Function at 0x401000
Capabilities:
Allocate thread local storage
Query environment variable

Disassembly:
push 0x110
push 0
push 0x42bbb8
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x42bbbc], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x42bbb8], eax
mov eax, 0x428e6c
mov dword [0x42bc14], eax
call fcn.0041d360
call fcn.0041c815
call fcn.0041c5c0
call fcn.00419190
call fcn.004172cc
call fcn.00416b70
call fcn.0041614b
call fcn.004153e8
call fcn.00414cfd
call fcn.004143fe
call fcn.00413f2c
call fcn.00413da0
call fcn.00413678
call fcn.00412ead
call fcn.00411ed0
call fcn.0040fee7
call fcn.0040e2a6
call fcn.0040e0e4
call fcn.0040d83a
call fcn.0040d626
mov edx, str.ClearTemp_v1.59
lea ecx, [0x42bc70]
call fcn.0040d008
mov dword [0x42bc08], 0xa
mov dword [0x42bbd0], 0
mov dword [0x42bbd4], 0
mov dword [0x42bbc0], 0
mov dword [0x42bbc4], 0
mov dword [0x42bbd8], 0
mov dword [0x42bbdc], 0
mov edx, 0x428028
lea ecx, [0x42bc44]
call fcn.0040d008
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 0x64
call fcn.0041b560
push 0x42bc5c
call fcn.0041d3f0
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 0x64
call fcn.0041b560
push 0x42bbec
call fcn.0041d3f0
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 0xc8
call fcn.0041b560
push 0x42bc48
call fcn.0041d3f0
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 0xc8
call fcn.0041b560
push 0x42bc74
call fcn.0041d3f0
push 0xc8
mov eax, dword [0x42bc48]
push eax
mov eax, str.PROCESSOR_ARCHITECTURE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0xc8
mov eax, dword [0x42bc74]
push eax
mov eax, str.PROCESSOR_ARCHITEW6432
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x42bbec]
push eax
mov eax, str.SYSTEMDRIVE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x42bc5c]
push eax
mov eax, str.TEMP
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push dword [0x42bc48]
mov edx, str.AMD64
pop ecx
call fcn.0040d1c0
jne 0x401223
push dword [0x42bc74]
mov edx, str.AMD64
pop ecx
call fcn.0040d1c0
jne 0x401223
jmp 0x40122a
mov eax, 1
jmp 0x40122c
xor eax, eax
and eax, eax
je 0x401242
mov edx, 0x428670
lea ecx, [0x42bc44]
call fcn.0040d008
jmp 0x401252
mov edx, 0x428852
lea ecx, [0x42bc44]
call fcn.0040d008
mov edx, 0x428028
lea ecx, [0x42bc6c]
call fcn.0040d008
mov edx, 0x428028
lea ecx, [0x42bbf8]
call fcn.0040d008
mov edx, dword [0x42bbec]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d480
mov edx, str.WindowsSystem32
push edx
call fcn.0041d480
push 0x42bbf8
call fcn.0041d3f0
mov edx, dword [0x42bbec]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d480
mov edx, str.WindowsSystem32
push edx
call fcn.0041d480
push 0x42bc6c
call fcn.0041d3f0
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 1
mov eax, str..ini
push eax
mov eax, str..exe
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
call fcn.0040d869
call fcn.0040d212
add dword [esp], edx
call fcn.0041b5b0
push 0x42bc24
call fcn.0041d3f0
fld qword [0x428dec]
fstp qword [0x42bbc8]
fld qword [0x428dec]
fstp qword [0x42bbe0]
mov dword [0x42bc38], 0
mov dword [0x42bbf0], 0
mov dword [0x42bc10], 0
push edx
call fcn.0041d3b0
pop edx
push eax
mov eax, 0x428028
push eax
mov eax, str.AppsUseLightTheme
push eax
mov eax, 0x428730
push eax
push 0x80000001
call fcn.0040a752
push 0x42bc58
call fcn.0041d3f0
push dword [0x42bc58]
mov edx, 0x42806e
pop ecx
call fcn.0040d1c0
je 0x4013a6
mov dword [0x42bbf0], 1
mov dword [0x42bc10], 1
mov dword [0x42bc38], 1
push 0
push 0
push 0
call fcn.0041440a
mov dword [0x42bc68], eax
push 0xff
push 0xff
push 0xff
call fcn.0041440a
mov dword [0x42bc3c], eax
push 0x20
push 0x20
push 0x20
call fcn.0041440a
mov dword [0x42bbfc], eax
push 0x808080
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x42bc28], eax
push 0xcc872c
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x42bc50], eax
push 7
xor eax, eax
push eax
lea eax, [0x42bca8]
push eax
push 0x1f
call fcn.00415407
mov eax, 0x200
push eax
lea eax, [0x42bcb8]
push eax
xor eax, eax
push eax
push 7
push 0x2d
call fcn.00413697
mov eax, 0x200
push eax
lea eax, [0x42bcbc]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.00413697
mov eax, 0x200
push eax
lea eax, [0x42bcc0]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.00413697
mov eax, 0x200
push eax
lea eax, [0x42bcc4]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.00413697
mov dword [0x42bca0], 2
mov dword [0x42bca4], 1
push 0x42bc9c
push 0
push 0x15
push 4
push 2
call fcn.00413ffc
push 0x15
xor eax, eax
push eax
lea eax, [0x42bcb0]
push eax
push 4
call fcn.00415407
mov dword [0x42bc08], 0xa
push dword [0x42bc24]
call fcn.004115ed
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x40152c
jl 0x401528
cmp ebx, 0
ja 0x40152c
xor eax, eax
jmp 0x401531
mov eax, 1
or eax, eax
je 0x40157c
push dword [0x42bc24]
push 0
call fcn.004121d0
and eax, eax
je 0x40157c
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 0x10000
push 0
call fcn.00412290
push 0x42bc18
call fcn.0041d3f0
push 0
call fcn.00411e00
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
mov eax, 0x428028
push eax
mov eax, 0x428044
push eax
push dword [0x42bc18]
call fcn.0041b910
push 0x42bc18
call fcn.0041d3f0
push 1
push 1
mov eax, str.timeout
push eax
push dword [0x42bc18]
call fcn.0041b950
mov dword [0x42bc54], eax
mov ebx, dword [0x42bc54]
and ebx, ebx
jle 0x401625
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
mov ebx, dword [0x42bc54]
mov eax, 0x4287f4
push eax
call fcn.0041ba10
add ebx, eax
push ebx
push dword [0x42bc18]
call fcn.0041bad0
call fcn.0040d212
add dword [esp], edx
call fcn.0041bb20
call fcn.0040d230
mov dword [0x42bc08], eax
mov ebx, dword [0x42bc08]
and ebx, ebx
jle 0x401648
push 0x136
push 0x29e
push 0
push 0
call fcn.0040c152
call fcn.0040fcc7
mov ebx, eax
cmp ebx, 0x6e
jl 0x401665
mov ebx, dword [0x42bbf0]
and ebx, ebx
jle 0x401665
mov eax, 1
jmp 0x401667
xor eax, eax
and eax, eax
je 0x401743
mov ebx, dword [0x42bc38]
and ebx, ebx
jle 0x401743
call fcn.0040888a
mov eax, str.dwmapi
push eax
push 0
call fcn.0040e157
and eax, eax
je 0x4016a7
mov ebx, dword [0x42bc10]
and ebx, ebx
jle 0x4016a7
mov eax, 1
jmp 0x4016a9
xor eax, eax
and eax, eax
je 0x401743
mov dword [0x42bc2c], 0
mov eax, str.DwmSetWindowAttribute
push eax
push 0
call fcn.0040e1b1
mov dword [0x42bc20], eax
push dword [0x42c19c]
call fcn.0041c920
push 0x42bc2c
push dword [0x42c19c]
call fcn.0041c8c0
and eax, eax
je 0x401724
push dword [0x42bc2c]
call fcn.0040ff52
and eax, eax
je 0x401722
push 4
push 0x42bc10
push 0x14
push dword [0x42bc2c]
call fcn.0040ff64
push eax
call dword [0x42bc20]
add esp, 0x10
jmp 0x4016db
push dword [0x42c19c]
call fcn.0041c8af
push 0
call fcn.0040e097
push 1
call fcn.00406fcf
mov ebx, dword [0x42bc08]
and ebx, ebx
jle 0x40175c
push 0
push 0
call fcn.0041005f
push 5
call fcn.00406fcf
mov edx, 0x428028
lea ecx, [0x42bc60]
call fcn.0040d008
mov edx, 0x428028
lea ecx, [0x42bc4c]
call fcn.0040d008
mov edx, 0x428028
lea ecx, [0x42bc34]
call fcn.0040d008
mov edx, 0x428028
lea ecx, [0x42bc30]
call fcn.0040d008
push dword [0x42bc24]
call fcn.004115ed
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4017c5
jl 0x4017c1
cmp ebx, 0
ja 0x4017c5
xor eax, eax
jmp 0x4017ca
mov eax, 1
or eax, eax
je 0x401cf2
push dword [0x42bc24]
push 0
call fcn.004121d0
and eax, eax
je 0x401ced
mov eax, 0x42869e
push eax
call fcn.0040a637
push 0
call fcn.004123a0
mov ebx, eax
and ebx, ebx
jne 0x401ce3
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 0x18
push 0
call fcn.00412290
push 0x42bc30
call fcn.0041d3f0
mov edx, 0x428028
lea ecx, [0x42bc04]
call fcn.0040d008
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 0x104
call fcn.0041b560
push 0x42bc64
call fcn.0041d3f0
mov eax, 0x428062
push eax
push dword [0x42bc30]
call fcn.0041b9f0
mov dword [0x42bc0c], eax
mov ebx, dword [0x42bc0c]
and ebx, ebx
jle 0x401992
mov ebx, dword [0x42bc0c]
inc ebx
push ebx
mov eax, 0x428062
push eax
push dword [0x42bc30]
call fcn.0041b930
mov dword [0x42bc1c], eax
mov ebx, dword [0x42bc1c]
cmp ebx, dword [0x42bc0c]
jle 0x401992
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
mov ebx, dword [0x42bc1c]
sub ebx, dword [0x42bc0c]
inc ebx
push ebx
push dword [0x42bc0c]
push dword [0x42bc30]
call fcn.0041ba40
push 0x42bc04
call fcn.0041d3f0
push dword [0x42bc04]
mov edx, 0x428028
pop ecx
call fcn.0040d1c0
jne 0x401992
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
mov eax, 0x428028
push eax
mov eax, 0x428062
push eax
push dword [0x42bc04]
call fcn.0041b910
push 0x42bc7c
call fcn.0041d3f0
push 0x1f4
mov eax, dword [0x42bc64]
push eax
push dword [0x42bc7c]
call sub.KERNEL32.dll_GetEnvironmentVariableW
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 1
push dword [0x42bc0c]
push 1
push dword [0x42bc64]
push dword [0x42bc04]
push dword [0x42bc30]
call fcn.0041b5d0
push 0x42bc30
call fcn.0041d3f0
mov eax, 0x428062
push eax
push dword [0x42bc30]
call fcn.0041b9f0
mov ebx, eax
and ebx, ebx
jne 0x401866
push dword [0x42bc30]
call fcn.004115ed
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x4019c6
cmp edi, 0xffffffff
je 0x4019ca
xor eax, eax
jmp 0x4019cf
mov eax, 1
or eax, eax
je 0x401cde
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
mov edx, 0x4284b4
push edx
call fcn.0041d480
mov edx, dword [0x42bc30]
push edx
call fcn.0041d480
mov edx, 0x428154
push edx
call fcn.0041d480
call fcn.0040d212
add dword [esp], edx
call fcn.0040a637
call fcn.0040d230
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 1
push dword [0x42bc30]
call fcn.0041bc60
push 0x42bc34
call fcn.0041d3f0
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 1
push dword [0x42bc30]
call fcn.0041bcd0
call fcn.0041d4e0
mov edx, 0x4281c2
call fcn.0040d240
mov ecx, eax
call fcn.0040d1c0
jne 0x401aa6
mov edx, dword [0x42bc30]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d480
mov edx, 0x4281c2
push edx
call fcn.0041d480
push 0x42bc30
call fcn.0041d3f0
mov eax, 0x428944
push eax
push dword [0x42bc30]
push 0
call fcn.004117b6
and eax, eax
je 0x401cde
push dword [0x42bc34]
call fcn.00407743
push edx
push eax
pop dword [0x42bbd0]
pop dword [0x42bbd4]
push 0
call fcn.00411915
and eax, eax
je 0x401c7c
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 0
call fcn.00411744
push 0x42bc60
call fcn.0041d3f0
push dword [0x42bc60]
mov edx, 0x42806a
pop ecx
call fcn.0040d1c0
je 0x401b28
jmp 0x401add
push dword [0x42bc60]
mov edx, 0x428cc4
pop ecx
call fcn.0040d1c0
je 0x401b3d
jmp 0x401add
push 0
call fcn.00411792
mov ebx, eax
cmp ebx, 1
jne 0x401be8
push edx
call fcn.0041d3b0
pop edx
push eax
mov edx, dword [0x42bc30]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d480
mov edx, dword [0x42bc60]
push edx
call fcn.0041d480
call fcn.0040d212
add dword [esp], edx
call fcn.0040a69a
call fcn.0040d230
push edx
call fcn.0041d3b0
pop edx
push eax
mov edx, dword [0x42bc30]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d480
mov edx, dword [0x42bc60]
push edx
call fcn.0041d480
call fcn.0040d212
add dword [esp], edx
call fcn.004115ed
call fcn.0040d230
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x401bda
jg 0x401bd6
cmp ebx, 0
jb 0x401bda
xor eax, eax
jmp 0x401bdf
mov eax, 1
or eax, eax
jne 0x401be3
jmp 0x401c77
push edx
call fcn.0041d3b0
pop edx
push eax
mov edx, dword [0x42bc30]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d480
mov edx, dword [0x42bc60]
push edx
call fcn.0041d480
call fcn.0040d212
add dword [esp], edx
call fcn.0040454e
call fcn.0040d230
push edx
call fcn.0041d3b0
pop edx
push eax
mov edx, dword [0x42bc30]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d480
mov edx, dword [0x42bc60]
push edx
call fcn.0041d480
call fcn.0040d212
add dword [esp], edx
call fcn.004115ed
call fcn.0040d230
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x401c6a
cmp edi, 0xffffffff
je 0x401c6e
xor eax, eax
jmp 0x401c73
mov eax, 1
or eax, eax
je 0x401c77
jmp 0x401add
push 0
call fcn.004118e3
push dword [0x42bc34]
call fcn.00407743
push edx
push eax
pop dword [0x42bbc0]
pop dword [0x42bbc4]
push dword [0x42bbdc]
push dword [0x42bbd8]
push dword [0x42bbc4]
push dword [0x42bbc0]
lea eax, [0x42bbd0]
mov edx, dword [eax]
sub dword [esp], edx
mov edx, dword [eax + 4]
sbb dword [esp + 4], edx
pop eax
pop edx
add dword [esp], eax
adc dword [esp + 4], edx
pop dword [0x42bbd8]
pop dword [0x42bbdc]
jmp 0x4017f5
push 0
call fcn.00411e00
jmp 0x401da9
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
mov edx, 0x428d14
push edx
call fcn.0041d480
mov edx, dword [0x42bc24]
push edx
call fcn.0041d480
mov edx, 0x4286f2
push edx
call fcn.0041d480
call fcn.0041d4e0
mov eax, 0x4281b4
push eax
call fcn.0040d212
add dword [esp + 4], edx
call fcn.0040d690
call fcn.0040d230
push 2
push dword [0x42bc24]
push 0
call fcn.004120e0
and eax, eax
je 0x401da4
push 2
mov eax, str._temp_
push eax
push 0
call fcn.00412440
push 2
mov eax, str._tmp_
push eax
push 0
call fcn.00412440
push 2
mov eax, str._USERPROFILE_AppDataLocalTemp
push eax
push 0
call fcn.00412440
push 0
call fcn.00411e00
jmp 0x40235f
push dword [0x42bbdc]
mov eax, dword [0x42bbd8]
pop edx
mov dword [esp - 8], eax
mov dword [esp - 4], edx
fild qword [esp - 8]
fcomp dword [str._knN]
fnstsw ax
test ah, 1
jne 0x401e2c
push dword [0x42bbdc]
push dword [0x42bbd8]
fild qword [esp]
add esp, 8
fdiv qword [0x428e44]
fistp qword [0x42bbd8]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 2
fild qword [0x42bbd8]
sub esp, 4
fstp dword [esp]
call fcn.0041bd50
mov edx, 0x42863e
push edx
call fcn.0041d480
push 0x42bbe8
call fcn.0041d3f0
jmp 0x401f65
push dword [0x42bbdc]
mov eax, dword [0x42bbd8]
pop edx
mov dword [esp - 8], eax
mov dword [esp - 4], edx
fild qword [esp - 8]
fcomp dword [0x428de4]
fnstsw ax
test ah, 1
jne 0x401eaf
push dword [0x42bbdc]
push dword [0x42bbd8]
fild qword [esp]
add esp, 8
fdiv qword [0x428e4c]
fistp qword [0x42bbd8]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 2
fild qword [0x42bbd8]
sub esp, 4
fstp dword [esp]
call fcn.0041bd50
mov edx, 0x428c0e
push edx
call fcn.0041d480
push 0x42bbe8
call fcn.0041d3f0
jmp 0x401f65
push dword [0x42bbdc]
mov eax, dword [0x42bbd8]
pop edx
mov dword [esp - 8], eax
mov dword [esp - 4], edx
fild qword [esp - 8]
fcomp dword [0x428de8]
fnstsw ax
test ah, 1
jne 0x401f2f
push dword [0x42bbdc]
push dword [0x42bbd8]
fild qword [esp]
add esp, 8
fdiv qword [0x428e54]
fistp qword [0x42bbd8]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push 2
fild qword [0x42bbd8]
sub esp, 4
fstp dword [esp]
call fcn.0041bd50
mov edx, 0x428a0e
push edx
call fcn.0041d480
push 0x42bbe8
call fcn.0041d3f0
jmp 0x401f65
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push dword [0x42bbdc]
push dword [0x42bbd8]
call fcn.0041bf40
mov edx, 0x428172
push edx
call fcn.0041d480
push 0x42bbe8
call fcn.0041d3f0
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
mov edx, 0x428c9e
push edx
call fcn.0041d480
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
fld qword [0x42bbc8]
sub esp, 8
fistp qword [esp]
call fcn.0041bf40
pop eax
mov edx, 0x428a16
push edx
call fcn.0041d480
mov edx, dword [0x42bbe8]
push edx
call fcn.0041d480
mov edx, str._
push edx
call fcn.0041d480
call fcn.0040d212
add dword [esp], edx
call fcn.0040a637
call fcn.0040d230
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
mov edx, 0x428178
push edx
call fcn.0041d480
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
fld qword [0x42bbe0]
sub esp, 8
fistp qword [esp]
call fcn.0041bf40
pop eax
mov edx, 0x4281d8
push edx
call fcn.0041d480
call fcn.0040d212
add dword [esp], edx
call fcn.0040a637
call fcn.0040d230
mov eax, 0x428028
push eax
call fcn.0040a637
mov eax, 0x428048
push eax
call fcn.0040a637
push 0
call fcn.0040ff52
and eax, eax
je 0x4020b8
push 0x3e8
push 1
push 0
call fcn.00410071
push 2
push 0x70
push 0
call fcn.004100a0
push 3
push 0x71
push 0
call fcn.004100a0
push 4
push 0x72
push 0
call fcn.004100a0
push 5
push 0x73
push 0
call fcn.004100a0
mov eax, dword [0x42bc08]
mov dword [0x42bbf4], eax
mov ebx, dword [0x42bbf4]
and ebx, ebx
jne 0x4020d1
jmp 0x40235f
call fcn.004102d4
push eax
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x40224c
call fcn.00412fc7
push eax
mov ebx, 2
cmp ebx, dword [esp]
jne 0x402180
push dword [0x42bc70]
push 0
call fcn.004102dc
push 1
push 0
call fcn.00410305
mov eax, 0x428028
push eax
call fcn.0040a637
mov eax, str._F1_____
push eax
call fcn.0040a637
mov eax, str._F2________Windows
push eax
call fcn.0040a637
mov eax, str._F3________Windows
push eax
call fcn.0040a637
mov eax, str._F4____
push eax
call fcn.0040a637
mov eax, 0x428028
push eax
call fcn.0040a637
mov eax, str._INI
push eax
call fcn.0040a637
mov eax, str._timeout10________._0______.
push eax
call fcn.0040a637
mov eax, 0x428028
push eax
call fcn.0040a637
jmp 0x402246
mov ebx, 3
cmp ebx, dword [esp]
jne 0x4021da
push dword [0x42bc70]
push 0
call fcn.004102dc
push 1
push 0
call fcn.00410305
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
call fcn.0040d869
call fcn.0040d212
add dword [esp], edx
call fcn.00409e89
call fcn.0040d230
jmp 0x402246
mov ebx, 4
cmp ebx, dword [esp]
jne 0x402234
push dword [0x42bc70]
push 0
call fcn.004102dc
push 1
push 0
call fcn.00410305
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
call fcn.0040d869
call fcn.0040d212
add dword [esp], edx
call fcn.00407547
call fcn.0040d230
jmp 0x402246
mov ebx, 5
cmp ebx, dword [esp]
jne 0x402246
add esp, 8
jmp 0x40235f
pop eax
jmp 0x402359
mov ebx, 0x3336
cmp ebx, dword [esp]
jne 0x4022f4
call fcn.00412fd6
push eax
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4022f1
push edx
call fcn.0041d3b0
pop edx
push eax
mov edx, dword [0x42bc70]
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d480
mov edx, str.______________
push edx
call fcn.0041d480
push edx
call fcn.0041d3b0
pop edx
push eax
push edx
call fcn.0041d3b0
pop edx
push eax
mov eax, dword [0x42bbf4]
cdq
push edx
push eax
call fcn.0041bf40
pop eax
mov edx, 0x428b80
push edx
call fcn.0041d480
call fcn.0041d4e0
push 0
call fcn.0040d212
add dword [esp + 4], edx
call fcn.004102dc
call fcn.0040d230
dec dword [0x42bbf4]
mov ebx, dword [0x42bbf4]
cmp ebx, 1
jge 0x4022f1
add esp, 8
jmp 0x40235f
pop eax
jmp 0x402359
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x402305
add esp, 4
jmp 0x40235f
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x402359
call fcn.00412fe5
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x402358
call fcn.00412ff4
push eax
mov ebx, 0x36b0
cmp ebx, dword [esp]
jne 0x40234d
push dword [0x42bc70]
push 0
call fcn.004102dc
push 1
push 0
call fcn.00410305
jmp 0x402357
mov ebx, 0x36b1
cmp ebx, dword [esp]
jne 0x402357
pop eax
pop eax
pop eax
jmp 0x4020d1
push 0
call 0x40237e
call fcn.0041d390
push dword [0x42bbb8]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0040e0d8
call fcn.0040e250
call fcn.0040fec4
call fcn.00411959
call fcn.00411ec0
call fcn.00412e8f
call fcn.00413d8f
call fcn.00414cf1
call fcn.0041613e
call fcn.004191b0
call fcn.0041c8a3
call fcn.0041c98b
call fcn.0041c5b0
ret