Function at 0x40c560
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Encode data using xor
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x43ba13
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x1d8
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm4, dword [0x4a4490]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x450080]
mov eax, dword [0x45c7f4]
cvtpd2ps xmm0, xmm0
movss xmm2, dword [eax + 0xc]
divss xmm0, dword [0x44fc40]
movss dword [0x4a4484], xmm0
movss xmm0, dword [0x44fb0c]
comiss xmm0, xmm4
movaps xmm3, xmm0
subss xmm3, xmm2
mulss xmm3, dword [0x44fac4]
jbe 0x40c5f5
movaps xmm1, xmm0
jmp 0x40c5f8
xorps xmm1, xmm1
mulss xmm2, dword [0x44fb50]
subss xmm1, xmm4
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0x3f800000
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x38d1b717
addss xmm2, dword [0x4a4498]
mulss xmm1, xmm3
addss xmm1, xmm4
movss dword [ebp - 0x28], xmm2
movss dword [0x4a4490], xmm1
movss xmm1, dword [0x44fab0]
comiss xmm1, xmm2
seta al
test al, al
cmove edx, ecx
lea ecx, [ebp - 0x18]
comiss xmm2, xmm0
seta al
test al, al
cmove ecx, edx
movss xmm0, dword [ecx]
comiss xmm1, xmm0
movss dword [0x4a4498], xmm0
jae 0x40da23
mov eax, dword fs:[0x2c]
mov esi, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, dword [eax]
mov eax, dword [0x4ddd30]
mov dword [ebp - 0x4c], ecx
cmp eax, dword [ecx + 4]
jle 0x40c6c2
push 0x4ddd30
call fcn.0043a09b
add esp, 4
cmp dword [0x4ddd30], 0xffffffff
jne 0x40c6c2
call esi
cdq
mov ecx, 0x3e8
idiv ecx
push 0x4ddd30
add edx, 0xc8
mov dword [0x4ddd28], edx
call fcn.0043a051
add esp, 4
mov eax, dword [0x4ddd28]
mov edx, 1
mov ecx, dword [0x4dd8f4]
add eax, 0xc8
cmp ecx, eax
jge 0x40c6e4
inc ecx
mov dword [0x4dd8f4], ecx
jmp 0x40c745
movss xmm0, dword [0x4a3de4]
comiss xmm0, dword [0x44fa9c]
jbe 0x40c732
call esi
cdq
mov ecx, 0xc8
idiv ecx
mov eax, dword [0x45c7f4]
movss xmm1, dword [eax + 0xc]
mulss xmm1, dword [0x44fb78]
movd xmm0, edx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
movss xmm0, dword [0x4a3de4]
subss xmm0, xmm1
movss dword [0x4a3de4], xmm0
jmp 0x40c745
mov al, byte [0x4dd8fc]
test al, al
movzx ecx, al
cmove ecx, edx
mov byte [0x4dd8fc], cl
mov ecx, dword [0x45c7f4]
push ecx
mov eax, dword [ecx + 0x172c]
mov byte [eax + 0x86], 1
mov eax, dword [ecx + 0x172c]
mov edi, dword [eax + 0x254]
push edi
call fcn.00409680
push 0xffffffffffffffff
push ecx
mov dword [esp], 0
lea eax, [ebp - 0x34]
push 0xfa3a1b1b
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x34], 0x442f0000
push eax
mov ecx, edi
mov dword [ebp - 0x30], 0x43eb0000
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.00434db0
movss xmm1, dword [0x4a4498]
xorps xmm0, xmm0
comiss xmm0, xmm1
ja 0x40c7c1
movss xmm0, dword [0x44fb0c]
minss xmm0, xmm1
mulss xmm0, dword [0x44fc30]
mov ecx, edi
mov dword [ebp - 0x34], 0x3f800000
mov dword [ebp - 0x30], 0x3f800000
mov dword [ebp - 0x1c], 0
addss xmm0, dword [0x44fae4]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x24], 0x435c0000
mov dword [ebp - 0x20], 0x42cc0000
mov dword [ebp - 0x2c], 0
cvttss2si eax, xmm0
mov dword [ebp - 0x28], 0
shl eax, 0x18
or eax, 0x351818
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x2c]
push eax
push dword [0x4a4414]
call fcn.00435220
movss xmm1, dword [0x4a4498]
xorps xmm0, xmm0
comiss xmm0, xmm1
ja 0x40c84f
movss xmm0, dword [0x44fb0c]
minss xmm0, xmm1
mulss xmm0, dword [0x44fc30]
mov ecx, edi
mov dword [ebp - 0x34], 0x3f800000
mov dword [ebp - 0x30], 0x3f800000
mov dword [ebp - 0x1c], 0
addss xmm0, dword [0x44fae4]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x24], 0x442f0000
mov dword [ebp - 0x20], 0x43eb0000
mov dword [ebp - 0x2c], 0x440d4000
cvttss2si eax, xmm0
mov dword [ebp - 0x28], 0x43de8000
shl eax, 0x18
or eax, 0x351818
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x2c]
push eax
push dword [0x4a43f8]
call fcn.00435220
push ecx
push edi
call fcn.00409680
mov ecx, dword [0x4a4424]
mov esi, dword [0x45c7f4]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x20], ecx
test ecx, ecx
jne 0x40c91c
mov ecx, dword [esi + 0x8c]
test ecx, ecx
jne 0x40c916
mov esi, dword [esi + 0x80]
cmp dword [esi + 0x20], ecx
jg 0x40c90e
push 0x371
push 0x44c6e8
push str.i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [esi + 0x28]
mov esi, dword [ebp - 0x18]
mov ecx, dword [eax]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x28], ecx
call fcn.00422320
lea eax, [ebp - 0x28]
lea ecx, [esi + 0x179c]
push eax
call fcn.0042b410
mov eax, dword [esi + 0x172c]
mov ecx, dword [eax + 0x254]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], ecx
lea esi, [ecx + 0x44]
mov eax, dword [eax + 0x44]
mov ecx, dword [esi]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 4]
cmp ecx, eax
jne 0x40c975
inc ecx
test eax, eax
je 0x40c963
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi + 4]
jmp 0x40c968
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.0042b390
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0x28]
inc dword [esi]
call fcn.00432f00
movss xmm1, dword [0x4a4498]
xorps xmm0, xmm0
comiss xmm0, xmm1
ja 0x40c9a8
movss xmm0, dword [0x44fb0c]
minss xmm0, xmm1
mulss xmm0, dword [0x44fc30]
push ecx
push str.Client_Version:
mov ecx, edi
mov dword [ebp - 0x34], 0x41200000
addss xmm0, dword [0x44fae4]
mov dword [ebp - 0x30], 0x41000000
cvttss2si eax, xmm0
shl eax, 0x18
or eax, 0xffffff
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00435120
call fcn.004223e0
mov ecx, dword [0x4a4424]
mov esi, dword [0x45c7f4]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x28], ecx
test ecx, ecx
jne 0x40ca3d
mov ecx, dword [esi + 0x8c]
test ecx, ecx
jne 0x40ca37
mov esi, dword [esi + 0x80]
cmp dword [esi + 0x20], ecx
jg 0x40ca2f
push 0x371
push 0x44c6e8
push str.i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [esi + 0x28]
mov esi, dword [ebp - 0x18]
mov ecx, dword [eax]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x20], ecx
call fcn.00422320
lea eax, [ebp - 0x20]
lea ecx, [esi + 0x179c]
push eax
call fcn.0042b410
mov eax, dword [esi + 0x172c]
mov ecx, dword [eax + 0x254]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], ecx
lea esi, [ecx + 0x44]
mov eax, dword [eax + 0x44]
mov ecx, dword [esi]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 4]
cmp ecx, eax
jne 0x40ca96
inc ecx
test eax, eax
je 0x40ca84
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi + 4]
jmp 0x40ca89
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.0042b390
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0x20]
inc dword [esi]
call fcn.00432f00
cmp dword [0x4a48ac], 0x10
mov ecx, 0x4a4898
movss xmm1, dword [0x4a4498]
xorps xmm0, xmm0
cmovae ecx, dword [0x4a4898]
comiss xmm0, xmm1
ja 0x40cadc
movss xmm0, dword [0x44fb0c]
minss xmm0, xmm1
mulss xmm0, dword [0x44fc30]
push ecx
push ecx
mov ecx, edi
mov dword [ebp - 0x34], 0x42900000
addss xmm0, dword [0x44fae4]
mov dword [ebp - 0x30], 0x41000000
cvttss2si eax, xmm0
shl eax, 0x18
or eax, 0xffffff
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00435120
call fcn.004223e0
mov ecx, dword [0x4a4424]
mov esi, dword [0x45c7f4]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x28], ecx
test ecx, ecx
jne 0x40cb6d
mov ecx, dword [esi + 0x8c]
test ecx, ecx
jne 0x40cb67
mov esi, dword [esi + 0x80]
cmp dword [esi + 0x20], ecx
jg 0x40cb5f
push 0x371
push 0x44c6e8
push str.i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [esi + 0x28]
mov esi, dword [ebp - 0x18]
mov ecx, dword [eax]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x20], ecx
call fcn.00422320
lea eax, [ebp - 0x20]
lea ecx, [esi + 0x179c]
push eax
call fcn.0042b410
mov eax, dword [esi + 0x172c]
mov ecx, dword [eax + 0x254]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], ecx
lea esi, [ecx + 0x44]
mov eax, dword [eax + 0x44]
mov ecx, dword [esi]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 4]
cmp ecx, eax
jne 0x40cbc6
inc ecx
test eax, eax
je 0x40cbb4
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi + 4]
jmp 0x40cbb9
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.0042b390
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0x20]
inc dword [esi]
call fcn.00432f00
movss xmm1, dword [0x4a4498]
xorps xmm0, xmm0
comiss xmm0, xmm1
ja 0x40cbf9
movss xmm0, dword [0x44fb0c]
minss xmm0, xmm1
mulss xmm0, dword [0x44fc30]
push ecx
push str.BSOD.TEAM
mov ecx, edi
mov dword [ebp - 0x34], 0x441a0000
addss xmm0, dword [0x44fae4]
mov dword [ebp - 0x30], 0x43e20000
cvttss2si eax, xmm0
shl eax, 0x18
or eax, 0xffffff
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00435120
call fcn.004223e0
mov esi, dword [0x45c7f4]
mov dword [ebp - 0x34], 0x442f0000
mov dword [ebp - 0x30], 0x41d00000
mov eax, dword [esi + 0x172c]
mov byte [eax + 0x86], 1
mov eax, dword [esi + 0x172c]
mov dword [ebp - 0x18], eax
cmp dword [eax + 0x1c0], 0
jg 0x40cc8e
push 0x37b
push 0x44c6e8
push str.Size___0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov esi, dword [0x45c7f4]
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x1c0]
xor edx, edx
mov eax, dword [eax + 0x1c8]
push dword [eax + ecx*4 - 4]
mov ecx, str.Top_Area
call fcn.00418330
add esp, 4
cmp dword [esi + 0x1754], eax
jne 0x40ccbc
mov byte [esi + 0x175c], 1
push 4
lea edx, [ebp - 0x34]
mov ecx, str.Top_Area
push 0
push edx
mov edx, eax
call fcn.0041d2c0
mov ecx, dword [0x45c7f4]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x34], 0x3f800000
mov dword [ebp - 0x30], 0x3f800000
mov dword [ebp - 0x1c], 0
mov eax, dword [ecx + 0x172c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x24], 0x41900000
mov dword [ebp - 0x20], 0x41900000
mov byte [eax + 0x86], 1
mov eax, dword [ecx + 0x172c]
movss xmm0, dword [eax + 0x1c]
movss xmm2, dword [eax + 0x18]
subss xmm0, dword [eax + 0x60]
subss xmm2, dword [eax + 0x5c]
addss xmm0, dword [0x44fa9c]
addss xmm2, dword [0x44fc3c]
movss dword [eax + 0xbc], xmm0
movss dword [eax + 0xb8], xmm2
movss xmm1, dword [eax + 0xd4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xd0]
maxss xmm0, xmm2
movss dword [eax + 0xd4], xmm1
movss dword [eax + 0xd0], xmm0
lea eax, [ebp - 0x34]
mov ecx, dword [0x4a4408]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00424fb0
add esp, 0x14
test al, al
je 0x40cd9b
push 0
mov byte [0x4a442c], 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.0041d490
mov esi, dword [0x45c7f4]
lea eax, [ebp - 0x38]
movss xmm0, dword [0x4a4490]
movss dword [ebp - 0x18], xmm0
push eax
movss xmm0, dword [esi + 0x13c0]
lea ecx, [esi + 0x1790]
mov dword [ebp - 0x38], 0
movss dword [ebp - 0x34], xmm0
call fcn.0042b2d0
movss xmm0, dword [ebp - 0x18]
movss dword [esi + 0x13c0], xmm0
mov esi, dword [0x45c7f4]
mov dword [ebp - 0x34], 0x442f0000
mov dword [ebp - 0x30], 0x43c80000
mov eax, dword [esi + 0x172c]
mov byte [eax + 0x86], 1
mov eax, dword [esi + 0x172c]
mov dword [ebp - 0x18], eax
cmp dword [eax + 0x1c0], 0
jg 0x40ce37
push 0x37b
push 0x44c6e8
push str.Size___0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov esi, dword [0x45c7f4]
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x1c0]
xor edx, edx
mov eax, dword [eax + 0x1c8]
push dword [eax + ecx*4 - 4]
mov ecx, str.Area
call fcn.00418330
add esp, 4
cmp dword [esi + 0x1754], eax
jne 0x40ce65
mov byte [esi + 0x175c], 1
push 4
lea edx, [ebp - 0x34]
mov ecx, str.Area
push 0
push edx
mov edx, eax
call fcn.0041d2c0
add esp, 0xc
cmp byte [0x4dd8fc], 0
jne 0x40cfcc
movss xmm0, dword [0x4a3de4]
comiss xmm0, dword [0x44fa9c]
jbe 0x40d9a1
movss xmm3, dword [0x4a4498]
sub esp, 8
movss xmm0, dword [0x44fc38]
movaps xmm1, xmm3
mulss xmm1, dword [0x44fbf0]
mov ecx, dword [0x45c7f4]
movss dword [ebp - 0x30], xmm3
mov dword [esp + 4], 0x40c00000
subss xmm0, xmm1
mov dword [ebp - 0x64], 0x3dc8c8c9
mov eax, dword [ecx + 0x172c]
movaps xmm1, xmm3
mulss xmm1, dword [0x44fbf8]
mov dword [ebp - 0x60], 0x3dc8c8c9
mov dword [ebp - 0x5c], 0x3dc8c8c9
cvttss2si esi, xmm0
mov byte [eax + 0x86], 1
mov eax, dword [ecx + 0x172c]
mov dword [ebp - 0x3c], 0x3e909091
mov dword [ebp - 0x38], 0x3f129293
mov dword [ebp - 0x34], 0x3f56d6d7
movss xmm0, dword [0x44fc28]
subss xmm0, xmm1
movss xmm1, dword [eax + 0x1c]
subss xmm1, dword [eax + 0x60]
movd xmm2, esi
cvtdq2ps xmm2, xmm2
cvttss2si edx, xmm0
movss xmm0, dword [eax + 0x18]
subss xmm0, dword [eax + 0x5c]
addss xmm2, xmm0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
lea edx, [ebp - 0x3c]
movss dword [eax + 0xb8], xmm2
addss xmm0, xmm1
movss dword [eax + 0xbc], xmm0
movss xmm1, dword [eax + 0xd4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xd0]
maxss xmm0, xmm2
movss dword [eax + 0xd4], xmm1
movss dword [eax + 0xd0], xmm0
lea eax, [ebp - 0x64]
cvtps2pd xmm0, xmm3
push eax
mulss xmm3, dword [0x44fbdc]
divsd xmm0, qword [0x44fb30]
cvtpd2ps xmm1, xmm0
movss dword [ebp - 0x58], xmm1
movaps xmm1, xmm3
call fcn.0040c170
add esp, 0xc
cmp byte [0x4dd8fc], 0
je 0x40d9a1
mov edx, dword [0x45c7f4]
lea esi, [ebp - 0x20]
movss xmm1, dword [0x44fab0]
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x28], 0x3f800000
mov dword [ebp - 0x18], 0x38d1b717
movss xmm0, dword [edx + 0xc]
mulss xmm0, dword [0x44fafc]
mov dword [ebp - 0x30], edx
addss xmm0, dword [0x4a4494]
comiss xmm1, xmm0
movss dword [ebp - 0x20], xmm0
seta al
test al, al
cmove ecx, esi
lea esi, [ebp - 0x28]
comiss xmm0, dword [0x44fb0c]
seta al
test al, al
cmove esi, ecx
movss xmm0, dword [esi]
comiss xmm1, xmm0
movss dword [0x4a4494], xmm0
jae 0x40da23
movss xmm0, dword [edx + 0x13c0]
lea eax, [ebp - 0x60]
lea ecx, [edx + 0x1790]
mov dword [ebp - 0x60], 0
push eax
movss dword [ebp - 0x5c], xmm0
call fcn.0042b2d0
mov eax, dword [ebp - 0x30]
movss xmm0, dword [esi]
mov ecx, dword [0x4a4418]
mov esi, dword [0x45c7f4]
movss dword [eax + 0x13c0], xmm0
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], ecx
test ecx, ecx
jne 0x40d0c3
mov ecx, dword [esi + 0x8c]
test ecx, ecx
jne 0x40d0bd
mov esi, dword [esi + 0x80]
cmp dword [esi + 0x20], ecx
jg 0x40d0b5
push 0x371
push 0x44c6e8
push str.i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [esi + 0x28]
mov esi, dword [ebp - 0x30]
mov ecx, dword [eax]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x20], ecx
call fcn.00422320
lea eax, [ebp - 0x20]
lea ecx, [esi + 0x179c]
push eax
call fcn.0042b410
mov eax, dword [esi + 0x172c]
mov ecx, dword [eax + 0x254]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], ecx
lea esi, [ecx + 0x44]
mov eax, dword [eax + 0x44]
mov ecx, dword [esi]
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 4]
cmp ecx, eax
jne 0x40d11c
inc ecx
test eax, eax
je 0x40d10a
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi + 4]
jmp 0x40d10f
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.0042b390
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0x18]
inc dword [esi]
call fcn.00432f00
movss xmm1, dword [0x4a4494]
xorps xmm0, xmm0
comiss xmm0, xmm1
ja 0x40d14f
movss xmm0, dword [0x44fb0c]
minss xmm0, xmm1
mulss xmm0, dword [0x44fc30]
push ecx
push str.Authorization
mov ecx, edi
mov dword [ebp - 0x34], 0x43958000
addss xmm0, dword [0x44fae4]
mov dword [ebp - 0x30], 0x43010000
cvttss2si eax, xmm0
shl eax, 0x18
or eax, 0xdedede
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00435120
call fcn.004223e0
mov esi, dword [ebp - 0x4c]
mov eax, dword [0x4ddd24]
cmp eax, dword [esi + 4]
jle 0x40d1e0
push 0x4ddd24
call fcn.0043a09b
add esp, 4
cmp dword [0x4ddd24], 0xffffffff
jne 0x40d1e0
push 0x20
mov dword [ebp - 4], 0
call fcn.00439f0d
add esp, 4
mov dword [0x4ddd2c], eax
mov dword [ebp - 4], 0xffffffff
push 0x4ddd24
call fcn.0043a051
add esp, 4
mov eax, dword [0x4ddd20]
cmp eax, dword [esi + 4]
jle 0x40d22d
push 0x4ddd20
call fcn.0043a09b
add esp, 4
cmp dword [0x4ddd20], 0xffffffff
jne 0x40d22d
push 0x20
mov dword [ebp - 4], 1
call fcn.00439f0d
add esp, 4
mov dword [0x4ddd34], eax
mov dword [ebp - 4], 0xffffffff
push 0x4ddd20
call fcn.0043a051
add esp, 4
movaps xmm0, xmmword [0x450100]
xor ecx, ecx
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x5c], 0x2b212023
movaps xmm0, xmmword [0x450120]
movups xmmword [ebp - 0x6c], xmm0
mov dword [ebp - 0x58], 0x2e246b21
mov word [ebp - 0x54], 0x26
mov byte [ebp - 0x52], 1
nop dword [eax]
mov al, cl
add al, 0x20
xor byte [ebp + ecx - 0x7c], al
inc ecx
cmp ecx, 0x29
jb 0x40d260
sub esp, 0xc
mov byte [ebp - 0x52], 0
lea eax, [ebp - 0x7c]
lea ecx, [ebp - 0x138]
push eax
call fcn.00406f50
mov dword [ebp - 4], 2
cmp dword [ebp - 0xdc], 0
je 0x40d3f7
xorps xmm0, xmm0
mov dword [ebp - 0x5c], 0
movups xmmword [ebp - 0x6c], xmm0
mov dword [ebp - 0x58], 0xf
mov byte [ebp - 0x6c], 0
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x138]
mov eax, dword [ebp - 0x138]
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
push eax
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x138]
call fcn.00407f60
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator_bool_void_const]
test al, al
je 0x40d3bd
nop dword [eax + eax]
mov eax, dword [0x4dd8f8]
test eax, eax
jne 0x40d34a
cmp dword [ebp - 0x5c], eax
je 0x40d37d
cmp dword [ebp - 0x58], 0x10
lea ecx, [ebp - 0x6c]
mov edx, dword [0x4ddd2c]
cmovae ecx, dword [ebp - 0x6c]
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x40d331
mov dword [0x4dd8f8], 1
jmp 0x40d37d
cmp eax, 1
jne 0x40d37d
cmp dword [ebp - 0x5c], 0
je 0x40d37d
cmp dword [ebp - 0x58], 0x10
lea ecx, [ebp - 0x6c]
mov edx, dword [0x4ddd34]
cmovae ecx, dword [ebp - 0x6c]
sub edx, ecx
nop dword [eax + eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x40d370
mov eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x138]
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
push eax
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x138]
call fcn.00407f60
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator_bool_void_const]
test al, al
jne 0x40d310
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x58]
cmp ecx, 0x10
jb 0x40d3f7
mov edx, dword [ebp - 0x6c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40d3ed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40d3ed
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00439eff
add esp, 8
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x13c], eax
mov dword [ebp - 4], 5
cmp dword [ebp - 0xdc], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x40d468
mov eax, dword [ebp - 0x11c]
lea ecx, [ebp - 0xec]
cmp dword [eax], ecx
jne 0x40d468
mov edx, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xd8]
sub edx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xfc]
mov dword [eax], edx
cmp byte [ebp - 0xe0], 0
je 0x40d47c
lea ecx, [ebp - 0x128]
call fcn.00407370
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_istream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov esi, dword [0x45c7f4]
mov dword [ebp - 0x50], 0x43480000
mov dword [ebp - 0x4c], 0x43340000
mov eax, dword [esi + 0x172c]
mov byte [eax + 0x86], 1
mov eax, dword [esi + 0x172c]
movss xmm0, dword [eax + 0x1c]
movss xmm2, dword [eax + 0x18]
subss xmm0, dword [eax + 0x60]
subss xmm2, dword [eax + 0x5c]
addss xmm0, dword [0x44fc10]
addss xmm2, dword [0x44fc2c]
movss dword [eax + 0xbc], xmm0
movss dword [eax + 0xb8], xmm2
movss xmm1, dword [eax + 0xd4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xd0]
maxss xmm0, xmm2
movss dword [eax + 0xd4], xmm1
movss dword [eax + 0xd0], xmm0
mov eax, dword [esi + 0x172c]
mov byte [eax + 0x86], 1
mov edi, dword [esi + 0x172c]
cmp dword [edi + 0x1c0], 0
jg 0x40d564
push 0x37b
push 0x44c6e8
push str.Size___0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov esi, dword [0x45c7f4]
add esp, 0xc
mov ecx, dword [edi + 0x1c0]
xor edx, edx
mov eax, dword [edi + 0x1c8]
push dword [eax + ecx*4 - 4]
mov ecx, str.Login_Area1
call fcn.00418330
add esp, 4
cmp dword [esi + 0x1754], eax
jne 0x40d592
mov byte [esi + 0x175c], 1
push 0
lea edx, [ebp - 0x50]
mov ecx, str.Login_Area1
push 0
push edx
mov edx, eax
call fcn.0041d2c0
add esp, 0xc
mov dword [ebp - 0x1c], 0x4a454e6c
mov dword [ebp - 0x18], 0x1605064a
xor ecx, ecx
mov word [ebp - 0x14], 0x100
nop
mov al, cl
add al, 0x20
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 8
jb 0x40d5c0
push dword [0x4a4400]
mov edx, dword [0x4ddd2c]
lea eax, [ebp - 0x50]
push 0
push 0
push 0
push eax
push 0x20
lea ecx, [ebp - 0x1c]
mov byte [ebp - 0x13], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
call fcn.00426fe0
add esp, 0x18
mov dword [ebp - 0x5e], 0x50514070
mov dword [ebp - 0x5a], 0x43544a53
xor ecx, ecx
mov dword [ebp - 0x56], 0x180a0b
mov byte [ebp - 0x52], 1
nop
mov al, cl
add al, 0x20
xor byte [ebp + ecx - 0x5e], al
inc ecx
cmp ecx, 0xb
jb 0x40d620
push dword [0x4a4404]
mov edx, dword [0x4ddd34]
lea eax, [ebp - 0x34]
push 0
push 0
push 0x8000
push eax
push 0x20
lea ecx, [ebp - 0x5e]
mov byte [ebp - 0x52], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
call fcn.00426fe0
add esp, 0x18
mov dword [ebp - 0x50], 0x43480000
mov dword [ebp - 0x4c], 0x41f00000
xor ecx, ecx
mov dword [ebp - 0x34], 0x3454e6c
mov dword [ebp - 0x30], 0x1004b6d
mov al, cl
add al, 0x20
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 6
jb 0x40d684
push ecx
lea edx, [ebp - 0x50]
mov byte [ebp - 0x2d], 0
lea ecx, [ebp - 0x34]
call fcn.00423240
add esp, 4
test al, al
je 0x40d874
mov edx, dword [0x4ddd2c]
mov ecx, edx
movss xmm0, dword [0x4a4484]
movss dword [0x4ddd38], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40d6c8
sub ecx, esi
push ecx
push edx
mov ecx, 0x4a29b4
call fcn.00407530
mov edx, dword [0x4ddd34]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40d6e8
sub ecx, esi
push ecx
push edx
mov ecx, 0x4a299c
call fcn.00407530
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], 0
call fcn.00407660
mov esi, dword [0x4ddd34]
sub esp, 0x18
mov edx, esp
mov ecx, esi
xorps xmm0, xmm0
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
lea edi, [ecx + 1]
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40d737
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.00407c30
call fcn.0040dc10
add esp, 0x18
test al, al
je 0x40d874
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], 0
call fcn.00407660
sub esp, 0xc
mov byte [0x4a4474], 1
lea ecx, [ebp - 0x1e8]
push str.C:WindowsSystem32BsodProjectcache.bin
call fcn.004063f0
mov dword [ebp - 4], 6
cmp dword [ebp - 0x198], 0
je 0x40d7c4
mov edx, dword [0x4ddd2c]
lea ecx, [ebp - 0x1e8]
call fcn.004077a0
push 0x4079b0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, dword [0x4ddd34]
mov ecx, eax
call fcn.004077a0
mov eax, dword [ebp - 0x1e8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x1ec], eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x198], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x40d835
mov eax, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x1a8]
cmp dword [eax], ecx
jne 0x40d835
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x194]
sub edx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1b8]
mov dword [eax], edx
cmp byte [ebp - 0x19c], 0
je 0x40d849
lea ecx, [ebp - 0x1e4]
call fcn.00407370
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x180]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [0x4a4430]
mov esi, ecx
mov edi, dword [0x45c7f4]
mov dword [ebp - 0x20], ecx
test ecx, ecx
jne 0x40d8c0
mov ecx, dword [edi + 0x8c]
test ecx, ecx
jne 0x40d8bb
mov esi, dword [edi + 0x80]
cmp dword [esi + 0x20], ecx
jg 0x40d8b6
push 0x371
push 0x44c6e8
push str.i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [esi + 0x28]
mov ecx, dword [eax]
mov esi, ecx
mov dword [ebp - 0x20], ecx
call fcn.00422320
lea eax, [ebp - 0x20]
push eax
lea ecx, [edi + 0x179c]
call fcn.0042b410
mov eax, dword [edi + 0x172c]
mov ecx, dword [esi + 0x44]
mov dword [ebp - 0x4c], ecx
mov eax, dword [eax + 0x254]
mov ecx, dword [eax + 0x44]
lea esi, [eax + 0x44]
mov edi, dword [esi + 4]
mov dword [ebp - 0x30], eax
cmp ecx, edi
jne 0x40d918
inc ecx
test edi, edi
je 0x40d906
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x40d90b
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.0042b390
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0x30]
inc dword [esi]
call fcn.00432f00
movaps xmm0, xmmword [0x44ffd0]
lea eax, [ebp - 0x64]
push str.Forgot_password_
push eax
movups xmmword [ebp - 0x64], xmm0
call fcn.00422940
mov ecx, dword [0x45c7f4]
add esp, 8
movss xmm0, dword [ecx + 0x384]
ucomiss xmm0, dword [0x44fa9c]
lahf
test ah, 0x44
jp 0x40d98d
mov eax, dword [ecx + 0x172c]
cmp byte [eax + 0x104], 0
je 0x40d98d
push 5
push 0
push 0
push str.https:__forum.bsod.team_lost_password_
push 0x44a508
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
call fcn.004223e0
call fcn.0041d490
mov ecx, 1
call fcn.00422660
call fcn.0041d490
mov ecx, 1
call fcn.00422660
movaps xmm0, xmmword [0x44ff70]
lea edx, [ebp - 0x64]
xor ecx, ecx
movups xmmword [ebp - 0x64], xmm0
call fcn.004224e0
movss xmm0, dword [0x44fc74]
call fcn.00422200
mov ecx, dword [0x45c7f4]
mov eax, dword [ecx + 0x172c]
mov byte [eax + 0x86], 1
mov eax, dword [ecx + 0x172c]
mov ecx, 1
movss xmm1, dword [eax + 0x1c]
subss xmm1, dword [eax + 0x60]
movss xmm0, dword [eax + 0xd4]
addss xmm1, dword [0x44fbd4]
maxss xmm0, xmm1
movss dword [eax + 0xbc], xmm1
movss dword [eax + 0xd4], xmm0
call fcn.004225e0
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret