Function at 0x14002dc40
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x1400ba060]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdx
xor r15d, r15d
mov dword [rsp + 0x20], r15d
mov dword [rsp + 0x24], r15d
mov qword [rsp + 0x28], r15
mov rcx, rdx
cmp qword [rdx + 0x18], 8
jb 0x14002dc95
mov rcx, qword [rdx]
xor edx, edx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov esi, eax
mov qword [rdi], r15
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
xor r8d, r8d
lea rdx, [0x1400a7218]
mov rcx, rdi
call fcn.140003810
mov dword [rsp + 0x20], 1
test esi, esi
je 0x14002e179
mov ecx, esi
call fcn.140062630
mov r14, rax
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14002dcea
mov rcx, qword [rbx]
mov r9, r14
mov r8d, esi
xor edx, edx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x14002e170
lea r9, [rsp + 0x24]
lea r8, [rsp + 0x28]
lea rdx, [0x1400a742c]
mov rcx, r14
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x14002e170
cmp dword [rsp + 0x24], 0
je 0x14002e170
mov rsi, qword [rsp + 0x28]
cmp dword [rsi], 0xfeef04bd
jne 0x14002e170
movzx r8d, word [rsi + 0xe]
lea r9, [rsp + 0x55]
nop dword [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14002dd50
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], dl
lea rax, [rsp + 0x55]
cmp r9, rax
je 0x14002ddab
lea r8, [rsp + 0x55]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x40]
call fcn.140003810
mov dword [rsp + 0x20], 7
movzx r8d, word [rsi + 8]
lea r9, [rbp - 0x6b]
nop dword [rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14002ddc0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], dl
lea rax, [rbp - 0x6b]
cmp r9, rax
je 0x14002de19
lea r8, [rbp - 0x6b]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x60]
call fcn.140003810
mov dword [rsp + 0x20], 0x1f
movzx r8d, word [rsi + 0xa]
lea r9, [rsp + 0x55]
nop dword [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x14002de30
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], dl
lea rax, [rsp + 0x55]
cmp r9, rax
je 0x14002de90
lea r8, [rsp + 0x55]
sub r8, r9
mov rdx, r9
lea rcx, [rsp + 0x60]
call fcn.140003810
mov dword [rsp + 0x20], 0x7f
mov r8d, 1
lea rdx, [0x1400a7eb4]
lea rcx, [rsp + 0x60]
call fcn.140008db0
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rsp + 0x20], 0xff
lea r9, [rbp - 0x60]
lea r8, [rbp]
lea rcx, [rbp - 0x20]
call fcn.140011460
mov dword [rsp + 0x20], 0x1ff
mov r8d, 1
lea rdx, [0x1400a7eb4]
lea rcx, [rbp - 0x20]
call fcn.140008db0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rsp + 0x20], 0x3ff
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.140011460
lea rax, [rbp - 0x80]
cmp rdi, rax
je 0x14002dfa6
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14002df81
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x14002df7c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14002e1f6
mov rcx, r8
call fcn.1400623ac
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
movups xmm0, xmmword [rbp - 0x80]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x70]
movups xmmword [rdi + 0x10], xmm1
mov edx, 0xf
mov byte [rbp - 0x80], 0
jmp 0x14002dfaa
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14002dfe2
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002dfdc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e1f6
call fcn.1400623ac
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14002e020
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e01a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e1fc
call fcn.1400623ac
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14002e05b
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e056
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e202
call fcn.1400623ac
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14002e0a7
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e0a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e208
call fcn.1400623ac
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14002e0e4
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e0df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e20e
call fcn.1400623ac
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14002e133
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e12d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e214
call fcn.1400623ac
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14002e170
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e169
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e1ea
call fcn.1400623ac
nop
mov rcx, r14
call fcn.1400623ac
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x14002e1b4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14002e1af
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14002e1f0
mov rcx, r8
call fcn.1400623ac
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rax, rdi
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.140062280
mov rbx, qword [rsp + 0x170]
add rsp, 0x130
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
int3