Function at 0x140029f88
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r15
lea rbp, [rsp - 0x270]
sub rsp, 0x370
mov rax, qword [0x140050240]
xor rax, rsp
mov qword [rbp + 0x260], rax
mov r12, r9
mov rsi, r8
mov rbx, rdx
mov r15, rcx
xor edi, edi
lea rdx, [0x14003a094]
call fcn.1400031d4
mov r8b, byte [rbp + 0x2c8]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140029b74
test al, al
je 0x14002a1c3
cmp qword [rsp + 0x20], rdi
je 0x14002a1c3
mov r9, qword [rsp + 0x20]
mov r8, rsi
mov ebx, 0x104
mov edx, ebx
lea rcx, [rbp + 0x50]
call fcn.140029d98
test al, al
je 0x14002a1b8
cmp word [rbp + 0x50], di
je 0x14002a1b8
lea rcx, [rbp + 0x50]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x14002a1b8
mov r8, r12
mov edx, ebx
lea rcx, [rbp + 0x50]
call fcn.140014254
test eax, eax
js 0x14002a1b8
xor edx, edx
lea rcx, [rbp + 0x50]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov esi, eax
test eax, eax
je 0x14002a1b8
mov ecx, esi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x14002a1b8
mov r9, rax
mov r8d, esi
xor edx, edx
lea rcx, [rbp + 0x50]
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x14002a1af
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x48]
lea rdx, [0x140042578]
mov rcx, rbx
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14002a1af
xor edx, edx
mov r8d, 0xe8
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memset
lea edx, [rdi + 1]
lea rcx, [rsp + 0x60]
call fcn.140006ce8
nop
mov rax, qword [rsp + 0x48]
movzx edx, word [rax + 0xa]
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_short_int____ptr64]
lea rsi, [0x14003a20c]
mov rdx, rsi
lea rcx, [rsp + 0x60]
call fcn.1400051d4
mov rax, qword [rsp + 0x48]
movzx edx, word [rax + 8]
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_short_int____ptr64]
mov rdx, rsi
lea rcx, [rsp + 0x60]
call fcn.1400051d4
mov rax, qword [rsp + 0x48]
movzx edx, word [rax + 0xe]
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_short_int____ptr64]
mov rdx, rsi
lea rcx, [rsp + 0x60]
call fcn.1400051d4
mov rax, qword [rsp + 0x48]
movzx edx, word [rax + 0xc]
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_short_int____ptr64]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x68]
call fcn.140017168
lea rax, [rsp + 0x28]
cmp r15, rax
je 0x14002a18f
mov rcx, r15
call fcn.140003170
movups xmm0, xmmword [rsp + 0x28]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x38]
movups xmmword [r15 + 0x10], xmm1
movdqa xmm0, xmmword [0x140042580]
movdqu xmmword [rsp + 0x38], xmm0
mov word [rsp + 0x28], di
lea rcx, [rsp + 0x28]
call fcn.140003170
mov dil, 1
lea rcx, [rbp - 0x18]
call fcn.140007638
lea rcx, [rbp - 0x18]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov al, dil
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.140034370
mov rbx, qword [rsp + 0x3b8]
add rsp, 0x370
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret