Function at 0x430c60
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45a3ca
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x4ec560]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push dword [ebp + 8]
mov dword [ebp - 4], 0
push 0x43d
push str.Echo:_t_t_OnMsgFromWebscoket____LINE___d__msg___s
call fcn.0042eb70
add esp, 0xc
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x468f50
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 1
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0
push eax
call fcn.0042e600
push 0x440
push dword [ebp - 0x10]
mov byte [ebp - 4], 2
push str.Echo:_t_t_Msg_request:__s__LINE___d
call fcn.0042eb70
add esp, 0x1c
lea ecx, [ebp - 0x10]
push str.RequestAnswerCall
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x430dc1
push eax
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [esi + 0x158]
call sub.mfc140.dll_Ordinal_5826
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x468f8c
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 4
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 3
push eax
call fcn.0042e600
push dword [ebp - 0x14]
mov byte [ebp - 4], 5
push dword [ebp - 0x18]
push 0x446
push str.Echo:_t_t_OnMsgFromWebscoket____LINE___d__called___s__sessionId___s
call fcn.0042eb70
add esp, 0x1c
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x28], esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 6
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
mov byte [ebp - 4], 5
call fcn.0042c3a0
add esp, 8
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140.dll_Ordinal_4315]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140.dll_Ordinal_4315]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.RequestMakeCall
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x430f0f
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x4687cf
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.10
mov byte [ebp - 4], 7
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 8
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 2
push eax
call fcn.0042e4e0
add esp, 0x10
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x468817
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x468fec
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xb
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 9
push eax
call fcn.0042e4e0
add esp, 0x10
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x468ff4
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 3
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x468ff8
mov byte [ebp - 4], 0xd
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xe
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
call fcn.0042e4e0
add esp, 0x14
mov byte [ebp - 4], 0xf
mov ecx, eax
push 0x468ff0
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
sete bl
call dword [sym.imp.mfc140.dll_Ordinal_1044]
movzx eax, bl
push eax
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
call fcn.0042d000
add esp, 8
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push 0x468ffc
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x430f2b
call fcn.0042d2d0
jmp 0x431f04
push str.RequestHoldCall
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x430f79
push eax
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x158]
call sub.mfc140.dll_Ordinal_5826
push ecx
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x10
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
call fcn.0042c920
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.RequestRetrieveCall
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x430fc7
push eax
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x158]
call sub.mfc140.dll_Ordinal_5826
push ecx
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x11
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
call fcn.0042d420
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.RequestSingleTransferCall
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431071
push eax
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [esi + 0x158]
call sub.mfc140.dll_Ordinal_5826
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x469050
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x13
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x12
push eax
call fcn.0042e600
add esp, 0xc
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x24]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x15
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
mov byte [ebp - 4], 0x14
call fcn.0042d660
add esp, 8
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.RequestConferenceCall
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x43111b
push eax
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [esi + 0x158]
call sub.mfc140.dll_Ordinal_5826
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x46906c
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x17
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x16
push eax
call fcn.0042e600
add esp, 0xc
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x24]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x19
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
mov byte [ebp - 4], 0x18
call fcn.0042c740
add esp, 8
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.RequestLogout
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x431f3c
push str.RequestLogin
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x43155c
cmp dword [0x4ef9a4], eax
je 0x43115e
push 0x490
push str.Echo:_t_t_the_aphone_is_logouting_the_line___d
jmp 0x431f0e
push 0
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [esi + 0x158]
call sub.mfc140.dll_Ordinal_5826
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc140.dll_Ordinal_8146]
test al, al
jne 0x4311ab
push 0
push ecx
mov ecx, esp
push 0x4690d4
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov ecx, dword [0x4ee83c]
call fcn.004325e0
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f16
cmp byte [0x4ee72e], 0
je 0x43121f
mov ecx, 0x4ef9a8
call dword [sym.imp.mfc140.dll_Ordinal_8146]
test al, al
jne 0x43121f
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140.dll_Ordinal_1661]
push eax
mov ecx, 0x4ef9a8
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x43121f
movzx eax, byte [0x4ee72e]
push 0x4a3
push eax
push str.Echo:_t_t_the_s_isLogin_is__d_in_line__d
call fcn.0042eb70
add esp, 0xc
push 0
push ecx
mov ecx, esp
push str.EventAphoneOK
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov ecx, dword [0x4ee83c]
call fcn.004325e0
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f16
lea eax, [ebp + 8]
mov ecx, 0x4ef9a8
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push 0x4ac
push dword [ebp + 8]
mov byte [ebp - 4], 0x1c
push str.Echo:_t_t_the_msg_in_request_of_RequestLogin_is__s_in_line__d
call fcn.0042eb70
add esp, 0xc
cmp dword [0x4ee77c], 0
jne 0x4314d0
push 6
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x469158
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x1d
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
call fcn.0042e600
add esp, 0x10
push eax
mov ecx, 0x4ee84c
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 7
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x46915c
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x1f
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
call fcn.0042e600
add esp, 0x10
push eax
mov ecx, 0x4ee850
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x469160
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x469168
mov byte [ebp - 4], 0x21
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x22
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
call fcn.0042e4e0
add esp, 0x14
mov byte [ebp - 4], 0x23
mov ecx, 0x4ee848
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x46916c
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 3
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x469174
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x25
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
call fcn.0042e4e0
add esp, 0x14
push eax
mov ecx, 0x4ee844
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x469178
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 4
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x469184
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x28
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
call fcn.0042e4e0
add esp, 0x14
push eax
mov ecx, 0x4ee854
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.5060
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 5
push ecx
mov byte [ebp - 4], 0x2a
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x469190
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x2b
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
call fcn.0042e4e0
add esp, 0x14
mov ecx, eax
call dword [sym.imp.mfc140.dll_Ordinal_1661]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov dword [0x4ee768], eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0x4b7
push dword [0x4ee768]
push dword [0x4ee854]
push dword [0x4ee844]
push dword [0x4ee848]
push dword [0x4ee850]
push dword [0x4ee84c]
push str.Echo:_t_t__phone__request_param:_tenantId:_s__agentId:_s__SIPAccount:_s__password:_s__host:_s__port:_d__LINE___d
call fcn.0042eb70
add esp, 0x20
call fcn.0042cb30
test al, al
je 0x431526
mov ecx, 0x4ee858
call dword [sym.imp.mfc140.dll_Ordinal_8146]
test al, al
jne 0x431541
push 0x4c1
push dword [0x4ee858]
push str.Echo:_t_t_the_g_LocalIP_in_request_of_RequestLogin_is__s_in_line__d
call fcn.0042eb70
push dword [0x4ee858]
lea eax, [ebp - 0x1c]
push 0x469194
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
add esp, 0x18
lea eax, [ebp - 0x1c]
push 0
push ecx
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
jmp 0x431536
push 0
push ecx
mov ecx, esp
push str.EventRegistrationFailed
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov ecx, dword [0x4ee83c]
call fcn.004325e0
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.SetNoInviteEnd
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x431f04
push str.RequestSessionCall
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x4315d5
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x469294
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x2c
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 2
push eax
call fcn.0042e600
add esp, 0x10
push 0
push ecx
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x2d
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
call fcn.0042d000
jmp 0x431720
push str.RequestSessionVideo
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x431f04
push str.RequestMuteUser
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431688
push eax
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x158]
call sub.mfc140.dll_Ordinal_5826
push 3
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x4692c0
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x2f
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2e
push eax
call fcn.0042e600
add esp, 0x10
push 0x4692bc
mov ecx, eax
mov byte [ebp - 4], 0x30
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x28]
sete byte [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push dword [ebp - 0x20]
lea eax, [ebp - 0x24]
push ecx
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
call fcn.0042d200
jmp 0x431720
push str.RequestMuteMyself
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431735
push eax
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x158]
call sub.mfc140.dll_Ordinal_5826
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x4692dc
mov byte [ebp - 4], 0x31
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x32
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x31
push eax
call fcn.0042e600
add esp, 0x10
push 0x4692d8
mov ecx, eax
mov byte [ebp - 4], 0x33
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x28]
sete byte [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push dword [ebp - 0x20]
lea eax, [ebp - 0x24]
push ecx
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
call fcn.0042d170
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.RequestJoinChannel
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431766
push eax
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0x158]
call sub.mfc140.dll_Ordinal_5826
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.CallEstablished
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431b41
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_316]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_316]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push str.recordOK
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x36
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 0
push ecx
lea eax, [ebp - 0x24]
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
mov ecx, dword [0x4ee83c]
call fcn.004325e0
call fcn.004351b0
mov edi, dword [sym.imp.mfc140.dll_Ordinal_4807]
push edx
push eax
lea eax, [ebp - 0x1c]
push str._I64d
push eax
call edi
add esp, 0x10
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x469318
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x37
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x36
push eax
call fcn.0042e600
add esp, 0x10
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x36
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0x46931c
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431b0b
push dword [0x4ee7ac]
call sub.liblinphone_7.dll_linphone_core_get_current_call
add esp, 4
test eax, eax
je 0x431b0b
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x469324
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x39
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x36
push eax
call fcn.0042e600
add esp, 0x10
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x3a
push eax
mov ecx, 0x4ee86c
call dword [sym.imp.mfc140.dll_Ordinal_1526]
cmp dword [0x4ee770], 0
je 0x431a46
cmp byte [0x4ee72f], 0
jne 0x431a46
push dword [0x4ee7ac]
call sub.liblinphone_7.dll_linphone_core_get_current_call
mov esi, eax
push esi
call sub.liblinphone_7.dll_linphone_call_get_current_params
add esp, 8
push 0x50f
push eax
call sub.liblinphone_7.dll_linphone_call_params_get_local_conference_mode
add esp, 4
movzx ecx, al
push ecx
push str.Echo:_t_t_Before_Record_Audio_linphone_call_params_get_local_conference_mode___d__LINE___d
call fcn.0042eb70
add esp, 0xc
push 0x510
push esi
call sub.liblinphone_7.dll_linphone_call_is_in_conference
add esp, 4
movzx eax, al
push eax
push str.Echo:_t_t_Record_Audio__linphone_call_is_in_conference___d__LINE___d
call fcn.0042eb70
push 0x511
push str.Echo:_t_t_Start_Record_Audio__LINE___d
call fcn.0042eb70
add esp, 0x14
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x3b
push dword [ebp - 0x14]
push dword [0x4ee850]
push dword [0x4ee84c]
push dword [0x4ee840]
push str._srecords_s__s__s__s.wav
push eax
call edi
push 0x515
push dword [ebp - 0x18]
push str.Echo:_t_t_voice_FileName_:__s._LINE___d
call fcn.0042eb70
push dword [0x4ee7ac]
call sub.liblinphone_7.dll_linphone_core_create_default_call_parameters
add esp, 0x2c
lea ecx, [ebp - 0x18]
mov ebx, eax
push 0
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
push ebx
call sub.liblinphone_7.dll_linphone_call_params_set_record_file
push dword [0x4ee7ac]
call sub.liblinphone_7.dll_linphone_core_get_current_call
push eax
call sub.liblinphone_7.dll_linphone_call_get_state
add esp, 0x10
cmp eax, 7
je 0x4319e1
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push dword [0x4ee7ac]
call sub.liblinphone_7.dll_linphone_core_get_current_call
push eax
call sub.liblinphone_7.dll_linphone_call_get_state
push eax
push 0x51c
push str.Echo:_t_t_LINE___d__:_Wait_for_callstate_7__current_LinphoneCall_state_:__d
call fcn.0042eb70
add esp, 0x14
push 0xa
call esi
push dword [0x4ee7ac]
call sub.liblinphone_7.dll_linphone_core_get_current_call
push eax
call sub.liblinphone_7.dll_linphone_call_get_state
add esp, 8
cmp eax, 7
jne 0x4319a0
cmp dword [0x4ee764], 0
jne 0x431a1a
push 0x521
push str.Do:_t_t_the_call_is_not_answercall__LINE___d
call fcn.0042eb70
add esp, 8
push ebx
push dword [0x4ee7ac]
call sub.liblinphone_7.dll_linphone_core_get_current_call
add esp, 4
push eax
push dword [0x4ee7ac]
call sub.liblinphone_7.dll_linphone_core_update_call
add esp, 0xc
push 0x526
push str.Do:_t_t_Start_Record_Audio__LINE___d
call fcn.0042eb70
push dword [0x4ee7ac]
call sub.liblinphone_7.dll_linphone_core_get_current_call
push eax
call sub.liblinphone_7.dll_linphone_call_start_recording
add esp, 0x10
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
cmp dword [0x4ee76c], 0
je 0x431af7
cmp byte [0x4ee72f], 0
jne 0x431af7
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x3c
push dword [ebp - 0x14]
push dword [0x4ee850]
push dword [0x4ee84c]
push dword [0x4ee840]
push 0x4694d4
push eax
call edi
push 0x80
call sub.mfc140.dll_Ordinal_1507
add esp, 0x20
lea ecx, [ebp - 0x18]
mov esi, eax
push 0
mov byte [esi + 0x7c], 0
call dword [sym.imp.mfc140.dll_Ordinal_5095]
mov edx, esi
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x431ab2
push 0x536
mov dword [esi + 0x78], 0xa
push dword [ebp - 0x18]
push str.Echo:_t_t_Start_Capture_Screen__FileName_:__s._LINE___d
call fcn.0042eb70
add esp, 0xc
push 0
push 0
push 0
push 0
push esi
push 0x434e30
call sub.mfc140.dll_Ordinal_2165
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140.dll_Ordinal_4315]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431b1d
push 0x53e
push str.Echo:_t_t_LINE___d__:_Recording_is_false_OR_no_call
call fcn.0042eb70
add esp, 8
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.RequestLocalIP
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431ba4
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push dword [0x4ee858]
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x3d
push str.EventLocalIP_s
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
add esp, 0xc
lea eax, [ebp - 0x24]
push 0
push ecx
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
mov ecx, dword [0x4ee83c]
call fcn.004325e0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.RequestStartScreenCapture
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431da1
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push 0x469598
mov byte [ebp - 4], 0x3e
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x3f
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3e
push eax
call fcn.0042e600
add esp, 0x10
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x46959c
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x41
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x40
push eax
call fcn.0042e600
add esp, 0x10
push 3
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x4695a0
mov byte [ebp - 4], 0x42
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x43
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x42
push eax
call fcn.0042e600
add esp, 0x10
push 4
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x4695a4
mov byte [ebp - 4], 0x44
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x45
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x44
push eax
call fcn.0042e600
add esp, 0x10
mov byte [ebp - 4], 0x46
call fcn.004351b0
lea ecx, [ebp - 0x24]
mov edi, eax
mov esi, edx
call dword [sym.imp.mfc140.dll_Ordinal_316]
push esi
mov esi, dword [sym.imp.mfc140.dll_Ordinal_4807]
lea eax, [ebp - 0x24]
push edi
push 0x4695a8
push eax
mov byte [ebp - 4], 0x47
call esi
push dword [ebp - 0x24]
lea eax, [ebp - 0x1c]
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push dword [ebp - 0x28]
push dword [0x4ee840]
push str._srecords_s__s__s__s.mp4
push eax
call esi
push 0x80
call sub.mfc140.dll_Ordinal_1507
add esp, 0x30
lea ecx, [ebp - 0x20]
mov esi, eax
push 0x4695cc
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
push 0
sete cl
mov byte [esi + 0x7c], cl
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_5095]
mov edx, esi
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [eax + edx - 1], cl
test cl, cl
jne 0x431d21
movzx eax, byte [esi + 0x7c]
push eax
push 0x558
mov dword [esi + 0x78], 0xa
push dword [ebp - 0x1c]
push str.Echo:_t_t_Start_Capture_Screen__FileName_:__s._LINE___d__manual_flag:__d
call fcn.0042eb70
add esp, 0x10
push 0
push 0
push 0
push 0
push esi
push 0x434e30
call sub.mfc140.dll_Ordinal_2165
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.RequestStopScreenCapture
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431e4c
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x469638
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x48
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 2
push eax
call fcn.0042e600
push 0x80
mov byte [ebp - 4], 0x49
call sub.mfc140.dll_Ordinal_1507
add esp, 0x14
lea ecx, [ebp - 0x28]
mov esi, eax
push str.true
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
push 0x55f
sete cl
mov byte [esi + 0x7c], cl
movzx ecx, cl
push ecx
push str.Echo:_t_t_Stop_Capture_Screen_manual_flag:__d__LINE___d
call fcn.0042eb70
add esp, 0xc
push 0
push 0
push 0
push 0
push esi
push fcn.00434f50
call sub.mfc140.dll_Ordinal_2165
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x431f04
push str.RequestMuteAgent
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431e9f
push str.Echo:_t_tRequest_Mute_Agent_Start...
call fcn.0042eb70
add esp, 4
mov ecx, 0x4ee840
push 0
call dword [sym.imp.mfc140.dll_Ordinal_1661]
push eax
push 0x4696b4
push 0x4696b8
push 0x4696c8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push str.Echo:_t_tRequest_Mute_Agent_End.
call fcn.0042eb70
add esp, 4
jmp 0x431f04
push str.RequestMuteAgentOff
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x431ef2
push str.Echo:_t_tRequest_Mute_Agent_Off_Start...
call fcn.0042eb70
add esp, 4
mov ecx, 0x4ee840
push 0
call dword [sym.imp.mfc140.dll_Ordinal_1661]
push eax
push 0x46972c
push str.MicManager.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push str.Echo:_t_tRequest_Mute_Agent_Off_End.
call fcn.0042eb70
add esp, 4
jmp 0x431f04
push 0x56c
push str.ERROR:_t_t_OnMsgFromWebscoket_error_request__LINE___d
call fcn.0042eb70
add esp, 8
push 0x56f
push str.Echo:_t_t_OnMsgFromWebscoket_request_end__LINE___d
call fcn.0042eb70
add esp, 8
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
push ecx
mov ecx, esp
push str.EventAphoneCleared
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov ecx, dword [0x4ee83c]
call fcn.004325e0
cmp byte [0x4ee72e], 0
mov dword [0x4ef9a4], 1
je 0x431fae
push 0
push 0
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x158]
call sub.mfc140.dll_Ordinal_5826
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x1a
call dword [sym.imp.mfc140.dll_Ordinal_8146]
test al, al
jne 0x431f93
call fcn.0042d2d0
call fcn.0042ce60
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140.dll_Ordinal_1044]
cmp byte [0x4ee72e], 0
jne 0x431fb8
mov dword [0x4ef9a4], 0
mov ecx, esi
call fcn.00430420
int3