format  pe gui 4.0
include 'win32ax.inc'

invoke GetFileVersionInfoA, lpszFilePath, 0, 1024, lpVersionInfo
invoke VerQueryValueA, buffer, "\\", lplpReturnVal, dwLength
mov [hfile],VS_FIXEDFILEINFO.dwFileVersionLS
invoke MessageBox, 0, [hfile], [hfile], MB_OK
invoke ExitProcess, 0

VS_FIXEDFILEINFO:
 .dwFileVersionLS dd ?

lpszFilePath      db 'C:\Windows\System32\ntoskrnl.exe',0
dwDummy       dd ?
lpVersionInfo    dd ?
buffer               db 256 dup(?)
lplpReturnVal    dd ?
dwLength         dd ?
hfile                dd ? 

section '.idata' import data readable
        library  kernel32,'kernel32.dll',\
                 version, 'version.dll'
         import  kernel32,\
                 ExitProcess,'ExitProcess',\
         import  version,\
                 GetFileVersionInfoA, 'GetFileVersionInfoA',\
                 VerQueryValueA, 'VerQueryValueA'
         import  user32,\
                 MessageBox,'MessageBoxA'    

    format PE gui 4.0
    entry start

    include "..\include\win32ax.inc"

section ".data" data readable writeable

    lptstrFilename db "C:\Windows\System32\ntoskrnl.exe",0
    lpData dd 0
    BufLen dd 0
    dwLen dd 0
    dwHandle dd 0
    pFileInfo dd 0
    lpBuffer rb 256

section ".code" code readable executable
start:

    invoke GetFileVersionInfoSize, lptstrFilename, dwHandle
    .if eax = 0
        ; handle error
        jmp .exit
    .endif

    mov [dwLen], eax

    invoke LocalAlloc, LPTR, eax  ; use HeapAlloc instead
    .if eax = 0
        ; handle error
        jmp .exit
    .endif

    mov [lpData], eax

    invoke GetFileVersionInfo, lptstrFilename, [dwHandle], [dwLen], [lpData]
    .if eax = 0
        invoke GetLastError
        ; handle error
        ; free lpData
        jmp .exit
    .endif

    invoke VerQueryValue, [lpData], "\\", pFileInfo, BufLen
    .if eax = 0
        ; handle error
        ; free lpData
        jmp .exit
    .endif

    mov esi, [pFileInfo]  ; VS_FIXEDFILEINFO ptr (FAR* FAR*)

    mov eax, [esi+2*4]  ; dwFileVersionMS
    mov ebx, eax
    and ebx, 0xFFFF  ; Minor Version
    shr eax, 16
    and eax, 0xFFFF  ; Major Version

    mov ecx, [esi+3*4]  ; dwFileVersionLS
    mov edx, ecx
    and edx, 0xFFFF  ; Revision Number
    shr ecx, 16
    and ecx, 0xFFFF  ; Build Number

    ; Output: major.minor.build.revision
    cinvoke wsprintf, lpBuffer, <"File Version: %d.%d.%d.%d">, eax, ebx, ecx, edx
    invoke MessageBox, 0, lpBuffer, lptstrFilename, MB_OK
    invoke LocalFree, [lpData]

    .exit: invoke ExitProcess, 0


section ".idata" import data readable writeable

    library kernel32,"kernel32.dll", user32,"user32.dll", version,"version.dll"

    include "..\include\api\kernel32.inc"
    include "..\include\api\user32.inc"
    include "..\include\api\version.inc"