Function at 0x401000
Capabilities:
Allocate thread local storage
Identify system language via api
Query environment variable

Disassembly:
push 0x684
push 0
push 0x5233e4
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x5233e8], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x5233e4], eax
mov eax, 0x481494
mov dword [0x523428], eax
call fcn.00417c56
call fcn.0042ef60
call fcn.0042e2bf
call fcn.0042dc80
call fcn.0042c400
call fcn.0042a334
call fcn.00429ac0
call fcn.00429315
call fcn.004287c0
call fcn.004279ab
call fcn.004259d8
call fcn.00425506
call fcn.00424074
call fcn.0042397e
call fcn.004232cd
call fcn.00422040
call fcn.0041fe7a
call fcn.0041bcb3
call fcn.0041ad8c
call fcn.0041a2af
call fcn.0041990a
call fcn.00418d96
call fcn.00418b82
call fcn.00417db9
mov edx, str.v1.5.5.1
lea ecx, [0x5234f0]
call fcn.00417008
push edx
call fcn.0042efb0
pop edx
push eax
mov edx, str.W10_Digital_Activation
push edx
call fcn.0042eff0
mov edx, dword [0x5234f0]
push edx
call fcn.0042eff0
lea eax, [0x52345c]
push eax
call fcn.0042f050
push edx
call fcn.0042efb0
pop edx
push eax
mov edx, str.___________________
push edx
call fcn.0042eff0
mov edx, dword [0x52345c]
push edx
call fcn.0042eff0
mov edx, str._____r_n
push edx
call fcn.0042eff0
lea eax, [0x523500]
push eax
call fcn.0042f050
call fcn.0041b398
mov ebp, 0x4817fe
push ebp
push 0xffffffff
call fcn.00427b2a
mov dword [0x523418], eax
push 0xc
mov eax, 0x47b5a8
push eax
push 0
call fcn.0042e3d5
push 9
mov eax, str.Segoe_UI
push eax
push 1
call fcn.0042e3d5
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push 0xc8
call fcn.0042c6b0
lea eax, [0x5235c0]
push eax
call fcn.0042f050
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push 0xc8
call fcn.0042c6b0
lea eax, [0x5235c4]
push eax
call fcn.0042f050
push 0xc8
mov eax, dword [0x5235c0]
push eax
mov eax, str.PROCESSOR_ARCHITECTURE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0xc8
mov eax, dword [0x5235c4]
push eax
mov eax, str.PROCESSOR_ARCHITEW6432
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x5235a8]
push eax
mov eax, str.SYSTEMDRIVE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push dword [0x5235c0]
mov edx, str.AMD64
pop ecx
call fcn.00417670
jne 0x40122c
push dword [0x5235c4]
mov edx, str.AMD64
pop ecx
call fcn.00417670
jne 0x40122c
jmp 0x401233
mov eax, 1
jmp 0x401235
xor eax, eax
and eax, eax
je 0x40124b
mov edx, 0x47e29c
lea ecx, [0x5235b4]
call fcn.00417008
jmp 0x40125b
mov edx, 0x47ee92
lea ecx, [0x5235b4]
call fcn.00417008
mov edx, str.Panic___
lea ecx, [0x523464]
call fcn.00417008
mov edx, 0x47fbac
lea ecx, [0x5234b4]
call fcn.00417008
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
call fcn.00418dc5
lea eax, [0x5233f4]
push eax
call fcn.0042f050
mov dword [0x523450], 0
mov dword [0x52346c], 0
lea eax, [0x52346c]
push eax
lea eax, [0x523450]
push eax
mov eax, dword [0x5233f4]
push eax
call sub.imagehlp.dll_MapFileAndCheckSumW
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
mov eax, dword [0x523450]
cdq
push edx
push eax
call fcn.0042c700
lea eax, [0x523438]
push eax
call fcn.0042f050
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
mov eax, dword [0x52346c]
cdq
push edx
push eax
call fcn.0042c700
lea eax, [0x52343c]
push eax
call fcn.0042f050
mov eax, dword [0x52343c]
push eax
mov eax, dword [0x523438]
push eax
call fcn.0042dca0
and eax, eax
je 0x40134b
push 0x10
push dword [0x5234b4]
push dword [0x523464]
call fcn.00418bbb
jmp 0x4021a3
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
call fcn.00418dc5
call fcn.004176c2
add dword [esp], edx
call fcn.0040ad7c
call fcn.004176e0
and eax, eax
je 0x401383
jmp 0x4021a3
mov edx, 0x47b028
lea ecx, [0x523470]
call fcn.00417008
mov dword [0x523404], 0
call fcn.0041b398
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push 0x3e8
call fcn.0042c6b0
lea eax, [0x5233ec]
push eax
call fcn.0042f050
mov edx, 0x47b028
lea ecx, [0x523458]
call fcn.00417008
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push 0x3e8
call fcn.0042c6b0
lea eax, [0x5234dc]
push eax
call fcn.0042f050
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push 0x3e8
call fcn.0042c6b0
lea eax, [0x5234ac]
push eax
call fcn.0042f050
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push 0x3e8
call fcn.0042c6b0
lea eax, [0x5234f4]
push eax
call fcn.0042f050
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push 0x3e8
call fcn.0042c6b0
lea eax, [0x5234e8]
push eax
call fcn.0042f050
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push 0x3e8
call fcn.0042c6b0
lea eax, [0x523400]
push eax
call fcn.0042f050
mov edx, 0x47b028
lea ecx, [0x523474]
call fcn.00417008
mov edx, str.HWID
lea ecx, [0x5234f8]
call fcn.00417008
mov edx, str.KMS38
lea ecx, [0x5234d0]
call fcn.00417008
mov dword [0x523488], 0
push 0x3e8
mov eax, dword [0x5233ec]
push eax
mov eax, str.SYSTEMDRIVE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov eax, dword [0x5234dc]
push eax
mov eax, str.TEMP
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov eax, dword [0x5234e8]
push eax
mov eax, str.WINDIR
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov eax, dword [0x5234ac]
push eax
mov eax, str.PROCESSOR_ARCHITECTURE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov eax, dword [0x5234f4]
push eax
mov eax, str.PROCESSOR_ARCHITEW6432
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov eax, dword [0x5234dc]
push eax
mov eax, str.TEMP
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x100
push 1
call fcn.00416335
push dword [0x5234ac]
mov edx, str.AMD64
pop ecx
call fcn.00417670
jne 0x40158b
push dword [0x5234f4]
mov edx, str.AMD64
pop ecx
call fcn.00417670
jne 0x40158b
jmp 0x401592
mov eax, 1
jmp 0x401594
xor eax, eax
and eax, eax
je 0x4015aa
mov edx, 0x47e29c
lea ecx, [0x5234a8]
call fcn.00417008
jmp 0x4015ba
mov edx, 0x47ee92
lea ecx, [0x5234a8]
call fcn.00417008
push edx
call fcn.0042efb0
pop edx
push eax
mov edx, dword [0x5234e8]
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042eff0
mov edx, str.Temp
push edx
call fcn.0042eff0
call fcn.004176c2
add dword [esp], edx
call fcn.004214bc
call fcn.004176e0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x401601
cmp edi, 0xffffffff
je 0x401605
xor eax, eax
jmp 0x40160a
mov eax, 1
or eax, eax
je 0x401639
mov edx, dword [0x5234e8]
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042eff0
mov edx, str.Temp
push edx
call fcn.0042eff0
lea eax, [0x5234dc]
push eax
call fcn.0042f050
mov edx, dword [0x5234e8]
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042eff0
mov edx, str.System32
push edx
call fcn.0042eff0
lea eax, [0x523400]
push eax
call fcn.0042f050
push edx
call fcn.0042efb0
pop edx
push eax
mov edx, dword [0x5234e8]
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042eff0
mov edx, str.Sysnativecmd.exe
push edx
call fcn.0042eff0
call fcn.004176c2
add dword [esp], edx
call fcn.004214bc
call fcn.004176e0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4016b1
jl 0x4016ad
cmp ebx, 0
ja 0x4016b1
xor eax, eax
jmp 0x4016b6
mov eax, 1
or eax, eax
je 0x4016e7
mov edx, dword [0x5234e8]
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042eff0
mov edx, str.Sysnative
push edx
call fcn.0042eff0
lea eax, [0x5234e8]
push eax
call fcn.0042f050
jmp 0x401712
mov edx, dword [0x5234e8]
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042eff0
mov edx, str.System32
push edx
call fcn.0042eff0
lea eax, [0x5234e8]
push eax
call fcn.0042f050
push edx
call fcn.0042efb0
pop edx
push eax
mov eax, 0x47b3cc
push eax
mov eax, str.BuildLab
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0041173b
lea eax, [0x523494]
push eax
call fcn.0042f050
mov eax, 0x47b3cc
push eax
push dword [0x523494]
call fcn.0042c920
mov dword [0x5234c8], eax
mov ebx, dword [0x5234c8]
cmp ebx, 1
jge 0x401760
jmp 0x401794
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
mov ebx, dword [0x5234c8]
dec ebx
push ebx
push 1
push dword [0x523494]
call fcn.0042c940
lea eax, [0x523494]
push eax
call fcn.0042f050
push dword [0x523494]
call fcn.0042ca20
mov dword [0x5233f0], eax
mov ebx, dword [0x5233f0]
cmp ebx, 0x2710
jle 0x4017c7
mov edx, 0x47b540
lea ecx, [0x5234ec]
call fcn.00417008
jmp 0x4018ae
mov ebx, dword [0x5233f0]
cmp ebx, 0x2580
jl 0x4017ea
mov edx, 0x480ddc
lea ecx, [0x5234ec]
call fcn.00417008
jmp 0x4018ae
mov ebx, dword [0x5233f0]
cmp ebx, 0x23f0
jl 0x40180d
mov ebx, dword [0x5233f0]
cmp ebx, 0x2454
jge 0x40180d
mov eax, 1
jmp 0x40180f
xor eax, eax
and eax, eax
je 0x401828
mov edx, 0x47b518
lea ecx, [0x5234ec]
call fcn.00417008
jmp 0x4018ae
mov ebx, dword [0x5233f0]
cmp ebx, 0x1db0
jl 0x40184b
mov ebx, dword [0x5233f0]
cmp ebx, 0x1e14
jge 0x40184b
mov eax, 1
jmp 0x40184d
xor eax, eax
and eax, eax
je 0x401863
mov edx, 0x47b514
lea ecx, [0x5234ec]
call fcn.00417008
jmp 0x4018ae
mov ebx, dword [0x5233f0]
cmp ebx, 0xa28
jl 0x401886
mov ebx, dword [0x5233f0]
cmp ebx, 0xfa0
jge 0x401886
mov eax, 1
jmp 0x401888
xor eax, eax
and eax, eax
je 0x40189e
mov edx, 0x47e2a4
lea ecx, [0x5234ec]
call fcn.00417008
jmp 0x4018ae
mov edx, 0x47b514
lea ecx, [0x5234ec]
call fcn.00417008
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
call sub.KERNEL32.dll_GetUserDefaultLangID
cdq
push edx
push eax
call fcn.0042cc40
lea eax, [0x52349c]
push eax
call fcn.0042f050
push dword [0x52349c]
call fcn.0042ccc0
mov ebx, eax
cmp ebx, 3
jne 0x401914
push edx
call fcn.0042efb0
pop edx
push eax
mov edx, 0x47b40e
push edx
call fcn.0042eff0
mov edx, dword [0x52349c]
push edx
call fcn.0042eff0
lea eax, [0x52349c]
push eax
call fcn.0042f050
push dword [0x52349c]
mov edx, str.0419
pop ecx
call fcn.00417670
je 0x401939
mov edx, 0x47c05e
lea ecx, [0x52349c]
call fcn.00417008
jmp 0x401949
mov edx, 0x47d444
lea ecx, [0x52349c]
call fcn.00417008
mov dword [0x523504], 0
mov dword [0x523508], 0
mov dword [0x5233f8], 0
push edx
call fcn.0042efb0
pop edx
push eax
mov eax, 0x47b3cc
push eax
mov eax, 0x4806fe
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0041173b
lea eax, [0x523448]
push eax
call fcn.0042f050
mov eax, str.2015
push eax
push dword [0x523448]
call fcn.0042c920
mov ebx, eax
and ebx, ebx
jle 0x4019b5
mov dword [0x523504], 1
jmp 0x4019f9
mov eax, str.LTSC_2021
push eax
push dword [0x523448]
call fcn.0042c920
mov ebx, eax
and ebx, ebx
jle 0x4019d8
mov dword [0x5233f8], 1
jmp 0x4019f9
mov eax, str.LTSC
push eax
push dword [0x523448]
call fcn.0042c920
mov ebx, eax
and ebx, ebx
jle 0x4019f9
mov dword [0x523508], 1
mov dword [0x5234d8], 0
push edx
call fcn.0042efb0
pop edx
push eax
mov eax, 0x47b3cc
push eax
mov eax, str.EditionID
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0041173b
lea eax, [0x52344c]
push eax
call fcn.0042f050
push edx
call fcn.0042efb0
pop edx
push eax
mov eax, 0x47b3cc
push eax
mov eax, str.CurrentBuild
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0041173b
lea eax, [0x52347c]
push eax
call fcn.0042f050
mov dword [0x523424], 0
call fcn.00418f8b
mov ebx, eax
dec ebx
mov dword [0x52341c], ebx
mov ebx, dword [0x52341c]
and ebx, ebx
jl 0x401b27
mov dword [0x5234a0], 0
jmp 0x401a8b
mov eax, dword [0x52341c]
cmp eax, dword [0x5234a0]
jl 0x401b27
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push dword [0x5234a0]
call fcn.00418f9f
call fcn.004176c2
add dword [esp], edx
call fcn.0042ccf0
lea eax, [0x5234b0]
push eax
call fcn.0042f050
push dword [0x5234b0]
mov edx, str._ACTIVATE
mov ecx, dword [esp]
call fcn.00417670
je 0x401b01
mov dword [0x523424], 1
jmp 0x401b1a
mov edx, str._KMS38
mov ecx, dword [esp]
call fcn.00417670
je 0x401b1a
mov dword [0x523488], 1
pop eax
inc dword [0x5234a0]
jno 0x401a8b
push dword [0x52344c]
call fcn.004068d9
push dword [0x5234ec]
call fcn.0042ca20
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x401b51
jg 0x401b4d
cmp ebx, 0xa
jb 0x401b51
xor eax, eax
jmp 0x401b56
mov eax, 1
or eax, eax
jne 0x401b66
mov ebx, dword [0x5234d8]
and ebx, ebx
je 0x401b66
jmp 0x401b6d
mov eax, 1
jmp 0x401b6f
xor eax, eax
and eax, eax
je 0x401ba3
mov edx, str.The_program_supports_activation_of_the_following_editions:_r_n_r_nWindows_10_11_Core_r_nWindows_10_11_Core_N_r_nWindows_10_11_CoreSingleLanguage_r_nWindows_10_11_CoreSingleLanguage_N_r_nWindows_10_11_Professional_r_nWindows_10_11_Professional_N_r_nWindows_10_11_ProfessionalEducation_r_nWindows_10_11_ProfessionalEducation_N_r_nWindows_10_11_ProfessionalWorkstation_r_nWindows_10_11_ProfessionalWorkstation_N_r_nWindows_10_11_Education_r_nWindows_10_11_Education_N_r_nWindows_10_11_Enterprise_r_nWindows_10_11_Enterprise_N_r_nWindows_10_Enterprise_LTSB_r_nWindows_10_Enterprise_LTSB_N_r_nWindows_10_Enterprise_LTSC_r_nWindows_10_11_IoT_Enterprise_r_nWindows_11_IoT_EnterpriseK_r_nWindows_10_IoT_Enterprise_LTSC
lea ecx, [0x523478]
call fcn.00417008
mov ebx, dword [0x523424]
and ebx, ebx
jne 0x401ba3
push 0x10
push dword [0x523478]
mov eax, 0x47b028
push eax
call fcn.00418bbb
mov dword [0x5234c0], 0
mov dword [0x5233fc], 0
mov dword [0x523420], 0
push edx
call fcn.0042efb0
pop edx
push eax
mov eax, 0x47b3cc
push eax
mov eax, str.AppsUseLightTheme
push eax
mov eax, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionThemesPersonalize
push eax
call fcn.0041173b
lea eax, [0x5234d4]
push eax
call fcn.0042f050
push dword [0x5234d4]
mov edx, 0x47b40e
pop ecx
call fcn.00417670
je 0x401c13
mov dword [0x5233fc], 1
mov dword [0x523420], 1
push 0
push 0
push 0
call fcn.004259e4
mov dword [0x5234e4], eax
push 0xff
push 0xff
push 0xff
call fcn.004259e4
mov dword [0x523480], eax
push 0x20
push 0x20
push 0x20
call fcn.004259e4
mov dword [0x523410], eax
mov dword [0x5234cc], 1
push 0x808080
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x523460], eax
push 0xcc872c
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x5234bc], eax
push 7
xor eax, eax
push eax
lea eax, [0x5239f0]
push eax
push 0x1f
call fcn.004287df
mov eax, 0x200
push eax
lea eax, [0x523a58]
push eax
xor eax, eax
push eax
push 7
push 0x2d
call fcn.0042399d
mov eax, 0x200
push eax
lea eax, [0x523a5c]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.0042399d
mov eax, 0x200
push eax
lea eax, [0x523a60]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.0042399d
mov eax, 0x200
push eax
lea eax, [0x523a64]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.0042399d
mov dword [0x5239d8], 2
mov dword [0x5239dc], 1
push 0x5239d4
push 0
push 0x15
push 4
push 2
call fcn.004255d6
push 0x15
xor eax, eax
push eax
lea eax, [0x5239f8]
push eax
push 4
call fcn.004287df
mov ebp, 0x51464f
push ebp
push 0xffffffff
call fcn.00427b2a
mov dword [0x523404], eax
push dword [0x523404]
call fcn.004063e8
push dword [0x523418]
call fcn.004063e8
mov ebx, dword [0x523424]
and ebx, ebx
jle 0x401dbe
push 0
call fcn.00403e1a
jmp 0x4021a3
push edx
call fcn.0042efb0
pop edx
push eax
push 0x18
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
call fcn.00418dc5
call fcn.0042f0e0
push 0
call fcn.004176c2
add dword [esp + 4], edx
call fcn.004223f0
call fcn.004176e0
and eax, eax
je 0x401f4f
push 0
call fcn.004224d0
mov dword [0x523490], eax
mov ebx, dword [0x523490]
inc ebx
push ebx
call fcn.0042dd50
mov dword [0x52348c], eax
push dword [0x523490]
push dword [0x52348c]
push 0
call fcn.00422520
push 0
call fcn.00421f70
mov dword [0x523468], 0
mov dword [0x523444], 0
jmp 0x401e5c
mov ebx, dword [0x523490]
add ebx, 0xfffffff0
cmp ebx, dword [0x523444]
jl 0x401f34
mov ebx, dword [0x52348c]
add ebx, dword [0x523444]
push ebx
call fcn.0042dd70
mov ebx, eax
cmp ebx, 0x5c
jne 0x401eae
mov ebx, dword [0x52348c]
add ebx, dword [0x523444]
inc ebx
push ebx
call fcn.0042dd70
mov ebx, eax
cmp ebx, 0x84
jne 0x401eae
mov eax, 1
jmp 0x401eb0
xor eax, eax
and eax, eax
je 0x401eda
mov ebx, dword [0x52348c]
add ebx, dword [0x523444]
add ebx, 9
push ebx
call fcn.0042dd70
mov ebx, eax
cmp ebx, 0xcb
jne 0x401eda
mov eax, 1
jmp 0x401edc
xor eax, eax
and eax, eax
je 0x401f06
mov ebx, dword [0x52348c]
add ebx, dword [0x523444]
add ebx, 0xf
push ebx
call fcn.0042dd70
mov ebx, eax
cmp ebx, 0xfc
jne 0x401f06
mov eax, 1
jmp 0x401f08
xor eax, eax
and eax, eax
je 0x401f28
mov ebx, dword [0x523444]
add ebx, 0x10
mov dword [0x523444], ebx
mov ebx, dword [0x523468]
inc ebx
mov dword [0x523468], ebx
inc dword [0x523444]
jno 0x401e5c
push dword [0x52348c]
call fcn.0042dd80
mov ebx, dword [0x523468]
cmp ebx, 3
jge 0x401f4f
jmp 0x4021a3
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
call fcn.00418dc5
call fcn.004176c2
add dword [esp], edx
call fcn.0040ad7c
call fcn.004176e0
and eax, eax
je 0x401f87
jmp 0x4021a3
push 0xa0
push 0x1e0
push 0
push 0
call fcn.00402218
push dword [0x52345c]
push dword [0x5234c4]
call fcn.0041fee5
push dword [0x52349c]
mov edx, 0x47c05e
pop ecx
call fcn.00417670
je 0x401fe8
mov eax, 0x481254
push eax
push dword [0x523454]
call fcn.0041bd59
mov eax, 0x47f65c
push eax
push dword [0x523430]
call fcn.0041bd59
jmp 0x401ff9
mov eax, str.Go_to_the_program_support_forum
push eax
push dword [0x523430]
call fcn.0041bd59
push dword [0x5234c4]
call fcn.0041ff0e
push eax
call fcn.00425a21
and eax, eax
je 0x402063
push 1
call fcn.0042e3eb
push eax
call fcn.00425a86
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push edx
call fcn.0042efb0
pop edx
push eax
push dword [0x523430]
call fcn.0041bda4
call fcn.004176c2
add dword [esp], edx
call fcn.00425a9d
call fcn.004176e0
push eax
call fcn.004240e5
mov dword [0x523498], eax
call fcn.00425adc
push 0xffff0001
push dword [0x523498]
push 0xffff0001
push dword [0x5234c4]
call fcn.00420007
mov ebx, eax
sub ebx, dword [0x523498]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push dword [0x523430]
call fcn.0041bf33
push dword [0x5234f8]
push 0xffffffff
push dword [0x52342c]
call fcn.0041bf6c
push dword [0x5234d0]
push 0xffffffff
push dword [0x52342c]
call fcn.0041bf6c
mov ebx, dword [0x523488]
and ebx, ebx
jle 0x4020e6
push 1
push dword [0x52342c]
call fcn.0041bfcd
jmp 0x4020f6
push 0
push dword [0x52342c]
call fcn.0041bfcd
call fcn.00407eca
call fcn.0041fb98
mov ebx, eax
cmp ebx, 0x6e
jl 0x402118
mov ebx, dword [0x523420]
and ebx, ebx
jle 0x402118
mov eax, 1
jmp 0x40211a
xor eax, eax
and eax, eax
je 0x402133
call fcn.0040c127
push 1
push dword [0x5234c4]
call fcn.0040a9f8
push 0
push dword [0x5234c4]
call fcn.004200f4
call fcn.00420106
mov dword [0x5234a4], eax
cmp dword [0x5234a4], 0
je 0x40218b
call fcn.004233e7
push eax
mov ebx, dword [0x5234c4]
cmp ebx, dword [esp]
jne 0x402174
push dword [0x5234a4]
call fcn.00407fbd
jmp 0x402188
mov dword [0x5234a4], 0
push 5
call fcn.0041fd1b
pop eax
jmp 0x402195
push 5
call fcn.0041fd1b
mov ebx, dword [0x5234a4]
cmp ebx, 0x333c
jne 0x402143
push 0
call 0x4021c2
call fcn.0042ef90
push dword [0x5233e4]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00417d77
call fcn.004181d2
call fcn.004198f8
call fcn.0041a27f
call fcn.0041ad80
call fcn.0041bc5d
call fcn.0041fe57
call fcn.00421613
call fcn.00422030
call fcn.004232af
call fcn.00424073
call fcn.0042799f
call fcn.00429314
call fcn.0042c420
call fcn.0042e448
call fcn.0042e492
call fcn.0042dc70
ret