Function at 0x401730
Capabilities:
Check if file exists
Create process on windows
Create thread
Download url
Encode data using base64
Execute command
Receive data
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40425a
mov eax, dword fs:[0]
push eax
mov eax, 0x10100
call fcn.004040e0
mov eax, dword [0x407008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
mov edx, str.Initializing_Srcds_Guardian_..
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x402ab0
mov dword [ebp - 0x100b4], esi
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Version:
push 0x402ab0
call fcn.00402890
mov edx, str.0f8d1e8
mov ecx, eax
call fcn.00402890
mov edx, 0x405314
mov ecx, eax
call fcn.00402890
mov edx, str.2023110217
mov ecx, eax
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xor eax, eax
mov dword [ebp - 0x10048], 0xf
xorps xmm0, xmm0
mov dword [ebp - 0x100b8], eax
movups xmmword [ebp - 0x1005c], xmm0
mov dword [ebp - 0x1004c], eax
mov byte [ebp - 0x1005c], al
mov edi, 1
mov dword [ebp - 4], eax
cmp dword [ebp + 8], edi
jle 0x4019c3
mov eax, dword [esi + edi*4 - 4]
mov ecx, str._appid
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401830
test dl, dl
je 0x40182c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401830
add eax, 2
add ecx, 2
test dl, dl
jne 0x401810
xor eax, eax
jmp 0x401835
sbb eax, eax
or eax, 1
lea esi, [esi + edi*4]
test eax, eax
jne 0x40184d
push dword [esi]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov dword [ebp - 0x100b8], eax
mov ecx, dword [ebp - 0x1004c]
mov eax, 0x7fffffff
sub eax, ecx
cmp eax, 1
jb 0x4019be
cmp dword [ebp - 0x10048], 0x10
lea eax, [ebp - 0x1005c]
push 1
cmovae eax, dword [ebp - 0x1005c]
push 0x405334
push ecx
push eax
push ecx
push dword [ebp - 0x1002c]
lea ecx, [ebp - 0x100d0]
call fcn.00402d80
mov byte [ebp - 4], 1
lea edx, [ebp - 0x100d0]
push dword [esi]
lea ecx, [ebp - 0x10044]
call fcn.00402b70
mov esi, eax
add esp, 4
lea eax, [ebp - 0x1005c]
cmp eax, esi
je 0x40191a
mov ecx, dword [ebp - 0x10048]
cmp ecx, 0x10
jb 0x4018f2
mov edx, dword [ebp - 0x1005c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4018e8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x1005c], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x1004c], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x10030]
cmp ecx, 0x10
jb 0x401954
mov edx, dword [ebp - 0x10044]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40194a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x100bc]
mov dword [ebp - 0x10034], 0
mov dword [ebp - 0x10030], 0xf
mov byte [ebp - 0x10044], 0
cmp ecx, 0x10
jb 0x4019ad
mov edx, dword [ebp - 0x100d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4019a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
inc edi
cmp edi, dword [ebp + 8]
jge 0x4019c3
mov esi, dword [ebp - 0x100b4]
jmp 0x401801
call fcn.00401170
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x402ab0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edi, dword [ebp - 0x100b8]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x402ab0
test edi, edi
jne 0x401b0a
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.This_program_will_manage_your_srcds_server._To_get_started__it_requires_some_arguments.
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x402ab0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.The_parameter_are_the_same_as_srcds.exe__on_top_of_that__you_need_to_specify_the_appid_you_want_to_run.
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.If_you_do_not_specify_any_other_parameter_than_appid__it_will_assume_sane_defaults.
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x402ab0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.A_list_of_appids_can_be_found_here_____:_https:__developer.valvesoftware.com_wiki_Dedicated_Servers_List
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.A_list_of_parameters_can_be_found_here_:_https:__developer.valvesoftware.com_wiki_Command_line_optionsSource_2_Games
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x402ab0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.SrcdsGuardian.exe__appid__appid___srcds_parameters_
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.SrcdsGuardian.exe__appid_582400__game_reactivedrop__maxplayers_8__port_27050_hostname__My_first_Reactive_Drop_Server_
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x402ab0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov edx, str.Checking_for_SteamCMD..
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.steamcmd_steamcmd.exe
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x401c45
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.SteamCMD_cannot_be_found__downloading..
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xorps xmm0, xmm0
mov dword [ebp - 0x10034], 0
push 0x80
movups xmmword [ebp - 0x10044], xmm0
mov dword [ebp - 0x10030], 7
call fcn.004033a2
mov dword [ebp - 0x10044], eax
mov ecx, 0x1e
mov dword [ebp - 0x10034], 0x3d
mov esi, str.https:__steamcdn_a.akamaihd.net_client_installer_steamcmd.zip
mov dword [ebp - 0x10030], 0x3f
mov edi, eax
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
add esp, 4
movsw word es:[edi], word [esi]
mov word [eax + 0x7a], cx
push ecx
mov byte [ebp - 4], 2
lea eax, [ebp - 0x10044]
cmp dword [ebp - 0x10030], 8
push ecx
cmovae eax, dword [ebp - 0x10044]
push str.steamcmd.zip
push eax
push ecx
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Download_finished__extracting..
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.powershell.exe__Command_Expand_Archive__Path_steamcmd.zip__Force
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [ebp - 4], 0
add esp, 4
mov ecx, dword [ebp - 0x10030]
cmp ecx, 8
jb 0x401c3f
mov edx, dword [ebp - 0x10044]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401c35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401c35
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00403623
add esp, 8
mov edi, dword [ebp - 0x100b8]
push str.steamcmd
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__chdir]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Starting_monitor..
call fcn.00402890
push 4
call fcn.004033a2
mov dword [ebp - 0x1002c], eax
mov dword [eax], 0x401340
lea ecx, [ebp - 0x10090]
mov byte [ebp - 4], 3
push ecx
push 0
push eax
push 0x403340
push 0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
add esp, 0x20
mov dword [ebp - 0x10094], eax
test eax, eax
je 0x402708
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x10090]
test ecx, ecx
je 0x402700
push ecx
push eax
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
jne 0x402700
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
xorps xmm0, xmm0
mov edx, str.Entering_loop..
movlpd qword [ebp - 0x10094], xmm0
call fcn.00402890
nop dword [eax]
nop word [eax + eax]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Updating_game..
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea esi, [ebp - 0x13]
mov ecx, edi
test edi, edi
jns 0x401d55
neg ecx
mov dword [ebp - 0x100b4], ecx
nop
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x100b4]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x100b4], eax
test eax, eax
jne 0x401d20
dec esi
mov byte [esi], 0x2d
jmp 0x401d8f
mov dword [ebp - 0x100b4], ecx
nop dword [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x100b4]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x100b4], eax
test eax, eax
jne 0x401d60
push ecx
lea eax, [ebp - 0x13]
push eax
push esi
lea ecx, [ebp - 0x100ac]
call fcn.00402e80
mov byte [ebp - 4], 5
mov eax, 0x7fffffff
mov ecx, dword [ebp - 0x1009c]
sub eax, ecx
cmp eax, 0x20
jb 0x4019be
cmp dword [ebp - 0x10098], 0x10
lea eax, [ebp - 0x100ac]
push ecx
cmovae eax, dword [ebp - 0x100ac]
push eax
push 0x20
push str.steamcmd.exe_force_install_dir
push ecx
push dword [ebp - 0x1002c]
lea ecx, [ebp - 0x100d0]
call fcn.00402d80
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x100bc]
mov eax, edx
mov ecx, dword [ebp - 0x100c0]
sub eax, ecx
push 0x1e
push str._login_anonymous_app_update
cmp eax, 0x1e
jb 0x401e39
cmp edx, 0x10
lea esi, [ebp - 0x100d0]
lea eax, [ecx + 0x1e]
cmovae esi, dword [ebp - 0x100d0]
add esi, ecx
mov dword [ebp - 0x100c0], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0x1e], 0
lea eax, [ebp - 0x100d0]
jmp 0x401e53
mov byte [ebp - 0x10104], 0
lea ecx, [ebp - 0x100d0]
push dword [ebp - 0x10104]
push 0x1e
call fcn.00402c20
mov dword [ebp - 0x100f0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x10100], xmm0
mov dword [ebp - 0x100ec], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x10100], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x100f0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x100ac]
cmp dword [ebp - 0x10098], 0x10
mov esi, dword [ebp - 0x100ec]
mov eax, esi
cmovae ecx, dword [ebp - 0x100ac]
mov edx, dword [ebp - 0x100f0]
sub eax, edx
mov edi, dword [ebp - 0x1009c]
push edi
push ecx
cmp edi, eax
ja 0x401efe
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [ebp - 0x100f0], eax
lea eax, [ebp - 0x10100]
cmovae eax, dword [ebp - 0x10100]
lea esi, [eax + edx]
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + esi], 0
lea eax, [ebp - 0x10100]
jmp 0x401f1d
mov byte [ebp - 0x10108], 0
lea ecx, [ebp - 0x10100]
push dword [ebp - 0x10108]
push edi
call fcn.00402c20
mov edi, dword [ebp - 0x1009c]
mov dword [ebp - 0x100d8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x100e8], xmm0
mov dword [ebp - 0x100d4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x100e8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x100d8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x100d4]
mov eax, edx
mov ecx, dword [ebp - 0x100d8]
sub eax, ecx
push 6
push str._quit
cmp eax, 6
jb 0x401fb3
cmp edx, 0x10
lea esi, [ebp - 0x100e8]
lea eax, [ecx + 6]
cmovae esi, dword [ebp - 0x100e8]
add esi, ecx
mov dword [ebp - 0x100d8], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 6], 0
lea eax, [ebp - 0x100e8]
jmp 0x401fcd
mov byte [ebp - 0x1010c], 0
lea ecx, [ebp - 0x100e8]
push dword [ebp - 0x1010c]
push 6
call fcn.00402c20
mov dword [ebp - 0x1007c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1008c], xmm0
mov dword [ebp - 0x10078], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1008c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1007c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x100d4]
cmp ecx, 0x10
jb 0x402051
mov edx, dword [ebp - 0x100e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402047
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
mov dword [ebp - 0x100d8], 0
mov dword [ebp - 0x100d4], 0xf
mov byte [ebp - 0x100e8], 0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x100ec]
cmp ecx, 0x10
jb 0x4020aa
mov edx, dword [ebp - 0x10100]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4020a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
mov dword [ebp - 0x100f0], 0
mov dword [ebp - 0x100ec], 0xf
mov byte [ebp - 0x10100], 0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x100bc]
cmp ecx, 0x10
jb 0x402103
mov edx, dword [ebp - 0x100d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4020f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
mov ecx, dword [ebp - 0x1007c]
mov eax, 0x7fffffff
sub eax, ecx
mov dword [ebp - 0x100c0], 0
mov dword [ebp - 0x100bc], 0xf
mov byte [ebp - 0x100d0], 0
cmp eax, 0xb
jb 0x4019be
cmp dword [ebp - 0x10078], 0x10
lea eax, [ebp - 0x1008c]
push ecx
cmovae eax, dword [ebp - 0x1008c]
push eax
push 0xb
push str.Executing:
push ecx
push dword [ebp - 0x1002c]
lea ecx, [ebp - 0x10044]
call fcn.00402d80
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x10044]
cmp dword [ebp - 0x10030], 0x10
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmovae edx, dword [ebp - 0x10044]
push 0x402ab0
push dword [ebp - 0x10034]
call fcn.00403120
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x10030]
cmp ecx, 0x10
jb 0x4021da
mov edx, dword [ebp - 0x10044]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4021d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
cmp dword [ebp - 0x10078], 0x10
lea eax, [ebp - 0x1008c]
cmovae eax, dword [ebp - 0x1008c]
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, 0x7fffffff
add esp, 4
sub eax, edi
cmp eax, 0x14
jb 0x4019be
cmp dword [ebp - 0x10098], 0x10
lea eax, [ebp - 0x100ac]
push 0x14
cmovae eax, dword [ebp - 0x100ac]
push str._srcds.exe__console
push edi
push eax
push ecx
push dword [ebp - 0x1002c]
lea ecx, [ebp - 0x10044]
call fcn.00402d80
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1005c]
cmp dword [ebp - 0x10048], 0x10
mov esi, dword [ebp - 0x10030]
mov eax, esi
cmovae ecx, dword [ebp - 0x1005c]
mov edx, dword [ebp - 0x10034]
sub eax, edx
mov edi, dword [ebp - 0x1004c]
push edi
push ecx
cmp edi, eax
ja 0x40229c
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0x10034], eax
lea eax, [ebp - 0x10044]
cmovae eax, dword [ebp - 0x10044]
lea esi, [eax + edx]
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + esi], 0
lea eax, [ebp - 0x10044]
jmp 0x4022b5
mov byte [ebp - 0x1002c], 0
lea ecx, [ebp - 0x10044]
push dword [ebp - 0x1002c]
push edi
call fcn.00402c20
mov dword [ebp - 0x10064], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x10074], xmm0
mov dword [ebp - 0x10060], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x10074], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x10064], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x10030]
cmp ecx, 0x10
jb 0x402339
mov edx, dword [ebp - 0x10044]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40232f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
mov ecx, dword [ebp - 0x10064]
mov eax, 0x7fffffff
sub eax, ecx
mov dword [ebp - 0x10034], 0
mov dword [ebp - 0x10030], 0xf
mov byte [ebp - 0x10044], 0
cmp eax, 0xb
jb 0x4019be
cmp dword [ebp - 0x10060], 0x10
lea eax, [ebp - 0x10074]
push ecx
cmovae eax, dword [ebp - 0x10074]
push eax
push 0xb
push str.Executing:
push ecx
push dword [ebp - 0x1002c]
lea ecx, [ebp - 0x100d0]
call fcn.00402d80
mov byte [ebp - 4], 0x11
lea edx, [ebp - 0x100d0]
cmp dword [ebp - 0x100bc], 0x10
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmovae edx, dword [ebp - 0x100d0]
push 0x402ab0
push dword [ebp - 0x100c0]
call fcn.00403120
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x100bc]
cmp ecx, 0x10
jb 0x402410
mov edx, dword [ebp - 0x100d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402406
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
cmp dword [ebp - 0x10060], 0x10
lea eax, [ebp - 0x10074]
push 0x7fff
cmovae eax, dword [ebp - 0x10074]
push eax
push 0x8000
lea eax, [ebp - 0x10028]
push eax
lea eax, [ebp - 0x100b0]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs_s]
add esp, 0x14
lea eax, [ebp - 0x10028]
push 0x407478
push 0x407420
push 0
push 0
push 0
push 1
push 0
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x4024de
push 0xffffffffffffffff
push dword [0x407478]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [0x407478]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [0x40747c]
call edi
call fcn.00401190
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Setting_priority_class..
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push dword [0x407480]
push 0
push 0x1200
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
push 0x8000
push esi
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push esi
call edi
jmp 0x4025d3
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Start_failed_
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea esi, [ebp - 0x13]
mov dword [ebp - 0x100b4], ecx
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x100b4]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x100b4], eax
test eax, eax
jne 0x402510
push ecx
lea eax, [ebp - 0x13]
push eax
push esi
lea ecx, [ebp - 0x100d0]
call fcn.00402e80
mov byte [ebp - 4], 0x12
mov edx, str.Error:
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00402890
cmp dword [ebp - 0x100bc], 0x10
lea edx, [ebp - 0x100d0]
push 0x402ab0
push dword [ebp - 0x100c0]
cmovae edx, dword [ebp - 0x100d0]
mov ecx, eax
call fcn.00403120
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x100bc]
cmp ecx, 0x10
jb 0x4025d3
mov edx, dword [ebp - 0x100d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4025c9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Server_did_exit__restarting..
push 0x402ab0
call fcn.00402890
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x10060]
cmp ecx, 0x10
jb 0x402639
mov edx, dword [ebp - 0x10074]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40262f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x10078]
mov dword [ebp - 0x10064], 0
mov dword [ebp - 0x10060], 0xf
mov byte [ebp - 0x10074], 0
cmp ecx, 0x10
jb 0x402692
mov edx, dword [ebp - 0x1008c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402688
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
add esp, 8
mov edi, dword [ebp - 0x100b8]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x10098]
mov dword [ebp - 0x1007c], 0
mov dword [ebp - 0x10078], 0xf
mov byte [ebp - 0x1008c], 0
cmp ecx, 0x10
jb 0x401cf0
mov edx, dword [ebp - 0x100ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4026eb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401c2f
push ecx
push edx
call fcn.00403623
mov edi, dword [ebp - 0x100b8]
add esp, 8
jmp 0x401cf0
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [ebp - 0x10090], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3