Function at 0x41bfd0
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x50
mov eax, dword [0x49d980]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x49da78], 1
push esi
push edi
jne 0x41cc81
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0xc]
mov edx, 0x49da78
sub eax, dword [ebp - 0x14]
mov ecx, str.Rebirth
push 0x1ab
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x491d1c]
mulss xmm0, dword [0x491bec]
cvttss2si eax, xmm0
movd xmm2, eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
cvtdq2ps xmm2, xmm2
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x491d08]
mulss xmm0, dword [0x491bec]
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, dword [0x49f8f4]
cvtdq2ps xmm0, xmm0
or dword [eax + 0x3fec], 3
mov dword [eax + 0x4008], 0
movss dword [eax + 0x4000], xmm2
movss dword [eax + 0x4004], xmm0
mov dword [eax + 0x400c], 0
mov dword [eax + 0x3ff0], 2
mov byte [eax + 0x4028], 1
mov dword [eax + 0x4010], 0x44548000
mov dword [eax + 0x4014], 0x43db8000
mov dword [eax + 0x3ff4], 2
call fcn.0042c2d0
mov ecx, dword [0x49f904]
lea eax, [ebp - 0x50]
add esp, 4
mov dword [ebp - 0x24], 0x3f800000
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0x3f800000
movups xmmword [ebp - 0x50], xmm0
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x2c], 0
movaps xmm0, xmmword [0x492130]
push eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x1c], 0x44520000
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x18], 0x43d68000
push eax
movups xmmword [ebp - 0x3c], xmm0
call fcn.00459200
mov ecx, dword [0x49f8f4]
add esp, 0x10
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm3, dword [eax + 0x40]
movss xmm2, dword [eax + 0x44]
subss xmm3, dword [eax + 0x90]
subss xmm2, dword [eax + 0x94]
addss xmm3, dword [0x491c94]
addss xmm2, dword [0x491c94]
movss dword [eax + 0x108], xmm3
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
movss xmm0, dword [eax + 0x124]
maxss xmm1, xmm3
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x1c], 0x3f800000
mov dword [ebp - 0x18], 0x3f800000
mov dword [ebp - 0x2c], 0
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0x41200000
addss xmm0, dword [0x491d18]
mov dword [ebp - 0x20], 0x41200000
addss xmm2, dword [0x491ca4]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
lea eax, [ebp - 0x3c]
movaps xmm0, xmmword [0x492130]
push eax
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, dword [0x49f910]
lea eax, [ebp - 0x1c]
push eax
movups xmmword [ebp - 0x3c], xmm0
lea eax, [ebp - 0x2c]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x50], xmm0
call fcn.004599d0
add esp, 0x14
test al, al
je 0x41c29c
call fcn.004749c0
push 0
mov byte [0x49f8ef], 1
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov ecx, dword [0x49f8f4]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x1c], 0x3f800000
mov dword [ebp - 0x18], 0x3f800000
mov dword [ebp - 0x2c], 0
mov eax, dword [ecx + 0x3f04]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0x41f80000
mov dword [ebp - 0x20], 0x41c80000
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x491ce8]
addss xmm2, dword [0x491ccc]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
lea eax, [ebp - 0x3c]
movaps xmm0, xmmword [0x492130]
push eax
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, dword [0x49f914]
lea eax, [ebp - 0x1c]
push eax
movups xmmword [ebp - 0x3c], xmm0
lea eax, [ebp - 0x2c]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x50], xmm0
call fcn.004599d0
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
add esp, 0x14
test al, al
je 0x41c393
push 1
push 0
push 0
push str.https:__s4rebirth.com_
push str.open
push 0
call esi
mov ecx, dword [0x49f8f4]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x1c], 0x3f800000
mov dword [ebp - 0x18], 0x3f800000
mov dword [ebp - 0x2c], 0
mov eax, dword [ecx + 0x3f04]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0x41f80000
mov dword [ebp - 0x20], 0x41c80000
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x491ce8]
addss xmm2, dword [0x491ce0]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
lea eax, [ebp - 0x3c]
movaps xmm0, xmmword [0x492130]
push eax
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, dword [0x49f90c]
lea eax, [ebp - 0x1c]
push eax
movups xmmword [ebp - 0x3c], xmm0
lea eax, [ebp - 0x2c]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x50], xmm0
call fcn.004599d0
add esp, 0x14
test al, al
je 0x41c484
push 1
push 0
push 0
push str.https:__discord.gg_s4rebirth
push str.open
push 0
call esi
mov esi, dword [0x49f8f4]
mov dword [ebp - 0x40], 7
mov eax, dword [esi + 0x3f04]
lea ecx, [esi + 0x4074]
mov byte [eax + 0xc5], 1
mov eax, dword [esi + 0x3f04]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x491cb8]
addss xmm2, dword [0x491ce8]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
lea eax, [ebp - 0x40]
movups xmm0, xmmword [esi + 0x398c]
push eax
movups xmmword [ebp - 0x3c], xmm0
call fcn.00441c20
mov eax, dword [0x49f8f4]
xorps xmm0, xmm0
push 0
push 0
movups xmmword [esi + 0x398c], xmm0
or dword [eax + 0x3f9c], 1
mov edx, str.Username
mov dword [eax + 0x3fa0], 0x433e0000
mov ecx, edx
push 0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
push 0xc
push 0x49f930
mov dword [ebp - 0x18], 0
call fcn.0045c760
mov ecx, dword [0x49f8f4]
mov edx, str.Password
push 0
push 0
push 0x8000
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x491cb8]
addss xmm2, dword [0x491cf0]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
lea eax, [ebp - 0x1c]
or dword [ecx + 0x3f9c], 1
push eax
mov dword [ecx + 0x3fa0], 0x433e0000
mov ecx, edx
push 0xc
push 0x49f940
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.0045c760
mov esi, dword [0x49f8f4]
add esp, 0x30
mov eax, dword [esi + 0x4074]
mov ecx, dword [esi + 0x407c]
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
add eax, eax
movups xmm0, xmmword [ecx + edx*4 - 0x10]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
movups xmmword [esi + eax*8 + 0x391c], xmm0
dec dword [esi + 0x4074]
mov eax, dword [esi + 0x3f04]
cmp byte [0x49f8ec], 0
mov dword [ebp - 0x24], 0x41700000
mov dword [ebp - 0x20], 0x41700000
mov byte [eax + 0xc5], 1
mov eax, dword [esi + 0x3f04]
mov dword [ebp - 0x1c], 0x3f800000
mov dword [ebp - 0x18], 0x3f800000
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x491ce4]
addss xmm2, dword [0x491cf4]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
lea eax, [ebp - 0x3c]
mov ecx, dword [0x49f8fc]
cmove ecx, dword [0x49f908]
movaps xmm0, xmmword [0x492130]
push eax
lea eax, [ebp - 0x50]
push eax
push ecx
lea eax, [ebp - 0x1c]
push eax
movups xmmword [ebp - 0x3c], xmm0
lea eax, [ebp - 0x2c]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x50], xmm0
call fcn.004599d0
add esp, 0x14
test al, al
je 0x41c749
cmp byte [0x49f8ee], 0
sete byte [0x49f8ee]
mov ecx, dword [0x49f8f4]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x1c], 0x3f800000
mov dword [ebp - 0x18], 0x3f800000
mov dword [ebp - 0x2c], 0
mov eax, dword [ecx + 0x3f04]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0x430c0000
mov dword [ebp - 0x20], 0x42600000
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x491cbc]
addss xmm2, dword [0x491cf8]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
lea eax, [ebp - 0x3c]
movaps xmm0, xmmword [0x492130]
push eax
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, dword [0x49f900]
lea eax, [ebp - 0x1c]
push eax
movups xmmword [ebp - 0x3c], xmm0
lea eax, [ebp - 0x2c]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x50], xmm0
call fcn.004599d0
add esp, 0x14
test al, al
je 0x41c82b
call fcn.00407a90
mov ecx, dword [0x49f8f4]
push dword [0x49da7c]
mov eax, dword [ecx + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [ecx + 0x3f04]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x491cb0]
addss xmm2, dword [0x491cfc]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
lea eax, [ebp - 0x3c]
movaps xmm0, xmmword [0x492020]
push eax
mov dword [ecx + 0x3c98], 0x41b00000
movups xmmword [ebp - 0x3c], xmm0
call fcn.00457a30
mov esi, dword [0x49f8f4]
add esp, 8
mov dword [ebp - 0x40], 0x2a
mov eax, dword [esi + 0x3f04]
lea ecx, [esi + 0x4074]
mov byte [eax + 0xc5], 1
mov eax, dword [esi + 0x3f04]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x491cb0]
addss xmm2, dword [0x491d00]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
lea eax, [ebp - 0x40]
movups xmm0, xmmword [esi + 0x3bbc]
push eax
movups xmmword [ebp - 0x3c], xmm0
call fcn.00441c20
movaps xmm0, xmmword [0x4920c0]
lea eax, [ebp - 0x40]
movups xmmword [esi + 0x3bbc], xmm0
mov esi, dword [0x49f8f4]
push eax
mov dword [ebp - 0x40], 7
movups xmm0, xmmword [esi + 0x398c]
lea ecx, [esi + 0x4074]
movups xmmword [ebp - 0x3c], xmm0
call fcn.00441c20
movaps xmm0, xmmword [0x492020]
lea eax, [ebp - 0x40]
movups xmmword [esi + 0x398c], xmm0
mov esi, dword [0x49f8f4]
push eax
mov dword [ebp - 0x40], 8
movups xmm0, xmmword [esi + 0x399c]
lea ecx, [esi + 0x4074]
movups xmmword [ebp - 0x3c], xmm0
call fcn.00441c20
movaps xmm0, xmmword [0x492040]
lea eax, [ebp - 0x40]
movups xmmword [esi + 0x399c], xmm0
mov esi, dword [0x49f8f4]
push eax
mov dword [ebp - 0x40], 9
movups xmm0, xmmword [esi + 0x39ac]
lea ecx, [esi + 0x4074]
movups xmmword [ebp - 0x3c], xmm0
call fcn.00441c20
movaps xmm0, xmmword [0x492080]
lea ecx, [ebp - 0x1c]
movups xmmword [esi + 0x39ac], xmm0
mov dword [ebp - 0x1c], 0x44200000
movss xmm0, dword [0x49f92c]
mov dword [ebp - 0x18], 0x41000000
call fcn.00459aa0
mov edi, dword [0x49f8f4]
mov eax, dword [edi + 0x4074]
lea esi, [edi + 0x4074]
mov ecx, dword [esi + 8]
mov dword [ebp - 0x40], 0x2a
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, eax
movups xmmword [edi + eax*8 + 0x391c], xmm0
dec dword [esi]
mov eax, dword [esi]
mov ecx, dword [edi + 0x407c]
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, eax
movups xmmword [edi + eax*8 + 0x391c], xmm0
dec dword [esi]
mov eax, dword [esi]
mov ecx, dword [edi + 0x407c]
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, eax
mov ecx, esi
movups xmmword [edi + eax*8 + 0x391c], xmm0
dec dword [esi]
mov eax, dword [edi + 0x3f04]
mov byte [eax + 0xc5], 1
mov eax, dword [edi + 0x3f04]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x90]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x94]
addss xmm0, dword [0x491cb0]
addss xmm2, dword [0x491d04]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
lea eax, [ebp - 0x40]
movups xmm0, xmmword [edi + 0x3bbc]
push eax
movups xmmword [ebp - 0x3c], xmm0
call fcn.00441c20
mov esi, dword [0x49f8f4]
lea eax, [ebp - 0x40]
movaps xmm0, xmmword [0x491fb0]
movups xmmword [edi + 0x3bbc], xmm0
push eax
movups xmm0, xmmword [esi + 0x398c]
lea ecx, [esi + 0x4074]
mov dword [ebp - 0x40], 7
movups xmmword [ebp - 0x3c], xmm0
call fcn.00441c20
movaps xmm0, xmmword [0x491f80]
lea eax, [ebp - 0x40]
movups xmmword [esi + 0x398c], xmm0
mov esi, dword [0x49f8f4]
push eax
mov dword [ebp - 0x40], 8
movups xmm0, xmmword [esi + 0x399c]
lea ecx, [esi + 0x4074]
movups xmmword [ebp - 0x3c], xmm0
call fcn.00441c20
movaps xmm0, xmmword [0x491f90]
movups xmmword [esi + 0x399c], xmm0
mov esi, dword [0x49f8f4]
mov dword [ebp - 0x40], 9
movups xmm0, xmmword [esi + 0x39ac]
lea eax, [ebp - 0x40]
push eax
lea ecx, [esi + 0x4074]
movups xmmword [ebp - 0x3c], xmm0
call fcn.00441c20
movaps xmm0, xmmword [0x491fa0]
lea ecx, [ebp - 0x1c]
movups xmmword [esi + 0x39ac], xmm0
mov dword [ebp - 0x1c], 0x44200000
movss xmm0, dword [0x49f93c]
mov dword [ebp - 0x18], 0x41000000
call fcn.00459aa0
mov esi, dword [0x49f8f4]
mov eax, dword [esi + 0x4074]
mov ecx, dword [esi + 0x407c]
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, eax
movups xmmword [esi + eax*8 + 0x391c], xmm0
dec dword [esi + 0x4074]
mov eax, dword [esi + 0x4074]
mov ecx, dword [esi + 0x407c]
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, eax
movups xmmword [esi + eax*8 + 0x391c], xmm0
dec dword [esi + 0x4074]
mov eax, dword [esi + 0x4074]
mov ecx, dword [esi + 0x407c]
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, eax
movups xmmword [esi + eax*8 + 0x391c], xmm0
dec dword [esi + 0x4074]
call fcn.0042f270
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0047cd55
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret