Function at 0x401ab0
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get process heap flags
Get process heap force flags
Identify system language via api
Terminate process

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
xor ebx, ebx
sub esp, 0x29c
mov dword [ebp - 0x27c], eax
mov dword [esp], str.msi.dll
call dword [sym.imp.kernel32.dll_GetModuleHandleA]
mov word [ebp - 0x220], bx
lea ebx, [ebp - 0x220]
sub esp, 4
mov esi, eax
mov dword [esp + 8], 0x104
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GetModuleFileNameW]
sub esp, 0xc
test eax, eax
jne 0x401b0c
test byte [section..data], 2
jne 0x401d10
lea eax, [ebp - 0x274]
lea edi, [ebp - 0x270]
mov dword [esp], ebx
xor ecx, ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [ebp - 0x274], 0x28
mov word [ebp - 0x270], cx
call sym._MsiGetFileVersionW_20
sub esp, 0x14
test eax, eax
je 0x401b5f
test byte [section..data], 2
jne 0x401ce3
lea eax, [ebp - 0x278]
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0xa
mov dword [esp], esi
mov ebx, dword fs:[0x18]
call sym._LoadStringW_16
mov edx, dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0x10
mov dword [ebp - 0x274], eax
lea eax, [eax + eax + 2]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x280], edx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edx
mov edx, dword [ebp - 0x280]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x274]
sub esp, 0xc
mov dword [esp + 4], 0
lea eax, [eax + eax + 0x52]
mov dword [esp + 8], eax
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edx
mov ebx, eax
sub esp, 0xc
mov eax, dword [ebp - 0x278]
test ebx, ebx
je 0x401c93
test eax, eax
je 0x401c93
xor edx, edx
mov word [eax], dx
mov eax, dword [ebp - 0x274]
mov dword [esp + 4], 0xa
add eax, 1
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], eax
call sym._LoadStringW_16
mov eax, dword [ebp - 0x278]
sub esp, 0x10
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x274]
mov dword [esp + 0xc], edi
add eax, 0x29
mov dword [esp], ebx
mov dword [esp + 4], eax
call dbg.swprintf
call dword [sym.imp.kernel32.dll_GetUserDefaultLangID]
mov dword [esp + 0x14], 0
movzx eax, ax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
mov dword [esp], 0
call sym._MsiMessageBoxW_24
mov eax, dword [ebp - 0x278]
sub esp, 0x18
mov dword [esp + 8], eax
mov esi, dword [sym.imp.kernel32.dll_HeapFree]
mov dword [esp + 4], 0
mov edi, dword fs:[0x18]
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call esi
sub esp, 0xc
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x27c]
sub esp, 0xc
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_ExitProcess]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.MsiGetFileVersion_failed_with__ld_n
mov dword [esp + 8], str.ShowUsage
mov dword [esp + 4], 0x406000
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
jmp 0x401b5f
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.GetModuleFileName_failed:__ld_n
mov dword [esp + 8], str.ShowUsage
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x406000
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0
jmp 0x401b0c