Function at 0x405ac0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Create thread
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47b95a
mov eax, dword fs:[0]
push eax
sub esp, 0x560
mov eax, dword [0x495400]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x438], esi
push 0
push 0
push 0
push 0x40c840
push 0
mov dword [ebp - 0x408], 0
push 0
mov dword [ebp - 0x3ac], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [esi + 0x28], 0xa
jne 0x40776a
cmp dword [esi + 0x40], 0x40
jne 0x40776a
xorps xmm0, xmm0
mov dword [ebp - 0xd8], 0xf
xor edi, edi
movups xmmword [ebp - 0xec], xmm0
mov dword [ebp - 0xdc], edi
movups xmmword [ebp - 0x12c], xmm0
mov byte [ebp - 0xec], 0
lea eax, [ebp - 0x12c]
mov dword [ebp - 4], edi
push eax
call dword [sym.imp.RPCRT4.dll_UuidCreate]
lea eax, [ebp - 0x398]
mov dword [ebp - 0x398], edi
push eax
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.RPCRT4.dll_UuidToStringA]
test eax, eax
jne 0x405bbe
mov edx, dword [ebp - 0x398]
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405b95
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xec]
call fcn.00411600
lea eax, [ebp - 0x398]
push eax
call dword [sym.imp.RPCRT4.dll_RpcStringFreeA]
mov edi, dword [ebp - 0xdc]
xorps xmm0, xmm0
mov dword [ebp - 0x84], 0
movups xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
mov ecx, 0x10
mov byte [ebp - 4], 1
cmp edi, ecx
mov dword [ebp - 0x410], 0
lea eax, [ebp - 0xec]
mov dword [ebp - 0x40c], 0
cmovb ecx, edi
cmp dword [ebp - 0xd8], 0xf
push ecx
cmova eax, dword [ebp - 0xec]
lea ecx, [ebp - 0x420]
push eax
movups xmmword [ebp - 0x420], xmm0
call fcn.00412c30
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x94]
call fcn.0040eee0
mov ecx, dword [ebp - 0x40c]
cmp ecx, 0xf
jbe 0x405c76
mov edx, dword [ebp - 0x420]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405c6c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4073e5
push ecx
push edx
call fcn.0047a114
add esp, 8
push ecx
lea eax, [ebp - 0x3af]
mov word [ebp - 0x3b0], 0x2d
push eax
lea eax, [ebp - 0x3b0]
mov byte [ebp - 0x3ae], 0
push eax
lea ecx, [ebp - 0x420]
call fcn.004120a0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x94]
cmp dword [ebp - 0x80], 0xf
push dword [ebp - 0x84]
cmova eax, dword [ebp - 0x94]
push eax
push ecx
lea ecx, [ebp - 0x420]
call fcn.00415410
mov dword [ebp - 0x54], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x50], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x64], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x54], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x40c]
cmp ecx, 0xf
jbe 0x405d3f
mov edx, dword [ebp - 0x420]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405d35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405d35
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
add esp, 8
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 0xf
mov byte [ebp - 0x420], 0
lea eax, [esi + 0x30]
mov byte [ebp - 4], 3
push eax
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x44]
call fcn.00411a90
add esp, 4
lea ecx, [esi + 0x1cc]
push eax
call fcn.0040eee0
mov ecx, dword [ebp - 0x30]
cmp ecx, 0xf
jbe 0x405dac
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405da2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405de8
push ecx
push edx
call fcn.0047a114
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp ecx, 0xf
jbe 0x405df8
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405dee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405dee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
add esp, 8
lea ecx, [ebp - 0x104]
call fcn.00409ef0
mov byte [ebp - 4], 4
call fcn.00422990
cmp dword [esi + 0x14], 0xf
mov ecx, eax
mov dword [ebp - 0x3ac], ecx
mov eax, esi
mov dword [ebp - 0x3a4], 0x7b637c34
mov dword [ebp - 0x3a0], 0x7d716573
mov word [ebp - 0x39c], 0x27
mov byte [ebp - 0x39a], 1
jbe 0x405e42
mov eax, dword [esi]
push 0
push eax
push ecx
call fcn.004227f0
add esp, 0xc
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x20], 0x78757d34
xor ecx, ecx
mov dword [ebp - 0x1c], 0x1002a73
mov dword [ebp - 0x3d4], 0x767a7634
mov dword [ebp - 0x3d0], 0x2461727d
mov word [ebp - 0x3cc], 0x100
mov dword [ebp - 0x3c8], 0x66757b34
mov dword [ebp - 0x3c4], 0x1002a7e
mov dword [ebp - 0x28], 0x67716534
mov word [ebp - 0x24], 0x2b
mov byte [ebp - 0x22], 1
mov dword [ebp - 0x3bc], 0x70646a66
mov dword [ebp - 0x3b8], 0x70767e2b
mov word [ebp - 0x3b4], 0x6e
mov byte [ebp - 0x3b2], 1
nop word [eax + eax]
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x28], al
inc ecx
cmp ecx, 5
jb 0x405ed0
push ecx
lea eax, [ebp - 0x23]
mov byte [ebp - 0x22], 0
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x44]
call fcn.004120a0
mov byte [ebp - 4], 5
cmp byte [ebp - 0x3b2], 0
je 0x405f1a
xor ecx, ecx
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x3bc], al
inc ecx
cmp ecx, 9
jb 0x405f02
mov byte [ebp - 0x3b2], 0
push ecx
lea eax, [ebp - 0x3b3]
push eax
lea eax, [ebp - 0x3bc]
push eax
lea ecx, [ebp - 0x7c]
call fcn.004120a0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x7c]
push eax
push dword [ebp - 0x3aa]
lea ecx, [ebp - 0x4b0]
call fcn.00414350
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x405f86
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405f7c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406453
push ecx
push edx
call fcn.0047a114
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x30]
cmp ecx, 0xf
jbe 0x405fbe
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405fb4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406453
push ecx
push edx
call fcn.0047a114
add esp, 8
lea eax, [esi + 0x48]
mov byte [ebp - 4], 7
push eax
lea edx, [ebp - 0x4b0]
lea ecx, [ebp - 0x528]
call fcn.00411a90
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 4], 8
push ecx
mov edx, eax
lea ecx, [ebp - 0x510]
call fcn.00407860
add esp, 8
mov esi, eax
mov byte [ebp - 4], 9
lea edx, [ebp - 0x104]
cmp dword [ebp - 0xf0], 0xf
mov ecx, dword [esi + 0x10]
cmova edx, dword [ebp - 0x104]
mov eax, dword [esi + 0x14]
mov edi, dword [ebp - 0xf4]
sub eax, ecx
mov dword [ebp - 0x48], ecx
cmp edi, eax
ja 0x40605b
cmp dword [esi + 0x14], 0xf
lea eax, [edi + ecx]
mov dword [esi + 0x10], eax
mov eax, esi
mov dword [ebp - 0x3b0], esi
jbe 0x40603d
mov eax, dword [esi]
mov dword [ebp - 0x3b0], eax
push edi
add eax, ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x3b0]
add esp, 0xc
mov ecx, dword [ebp - 0x48]
add eax, edi
mov byte [eax + ecx], 0
jmp 0x40606e
push edi
push edx
mov byte [ebp - 0x48], 0
mov ecx, esi
push dword [ebp - 0x48]
push edi
call fcn.00412ad0
mov esi, eax
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x34], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea eax, [ebp - 0x3d4]
mov byte [ebp - 4], 0xa
push eax
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x4f8]
call fcn.00407960
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x94]
cmp dword [ebp - 0x80], 0xf
mov eax, dword [edi + 0x14]
cmova edx, dword [ebp - 0x94]
mov esi, dword [edi + 0x10]
sub eax, esi
mov ecx, dword [ebp - 0x84]
cmp ecx, eax
ja 0x4060fe
cmp dword [edi + 0x14], 0xf
lea eax, [ecx + esi]
mov dword [edi + 0x10], eax
mov eax, edi
jbe 0x4060e5
mov eax, dword [edi]
push ecx
add esi, eax
push edx
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x84]
add esp, 0xc
mov byte [eax + esi], 0
jmp 0x406111
push ecx
push edx
mov byte [ebp - 0x48], 0
push dword [ebp - 0x48]
push ecx
mov ecx, edi
call fcn.00412ad0
mov edi, eax
movups xmm0, xmmword [edi]
mov eax, 0x1e7e000
mov dword [ebp - 0x3b0], eax
movups xmmword [ebp - 0x7c], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x6c], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0xc
push eax
lea edx, [ebp - 0x7c]
lea ecx, [ebp - 0x540]
call fcn.00407860
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x4e0]
push dword [ebp - 0x408]
mov edx, eax
call fcn.004119e0
lea ecx, [ebp - 0x3a4]
mov byte [ebp - 4], 0xe
push ecx
mov edx, eax
lea ecx, [ebp - 0x4c8]
call fcn.00407a60
mov edi, dword [ebp - 0x438]
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [edi + 0x18]
push ecx
lea ecx, [ebp - 0x11c]
call fcn.00411a90
add esp, 0x10
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x4b4]
cmp ecx, 0xf
jbe 0x4061df
mov edx, dword [ebp - 0x4c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4061d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406453
push ecx
push edx
call fcn.0047a114
add esp, 8
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x4b4], 0xf
mov byte [ebp - 0x4c8], 0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x4cc]
cmp ecx, 0xf
jbe 0x406238
mov edx, dword [ebp - 0x4e0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40622e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406453
push ecx
push edx
call fcn.0047a114
add esp, 8
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x4cc], 0xf
mov byte [ebp - 0x4e0], 0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x52c]
cmp ecx, 0xf
jbe 0x406291
mov edx, dword [ebp - 0x540]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406287
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406453
push ecx
push edx
call fcn.0047a114
add esp, 8
mov dword [ebp - 0x530], 0
mov dword [ebp - 0x52c], 0xf
mov byte [ebp - 0x540], 0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x4062e4
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4062da
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406453
push ecx
push edx
call fcn.0047a114
add esp, 8
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x4e4]
cmp ecx, 0xf
jbe 0x406322
mov edx, dword [ebp - 0x4f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406318
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406453
push ecx
push edx
call fcn.0047a114
add esp, 8
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4e4], 0xf
mov byte [ebp - 0x4f8], 0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x30]
cmp ecx, 0xf
jbe 0x406375
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40636b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406453
push ecx
push edx
call fcn.0047a114
add esp, 8
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x4fc]
cmp ecx, 0xf
jbe 0x4063b3
mov edx, dword [ebp - 0x510]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4063a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406453
push ecx
push edx
call fcn.0047a114
add esp, 8
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x4fc], 0xf
mov byte [ebp - 0x510], 0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x514]
cmp ecx, 0xf
jbe 0x406408
mov edx, dword [ebp - 0x528]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4063fe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406453
push ecx
push edx
call fcn.0047a114
add esp, 8
mov dword [ebp - 0x518], 0
mov dword [ebp - 0x514], 0xf
mov byte [ebp - 0x528], 0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x49c]
cmp ecx, 0xf
jbe 0x406463
mov edx, dword [ebp - 0x4b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406459
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406459
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
add esp, 8
cmp dword [edi + 0x8c], 0xf
lea esi, [edi + 0x78]
mov dword [ebp - 0x4a0], 0
mov ecx, esi
mov dword [ebp - 0x49c], 0xf
mov byte [ebp - 0x4b0], 0
jbe 0x40648e
mov ecx, dword [esi]
mov edx, dword [esi + 0x10]
push 0
push 0x48c78a
call fcn.0041a600
add esp, 8
test al, al
je 0x4064b1
cmp dword [edi + 0x88], 0
je 0x40698a
push 0xb8
lea eax, [ebp - 0x1e8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push esi
lea ecx, [ebp - 0x1e8]
call fcn.0040dfe0
xorps xmm0, xmm0
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1e8]
mov eax, dword [ebp - 0x1e8]
push 0xa
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
movzx eax, al
lea edx, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x1e8]
call fcn.00417920
movaps xmm0, xmmword [str.03YQ7d9rry_0I]
mov eax, bind
mov ecx, dword [esi + 0x10]
add esp, 4
movups xmmword [ebp - 0x484], xmm0
sub eax, ecx
mov word [ebp - 0x454], 0x100
movaps xmm0, xmmword [0x48e6c0]
movups xmmword [ebp - 0x474], xmm0
movaps xmm0, xmmword [0x48e810]
movups xmmword [ebp - 0x464], xmm0
cmp eax, 0x14
jb 0x4077d6
cmp dword [esi + 0x14], 0xf
jbe 0x40657d
mov esi, dword [esi]
push ecx
push esi
push 0x14
push str.certutil__hashfile__
push ecx
push dword [ebp - 0x3aa]
lea ecx, [ebp - 0x404]
call fcn.00414530
lea eax, [ebp - 0x484]
mov byte [ebp - 4], 0x1d
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x7c]
call fcn.00407b60
add esp, 4
cmp dword [eax + 0x14], 0xf
jbe 0x4065bc
mov eax, dword [eax]
xorps xmm0, xmm0
mov dword [ebp - 0x410], 0
push 0x48c904
movups xmmword [ebp - 0x420], xmm0
push eax
mov dword [ebp - 0x40c], 0xf
mov byte [ebp - 0x420], 0
mov dword [ebp - 0x408], 0x19e7e000
movlpd qword [ebp - 0x4c], xmm0
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov esi, eax
add esp, 8
mov eax, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], esi
mov byte [ebp - 4], 0x20
test esi, esi
je 0x4077db
push esi
lea eax, [ebp - 0x394]
push 0x80
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
add esp, 0xc
test eax, eax
je 0x406676
lea ecx, [ebp - 0x394]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406640
sub ecx, edx
lea eax, [ebp - 0x394]
push ecx
push eax
lea ecx, [ebp - 0x420]
call fcn.00411600
push esi
lea eax, [ebp - 0x394]
push 0x80
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
add esp, 0xc
test eax, eax
jne 0x406632
push esi
mov byte [ebp - 4], 0x22
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
add esp, 4
lea eax, [ebp - 0x420]
lea ecx, [ebp - 0x44]
push eax
call fcn.0040eee0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x40c]
cmp ecx, 0xf
jbe 0x4066d1
mov edx, dword [ebp - 0x420]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4066c7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406747
push ecx
push edx
call fcn.0047a114
add esp, 8
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x68]
cmp ecx, 0xf
jbe 0x406705
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4066fb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406747
push ecx
push edx
call fcn.0047a114
add esp, 8
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp ecx, 0xf
jbe 0x406757
mov edx, dword [ebp - 0x404]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40674d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40674d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
add esp, 8
mov dword [ebp - 0x3e0], 0x7e7b6734
xor ecx, ecx
mov dword [ebp - 0x3dc], 0x257973
mov byte [ebp - 0x3d8], 1
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x3e0], al
inc ecx
cmp ecx, 7
jb 0x406774
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 0x3d8], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406795
sub ecx, edx
mov eax, bind
mov edx, dword [ebp - 0x54]
sub eax, edx
cmp eax, ecx
jb 0x4077d6
cmp dword [ebp - 0x50], 0xf
lea eax, [ebp - 0x64]
push edx
cmova eax, dword [ebp - 0x64]
push eax
push ecx
lea eax, [ebp - 0x3e0]
push eax
push ecx
push dword [ebp - 0x3aa]
lea ecx, [ebp - 0x404]
call fcn.00414530
lea eax, [ebp - 0x404]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x11c]
call fcn.0040ede0
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x3f0]
cmp ecx, 0xf
jbe 0x40682b
mov edx, dword [ebp - 0x404]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406821
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406969
push ecx
push edx
call fcn.0047a114
add esp, 8
lea edx, [edi + 0x78]
mov dword [ebp - 0x3ec], 0x747c6734
mov dword [ebp - 0x3e8], 0x257f65
xor ecx, ecx
mov byte [ebp - 0x3e4], 1
nop dword [eax + eax]
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x3ec], al
inc ecx
cmp ecx, 7
jb 0x406850
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 0x3e4], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406871
sub ecx, esi
mov eax, bind
mov esi, dword [edx + 0x10]
sub eax, esi
cmp eax, ecx
jb 0x4077d6
cmp dword [edx + 0x14], 0xf
jbe 0x406894
mov edx, dword [edx]
push esi
push edx
push ecx
lea eax, [ebp - 0x3ec]
push eax
push ecx
push dword [ebp - 0x3aa]
lea ecx, [ebp - 0x404]
call fcn.00414530
mov esi, 0x17e7e000
mov dword [ebp - 0x3b0], esi
lea eax, [ebp - 0x404]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x11c]
call fcn.0040ede0
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x3f0]
cmp ecx, 0xf
jbe 0x40690b
mov edx, dword [ebp - 0x404]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406901
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406969
push ecx
push edx
call fcn.0047a114
add esp, 8
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x30]
cmp ecx, 0xf
jbe 0x40693f
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406935
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x406969
push ecx
push edx
call fcn.0047a114
add esp, 8
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x50]
cmp ecx, 0xf
jbe 0x406979
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40696f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40696f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
add esp, 8
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x19
call fcn.00407cf0
jmp 0x40698f
mov esi, 0x1e7e000
push dword [ebp - 0x3ac]
call fcn.00422950
sub esp, 0x14
lea eax, [edi + 0x60]
mov ecx, esp
mov dword [ebp - 0x3ac], esp
push eax
call fcn.0040efa0
sub esp, 0x18
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x11c]
mov ecx, esp
push eax
call fcn.0040efa0
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x19
call fcn.00409830
add esp, 0x30
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0xac], 0x10
movaps xmm0, xmmword [str.YvmTccpFSujrvD]
movups xmmword [ebp - 0x434], xmm0
mov byte [ebp - 0x424], 1
jne 0x406adc
xor ecx, ecx
nop dword [eax]
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x434], al
inc ecx
cmp ecx, 0xf
jb 0x406a00
push ecx
lea eax, [ebp - 0x425]
mov byte [ebp - 0x424], 0
push eax
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x450]
call fcn.004120a0
or esi, 0x180000
lea ecx, [ebp - 0x450]
cmp dword [ebp - 0x43c], 0xf
lea edx, [ebp - 0xbc]
mov dword [ebp - 0x3b0], esi
cmova ecx, dword [ebp - 0x450]
cmp dword [ebp - 0xa8], 0xf
mov esi, dword [ebp - 0xac]
cmova edx, dword [ebp - 0xbc]
cmp esi, dword [ebp - 0x440]
jne 0x406adc
sub esi, 4
jb 0x406a91
nop dword [eax]
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x406a96
add edx, 4
add ecx, 4
sub esi, 4
jae 0x406a80
cmp esi, 0xfffffffc
je 0x406aca
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x406ac3
cmp esi, 0xfffffffd
je 0x406aca
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x406ac3
cmp esi, 0xfffffffe
je 0x406aca
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x406ac3
cmp esi, 0xffffffff
je 0x406aca
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x406aca
sbb eax, eax
or eax, 1
jmp 0x406acc
xor eax, eax
mov ecx, dword [ebp - 0x450]
test eax, eax
jne 0x406ae2
mov byte [ebp - 0x11], 1
jmp 0x406ae6
mov ecx, dword [ebp - 0x450]
mov byte [ebp - 0x11], 0
test dword [ebp - 0x3b0], 0x80000
je 0x406b2a
mov eax, dword [ebp - 0x43c]
cmp eax, 0xf
jbe 0x406b2a
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x406b20
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406b20
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0047a114
add esp, 8
cmp byte [ebp - 0x11], 0
je 0x406b99
movaps xmm0, xmmword [str.Scdy]
lea ecx, [ebp - 0x498]
movups xmmword [ebp - 0x498], xmm0
push 0x10
movaps xmm0, xmmword [0x48e7f0]
movups xmmword [ebp - 0x488], xmm0
push 0
movaps xmm0, xmmword [0x48e6e0]
movups xmmword [ebp - 0x478], xmm0
mov dword [ebp - 0x458], 0x7a3720
movaps xmm0, xmmword [0x48e730]
movups xmmword [ebp - 0x468], xmm0
mov byte [ebp - 0x454], 1
call fcn.00407c60
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0
push 1
sub esp, 0x28
lea edx, [ebp - 0xbc]
mov eax, esp
lea ecx, [ebp - 0xa4]
mov dword [eax + 0x24], 0
call fcn.00412240
add esp, 0x30
mov byte [ebp - 4], 0x27
xor ecx, ecx
mov dword [ebp - 0x20], 0x6667767f
mov dword [ebp - 0x1c], 0x7d7077
mov byte [ebp - 0x18], 1
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x20], al
inc ecx
cmp ecx, 7
jb 0x406bd5
push ecx
lea eax, [ebp - 0x19]
mov byte [ebp - 0x18], 0
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x44]
call fcn.004120a0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0xa4]
call fcn.0040e430
mov byte [ebp - 4], 0x29
xorps xmm0, xmm0
cmp byte [eax], 3
movups xmmword [ebp - 0xd4], xmm0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
mov dword [ebp - 0x3ac], 1
jne 0x406c52
mov eax, dword [eax + 8]
lea ecx, [ebp - 0xd4]
cmp ecx, eax
je 0x406c6c
jmp 0x406c54
xor eax, eax
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
jbe 0x406c5f
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xd4]
call fcn.00411600
mov dword [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x30]
cmp ecx, 0xf
jbe 0x406ca9
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406c9f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406c9f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
add esp, 8
push 0xb0
lea eax, [ebp - 0x314]
mov dword [ebp - 0x34], 0
push 0
push eax
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
call sub.VCRUNTIME140.dll_memset
add esp, 8
lea ecx, [ebp - 0x314]
call fcn.0040d390
sub esp, 8
mov byte [ebp - 4], 0x2c
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x2c]
movq qword [ebp - 0x2c], xmm0
call fcn.0040eba0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xbc]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x2c]
call fcn.0040ed20
lea ecx, [edi + 0x30]
mov esi, eax
call fcn.0040ed20
push edx
push dword [ebp - 0x2c]
mov edx, dword [edi + 0x40]
mov ecx, eax
push dword [ebp - 0xac]
push esi
call fcn.0041e9e0
mov edi, dword [ebp - 0x2c]
add esp, 0x10
cmp edi, dword [ebp - 0x28]
je 0x406d9b
nop dword [eax]
mov al, byte [edi]
lea ecx, [ebp - 0x304]
push 0x402470
mov byte [ebp - 0x11], al
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base_____cdecl___class_std::ios_base___]
mov esi, eax
lea eax, [ebp - 0x434]
push 0
push 2
push eax
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
mov byte [ecx + esi + 0x40], 0x30
call dword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__]
push dword [eax + 0xc]
mov ecx, dword [eax]
push dword [eax + 8]
mov eax, dword [esi]
mov eax, dword [eax + 4]
add eax, esi
push eax
call ecx
movzx eax, byte [ebp - 0x11]
add esp, 0x18
mov ecx, esi
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
inc edi
cmp edi, dword [ebp - 0x28]
jne 0x406d40
cmp dword [0x49548c], 0xf
lea eax, [ebp - 0x404]
mov esi, 0x495478
lea ecx, [ebp - 0x314]
cmova esi, dword [0x495478]
push eax
call fcn.0040d2a0
cmp dword [eax + 0x14], 0xf
jbe 0x406dd0
mov eax, dword [eax]
nop dword [eax + eax]
movd xmm1, dword [esi]
movd xmm0, dword [eax]
mov ecx, dword [ebp - 0x3f0]
punpcklbw xmm0, xmm0
punpcklbw xmm1, xmm1
punpcklwd xmm0, xmm0
punpcklwd xmm1, xmm1
psrad xmm0, 0x18
psrad xmm1, 0x18
xorps xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
orps xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
orps xmm1, xmm0
movd esi, xmm1
cmp ecx, 0xf
jbe 0x406e4b
mov edx, dword [ebp - 0x404]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406e41
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406e41
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
add esp, 8
test esi, esi
je 0x406ea3
sub esp, 0x18
mov eax, bind
mov edx, esp
mov dword [ebp - 0x3ac], edx
mov ecx, dword [ebp - 0xc4]
sub eax, ecx
cmp eax, 0x6b
jb 0x407829
cmp dword [ebp - 0xc0], 0xf
lea eax, [ebp - 0xd4]
push ecx
cmova eax, dword [ebp - 0xd4]
push eax
push 0x6b
push str.Signature_checksum_failed._Request_was_tampered_with_or_session_ended_most_likely.__echo:__echo_Message:
push ecx
push dword [ebp - 0x3aa]
mov ecx, edx
call fcn.00414530
call fcn.00409d20
add esp, 0x18
sub esp, 0x10
lea eax, [ebp - 0xa4]
mov ecx, esp
push eax
call fcn.0040e790
mov edi, dword [ebp - 0x438]
mov ecx, edi
call fcn.00403b50
mov dword [ebp - 0x20], 0x76776661
xor ecx, ecx
mov dword [ebp - 0x1c], 0x6b6473
mov byte [ebp - 0x18], 1
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x20], al
inc ecx
cmp ecx, 7
jb 0x406ed5
push ecx
lea eax, [ebp - 0x19]
mov byte [ebp - 0x18], 0
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x404]
call fcn.004120a0
lea eax, [ebp - 0x404]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0xa4]
call fcn.0040e430
xor edx, edx
cmp byte [eax], 4
lea ecx, [eax + 8]
cmovne ecx, edx
mov al, byte [ecx]
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x3f0]
mov byte [ebp - 0x11], al
cmp ecx, 0xf
jbe 0x406f64
mov edx, dword [ebp - 0x404]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406f57
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406f57
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
mov al, byte [ebp - 0x11]
add esp, 8
test al, al
je 0x4073eb
mov dword [ebp - 0x3a4], 0x4663767c
xor ecx, ecx
mov dword [ebp - 0x3a0], 0x706b6473
mov dword [ebp - 0x39c], 0x1007575
nop dword [eax]
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x3a4], al
inc ecx
cmp ecx, 0xa
jb 0x406f90
push ecx
lea eax, [ebp - 0x39a]
mov byte [ebp - 0x399], 0
push eax
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp - 0x404]
call fcn.004120a0
lea eax, [ebp - 0x404]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0xa4]
call fcn.0040e430
xor edx, edx
cmp byte [eax], 4
lea ecx, [eax + 8]
cmovne ecx, edx
mov al, byte [ecx]
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x3f0]
mov byte [ebp - 0x11], al
cmp ecx, 0xf
jbe 0x40702b
mov edx, dword [ebp - 0x404]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40701e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40701e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
mov al, byte [ebp - 0x11]
add esp, 8
test al, al
je 0x407037
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x3bc], 0x66677661
xor ecx, ecx
mov dword [ebp - 0x3b8], 0x7076787f
mov word [ebp - 0x3b4], 0x7e
mov byte [ebp - 0x3b2], 1
nop dword [eax]
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x3bc], al
inc ecx
cmp ecx, 9
jb 0x407060
push ecx
lea eax, [ebp - 0x3b3]
mov byte [ebp - 0x3b2], 0
push eax
lea eax, [ebp - 0x3bc]
push eax
lea ecx, [ebp - 0x404]
call fcn.004120a0
lea eax, [ebp - 0x404]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0xa4]
call fcn.0040e430
cmp byte [eax], 3
jne 0x4070b2
mov eax, dword [eax + 8]
jmp 0x4070b4
xor eax, eax
cmp dword [eax + 0x14], 0xf
mov ecx, eax
jbe 0x4070be
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [edi + 0x1b4]
call fcn.00411600
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x3f0]
cmp ecx, 0xf
jbe 0x40710d
mov edx, dword [ebp - 0x404]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407103
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407103
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
add esp, 8
mov byte [0x4960c0], 1
xor ecx, ecx
mov dword [ebp - 0x20], 0x7c646373
mov dword [ebp - 0x1c], 0x777178
mov byte [ebp - 0x18], 1
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x20], al
inc ecx
cmp ecx, 7
jb 0x407128
push ecx
lea eax, [ebp - 0x19]
mov byte [ebp - 0x18], 0
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x404]
call fcn.004120a0
sub esp, 0x10
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x404]
mov esi, esp
lea ecx, [ebp - 0xa4]
push eax
call fcn.0040e430
push eax
mov ecx, esi
call fcn.0040e790
mov ecx, edi
call fcn.00403a10
mov ecx, dword [ebp - 0x3f0]
cmp ecx, 0xf
jbe 0x4071b4
mov edx, dword [ebp - 0x404]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4071aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4071aa
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
add esp, 8
mov edx, dword [ebp - 0x2c]
test edx, edx
je 0x4071e8
mov ecx, dword [ebp - 0x24]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x4071de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4073e5
push ecx
push edx
call fcn.0047a114
add esp, 8
mov eax, dword [ebp - 0x314]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x314]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x318], eax
lea ecx, [ebp - 0x2fc]
call fcn.0040d1f0
lea ecx, [ebp - 0x2f4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x2ac]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov esi, dword [ebp - 0xc0]
cmp esi, 0xf
jbe 0x40726e
mov edx, dword [ebp - 0xd4]
lea ecx, [esi + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x407264
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4073e5
push ecx
push edx
call fcn.0047a114
add esp, 8
lea ecx, [ebp - 0xa4]
call fcn.0040e770
mov ecx, dword [ebp - 0xa8]
cmp ecx, 0xf
jbe 0x4072b3
mov edx, dword [ebp - 0xbc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4072a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4073e5
push ecx
push edx
call fcn.0047a114
add esp, 8
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
cmp ecx, 0xf
jbe 0x407308
mov edx, dword [ebp - 0x11c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4072fe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4073e5
push ecx
push edx
call fcn.0047a114
add esp, 8
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
cmp ecx, 0xf
jbe 0x40735d
mov edx, dword [ebp - 0x104]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407353
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4073e5
push ecx
push edx
call fcn.0047a114
add esp, 8
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
cmp eax, 0xf
jbe 0x4073ad
mov edx, dword [ebp - 0x94]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x4073a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4073e5
push ecx
push edx
call fcn.0047a114
add esp, 8
mov ecx, dword [ebp - 0xd8]
cmp ecx, 0xf
jbe 0x40774f
mov edx, dword [ebp - 0xec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407745
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407745
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
xorps xmm0, xmm0
mov dword [ebp - 0x3a4], 0x74627d7b
push 0x18
mov dword [ebp - 0x3a0], 0x6f7c7e7a
mov dword [ebp - 0x39c], 0x100697f
movq qword [ebp - 0x42c], xmm0
mov byte [ebp - 0x434], 3
movlpd qword [ebp - 0x20], xmm0
call fcn.00479e93
mov esi, eax
add esp, 4
lea eax, [ebp - 0x11]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x32
cmp byte [ebp - 0x399], 0
je 0x40745c
xor ecx, ecx
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x3a4], al
inc ecx
cmp ecx, 0xa
jb 0x407444
mov byte [ebp - 0x399], 0
push ecx
lea eax, [ebp - 0x39a]
mov ecx, esi
push eax
lea eax, [ebp - 0x3a4]
push eax
call fcn.004120a0
mov dword [ebp - 0x42c], esi
mov byte [ebp - 4], 0x33
xor ecx, ecx
mov dword [ebp - 0x3c8], 0x6667767f
mov dword [ebp - 0x3c4], 0x7d7077
mov byte [ebp - 0x3c0], 1
nop dword [eax]
mov al, cl
add al, 0x12
xor byte [ebp + ecx - 0x3c8], al
inc ecx
cmp ecx, 7
jb 0x4074a0
push ecx
lea eax, [ebp - 0x3c1]
mov byte [ebp - 0x3c0], 0
push eax
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x44]
call fcn.004120a0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0xa4]
call fcn.0040e430
lea edx, [ebp - 0x434]
mov ecx, eax
call fcn.0040e140
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 0x11], al
cmp ecx, 0xf
jbe 0x40752c
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407522
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407522
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047a114
add esp, 8
lea ecx, [ebp - 0x434]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov byte [ebp - 4], 0x2d
call fcn.0040e770
cmp byte [ebp - 0x11], 0
je 0x4071b4
lea eax, [ebp - 0x404]
mov dword [ebp - 0x3d4], 0x7b637c76
push eax
lea ecx, [ebp - 0x3d4]
mov dword [ebp - 0x3d0], 0x7d79787a
mov word [ebp - 0x3cc], 0x100
call fcn.0040e100
lea eax, [ebp - 0x404]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0xa4]
call fcn.0040e430
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, eax
call fcn.00411d40
lea ecx, [ebp - 0x404]
call fcn.0040ee90
mov edx, 0x48c78a
lea ecx, [ebp - 0x7c]
call fcn.00411b40
test al, al
je 0x407705
movaps xmm0, xmmword [0x48e760]
lea ecx, [ebp - 0x264]
movups xmmword [ebp - 0x264], xmm0
push 0x10
movaps xmm0, xmmword [0x48e7e0]
movups xmmword [ebp - 0x254], xmm0
push 0
movaps xmm0, xmmword [0x48e800]
movups xmmword [ebp - 0x244], xmm0
mov dword [ebp - 0x134], 0x3c283721
movaps xmm0, xmmword [0x48e700]
movups xmmword [ebp - 0x234], xmm0
mov word [ebp - 0x130], 0x68
movaps xmm0, xmmword [str.:6t19_655:826]
movups xmmword [ebp - 0x224], xmm0
mov byte [ebp - 0x12e], 1
movaps xmm0, xmmword [str.B_f_nE]
movups xmmword [ebp - 0x214], xmm0
movaps xmm0, xmmword [0x48e880]
movups xmmword [ebp - 0x204], xmm0
movaps xmm0, xmmword [0x48e8d0]
movups xmmword [ebp - 0x1f4], xmm0
movaps xmm0, xmmword [0x48e8b0]
movups xmmword [ebp - 0x1e4], xmm0
movaps xmm0, xmmword [0x48e8c0]
movups xmmword [ebp - 0x1d4], xmm0
movaps xmm0, xmmword [0x48e890]
movups xmmword [ebp - 0x1c4], xmm0
movaps xmm0, xmmword [0x48e8a0]
movups xmmword [ebp - 0x1b4], xmm0
movaps xmm0, xmmword [0x48e870]
movups xmmword [ebp - 0x1a4], xmm0
movaps xmm0, xmmword [0x48e860]
movups xmmword [ebp - 0x194], xmm0
movaps xmm0, xmmword [0x48e830]
movups xmmword [ebp - 0x184], xmm0
movaps xmm0, xmmword [0x48e820]
movups xmmword [ebp - 0x174], xmm0
movaps xmm0, xmmword [0x48e770]
movups xmmword [ebp - 0x164], xmm0
movaps xmm0, xmmword [0x48e790]
movups xmmword [ebp - 0x154], xmm0
movaps xmm0, xmmword [0x48e6f0]
movups xmmword [ebp - 0x144], xmm0
call fcn.00407c90
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x40773d
lea ecx, [ebp - 0x7c]
call fcn.0040ed20
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 0x3ac], 0x7b71637d
mov esi, eax
mov word [ebp - 0x3a8], 0x100
call fcn.00407cc0
push 1
push 0
push 0
push esi
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push ecx
push edx
call fcn.0047a114
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00479dd0
mov esp, ebp
pop ebp
ret
movaps xmm0, xmmword [0x48e680]
lea ecx, [ebp - 0x498]
movups xmmword [ebp - 0x498], xmm0
push 0x10
movaps xmm0, xmmword [str.qFPPV_akFXYINZCI]
movups xmmword [ebp - 0x488], xmm0
push 0
movaps xmm0, xmmword [0x48e710]
movups xmmword [ebp - 0x478], xmm0
mov dword [ebp - 0x458], 0x367a3d3b
movaps xmm0, xmmword [0x48e720]
movups xmmword [ebp - 0x468], xmm0
mov dword [ebp - 0x454], 0x1002726
call fcn.00407830
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.00401c60
movaps xmm0, xmmword [str.bdpx_19zuq]
lea eax, [ebp - 0x56c]
push eax
lea ecx, [ebp - 0x554]
mov byte [ebp - 0x544], 1
movups xmmword [ebp - 0x554], xmm0
call fcn.0040d450
lea eax, [ebp - 0x56c]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x430]
call fcn.00401c70
push 0x491b0c
lea eax, [ebp - 0x430]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
call fcn.00401c60
int3