Function at 0x4113a0
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54581b
mov eax, dword fs:[0]
push eax
sub esp, 0x54c
mov eax, dword [0x5ec938]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
xor edi, edi
push 0xc6
mov ebx, ecx
lea edx, [ebp - 0xfe]
xor ecx, ecx
push edi
push edx
mov dword [ebp - 0x558], edi
mov dword [ebp - 0x548], edi
xor esi, esi
mov dword [ebp - 0x54c], edi
mov dword [ebp - 0x540], 1
mov dword [ebp - 0x544], edi
mov dword [ebp - 0x51c], edi
mov dword [ebp - 0x518], eax
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x510], eax
mov dword [ebp - 0x50c], eax
mov dword [ebp - 0x530], edi
mov dword [ebp - 0x52c], eax
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], eax
mov dword [ebp - 0x520], eax
mov word [ebp - 0x38], ax
mov dword [ebp - 0x36], eax
mov dword [ebp - 0x32], eax
mov dword [ebp - 0x2e], eax
mov dword [ebp - 0x2a], eax
mov dword [ebp - 0x26], eax
mov dword [ebp - 0x22], eax
mov dword [ebp - 0x1e], eax
mov dword [ebp - 0x1a], eax
mov dword [ebp - 0x16], eax
mov word [ebp - 0x12], ax
mov dword [ebp - 0x554], edi
mov dword [ebp - 0x538], edi
mov dword [ebp - 0x550], edi
mov word [ebp - 0x100], cx
call fcn.0052c850
push 0x206
lea ecx, [ebp - 0x506]
xor eax, eax
push edi
push ecx
mov word [ebp - 0x508], ax
call fcn.0052c850
push 0x1fe
lea eax, [ebp - 0x2fe]
xor edx, edx
push edi
push eax
mov word [ebp - 0x300], dx
call fcn.0052c850
add esp, 0x24
push 0x556794
lea ecx, [ebp - 0x534]
call fcn.00404fe0
mov ecx, ebx
mov dword [ebp - 4], edi
mov dword [ebp - 0x53c], edi
call fcn.004070a0
test eax, eax
je 0x411514
mov eax, dword [ebp - 0x534]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41150a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
jmp 0x411828
lea ecx, [ebp - 0x53c]
push ecx
lea edx, [ebp - 0x534]
push edx
mov ecx, ebx
call fcn.0040f5b0
test eax, eax
mov eax, dword [ebp - 0x534]
je 0x4114e7
cmp dword [eax - 0xc], edi
je 0x411807
mov edx, dword [ebx + 0x65c]
mov edx, dword [edx + 0x10]
lea eax, [ebp - 0x550]
push eax
lea ecx, [ebp - 0x538]
push ecx
add ebx, 0x65c
push str.TargetFileName
push str._target_file_startup_info_
mov ecx, ebx
call edx
test eax, eax
je 0x4115a1
mov eax, dword [ebp - 0x538]
cmp dword [eax], edi
jle 0x411593
mov eax, dword [eax + 0x290]
push eax
lea ecx, [ebp - 0x100]
push 0x64
push ecx
call fcn.0052cd4a
mov eax, dword [ebp - 0x538]
add esp, 0xc
cmp eax, edi
je 0x4115a1
mov edx, dword [ebx]
push eax
mov eax, dword [edx + 0x14]
mov ecx, ebx
call eax
mov edx, dword [ebx]
mov edx, dword [edx + 0x10]
lea eax, [ebp - 0x550]
push eax
lea ecx, [ebp - 0x538]
push ecx
push 0x558bb4
push str._target_file_startup_info_
mov ecx, ebx
call edx
test eax, eax
je 0x4115ff
mov eax, dword [ebp - 0x538]
cmp dword [eax], edi
jle 0x4115f1
mov eax, dword [eax + 0x290]
push eax
lea ecx, [ebp - 0x300]
push 0x100
push ecx
call fcn.0052cd4a
mov eax, dword [ebp - 0x538]
add esp, 0xc
cmp eax, edi
je 0x4115ff
mov edx, dword [ebx]
push eax
mov eax, dword [edx + 0x14]
mov ecx, ebx
call eax
cmp word [ebp - 0x100], di
je 0x411801
cmp word [ebp - 0x300], di
je 0x411801
lea ecx, [ebp - 0x100]
push ecx
lea ecx, [ebp - 0x534]
call fcn.004047e0
push eax
push str._s_s
lea edx, [ebp - 0x508]
push 0x104
push edx
call fcn.0052d99b
add esp, 0x14
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x508]
push ecx
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov dword [ebp - 0x53c], eax
cmp eax, edi
je 0x4116a6
push eax
push 1
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebx, eax
cmp ebx, edi
je 0x4116a6
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x54c]
push ebx
push edx
push eax
lea ecx, [ebp - 0x508]
push ecx
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
jne 0x4116b6
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea ecx, [ebp - 0x534]
call fcn.00402480
jmp 0x411826
lea edx, [ebp - 0x558]
push edx
lea eax, [ebp - 0x554]
push eax
push 0x558bb0
push ebx
call sub.VERSION.dll_VerQueryValueW
push ebx
push edi
test eax, eax
je 0x411699
mov eax, dword [ebp - 0x554]
movzx ecx, word [eax + 0xa]
movzx edx, word [eax + 8]
mov dword [ebp - 0x51c], ecx
movzx ecx, word [eax + 0xe]
mov dword [ebp - 0x518], edx
movzx edx, word [eax + 0xc]
mov dword [ebp - 0x514], ecx
mov dword [ebp - 0x510], edx
mov dword [ebp - 0x50c], edi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x411720
movzx eax, word [ebp + esi*2 - 0x300]
xor ecx, ecx
cmp eax, 0x2e
sete cl
xor edx, edx
cmp ax, di
sete dl
or ecx, edx
je 0x411784
mov ebx, dword [ebp - 0x548]
push esi
lea eax, [ebp + ebx*2 - 0x300]
push eax
lea ecx, [ebp - 0x38]
push 0x14
push ecx
call fcn.0052d9fb
lea edx, [ebp - 0x38]
push edx
call fcn.0052d9f0
mov ecx, dword [ebp - 0x544]
mov dword [ebp + ecx*4 - 0x530], eax
lea eax, [ebx + esi + 1]
add esp, 0x14
xor esi, esi
inc ecx
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x544], ecx
jmp 0x411785
inc esi
cmp dword [ebp - 0x544], 4
jb 0x411720
mov dword [ebp - 0x520], edi
xor eax, eax
jmp 0x4117a0
mov ecx, dword [ebp + eax - 0x51c]
mov edx, dword [ebp + eax - 0x530]
cmp ecx, edx
ja 0x4117cf
jb 0x4117ec
add eax, 4
cmp eax, 0x10
jl 0x4117a0
lea ecx, [ebp - 0x534]
call fcn.00402480
mov eax, dword [ebp - 0x540]
jmp 0x411828
lea ecx, [ebp - 0x534]
mov dword [ebp - 0x540], 1
call fcn.00402480
mov eax, dword [ebp - 0x540]
jmp 0x411828
lea ecx, [ebp - 0x534]
mov dword [ebp - 0x540], edi
call fcn.00402480
mov eax, edi
jmp 0x411828
mov eax, dword [ebp - 0x534]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov dword [ebp - 4], edx
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x411826
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0052c2ec
mov esp, ebp
pop ebp
ret