Function at 0x1400134f0
Capabilities:
Get file version info

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
push rsi
push r14
sub rsp, 0x728
mov qword [rax + 0x10], rbx
mov rbx, r9
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov r12, rcx
mov qword [rax - 0x30], r13
mov rcx, r8
mov qword [rax - 0x38], r15
mov r13, rdx
call fcn.14004ce70
mov rcx, rbx
mov r15, rax
call fcn.14004ce70
xor esi, esi
mov r14, rax
test r15, r15
je 0x140013587
test rax, rax
je 0x140013587
mov eax, dword [rsp + 0x768]
mov r9, r14
mov r10, qword [r12 + 0x60]
mov r8, r15
mov dword [rsp + 0x28], eax
xor edx, edx
mov rax, qword [rsp + 0x760]
mov rcx, r13
mov qword [rsp + 0x20], rax
call r10
test rax, rax
jne 0x14001358c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [r12]
xor edi, edi
mov esi, eax
mov rax, rcx
jmp 0x14001359e
mov esi, 8
mov rcx, qword [r12]
xor edi, edi
mov rax, rcx
test r15, r15
je 0x140013747
test rax, rax
je 0x14001373f
test byte [rcx + 0x28], 8
mov qword [rsp + 0x720], rbp
je 0x14001364a
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x58], 0
mov rcx, r15
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov ebp, eax
test eax, eax
je 0x14001364a
mov ecx, ebp
call fcn.14004cefc
mov rbx, rax
test rax, rax
je 0x14001364a
mov edx, dword [rsp + 0x50]
mov r9, rax
mov r8d, ebp
mov rcx, r15
call sub.VERSION.dll_GetFileVersionInfoA
test eax, eax
je 0x140013642
mov eax, 0x5c
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x58]
mov word [rsp + 0x740], ax
lea rdx, [rsp + 0x740]
mov rcx, rbx
call sub.VERSION.dll_VerQueryValueA
test eax, eax
jne 0x140013630
mov qword [rsp + 0x58], 0
jmp 0x140013642
mov rax, qword [rsp + 0x58]
mov edi, dword [rax + 8]
mov eax, dword [rax + 0xc]
shl rdi, 0x20
add rdi, rax
mov rcx, rbx
call fcn.14004cee8
mov rbp, qword [rsp + 0x760]
lea r9, [rsp + 0x70]
mov r8, rbp
lea rbx, [0x140085d18]
mov rdx, r13
mov rcx, r12
call fcn.1400125c0
test eax, eax
je case.default.0x14001368e
movsxd rax, dword [rsp + 0x90]
cmp eax, 8
ja case.default.0x14001368e
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x1378c]
add rcx, rdx
jmp rcx
lea rbx, str._nosymbols_
jmp case.default.0x14001368e
lea rbx, str.COFF
jmp case.default.0x14001368e
lea rbx, [0x140085d3c]
jmp case.default.0x14001368e
lea rbx, [0x140085d40]
jmp case.default.0x14001368e
lea rbx, str._exported_
jmp case.default.0x14001368e
lea rbx, str._deferred_
jmp case.default.0x14001368e
lea rbx, [0x140085d64]
jmp case.default.0x14001368e
lea rbx, [0x140085d68]
jmp case.default.0x14001368e
lea rbx, str.Virtual
cmp byte [rsp + 0x2b4], 0
lea rcx, [rsp + 0x1b4]
mov r8, qword [rsp + 0x758]
lea rax, [rsp + 0x2b4]
mov rdx, qword [rsp + 0x750]
cmove rax, rcx
mov rcx, qword [r12]
mov r9, rbp
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x768]
mov r10, qword [rcx]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], eax
call qword [r10 + 0x10]
mov rbp, qword [rsp + 0x720]
mov rcx, r15
call fcn.14004cee8
mov r15, qword [rsp + 0x700]
mov r13, qword [rsp + 0x708]
mov r12, qword [rsp + 0x710]
mov rdi, qword [rsp + 0x718]
mov rbx, qword [rsp + 0x748]
test r14, r14
je 0x14001377c
mov rcx, r14
call fcn.14004cee8
mov eax, esi
add rsp, 0x728
pop r14
pop rsi
ret