Function at 0x140002078
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
push rdi
push r12
push r13
push r15
lea rbp, [rsp - 0x360]
sub rsp, 0x460
mov rax, qword [0x14007e4a8]
xor rax, rsp
mov qword [rbp + 0x350], rax
and dword [rsp + 0x20], 0
lea rdx, [0x14005b078]
mov rsi, r8
mov qword [rsp + 0x78], r8
xor r8d, r8d
xor r9d, r9d
xor ecx, ecx
call fcn.140014830
xor edx, edx
lea rcx, [rbp + 0x140]
mov r8d, 0x208
call fcn.140021f80
mov r8d, 0x104
lea rdx, [rbp + 0x140]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov r15d, 1
lea r12, str.wWinMain
lea r13, str.E:BT_ad7a08e3_3faa_4683_b8f2_1da0b0dd1c71UBF_1ActivationWizardHost_srcAWFwkMcAWFwk.cpp
lea ebx, [r15 + 4]
test eax, eax
je 0x140002148
mov ecx, r15d
call fcn.140014880
test eax, eax
je 0x140002172
lea rax, [rbp + 0x140]
mov r8, r12
mov qword [rsp + 0x28], rax
lea r9d, [r15 + 0x34]
lea rax, str.GetModuleFileName:__s
mov rdx, r13
mov ecx, r15d
mov qword [rsp + 0x20], rax
call fcn.140001dc8
jmp 0x140002172
mov ecx, ebx
call fcn.140014880
test eax, eax
je 0x140002172
lea rax, str.Unable_to_acquire_the_path_of_the_module
mov r9d, 0x39
mov r8, r12
mov qword [rsp + 0x20], rax
mov rdx, r13
mov ecx, ebx
call fcn.140001e30
and dword [rsp + 0x58], 0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x140]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov ecx, eax
mov ebx, eax
call fcn.14001ff64
mov edx, dword [rsp + 0x58]
lea rcx, [rbp + 0x140]
and dword [rsp + 0x54], 0
mov r9, rax
mov r8d, ebx
mov rdi, rax
call sub.VERSION.dll_GetFileVersionInfoW
cmp eax, r15d
jne 0x1400022fa
lea r9, [rsp + 0x54]
mov rcx, rdi
lea r8, [rsp + 0x70]
lea rdx, str.VarFileInfoTranslation
call sub.VERSION.dll_VerQueryValueW
cmp eax, r15d
jne 0x1400022cb
cmp dword [rsp + 0x54], 0
jbe 0x1400022cb
xor edx, edx
lea rcx, [rbp - 0x80]
mov r8d, 0x100
call fcn.140021f80
mov rax, qword [rsp + 0x70]
lea rdx, str.StringFileInfo_04x_04xFileVersion
lea rcx, [rbp - 0x80]
movzx r9d, word [rax + 2]
movzx r8d, word [rax]
call fcn.140001f38
and qword [rsp + 0x68], 0
lea r9, [rsp + 0x54]
lea r8, [rsp + 0x68]
mov rcx, rdi
lea rdx, [rbp - 0x80]
call sub.VERSION.dll_VerQueryValueW
cmp eax, r15d
jne 0x14000233b
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x64]
lea rax, [rsp + 0x60]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rdx, str._u__u__u__u
call fcn.140002028
cmp eax, 4
jne 0x14000233b
mov ecx, r15d
call fcn.140014880
test eax, eax
je 0x14000233b
lea rax, [rsp + 0x5c]
mov r9d, 0x54
mov qword [rsp + 0x40], rax
mov r8, r12
lea rax, [rsp + 0x60]
mov rdx, r13
mov qword [rsp + 0x38], rax
mov ecx, r15d
lea rax, [rsp + 0x64]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, str.Version:__u._u._u._u
mov qword [rsp + 0x20], rax
call fcn.140001e8c
jmp 0x14000233b
mov ebx, 5
mov ecx, ebx
call fcn.140014880
test eax, eax
je 0x14000233b
lea rax, str.VerQueryValue_failed_acquiring_VarFileInfoTranslation
mov r8, r12
lea r9d, [rbx + 0x55]
mov qword [rsp + 0x20], rax
mov rdx, r13
mov ecx, ebx
call fcn.140001e30
jmp 0x14000233b
mov ebx, 5
mov ecx, ebx
call fcn.140014880
test eax, eax
je 0x14000233b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x50], eax
lea r9d, [rbx + 0x5a]
lea rax, [rsp + 0x50]
mov r8, r12
mov qword [rsp + 0x28], rax
mov rdx, r13
lea rax, str.Unable_to_acquire_version_information__GetLastError:__d
mov ecx, ebx
mov qword [rsp + 0x20], rax
call fcn.140001280
test rdi, rdi
je 0x140002348
mov rcx, rdi
call fcn.14001ff30
mov ecx, r15d
call fcn.140014880
test eax, eax
je 0x140002392
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x50], eax
mov r9d, 0x68
lea rax, [rsp + 0x50]
mov r8, r12
mov qword [rsp + 0x30], rax
mov rdx, r13
lea rax, [rsp + 0x78]
mov ecx, r15d
mov qword [rsp + 0x28], rax
lea rax, str._tWinMain__:_lpCmdLine_s__ThreadID:0x_x__r_n
mov qword [rsp + 0x20], rax
call fcn.1400012ec
cmp dword [0x14007e050], 0xb7
je 0x14000240f
lea rcx, [rbp - 0x80]
call fcn.140003384
lea rdx, [0x1400806d0]
lea rcx, [rbp - 0x80]
call fcn.140003504
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.140006318
test eax, eax
je 0x1400023d8
mov rdx, rsi
lea rcx, [0x1400806d0]
call fcn.140002a00
jmp 0x140002404
mov ecx, r15d
call fcn.140014880
test eax, eax
je 0x140002404
lea rax, str.Not_a_valid_switch___exiting...
mov r9d, 0x76
mov r8, r12
mov qword [rsp + 0x20], rax
mov rdx, r13
mov ecx, r15d
call fcn.140001e30
lea rcx, [rbp - 0x80]
call fcn.140003454
jmp 0x14000244a
mov ecx, r15d
call fcn.140014880
test eax, eax
je 0x14000243b
lea rax, str.Another_instance_running__exiting...
mov r9d, 0x7b
mov r8, r12
mov qword [rsp + 0x20], rax
mov rdx, r13
mov ecx, r15d
call fcn.140001e30
mov rdx, rsi
lea rcx, [0x1400806d0]
call fcn.140002a00
xor eax, eax
mov rcx, qword [rbp + 0x350]
xor rcx, rsp
call fcn.140020250
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rbp
ret