Function at 0x401220
Capabilities:
Create process on windows
Execute command

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x403016
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x406040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.hi.bat
lea ecx, [ebp - 0x70]
call fcn.004016c0
push str.close.bat
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0
call fcn.004016c0
push str.vcleave.bat
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 1
call fcn.004016c0
push str.made_by_dyo
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.004016c0
mov dword [ebp - 4], 3
xorps xmm0, xmm0
movups xmmword [ebp - 0xa4], xmm0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
movups xmmword [ebp - 0x8c], xmm0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
push 0xfa0
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop dword [eax]
push 0x404250
call edi
add esp, 4
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
push 1
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Welcome_to_Private_Cord_v3
push 0x401af0
call fcn.004018d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 7
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Enter_username:
call fcn.004018d0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0xa4]
call fcn.00401b20
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Enter_password:
call fcn.004018d0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x8c]
call fcn.00401b20
cmp dword [ebp - 0x90], 0xf
lea eax, [ebp - 0xa4]
cmova eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x94], 5
jne 0x4013db
cmp dword [eax], 0x696d6461
jne 0x4013db
cmp byte [eax + 4], 0x6e
jne 0x4013db
cmp dword [ebp - 0x78], 0xf
lea eax, [ebp - 0x8c]
cmova eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x7c], 3
jne 0x4013c4
cmp word [eax], 0x3231
jne 0x4013c4
cmp byte [eax + 2], 0x33
je 0x401420
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Incorrect_username_or_password._Please_try_again.
push 0x401af0
call fcn.004018d0
jmp 0x4013f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Incorrect_username_or_password._Please_try_again.
call fcn.004018d0
push 0x401af0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.pause
call edi
add esp, 4
jmp 0x4012f0
push 5
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
nop dword [eax + eax]
push 0x404250
call edi
add esp, 4
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
push 1
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Welcome_to_Private_Cord_v3
push 0x401af0
call fcn.004018d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 7
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.select_your_choice_to_start:
push 0x401af0
call fcn.004018d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.1._Private_Cord_V3__Beta_
push 0x401af0
call fcn.004018d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.2._close
push 0x401af0
call fcn.004018d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.3._leave_vc
push 0x401af0
call fcn.004018d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.4._made_by_dyo
push 0x401af0
call fcn.004018d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.5._Exit
push 0x401af0
call fcn.004018d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Enter_your_choice:
call fcn.004018d0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
mov eax, dword [ebp - 0x74]
dec eax
cmp eax, 4
ja case.default.0x40153a
jmp dword [eax*4 + 0x401650]
cmp dword [ebp - 0x5c], 0xf
lea eax, [ebp - 0x70]
cmova eax, dword [ebp - 0x70]
jmp 0x401407
cmp dword [ebp - 0x44], 0xf
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
jmp 0x401407
cmp dword [ebp - 0x2c], 0xf
lea eax, [ebp - 0x40]
cmova eax, dword [ebp - 0x40]
jmp 0x401407
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Invalid_choice._Please_try_again.
push 0x401af0
call fcn.004018d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.pause
call edi
add esp, 4
jmp 0x401420
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x78]
cmp eax, 0xf
jbe 0x4015d6
mov ecx, dword [ebp - 0x8c]
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x4015cc
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401608
push edx
push ecx
call fcn.00402164
add esp, 8
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x90]
cmp eax, 0xf
jbe 0x401618
mov ecx, dword [ebp - 0xa4]
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x40160e
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40160e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00402164
add esp, 8
push 0x401670
push 4
push 0x18
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.0040204f
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00402011
mov esp, ebp
pop ebp
ret