Function at 0x485d92
Capabilities:
Get file version info

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xa0
mov edi, ecx
push edx
push 0
push 0x410
call sub.kernel32.dll_OpenProcess
xor ebx, ebx
test eax, eax
je 0x485e23
xor edx, edx
mov ecx, 0x104
mov esi, eax
mov dword [esp + 4], edi
inc edx
call fcn.00617f78
mov ebp, eax
mov ebx, edx
push 0x104
push eax
push 0
push esi
call sub.PSAPI.DLL_GetModuleFileNameExW
mov edi, eax
push esi
call dword [sym.imp.kernel32.dll_CloseHandle]
test edi, edi
je 0x485e29
cmp edi, 0x105
mov dword [esp], ebx
jae 0x486185
lea ebx, [esp + 0x1c]
mov edx, ebp
mov ecx, ebx
push edi
call fcn.005a83c0
add esp, 4
mov esi, dword [ebx]
lea edi, [esp + 0x70]
mov ecx, edi
mov edx, esi
push dword [ebx + 8]
call fcn.005bc760
add esp, 4
mov eax, dword [edi]
test eax, eax
mov dword [esp + 8], eax
je 0x485e4c
mov eax, dword [esp + 0x74]
mov edi, dword [esp + 0x78]
mov dword [esp + 0xc], eax
jmp 0x485e6e
xor ebp, ebp
xor esi, esi
jmp 0x485e46
test ebx, ebx
je 0x485e3c
push ebp
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
mov edi, dword [esp + 4]
xor esi, esi
xor ebp, ebp
xor ebx, ebx
inc ebp
jmp 0x48616b
mov edi, dword [esp + 0x78]
mov ebx, dword [esp + 0x74]
mov ecx, edi
call fcn.0059c336
mov dword [esp + 0xc], edx
push edi
push ebx
mov dword [esp + 0x10], eax
push eax
call fcn.0064a810
add esp, 0xc
cmp dword [esp + 0x20], 0
mov ebx, dword [esp]
je 0x485e87
push esi
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
test ebx, ebx
je 0x485e9a
push ebp
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
mov edx, dword [esp + 8]
lea esi, [esp + 0x90]
mov ecx, esi
push edi
call fcn.005b23e0
add esp, 4
mov ecx, dword [esi]
mov edx, dword [esi + 8]
call fcn.005afc50
mov esi, edx
test eax, eax
mov edx, 0x7f59e0
lea edi, [esp + 0x1c]
cmove esi, eax
cmovne edx, eax
mov ecx, edi
push esi
call fcn.005bc760
add esp, 4
cmp dword [edi], 0
je 0x485ef3
mov eax, dword [esp + 0x24]
movsd xmm0, qword [esp + 0x1c]
mov dword [esp + 0x18], eax
movsd qword [esp + 0x10], xmm0
jmp 0x485f1d
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x20]
mov ecx, esi
call fcn.0059c336
mov edi, eax
mov ebx, edx
push esi
push ebp
push eax
call fcn.0064a810
add esp, 0xc
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], esi
lea esi, [esp + 0x10]
mov edx, str.Qt5Core.dllzapi_get_processes_by_namezapi_get_process_window_datazapi_get_processeszapi_maximize_windowzapi_move_deps_fileszapi_get_file_adler32_checksumzapi_start_processzapi_process_open_handlezapi_process_close_handlezapi_process_read_stringzapi_client_qt_version
mov ecx, esi
push 0xc
call fcn.0060c14c
add esp, 4
mov eax, dword [esi]
mov ecx, dword [esi + 8]
lea edx, [esp + 0x1c]
lea esi, [esp + 0x48]
mov dword [edx], 1
add ecx, eax
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
mov ecx, esi
mov word [edx + 0xc], 0
call fcn.005c1880
mov edi, dword [esi]
push 0
push edi
call sub.version.dll_GetFileVersionInfoSizeW
test eax, eax
je 0x4860f6
xor edx, edx
mov ecx, eax
mov esi, eax
inc edx
call fcn.004a2669
mov ebp, eax
mov ebx, edx
push eax
push esi
push 0
push edi
call sub.version.dll_GetFileVersionInfoW
test eax, eax
je 0x4860e3
mov dword [esp], ebx
lea ebx, [esp + 0x1c]
mov eax, str._assertion_failed:_subclass_result.as_bool__DK
lea ecx, [0x7c4455]
lea esi, [esp + 0x60]
mov dword [ebx], 1
mov dword [ebx + 4], eax
mov dword [ebx + 8], ecx
mov ecx, esi
mov edx, ebx
mov word [ebx + 0xc], 0
call fcn.005c1880
mov esi, dword [esi]
lea edx, [esp + 0x6c]
xor eax, eax
lea ecx, [esp + 0x3c]
mov dword [ecx], eax
mov dword [edx], eax
push edx
push ecx
push esi
push ebp
call sub.version.dll_VerQueryValueW
test eax, eax
je 0x4860ca
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x40]
mov edx, dword [ecx + 8]
mov edi, edx
shr edi, 0x10
mov dword [eax], edi
mov edi, 0xffff
lea eax, [esp + 0x44]
and edx, edi
mov dword [eax], edx
lea eax, [esp + 0x88]
mov ecx, dword [ecx + 0xc]
mov edx, ecx
and ecx, edi
lea edi, [esp + 0x44]
shr edx, 0x10
mov dword [eax], edx
lea edx, [esp + 0x8c]
mov dword [edx], ecx
lea ecx, [esp + 0x40]
mov dword [esp + 0x1c], ecx
mov ecx, fcn.004a3a90
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], ecx
lea edx, [esp + 0x70]
lea ecx, [esp + 0x54]
mov eax, 4
mov dword [edx], 0x71786c
mov dword [edx + 4], eax
mov dword [edx + 0x10], 0
mov dword [edx + 8], ebx
mov dword [edx + 0xc], eax
call fcn.00499020
cmp dword [esp + 0x64], 0
je 0x486086
push esi
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp], 0
mov edi, dword [esp + 4]
je 0x48609f
push ebp
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x4c], 0
je 0x4860b8
push dword [esp + 0x48]
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ebp, dword [esp + 0x54]
test ebp, ebp
je 0x486113
mov esi, dword [esp + 0x58]
mov ebx, dword [esp + 0x5c]
jmp 0x48611a
cmp dword [esp + 0x64], 0
je 0x4860e0
push esi
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ebx, dword [esp]
test ebx, ebx
je 0x4860f6
push ebp
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x4c], 0
je 0x48610f
push dword [esp + 0x48]
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
mov edi, dword [esp + 4]
xor ebx, ebx
xor esi, esi
xor ebp, ebp
inc ebp
cmp dword [esp + 0x14], 0
je 0x486133
push dword [esp + 0x10]
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x94], 0
je 0x486152
push dword [esp + 0x90]
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0xc], 0
je 0x48616b
push dword [esp + 8]
push 0
push dword [0x8032a8]
call dword [sym.imp.kernel32.dll_HeapFree]
mov dword [edi + 4], ebp
mov dword [edi + 8], esi
mov dword [edi + 0xc], ebx
mov dword [edi], 0
add esp, 0xa0
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, edi
mov edx, 0x104
push 0x670b58
call fcn.00652260
add esp, 4
ud2