Function at 0x14001d540
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x14017a390]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14, rcx
test rcx, rcx
jne 0x14001d575
xor al, al
jmp 0x14001d87a
xor r15d, r15d
mov qword [rbp - 1], r15
mov qword [rbp + 0xf], r15
mov qword [rbp + 0x17], 7
mov word [rbp - 1], r15w
mov r8, qword [rdx + 0x10]
test r8, r8
jne 0x14001d89d
lea rcx, [rbp - 1]
call fcn.140003af0
test al, al
je 0x14001d835
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
lea r8d, [r15 + 7]
lea rdx, str.Safepay
lea rcx, [rbp - 0x49]
call fcn.1400021f0
nop
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], 7
mov word [rbp - 0x21], r15w
lea r8, [rbp - 0x49]
lea rdx, [rbp - 1]
lea rcx, [rbp - 0x21]
call fcn.140003940
test al, al
jne 0x14001d643
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14001d63f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d63a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dacd
call fcn.1400f35f0
xor bl, bl
jmp 0x14001d6a7
lea rdx, [rbp - 0x21]
cmp qword [rbp - 9], 8
cmovae rdx, qword [rbp - 0x21]
mov r8, qword [rbp - 0x11]
lea rcx, [rbp - 1]
call fcn.1400021f0
cmp qword [rbp + 0xf], 0
setne bl
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14001d6a7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d6a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dacd
call fcn.1400f35f0
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14001d6e7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d6e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dad3
call fcn.1400f35f0
test bl, bl
je 0x14001d835
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov r8d, 0xa
lea rdx, str.libcef.dll
lea rcx, [rbp - 0x49]
call fcn.1400021f0
nop
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], 7
mov word [rbp - 0x21], r15w
lea r8, [rbp - 0x49]
lea rdx, [rbp - 1]
lea rcx, [rbp - 0x21]
call fcn.140003940
test al, al
jne 0x14001d789
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14001d785
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d780
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dad9
call fcn.1400f35f0
xor bl, bl
jmp 0x14001d7ed
lea rdx, [rbp - 0x21]
cmp qword [rbp - 9], 8
cmovae rdx, qword [rbp - 0x21]
mov r8, qword [rbp - 0x11]
lea rcx, [rbp - 1]
call fcn.1400021f0
cmp qword [rbp + 0xf], 0
setne bl
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14001d7ed
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d7e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dad9
call fcn.1400f35f0
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14001d82d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d828
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dadf
call fcn.1400f35f0
test bl, bl
jne 0x14001d9ff
xor bl, bl
mov rdx, qword [rbp + 0x17]
cmp rdx, 8
jb 0x14001d877
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d872
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dae5
call fcn.1400f35f0
movzx eax, bl
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400f2e00
mov rbx, qword [rsp + 0xe0]
add rsp, 0xa0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
lea rax, [rbp - 1]
cmp rax, rdx
je 0x14001d8b9
cmp qword [rdx + 0x18], 8
jb 0x14001d8b0
mov rdx, qword [rdx]
lea rcx, [rbp - 1]
call fcn.1400021f0
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], r15w
mov r8d, 0xa
lea rdx, str.libcef.dll
lea rcx, [rbp - 0x49]
call fcn.1400021f0
nop
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], 7
mov word [rbp - 0x21], r15w
lea r8, [rbp - 0x49]
lea rdx, [rbp - 1]
lea rcx, [rbp - 0x21]
call fcn.140003940
test al, al
jne 0x14001d953
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14001d94f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d94a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001daeb
call fcn.1400f35f0
xor bl, bl
jmp 0x14001d9b7
lea rdx, [rbp - 0x21]
cmp qword [rbp - 9], 8
cmovae rdx, qword [rbp - 0x21]
mov r8, qword [rbp - 0x11]
lea rcx, [rbp - 1]
call fcn.1400021f0
cmp qword [rbp + 0xf], 0
setne bl
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14001d9b7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d9b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001daeb
call fcn.1400f35f0
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14001d9f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d9f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dac7
call fcn.1400f35f0
test bl, bl
je 0x14001d835
cmp qword [rbp + 0xf], 0
je 0x14001d835
mov dword [rbp + 0x23], r15d
lea rcx, [rbp - 1]
cmp qword [rbp + 0x17], 8
cmovae rcx, qword [rbp - 1]
lea rdx, [rbp + 0x23]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov ebx, eax
test eax, eax
je 0x14001d835
mov ecx, ebx
call fcn.1400f3640
mov rdi, rax
test rax, rax
je 0x14001dab8
mov r8d, ebx
xor edx, edx
mov rcx, rax
call fcn.1400f5c20
lea rcx, [rbp - 1]
cmp qword [rbp + 0x17], 8
cmovae rcx, qword [rbp - 1]
mov r9, rdi
mov r8d, ebx
xor edx, edx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x14001dab8
mov qword [rbp - 0x29], r15
mov dword [rbp + 0x1f], r15d
lea r9, [rbp + 0x1f]
lea r8, [rbp - 0x29]
lea rdx, [0x140148078]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x14001dab8
cmp dword [rbp + 0x1f], 0
je 0x14001dab8
mov rax, qword [rbp - 0x29]
cmp dword [rax], 0xfeef04bd
jne 0x14001dab8
movzx eax, word [rax + 0xa]
mov dword [r14], eax
mov bl, 1
mov rcx, rdi
call fcn.1400f35f0
jmp 0x14001d837
xor bl, bl
mov rcx, rdi
call fcn.1400f35f0
jmp 0x14001d837
call fcn.1400f9bf0
nop
call fcn.1400f9bf0
nop
call fcn.1400f9bf0
nop
call fcn.1400f9bf0
nop
call fcn.1400f9bf0
nop
call fcn.1400f9bf0
nop
call fcn.1400f9bf0
int3