Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0xa4
push 0
push 0x413730
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x413734], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x413730], eax
call fcn.0040fde0
call fcn.0040fb5b
call fcn.0040e86e
call fcn.0040e2ed
call fcn.0040d300
call fcn.0040cf9f
call fcn.0040cf05
call fcn.0040ce90
call fcn.0040bb10
call fcn.00409c4c
call fcn.004094f0
call fcn.00408a12
call fcn.00408989
call fcn.00408658
call fcn.00407cbf
call fcn.00406b76
call fcn.00405aab
call fcn.00405844
call fcn.004052a5
mov dword [0x41375c], 5
mov eax, dword [0x41375c]
inc eax
push 0x4137bc
push 0x4126cc
push 8
push eax
push 4
call fcn.0040fb84
push 0x4137c4
push 0x4126cc
push 8
push 8
push 4
call fcn.0040fb84
push 0x4137cc
push 0
push 5
push 0xe
push 4
call fcn.0040fb84
mov edx, str.Promas_to_ACH
lea ecx, [0x41374c]
call fcn.00405008
mov ebp, dword [0x4137c4]
mov edx, str.122401778
lea ecx, [ebp]
call fcn.00405008
mov edx, str.1273496382
lea ecx, [ebp + 4]
call fcn.00405008
mov edx, str.BANK_OF_NEVADA
lea ecx, [ebp + 8]
call fcn.00405008
mov edx, str.SOUTHWESTERN_MGMT__REALTY
lea ecx, [ebp + 0xc]
call fcn.00405008
mov edx, str.SOUTHWESTERN_MGT
lea ecx, [ebp + 0x10]
call fcn.00405008
mov edx, str.1273496382
lea ecx, [ebp + 0x14]
call fcn.00405008
mov edx, str.XXXXXXXXXXX
lea ecx, [ebp + 0x18]
call fcn.00405008
mov edx, str.12240177
lea ecx, [ebp + 0x1c]
call fcn.00405008
mov edx, 0x41204c
lea ecx, [0x413748]
call fcn.00405008
mov edx, 0x41204c
lea ecx, [0x4137a0]
call fcn.00405008
call fcn.00404c89
call fcn.00402c2b
call fcn.00401850
call fcn.00406d0c
mov dword [0x413758], eax
push dword [0x413758]
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x401307
call fcn.0040e407
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x4011e9
call fcn.0040226c
jmp 0x401306
mov ebx, 5
cmp ebx, dword [esp]
jne 0x4011fd
call fcn.00403c2f
jmp 0x401306
mov ebx, 7
cmp ebx, dword [esp]
jne 0x401306
mov edx, dword [0x413de4]
push edx
push edx
push 0
call fcn.00405b8a
push 0x413794
call fcn.0040fe60
mov edx, dword [0x413de4]
push edx
push edx
push 2
call fcn.00405b8a
push 0x41377c
call fcn.0040fe60
push 0
call fcn.00406ad9
mov dword [0x413754], 6
mov edx, dword [0x41377c]
xor ecx, ecx
call fcn.00405030
jne 0x4012d1
push dword [0x41377c]
push 1
call fcn.0040d5e0
and eax, eax
je 0x4012d1
push dword [0x413de4]
mov edx, 0x412168
push edx
call fcn.0040fee0
mov edx, dword [0x41377c]
push edx
call fcn.0040fee0
mov edx, str.__already_exists._rDo_you_want_to_replace_it_
push edx
call fcn.0040fee0
push 0x413784
call fcn.0040fe60
push 0x134
push dword [0x413784]
mov eax, str.File_Exists
push eax
call fcn.004052de
mov dword [0x413754], eax
push 1
call fcn.0040d230
mov ebx, dword [0x413754]
cmp ebx, 6
jne 0x4012e1
call fcn.00404261
call fcn.00404c89
push dword [0x413794]
push 0
call fcn.00405bf2
push dword [0x41377c]
push 2
call fcn.00405bf2
pop eax
pop eax
mov ebx, dword [0x413758]
cmp ebx, 0x333c
je 0x401324
call fcn.0040e407
mov ebx, eax
cmp ebx, 6
je 0x401324
jmp 0x40132b
mov eax, 1
jmp 0x40132d
xor eax, eax
and eax, eax
je 0x4011b1
push 0
call fcn.00406ad9
call fcn.00403022
push 0
call 0x401363
call fcn.0040fe30
push dword [0x413730]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00405a55
call fcn.00406b53
call fcn.00407cae
call fcn.0040864b
call fcn.0040897d
call fcn.0040bb30
call fcn.0040cf93
call fcn.0040cfab
call fcn.0040d2f0
call fcn.0040e2cf
call fcn.0040ee33
call fcn.0040ce80
ret