Function at 0x402720
Capabilities:
Create thread
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4523a0
push 0x42c3d0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x3774
call fcn.0042bc90
mov eax, dword [0x456d10]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov edi, ecx
mov dword [ebp - 0x3774], edi
mov dword [ebp - 0x3780], edi
mov dword [ebp - 0x3784], 0
push 0xfffffffffffffff6
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
call esi
mov dword [ebp - 0x378c], eax
mov dword [ebp - 0x377c], 0
mov dword [ebp - 0x3778], 0
mov dword [ebp - 0x36bc], 0
mov dword [ebp - 0x3788], 0
mov byte [ebp - 0x3770], 0
xorps xmm0, xmm0
movdqu xmmword [0x45a564], xmm0
push str.telnetd.dll
push 0x104
lea eax, [ebp - 0x58c]
push eax
call fcn.00427b16
add esp, 0xc
lea eax, [ebp - 0x36d8]
cmp byte [0x45a950], 1
jne 0x4027f1
push str.PRAGMASYS_SSHD_PID
jmp 0x4027f6
push str.PRAGMASYS_TELNETD_PID
push eax
lea eax, [ebp - 0x374c]
push eax
call fcn.004271ca
add esp, 0xc
test eax, eax
jne 0x402828
mov eax, dword [ebp - 0x374c]
test eax, eax
je 0x402828
push eax
call fcn.0042779b
push dword [ebp - 0x374c]
call fcn.00426f24
add esp, 8
mov dword [ebp - 0x3758], 0xc
mov dword [ebp - 0x3750], 1
mov dword [ebp - 0x3754], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.cs__d
push 0x104
lea eax, [ebp - 0x288]
push eax
call fcn.004268c3
add esp, 0x10
test edi, edi
je 0x40289e
mov dword [ebp - 0x3764], 0
lea ecx, [ebp - 0x3764]
call fcn.004095e0
mov edi, eax
mov dword [ebp - 0x3774], eax
mov dword [ebp - 0x3780], edi
push dword [ebp - 0x3764]
push edi
push 2
call fcn.0041a470
add esp, 0xc
push 0xfffffffffffffff6
call esi
mov dword [0x45abf8], eax
call fcn.00405ff0
mov dword [0x46b218], 0x46b330
mov dword [0x47b500], 0x46b330
mov dword [0x45afa0], 0x45b040
mov dword [0x47b74c], 0x47b508
mov dword [0x45af98], 0x47b508
push str.Enter_protocolsetup_n
push 1
call fcn.0041a380
add esp, 8
mov dword [0x46b328], 0
call fcn.00406e30
mov dword [ebp - 0x36dc], 0xfa
lea eax, [ebp - 0x36dc]
push eax
lea eax, [ebp - 0x384]
push eax
push 2
call dword [sym.imp.Secur32.dll_GetUserNameExA]
push 0x5c
lea eax, [ebp - 0x384]
push eax
call fcn.00427670
mov byte [eax], 0
inc eax
push eax
push 0x104
push 0x45a718
call fcn.00427b16
lea eax, [ebp - 0x384]
push eax
push 0x104
push 0x45aaf0
call fcn.00427b16
add esp, 0x20
mov eax, dword [0x45a970]
mov ecx, 1
test edi, edi
cmovne eax, ecx
mov dword [0x45a970], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x44e5dc
lea eax, [ebp - 0x184]
push eax
call fcn.00404d10
lea eax, [ebp - 0x184]
push eax
push str.PRAGMASYS_CMDSERVER_PID
call fcn.00427ef4
push str.PRAGMASYS_INETD_PID
push 0x64
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x36d4]
push eax
call fcn.00427325
add esp, 0x24
test eax, eax
jne 0x4029c7
push str.unused
push str.PRAGMASYS_INETD_PID
call fcn.00427ef4
add esp, 8
push 0x45a964
push 0xf01ff
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov cl, byte [0x45a950]
mov edi, str.SoftwarePragmaSystemsWSMan
mov esi, str.SoftwarePragmaSystemsTelnetD
cmp cl, 1
jne 0x4029fa
mov eax, str.SoftwarePragmaSystemsSSHD
jmp 0x402a02
mov eax, edi
cmp cl, 3
cmovne eax, esi
push 0
push dword [0x45a964]
lea ecx, [ebp - 0x36b8]
push ecx
push str.HomeDir
push eax
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
test eax, eax
je 0x402a3c
mov dword [0x45a55c], eax
mov dword [0x45a580], 1
call fcn.00409440
mov dword [ebp - 0x376c], eax
cmp dword [0x457dc0], 0
je 0x402ae8
mov byte [ebp - 0x3765], 0
mov cl, byte [0x45a950]
cmp cl, 1
jne 0x402a6d
mov eax, str.SoftwarePragmaSystemsSSHD
jmp 0x402a75
mov eax, edi
cmp cl, 3
cmovne eax, esi
push 0
push dword [0x45a964]
lea ecx, [ebp - 0x36b8]
push ecx
push str.ThreadDriveMap
push eax
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov dword [ebp - 0x3764], eax
test eax, eax
je 0x402acd
push 0x44e928
push eax
call fcn.004266cb
add esp, 8
test eax, eax
jne 0x402acd
mov byte [ebp - 0x3765], 1
push dword [ebp - 0x3764]
call fcn.0041b930
add esp, 4
push 0x4024b0
movzx eax, byte [ebp - 0x3765]
push eax
push dword [0x45a964]
call fcn.0041e350
add esp, 0xc
mov cl, byte [0x45a950]
cmp cl, 1
jne 0x402afa
mov eax, str.SoftwarePragmaSystemsSSHD
jmp 0x402b02
mov eax, edi
cmp cl, 3
cmovne eax, esi
push eax
lea eax, [ebp - 0x36c4]
push eax
push str.CustomAppSupport
call fcn.0041ac50
mov dword [ebp - 0x3764], eax
push eax
push str.CustomAppSupport
push str._s___s_n
push 2
call fcn.0041a380
add esp, 0x1c
mov eax, dword [ebp - 0x3764]
test eax, eax
je 0x402b97
push 0x44e928
push eax
call fcn.004266cb
add esp, 8
test eax, eax
jne 0x402b97
call fcn.00406c40
push dword [0x457a3c]
push str.PRAGMASYS_INETD_SOCK_d
push 0x104
lea eax, [ebp - 0x120]
push eax
call fcn.004268c3
lea eax, [ebp - 0x120]
push eax
call fcn.00427c97
add esp, 0x14
lea eax, [ebp - 0x36c4]
push eax
push 0
push 0
push 0x406d50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x402bbc
push str.PRAGMASYS_INETD_SOCK
push 0x104
lea eax, [ebp - 0x120]
push eax
call fcn.004268c3
lea eax, [ebp - 0x120]
push eax
call fcn.00427c97
add esp, 0x10
mov eax, dword [0x45a94c]
cmp eax, 1
je 0x4030f4
cmp eax, 3
je 0x4030f4
mov cl, byte [0x45a950]
cmp dword [0x45a970], 0
je 0x402f8b
mov dword [ebp - 0x3744], 0
cmp cl, 1
jne 0x402bfc
mov eax, str.SoftwarePragmaSystemsSSHD
jmp 0x402c04
mov eax, edi
cmp cl, 3
cmovne eax, esi
push 0
push dword [0x45a964]
lea ecx, [ebp - 0x36b8]
push ecx
push str.NonInteractiveShell
push eax
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov esi, eax
mov dword [ebp - 0x3764], eax
test esi, esi
jne 0x402cde
mov al, byte [0x45a950]
cmp al, 1
jne 0x402c4b
mov edi, str.SoftwarePragmaSystemsSSHD
jmp 0x402c55
cmp al, 3
mov ecx, str.SoftwarePragmaSystemsTelnetD
cmovne edi, ecx
push 0
push dword [0x45a964]
lea eax, [ebp - 0x36b8]
push eax
push str.UserShell_SMode
push edi
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov esi, eax
mov dword [ebp - 0x3764], esi
test esi, esi
je 0x402cd4
mov edi, esi
lea ecx, [edi + 1]
lea ecx, [ecx]
mov al, byte [edi]
inc edi
test al, al
jne 0x402c90
sub edi, ecx
inc edi
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x3744], eax
push esi
push edi
push eax
call fcn.00427b16
add esp, 0xc
mov eax, dword [ebp - 0x3744]
mov byte [edi + eax], 0
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveArgsA]
mov eax, dword [ebp - 0x3744]
jmp 0x402d18
mov edi, dword [ebp - 0x36d4]
xor eax, eax
jmp 0x402d18
mov edi, esi
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x402ce3
sub edi, ecx
inc edi
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x3744], eax
push esi
push edi
push eax
call fcn.00427b16
add esp, 0xc
mov eax, dword [ebp - 0x3744]
mov byte [edi + eax], 0
test esi, esi
jne 0x402dab
push str.ComSpec
push esi
push esi
lea eax, [ebp - 0x36bc]
push eax
call fcn.00427325
add esp, 0x10
mov edi, dword [ebp - 0x36bc]
test edi, edi
jne 0x402d73
lea edi, [esi + 8]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x3744], eax
push str.cmd.exe
push edi
push eax
call fcn.00427b16
add esp, 0xc
mov eax, dword [ebp - 0x3744]
mov byte [eax + 8], 0
jmp 0x402dab
inc edi
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x3744], eax
push str.ComSpec
push dword [ebp - 0x36bc]
push eax
lea eax, [ebp - 0x36bc]
push eax
call fcn.00427325
add esp, 0x10
mov eax, dword [ebp - 0x3744]
test eax, eax
je 0x402e2f
test esi, esi
je 0x402dc0
push esi
call fcn.0041b930
add esp, 4
push str.cmd.exe
mov esi, dword [ebp - 0x3744]
push esi
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x402df8
push 0x44ec3c
push esi
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
jne 0x402df8
push 0x44ec40
push edi
push esi
call fcn.00427b8d
add esp, 0xc
add edi, 3
inc edi
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov dword [ebp - 0x3764], esi
lea eax, [edi - 1]
push eax
mov eax, dword [ebp - 0x3744]
push eax
push edi
push esi
call fcn.00427f68
mov byte [edi + esi - 1], 0
push dword [ebp - 0x3744]
call fcn.0041b930
add esp, 0x14
mov cl, byte [0x45a950]
mov esi, str.SoftwarePragmaSystemsTelnetD
cmp cl, 1
jne 0x402e46
mov eax, str.SoftwarePragmaSystemsSSHD
jmp 0x402e51
mov eax, str.SoftwarePragmaSystemsWSMan
cmp cl, 3
cmovne eax, esi
push 0
push dword [0x45a964]
lea ecx, [ebp - 0x36b8]
push ecx
push str.NonInteractiveMode
push eax
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov edi, eax
test edi, edi
je 0x402ebd
push str.full_stream
push edi
call fcn.004266cb
add esp, 8
test eax, eax
jne 0x402eab
mov dword [0x45a94c], 3
push str.FullStream
push str.PRAGMASYS_SCREEN_MODE
call fcn.00427ef4
jmp 0x402ed6
test edi, edi
je 0x402ebd
push str.advanced_console
push edi
call fcn.004266cb
add esp, 8
push str.AdvancedConsole
push str.PRAGMASYS_SCREEN_MODE
call fcn.00427ef4
mov dword [0x45a94c], 2
add esp, 8
push edi
call fcn.0041b930
add esp, 4
mov cl, byte [0x45a950]
cmp cl, 1
jne 0x402ef4
mov eax, str.SoftwarePragmaSystemsSSHD
jmp 0x402eff
mov eax, str.SoftwarePragmaSystemsWSMan
cmp cl, 3
cmovne eax, esi
push 0
push dword [0x45a964]
lea ecx, [ebp - 0x36b8]
push ecx
push str.NonInteractiveInputSuppression
push eax
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov esi, eax
test esi, esi
je 0x402f5d
push 0x44e928
push esi
call fcn.004266cb
add esp, 8
test eax, eax
jne 0x402f59
mov dword [ebp - 0x36bc], 1
push esi
call fcn.0041b930
mov esi, dword [ebp - 0x3764]
jmp 0x403202
test esi, esi
jne 0x402f70
cmp dword [0x45a94c], 3
mov dword [ebp - 0x36bc], 1
je 0x402f7a
mov dword [ebp - 0x36bc], 0
push esi
call fcn.0041b930
mov esi, dword [ebp - 0x3764]
jmp 0x403202
cmp cl, 1
jne 0x402f97
mov eax, str.SoftwarePragmaSystemsSSHD
jmp 0x402f9f
mov eax, edi
cmp cl, 3
cmovne eax, esi
push 0
push dword [0x45a964]
lea ecx, [ebp - 0x36b8]
push ecx
push str.UserShell
push eax
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov esi, eax
mov dword [ebp - 0x3764], esi
mov al, byte [0x45a950]
cmp al, 1
jne 0x402fde
mov ecx, str.SoftwarePragmaSystemsSSHD
jmp 0x402fea
mov ecx, edi
cmp al, 3
mov eax, str.SoftwarePragmaSystemsTelnetD
cmovne ecx, eax
push 0
push dword [0x45a964]
lea eax, [ebp - 0x36b8]
push eax
push str.UserShellInitializer
push ecx
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov dword [ebp - 0x377c], eax
mov dl, byte [0x45a950]
cmp dl, 1
jne 0x403029
mov ecx, str.SoftwarePragmaSystemsSSHD
jmp 0x403036
mov ecx, edi
cmp dl, 3
mov eax, str.SoftwarePragmaSystemsTelnetD
cmovne ecx, eax
push 0
push dword [0x45a964]
lea eax, [ebp - 0x36b8]
push eax
push str.CloseShell
push ecx
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov dword [ebp - 0x3744], eax
test eax, eax
je 0x40308d
push 0x44e928
push eax
call fcn.004266cb
add esp, 8
xor ecx, ecx
test eax, eax
mov eax, 1
cmove ecx, eax
mov dword [ebp - 0x3778], ecx
mov eax, dword [ebp - 0x3744]
push eax
call fcn.0041b930
add esp, 4
mov al, byte [0x45a950]
cmp al, 1
jne 0x4030a6
mov edi, str.SoftwarePragmaSystemsSSHD
jmp 0x4030b0
cmp al, 3
mov eax, str.SoftwarePragmaSystemsTelnetD
cmovne edi, eax
push 0
push dword [0x45a964]
lea eax, [ebp - 0x36b8]
push eax
push str.GUIShell
push edi
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov edi, eax
test edi, edi
je 0x4031fc
push 0x44e928
push edi
call fcn.004266cb
add esp, 8
jmp 0x4031fc
push str.Get_Stream_Mode_User_shell_n
push 1
call fcn.0041a380
add esp, 8
mov cl, byte [0x45a950]
cmp cl, 1
jne 0x403115
mov eax, str.SoftwarePragmaSystemsSSHD
jmp 0x40311d
mov eax, edi
cmp cl, 3
cmovne eax, esi
push 0
push dword [0x45a964]
lea ecx, [ebp - 0x36b8]
push ecx
push str.UserShell_SMode
push eax
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov esi, eax
mov dword [ebp - 0x3764], esi
mov al, byte [0x45a950]
cmp al, 1
jne 0x40315c
mov ecx, str.SoftwarePragmaSystemsSSHD
jmp 0x403168
mov ecx, edi
cmp al, 3
mov eax, str.SoftwarePragmaSystemsTelnetD
cmovne ecx, eax
push 0
push dword [0x45a964]
lea eax, [ebp - 0x36b8]
push eax
push str.UserShellInitializerStream
push ecx
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov dword [ebp - 0x377c], eax
mov al, byte [0x45a950]
cmp al, 1
jne 0x4031a5
mov edi, str.SoftwarePragmaSystemsSSHD
jmp 0x4031af
cmp al, 3
mov eax, str.SoftwarePragmaSystemsTelnetD
cmovne edi, eax
push 0
push dword [0x45a964]
lea eax, [ebp - 0x36b8]
push eax
push str.CloseStreamShell
push edi
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov edi, eax
test edi, edi
je 0x4031fc
push 0x44e928
push edi
call fcn.004266cb
add esp, 8
xor ecx, ecx
test eax, eax
mov eax, 1
cmove ecx, eax
mov dword [ebp - 0x3778], ecx
push edi
call fcn.0041b930
add esp, 4
test esi, esi
jne 0x4032b7
cmp byte [0x45a950], 3
jne 0x403269
push 0x100
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x36b4], eax
push str.ComSpec
push 0x100
push eax
lea eax, [ebp - 0x3744]
push eax
call fcn.00427325
add esp, 0x10
push dword [ebp - 0x36b4]
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
push str.WindowsPowerShell_v1.0powershell.exe
push 0x100
push dword [ebp - 0x36b4]
call fcn.00427b8d
add esp, 0xc
jmp 0x4032bd
push str.ComSpec
push 0
push 0
lea eax, [ebp - 0x3744]
push eax
call fcn.00427325
add esp, 0x10
push dword [ebp - 0x3744]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x36b4], eax
mov edi, 1
push str.ComSpec
push dword [ebp - 0x3744]
push eax
lea eax, [ebp - 0x3744]
push eax
call fcn.00427325
add esp, 0x10
jmp 0x4032c2
mov dword [ebp - 0x36b4], esi
mov edi, 1
call dword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov dword [0x457dc4], eax
cmp byte [0x45a54e], 0
je 0x40334e
mov al, byte [0x45a950]
cmp al, 1
jne 0x4032e6
mov ecx, str.SoftwarePragmaSystemsSSHD
jmp 0x4032f5
mov ecx, str.SoftwarePragmaSystemsWSMan
cmp al, 3
mov eax, str.SoftwarePragmaSystemsTelnetD
cmovne ecx, eax
push 0
push dword [0x45a964]
lea eax, [ebp - 0x36b8]
push eax
push str.CodePage
push ecx
push 0x45aaf0
push 0x45a718
call fcn.0041ae90
add esp, 0x1c
mov dword [ebp - 0x3744], eax
test eax, eax
je 0x403340
push eax
call fcn.0042779b
mov dword [0x457dc4], eax
push eax
call fcn.0041c8a0
add esp, 8
mov eax, dword [ebp - 0x3744]
push eax
call fcn.0041b930
add esp, 4
mov eax, dword [0x457dc4]
push eax
push 0x44e5d8
push 0x104
lea eax, [ebp - 0x690]
push eax
call fcn.004268c3
lea eax, [ebp - 0x690]
push eax
push str.PRAGMASYS_CODEPAGE
call fcn.00427ef4
add esp, 0x18
lea eax, [ebp - 0x36c4]
push eax
push 0
push dword [0x45a930]
push 0x4194c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push dword [ebp - 0x36b4]
push 0x1000
lea eax, [ebp - 0x2690]
push eax
call fcn.00427b16
add esp, 0xc
push dword [ebp - 0x36b4]
call dword [sym.imp.SHLWAPI.dll_PathRemoveArgsA]
lea eax, [ebp - 0x2690]
push eax
call dword [sym.imp.SHLWAPI.dll_PathGetArgsA]
test eax, eax
je 0x4033d9
mov dword [ebp - 0x36b0], eax
mov edi, 2
cmp dword [ebp - 0x377c], 0
je 0x4034ad
cmp dword [0x45a970], 0
jne 0x4034ad
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4033f8
sub ecx, edx
lea eax, [ecx + 1]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, eax
mov dword [ebp - 0x3744], edx
mov eax, esi
lea ecx, [eax + 1]
mov dword [ebp - 0x36c0], ecx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403420
sub eax, dword [ebp - 0x36c0]
push esi
inc eax
push eax
push edx
call fcn.00427b16
add esp, 0xc
mov ecx, esi
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403440
sub ecx, edx
lea eax, [ecx + 1]
push eax
push dword [ebp - 0x3744]
call fcn.004270ef
push str.cmd.exe
push dword [ebp - 0x3744]
call fcn.00427400
add esp, 0x10
test eax, eax
je 0x403491
cmp dword [ebp - 0x3778], 0
je 0x403485
mov dword [ebp + edi*4 - 0x36b4], 0x44ed50
jmp 0x403490
mov dword [ebp + edi*4 - 0x36b4], 0x44ed54
inc edi
mov eax, dword [ebp - 0x377c]
mov dword [ebp + edi*4 - 0x36b4], eax
inc edi
push dword [ebp - 0x3744]
call fcn.0041b930
add esp, 4
mov eax, dword [0x45aa7c]
mov dword [ebp - 0x3760], eax
cmp byte [0x45a950], 1
jne 0x4034db
lea eax, [ebp - 0x36c4]
push eax
push 0
push 0
push 0x401460
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp + edi*4 - 0x36b4], 0
mov eax, dword [ebp - 0x3774]
test eax, eax
je 0x403518
mov dword [ebp + edi*4 - 0x36b4], eax
mov dword [ebp + edi*4 - 0x36b0], 0
lea eax, [ebp - 0x1690]
push eax
push str.Single_command_execution:___s__n
push 2
call fcn.0041a380
add esp, 0xc
push 0x45a718
lea eax, [ebp - 0x488]
cmp byte [0x45a950], 1
jne 0x403533
push str.SSHD_PRINT__s
jmp 0x403538
push str.TELNETD_PRINT__s
push eax
call fcn.00404cf0
add esp, 0xc
mov al, byte [0x45a950]
cmp al, 1
jne 0x403551
mov eax, str.SoftwarePragmaSystemsSSHD
jmp 0x403560
cmp al, 3
mov eax, str.SoftwarePragmaSystemsWSMan
mov ecx, str.SoftwarePragmaSystemsTelnetD
cmovne eax, ecx
push fcn.004045f0
push str.TelnetServer
lea ecx, [ebp - 0x488]
push ecx
push dword [0x45abf4]
push dword [0x457dcc]
push eax
push 0
push dword [0x45a974]
push 0x45a718
call fcn.0041ee80
add esp, 0x24
mov dword [ebp - 0x36c4], eax
cmp eax, 1
jne 0x4035ec
lea eax, [ebp - 0x36d0]
push eax
push 0
push dword [0x45aa7c]
push 0x41e890
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x3784], eax
test eax, eax
jne 0x4035d7
push str.Error_in_creating_telCheckForPrintJob_NT_thread_n
push 1
call fcn.0041a380
add esp, 8
jmp 0x4035ec
push dword [ebp - 0x36d0]
push str.telCheckForPrintJob_thread_created_with_ID_0x_x_n
push 1
call fcn.0041a380
add esp, 0xc
cmp byte [0x45a950], 3
jne 0x403607
push str.WSMAN
push str.PRAGMASYS_PROTOCOL
call fcn.00427ef4
add esp, 8
push 0x8007
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 0x3744], eax
cmp dword [0x45a94c], 3
jne 0x40390d
push ecx
lea eax, [ebp - 0x3758]
push eax
lea eax, [ebp - 0x269c]
push eax
lea edx, [ebp - 0x26a0]
lea ecx, [ebp - 0x288]
call fcn.00402510
add esp, 8
lea eax, [ebp - 0x3758]
push eax
lea eax, [ebp - 0x2694]
push eax
lea edx, [ebp - 0x2698]
lea ecx, [ebp - 0x288]
call fcn.00402510
add esp, 8
lea eax, [ebp - 0x3758]
push eax
lea eax, [ebp - 0x26a4]
push eax
lea edx, [ebp - 0x26a8]
lea ecx, [ebp - 0x288]
call fcn.00402510
add esp, 0xc
mov eax, dword [ebp - 0x26a0]
mov dword [0x45a954], eax
mov eax, dword [ebp - 0x2698]
mov dword [0x45a92c], eax
mov esi, dword [ebp - 0x26a4]
mov dword [0x45abf8], esi
xor eax, eax
cmp dword [ebp - 0x36bc], eax
cmovne esi, eax
push 2
push eax
push eax
push 0x45abf8
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call edi
push eax
push esi
call edi
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push dword [ebp - 0x26a4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x45abf8]
mov dword [ebp - 0x26a4], eax
push dword [0x45a95c]
push dword [0x45a940]
push 0xfffffffffffffff5
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
call esi
push eax
call fcn.0041d500
add esp, 0xc
push 0xfffffffffffffff5
call esi
mov edi, eax
push 0xfffffffffffffff4
call esi
mov dword [ebp - 0x36c0], eax
push 0xfffffffffffffff6
call esi
mov dword [ebp - 0x3778], eax
push dword [ebp - 0x269c]
push 0xfffffffffffffff5
mov esi, dword [sym.imp.KERNEL32.dll_SetStdHandle]
call esi
push dword [ebp - 0x2694]
push 0xfffffffffffffff4
call esi
push dword [ebp - 0x26a8]
push 0xfffffffffffffff6
call esi
sub esp, 8
push 0x45a564
push ecx
push dword [ebp - 0x2694]
push dword [ebp - 0x269c]
push dword [ebp - 0x26a8]
push ecx
lea edx, [ebp - 0x36b4]
call fcn.00402380
add esp, 0x20
mov dword [ebp - 0x376c], eax
mov ecx, dword [ebp - 0x3770]
movzx ecx, cl
test eax, eax
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x3770], ecx
push edi
push 0xfffffffffffffff5
call esi
push dword [ebp - 0x36c0]
push 0xfffffffffffffff4
call esi
push dword [ebp - 0x3778]
push 0xfffffffffffffff6
call esi
push dword [ebp - 0x269c]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [ebp - 0x2694]
call edi
push dword [ebp - 0x26a8]
call edi
mov eax, dword [0x45a954]
mov dword [ebp - 0x375c], eax
mov esi, dword [ebp - 0x3764]
mov edi, dword [ebp - 0x376c]
cmp dword [0x45a94c], 0
jne 0x403e04
push 0
push 0
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov dword [0x45a710], eax
push 0x4070c0
push eax
call fcn.0041d730
add esp, 8
cmp byte [0x45a54f], 0
jne 0x40381c
call fcn.00408380
push dword [0x45a710]
call fcn.0041d620
add esp, 4
mov dword [0x45a554], eax
push dword [0x45a948]
push dword [0x45aaec]
push 0xfffffffffffffff5
mov edi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
call edi
push eax
call fcn.0041d480
add esp, 0xc
mov dword [0x45a954], 0xffffffff
push 0xfffffffffffffff5
call edi
mov dword [ebp - 0x375c], eax
push str.Run_shell_in_a_console_mode_n
push 1
call fcn.0041a380
add esp, 8
cmp dword [0x457dd4], 0
je 0x403dca
mov edi, dword [0x457a30]
push edi
push str.Dll_path___s_n
push 2
call fcn.0041a380
lea edx, [ebp - 0x3788]
lea ecx, [ebp - 0x36b4]
call fcn.004022c0
push 0x44
push 0
lea eax, [ebp - 0x3724]
push eax
call fcn.0042bf20
add esp, 0x18
xorps xmm0, xmm0
movdqu xmmword [0x45a564], xmm0
mov dword [ebp - 0x3724], 0x44
lea eax, [ebp - 0x36c0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
test eax, eax
je 0x403d28
mov eax, dword [ebp - 0x36c0]
test eax, eax
je 0x403d28
cmp eax, 6
jne 0x403d28
push ecx
lea edx, [ebp - 0x120]
mov ecx, edi
call fcn.004021f0
add esp, 4
jmp 0x403d3d
cmp dword [0x45a94c], 1
jne 0x403ab1
push str.Run_shell_in_stream_mode_n
push 1
call fcn.0041a380
add esp, 8
cmp dword [0x457dc8], 0
je 0x40398b
lea eax, [ebp - 0x58c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x403961
push str.telnetdHookFunctions
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x47bb5c], eax
test eax, eax
je 0x403966
push 4
call eax
add esp, 4
mov eax, dword [0x47bb5c]
test esi, esi
je 0x40396e
test eax, eax
jne 0x40398b
push str.Unable_to_load_external_dll_telnetd.dll_r_nEcho_may_not_work_correctly
push 0
push 1
push 2
push 0xe0000003
push str.TelnetServer
call fcn.00419930
add esp, 0x18
cmp byte [0x45a54f], 0
jne 0x403999
call fcn.00408380
push ecx
lea eax, [ebp - 0x3758]
push eax
lea eax, [ebp - 0x269c]
push eax
lea edx, [ebp - 0x26a0]
lea ecx, [ebp - 0x288]
call fcn.00402510
add esp, 8
lea eax, [ebp - 0x3758]
push eax
lea eax, [ebp - 0x2694]
push eax
lea edx, [ebp - 0x2698]
lea ecx, [ebp - 0x288]
call fcn.00402510
add esp, 0xc
mov eax, dword [ebp - 0x26a0]
mov dword [0x45a954], eax
mov eax, dword [ebp - 0x2698]
mov dword [0x45a92c], eax
push 0xfffffffffffffff5
mov edi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
call edi
push eax
call dword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
movsx edx, ax
mov esi, dword [0x45a940]
cmp edx, esi
cmovl esi, edx
mov dword [0x45a940], esi
shr eax, 0x10
cwde
mov ecx, dword [0x45a95c]
cmp eax, ecx
cmovl ecx, edx
mov dword [0x45a95c], ecx
push ecx
push esi
push 0xfffffffffffffff5
call edi
push eax
call fcn.0041d500
add esp, 4
push 0x45a564
push ecx
push dword [ebp - 0x2694]
push dword [ebp - 0x269c]
push dword [0x45abf8]
push ecx
lea edx, [ebp - 0x36b4]
call fcn.00402380
add esp, 0x20
mov edi, eax
mov dword [ebp - 0x376c], edi
mov eax, dword [ebp - 0x3770]
movzx eax, al
test edi, edi
mov ecx, 1
cmovne eax, ecx
mov byte [ebp - 0x3770], al
push dword [ebp - 0x269c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x2694]
call esi
mov eax, dword [0x45a954]
mov dword [ebp - 0x375c], eax
mov esi, dword [ebp - 0x3764]
jmp 0x4037e0
cmp dword [0x45a94c], 2
jne 0x4037da
mov edi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp dword [0x45a970], 0
jne 0x403ae5
push dword [0x45a948]
push dword [0x45aaec]
push 0xfffffffffffffff5
call edi
push eax
call fcn.0041d480
jmp 0x403afb
push dword [0x45a95c]
push dword [0x45a940]
push 0xfffffffffffffff5
call edi
push eax
call fcn.0041d500
add esp, 0xc
cmp byte [0x45a54f], 0
jne 0x403b0c
call fcn.00408380
mov dword [0x45a93c], 7
push str.screenmode__MIXED_n
push 2
call fcn.0041a380
add esp, 8
push 0
push 0
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov dword [0x45a710], eax
push 0x4070c0
push eax
call fcn.0041d730
push dword [0x45a710]
call fcn.0041d620
add esp, 0xc
mov dword [0x45a554], eax
test eax, eax
jne 0x403b7a
mov dword [0x45a94c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateNamedPipe_failed_with__d_n
push 2
call fcn.0041a380
add esp, 0xc
jmp 0x4037da
mov edi, dword [0x457a30]
push edi
push str.Dll_path___s_n
push 2
call fcn.0041a380
lea edx, [ebp - 0x3788]
lea ecx, [ebp - 0x36b4]
call fcn.004022c0
push 0x44
push 0
lea eax, [ebp - 0x3724]
push eax
call fcn.0042bf20
add esp, 0x18
xorps xmm0, xmm0
movdqu xmmword [0x45a564], xmm0
mov dword [ebp - 0x3724], 0x44
cmp dword [0x45a970], 0
jne 0x403bf7
mov dword [ebp - 0x370c], 0x50
mov dword [ebp - 0x3708], 0x18
mov dword [ebp - 0x3704], 0x50
mov dword [ebp - 0x3700], 0x18
push ecx
lea eax, [ebp - 0x120]
push eax
mov edx, edi
mov ecx, esi
call fcn.00402240
add esp, 8
push 0
lea eax, [ebp - 0x120]
push eax
push 0x45a564
lea eax, [ebp - 0x3724]
push eax
push 0
push 0
push 0x4000004
push 1
push 0
push 0
mov edi, dword [ebp - 0x3788]
push edi
push 0
call fcn.00422030
test eax, eax
jne 0x403d06
cmp dword [0x45a970], eax
jne 0x403cde
mov dword [0x45a94c], eax
push str.Advanced_Console_failed.
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 1
push 1
push 0x6000300d
push str.TelnetServer
call fcn.00419930
push dword [0x45a554]
call fcn.0041d550
add esp, 0x1c
push 0
push 0
push 0
push dword [0x45a710]
call dword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
mov dword [0x45a710], 0
push str.Console
push 0x104
lea eax, [ebp - 0x120]
push eax
call fcn.004268c3
lea eax, [ebp - 0x120]
push eax
push str.PRAGMASYS_SCREEN_MODE
call fcn.00427ef4
add esp, 0x14
mov edi, dword [ebp - 0x376c]
mov eax, dword [0x45a568]
mov dword [0x45a820], eax
jmp 0x4037e0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
push str.Unable_to_execute_NonInteractive_command__s.
push eax
push 1
push 1
push 0x6000300d
push str.TelnetServer
call fcn.00419930
add esp, 0x1c
jmp 0x4042eb
mov byte [ebp - 0x3770], 1
mov edi, dword [0x45a56c]
mov dword [ebp - 0x376c], edi
mov eax, dword [0x45a568]
mov dword [0x45a820], eax
jmp 0x4037e0
push edi
push 0x104
lea eax, [ebp - 0x120]
push eax
call fcn.00427b16
add esp, 0xc
push 0
lea eax, [ebp - 0x120]
push eax
push 0x45a564
lea eax, [ebp - 0x3724]
push eax
push 0
push 0
push 0x4000004
push 1
push 0
push 0
push dword [ebp - 0x3788]
push 0
call fcn.00422030
test eax, eax
jne 0x403dab
mov dword [0x45a94c], eax
push str.Unable_to_automatically_wrap_shell.
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 1
push 1
push 0x6000300d
push str.TelnetServer
call fcn.00419930
add esp, 0x18
mov edi, dword [ebp - 0x376c]
mov eax, dword [0x45a568]
mov dword [0x45a820], eax
jmp 0x403e04
mov byte [ebp - 0x3770], 1
mov edi, dword [0x45a56c]
mov dword [ebp - 0x376c], edi
mov eax, dword [0x45a568]
mov dword [0x45a820], eax
jmp 0x403e04
push 0
push 0
push 0x45a564
push 4
push 0xfffffffffffffff4
call edi
push eax
push 0xfffffffffffffff5
call edi
push eax
push dword [0x45abf8]
push 0
lea eax, [ebp - 0x36b4]
push eax
push 0
call fcn.0041b950
add esp, 0x28
mov edi, eax
mov dword [ebp - 0x376c], edi
test edi, edi
jne 0x403e12
mov eax, dword [ebp - 0x3770]
test al, al
je 0x40427e
push dword [0x45a56c]
call dword [sym.imp.KERNEL32.dll_GetProcessVersion]
test eax, eax
je 0x40427e
push edi
push dword [ebp - 0x36b4]
push str.Started__s._ProcessId___d_n
push 1
call fcn.0041a380
add esp, 0x10
push dword [ebp - 0x3744]
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
cmp dword [0x457e3c], 0
je 0x403f34
cmp dword [ebp - 0x3774], 0
jne 0x403f34
mov dword [ebp - 4], 0
push str.RunNTScript_is_true_r_n
push 2
call fcn.0041a380
push dword [0x45a964]
push 0x45aaf0
push 0x45a718
call fcn.0041d7d0
add esp, 0x14
mov dword [0x45a934], eax
test eax, eax
je 0x403f2d
push str.user_script_run_n
push 1
call fcn.0041a380
add esp, 8
xor edx, edx
mov dword [ebp - 0x3748], edx
mov esi, dword [0x45a934]
mov ecx, esi
lea edi, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403ec0
sub ecx, edi
cmp edx, ecx
jae 0x403ee7
lea eax, [esi + edx]
cmp byte [eax], 0x5c
jne 0x403ede
mov byte [eax], 0x2f
mov edx, dword [ebp - 0x3748]
inc edx
mov dword [ebp - 0x3748], edx
jmp 0x403eb7
mov ecx, esi
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403ef0
sub ecx, edx
push ecx
lea eax, [ebp - 0x3748]
push eax
push ecx
mov edx, esi
call fcn.004146c0
add esp, 8
lea eax, [ebp - 0x3748]
push eax
push 2
mov edx, 0x44f000
call fcn.004146c0
push dword [0x45a934]
call fcn.00426f24
add esp, 0x10
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x3774]
push eax
call fcn.0041b930
push dword [ebp - 0x3764]
call fcn.0041b930
add esp, 8
mov eax, dword [ebp - 0x376c]
mov dword [0x45a968], eax
mov eax, dword [0x45a564]
mov dword [0x45aa84], eax
mov eax, dword [0x45a568]
mov dword [0x45a820], eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateJobObjectA]
mov dword [0x45a53c], eax
test eax, eax
je 0x403fad
push dword [0x45aa84]
push eax
call dword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
test eax, eax
jne 0x403fad
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [0x45a53c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x45a53c], 0
push 1
push 0x4021e0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea eax, [ebp - 0x36cc]
push eax
push 4
lea eax, [ebp - 0x3760]
push eax
push 0x4043f0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
test edi, edi
jne 0x404011
push str.Error_in_creating_gatheroutput_NT_thread_n
push 1
call fcn.0041a380
add esp, 8
jmp 0x404026
push dword [ebp - 0x36cc]
push str.GatherOutput_thread_created_with_ID_0x_x_n
push 1
call fcn.0041a380
add esp, 0xc
mov eax, dword [0x45a94c]
test eax, eax
je 0x404034
cmp eax, 2
jne 0x404047
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [0x45a960], eax
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push edi
mov esi, dword [sym.imp.KERNEL32.dll_ResumeThread]
call esi
push dword [0x45a820]
call esi
dec eax
push eax
push str.Suspend_Cnt_for_user_shell___d_after_resume_n
push 2
call fcn.0041a380
add esp, 0xc
mov eax, dword [ebp - 0x377c]
test eax, eax
je 0x404085
push eax
call fcn.0041b930
add esp, 4
cmp dword [0x45a94c], 3
jne 0x4040bc
cmp byte [0x457c4c], 0
je 0x4040bc
lea eax, [ebp - 0x36c8]
push eax
mov esi, dword [ebp - 0x378c]
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov eax, dword [ebp - 0x36c8]
and eax, 0xfffffff8
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea eax, [ebp - 0x36e0]
push eax
push 0
push 0
push 0x404310
push 0
push 0
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
call esi
mov dword [ebp - 0x378c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.GlobalCmdSvrSD__d__d
lea eax, [ebp - 0x120]
push eax
call fcn.00404cf0
add esp, 0x10
lea eax, [ebp - 0x120]
push eax
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [ebp - 0x3780], eax
test eax, eax
je 0x404133
lea ecx, [ebp - 0x36c0]
push ecx
push 0
push eax
push 0x4024e0
push 0
push 0
call esi
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
lea esp, [esp]
push 0
push 0
push 0
lea eax, [ebp - 0x3740]
push eax
call esi
test eax, eax
je 0x404140
mov eax, dword [ebp - 0x373c]
sub eax, 0x464
je 0x40417a
dec eax
jne 0x404140
mov byte [0x45a54d], 1
push dword [0x45a944]
mov esi, dword [sym.imp.KERNEL32.dll_SetEvent]
call esi
jmp 0x404180
mov esi, dword [sym.imp.KERNEL32.dll_SetEvent]
push dword [ebp - 0x3780]
call esi
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp - 0x3780]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
mov eax, dword [ebp - 0x378c]
mov dword [ebp - 0x26b4], eax
mov dword [ebp - 0x26b0], edi
mov dword [ebp - 0x26ac], 0
push 0x3e8
push 1
lea eax, [ebp - 0x26b4]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp dword [ebp - 0x36c4], 0
je 0x4041e6
call fcn.0041ea90
push dword [ebp - 0x3784]
call esi
cmp dword [0x45a538], 0
je 0x404207
push dword [0x45a6f8]
call dword [sym.imp.USER32.dll_SetThreadDesktop]
push dword [0x45a538]
call dword [sym.imp.USER32.dll_CloseDesktop]
cmp dword [0x45a574], 0
je 0x404228
push dword [0x45a584]
call dword [sym.imp.USER32.dll_SetProcessWindowStation]
push dword [0x45a574]
call dword [sym.imp.USER32.dll_CloseWindowStation]
mov eax, dword [0x45a530]
test eax, eax
je 0x404238
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [0x45a944]
test eax, eax
je 0x404248
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call esi
push 0
push 0x4021e0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
xor ecx, ecx
call fcn.004118d0
push str.telnet_server:_a_client_session_completed._n
push 1
call fcn.0041a380
add esp, 8
mov eax, dword [0x45a544]
jmp 0x4042ed
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
lea edx, [ebp - 0x3784]
lea ecx, [ebp - 0x36b4]
call fcn.004022c0
test eax, eax
je 0x4042c0
mov esi, dword [ebp - 0x3784]
push esi
push str.Command_Shell_Startup_Failure:__s.
push edi
push 1
push 1
push 0x6000300d
push str.TelnetServer
call fcn.00419930
add esp, 0x1c
jmp 0x4042e2
push str.Command_Shell_Startup_Failure
push edi
push 1
push 1
push 0x6000300d
push str.TelnetServer
call fcn.00419930
add esp, 0x18
mov esi, dword [ebp - 0x3784]
push esi
call fcn.00426f24
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004265fb
mov esp, ebp
pop ebp
ret