Function at 0x449651
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
push ebx
push esi
push edi
mov edi, ecx
lea esi, [edi + 8]
call fcn.0044a809
lea esi, [edi + 0x14]
call fcn.0044a809
lea esi, [edi + 0x20]
call fcn.0044a809
lea esi, [edi + 0x2c]
call fcn.0044a809
lea esi, [edi + 0x38]
call fcn.0044a809
lea esi, [edi + 0x44]
call fcn.0044a809
lea esi, [edi + 0x50]
call fcn.0044a809
lea esi, [edi + 0x5c]
call fcn.0044a809
lea esi, [edi + 0x68]
call fcn.0044a809
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
push str..htm
mov ebx, SysReAllocString
push ebx
call esi
mov dword [edi + 4], eax
test eax, eax
jne 0x4497d9
and dword [ebp - 0x18], eax
and dword [ebp - 0x14], eax
push 0x46c62f
push dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
call fcn.0044a870
push dword [ebp - 0x10]
mov dword [edi + 4], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [edi + 4], 0
jne 0x4497d1
push str._shellopencommand
lea eax, [ebp - 0x1c]
push eax
or eax, 0xffffffff
call fcn.0044a8ff
cmp dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x1c]
jne 0x44971b
mov eax, 0x46c62f
lea ecx, [ebp - 0x10]
push ecx
push 0x20019
push 0
push eax
push ebx
call esi
mov dword [edi + 4], eax
test eax, eax
jne 0x4497d1
mov esi, 0x46c62f
push esi
push dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
call fcn.0044a870
xor ebx, ebx
mov dword [edi + 4], eax
cmp eax, ebx
jne 0x4497c8
cmp dword [ebp - 0x18], ebx
je 0x449757
mov esi, dword [ebp - 0x1c]
mov cl, byte [esi]
mov eax, esi
cmp cl, 0x22
je 0x44976d
cmp cl, 0x27
je 0x449769
mov dl, 0x20
jmp 0x449779
mov dl, 0x27
jmp 0x44976f
mov dl, 0x22
lea eax, [esi + 1]
jmp 0x449779
cmp cl, dl
je 0x44977f
inc eax
mov cl, byte [eax]
test cl, cl
jne 0x449774
sub eax, esi
cmp dl, 0x22
je 0x44978b
cmp dl, 0x27
jne 0x44978d
dec eax
inc esi
cmp eax, ebx
je 0x4497c8
push esi
lea esi, [edi + 8]
push esi
call fcn.0044a8ff
push ebx
lea eax, [ebp - 0x124]
push eax
push ebx
push ebx
mov eax, esi
call fcn.0044a7f3
push eax
call fcn.00436626
add esp, 0x14
lea eax, [ebp - 0x124]
push eax
lea eax, [edi + 0x14]
push eax
or eax, 0xffffffff
call fcn.0044a8ff
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea esi, [ebp - 0x1c]
call fcn.0044a809
cmp dword [edi + 0xc], 0
jle 0x449939
lea eax, [ebp - 0x20]
push eax
lea eax, [edi + 8]
call fcn.0044a7f3
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov esi, eax
test esi, esi
je 0x449939
lea eax, [esi + 1]
push eax
call fcn.00433bd9
pop ecx
mov ebx, eax
push ebx
push esi
push dword [ebp - 0x20]
lea eax, [edi + 8]
call fcn.0044a7f3
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoA]
test eax, eax
je 0x449932
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
push str.VarFileInfoTranslation
push ebx
call dword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x449932
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push str.CompanyName
call fcn.00448736
push eax
lea eax, [edi + 0x20]
push eax
or eax, 0xffffffff
call fcn.0044a8ff
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x46fb20
call fcn.00448736
push eax
lea eax, [edi + 0x2c]
push eax
or eax, 0xffffffff
call fcn.0044a8ff
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x46c710
call fcn.00448736
push eax
lea eax, [edi + 0x38]
push eax
or eax, 0xffffffff
call fcn.0044a8ff
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push str.Language
call fcn.00448736
push eax
lea eax, [edi + 0x44]
push eax
or eax, 0xffffffff
call fcn.0044a8ff
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push str.OriginalFileName
call fcn.00448736
push eax
lea eax, [edi + 0x50]
push eax
or eax, 0xffffffff
call fcn.0044a8ff
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x46fb50
call fcn.00448736
push eax
lea eax, [edi + 0x5c]
push eax
or eax, 0xffffffff
call fcn.0044a8ff
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x46fb5c
call fcn.00448736
push eax
lea eax, [edi + 0x68]
push eax
or eax, 0xffffffff
call fcn.0044a8ff
push ebx
call fcn.00433b53
pop ecx
mov eax, dword [edi + 4]
pop edi
pop esi
pop ebx
leave
ret