Function at 0x401000
Capabilities:
Allocate thread local storage
Get disk size
Log keystrokes via polling

Disassembly:
push 0x118
push 0
push 0x441bc0
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x441bc4], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x441bc0], eax
call fcn.00429c60
call fcn.00428eeb
call fcn.0042893d
call fcn.00427da0
call fcn.004275c1
call fcn.004275b5
call fcn.00427540
call fcn.00426b60
call fcn.00424c9c
call fcn.00424540
call fcn.00423a5a
call fcn.0042395a
call fcn.00423629
call fcn.00422b80
call fcn.004218de
call fcn.0041eb3d
call fcn.0041e4c1
call fcn.004043a0
mov edx, dword [0x44205c]
push edx
push edx
call fcn.00427756
push 0x441c38
call fcn.00429ce0
push dword [0x44205c]
push 3
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str._c_mode_con_lines4_cols60__color_e__Data_aria2c.exe___c__x4__s4___check_certificatefalse___console_log_levelerror___allow_overwritetrue___dir
push edx
call fcn.00429d60
mov edx, dword [0x441c38]
push edx
call fcn.00429d60
mov edx, str._https:__getspace.cloud_cloud_s_NfjY3FrQmR9gRpf_download_all2.txt
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.cmd.exe
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e546
pop dword [0x44205c]
mov edx, dword [0x44205c]
push edx
push edx
push dword [0x44205c]
call fcn.00427756
mov edx, 0x440600
push edx
call fcn.00429d60
add dword [0x44205c], 2
push 0xd
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.00427fb0
pop dword [0x44205c]
mov edx, dword [0x44205c]
push edx
push edx
push 0xd
call fcn.00428160
push 0x441cc8
call fcn.00429ce0
push 0xd
call fcn.00427cd0
mov eax, str.DataTTC.txt
push eax
push 0xe
call fcn.00427fb0
mov edx, dword [0x44205c]
push edx
push edx
push 0xe
call fcn.00428160
push 0x441c88
call fcn.00429ce0
push 0xe
call fcn.00427cd0
mov eax, str.DataTTC.txt
push eax
push 0
call fcn.00427fb0
and eax, eax
je 0x4013cf
mov dword [0x441c70], 0
push 0
call fcn.00428180
mov ebx, eax
and ebx, ebx
jne 0x4013c5
inc dword [0x441c70]
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c58
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c90
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c04
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441cbc
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c08
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c40
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c0c
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c3c
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441cc4
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c64
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c24
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c8c
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c9c
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441ca4
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c4c
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c74
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.00428160
push 0x441c28
call fcn.00429ce0
jmp 0x4013c5
push 0
call fcn.00427cd0
mov eax, 0x44002a
push eax
push dword [0x441cc8]
call fcn.00426e10
mov dword [0x441c84], eax
mov eax, 0x44002a
push eax
push dword [0x441c88]
call fcn.00426e10
mov dword [0x441c44], eax
mov eax, 0x44002a
push eax
push dword [0x441c28]
call fcn.00426e10
mov dword [0x441c48], eax
mov edx, str.soft
lea ecx, [0x441c10]
call fcn.00404008
push dword [0x44205c]
mov eax, 0x440652
push eax
mov eax, str.SoftwareMicrosoftWindows_NTCurrentVersion
push eax
push 0x80000002
call fcn.0040379d
push 0x441cb0
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 2
mov edx, dword [0x44205c]
push edx
push edx
call fcn.004277b9
mov edx, dword [0x4407c4]
add dword [esp], edx
call fcn.00426ea0
push 0x441c7c
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push dword [0x441c7c]
call fcn.00426f10
push 0x441cac
call fcn.00429ce0
push 0x441bc8
push 0x441be0
push 0x441bf0
push dword [0x441cac]
call sub.KERNEL32.dll_GetDiskFreeSpaceExW
fild qword [0x441be0]
fdiv qword [0x44079c]
fstp qword [0x441bd8]
fild qword [0x441bf0]
fdiv qword [0x44079c]
fstp qword [0x441be8]
fld qword [0x441be8]
fcomp qword [0x4407a4]
fnstsw ax
test ah, 1
je 0x4014f3
mov dword [0x441c98], 0x924e3
jmp 0x4014fd
mov dword [0x441c98], 0xff0000
mov edx, 0x44027c
lea ecx, [0x441c18]
call fcn.00404008
fld qword [0x441bd8]
fcomp qword [0x4407ac]
fnstsw ax
test ah, 0x41
jne 0x401542
fld qword [0x441bd8]
fdiv qword [0x4407ac]
fstp qword [0x441bd8]
mov edx, 0x44011c
lea ecx, [0x441c18]
call fcn.00404008
fld qword [0x441bd8]
fcomp qword [0x4407b4]
fnstsw ax
test ah, 1
je 0x401577
fld qword [0x441bd8]
fmul qword [0x4407ac]
fstp qword [0x441bd8]
mov edx, 0x4405fa
lea ecx, [0x441c18]
call fcn.00404008
push 7
mov eax, str.Microsoft_Sans_Serif
push eax
push 1
call fcn.004276d7
push 0xb
mov eax, str.Tahoma
push eax
push 2
call fcn.004276d7
mov ebx, dword [0x441c48]
inc ebx
imul ebx, ebx, 0x14
mov dword [0x441cb4], ebx
mov ebx, dword [0x441cb4]
add ebx, 0x2c
mov dword [0x441cb8], ebx
push 0xca0001
mov eax, str.TTC2024_v1.0
push eax
push dword [0x441cb8]
push 0x162
push 0
push 0
push 0
call fcn.00421949
and eax, eax
je 0x401ab0
push dword [0x441cb0]
push 0xe
push 0x82
push 7
push 5
push 0x6f
call fcn.0041ee78
push 1
call fcn.004276ed
push eax
push 0x6f
call fcn.0041ee98
push 0xff0000
push 1
push 0x6f
call fcn.0041ef07
push dword [0x44205c]
mov edx, dword [0x441cac]
push dword [0x44205c]
push edx
call fcn.00429d60
mov edx, 0x44002a
push edx
call fcn.00429d60
mov edx, dword [0x44205c]
push edx
push edx
push 1
lea edx, [0x441bd8]
push dword [edx + 4]
push dword [edx]
call fcn.00426f80
pop eax
mov edx, 0x44002a
push edx
call fcn.00429d60
mov edx, dword [0x441c18]
push edx
call fcn.00429d60
add dword [0x44205c], 2
push 0xf
push 0x46
push 0x15
push 5
push 0xde
mov edx, dword [0x4407c4]
add dword [esp + 0x14], edx
call fcn.0041ee78
pop dword [0x44205c]
push 1
call fcn.004276ed
push eax
push 0xde
call fcn.0041ee98
push dword [0x441c98]
push 1
push 0xde
call fcn.0041ef07
mov edx, dword [0x44205c]
push edx
push edx
mov edx, 0x4405b8
push edx
call fcn.00429d60
mov edx, dword [0x44205c]
push edx
push edx
push 1
lea edx, [0x441be8]
push dword [edx + 4]
push dword [edx]
call fcn.00426f80
pop eax
mov edx, 0x44002a
push edx
call fcn.00429d60
mov edx, dword [0x441c18]
push edx
call fcn.00429d60
add dword [0x44205c], 2
push 0xf
push 0x46
push 0x15
push 0x4b
push 0xdf
mov edx, dword [0x4407c4]
add dword [esp + 0x14], edx
call fcn.0041ee78
pop dword [0x44205c]
push 1
call fcn.004276ed
push eax
push 0xdf
call fcn.0041ee98
push dword [0x441c98]
push 1
push 0xdf
call fcn.0041ef07
mov eax, str.Soft_folder_:_
push eax
push 0xe
push 0x5a
push 7
push 0xb9
push 8
call fcn.0041ee78
push 1
call fcn.004276ed
push eax
push 8
call fcn.0041ee98
mov edx, dword [0x44205c]
push edx
push edx
mov edx, str.Total_:
push edx
call fcn.00429d60
mov edx, dword [0x44205c]
push edx
push edx
mov eax, dword [0x441c84]
cdq
push edx
push eax
call fcn.00427170
pop eax
mov edx, str.____CtrlA__
push edx
call fcn.00429d60
add dword [0x44205c], 2
push 0xf
push 0x5a
push 0x15
push 0xb9
push 9
mov edx, dword [0x4407c4]
add dword [esp + 0x14], edx
call fcn.0041ee78
pop dword [0x44205c]
push 1
call fcn.004276ed
push eax
push 9
call fcn.0041ee98
mov eax, 0x440028
push eax
push 0x19
push 0x36
push 8
push 0x122
push 0xa
call fcn.0041f203
push 5
push 1
push 0xa
call fcn.0041f24c
push 2
call fcn.004276ed
push eax
push 0xa
call fcn.0041ee98
push 0xd8d16e
push 2
push 0xa
call fcn.0041ef07
push 0x82
mov eax, str.___________Group_
push eax
push dword [0x441cb4]
push 0x8c
push 0x28
push 3
push 6
call fcn.0041ffa3
push 0xe2fdfa
push 2
push 6
call fcn.0041ef07
push 0xba
mov eax, str.________________Programs__
push eax
push dword [0x441cb4]
push 0xcf
push 0x28
push 0x91
push 7
call fcn.0041ffa3
push 0xf9f9e4
push 2
push 7
call fcn.0041ef07
mov dword [0x441c50], 1
jmp 0x40193d
mov eax, dword [0x441c48]
cmp eax, dword [0x441c50]
jl 0x401991
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c28]
call fcn.004272d0
push 0x441cc0
call fcn.00429ce0
push dword [0x441cc0]
push dword [0x441c50]
push 6
call fcn.00420708
inc dword [0x441c50]
jno 0x40193d
push 0x1f
push 0x20041
push 0
call fcn.00421cbf
push 0x20
push 0x6a
push 0
call fcn.00421cbf
push 0x21
push 0xd
push 0
call fcn.00421cbf
push 0x22
push 0x70
push 0
call fcn.00421cbf
mov edx, dword [0x44205c]
push edx
push edx
call fcn.004277b9
mov edx, str.soft
push edx
call fcn.00429d60
push 0x441c20
call fcn.00429ce0
mov eax, 0x4405d8
push eax
push dword [0x441c20]
push 0
call fcn.0042784c
and eax, eax
je 0x401a7e
push 0
call fcn.004279ab
and eax, eax
je 0x401a74
mov edx, dword [0x44205c]
push edx
push edx
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.004277fe
mov edx, dword [0x4407c4]
add dword [esp], edx
call fcn.00427490
push 0x441c1c
call fcn.00429ce0
push dword [0x441c1c]
push 0xffffffff
push 7
call fcn.00420708
jmp 0x401a1d
push 0
call fcn.00427979
push 0
push 7
call fcn.00420769
push 0
push 7
call fcn.00420769
push 0x64
push 2
push 0
call fcn.00421dc8
call fcn.00421f22
mov dword [0x441ca0], eax
push dword [0x441ca0]
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x401ae0
call fcn.00428a57
push eax
mov ebx, 0x22
cmp ebx, dword [esp]
jne 0x401adf
call fcn.004036d7
pop eax
pop eax
call fcn.00428a66
mov dword [0x441c14], eax
mov ebx, dword [0x441ca0]
cmp ebx, 0x332c
jne 0x401b0b
mov ebx, dword [0x441c14]
cmp ebx, 6
jne 0x401b0b
mov eax, 1
jmp 0x401b0d
xor eax, eax
and eax, eax
je 0x402513
push 6
call fcn.004207a1
mov dword [0x441c68], eax
mov ebx, dword [0x441c68]
and ebx, ebx
jne 0x401bc2
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c58]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x401b6e
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x401bc2
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c58]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x401b6e
mov ebx, dword [0x441c68]
cmp ebx, 1
jne 0x401c61
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c90]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x401c0d
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x401c61
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c90]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x401c0d
mov ebx, dword [0x441c68]
cmp ebx, 2
jne 0x401d00
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c04]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x401cac
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x401d00
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c04]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x401cac
mov ebx, dword [0x441c68]
cmp ebx, 3
jne 0x401d9f
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441cbc]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x401d4b
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x401d9f
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441cbc]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x401d4b
mov ebx, dword [0x441c68]
cmp ebx, 4
jne 0x401e3e
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c08]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x401dea
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x401e3e
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c08]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x401dea
mov ebx, dword [0x441c68]
cmp ebx, 5
jne 0x401edd
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c40]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x401e89
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x401edd
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c40]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x401e89
mov ebx, dword [0x441c68]
cmp ebx, 6
jne 0x401f7c
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c0c]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x401f28
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x401f7c
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c0c]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x401f28
mov ebx, dword [0x441c68]
cmp ebx, 7
jne 0x40201b
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c3c]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x401fc7
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x40201b
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c3c]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x401fc7
mov ebx, dword [0x441c68]
cmp ebx, 8
jne 0x4020ba
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441cc4]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x402066
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x4020ba
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441cc4]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x402066
mov ebx, dword [0x441c68]
cmp ebx, 9
jne 0x402159
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c64]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x402105
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x402159
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c64]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x402105
mov ebx, dword [0x441c68]
cmp ebx, 0xa
jne 0x4021f8
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c24]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x4021a4
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x4021f8
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c24]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x4021a4
mov ebx, dword [0x441c68]
cmp ebx, 0xb
jne 0x402297
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c8c]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x402243
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x402297
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c8c]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x402243
mov ebx, dword [0x441c68]
cmp ebx, 0xc
jne 0x402336
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c9c]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x4022e2
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x402336
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c9c]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x4022e2
mov ebx, dword [0x441c68]
cmp ebx, 0xd
jne 0x4023d5
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441ca4]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x402381
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x4023d5
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441ca4]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x402381
mov ebx, dword [0x441c68]
cmp ebx, 0xe
jne 0x402474
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c4c]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x402420
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x402474
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c4c]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x402420
mov ebx, dword [0x441c68]
cmp ebx, 0xf
jne 0x402513
push 7
call fcn.004207ce
mov eax, 0x440028
push eax
push 0xa
call fcn.004207f1
mov eax, 0x44002a
push eax
push dword [0x441c74]
call fcn.00426e10
mov dword [0x441cd4], eax
mov dword [0x441c50], 1
jmp 0x4024bf
mov eax, dword [0x441cd4]
cmp eax, dword [0x441c50]
jl 0x402513
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c50]
push dword [0x441c74]
call fcn.004272d0
push 0x441c80
call fcn.00429ce0
push dword [0x441c80]
push dword [0x441c50]
push 7
call fcn.00420708
inc dword [0x441c50]
jno 0x4024bf
mov ebx, dword [0x441ca0]
cmp ebx, 0x332c
jne 0x402533
mov ebx, dword [0x441c14]
cmp ebx, 7
jne 0x402533
mov eax, 1
jmp 0x402535
xor eax, eax
and eax, eax
je 0x402e63
mov edx, 0x440028
lea ecx, [0x441c94]
call fcn.00404008
push 7
call fcn.004207a1
mov dword [0x441c6c], eax
mov edx, dword [0x44205c]
push edx
push edx
push dword [0x441c6c]
push 7
call fcn.00420872
push 0x441ca8
call fcn.00429ce0
call fcn.00428a75
mov ebx, eax
cmp ebx, 1
jne 0x402957
push 1
push 6
call fcn.00420888
push 1
push 7
call fcn.00420888
push 1
push 0
call fcn.00421f2a
mov eax, str.soft
push eax
call fcn.004279ef
mov edx, dword [0x44205c]
push edx
push edx
push dword [0x441ca8]
call fcn.00427a6f
push 0x441c30
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
mov edx, str.soft_
push edx
call fcn.00429d60
mov edx, dword [0x441ca8]
push edx
call fcn.00429d60
mov edx, dword [0x4407c4]
add dword [esp], edx
call fcn.00427b2c
pop dword [0x44205c]
push edx
push eax
pop dword [0x441bd0]
pop dword [0x441bd4]
mov edx, dword [0x44205c]
push edx
push edx
push dword [0x441ca8]
call fcn.00427490
push 0x441c60
call fcn.00429ce0
push dword [0x441c30]
mov edx, 0x440028
pop ecx
call fcn.00404060
je 0x402702
mov edx, dword [0x441c60]
push dword [0x44205c]
push edx
call fcn.00429d60
mov edx, str..exe
push edx
call fcn.00429d60
push 0x441c94
call fcn.00429ce0
push dword [0x44205c]
push 1
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str._c_mode_con_lines4_cols60__color_e__Data_aria2c.exe___c__x4__s4___check_certificatefalse___console_log_levelerror___allow_overwritetrue___dir_
push edx
call fcn.00429d60
mov edx, dword [0x441c10]
push edx
call fcn.00429d60
mov edx, str.__https:__getspace.cloud_cloud_s_rFSLGtZKpfbxZNt_download_path
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.cmd.exe
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e546
pop dword [0x44205c]
mov eax, 0x440028
push eax
mov eax, str.soft
push eax
mov eax, str.explorer
push eax
call fcn.0041e52e
jmp 0x40292a
push dword [0x441c30]
mov edx, 0x440778
pop ecx
call fcn.00404060
jne 0x40272a
push dword [0x441c30]
mov edx, 0x44045a
pop ecx
call fcn.00404060
jne 0x40272a
jmp 0x402731
mov eax, 1
jmp 0x402733
xor eax, eax
and eax, eax
je 0x4027da
mov edx, dword [0x441ca8]
push dword [0x44205c]
push edx
call fcn.00429d60
push 0x441c94
call fcn.00429ce0
push dword [0x44205c]
push 1
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str._c_mode_con_lines4_cols60__color_e__Data_aria2c.exe__c__x4__s4___check_certificatefalse___console_log_levelerror___allow_overwritetrue___dir_
push edx
call fcn.00429d60
mov edx, dword [0x441c10]
push edx
call fcn.00429d60
mov edx, str.__https:__getspace.cloud_cloud_s_rFSLGtZKpfbxZNt_download_path
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.cmd.exe
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e546
pop dword [0x44205c]
mov eax, 0x440028
push eax
mov eax, str.soft
push eax
mov eax, str.explorer
push eax
call fcn.0041e52e
jmp 0x40292a
push dword [0x441c30]
mov edx, 0x4400a0
pop ecx
call fcn.00404060
je 0x402890
mov edx, dword [0x441ca8]
push dword [0x44205c]
push edx
call fcn.00429d60
push 0x441c94
call fcn.00429ce0
push dword [0x44205c]
push 1
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str._c_mode_con_lines4_cols60__color_e__Data_aria2c.exe__c__x4__s4___check_certificatefalse___console_log_levelerror___allow_overwritetrue___dir_
push edx
call fcn.00429d60
mov edx, dword [0x441c10]
push edx
call fcn.00429d60
mov edx, str.__https:__getspace.cloud_cloud_s_rFSLGtZKpfbxZNt_download_path
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.cmd.exe
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e546
pop dword [0x44205c]
mov eax, 0x440028
push eax
mov eax, str.soft
push eax
mov eax, str.explorer
push eax
call fcn.0041e52e
jmp 0x40292a
mov edx, dword [0x441ca8]
push dword [0x44205c]
push edx
call fcn.00429d60
push 0x441c94
call fcn.00429ce0
push dword [0x44205c]
push 1
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str._c_mode_con_lines4_cols60__color_e__Data_aria2c.exe__c__x4__s4___check_certificatefalse___console_log_levelerror___allow_overwritetrue___dir_
push edx
call fcn.00429d60
mov edx, dword [0x441c10]
push edx
call fcn.00429d60
mov edx, str.__https:__getspace.cloud_cloud_s_rFSLGtZKpfbxZNt_download_path
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.cmd.exe
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e546
pop dword [0x44205c]
mov eax, 0x440028
push eax
mov eax, str.soft
push eax
mov eax, str.explorer
push eax
call fcn.0041e52e
push 0
push 6
call fcn.00420888
push 0
push 7
call fcn.00420888
push 0
push 0
call fcn.00421f2a
call fcn.00428a75
mov ebx, eax
cmp ebx, 2
jne 0x402e63
push 1
push 6
call fcn.00420888
push 1
push 7
call fcn.00420888
mov eax, str.soft
push eax
call fcn.004279ef
mov edx, dword [0x44205c]
push edx
push edx
push dword [0x441ca8]
call fcn.00427a6f
push 0x441c30
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
mov edx, str.soft_
push edx
call fcn.00429d60
mov edx, dword [0x441ca8]
push edx
call fcn.00429d60
mov edx, dword [0x4407c4]
add dword [esp], edx
call fcn.00427b2c
pop dword [0x44205c]
push edx
push eax
pop dword [0x441bd0]
pop dword [0x441bd4]
mov edx, dword [0x44205c]
push edx
push edx
push dword [0x441ca8]
call fcn.00427490
push 0x441c60
call fcn.00429ce0
push dword [0x441bd4]
push dword [0x441bd0]
pop ebx
pop edi
cmp edi, 0
jg 0x402a29
jl 0x402a25
cmp ebx, 0
ja 0x402a29
xor eax, eax
jmp 0x402a2e
mov eax, 1
or eax, eax
je 0x402ac7
push dword [0x441c30]
mov edx, 0x4400a0
pop ecx
call fcn.00404060
je 0x402a94
push dword [0x44205c]
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str.soft_
push edx
call fcn.00429d60
mov edx, dword [0x441ca8]
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.notepad.exe
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e52e
pop dword [0x44205c]
mov edx, dword [0x44205c]
push edx
push edx
mov edx, str.soft_
push edx
call fcn.00429d60
mov edx, dword [0x441ca8]
push edx
call fcn.00429d60
mov edx, dword [0x4407c4]
add dword [esp], edx
call fcn.0041ea8d
pop dword [0x44205c]
push dword [0x441bd4]
push dword [0x441bd0]
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x402adf
cmp edi, 0xffffffff
je 0x402ae3
xor eax, eax
jmp 0x402ae8
mov eax, 1
or eax, eax
je 0x402e63
push dword [0x441c30]
mov edx, 0x440028
pop ecx
call fcn.00404060
je 0x402bcd
mov edx, dword [0x441c60]
push dword [0x44205c]
push edx
call fcn.00429d60
mov edx, str..exe
push edx
call fcn.00429d60
push 0x441c94
call fcn.00429ce0
push dword [0x44205c]
push 1
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str._c_mode_con_lines4_cols60__color_e__Data_aria2c.exe__c__x4__s4___check_certificatefalse___console_log_levelerror___allow_overwritetrue___dir_
push edx
call fcn.00429d60
mov edx, dword [0x441c10]
push edx
call fcn.00429d60
mov edx, str.__https:__getspace.cloud_cloud_s_rFSLGtZKpfbxZNt_download_path
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.cmd.exe
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e546
pop dword [0x44205c]
mov edx, dword [0x44205c]
push edx
push edx
mov edx, str.soft_
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
mov edx, dword [0x4407c4]
add dword [esp], edx
call fcn.0041ea8d
pop dword [0x44205c]
jmp 0x402e45
push dword [0x441c30]
mov edx, 0x440778
pop ecx
call fcn.00404060
jne 0x402bf5
push dword [0x441c30]
mov edx, 0x44045a
pop ecx
call fcn.00404060
jne 0x402bf5
jmp 0x402bfc
mov eax, 1
jmp 0x402bfe
xor eax, eax
and eax, eax
je 0x402cc1
mov edx, dword [0x441ca8]
push dword [0x44205c]
push edx
call fcn.00429d60
push 0x441c94
call fcn.00429ce0
push dword [0x44205c]
push 1
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str._c_mode_con_lines4_cols60__color_e__Data_aria2c.exe__c__x4__s4___check_certificatefalse___console_log_levelerror___allow_overwritetrue___dir_
push edx
call fcn.00429d60
mov edx, dword [0x441c10]
push edx
call fcn.00429d60
mov edx, str.__https:__getspace.cloud_cloud_s_rFSLGtZKpfbxZNt_download_path
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.cmd.exe
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e546
pop dword [0x44205c]
mov edx, dword [0x44205c]
push edx
push edx
mov edx, str.soft_
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
mov edx, dword [0x4407c4]
add dword [esp], edx
call fcn.0041ea8d
pop dword [0x44205c]
jmp 0x402e45
push dword [0x441c30]
mov edx, 0x4400a0
pop ecx
call fcn.00404060
je 0x402dab
mov edx, dword [0x441ca8]
push dword [0x44205c]
push edx
call fcn.00429d60
push 0x441c94
call fcn.00429ce0
push dword [0x44205c]
push 1
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str._c_mode_con_lines4_cols60__color_e__Data_aria2c.exe__c__x4__s4___check_certificatefalse___console_log_levelerror___allow_overwritetrue___dir_
push edx
call fcn.00429d60
mov edx, dword [0x441c10]
push edx
call fcn.00429d60
mov edx, str.__https:__getspace.cloud_cloud_s_rFSLGtZKpfbxZNt_download_path
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.cmd.exe
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e546
pop dword [0x44205c]
push dword [0x44205c]
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str.soft_
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.notepad
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e52e
pop dword [0x44205c]
jmp 0x402e45
mov edx, dword [0x441ca8]
push dword [0x44205c]
push edx
call fcn.00429d60
push 0x441c94
call fcn.00429ce0
push dword [0x44205c]
push 1
mov eax, 0x440028
push eax
push dword [0x44205c]
mov edx, str._c_mode_con_lines4_cols60__color_e__Data_aria2c.exe__c__x4__s4___check_certificatefalse___console_log_levelerror___allow_overwritetrue___dir_
push edx
call fcn.00429d60
mov edx, dword [0x441c10]
push edx
call fcn.00429d60
mov edx, str.__https:__getspace.cloud_cloud_s_rFSLGtZKpfbxZNt_download_path
push edx
call fcn.00429d60
mov edx, dword [0x441c94]
push edx
call fcn.00429d60
add dword [0x44205c], 2
mov eax, str.cmd.exe
push eax
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.0041e546
pop dword [0x44205c]
mov eax, 0x440028
push eax
mov eax, str.soft
push eax
mov eax, str.explorer
push eax
call fcn.0041e52e
push 0
push 6
call fcn.00420888
push 0
push 7
call fcn.00420888
mov ebx, dword [0x441ca0]
cmp ebx, 0x3336
jne 0x402f1d
call fcn.00428a84
mov ebx, eax
cmp ebx, 2
jne 0x402f1d
push 0x11
call sub.USER32.dll_GetKeyState
mov ebx, eax
cmp ebx, 1
jle 0x402ead
push 0x41
call sub.USER32.dll_GetKeyState
mov ebx, eax
and ebx, ebx
jge 0x402ead
mov eax, 1
jmp 0x402eaf
xor eax, eax
and eax, eax
je 0x402f1d
push 7
call fcn.004207ce
mov dword [0x441c5c], 1
jmp 0x402ec9
mov eax, dword [0x441c84]
cmp eax, dword [0x441c5c]
jl 0x402f1d
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c5c]
push dword [0x441cc8]
call fcn.004272d0
push 0x441c34
call fcn.00429ce0
push dword [0x441c34]
push dword [0x441c5c]
push 7
call fcn.00420708
inc dword [0x441c5c]
jno 0x402ec9
mov ebx, dword [0x441ca0]
cmp ebx, 0x100
jne 0x403017
call fcn.00421f55
mov dword [0x441c78], eax
mov ebx, dword [0x441c78]
cmp ebx, 0x6a
jne 0x403017
push 7
call fcn.004207ce
push 0xa
call fcn.004207ce
mov edx, dword [0x44205c]
push edx
push edx
call fcn.004277b9
mov edx, str.soft
push edx
call fcn.00429d60
push 0x441c20
call fcn.00429ce0
mov eax, 0x4405d8
push eax
push dword [0x441c20]
push 0
call fcn.0042784c
and eax, eax
je 0x402ff9
push 0
call fcn.004279ab
and eax, eax
je 0x402fef
mov edx, dword [0x44205c]
push edx
push edx
mov edx, dword [0x44205c]
push edx
push edx
push 0
call fcn.004277fe
mov edx, dword [0x4407c4]
add dword [esp], edx
call fcn.00427490
push 0x441c1c
call fcn.00429ce0
push dword [0x441c1c]
push 0xffffffff
push 7
call fcn.00420708
jmp 0x402f98
push 0
call fcn.00427979
push 0
push 7
call fcn.00420769
push 0
push 7
call fcn.00420769
mov ebx, dword [0x441ca0]
cmp ebx, 0x332c
jne 0x403037
mov ebx, dword [0x441c14]
cmp ebx, 0xa
jne 0x403037
mov eax, 1
jmp 0x403039
xor eax, eax
and eax, eax
je 0x403691
push 0
push 0x4090409
call sub.USER32.dll_ActivateKeyboardLayout
mov edx, 0x440028
lea ecx, [0x441c00]
call fcn.00404008
mov edx, dword [0x44205c]
push edx
push edx
push 0xa
call fcn.004208b3
push 0x441c00
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push dword [0x441c00]
call fcn.00426f10
push 0x441bfc
call fcn.00429ce0
push dword [0x441c00]
call fcn.004274b0
mov dword [0x441cd0], eax
mov ebx, dword [0x441cd0]
and ebx, ebx
jne 0x4030b3
mov ebx, dword [0x441cd0]
cmp ebx, 1
jne 0x4031b8
push 7
call fcn.004207ce
mov edx, dword [0x44205c]
push edx
push edx
push 0xa
call fcn.004208b3
push 0x441c00
call fcn.00429ce0
mov dword [0x441c5c], 1
jmp 0x4030f4
mov eax, dword [0x441c84]
cmp eax, dword [0x441c5c]
jl 0x4031a8
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c5c]
push dword [0x441cc8]
call fcn.004272d0
push 0x441c34
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 1
push dword [0x441c34]
call fcn.00426ea0
push 0x441bf8
call fcn.00429ce0
push dword [0x441bf8]
mov edx, dword [0x441c00]
pop ecx
call fcn.00404060
jne 0x40317a
push dword [0x441bf8]
mov edx, dword [0x441bfc]
pop ecx
call fcn.00404060
jne 0x40317a
jmp 0x403181
mov eax, 1
jmp 0x403183
xor eax, eax
and eax, eax
je 0x40319c
push dword [0x441c34]
push 0xffffffff
push 7
call fcn.00420708
inc dword [0x441c5c]
jno 0x4030f4
push dword [0x441c6c]
push 7
call fcn.0042091b
mov ebx, dword [0x441cd0]
cmp ebx, 2
jne 0x4032e0
push 7
call fcn.004207ce
mov edx, dword [0x44205c]
push edx
push edx
push 0xa
call fcn.004208b3
push 0x441c00
call fcn.00429ce0
mov dword [0x441c54], 1
jmp 0x4031f9
mov eax, dword [0x441c84]
cmp eax, dword [0x441c54]
jl 0x4032d0
push dword [0x44205c]
push 5
push dword [0x44205c]
mov edx, 0x4405d0
push edx
call fcn.00429d60
mov edx, dword [0x441c00]
push edx
call fcn.00429d60
mov edx, 0x440032
push edx
call fcn.00429d60
add dword [0x44205c], 2
push 0
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.004043d0
pop dword [0x44205c]
and eax, eax
je 0x4032c4
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c54]
push dword [0x441cc8]
call fcn.004272d0
push 0x441c34
call fcn.00429ce0
push dword [0x441c34]
push 0
call fcn.00404580
and eax, eax
je 0x4032c4
push 0
call fcn.00404650
and eax, eax
je 0x4032c4
push dword [0x441c34]
push 0xffffffff
push 7
call fcn.00420708
jmp 0x40329f
inc dword [0x441c54]
jno 0x4031f9
push dword [0x441c6c]
push 7
call fcn.0042091b
mov ebx, dword [0x441cd0]
cmp ebx, 3
jne 0x403408
push 7
call fcn.004207ce
mov edx, dword [0x44205c]
push edx
push edx
push 0xa
call fcn.004208b3
push 0x441c00
call fcn.00429ce0
mov dword [0x441c54], 1
jmp 0x403321
mov eax, dword [0x441c84]
cmp eax, dword [0x441c54]
jl 0x4033f8
push dword [0x44205c]
push 5
push dword [0x44205c]
mov edx, 0x44002e
push edx
call fcn.00429d60
mov edx, dword [0x441c00]
push edx
call fcn.00429d60
mov edx, 0x440032
push edx
call fcn.00429d60
add dword [0x44205c], 2
push 0
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.004043d0
pop dword [0x44205c]
and eax, eax
je 0x4033ec
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c54]
push dword [0x441cc8]
call fcn.004272d0
push 0x441c34
call fcn.00429ce0
push dword [0x441c34]
push 0
call fcn.00404580
and eax, eax
je 0x4033ec
push 0
call fcn.00404650
and eax, eax
je 0x4033ec
push dword [0x441c34]
push 0xffffffff
push 7
call fcn.00420708
jmp 0x4033c7
inc dword [0x441c54]
jno 0x403321
push dword [0x441c6c]
push 7
call fcn.0042091b
mov ebx, dword [0x441cd0]
cmp ebx, 4
jne 0x403520
push 7
call fcn.004207ce
mov edx, dword [0x44205c]
push edx
push edx
push 0xa
call fcn.004208b3
push 0x441c00
call fcn.00429ce0
mov dword [0x441c54], 1
jmp 0x403449
mov eax, dword [0x441c84]
cmp eax, dword [0x441c54]
jl 0x403520
push dword [0x44205c]
push 5
push dword [0x44205c]
mov edx, 0x44002e
push edx
call fcn.00429d60
mov edx, dword [0x441c00]
push edx
call fcn.00429d60
mov edx, 0x440032
push edx
call fcn.00429d60
add dword [0x44205c], 2
push 0
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.004043d0
pop dword [0x44205c]
and eax, eax
je 0x403514
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c54]
push dword [0x441cc8]
call fcn.004272d0
push 0x441c34
call fcn.00429ce0
push dword [0x441c34]
push 0
call fcn.00404580
and eax, eax
je 0x403514
push 0
call fcn.00404650
and eax, eax
je 0x403514
push dword [0x441c34]
push 0xffffffff
push 7
call fcn.00420708
jmp 0x4034ef
inc dword [0x441c54]
jno 0x403449
mov ebx, dword [0x441cd0]
cmp ebx, 5
jne 0x403638
push 7
call fcn.004207ce
mov edx, dword [0x44205c]
push edx
push edx
push 0xa
call fcn.004208b3
push 0x441c00
call fcn.00429ce0
mov dword [0x441c54], 1
jmp 0x403561
mov eax, dword [0x441c84]
cmp eax, dword [0x441c54]
jl 0x403638
push dword [0x44205c]
push 5
push dword [0x44205c]
mov edx, 0x44002e
push edx
call fcn.00429d60
mov edx, dword [0x441c00]
push edx
call fcn.00429d60
mov edx, 0x440032
push edx
call fcn.00429d60
add dword [0x44205c], 2
push 0
mov edx, dword [0x4407c4]
add dword [esp + 4], edx
call fcn.004043d0
pop dword [0x44205c]
and eax, eax
je 0x40362c
mov edx, dword [0x44205c]
push edx
push edx
mov eax, 0x44002a
push eax
push dword [0x441c54]
push dword [0x441cc8]
call fcn.004272d0
push 0x441c34
call fcn.00429ce0
push dword [0x441c34]
push 0
call fcn.00404580
and eax, eax
je 0x40362c
push 0
call fcn.00404650
and eax, eax
je 0x40362c
push dword [0x441c34]
push 0xffffffff
push 7
call fcn.00420708
jmp 0x403607
inc dword [0x441c54]
jno 0x403561
mov ebx, dword [0x441cd0]
cmp ebx, 6
jne 0x403691
mov edx, dword [0x44205c]
push edx
push edx
push 5
call fcn.004208b3
push 0x441c00
call fcn.00429ce0
mov edx, dword [0x44205c]
push edx
push edx
push 5
push dword [0x441c00]
call fcn.00426ea0
push 0x441ccc
call fcn.00429ce0
push dword [0x441ccc]
push 5
call fcn.004207f1
mov edx, dword [0x44205c]
push edx
push edx
push dword [0x44205c]
call fcn.00427756
mov edx, 0x440600
push edx
call fcn.00429d60
mov edx, dword [0x4407c4]
add dword [esp], edx
call fcn.00427cb1
pop dword [0x44205c]
mov ebx, dword [0x441ca0]
cmp ebx, 0x333c
jne 0x401ab0
jmp 0x40373c
push 0
call 0x40375b
call fcn.00429cb0
push dword [0x441bc0]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00404390
call fcn.0041eae7
call fcn.004218bb
call fcn.00422b6f
call fcn.0042361c
call fcn.0042394e
call fcn.00426b80
call fcn.0042774a
call fcn.00427cbf
call fcn.00427d90
call fcn.0042891f
call fcn.004294b0
call fcn.00427530
ret