Function at 0x102ec42
Capabilities:
Get file version info

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xe4
mov eax, dword [0x103f058]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor esi, esi
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
cmp edi, esi
je 0x102ef11
cmp eax, esi
je 0x102ef11
cmp ecx, esi
je 0x102ef11
lea eax, [ebp - 0xd4]
push eax
push edi
mov dword [ebp - 0xd4], esi
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov ebx, eax
cmp ebx, esi
jne 0x102ee8a
push edi
call fcn.0102e8b9
test eax, eax
jne 0x102ecba
mov eax, 0x80070002
jmp 0x102ef16
push esi
push 0x80
push 3
push esi
push 1
push esi
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xc8], eax
cmp eax, 0xffffffff
je 0x102ef11
lea ecx, [ebp - 0xdc]
push ecx
push esi
push esi
push eax
mov dword [ebp - 0xc4], 0x80004005
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x102ee73
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x102ee73
push 0xac
lea eax, [ebp - 0xb0]
push esi
push eax
call sub.msvcrt.dll_memset
movzx eax, word [ebp - 0xc0]
mov edi, dword [ebp - 0xd0]
movzx ecx, word [ebp - 0xba]
mov ebx, dword [ebp - 0xcc]
mov dword [edi], eax
movzx eax, word [ebp - 0xbe]
shl eax, 0x10
or eax, ecx
mov dword [ebx], eax
add esp, 0xc
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0xc4], esi
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
cmp eax, 0xffffffff
je 0x102ee73
mov ecx, dword [ebp - 0xb0]
cmp ecx, esi
jle 0x102ed84
movzx eax, cx
jmp 0x102ed8b
mov eax, ecx
neg eax
movzx eax, ax
movzx eax, ax
cdq
push 0x3c
pop esi
idiv esi
cmp ecx, 1
movzx eax, ax
jge 0x102eda5
add word [ebp - 0xb8], ax
jmp 0x102edc9
cmp word [ebp - 0xb8], ax
jae 0x102edc2
mov ecx, 0xffff
add word [ebp - 0xba], cx
add word [ebp - 0xb8], 0x18
sub word [ebp - 0xb8], ax
cmp word [ebp - 0xb8], 0x17
jbe 0x102ee19
mov eax, 0xffe8
add word [ebp - 0xb8], ax
inc word [ebp - 0xba]
cmp word [ebp - 0xba], 0x20
jne 0x102ee19
xor eax, eax
inc eax
inc word [ebp - 0xbe]
cmp word [ebp - 0xbe], 0xd
mov word [ebp - 0xba], ax
jne 0x102ee19
inc word [ebp - 0xc0]
mov word [ebp - 0xbe], ax
fldz
lea eax, [ebp - 0xe4]
push eax
fstp qword [ebp - 0xe4]
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToSystemTime]
test eax, eax
je 0x102ee73
fld qword [ebp - 0xe4]
lea eax, [ebp - 0xc0]
push eax
push ecx
push ecx
fstp qword [esp]
call dword [sym.imp.OLEAUT32.dll_UnRegisterTypeLib]
test eax, eax
je 0x102ee73
movzx eax, word [ebp - 0xc0]
movzx ecx, word [ebp - 0xba]
mov dword [edi], eax
movzx eax, word [ebp - 0xbe]
shl eax, 0x10
or eax, ecx
mov dword [ebx], eax
push dword [ebp - 0xc8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xc4]
jmp 0x102ef16
push ebx
call sub.msvcrt.dll_void____cdecl_operator_new___unsigned_int_
pop ecx
mov dword [ebp - 0xc4], eax
cmp eax, esi
jne 0x102eea2
mov eax, 0x8007000e
jmp 0x102ef16
push eax
push ebx
push esi
push edi
mov dword [ebp - 0xc8], 0x80004005
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x102eefd
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0x1004e20
push dword [ebp - 0xc4]
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x102eefd
mov eax, dword [ebp - 0xd8]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0xd0]
mov dword [edx], ecx
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xcc]
mov dword [ecx], eax
mov dword [ebp - 0xc8], esi
push dword [ebp - 0xc4]
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
mov eax, dword [ebp - 0xc8]
pop ecx
jmp 0x102ef16
mov eax, 0x80004005
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0102df7d
leave
ret 0xc