Function at 0x1801a7f00
Capabilities:
Get file version info

Disassembly:
mov r11, rsp
push rbp
push rsi
push r12
lea rbp, [r11 - 0x178]
sub rsp, 0x260
mov rax, qword [0x18029e198]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov qword [r11 + 0x10], rbx
xor esi, esi
mov qword [r11 + 0x18], rdi
mov r12d, ecx
mov qword [r11 + 0x20], r13
mov r13d, 0x3ff
mov ebx, esi
mov edi, esi
test ecx, ecx
jne 0x1801a7f6c
call fcn.1801ae410
mov edx, dword [0x1802b1e2c]
movzx eax, dx
movzx ecx, word [0x18029cd54]
and ax, r13w
cmp cx, ax
je 0x1801a7f7a
test cx, cx
je 0x1801a7f7a
mov edx, ecx
jmp 0x1801a7f70
movzx edx, r12w
bts edx, 0xb
mov dword [0x1802b1e2c], edx
movzx eax, dx
and ax, r13w
cmp ax, 9
je 0x1801a8272
mov qword [rsp + 0x258], r14
mov ecx, 0x104
mov qword [rsp + 0x250], r15
call fcn.1801139d0
mov rbx, rax
test rax, rax
je 0x1801a8257
mov ecx, dword [0x1802b1e2c]
call fcn.1801ae270
mov r14, rax
test rax, rax
je 0x1801a8257
mov rcx, qword [0x1802b4578]
mov r8d, 0x104
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], sil
jne 0x1801a7fe5
add rax, rbx
mov rdx, rax
dec rax
cmp byte [rax], 0x2e
jne 0x1801a7ff1
mov byte [rdx], 0x6c
movzx ecx, byte [r14]
mov byte [rdx + 1], cl
movzx ecx, byte [r14 + 1]
mov byte [rdx + 2], cl
mov byte [rdx + 3], sil
mov r14, rax
dec rax
cmp byte [rax], 0x5c
jne 0x1801a8012
lea rdx, [rsp + 0x34]
mov dword [rsp + 0x34], esi
mov rcx, rbx
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x20], rsi
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov r15d, eax
test eax, eax
je 0x1801a8257
mov ecx, r15d
call fcn.1801139d0
mov rdi, rax
test rax, rax
je 0x1801a8257
mov r9, rax
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call sub.VERSION.dll_GetFileVersionInfoA
test eax, eax
je 0x1801a8257
lea r8, [0x180072c30]
mov edx, 0x64
lea rcx, [rbp - 0x30]
call fcn.180114c20
lea r9, [rsp + 0x30]
mov rcx, rdi
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x30]
call sub.VERSION.dll_VerQueryValueA
test eax, eax
je 0x1801a8146
mov rcx, qword [rsp + 0x20]
mov rdx, r14
call fcn.1802215f0
test eax, eax
je 0x1801a80d6
mov rax, qword [rsp + 0x20]
mov ecx, 0x46c
mov qword [rsp + 0x38], rax
call fcn.1801ae370
mov r9d, 1
lea r8, [rsp + 0x38]
jmp 0x1801a81cc
mov r9, rdi
mov r8d, r15d
xor edx, edx
mov rcx, rbx
call sub.VERSION.dll_GetFileVersionInfoA
test eax, eax
je 0x1801a8146
lea r8, [0x180057538]
mov edx, 0x64
lea rcx, [rbp - 0x30]
call fcn.180114c20
lea r9, [rsp + 0x30]
mov rcx, rdi
lea r8, [rsp + 0x28]
lea rdx, [rbp - 0x30]
call sub.VERSION.dll_VerQueryValueA
test eax, eax
je 0x1801a81d8
cmp dword [rsp + 0x30], 0x34
jne 0x1801a8146
mov rax, qword [rsp + 0x28]
mov r8d, dword [rax + 8]
cmp r8d, 0x6003e
jne 0x1801a816d
mov rcx, rbx
call fcn.1801ae3d0
test eax, eax
jne 0x1801a824f
mov edx, 0x809
mov ecx, 0x46b
mov dword [0x1802b1e2c], edx
call fcn.1801ae370
mov rdx, rax
lea rcx, [rbp + 0x40]
call qword [sym.imp.USER32.dll_wsprintfA]
jmp 0x1801a81e3
movzx r9d, r8w
lea rdx, [0x180072c60]
shr r8d, 0x10
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_wsprintfA]
mov r9d, 0x3e
lea rdx, [0x180072c60]
lea rcx, [rsp + 0x60]
lea r8d, [r9 - 0x38]
call qword [sym.imp.USER32.dll_wsprintfA]
lea rax, [rsp + 0x48]
mov ecx, 0x46d
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
call fcn.1801ae370
mov r9d, 2
lea r8, [rsp + 0x38]
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.1801ae130
mov edx, 0x809
mov dword [0x1802b1e2c], edx
lea r8, [0x180072c68]
mov edx, 0xff
lea rcx, [rbp + 0x40]
call fcn.180221530
mov ecx, 0xdf01
call fcn.1801ae370
mov r8, rax
lea rcx, [rbp + 0x40]
mov edx, 0xff
call fcn.180221530
mov ecx, 0xdf00
mov qword [rsp + 0x38], r14
call fcn.1801ae370
mov rdx, rax
lea r8, [rsp + 0x38]
mov r9d, 1
lea rcx, [rbp - 0x68]
call fcn.1801ae130
mov r9d, gethostbyname
lea r8, [rbp - 0x68]
lea rdx, [rbp + 0x40]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [0x1802b1e2c]
jmp 0x1801a8262
mov edx, 0x809
mov dword [0x1802b1e2c], edx
mov r14, qword [rsp + 0x258]
mov r15, qword [rsp + 0x250]
and dx, r13w
mov r13, qword [rsp + 0x298]
mov word [0x18029cd54], dx
test rdi, rdi
je 0x1801a8292
mov rcx, rdi
call fcn.18010fae0
mov rdi, qword [rsp + 0x290]
test rbx, rbx
je 0x1801a82a7
mov rcx, rbx
call fcn.18010fae0
mov rbx, qword [rsp + 0x288]
test r12d, r12d
jne 0x1801a82bb
lea eax, [r12 + 1]
jmp 0x1801a82cb
movzx ecx, word [0x18029cd54]
cmp r12d, ecx
sete sil
mov eax, esi
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.1801e67e0
add rsp, 0x260
pop r12
pop rsi
pop rbp
ret