Function at 0x40c3a0
Capabilities:
Get common file path
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
mov esi, 0x4236a0
push ebx
sub esp, 0x2ac
mov ebx, 0x423690
mov dword [ebp - 0x240], eax
mov ecx, dword [0x423680]
mov dword [ebp - 0x244], edx
mov dword [ebp - 0x24c], esi
test ecx, ecx
mov dword [ebp - 0x248], ebx
je 0x40c3ee
mov edx, 0x423760
mov eax, str.___________
mov dword [ebp - 0x24c], edx
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x244]
test eax, eax
je 0x40c404
mov eax, dword [ebp - 0x244]
mov dword [eax], 0
mov edx, dword [ebp - 0x240]
movzx ecx, byte [edx]
jmp 0x40c41f
inc dword [ebp - 0x240]
mov eax, dword [ebp - 0x240]
movzx ecx, byte [eax]
cmp cl, 0x20
sete al
cmp cl, 9
sete dl
or eax, edx
test al, 1
jne 0x40c410
xor edx, edx
test cl, cl
je 0x40c5fe
mov eax, dword [ebp + 8]
test eax, eax
je 0x40ccfe
mov eax, dword [str.sh.exe]
mov dword [esp + 4], eax
mov edx, dword [ebp + 8]
mov dword [esp], edx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40c608
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x40c4a3
mov esi, dword [ebp + 0xc]
movzx eax, byte [esi]
test al, al
je 0x40c4a3
mov cl, al
lea esi, [esi]
lea edi, [edi]
cmp cl, 0x20
setne al
xor edx, edx
cmp cl, 9
setne dl
test eax, edx
je 0x40c49b
cmp cl, 0xa
jne 0x40c69c
inc esi
movzx ecx, byte [esi]
test cl, cl
jne 0x40c480
mov eax, dword [ebp - 0x240]
xor ebx, ebx
mov dword [esp], eax
call sub.msvcrt.dll_strlen
inc eax
mov dword [ebp - 0x250], eax
shl eax, 2
mov dword [esp], eax
call fcn.00411c90
mov dword [ebp - 0x268], eax
mov edx, dword [ebp - 0x250]
mov dword [esp], edx
call fcn.00411c90
mov dword [ebp - 0x26c], eax
mov edi, dword [ebp - 0x250]
mov esi, eax
mov dword [ebp - 0x250], ebx
mov ecx, dword [ebp - 0x268]
xor edx, edx
mov dword [ebp - 0x260], edx
mov dword [ecx], eax
add eax, edi
mov edi, dword [ebp - 0x240]
mov dword [ebp - 0x254], eax
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x25c], eax
xor eax, eax
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0x258], eax
movzx ecx, byte [edi]
test cl, cl
je 0x40c5a2
lea esi, [esi]
cmp esi, dword [ebp - 0x254]
ja 0x40cec3
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x40cb43
movsx eax, cl
cmp eax, dword [ebp - 0x258]
je 0x40cc34
cmp cl, 0x5c
je 0x40cc60
cmp cl, 0xa
sete al
xor edx, edx
cmp dword [ebp - 0x244], 0
setne dl
test eax, edx
jne 0x40cf2a
cmp dword [ebp - 0x258], 0x22
je 0x40ca3d
mov byte [esi], cl
inc esi
inc edi
movzx ecx, byte [edi]
test cl, cl
jne 0x40c530
mov eax, dword [ebp - 0x258]
test eax, eax
jne 0x40cb14
mov byte [esi], 0
mov edx, dword [ebp - 0x250]
mov ecx, dword [ebp - 0x268]
mov eax, dword [ecx + edx*4]
cmp byte [eax], 0
mov eax, dword [ebp - 0x264]
setne dl
test eax, eax
setne al
or eax, edx
and eax, 1
cmp eax, 1
sbb dword [ebp - 0x250], 0xffffffff
mov eax, dword [ebp - 0x250]
mov dword [ecx + eax*4], 0
dec eax
je 0x40cd0c
mov edx, dword [ebp - 0x268]
mov eax, dword [edx]
test eax, eax
mov edx, dword [ebp - 0x268]
je 0x40d068
lea esp, [ebp - 0xc]
mov eax, edx
pop ebx
pop esi
pop edi
pop ebp
ret
xor eax, eax
mov dword [esp + 8], eax
mov ecx, dword [ebp + 8]
mov dword [esp], 0
mov dword [esp + 4], ecx
call sub.msvcrt.dll__fullpath
mov esi, eax
xor eax, eax
mov dword [esp + 8], eax
mov eax, dword [str.sh.exe]
mov dword [esp], 0
mov dword [esp + 4], eax
call sub.msvcrt.dll__fullpath
test eax, eax
mov ebx, eax
mov edx, eax
je 0x40ce29
test esi, esi
mov eax, esi
je 0x40ce8d
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test esi, esi
mov edi, eax
je 0x40c66e
mov dword [esp], esi
call sub.msvcrt.dll_free
test ebx, ebx
je 0x40c67a
mov dword [esp], ebx
call sub.msvcrt.dll_free
test edi, edi
je 0x40c462
jmp 0x40c69c
mov eax, dword [sym.imp.msvcrt.dll__pctype]
mov eax, dword [eax]
movzx eax, word [eax + edx*2]
and eax, 8
test eax, eax
je 0x40c6c4
inc dword [ebp - 0x240]
mov eax, dword [sym.imp.msvcrt.dll___mb_cur_max]
mov ecx, dword [ebp - 0x240]
cmp dword [eax], 1
movzx edx, byte [ecx]
je 0x40c684
mov dword [esp], edx
mov eax, 8
mov dword [esp + 4], eax
call sub.msvcrt.dll__isctype
test eax, eax
jne 0x40c696
mov eax, dword [ebp - 0x240]
xor edx, edx
cmp byte [eax], 0
je 0x40c5fe
mov ecx, dword [ebp + 8]
mov dword [esp], ecx
call sub.msvcrt.dll_strlen
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x240]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov edx, dword [ebp - 0x270]
lea eax, [edx + eax*2 + 0x23]
and eax, 0xfffffff0
call fcn.004217a0
lea ecx, [esp + 0x2b]
mov edi, str.__c
and ecx, 0xfffffff0
mov dword [ebp - 0x274], ecx
mov dword [esp + 8], edx
mov eax, dword [ebp + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call sub.msvcrt.dll_memmove
mov eax, dword [ebp - 0x270]
mov esi, dword [ebp - 0x274]
mov dword [esp + 4], edi
add esi, eax
mov eax, 4
mov dword [esp], esi
add esi, 4
mov dword [esp + 8], eax
call sub.msvcrt.dll_memmove
mov dword [ebp - 0x278], esi
mov edi, dword [ebp - 0x240]
movzx ecx, byte [edi]
test cl, cl
je 0x40c80f
nop
lea esi, [esi]
mov ebx, dword [ebp - 0x244]
test ebx, ebx
je 0x40c783
cmp cl, 0xa
je 0x40ce80
cmp cl, 0x5c
je 0x40cc92
mov eax, dword [0x423680]
test eax, eax
je 0x40c800
mov eax, dword [0x423684]
test eax, eax
jne 0x40c800
cmp cl, 0x5c
sete al
cmp cl, 0x27
sete dl
or eax, edx
test al, 1
jne 0x40c7f9
cmp cl, 0x22
je 0x40c7f9
mov eax, dword [sym.imp.msvcrt.dll___mb_cur_max]
movzx edx, cl
cmp dword [eax], 1
je 0x40ce16
mov dword [esp], edx
mov eax, 8
mov dword [esp + 4], eax
call sub.msvcrt.dll__isctype
test eax, eax
jne 0x40c7f9
movzx ebx, byte [edi]
movsx eax, bl
mov dword [esp + 4], eax
mov edx, dword [ebp - 0x248]
mov dword [esp], edx
call sub.msvcrt.dll_strchr
test eax, eax
mov cl, bl
je 0x40c800
mov byte [esi], 0x5c
inc esi
movzx ecx, byte [edi]
mov byte [esi], cl
inc esi
inc edi
movzx ecx, byte [edi]
test cl, cl
jne 0x40c770
mov edx, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x274]
lea eax, [ecx + edx + 4]
xor edx, edx
cmp eax, esi
je 0x40c5fe
mov byte [esi], 0
mov eax, dword [0x42b020]
test eax, eax
jne 0x40cd71
mov eax, dword [0x423688]
test eax, eax
jne 0x40c84f
mov eax, dword [0x423684]
test eax, eax
je 0x40cdbb
mov edi, dword [ebp + 0x10]
test edi, edi
je 0x40cdbb
call sub.KERNEL32.dll_GetCurrentProcessId
mov dword [esp + 8], eax
mov esi, str.make_d
lea eax, [ebp - 0x128]
mov dword [esp + 4], esi
mov ebx, 0x4262a4
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [ebp - 0x280], ebx
mov edx, dword [0x423680]
test edx, edx
mov dword [ebp - 0x27c], edx
je 0x40ce06
xor edx, edx
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x284], edx
mov dword [esp + 4], ecx
mov dword [esp], 0x103
call sub.KERNEL32.dll_GetTempPathA
mov esi, eax
xor eax, eax
sub esp, 8
mov dword [ebp - 0x288], eax
mov eax, 1
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x128]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov edx, dword [ebp - 0x280]
mov ebx, eax
mov dword [esp], edx
call sub.msvcrt.dll_strlen
lea ebx, [ebx + eax + 0xa]
test esi, esi
mov dword [ebp - 0x290], ebx
je 0x40cee1
mov edx, dword [ebp - 0x290]
lea eax, [esi + edx]
cmp eax, 0x102
jbe 0x40c94a
jmp 0x40ce51
inc dword [ebp - 0x28c]
test esi, esi
je 0x40ce51
mov ecx, dword [ebp - 0x290]
lea eax, [esi + ecx]
cmp eax, 0x102
setbe dl
xor eax, eax
cmp dword [ebp - 0x28c], 0xffff
setbe al
test edx, eax
je 0x40ce51
mov ecx, dword [ebp - 0x280]
lea edx, [ebp - 0x128]
mov dword [esp + 0x14], ecx
mov eax, dword [ebp - 0x28c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov eax, 0x426060
cmp byte [esi + ebp - 0x239], 0x5c
je 0x40c97c
mov eax, 0x4262a7
mov dword [esp + 8], eax
mov eax, str._s_s__x._s
mov edi, 1
mov dword [esp + 4], eax
lea eax, [ebp - 0x238]
add eax, esi
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 0x10], edi
mov ebx, eax
xor eax, eax
mov dword [esp + 0x18], eax
xor ecx, ecx
mov eax, 0x180
mov dword [esp + 0x14], eax
xor edx, edx
mov eax, 0xc0000000
mov dword [esp + 0xc], ecx
lea ecx, [ebp - 0x238]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call sub.KERNEL32.dll_CreateFileA
sub esp, 0x1c
cmp eax, 0xffffffff
mov edi, eax
jne 0x40cf37
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
cmp eax, 0x50
sete al
cmp ecx, 0xb7
sete dl
or eax, edx
test al, 1
jne 0x40c914
mov eax, dword [ebp - 0x288]
test eax, eax
jne 0x40ce43
mov dword [esp], 0x103
lea eax, [ebp - 0x238]
mov dword [esp + 4], eax
call sub.KERNEL32.dll_GetCurrentDirectoryA
mov esi, eax
sub esp, 8
mov eax, 1
mov dword [ebp - 0x288], eax
jmp 0x40c91a
mov dword [esp], 0x4262b4
movsx eax, cl
mov dword [esp + 4], eax
call sub.msvcrt.dll_strchr
test eax, eax
je 0x40ca62
mov edx, dword [0x423680]
test edx, edx
jne 0x40cb14
movzx ecx, byte [edi]
mov byte [esi], cl
jmp 0x40c58b
mov byte [esi], 0
mov eax, dword [ebp - 0x268]
inc esi
inc dword [ebp - 0x250]
mov ebx, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x250]
mov dword [eax + ecx*4], esi
xor eax, eax
mov dword [ebp - 0x264], eax
xor eax, eax
cmp dword [ebp - 0x25c], 0
sete al
test ebx, ebx
setne dl
or dword [ebp - 0x260], eax
sete al
movzx eax, al
test edx, eax
jne 0x40cb14
xor edx, edx
dec ecx
mov dword [ebp - 0x25c], edx
jne 0x40ccc4
mov edx, dword [ebp - 0x24c]
xor ebx, ebx
mov eax, dword [edx]
test eax, eax
je 0x40ccc4
mov edx, eax
jmp 0x40caeb
mov eax, dword [ebp - 0x24c]
inc ebx
mov edx, dword [eax + ebx*4]
test edx, edx
je 0x40ccc4
mov ecx, dword [ebp - 0x268]
mov eax, dword [ecx]
cmp edx, eax
je 0x40cb14
movzx ecx, byte [edx]
cmp cl, byte [eax]
jne 0x40cad9
test cl, cl
je 0x40cb14
inc eax
inc edx
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40cad9
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x40c69c
mov ecx, dword [ebp - 0x26c]
mov dword [esp], ecx
call sub.msvcrt.dll_free
mov eax, dword [ebp - 0x268]
mov dword [esp], eax
call sub.msvcrt.dll_free
jmp 0x40c69c
movsx ebx, cl
mov dword [esp + 4], ebx
mov edx, dword [ebp - 0x248]
mov dword [esp], edx
call sub.msvcrt.dll_strchr
test eax, eax
jne 0x40cb14
cmp ebx, 0x27
je 0x40cc26
jg 0x40cba0
cmp ebx, 0x20
je 0x40ca6c
jg 0x40cc1d
cmp ebx, 9
je 0x40ca6c
cmp ebx, 0xa
je 0x40cdf0
nop
lea esi, [esi]
movzx eax, byte [edi]
mov byte [esi], al
jmp 0x40c58b
cmp ebx, 0x3d
je 0x40ccd4
cmp ebx, 0x5c
jne 0x40cb90
movzx ecx, byte [edi + 1]
cmp cl, 0xa
je 0x40ce97
test cl, cl
je 0x40c58c
cmp cl, 0x5c
setne al
xor edx, edx
cmp cl, 0x27
setne dl
test eax, edx
je 0x40cc12
mov eax, dword [sym.imp.msvcrt.dll___mb_cur_max]
movzx edx, cl
cmp dword [eax], 1
jne 0x40cf14
mov eax, dword [sym.imp.msvcrt.dll__pctype]
mov eax, dword [eax]
movzx eax, word [eax + edx*2]
and eax, 8
test eax, eax
jne 0x40cc12
movsx eax, byte [edi + 1]
mov dword [esp], str.___________
mov dword [esp + 4], eax
call sub.msvcrt.dll_strchr
cmp eax, 1
sbb edi, 0
inc edi
movzx eax, byte [edi]
mov byte [esi], al
jmp 0x40c58b
cmp ebx, 0x22
jne 0x40cb90
movsx edx, byte [edi]
mov dword [ebp - 0x258], edx
jmp 0x40c58c
xor eax, eax
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x268]
cmp dword [eax], esi
je 0x40cc50
cmp byte [esi - 1], 0
jne 0x40c58c
mov ebx, 1
mov dword [ebp - 0x264], ebx
jmp 0x40c58c
cmp byte [edi + 1], 0xa
jne 0x40c562
cmp dword [ebp - 0x258], 0x22
je 0x40cc81
mov ecx, dword [0x423680]
test ecx, ecx
jne 0x40ce33
inc edi
cmp byte [edi + 1], 9
jne 0x40c58c
inc edi
jmp 0x40c58c
cmp byte [edi + 1], 0xa
jne 0x40c78c
mov edx, dword [0x423680]
test edx, edx
je 0x40ccb2
mov byte [esi], 0x5c
inc esi
mov byte [esi], 0x5c
inc esi
mov byte [esi], 0xa
inc esi
inc edi
cmp byte [edi + 1], 9
jne 0x40c803
inc edi
inc edi
jmp 0x40c804
mov dword [esp], edi
call fcn.00411780
lea edi, [eax - 1]
jmp 0x40c58c
mov eax, dword [ebp - 0x260]
test eax, eax
jne 0x40cceb
mov eax, dword [0x423680]
test eax, eax
jne 0x40cb14
mov eax, 1
mov dword [ebp - 0x25c], eax
mov byte [esi], 0x3d
jmp 0x40c58b
mov edx, dword [str.sh.exe]
mov dword [ebp + 8], edx
jmp 0x40c462
mov ecx, dword [ebp - 0x24c]
xor ebx, ebx
mov edx, dword [ecx]
test edx, edx
je 0x40cdae
mov ecx, dword [ebp - 0x268]
mov eax, dword [ecx]
jmp 0x40cd3a
mov ecx, dword [ebp - 0x24c]
inc ebx
mov edx, dword [ecx + ebx*4]
test edx, edx
je 0x40c5f0
cmp edx, eax
je 0x40cb14
movzx ecx, byte [edx]
cmp cl, byte [eax]
jne 0x40cd28
test cl, cl
je 0x40cb14
inc eax
inc edx
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x40cb14
mov edx, dword [ebp - 0x268]
mov eax, dword [edx]
jmp 0x40cd28
mov dword [esp], 8
call fcn.00411c90
mov dword [ebp - 0x268], eax
mov dword [esp], 0x426060
call fcn.00411e50
mov ecx, dword [ebp - 0x268]
mov dword [ecx], eax
mov dword [ecx + 4], 0
mov edx, dword [ebp - 0x268]
lea esp, [ebp - 0xc]
pop ebx
mov eax, edx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [ebp - 0x268]
mov eax, dword [ecx]
jmp 0x40c5f0
mov eax, dword [0x423680]
test eax, eax
je 0x40d0f5
mov dword [esp], 0
xor eax, eax
xor edx, edx
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x274]
call fcn.0040c3a0
mov dword [ebp - 0x268], eax
jmp 0x40cd9e
mov eax, dword [ebp - 0x244]
test eax, eax
jne 0x40d11c
mov byte [esi], 0xa
jmp 0x40c58b
mov ecx, 0x4262b8
mov dword [ebp - 0x280], ecx
jmp 0x40c899
mov eax, dword [sym.imp.msvcrt.dll__pctype]
mov eax, dword [eax]
movzx eax, word [eax + edx*2]
and eax, 8
jmp 0x40c7d7
mov edx, 0x426060
jmp 0x40c64a
mov byte [esi], 0x5c
inc edi
inc esi
movzx eax, byte [edi]
mov byte [esi], al
inc esi
jmp 0x40cc82
mov dword [esp], ecx
call fcn.00421040
mov dword [ebp - 0x284], eax
mov edi, dword [ebp - 0x284]
mov eax, 0xffffffff
mov dword [ebp - 0x23c], eax
test edi, edi
je 0x40d058
mov eax, dword [ebp - 0x284]
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.00411b20
mov edx, dword [ebp - 0x244]
mov dword [edx], edi
jmp 0x40c80f
mov eax, 0x426060
jmp 0x40c654
inc edi
xor eax, eax
mov ecx, dword [ebp - 0x250]
cmp byte [edi + 1], 9
sete al
add edi, eax
mov eax, dword [ebp - 0x268]
cmp dword [eax + ecx*4], esi
jne 0x40c58c
lea eax, [edi + 1]
mov dword [esp], eax
jmp 0x40ccc7
mov dword [esp], str.ap___end
mov eax, 0x96c
mov dword [esp + 8], eax
mov eax, str..._.._make_3.81_job.c
mov dword [esp + 4], eax
call sub.msvcrt.dll__assert
mov dword [esp], 0x103
lea ecx, [ebp - 0x238]
mov dword [esp + 4], ecx
call sub.KERNEL32.dll_GetCurrentDirectoryA
mov esi, eax
sub esp, 8
mov eax, 1
mov dword [ebp - 0x288], eax
test esi, esi
jne 0x40c8ff
jmp 0x40ce51
mov dword [esp], edx
mov eax, 8
mov dword [esp + 4], eax
call sub.msvcrt.dll__isctype
jmp 0x40cbf4
mov ecx, dword [ebp - 0x244]
mov dword [ecx], edi
jmp 0x40c594
lea ebx, [esi + ebx + 1]
mov dword [esp], ebx
call fcn.00411c90
mov dword [esp], eax
lea edx, [ebp - 0x238]
mov esi, eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call sub.msvcrt.dll_memcpy
mov dword [esp], edi
xor eax, eax
mov dword [esp + 4], eax
call sub.msvcrt.dll__open_osfhandle
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x27c]
test eax, eax
je 0x40cf96
movsx eax, byte [esi]
mov edx, esi
test eax, eax
je 0x40cf96
cmp eax, 0x5c
je 0x40cf8d
inc edx
movsx eax, byte [edx]
jmp 0x40cf7e
mov byte [edx], 0x2f
inc edx
movsx eax, byte [edx]
jmp 0x40cf7e
test byte [0x42a408], 4
mov edx, dword [ebp + 0x10]
mov dword [edx], esi
jne 0x40d0d0
mov ebx, 0x4000
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x23c]
mov dword [esp], eax
call sub.msvcrt.dll__setmode
mov ecx, 0x4262dc
mov dword [esp + 4], ecx
mov eax, dword [ebp - 0x23c]
mov dword [esp], eax
call sub.msvcrt.dll__fdopen_1
mov edx, dword [0x423680]
mov ebx, eax
test edx, edx
je 0x40d0a9
mov dword [esp + 4], ebx
mov ecx, dword [ebp - 0x278]
mov dword [esp], ecx
call sub.msvcrt.dll_fputs
mov dword [esp + 4], ebx
mov dword [esp], 0xa
call sub.msvcrt.dll_fputc
mov dword [esp], ebx
call sub.msvcrt.dll_fclose
mov dword [esp], 0xc
call fcn.00411c90
mov dword [ebp - 0x268], eax
mov eax, dword [0x423680]
test eax, eax
je 0x40d08b
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00411e50
mov edx, dword [ebp - 0x268]
mov ecx, dword [ebp + 0x10]
mov dword [edx], eax
mov eax, dword [ecx]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x268]
mov dword [eax + 8], 0
jmp 0x40cd9e
mov esi, str.Cannot_create_a_temporary_file_n
mov dword [ebp - 0x284], esi
jmp 0x40ce6a
mov eax, dword [ebp - 0x26c]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov edx, dword [ebp - 0x268]
mov dword [esp], edx
call sub.msvcrt.dll_free
xor edx, edx
jmp 0x40c5fe
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov dword [esp], eax
call fcn.00411e50
mov ecx, dword [ebp - 0x268]
mov dword [ecx], eax
mov dword [ecx + 4], 0
jmp 0x40d046
mov dword [esp + 0xc], eax
mov eax, 0xa
mov dword [esp + 8], eax
mov eax, 1
mov dword [esp + 4], eax
mov dword [esp], str._echo_off_n
call sub.msvcrt.dll_fwrite
jmp 0x40cfe6
mov dword [esp + 4], esi
mov dword [esp], str.Creating_temporary_batch_file__s_n
call sub.msvcrt.dll_printf
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
mov dword [esp], eax
call fcn.00422040
jmp 0x40cfa8
mov dword [esp], 0
mov edi, 0xb57
mov esi, str..._.._make_3.81_job.c
mov dword [esp + 0xc], edi
mov ebx, str._s__line__d__Bad_shell_context___unixy___batch_mode_shell__n
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
call fcn.00411b20
mov eax, dword [ebp - 0x244]
mov dword [eax], edi
jmp 0x40c5a2