Function at 0x4099e8
Capabilities:
Execute command

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0xc]
movsx edx, byte [ecx]
test edx, edx
je 0x409a30
mov eax, dword [ebp - 0xc]
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x409a30
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x409a10
mov eax, dword [ebp - 0xc]
movsx ecx, byte [eax]
cmp ecx, 0x21
jne 0x409a40
jmp 0x409dab
mov dword [ebp - 0x10], 0
jmp 0x409a52
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], 0x20
jge 0x409a88
mov eax, dword [ebp - 0xc]
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x409a65
jmp 0x409a88
mov edx, dword [ebp - 0xc]
movsx eax, byte [edx]
test eax, eax
jne 0x409a71
jmp 0x409a88
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov al, byte [edx]
mov byte [ebp + ecx - 0x74], al
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x409a49
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0x74], 0
push 0x42c760
lea eax, [ebp - 0x74]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x409ad1
push str.type
lea ecx, [ebp - 0x74]
push ecx
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
je 0x409ad1
push str.echo
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
jne 0x409af5
push 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
lea edx, [ecx + eax + 1]
push edx
push 0x42c774
call fcn.00401160
add esp, 0xc
mov eax, 1
jmp 0x409e6f
push 0x42c778
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
jne 0x409b21
mov ecx, dword [ebp + 8]
push ecx
call fcn.004174e7
add esp, 4
mov eax, 1
jmp 0x409e6f
push str.types
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
jne 0x409b94
cmp dword [ebp - 0xc], 0
je 0x409b53
mov eax, dword [ebp - 0xc]
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x409b53
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x409b37
push str.inline
mov eax, dword [ebp - 0xc]
push eax
call fcn.00427210
add esp, 8
test eax, eax
je 0x409b6f
xor eax, eax
jmp 0x409e6f
mov ecx, dword [ebp - 0xc]
add ecx, 7
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.MSVCRT.dll__strdup]
add esp, 4
mov dword [0x432360], eax
mov eax, 1
jmp 0x409e6f
push str.where
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
jne 0x409bf3
mov ecx, dword [ebp + 8]
add ecx, 5
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
add eax, 1
push eax
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [0x432354], eax
cmp dword [0x432354], 0
je 0x409be9
mov edx, dword [ebp + 8]
add edx, 5
push edx
mov eax, dword [0x432354]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, 1
jmp 0x409e6f
push str.drop
lea ecx, [ebp - 0x74]
push ecx
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
je 0x409c1f
push str.keep
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
jne 0x409c7a
cmp dword [0x432358], 0
je 0x409c37
mov eax, dword [0x432358]
push eax
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov ecx, dword [ebp + 8]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
add eax, 1
push eax
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [0x432358], eax
cmp dword [0x432358], 0
je 0x409c70
mov edx, dword [ebp + 8]
push edx
mov eax, dword [0x432358]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, 1
jmp 0x409e6f
push 0x42c7a4
lea ecx, [ebp - 0x74]
push ecx
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
je 0x409ca6
push 0x42c7a8
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
jne 0x409cef
mov eax, dword [ebp - 0xc]
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x409cbc
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x409ca6
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.MSVCRT.dll__unlink]
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x409ce5
push 0x11
mov ecx, dword [ebp - 0xc]
push ecx
push str.Error_deleting__s
call fcn.00401160
add esp, 0xc
mov eax, 1
jmp 0x409e6f
push 0x42c7c0
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
jne 0x409d1f
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
call fcn.00409e73
add esp, 0xc
mov eax, 1
jmp 0x409e6f
push 0x42c7c4
lea ecx, [ebp - 0x74]
push ecx
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
jne 0x409d4f
push 1
push 0
mov edx, dword [ebp - 0xc]
push edx
call fcn.00409e73
add esp, 0xc
mov eax, 1
jmp 0x409e6f
push 0x42c7c8
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
jne 0x409d7f
push 0
push 1
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00409e73
add esp, 0xc
mov eax, 1
jmp 0x409e6f
push 0x42c7cc
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
je 0x409dab
push str.shell
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.MSVCRT.dll__strcmpi]
add esp, 8
test eax, eax
jne 0x409dee
mov ecx, dword [ebp - 0xc]
movsx edx, byte [ecx]
test edx, edx
je 0x409de4
mov eax, dword [ebp - 0xc]
add eax, 1
push eax
call dword [sym.imp.MSVCRT.dll_system]
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x409de4
push 0x11
mov ecx, dword [ebp - 0xc]
add ecx, 1
push ecx
push str.Cannot_execute_command:__s
call fcn.00401160
add esp, 0xc
mov eax, 1
jmp 0x409e6f
movsx edx, byte [ebp - 0x73]
cmp edx, 0x3a
jne 0x409e6d
movsx eax, byte [ebp - 0x72]
test eax, eax
jne 0x409e6d
movsx ecx, byte [ebp - 0x74]
push ecx
call dword [sym.imp.MSVCRT.dll_toupper]
add esp, 4
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x78]
sub edx, 0x40
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0
jle 0x409e69
cmp dword [ebp - 4], 0x1a
jge 0x409e69
mov eax, dword [ebp - 4]
push eax
call sub.MSVCRT.dll__chdrive
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x409e4f
push 0x11
lea ecx, [ebp - 0x74]
push ecx
push str.Cannot_change_drive_to__s
call fcn.00401160
add esp, 0xc
jmp 0x409e62
push 0
lea edx, [ebp - 0x74]
push edx
push str.Current_drive_changed_to__s
call fcn.00401160
add esp, 0xc
mov eax, 1
jmp 0x409e6f
xor eax, eax
jmp 0x409e6f
xor eax, eax
mov esp, ebp
pop ebp
ret