, 0x40
lea edx, [ebp - 0x110]
mov ecx, esi
call fcn.00415f57
mov edx, 0x4bc964
mov ecx, eax
call fcn.00415f57
mov esi, dword [ebp - 0x838]
xor ecx, ecx
mov dword [ebp - 0x82c], 0x4bdb78
mov dword [ebp - 0x828], 0x4bdb58
mov ebx, ecx
mov dword [ebp - 0x824], 0x4bdba4
mov dword [ebp - 0x1c], str.Company:
mov dword [ebp - 0x18], str.File_Description:
mov dword [ebp - 0x14], str.Product_Name:
lea eax, [ebp - 0x834]
push eax
lea eax, [ebp - 0x854]
push eax
push str.VarFileInfoTranslation
push esi
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x4525dc
mov ecx, dword [ebp - 0x854]
push dword [ebp + ebx - 0x82c]
movzx eax, word [ecx + 2]
push eax
movzx eax, word [ecx]
push eax
lea eax, [ebp - 0x210]
push str.StringFileInfo_04x_04x_s
push eax
call fcn.00443049
add esp, 0x14
lea eax, [ebp - 0x834]
push eax
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x210]
push eax
push esi
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x4525dc
mov edi, dword [ebp - 0x840]
lea ecx, [ebp - 0x48]
call fcn.0041325f
xor eax, eax
mov dword [ebp - 4], eax
test edi, edi
je 0x45258b
cmp word [edi], ax
je 0x45258b
push 0x200
push eax
lea eax, [ebp - 0x410]
push eax
call fcn.0045e560
add esp, 0xc
lea eax, [ebp - 0x410]
xor ecx, ecx
push ecx
push ecx
push 0x1ff
push eax
push 0xffffffffffffffff
push edi
push ecx
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jle 0x452529
cmp eax, 0x200
jae 0x4525f6
xor ecx, ecx
mov byte [ebp + eax - 0x410], cl
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x48]
call fcn.00413f2e
jmp 0x45258b
xor eax, eax
push eax
push eax
push eax
push eax
push 0xffffffffffffffff
push edi
push eax
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea esi, [eax + 1]
lea eax, [esi + 1]
push eax
call fcn.0045c5fc
pop ecx
mov dword [ebp - 0x848], eax
xor eax, eax
push eax
push eax
push esi
mov esi, dword [ebp - 0x848]
push esi
push 0xffffffffffffffff
push edi
push eax
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
mov byte [eax + esi], cl
test eax, eax
jle 0x45257e
push esi
lea ecx, [ebp - 0x48]
call fcn.00413f2e
push esi
call fcn.0045c850
mov esi, dword [ebp - 0x838]
pop ecx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x68]
call fcn.00415fd9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.004134bc
mov ecx, dword [ebp - 0x83c]
mov edx, 0x4bdc54
call fcn.00415f57
mov edx, dword [ebp + ebx - 0x1c]
mov ecx, eax
call fcn.00415f57
lea edx, [ebp - 0x68]
mov ecx, eax
call fcn.0041c6a9
mov edx, 0x4bc964
mov ecx, eax
call fcn.00415f57
lea ecx, [ebp - 0x68]
call fcn.004134bc
add ebx, 4
cmp ebx, 0xc
jb 0x452438
mov ebx, dword [ebp - 0x83c]
mov eax, ebx
call fcn.0045ccf9
ret
call fcn.0045c976
int3