Function at 0x401990
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get process heap flags
Get process heap force flags
Identify system language via api
Terminate process

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
xor ebx, ebx
sub esp, 0x29c
mov dword [ebp - 0x27c], eax
mov dword [esp], str.msi.dll
call dword [sym.imp.kernel32.dll_GetModuleHandleA]
mov word [ebp - 0x220], bx
lea ebx, [ebp - 0x220]
sub esp, 4
mov esi, eax
mov dword [esp + 8], 0x104
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
jne 0x4019ec
test byte [0x406010], 2
jne 0x401bfa
lea eax, [ebp - 0x274]
lea edi, [ebp - 0x270]
mov dword [esp], ebx
xor ecx, ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [ebp - 0x274], 0x28
mov word [ebp - 0x270], cx
call sym._MsiGetFileVersionW_20
sub esp, 0x14
test eax, eax
je 0x401a3f
test byte [0x406010], 2
jne 0x401bcd
mov edx, dword [sym.imp.user32.dll_LoadStringW]
lea eax, [ebp - 0x278]
mov dword [esp], esi
mov dword [esp + 0xc], 0
mov dword [ebp - 0x284], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0xa
call edx
mov ebx, dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0x10
mov dword [ebp - 0x274], eax
lea eax, [eax + eax + 2]
mov ecx, dword fs:[0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [ecx + 0x30]
mov dword [ebp - 0x280], ecx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x274]
sub esp, 0xc
mov dword [esp + 4], 0
lea eax, [eax + eax + 0x52]
mov dword [esp + 8], eax
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov ebx, eax
sub esp, 0xc
mov eax, dword [ebp - 0x278]
test ebx, ebx
je 0x401b7d
test eax, eax
je 0x401b7d
xor edx, edx
mov word [eax], dx
mov eax, dword [ebp - 0x274]
mov edx, dword [ebp - 0x284]
mov dword [esp + 4], 0xa
inc eax
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], eax
call edx
mov eax, dword [ebp - 0x278]
sub esp, 0x10
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x274]
mov dword [esp + 0xc], edi
add eax, 0x29
mov dword [esp], ebx
mov dword [esp + 4], eax
call sym._swprintf
call dword [sym.imp.kernel32.dll_GetUserDefaultLangID]
mov dword [esp + 0x14], 0
movzx eax, ax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
mov dword [esp], 0
call sym._MsiMessageBoxW_24
mov eax, dword [ebp - 0x278]
sub esp, 0x18
mov dword [esp + 8], eax
mov esi, dword [sym.imp.kernel32.dll_HeapFree]
mov dword [esp + 4], 0
mov edi, dword fs:[0x18]
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call esi
sub esp, 0xc
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x27c]
sub esp, 0xc
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_ExitProcess]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.MsiGetFileVersion_failed_with__ld_n
mov dword [esp + 8], str.ShowUsage
mov dword [esp + 4], 0x406010
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
jmp 0x401a3f
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.GetModuleFileName_failed:__ld_n
mov dword [esp + 8], str.ShowUsage
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x406010
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
jmp 0x4019ec