Function at 0x140005b7c
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rbx, rcx
mov rbp, rdx
lea rcx, [rsp + 0x58]
mov edx, 0x169
mov r14, r9
mov r13, r8
call fcn.1400616e0
mov r12, qword [rsp + 0x58]
mov r8d, 0x104
add r12, 0xc8
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
xor ebx, ebx
or rsi, 0xffffffffffffffff
lea eax, [rbx + 1]
mov rdi, rbx
cmp rbp, rbx
je 0x140005be2
mov r15d, eax
cmp rbp, rsi
jne 0x140005be5
mov r15d, ebx
cmp r13, rbx
je 0x140005bff
mov edx, 0x64
mov rcx, r13
call fcn.14006176c
mov r11, qword [r13]
mov word [r11], bx
cmp r15d, ebx
je 0x140005c19
mov edx, 0x64
mov rcx, rbp
call fcn.14006176c
mov r11, qword [rbp]
mov word [r11], bx
mov rax, qword [0x140132a48]
cmp rax, rbx
jne 0x140005c9f
lea r9, [rsp + 0xb0]
lea r8, [0x140132a40]
lea rdx, str.Version
lea rcx, str.GetFileVersionInfoSizeExW
mov qword [rsp + 0xb0], rbx
call fcn.14005a7bc
lea r9, [rsp + 0xb0]
lea r8, [0x140132a48]
lea rdx, str.Version
lea rcx, str.GetFileVersionInfoExW
call fcn.14005a7bc
mov r11, qword [0x140132a40]
cmp r11, rbx
je 0x140005c89
mov rax, qword [0x140132a48]
cmp rax, rbx
jne 0x140005ca6
mov rax, rsi
mov r11, rsi
mov qword [0x140132a40], rsi
mov qword [0x140132a48], rax
jmp 0x140005ca6
mov r11, qword [0x140132a40]
mov dword [rsp + 0xa8], ebx
cmp rax, rsi
jne 0x140005ccb
lea rdx, [rsp + 0xa8]
mov rcx, r12
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov esi, dword [rsp + 0xc0]
jmp 0x140005cfe
mov esi, dword [rsp + 0xc0]
lea r8, [rsp + 0xa8]
mov rdx, r12
mov ecx, esi
call r11
mov ebx, eax
test eax, eax
jne 0x140005d00
lea esi, [rax + 2]
lea r8, [rsp + 0xa8]
mov rdx, r12
mov ecx, esi
call qword [0x140132a40]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test ebx, ebx
jne 0x140005d23
test r14, r14
je 0x140005fc2
lea ecx, [rbx + 1]
test eax, eax
cmove eax, ecx
mov qword [r14], rax
jmp 0x140005fc2
and dword [rsp + 0xb0], edi
and qword [rsp + 0x38], rdi
lea edx, [rbx + 0x1a0]
lea rcx, [rsp + 0x50]
call fcn.1400613f4
mov r14, qword [rsp + 0x50]
mov rax, qword [0x140132a48]
and qword [rsp + 0x30], rdi
mov qword [rsp + 0x48], r14
add r14, 0x190
cmp rax, 0xffffffffffffffff
jne 0x140005d79
mov edx, dword [rsp + 0xa8]
mov r9, r14
mov r8d, ebx
mov rcx, r12
call sub.VERSION.dll_GetFileVersionInfoW
jmp 0x140005d90
mov r8d, dword [rsp + 0xa8]
mov r9d, ebx
mov rdx, r12
mov ecx, esi
mov qword [rsp + 0x20], r14
call rax
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x38]
lea rdx, [0x140113c64]
mov rcx, r14
call sub.VERSION.dll_VerQueryValueW
mov rax, qword [rsp + 0x38]
test rbp, rbp
jne 0x140005dbe
mov edi, dword [rax + 0x10]
mov eax, dword [rax + 0x14]
jmp 0x140005dc4
mov edi, dword [rax + 8]
mov eax, dword [rax + 0xc]
and qword [rsp + 0x40], 0
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x40]
lea rdx, str.VarFileInfoTranslation
shl rdi, 0x20
mov rcx, r14
or rdi, rax
xor esi, esi
call sub.VERSION.dll_VerQueryValueW
mov r11, qword [rsp + 0x40]
xor r8d, r8d
cmp r11, r8
je 0x140005e0a
movzx esi, word [r11]
movzx eax, word [r11 + 2]
shl esi, 0x10
or esi, eax
cmp r13, r8
jne 0x140005e18
cmp rbp, r8
jne 0x140005ee6
mov r12, qword [rsp + 0x48]
lea rdx, str.StringFileInfo_08lxProductVersion
mov r8d, esi
mov rcx, r12
call qword [sym.imp.USER32.dll_wsprintfW]
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x30]
mov rdx, r12
mov rcx, r14
call sub.VERSION.dll_VerQueryValueW
mov r11, qword [rsp + 0x30]
xor r8d, r8d
mov rbx, r11
cmp r11, r8
je 0x140005e71
cmp word [r11], r8w
je 0x140005e71
mov rcx, r11
call fcn.140005a8c
mov r11, qword [rsp + 0x30]
xor r8d, r8d
mov rdi, rax
cmp r13, r8
je 0x140005eeb
cmp r11, r8
je 0x140005ecc
cmp word [rbx], r8w
je 0x140005ecc
mov rcx, qword [r13]
lea rdx, [rbx + 0xc6]
mov r13d, 0x20
cmp rbx, rdx
jae 0x140005ec6
lea r9d, [r13 - 0x17]
movzx eax, word [rbx]
add rbx, 2
mov word [rcx], ax
cmp ax, r8w
je 0x140005ec6
cmp r9w, ax
ja 0x140005eb7
cmp ax, 0xd
jbe 0x140005ec6
cmp r13w, ax
je 0x140005ec6
add rcx, 2
cmp rbx, rdx
jb 0x140005e9b
mov word [rcx], r8w
jmp 0x140005ef1
mov rax, qword [rsp + 0x38]
mov rcx, qword [r13]
mov r8d, dword [rax + 0x14]
mov edx, dword [rax + 0x10]
call fcn.140005b48
xor r8d, r8d
jmp 0x140005eeb
mov r12, qword [rsp + 0x48]
mov r13d, 0x20
cmp r15d, r8d
jne 0x140005eff
cmp rbp, r8
je 0x140005fb8
lea rdx, str.StringFileInfo_08lxFileVersion
mov r8d, esi
mov rcx, r12
call qword [sym.imp.USER32.dll_wsprintfW]
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x30]
mov rdx, r12
mov rcx, r14
call sub.VERSION.dll_VerQueryValueW
mov r11, qword [rsp + 0x30]
xor esi, esi
mov rbx, r11
cmp r11, rsi
je 0x140005f4f
cmp word [r11], si
je 0x140005f4f
mov rcx, r11
call fcn.140005a8c
mov r11, qword [rsp + 0x30]
mov rdi, rax
cmp r15d, esi
je 0x140005fb8
cmp r11, rsi
je 0x140005fa3
cmp word [rbx], si
je 0x140005fa3
mov rcx, qword [rbp]
lea rdx, [rbx + 0xc6]
cmp rbx, rdx
jae 0x140005f9e
mov r8d, 9
movzx eax, word [rbx]
add rbx, 2
mov word [rcx], ax
cmp ax, si
je 0x140005f9e
cmp r8w, ax
ja 0x140005f8f
cmp ax, 0xd
jbe 0x140005f9e
cmp r13w, ax
je 0x140005f9e
add rcx, 2
cmp rbx, rdx
jb 0x140005f74
mov word [rcx], si
jmp 0x140005fb8
mov rax, qword [rsp + 0x38]
mov rcx, qword [rbp]
mov r8d, dword [rax + 0xc]
mov edx, dword [rax + 8]
call fcn.140005b48
lea rcx, [rsp + 0x50]
call fcn.1400590a4
lea rcx, [rsp + 0x58]
call fcn.1400590a4
mov rbx, qword [rsp + 0xa0]
mov rax, rdi
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret