Function at 0x401be0
Capabilities:
Terminate process

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
mov eax, 0x1238
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
call fcn.004038f8
sub esp, eax
mov esi, dword [ecx]
mov ebx, dword [ecx + 8]
call sub.comctl32.dll_InitCommonControls
mov dword [ebp - 0x101c], 0
mov dword [section..bss], esi
movzx eax, word [ebx]
mov dword [ebp - 0x1020], 0
test ax, ax
jne 0x401c37
jmp 0x401e8b
movzx eax, word [ebx + 2]
add ebx, 2
cmp ax, 0x20
je 0x401c30
and eax, 0xfffffffd
cmp ax, 0x2d
jne 0x401fe8
movzx eax, word [ebx + 2]
lea edx, [ebx + 2]
sub eax, 0x44
cmp ax, 0x34
ja case.0x401c61.1
movzx eax, ax
jmp dword [eax*4 + 0x405464]
lea ecx, [ebp - 0x1228]
lea eax, [ebx + 4]
mov edx, 2
mov dword [ebp - 0x1020], 2
call fcn.00401a10
test eax, eax
je case.0x401c61.1
test byte [0x404010], 8
je 0x401d55
mov eax, dword [ebp - 0x101c]
test eax, eax
je 0x401ea0
mov eax, 0x40539c
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.WHQL_check:__s_n
mov dword [esp + 8], str.wWinMain
mov dword [esp + 4], 0x404010
mov dword [esp], 3
call fcn.00401b50
test byte [0x404010], 8
je 0x401d55
mov eax, dword [ebp - 0x1020]
mov dword [esp + 0xc], str.Output_type:__d_n
mov dword [esp + 8], str.wWinMain
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x404010
mov dword [esp], 3
call fcn.00401b50
mov eax, dword [ebp - 0x1020]
test eax, eax
je 0x401d55
test byte [0x404010], 8
je 0x401d55
mov edx, str._unknown_
cmp eax, 2
jbe 0x401eaa
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Output_filename:__s_n
mov dword [esp + 8], str.wWinMain
mov dword [esp + 4], 0x404010
mov dword [esp], 3
call fcn.00401b50
mov dword [esp], 0
call sub.ole32.dll_CoInitialize
mov eax, dword [ebp - 0x101c]
sub esp, 4
mov dword [esp], eax
call fcn.00401850
mov ebx, eax
test eax, eax
je 0x401ec0
mov eax, dword [ebp - 0x1020]
test eax, eax
jne 0x401e70
test byte [0x404010], 1
jne 0x401ee8
mov dword [esp], ebx
call fcn.00401830
call sub.ole32.dll_CoUninitialize
lea esp, [ebp - 0x10]
xor eax, eax
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
mov dword [esp + 8], 5
mov esi, dword [sym.imp.ucrtbase.dll__wcsnicmp]
mov dword [esp + 4], str.whql:
mov dword [esp], edx
call esi
test eax, eax
jne case.0x401c61.1
lea edi, [ebx + 0xc]
mov dword [esp + 8], 3
mov dword [esp + 4], 0x4053be
mov dword [esp], edi
call esi
test eax, eax
jne 0x401f11
mov dword [ebp - 0x101c], 0
lea eax, [ebx + 0x10]
lea ebx, [eax + 2]
movzx eax, word [eax + 2]
test ax, ax
jne 0x401c37
jmp 0x401c8d
lea ecx, [ebp - 0x1228]
lea eax, [ebx + 4]
mov edx, 1
mov dword [ebp - 0x1020], 1
call fcn.00401a10
jmp 0x401c85
mov dword [esp + 8], 8
mov dword [esp + 4], 0x4053cc
mov dword [esp], edx
call dword [sym.imp.ucrtbase.dll__wcsnicmp]
test eax, eax
jne case.0x401c61.1
lea eax, [ebx + 0x12]
jmp 0x401e04
mov dword [esp + 8], eax
lea eax, [ebp - 0x1228]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00402b70
jmp 0x401d97
test byte [0x404010], 8
je 0x401d55
lea esi, cs:[esi]
mov eax, str.FALSE
jmp 0x401cad
mov edx, dword [eax*4 + 0x40555c]
jmp 0x401d2d
test byte [0x404010], 2
jne 0x401f3c
call sub.ole32.dll_CoUninitialize
lea esp, [ebp - 0x10]
mov eax, 1
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
mov dword [esp + 0xc], str.Information_dialog_is_not_implemented_n
mov dword [esp + 8], str.wWinMain
mov dword [esp + 4], 0x404010
mov dword [esp], 0
call fcn.00401b50
jmp 0x401d97
mov dword [esp + 8], 2
mov dword [esp + 4], 0x4053c6
mov dword [esp], edi
call esi
test eax, eax
jne case.0x401c61.1
mov dword [ebp - 0x101c], 1
lea eax, [ebx + 0xe]
jmp 0x401e04
mov dword [esp + 0xc], str.DxDiag_information_collection_failed_n
mov dword [esp + 8], str.wWinMain
mov dword [esp + 4], 0x404010
mov dword [esp], 1
call fcn.00401b50
jmp 0x401ec9
lea esi, [ebp - 0x1018]
mov dword [esp + 0xc], 0x400
lea ebx, [ebp - 0x818]
mov dword [esp + 8], esi
mov dword [esp + 4], 0x65
mov eax, dword [section..bss]
mov dword [esp], eax
call sub.user32.dll_LoadStringW
sub esp, 0x10
mov dword [esp + 0xc], 0x400
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x66
mov eax, dword [section..bss]
mov dword [esp], eax
call sub.user32.dll_LoadStringW
xor edx, edx
sub esp, 0x10
mov dword [esp + 0xc], 0x30
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], edx
call sub.user32.dll_MessageBoxW
xor ecx, ecx
sub esp, 0x10
mov dword [esp], ecx
call dword [sym.imp.kernel32.dll_ExitProcess]
lea ecx, [ebp - 0x1228]
mov edx, 1
mov eax, ebx
mov dword [ebp - 0x1020], 1
call fcn.00401a10
jmp 0x401c85