Function at 0x1801a7fe0
Capabilities:
Get file version info

Disassembly:
mov r11, rsp
push rbp
push rsi
push r12
lea rbp, [r11 - 0x178]
sub rsp, 0x260
mov rax, qword [0x18029e198]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov qword [r11 + 0x10], rbx
xor esi, esi
mov qword [r11 + 0x18], rdi
mov r12d, ecx
mov qword [r11 + 0x20], r13
mov r13d, 0x3ff
mov ebx, esi
mov edi, esi
test ecx, ecx
jne 0x1801a804c
call fcn.1801ae4f0
mov edx, dword [0x1802b1e2c]
movzx eax, dx
movzx ecx, word [0x18029cd54]
and ax, r13w
cmp cx, ax
je 0x1801a805a
test cx, cx
je 0x1801a805a
mov edx, ecx
jmp 0x1801a8050
movzx edx, r12w
bts edx, 0xb
mov dword [0x1802b1e2c], edx
movzx eax, dx
and ax, r13w
cmp ax, 9
je 0x1801a8352
mov qword [rsp + 0x258], r14
mov ecx, 0x104
mov qword [rsp + 0x250], r15
call fcn.180113ab0
mov rbx, rax
test rax, rax
je 0x1801a8337
mov ecx, dword [0x1802b1e2c]
call fcn.1801ae350
mov r14, rax
test rax, rax
je 0x1801a8337
mov rcx, qword [0x1802b4578]
mov r8d, 0x104
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], sil
jne 0x1801a80c5
add rax, rbx
mov rdx, rax
dec rax
cmp byte [rax], 0x2e
jne 0x1801a80d1
mov byte [rdx], 0x6c
movzx ecx, byte [r14]
mov byte [rdx + 1], cl
movzx ecx, byte [r14 + 1]
mov byte [rdx + 2], cl
mov byte [rdx + 3], sil
mov r14, rax
dec rax
cmp byte [rax], 0x5c
jne 0x1801a80f2
lea rdx, [rsp + 0x34]
mov dword [rsp + 0x34], esi
mov rcx, rbx
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x20], rsi
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov r15d, eax
test eax, eax
je 0x1801a8337
mov ecx, r15d
call fcn.180113ab0
mov rdi, rax
test rax, rax
je 0x1801a8337
mov r9, rax
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call sub.VERSION.dll_GetFileVersionInfoA
test eax, eax
je 0x1801a8337
lea r8, [0x180072c30]
mov edx, 0x64
lea rcx, [rbp - 0x30]
call fcn.180114d00
lea r9, [rsp + 0x30]
mov rcx, rdi
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x30]
call sub.VERSION.dll_VerQueryValueA
test eax, eax
je 0x1801a8226
mov rcx, qword [rsp + 0x20]
mov rdx, r14
call fcn.1802216d0
test eax, eax
je 0x1801a81b6
mov rax, qword [rsp + 0x20]
mov ecx, 0x46c
mov qword [rsp + 0x38], rax
call fcn.1801ae450
mov r9d, 1
lea r8, [rsp + 0x38]
jmp 0x1801a82ac
mov r9, rdi
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call sub.VERSION.dll_GetFileVersionInfoA
test eax, eax
je 0x1801a8226
lea r8, [0x180057538]
mov edx, 0x64
lea rcx, [rbp - 0x30]
call fcn.180114d00
lea r9, [rsp + 0x30]
mov rcx, rdi
lea r8, [rsp + 0x28]
lea rdx, [rbp - 0x30]
call sub.VERSION.dll_VerQueryValueA
test eax, eax
je 0x1801a82b8
cmp dword [rsp + 0x30], 0x34
jne 0x1801a8226
mov rax, qword [rsp + 0x28]
mov r8d, dword [rax + 8]
cmp r8d, 0x6003e
jne 0x1801a824d
mov rcx, rbx
call fcn.1801ae4b0
test eax, eax
jne 0x1801a832f
mov edx, 0x809
mov ecx, 0x46b
mov dword [0x1802b1e2c], edx
call fcn.1801ae450
mov rdx, rax
lea rcx, [rbp + 0x40]
call qword [sym.imp.USER32.dll_wsprintfA]
jmp 0x1801a82c3
movzx r9d, r8w
lea rdx, [0x180072c60]
shr r8d, 0x10
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_wsprintfA]
mov r9d, 0x3e
lea rdx, [0x180072c60]
lea rcx, [rsp + 0x60]
lea r8d, [r9 - 0x38]
call qword [sym.imp.USER32.dll_wsprintfA]
lea rax, [rsp + 0x48]
mov ecx, 0x46d
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
call fcn.1801ae450
mov r9d, 2
lea r8, [rsp + 0x38]
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.1801ae210
mov edx, 0x809
mov dword [0x1802b1e2c], edx
lea r8, [0x180072c68]
mov edx, 0xff
lea rcx, [rbp + 0x40]
call fcn.180221610
mov ecx, 0xdf01
call fcn.1801ae450
mov r8, rax
lea rcx, [rbp + 0x40]
mov edx, 0xff
call fcn.180221610
mov ecx, 0xdf00
mov qword [rsp + 0x38], r14
call fcn.1801ae450
mov rdx, rax
lea r8, [rsp + 0x38]
mov r9d, 1
lea rcx, [rbp - 0x68]
call fcn.1801ae210
mov r9d, gethostbyname
lea r8, [rbp - 0x68]
lea rdx, [rbp + 0x40]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [0x1802b1e2c]
jmp 0x1801a8342
mov edx, 0x809
mov dword [0x1802b1e2c], edx
mov r14, qword [rsp + 0x258]
mov r15, qword [rsp + 0x250]
and dx, r13w
mov r13, qword [rsp + 0x298]
mov word [0x18029cd54], dx
test rdi, rdi
je 0x1801a8372
mov rcx, rdi
call fcn.18010fbc0
mov rdi, qword [rsp + 0x290]
test rbx, rbx
je 0x1801a8387
mov rcx, rbx
call fcn.18010fbc0
mov rbx, qword [rsp + 0x288]
test r12d, r12d
jne 0x1801a839b
lea eax, [r12 + 1]
jmp 0x1801a83ab
movzx ecx, word [0x18029cd54]
cmp r12d, ecx
sete sil
mov eax, esi
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.1801e68c0
add rsp, 0x260
pop r12
pop rsi
pop rbp
ret