Function at 0x4499e1
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
push ebx
push esi
push edi
mov edi, ecx
lea esi, [edi + 8]
call fcn.0044ab99
lea esi, [edi + 0x14]
call fcn.0044ab99
lea esi, [edi + 0x20]
call fcn.0044ab99
lea esi, [edi + 0x2c]
call fcn.0044ab99
lea esi, [edi + 0x38]
call fcn.0044ab99
lea esi, [edi + 0x44]
call fcn.0044ab99
lea esi, [edi + 0x50]
call fcn.0044ab99
lea esi, [edi + 0x5c]
call fcn.0044ab99
lea esi, [edi + 0x68]
call fcn.0044ab99
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
push str..htm
mov ebx, SysReAllocString
push ebx
call esi
mov dword [edi + 4], eax
test eax, eax
jne 0x449b69
and dword [ebp - 0x18], eax
and dword [ebp - 0x14], eax
push 0x46c667
push dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
call fcn.0044ac00
push dword [ebp - 0x10]
mov dword [edi + 4], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [edi + 4], 0
jne 0x449b61
push str._shellopencommand
lea eax, [ebp - 0x1c]
push eax
or eax, 0xffffffff
call fcn.0044ac8f
cmp dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x1c]
jne 0x449aab
mov eax, 0x46c667
lea ecx, [ebp - 0x10]
push ecx
push 0x20019
push 0
push eax
push ebx
call esi
mov dword [edi + 4], eax
test eax, eax
jne 0x449b61
mov esi, 0x46c667
push esi
push dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
call fcn.0044ac00
xor ebx, ebx
mov dword [edi + 4], eax
cmp eax, ebx
jne 0x449b58
cmp dword [ebp - 0x18], ebx
je 0x449ae7
mov esi, dword [ebp - 0x1c]
mov cl, byte [esi]
mov eax, esi
cmp cl, 0x22
je 0x449afd
cmp cl, 0x27
je 0x449af9
mov dl, 0x20
jmp 0x449b09
mov dl, 0x27
jmp 0x449aff
mov dl, 0x22
lea eax, [esi + 1]
jmp 0x449b09
cmp cl, dl
je 0x449b0f
inc eax
mov cl, byte [eax]
test cl, cl
jne 0x449b04
sub eax, esi
cmp dl, 0x22
je 0x449b1b
cmp dl, 0x27
jne 0x449b1d
dec eax
inc esi
cmp eax, ebx
je 0x449b58
push esi
lea esi, [edi + 8]
push esi
call fcn.0044ac8f
push ebx
lea eax, [ebp - 0x124]
push eax
push ebx
push ebx
mov eax, esi
call fcn.0044ab83
push eax
call fcn.004369af
add esp, 0x14
lea eax, [ebp - 0x124]
push eax
lea eax, [edi + 0x14]
push eax
or eax, 0xffffffff
call fcn.0044ac8f
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea esi, [ebp - 0x1c]
call fcn.0044ab99
cmp dword [edi + 0xc], 0
jle 0x449cc9
lea eax, [ebp - 0x20]
push eax
lea eax, [edi + 8]
call fcn.0044ab83
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov esi, eax
test esi, esi
je 0x449cc9
lea eax, [esi + 1]
push eax
call fcn.00433f70
pop ecx
mov ebx, eax
push ebx
push esi
push dword [ebp - 0x20]
lea eax, [edi + 8]
call fcn.0044ab83
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoA]
test eax, eax
je 0x449cc2
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
push str.VarFileInfoTranslation
push ebx
call dword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x449cc2
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push str.CompanyName
call fcn.00448ac6
push eax
lea eax, [edi + 0x20]
push eax
or eax, 0xffffffff
call fcn.0044ac8f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x46fa88
call fcn.00448ac6
push eax
lea eax, [edi + 0x2c]
push eax
or eax, 0xffffffff
call fcn.0044ac8f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x46c760
call fcn.00448ac6
push eax
lea eax, [edi + 0x38]
push eax
or eax, 0xffffffff
call fcn.0044ac8f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push str.Language
call fcn.00448ac6
push eax
lea eax, [edi + 0x44]
push eax
or eax, 0xffffffff
call fcn.0044ac8f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push str.OriginalFileName
call fcn.00448ac6
push eax
lea eax, [edi + 0x50]
push eax
or eax, 0xffffffff
call fcn.0044ac8f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x46fab8
call fcn.00448ac6
push eax
lea eax, [edi + 0x5c]
push eax
or eax, 0xffffffff
call fcn.0044ac8f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x46fac4
call fcn.00448ac6
push eax
lea eax, [edi + 0x68]
push eax
or eax, 0xffffffff
call fcn.0044ac8f
push ebx
call fcn.00433eea
pop ecx
mov eax, dword [edi + 4]
pop edi
pop esi
pop ebx
leave
ret