Function at 0x140145e60
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x340]
sub rsp, 0x440
mov rax, qword [0x14037da00]
xor rax, rsp
mov qword [rbp + 0x330], rax
mov rsi, rdx
mov qword [rbp - 0x30], rdx
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov qword [rdx], r15
mov qword [rdx + 8], r15
mov qword [rdx + 0x10], r15
mov dword [rsp + 0x30], 1
lea rcx, [rsp + 0x70]
call fcn.140146210
nop
mov rdi, qword [rbp - 0x80]
lea rbx, [rdi + 1]
movdqa xmm0, xmmword [0x140295600]
movdqa xmmword [rbp + 0x110], xmm0
lea rax, [rbp + 0x128]
mov qword [rbp + 0x120], rax
cmp rbx, 0x100
jle 0x140145f10
lea rcx, [rbx + rbx]
call fcn.140223aa8
mov qword [rbp + 0x120], rax
test rax, rax
je 0x140146203
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x118], rbx
mov rdx, qword [rsp + 0x78]
test rdx, rdx
jne 0x140145f28
lea rdx, [0x14024fdc0]
lea r8, [rdi + rdi]
mov rcx, rax
call fcn.140240000
mov rax, qword [rbp + 0x120]
mov word [rax + rdi*2], r15w
xor edx, edx
mov rcx, qword [rbp + 0x120]
call sub.VERSION.dll_GetFileVersionInfoSizeW
movsxd r14, eax
mov edi, 0xffffffff
test eax, eax
je 0x140146198
mov rbx, r14
movdqa xmm0, xmmword [0x140295600]
movdqa xmmword [rbp - 0x10], xmm0
lea rax, [rbp + 8]
mov qword [rbp], rax
cmp r14, 0x100
jle 0x140145f98
mov rcx, rbx
call fcn.140223aa8
mov qword [rbp], rax
test rax, rax
je 0x1401461fd
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
mov r9, rax
mov r8d, r14d
xor edx, edx
mov rcx, qword [rbp + 0x120]
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x140146185
lea r9, [rsp + 0x34]
lea r8, [rsp + 0x50]
lea rdx, [0x14033ef58]
mov rcx, qword [rbp]
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x140146185
cmp dword [rsp + 0x34], 0
je 0x140146185
mov rbx, qword [rsp + 0x50]
mov qword [rsp + 0x58], r15
lea rax, str._1._2._3._4
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], SHCreateThread
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r15
mov r14d, 0x20
movzx r8d, word [rbx + 0x12]
mov word [rsp + 0x28], r14w
mov dword [rsp + 0x20], 0xa
xor r9d, r9d
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x58]
call fcn.140089a90
mov dword [rsp + 0x30], 3
movzx r8d, word [rbx + 0x10]
mov word [rsp + 0x28], r14w
mov dword [rsp + 0x20], 0xa
xor r9d, r9d
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x48]
call fcn.140089a90
mov dword [rsp + 0x30], 7
movzx r8d, word [rbx + 0x16]
mov word [rsp + 0x28], r14w
mov dword [rsp + 0x20], 0xa
xor r9d, r9d
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x60]
call fcn.140089a90
mov dword [rsp + 0x30], SHCreateThread
movzx r8d, word [rbx + 0x14]
mov word [rsp + 0x28], r14w
mov dword [rsp + 0x20], 0xa
xor r9d, r9d
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x78]
call fcn.140089a90
mov rdx, qword [rsi]
mov rax, qword [rsp + 0x38]
mov qword [rsi], rax
mov qword [rsp + 0x38], rdx
mov rcx, qword [rsi + 8]
mov rax, qword [rsp + 0x40]
mov qword [rsi + 8], rax
mov qword [rsp + 0x40], rcx
mov rcx, qword [rsi + 0x10]
mov rax, qword [rsp + 0x48]
mov qword [rsi + 0x10], rax
mov qword [rsp + 0x48], rcx
test rdx, rdx
je 0x14014610b
mov eax, edi
lock xadd dword [rdx], eax
cmp eax, 1
jne 0x14014610b
mov rcx, qword [rsp + 0x38]
call fcn.14021b810
nop
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x140146129
mov eax, edi
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x140146129
mov rcx, qword [rbp - 0x78]
call fcn.14021b810
nop
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140146147
mov eax, edi
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x140146147
mov rcx, qword [rbp - 0x60]
call fcn.14021b810
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x140146165
mov eax, edi
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x140146165
mov rcx, qword [rbp - 0x48]
call fcn.14021b810
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140146185
mov eax, edi
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x140146185
mov rcx, qword [rsp + 0x58]
call fcn.14021b810
nop
lea rax, [rbp + 8]
mov rcx, qword [rbp]
cmp rcx, rax
je 0x140146198
call fcn.14021b810
nop
lea rax, [rbp + 0x128]
mov rcx, qword [rbp + 0x120]
cmp rcx, rax
je 0x1401461b1
call fcn.14021b810
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1401461ce
lock xadd dword [rcx], edi
cmp edi, 1
jne 0x1401461ce
mov rcx, qword [rsp + 0x70]
call fcn.14021b810
mov rax, rsi
mov rcx, qword [rbp + 0x330]
xor rcx, rsp
call fcn.140214340
lea r11, [rsp + 0x440]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.14010b060
nop
call fcn.14010b060
int3