Function at 0x57651ae0
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x514
push ebp
push esi
mov esi, dword [esp + 0x524]
push edi
push esi
mov ebp, ecx
push str.GetPrintingAuth_:__s
call fcn.57653a20
mov eax, dword [ebp + 0xc]
add esp, 8
test eax, eax
jne 0x57651e00
push str._m_bAuth
call fcn.57653a20
mov dl, byte [0x576876ec]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x31d]
mov byte [esp + 0x31c], dl
mov byte [esp + 0x10], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x11]
mov byte [esp + 0x218], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x219]
mov byte [esp + 0x420], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x421]
add esp, 4
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
cmp dword [0x5768a0d4], 5
jb 0x57651bfa
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov eax, dword [esp + 0x528]
lea edx, [esp + 0x10]
mov ecx, dword [eax + 0x418]
push ecx
push str.pipe_d__d
push edx
call sub.MSVCRT.dll_sprintf
add esp, 0x10
mov ecx, ebp
call fcn.57651e30
push eax
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x21c]
push str._s__d
push ecx
call sub.MSVCRT.dll_sprintf
add esp, 0x10
mov ecx, ebp
call fcn.57651e30
lea edx, [esp + 0xc]
push eax
push edx
mov ecx, ebp
call fcn.57652110
test eax, eax
jne 0x57651ca9
pop edi
pop esi
pop ebp
add esp, 0x514
ret 8
mov eax, dword [esp + 0x524]
lea edx, [esp + 0xc]
mov ecx, dword [eax + 0x418]
push ecx
push str.pipe_d
push edx
call sub.MSVCRT.dll_sprintf
movsx eax, word [0x57688808]
add esp, 0xc
mov ecx, ebp
push eax
call fcn.57651e30
lea ecx, [esp + 0x10]
push eax
push ecx
lea edx, [esp + 0x220]
push str._s__d__d
push edx
call sub.MSVCRT.dll_sprintf
add esp, 0x14
lea eax, [esp + 0x41c]
push 0x576898b4
push str._sSecuAuth.exe
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x214]
lea edx, [esp + 0x41c]
lea eax, [esp + 0x318]
push ecx
push edx
push str._s__s
push eax
call sub.MSVCRT.dll_sprintf
add esp, 0x10
lea ecx, [esp + 0x318]
push ecx
push str.Start_Auth_:__s
call fcn.57653a20
add esp, 8
lea edx, [esp + 0x318]
push 0
push edx
call dword [sym.imp.KERNEL32.dll_WinExec]
lea eax, [esp + 0xc]
mov ecx, ebp
push eax
call fcn.576511e0
test eax, eax
jne 0x57651cde
push str.GetAuthData_is_false
mov dword [0x57688844], 6
call fcn.57653a20
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
add esp, 0x514
ret 8
mov eax, dword [0x57689484]
test eax, eax
je 0x57651dc3
mov cl, byte [0x576876ec]
xor eax, eax
mov byte [esp + 0x110], cl
mov ecx, 0x40
lea edi, [esp + 0x111]
push ebx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push esi
push str.m_pAppReject_:__s
stosb byte es:[edi], al
xor ebx, ebx
call fcn.57653a20
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
add esp, 8
xor edx, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x57651d4e
mov al, byte [edx + esi]
cmp al, 0x5c
jne 0x57651d35
xor ebx, ebx
mov byte [esp + ebx + 0x114], al
inc ebx
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
inc edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp edx, ecx
jb 0x57651d2c
lea edx, [esp + 0x114]
mov byte [esp + ebx + 0x114], 0
push edx
push str.IsRejectPrint_:__s
call fcn.57653a20
add esp, 8
lea eax, [esp + 0x114]
mov ecx, 0x57689480
push eax
call fcn.5765e560
test eax, eax
pop ebx
je 0x57651df7
mov eax, dword [ebp + 8]
test eax, eax
jne 0x57651d95
push 0
push 7
call fcn.57661090
add esp, 8
cmp dword [0x5768380c], 3
jne 0x57651dab
mov eax, dword [ebp + 8]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp + 8], ecx
pop edi
pop esi
mov dword [0x57688844], 7
xor eax, eax
pop ebp
add esp, 0x514
ret 8
cmp byte [0x57687fc6], 0x59
jne 0x57651df7
mov eax, dword [ebp + 8]
test eax, eax
jne 0x57651de9
push 0
push 7
mov dword [0x57688844], 7
call fcn.57661090
add esp, 8
pop edi
pop esi
xor eax, eax
pop ebp
add esp, 0x514
ret 8
mov dword [ebp + 0xc], 1
jmp 0x57651e0d
push str.m_bAuth_TRUE
call fcn.57653a20
add esp, 4
push str.GetPrintingAuth_:_End
call fcn.57653a20
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
add esp, 0x514
ret 8