Function at 0x568154
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc4
mov ebx, dword [ebp + 8]
mov eax, dword [0x6401e4]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp byte [ebx + 0xb], 0
mov eax, ebx
jns 0x568177
mov eax, dword [ebx]
push 0
push eax
call sub.VERSION.dll_GetFileVersionInfoSizeW
test eax, eax
je 0x5681ff
mov edi, eax
push eax
call fcn.00596343
add esp, 4
mov esi, eax
cmp byte [ebx + 0xb], 0
mov eax, ebx
jns 0x56819a
mov eax, dword [ebx]
push esi
push edi
push 0
push eax
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x5682ba
lea eax, [ebp - 0xcc]
lea ecx, [ebp - 0xc8]
push eax
push ecx
push 0x5c593a
push esi
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
test eax, eax
je 0x56836a
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0xc8]
movups xmm0, xmmword [ecx]
movups xmm1, xmmword [ecx + 0x10]
movups xmmword [eax + 0x10], xmm1
mov edx, dword [ecx + 0x30]
mov dword [eax + 0x30], edx
movups xmm1, xmmword [ecx + 0x20]
movups xmmword [eax + 0x20], xmm1
movups xmmword [eax], xmm0
mov ecx, dword [eax + 0x18]
and dword [eax + 0x1c], ecx
jmp 0x5683b1
push 1
call fcn.00483a10
add esp, 4
test al, al
je 0x5682b3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x715
je 0x5682b3
call fcn.00484390
lea ecx, [ebp - 0xbc]
push eax
push 1
push 0x1f
push str..._.._third_party_crashpad_crashpad_util_win_module_version.cc
call fcn.004844c0
lea eax, [ebp - 0xb4]
push 0x18
push str.GetFileVersionInfoSize:
push eax
call fcn.00401baa
add esp, 0xc
mov esi, eax
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x568261
mov eax, dword [ebx + 4]
mov ebx, dword [ebx]
lea edi, [ebp - 0xc8]
push eax
push ebx
push edi
call fcn.0048c5c0
add esp, 0xc
movzx eax, byte [edi + 0xb]
test al, al
jns 0x568286
mov eax, dword [ebp - 0xc4]
mov edi, dword [ebp - 0xc8]
push eax
push edi
push esi
call fcn.00401baa
add esp, 0xc
cmp byte [ebp - 0xbd], 0
jns 0x5682a8
push dword [ebp - 0xc8]
call fcn.00596316
add esp, 4
lea ecx, [ebp - 0xbc]
call fcn.00484570
xor ebx, ebx
jmp 0x5683bf
push 1
call fcn.00483a10
add esp, 4
test al, al
je 0x568366
call fcn.00484390
lea ecx, [ebp - 0xbc]
push eax
push 1
push 0x26
push str..._.._third_party_crashpad_crashpad_util_win_module_version.cc
call fcn.004844c0
lea eax, [ebp - 0xb4]
push 0x14
push str.GetFileVersionInfo:
push eax
call fcn.00401baa
add esp, 0xc
mov dword [ebp - 0xd0], eax
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x56830f
mov eax, dword [ebx + 4]
mov ebx, dword [ebx]
lea edi, [ebp - 0xc8]
push eax
push ebx
push edi
call fcn.0048c5c0
add esp, 0xc
movzx eax, byte [edi + 0xb]
test al, al
jns 0x568334
mov eax, dword [ebp - 0xc4]
mov edi, dword [ebp - 0xc8]
push eax
push edi
push dword [ebp - 0xd0]
call fcn.00401baa
add esp, 0xc
cmp byte [ebp - 0xbd], 0
jns 0x56835b
push dword [ebp - 0xc8]
call fcn.00596316
add esp, 4
lea ecx, [ebp - 0xbc]
call fcn.00484570
xor ebx, ebx
jmp 0x5683b6
push 1
call fcn.00483a10
add esp, 4
test al, al
je 0x5683b1
call fcn.00484390
lea ebx, [ebp - 0xbc]
mov ecx, ebx
push eax
push 1
push 0x31
push str..._.._third_party_crashpad_crashpad_util_win_module_version.cc
call fcn.004844c0
lea eax, [ebp - 0xb4]
push 0xd
push str.VerQueryValue
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, ebx
call fcn.00484570
test edi, edi
setne bl
push esi
call fcn.0059634c
add esp, 4
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00596351
mov eax, ebx
add esp, 0xc4
pop esi
pop edi
pop ebx
pop ebp
ret