Function at 0x14001c914
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], r8d
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x260
mov rdi, rcx
lea rbp, [rcx + 0x18]
xor ecx, ecx
mov word [rbp], cx
mov word [rdi + 0xa18], cx
mov word [rdi + 0xc18], cx
mov word [rdi + 0xe18], cx
lea r12, [rdi + 0x218]
lea r13, [rdi + 0x418]
mov word [r12], cx
mov word [r13], cx
lea r14, [rdi + 0x618]
mov word [r14], cx
lea r15, [rdi + 0x818]
mov rbx, rdx
mov word [r15], cx
mov ecx, r8d
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r8d, dword [rsp + 0x2b0]
xor edx, edx
mov r9, rax
mov rcx, rbx
mov rsi, rax
call sub.VERSION.dll_GetFileVersionInfoW
lea r9, [rsp + 0x2b0]
lea r8, [rsp + 0x2a0]
lea rdx, [0x14001f2e8]
mov rcx, rsi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14001c9f1
mov rcx, qword [rsp + 0x2a0]
mov eax, dword [rcx + 0x30]
mov dword [rdi + 4], eax
mov eax, dword [rcx + 8]
mov dword [rdi], eax
mov eax, dword [rcx + 0x14]
mov dword [rdi + 0xc], eax
mov eax, dword [rcx + 0x10]
mov dword [rdi + 8], eax
mov eax, dword [rcx + 0x24]
mov dword [rdi + 0x10], eax
mov eax, dword [rcx + 0x28]
mov dword [rdi + 0x14], eax
lea r9, [rsp + 0x2b0]
lea r8, [rsp + 0x2b8]
lea rdx, str.VarFileInfoTranslation
mov rcx, rsi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14001ca80
mov rax, qword [rsp + 0x2b8]
lea r8, str._4.4X_4.4X
mov edx, 0x14
movzx ecx, word [rax + 2]
movzx r9d, word [rax]
mov dword [rsp + 0x20], ecx
lea rcx, [rsp + 0x30]
call sub.msvcrt.dll__snwprintf
lea r11, [rsp + 0x60]
lea r9, [0x14001e908]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.14001c824
test eax, eax
jne 0x14001ca9b
xor ecx, ecx
lea rdx, str.040904E4
movzx eax, word [rcx + rdx]
add rcx, 2
test ax, ax
mov word [rsp + rcx + 0x2e], ax
jne 0x14001ca6c
jmp 0x14001ca9b
xor ecx, ecx
lea rdx, str.040904E4
movzx eax, word [rcx + rdx]
add rcx, 2
test ax, ax
mov word [rsp + rcx + 0x2e], ax
jne 0x14001ca89
lea r9, [0x140020a78]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], rbp
call fcn.14001c824
lea r9, [0x140020a90]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r12
call fcn.14001c824
lea r9, [0x140020ab0]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r13
call fcn.14001c824
lea r9, [0x140020ac8]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r14
call fcn.14001c824
lea r9, [0x140020ae8]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r15
call fcn.14001c824
lea r11, [rdi + 0xa18]
lea r9, [0x140020b00]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.14001c824
lea r11, [rdi + 0xc18]
lea r9, [0x140020b20]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.14001c824
lea r11, [rdi + 0xe18]
lea r9, str.OriginalFileName
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.14001c824
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rbx, qword [rsp + 0x2a8]
mov eax, 1
add rsp, 0x260
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret