Function at 0x411d30
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
mov ebx, dword [ebp + 8]
push esi
xor esi, esi
cmp ebx, esi
mov dword [ebp - 4], esi
je 0x411f9c
cmp word [ebx], si
je 0x411f9c
cmp dword [ebp + 0xc], esi
push edi
je 0x411e81
mov edi, dword [sym.imp.SHLWAPI.dll_StrChrW]
push 0x3d
push ebx
call edi
mov esi, eax
test esi, esi
jne 0x411d86
push 0x3e
push ebx
call edi
mov esi, eax
test esi, esi
jne 0x411d86
push 0x3c
push ebx
call edi
mov esi, eax
test esi, esi
je 0x411f9b
movzx edi, word [esi]
and word [esi], 0
push ebx
call fcn.00411cb3
add esi, 2
push esi
mov ebx, eax
call fcn.00411cb3
cmp byte [ebp + 0x10], 0
pop ecx
pop ecx
mov esi, eax
jne 0x411ddb
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp di, 0x3e
jne 0x411dbc
xor ecx, ecx
test eax, eax
jmp 0x411e0a
cmp di, 0x3c
jne 0x411dc8
xor ecx, ecx
test eax, eax
jmp 0x411e20
cmp di, 0x3d
jne 0x411f9b
xor ecx, ecx
test eax, eax
jmp 0x411f74
cmp byte [ebp + 0x10], 1
push ebx
jne 0x411e28
call fcn.00403470
push esi
mov ebx, eax
call fcn.00403470
cmp di, 0x3d
pop ecx
pop ecx
jne 0x411e00
xor ecx, ecx
cmp ebx, eax
jmp 0x411f74
cmp di, 0x3e
jne 0x411e12
xor ecx, ecx
cmp ebx, eax
setg cl
jmp 0x411f77
cmp di, 0x3c
jne 0x411f9b
xor ecx, ecx
cmp ebx, eax
setl cl
jmp 0x411f77
call fcn.00406788
fstp qword [ebp - 0xc]
push esi
call fcn.00406788
cmp di, 0x3d
pop ecx
pop ecx
jne 0x411e48
fcomp qword [ebp - 0xc]
fnstsw ax
test ah, 0x44
jmp 0x411e56
cmp di, 0x3e
jne 0x411e64
fcomp qword [ebp - 0xc]
fnstsw ax
test ah, 5
jp 0x411e78
mov dword [ebp - 4], 1
jmp 0x411f9b
cmp di, 0x3c
jne 0x411f99
fcomp qword [ebp - 0xc]
fnstsw ax
test ah, 0x41
je 0x411e58
and dword [ebp - 4], 0
jmp 0x411f9b
push 4
push ebx
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
movzx eax, word [ebx + 6]
cmp ax, 0x3e
je 0x411ed7
cmp ax, 0x3c
je 0x411ed7
cmp ax, 0x3d
je 0x411ed7
cmp byte [ebp + 0x10], 2
push ebx
jne 0x411ec8
call fcn.00403642
test eax, eax
pop ecx
jne 0x411e58
push ebx
call fcn.0040366a
test eax, eax
pop ecx
jne 0x411e58
mov dword [ebp - 4], esi
jmp 0x411f9b
call fcn.00406abb
pop ecx
xor ecx, ecx
cmp ecx, eax
jmp 0x411f90
lea esi, [ebx + 8]
push esi
call fcn.00403470
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov dword [ebp + 8], eax
lea eax, [ebp - 0xc]
mov dword [esp], 0x402e64
push eax
call edi
test eax, eax
jne 0x411f0e
cmp byte [ebp + 0x10], 2
jne 0x411f07
call fcn.004065f9
jmp 0x411f65
call fcn.00406603
jmp 0x411f65
push 0x402e5c
lea eax, [ebp - 0xc]
push eax
call edi
test eax, eax
jne 0x411f4e
cmp word [esi], 0x23
jne 0x411f2e
lea eax, [ebx + 0xa]
push eax
call fcn.00403470
jmp 0x411f3b
movzx eax, word [esi + 2]
push eax
call fcn.004033f9
movzx eax, ax
pop ecx
push 0
push 0
push eax
mov dword [ebp + 8], eax
call fcn.00411bbc
add esp, 0xc
jmp 0x411f65
cmp byte [ebp + 0x10], 2
lea eax, [ebp - 0xc]
push eax
jne 0x411f5f
call fcn.0040372c
jmp 0x411f64
call fcn.0040373d
pop ecx
movzx ecx, word [ebx + 6]
cmp cx, 0x3d
jne 0x411f7c
xor ecx, ecx
cmp eax, dword [ebp + 8]
sete cl
mov dword [ebp - 4], ecx
jmp 0x411f9b
cmp cx, 0x3e
jne 0x411f87
cmp dword [ebp + 8], eax
jmp 0x411f90
cmp cx, 0x3c
jne 0x411f9b
cmp eax, dword [ebp + 8]
sbb eax, eax
neg eax
mov dword [ebp - 4], eax
jmp 0x411f9b
fstp st(0)
pop edi
mov eax, dword [ebp - 4]
pop esi
pop ebx
leave
ret