Function at 0x1400182b0
Capabilities:
Get file size
Get file version info

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
xor r13d, r13d
mov qword [rsp + 0x20], rcx
xor r9d, r9d
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x58]
lea rcx, [0x1400a65b0]
call fcn.14001afd0
nop
mov rbx, qword [rsp + 0x58]
test rbx, rbx
je 0x140018302
mov r14, qword [rbx]
jmp 0x140018305
mov r14, r13
mov ecx, 2
call fcn.140059d40
mov rdi, rax
mov qword [rsp + 0x40], rax
mov word [rax], r13w
mov r8d, 0x10
lea rdx, str.File_not_found:
mov rcx, r14
call fcn.14005bd3c
mov rbp, 0xffffffffffffffff
test eax, eax
je 0x140018586
mov r15, qword [rsp + 0xe0]
mov qword [r15], rbp
mov r12, qword [rsp + 0xf0]
mov dword [r12], r13d
cmp byte [0x1400a4682], 0
jne 0x140018586
lea rdx, [rsp + 0x60]
mov rcx, r14
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov esi, eax
test eax, eax
je 0x1400184d3
mov ecx, esi
call fcn.140059d40
mov r15, rax
cmp byte [0x1400a4682], 0
jne 0x1400184c3
mov r9, rax
mov r8d, esi
xor edx, edx
mov rcx, r14
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x1400184c3
mov rcx, r15
cmp dword [r15], 0xfeef04bd
je 0x1400183cc
nop word [rax + rax]
add rcx, 2
cmp dword [rcx], 0xfeef04bd
jne 0x1400183c0
mov esi, dword [rcx + 0xc]
movzx eax, si
mov dword [rsp + 0x48], eax
shr esi, 0x10
mov r13d, dword [rcx + 8]
movzx eax, r13w
mov dword [rsp + 0x40], eax
shr r13d, 0x10
mov edx, 0x66
mov rcx, qword [rsp + 0xd8]
mov rcx, qword [rcx]
call fcn.140059dcc
mov rcx, qword [rsp + 0xd8]
mov qword [rcx], rax
test rax, rax
je 0x140018431
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
mov dword [rax + 0x60], edx
mov word [rax + 0x64], dx
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x40]
mov r8d, r13d
lea rdx, str._d._d._d._d
mov rcx, qword [rcx]
call fcn.140005340
lea r8, [0x140081b48]
mov rdx, r15
lea rcx, [rsp + 0x48]
call fcn.140019e90
mov rdx, qword [rax]
mov rsi, rdi
lea rcx, [0x14007a7c4]
test rdx, rdx
cmovne rcx, rdx
call fcn.140059d48
mov rdi, rax
mov qword [rsp + 0x40], rax
mov rcx, rsi
call fcn.140059d2c
mov rcx, qword [rsp + 0x48]
call fcn.140059d2c
test rdi, rdi
je 0x1400184c0
mov r13, qword [rsp + 0xc8]
mov rsi, qword [r13]
mov rcx, rdi
call fcn.140059d48
mov qword [r13], rax
mov rcx, rsi
call fcn.140059d2c
xor r13d, r13d
mov rcx, r15
call fcn.140059d2c
mov r15, qword [rsp + 0xe0]
cmp byte [0x1400a4682], 0
jne 0x140018586
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 7]
mov rcx, r14
call fcn.14001cdd0
mov rsi, rax
cmp rax, rbp
je 0x140018586
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [r12], eax
lea rdx, [rsp + 0x50]
mov rcx, r14
call fcn.14001a5e0
test al, al
jne 0x140018549
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x78]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov rcx, qword [rsp + 0x50]
mov qword [r15], rcx
mov rdx, qword [rsp + 0xe8]
call fcn.140019660
mov r9, qword [rsp + 0xf8]
test r9, r9
je 0x14001857c
mov r8d, 6
mov rdx, r12
mov rcx, rsi
call fcn.140017ed0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, rdi
call fcn.140059d2c
nop
test rbx, rbx
je 0x1400185d3
lock xadd dword [rbx + 0x10], ebp
cmp ebp, 1
jne 0x1400185d3
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400185b4
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400185c6
call fcn.14004bd8c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov rbx, qword [rsp + 0xc0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret