Function at 0x14014e04e
Capabilities:
Get file version info

Disassembly:
jmp 0x140170580
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0xd98
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x26a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0xdb8]
mov rax, qword [0x140452080]
xor rax, rbp
mov qword [rbp + 0xd58], rax
lea rcx, [0x14046813b]
call fcn.14014e418
mov byte [rbp + 4], 1
cmp qword [rbp + 0xd90], 0
jne 0x1401705ed
xor al, al
jmp 0x140170fea
lea rax, [rbp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 0x94
rep stosb byte [rdi], al
mov dword [rbp + 0x30], 0x94
lea rcx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
lea rax, str.kernel32.dll
mov qword [rbp + 0xe8], rax
lea r8, [rbp + 0x104]
mov rdx, qword [rbp + 0xe8]
mov ecx, 2
call fcn.14014df95
mov dword [rbp + 0x124], eax
mov edx, 0x20
lea rcx, [rbp + 0x148]
call fcn.14014de3c
lea rcx, [rbp + 0x7e4]
call fcn.14014c8a2
mov ecx, dword [rbp + 0x124]
mov r8, rax
mov edx, ecx
lea rcx, [rbp + 0x148]
call fcn.14014d923
nop
xor edx, edx
lea rcx, [rbp + 0x148]
call fcn.14014c7da
mov qword [rbp + 0xd48], rax
lea rcx, [rbp + 0x148]
call fcn.14014c14a
mov dword [rbp + 0xd50], eax
mov eax, dword [rbp + 0x104]
mov dword [rbp + 0xd54], eax
mov rax, qword [rbp + 0xd48]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0xd50]
mov r8d, dword [rbp + 0xd54]
mov rdx, qword [rbp + 0xe8]
mov ecx, 2
call fcn.14014c686
mov qword [rbp + 0x188], 0
mov dword [rbp + 0x1a4], 0
lea rcx, [rbp + 0x148]
call fcn.14014ca9b
lea r9, [rbp + 0x1a4]
lea r8, [rbp + 0x188]
lea rdx, [0x1403feef0]
mov rcx, rax
call fcn.14014c717
mov eax, dword [rbp + 0x1a4]
cmp rax, 0x34
jae 0x140170733
mov r8d, 0x76
lea rdx, str.C:UsersyufgyfDownloadsHWID_Kernel_Spoofer_EAC_BE_mainintel_driver.hpp
lea rcx, str.size___sizeof_VS_FIXEDFILEINFO_
call qword [sym.imp.ucrtbased.dll__wassert]
xor eax, eax
cmp qword [rbp + 0x188], 0
jne 0x140170759
mov r8d, 0x77
lea rdx, str.C:UsersyufgyfDownloadsHWID_Kernel_Spoofer_EAC_BE_mainintel_driver.hpp
lea rcx, str.p___nullptr
call qword [sym.imp.ucrtbased.dll__wassert]
xor eax, eax
mov rax, qword [rbp + 0x188]
mov qword [rbp + 0x1c8], rax
mov rax, qword [rbp + 0x1c8]
mov eax, dword [rax + 0xc]
shr rax, 0x10
and rax, 0xffff
movzx eax, ax
cmp eax, 0x4a61
jl 0x140170a22
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.NtQueryInformationAtom
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x1e8], rax
cmp qword [rbp + 0x1e8], 0
jne 0x1401707d6
mov byte [rbp + 0x804], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0x804]
jmp 0x140170fea
mov byte [rbp + 0x208], 0x48
mov byte [rbp + 0x209], 0xb8
mov byte [rbp + 0x20a], 0
mov byte [rbp + 0x20b], 0
mov byte [rbp + 0x20c], 0
mov byte [rbp + 0x20d], 0
mov byte [rbp + 0x20e], 0
mov byte [rbp + 0x20f], 0
mov byte [rbp + 0x210], 0
mov byte [rbp + 0x211], 0
mov byte [rbp + 0x212], 0xff
mov byte [rbp + 0x213], 0xe0
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rbp + 0xd90]
mov qword [rbp + rax + 0x20a], rcx
lea rax, [rbp + 0x864]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x888]
lea rcx, [rbp + 0x864]
call fcn.14014d897
mov rcx, rax
call fcn.14014e5df
mov rdx, rax
lea rcx, [rbp + 0x828]
call fcn.14014d040
nop
lea rax, [rbp + 0x904]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x928]
lea rcx, [rbp + 0x904]
call fcn.14014da4a
mov rcx, rax
call fcn.14014d914
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.14014d040
nop
lea rcx, [rbp + 0x8c8]
call fcn.14014c27b
lea r8, [rbp + 0x828]
mov rdx, rax
mov rcx, qword [rbp + 0xd80]
call fcn.14014d833
mov qword [rbp + 0x268], rax
lea rcx, [rbp + 0x8c8]
call fcn.14014c6d6
nop
lea rcx, [rbp + 0x828]
call fcn.14014c6d6
cmp qword [rbp + 0x268], 0
jne 0x140170929
mov byte [rbp + 0x954], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0x954]
jmp 0x140170fea
mov r9d, 0xc
lea r8, [rbp + 0x238]
mov rdx, qword [rbp + 0x268]
mov rcx, qword [rbp + 0xd80]
call fcn.14014da81
movzx eax, al
test eax, eax
jne 0x14017096f
mov byte [rbp + 0x974], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0x974]
jmp 0x140170fea
mov r9d, 0xc
lea r8, [rbp + 0x208]
mov rdx, qword [rbp + 0x268]
mov rcx, qword [rbp + 0xd80]
call fcn.14014d93c
movzx eax, al
test eax, eax
jne 0x1401709b5
mov byte [rbp + 0x994], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0x994]
jmp 0x140170fea
mov rax, qword [rbp + 0x1e8]
mov qword [rbp + 0x288], rax
mov rax, qword [rbp + 0x288]
mov qword [rbp + 0xd48], rax
mov rcx, qword [rbp + 0xd98]
call qword [rbp + 0xd48]
mov r9d, 0xc
lea r8, [rbp + 0x238]
mov rdx, qword [rbp + 0x268]
mov rcx, qword [rbp + 0xd80]
call fcn.14014d93c
mov byte [rbp + 0x9b4], 1
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0x9b4]
jmp 0x140170fea
mov rax, qword [rbp + 0x1c8]
mov eax, dword [rax + 0xc]
shr rax, 0x10
and rax, 0xffff
movzx eax, ax
cmp eax, 0x47ba
jl 0x140170df9
lea rax, [rbp + 0x9d4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x9f8]
lea rcx, [rbp + 0x9d4]
call fcn.14014e571
mov rcx, rax
call fcn.14014ca46
mov qword [rbp + 0xd48], rax
lea rax, [rbp + 0xa34]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xa58]
lea rcx, [rbp + 0xa34]
call fcn.14014d284
mov rcx, rax
call fcn.14014d2d4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp + 0xd50], rax
mov rdx, qword [rbp + 0xd48]
mov rcx, qword [rbp + 0xd50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x2a8], rax
lea rax, [rbp + 0xa84]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xaa8]
lea rcx, [rbp + 0xa84]
call fcn.14014e19d
mov rcx, rax
call fcn.14014c019
mov qword [rbp + 0xd48], rax
lea rax, [rbp + 0xaf4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xb18]
lea rcx, [rbp + 0xaf4]
call fcn.14014d5f4
mov rcx, rax
call fcn.14014cb81
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp + 0xd50], rax
mov rdx, qword [rbp + 0xd48]
mov rcx, qword [rbp + 0xd50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x2c8], rax
cmp qword [rbp + 0x2a8], 0
jne 0x140170b93
cmp qword [rbp + 0x2c8], 0
jne 0x140170b93
mov byte [rbp + 0xb44], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xb44]
jmp 0x140170fea
mov qword [rbp + 0x2e8], 0
mov byte [rbp + 0x308], 0x48
mov byte [rbp + 0x309], 0xb8
mov byte [rbp + 0x30a], 0
mov byte [rbp + 0x30b], 0
mov byte [rbp + 0x30c], 0
mov byte [rbp + 0x30d], 0
mov byte [rbp + 0x30e], 0
mov byte [rbp + 0x30f], 0
mov byte [rbp + 0x310], 0
mov byte [rbp + 0x311], 0
mov byte [rbp + 0x312], 0xff
mov byte [rbp + 0x313], 0xe0
mov qword [rbp + 0x338], 0
cmp qword [rbp + 0x2a8], 0
je 0x140170c96
lea r8, [rbp + 0x338]
lea rdx, [rbp + 0x2e8]
mov rcx, qword [rbp + 0xd80]
call fcn.14014c726
movzx eax, al
test eax, eax
jne 0x140170c4b
mov byte [rbp + 0xb64], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xb64]
jmp 0x140170fea
mov r9d, 8
lea r8, [rbp + 0xd90]
mov rdx, qword [rbp + 0x2e8]
mov rcx, qword [rbp + 0xd80]
call fcn.14014d93c
movzx eax, al
test eax, eax
jne 0x140170c91
mov byte [rbp + 0xb84], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xb84]
jmp 0x140170fea
jmp 0x140170d38
lea r8, [rbp + 0x358]
lea rdx, [rbp + 0x2e8]
mov rcx, qword [rbp + 0xd80]
call fcn.14014e256
movzx eax, al
test eax, eax
jne 0x140170cd6
mov byte [rbp + 0xba4], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xba4]
jmp 0x140170fea
lea rax, [rbp + 0x30a]
mov r8d, 8
lea rdx, [rbp + 0xd90]
mov rcx, rax
call fcn.14014d167
mov r9d, 0xc
lea r8, [rbp + 0x308]
mov rdx, qword [rbp + 0x2e8]
mov rcx, qword [rbp + 0xd80]
call fcn.14014d93c
movzx eax, al
test eax, eax
jne 0x140170d38
mov byte [rbp + 0xbc4], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xbc4]
jmp 0x140170fea
cmp qword [rbp + 0x2a8], 0
je 0x140170d52
mov rax, qword [rbp + 0x2a8]
mov qword [rbp + 0xd48], rax
jmp 0x140170d60
mov rax, qword [rbp + 0x2c8]
mov qword [rbp + 0xd48], rax
mov rax, qword [rbp + 0xd48]
mov qword [rbp + 0x388], rax
mov rax, qword [rbp + 0x388]
mov qword [rbp + 0xd48], rax
mov rcx, qword [rbp + 0xd98]
call qword [rbp + 0xd48]
cmp qword [rbp + 0x2a8], 0
je 0x140170db5
mov r9d, 8
lea r8, [rbp + 0x338]
mov rdx, qword [rbp + 0x2e8]
mov rcx, qword [rbp + 0xd80]
call fcn.14014d93c
jmp 0x140170dd5
mov r9d, 0xc
lea r8, [rbp + 0x358]
mov rdx, qword [rbp + 0x2e8]
mov rcx, qword [rbp + 0xd80]
call fcn.14014d93c
mov byte [rbp + 0xbe4], 1
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xbe4]
jmp 0x140170fea
mov rax, qword [rbp + 0x1c8]
mov eax, dword [rax + 0xc]
shr rax, 0x10
and rax, 0xffff
movzx eax, ax
cmp eax, 0x42ee
jl 0x140170fd0
lea rax, [rbp + 0xc04]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xc28]
lea rcx, [rbp + 0xc04]
call fcn.14014c28a
mov rcx, rax
call fcn.14014ca46
mov qword [rbp + 0xd48], rax
lea rax, [rbp + 0xc64]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xc88]
lea rcx, [rbp + 0xc64]
call fcn.14014e63e
mov rcx, rax
call fcn.14014d2d4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rbp + 0xd50], rax
mov rdx, qword [rbp + 0xd48]
mov rcx, qword [rbp + 0xd50]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x3a8], rax
cmp qword [rbp + 0x3a8], 0
jne 0x140170ed2
mov byte [rbp + 0xcb4], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xcb4]
jmp 0x140170fea
mov qword [rbp + 0x3c8], 0
mov qword [rbp + 0x3e8], 0
lea r8, [rbp + 0x3e8]
lea rdx, [rbp + 0x3c8]
mov rcx, qword [rbp + 0xd80]
call fcn.14014c726
movzx eax, al
test eax, eax
jne 0x140170f28
mov byte [rbp + 0xcd4], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xcd4]
jmp 0x140170fea
mov r9d, 8
lea r8, [rbp + 0xd90]
mov rdx, qword [rbp + 0x3c8]
mov rcx, qword [rbp + 0xd80]
call fcn.14014d93c
movzx eax, al
test eax, eax
jne 0x140170f6b
mov byte [rbp + 0xcf4], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xcf4]
jmp 0x140170fea
mov rax, qword [rbp + 0x3a8]
mov qword [rbp + 0x408], rax
mov rax, qword [rbp + 0x408]
mov qword [rbp + 0xd48], rax
mov rcx, qword [rbp + 0xd98]
call qword [rbp + 0xd48]
mov r9d, 8
lea r8, [rbp + 0x3e8]
mov rdx, qword [rbp + 0x3c8]
mov rcx, qword [rbp + 0xd80]
call fcn.14014d93c
mov byte [rbp + 0xd14], 1
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xd14]
jmp 0x140170fea
mov byte [rbp + 0xd34], 0
lea rcx, [rbp + 0x148]
call fcn.14014e0ad
movzx eax, byte [rbp + 0xd34]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x1403fcf60]
call fcn.14014ddd8
mov rax, rdi
mov rcx, qword [rbp + 0xd58]
xor rcx, rbp
call fcn.14014d149
lea rsp, [rbp + 0xd68]
pop rdi
pop rbp
ret