Function at 0x401000
Capabilities:
Allocate thread local storage
Query environment variable

Disassembly:
push 0x114
push 0
push 0x47e018
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x47e01c], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x47e018], eax
mov eax, 0x477fe4
mov dword [0x47e078], eax
call fcn.0040e864
call fcn.00420470
call fcn.0041f901
call fcn.0041f590
call fcn.0041bf40
call fcn.0041a07c
call fcn.00419920
call fcn.0041917f
call fcn.00418b2b
call fcn.00418440
call fcn.00417b41
call fcn.0041766f
call fcn.00415e69
call fcn.00415751
call fcn.00414fbd
call fcn.00413f80
call fcn.00411ef2
call fcn.0041028e
call fcn.004100cc
call fcn.0040fd7d
call fcn.0040ea94
call fcn.0040e880
mov edx, str.ClearTemp_v1.59
lea ecx, [0x47e0d4]
call fcn.0040e008
mov dword [0x47e068], 0xa
mov dword [0x47e030], 0
mov dword [0x47e034], 0
mov dword [0x47e020], 0
mov dword [0x47e024], 0
mov dword [0x47e038], 0
mov dword [0x47e03c], 0
mov edx, 0x477028
lea ecx, [0x47e0a8]
call fcn.0040e008
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 0x64
call fcn.0041e310
push 0x47e0c0
call fcn.00420500
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 0x64
call fcn.0041e310
push 0x47e04c
call fcn.00420500
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 0xc8
call fcn.0041e310
push 0x47e0ac
call fcn.00420500
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 0xc8
call fcn.0041e310
push 0x47e0d8
call fcn.00420500
push 0xc8
mov eax, dword [0x47e0ac]
push eax
mov eax, str.PROCESSOR_ARCHITECTURE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0xc8
mov eax, dword [0x47e0d8]
push eax
mov eax, str.PROCESSOR_ARCHITEW6432
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x47e04c]
push eax
mov eax, str.SYSTEMDRIVE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x47e0c0]
push eax
mov eax, str.TEMP
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push dword [0x47e0ac]
mov edx, str.AMD64
pop ecx
call fcn.0040e1d0
jne 0x40122d
push dword [0x47e0d8]
mov edx, str.AMD64
pop ecx
call fcn.0040e1d0
jne 0x40122d
jmp 0x401234
mov eax, 1
jmp 0x401236
xor eax, eax
and eax, eax
je 0x40124c
mov edx, 0x47774c
lea ecx, [0x47e0a8]
call fcn.0040e008
jmp 0x40125c
mov edx, 0x477944
lea ecx, [0x47e0a8]
call fcn.0040e008
mov edx, 0x477028
lea ecx, [0x47e0d0]
call fcn.0040e008
mov edx, 0x477028
lea ecx, [0x47e058]
call fcn.0040e008
mov edx, dword [0x47e04c]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.00420590
mov edx, str.WindowsSystem32
push edx
call fcn.00420590
push 0x47e058
call fcn.00420500
mov edx, dword [0x47e04c]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.00420590
mov edx, str.WindowsSystem32
push edx
call fcn.00420590
push 0x47e0d0
call fcn.00420500
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 1
mov eax, str..ini
push eax
mov eax, str..exe
push eax
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
call fcn.0040eac3
call fcn.0040e222
add dword [esp], edx
call fcn.0041e360
push 0x47e088
call fcn.00420500
fld qword [0x477f64]
fstp qword [0x47e028]
fld qword [0x477f64]
fstp qword [0x47e040]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
call fcn.004047fd
call fcn.0040e222
add dword [esp], edx
call fcn.00413707
push 0x47e070
call fcn.00420500
push edx
call fcn.004204c0
pop edx
push eax
mov eax, str.tool
push eax
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push dword [0x47e070]
call fcn.0041e6e0
call fcn.0040e222
add dword [esp], edx
call fcn.0041e810
call fcn.0040e240
mov ebx, eax
and ebx, ebx
jne 0x4013c2
push dword [0x47e070]
mov edx, 0x477028
pop ecx
call fcn.0040e1d0
jne 0x4013c2
mov eax, 1
jmp 0x4013c4
xor eax, eax
and eax, eax
je 0x4013cd
jmp 0x402403
mov dword [0x47e09c], 0
mov dword [0x47e050], 0
mov dword [0x47e074], 0
push edx
call fcn.004204c0
pop edx
push eax
mov eax, 0x477028
push eax
mov eax, str.AppsUseLightTheme
push eax
mov eax, 0x47780c
push eax
push 0x80000001
call fcn.0040aea6
push 0x47e0bc
call fcn.00420500
push dword [0x47e0bc]
mov edx, 0x47707a
pop ecx
call fcn.0040e1d0
je 0x40144a
mov dword [0x47e050], 1
mov dword [0x47e074], 1
mov dword [0x47e09c], 1
push 0
push 0
push 0
call fcn.00417b4d
mov dword [0x47e0cc], eax
push 0xff
push 0xff
push 0xff
call fcn.00417b4d
mov dword [0x47e0a0], eax
push 0x20
push 0x20
push 0x20
call fcn.00417b4d
mov dword [0x47e05c], eax
push 0x808080
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x47e08c], eax
push 0xcc872c
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x47e0b4], eax
push 7
xor eax, eax
push eax
lea eax, [0x47e10c]
push eax
push 0x1f
call fcn.00418b4a
mov eax, 0x200
push eax
lea eax, [0x47e11c]
push eax
xor eax, eax
push eax
push 7
push 0x2d
call fcn.00415770
mov eax, 0x200
push eax
lea eax, [0x47e120]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.00415770
mov eax, 0x200
push eax
lea eax, [0x47e124]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.00415770
mov eax, 0x200
push eax
lea eax, [0x47e128]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.00415770
mov dword [0x47e104], 2
mov dword [0x47e108], 1
push 0x47e100
push 0
push 0x15
push 4
push 2
call fcn.0041773f
push 0x15
xor eax, eax
push eax
lea eax, [0x47e114]
push eax
push 4
call fcn.00418b4a
mov dword [0x47e068], 0xa
push dword [0x47e088]
call fcn.00413719
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4015d0
jl 0x4015cc
cmp ebx, 0
ja 0x4015d0
xor eax, eax
jmp 0x4015d5
mov eax, 1
or eax, eax
je 0x401620
push dword [0x47e088]
push 0
call fcn.00414270
and eax, eax
je 0x401620
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 0x10000
push 0
call fcn.00414330
push 0x47e07c
call fcn.00420500
push 0
call fcn.00413eb0
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
mov eax, 0x477028
push eax
mov eax, 0x47704c
push eax
push dword [0x47e07c]
call fcn.0041e6c0
push 0x47e07c
call fcn.00420500
push 1
push 1
mov eax, str.timeout
push eax
push dword [0x47e07c]
call fcn.0041e770
mov dword [0x47e0b8], eax
mov ebx, dword [0x47e0b8]
and ebx, ebx
jle 0x4016c9
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
mov ebx, dword [0x47e0b8]
mov eax, 0x4778d0
push eax
call fcn.0041e830
add ebx, eax
push ebx
push dword [0x47e07c]
call fcn.0041e8f0
call fcn.0040e222
add dword [esp], edx
call fcn.0041e940
call fcn.0040e240
mov dword [0x47e068], eax
mov ebx, dword [0x47e068]
and ebx, ebx
jle 0x4016ec
push 0x136
push 0x29e
push 0
push 0
call fcn.0040c8a6
call fcn.00411cd2
mov ebx, eax
cmp ebx, 0x6e
jl 0x401709
mov ebx, dword [0x47e050]
and ebx, ebx
jle 0x401709
mov eax, 1
jmp 0x40170b
xor eax, eax
and eax, eax
je 0x4017e7
mov ebx, dword [0x47e09c]
and ebx, ebx
jle 0x4017e7
call fcn.00408fde
mov eax, str.dwmapi
push eax
push 0
call fcn.0041013f
and eax, eax
je 0x40174b
mov ebx, dword [0x47e074]
and ebx, ebx
jle 0x40174b
mov eax, 1
jmp 0x40174d
xor eax, eax
and eax, eax
je 0x4017e7
mov dword [0x47e090], 0
mov eax, str.DwmSetWindowAttribute
push eax
push 0
call fcn.00410199
mov dword [0x47e084], eax
push dword [0x47e7f8]
call fcn.0041fa0c
push 0x47e090
push dword [0x47e7f8]
call fcn.0041f9ac
and eax, eax
je 0x4017c8
push dword [0x47e090]
call fcn.00411f5d
and eax, eax
je 0x4017c6
push 4
push 0x47e074
push 0x14
push dword [0x47e090]
call fcn.00411f6f
push eax
call dword [0x47e084]
add esp, 0x10
jmp 0x40177f
push dword [0x47e7f8]
call fcn.0041f99b
push 0
call fcn.0041007f
push 1
call fcn.00407723
mov ebx, dword [0x47e068]
and ebx, ebx
jle 0x401800
push 0
push 0
call fcn.0041206a
push 5
call fcn.00407723
mov edx, 0x477028
lea ecx, [0x47e0c4]
call fcn.0040e008
mov edx, 0x477028
lea ecx, [0x47e0b0]
call fcn.0040e008
mov edx, 0x477028
lea ecx, [0x47e098]
call fcn.0040e008
mov edx, 0x477028
lea ecx, [0x47e094]
call fcn.0040e008
push dword [0x47e088]
call fcn.00413719
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x401869
jl 0x401865
cmp ebx, 0
ja 0x401869
xor eax, eax
jmp 0x40186e
mov eax, 1
or eax, eax
je 0x401d96
push dword [0x47e088]
push 0
call fcn.00414270
and eax, eax
je 0x401d91
mov eax, 0x47777a
push eax
call fcn.0040ad8b
push 0
call fcn.00414440
mov ebx, eax
and ebx, ebx
jne 0x401d87
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 0x18
push 0
call fcn.00414330
push 0x47e094
call fcn.00420500
mov edx, 0x477028
lea ecx, [0x47e064]
call fcn.0040e008
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 0x104
call fcn.0041e310
push 0x47e0c8
call fcn.00420500
mov eax, 0x47706e
push eax
push dword [0x47e094]
call fcn.0041e810
mov dword [0x47e06c], eax
mov ebx, dword [0x47e06c]
and ebx, ebx
jle 0x401a36
mov ebx, dword [0x47e06c]
inc ebx
push ebx
mov eax, 0x47706e
push eax
push dword [0x47e094]
call fcn.0041e750
mov dword [0x47e080], eax
mov ebx, dword [0x47e080]
cmp ebx, dword [0x47e06c]
jle 0x401a36
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
mov ebx, dword [0x47e080]
sub ebx, dword [0x47e06c]
inc ebx
push ebx
push dword [0x47e06c]
push dword [0x47e094]
call fcn.0041e860
push 0x47e064
call fcn.00420500
push dword [0x47e064]
mov edx, 0x477028
pop ecx
call fcn.0040e1d0
jne 0x401a36
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
mov eax, 0x477028
push eax
mov eax, 0x47706e
push eax
push dword [0x47e064]
call fcn.0041e6c0
push 0x47e0e0
call fcn.00420500
push 0x1f4
mov eax, dword [0x47e0c8]
push eax
push dword [0x47e0e0]
call sub.KERNEL32.dll_GetEnvironmentVariableW
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 1
push dword [0x47e06c]
push 1
push dword [0x47e0c8]
push dword [0x47e064]
push dword [0x47e094]
call fcn.0041e380
push 0x47e094
call fcn.00420500
mov eax, 0x47706e
push eax
push dword [0x47e094]
call fcn.0041e810
mov ebx, eax
and ebx, ebx
jne 0x40190a
push dword [0x47e094]
call fcn.00413719
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x401a6a
cmp edi, 0xffffffff
je 0x401a6e
xor eax, eax
jmp 0x401a73
mov eax, 1
or eax, eax
je 0x401d82
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
mov edx, 0x477560
push edx
call fcn.00420590
mov edx, dword [0x47e094]
push edx
call fcn.00420590
mov edx, 0x477160
push edx
call fcn.00420590
call fcn.0040e222
add dword [esp], edx
call fcn.0040ad8b
call fcn.0040e240
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 1
push dword [0x47e094]
call fcn.0041ea80
push 0x47e098
call fcn.00420500
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 1
push dword [0x47e094]
call fcn.0041eaf0
call fcn.004205f0
mov edx, 0x4771ce
call fcn.0040e250
mov ecx, eax
call fcn.0040e1d0
jne 0x401b4a
mov edx, dword [0x47e094]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.00420590
mov edx, 0x4771ce
push edx
call fcn.00420590
push 0x47e094
call fcn.00420500
mov eax, 0x477a3c
push eax
push dword [0x47e094]
push 0
call fcn.004138e2
and eax, eax
je 0x401d82
push dword [0x47e098]
call fcn.00407e97
push edx
push eax
pop dword [0x47e030]
pop dword [0x47e034]
push 0
call fcn.00413a41
and eax, eax
je 0x401d20
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 0
call fcn.00413870
push 0x47e0c4
call fcn.00420500
push dword [0x47e0c4]
mov edx, 0x477076
pop ecx
call fcn.0040e1d0
je 0x401bcc
jmp 0x401b81
push dword [0x47e0c4]
mov edx, 0x477dd8
pop ecx
call fcn.0040e1d0
je 0x401be1
jmp 0x401b81
push 0
call fcn.004138be
mov ebx, eax
cmp ebx, 1
jne 0x401c8c
push edx
call fcn.004204c0
pop edx
push eax
mov edx, dword [0x47e094]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.00420590
mov edx, dword [0x47e0c4]
push edx
call fcn.00420590
call fcn.0040e222
add dword [esp], edx
call fcn.0040adee
call fcn.0040e240
push edx
call fcn.004204c0
pop edx
push eax
mov edx, dword [0x47e094]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.00420590
mov edx, dword [0x47e0c4]
push edx
call fcn.00420590
call fcn.0040e222
add dword [esp], edx
call fcn.00413719
call fcn.0040e240
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x401c7e
jg 0x401c7a
cmp ebx, 0
jb 0x401c7e
xor eax, eax
jmp 0x401c83
mov eax, 1
or eax, eax
jne 0x401c87
jmp 0x401d1b
push edx
call fcn.004204c0
pop edx
push eax
mov edx, dword [0x47e094]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.00420590
mov edx, dword [0x47e0c4]
push edx
call fcn.00420590
call fcn.0040e222
add dword [esp], edx
call fcn.004045f7
call fcn.0040e240
push edx
call fcn.004204c0
pop edx
push eax
mov edx, dword [0x47e094]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.00420590
mov edx, dword [0x47e0c4]
push edx
call fcn.00420590
call fcn.0040e222
add dword [esp], edx
call fcn.00413719
call fcn.0040e240
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x401d0e
cmp edi, 0xffffffff
je 0x401d12
xor eax, eax
jmp 0x401d17
mov eax, 1
or eax, eax
je 0x401d1b
jmp 0x401b81
push 0
call fcn.00413a0f
push dword [0x47e098]
call fcn.00407e97
push edx
push eax
pop dword [0x47e020]
pop dword [0x47e024]
push dword [0x47e03c]
push dword [0x47e038]
push dword [0x47e024]
push dword [0x47e020]
lea eax, [0x47e030]
mov edx, dword [eax]
sub dword [esp], edx
mov edx, dword [eax + 4]
sbb dword [esp + 4], edx
pop eax
pop edx
add dword [esp], eax
adc dword [esp + 4], edx
pop dword [0x47e038]
pop dword [0x47e03c]
jmp 0x401899
push 0
call fcn.00413eb0
jmp 0x401e4d
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
mov edx, 0x477e6c
push edx
call fcn.00420590
mov edx, dword [0x47e088]
push edx
call fcn.00420590
mov edx, 0x4777ce
push edx
call fcn.00420590
call fcn.004205f0
mov eax, 0x4771c0
push eax
call fcn.0040e222
add dword [esp + 4], edx
call fcn.0040e8ea
call fcn.0040e240
push 2
push dword [0x47e088]
push 0
call fcn.00414180
and eax, eax
je 0x401e48
push 2
mov eax, str._temp_
push eax
push 0
call fcn.004144e0
push 2
mov eax, str._tmp_
push eax
push 0
call fcn.004144e0
push 2
mov eax, str._USERPROFILE_AppDataLocalTemp
push eax
push 0
call fcn.004144e0
push 0
call fcn.00413eb0
jmp 0x402403
push dword [0x47e03c]
mov eax, dword [0x47e038]
pop edx
mov dword [esp - 8], eax
mov dword [esp - 4], edx
fild qword [esp - 8]
fcomp dword [str._knN]
fnstsw ax
test ah, 1
jne 0x401ed0
push dword [0x47e03c]
push dword [0x47e038]
fild qword [esp]
add esp, 8
fdiv qword [0x477fbc]
fistp qword [0x47e038]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 2
fild qword [0x47e038]
sub esp, 4
fstp dword [esp]
call fcn.0041eb70
mov edx, 0x477706
push edx
call fcn.00420590
push 0x47e048
call fcn.00420500
jmp 0x402009
push dword [0x47e03c]
mov eax, dword [0x47e038]
pop edx
mov dword [esp - 8], eax
mov dword [esp - 4], edx
fild qword [esp - 8]
fcomp dword [0x477f5c]
fnstsw ax
test ah, 1
jne 0x401f53
push dword [0x47e03c]
push dword [0x47e038]
fild qword [esp]
add esp, 8
fdiv qword [0x477fc4]
fistp qword [0x47e038]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 2
fild qword [0x47e038]
sub esp, 4
fstp dword [esp]
call fcn.0041eb70
mov edx, 0x477d22
push edx
call fcn.00420590
push 0x47e048
call fcn.00420500
jmp 0x402009
push dword [0x47e03c]
mov eax, dword [0x47e038]
pop edx
mov dword [esp - 8], eax
mov dword [esp - 4], edx
fild qword [esp - 8]
fcomp dword [0x477f60]
fnstsw ax
test ah, 1
jne 0x401fd3
push dword [0x47e03c]
push dword [0x47e038]
fild qword [esp]
add esp, 8
fdiv qword [0x477fcc]
fistp qword [0x47e038]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push 2
fild qword [0x47e038]
sub esp, 4
fstp dword [esp]
call fcn.0041eb70
mov edx, 0x477b06
push edx
call fcn.00420590
push 0x47e048
call fcn.00420500
jmp 0x402009
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push dword [0x47e03c]
push dword [0x47e038]
call fcn.0041ed60
mov edx, 0x47717e
push edx
call fcn.00420590
push 0x47e048
call fcn.00420500
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
mov edx, 0x477db2
push edx
call fcn.00420590
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
fld qword [0x47e028]
sub esp, 8
fistp qword [esp]
call fcn.0041ed60
pop eax
mov edx, 0x477b0e
push edx
call fcn.00420590
mov edx, dword [0x47e048]
push edx
call fcn.00420590
mov edx, 0x477c60
push edx
call fcn.00420590
call fcn.0040e222
add dword [esp], edx
call fcn.0040ad8b
call fcn.0040e240
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
mov edx, 0x477184
push edx
call fcn.00420590
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
fld qword [0x47e040]
sub esp, 8
fistp qword [esp]
call fcn.0041ed60
pop eax
mov edx, 0x4771e4
push edx
call fcn.00420590
call fcn.0040e222
add dword [esp], edx
call fcn.0040ad8b
call fcn.0040e240
mov eax, 0x477028
push eax
call fcn.0040ad8b
mov eax, 0x477050
push eax
call fcn.0040ad8b
push 0
call fcn.00411f5d
and eax, eax
je 0x40215c
push 0x3e8
push 1
push 0
call fcn.0041207c
push 2
push 0x70
push 0
call fcn.004120ab
push 3
push 0x71
push 0
call fcn.004120ab
push 4
push 0x72
push 0
call fcn.004120ab
push 5
push 0x73
push 0
call fcn.004120ab
mov eax, dword [0x47e068]
mov dword [0x47e054], eax
mov ebx, dword [0x47e054]
and ebx, ebx
jne 0x402175
jmp 0x402403
call fcn.004122df
push eax
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x4022f0
call fcn.004150d7
push eax
mov ebx, 2
cmp ebx, dword [esp]
jne 0x402224
push dword [0x47e0d4]
push 0
call fcn.004122e7
push 1
push 0
call fcn.00412310
mov eax, 0x477028
push eax
call fcn.0040ad8b
mov eax, str._F1_____
push eax
call fcn.0040ad8b
mov eax, str._F2________Windows
push eax
call fcn.0040ad8b
mov eax, str._F3________Windows
push eax
call fcn.0040ad8b
mov eax, str._F4____
push eax
call fcn.0040ad8b
mov eax, 0x477028
push eax
call fcn.0040ad8b
mov eax, str._INI
push eax
call fcn.0040ad8b
mov eax, str._timeout10________._0______.
push eax
call fcn.0040ad8b
mov eax, 0x477028
push eax
call fcn.0040ad8b
jmp 0x4022ea
mov ebx, 3
cmp ebx, dword [esp]
jne 0x40227e
push dword [0x47e0d4]
push 0
call fcn.004122e7
push 1
push 0
call fcn.00412310
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
call fcn.0040eac3
call fcn.0040e222
add dword [esp], edx
call fcn.0040a5dd
call fcn.0040e240
jmp 0x4022ea
mov ebx, 4
cmp ebx, dword [esp]
jne 0x4022d8
push dword [0x47e0d4]
push 0
call fcn.004122e7
push 1
push 0
call fcn.00412310
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
call fcn.0040eac3
call fcn.0040e222
add dword [esp], edx
call fcn.00407c9b
call fcn.0040e240
jmp 0x4022ea
mov ebx, 5
cmp ebx, dword [esp]
jne 0x4022ea
add esp, 8
jmp 0x402403
pop eax
jmp 0x4023fd
mov ebx, 0x3336
cmp ebx, dword [esp]
jne 0x402398
call fcn.004150e6
push eax
mov ebx, 1
cmp ebx, dword [esp]
jne 0x402395
push edx
call fcn.004204c0
pop edx
push eax
mov edx, dword [0x47e0d4]
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.00420590
mov edx, str.______________
push edx
call fcn.00420590
push edx
call fcn.004204c0
pop edx
push eax
push edx
call fcn.004204c0
pop edx
push eax
mov eax, dword [0x47e054]
cdq
push edx
push eax
call fcn.0041ed60
pop eax
mov edx, 0x477c94
push edx
call fcn.00420590
call fcn.004205f0
push 0
call fcn.0040e222
add dword [esp + 4], edx
call fcn.004122e7
call fcn.0040e240
dec dword [0x47e054]
mov ebx, dword [0x47e054]
cmp ebx, 1
jge 0x402395
add esp, 8
jmp 0x402403
pop eax
jmp 0x4023fd
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x4023a9
add esp, 4
jmp 0x402403
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x4023fd
call fcn.004150f5
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4023fc
call fcn.00415104
push eax
mov ebx, 0x36b0
cmp ebx, dword [esp]
jne 0x4023f1
push dword [0x47e0d4]
push 0
call fcn.004122e7
push 1
push 0
call fcn.00412310
jmp 0x4023fb
mov ebx, 0x36b1
cmp ebx, dword [esp]
jne 0x4023fb
pop eax
pop eax
pop eax
jmp 0x402175
push 0
call 0x402422
call fcn.004204a0
push dword [0x47e018]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0040fd71
call fcn.004100c0
call fcn.00410238
call fcn.00411ecf
call fcn.00413a85
call fcn.00413f70
call fcn.00414f9f
call fcn.00415e68
call fcn.00418434
call fcn.0041917e
call fcn.0041bf60
call fcn.0041f98f
call fcn.0041fa77
call fcn.0041f580
ret