Function at 0x401bf0
Capabilities:
Terminate process

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
mov eax, 0x1238
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
call fcn.004036f8
sub esp, eax
mov esi, dword [ecx]
mov ebx, dword [ecx + 8]
call sub.comctl32.dll_InitCommonControls
mov dword [ebp - 0x101c], 0
mov dword [section..bss], esi
movzx eax, word [ebx]
mov dword [ebp - 0x1020], 0
test ax, ax
jne 0x401c47
jmp 0x401e9b
movzx eax, word [ebx + 2]
add ebx, 2
cmp ax, 0x20
je 0x401c40
and eax, 0xfffffffd
cmp ax, 0x2d
jne 0x401ff8
movzx eax, word [ebx + 2]
lea edx, [ebx + 2]
sub eax, 0x44
cmp ax, 0x34
ja case.0x401c71.1
movzx eax, ax
jmp dword [eax*4 + 0x405464]
lea eax, [ebx + 4]
lea ecx, [ebp - 0x1228]
mov edx, 2
mov dword [ebp - 0x1020], 2
call fcn.00401a20
test eax, eax
je case.0x401c71.1
test byte [0x404010], 8
je 0x401d65
mov eax, dword [ebp - 0x101c]
test eax, eax
je 0x401eb0
mov eax, 0x40539c
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.WHQL_check:__s_n
mov dword [esp + 8], str.wWinMain
mov dword [esp + 4], 0x404010
mov dword [esp], 3
call fcn.00401b60
test byte [0x404010], 8
je 0x401d65
mov eax, dword [ebp - 0x1020]
mov dword [esp + 0xc], str.Output_type:__d_n
mov dword [esp + 8], str.wWinMain
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x404010
mov dword [esp], 3
call fcn.00401b60
mov eax, dword [ebp - 0x1020]
test eax, eax
je 0x401d65
test byte [0x404010], 8
je 0x401d65
mov edx, str._unknown_
cmp eax, 2
jbe 0x401eba
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Output_filename:__s_n
mov dword [esp + 8], str.wWinMain
mov dword [esp + 4], 0x404010
mov dword [esp], 3
call fcn.00401b60
mov dword [esp], 0
call sub.ole32.dll_CoInitialize
mov eax, dword [ebp - 0x101c]
sub esp, 4
mov dword [esp], eax
call fcn.00401840
mov ebx, eax
test eax, eax
je 0x401ed0
mov eax, dword [ebp - 0x1020]
test eax, eax
jne 0x401e80
test byte [0x404010], 1
jne 0x401ef8
mov dword [esp], ebx
call fcn.00401800
call sub.ole32.dll_CoUninitialize
lea esp, [ebp - 0x10]
xor eax, eax
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
mov dword [esp + 8], 5
mov esi, dword [sym.imp.ucrtbase.dll__wcsnicmp]
mov dword [esp + 4], str.whql:
mov dword [esp], edx
call esi
test eax, eax
jne case.0x401c71.1
lea edi, [ebx + 0xc]
mov dword [esp + 8], 3
mov dword [esp + 4], 0x4053be
mov dword [esp], edi
call esi
test eax, eax
jne 0x401f21
mov dword [ebp - 0x101c], 0
lea eax, [ebx + 0x10]
lea ebx, [eax + 2]
movzx eax, word [eax + 2]
test ax, ax
jne 0x401c47
jmp 0x401c9d
lea eax, [ebx + 4]
lea ecx, [ebp - 0x1228]
mov edx, 1
mov dword [ebp - 0x1020], 1
call fcn.00401a20
jmp 0x401c95
mov dword [esp + 8], 8
mov dword [esp + 4], 0x4053cc
mov dword [esp], edx
call dword [sym.imp.ucrtbase.dll__wcsnicmp]
test eax, eax
jne case.0x401c71.1
lea eax, [ebx + 0x12]
jmp 0x401e14
mov dword [esp + 8], eax
lea eax, [ebp - 0x1228]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00402b20
jmp 0x401da7
test byte [0x404010], 8
je 0x401d65
lea esi, [esi]
nop
mov eax, str.FALSE
jmp 0x401cbd
mov edx, dword [eax*4 + 0x40555c]
jmp 0x401d3d
test byte [0x404010], 2
jne 0x401f4c
call sub.ole32.dll_CoUninitialize
lea esp, [ebp - 0x10]
mov eax, 1
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
mov dword [esp + 0xc], str.Information_dialog_is_not_implemented_n
mov dword [esp + 8], str.wWinMain
mov dword [esp + 4], 0x404010
mov dword [esp], 0
call fcn.00401b60
jmp 0x401da7
mov dword [esp + 8], 2
mov dword [esp + 4], 0x4053c6
mov dword [esp], edi
call esi
test eax, eax
jne case.0x401c71.1
mov dword [ebp - 0x101c], 1
lea eax, [ebx + 0xe]
jmp 0x401e14
mov dword [esp + 0xc], str.DxDiag_information_collection_failed_n
mov dword [esp + 8], str.wWinMain
mov dword [esp + 4], 0x404010
mov dword [esp], 1
call fcn.00401b60
jmp 0x401ed9
lea esi, [ebp - 0x1018]
mov dword [esp + 0xc], 0x400
lea ebx, [ebp - 0x818]
mov dword [esp + 8], esi
mov dword [esp + 4], 0x65
mov eax, dword [section..bss]
mov dword [esp], eax
call sub.user32.dll_LoadStringW
sub esp, 0x10
mov dword [esp + 0xc], 0x400
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x66
mov eax, dword [section..bss]
mov dword [esp], eax
call sub.user32.dll_LoadStringW
xor edx, edx
sub esp, 0x10
mov dword [esp + 0xc], 0x30
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], edx
call sub.user32.dll_MessageBoxW
xor ecx, ecx
sub esp, 0x10
mov dword [esp], ecx
call dword [sym.imp.kernel32.dll_ExitProcess]
lea ecx, [ebp - 0x1228]
mov edx, 1
mov eax, ebx
mov dword [ebp - 0x1020], 1
call fcn.00401a20
jmp 0x401c95