Function at 0x140019bf0
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x2b0]
sub rsp, 0x3b0
mov rax, qword [0x1400b2080]
xor rax, rsp
mov qword [rbp + 0x2a0], rax
xor r15d, r15d
mov dword [rsp + 0x20], r15d
call fcn.140019a40
mov r8d, eax
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x140019efa
mov r9d, 0x104
lea r8, [rbp + 0x90]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
mov ebx, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140019efa
xor edx, edx
lea rcx, [rbp + 0x90]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov esi, eax
test eax, eax
je 0x140019efa
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
cmp rsi, 0x1000
jb 0x140019cd4
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x140019f2e
call fcn.1400559d8
mov rcx, rax
test rax, rax
je 0x140019f28
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140019cdc
mov rcx, rsi
call fcn.1400559d8
mov qword [rsp + 0x68], rax
lea rbx, [rax + rsi]
mov qword [rsp + 0x78], rbx
mov r8, rsi
xor edx, edx
mov rcx, rax
call fcn.140083a80
mov qword [rsp + 0x70], rbx
mov r9, qword [rsp + 0x68]
mov r8d, esi
xor edx, edx
lea rcx, [rbp + 0x90]
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x140019ebb
mov qword [rsp + 0x60], r15
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x60]
lea rdx, [0x1400a0b90]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x140019ebb
mov rax, qword [rsp + 0x60]
mov edi, dword [rax + 0x10]
mov r14d, dword [rax + 0x14]
mov ebx, edi
shr ebx, 0x10
mov esi, r14d
shr esi, 0x10
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp - 0x70]
call fcn.140083a80
lea rcx, [rbp - 0x70]
call fcn.14001b1d0
nop
movzx edx, bx
lea rcx, [rbp - 0x60]
call fcn.14001b430
mov rcx, rax
call fcn.14001d390
movzx edx, di
mov rcx, rax
call fcn.14001b430
mov rcx, rax
call fcn.14001d390
movzx edx, si
mov rcx, rax
call fcn.14001b430
mov rcx, rax
call fcn.14001d390
movzx edx, r14w
mov rcx, rax
call fcn.14001b430
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
movdqa xmm1, xmmword [0x1400a2160]
movdqu xmmword [rsp + 0x38], xmm1
mov word [rsp + 0x28], r15w
mov dword [rsp + 0x20], 2
movups xmmword [rsp + 0x48], xmm0
mov rcx, qword [rbp + 0x18]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140019e15
mov rax, qword [rbp - 0x18]
mov r8, qword [rax]
test r8, r8
je 0x140019e15
mov rax, qword [rbp - 0x38]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x10]
cmovb r8, qword [rbp + 0x10]
sub r8, rdx
sar r8, 1
jmp 0x140019e4a
test cl, 4
jne 0x140019e40
mov rax, qword [rbp - 0x20]
mov r8, qword [rax]
test r8, r8
je 0x140019e40
mov rax, qword [rbp - 0x40]
mov rdx, qword [rax]
mov rax, qword [rbp - 8]
movsxd rcx, dword [rax]
lea r8, [r8 + rcx*2]
sub r8, rdx
sar r8, 1
jmp 0x140019e4a
mov r8, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x140019e5a
lea rcx, [rsp + 0x28]
call fcn.1400160e0
nop
lea rdx, [rsp + 0x28]
lea rcx, [0x1400b30f8]
call fcn.140016200
mov rdx, qword [rsp + 0x40]
cmp rdx, 7
jbe 0x140019eae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019ea8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019f34
call fcn.1400559d0
nop
lea rcx, [rbp - 0x70]
call fcn.140019f40
mov bl, 1
jmp 0x140019ebd
xor bl, bl
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140019ef5
mov rdx, qword [rsp + 0x78]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019ef0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140019f28
call fcn.1400559d0
movzx eax, bl
jmp 0x140019efc
xor al, al
mov rcx, qword [rbp + 0x2a0]
xor rcx, rsp
call fcn.1400559b0
lea r11, [rsp + 0x3b0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.14005ed54
int3
call fcn.140006060
nop
call fcn.14005ed54
nop
int3