Function at 0x401551
Capabilities:
Create thread

Disassembly:
mov eax, 0x402333
call fcn.00402148
sub esp, 0x2c4
mov eax, dword [0x403024]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
xor ebx, ebx
mov dword [ebp - 0x10], eax
push 0x7f
xor eax, eax
cmp dword [0x403034], ebx
mov word [ebp - 0x294], bx
pop ecx
lea edi, [ebp - 0x292]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x2a0], esi
stosw word es:[edi], ax
mov dword [ebp - 0x2c4], 1
mov dword [ebp - 0x298], ebx
mov dword [ebp - 0x2c8], ebx
mov dword [ebp - 0x29c], ebx
jl 0x401ba4
call dword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
push eax
lea eax, [ebp - 0x94]
push 0x40120c
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
lea eax, [ebp - 0x94]
push eax
push 2
call dword [sym.imp.msvcrt.dll__wsetlocale]
add esp, 0x14
test eax, eax
je 0x401c38
push 0x100
lea eax, [ebp - 0x294]
push eax
mov edi, 0x106
push edi
call sub.COMRes.dll_COMResModuleInstance
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x401625
push edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4011d4
call dword [sym.imp.msvcrt.dll_printf]
add esp, 0xc
jmp 0x401c38
xor ecx, ecx
inc ecx
cmp dword [ebp + 8], ecx
jle 0x40168e
mov edi, dword [esi + ecx*4]
cmp byte [edi], 0x2f
jne 0x401679
mov eax, edi
lea edx, [eax + 1]
mov dword [ebp - 0x2b8], edx
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x401640
sub eax, dword [ebp - 0x2b8]
cmp eax, 2
jne 0x401699
mov al, byte [edi + 1]
cmp al, 0x4e
je 0x401671
cmp al, 0x56
je 0x401665
cmp al, 0x6e
je 0x401671
cmp al, 0x76
jne 0x401699
mov dword [ebp - 0x2c8], 0x10
jmp 0x40167f
mov dword [ebp - 0x2c4], ebx
jmp 0x40167f
inc dword [ebp - 0x29c]
inc ecx
cmp ecx, dword [ebp + 8]
jl 0x40162d
cmp dword [ebp - 0x29c], 2
jge 0x4016c2
push ebx
push ebx
push ebx
push ebx
push 0x105
jmp 0x4016aa
push ebx
push ebx
push ebx
push dword [esi + ecx*4]
call fcn.004012f7
push eax
push 0x104
call fcn.0040134b
push ebx
push ebx
push ebx
push ebx
push 0xfd
jmp 0x40622c
mov eax, dword [ebp - 0x29c]
shl eax, 2
push eax
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
mov dword [ebp - 0x2b4], eax
jne 0x4016f4
push 0x8007000e
lea ecx, [ebp - 0x298]
call fcn.004012b5
mov dword [ebp - 4], ebx
jmp 0x401c18
xor esi, esi
mov dword [ebp - 0x29c], esi
mov dword [ebp - 0x2a8], ebx
mov dword [ebp - 0x2ac], 1
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x2ac]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x2a4], eax
mov eax, dword [eax]
cmp byte [eax], 0x2f
je 0x40178e
push eax
call fcn.004012f7
xor edi, edi
cmp esi, ebx
mov dword [ebp - 0x2b8], eax
jle 0x401760
mov eax, dword [ebp - 0x2b4]
push dword [eax + edi*4]
push dword [ebp - 0x2b8]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x401758
inc edi
cmp edi, esi
jl 0x40173a
cmp edi, esi
jl 0x40180f
mov eax, dword [ebp - 0x2a4]
push dword [eax]
call fcn.004012f7
cmp esi, ebx
mov ecx, dword [ebp - 0x2b4]
mov dword [ecx + esi*4], eax
jle 0x401787
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add dword [ebp - 0x2a8], eax
inc esi
mov dword [ebp - 0x29c], esi
inc dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x2ac]
cmp eax, dword [ebp + 8]
jl 0x40170c
cmp dword [ebp - 0x2c4], ebx
je 0x4018f4
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0x2a8]
add ecx, eax
shl ecx, 1
push ecx
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
mov edi, eax
cmp edi, ebx
pop ecx
mov dword [ebp - 0x2a0], edi
jne 0x40182b
push 0x8007000e
lea ecx, [ebp - 0x298]
call fcn.004012b5
mov eax, dword [eax]
push ebx
push ebx
push ebx
xor esi, esi
push eax
inc esi
push 0x100
mov dword [ebp - 4], esi
call fcn.0040134b
push dword [ebp - 0x298]
or dword [ebp - 4], 0xffffffff
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov eax, esi
jmp 0x401e03
cmp edi, ebx
push ebx
push ebx
push ebx
push ebx
jne 0x401821
push 0x102
jmp 0x4016aa
push 0x103
jmp 0x4016aa
xor esi, esi
inc esi
cmp dword [ebp - 0x29c], esi
mov word [edi], bx
jle 0x401863
cmp esi, 1
jle 0x40184a
push 0x401208
push edi
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, dword [ebp - 0x2b4]
push dword [eax + esi*4]
push edi
call dword [sym.imp.KERNEL32.dll_lstrcatW]
inc esi
cmp esi, dword [ebp - 0x29c]
jl 0x401839
mov eax, dword [ebp - 0x2b4]
push ebx
push ebx
push dword [eax]
push dword [ebp - 0x2a0]
push 0xfe
call fcn.0040134b
lea eax, [ebp - 0x294]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
mov esi, eax
inc esi
lea edi, [esi + esi]
mov eax, edi
add eax, 3
pop ecx
and eax, 0xfffffffc
call fcn.00402170
mov ecx, edi
mov edx, ecx
shr ecx, 2
mov edi, esp
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
mov dword [ebp - 0x2a8], esp
rep stosb byte es:[edi], al
push dword [sym.imp.msvcrt.dll__iob]
push esi
push dword [ebp - 0x2a8]
call dword [sym.imp.msvcrt.dll_fgetws]
push dword [ebp - 0x2a0]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
add esp, 0x10
lea eax, [ebp - 0x294]
push eax
push dword [ebp - 0x2a8]
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x401b96
mov esi, dword [ebp - 0x29c]
dec esi
mov edi, esi
shl edi, 4
push edi
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
mov dword [ebp - 0x2bc], eax
jne 0x40192d
push 0x8007000e
lea ecx, [ebp - 0x298]
call fcn.004012b5
mov dword [ebp - 4], 2
jmp 0x401c18
mov ecx, edi
mov edi, dword [ebp - 0x2bc]
mov edx, ecx
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, esi
shl edi, 2
push edi
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
mov dword [ebp - 0x2a8], eax
jne 0x401977
push 0x8007000e
lea ecx, [ebp - 0x298]
call fcn.004012b5
mov dword [ebp - 4], 3
jmp 0x401c18
mov ecx, edi
mov edi, dword [ebp - 0x2a8]
mov edx, ecx
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea eax, [ebp - 0x2b0]
push eax
push 0x40112c
push 1
push ebx
push 0x40113c
mov dword [ebp - 0x2c0], ebx
mov dword [ebp - 0x2b0], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jge 0x4019d1
push eax
lea ecx, [ebp - 0x298]
call fcn.004012b5
mov dword [ebp - 4], 4
jmp 0x401c18
mov edi, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [eax]
lea edx, [ebp - 0x2d0]
push edx
push dword [edi]
push eax
call dword [ecx + 0x3c]
cmp eax, ebx
jge 0x401a08
push eax
lea ecx, [ebp - 0x298]
call fcn.004012b5
mov dword [ebp - 4], 5
jmp 0x401c18
mov ecx, dword [ebp - 0x2c8]
or ecx, 0x20
cmp dword [ebp - 0x2d0], 0xb
mov dword [ebp - 0x2a4], ecx
jl 0x401bab
xor eax, eax
inc eax
cmp dword [ebp - 0x29c], eax
mov dword [ebp - 0x2a0], ebx
mov dword [ebp - 0x2ac], eax
jle 0x401bc6
mov esi, dword [ebp - 0x2bc]
add esi, 8
mov dword [ebp - 0x2b8], esi
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [eax]
lea edx, [ebp - 0x2cc]
push edx
mov edx, dword [ebp - 0x2ac]
push dword [edi + edx*4]
push eax
call dword [ecx + 0x3c]
cmp eax, ebx
jl 0x401b7e
cmp dword [ebp - 0x2cc], 0xb
jge 0x401a85
or dword [esi], 0x40
or dword [ebp - 0x2a4], 0x40
cmp dword [ebp - 0x2cc], 0xd
jge 0x401b4e
cmp dword [ebp - 0x2d0], 0xd
jl 0x401b4e
cmp dword [ebp - 0x2c4], ebx
je 0x401b49
cmp dword [ebp - 0x2a0], ebx
jne 0x401b49
push ebx
push ebx
push ebx
push ebx
push 0xef
call fcn.0040134b
lea eax, [ebp - 0x294]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
mov esi, eax
inc esi
lea edi, [esi + esi]
mov eax, edi
add eax, 3
pop ecx
and eax, 0xfffffffc
jmp section..htext
or dword [esi], 0x20
jmp 0x401b55
and dword [ebp - 0x2a4], 0xffffffdf
inc dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x2ac]
add esi, 0x10
cmp eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2b8], esi
jl 0x401a4e
mov ecx, dword [ebp - 0x2a4]
jmp 0x401bc6
push eax
lea ecx, [ebp - 0x298]
call fcn.004012b5
mov dword [ebp - 4], 6
jmp 0x401c18
push ebx
push ebx
push ebx
push ebx
push 0xff
call fcn.0040134b
xor eax, eax
jmp 0x401e03
cmp dword [ebp - 0x29c], 1
jle 0x401bc6
mov eax, dword [ebp - 0x2bc]
add eax, 8
or dword [eax], 0x20
add eax, 0x10
dec esi
jne 0x401bbd
mov eax, dword [ebp - 0x2b0]
mov edx, dword [eax]
push ecx
push dword [edi]
push eax
call dword [edx + 0x1c]
cmp eax, ebx
jge 0x401bee
push eax
lea ecx, [ebp - 0x298]
call fcn.004012b5
mov dword [ebp - 4], 7
jmp 0x401c18
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c0]
push edx
push eax
call dword [ecx + 0x34]
cmp eax, ebx
jge 0x401c40
push eax
lea ecx, [ebp - 0x298]
call fcn.004012b5
mov dword [ebp - 4], 8
mov eax, dword [eax]
push ebx
push ebx
push ebx
push eax
push 0x100
call fcn.0040134b
push dword [ebp - 0x298]
or dword [ebp - 4], 0xffffffff
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
xor eax, eax
inc eax
jmp 0x401e03
push ebx
push ebx
push ebx
push dword [ebp - 0x2c0]
push 0x101
call fcn.0040134b
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
cmp eax, ebx
mov dword [ebp - 0x2a4], eax
jl 0x401d66
xor esi, esi
inc esi
cmp dword [ebp - 0x29c], esi
jle 0x401cdd
mov eax, dword [ebp - 0x2a8]
mov edi, dword [ebp - 0x2bc]
mov dword [ebp - 0x2a0], eax
add edi, 8
mov ecx, dword [ebp - 0x2b4]
mov edx, dword [ecx]
lea eax, [edi - 8]
mov dword [eax], edx
mov edx, dword [ebp - 0x2c8]
or dword [edi], edx
mov ecx, dword [ecx + esi*4]
mov dword [edi - 4], ecx
lea ecx, [ebp - 0x2b8]
push ecx
push ebx
push eax
push 0x40148a
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, ebx
mov ecx, dword [ebp - 0x2a0]
mov dword [ecx], eax
je 0x401d19
add dword [ebp - 0x2a0], 4
inc esi
add edi, 0x10
cmp esi, dword [ebp - 0x29c]
jl 0x401c8d
mov esi, dword [ebp - 0x29c]
push 0xffffffffffffffff
xor edi, edi
inc edi
push edi
push dword [ebp - 0x2a8]
lea eax, [esi - 1]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
lea eax, [esi - 1]
xor edx, edx
cmp eax, ebx
jle 0x401d3d
mov ecx, dword [ebp - 0x2bc]
add ecx, 0xc
cmp dword [ecx], ebx
jl 0x401d37
inc edx
add ecx, 0x10
cmp edx, eax
jl 0x401d0b
jmp 0x401d3d
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
jg 0x401d29
call esi
jmp 0x401d49
call esi
and eax, 0xffff
or eax, 0x80070000
jmp 0x401d49
mov dword [ebp - 0x298], edi
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
cmp eax, ebx
mov dword [ebp - 0x2a4], eax
jl 0x401d66
cmp dword [ebp - 0x298], ebx
jne 0x401d66
push ebx
push ebx
push ebx
push ebx
push 0xfc
jmp 0x401d6f
push ebx
push ebx
push ebx
push ebx
push 0xfb
call fcn.0040134b
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor esi, esi
cmp dword [ebp - 0x29c], ebx
jle 0x401d98
mov eax, dword [ebp - 0x2b4]
push dword [eax + esi*4]
call edi
inc esi
cmp esi, dword [ebp - 0x29c]
jl 0x401d84
mov eax, dword [ebp - 0x29c]
xor esi, esi
dec eax
cmp eax, ebx
mov dword [ebp - 0x298], eax
jle 0x401dc8
mov eax, dword [ebp - 0x2a8]
mov eax, dword [eax + esi*4]
cmp eax, ebx
je 0x401dbf
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
cmp esi, dword [ebp - 0x298]
jl 0x401dab
push dword [ebp - 0x2a8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x2bc]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
pop ecx
push dword [ebp - 0x2c0]
call edi
mov eax, dword [ebp - 0x2b0]
cmp eax, ebx
je 0x401df8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2a4]
and eax, 0xffff
lea esp, [ebp - 0x2dc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.00401e98
pop edi
pop esi
pop ebx
leave
ret