Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- .text:00000001400027C0 ; int __stdcall wWinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPWSTR lpCmdLine, int nShowCmd)
- .text:00000001400027C0 wWinMain proc near ; CODE XREF: __tmainCRTStartup+14F↓p
- .text:00000001400027C0 ; DATA XREF: .pdata:00000001400161C8↓o
- .text:00000001400027C0
- .text:00000001400027C0 var_1C8 = qword ptr -1C8h
- .text:00000001400027C0 hInternet = qword ptr -1C0h
- .text:00000001400027C0 WSAData = WSAData ptr -1B8h
- .text:00000001400027C0 var_18 = qword ptr -18h
- .text:00000001400027C0 arg_0 = qword ptr 8
- .text:00000001400027C0
- .text:00000001400027C0 ; __unwind { // __GSHandlerCheck
- .text:00000001400027C0 mov [rsp+arg_0], rbx
- .text:00000001400027C5 push rdi
- .text:00000001400027C6 sub rsp, 1E0h
- .text:00000001400027CD mov rax, cs:qword_140012008
- .text:00000001400027D4 xor rax, rsp
- .text:00000001400027D7 mov [rsp+1E8h+var_18], rax
- .text:00000001400027DF xor edi, edi
- .text:00000001400027E1 xor ecx, ecx ; hWnd
- .text:00000001400027E3 mov [rsp+1E8h+hInternet], rdi
- .text:00000001400027E8 mov [rsp+1E8h+var_1C8], rdi
- .text:00000001400027ED call cs:GetDC
- .text:00000001400027F3 lea rdx, [rsp+1E8h+WSAData] ; lpWSAData
- .text:00000001400027F8 mov ecx, 202h ; wVersionRequested
- .text:00000001400027FD call cs:WSAStartup
- .text:0000000140002803 call sub_140002230
- .text:0000000140002808 call sub_140001150
- .text:000000014000280D mov ebx, eax
- .text:000000014000280F test eax, eax
- .text:0000000140002811 js loc_140002907
- .text:0000000140002817 lea rcx, unk_140014560
- .text:000000014000281E call sub_1400012E0
- .text:0000000140002823 mov ebx, eax
- .text:0000000140002825 test eax, eax
- .text:0000000140002827 js loc_140002907
- .text:000000014000282D lea edx, [rdi+1] ; bManualReset
- .text:0000000140002830 xor r9d, r9d ; lpName
- .text:0000000140002833 xor r8d, r8d ; bInitialState
- .text:0000000140002836 xor ecx, ecx ; lpEventAttributes
- .text:0000000140002838 call cs:CreateEventW
- .text:000000014000283E mov cs:hHandle, rax
- .text:0000000140002845
- .text:0000000140002845 loc_140002845: ; CODE XREF: wWinMain+13F↓j
- .text:0000000140002845 lea r8, [rsp+1E8h+hInternet]
- .text:000000014000284A lea rdx, [rsp+1E8h+var_1C8]
- .text:000000014000284F lea rcx, unk_140014560
- .text:0000000140002856 call sub_140001C10
- .text:000000014000285B mov rbx, [rsp+1E8h+hInternet]
- .text:0000000140002860 test eax, eax
- .text:0000000140002862 js short loc_14000288A
- .text:0000000140002864 lea r8, unk_140014560
- .text:000000014000286B lea rdx, qword_140014540
- .text:0000000140002872 mov rcx, rbx ; hFile
- .text:0000000140002875 call sub_140001840
- .text:000000014000287A test eax, eax
- .text:000000014000287C js short loc_14000288A
- .text:000000014000287E lea rcx, qword_140014540
- .text:0000000140002885 call sub_140001FB0
- .text:000000014000288A
- .text:000000014000288A loc_14000288A: ; CODE XREF: wWinMain+A2↑j
- .text:000000014000288A ; wWinMain+BC↑j
- .text:000000014000288A test rbx, rbx
- .text:000000014000288D jz short loc_14000289D
- .text:000000014000288F mov rcx, rbx ; hInternet
- .text:0000000140002892 call cs:InternetCloseHandle
- .text:0000000140002898 mov [rsp+1E8h+hInternet], rdi
- .text:000000014000289D
- .text:000000014000289D loc_14000289D: ; CODE XREF: wWinMain+CD↑j
- .text:000000014000289D mov rcx, [rsp+1E8h+var_1C8] ; hInternet
- .text:00000001400028A2 test rcx, rcx
- .text:00000001400028A5 jz short loc_1400028B2
- .text:00000001400028A7 call cs:InternetCloseHandle
- .text:00000001400028AD mov [rsp+1E8h+var_1C8], rdi
- .text:00000001400028B2
- .text:00000001400028B2 loc_1400028B2: ; CODE XREF: wWinMain+E5↑j
- .text:00000001400028B2 cmp cs:lpMem, rdi
- .text:00000001400028B9 jz short loc_1400028D3
- .text:00000001400028BB call cs:GetProcessHeap
- .text:00000001400028C1 mov r8, cs:lpMem ; lpMem
- .text:00000001400028C8 xor edx, edx ; dwFlags
- .text:00000001400028CA mov rcx, rax ; hHeap
- .text:00000001400028CD call cs:HeapFree
- .text:00000001400028D3
- .text:00000001400028D3 loc_1400028D3: ; CODE XREF: wWinMain+F9↑j
- .text:00000001400028D3 mov edx, cs:dwMilliseconds ; dwMilliseconds
- .text:00000001400028D9 mov rcx, cs:hHandle ; hHandle
- .text:00000001400028E0 xor eax, eax
- .text:00000001400028E2 mov cs:qword_140014540, rax
- .text:00000001400028E9 mov cs:lpMem, rax
- .text:00000001400028F0 mov cs:qword_140014550, rax
- .text:00000001400028F7 call cs:WaitForSingleObject
- .text:00000001400028FD test eax, eax
- .text:00000001400028FF jnz loc_140002845
- .text:0000000140002905 mov ebx, edi
- .text:0000000140002907
- .text:0000000140002907 loc_140002907: ; CODE XREF: wWinMain+51↑j
- .text:0000000140002907 ; wWinMain+67↑j
- .text:0000000140002907 call sub_140002550
- .text:000000014000290C call cs:WSACleanup
- .text:0000000140002912 mov eax, ebx
- .text:0000000140002914 mov rcx, [rsp+1E8h+var_18]
- .text:000000014000291C xor rcx, rsp ; StackCookie
- .text:000000014000291F call __security_check_cookie
- .text:0000000140002924 mov rbx, [rsp+1E8h+arg_0]
- .text:000000014000292C add rsp, 1E0h
- .text:0000000140002933 pop rdi
- .text:0000000140002934 retn
- .text:0000000140002934 ; } // starts at 1400027C0
- .text:0000000140002934 wWinMain endp
Advertisement
Add Comment
Please, Sign In to add comment
