Function at 0x18002c210
Capabilities:
Get file version info

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x38], 0xfffffffffffffffe
mov qword [rsp + 0xc0], rbx
mov rax, qword [0x180201020]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rbx, rdx
mov r14, rcx
xor r8d, r8d
lea rdx, [0x180196818]
call fcn.180003950
xor r8d, r8d
lea rdx, [0x180196818]
lea rcx, [r14 + 0x20]
call fcn.180003950
xor r8d, r8d
lea rdx, [0x180196818]
lea rcx, [r14 + 0x40]
call fcn.180003950
xor r8d, r8d
lea rdx, [0x180196818]
lea rcx, [r14 + 0x60]
call fcn.180003950
lea rcx, [r14 + 0x80]
xor r8d, r8d
lea rdx, [0x180196818]
call fcn.180003950
lea rcx, [r14 + 0xa0]
xor r8d, r8d
lea rdx, [0x180196818]
call fcn.180003950
lea rcx, [r14 + 0xc0]
xor r8d, r8d
lea rdx, [0x180196818]
call fcn.180003950
lea rcx, [r14 + 0xe0]
xor r8d, r8d
lea rdx, [0x180196818]
call fcn.180003950
lea rcx, [r14 + 0x100]
xor r8d, r8d
lea rdx, [0x180196818]
call fcn.180003950
lea rcx, [r14 + 0x120]
xor r8d, r8d
lea rdx, [0x180196818]
call fcn.180003950
lea rcx, [r14 + 0x140]
xor r8d, r8d
lea rdx, [0x180196818]
call fcn.180003950
lea rcx, [r14 + 0x160]
xor r8d, r8d
lea rdx, [0x180196818]
call fcn.180003950
xor eax, eax
mov dword [rbp - 0x44], eax
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x18002c351
mov rcx, qword [rbx]
lea rdx, [rbp - 0x44]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov esi, eax
test eax, eax
je 0x18002c3c4
mov ecx, esi
lea rdx, [0x180205ba0]
call fcn.18011720c
mov rdi, rax
test rax, rax
je 0x18002c3c4
cmp qword [rbx + 0x18], 8
jb 0x18002c381
mov rbx, qword [rbx]
mov r9, rdi
mov r8d, esi
mov edx, dword [rbp - 0x44]
mov rcx, rbx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
mov rcx, rdi
test eax, eax
je 0x18002c3bf
xor ebx, ebx
mov qword [rbp - 0x40], rbx
mov dword [rbp - 0x48], ebx
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x40]
lea rdx, str.VarFileInfoTranslation
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
jne 0x18002c3cb
mov rcx, rdi
call fcn.180116bc4
xor al, al
jmp 0x18002c908
mov rax, qword [rbp - 0x40]
movzx esi, word [rax]
shl esi, 0x10
movzx eax, word [rax + 2]
or esi, eax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1801a9390]
movdqu xmmword [rbp - 0x20], xmm1
mov word [rbp - 0x30], bx
mov qword [rbp - 0x50], rbx
lea r9, [0x18019d1a8]
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
mov rbx, 0xffffffffffffffff
test eax, eax
je 0x18002c463
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c463
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x18002c450
mov rcx, r14
call fcn.180003950
xor eax, eax
mov qword [rbp - 0x50], rax
lea r9, [0x18019d1f8]
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c4c6
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c4c6
mov r8, rbx
inc r8
cmp word [rdx + r8*2], 0
jne 0x18002c4b2
lea rcx, [r14 + 0x20]
call fcn.180003950
xor r15d, r15d
mov qword [rbp - 0x50], r15
lea r9, [0x18019d268]
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c529
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c529
mov r8, rbx
inc r8
cmp word [rdx + r8*2], r15w
jne 0x18002c516
lea rcx, [r14 + 0x40]
call fcn.180003950
mov qword [rbp - 0x50], r15
lea r9, [0x18019d250]
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c589
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c589
mov r8, rbx
inc r8
cmp word [rdx + r8*2], r15w
jne 0x18002c576
lea rcx, [r14 + 0x60]
call fcn.180003950
mov qword [rbp - 0x50], r15
lea r9, [0x18019d2a0]
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c5ec
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c5ec
mov r8, rbx
inc r8
cmp word [rdx + r8*2], r15w
jne 0x18002c5d6
lea rcx, [r14 + 0x80]
call fcn.180003950
mov qword [rbp - 0x50], r15
lea r9, [0x18019d280]
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c656
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c656
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rdx + r8*2], r15w
jne 0x18002c640
lea rcx, [r14 + 0xa0]
call fcn.180003950
mov qword [rbp - 0x50], r15
lea r9, [0x18019d2e0]
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c6b9
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c6b9
mov r8, rbx
inc r8
cmp word [rdx + r8*2], r15w
jne 0x18002c6a3
lea rcx, [r14 + 0xc0]
call fcn.180003950
mov qword [rbp - 0x50], r15
lea r9, str.LegalTrademarks
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c71c
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c71c
mov r8, rbx
inc r8
cmp word [rdx + r8*2], r15w
jne 0x18002c706
lea rcx, [r14 + 0xe0]
call fcn.180003950
mov qword [rbp - 0x50], r15
lea r9, str.PrivateBuild
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c786
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c786
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rdx + r8*2], r15w
jne 0x18002c770
lea rcx, [r14 + 0x100]
call fcn.180003950
mov qword [rbp - 0x50], r15
lea r9, [0x18019d300]
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c7e9
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c7e9
mov r8, rbx
inc r8
cmp word [rdx + r8*2], r15w
jne 0x18002c7d3
lea rcx, [r14 + 0x120]
call fcn.180003950
mov qword [rbp - 0x50], r15
lea r9, [0x18019d358]
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c84c
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c84c
mov r8, rbx
inc r8
cmp word [rdx + r8*2], r15w
jne 0x18002c836
lea rcx, [r14 + 0x140]
call fcn.180003950
mov qword [rbp - 0x50], r15
lea r9, str.SpecialBuild
mov r8d, esi
lea rdx, str.StringFileInfo_08lx_s
lea rcx, [rbp - 0x30]
call fcn.18007b760
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rdx, qword [rbp - 0x30]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x18002c8af
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x18002c8af
inc rbx
cmp word [rdx + rbx*2], r15w
jne 0x18002c896
mov r8, rbx
lea rcx, [r14 + 0x160]
call fcn.180003950
mov rcx, rdi
call fcn.180116bc4
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x18002c8f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002c8ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002c92c
call fcn.180116bc4
movdqa xmm0, xmmword [0x1801a9390]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x30], r15w
mov al, 1
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.180116780
mov rbx, qword [rsp + 0xc0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18013ed94
int3