Function at 0x411eb0
Capabilities:
Get file version info
Terminate process

Disassembly:
mov eax, dword [0x42fc80]
push ebx
push 0x43ad40
xor ebx, ebx
push 0x7d0
push ebx
push eax
mov byte [0x43be94], 1
call sub.VERSION.dll_GetFileVersionInfoA
push 0x43bfd0
push 0x43be90
push str.StringFileInfo040904B0FileVersion
push 0x43ad40
call sub.VERSION.dll_VerQueryValueA
push 0x43bfd0
push 0x43a5e0
push str.StringFileInfo040904B0LegalCopyright
push 0x43ad40
call sub.VERSION.dll_VerQueryValueA
call 0x412180
mov ecx, dword [0x42fc80]
push ecx
call fcn.00409c80
push 0x411b70
push 2
mov dword [0x43be98], eax
call fcn.0042004a
add esp, 0xc
call fcn.00411e70
test eax, eax
je 0x411f3a
mov dword [0x43be98], 0xfffffffd
push esi
push edi
call fcn.00411a50
call fcn.0040e0f0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push edx
push eax
mov byte [0x438ae8], bl
call fcn.00403780
call fcn.00403660
call fcn.0040df40
call fcn.00409c60
mov cl, byte [0x4564b8]
mov edi, 0x456720
mov byte [0x43aaec], cl
or ecx, 0xffffffff
xor eax, eax
mov dl, byte [0x4564b1]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x456720
mov eax, ecx
mov esi, edi
mov edi, 0x43a9c0
mov byte [0x438ae8], 1
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov byte [esp + 0x20], dl
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00411ca0
mov al, byte [0x4564bb]
add esp, 0xc
cmp al, 2
jne 0x411fc8
mov byte [0x42b3ac], bl
mov al, byte [0x42b3ac]
mov esi, 0x456720
cmp al, bl
je 0x412013
push 0x42b3f8
push esi
call fcn.0041e4c3
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x411ff9
push 2
push 0x456720
call fcn.00409e80
add esp, 8
push esi
call fcn.0041e44d
push 0x456720
call fcn.00406bc0
add esp, 8
mov dword [0x43b9d4], eax
mov esi, eax
push esi
call fcn.00411ca0
mov al, byte [0x4564bb]
add esp, 4
cmp al, 2
mov byte [0x43a740], bl
jne 0x412046
push esi
call fcn.00419da0
add esp, 4
cmp eax, ebx
mov dword [0x43b510], eax
je 0x412046
mov esi, eax
mov byte [0x4564bf], 1
call fcn.00419ea0
call fcn.0040c260
mov al, byte [0x4564bf]
mov byte [0x43ab14], bl
cmp al, bl
push esi
je 0x412067
call fcn.0040ea20
jmp 0x41206c
call fcn.0040e500
add esp, 4
call fcn.00411290
cmp byte [0x4568e0], bl
jne 0x412106
mov al, byte [0x4564bf]
push esi
cmp al, bl
je 0x412091
call fcn.0040ea20
jmp 0x412096
call fcn.0040e500
mov al, byte [0x4564bf]
add esp, 4
cmp al, bl
je 0x4120a9
mov byte [0x42d6fc], 1
call fcn.00411530
mov byte [0x42d6fc], bl
call fcn.0040e320
mov al, byte [0x4564bf]
push esi
cmp al, bl
je 0x4120ca
call fcn.0040ea20
jmp 0x4120cf
call fcn.0040e500
add esp, 4
call fcn.00411530
call fcn.0040e320
mov al, byte [0x4564bf]
mov byte [0x43ab14], 1
cmp al, bl
push esi
je 0x4120f4
call fcn.0040ea20
jmp 0x4120f9
call fcn.0040e500
add esp, 4
call fcn.00411530
call fcn.0040e320
mov al, byte [0x4564bf]
push esi
cmp al, bl
je 0x412117
call fcn.0040ea20
jmp 0x41211c
call fcn.0040e500
add esp, 4
call fcn.004116a0
call fcn.0041dea0
call fcn.00411940
call fcn.00424345
call fcn.00411ae0
cmp word [0x434088], bx
pop edi
pop esi
je 0x412156
cmp byte [esp + 0xc], bl
je 0x412156
push 0x456ba0
call fcn.0041f119
add esp, 4
xor eax, eax
cmp word [0x434088], bx
je 0x412168
mov eax, 2
jmp 0x412176
cmp word [0x438ae0], bx
je 0x412176
mov eax, 1
push eax
call fcn.0041e7dd
pop ebx
nop
nop
nop
mov ecx, dword [0x43be90]
xor edx, edx
mov dword [0x43a5d8], edx
cmp byte [ecx], 0
je 0x4121b9
mov al, byte [ecx]
cmp al, 0x2e
je 0x4121b1
cmp al, 0x30
jl 0x4121b9
cmp al, 0x39
jg 0x4121b9
movsx eax, al
lea edx, [edx + edx*4]
lea edx, [eax + edx*2 - 0x30]
mov dword [0x43a5d8], edx
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x412193
ret