Function at 0x406280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
xor edx, edx
xor eax, eax
mov ebp, esp
push edi
push esi
push ebx
xor ebx, ebx
sub esp, 0x8fc
mov word [ebp - 0x888], bx
mov dword [ebp - 0x89c], 0x25000a
mov dword [ebp - 0x898], 0x200073
mov dword [ebp - 0x894], 0x240028
mov dword [ebp - 0x890], 0x780025
mov dword [ebp - 0x88c], 0xa0029
mov dword [ebp + eax - 0x87c], edx
mov dword [ebp + eax - 0x878], edx
add eax, 8
cmp eax, 0x20
jb 0x4062cb
mov eax, dword [ebp + 8]
lea ebx, [ebp - 0x850]
mov ecx, 0xe
lea edx, [ebp - 0x418]
mov edi, ebx
lea esi, [ebp - 0x884]
mov dword [ebp - 0x884], 1
mov dword [ebp - 0x880], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x870], 0x100
mov dword [ebp - 0x874], edx
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x854], 5
mov dword [ebp - 0x840], 0x100
mov dword [ebp - 0x844], edx
mov dword [ebp - 0x858], 0xffff0002
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x113e
mov eax, dword [0x416030]
mov dword [esp], eax
call sym._SendMessageW_16
sub esp, 0x10
test eax, eax
je 0x40638f
mov eax, dword [ebp - 0x860]
test eax, eax
je 0x40638f
mov ecx, dword [eax + 0x604]
test ecx, ecx
jne 0x40638f
test byte [eax], 4
jne 0x4063a0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
add eax, 0x202
lea edi, [ebp - 0x8bc]
mov dword [esp + 4], edi
mov dword [esp], eax
call sym._CLSIDFromString_8
sub esp, 8
test eax, eax
js 0x40638f
mov edx, dword [ebp + 0xc]
mov eax, dword [0x416044]
test edx, edx
je 0x406670
mov ebx, dword [ebp + 0xc]
lea edx, [ebp - 0x8c8]
or eax, 0x10
mov dword [ebp - 0x8ac], 0
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0x8a4], 0
mov dword [ebp - 0x8a8], ebx
mov dword [ebp - 0x8c8], 0x4159dc
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x8ac]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 1
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], edi
call sym._CoCreateInstanceEx_24
mov eax, dword [ebp - 0x8c4]
mov edx, dword [ebp - 0x8c0]
sub esp, 0x18
mov dword [ebp - 0x8cc], eax
test edx, edx
js 0x4066a0
mov eax, dword [ebp - 0x860]
mov edx, dword [ebp - 0x8cc]
mov dword [ebp - 0x884], 8
mov dword [ebp - 0x87c], 0x10
mov dword [eax + 0x604], 1
mov dword [eax + 0x608], edx
mov dword [ebp - 0x878], 0x10
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x113f
mov eax, dword [0x416030]
mov dword [esp], eax
call sym._SendMessageW_16
mov eax, dword [0x41667c]
mov dword [ebp - 0x884], 1
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
jmp 0x4064dc
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 1
mov dword [esp + 4], 0x110a
mov eax, dword [0x416030]
mov dword [esp], eax
call sym._SendMessageW_16
sub esp, 0x10
mov ebx, eax
test eax, eax
je 0x406650
mov dword [ebp - 0x880], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x113e
mov eax, dword [0x416030]
mov dword [esp], eax
call sym._SendMessageW_16
sub esp, 0x10
test eax, eax
je 0x4064d0
mov eax, dword [ebp - 0x860]
test eax, eax
je 0x4064d0
add eax, 0x202
mov dword [esp + 4], edi
mov dword [esp], eax
call sym._CLSIDFromString_8
mov eax, dword [ebp - 0x8cc]
lea ecx, [ebp - 0x618]
sub esp, 8
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [edx]
sub esp, 0xc
test eax, eax
js 0x4064d0
mov eax, dword [ebp - 0x618]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
xor eax, eax
sub esp, 4
lea esi, [esi]
nop
movzx edx, word [eax + str.Interface_]
mov word [ebp + eax - 0x218], dx
add eax, 2
test dx, dx
jne 0x406588
mov ecx, dword [ebp - 0x860]
cmp word [ebp - 0x218], 0
lea edx, [ebp - 0x218]
lea eax, [ecx + 0x202]
mov dword [ebp - 0x8dc], eax
je 0x4065d1
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x4065c8
mov eax, dword [ebp - 0x8dc]
sub edx, ecx
lea esi, [esi]
mov ecx, eax
add eax, 2
movzx ecx, word [ecx]
mov word [eax + edx - 0x204], cx
test cx, cx
jne 0x4065e0
mov dword [esp], 0
mov ecx, dword [ebp - 0x8dc]
lea edx, [ebp - 0x218]
mov eax, 0xb
call sym._CreateITEM_INFO
mov dword [ebp - 0x830], eax
lea eax, [ebp - 0x85c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1132
mov eax, dword [0x416030]
mov dword [esp], eax
call sym._SendMessageW_16
sub esp, 0x10
jmp 0x4064d0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dbg.RefreshMenu
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dbg.RefreshDetails
jmp 0x40638f
lea edx, [ebp - 0x8cc]
mov dword [esp + 0xc], 0x4159dc
mov dword [esp + 0x10], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], edi
call sym._CoCreateInstance_20
sub esp, 0x14
mov edx, eax
jmp 0x406447
lea ebx, [ebp - 0x618]
mov dword [ebp - 0x8dc], edx
lea esi, [ebp - 0x818]
mov dword [esp + 0xc], 0x100
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x12c
mov eax, dword [0x41603c]
mov dword [esp], eax
call sym._LoadStringW_16
sub esp, 0x10
mov dword [esp + 0xc], 0x100
mov dword [esp + 8], esi
mov dword [esp + 4], 0x14
mov eax, dword [0x41603c]
mov dword [esp], eax
call sym._LoadStringW_16
mov edx, dword [ebp - 0x8dc]
sub esp, 0x10
cmp edx, 0x800401f5
je 0x4068c7
cmp edx, 0x800401f6
jge 0x4067f0
cmp edx, 0x80040150
je 0x40695c
cmp edx, 0x80040151
jge 0x40684d
cmp edx, 0x80004002
je 0x40692f
cmp edx, 0x80040111
jne 0x4068f4
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], str.CLASS_E_CLASSNOTAVAILABLE
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_MultiByteToWideChar]
mov edx, dword [ebp - 0x8dc]
sub esp, 0x18
cmp word [ebp - 0x618], 0
mov eax, ebx
je 0x4067a9
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x4067a0
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x89c]
mov dword [esp + 8], edi
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._wsprintfW
mov dword [esp + 0xc], 0x30
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov eax, dword [0x416020]
mov dword [esp], eax
call sym._MessageBoxW_16
sub esp, 0x10
jmp 0x40638f
cmp edx, 0x800401fe
je 0x4069b6
cmp edx, 0x800401ff
jge 0x406892
cmp edx, 0x800401f8
je 0x406989
cmp edx, 0x800401f9
jne 0x4068f4
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], str.CO_E_ERRORINDLL
jmp 0x406770
cmp edx, 0x80040152
je 0x4069e3
cmp edx, 0x80040154
jne 0x4068f4
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], str.REGDB_E_CLASSNOTREG
jmp 0x406770
cmp edx, 0x80070005
jne 0x4068f4
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], str.E_ACCESSDENIED
jmp 0x406770
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], str.CO_E_APPNOTFOUND
jmp 0x406770
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0xc], 0x100
mov dword [esp + 8], edi
mov dword [esp + 4], 0x12d
mov eax, dword [0x41603c]
mov dword [esp], eax
call sym._LoadStringW_16
mov edx, dword [ebp - 0x8dc]
sub esp, 0x10
jmp 0x40678e
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], str.E_NOINTERFACE
jmp 0x406770
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], str.REGDB_E_READREGDB
jmp 0x406770
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], str.CO_E_DLLNOTFOUND
jmp 0x406770
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], str.CO_E_APPDIDNTREG
jmp 0x406770
lea edi, [ebp - 0x218]
mov dword [ebp - 0x8dc], edx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], str.REGDB_E_KEYMISSING
jmp 0x406770