Function at 0x14008b0b0
Capabilities:
Get file version info

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x360
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov rax, qword [0x1402120d8]
xor rax, rsp
mov qword [rsp + 0x350], rax
mov rsi, r8
mov rbx, rdx
mov r14, rcx
mov qword [rsp + 0x30], rcx
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x18], 7
mov word [rcx], r12w
mov dword [rsp + 0x20], 1
mov dword [rsp + 0x4c], r12d
mov rcx, rdx
cmp qword [rdx + 0x18], 8
jb 0x14008b11d
mov rcx, qword [rdx]
lea rdx, [rsp + 0x4c]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
test eax, eax
je 0x14008b35d
lea ebp, [rax + 1]
mov edi, ebp
add rdi, rdi
mov rcx, rdi
call fcn.140186d00
mov r15, rax
test rax, rax
je 0x14008b35d
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.140175ab0
cmp qword [rbx + 0x18], 8
jb 0x14008b163
mov rbx, qword [rbx]
mov r9, r15
mov r8d, ebp
xor edx, edx
mov rcx, rbx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x14008b355
mov dword [rsp + 0x48], r12d
mov qword [rsp + 0x38], r12
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x38]
lea rdx, [0x1401dd928]
mov rcx, r15
call qword [sym.imp.api_ms_win_core_version_l1_1_0.dll_VerQueryValueW]
test eax, eax
je 0x14008b355
xor edx, edx
mov r8d, 0x200
lea rcx, [rsp + 0x150]
call fcn.140175ab0
mov rax, qword [rsp + 0x38]
movzx r8d, word [rax]
shl r8d, 0x10
movzx eax, word [rax + 2]
or r8d, eax
cmp qword [rsi + 0x18], 8
jb 0x14008b1db
mov rsi, qword [rsi]
mov r9, rsi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rsp + 0x150]
call fcn.140089810
mov qword [rsp + 0x40], r12
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x150]
mov rcx, r15
call qword [sym.imp.api_ms_win_core_version_l1_1_0.dll_VerQueryValueW]
test eax, eax
je 0x14008b355
mov rdx, qword [rsp + 0x40]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14008b230
mov rcx, r14
call fcn.1400550f0
mov rbx, r14
mov rsi, qword [r14 + 0x18]
cmp rsi, 8
jb 0x14008b253
mov rbx, qword [r14]
mov rdi, qword [r14 + 0x10]
test rdi, rdi
je 0x14008b329
mov ebp, 0x100
mov r8d, ebp
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.140175ab0
lea rcx, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x1401dd962]
movzx eax, word [rcx]
cmp ax, bp
jae 0x14008b2d3
movzx eax, al
mov byte [rsp + rax + 0x50], 1
add rcx, 2
cmp rcx, rdx
jne 0x14008b282
lea rcx, [rdi - 1]
mov rax, 0xffffffffffffffff
cmp rcx, rax
cmovb rax, rcx
lea rcx, [rbx + rax*2]
movzx eax, word [rcx]
cmp ax, bp
jae 0x14008b2cb
cmp byte [rsp + rax + 0x50], 0
je 0x14008b2cb
cmp rcx, rbx
je 0x14008b329
sub rcx, 2
jmp 0x14008b2b1
sub rcx, rbx
sar rcx, 1
jmp 0x14008b330
lea rcx, [rdi - 1]
mov rax, 0xffffffffffffffff
cmp rcx, rax
cmovb rax, rcx
lea rcx, [rbx + rax*2]
mov r9d, reloc.WLDAP32.dll_Ordinal_32
nop
mov edx, 1
movzx r8d, word [rcx]
lea rax, reloc.WLDAP32.dll_Ordinal_32
cmp r9w, r8w
je 0x14008b31e
cmp rdx, 1
je 0x14008b2cb
dec rdx
add rax, 2
cmp word [rax], r8w
jne 0x14008b306
test rax, rax
je 0x14008b2cb
cmp rcx, rbx
je 0x14008b329
sub rcx, 2
jmp 0x14008b2f0
mov rcx, 0xffffffffffffffff
cmp ecx, 0xffffffff
je 0x14008b355
movsxd rax, ecx
inc rax
cmp rdi, rax
jb 0x14008b382
mov rcx, r14
cmp rsi, 8
jb 0x14008b34c
mov rcx, qword [r14]
mov qword [r14 + 0x10], rax
mov word [rcx + rax*2], r12w
mov rcx, r15
call fcn.14017eed8
mov rax, r14
mov rcx, qword [rsp + 0x350]
xor rcx, rsp
call fcn.1401571e0
add rsp, 0x360
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
call fcn.1400547a0
int3