Function at 0x404951
Capabilities:
Get file version info
Identify system language via api

Disassembly:
push 0x14
mov eax, 0x452534
call fcn.0043b90e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 8]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov edi, eax
xor ebx, ebx
cmp edi, ebx
jne 0x40497f
xor eax, eax
jmp 0x404f43
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], 1
push edi
call fcn.004367b0
cmp eax, ebx
pop ecx
mov dword [ebp - 0x18], eax
jne 0x40499c
call fcn.0042b0b0
push eax
push edi
push dword [ebp - 0x20]
push dword [ebp + 8]
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
jne 0x4049bc
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x18]
push eax
call fcn.0040d39c
jmp 0x404978
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x45a3b8
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x4049ec
cmp dword [ebp - 0x14], 0x34
jne 0x4049ec
push 0x34
push dword [ebp - 0x10]
lea eax, [esi + 4]
push eax
call fcn.00436990
add esp, 0xc
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x45a3bc
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
push ebx
mov dword [ebp + 8], ebx
call edi
mov ecx, dword [ebp - 0x14]
lea ebx, [ebp + 8]
push eax
mov eax, dword [ebp - 0x10]
call fcn.0040505e
test eax, eax
pop ecx
pop ecx
jne 0x404a68
push 1
call edi
mov ecx, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
call fcn.0040505e
test eax, eax
pop ecx
pop ecx
jne 0x404a68
mov ecx, dword [ebp - 0x14]
push 1
push eax
mov eax, dword [ebp - 0x10]
call fcn.0040505e
test eax, eax
pop ecx
pop ecx
jne 0x404a68
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
push 1
push 9
call fcn.0040505e
test eax, eax
pop ecx
pop ecx
jne 0x404a68
mov eax, dword [ebp - 0x10]
mov edi, dword [eax]
jmp 0x404a6b
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x1c]
call fcn.0041578f
mov byte [ebp - 4], 2
mov eax, edi
shr eax, 0x10
push eax
movzx eax, di
push eax
lea eax, [ebp - 0x1c]
push str.StringFileInfo_04X_04X_
push eax
call fcn.00401fd3
push 0x45a424
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0x1c
mov byte [ebp - 4], 3
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404af1
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 4
push eax
lea ecx, [esi + 0x38]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push 0x45a43c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 5
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404b53
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 6
push eax
lea ecx, [esi + 0x3c]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push 0x45a45c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 7
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404bb5
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 8
push eax
lea ecx, [esi + 0x40]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push 0x45a474
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 9
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404c17
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 0xa
push eax
lea ecx, [esi + 0x44]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push 0x45a490
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404c79
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 0xc
push eax
lea ecx, [esi + 0x48]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push str.OriginalFileName
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 0xd
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404cdb
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 0xe
push eax
lea ecx, [esi + 0x4c]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push 0x45a4d4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404d3d
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 0x10
push eax
lea ecx, [esi + 0x50]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push 0x45a4ec
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 0x11
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404d9f
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 0x12
push eax
lea ecx, [esi + 0x54]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push str.Comments
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 0x13
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404e01
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 0x14
push eax
lea ecx, [esi + 0x58]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push str.LegalTrademarks
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 0x15
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404e63
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 0x16
push eax
lea ecx, [esi + 0x5c]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push str.PrivateBuild
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 0x17
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404ec5
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 0x18
push eax
lea ecx, [esi + 0x60]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
push str.SpecialBuild
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004050ae
add esp, 0xc
mov byte [ebp - 4], 0x19
mov eax, dword [eax]
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push eax
push dword [ebp - 0x18]
call sub.VERSION.dll_VerQueryValueW
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
test edi, edi
je 0x404f27
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.004014f6
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [esi + 0x64]
call fcn.00401a91
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00401af6
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.00401af6
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x18]
push eax
call fcn.0040d39c
xor eax, eax
inc eax
call fcn.0043b9e6
ret 4