Function at 0x426be0
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x5ca598
push 0x543c90
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x5d7f50]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x250], eax
mov ebx, ecx
mov dword [ebp - 0x244], ebx
xor esi, esi
mov dword [ebp - 0x238], esi
mov ecx, dword [str.mshtml.dll]
mov dword [ebp - 0x28], ecx
mov edx, dword [0x5b153c]
mov dword [ebp - 0x24], edx
mov ax, word [0x5b1540]
mov word [ebp - 0x20], ax
mov cl, byte [0x5b1542]
mov byte [ebp - 0x1e], cl
xor edi, edi
mov dword [ebp - 0x248], esi
mov dword [ebp - 0x23c], esi
mov byte [ebp - 0x234], 0
push 0x208
push esi
lea edx, [ebp - 0x233]
push edx
call fcn.00543bb0
add esp, 0xc
test ebx, ebx
jne 0x426c8a
lea eax, [ebx + 0x57]
jmp 0x426e15
mov dword [ebp - 4], esi
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov ebx, eax
test ebx, ebx
jne 0x426cc0
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 0x28]
push edx
push 0x5b1544
push eax
push 2
push 0x627
jmp 0x426deb
push ebx
call fcn.0053e900
add esp, 4
mov dword [ebp - 0x23c], eax
test eax, eax
jne 0x426cf1
mov dword [ebp - 0x238], 8
push ebx
push 0x5b1208
push 8
push 2
push 0x62f
jmp 0x426df1
push eax
push ebx
mov eax, dword [ebp - 0x248]
push eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.VERSION.dll_GetFileVersionInfoA]
test eax, eax
je 0x426dd4
xor ebx, ebx
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x24c], ebx
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 0x240]
push eax
push 0x5ae6dc
mov ecx, dword [ebp - 0x23c]
push ecx
call dword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x426d54
cmp dword [ebp - 0x24c], ebx
je 0x426d54
mov eax, dword [ebp - 0x240]
movzx esi, word [eax + 0xa]
movzx edi, word [eax + 8]
push edi
push esi
push str.Internet_Explorer__d._d
push 0x208
lea edx, [ebp - 0x234]
push edx
call fcn.0053d88d
add esp, 0x14
mov edi, dword [ebp - 0x250]
cmp edi, ebx
je 0x426db7
mov eax, dword [ebp - 0x244]
mov edx, dword [eax]
cmp edx, ebx
jbe 0x426db7
lea eax, [ebp - 0x234]
lea esi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x426d90
sub eax, esi
lea ecx, [eax + 1]
cmp ecx, edx
jbe 0x426da4
mov eax, edx
jmp 0x426da5
inc eax
push eax
lea eax, [ebp - 0x234]
push eax
push edx
push edi
call fcn.005403b4
add esp, 0x10
lea eax, [ebp - 0x234]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x426dc0
sub eax, edx
inc eax
mov ecx, dword [ebp - 0x244]
mov dword [ecx], eax
jmp 0x426e03
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 0x28]
push edx
push 0x5b1570
push eax
push 2
push 0x642
mov dword [ebp - 0x238], eax
push str.YWAssistant.c
push str.B_GetVersion
call fcn.004282b0
add esp, 0x1c
mov dword [ebp - 4], 0xfffffffe
call fcn.00426e31
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0053c99c
mov esp, ebp
pop ebp
ret