Function at 0x4fef00
Capabilities:
Delete file
Encode data using xor
Execute command

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x560c48
push eax
mov dword fs:[0], esp
mov eax, 0x1698
push ebx
call fcn.0055fbe0
mov dword [ebp - 0xa4], 0
mov eax, dword [0x6ba4fc]
push esi
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x70], 0x6bc8f8
push edi
cmp eax, 0xffffffff
jne 0x4fef67
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4fef71
inc eax
lea ecx, [ebp - 0x70]
push eax
call fcn.004fac70
add eax, esi
mov byte [ebp - 0x5d], 0
xor edx, edx
mov byte [0x6bf1bd], 0
mov edi, 0x7e
div edi
mov dword [ebp - 0x70], edi
mov dh, dl
inc dh
mov cl, dh
mov ch, dh
xor cl, 0x6f
xor ch, 0x6e
mov al, dh
mov ah, dh
mov dl, dh
xor cl, dh
xor ch, dh
mov byte [0x6bf1b9], cl
xor al, 0x4c
mov byte [0x6bf1bc], ch
xor ah, 0x67
xor dl, 0x69
xor al, dh
xor ah, dh
xor dl, dh
mov byte [0x6bf1b8], al
mov ecx, 0x6bf1b8
mov byte [0x6bf1ba], ah
mov byte [0x6bf1bb], dl
call fcn.00548880
cmp byte [0x6bb319], 0
jne 0x4fefec
call fcn.004fea70
mov byte [0x6bb319], 1
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x18], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ff011
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ff01b
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.004fac70
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
mov byte [0x6bf1ed], 0
div edi
push 0x6bf1e4
mov dh, dl
inc dh
mov cl, dh
mov byte [ebp - 0x19], dh
xor cl, 0x73
mov al, dh
xor al, 0x55
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0x19]
mov ah, dh
xor al, cl
mov byte [ebp - 0x11], cl
xor byte [ebp - 0x11], 0x6d
mov dl, dh
mov byte [ebp - 0x12], cl
mov ch, dh
xor byte [ebp - 0x12], 0x65
xor ah, 0x65
mov byte [ebp - 0x13], cl
xor dl, 0x72
mov cl, byte [ebp - 0x14]
xor ch, 0x6e
xor cl, byte [ebp - 0x19]
xor dh, 0x61
xor byte [ebp - 0x13], 0x3a
mov byte [0x6bf1e4], al
mov al, byte [ebp - 0x11]
mov byte [0x6bf1e5], cl
mov cl, byte [ebp - 0x19]
xor al, cl
xor ah, cl
mov byte [0x6bf1ea], al
xor dl, cl
mov al, byte [ebp - 0x12]
xor ch, cl
xor al, cl
mov byte [0x6bf1e6], ah
mov byte [0x6bf1eb], al
xor dh, cl
mov al, byte [ebp - 0x13]
xor al, cl
mov byte [0x6bf1e7], dl
mov byte [0x6bf1e8], ch
mov byte [0x6bf1e9], dh
mov byte [0x6bf1ec], al
call fcn.00545d90
add esp, 4
mov dword [ebp - 0x64], 0
lea eax, [ebp - 0x64]
mov dword [ebp - 0x60], 0
xor edx, edx
mov ecx, str.username
push 0
push 0
push 0
push eax
push 0xc
push 0x6ba0c0
call fcn.0054d1f0
mov eax, dword [0x6ba4fc]
add esp, 0x18
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x18], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ff11d
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ff127
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.004fac70
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
mov byte [0x6bf178], 0
div edi
push 0x6bf170
mov dh, dl
inc dh
mov cl, dh
mov byte [ebp - 0x13], dh
xor cl, 0x69
mov al, dh
xor al, 0x4c
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0x13]
mov ah, dh
xor al, cl
mov byte [ebp - 0x12], cl
xor byte [ebp - 0x12], 0x65
mov dl, dh
mov byte [ebp - 0x11], cl
mov ch, dh
mov cl, byte [ebp - 0x14]
xor ah, 0x63
xor cl, byte [ebp - 0x13]
xor dl, 0x65
xor byte [ebp - 0x11], 0x3a
xor ch, 0x6e
mov byte [0x6bf170], al
xor dh, 0x73
mov al, byte [ebp - 0x12]
mov byte [0x6bf171], cl
mov cl, byte [ebp - 0x13]
xor al, cl
xor ah, cl
mov byte [0x6bf176], al
xor dl, cl
mov al, byte [ebp - 0x11]
xor ch, cl
xor dh, cl
mov byte [0x6bf172], ah
xor al, cl
mov byte [0x6bf173], dl
mov byte [0x6bf174], ch
mov byte [0x6bf175], dh
mov byte [0x6bf177], al
call fcn.00545d90
add esp, 4
mov dword [ebp - 0x64], 0
lea eax, [ebp - 0x64]
mov dword [ebp - 0x60], 0
xor edx, edx
mov ecx, 0x568eb8
push 0
push 0
push 0
push eax
push 0x19
push 0x6ba0cc
call fcn.0054d1f0
mov al, byte [0x6ba0e5]
add esp, 0x18
mov esi, dword [0x6ba4f8]
mov byte [ebp - 0x14], al
mov eax, dword [0x6ba4fc]
sub eax, esi
mov dword [ebp - 0x18], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ff220
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ff22a
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.004fac70
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
div edi
inc dl
mov al, dl
mov byte [ebp - 0x34], dl
xor al, 0x52
mov cl, dl
mov byte [ebp - 0x33], al
xor cl, 0x65
mov al, dl
mov byte [ebp - 0x30], cl
xor al, 0x65
mov byte [ebp - 0x2d], cl
mov byte [ebp - 0x32], al
mov al, dl
xor al, 0x6d
mov byte [ebp - 0x23], cl
mov byte [ebp - 0x31], al
mov al, dl
xor al, 0x6d
mov byte [ebp - 0x2f], al
mov al, dl
xor al, 0x62
mov byte [ebp - 0x2e], al
mov al, dl
xor al, 0x72
mov byte [ebp - 0x2c], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x2b], al
mov al, dl
xor al, 0x6c
mov byte [ebp - 0x2a], al
mov al, dl
xor al, 0x6f
mov byte [ebp - 0x29], al
mov al, dl
xor al, 0x67
mov byte [ebp - 0x28], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x27], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x26], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x25], al
mov al, dl
xor al, 0x64
mov byte [ebp - 0x24], al
mov al, dl
xor al, 0x74
mov byte [ebp - 0x22], al
mov al, dl
xor al, 0x61
mov byte [ebp - 0x21], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x20], al
mov al, dl
xor al, 0x6c
mov byte [ebp - 0x1f], al
mov al, dl
xor al, 0x73
xor ecx, ecx
mov byte [ebp - 0x1e], al
nop
mov al, byte [ebp + ecx - 0x33]
xor al, dl
mov byte [ecx + 0x6bf274], al
inc ecx
cmp ecx, 0x16
jb 0x4ff2d0
mov edx, 0x6ba0e5
mov byte [0x6bf28a], 0
mov ecx, 0x6bf274
call fcn.00547820
test al, al
je 0x4ff4b2
mov al, byte [0x6ba0e5]
cmp al, byte [ebp - 0x14]
je 0x4ff4b2
mov dword [ebp - 0x90], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xa0], xmm0
test al, al
je 0x4ff435
mov ecx, 0x6ba0cc
mov dword [ebp - 0x8c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ff340
sub ecx, edx
push ecx
push 0x6ba0cc
lea ecx, [ebp - 0xa0]
call fcn.004f9bf0
mov ecx, 0x6ba0c0
mov dword [ebp - 4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x44], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ff380
sub ecx, edx
push ecx
push 0x6ba0c0
lea ecx, [ebp - 0x58]
call fcn.004f9bf0
push 1
lea edx, [ebp - 0xa0]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.004fe950
mov byte [ebp - 4], 0
add esp, 4
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x4ff3e2
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ff3d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff42f
push ecx
push edx
call fcn.0055ec01
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp ecx, 0xf
jbe 0x4ff4b2
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ff4a8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4ff4a8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
mov dword [ebp - 4], 2
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
push 0x568e74
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov byte [ebp - 4], 2
add esp, 4
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x4ff3e2
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ff3d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff42f
jmp 0x4ff3d8
push ecx
push edx
call fcn.0055ec01
add esp, 8
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ff4e5
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ff4ef
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.004fac70
add eax, esi
mov byte [ebp - 0x5d], 0
xor edx, edx
mov byte [0x6bf231], 0
div edi
mov dh, dl
inc dh
mov cl, dh
mov ch, dh
mov dl, dh
xor cl, 0x6f
xor ch, 0x6e
mov al, dh
mov ah, dh
xor dl, 0x69
xor cl, dh
xor ch, dh
xor dl, dh
mov byte [0x6bf22d], cl
xor al, 0x4c
mov byte [0x6bf22f], dl
xor ah, 0x67
mov byte [0x6bf230], ch
xor al, dh
xor ah, dh
push ecx
lea edx, [ebp - 0x24]
mov byte [0x6bf22c], al
mov ecx, 0x6bf22c
mov byte [0x6bf22e], ah
call fcn.00546720
add esp, 4
test al, al
je 0x4ffdad
xorps xmm0, xmm0
mov dword [ebp - 4], 5
push 0x40
movups xmmword [ebp - 0x58], xmm0
call fcn.0055e97b
movups xmm0, xmmword [str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
mov edi, eax
mov dword [ebp - 0x48], 0x3e
add esp, 4
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x44], 0x3f
movups xmmword [edi], xmm0
movups xmm0, xmmword [0x568be0]
movups xmmword [edi + 0x10], xmm0
movups xmm0, xmmword [0x568bf0]
movups xmmword [edi + 0x20], xmm0
movq xmm0, qword [0x568c00]
movq qword [edi + 0x30], xmm0
mov eax, dword [0x568c08]
mov dword [edi + 0x38], eax
mov ax, word [0x568c0c]
mov word [edi + 0x3c], ax
mov byte [edi + 0x3e], 0
mov byte [ebp - 4], 6
call dword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
push eax
lea ecx, [ebp - 0x16a8]
call fcn.004f6ca0
xorps xmm0, xmm0
mov dword [ebp - 0x90], 0
mov eax, ecx
mov dword [ebp - 0x8c], 0xf
movups xmmword [ebp - 0xa0], xmm0
mov byte [ebp - 0xa0], 0
mov esi, 0xa0
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x18], eax
nop dword [eax]
push 0x3e
lea ecx, [ebp - 0x18]
call fcn.004fac70
mov ecx, dword [ebp - 0x90]
mov dl, byte [eax + edi]
mov byte [ebp - 0x60], dl
cmp ecx, dword [ebp - 0x8c]
jae 0x4ff665
cmp dword [ebp - 0x8c], 0xf
lea eax, [ecx + 1]
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0xa0]
cmova eax, dword [ebp - 0xa0]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x4ff677
push dword [ebp - 0x60]
push dword [ebp - 0x60]
push ecx
lea ecx, [ebp - 0xa0]
call fcn.004f9cc0
add esi, 0xffffffff
jne 0x4ff620
push 0x40
push edi
mov byte [ebp - 4], 5
call fcn.0055ec01
add esp, 8
lea edi, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 0xf
cmova edi, dword [ebp - 0xa0]
call fcn.004fc910
test al, al
je 0x4ffaa3
call fcn.004fcbd0
call dword [sym.imp.libcrypto_3.dll_EVP_CIPHER_CTX_new]
push 0
push edi
push 0
mov esi, eax
call dword [sym.imp.libcrypto_3.dll_EVP_aes_256_cbc]
push eax
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_EncryptInit_ex]
add esp, 0x14
lea eax, [ebp - 0x320]
push 0x100
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1a8]
push eax
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_EncryptUpdate]
add esp, 0x14
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x1a8]
push eax
mov eax, dword [ebp - 0x18]
add eax, ecx
push eax
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_EncryptFinal_ex]
add esp, 0xc
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_CIPHER_CTX_free]
mov eax, dword [0x6ba4fc]
add esp, 4
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ff739
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ff743
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004fac70
mov edi, dword [ebp - 0x70]
add eax, esi
xor edx, edx
mov byte [ebp - 0x15], 0
div edi
mov byte [0x6bf271], 0
mov ecx, 0x6bf270
inc dl
mov al, dl
xor al, 0x65
xor al, dl
mov byte [0x6bf270], al
lea eax, [ebp - 0x1a8]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4ff790
test dl, dl
je 0x4ff78c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4ff790
add eax, 2
add ecx, 2
test dl, dl
jne 0x4ff770
xor eax, eax
jmp 0x4ff795
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4ff828
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ff7c2
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ff7cc
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004fac70
add eax, esi
mov byte [ebp - 0x15], 0
xor edx, edx
mov byte [0x6bf235], 0
div edi
mov ecx, 0x6bf234
inc dl
mov al, dl
xor al, 0x74
xor al, dl
mov byte [0x6bf234], al
lea eax, [ebp - 0x1a8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4ff815
test dl, dl
je 0x4ff811
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4ff815
add eax, 2
add ecx, 2
test dl, dl
jne 0x4ff7f5
xor eax, eax
jmp 0x4ff81a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4ff828
call fcn.004fcbd0
jmp 0x4ffd6c
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ff84d
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ff857
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004fac70
add eax, esi
mov dword [ebp - 0x18], 0xf
xor edx, edx
xorps xmm0, xmm0
div edi
movups xmmword [ebp - 0x58], xmm0
inc dl
movsx si, dl
mov eax, esi
movzx edx, si
xor eax, 0x4c
mov word [ebp - 0x36], si
mov word [ebp - 0x34], ax
mov eax, esi
xor eax, 0x6f
mov word [ebp - 0x32], ax
mov eax, esi
xor eax, 0x67
mov word [ebp - 0x30], ax
mov eax, esi
xor eax, 0x69
mov word [ebp - 0x2e], ax
mov eax, esi
xor eax, 0x6e
mov word [ebp - 0x2c], ax
mov eax, esi
xor eax, 0x20
mov word [ebp - 0x2a], ax
mov eax, esi
xor eax, 0x45
mov word [ebp - 0x28], ax
mov eax, edx
xor eax, 0x72
xor edx, 0x6f
movzx ecx, ax
mov eax, esi
xor eax, 0x72
mov word [ebp - 0x22], dx
mov word [ebp - 0x26], ax
lea edx, [ebp - 0x18]
xor eax, eax
mov word [ebp - 0x24], cx
mov word [ebp - 0x20], cx
mov word [ebp - 0x1e], ax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
call fcn.004fac10
mov ecx, dword [ebp - 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x58], eax
xor edx, edx
mov dword [ebp - 0x48], 0xb
mov dword [ebp - 0x44], ecx
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [ebp - 0xa4], 9
nop dword [eax + eax]
mov ax, word [ebp + edx - 0x34]
xor ax, si
cmp dword [ebp - 0x44], 7
movzx ecx, ax
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x16
jb 0x4ff920
mov byte [ebp - 4], 7
lea edi, [ebp - 0x58]
push dword [ebp - 0x60]
cmp dword [ebp - 0x44], 7
push ecx
cmova edi, dword [ebp - 0x58]
lea ecx, [ebp - 0x21a]
call fcn.00500a50
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0x37
lea edx, [ebp - 0x18]
mov esi, eax
movups xmmword [ebp - 0x88], xmm0
call fcn.004fac10
mov ecx, dword [ebp - 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x88], eax
xor edx, edx
mov dword [ebp - 0x78], 0x37
mov dword [ebp - 0x74], ecx
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x40], xmm0
movups xmmword [eax + 0x50], xmm0
movq qword [eax + 0x60], xmm0
mov dword [eax + 0x68], 0
mov dword [eax + 0x6c], 0
nop dword [eax]
mov ax, word [esi + edx + 2]
xor ax, word [esi]
cmp dword [ebp - 0x74], 7
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x6e
jb 0x4ff9c0
cmp dword [ebp - 0x74], 7
lea eax, [ebp - 0x88]
push 0x1010
cmova eax, dword [ebp - 0x88]
push edi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x4ffa45
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4ffa3b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff42f
push ecx
push edx
call fcn.0055ec01
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
cmp ecx, 7
jbe 0x4ffd69
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4ffa94
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff42f
push ecx
push edx
call fcn.0055ec01
add esp, 8
jmp 0x4ffd69
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ffac8
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ffad2
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004fac70
add eax, esi
mov dword [ebp - 0x78], 5
xor edx, edx
mov dword [ebp - 0xa4], 5
div dword [ebp - 0x70]
xorps xmm0, xmm0
mov esi, 7
add dl, 1
mov dword [ebp - 0x74], esi
movsx dx, dl
movups xmmword [ebp - 0x88], xmm0
mov eax, edx
mov word [ebp - 0x2a], dx
xor eax, 0x45
movq qword [ebp - 0x88], xmm0
mov word [ebp - 0x28], ax
mov eax, edx
xor eax, 0x72
movzx ecx, ax
mov eax, edx
xor eax, 0x72
mov word [ebp - 0x24], cx
mov word [ebp - 0x26], ax
xor edx, 0x6f
xor eax, eax
mov word [ebp - 0x20], cx
mov dword [ebp - 0x80], eax
mov word [ebp - 0x1e], ax
mov eax, dword [ebp - 0x28]
mov word [ebp - 0x22], dx
mov edx, dword [ebp - 0x2a]
xor eax, edx
movzx ecx, ax
lea eax, [ebp - 0x88]
mov word [eax], cx
mov eax, dword [ebp - 0x26]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x24]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 4], cx
mov eax, dword [ebp - 0x22]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 6], cx
mov eax, dword [ebp - 0x20]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 8], cx
mov byte [ebp - 4], 8
lea edi, [ebp - 0x88]
cmp dword [ebp - 0x74], esi
mov eax, dword [0x6ba4fc]
cmova edi, dword [ebp - 0x88]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ffbfe
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ffc08
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004fac70
add eax, esi
mov dword [ebp - 0x18], 0xf
xor edx, edx
div dword [ebp - 0x70]
movups xmmword [ebp - 0x58], xmm0
inc dl
movsx si, dl
mov eax, esi
movzx edx, si
xor eax, 0x4e
mov word [ebp - 0x3c], si
mov word [ebp - 0x3a], ax
mov eax, esi
xor eax, 0x65
mov word [ebp - 0x38], ax
mov eax, esi
xor eax, 0x74
mov word [ebp - 0x36], ax
mov eax, esi
xor eax, 0x77
mov word [ebp - 0x34], ax
mov eax, esi
xor eax, 0x6f
mov word [ebp - 0x32], ax
mov eax, edx
xor eax, 0x72
xor edx, 0x6f
movzx ecx, ax
mov eax, esi
xor eax, 0x72
mov word [ebp - 0x24], dx
mov word [ebp - 0x30], ax
lea edx, [ebp - 0x18]
mov eax, esi
mov word [ebp - 0x28], cx
xor eax, 0x6b
mov word [ebp - 0x26], cx
mov word [ebp - 0x2e], ax
mov eax, esi
xor eax, 0x20
mov word [ebp - 0x22], cx
mov word [ebp - 0x2c], ax
mov eax, esi
xor eax, 0x45
mov word [ebp - 0x2a], ax
mov eax, esi
xor eax, 0x2e
mov word [ebp - 0x20], ax
xor eax, eax
mov word [ebp - 0x1e], ax
call fcn.004fac10
mov ecx, dword [ebp - 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x44], ecx
xor ecx, ecx
mov dword [ebp - 0x58], eax
xor edx, edx
mov dword [ebp - 0x48], 0xe
movups xmmword [eax], xmm0
movq qword [eax + 0x10], xmm0
mov dword [eax + 0x18], 0
mov word [eax + 0x1c], cx
mov ax, word [ebp + edx - 0x3a]
xor ax, si
cmp dword [ebp - 0x44], 7
movzx ecx, ax
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x1c
jb 0x4ffcd4
cmp dword [ebp - 0x44], 7
lea eax, [ebp - 0x58]
push 0x1010
cmova eax, dword [ebp - 0x58]
push edi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x44]
cmp ecx, 7
jbe 0x4ffd4a
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4ffd40
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff42f
push ecx
push edx
call fcn.0055ec01
add esp, 8
xor eax, eax
mov dword [ebp - 0x48], 0
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.004f74e0
mov edi, dword [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x8c]
cmp ecx, 0xf
jbe 0x4ffdad
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ffda3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff42f
push ecx
push edx
call fcn.0055ec01
add esp, 8
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ffdd2
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ffddc
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004fac70
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
div edi
inc dl
mov al, dl
mov byte [ebp - 0x29], dl
xor al, 0x42
mov byte [ebp - 0x28], al
mov al, dl
xor al, 0x75
mov byte [ebp - 0x27], al
mov al, dl
xor al, 0x79
mov byte [ebp - 0x26], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x25], al
mov al, dl
xor al, 0x4c
mov byte [ebp - 0x24], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x23], al
mov al, dl
xor al, 0x63
mov byte [ebp - 0x22], al
mov al, dl
xor al, 0x65
mov byte [ebp - 0x21], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x20], al
mov al, dl
xor al, 0x73
mov byte [ebp - 0x1f], al
mov al, dl
xor al, 0x65
xor ecx, ecx
mov byte [ebp - 0x1e], al
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
xor al, dl
mov byte [ecx + 0x6bf244], al
inc ecx
cmp ecx, 0xb
jb 0x4ffe40
mov ecx, 0x6bf244
mov byte [0x6bf24f], 0
call fcn.00548880
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x60], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4ffe96
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4ffea0
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004fac70
add eax, esi
mov byte [ebp - 0x5d], 0
xor edx, edx
div edi
inc dl
mov al, dl
mov byte [ebp - 0x6c], dl
xor al, 0x48
mov cl, dl
mov byte [ebp - 0x6b], al
xor cl, 0x64
mov al, dl
mov byte [ebp - 0x68], cl
xor al, 0x69
mov byte [ebp - 0x5e], cl
mov byte [ebp - 0x6a], al
mov al, dl
xor al, 0x64
mov byte [ebp - 0x69], al
mov al, dl
xor al, 0x65
mov byte [ebp - 0x67], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x66], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x65], al
mov al, dl
xor al, 0x44
mov byte [ebp - 0x64], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x63], al
mov al, dl
xor al, 0x73
mov byte [ebp - 0x62], al
mov al, dl
xor al, 0x63
mov byte [ebp - 0x61], al
mov al, dl
xor al, 0x6f
mov byte [ebp - 0x60], al
mov al, dl
xor al, 0x72
xor ecx, ecx
mov byte [ebp - 0x5f], al
mov al, byte [ebp + ecx - 0x6b]
xor al, dl
mov byte [ecx + 0x6bf160], al
inc ecx
cmp ecx, 0xe
jb 0x4fff10
push ecx
lea edx, [ebp - 0x24]
mov byte [0x6bf16e], 0
mov ecx, 0x6bf160
call fcn.00546720
add esp, 4
test al, al
je 0x4fff4c
push str.start_https:__discord.gg_wUKSDhfQtX
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
movss xmm1, dword [0x58a9e8]
xorps xmm0, xmm0
call fcn.005286c0
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc8f8
cmp eax, 0xffffffff
jne 0x4fff81
mov ecx, 0x6bc8f8
call fcn.004facc0
jmp 0x4fff8b
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004fac70
add eax, esi
mov byte [ebp - 0x40], 0
xor edx, edx
div edi
mov dh, dl
inc dh
mov al, dh
mov byte [ebp - 0x5c], dh
xor al, 0x4c
mov cl, dh
mov byte [ebp - 0x5b], al
xor cl, 0x72
mov al, dh
mov byte [ebp - 0x45], cl
xor al, 0x69
mov byte [ebp - 0x42], cl
mov byte [ebp - 0x5a], al
mov ah, dh
mov al, dh
xor ah, 0x20
xor al, 0x6e
mov byte [ebp - 0x54], ah
mov byte [ebp - 0x59], al
mov dl, dh
mov al, dh
mov byte [ebp - 0x50], ah
xor al, 0x6b
mov byte [ebp - 0x48], ah
mov byte [ebp - 0x58], al
xor dl, 0x65
mov al, dh
mov byte [ebp - 0x46], dl
xor al, 0x20
mov byte [ebp - 0x43], dl
mov byte [ebp - 0x57], al
mov al, dh
xor al, 0x74
mov byte [ebp - 0x56], al
mov al, dh
xor al, 0x6f
mov byte [ebp - 0x55], al
mov al, dh
xor al, 0x74
mov byte [ebp - 0x53], al
mov al, dh
xor al, 0x68
mov byte [ebp - 0x52], al
mov al, dh
xor al, 0x65
mov byte [ebp - 0x51], al
mov al, dh
xor al, 0x44
mov byte [ebp - 0x4f], al
mov al, dh
xor al, 0x69
mov byte [ebp - 0x4e], al
mov al, dh
xor al, 0x73
mov byte [ebp - 0x4d], al
mov al, dh
xor al, 0x63
mov byte [ebp - 0x4c], al
mov al, dh
xor al, 0x6f
mov byte [ebp - 0x4b], al
mov al, dh
xor al, 0x72
mov byte [ebp - 0x4a], al
mov al, dh
xor al, 0x64
mov byte [ebp - 0x49], al
mov al, dh
xor al, 0x73
mov byte [ebp - 0x47], al
mov al, dh
xor al, 0x76
mov byte [ebp - 0x44], al
mov al, dh
xor al, 0x2e
xor ecx, ecx
mov byte [ebp - 0x41], al
nop
mov al, byte [ebp + ecx - 0x5b]
xor al, dh
mov byte [ecx + 0x6bf254], al
inc ecx
cmp ecx, 0x1b
jb 0x500050
push 0x568e58
mov byte [0x6bf26f], 0
call fcn.00545eb0
add esp, 4
mov ecx, 0x1000
call fcn.0051cfd0
test al, al
je 0x5000f7
xor ecx, ecx
call fcn.00529110
test al, al
je 0x5000f7
mov eax, dword [0x6bb530]
movss xmm0, dword [eax + 0x3bb8]
mulss xmm0, dword [0x58a934]
call fcn.00525bb0
push 1
xor edx, edx
mov ecx, 0x6bf254
call fcn.005456d0
mov ecx, dword [0x6bb530]
add esp, 4
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e48]
mov ecx, dword [edx + 0x1b4]
mov eax, dword [edx + 0x1bc]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a4], eax
lea eax, [ecx - 1]
mov dword [edx + 0x1b4], eax
call fcn.00525260
mov ecx, 0x5646ae
call fcn.00548880
mov esi, dword [0x6bb530]
mov edx, dword [esi + 0x3e48]
cmp byte [edx + 0xaf], 0
jne 0x500137
mov esi, dword [esi + 0x4a50]
test esi, esi
je 0x500137
movsx eax, word [esi + 0x6c]
imul ecx, eax, 0x2c
mov eax, dword [esi + 8]
test byte [ecx + eax + 4], 8
jne 0x500137
dec dword [edx + 0xe4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret