Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0x74
push 0
push 0x4e4690
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x4e4694], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x4e4690], eax
call fcn.0040ca90
call fcn.0040c706
call fcn.0040c460
call fcn.0040b930
call fcn.0040a1ec
call fcn.00409a90
call fcn.00409076
call fcn.004081f4
call fcn.00408011
call fcn.00407ca7
call fcn.00406850
call fcn.004041b1
call fcn.004035b8
call fcn.004033a4
call fcn.00407f3f
call fcn.0040583a
mov ebx, eax
and ebx, ebx
jne 0x4010a5
mov eax, str.Error:_Cant_initialize_the_network__
push eax
call fcn.00401bba
jmp 0x401b5e
mov dword [0x4e46d0], 0x4af6
push 0x3e8
call fcn.0040b990
mov dword [0x4e46d8], eax
mov edx, dword [0x4e510c]
push edx
push edx
mov edx, str.Starting_application_listenport
push edx
call fcn.0040cb10
mov edx, dword [0x4e510c]
push edx
push edx
mov eax, dword [0x4e46d0]
cdq
push edx
push eax
call fcn.004028b0
pop eax
mov edx, dword [0x4e1834]
add dword [esp], edx
call fcn.00401bba
pop dword [0x4e510c]
mov edx, 0x4e1020
lea ecx, [0x4e46b8]
call fcn.00402008
mov edx, 0x4e1020
lea ecx, [0x4e46f0]
call fcn.00402008
push dword [0x4e46d0]
push 0
call fcn.00405be2
and eax, eax
je 0x401b5e
call fcn.00405e70
mov dword [0x4e469c], eax
cmp dword [0x4e469c], 0
je 0x401b45
call fcn.00405e93
mov dword [0x4e46f8], eax
push dword [0x4e469c]
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4011af
mov edx, dword [0x4e510c]
push edx
push edx
mov edx, str.Server:_Connect_from
push edx
call fcn.0040cb10
mov edx, dword [0x4e510c]
push edx
push edx
push 0
push dword [0x4e46f8]
call fcn.00405e99
push eax
call fcn.00405f02
pop eax
mov edx, dword [0x4e1834]
add dword [esp], edx
call fcn.00401bba
pop dword [0x4e510c]
jmp 0x401b44
mov ebx, 2
cmp ebx, dword [esp]
jne 0x401b05
push 0x3e8
push dword [0x4e46d8]
push dword [0x4e46f8]
call fcn.00405f89
mov edx, dword [0x4e510c]
push edx
push edx
push 2
push 0xffffffff
push dword [0x4e46d8]
call fcn.0040b9b0
push 0x4e46b8
call fcn.0040cb70
push dword [0x4e46b8]
call fcn.00402a10
mov ebx, eax
cmp ebx, 0xd
jne 0x401adb
mov edx, dword [0x4e510c]
push edx
push edx
mov edx, str.Received_:
push edx
call fcn.0040cb10
mov edx, dword [0x4e46f0]
push edx
call fcn.0040cb10
mov edx, dword [0x4e1834]
add dword [esp], edx
call fcn.00401bba
pop dword [0x4e510c]
mov edx, dword [0x4e510c]
push edx
push edx
mov eax, 0x4e102e
push eax
push dword [0x4e46f0]
call fcn.00402aa0
mov ebx, eax
dec ebx
push ebx
push dword [0x4e46f0]
call fcn.00402b00
push 0x4e46a0
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push dword [0x4e46a0]
call fcn.00402b70
mov ebx, eax
add ebx, 0xfffffffa
push ebx
push dword [0x4e46a0]
call fcn.00402ba0
push 0x4e46a0
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push dword [0x4e510c]
mov eax, 0x4e1040
push eax
mov edx, dword [0x4e510c]
push edx
push edx
push dword [0x4e46f0]
call fcn.00402c20
mov edx, dword [0x4e1834]
add dword [esp], edx
call fcn.00402aa0
pop dword [0x4e510c]
mov ebx, eax
dec ebx
push ebx
push dword [0x4e46f0]
call fcn.00402ba0
push 0x4e4698
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push dword [0x4e4698]
call fcn.00402b70
mov ebx, eax
dec ebx
push ebx
push dword [0x4e4698]
call fcn.00402b00
push 0x4e4698
call fcn.0040cb70
call fcn.004070c9
mov eax, 0x4e1020
push eax
mov eax, 0x4e1020
push eax
mov eax, str.TOTPDB.dat
push eax
push 1
call fcn.00407d32
and eax, eax
je 0x401aa4
mov edx, dword [0x4e510c]
push edx
push edx
mov edx, str.SELECT__from_users_WHERE_login
push edx
call fcn.0040cb10
mov edx, dword [0x4e46a0]
push edx
call fcn.0040cb10
mov edx, 0x4e102a
push edx
call fcn.0040cb10
add dword [0x4e510c], 2
push 1
mov edx, dword [0x4e1834]
add dword [esp + 4], edx
call fcn.00407d8c
pop dword [0x4e510c]
push 1
call fcn.00407d9e
and eax, eax
je 0x401a88
mov edx, dword [0x4e510c]
push edx
push edx
push 2
push 1
call fcn.00407dc6
push 0x4e46b0
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push 3
push 1
call fcn.00407dc6
push 0x4e46a4
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push 4
push 1
call fcn.00407dc6
push 0x4e46c8
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push 5
push 1
call fcn.00407dc6
push 0x4e4700
call fcn.0040cb70
push 1
call fcn.00407be3
mov edx, dword [0x4e510c]
push edx
push edx
push dword [0x4e4698]
call fcn.00402b70
mov ebx, eax
add ebx, 0xfffffffa
push ebx
push dword [0x4e4698]
call fcn.00402b00
add dword [0x4e510c], 2
mov edx, dword [0x4e4700]
pop ecx
mov dword [0x4e510c], ecx
add ecx, dword [0x4e1834]
call fcn.00402050
je 0x401a6a
mov eax, str.Pincode_correct.
push eax
call fcn.00401bba
mov edx, dword [0x4e510c]
push edx
push edx
push dword [0x4e510c]
push 6
push dword [0x4e4698]
call fcn.00402ba0
add dword [0x4e510c], 2
push dword [0x4e46c8]
mov edx, dword [0x4e1834]
add dword [esp + 4], edx
call fcn.00401c4a
pop dword [0x4e510c]
mov ebx, eax
cmp ebx, 1
jne 0x401a4c
mov eax, str.TOTP_Correct.
push eax
call fcn.00401bba
mov edx, 0x4e1020
lea ecx, [0x4e46dc]
call fcn.00402008
mov dword [0x4e46cc], 1
jmp 0x4014fd
mov eax, 9
cmp eax, dword [0x4e46cc]
jl 0x401610
push 0x64
call fcn.00403e80
mov dword [0x4e46f4], eax
mov ebx, dword [0x4e46f4]
cmp ebx, 0x21
jg 0x401562
mov edx, dword [0x4e46dc]
push dword [0x4e510c]
push edx
call fcn.0040cb10
mov edx, dword [0x4e510c]
push edx
push edx
push 0x41
push 0x5a
call fcn.00403e60
push eax
call fcn.00402cc0
pop eax
push 0x4e46dc
call fcn.0040cb70
mov ebx, dword [0x4e46f4]
cmp ebx, 0x21
jle 0x40157f
mov ebx, dword [0x4e46f4]
cmp ebx, 0x42
jg 0x40157f
mov eax, 1
jmp 0x401581
xor eax, eax
and eax, eax
je 0x4015bf
mov edx, dword [0x4e46dc]
push dword [0x4e510c]
push edx
call fcn.0040cb10
mov edx, dword [0x4e510c]
push edx
push edx
push 0x61
push 0x7a
call fcn.00403e60
push eax
call fcn.00402cc0
pop eax
push 0x4e46dc
call fcn.0040cb70
mov ebx, dword [0x4e46f4]
cmp ebx, 0x42
jle 0x401604
mov edx, dword [0x4e46dc]
push dword [0x4e510c]
push edx
call fcn.0040cb10
mov edx, dword [0x4e510c]
push edx
push edx
push 0x30
push 0x39
call fcn.00403e60
push eax
call fcn.00402cc0
pop eax
push 0x4e46dc
call fcn.0040cb70
inc dword [0x4e46cc]
jno 0x4014fd
mov edx, dword [0x4e46dc]
push dword [0x4e510c]
push edx
call fcn.0040cb10
mov edx, 0x4e1026
push edx
call fcn.0040cb10
push 0x4e46dc
call fcn.0040cb70
mov eax, 0x4e1020
push eax
mov eax, 0x4e1020
push eax
mov eax, str.TOTPDB.dat
push eax
push 1
call fcn.00407d32
and eax, eax
je 0x401a4a
mov eax, str.SELECT__from_settings
push eax
push 1
call fcn.00407d8c
push 1
call fcn.00407d9e
and eax, eax
je 0x401a2f
mov edx, dword [0x4e510c]
push edx
push edx
push 0
push 1
call fcn.00407dc6
push 0x4e46c4
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push 1
push 1
call fcn.00407dc6
push 0x4e46e8
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push 2
push 1
call fcn.00407dc6
push 0x4e46b4
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push 4
push 1
call fcn.00407dc6
push 0x4e46e4
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push 3
push 1
call fcn.00407dc6
push 0x4e46ac
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push 5
push 1
call fcn.00407dc6
push 0x4e46e0
call fcn.0040cb70
push dword [0x4e46b0]
mov edx, 0x4e1020
pop ecx
call fcn.00402050
jne 0x401839
push dword [0x4e46dc]
call fcn.00401df0
mov eax, str.New_information_by_generated_image
push eax
push dword [0x4e46e4]
push 0xa
call fcn.0040424e
and eax, eax
je 0x401839
mov eax, str.Dear_user__r_n_r_nThe_requested_information_is_included_in_this_e_mail_as_an_image._r_n_r_nRegards__TOTP
push eax
push 0xa
call fcn.00404264
push 1
push dword [0x4e46b0]
push 0xa
call fcn.004042c1
mov eax, str.image_x_rgb
push eax
mov eax, 0x4e1044
push eax
mov eax, str.nieuw.bmp
push eax
push 0xa
call fcn.00404389
mov edx, dword [0x4e510c]
push edx
push edx
mov edx, str.Versturen_:
push edx
call fcn.0040cb10
push dword [0x4e46ac]
push dword [0x4e46b4]
push 1
push dword [0x4e46e8]
call fcn.00402ce0
push eax
push dword [0x4e46c4]
push 0xa
call fcn.004049f7
mov edx, dword [0x4e510c]
push edx
push edx
cdq
push edx
push eax
call fcn.004028b0
pop eax
mov edx, dword [0x4e1834]
add dword [esp], edx
call fcn.00401bba
pop dword [0x4e510c]
mov edx, str.E_mail
lea ecx, [0x4e46a8]
call fcn.00402008
push dword [0x4e46a4]
mov edx, 0x4e1020
pop ecx
call fcn.00402050
jne 0x401915
mov edx, dword [0x4e510c]
push edx
push edx
push dword [0x4e46a4]
mov eax, str._phone_
push eax
push dword [0x4e46e0]
call fcn.00403160
push 0x4e46fc
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push dword [0x4e46dc]
mov eax, str._newpwd_
push eax
push dword [0x4e46fc]
call fcn.00403160
push 0x4e46fc
call fcn.0040cb70
mov edx, dword [0x4e510c]
push edx
push edx
push dword [0x4e46fc]
call fcn.00405240
push 0x4e46fc
call fcn.0040cb70
push 2
mov eax, 0x4e1020
push eax
push dword [0x4e46fc]
mov eax, str.Microbrowser.exe
push eax
call fcn.00403625
mov dword [0x4e46ec], eax
push dword [0x4e46a8]
mov edx, str.E_mail
pop ecx
call fcn.00402050
je 0x401905
mov edx, str.E_mail_and_SMS
lea ecx, [0x4e46a8]
call fcn.00402008
jmp 0x401915
mov edx, 0x4e1332
lea ecx, [0x4e46a8]
call fcn.00402008
mov edx, dword [0x4e510c]
push edx
push edx
mov edx, str.The_information_entered_is_ok._Your_new_password_will_ben_sent_to_you_by
push edx
call fcn.0040cb10
mov edx, dword [0x4e46a8]
push edx
call fcn.0040cb10
add dword [0x4e510c], 2
push dword [0x4e46f8]
mov edx, dword [0x4e1834]
add dword [esp + 4], edx
call fcn.0040607a
pop dword [0x4e510c]
push dword [0x4e510c]
push 3
mov eax, 0x4e1020
push eax
push dword [0x4e510c]
mov edx, str.user
push edx
call fcn.0040cb10
mov edx, dword [0x4e46a0]
push edx
call fcn.0040cb10
mov edx, 0x4e1022
push edx
call fcn.0040cb10
mov edx, dword [0x4e46dc]
push edx
call fcn.0040cb10
mov edx, str.__DOMAIN
push edx
call fcn.0040cb10
add dword [0x4e510c], 2
mov eax, str.c:windows_system32_net.exe
push eax
mov edx, dword [0x4e1834]
add dword [esp + 4], edx
call fcn.00403625
pop dword [0x4e510c]
mov dword [0x4e46d4], eax
push dword [0x4e510c]
push 3
mov eax, 0x4e1020
push eax
push dword [0x4e510c]
mov edx, str.user
push edx
call fcn.0040cb10
mov edx, dword [0x4e46a0]
push edx
call fcn.0040cb10
mov edx, str.__active:yes__DOMAIN
push edx
call fcn.0040cb10
add dword [0x4e510c], 2
mov eax, str.c:windows_system32_net.exe
push eax
mov edx, dword [0x4e1834]
add dword [esp + 4], edx
call fcn.00403625
pop dword [0x4e510c]
mov dword [0x4e46d4], eax
jmp 0x401a40
mov eax, str.No_settings_set
push eax
mov eax, str.Error_
push eax
call fcn.0040340e
push 1
call fcn.00407be3
jmp 0x401a68
mov eax, str.TOTP_Incorrect.
push eax
call fcn.00401bba
mov eax, str.Incorrect_data_was_entered._Nothing_done.__Error_1_
push eax
push dword [0x4e46f8]
call fcn.0040607a
jmp 0x401a86
mov eax, 0x4e15ec
push eax
call fcn.00401bba
mov eax, str.Incorrect_data_was_entered._Nothing_done.__Error_2_
push eax
push dword [0x4e46f8]
call fcn.0040607a
jmp 0x401aa4
mov eax, str.User_unknown
push eax
call fcn.00401bba
mov eax, str.Incorrect_data_was_entered._Nothing_done.__Error_3_
push eax
push dword [0x4e46f8]
call fcn.0040607a
push dword [0x4e46f8]
call fcn.0040608c
mov edx, 0x4e1020
lea ecx, [0x4e46f0]
call fcn.00402008
push dword [0x4e46d8]
call fcn.0040bad0
push 0x3e8
call fcn.0040b990
mov dword [0x4e46d8], eax
jmp 0x401b03
mov edx, dword [0x4e46f0]
push dword [0x4e510c]
push edx
call fcn.0040cb10
mov edx, dword [0x4e46b8]
push edx
call fcn.0040cb10
push 0x4e46f0
call fcn.0040cb70
jmp 0x401b44
mov ebx, 4
cmp ebx, dword [esp]
jne 0x401b44
mov eax, str.Server:_Disconnect
push eax
call fcn.00401bba
mov edx, 0x4e1020
lea ecx, [0x4e46f0]
call fcn.00402008
push dword [0x4e46d8]
call fcn.0040bad0
push 0x3e8
call fcn.0040b990
mov dword [0x4e46d8], eax
pop eax
mov ebx, dword [0x4e46c0]
cmp ebx, 1
jne 0x401133
push 0
call fcn.00405789
push 0
call fcn.00401b7d
call fcn.0040cae0
push dword [0x4e4690]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess