Function at 0x1400110a0
Capabilities:
Get file version info

Disassembly:
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa8
mov qword [rbp - 0x11], 0xfffffffffffffffe
mov rsi, rdx
mov r14, rcx
mov rcx, qword [rdx]
sub rcx, 0x18
call fcn.140001420
add rax, 0x18
mov qword [rbp - 0x51], rax
lea rdx, [0x14008bf3c]
lea rcx, [rbp - 0x51]
call fcn.140003bb0
mov rbx, qword [rbp - 0x51]
movsxd rdi, dword [rbx - 0x10]
test edi, edi
jns 0x140011110
mov ecx, 0x80070057
call fcn.140001bf0
int3
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140011130
mov edx, edi
lea rcx, [rbp - 0x51]
call fcn.140001b70
mov rbx, qword [rbp - 0x51]
lea eax, [rdi + 1]
movsxd rdx, eax
mov rcx, rbx
call fcn.140040d48
cmp edi, dword [rbx - 0xc]
jg 0x140011683
mov dword [rbx - 0x10], edi
xor r13d, r13d
mov word [rbx + rdi*2], r13w
cmp dword [rbx - 0x10], r13d
jl 0x1400111af
lea rdx, [0x14008bf40]
mov rcx, rbx
call fcn.1400408a4
test rax, rax
je 0x1400111af
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x1400111af
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x140011191
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400111a8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov al, 1
jmp 0x14001168e
call fcn.140001e70
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x1400111cf
mov ecx, 0x80004005
call fcn.140001bf0
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x59], rax
lea rdx, [0x140089d70]
test rdx, 0xffffffffffff0000
jne 0x140011210
movzx edi, dx
mov ecx, edi
call fcn.1400099b0
test rax, rax
je 0x14001121d
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x59]
call fcn.140003170
jmp 0x14001121d
xor r8d, r8d
lea rcx, [rbp - 0x59]
call fcn.140009350
nop
mov rcx, qword [r14 + 0x10]
sub rcx, 0x18
call fcn.140001420
add rax, 0x18
mov qword [rbp - 0x21], rax
mov r8d, dword [r14 + 0x20]
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 9]
call fcn.140017bd0
nop
mov rcx, qword [rax + 0x18]
sub rcx, 0x18
call fcn.140001420
add rax, 0x18
mov qword [rbp - 0x41], rax
mov rdx, qword [rbp + 0xf]
add rdx, 0xffffffffffffffe8
or r14d, 0xffffffff
lock add dword [rdx + 0x10], r14d
jg 0x140011275
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rdi, qword [rbp - 0x41]
cmp dword [rdi - 0x10], 3
jle 0x14001139a
mov dword [rbp + 0x7f], r13d
mov dword [rbp - 0x39], r13d
lea rdx, [rbp + 0x7f]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov esi, eax
mov ecx, eax
call fcn.14001b77c
mov r15, rax
mov r9, rax
mov r8d, esi
mov edx, dword [rbp + 0x7f]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x140011337
lea r9, [rbp - 0x39]
lea r8, [rbp - 0x49]
lea rdx, [0x14008b800]
mov rcx, r15
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x140011337
mov ecx, 0x10
call fcn.14001b77c
mov rdi, rax
mov rcx, qword [rbp - 0x49]
movzx r8d, word [rcx + 0xa]
mov dword [rax], r8d
mov rcx, qword [rbp - 0x49]
movzx r9d, word [rcx + 8]
mov dword [rax + 4], r9d
mov rcx, qword [rbp - 0x49]
movzx r10d, word [rcx + 0xe]
mov dword [rax + 8], r10d
mov rcx, qword [rbp - 0x49]
movzx edx, word [rcx + 0xc]
mov dword [rax + 0xc], edx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, str._d._d._d._d
lea rcx, [rbp - 0x59]
call fcn.140012c20
mov rcx, rdi
call fcn.1400407cc
jmp 0x140011390
mov rdx, qword [0x1400ab478]
lea rcx, [rdx - 0x18]
mov rdi, qword [rbp - 0x59]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x140011390
cmp dword [rdi + 0x10], 0
jl 0x140011383
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140011383
call fcn.140001420
mov rsi, rax
lock add dword [rdi + 0x10], 0xffffffff
jg 0x140011379
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [r8 + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x59], rax
jmp 0x140011390
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x59]
call fcn.140009350
mov rcx, r15
call fcn.1400407cc
jmp 0x1400113f3
mov rdx, qword [0x1400ab470]
lea rcx, [rdx - 0x18]
mov rdi, qword [rbp - 0x59]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x1400113f3
cmp dword [rdi + 0x10], 0
jl 0x1400113e6
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400113e6
call fcn.140001420
mov rsi, rax
lock add dword [rdi + 0x10], 0xffffffff
jg 0x1400113dc
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [r8 + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x59], rax
jmp 0x1400113f3
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x59]
call fcn.140009350
mov r12, qword [rbp - 0x59]
add r12, 0xffffffffffffffe8
mov rcx, r12
call fcn.140001420
add rax, 0x18
mov qword [rbp - 0x31], rax
lea rdx, [0x14008bf3c]
lea rcx, [rbp - 0x31]
call fcn.140003bb0
mov rcx, qword [rbp + 0x67]
add rcx, 0x1c0
mov rdi, qword [rbp - 0x31]
lea r15, [rdi - 0x18]
mov rsi, qword [rcx]
sub rsi, 0x18
cmp r15, rsi
je 0x140011488
cmp dword [rsi + 0x10], 0
jl 0x14001147c
mov rax, qword [rsi]
cmp qword [r15], rax
jne 0x14001147c
mov rcx, r15
call fcn.140001420
mov rdi, rax
lock add dword [rsi + 0x10], 0xffffffff
jg 0x140011467
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [r8 + 8]
lea rax, [rdi + 0x18]
mov rcx, qword [rbp + 0x67]
mov qword [rcx + 0x1c0], rax
mov rdi, qword [rbp - 0x31]
jmp 0x140011488
mov r8d, dword [rdi - 0x10]
mov rdx, rdi
call fcn.140009350
mov rsi, qword [rbp - 0x51]
test rdi, rdi
je 0x1400114b6
cmp dword [rbx - 0x10], 0
jl 0x1400114df
mov rdx, rdi
mov rcx, rsi
call fcn.1400408a4
test rax, rax
je 0x1400114b6
sub rax, rsi
sar rax, 1
cmp eax, 0xffffffff
jne 0x140011617
cmp dword [rbx - 0x10], 0
jl 0x1400114df
lea rdx, [0x14008bf60]
mov rcx, rsi
call fcn.1400408a4
test rax, rax
je 0x1400114df
sub rax, rsi
sar rax, 1
cmp eax, 0xffffffff
jne 0x140011617
cmp byte [rbp + 0x77], 0
jne 0x140011617
call fcn.140001e70
mov rcx, rax
test rax, rax
setne r13b
test r13d, r13d
jne 0x140011508
mov ecx, 0x80004005
call fcn.140001bf0
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x29], rax
lea r8, [rbp - 0x59]
lea rdx, [0x14008bf68]
lea rcx, [rbp - 0x19]
call fcn.140002e10
nop
mov r9, qword [rax]
mov rsi, qword [rbp + 0x6f]
mov r8, qword [rsi]
mov rdx, qword [0x1400ab468]
lea rcx, [rbp - 0x29]
call fcn.140012c20
nop
mov rdx, qword [rbp - 0x19]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001155e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov r9d, 0x34
mov r8, qword [0x1400ab410]
mov rbx, qword [rbp - 0x29]
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
sete dil
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140011596
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lock add dword [r15 + 0x10], 0xffffffff
jg 0x1400115ab
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x41]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400115c4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lock add dword [r12 + 0x10], 0xffffffff
jg 0x1400115db
mov rcx, qword [r12]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x51]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x1400115f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140011611
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
movzx eax, dil
jmp 0x14001168e
lock add dword [r15 + 0x10], 0xffffffff
jg 0x14001162c
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x41]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140011645
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lock add dword [r12 + 0x10], 0xffffffff
jg 0x14001165c
mov rcx, qword [r12]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x51]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14001167a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rsi, qword [rbp + 0x6f]
jmp 0x140011191
mov ecx, 0x80070057
call fcn.140001bf0
nop
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret