Function at 0x1400a5cd0
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], r8d
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x260
lea rbp, [rcx + 0x18]
lea r12, [rcx + 0x218]
lea r13, [rcx + 0x418]
lea r14, [rcx + 0x618]
lea r15, [rcx + 0x818]
mov rdi, rcx
mov word [rcx + 0xa18], 0
mov word [rcx + 0xc18], 0
mov word [rcx + 0xe18], 0
mov ecx, r8d
mov word [rbp], 0
mov word [r12], 0
mov word [r13], 0
mov word [r14], 0
mov word [r15], 0
mov rbx, rdx
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r8d, dword [rsp + 0x2b0]
xor edx, edx
mov rcx, rbx
mov r9, rax
mov rsi, rax
call sub.VERSION.dll_GetFileVersionInfoW
lea r9, [rsp + 0x2b0]
lea r8, [rsp + 0x2a0]
lea rdx, [0x1400a9734]
mov rcx, rsi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x1400a5dbb
mov rcx, qword [rsp + 0x2a0]
mov eax, dword [rcx + 0x30]
mov dword [rdi + 4], eax
mov eax, dword [rcx + 8]
mov dword [rdi], eax
mov eax, dword [rcx + 0x14]
mov dword [rdi + 0xc], eax
mov eax, dword [rcx + 0x10]
mov dword [rdi + 8], eax
mov eax, dword [rcx + 0x24]
mov dword [rdi + 0x10], eax
mov eax, dword [rcx + 0x28]
mov dword [rdi + 0x14], eax
lea r9, [rsp + 0x2b0]
lea r8, [rsp + 0x2b8]
lea rdx, str.VarFileInfoTranslation
mov rcx, rsi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x1400a5e54
mov rax, qword [rsp + 0x2b8]
lea r8, str._4.4X_4.4X
mov edx, 0x14
movzx ecx, word [rax + 2]
movzx r9d, word [rax]
mov dword [rsp + 0x20], ecx
lea rcx, [rsp + 0x30]
call sub.msvcrt.dll__snwprintf
lea r11, [rsp + 0x60]
lea r9, [0x1400a89b8]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.1400a5b30
test eax, eax
jne 0x1400a5e72
xor ecx, ecx
lea rdx, str.040904E4
nop
nop
nop
movzx eax, word [rcx + rdx]
add rcx, 2
test ax, ax
mov word [rsp + rcx + 0x2e], ax
jne 0x1400a5e40
jmp 0x1400a5e72
xor ecx, ecx
lea rdx, str.040904E4
nop
movzx eax, word [rcx + rdx]
add rcx, 2
test ax, ax
mov word [rsp + rcx + 0x2e], ax
jne 0x1400a5e60
lea r9, [0x1400b0e38]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], rbp
call fcn.1400a5b30
lea r9, [0x1400b0e50]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r12
call fcn.1400a5b30
lea r9, [0x1400b0e70]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r13
call fcn.1400a5b30
lea r9, [0x1400b0e88]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r14
call fcn.1400a5b30
lea r9, [0x1400b0ea8]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r15
call fcn.1400a5b30
lea r11, [rdi + 0xa18]
lea r9, [0x1400b0ec0]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.1400a5b30
lea r11, [rdi + 0xc18]
lea r9, [0x1400b0ee0]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.1400a5b30
lea r11, [rdi + 0xe18]
lea r9, str.OriginalFileName
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.1400a5b30
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rbx, qword [rsp + 0x2a8]
mov eax, 1
add rsp, 0x260
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret