Function at 0x14008d780
Capabilities:
Get file version info

Disassembly:
push rbx
push rdi
sub rsp, 0x158
mov rbx, rcx
mov rcx, qword [0x14012a950]
mov rdi, rdx
call fcn.1400243d0
test rdi, rdi
je 0x14008dbc2
cmp word [rdi], 0
je 0x14008dbc2
lea rdx, [rsp + 0x178]
mov rcx, rdi
mov qword [rsp + 0x148], rsi
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov esi, eax
test eax, eax
jne 0x14008d7fa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x1401255c8]
mov dl, 1
mov dword [rcx + 0x40], eax
mov rcx, rbx
call fcn.14004ced0
mov rsi, qword [rsp + 0x148]
add rsp, 0x158
pop rdi
pop rbx
ret
mov rcx, rsi
mov qword [rsp + 0x150], rbp
call fcn.1400d6f08
mov r8d, esi
xor edx, edx
mov r9, rax
mov rcx, rdi
mov rbp, rax
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x14008db9e
lea r9, [rsp + 0x180]
lea r8, [rsp + 0x188]
lea rdx, [0x1400f75d8]
mov rcx, rbp
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x14008db9e
mov rax, qword [rsp + 0x188]
mov esi, 0x80
lea r8, str._u._u._u._u
mov edx, dword [rax + 0xc]
mov r9d, dword [rax + 8]
movzx ecx, dx
shr edx, 0x10
movzx eax, r9w
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
lea rcx, [rsp + 0x40]
shr r9d, 0x10
mov edx, esi
mov dword [rsp + 0x20], eax
call fcn.1400b9310
mov rcx, rbp
call fcn.1400d6fc8
mov rax, qword [0x1401255c8]
xor ebp, ebp
xor edx, edx
mov rcx, rbx
mov dword [rax + 0x40], ebp
call fcn.14004ced0
mov rbx, qword [0x14012a950]
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x14008d8dd
mov rcx, qword [rbx + 0x10]
lea rdx, [rsp + 0x40]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400bd640
mov ebp, eax
jmp 0x14008db43
lea rax, [rsp + 0x40]
mov qword [rsp + 0x140], r12
cmp qword [rbx + 8], rax
jne 0x14008d8f9
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x14008d90e
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x40]
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r12, [rcx - 1]
lea rax, [r12 + 1]
lea rdi, [rax + rax]
cmp dl, 2
jne 0x14008d930
lea rcx, [rsp + 0x40]
mov rdx, r12
call fcn.140006da0
mov ebp, eax
jmp 0x14008db3b
mov rcx, qword [0x1401255a0]
cmp rdi, rcx
jbe 0x14008d963
cmp rdi, qword [rbx + 0x18]
jbe 0x14008d963
lea r8, [0x1400f1524]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x14012c5c0]
call fcn.14004e590
mov ebp, eax
jmp 0x14008db3b
cmp rax, 2
jae 0x14008d97d
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400bdcf0
jmp 0x14008db36
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14008d99a
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rdi, r8
jbe 0x14008db0a
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x14008d9d3
cmp al, 2
je 0x14008da0b
mov rsi, qword [rsp + 0x178]
mov rax, qword [rsp + 0x178]
jmp 0x14008dafe
cmp rdi, rsi
ja 0x14008da0b
cmp rdi, 8
ja 0x14008d9e5
mov esi, 8
jmp 0x14008d9f1
mov eax, reloc.WSOCK32.dll_recv
cmp rdi, rax
cmovbe rsi, rax
mov rcx, rsi
call fcn.1400b60a0
test rax, rax
je 0x14008db3b
mov byte [rbx + 0x20], 1
jmp 0x14008dafe
cmp rdi, 0x20
jae 0x14008da1b
mov esi, SafeArrayAllocDescriptor
jmp 0x14008dac5
mov esi, 0x208
cmp rdi, rsi
jb 0x14008dac5
cmp rdi, 0x50000
jae 0x14008da81
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x14008da48
addsd xmm0, qword [0x140112018]
mulsd xmm0, qword [0x140112050]
movsd xmm1, qword [0x140112048]
xor eax, eax
comisd xmm0, xmm1
jbe 0x14008da77
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14008da77
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rsi, xmm0
add rsi, rax
jmp 0x14008dac5
cmp rdi, 0x320000
jae 0x14008da93
lea rsi, [rdi + 0x8000]
jmp 0x14008dac5
cmp rdi, 0xc80000
jae 0x14008dabe
movabs rax, 0x47ae147ae147ae15
mov rsi, rdi
mul rdi
sub rsi, rdx
shr rsi, 1
add rsi, rdx
shr rsi, 6
add rsi, rdi
jmp 0x14008dac5
lea rsi, [rdi + 0x20000]
cmp rsi, rcx
cmova rsi, rcx
cmp r9b, 2
jne 0x14008dae5
test r8, r8
je 0x14008dae5
mov rcx, qword [rbx + 8]
mov dil, 1
call fcn.1400d6fc8
jmp 0x14008dae8
xor dil, dil
test rsi, rsi
js 0x14008db5f
mov rcx, rsi
call fcn.1400d6f08
test rax, rax
je 0x14008db5f
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
mov rcx, qword [rbx + 8]
lea rax, [rsp + 0x40]
cmp rcx, rax
je 0x14008db26
lea r8, [r12 + r12]
lea rdx, [rsp + 0x40]
call fcn.1400d7a30
mov rax, qword [rbx + 8]
lea rcx, [r12 + r12]
mov word [rcx + rax], bp
mov qword [rbx + 0x10], rcx
mov ebp, 1
mov r12, qword [rsp + 0x140]
mov eax, ebp
mov rbp, qword [rsp + 0x150]
mov rsi, qword [rsp + 0x148]
add rsp, 0x158
pop rdi
pop rbx
ret
test dil, dil
je 0x14008db75
lea rax, [0x14012c4b8]
mov qword [rbx + 0x18], rbp
mov qword [rbx + 8], rax
jmp 0x14008db7c
mov rax, qword [rbx + 8]
mov word [rax], bp
lea r8, [0x1400f1524]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012c5c0]
mov qword [rbx + 0x10], rbp
call fcn.14004e590
mov ebp, eax
jmp 0x14008db3b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x1401255c8]
mov dword [rcx + 0x40], eax
mov rcx, rbp
call fcn.1400d6fc8
mov dl, 1
mov rcx, rbx
call fcn.14004ced0
jmp 0x14008db45
mov rax, qword [0x1401255c8]
mov dl, 1
mov rcx, rbx
mov dword [rax + 0x40], 0x57
call fcn.14004ced0
add rsp, 0x158
pop rdi
pop rbx
ret