Function at 0x43ad30
Capabilities:
Delete file
Encode data using xor
Execute command

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x49ccd8
push eax
mov dword fs:[0], esp
mov eax, 0x1698
push ebx
call fcn.0049bc30
mov dword [ebp - 0xa4], 0
mov eax, dword [0x628218]
push esi
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x70], 0x6297e0
push edi
cmp eax, 0xffffffff
jne 0x43ad97
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43ada1
inc eax
lea ecx, [ebp - 0x70]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x5d], 0
xor edx, edx
mov byte [0x62bfb1], 0
mov edi, 0x7e
div edi
mov dword [ebp - 0x70], edi
mov dh, dl
inc dh
mov cl, dh
mov ch, dh
xor cl, 0x6f
xor ch, 0x6e
mov al, dh
mov ah, dh
mov dl, dh
xor cl, dh
xor ch, dh
mov byte [0x62bfad], cl
xor al, 0x4c
mov byte [0x62bfb0], ch
xor ah, 0x67
xor dl, 0x69
xor al, dh
xor ah, dh
xor dl, dh
mov byte [0x62bfac], al
mov ecx, 0x62bfac
mov byte [0x62bfae], ah
mov byte [0x62bfaf], dl
call fcn.00484560
cmp byte [0x628f31], 0
jne 0x43ae1c
call fcn.0043a8a0
mov byte [0x628f31], 1
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x18], 0x6297e0
cmp eax, 0xffffffff
jne 0x43ae41
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43ae4b
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
mov byte [0x62bf39], 0
div edi
push 0x62bf30
mov dh, dl
inc dh
mov cl, dh
mov byte [ebp - 0x19], dh
xor cl, 0x73
mov al, dh
xor al, 0x55
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0x19]
mov ah, dh
xor al, cl
mov byte [ebp - 0x11], cl
xor byte [ebp - 0x11], 0x6d
mov dl, dh
mov byte [ebp - 0x12], cl
mov ch, dh
xor byte [ebp - 0x12], 0x65
xor ah, 0x65
mov byte [ebp - 0x13], cl
xor dl, 0x72
mov cl, byte [ebp - 0x14]
xor ch, 0x6e
xor cl, byte [ebp - 0x19]
xor dh, 0x61
xor byte [ebp - 0x13], 0x3a
mov byte [0x62bf30], al
mov al, byte [ebp - 0x11]
mov byte [0x62bf31], cl
mov cl, byte [ebp - 0x19]
xor al, cl
xor ah, cl
mov byte [0x62bf36], al
xor dl, cl
mov al, byte [ebp - 0x12]
xor ch, cl
xor al, cl
mov byte [0x62bf32], ah
mov byte [0x62bf37], al
xor dh, cl
mov al, byte [ebp - 0x13]
xor al, cl
mov byte [0x62bf33], dl
mov byte [0x62bf34], ch
mov byte [0x62bf35], dh
mov byte [0x62bf38], al
call fcn.00481a70
add esp, 4
mov dword [ebp - 0x64], 0
lea eax, [ebp - 0x64]
mov dword [ebp - 0x60], 0
xor edx, edx
mov ecx, str.username
push 0
push 0
push 0
push eax
push 0xc
push 0x627bac
call fcn.00488ee0
mov eax, dword [0x628218]
add esp, 0x18
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x18], 0x6297e0
cmp eax, 0xffffffff
jne 0x43af4d
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43af57
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
mov byte [0x62bfc4], 0
div edi
push 0x62bfbc
mov dh, dl
inc dh
mov cl, dh
mov byte [ebp - 0x13], dh
xor cl, 0x69
mov al, dh
xor al, 0x4c
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0x13]
mov ah, dh
xor al, cl
mov byte [ebp - 0x12], cl
xor byte [ebp - 0x12], 0x65
mov dl, dh
mov byte [ebp - 0x11], cl
mov ch, dh
mov cl, byte [ebp - 0x14]
xor ah, 0x63
xor cl, byte [ebp - 0x13]
xor dl, 0x65
xor byte [ebp - 0x11], 0x3a
xor ch, 0x6e
mov byte [0x62bfbc], al
xor dh, 0x73
mov al, byte [ebp - 0x12]
mov byte [0x62bfbd], cl
mov cl, byte [ebp - 0x13]
xor al, cl
xor ah, cl
mov byte [0x62bfc2], al
xor dl, cl
mov al, byte [ebp - 0x11]
xor ch, cl
xor dh, cl
mov byte [0x62bfbe], ah
xor al, cl
mov byte [0x62bfbf], dl
mov byte [0x62bfc0], ch
mov byte [0x62bfc1], dh
mov byte [0x62bfc3], al
call fcn.00481a70
add esp, 4
mov dword [ebp - 0x64], 0
lea eax, [ebp - 0x64]
mov dword [ebp - 0x60], 0
xor edx, edx
mov ecx, 0x4a4718
push 0
push 0
push 0
push eax
push 0x19
push 0x627bb8
call fcn.00488ee0
mov al, byte [0x627bd1]
add esp, 0x18
mov esi, dword [0x628214]
mov byte [ebp - 0x14], al
mov eax, dword [0x628218]
sub eax, esi
mov dword [ebp - 0x18], 0x6297e0
cmp eax, 0xffffffff
jne 0x43b050
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43b05a
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
div edi
inc dl
mov al, dl
mov byte [ebp - 0x34], dl
xor al, 0x52
mov cl, dl
mov byte [ebp - 0x33], al
xor cl, 0x65
mov al, dl
mov byte [ebp - 0x30], cl
xor al, 0x65
mov byte [ebp - 0x2d], cl
mov byte [ebp - 0x32], al
mov al, dl
xor al, 0x6d
mov byte [ebp - 0x23], cl
mov byte [ebp - 0x31], al
mov al, dl
xor al, 0x6d
mov byte [ebp - 0x2f], al
mov al, dl
xor al, 0x62
mov byte [ebp - 0x2e], al
mov al, dl
xor al, 0x72
mov byte [ebp - 0x2c], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x2b], al
mov al, dl
xor al, 0x6c
mov byte [ebp - 0x2a], al
mov al, dl
xor al, 0x6f
mov byte [ebp - 0x29], al
mov al, dl
xor al, 0x67
mov byte [ebp - 0x28], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x27], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x26], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x25], al
mov al, dl
xor al, 0x64
mov byte [ebp - 0x24], al
mov al, dl
xor al, 0x74
mov byte [ebp - 0x22], al
mov al, dl
xor al, 0x61
mov byte [ebp - 0x21], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x20], al
mov al, dl
xor al, 0x6c
mov byte [ebp - 0x1f], al
mov al, dl
xor al, 0x73
xor ecx, ecx
mov byte [ebp - 0x1e], al
nop
mov al, byte [ebp + ecx - 0x33]
xor al, dl
mov byte [ecx + 0x62bf94], al
inc ecx
cmp ecx, 0x16
jb 0x43b100
mov edx, 0x627bd1
mov byte [0x62bfaa], 0
mov ecx, 0x62bf94
call fcn.00483500
test al, al
je 0x43b2e2
mov al, byte [0x627bd1]
cmp al, byte [ebp - 0x14]
je 0x43b2e2
mov dword [ebp - 0x90], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xa0], xmm0
test al, al
je 0x43b265
mov ecx, 0x627bb8
mov dword [ebp - 0x8c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43b170
sub ecx, edx
push ecx
push 0x627bb8
lea ecx, [ebp - 0xa0]
call fcn.00435b30
mov ecx, 0x627bac
mov dword [ebp - 4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x44], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43b1b0
sub ecx, edx
push ecx
push 0x627bac
lea ecx, [ebp - 0x58]
call fcn.00435b30
push 1
lea edx, [ebp - 0xa0]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.0043a780
mov byte [ebp - 4], 0
add esp, 4
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x43b212
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43b208
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b25f
push ecx
push edx
call fcn.0049ac51
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp ecx, 0xf
jbe 0x43b2e2
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43b2d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43b2d8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
mov dword [ebp - 4], 2
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
push 0x4a46d4
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov byte [ebp - 4], 2
add esp, 4
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x43b212
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43b208
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b25f
jmp 0x43b208
push ecx
push edx
call fcn.0049ac51
add esp, 8
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0x6297e0
cmp eax, 0xffffffff
jne 0x43b315
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43b31f
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x5d], 0
xor edx, edx
mov byte [0x62bfb9], 0
div edi
mov dh, dl
inc dh
mov cl, dh
mov ch, dh
mov dl, dh
xor cl, 0x6f
xor ch, 0x6e
mov al, dh
mov ah, dh
xor dl, 0x69
xor cl, dh
xor ch, dh
xor dl, dh
mov byte [0x62bfb5], cl
xor al, 0x4c
mov byte [0x62bfb7], dl
xor ah, 0x67
mov byte [0x62bfb8], ch
xor al, dh
xor ah, dh
push ecx
lea edx, [ebp - 0x24]
mov byte [0x62bfb4], al
mov ecx, 0x62bfb4
mov byte [0x62bfb6], ah
call fcn.00482400
add esp, 4
test al, al
je 0x43bbdd
xorps xmm0, xmm0
mov dword [ebp - 4], 5
push 0x40
movups xmmword [ebp - 0x58], xmm0
call fcn.0049a9cb
movups xmm0, xmmword [str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
mov edi, eax
mov dword [ebp - 0x48], 0x3e
add esp, 4
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x44], 0x3f
movups xmmword [edi], xmm0
movups xmm0, xmmword [0x4a4440]
movups xmmword [edi + 0x10], xmm0
movups xmm0, xmmword [0x4a4450]
movups xmmword [edi + 0x20], xmm0
movq xmm0, qword [0x4a4460]
movq qword [edi + 0x30], xmm0
mov eax, dword [0x4a4468]
mov dword [edi + 0x38], eax
mov ax, word [0x4a446c]
mov word [edi + 0x3c], ax
mov byte [edi + 0x3e], 0
mov byte [ebp - 4], 6
call dword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
push eax
lea ecx, [ebp - 0x16a8]
call fcn.00432ca0
xorps xmm0, xmm0
mov dword [ebp - 0x90], 0
mov eax, ecx
mov dword [ebp - 0x8c], 0xf
movups xmmword [ebp - 0xa0], xmm0
mov byte [ebp - 0xa0], 0
mov esi, 0xa0
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x18], eax
nop dword [eax]
push 0x3e
lea ecx, [ebp - 0x18]
call fcn.00436af0
mov ecx, dword [ebp - 0x90]
mov dl, byte [eax + edi]
mov byte [ebp - 0x60], dl
cmp ecx, dword [ebp - 0x8c]
jae 0x43b495
cmp dword [ebp - 0x8c], 0xf
lea eax, [ecx + 1]
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0xa0]
cmova eax, dword [ebp - 0xa0]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x43b4a7
push dword [ebp - 0x60]
push dword [ebp - 0x60]
push ecx
lea ecx, [ebp - 0xa0]
call fcn.00435c00
add esi, 0xffffffff
jne 0x43b450
push 0x40
push edi
mov byte [ebp - 4], 5
call fcn.0049ac51
add esp, 8
lea edi, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 0xf
cmova edi, dword [ebp - 0xa0]
call fcn.00438790
test al, al
je 0x43b8d3
call fcn.00438a50
call dword [sym.imp.libcrypto_3.dll_EVP_CIPHER_CTX_new]
push 0
push edi
push 0
mov esi, eax
call dword [sym.imp.libcrypto_3.dll_EVP_aes_256_cbc]
push eax
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_EncryptInit_ex]
add esp, 0x14
lea eax, [ebp - 0x320]
push 0x100
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1a8]
push eax
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_EncryptUpdate]
add esp, 0x14
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x1a8]
push eax
mov eax, dword [ebp - 0x18]
add eax, ecx
push eax
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_EncryptFinal_ex]
add esp, 0xc
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_CIPHER_CTX_free]
mov eax, dword [0x628218]
add esp, 4
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x60], 0x6297e0
cmp eax, 0xffffffff
jne 0x43b569
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43b573
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.00436af0
mov edi, dword [ebp - 0x70]
add eax, esi
xor edx, edx
mov byte [ebp - 0x15], 0
div edi
mov byte [0x62bf91], 0
mov ecx, 0x62bf90
inc dl
mov al, dl
xor al, 0x65
xor al, dl
mov byte [0x62bf90], al
lea eax, [ebp - 0x1a8]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x43b5c0
test dl, dl
je 0x43b5bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x43b5c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x43b5a0
xor eax, eax
jmp 0x43b5c5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43b658
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x60], 0x6297e0
cmp eax, 0xffffffff
jne 0x43b5f2
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43b5fc
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x15], 0
xor edx, edx
mov byte [0x62c041], 0
div edi
mov ecx, 0x62c040
inc dl
mov al, dl
xor al, 0x74
xor al, dl
mov byte [0x62c040], al
lea eax, [ebp - 0x1a8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x43b645
test dl, dl
je 0x43b641
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x43b645
add eax, 2
add ecx, 2
test dl, dl
jne 0x43b625
xor eax, eax
jmp 0x43b64a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43b658
call fcn.00438a50
jmp 0x43bb9c
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x60], 0x6297e0
cmp eax, 0xffffffff
jne 0x43b67d
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43b687
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.00436af0
add eax, esi
mov dword [ebp - 0x18], 0xf
xor edx, edx
xorps xmm0, xmm0
div edi
movups xmmword [ebp - 0x58], xmm0
inc dl
movsx si, dl
mov eax, esi
movzx edx, si
xor eax, 0x4c
mov word [ebp - 0x36], si
mov word [ebp - 0x34], ax
mov eax, esi
xor eax, 0x6f
mov word [ebp - 0x32], ax
mov eax, esi
xor eax, 0x67
mov word [ebp - 0x30], ax
mov eax, esi
xor eax, 0x69
mov word [ebp - 0x2e], ax
mov eax, esi
xor eax, 0x6e
mov word [ebp - 0x2c], ax
mov eax, esi
xor eax, 0x20
mov word [ebp - 0x2a], ax
mov eax, esi
xor eax, 0x45
mov word [ebp - 0x28], ax
mov eax, edx
xor eax, 0x72
xor edx, 0x6f
movzx ecx, ax
mov eax, esi
xor eax, 0x72
mov word [ebp - 0x22], dx
mov word [ebp - 0x26], ax
lea edx, [ebp - 0x18]
xor eax, eax
mov word [ebp - 0x24], cx
mov word [ebp - 0x20], cx
mov word [ebp - 0x1e], ax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
call fcn.00436a90
mov ecx, dword [ebp - 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x58], eax
xor edx, edx
mov dword [ebp - 0x48], 0xb
mov dword [ebp - 0x44], ecx
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [ebp - 0xa4], 9
nop dword [eax + eax]
mov ax, word [ebp + edx - 0x34]
xor ax, si
cmp dword [ebp - 0x44], 7
movzx ecx, ax
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x16
jb 0x43b750
mov byte [ebp - 4], 7
lea edi, [ebp - 0x58]
push dword [ebp - 0x60]
cmp dword [ebp - 0x44], 7
push ecx
cmova edi, dword [ebp - 0x58]
lea ecx, [ebp - 0x21a]
call fcn.0043c880
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0x37
lea edx, [ebp - 0x18]
mov esi, eax
movups xmmword [ebp - 0x88], xmm0
call fcn.00436a90
mov ecx, dword [ebp - 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x88], eax
xor edx, edx
mov dword [ebp - 0x78], 0x37
mov dword [ebp - 0x74], ecx
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x40], xmm0
movups xmmword [eax + 0x50], xmm0
movq qword [eax + 0x60], xmm0
mov dword [eax + 0x68], 0
mov dword [eax + 0x6c], 0
nop dword [eax]
mov ax, word [esi + edx + 2]
xor ax, word [esi]
cmp dword [ebp - 0x74], 7
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x6e
jb 0x43b7f0
cmp dword [ebp - 0x74], 7
lea eax, [ebp - 0x88]
push 0x1010
cmova eax, dword [ebp - 0x88]
push edi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x43b875
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x43b86b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b25f
push ecx
push edx
call fcn.0049ac51
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
cmp ecx, 7
jbe 0x43bb99
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x43b8c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b25f
push ecx
push edx
call fcn.0049ac51
add esp, 8
jmp 0x43bb99
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x60], 0x6297e0
cmp eax, 0xffffffff
jne 0x43b8f8
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43b902
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.00436af0
add eax, esi
mov dword [ebp - 0x78], 5
xor edx, edx
mov dword [ebp - 0xa4], 5
div dword [ebp - 0x70]
xorps xmm0, xmm0
mov esi, 7
add dl, 1
mov dword [ebp - 0x74], esi
movsx dx, dl
movups xmmword [ebp - 0x88], xmm0
mov eax, edx
mov word [ebp - 0x2a], dx
xor eax, 0x45
movq qword [ebp - 0x88], xmm0
mov word [ebp - 0x28], ax
mov eax, edx
xor eax, 0x72
movzx ecx, ax
mov eax, edx
xor eax, 0x72
mov word [ebp - 0x24], cx
mov word [ebp - 0x26], ax
xor edx, 0x6f
xor eax, eax
mov word [ebp - 0x20], cx
mov dword [ebp - 0x80], eax
mov word [ebp - 0x1e], ax
mov eax, dword [ebp - 0x28]
mov word [ebp - 0x22], dx
mov edx, dword [ebp - 0x2a]
xor eax, edx
movzx ecx, ax
lea eax, [ebp - 0x88]
mov word [eax], cx
mov eax, dword [ebp - 0x26]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x24]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 4], cx
mov eax, dword [ebp - 0x22]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 6], cx
mov eax, dword [ebp - 0x20]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 8], cx
mov byte [ebp - 4], 8
lea edi, [ebp - 0x88]
cmp dword [ebp - 0x74], esi
mov eax, dword [0x628218]
cmova edi, dword [ebp - 0x88]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x60], 0x6297e0
cmp eax, 0xffffffff
jne 0x43ba2e
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43ba38
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.00436af0
add eax, esi
mov dword [ebp - 0x18], 0xf
xor edx, edx
div dword [ebp - 0x70]
movups xmmword [ebp - 0x58], xmm0
inc dl
movsx si, dl
mov eax, esi
movzx edx, si
xor eax, 0x4e
mov word [ebp - 0x3c], si
mov word [ebp - 0x3a], ax
mov eax, esi
xor eax, 0x65
mov word [ebp - 0x38], ax
mov eax, esi
xor eax, 0x74
mov word [ebp - 0x36], ax
mov eax, esi
xor eax, 0x77
mov word [ebp - 0x34], ax
mov eax, esi
xor eax, 0x6f
mov word [ebp - 0x32], ax
mov eax, edx
xor eax, 0x72
xor edx, 0x6f
movzx ecx, ax
mov eax, esi
xor eax, 0x72
mov word [ebp - 0x24], dx
mov word [ebp - 0x30], ax
lea edx, [ebp - 0x18]
mov eax, esi
mov word [ebp - 0x28], cx
xor eax, 0x6b
mov word [ebp - 0x26], cx
mov word [ebp - 0x2e], ax
mov eax, esi
xor eax, 0x20
mov word [ebp - 0x22], cx
mov word [ebp - 0x2c], ax
mov eax, esi
xor eax, 0x45
mov word [ebp - 0x2a], ax
mov eax, esi
xor eax, 0x2e
mov word [ebp - 0x20], ax
xor eax, eax
mov word [ebp - 0x1e], ax
call fcn.00436a90
mov ecx, dword [ebp - 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x44], ecx
xor ecx, ecx
mov dword [ebp - 0x58], eax
xor edx, edx
mov dword [ebp - 0x48], 0xe
movups xmmword [eax], xmm0
movq qword [eax + 0x10], xmm0
mov dword [eax + 0x18], 0
mov word [eax + 0x1c], cx
mov ax, word [ebp + edx - 0x3a]
xor ax, si
cmp dword [ebp - 0x44], 7
movzx ecx, ax
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x1c
jb 0x43bb04
cmp dword [ebp - 0x44], 7
lea eax, [ebp - 0x58]
push 0x1010
cmova eax, dword [ebp - 0x58]
push edi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x44]
cmp ecx, 7
jbe 0x43bb7a
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x43bb70
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b25f
push ecx
push edx
call fcn.0049ac51
add esp, 8
xor eax, eax
mov dword [ebp - 0x48], 0
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.004334f0
mov edi, dword [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x8c]
cmp ecx, 0xf
jbe 0x43bbdd
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43bbd3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b25f
push ecx
push edx
call fcn.0049ac51
add esp, 8
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x60], 0x6297e0
cmp eax, 0xffffffff
jne 0x43bc02
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43bc0c
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
div edi
inc dl
mov al, dl
mov byte [ebp - 0x29], dl
xor al, 0x42
mov byte [ebp - 0x28], al
mov al, dl
xor al, 0x75
mov byte [ebp - 0x27], al
mov al, dl
xor al, 0x79
mov byte [ebp - 0x26], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x25], al
mov al, dl
xor al, 0x4c
mov byte [ebp - 0x24], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x23], al
mov al, dl
xor al, 0x63
mov byte [ebp - 0x22], al
mov al, dl
xor al, 0x65
mov byte [ebp - 0x21], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x20], al
mov al, dl
xor al, 0x73
mov byte [ebp - 0x1f], al
mov al, dl
xor al, 0x65
xor ecx, ecx
mov byte [ebp - 0x1e], al
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
xor al, dl
mov byte [ecx + 0x62bf44], al
inc ecx
cmp ecx, 0xb
jb 0x43bc70
mov ecx, 0x62bf44
mov byte [0x62bf4f], 0
call fcn.00484560
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x60], 0x6297e0
cmp eax, 0xffffffff
jne 0x43bcc6
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43bcd0
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x5d], 0
xor edx, edx
div edi
inc dl
mov al, dl
mov byte [ebp - 0x6c], dl
xor al, 0x48
mov cl, dl
mov byte [ebp - 0x6b], al
xor cl, 0x64
mov al, dl
mov byte [ebp - 0x68], cl
xor al, 0x69
mov byte [ebp - 0x5e], cl
mov byte [ebp - 0x6a], al
mov al, dl
xor al, 0x64
mov byte [ebp - 0x69], al
mov al, dl
xor al, 0x65
mov byte [ebp - 0x67], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x66], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x65], al
mov al, dl
xor al, 0x44
mov byte [ebp - 0x64], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x63], al
mov al, dl
xor al, 0x73
mov byte [ebp - 0x62], al
mov al, dl
xor al, 0x63
mov byte [ebp - 0x61], al
mov al, dl
xor al, 0x6f
mov byte [ebp - 0x60], al
mov al, dl
xor al, 0x72
xor ecx, ecx
mov byte [ebp - 0x5f], al
mov al, byte [ebp + ecx - 0x6b]
xor al, dl
mov byte [ecx + 0x62bf68], al
inc ecx
cmp ecx, 0xe
jb 0x43bd40
push ecx
lea edx, [ebp - 0x24]
mov byte [0x62bf76], 0
mov ecx, 0x62bf68
call fcn.00482400
add esp, 4
test al, al
je 0x43bd7c
push str.start_https:__discord.gg_wUKSDhfQtX
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x60], 0x6297e0
cmp eax, 0xffffffff
jne 0x43bdb1
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x43bdbb
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x40], 0
xor edx, edx
div edi
mov dh, dl
inc dh
mov al, dh
mov byte [ebp - 0x5c], dh
xor al, 0x4c
mov cl, dh
mov byte [ebp - 0x5b], al
xor cl, 0x72
mov al, dh
mov byte [ebp - 0x45], cl
xor al, 0x69
mov byte [ebp - 0x42], cl
mov byte [ebp - 0x5a], al
mov ah, dh
mov al, dh
xor ah, 0x20
xor al, 0x6e
mov byte [ebp - 0x54], ah
mov byte [ebp - 0x59], al
mov dl, dh
mov al, dh
mov byte [ebp - 0x50], ah
xor al, 0x6b
mov byte [ebp - 0x48], ah
mov byte [ebp - 0x58], al
xor dl, 0x65
mov al, dh
mov byte [ebp - 0x46], dl
xor al, 0x20
mov byte [ebp - 0x43], dl
mov byte [ebp - 0x57], al
mov al, dh
xor al, 0x74
mov byte [ebp - 0x56], al
mov al, dh
xor al, 0x6f
mov byte [ebp - 0x55], al
mov al, dh
xor al, 0x74
mov byte [ebp - 0x53], al
mov al, dh
xor al, 0x68
mov byte [ebp - 0x52], al
mov al, dh
xor al, 0x65
mov byte [ebp - 0x51], al
mov al, dh
xor al, 0x44
mov byte [ebp - 0x4f], al
mov al, dh
xor al, 0x69
mov byte [ebp - 0x4e], al
mov al, dh
xor al, 0x73
mov byte [ebp - 0x4d], al
mov al, dh
xor al, 0x63
mov byte [ebp - 0x4c], al
mov al, dh
xor al, 0x6f
mov byte [ebp - 0x4b], al
mov al, dh
xor al, 0x72
mov byte [ebp - 0x4a], al
mov al, dh
xor al, 0x64
mov byte [ebp - 0x49], al
mov al, dh
xor al, 0x73
mov byte [ebp - 0x47], al
mov al, dh
xor al, 0x76
mov byte [ebp - 0x44], al
mov al, dh
xor al, 0x2e
xor ecx, ecx
mov byte [ebp - 0x41], al
nop
mov al, byte [ebp + ecx - 0x5b]
xor al, dh
mov byte [ecx + 0x62bf14], al
inc ecx
cmp ecx, 0x1b
jb 0x43be80
push 0x4a46b8
mov byte [0x62bf2f], 0
call fcn.00481b90
add esp, 4
mov ecx, 0x1000
call fcn.00458ce0
test al, al
je 0x43bf27
xor ecx, ecx
call fcn.00464e20
test al, al
je 0x43bf27
mov eax, dword [0x629148]
movss xmm0, dword [eax + 0x3bb8]
mulss xmm0, dword [0x4c6174]
call fcn.004618c0
push 1
xor edx, edx
mov ecx, 0x62bf14
call fcn.004813b0
mov ecx, dword [0x629148]
add esp, 4
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e48]
mov ecx, dword [edx + 0x1b4]
mov eax, dword [edx + 0x1bc]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a4], eax
lea eax, [ecx - 1]
mov dword [edx + 0x1b4], eax
call fcn.00460f70
mov ecx, 0x49ff0e
call fcn.00484560
mov esi, dword [0x629148]
mov edx, dword [esi + 0x3e48]
cmp byte [edx + 0xaf], 0
jne 0x43bf67
mov esi, dword [esi + 0x4a50]
test esi, esi
je 0x43bf67
movsx eax, word [esi + 0x6c]
imul ecx, eax, 0x2c
mov eax, dword [esi + 8]
test byte [ecx + eax + 4], 8
jne 0x43bf67
dec dword [edx + 0xe4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret