Function at 0x401000
Capabilities:
Allocate thread local storage
Query environment variable

Disassembly:
push 0x110
push 0
push 0x42bc14
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x42bc18], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x42bc14], eax
mov eax, 0x428e6c
mov dword [0x42bc70], eax
call fcn.0040d62c
call fcn.0041ca50
call fcn.0041bef5
call fcn.0041bca0
call fcn.00418870
call fcn.004169ac
call fcn.00416250
call fcn.00415aa5
call fcn.00415451
call fcn.00414d66
call fcn.00414467
call fcn.00413f95
call fcn.00413e09
call fcn.004136f1
call fcn.00412f5d
call fcn.00411f90
call fcn.0040ff51
call fcn.0040e2ed
call fcn.0040e12b
call fcn.0040d85c
call fcn.0040d648
mov edx, str.ClearTemp_v1.59
lea ecx, [0x42bccc]
call fcn.0040d008
mov dword [0x42bc64], 0xa
mov dword [0x42bc2c], 0
mov dword [0x42bc30], 0
mov dword [0x42bc1c], 0
mov dword [0x42bc20], 0
mov dword [0x42bc34], 0
mov dword [0x42bc38], 0
mov edx, 0x428028
lea ecx, [0x42bca0]
call fcn.0040d008
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 0x64
call fcn.0041ac40
push 0x42bcb8
call fcn.0041cae0
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 0x64
call fcn.0041ac40
push 0x42bc48
call fcn.0041cae0
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 0xc8
call fcn.0041ac40
push 0x42bca4
call fcn.0041cae0
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 0xc8
call fcn.0041ac40
push 0x42bcd0
call fcn.0041cae0
push 0xc8
mov eax, dword [0x42bca4]
push eax
mov eax, str.PROCESSOR_ARCHITECTURE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0xc8
mov eax, dword [0x42bcd0]
push eax
mov eax, str.PROCESSOR_ARCHITEW6432
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x42bc48]
push eax
mov eax, str.SYSTEMDRIVE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x42bcb8]
push eax
mov eax, str.TEMP
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push dword [0x42bca4]
mov edx, str.AMD64
pop ecx
call fcn.0040d1d0
jne 0x401228
push dword [0x42bcd0]
mov edx, str.AMD64
pop ecx
call fcn.0040d1d0
jne 0x401228
jmp 0x40122f
mov eax, 1
jmp 0x401231
xor eax, eax
and eax, eax
je 0x401247
mov edx, 0x428670
lea ecx, [0x42bca0]
call fcn.0040d008
jmp 0x401257
mov edx, 0x428852
lea ecx, [0x42bca0]
call fcn.0040d008
mov edx, 0x428028
lea ecx, [0x42bcc8]
call fcn.0040d008
mov edx, 0x428028
lea ecx, [0x42bc54]
call fcn.0040d008
mov edx, dword [0x42bc48]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041cb70
mov edx, str.WindowsSystem32
push edx
call fcn.0041cb70
push 0x42bc54
call fcn.0041cae0
mov edx, dword [0x42bc48]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041cb70
mov edx, str.WindowsSystem32
push edx
call fcn.0041cb70
push 0x42bcc8
call fcn.0041cae0
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 1
mov eax, str..ini
push eax
mov eax, str..exe
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
call fcn.0040d88b
call fcn.0040d222
add dword [esp], edx
call fcn.0041ac90
push 0x42bc80
call fcn.0041cae0
fld qword [0x428dec]
fstp qword [0x42bc24]
fld qword [0x428dec]
fstp qword [0x42bc3c]
mov dword [0x42bc94], 0
mov dword [0x42bc4c], 0
mov dword [0x42bc6c], 0
push edx
call fcn.0041caa0
pop edx
push eax
mov eax, 0x428028
push eax
mov eax, str.AppsUseLightTheme
push eax
mov eax, 0x428730
push eax
push 0x80000001
call fcn.0040a757
push 0x42bcb4
call fcn.0041cae0
push dword [0x42bcb4]
mov edx, 0x42806e
pop ecx
call fcn.0040d1d0
je 0x4013ab
mov dword [0x42bc4c], 1
mov dword [0x42bc6c], 1
mov dword [0x42bc94], 1
push 0
push 0
push 0
call fcn.00414473
mov dword [0x42bcc4], eax
push 0xff
push 0xff
push 0xff
call fcn.00414473
mov dword [0x42bc98], eax
push 0x20
push 0x20
push 0x20
call fcn.00414473
mov dword [0x42bc58], eax
push 0x808080
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x42bc84], eax
push 0xcc872c
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x42bcac], eax
push 7
xor eax, eax
push eax
lea eax, [0x42bd04]
push eax
push 0x1f
call fcn.00415470
mov eax, 0x200
push eax
lea eax, [0x42bd14]
push eax
xor eax, eax
push eax
push 7
push 0x2d
call fcn.00413710
mov eax, 0x200
push eax
lea eax, [0x42bd18]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.00413710
mov eax, 0x200
push eax
lea eax, [0x42bd1c]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.00413710
mov eax, 0x200
push eax
lea eax, [0x42bd20]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.00413710
mov dword [0x42bcfc], 2
mov dword [0x42bd00], 1
push 0x42bcf8
push 0
push 0x15
push 4
push 2
call fcn.00414065
push 0x15
xor eax, eax
push eax
lea eax, [0x42bd0c]
push eax
push 4
call fcn.00415470
mov dword [0x42bc64], 0xa
push dword [0x42bc80]
call fcn.004116a9
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x401531
jl 0x40152d
cmp ebx, 0
ja 0x401531
xor eax, eax
jmp 0x401536
mov eax, 1
or eax, eax
je 0x401581
push dword [0x42bc80]
push 0
call fcn.00412280
and eax, eax
je 0x401581
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 0x10000
push 0
call fcn.00412340
push 0x42bc74
call fcn.0041cae0
push 0
call fcn.00411ec0
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
mov eax, 0x428028
push eax
mov eax, 0x428044
push eax
push dword [0x42bc74]
call fcn.0041aff0
push 0x42bc74
call fcn.0041cae0
push 1
push 1
mov eax, str.timeout
push eax
push dword [0x42bc74]
call fcn.0041b030
mov dword [0x42bcb0], eax
mov ebx, dword [0x42bcb0]
and ebx, ebx
jle 0x40162a
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
mov ebx, dword [0x42bcb0]
mov eax, 0x4287f4
push eax
call fcn.0041b0f0
add ebx, eax
push ebx
push dword [0x42bc74]
call fcn.0041b1b0
call fcn.0040d222
add dword [esp], edx
call fcn.0041b200
call fcn.0040d240
mov dword [0x42bc64], eax
mov ebx, dword [0x42bc64]
and ebx, ebx
jle 0x40164d
push 0x136
push 0x29e
push 0
push 0
call fcn.0040c157
call fcn.0040fd31
mov ebx, eax
cmp ebx, 0x6e
jl 0x40166a
mov ebx, dword [0x42bc4c]
and ebx, ebx
jle 0x40166a
mov eax, 1
jmp 0x40166c
xor eax, eax
and eax, eax
je 0x401748
mov ebx, dword [0x42bc94]
and ebx, ebx
jle 0x401748
call fcn.0040888f
mov eax, str.dwmapi
push eax
push 0
call fcn.0040e19e
and eax, eax
je 0x4016ac
mov ebx, dword [0x42bc6c]
and ebx, ebx
jle 0x4016ac
mov eax, 1
jmp 0x4016ae
xor eax, eax
and eax, eax
je 0x401748
mov dword [0x42bc88], 0
mov eax, str.DwmSetWindowAttribute
push eax
push 0
call fcn.0040e1f8
mov dword [0x42bc7c], eax
push dword [0x42c1d8]
call fcn.0041c000
push 0x42bc88
push dword [0x42c1d8]
call fcn.0041bfa0
and eax, eax
je 0x401729
push dword [0x42bc88]
call fcn.0040ffbc
and eax, eax
je 0x401727
push 4
push 0x42bc6c
push 0x14
push dword [0x42bc88]
call fcn.0040ffce
push eax
call dword [0x42bc7c]
add esp, 0x10
jmp 0x4016e0
push dword [0x42c1d8]
call fcn.0041bf8f
push 0
call fcn.0040e0de
push 1
call fcn.00406fd4
mov ebx, dword [0x42bc64]
and ebx, ebx
jle 0x401761
push 0
push 0
call fcn.004100c9
push 5
call fcn.00406fd4
mov edx, 0x428028
lea ecx, [0x42bcbc]
call fcn.0040d008
mov edx, 0x428028
lea ecx, [0x42bca8]
call fcn.0040d008
mov edx, 0x428028
lea ecx, [0x42bc90]
call fcn.0040d008
mov edx, 0x428028
lea ecx, [0x42bc8c]
call fcn.0040d008
push dword [0x42bc80]
call fcn.004116a9
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4017ca
jl 0x4017c6
cmp ebx, 0
ja 0x4017ca
xor eax, eax
jmp 0x4017cf
mov eax, 1
or eax, eax
je 0x401cf7
push dword [0x42bc80]
push 0
call fcn.00412280
and eax, eax
je 0x401cf2
mov eax, 0x42869e
push eax
call fcn.0040a63c
push 0
call fcn.00412450
mov ebx, eax
and ebx, ebx
jne 0x401ce8
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 0x18
push 0
call fcn.00412340
push 0x42bc8c
call fcn.0041cae0
mov edx, 0x428028
lea ecx, [0x42bc60]
call fcn.0040d008
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 0x104
call fcn.0041ac40
push 0x42bcc0
call fcn.0041cae0
mov eax, 0x428062
push eax
push dword [0x42bc8c]
call fcn.0041b0d0
mov dword [0x42bc68], eax
mov ebx, dword [0x42bc68]
and ebx, ebx
jle 0x401997
mov ebx, dword [0x42bc68]
inc ebx
push ebx
mov eax, 0x428062
push eax
push dword [0x42bc8c]
call fcn.0041b010
mov dword [0x42bc78], eax
mov ebx, dword [0x42bc78]
cmp ebx, dword [0x42bc68]
jle 0x401997
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
mov ebx, dword [0x42bc78]
sub ebx, dword [0x42bc68]
inc ebx
push ebx
push dword [0x42bc68]
push dword [0x42bc8c]
call fcn.0041b120
push 0x42bc60
call fcn.0041cae0
push dword [0x42bc60]
mov edx, 0x428028
pop ecx
call fcn.0040d1d0
jne 0x401997
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
mov eax, 0x428028
push eax
mov eax, 0x428062
push eax
push dword [0x42bc60]
call fcn.0041aff0
push 0x42bcd8
call fcn.0041cae0
push 0x1f4
mov eax, dword [0x42bcc0]
push eax
push dword [0x42bcd8]
call sub.KERNEL32.dll_GetEnvironmentVariableW
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 1
push dword [0x42bc68]
push 1
push dword [0x42bcc0]
push dword [0x42bc60]
push dword [0x42bc8c]
call fcn.0041acb0
push 0x42bc8c
call fcn.0041cae0
mov eax, 0x428062
push eax
push dword [0x42bc8c]
call fcn.0041b0d0
mov ebx, eax
and ebx, ebx
jne 0x40186b
push dword [0x42bc8c]
call fcn.004116a9
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x4019cb
cmp edi, 0xffffffff
je 0x4019cf
xor eax, eax
jmp 0x4019d4
mov eax, 1
or eax, eax
je 0x401ce3
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
mov edx, 0x4284b4
push edx
call fcn.0041cb70
mov edx, dword [0x42bc8c]
push edx
call fcn.0041cb70
mov edx, 0x428154
push edx
call fcn.0041cb70
call fcn.0040d222
add dword [esp], edx
call fcn.0040a63c
call fcn.0040d240
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 1
push dword [0x42bc8c]
call fcn.0041b340
push 0x42bc90
call fcn.0041cae0
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 1
push dword [0x42bc8c]
call fcn.0041b3b0
call fcn.0041cbd0
mov edx, 0x4281c2
call fcn.0040d250
mov ecx, eax
call fcn.0040d1d0
jne 0x401aab
mov edx, dword [0x42bc8c]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041cb70
mov edx, 0x4281c2
push edx
call fcn.0041cb70
push 0x42bc8c
call fcn.0041cae0
mov eax, 0x428944
push eax
push dword [0x42bc8c]
push 0
call fcn.00411872
and eax, eax
je 0x401ce3
push dword [0x42bc90]
call fcn.00407748
push edx
push eax
pop dword [0x42bc2c]
pop dword [0x42bc30]
push 0
call fcn.004119d1
and eax, eax
je 0x401c81
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 0
call fcn.00411800
push 0x42bcbc
call fcn.0041cae0
push dword [0x42bcbc]
mov edx, 0x42806a
pop ecx
call fcn.0040d1d0
je 0x401b2d
jmp 0x401ae2
push dword [0x42bcbc]
mov edx, 0x428cc4
pop ecx
call fcn.0040d1d0
je 0x401b42
jmp 0x401ae2
push 0
call fcn.0041184e
mov ebx, eax
cmp ebx, 1
jne 0x401bed
push edx
call fcn.0041caa0
pop edx
push eax
mov edx, dword [0x42bc8c]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041cb70
mov edx, dword [0x42bcbc]
push edx
call fcn.0041cb70
call fcn.0040d222
add dword [esp], edx
call fcn.0040a69f
call fcn.0040d240
push edx
call fcn.0041caa0
pop edx
push eax
mov edx, dword [0x42bc8c]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041cb70
mov edx, dword [0x42bcbc]
push edx
call fcn.0041cb70
call fcn.0040d222
add dword [esp], edx
call fcn.004116a9
call fcn.0040d240
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x401bdf
jg 0x401bdb
cmp ebx, 0
jb 0x401bdf
xor eax, eax
jmp 0x401be4
mov eax, 1
or eax, eax
jne 0x401be8
jmp 0x401c7c
push edx
call fcn.0041caa0
pop edx
push eax
mov edx, dword [0x42bc8c]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041cb70
mov edx, dword [0x42bcbc]
push edx
call fcn.0041cb70
call fcn.0040d222
add dword [esp], edx
call fcn.00404553
call fcn.0040d240
push edx
call fcn.0041caa0
pop edx
push eax
mov edx, dword [0x42bc8c]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041cb70
mov edx, dword [0x42bcbc]
push edx
call fcn.0041cb70
call fcn.0040d222
add dword [esp], edx
call fcn.004116a9
call fcn.0040d240
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x401c6f
cmp edi, 0xffffffff
je 0x401c73
xor eax, eax
jmp 0x401c78
mov eax, 1
or eax, eax
je 0x401c7c
jmp 0x401ae2
push 0
call fcn.0041199f
push dword [0x42bc90]
call fcn.00407748
push edx
push eax
pop dword [0x42bc1c]
pop dword [0x42bc20]
push dword [0x42bc38]
push dword [0x42bc34]
push dword [0x42bc20]
push dword [0x42bc1c]
lea eax, [0x42bc2c]
mov edx, dword [eax]
sub dword [esp], edx
mov edx, dword [eax + 4]
sbb dword [esp + 4], edx
pop eax
pop edx
add dword [esp], eax
adc dword [esp + 4], edx
pop dword [0x42bc34]
pop dword [0x42bc38]
jmp 0x4017fa
push 0
call fcn.00411ec0
jmp 0x401dae
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
mov edx, 0x428d14
push edx
call fcn.0041cb70
mov edx, dword [0x42bc80]
push edx
call fcn.0041cb70
mov edx, 0x4286f2
push edx
call fcn.0041cb70
call fcn.0041cbd0
mov eax, 0x4281b4
push eax
call fcn.0040d222
add dword [esp + 4], edx
call fcn.0040d6b2
call fcn.0040d240
push 2
push dword [0x42bc80]
push 0
call fcn.00412190
and eax, eax
je 0x401da9
push 2
mov eax, str._temp_
push eax
push 0
call fcn.004124f0
push 2
mov eax, str._tmp_
push eax
push 0
call fcn.004124f0
push 2
mov eax, str._USERPROFILE_AppDataLocalTemp
push eax
push 0
call fcn.004124f0
push 0
call fcn.00411ec0
jmp 0x402364
push dword [0x42bc38]
mov eax, dword [0x42bc34]
pop edx
mov dword [esp - 8], eax
mov dword [esp - 4], edx
fild qword [esp - 8]
fcomp dword [str._knN]
fnstsw ax
test ah, 1
jne 0x401e31
push dword [0x42bc38]
push dword [0x42bc34]
fild qword [esp]
add esp, 8
fdiv qword [0x428e44]
fistp qword [0x42bc34]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 2
fild qword [0x42bc34]
sub esp, 4
fstp dword [esp]
call fcn.0041b430
mov edx, 0x42863e
push edx
call fcn.0041cb70
push 0x42bc44
call fcn.0041cae0
jmp 0x401f6a
push dword [0x42bc38]
mov eax, dword [0x42bc34]
pop edx
mov dword [esp - 8], eax
mov dword [esp - 4], edx
fild qword [esp - 8]
fcomp dword [0x428de4]
fnstsw ax
test ah, 1
jne 0x401eb4
push dword [0x42bc38]
push dword [0x42bc34]
fild qword [esp]
add esp, 8
fdiv qword [0x428e4c]
fistp qword [0x42bc34]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 2
fild qword [0x42bc34]
sub esp, 4
fstp dword [esp]
call fcn.0041b430
mov edx, 0x428c0e
push edx
call fcn.0041cb70
push 0x42bc44
call fcn.0041cae0
jmp 0x401f6a
push dword [0x42bc38]
mov eax, dword [0x42bc34]
pop edx
mov dword [esp - 8], eax
mov dword [esp - 4], edx
fild qword [esp - 8]
fcomp dword [0x428de8]
fnstsw ax
test ah, 1
jne 0x401f34
push dword [0x42bc38]
push dword [0x42bc34]
fild qword [esp]
add esp, 8
fdiv qword [0x428e54]
fistp qword [0x42bc34]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push 2
fild qword [0x42bc34]
sub esp, 4
fstp dword [esp]
call fcn.0041b430
mov edx, 0x428a0e
push edx
call fcn.0041cb70
push 0x42bc44
call fcn.0041cae0
jmp 0x401f6a
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push dword [0x42bc38]
push dword [0x42bc34]
call fcn.0041b620
mov edx, 0x428172
push edx
call fcn.0041cb70
push 0x42bc44
call fcn.0041cae0
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
mov edx, 0x428c9e
push edx
call fcn.0041cb70
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
fld qword [0x42bc24]
sub esp, 8
fistp qword [esp]
call fcn.0041b620
pop eax
mov edx, 0x428a16
push edx
call fcn.0041cb70
mov edx, dword [0x42bc44]
push edx
call fcn.0041cb70
mov edx, str._
push edx
call fcn.0041cb70
call fcn.0040d222
add dword [esp], edx
call fcn.0040a63c
call fcn.0040d240
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
mov edx, 0x428178
push edx
call fcn.0041cb70
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
fld qword [0x42bc3c]
sub esp, 8
fistp qword [esp]
call fcn.0041b620
pop eax
mov edx, 0x4281d8
push edx
call fcn.0041cb70
call fcn.0040d222
add dword [esp], edx
call fcn.0040a63c
call fcn.0040d240
mov eax, 0x428028
push eax
call fcn.0040a63c
mov eax, 0x428048
push eax
call fcn.0040a63c
push 0
call fcn.0040ffbc
and eax, eax
je 0x4020bd
push 0x3e8
push 1
push 0
call fcn.004100db
push 2
push 0x70
push 0
call fcn.0041010a
push 3
push 0x71
push 0
call fcn.0041010a
push 4
push 0x72
push 0
call fcn.0041010a
push 5
push 0x73
push 0
call fcn.0041010a
mov eax, dword [0x42bc64]
mov dword [0x42bc50], eax
mov ebx, dword [0x42bc50]
and ebx, ebx
jne 0x4020d6
jmp 0x402364
call fcn.0041033e
push eax
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x402251
call fcn.00413077
push eax
mov ebx, 2
cmp ebx, dword [esp]
jne 0x402185
push dword [0x42bccc]
push 0
call fcn.00410346
push 1
push 0
call fcn.0041036f
mov eax, 0x428028
push eax
call fcn.0040a63c
mov eax, str._F1_____
push eax
call fcn.0040a63c
mov eax, str._F2________Windows
push eax
call fcn.0040a63c
mov eax, str._F3________Windows
push eax
call fcn.0040a63c
mov eax, str._F4____
push eax
call fcn.0040a63c
mov eax, 0x428028
push eax
call fcn.0040a63c
mov eax, str._INI
push eax
call fcn.0040a63c
mov eax, str._timeout10________._0______.
push eax
call fcn.0040a63c
mov eax, 0x428028
push eax
call fcn.0040a63c
jmp 0x40224b
mov ebx, 3
cmp ebx, dword [esp]
jne 0x4021df
push dword [0x42bccc]
push 0
call fcn.00410346
push 1
push 0
call fcn.0041036f
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
call fcn.0040d88b
call fcn.0040d222
add dword [esp], edx
call fcn.00409e8e
call fcn.0040d240
jmp 0x40224b
mov ebx, 4
cmp ebx, dword [esp]
jne 0x402239
push dword [0x42bccc]
push 0
call fcn.00410346
push 1
push 0
call fcn.0041036f
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
call fcn.0040d88b
call fcn.0040d222
add dword [esp], edx
call fcn.0040754c
call fcn.0040d240
jmp 0x40224b
mov ebx, 5
cmp ebx, dword [esp]
jne 0x40224b
add esp, 8
jmp 0x402364
pop eax
jmp 0x40235e
mov ebx, 0x3336
cmp ebx, dword [esp]
jne 0x4022f9
call fcn.00413086
push eax
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4022f6
push edx
call fcn.0041caa0
pop edx
push eax
mov edx, dword [0x42bccc]
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041cb70
mov edx, str.______________
push edx
call fcn.0041cb70
push edx
call fcn.0041caa0
pop edx
push eax
push edx
call fcn.0041caa0
pop edx
push eax
mov eax, dword [0x42bc50]
cdq
push edx
push eax
call fcn.0041b620
pop eax
mov edx, 0x428b80
push edx
call fcn.0041cb70
call fcn.0041cbd0
push 0
call fcn.0040d222
add dword [esp + 4], edx
call fcn.00410346
call fcn.0040d240
dec dword [0x42bc50]
mov ebx, dword [0x42bc50]
cmp ebx, 1
jge 0x4022f6
add esp, 8
jmp 0x402364
pop eax
jmp 0x40235e
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x40230a
add esp, 4
jmp 0x402364
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x40235e
call fcn.00413095
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x40235d
call fcn.004130a4
push eax
mov ebx, 0x36b0
cmp ebx, dword [esp]
jne 0x402352
push dword [0x42bccc]
push 0
call fcn.00410346
push 1
push 0
call fcn.0041036f
jmp 0x40235c
mov ebx, 0x36b1
cmp ebx, dword [esp]
jne 0x40235c
pop eax
pop eax
pop eax
jmp 0x4020d6
push 0
call 0x402383
call fcn.0041ca80
push dword [0x42bc14]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0040e11f
call fcn.0040e297
call fcn.0040ff2e
call fcn.00411a15
call fcn.00411f80
call fcn.00412f3f
call fcn.00413e08
call fcn.00414d5a
call fcn.00415aa4
call fcn.00418890
call fcn.0041bf83
call fcn.0041c06b
call fcn.0041bc90
ret