Function at 0x401000
Capabilities:
Hide graphical window
Load windows common language runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4023e5
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
push esi
push edi
mov eax, dword [0x405040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
mov edi, eax
push 6
push edi
call esi
push 0
push edi
call esi
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0
push eax
push 0x4035e4
push 0x4035d4
call dword [sym.imp.mscoree.dll_CLRCreateInstance]
test eax, eax
jns 0x401068
push str.____CLRCreateInstance_...__failed_n
jmp 0x4013cb
push str.___CLRCreateInstance_...__succeeded_n
call fcn.004014e0
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x1c]
add esp, 4
mov dword [ebp - 0x1c], 0
mov ecx, dword [eax]
push edx
push 0x4035c4
push str.v4.0.30319
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x4010a1
push str.____pMetaHost__GetRuntime_...__failed_n
jmp 0x4013cb
push str.___pMetaHost__GetRuntime_...__succeeded_n
call fcn.004014e0
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x30]
add esp, 4
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x28]
test eax, eax
js 0x4013c6
cmp dword [ebp - 0x30], 0
je 0x4013c6
push str.___pRuntimeInfo__IsLoadable_...__succeeded_n
call fcn.004014e0
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x20]
add esp, 4
mov dword [ebp - 0x20], 0
mov ecx, dword [eax]
push edx
push 0x4035b4
push 0x4035a4
push eax
call dword [ecx + 0x24]
test eax, eax
jns 0x401106
push str.____pRuntimeInfo__GetInterface_...__failed_n
jmp 0x4013cb
push str.___pRuntimeInfo__GetInterface_...__succeeded_n
call fcn.004014e0
mov eax, dword [ebp - 0x20]
add esp, 4
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
test eax, eax
jns 0x40112a
push str.____pRuntimeHost__Start___failed_n
jmp 0x4013cb
push str.___pRuntimeHost__Start___succeeded_n
call fcn.004014e0
add esp, 4
mov dword [ebp - 4], 0
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
jns 0x401170
push str.____pRuntimeHost__GetDefaultDomain_...__failed_n
call fcn.004014e0
add esp, 4
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov esi, eax
jmp 0x40139f
push str.___pRuntimeHost__GetDefaultDomain_...__succeeded_n
call fcn.004014e0
add esp, 4
mov dword [ebp - 0x18], 0
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x4013ea
mov byte [ebp - 4], 4
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], 0
mov ecx, dword [eax]
push 0x403594
push eax
call dword [ecx]
test eax, eax
jns 0x4011ca
push str.____pAppDomainThunk__QueryInterface_...__failed_n
call fcn.004014e0
add esp, 4
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov esi, eax
jmp 0x40138e
push str.___pAppDomainThunk__QueryInterface_...__succeeded_n
call fcn.004014e0
add esp, 4
mov dword [ebp - 0x10], 0
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0xa
push eax
push 1
push 0x11
mov dword [ebp - 0x38], 0x13000
mov dword [ebp - 0x34], 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov edi, eax
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
push eax
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayUnaccessData]
test eax, eax
jns 0x40121d
push str.____SafeArrayAccessData_...__failed_n
jmp 0x401299
push str.___SafeArrayAccessData_...__succeeded_n
call fcn.004014e0
push 0x13000
push 0x4050a8
push dword [ebp - 0x2c]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x10
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
test eax, eax
jns 0x40124e
push str.____SafeArrayUnaccessData_...__failed_n
jmp 0x401299
push str.___SafeArrayUnaccessData_...__succeeded_n
call fcn.004014e0
mov esi, dword [ebp - 0x18]
add esp, 4
test esi, esi
je 0x4013ea
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x401277
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x10]
push ecx
mov dword [ebp - 0x10], 0
mov eax, dword [esi]
push edi
push esi
call dword [eax + 0xb4]
test eax, eax
jns 0x4012ae
push str.____pDefaultAppDomain__Load_3_...__failed_n
call fcn.004014e0
add esp, 4
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov esi, eax
jmp 0x40137d
push str.___pDefaultAppDomain__Load_3_...__succeeded_n
call fcn.004014e0
add esp, 4
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4013ea
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0x14]
mov dword [ebp - 0x14], 0
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x40]
test eax, eax
jns 0x4012f1
push str.____pAssembly__get_EntryPoint_...__failed_n
jmp 0x40135c
push str.___pAssembly__get_EntryPoint_...__succeeded_n
call fcn.004014e0
add esp, 4
xorps xmm0, xmm0
mov eax, 1
movups xmmword [ebp - 0x48], xmm0
mov word [ebp - 0x48], ax
push 0
push 0
push 0xc
movups xmmword [ebp - 0x58], xmm0
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopyData]
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x4013ea
movups xmm0, xmmword [ebp - 0x48]
mov edx, dword [ecx]
lea esi, [ebp - 0x58]
push esi
push eax
sub esp, 0x10
mov eax, esp
push ecx
movups xmmword [eax], xmm0
call dword [edx + 0x94]
test eax, eax
jns 0x401357
push eax
push str.____pMethodInfo__Invoke_3_...__failed__hr___X_n
call fcn.004014e0
add esp, 8
jmp 0x401364
push str.___pMethodInfo__Invoke_3_...__succeeded_n
call fcn.004014e0
add esp, 4
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov esi, eax
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x40137d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x40138e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x40139f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0x33
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x4013b3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push str.____pRuntimeInfo__IsLoadable_...__failed_n
call fcn.004014e0
add esp, 4
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x80004003
call fcn.00401510
int3