Function at 0x18002c7e0
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x140]
sub rsp, 0x240
mov rax, qword [0x18007e040]
xor rax, rsp
mov qword [rbp + 0x130], rax
xor r15d, r15d
mov r8d, 0x104
lea rdx, [rbp + 0x20]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], r15
lea rax, [rbp + 0x20]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r15b
jne 0x18002c843
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x28]
call fcn.180015df0
nop
mov dword [rbp - 0x4c], r15d
mov dword [rbp - 0x50], r15d
mov qword [rbp - 0x58], r15
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
lea rdx, [rbp - 0x4c]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov ebx, eax
test eax, eax
je 0x18002ce2a
mov ecx, ebx
call fcn.180043264
mov r14, rax
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
mov r9, rax
mov r8d, ebx
mov edx, dword [rbp - 0x4c]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoA]
test eax, eax
je 0x18002ce21
lea r9, [rbp - 0x50]
lea r8, [rbp - 0x58]
lea rdx, [0x180065218]
mov rcx, r14
call qword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x18002ce21
cmp dword [rbp - 0x50], 0
je 0x18002ce21
mov rdi, qword [rbp - 0x58]
movzx edx, word [rdi + 0xe]
lea rcx, [rsp + 0x40]
call fcn.180036f10
mov rsi, rax
movzx edx, word [rdi + 8]
lea rcx, [rsp + 0x60]
call fcn.180036f10
mov rbx, rax
movzx edx, word [rdi + 0xa]
lea rcx, [rbp - 0x80]
call fcn.180036f10
nop
mov r9, rbx
mov r8, rax
lea rcx, [rsp + 0x20]
call fcn.180017620
nop
mov r9, rsi
lea r8, [rsp + 0x20]
lea rcx, [rbp - 8]
call fcn.180017620
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18002c979
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002c973
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002c973
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180042f70
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x18002c9b7
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002c9b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002c9b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180042f70
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x18002ca07
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ca02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002ca02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180042f70
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], socket
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x18002ca5a
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ca55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002ca55
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180042f70
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], socket
mov byte [rsp + 0x40], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
mov r8d, 4
cmp qword [rbp + 8], r8
cmovb r8, qword [rbp + 8]
lea rdx, [rbp - 8]
cmp qword [rbp + 0x10], 0xf
cmova rdx, qword [rbp - 8]
lea rcx, [rsp + 0x20]
call fcn.180015df0
nop
lea rcx, [rsp + 0x20]
call fcn.1800375c0
mulsd xmm0, qword [0x180072a80]
cvttsd2si edx, xmm0
mov dword [0x18007f720], edx
mov rax, qword [rsp + 0x38]
cmp rax, 0xf
jbe 0x18002cb0a
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002caff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002caff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180042f70
mov edx, dword [0x18007f720]
lea rcx, [rbp - 0x48]
call fcn.180015ef0
nop
mov r8d, dword [0x18007f720]
mov r9d, r15d
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0xf
seta r10b
mov rdx, qword [rbp - 0x48]
cmova rcx, rdx
mov rax, qword [rbp - 0x38]
cmp rax, 1
jb 0x18002cbff
cmp byte [rcx], 0x35
jne 0x18002cb4b
mov ecx, r15d
jmp 0x18002cb50
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x18002cbff
lea rcx, [rbp - 0x48]
test r10b, r10b
cmovne rcx, rdx
cmp rax, 2
jb 0x18002cbff
cmp byte [rax + rcx - 2], 0x30
jne 0x18002cb80
cmp byte [rax + rcx - 1], 0x30
jne 0x18002cb80
mov ecx, r15d
jmp 0x18002cb85
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x18002cbff
mov eax, 0x66666667
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rdx + rdx*4]
add ecx, ecx
cmp r8d, ecx
jne 0x18002ccb6
nop dword [rax]
test r8d, r8d
je 0x18002ccb6
inc r9d
mov eax, 0x66666667
imul r8d
mov r8d, edx
sar r8d, 2
mov eax, r8d
shr eax, 0x1f
add r8d, eax
cmp r9d, 2
je 0x18002ccb6
mov eax, 0x66666667
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rdx + rdx*4]
add ecx, ecx
cmp r8d, ecx
je 0x18002cbb0
jmp 0x18002ccb6
lea rcx, [rbp - 0x48]
test r10b, r10b
cmovne rcx, rdx
cmp rax, 1
jb 0x18002ccb6
cmp byte [rcx], 0x34
jne 0x18002cc1e
mov ecx, r15d
jmp 0x18002cc23
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x18002ccb6
lea rcx, [rbp - 0x48]
test r10b, r10b
cmovne rcx, rdx
cmp rax, 2
jb 0x18002ccb6
cmp byte [rax + rcx - 2], 0x30
jne 0x18002cc4f
cmp byte [rax + rcx - 1], 0x30
jne 0x18002cc4f
mov eax, r15d
jmp 0x18002cc54
sbb eax, eax
or eax, 1
test eax, eax
jne 0x18002ccb6
mov eax, 0x66666667
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rdx + rdx*4]
add ecx, ecx
cmp r8d, ecx
jne 0x18002ccb6
test r8d, r8d
je 0x18002ccb6
inc r9d
mov eax, 0x66666667
imul r8d
mov r8d, edx
sar r8d, 2
mov eax, r8d
shr eax, 0x1f
add r8d, eax
cmp r9d, 3
je 0x18002ccb6
mov eax, 0x66666667
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rdx + rdx*4]
add ecx, ecx
cmp r8d, ecx
je 0x18002cc74
mov dword [0x18007f720], r8d
cmp r8d, 0x10a5
jne 0x18002ccd3
mov r8d, 0x1ab
mov dword [0x18007f720], r8d
mov edx, r8d
lea rcx, [rsp + 0x40]
call fcn.180015ef0
nop
mov r9d, 0xc
lea r8, str.UE_Version:
xor edx, edx
mov rcx, rax
call fcn.1800161b0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
psrldq xmm0, 8
movq rdx, xmm0
cmp rdx, 0xf
jbe 0x18002cd54
inc rdx
movq rcx, xmm1
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002cd4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002cd4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180042f70
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x18002cd95
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002cd8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002cd8f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180042f70
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x18002cdd3
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002cdce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002cdce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180042f70
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x18002ce21
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ce1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002ce1c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180042f70
mov rcx, r14
call fcn.180042f70
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18002ce68
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ce63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18002ce63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180042f70
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.180042be0
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret