Function at 0x401000
Capabilities:
Allocate thread local storage
Identify system language via api
Query environment variable

Disassembly:
push 0x674
push 0
push 0x575c14
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x575c18], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x575c14], eax
mov eax, 0x4814c4
mov dword [0x575c58], eax
call fcn.00417c56
call fcn.0042ef40
call fcn.0042e29f
call fcn.0042dc60
call fcn.0042c3e0
call fcn.0042a314
call fcn.00429aa0
call fcn.004292f5
call fcn.004287a0
call fcn.0042798b
call fcn.004259b8
call fcn.004254e6
call fcn.00424054
call fcn.0042395e
call fcn.004232ad
call fcn.00422040
call fcn.0041fe7a
call fcn.0041bcb3
call fcn.0041ad8c
call fcn.0041a2af
call fcn.0041990a
call fcn.00418d96
call fcn.00418b82
call fcn.00417db9
mov edx, str.v1.5.5.2
lea ecx, [0x575d10]
call fcn.00417008
push edx
call fcn.0042ef90
pop edx
push eax
mov edx, 0x47e2d8
push edx
call fcn.0042efd0
mov edx, dword [0x575d10]
push edx
call fcn.0042efd0
lea eax, [0x575c88]
push eax
call fcn.0042f030
push edx
call fcn.0042ef90
pop edx
push eax
mov edx, str.___________________
push edx
call fcn.0042efd0
mov edx, dword [0x575c88]
push edx
call fcn.0042efd0
mov edx, str._____r_n
push edx
call fcn.0042efd0
lea eax, [0x575d20]
push eax
call fcn.0042f030
call fcn.0041b398
mov ebp, 0x48182e
push ebp
push 0xffffffff
call fcn.00427b0a
mov dword [0x575c48], eax
push 0xc
mov eax, 0x47b5a8
push eax
push 0
call fcn.0042e3b5
push 9
mov eax, str.Segoe_UI
push eax
push 1
call fcn.0042e3b5
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push 0xc8
call fcn.0042c690
lea eax, [0x575de0]
push eax
call fcn.0042f030
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push 0xc8
call fcn.0042c690
lea eax, [0x575de4]
push eax
call fcn.0042f030
push 0xc8
mov eax, dword [0x575de0]
push eax
mov eax, str.PROCESSOR_ARCHITECTURE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0xc8
mov eax, dword [0x575de4]
push eax
mov eax, str.PROCESSOR_ARCHITEW6432
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x575dc8]
push eax
mov eax, str.SYSTEMDRIVE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push dword [0x575de0]
mov edx, str.AMD64
pop ecx
call fcn.00417670
jne 0x40122c
push dword [0x575de4]
mov edx, str.AMD64
pop ecx
call fcn.00417670
jne 0x40122c
jmp 0x401233
mov eax, 1
jmp 0x401235
xor eax, eax
and eax, eax
je 0x40124b
mov edx, 0x47e2ca
lea ecx, [0x575dd4]
call fcn.00417008
jmp 0x40125b
mov edx, 0x47eec0
lea ecx, [0x575dd4]
call fcn.00417008
mov edx, str.Panic___
lea ecx, [0x575c90]
call fcn.00417008
mov edx, 0x47fbda
lea ecx, [0x575cd4]
call fcn.00417008
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
call fcn.00418dc5
lea eax, [0x575c24]
push eax
call fcn.0042f030
mov dword [0x575c7c], 0
mov dword [0x575c94], 0
lea eax, [0x575c94]
push eax
lea eax, [0x575c7c]
push eax
mov eax, dword [0x575c24]
push eax
call sub.imagehlp.dll_MapFileAndCheckSumW
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
mov eax, dword [0x575c7c]
cdq
push edx
push eax
call fcn.0042c6e0
lea eax, [0x575c68]
push eax
call fcn.0042f030
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
mov eax, dword [0x575c94]
cdq
push edx
push eax
call fcn.0042c6e0
lea eax, [0x575c6c]
push eax
call fcn.0042f030
mov eax, dword [0x575c6c]
push eax
mov eax, dword [0x575c68]
push eax
call fcn.0042dc80
and eax, eax
je 0x40134b
push 0x10
push dword [0x575cd4]
push dword [0x575c90]
call fcn.00418bbb
jmp 0x401fa2
mov edx, 0x47b028
lea ecx, [0x575c98]
call fcn.00417008
mov dword [0x575c34], 0
call fcn.0041b398
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push 0x3e8
call fcn.0042c690
lea eax, [0x575c1c]
push eax
call fcn.0042f030
mov edx, 0x47b028
lea ecx, [0x575c84]
call fcn.00417008
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push 0x3e8
call fcn.0042c690
lea eax, [0x575cfc]
push eax
call fcn.0042f030
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push 0x3e8
call fcn.0042c690
lea eax, [0x575ccc]
push eax
call fcn.0042f030
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push 0x3e8
call fcn.0042c690
lea eax, [0x575d14]
push eax
call fcn.0042f030
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push 0x3e8
call fcn.0042c690
lea eax, [0x575d08]
push eax
call fcn.0042f030
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push 0x3e8
call fcn.0042c690
lea eax, [0x575c30]
push eax
call fcn.0042f030
mov edx, 0x47b028
lea ecx, [0x575c9c]
call fcn.00417008
mov edx, str.HWID
lea ecx, [0x575d18]
call fcn.00417008
mov edx, str.KMS38
lea ecx, [0x575cf0]
call fcn.00417008
mov dword [0x575cb0], 0
push 0x3e8
mov eax, dword [0x575c1c]
push eax
mov eax, str.SYSTEMDRIVE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov eax, dword [0x575cfc]
push eax
mov eax, str.TEMP
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov eax, dword [0x575d08]
push eax
mov eax, str.WINDIR
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov eax, dword [0x575ccc]
push eax
mov eax, str.PROCESSOR_ARCHITECTURE
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov eax, dword [0x575d14]
push eax
mov eax, str.PROCESSOR_ARCHITEW6432
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x3e8
mov eax, dword [0x575cfc]
push eax
mov eax, str.TEMP
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x100
push 1
call fcn.00415d47
push dword [0x575ccc]
mov edx, str.AMD64
pop ecx
call fcn.00417670
jne 0x401553
push dword [0x575d14]
mov edx, str.AMD64
pop ecx
call fcn.00417670
jne 0x401553
jmp 0x40155a
mov eax, 1
jmp 0x40155c
xor eax, eax
and eax, eax
je 0x401572
mov edx, 0x47e2ca
lea ecx, [0x575cc8]
call fcn.00417008
jmp 0x401582
mov edx, 0x47eec0
lea ecx, [0x575cc8]
call fcn.00417008
push edx
call fcn.0042ef90
pop edx
push eax
mov edx, dword [0x575d08]
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042efd0
mov edx, str.Temp
push edx
call fcn.0042efd0
call fcn.004176c2
add dword [esp], edx
call fcn.004214bc
call fcn.004176e0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x4015c9
cmp edi, 0xffffffff
je 0x4015cd
xor eax, eax
jmp 0x4015d2
mov eax, 1
or eax, eax
je 0x401601
mov edx, dword [0x575d08]
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042efd0
mov edx, str.Temp
push edx
call fcn.0042efd0
lea eax, [0x575cfc]
push eax
call fcn.0042f030
mov edx, dword [0x575d08]
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042efd0
mov edx, str.System32
push edx
call fcn.0042efd0
lea eax, [0x575c30]
push eax
call fcn.0042f030
push edx
call fcn.0042ef90
pop edx
push eax
mov edx, dword [0x575d08]
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042efd0
mov edx, str.Sysnativecmd.exe
push edx
call fcn.0042efd0
call fcn.004176c2
add dword [esp], edx
call fcn.004214bc
call fcn.004176e0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x401679
jl 0x401675
cmp ebx, 0
ja 0x401679
xor eax, eax
jmp 0x40167e
mov eax, 1
or eax, eax
je 0x4016af
mov edx, dword [0x575d08]
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042efd0
mov edx, str.Sysnative
push edx
call fcn.0042efd0
lea eax, [0x575d08]
push eax
call fcn.0042f030
jmp 0x4016da
mov edx, dword [0x575d08]
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042efd0
mov edx, str.System32
push edx
call fcn.0042efd0
lea eax, [0x575d08]
push eax
call fcn.0042f030
push edx
call fcn.0042ef90
pop edx
push eax
mov eax, 0x47b3cc
push eax
mov eax, str.BuildLab
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0041114d
lea eax, [0x575cb4]
push eax
call fcn.0042f030
mov eax, 0x47b3cc
push eax
push dword [0x575cb4]
call fcn.0042c900
mov dword [0x575ce8], eax
mov ebx, dword [0x575ce8]
cmp ebx, 1
jge 0x401728
jmp 0x40175c
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
mov ebx, dword [0x575ce8]
dec ebx
push ebx
push 1
push dword [0x575cb4]
call fcn.0042c920
lea eax, [0x575cb4]
push eax
call fcn.0042f030
push dword [0x575cb4]
call fcn.0042ca00
mov dword [0x575c20], eax
mov ebx, dword [0x575c20]
cmp ebx, 0x2710
jle 0x40178f
mov edx, 0x47b540
lea ecx, [0x575d0c]
call fcn.00417008
jmp 0x401876
mov ebx, dword [0x575c20]
cmp ebx, 0x2580
jl 0x4017b2
mov edx, 0x480e0a
lea ecx, [0x575d0c]
call fcn.00417008
jmp 0x401876
mov ebx, dword [0x575c20]
cmp ebx, 0x23f0
jl 0x4017d5
mov ebx, dword [0x575c20]
cmp ebx, 0x2454
jge 0x4017d5
mov eax, 1
jmp 0x4017d7
xor eax, eax
and eax, eax
je 0x4017f0
mov edx, 0x47b518
lea ecx, [0x575d0c]
call fcn.00417008
jmp 0x401876
mov ebx, dword [0x575c20]
cmp ebx, 0x1db0
jl 0x401813
mov ebx, dword [0x575c20]
cmp ebx, 0x1e14
jge 0x401813
mov eax, 1
jmp 0x401815
xor eax, eax
and eax, eax
je 0x40182b
mov edx, 0x47b514
lea ecx, [0x575d0c]
call fcn.00417008
jmp 0x401876
mov ebx, dword [0x575c20]
cmp ebx, 0xa28
jl 0x40184e
mov ebx, dword [0x575c20]
cmp ebx, 0xfa0
jge 0x40184e
mov eax, 1
jmp 0x401850
xor eax, eax
and eax, eax
je 0x401866
mov edx, 0x47e2d2
lea ecx, [0x575d0c]
call fcn.00417008
jmp 0x401876
mov edx, 0x47b514
lea ecx, [0x575d0c]
call fcn.00417008
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
call sub.KERNEL32.dll_GetUserDefaultLangID
cdq
push edx
push eax
call fcn.0042cc20
lea eax, [0x575cbc]
push eax
call fcn.0042f030
push dword [0x575cbc]
call fcn.0042cca0
mov ebx, eax
cmp ebx, 3
jne 0x4018dc
push edx
call fcn.0042ef90
pop edx
push eax
mov edx, 0x47b40e
push edx
call fcn.0042efd0
mov edx, dword [0x575cbc]
push edx
call fcn.0042efd0
lea eax, [0x575cbc]
push eax
call fcn.0042f030
push dword [0x575cbc]
mov edx, str.0419
pop ecx
call fcn.00417670
je 0x401901
mov edx, 0x47c05e
lea ecx, [0x575cbc]
call fcn.00417008
jmp 0x401911
mov edx, 0x47d472
lea ecx, [0x575cbc]
call fcn.00417008
mov dword [0x575d24], 0
mov dword [0x575d28], 0
mov dword [0x575c28], 0
push edx
call fcn.0042ef90
pop edx
push eax
mov eax, 0x47b3cc
push eax
mov eax, 0x48072c
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0041114d
lea eax, [0x575c74]
push eax
call fcn.0042f030
mov eax, str.2015
push eax
push dword [0x575c74]
call fcn.0042c900
mov ebx, eax
and ebx, ebx
jle 0x40197d
mov dword [0x575d24], 1
jmp 0x4019c1
mov eax, str.LTSC_2021
push eax
push dword [0x575c74]
call fcn.0042c900
mov ebx, eax
and ebx, ebx
jle 0x4019a0
mov dword [0x575c28], 1
jmp 0x4019c1
mov eax, str.LTSC
push eax
push dword [0x575c74]
call fcn.0042c900
mov ebx, eax
and ebx, ebx
jle 0x4019c1
mov dword [0x575d28], 1
mov dword [0x575cf8], 0
push edx
call fcn.0042ef90
pop edx
push eax
mov eax, 0x47b3cc
push eax
mov eax, str.EditionID
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0041114d
lea eax, [0x575c78]
push eax
call fcn.0042f030
push edx
call fcn.0042ef90
pop edx
push eax
mov eax, 0x47b3cc
push eax
mov eax, str.CurrentBuild
push eax
mov eax, str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.0041114d
lea eax, [0x575ca4]
push eax
call fcn.0042f030
mov dword [0x575c54], 0
call fcn.00418f8b
mov ebx, eax
dec ebx
mov dword [0x575c4c], ebx
mov ebx, dword [0x575c4c]
and ebx, ebx
jl 0x401aef
mov dword [0x575cc0], 0
jmp 0x401a53
mov eax, dword [0x575c4c]
cmp eax, dword [0x575cc0]
jl 0x401aef
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push dword [0x575cc0]
call fcn.00418f9f
call fcn.004176c2
add dword [esp], edx
call fcn.0042ccd0
lea eax, [0x575cd0]
push eax
call fcn.0042f030
push dword [0x575cd0]
mov edx, str._ACTIVATE
mov ecx, dword [esp]
call fcn.00417670
je 0x401ac9
mov dword [0x575c54], 1
jmp 0x401ae2
mov edx, str._KMS38
mov ecx, dword [esp]
call fcn.00417670
je 0x401ae2
mov dword [0x575cb0], 1
pop eax
inc dword [0x575cc0]
jno 0x401a53
push dword [0x575c78]
call fcn.004065ae
push dword [0x575d0c]
call fcn.0042ca00
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x401b19
jg 0x401b15
cmp ebx, 0xa
jb 0x401b19
xor eax, eax
jmp 0x401b1e
mov eax, 1
or eax, eax
jne 0x401b2e
mov ebx, dword [0x575cf8]
and ebx, ebx
je 0x401b2e
jmp 0x401b35
mov eax, 1
jmp 0x401b37
xor eax, eax
and eax, eax
je 0x401b6b
mov edx, str.The_program_supports_activation_of_the_following_editions:_r_n_r_nWindows_10_11_Core_r_nWindows_10_11_Core_N_r_nWindows_10_11_CoreSingleLanguage_r_nWindows_10_11_CoreSingleLanguage_N_r_nWindows_10_11_Professional_r_nWindows_10_11_Professional_N_r_nWindows_10_11_ProfessionalEducation_r_nWindows_10_11_ProfessionalEducation_N_r_nWindows_10_11_ProfessionalWorkstation_r_nWindows_10_11_ProfessionalWorkstation_N_r_nWindows_10_11_Education_r_nWindows_10_11_Education_N_r_nWindows_10_11_Enterprise_r_nWindows_10_11_Enterprise_N_r_nWindows_10_Enterprise_LTSB_r_nWindows_10_Enterprise_LTSB_N_r_nWindows_10_Enterprise_LTSC_r_nWindows_10_11_IoT_Enterprise_r_nWindows_11_IoT_EnterpriseK_r_nWindows_10_IoT_Enterprise_LTSC
lea ecx, [0x575ca0]
call fcn.00417008
mov ebx, dword [0x575c54]
and ebx, ebx
jne 0x401b6b
push 0x10
push dword [0x575ca0]
mov eax, 0x47b028
push eax
call fcn.00418bbb
mov dword [0x575ce0], 0
mov dword [0x575c2c], 0
mov dword [0x575c50], 0
push edx
call fcn.0042ef90
pop edx
push eax
mov eax, 0x47b3cc
push eax
mov eax, str.AppsUseLightTheme
push eax
mov eax, str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionThemesPersonalize
push eax
call fcn.0041114d
lea eax, [0x575cf4]
push eax
call fcn.0042f030
push dword [0x575cf4]
mov edx, 0x47b40e
pop ecx
call fcn.00417670
je 0x401bdb
mov dword [0x575c2c], 1
mov dword [0x575c50], 1
push 0
push 0
push 0
call fcn.004259c4
mov dword [0x575d04], eax
push 0xff
push 0xff
push 0xff
call fcn.004259c4
mov dword [0x575ca8], eax
push 0x20
push 0x20
push 0x20
call fcn.004259c4
mov dword [0x575c40], eax
mov dword [0x575cec], 1
push 0x808080
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x575c8c], eax
push 0xcc872c
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x575cdc], eax
push 7
xor eax, eax
push eax
lea eax, [0x576210]
push eax
push 0x1f
call fcn.004287bf
mov eax, 0x200
push eax
lea eax, [0x576278]
push eax
xor eax, eax
push eax
push 7
push 0x2d
call fcn.0042397d
mov eax, 0x200
push eax
lea eax, [0x57627c]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.0042397d
mov eax, 0x200
push eax
lea eax, [0x576280]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.0042397d
mov eax, 0x200
push eax
lea eax, [0x576284]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.0042397d
mov dword [0x5761f8], 2
mov dword [0x5761fc], 1
push 0x5761f4
push 0
push 0x15
push 4
push 2
call fcn.004255b6
push 0x15
xor eax, eax
push eax
lea eax, [0x576218]
push eax
push 4
call fcn.004287bf
mov ebp, 0x566e7f
push ebp
push 0xffffffff
call fcn.00427b0a
mov dword [0x575c34], eax
push dword [0x575c34]
call fcn.004060bd
push dword [0x575c48]
call fcn.004060bd
mov ebx, dword [0x575c54]
and ebx, ebx
jle 0x401d86
push 0
call fcn.00403c19
jmp 0x401fa2
push 0xa0
push 0x1e0
push 0
push 0
call fcn.00402017
push dword [0x575c88]
push dword [0x575ce4]
call fcn.0041fee5
push dword [0x575cbc]
mov edx, 0x47c05e
pop ecx
call fcn.00417670
je 0x401de7
mov eax, 0x481282
push eax
push dword [0x575c80]
call fcn.0041bd59
mov eax, 0x47f68a
push eax
push dword [0x575c60]
call fcn.0041bd59
jmp 0x401df8
mov eax, str.Go_to_the_program_support_forum
push eax
push dword [0x575c60]
call fcn.0041bd59
push dword [0x575ce4]
call fcn.0041ff0e
push eax
call fcn.00425a01
and eax, eax
je 0x401e62
push 1
call fcn.0042e3cb
push eax
call fcn.00425a66
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push edx
call fcn.0042ef90
pop edx
push eax
push dword [0x575c60]
call fcn.0041bda4
call fcn.004176c2
add dword [esp], edx
call fcn.00425a7d
call fcn.004176e0
push eax
call fcn.004240c5
mov dword [0x575cb8], eax
call fcn.00425abc
push 0xffff0001
push dword [0x575cb8]
push 0xffff0001
push dword [0x575ce4]
call fcn.00420007
mov ebx, eax
sub ebx, dword [0x575cb8]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push dword [0x575c60]
call fcn.0041bf33
push dword [0x575d18]
push 0xffffffff
push dword [0x575c5c]
call fcn.0041bf6c
push dword [0x575cf0]
push 0xffffffff
push dword [0x575c5c]
call fcn.0041bf6c
mov ebx, dword [0x575cb0]
and ebx, ebx
jle 0x401ee5
push 1
push dword [0x575c5c]
call fcn.0041bfcd
jmp 0x401ef5
push 0
push dword [0x575c5c]
call fcn.0041bfcd
call fcn.00407b9f
call fcn.0041fb98
mov ebx, eax
cmp ebx, 0x6e
jl 0x401f17
mov ebx, dword [0x575c50]
and ebx, ebx
jle 0x401f17
mov eax, 1
jmp 0x401f19
xor eax, eax
and eax, eax
je 0x401f32
call fcn.0040bb39
push 1
push dword [0x575ce4]
call fcn.0040a528
push 0
push dword [0x575ce4]
call fcn.004200f4
call fcn.00420106
mov dword [0x575cc4], eax
cmp dword [0x575cc4], 0
je 0x401f8a
call fcn.004233c7
push eax
mov ebx, dword [0x575ce4]
cmp ebx, dword [esp]
jne 0x401f73
push dword [0x575cc4]
call fcn.00407c92
jmp 0x401f87
mov dword [0x575cc4], 0
push 5
call fcn.0041fd1b
pop eax
jmp 0x401f94
push 5
call fcn.0041fd1b
mov ebx, dword [0x575cc4]
cmp ebx, 0x333c
jne 0x401f42
push 0
call 0x401fc1
call fcn.0042ef70
push dword [0x575c14]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00417d77
call fcn.004181d2
call fcn.004198f8
call fcn.0041a27f
call fcn.0041ad80
call fcn.0041bc5d
call fcn.0041fe57
call fcn.00421613
call fcn.00422030
call fcn.0042328f
call fcn.00424053
call fcn.0042797f
call fcn.004292f4
call fcn.0042c400
call fcn.0042e428
call fcn.0042e472
call fcn.0042dc50
ret