Function at 0x140005b94
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rbx, rcx
mov rbp, rdx
lea rcx, [rsp + 0x58]
mov edx, 0x169
mov r14, r9
mov r13, r8
call fcn.14005fa8c
mov r12, qword [rsp + 0x58]
mov r8d, 0x104
add r12, 0xc8
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.DLL_lstrcpynW]
xor ebx, ebx
or rsi, 0xffffffffffffffff
lea eax, [rbx + 1]
mov rdi, rbx
cmp rbp, rbx
je 0x140005bfa
mov r15d, eax
cmp rbp, rsi
jne 0x140005bfd
mov r15d, ebx
cmp r13, rbx
je 0x140005c17
mov edx, 0x64
mov rcx, r13
call fcn.14005fb18
mov r11, qword [r13]
mov word [r11], bx
cmp r15d, ebx
je 0x140005c31
mov edx, 0x64
mov rcx, rbp
call fcn.14005fb18
mov r11, qword [rbp]
mov word [r11], bx
mov rax, qword [0x14012ca30]
cmp rax, rbx
jne 0x140005cb7
lea r9, [rsp + 0xb0]
lea r8, [0x14012ca28]
lea rdx, [0x14010dc50]
lea rcx, [0x14010dc30]
mov qword [rsp + 0xb0], rbx
call fcn.140058e24
lea r9, [rsp + 0xb0]
lea r8, [0x14012ca30]
lea rdx, [0x14010dc50]
lea rcx, [0x14010dc18]
call fcn.140058e24
mov r11, qword [0x14012ca28]
cmp r11, rbx
je 0x140005ca1
mov rax, qword [0x14012ca30]
cmp rax, rbx
jne 0x140005cbe
mov rax, rsi
mov r11, rsi
mov qword [0x14012ca28], rsi
mov qword [0x14012ca30], rax
jmp 0x140005cbe
mov r11, qword [0x14012ca28]
mov dword [rsp + 0xa8], ebx
cmp rax, rsi
jne 0x140005ce3
lea rdx, [rsp + 0xa8]
mov rcx, r12
call fcn.14010add6
mov esi, dword [rsp + 0xc0]
jmp 0x140005d16
mov esi, dword [rsp + 0xc0]
lea r8, [rsp + 0xa8]
mov rdx, r12
mov ecx, esi
call r11
mov ebx, eax
test eax, eax
jne 0x140005d18
lea esi, [rax + 2]
lea r8, [rsp + 0xa8]
mov rdx, r12
mov ecx, esi
call qword [0x14012ca28]
mov ebx, eax
call qword [sym.imp.KERNEL32.DLL_GetLastError]
test ebx, ebx
jne 0x140005d3b
test r14, r14
je 0x140005fda
lea ecx, [rbx + 1]
test eax, eax
cmove eax, ecx
mov qword [r14], rax
jmp 0x140005fda
and dword [rsp + 0xb0], edi
and qword [rsp + 0x38], rdi
lea edx, [rbx + 0x1a0]
lea rcx, [rsp + 0x50]
call fcn.14005f7a0
mov r14, qword [rsp + 0x50]
mov rax, qword [0x14012ca30]
and qword [rsp + 0x30], rdi
mov qword [rsp + 0x48], r14
add r14, 0x190
cmp rax, 0xffffffffffffffff
jne 0x140005d91
mov edx, dword [rsp + 0xa8]
mov r9, r14
mov r8d, ebx
mov rcx, r12
call sub.VERSION.DLL_GetFileVersionInfoW
jmp 0x140005da8
mov r8d, dword [rsp + 0xa8]
mov r9d, ebx
mov rdx, r12
mov ecx, esi
mov qword [rsp + 0x20], r14
call rax
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x38]
lea rdx, [0x14010dc14]
mov rcx, r14
call sub.VERSION.DLL_VerQueryValueW
mov rax, qword [rsp + 0x38]
test rbp, rbp
jne 0x140005dd6
mov edi, dword [rax + 0x10]
mov eax, dword [rax + 0x14]
jmp 0x140005ddc
mov edi, dword [rax + 8]
mov eax, dword [rax + 0xc]
and qword [rsp + 0x40], 0
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x40]
lea rdx, [0x14010dbe0]
shl rdi, 0x20
mov rcx, r14
or rdi, rax
xor esi, esi
call sub.VERSION.DLL_VerQueryValueW
mov r11, qword [rsp + 0x40]
xor r8d, r8d
cmp r11, r8
je 0x140005e22
movzx esi, word [r11]
movzx eax, word [r11 + 2]
shl esi, 0x10
or esi, eax
cmp r13, r8
jne 0x140005e30
cmp rbp, r8
jne 0x140005efe
mov r12, qword [rsp + 0x48]
lea rdx, [0x14010db90]
mov r8d, esi
mov rcx, r12
call qword [sym.imp.USER32.DLL_wsprintfW]
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x30]
mov rdx, r12
mov rcx, r14
call sub.VERSION.DLL_VerQueryValueW
mov r11, qword [rsp + 0x30]
xor r8d, r8d
mov rbx, r11
cmp r11, r8
je 0x140005e89
cmp word [r11], r8w
je 0x140005e89
mov rcx, r11
call fcn.140005aa4
mov r11, qword [rsp + 0x30]
xor r8d, r8d
mov rdi, rax
cmp r13, r8
je 0x140005f03
cmp r11, r8
je 0x140005ee4
cmp word [rbx], r8w
je 0x140005ee4
mov rcx, qword [r13]
lea rdx, [rbx + 0xc6]
mov r13d, 0x20
cmp rbx, rdx
jae 0x140005ede
lea r9d, [r13 - 0x17]
movzx eax, word [rbx]
add rbx, 2
mov word [rcx], ax
cmp ax, r8w
je 0x140005ede
cmp r9w, ax
ja 0x140005ecf
cmp ax, 0xd
jbe 0x140005ede
cmp r13w, ax
je 0x140005ede
add rcx, 2
cmp rbx, rdx
jb 0x140005eb3
mov word [rcx], r8w
jmp 0x140005f09
mov rax, qword [rsp + 0x38]
mov rcx, qword [r13]
mov r8d, dword [rax + 0x14]
mov edx, dword [rax + 0x10]
call fcn.140005b60
xor r8d, r8d
jmp 0x140005f03
mov r12, qword [rsp + 0x48]
mov r13d, 0x20
cmp r15d, r8d
jne 0x140005f17
cmp rbp, r8
je 0x140005fd0
lea rdx, [0x14010db40]
mov r8d, esi
mov rcx, r12
call qword [sym.imp.USER32.DLL_wsprintfW]
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x30]
mov rdx, r12
mov rcx, r14
call sub.VERSION.DLL_VerQueryValueW
mov r11, qword [rsp + 0x30]
xor esi, esi
mov rbx, r11
cmp r11, rsi
je 0x140005f67
cmp word [r11], si
je 0x140005f67
mov rcx, r11
call fcn.140005aa4
mov r11, qword [rsp + 0x30]
mov rdi, rax
cmp r15d, esi
je 0x140005fd0
cmp r11, rsi
je 0x140005fbb
cmp word [rbx], si
je 0x140005fbb
mov rcx, qword [rbp]
lea rdx, [rbx + 0xc6]
cmp rbx, rdx
jae 0x140005fb6
mov r8d, 9
movzx eax, word [rbx]
add rbx, 2
mov word [rcx], ax
cmp ax, si
je 0x140005fb6
cmp r8w, ax
ja 0x140005fa7
cmp ax, 0xd
jbe 0x140005fb6
cmp r13w, ax
je 0x140005fb6
add rcx, 2
cmp rbx, rdx
jb 0x140005f8c
mov word [rcx], si
jmp 0x140005fd0
mov rax, qword [rsp + 0x38]
mov rcx, qword [rbp]
mov r8d, dword [rax + 0xc]
mov edx, dword [rax + 8]
call fcn.140005b60
lea rcx, [rsp + 0x50]
call fcn.140057768
lea rcx, [rsp + 0x58]
call fcn.140057768
mov rbx, qword [rsp + 0xa0]
mov rax, rdi
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret