Function at 0x44c561
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
push ebx
push esi
push edi
mov edi, ecx
lea esi, [edi + 8]
call fcn.0044d719
lea esi, [edi + 0x14]
call fcn.0044d719
lea esi, [edi + 0x20]
call fcn.0044d719
lea esi, [edi + 0x2c]
call fcn.0044d719
lea esi, [edi + 0x38]
call fcn.0044d719
lea esi, [edi + 0x44]
call fcn.0044d719
lea esi, [edi + 0x50]
call fcn.0044d719
lea esi, [edi + 0x5c]
call fcn.0044d719
lea esi, [edi + 0x68]
call fcn.0044d719
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
push str..htm
mov ebx, SysReAllocStringLen
push ebx
call esi
mov dword [edi + 4], eax
test eax, eax
jne 0x44c6e9
and dword [ebp - 0x18], eax
and dword [ebp - 0x14], eax
push 0x46eaf4
push dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
call fcn.0044d780
push dword [ebp - 0x10]
mov dword [edi + 4], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [edi + 4], 0
jne 0x44c6e1
push str._shellopencommand
lea eax, [ebp - 0x1c]
push eax
or eax, 0xffffffff
call fcn.0044d80f
cmp dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x1c]
jne 0x44c62b
mov eax, 0x46eaf4
lea ecx, [ebp - 0x10]
push ecx
push 0x20019
push 0
push eax
push ebx
call esi
mov dword [edi + 4], eax
test eax, eax
jne 0x44c6e1
mov esi, 0x46eaf4
push esi
push dword [ebp - 0x10]
lea eax, [ebp - 0x1c]
call fcn.0044d780
xor ebx, ebx
mov dword [edi + 4], eax
cmp eax, ebx
jne 0x44c6d8
cmp dword [ebp - 0x18], ebx
je 0x44c667
mov esi, dword [ebp - 0x1c]
mov cl, byte [esi]
mov eax, esi
cmp cl, 0x22
je 0x44c67d
cmp cl, 0x27
je 0x44c679
mov dl, 0x20
jmp 0x44c689
mov dl, 0x27
jmp 0x44c67f
mov dl, 0x22
lea eax, [esi + 1]
jmp 0x44c689
cmp cl, dl
je 0x44c68f
inc eax
mov cl, byte [eax]
test cl, cl
jne 0x44c684
sub eax, esi
cmp dl, 0x22
je 0x44c69b
cmp dl, 0x27
jne 0x44c69d
dec eax
inc esi
cmp eax, ebx
je 0x44c6d8
push esi
lea esi, [edi + 8]
push esi
call fcn.0044d80f
push ebx
lea eax, [ebp - 0x124]
push eax
push ebx
push ebx
mov eax, esi
call fcn.0044d703
push eax
call fcn.00438dec
add esp, 0x14
lea eax, [ebp - 0x124]
push eax
lea eax, [edi + 0x14]
push eax
or eax, 0xffffffff
call fcn.0044d80f
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea esi, [ebp - 0x1c]
call fcn.0044d719
cmp dword [edi + 0xc], 0
jle 0x44c849
lea eax, [ebp - 0x20]
push eax
lea eax, [edi + 8]
call fcn.0044d703
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeA]
mov esi, eax
test esi, esi
je 0x44c849
lea eax, [esi + 1]
push eax
call fcn.0043609d
pop ecx
mov ebx, eax
push ebx
push esi
push dword [ebp - 0x20]
lea eax, [edi + 8]
call fcn.0044d703
push eax
call dword [sym.imp.VERSION.dll_GetFileVersionInfoA]
test eax, eax
je 0x44c842
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
push str.VarFileInfoTranslation
push ebx
call dword [sym.imp.VERSION.dll_VerQueryValueA]
test eax, eax
je 0x44c842
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push str.CompanyName
call fcn.0044b646
push eax
lea eax, [edi + 0x20]
push eax
or eax, 0xffffffff
call fcn.0044d80f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x4732ac
call fcn.0044b646
push eax
lea eax, [edi + 0x2c]
push eax
or eax, 0xffffffff
call fcn.0044d80f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x46fbd4
call fcn.0044b646
push eax
lea eax, [edi + 0x38]
push eax
or eax, 0xffffffff
call fcn.0044d80f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push str.Language
call fcn.0044b646
push eax
lea eax, [edi + 0x44]
push eax
or eax, 0xffffffff
call fcn.0044d80f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push str.OriginalFileName
call fcn.0044b646
push eax
lea eax, [edi + 0x50]
push eax
or eax, 0xffffffff
call fcn.0044d80f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x4732dc
call fcn.0044b646
push eax
lea eax, [edi + 0x5c]
push eax
or eax, 0xffffffff
call fcn.0044d80f
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push ebx
push 0x4732e8
call fcn.0044b646
push eax
lea eax, [edi + 0x68]
push eax
or eax, 0xffffffff
call fcn.0044d80f
push ebx
call fcn.00436059
pop ecx
mov eax, dword [edi + 4]
pop edi
pop esi
pop ebx
leave
ret