Function at 0x736fc0
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xbc
mov ebx, dword [ebp + 8]
mov eax, dword [0x808040]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp byte [ebx + 0xb], 0
mov eax, ebx
jns 0x736fe3
mov eax, dword [ebx]
push 0
push eax
call sub.VERSION.dll_GetFileVersionInfoSizeW
test eax, eax
je 0x7371ad
mov edi, eax
push eax
call fcn.005c57f3
add esp, 4
mov esi, eax
cmp byte [ebx + 0xb], 0
mov eax, ebx
jns 0x73700a
mov eax, dword [ebx]
push esi
push edi
push 0
push eax
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x7370c3
xor eax, eax
dec eax
lea ecx, [ebp - 0xc0]
mov dword [ecx], eax
lea edx, [ebp - 0xc4]
mov dword [edx], eax
push edx
push ecx
push 0x77ac68
push esi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
setne bl
je 0x737073
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0xc0]
movups xmm0, xmmword [ecx]
movups xmm1, xmmword [ecx + 0x10]
movups xmmword [eax + 0x10], xmm1
mov edx, dword [ecx + 0x30]
mov dword [eax + 0x30], edx
movups xmm1, xmmword [ecx + 0x20]
movups xmmword [eax + 0x20], xmm1
movups xmmword [eax], xmm0
mov ecx, dword [eax + 0x18]
and dword [eax + 0x1c], ecx
jmp 0x737189
push 1
call fcn.0055f440
add esp, 4
test al, al
je 0x737189
call fcn.00642ea0
lea edi, [ebp - 0xb4]
mov ecx, edi
push eax
push 1
push 0x32
push str....._third_partycrashpadcrashpadutilwinmodule_version.cc
call fcn.00642eb0
lea eax, [ebp - 0xac]
push 0xd
push str.VerQueryValue
push eax
call fcn.00533f70
add esp, 0xc
mov ecx, edi
call fcn.00642f10
jmp 0x737189
push 1
call fcn.0055f440
add esp, 4
test al, al
je 0x737187
call fcn.00642ea0
lea ecx, [ebp - 0xb4]
push eax
push 1
push 0x28
push str....._third_partycrashpadcrashpadutilwinmodule_version.cc
call fcn.00642eb0
lea eax, [ebp - 0xac]
push 0x14
push str.GetFileVersionInfo:
push eax
call fcn.00533f70
add esp, 0xc
movsx ecx, byte [ebx + 0xb]
test ecx, ecx
jns 0x737112
mov ecx, dword [ebx + 4]
mov ebx, dword [ebx]
test ecx, ecx
js 0x737278
mov dword [ebp - 0xc8], eax
sete al
test ebx, ebx
setne dl
or dl, al
je 0x737278
lea edi, [ebp - 0xc0]
push ecx
push ebx
push edi
call fcn.005559f0
add esp, 0xc
movsx eax, byte [edi + 0xb]
test eax, eax
jns 0x737155
mov eax, dword [ebp - 0xbc]
mov edi, dword [ebp - 0xc0]
push eax
push edi
push dword [ebp - 0xc8]
call fcn.00533f70
add esp, 0xc
cmp byte [ebp - 0xb5], 0
jns 0x73717c
push dword [ebp - 0xc0]
call fcn.005c57c0
add esp, 4
lea ecx, [ebp - 0xb4]
call fcn.00642f10
xor ebx, ebx
test esi, esi
je 0x737196
push esi
call fcn.005c57fc
add esp, 4
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c6b46
mov eax, ebx
add esp, 0xbc
pop esi
pop edi
pop ebx
pop ebp
ret
push 1
call fcn.0055f440
add esp, 4
test al, al
je 0x737271
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x715
je 0x737271
call fcn.00642ea0
lea ecx, [ebp - 0xb4]
push eax
push 1
push 0x1e
push str....._third_partycrashpadcrashpadutilwinmodule_version.cc
call fcn.00642eb0
lea eax, [ebp - 0xac]
push 0x18
push str.GetFileVersionInfoSize:
push eax
call fcn.00533f70
add esp, 0xc
mov esi, eax
movsx eax, byte [ebx + 0xb]
test eax, eax
jns 0x73720f
mov eax, dword [ebx + 4]
mov ebx, dword [ebx]
test eax, eax
js 0x737278
sete cl
test ebx, ebx
setne dl
or dl, cl
je 0x737278
lea edi, [ebp - 0xc0]
push eax
push ebx
push edi
call fcn.005559f0
add esp, 0xc
movsx eax, byte [edi + 0xb]
test eax, eax
jns 0x737244
mov eax, dword [ebp - 0xbc]
mov edi, dword [ebp - 0xc0]
push eax
push edi
push esi
call fcn.00533f70
add esp, 0xc
cmp byte [ebp - 0xb5], 0
jns 0x737266
push dword [ebp - 0xc0]
call fcn.005c57c0
add esp, 4
lea ecx, [ebp - 0xb4]
call fcn.00642f10
xor ebx, ebx
jmp 0x737196
ud2