Function at 0x140005c70
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rbx, rcx
mov rbp, rdx
lea rcx, [rsp + 0x58]
mov edx, 0x169
mov r14, r9
mov r13, r8
call fcn.140063314
mov r12, qword [rsp + 0x58]
mov r8d, 0x104
add r12, 0xc8
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
xor ebx, ebx
or rsi, 0xffffffffffffffff
lea eax, [rbx + 1]
mov rdi, rbx
cmp rbp, rbx
je 0x140005cd6
mov r15d, eax
cmp rbp, rsi
jne 0x140005cd9
mov r15d, ebx
cmp r13, rbx
je 0x140005cf3
mov edx, 0x64
mov rcx, r13
call fcn.1400633a0
mov r11, qword [r13]
mov word [r11], bx
cmp r15d, ebx
je 0x140005d0d
mov edx, 0x64
mov rcx, rbp
call fcn.1400633a0
mov r11, qword [rbp]
mov word [r11], bx
mov rax, qword [0x14013ca40]
cmp rax, rbx
jne 0x140005d93
lea r9, [rsp + 0xb0]
lea r8, [0x14013ca38]
lea rdx, [0x14011cd20]
lea rcx, str.GetFileVersionInfoSizeExW
mov qword [rsp + 0xb0], rbx
call fcn.14005c57c
lea r9, [rsp + 0xb0]
lea r8, [0x14013ca40]
lea rdx, [0x14011cd20]
lea rcx, str.GetFileVersionInfoExW
call fcn.14005c57c
mov r11, qword [0x14013ca38]
cmp r11, rbx
je 0x140005d7d
mov rax, qword [0x14013ca40]
cmp rax, rbx
jne 0x140005d9a
mov rax, rsi
mov r11, rsi
mov qword [0x14013ca38], rsi
mov qword [0x14013ca40], rax
jmp 0x140005d9a
mov r11, qword [0x14013ca38]
mov dword [rsp + 0xa8], ebx
cmp rax, rsi
jne 0x140005dbf
lea rdx, [rsp + 0xa8]
mov rcx, r12
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov esi, dword [rsp + 0xc0]
jmp 0x140005df2
mov esi, dword [rsp + 0xc0]
lea r8, [rsp + 0xa8]
mov rdx, r12
mov ecx, esi
call r11
mov ebx, eax
test eax, eax
jne 0x140005df4
lea esi, [rax + 2]
lea r8, [rsp + 0xa8]
mov rdx, r12
mov ecx, esi
call qword [0x14013ca38]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test ebx, ebx
jne 0x140005e17
test r14, r14
je 0x1400060b6
lea ecx, [rbx + 1]
test eax, eax
cmove eax, ecx
mov qword [r14], rax
jmp 0x1400060b6
and dword [rsp + 0xb0], edi
and qword [rsp + 0x38], rdi
lea edx, [rbx + 0x1a0]
lea rcx, [rsp + 0x50]
call fcn.140063028
mov r14, qword [rsp + 0x50]
mov rax, qword [0x14013ca40]
and qword [rsp + 0x30], rdi
mov qword [rsp + 0x48], r14
add r14, 0x190
cmp rax, 0xffffffffffffffff
jne 0x140005e6d
mov edx, dword [rsp + 0xa8]
mov r9, r14
mov r8d, ebx
mov rcx, r12
call sub.VERSION.dll_GetFileVersionInfoW
jmp 0x140005e84
mov r8d, dword [rsp + 0xa8]
mov r9d, ebx
mov rdx, r12
mov ecx, esi
mov qword [rsp + 0x20], r14
call rax
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x38]
lea rdx, [0x14011cce4]
mov rcx, r14
call sub.VERSION.dll_VerQueryValueW
mov rax, qword [rsp + 0x38]
test rbp, rbp
jne 0x140005eb2
mov edi, dword [rax + 0x10]
mov eax, dword [rax + 0x14]
jmp 0x140005eb8
mov edi, dword [rax + 8]
mov eax, dword [rax + 0xc]
and qword [rsp + 0x40], 0
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x40]
lea rdx, str.VarFileInfoTranslation
shl rdi, 0x20
mov rcx, r14
or rdi, rax
xor esi, esi
call sub.VERSION.dll_VerQueryValueW
mov r11, qword [rsp + 0x40]
xor r8d, r8d
cmp r11, r8
je 0x140005efe
movzx esi, word [r11]
movzx eax, word [r11 + 2]
shl esi, 0x10
or esi, eax
cmp r13, r8
jne 0x140005f0c
cmp rbp, r8
jne 0x140005fda
mov r12, qword [rsp + 0x48]
lea rdx, str.StringFileInfo_08lxProductVersion
mov r8d, esi
mov rcx, r12
call qword [sym.imp.USER32.dll_wsprintfW]
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x30]
mov rdx, r12
mov rcx, r14
call sub.VERSION.dll_VerQueryValueW
mov r11, qword [rsp + 0x30]
xor r8d, r8d
mov rbx, r11
cmp r11, r8
je 0x140005f65
cmp word [r11], r8w
je 0x140005f65
mov rcx, r11
call fcn.140005b80
mov r11, qword [rsp + 0x30]
xor r8d, r8d
mov rdi, rax
cmp r13, r8
je 0x140005fdf
cmp r11, r8
je 0x140005fc0
cmp word [rbx], r8w
je 0x140005fc0
mov rcx, qword [r13]
lea rdx, [rbx + 0xc6]
mov r13d, 0x20
cmp rbx, rdx
jae 0x140005fba
lea r9d, [r13 - 0x17]
movzx eax, word [rbx]
add rbx, 2
mov word [rcx], ax
cmp ax, r8w
je 0x140005fba
cmp r9w, ax
ja 0x140005fab
cmp ax, 0xd
jbe 0x140005fba
cmp r13w, ax
je 0x140005fba
add rcx, 2
cmp rbx, rdx
jb 0x140005f8f
mov word [rcx], r8w
jmp 0x140005fe5
mov rax, qword [rsp + 0x38]
mov rcx, qword [r13]
mov r8d, dword [rax + 0x14]
mov edx, dword [rax + 0x10]
call fcn.140005c3c
xor r8d, r8d
jmp 0x140005fdf
mov r12, qword [rsp + 0x48]
mov r13d, 0x20
cmp r15d, r8d
jne 0x140005ff3
cmp rbp, r8
je 0x1400060ac
lea rdx, str.StringFileInfo_08lxFileVersion
mov r8d, esi
mov rcx, r12
call qword [sym.imp.USER32.dll_wsprintfW]
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x30]
mov rdx, r12
mov rcx, r14
call sub.VERSION.dll_VerQueryValueW
mov r11, qword [rsp + 0x30]
xor esi, esi
mov rbx, r11
cmp r11, rsi
je 0x140006043
cmp word [r11], si
je 0x140006043
mov rcx, r11
call fcn.140005b80
mov r11, qword [rsp + 0x30]
mov rdi, rax
cmp r15d, esi
je 0x1400060ac
cmp r11, rsi
je 0x140006097
cmp word [rbx], si
je 0x140006097
mov rcx, qword [rbp]
lea rdx, [rbx + 0xc6]
cmp rbx, rdx
jae 0x140006092
mov r8d, 9
movzx eax, word [rbx]
add rbx, 2
mov word [rcx], ax
cmp ax, si
je 0x140006092
cmp r8w, ax
ja 0x140006083
cmp ax, 0xd
jbe 0x140006092
cmp r13w, ax
je 0x140006092
add rcx, 2
cmp rbx, rdx
jb 0x140006068
mov word [rcx], si
jmp 0x1400060ac
mov rax, qword [rsp + 0x38]
mov rcx, qword [rbp]
mov r8d, dword [rax + 0xc]
mov edx, dword [rax + 8]
call fcn.140005c3c
lea rcx, [rsp + 0x50]
call fcn.14005aef8
lea rcx, [rsp + 0x58]
call fcn.14005aef8
mov rbx, qword [rsp + 0xa0]
mov rax, rdi
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret