Function at 0x140030cb0
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x1400950a0]
xor rax, rsp
mov qword [rbp + 0x50], rax
movzx r14d, r9b
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x68], rdx
xor r13d, r13d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x50], r13d
mov dword [rsp + 0x44], r13d
mov qword [rsp + 0x48], r13
mov rcx, rdx
cmp qword [rdx + 0x18], 0x10
jb 0x140030d12
mov rcx, qword [rdx]
lea rdx, [rsp + 0x50]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov esi, eax
mov qword [rdi], r13
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
xor r8d, r8d
lea rdx, [0x14008008b]
mov rcx, rdi
call fcn.140007e50
mov r15d, 1
mov dword [rsp + 0x40], r15d
test esi, esi
je 0x140031240
mov ecx, esi
call fcn.14003ea1c
mov r12, rax
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140030d6d
mov rcx, qword [rbx]
mov r9, r12
mov r8d, esi
mov edx, dword [rsp + 0x50]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoA]
test eax, eax
je 0x140031238
lea r9, [rsp + 0x44]
lea r8, [rsp + 0x48]
mov rcx, r12
test r14b, r14b
je 0x140030e45
lea rdx, str.StringFileInfo040904B0ProductVersion
call qword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x140031238
cmp dword [rsp + 0x44], 0
jbe 0x140031238
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 0xf
mov rdx, qword [rsp + 0x48]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140030de0
lea rcx, [rsp + 0x70]
call fcn.140007e50
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140007030
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140031238
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031233
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003139a
jmp 0x140031233
lea rdx, [0x140080460]
call qword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x140031238
cmp dword [rsp + 0x44], 0
jbe 0x140031238
mov r10, qword [rsp + 0x48]
cmp dword [r10], 0xfeef04bd
jne 0x140031238
movzx r8d, word [r10 + 0xe]
lea r9, [rbp - 0x3b]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140030e80
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], dl
lea rax, [rbp - 0x3b]
cmp r9, rax
je 0x140030ee1
lea r8, [rbp - 0x3b]
sub r8, r9
mov rdx, r9
lea rcx, [rsp + 0x70]
call fcn.140007e50
mov r10, qword [rsp + 0x48]
mov dword [rsp + 0x40], 7
movzx r8d, word [r10 + 8]
lea r9, [rbp + 5]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140030ef2
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], dl
lea rax, [rbp + 5]
cmp r9, rax
je 0x140030f50
lea r8, [rbp + 5]
sub r8, r9
mov rdx, r9
lea rcx, [rbp + 0x10]
call fcn.140007e50
mov r10, qword [rsp + 0x48]
mov dword [rsp + 0x40], 0x1f
movzx r8d, word [r10 + 0xa]
lea r9, [rbp - 0x3b]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140030f61
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], dl
lea rax, [rbp - 0x3b]
cmp r9, rax
je 0x140030fba
lea r8, [rbp - 0x3b]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x30]
call fcn.140007e50
mov dword [rsp + 0x40], 0x7f
mov r8, r15
lea rdx, [0x140080120]
lea rcx, [rbp - 0x30]
call fcn.140007fb0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rsp + 0x40], 0xff
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x50]
lea rcx, [rbp - 0x70]
call fcn.14000a4b0
mov dword [rsp + 0x40], 0x1ff
mov r8, r15
lea rdx, [0x140080120]
lea rcx, [rbp - 0x70]
call fcn.140007fb0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rsp + 0x40], 0x3ff
lea r9, [rsp + 0x70]
lea r8, [rbp - 0x10]
lea rcx, [rbp + 0x30]
call fcn.14000a4b0
mov r15d, 0x7ff
mov dword [rsp + 0x40], r15d
lea rdx, [rbp + 0x30]
mov rcx, rdi
call fcn.140007030
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x1400310b2
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400310ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400313a6
call fcn.14003e780
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x1400310ee
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400310e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400313ac
call fcn.14003e780
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140031129
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031124
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400313b2
call fcn.14003e780
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140031175
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003116f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400313b8
call fcn.14003e780
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400311b0
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400311ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400313be
call fcn.14003e780
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x1400311fc
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400311f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400313c4
call fcn.14003e780
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140031238
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031233
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400313ca
call fcn.14003e780
mov rcx, r12
call fcn.14003e780
mov rcx, qword [rbx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0xd
jb 0x1400313d0
mov r9, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140031268
mov r9, qword [rbx]
mov qword [rsp + 0x30], 0xd
lea rax, str._version_is:
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x30]
call fcn.14000a6b0
bts r15d, 0xe
mov dword [rsp + 0x40], r15d
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x1400312a2
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp + 0x30]
call fcn.140007fb0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r15d, 0xf
mov dword [rsp + 0x40], r15d
lea rcx, [rbp - 0x70]
call fcn.14002f780
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x140031325
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003131f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031394
call fcn.14003e780
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14003135b
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x140031356
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400313a0
mov rcx, r8
call fcn.14003e780
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rax, rdi
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.14003e760
mov rbx, qword [rsp + 0x1b0]
add rsp, 0x160
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400512b4
int3
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
nop
call fcn.1400512b4
int3
call fcn.140001350
int3