Function at 0x14001bd28
Capabilities:
Get file version info

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], r8d
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x260
mov rdi, rcx
lea rbp, [rcx + 0x18]
xor ecx, ecx
mov word [rbp], cx
mov word [rdi + 0xa18], cx
mov word [rdi + 0xc18], cx
mov word [rdi + 0xe18], cx
lea r12, [rdi + 0x218]
lea r13, [rdi + 0x418]
mov word [r12], cx
mov word [r13], cx
lea r14, [rdi + 0x618]
mov word [r14], cx
lea r15, [rdi + 0x818]
mov rbx, rdx
mov word [r15], cx
mov ecx, r8d
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r8d, dword [rsp + 0x2b0]
xor edx, edx
mov r9, rax
mov rcx, rbx
mov rsi, rax
call sub.VERSION.dll_GetFileVersionInfoW
lea r9, [rsp + 0x2b0]
lea r8, [rsp + 0x2a0]
lea rdx, [0x14001f268]
mov rcx, rsi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14001be05
mov rcx, qword [rsp + 0x2a0]
mov eax, dword [rcx + 0x30]
mov dword [rdi + 4], eax
mov eax, dword [rcx + 8]
mov dword [rdi], eax
mov eax, dword [rcx + 0x14]
mov dword [rdi + 0xc], eax
mov eax, dword [rcx + 0x10]
mov dword [rdi + 8], eax
mov eax, dword [rcx + 0x24]
mov dword [rdi + 0x10], eax
mov eax, dword [rcx + 0x28]
mov dword [rdi + 0x14], eax
lea r9, [rsp + 0x2b0]
lea r8, [rsp + 0x2b8]
lea rdx, str.VarFileInfoTranslation
mov rcx, rsi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14001be94
mov rax, qword [rsp + 0x2b8]
lea r8, str._4.4X_4.4X
mov edx, 0x14
movzx ecx, word [rax + 2]
movzx r9d, word [rax]
mov dword [rsp + 0x20], ecx
lea rcx, [rsp + 0x30]
call sub.msvcrt.dll__snwprintf
lea r11, [rsp + 0x60]
lea r9, [0x14001e8e8]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.14001bc38
test eax, eax
jne 0x14001beaf
xor ecx, ecx
lea rdx, str.040904E4
movzx eax, word [rcx + rdx]
add rcx, 2
test ax, ax
mov word [rsp + rcx + 0x2e], ax
jne 0x14001be80
jmp 0x14001beaf
xor ecx, ecx
lea rdx, str.040904E4
movzx eax, word [rcx + rdx]
add rcx, 2
test ax, ax
mov word [rsp + rcx + 0x2e], ax
jne 0x14001be9d
lea r9, [0x140020ac8]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], rbp
call fcn.14001bc38
lea r9, [0x140020ae0]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r12
call fcn.14001bc38
lea r9, [0x140020b00]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r13
call fcn.14001bc38
lea r9, [0x140020b18]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r14
call fcn.14001bc38
lea r9, [0x140020b38]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r15
call fcn.14001bc38
lea r11, [rdi + 0xa18]
lea r9, [0x140020b50]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.14001bc38
lea r11, [rdi + 0xc18]
lea r9, [0x140020b70]
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.14001bc38
lea r11, [rdi + 0xe18]
lea r9, str.OriginalFileName
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.14001bc38
mov rcx, rsi
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rbx, qword [rsp + 0x2a8]
mov eax, 1
add rsp, 0x260
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret