Function at 0x404260
Capabilities:
Access peb ldr_data
Check mutex and terminate process on windows
Check mutex on windows
Check os version
Contain obfuscated stackstrings
Create process on windows
Create process suspended
Create thread
Encode data using xor
Execute command
Get common file path
Hash data using fnv
Hide graphical window
Move file
Parse pe header
Receive data
Receive data on socket
Resolve function by parsing pe exports
Self delete
Send data
Send data on socket
Send http request
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x43b740
push eax
mov dword fs:[0], esp
mov eax, 0x1708
push ebx
call fcn.0043b2b0
mov ax, word [0x43d924]
movq xmm0, qword [0x43d91c]
push esi
push edi
push 0x1fe
mov word [ebp - 0x9b8], ax
lea eax, [ebp - 0x9b6]
push 0
push eax
movq qword [ebp - 0x9c0], xmm0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0xfd8]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
lea eax, [ebp - 0xfd8]
push eax
lea eax, [ebp - 0x9c0]
push 0x104
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x9c0]
push str.e_down.txt
push 0x104
push eax
call esi
add esp, 0xc
push str.RtlInitUnicodeString
push 0x43d7e8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
jne 0x40433c
push str.pause
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
lea eax, [ebp - 0x9c0]
push eax
lea eax, [ebp - 0x440]
push eax
call esi
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, eax
mov dword [ebp - 0x18], edx
test edx, edx
je 0x406250
mov ecx, dword [edx + 0x3c]
mov eax, 0x5a4d
mov byte [ebp - 0x11], 0
cmp word [edx], ax
jne 0x406243
cmp dword [ecx + edx], 0x4550
jne 0x406243
mov eax, dword [ecx + edx + 0x78]
add eax, edx
mov dword [ebp - 0x64], eax
jne 0x40439b
push str._Error_export_dir_n
jmp 0x406248
mov esi, dword [eax + 0x24]
mov ecx, dword [eax + 0x1c]
add esi, edx
mov edi, dword [eax + 0x20]
add ecx, edx
mov dword [ebp - 0x60], esi
add edi, edx
xor esi, esi
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x1c], esi
cmp dword [eax + 0x14], esi
jbe 0x404475
mov eax, dword [ebp - 0x60]
xorps xmm0, xmm0
movups xmmword [0x4dd8c0], xmm0
movups xmmword [0x4dd8d0], xmm0
movzx eax, word [eax + esi*2]
mov edi, dword [edi + esi*4]
mov eax, dword [ecx + eax*4]
movups xmm0, xmmword [eax + edx]
movups xmmword [0x4dd8c0], xmm0
movups xmm0, xmmword [eax + edx + 0x10]
movups xmmword [0x4dd8d0], xmm0
add edi, edx
je 0x404475
xor esi, esi
nop dword [eax]
mov al, byte [esi + 0x4dd8c0]
cmp al, byte [esi + 0x43dba0]
jne 0x404459
cmp esi, 3
jne 0x404449
mov ecx, edi
mov eax, str.ZwCreateFile
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x404440
test dl, dl
je 0x40443c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x404440
add eax, 2
add ecx, 2
test dl, dl
jne 0x404420
xor eax, eax
jmp 0x404445
sbb eax, eax
or eax, 1
test eax, eax
je 0x404451
inc esi
cmp esi, 4
jb 0x404400
jmp 0x404459
mov al, byte [0x4dd8c4]
mov byte [ebp - 0x11], al
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x64]
inc esi
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x68]
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], esi
cmp esi, dword [eax + 0x14]
jb 0x4043c1
cmp byte [ebp - 0x11], 0
jne 0x406250
push 0x5f5e100
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov esi, eax
add esp, 4
test esi, esi
je 0x4049a8
push 0x5f5e100
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 4
push 1
call fcn.00439ecf
add esp, 4
lea ecx, [ebp - 0x20]
push ecx
push 0
push eax
push 0x408150
push 0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
add esp, 0x18
mov dword [ebp - 0x24], eax
test eax, eax
je 0x406234
xorps xmm0, xmm0
lea edx, [ebp - 0x22c]
sub esp, 8
movq qword [ebp - 0x21c], xmm0
movups xmmword [ebp - 0x22c], xmm0
call fcn.0040f470
add esp, 8
mov dword [ebp - 0x2a8], 0
xorps xmm0, xmm0
mov dword [ebp - 0x2a0], 0
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x28c], 0
movlpd qword [ebp - 0x284], xmm0
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x2c0], str.Playing_Solo
mov dword [ebp - 0x2bc], str.Counter_Strike:_Global_Offensive
mov dword [ebp - 0x2b8], 0x59dd27de
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b0], 0x59dd27de
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a4], 0x43d6c4
mov dword [ebp - 0x29c], str.Rogue___Level_100
mov dword [ebp - 0x298], str.ae488379_351d_4a4f_ad32_2b9b01c91657
mov dword [ebp - 0x294], 1
mov dword [ebp - 0x290], 5
mov dword [ebp - 0x288], str.MTI4NzM0OjFpMmhuZToxMjMxMjM
call fcn.0040fbd0
push str.BT_Launcher
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
push 0
push eax
mov dword [0x4a440c], eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x406250
call fcn.00404040
push 0
lea eax, [ebp - 0x6c]
push eax
push 0
push 0x20006
push 1
push 0
push 0
push str.SOFTWAREPoliciesMicrosoftBsodData_
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x404631
push str.Could_not_create_the_registry_key.
call fcn.00401760
add esp, 4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x104
lea eax, [ebp - 0xdd0]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
lea ecx, [ebp - 0xdd0]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x404675
sub ecx, edx
lea eax, [ebp - 0xdd0]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.00407c30
cmp dword [ebp - 0x114], 0x10
lea edx, [ebp - 0x128]
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
cmovae edx, dword [ebp - 0x128]
mov ecx, edx
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x44], xmm0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4046c0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.00407c30
mov ecx, dword [ebp - 0x114]
cmp ecx, 0x10
jb 0x40470d
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404703
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4061fa
push ecx
push edx
call fcn.00439eff
add esp, 8
cmp dword [ebp - 0x30], 0x10
lea ecx, [ebp - 0x44]
mov edi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x34]
setae byte [ebp - 0x11]
cmovae ecx, edi
mov dword [ebp - 0x118], 0
push 1
sub esp, 8
mov dword [ebp - 0x114], 0xf
mov edx, esi
mov byte [ebp - 0x128], 0
call fcn.00407ba0
add esp, 0xc
mov dword [ebp - 0x4c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movups xmmword [ebp - 0x5c], xmm0
lea ecx, [eax + 1]
cmp esi, ecx
jb 0x406258
mov eax, esi
mov dword [ebp - 0x24c], esi
sub eax, ecx
cmp eax, esi
mov dword [ebp - 0x250], eax
cmovb esi, eax
cmp byte [ebp - 0x11], 0
lea eax, [ebp - 0x44]
cmovne eax, edi
add eax, ecx
lea ecx, [ebp - 0x5c]
push esi
push eax
call fcn.00407c30
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
movups xmm0, xmmword [str.01V8YutSg_DmzEX8p_K3gimyd_ac_1Sn2eWa_9g3z]
mov eax, dword [0x43da14]
add esp, 4
mov dword [ebp - 0x45c], eax
mov al, byte [0x43da18]
movups xmmword [ebp - 0x484], xmm0
mov byte [ebp - 0x458], al
movups xmm0, xmmword [0x43d9fc]
movups xmmword [ebp - 0x474], xmm0
movq xmm0, qword [0x43da0c]
movq qword [ebp - 0x464], xmm0
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 5
idiv ecx
xor esi, esi
lea edi, [edx + 5]
test edi, edi
jle 0x404825
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 0x24
idiv ecx
mov al, byte [ebp + edx - 0x484]
mov byte [ebp + esi - 0x2ec], al
inc esi
cmp esi, edi
jl 0x404804
push str..exe
lea eax, [ebp - 0x2ec]
mov byte [ebp + edi - 0x2ec], 0
push 0x11
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
add esp, 0xc
lea ecx, [ebp - 0x2ec]
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
push ecx
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
push 0x103
lea eax, [ebp - 0xac7]
mov byte [ebp - 0xac8], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movaps xmm0, xmmword [0x44fcf0]
add esp, 0x14
movups xmmword [ebp - 0x214], xmm0
mov byte [ebp - 0x204], 1
xor ecx, ecx
mov al, cl
add al, 0x20
xor byte [ebp + ecx - 0x214], al
inc ecx
cmp ecx, 0xf
jb 0x404891
lea eax, [ebp - 0x214]
mov byte [ebp - 0x204], 0
mov dword [0x4a48b0], 0x1895
mov dword [0x4a48b4], eax
call fcn.00416670
test al, al
jne 0x4049bf
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x40622c
push eax
push dword [ebp - 0x24]
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
je 0x4048ee
push eax
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
push dword [0x4a44a4]
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov ecx, dword [ebp - 0x48]
mov dword [0x4a44a4], 0
cmp ecx, 0x10
jb 0x404946
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40493c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4061fa
push ecx
push edx
call fcn.00439eff
add esp, 8
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 0x5c], 0
mov dword [ebp - 0x48], 0xf
mov dword [ebp - 0x4c], 0
cmp ecx, 0x10
jb 0x40498c
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404982
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4061fa
push ecx
push edx
call fcn.00439eff
add esp, 8
cmp dword [ebp - 0x20], 0
mov byte [ebp - 0x44], 0
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x34], 0
jne 0x406226
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
call fcn.004081b0
test al, al
jne 0x404a10
push str.start_https:__forum.bsod.team_api_client_download.php
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add esp, 4
mov dword [ebp - 0x68], 0
push 0
call eax
mov esi, eax
lea eax, [ebp - 0x68]
push eax
push 4
push 0x1000
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x1000
nop
mov byte [esi], 0
lea esi, [esi + 1]
sub eax, 1
jne 0x404a00
jmp 0x4048f6
movaps xmm0, xmmword [0x450100]
xor ecx, ecx
movups xmmword [ebp - 0x30d], xmm0
mov byte [ebp - 0x2ed], 1
movaps xmm0, xmmword [0x44fd00]
movups xmmword [ebp - 0x2fd], xmm0
mov al, cl
add al, 0x20
xor byte [ebp + ecx - 0x30d], al
inc ecx
cmp ecx, 0x1f
jb 0x404a35
mov eax, dword fs:[0x30]
mov byte [ebp - 0x2ed], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x60], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x64], ecx
cmp ecx, esi
je 0x404ac7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x404ac7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x18], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x404abd
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x404aa0
cmp esi, 0xb0c98c53
je 0x404acb
mov ecx, dword [ebp - 0x18]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x404a85
mov eax, dword [eax]
jmp 0x404a60
mov eax, dword [ebp - 0x64]
mov edx, dword [ebp - 0x60]
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x30d]
add eax, edx
push ecx
call eax
push 0x20
call fcn.00439f0d
add esp, 4
mov esi, eax
push 0x20
call fcn.00439f0d
xorps xmm0, xmm0
mov dword [ebp - 0x1e3], 0x2b212023
mov edi, eax
mov dword [ebp - 0x1df], 0x2e246b21
movups xmmword [esi], xmm0
add esp, 4
mov word [ebp - 0x1db], 0x26
movups xmmword [esi + 0x10], xmm0
mov byte [ebp - 0x1d9], 1
xor ecx, ecx
movups xmmword [edi], xmm0
movups xmmword [edi + 0x10], xmm0
movaps xmm0, xmmword [0x450100]
movups xmmword [ebp - 0x203], xmm0
movaps xmm0, xmmword [0x450120]
movups xmmword [ebp - 0x1f3], xmm0
nop word [eax + eax]
mov al, cl
add al, 0x20
xor byte [ebp + ecx - 0x203], al
inc ecx
cmp ecx, 0x29
jb 0x404b60
sub esp, 0xc
mov byte [ebp - 0x1d9], 0
lea eax, [ebp - 0x203]
lea ecx, [ebp - 0x438]
push eax
call fcn.00406f50
cmp dword [ebp - 0x3dc], 0
je 0x404cfe
mov eax, dword [ebp - 0x438]
lea ecx, [ebp - 0x438]
xorps xmm0, xmm0
mov dword [ebp - 0x74], 0
movups xmmword [ebp - 0x84], xmm0
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
mov dword [ebp - 0x70], 0xf
mov byte [ebp - 0x84], 0
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
push eax
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0x438]
call fcn.00407f60
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator_bool_void_const]
test al, al
je 0x404cb0
nop dword [eax]
mov eax, dword [0x4dd8b8]
test eax, eax
jne 0x404c3c
cmp dword [ebp - 0x74], eax
je 0x404c6d
cmp dword [ebp - 0x70], 0x10
lea ecx, [ebp - 0x84]
mov edx, esi
cmovae ecx, dword [ebp - 0x84]
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x404c23
mov dword [0x4dd8b8], 1
jmp 0x404c6d
cmp eax, 1
jne 0x404c6d
cmp dword [ebp - 0x74], 0
je 0x404c6d
cmp dword [ebp - 0x70], 0x10
lea ecx, [ebp - 0x84]
mov edx, edi
cmovae ecx, dword [ebp - 0x84]
sub edx, ecx
nop dword [eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x404c60
mov eax, dword [ebp - 0x438]
lea ecx, [ebp - 0x438]
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
push eax
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0x438]
call fcn.00407f60
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator_bool_void_const]
test al, al
jne 0x404c00
mov ecx, dword [ebp - 0x70]
cmp ecx, 0x10
jb 0x404ce9
mov edx, dword [ebp - 0x84]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404cdf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404cdf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00439eff
add esp, 8
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0xf
mov byte [ebp - 0x84], 0
lea ecx, [ebp - 0x428]
call fcn.00407370
test eax, eax
jne 0x404d26
mov eax, dword [ebp - 0x438]
lea ecx, [ebp - 0x438]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov eax, dword [ebp - 0x438]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x438]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x43c], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x3dc], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x404d97
mov eax, dword [ebp - 0x41c]
lea ecx, [ebp - 0x3ec]
cmp dword [eax], ecx
jne 0x404d97
mov edx, dword [ebp - 0x3d4]
mov ecx, dword [ebp - 0x3d8]
sub edx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x40c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3fc]
mov dword [eax], edx
cmp byte [ebp - 0x3e0], 0
je 0x404dab
lea ecx, [ebp - 0x428]
call fcn.00407370
lea ecx, [ebp - 0x428]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x420]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_istream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x3c8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
sub esp, 0xc
lea ecx, [ebp - 0x1d8]
push str.C:WindowsSystem32BsodProjectinfo.txt
call fcn.004063f0
cmp dword [ebp - 0x188], 0
je 0x404e34
mov edx, str.Eng:_Dont_trust_anyone_with_these_files.
lea ecx, [ebp - 0x1d8]
call fcn.004077a0
push 0x4079b0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.Rus:_____.
mov ecx, eax
call fcn.004077a0
push 0x4079b0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._bsod.team_product.
mov ecx, eax
call fcn.004077a0
lea ecx, [ebp - 0x1d4]
call fcn.00407370
test eax, eax
jne 0x404e5c
mov eax, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x1d8]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
xor eax, eax
mov dword [ebp - 0xac], 0xc720c62
mov dword [ebp - 0xa8], 0xc670c6d
xor ecx, ecx
mov dword [ebp - 0xa4], 0xc710c0a
mov dword [ebp - 0xa0], 0xc660c63
mov dword [ebp - 0x9c], 0xc090c65
mov dword [ebp - 0x98], 0xc4a0c66
mov dword [ebp - 0x94], 0xc430c59
mov dword [ebp - 0x90], 0xc470c4d
mov dword [ebp - 0x8c], 0xc430c55
mov word [ebp - 0x88], ax
mov byte [ebp - 0x86], 1
nop dword [eax + eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0xac], ax
inc ecx
cmp ecx, 0x12
jb 0x404ed0
mov esi, dword [ebx + 8]
lea eax, [ebp - 0xac]
push 0x7f00
xorps xmm0, xmm0
mov byte [ebp - 0x86], 0
push 0
movlpd qword [ebp - 0x270], xmm0
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x274], 0x401dd0
mov dword [ebp - 0x278], 3
mov dword [ebp - 0x268], esi
mov dword [ebp - 0x254], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
push 0x66
push esi
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], 5
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x264], eax
lea eax, [ebp - 0x278]
push eax
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x4050d0
mov eax, dword [ebp - 0x1d8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x1dc], eax
mov dword [ebp - 4], 1
cmp dword [ebp - 0x188], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x404fdc
mov eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x198]
cmp dword [eax], ecx
jne 0x404fdc
mov edx, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x184]
sub edx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x1b8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1a8]
mov dword [eax], edx
cmp byte [ebp - 0x18c], 0
je 0x404ff0
lea ecx, [ebp - 0x1d4]
call fcn.00407370
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1d0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x170]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
push dword [0x4a44a4]
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov ecx, dword [ebp - 0x48]
mov dword [0x4a44a4], 0
cmp ecx, 0x10
jb 0x405064
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40505a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4061fa
push ecx
push edx
call fcn.00439eff
add esp, 8
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp ecx, 0x10
jb 0x4050aa
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4050a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4061fa
push ecx
push edx
call fcn.00439eff
add esp, 8
cmp dword [ebp - 0x20], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
jne 0x406226
mov eax, 1
jmp 0x4049aa
lea eax, [ebp - 0x380]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x378]
push 0
cdq
sub eax, edx
push esi
mov ecx, eax
mov eax, dword [ebp - 0x374]
push 0
push 0
cdq
push 0x1d6
sub eax, edx
sar ecx, 1
push 0x2bc
sar eax, 1
sub ecx, 0x15e
sub eax, 0xeb
push eax
push ecx
push closesocket
lea eax, [ebp - 0xac]
push eax
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov edi, eax
mov dword [ebp - 0x64], edi
test edi, edi
jne 0x4052cc
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x40622c
push eax
push dword [ebp - 0x24]
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
je 0x40515f
push eax
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
mov eax, dword [ebp - 0x1d8]
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x1dc], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x188], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x4051d8
mov eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x198]
cmp dword [eax], ecx
jne 0x4051d8
mov edx, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x184]
sub edx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x1b8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1a8]
mov dword [eax], edx
cmp byte [ebp - 0x18c], 0
je 0x4051ec
lea ecx, [ebp - 0x1d4]
call fcn.00407370
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1d0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x170]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
push dword [0x4a44a4]
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov ecx, dword [ebp - 0x48]
mov dword [0x4a44a4], 0
cmp ecx, 0x10
jb 0x405260
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405256
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4061fa
push ecx
push edx
call fcn.00439eff
add esp, 8
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp ecx, 0x10
jb 0x4052a6
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40529c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4061fa
push ecx
push edx
call fcn.00439eff
add esp, 8
cmp dword [ebp - 0x20], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
jne 0x406226
mov eax, 2
jmp 0x4049aa
movaps xmm0, xmmword [0x44fca0]
lea eax, [ebp - 0x450]
push eax
push edi
movups xmmword [ebp - 0x450], xmm0
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
push 0x20
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov esi, eax
mov dword [ebp - 0x60], esi
test esi, esi
jne 0x405309
push dword [ebx + 8]
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.USER32.dll_UnregisterClassW]
push 0x4a441c
push 0x4a4434
push 0x40
xorps xmm0, xmm0
mov dword [0x4a4448], 0
push edi
push 1
movlpd qword [0x4a4434], xmm0
movlpd qword [0x4a4440], xmm0
mov dword [0x4a4450], 0
movlpd qword [0x4a4460], xmm0
mov dword [0x4a4454], 1
mov dword [0x4a444c], 1
mov dword [0x4a443c], 0x15
mov dword [0x4a4458], 1
mov dword [0x4a445c], 0x50
mov dword [0x4a4468], 0x80000000
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x40]
test eax, eax
jns 0x405483
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebx + 8]
lea eax, [ebp - 0xac]
push eax
mov eax, dword [sym.imp.USER32.dll_UnregisterClassW]
call eax
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x40622c
push eax
push dword [ebp - 0x24]
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
je 0x4053cd
push eax
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
mov eax, dword [ebp - 0x1d8]
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x1dc], eax
mov dword [ebp - 4], 3
cmp dword [ebp - 0x188], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x405446
mov eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x198]
cmp dword [eax], ecx
jne 0x405446
mov edx, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x184]
sub edx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x1b8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1a8]
mov dword [eax], edx
cmp byte [ebp - 0x18c], 0
je 0x40545a
lea ecx, [ebp - 0x1d4]
call fcn.00407370
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1d0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x170]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
jmp 0x4048f6
push 0x35a4
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov esi, eax
add esp, 4
test esi, esi
je 0x40549e
mov ecx, esi
call fcn.00417450
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov dword [esi + 0xbc], eax
mov eax, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [esi + 0xc0], eax
mov eax, dword [0x4a441c]
push 0x4dd898
mov dword [0x4dd88c], edi
mov dword [0x4dd884], eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x40558c
push 0x4dd890
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x40558c
mov esi, dword [0x45c7f4]
mov eax, dword [0x4dd88c]
mov dword [esi + 0x28], 9
mov dword [esi + 0x2c], 0x25
mov dword [esi + 0x30], 0x27
mov dword [esi + 0x34], 0x26
mov dword [esi + 0x38], 0x28
mov dword [esi + 0x3c], 0x21
mov dword [esi + 0x40], 0x22
mov dword [esi + 0x44], 0x24
mov dword [esi + 0x48], 0x23
mov dword [esi + 0x4c], 0x2e
mov dword [esi + 0x50], 8
mov dword [esi + 0x54], 0xd
mov dword [esi + 0x58], 0x1b
mov dword [esi + 0x5c], 0x41
mov dword [esi + 0x60], 0x43
mov dword [esi + 0x64], 0x56
mov dword [esi + 0x68], 0x58
mov dword [esi + 0x6c], 0x59
mov dword [esi + 0x70], 0x5a
mov dword [esi + 0xac], 0x4387b0
mov dword [esi + 0xc8], eax
jmp 0x405592
mov esi, dword [0x45c7f4]
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x1c], esi
call fcn.00435360
cmp dword [0x4a4408], 0
mov edi, dword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
mov byte [ebp - 0x354], 1
mov dword [ebp - 0x358], 1
mov dword [ebp - 0x35c], 1
jne 0x4055fa
push 0x4a4408
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0x200
push 0xffffffffffffffff
push 0x40
push 0x40
push 0x55a
push 0x45cd88
push dword [0x4a441c]
call edi
cmp dword [0x4a43fc], 0
jne 0x405636
push 0x4a43fc
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0x200
push 0xffffffffffffffff
push 0x68
push 0x88
push 0x6a99
push 0x455b90
push dword [0x4a441c]
call edi
cmp dword [0x4a4400], 0
jne 0x40566f
push 0x4a4400
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0x200
push 0xffffffffffffffff
push 0x40
push 0x40
push 0x680
push 0x455510
push dword [0x4a441c]
call edi
cmp dword [0x4a4404], 0
jne 0x4056a8
push 0x4a4404
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0x200
push 0xffffffffffffffff
push 0x40
push 0x40
push 0x4eb
push 0x455020
push dword [0x4a441c]
call edi
cmp dword [0x4a4414], 0
jne 0x4056e4
push 0x4a4414
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0x200
push 0xffffffffffffffff
push 0x66
push 0xdc
push 0x58c
push 0x45c7f8
push dword [0x4a441c]
call edi
cmp dword [0x4a43f8], 0
jne 0x405720
push 0x4a43f8
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push 0x200
push 0xffffffffffffffff
push 0x19
push 0x87
push 0x1c1
push 0x45c630
push dword [0x4a441c]
call edi
cmp dword [ebp - 0x370], 0
lea edi, [ebp - 0x4f8]
mov eax, dword [esi + 0x80]
mov ecx, 0x17
lea esi, [ebp - 0x370]
mov dword [ebp - 0x18], eax
rep movsd dword es:[edi], dword [esi]
je 0x405760
push 0x710
push 0x44e4c0
push str.font_cfg.FontData__0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0x18]
add esp, 0xc
lea ecx, [ebp - 0x4f8]
mov dword [ebp - 0x4f8], str.OTTO
push ecx
mov ecx, eax
mov dword [ebp - 0x4f4], 0x17098
mov dword [ebp - 0x4e8], 0x41200000
mov dword [ebp - 0x4c8], 0x44f4b0
call fcn.00435900
cmp dword [ebp - 0x370], 0
lea esi, [ebp - 0x370]
mov dword [0x4a4424], eax
lea edi, [ebp - 0x558]
mov eax, dword [ebp - 0x1c]
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0x80]
mov dword [ebp - 0x18], eax
je 0x4057de
push 0x710
push 0x44e4c0
push str.font_cfg.FontData__0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0x18]
add esp, 0xc
lea ecx, [ebp - 0x558]
mov dword [ebp - 0x558], str.OTTO
push ecx
mov ecx, eax
mov dword [ebp - 0x554], 0x17098
mov dword [ebp - 0x548], 0x41400000
mov dword [ebp - 0x528], 0x44f4b0
call fcn.00435900
cmp dword [ebp - 0x370], 0
lea esi, [ebp - 0x370]
mov dword [0x4a4420], eax
lea edi, [ebp - 0x738]
mov eax, dword [ebp - 0x1c]
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0x80]
mov dword [ebp - 0x18], eax
je 0x40585c
push 0x710
push 0x44e4c0
push str.font_cfg.FontData__0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0x18]
add esp, 0xc
lea ecx, [ebp - 0x738]
mov dword [ebp - 0x738], str.OTTO
push ecx
mov ecx, eax
mov dword [ebp - 0x734], 0x17098
mov dword [ebp - 0x728], 0x41900000
mov dword [ebp - 0x708], 0x44f4b0
call fcn.00435900
cmp dword [ebp - 0x370], 0
lea esi, [ebp - 0x370]
mov dword [0x4a4418], eax
lea edi, [ebp - 0x5b8]
mov eax, dword [ebp - 0x1c]
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0x80]
mov dword [ebp - 0x18], eax
je 0x4058da
push 0x710
push 0x44e4c0
push str.font_cfg.FontData__0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0x18]
add esp, 0xc
lea ecx, [ebp - 0x5b8]
mov dword [ebp - 0x5b8], 0x474320
push ecx
mov ecx, eax
mov dword [ebp - 0x5b4], 0x175c4
mov dword [ebp - 0x5a8], 0x41600000
mov dword [ebp - 0x588], 0x44f4b0
call fcn.00435900
cmp dword [ebp - 0x370], 0
lea esi, [ebp - 0x370]
mov eax, dword [ebp - 0x1c]
lea edi, [ebp - 0x618]
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0x80]
mov dword [ebp - 0x18], eax
je 0x405953
push 0x710
push 0x44e4c0
push str.font_cfg.FontData__0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0x18]
add esp, 0xc
lea ecx, [ebp - 0x618]
mov dword [ebp - 0x618], 0x474320
push ecx
mov ecx, eax
mov dword [ebp - 0x614], 0x175c4
mov dword [ebp - 0x608], 0x41700000
mov dword [ebp - 0x5e8], 0x44f4b0
call fcn.00435900
cmp dword [ebp - 0x370], 0
lea esi, [ebp - 0x370]
mov dword [0x4a4428], eax
lea edi, [ebp - 0x678]
mov eax, dword [ebp - 0x1c]
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0x80]
mov dword [ebp - 0x18], eax
je 0x4059d1
push 0x710
push 0x44e4c0
push str.font_cfg.FontData__0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0x18]
add esp, 0xc
lea edx, [ebp - 0x678]
mov dword [ebp - 0x678], 0x45d2e8
push edx
mov ecx, eax
mov dword [ebp - 0x674], 0x17034
mov dword [ebp - 0x668], 0x41200000
mov dword [ebp - 0x648], 0x44f4b0
call fcn.00435900
cmp dword [ebp - 0x370], 0
lea esi, [ebp - 0x370]
mov dword [0x4a4430], eax
lea edi, [ebp - 0x6d8]
mov eax, dword [ebp - 0x1c]
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0x80]
mov dword [ebp - 0x18], eax
je 0x405a4f
push 0x710
push 0x44e4c0
push str.font_cfg.FontData__0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0x18]
add esp, 0xc
lea ecx, [ebp - 0x6d8]
mov dword [ebp - 0x6d8], 0x45d2e8
push ecx
mov ecx, eax
mov dword [ebp - 0x6d4], 0x17034
mov dword [ebp - 0x6c8], 0x41600000
mov dword [ebp - 0x6a8], 0x44f4b0
call fcn.00435900
xorps xmm0, xmm0
mov dword [0x4a446c], eax
mov eax, dword [0x45c7f4]
lea edi, [ebp - 0x1308]
add eax, 0x13c0
mov ecx, 0xcc
movups xmmword [ebp - 0x748], xmm0
mov esi, eax
push 0xa
mov dword [eax + 0x14], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0
movups xmmword [eax + 0xa0], xmm0
movaps xmm0, xmmword [0x450010]
movups xmmword [eax + 0x120], xmm0
movups xmmword [ebp - 0x758], xmm0
movaps xmm0, xmmword [0x450010]
movups xmmword [eax + 0x140], xmm0
movups xmmword [ebp - 0x7b8], xmm0
movaps xmm0, xmmword [0x450010]
movups xmmword [eax + 0x130], xmm0
movups xmmword [ebp - 0x7a8], xmm0
movaps xmm0, xmmword [0x44ff30]
movups xmmword [eax + 0x80], xmm0
movups xmmword [ebp - 0x798], xmm0
movaps xmm0, xmmword [0x450010]
movups xmmword [eax + 0x1e0], xmm0
movups xmmword [ebp - 0x788], xmm0
movaps xmm0, xmmword [0x450000]
movups xmmword [eax + 0x200], xmm0
movups xmmword [ebp - 0x768], xmm0
movaps xmm0, xmmword [0x450020]
movups xmmword [eax + 0x1f0], xmm0
rep movsd dword es:[edi], dword [esi]
mov edi, eax
lea esi, [ebp - 0x1308]
mov ecx, 0xcc
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x64]
movups xmmword [ebp - 0x778], xmm0
mov dword [ebp - 0x230], 0
xorps xmm0, xmm0
push esi
movups xmmword [ebp - 0x248], xmm0
movq qword [ebp - 0x238], xmm0
call dword [sym.imp.USER32.dll_ShowWindow]
push esi
call dword [sym.imp.USER32.dll_UpdateWindow]
lea ecx, [ebp - 0x2d8]
call fcn.00416b80
mov edx, eax
cmp dword [edx + 0x14], 0x10
jb 0x405bd2
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405bd7
sub ecx, esi
push ecx
push edx
mov ecx, 0x4a29e4
call fcn.00407530
mov ecx, dword [ebp - 0x2c4]
cmp ecx, 0x10
jb 0x405c28
mov edx, dword [ebp - 0x2d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405c1e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405c1e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00439eff
add esp, 8
cmp dword [0x4a29f8], 0x10
mov edi, 0x4a29e4
push 0x201
cmovae edi, dword [0x4a29e4]
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0xf
mov byte [ebp - 0x2d8], 0
call fcn.00439f0d
mov esi, eax
add esp, 4
mov eax, edi
lea edx, [eax + 1]
nop word [eax + eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405c70
push 0
sub eax, edx
push eax
push edi
push dword [0x4a44a4]
call dword [sym.imp.WS2_32.dll_send]
push 0
push 0x200
push esi
push dword [0x4a44a4]
call dword [sym.imp.WS2_32.dll_recv]
test eax, eax
jle 0x405ca5
mov byte [esi + eax], 0
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x405ca8
movzx eax, byte [0x4a442d]
sub esi, ecx
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 1
cmp esi, ecx
cmovne eax, ecx
cmp dword [ebp - 0x244], 0x12
mov byte [0x4a442d], al
je 0x405ebe
mov esi, dword [sym.imp.USER32.dll_PeekMessageW]
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x248]
push eax
call esi
test eax, eax
je 0x405d13
lea eax, [ebp - 0x248]
push eax
call edi
lea eax, [ebp - 0x248]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x405d2e
cmp byte [0x4a442d], 0
jne 0x405d42
cmp byte [0x4a442e], 0
jne 0x405ea3
call fcn.00408fe0
cmp dword [ebp - 0x244], 0x12
jne 0x405ce6
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x405ebe
xor eax, eax
mov dword [ebp - 0xc8], 0xc4e0c6d
mov dword [ebp - 0xc4], 0xc560c46
xor ecx, ecx
mov dword [ebp - 0xc0], 0xc400c48
mov dword [ebp - 0xbc], 0xc620c06
mov dword [ebp - 0xb8], 0xc5b0c5a
mov dword [ebp - 0xb4], 0xc590c45
mov word [ebp - 0xb0], ax
mov byte [ebp - 0xae], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0xc8], ax
inc ecx
cmp ecx, 0xc
jb 0x405d90
xor eax, eax
mov byte [ebp - 0xae], 0
mov dword [ebp - 0x110], 0xc4e0c79
xor ecx, ecx
mov dword [ebp - 0x10c], 0xc030c57
mov dword [ebp - 0x108], 0xc400c53
mov dword [ebp - 0x104], 0xc420c54
mov dword [ebp - 0x100], 0xc4f0c08
mov dword [ebp - 0xfc], 0xc580c4b
mov dword [ebp - 0xf8], 0xc480c58
mov dword [ebp - 0xf4], 0xc0f0c5c
mov dword [ebp - 0xf0], 0xc590c44
mov dword [ebp - 0xec], 0xc5d0c53
mov dword [ebp - 0xe8], 0xc410c14
mov dword [ebp - 0xe4], 0xc520c5e
mov dword [ebp - 0xe0], 0xc540c18
mov dword [ebp - 0xdc], 0xc5f0c55
mov dword [ebp - 0xd8], 0xc510c49
mov dword [ebp - 0xd4], 0xc1f0c5b
mov dword [ebp - 0xd0], 0xc690c7a
mov word [ebp - 0xcc], ax
mov byte [ebp - 0xca], 1
nop word [eax + eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x110], ax
inc ecx
cmp ecx, 0x22
jb 0x405e70
push 0x10
lea eax, [ebp - 0xc8]
mov byte [ebp - 0xca], 0
push eax
lea eax, [ebp - 0x110]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push dword [0x4a440c]
mov eax, dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call eax
push dword [0x4a440c]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
mov dword [ebp - 0x2b], 0x42475362
xor ecx, ecx
mov word [ebp - 0x27], 0x4f
mov byte [ebp - 0x25], 1
mov al, cl
add al, 0x20
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 5
jb 0x405ed1
push 0x201
mov byte [ebp - 0x25], 0
call fcn.00439f0d
lea ecx, [ebp - 0x2b]
add esp, 4
mov esi, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405ef8
push 0
sub ecx, edx
lea eax, [ebp - 0x2b]
push ecx
push eax
push dword [0x4a44a4]
call dword [sym.imp.WS2_32.dll_send]
push 0
push 0x200
push esi
push dword [0x4a44a4]
call dword [sym.imp.WS2_32.dll_recv]
test eax, eax
jle 0x405f30
mov byte [eax + esi], 0
mov eax, dword [0x4a494c]
test eax, eax
je 0x40622c
mov esi, dword [sym.imp.MSVCP140.dll__Thrd_detach]
push eax
push dword [0x4a4948]
call esi
add esp, 8
test eax, eax
je 0x405f5a
push eax
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
push dword [0x4a44a4]
xorps xmm0, xmm0
movlpd qword [0x4a4948], xmm0
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
cmp byte [0x4a442c], 0
mov dword [0x4a44a4], 0
je 0x405f9e
push dword [0x4a440c]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [0x4a440c]
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x40622c
push eax
push dword [ebp - 0x24]
call esi
add esp, 8
test eax, eax
je 0x405fbd
push eax
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
call fcn.00439210
call fcn.0041a770
mov ecx, dword [0x4a441c]
mov dword [0x4dd884], 0
mov dword [0x4dd88c], 0
test ecx, ecx
je 0x405ff3
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x60]
push ecx
mov eax, dword [ecx]
call dword [eax + 8]
push dword [ebx + 8]
lea eax, [ebp - 0xac]
push eax
mov eax, dword [sym.imp.USER32.dll_UnregisterClassW]
call eax
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0
mov dword [ebp - 0x18], 0
call eax
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 0x1000
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x1000
mov byte [esi], 0
lea esi, [esi + 1]
sub eax, 1
jne 0x406036
push 0x44
push eax
lea eax, [ebp - 0x498]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0xbc8]
xorps xmm0, xmm0
movups xmmword [ebp - 0x224], xmm0
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0xbc8]
push eax
push str.cmd.exe__C_ping_1.1.1.1__n_1__w_3000___Nul__Del__f__q___s_
lea eax, [ebp - 0x1718]
push 0x208
push eax
call fcn.004103e0
add esp, 0x10
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x498]
push eax
push 0
push 0
push 0x8000000
push 0
push 0
push 0
lea eax, [ebp - 0x1718]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
push dword [ebp - 0x220]
call edi
push dword [ebp - 0x224]
call edi
mov eax, dword [ebp - 0x1d8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x1dc], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x188], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x40613e
mov eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x198]
cmp dword [eax], ecx
jne 0x40613e
mov edx, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x184]
sub edx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x1b8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1a8]
mov dword [eax], edx
cmp byte [ebp - 0x18c], 0
je 0x406152
lea ecx, [ebp - 0x1d4]
call fcn.00407370
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1d0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x170]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
push dword [0x4a44a4]
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov ecx, dword [ebp - 0x48]
mov dword [0x4a44a4], 0
cmp ecx, 0x10
jb 0x4061c2
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4061b8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4061fa
push ecx
push edx
call fcn.00439eff
add esp, 8
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp ecx, 0x10
jb 0x40620a
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406200
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406200
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00439eff
add esp, 8
cmp dword [ebp - 0x20], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
je 0x4049a8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [ebp - 0x20], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push str._Error_header_n
call fcn.00401760
add esp, 4
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.00401960
int3