Function at 0x429592
Capabilities:
Get file version info
Query or enumerate registry value

Disassembly:
mov eax, 0x467d30
call fcn.00466f40
push ecx
mov eax, 0xc6c4
call fcn.00466f70
push ebx
push esi
mov edx, 0x411
push edi
xor ebx, ebx
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x26d2]
mov word [ebp - 0x26d4], bx
mov word [ebp - 0x168c], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x168a]
cmp dword [ebp + 0xc], ebx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
stosw word es:[edi], ax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 4], ebx
je 0x4297f1
lea eax, [ebp - 0x1c]
push eax
push dword [ebp + 8]
call dword [sym.imp.ole32.dll_StringFromCLSID]
cmp eax, ebx
jl 0x4297f1
cmp dword [ebp - 0x1c], ebx
je 0x4297f1
mov edx, 0x81
xor eax, eax
mov ecx, edx
lea edi, [ebp - 0x43a]
mov word [ebp - 0x43c], bx
push dword [ebp - 0x1c]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x232]
mov word [ebp - 0x234], bx
rep stosd dword es:[edi], eax
mov esi, dword [sym.imp.MSVCRT.dll__snwprintf]
push 0x40c578
stosw word es:[edi], ax
lea eax, [ebp - 0x644]
push 0x208
push eax
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x28], 0x207
call esi
add esp, 0x10
push dword [ebp - 0x1c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov edi, 0x824
lea eax, [ebp - 0x26d4]
push edi
push dword [ebp + 0xc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push 2
lea eax, [ebp - 0x26d4]
pop edx
mov cx, word [eax]
cmp cx, bx
je 0x4296aa
cmp cx, 0x23
je 0x4296aa
add eax, edx
jmp 0x429698
cmp word [eax], 0x23
jne 0x429722
mov word [eax], bx
add eax, edx
mov dword [ebp + 0xc], eax
mov cx, word [eax]
cmp cx, bx
je 0x4296ca
cmp cx, 0x3d
je 0x4296ca
add eax, edx
jmp 0x4296b8
cmp word [eax], bx
je 0x429722
mov word [eax], bx
add eax, edx
push eax
push 0x40b0c0
lea eax, [ebp - 0x168c]
push edi
push eax
call esi
mov esi, dword [sym.imp.MSVCRT.dll__wcsicmp]
push 0x40bcdc
push dword [ebp + 0xc]
call esi
add esp, 0x18
test eax, eax
je 0x42970b
push 0x40c79c
push dword [ebp + 0xc]
call esi
pop ecx
test eax, eax
pop ecx
jne 0x429722
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x168c]
push eax
call fcn.004273bc
add esp, 0xc
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x644]
push 0x469bb8
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x4297ea
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
add eax, ecx
test eax, eax
jbe 0x4297f1
lea eax, [ebp - 0x234]
push 0x207
push eax
lea eax, [ebp - 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
lea eax, [ebp - 0x24]
mov dword [ebp + 8], ebx
push eax
lea eax, [ebp - 0x234]
push eax
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov dword [ebp + 0xc], eax
mov eax, 0xa000
cmp dword [ebp + 0xc], eax
ja 0x4297ea
lea ecx, [ebp - 0xc6d4]
push ecx
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x234]
push eax
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x4297ea
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0xc6d4]
push 0x40b0ec
push eax
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x4297ea
mov ecx, dword [ebp + 8]
cmp ecx, ebx
je 0x4297ea
mov eax, dword [ecx + 8]
cmp eax, dword [ebp - 0x18]
jb 0x4297ea
jne 0x4297f1
mov eax, dword [ecx + 0xc]
cmp eax, dword [ebp - 0x20]
jae 0x4297f1
mov dword [ebp - 0x14], 1
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret