Function at 0x401c80
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get process heap flags
Get process heap force flags
Terminate process

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x38
mov eax, dword [ecx]
mov edi, dword [ecx + 4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], edi
cmp eax, 1
jle 0x401fa8
cmp eax, 2
je 0x401f58
mov dword [ebp - 0x30], 0
mov edi, dword [sym.imp.ucrtbase.dll__wcsicmp]
mov esi, 1
mov dword [ebp - 0x2c], 0
jmp 0x401ce6
mov dword [0x405008], 1
add esi, 1
cmp dword [ebp - 0x24], esi
jle 0x401db1
mov edx, dword [ebp - 0x1c]
lea eax, [esi*4]
mov dword [ebp - 0x20], eax
add eax, edx
mov ebx, dword [eax]
mov dword [ebp - 0x28], eax
movzx eax, word [ebx]
and eax, 0xfffffffd
cmp ax, 0x2d
jne 0x401f00
add ebx, 2
mov dword [esp], 0x404024
mov dword [esp + 4], ebx
call edi
test eax, eax
jne 0x401d2b
test byte [0x403004], 1
jne 0x401e00
mov dword [esp + 4], ebx
mov dword [esp], 0x404028
call edi
test eax, eax
je 0x401cd0
mov dword [esp + 4], ebx
mov dword [esp], 0x40402c
call edi
test eax, eax
jne 0x401e30
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov ebx, dword [eax + ecx + 4]
test ebx, ebx
je 0x401fc1
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x401fe5
mov eax, dword [0x405004]
mov ecx, dword [section..data]
test eax, eax
je 0x401e70
mov edx, dword [section..bss]
cmp edx, ecx
je 0x401eb0
lea ecx, [edx + 1]
add esi, 1
mov dword [eax + edx*4], ebx
mov dword [section..bss], ecx
add esi, 1
cmp dword [ebp - 0x24], esi
jg 0x401ce6
mov eax, dword [0x405008]
test eax, eax
jne 0x401ef0
call dbg.send_close_messages
mov ebx, eax
mov edx, dword [0x405004]
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov dword [esp + 8], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, ebx
sub esp, 0xc
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov dword [esp + 0xc], str.argument_T_not_supported_n
mov dword [esp + 8], str.process_arguments
mov dword [esp + 4], 0x403004
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0
jmp 0x401d2b
mov dword [esp + 4], ebx
mov dword [esp], 0x404032
call edi
test eax, eax
jne 0x401f00
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov ebx, dword [eax + ecx + 4]
test ebx, ebx
je 0x401fc1
mov dword [ebp - 0x30], 1
mov eax, dword [ebp - 0x2c]
jmp 0x401d6d
shl ecx, 2
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [0x405004], eax
sub esp, 0xc
test eax, eax
je 0x401f14
mov edx, dword [section..bss]
jmp 0x401d96
lea ecx, [edx + edx]
shl edx, 3
mov dword [section..data], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov ecx, dword fs:[0x18]
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapReAlloc]
sub esp, 0x10
test eax, eax
je 0x401f14
mov dword [0x405004], eax
jmp 0x401ea0
call dbg.terminate_processes
mov ebx, eax
jmp 0x401dc5
mov eax, 0x66
call sym._taskkill_message.isra.0
mov eax, 0x65
call sym._taskkill_message.isra.0
mov edx, dword [0x405004]
mov dword [esp + 4], 0
mov ebx, 1
mov eax, dword fs:[0x18]
mov dword [esp + 8], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, ebx
sub esp, 0xc
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov edx, dword [edi + 4]
movzx eax, word [edx]
and eax, 0xfffffffd
cmp ax, 0x2d
jne 0x401cb1
add edx, 2
mov dword [esp], 0x404020
mov dword [esp + 4], edx
call dword [sym.imp.kernel32.dll_lstrcmpW]
sub esp, 8
test eax, eax
jne 0x401cb1
mov eax, 0x65
call sym._taskkill_message.isra.0
mov dword [esp], 0
call dword [sym.imp.ucrtbase.dll_exit]
lea esi, [esi]
mov eax, 0x68
call sym._taskkill_message.isra.0
mov eax, 0x65
call sym._taskkill_message.isra.0
jmp 0x401f14
mov edx, dword [ebp - 0x28]
mov eax, dword [edx]
mov dword [esp], 0x69
mov dword [esp + 4], eax
call dbg.taskkill_message_printfW
mov eax, 0x65
call sym._taskkill_message.isra.0
jmp 0x401f14
mov eax, 0x6a
call sym._taskkill_message.isra.0
mov eax, 0x65
call sym._taskkill_message.isra.0
jmp 0x401f14