Function at 0x1400785d0
Capabilities:
Get file version info

Disassembly:
push rbx
push rdi
sub rsp, 0x158
mov rbx, rcx
mov rcx, qword [0x14016f6f0]
mov rdi, rdx
call fcn.140023100
test rdi, rdi
je 0x140078a1a
cmp word [rdi], 0
je 0x140078a1a
lea rdx, [rsp + 0x178]
mov rcx, rdi
mov qword [rsp + 0x148], rsi
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov esi, eax
test eax, eax
jne 0x14007864a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x140169c00]
mov dl, 1
mov dword [rcx + 0x40], eax
mov rcx, rbx
call fcn.14003ca30
mov rsi, qword [rsp + 0x148]
add rsp, 0x158
pop rdi
pop rbx
ret
mov rcx, rsi
mov qword [rsp + 0x150], rbp
call fcn.1401084ac
mov r8d, esi
xor edx, edx
mov r9, rax
mov rcx, rdi
mov rbp, rax
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x1400789f6
lea r9, [rsp + 0x180]
lea r8, [rsp + 0x188]
lea rdx, [0x14012fb84]
mov rcx, rbp
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x1400789f6
mov rax, qword [rsp + 0x188]
mov esi, pe_nt_image_headers64
lea r8, str._u._u._u._u
mov edx, dword [rax + 0xc]
mov r9d, dword [rax + 8]
movzx ecx, dx
shr edx, 0x10
movzx eax, r9w
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
lea rcx, [rsp + 0x40]
shr r9d, 0x10
mov edx, esi
mov dword [rsp + 0x20], eax
call fcn.1400e6100
mov rcx, rbp
call fcn.140108f48
mov rax, qword [0x140169c00]
xor ebp, ebp
xor edx, edx
mov rcx, rbx
mov dword [rax + 0x40], ebp
call fcn.14003ca30
mov rbx, qword [0x14016f6f0]
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x14007872d
mov rcx, qword [rbx + 0x10]
lea rdx, [rsp + 0x40]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
mov ebp, eax
jmp 0x14007899b
lea rax, [rsp + 0x40]
mov qword [rsp + 0x140], r12
cmp qword [rbx + 8], rax
jne 0x140078749
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x14007875e
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x40]
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r12, [rcx - 1]
lea rax, [r12 + 1]
lea rdi, [rax + rax]
cmp dl, 2
jne 0x140078780
lea rcx, [rsp + 0x40]
mov rdx, r12
call fcn.140005910
mov ebp, eax
jmp 0x140078993
mov rcx, qword [0x140169b08]
cmp rdi, rcx
jbe 0x1400787bb
cmp rdi, qword [rbx + 0x18]
jbe 0x1400787bb
lea rcx, [0x14014bd60]
call fcn.1400dd2e0
lea r8, [0x1401295d4]
lea rcx, [0x1401712e0]
mov rdx, rax
call fcn.1400a5580
mov ebp, eax
jmp 0x140078993
cmp rax, 2
jae 0x1400787d5
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400ea290
jmp 0x14007898e
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x1400787f2
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140169b08]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rdi, r8
jbe 0x140078962
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x14007882b
cmp al, 2
je 0x140078863
mov rsi, qword [rsp + 0x178]
mov rax, qword [rsp + 0x178]
jmp 0x140078956
cmp rdi, rsi
ja 0x140078863
cmp rdi, 8
ja 0x14007883d
mov esi, 8
jmp 0x140078849
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rdi, rax
cmovbe rsi, rax
mov rcx, rsi
call fcn.1400dc2b0
test rax, rax
je 0x140078993
mov byte [rbx + 0x20], 1
jmp 0x140078956
cmp rdi, 0x20
jae 0x140078873
mov esi, SafeArrayAllocDescriptor
jmp 0x14007891d
mov esi, 0x208
cmp rdi, rsi
jb 0x14007891d
cmp rdi, 0x50000
jae 0x1400788d9
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x1400788a0
addsd xmm0, qword [0x140152fd8]
mulsd xmm0, qword [0x140153040]
movsd xmm1, qword [0x140153038]
xor eax, eax
comisd xmm0, xmm1
jbe 0x1400788cf
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x1400788cf
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rsi, xmm0
add rsi, rax
jmp 0x14007891d
cmp rdi, 0x320000
jae 0x1400788eb
lea rsi, [rdi + 0x8000]
jmp 0x14007891d
cmp rdi, 0xc80000
jae 0x140078916
movabs rax, 0x47ae147ae147ae15
mov rsi, rdi
mul rdi
sub rsi, rdx
shr rsi, 1
add rsi, rdx
shr rsi, 6
add rsi, rdi
jmp 0x14007891d
lea rsi, [rdi + 0x20000]
cmp rsi, rcx
cmova rsi, rcx
cmp r9b, 2
jne 0x14007893d
test r8, r8
je 0x14007893d
mov rcx, qword [rbx + 8]
mov dil, 1
call fcn.140108f48
jmp 0x140078940
xor dil, dil
test rsi, rsi
js 0x1400789b7
mov rcx, rsi
call fcn.1401084ac
test rax, rax
je 0x1400789b7
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
mov rcx, qword [rbx + 8]
lea rax, [rsp + 0x40]
cmp rcx, rax
je 0x14007897e
lea r8, [r12 + r12]
lea rdx, [rsp + 0x40]
call fcn.140109100
mov rax, qword [rbx + 8]
lea rcx, [r12 + r12]
mov word [rcx + rax], bp
mov qword [rbx + 0x10], rcx
mov ebp, 1
mov r12, qword [rsp + 0x140]
mov eax, ebp
mov rbp, qword [rsp + 0x150]
mov rsi, qword [rsp + 0x148]
add rsp, 0x158
pop rdi
pop rbx
ret
test dil, dil
je 0x1400789cd
lea rax, [0x140171290]
mov qword [rbx + 0x18], rbp
mov qword [rbx + 8], rax
jmp 0x1400789d4
mov rax, qword [rbx + 8]
mov word [rax], bp
lea r8, [0x1401295d4]
lea rdx, str.Out_of_memory.
lea rcx, [0x1401712e0]
mov qword [rbx + 0x10], rbp
call fcn.1400a5580
mov ebp, eax
jmp 0x140078993
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x140169c00]
mov dword [rcx + 0x40], eax
mov rcx, rbp
call fcn.140108f48
mov dl, 1
mov rcx, rbx
call fcn.14003ca30
jmp 0x14007899d
mov rax, qword [0x140169c00]
mov dl, 1
mov rcx, rbx
mov dword [rax + 0x40], 0x57
call fcn.14003ca30
add rsp, 0x158
pop rdi
pop rbx
ret