Function at 0x4fed60
Capabilities:
Delete file
Encode data using xor
Execute command

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x560fd8
push eax
mov dword fs:[0], esp
mov eax, 0x1698
push ebx
call fcn.0055ffa0
mov dword [ebp - 0xa4], 0
mov eax, dword [0x6ba4fc]
push esi
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x70], 0x6bc918
push edi
cmp eax, 0xffffffff
jne 0x4fedc7
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4fedd1
inc eax
lea ecx, [ebp - 0x70]
push eax
call fcn.004faca0
add eax, esi
mov byte [ebp - 0x5d], 0
xor edx, edx
mov byte [0x6bf1dd], 0
mov edi, 0x7e
div edi
mov dword [ebp - 0x70], edi
mov dh, dl
inc dh
mov cl, dh
mov ch, dh
xor cl, 0x6f
xor ch, 0x6e
mov al, dh
mov ah, dh
mov dl, dh
xor cl, dh
xor ch, dh
mov byte [0x6bf1d9], cl
xor al, 0x4c
mov byte [0x6bf1dc], ch
xor ah, 0x67
xor dl, 0x69
xor al, dh
xor ah, dh
xor dl, dh
mov byte [0x6bf1d8], al
mov ecx, 0x6bf1d8
mov byte [0x6bf1da], ah
mov byte [0x6bf1db], dl
call fcn.005487d0
cmp byte [0x6bb319], 0
jne 0x4fee4c
call fcn.004feaa0
mov byte [0x6bb319], 1
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x18], 0x6bc918
cmp eax, 0xffffffff
jne 0x4fee71
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4fee7b
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.004faca0
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
mov byte [0x6bf20d], 0
div edi
push 0x6bf204
mov dh, dl
inc dh
mov cl, dh
mov byte [ebp - 0x19], dh
xor cl, 0x73
mov al, dh
xor al, 0x55
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0x19]
mov ah, dh
xor al, cl
mov byte [ebp - 0x11], cl
xor byte [ebp - 0x11], 0x6d
mov dl, dh
mov byte [ebp - 0x12], cl
mov ch, dh
xor byte [ebp - 0x12], 0x65
xor ah, 0x65
mov byte [ebp - 0x13], cl
xor dl, 0x72
mov cl, byte [ebp - 0x14]
xor ch, 0x6e
xor cl, byte [ebp - 0x19]
xor dh, 0x61
xor byte [ebp - 0x13], 0x3a
mov byte [0x6bf204], al
mov al, byte [ebp - 0x11]
mov byte [0x6bf205], cl
mov cl, byte [ebp - 0x19]
xor al, cl
xor ah, cl
mov byte [0x6bf20a], al
xor dl, cl
mov al, byte [ebp - 0x12]
xor ch, cl
xor al, cl
mov byte [0x6bf206], ah
mov byte [0x6bf20b], al
xor dh, cl
mov al, byte [ebp - 0x13]
xor al, cl
mov byte [0x6bf207], dl
mov byte [0x6bf208], ch
mov byte [0x6bf209], dh
mov byte [0x6bf20c], al
call fcn.00545ce0
add esp, 4
mov dword [ebp - 0x64], 0
lea eax, [ebp - 0x64]
mov dword [ebp - 0x60], 0
xor edx, edx
mov ecx, str.username
push 0
push 0
push 0
push eax
push 0xc
push 0x6ba0c0
call fcn.0054d140
mov eax, dword [0x6ba4fc]
add esp, 0x18
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x18], 0x6bc918
cmp eax, 0xffffffff
jne 0x4fef7d
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4fef87
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.004faca0
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
mov byte [0x6bf198], 0
div edi
push 0x6bf190
mov dh, dl
inc dh
mov cl, dh
mov byte [ebp - 0x13], dh
xor cl, 0x69
mov al, dh
xor al, 0x4c
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0x13]
mov ah, dh
xor al, cl
mov byte [ebp - 0x12], cl
xor byte [ebp - 0x12], 0x65
mov dl, dh
mov byte [ebp - 0x11], cl
mov ch, dh
mov cl, byte [ebp - 0x14]
xor ah, 0x63
xor cl, byte [ebp - 0x13]
xor dl, 0x65
xor byte [ebp - 0x11], 0x3a
xor ch, 0x6e
mov byte [0x6bf190], al
xor dh, 0x73
mov al, byte [ebp - 0x12]
mov byte [0x6bf191], cl
mov cl, byte [ebp - 0x13]
xor al, cl
xor ah, cl
mov byte [0x6bf196], al
xor dl, cl
mov al, byte [ebp - 0x11]
xor ch, cl
xor dh, cl
mov byte [0x6bf192], ah
xor al, cl
mov byte [0x6bf193], dl
mov byte [0x6bf194], ch
mov byte [0x6bf195], dh
mov byte [0x6bf197], al
call fcn.00545ce0
add esp, 4
mov dword [ebp - 0x64], 0
lea eax, [ebp - 0x64]
mov dword [ebp - 0x60], 0
xor edx, edx
mov ecx, 0x568ef8
push 0
push 0
push 0
push eax
push 0x19
push 0x6ba0cc
call fcn.0054d140
mov al, byte [0x6ba0e5]
add esp, 0x18
mov esi, dword [0x6ba4f8]
mov byte [ebp - 0x14], al
mov eax, dword [0x6ba4fc]
sub eax, esi
mov dword [ebp - 0x18], 0x6bc918
cmp eax, 0xffffffff
jne 0x4ff080
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4ff08a
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.004faca0
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
div edi
inc dl
mov al, dl
mov byte [ebp - 0x34], dl
xor al, 0x52
mov cl, dl
mov byte [ebp - 0x33], al
xor cl, 0x65
mov al, dl
mov byte [ebp - 0x30], cl
xor al, 0x65
mov byte [ebp - 0x2d], cl
mov byte [ebp - 0x32], al
mov al, dl
xor al, 0x6d
mov byte [ebp - 0x23], cl
mov byte [ebp - 0x31], al
mov al, dl
xor al, 0x6d
mov byte [ebp - 0x2f], al
mov al, dl
xor al, 0x62
mov byte [ebp - 0x2e], al
mov al, dl
xor al, 0x72
mov byte [ebp - 0x2c], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x2b], al
mov al, dl
xor al, 0x6c
mov byte [ebp - 0x2a], al
mov al, dl
xor al, 0x6f
mov byte [ebp - 0x29], al
mov al, dl
xor al, 0x67
mov byte [ebp - 0x28], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x27], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x26], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x25], al
mov al, dl
xor al, 0x64
mov byte [ebp - 0x24], al
mov al, dl
xor al, 0x74
mov byte [ebp - 0x22], al
mov al, dl
xor al, 0x61
mov byte [ebp - 0x21], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x20], al
mov al, dl
xor al, 0x6c
mov byte [ebp - 0x1f], al
mov al, dl
xor al, 0x73
xor ecx, ecx
mov byte [ebp - 0x1e], al
nop
mov al, byte [ebp + ecx - 0x33]
xor al, dl
mov byte [ecx + 0x6bf294], al
inc ecx
cmp ecx, 0x16
jb 0x4ff130
mov edx, 0x6ba0e5
mov byte [0x6bf2aa], 0
mov ecx, 0x6bf294
call fcn.00547770
test al, al
je 0x4ff312
mov al, byte [0x6ba0e5]
cmp al, byte [ebp - 0x14]
je 0x4ff312
mov dword [ebp - 0x90], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xa0], xmm0
test al, al
je 0x4ff295
mov ecx, 0x6ba0cc
mov dword [ebp - 0x8c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ff1a0
sub ecx, edx
push ecx
push 0x6ba0cc
lea ecx, [ebp - 0xa0]
call fcn.004f9c20
mov ecx, 0x6ba0c0
mov dword [ebp - 4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x44], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ff1e0
sub ecx, edx
push ecx
push 0x6ba0c0
lea ecx, [ebp - 0x58]
call fcn.004f9c20
push 1
lea edx, [ebp - 0xa0]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.004fe980
mov byte [ebp - 4], 0
add esp, 4
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x4ff242
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ff238
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff28f
push ecx
push edx
call fcn.0055efc1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp ecx, 0xf
jbe 0x4ff312
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ff308
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4ff308
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
mov dword [ebp - 4], 2
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
push 0x568eb4
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov byte [ebp - 4], 2
add esp, 4
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x4ff242
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ff238
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff28f
jmp 0x4ff238
push ecx
push edx
call fcn.0055efc1
add esp, 8
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0x6bc918
cmp eax, 0xffffffff
jne 0x4ff345
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4ff34f
inc eax
lea ecx, [ebp - 0x18]
push eax
call fcn.004faca0
add eax, esi
mov byte [ebp - 0x5d], 0
xor edx, edx
mov byte [0x6bf251], 0
div edi
mov dh, dl
inc dh
mov cl, dh
mov ch, dh
mov dl, dh
xor cl, 0x6f
xor ch, 0x6e
mov al, dh
mov ah, dh
xor dl, 0x69
xor cl, dh
xor ch, dh
xor dl, dh
mov byte [0x6bf24d], cl
xor al, 0x4c
mov byte [0x6bf24f], dl
xor ah, 0x67
mov byte [0x6bf250], ch
xor al, dh
xor ah, dh
push ecx
lea edx, [ebp - 0x24]
mov byte [0x6bf24c], al
mov ecx, 0x6bf24c
mov byte [0x6bf24e], ah
call fcn.00546670
add esp, 4
test al, al
je 0x4ffc0d
xorps xmm0, xmm0
mov dword [ebp - 4], 5
push 0x40
movups xmmword [ebp - 0x58], xmm0
call fcn.0055ed3b
movups xmm0, xmmword [str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
mov edi, eax
mov dword [ebp - 0x48], 0x3e
add esp, 4
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x44], 0x3f
movups xmmword [edi], xmm0
movups xmm0, xmmword [0x568c20]
movups xmmword [edi + 0x10], xmm0
movups xmm0, xmmword [0x568c30]
movups xmmword [edi + 0x20], xmm0
movq xmm0, qword [0x568c40]
movq qword [edi + 0x30], xmm0
mov eax, dword [0x568c48]
mov dword [edi + 0x38], eax
mov ax, word [0x568c4c]
mov word [edi + 0x3c], ax
mov byte [edi + 0x3e], 0
mov byte [ebp - 4], 6
call dword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
push eax
lea ecx, [ebp - 0x16a8]
call fcn.004f6cd0
xorps xmm0, xmm0
mov dword [ebp - 0x90], 0
mov eax, ecx
mov dword [ebp - 0x8c], 0xf
movups xmmword [ebp - 0xa0], xmm0
mov byte [ebp - 0xa0], 0
mov esi, 0xa0
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x18], eax
nop dword [eax]
push 0x3e
lea ecx, [ebp - 0x18]
call fcn.004faca0
mov ecx, dword [ebp - 0x90]
mov dl, byte [eax + edi]
mov byte [ebp - 0x60], dl
cmp ecx, dword [ebp - 0x8c]
jae 0x4ff4c5
cmp dword [ebp - 0x8c], 0xf
lea eax, [ecx + 1]
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0xa0]
cmova eax, dword [ebp - 0xa0]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x4ff4d7
push dword [ebp - 0x60]
push dword [ebp - 0x60]
push ecx
lea ecx, [ebp - 0xa0]
call fcn.004f9cf0
add esi, 0xffffffff
jne 0x4ff480
push 0x40
push edi
mov byte [ebp - 4], 5
call fcn.0055efc1
add esp, 8
lea edi, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 0xf
cmova edi, dword [ebp - 0xa0]
call fcn.004fc940
test al, al
je 0x4ff903
call fcn.004fcc00
call dword [sym.imp.libcrypto_3.dll_EVP_CIPHER_CTX_new]
push 0
push edi
push 0
mov esi, eax
call dword [sym.imp.libcrypto_3.dll_EVP_aes_256_cbc]
push eax
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_EncryptInit_ex]
add esp, 0x14
lea eax, [ebp - 0x320]
push 0x100
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1a8]
push eax
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_EncryptUpdate]
add esp, 0x14
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x1a8]
push eax
mov eax, dword [ebp - 0x18]
add eax, ecx
push eax
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_EncryptFinal_ex]
add esp, 0xc
push esi
call dword [sym.imp.libcrypto_3.dll_EVP_CIPHER_CTX_free]
mov eax, dword [0x6ba4fc]
add esp, 4
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc918
cmp eax, 0xffffffff
jne 0x4ff599
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4ff5a3
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004faca0
mov edi, dword [ebp - 0x70]
add eax, esi
xor edx, edx
mov byte [ebp - 0x15], 0
div edi
mov byte [0x6bf291], 0
mov ecx, 0x6bf290
inc dl
mov al, dl
xor al, 0x65
xor al, dl
mov byte [0x6bf290], al
lea eax, [ebp - 0x1a8]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4ff5f0
test dl, dl
je 0x4ff5ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4ff5f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4ff5d0
xor eax, eax
jmp 0x4ff5f5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4ff688
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc918
cmp eax, 0xffffffff
jne 0x4ff622
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4ff62c
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004faca0
add eax, esi
mov byte [ebp - 0x15], 0
xor edx, edx
mov byte [0x6bf255], 0
div edi
mov ecx, 0x6bf254
inc dl
mov al, dl
xor al, 0x74
xor al, dl
mov byte [0x6bf254], al
lea eax, [ebp - 0x1a8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4ff675
test dl, dl
je 0x4ff671
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4ff675
add eax, 2
add ecx, 2
test dl, dl
jne 0x4ff655
xor eax, eax
jmp 0x4ff67a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4ff688
call fcn.004fcc00
jmp 0x4ffbcc
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc918
cmp eax, 0xffffffff
jne 0x4ff6ad
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4ff6b7
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004faca0
add eax, esi
mov dword [ebp - 0x18], 0xf
xor edx, edx
xorps xmm0, xmm0
div edi
movups xmmword [ebp - 0x58], xmm0
inc dl
movsx si, dl
mov eax, esi
movzx edx, si
xor eax, 0x4c
mov word [ebp - 0x36], si
mov word [ebp - 0x34], ax
mov eax, esi
xor eax, 0x6f
mov word [ebp - 0x32], ax
mov eax, esi
xor eax, 0x67
mov word [ebp - 0x30], ax
mov eax, esi
xor eax, 0x69
mov word [ebp - 0x2e], ax
mov eax, esi
xor eax, 0x6e
mov word [ebp - 0x2c], ax
mov eax, esi
xor eax, 0x20
mov word [ebp - 0x2a], ax
mov eax, esi
xor eax, 0x45
mov word [ebp - 0x28], ax
mov eax, edx
xor eax, 0x72
xor edx, 0x6f
movzx ecx, ax
mov eax, esi
xor eax, 0x72
mov word [ebp - 0x22], dx
mov word [ebp - 0x26], ax
lea edx, [ebp - 0x18]
xor eax, eax
mov word [ebp - 0x24], cx
mov word [ebp - 0x20], cx
mov word [ebp - 0x1e], ax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
call fcn.004fac40
mov ecx, dword [ebp - 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x58], eax
xor edx, edx
mov dword [ebp - 0x48], 0xb
mov dword [ebp - 0x44], ecx
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [ebp - 0xa4], 9
nop dword [eax + eax]
mov ax, word [ebp + edx - 0x34]
xor ax, si
cmp dword [ebp - 0x44], 7
movzx ecx, ax
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x16
jb 0x4ff780
mov byte [ebp - 4], 7
lea edi, [ebp - 0x58]
push dword [ebp - 0x60]
cmp dword [ebp - 0x44], 7
push ecx
cmova edi, dword [ebp - 0x58]
lea ecx, [ebp - 0x21a]
call fcn.005009b0
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0x37
lea edx, [ebp - 0x18]
mov esi, eax
movups xmmword [ebp - 0x88], xmm0
call fcn.004fac40
mov ecx, dword [ebp - 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x88], eax
xor edx, edx
mov dword [ebp - 0x78], 0x37
mov dword [ebp - 0x74], ecx
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x40], xmm0
movups xmmword [eax + 0x50], xmm0
movq qword [eax + 0x60], xmm0
mov dword [eax + 0x68], 0
mov dword [eax + 0x6c], 0
nop dword [eax]
mov ax, word [esi + edx + 2]
xor ax, word [esi]
cmp dword [ebp - 0x74], 7
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x6e
jb 0x4ff820
cmp dword [ebp - 0x74], 7
lea eax, [ebp - 0x88]
push 0x1010
cmova eax, dword [ebp - 0x88]
push edi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x4ff8a5
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4ff89b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff28f
push ecx
push edx
call fcn.0055efc1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
cmp ecx, 7
jbe 0x4ffbc9
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4ff8f4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff28f
push ecx
push edx
call fcn.0055efc1
add esp, 8
jmp 0x4ffbc9
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc918
cmp eax, 0xffffffff
jne 0x4ff928
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4ff932
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004faca0
add eax, esi
mov dword [ebp - 0x78], 5
xor edx, edx
mov dword [ebp - 0xa4], 5
div dword [ebp - 0x70]
xorps xmm0, xmm0
mov esi, 7
add dl, 1
mov dword [ebp - 0x74], esi
movsx dx, dl
movups xmmword [ebp - 0x88], xmm0
mov eax, edx
mov word [ebp - 0x2a], dx
xor eax, 0x45
movq qword [ebp - 0x88], xmm0
mov word [ebp - 0x28], ax
mov eax, edx
xor eax, 0x72
movzx ecx, ax
mov eax, edx
xor eax, 0x72
mov word [ebp - 0x24], cx
mov word [ebp - 0x26], ax
xor edx, 0x6f
xor eax, eax
mov word [ebp - 0x20], cx
mov dword [ebp - 0x80], eax
mov word [ebp - 0x1e], ax
mov eax, dword [ebp - 0x28]
mov word [ebp - 0x22], dx
mov edx, dword [ebp - 0x2a]
xor eax, edx
movzx ecx, ax
lea eax, [ebp - 0x88]
mov word [eax], cx
mov eax, dword [ebp - 0x26]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x24]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 4], cx
mov eax, dword [ebp - 0x22]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 6], cx
mov eax, dword [ebp - 0x20]
xor eax, edx
cmp dword [ebp - 0x74], esi
movzx ecx, ax
lea eax, [ebp - 0x88]
cmova eax, dword [ebp - 0x88]
mov word [eax + 8], cx
mov byte [ebp - 4], 8
lea edi, [ebp - 0x88]
cmp dword [ebp - 0x74], esi
mov eax, dword [0x6ba4fc]
cmova edi, dword [ebp - 0x88]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc918
cmp eax, 0xffffffff
jne 0x4ffa5e
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4ffa68
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004faca0
add eax, esi
mov dword [ebp - 0x18], 0xf
xor edx, edx
div dword [ebp - 0x70]
movups xmmword [ebp - 0x58], xmm0
inc dl
movsx si, dl
mov eax, esi
movzx edx, si
xor eax, 0x4e
mov word [ebp - 0x3c], si
mov word [ebp - 0x3a], ax
mov eax, esi
xor eax, 0x65
mov word [ebp - 0x38], ax
mov eax, esi
xor eax, 0x74
mov word [ebp - 0x36], ax
mov eax, esi
xor eax, 0x77
mov word [ebp - 0x34], ax
mov eax, esi
xor eax, 0x6f
mov word [ebp - 0x32], ax
mov eax, edx
xor eax, 0x72
xor edx, 0x6f
movzx ecx, ax
mov eax, esi
xor eax, 0x72
mov word [ebp - 0x24], dx
mov word [ebp - 0x30], ax
lea edx, [ebp - 0x18]
mov eax, esi
mov word [ebp - 0x28], cx
xor eax, 0x6b
mov word [ebp - 0x26], cx
mov word [ebp - 0x2e], ax
mov eax, esi
xor eax, 0x20
mov word [ebp - 0x22], cx
mov word [ebp - 0x2c], ax
mov eax, esi
xor eax, 0x45
mov word [ebp - 0x2a], ax
mov eax, esi
xor eax, 0x2e
mov word [ebp - 0x20], ax
xor eax, eax
mov word [ebp - 0x1e], ax
call fcn.004fac40
mov ecx, dword [ebp - 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x44], ecx
xor ecx, ecx
mov dword [ebp - 0x58], eax
xor edx, edx
mov dword [ebp - 0x48], 0xe
movups xmmword [eax], xmm0
movq qword [eax + 0x10], xmm0
mov dword [eax + 0x18], 0
mov word [eax + 0x1c], cx
mov ax, word [ebp + edx - 0x3a]
xor ax, si
cmp dword [ebp - 0x44], 7
movzx ecx, ax
lea eax, [ebp - 0x58]
cmova eax, dword [ebp - 0x58]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x1c
jb 0x4ffb34
cmp dword [ebp - 0x44], 7
lea eax, [ebp - 0x58]
push 0x1010
cmova eax, dword [ebp - 0x58]
push edi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x44]
cmp ecx, 7
jbe 0x4ffbaa
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4ffba0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff28f
push ecx
push edx
call fcn.0055efc1
add esp, 8
xor eax, eax
mov dword [ebp - 0x48], 0
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.004f7510
mov edi, dword [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x8c]
cmp ecx, 0xf
jbe 0x4ffc0d
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ffc03
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff28f
push ecx
push edx
call fcn.0055efc1
add esp, 8
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc918
cmp eax, 0xffffffff
jne 0x4ffc32
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4ffc3c
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004faca0
add eax, esi
mov byte [ebp - 0x1d], 0
xor edx, edx
div edi
inc dl
mov al, dl
mov byte [ebp - 0x29], dl
xor al, 0x42
mov byte [ebp - 0x28], al
mov al, dl
xor al, 0x75
mov byte [ebp - 0x27], al
mov al, dl
xor al, 0x79
mov byte [ebp - 0x26], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x25], al
mov al, dl
xor al, 0x4c
mov byte [ebp - 0x24], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x23], al
mov al, dl
xor al, 0x63
mov byte [ebp - 0x22], al
mov al, dl
xor al, 0x65
mov byte [ebp - 0x21], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x20], al
mov al, dl
xor al, 0x73
mov byte [ebp - 0x1f], al
mov al, dl
xor al, 0x65
xor ecx, ecx
mov byte [ebp - 0x1e], al
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
xor al, dl
mov byte [ecx + 0x6bf264], al
inc ecx
cmp ecx, 0xb
jb 0x4ffca0
mov ecx, 0x6bf264
mov byte [0x6bf26f], 0
call fcn.005487d0
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x60], 0x6bc918
cmp eax, 0xffffffff
jne 0x4ffcf6
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4ffd00
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004faca0
add eax, esi
mov byte [ebp - 0x5d], 0
xor edx, edx
div edi
inc dl
mov al, dl
mov byte [ebp - 0x6c], dl
xor al, 0x48
mov cl, dl
mov byte [ebp - 0x6b], al
xor cl, 0x64
mov al, dl
mov byte [ebp - 0x68], cl
xor al, 0x69
mov byte [ebp - 0x5e], cl
mov byte [ebp - 0x6a], al
mov al, dl
xor al, 0x64
mov byte [ebp - 0x69], al
mov al, dl
xor al, 0x65
mov byte [ebp - 0x67], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x66], al
mov al, dl
xor al, 0x20
mov byte [ebp - 0x65], al
mov al, dl
xor al, 0x44
mov byte [ebp - 0x64], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x63], al
mov al, dl
xor al, 0x73
mov byte [ebp - 0x62], al
mov al, dl
xor al, 0x63
mov byte [ebp - 0x61], al
mov al, dl
xor al, 0x6f
mov byte [ebp - 0x60], al
mov al, dl
xor al, 0x72
xor ecx, ecx
mov byte [ebp - 0x5f], al
mov al, byte [ebp + ecx - 0x6b]
xor al, dl
mov byte [ecx + 0x6bf180], al
inc ecx
cmp ecx, 0xe
jb 0x4ffd70
push ecx
lea edx, [ebp - 0x24]
mov byte [0x6bf18e], 0
mov ecx, 0x6bf180
call fcn.00546670
add esp, 4
test al, al
je 0x4ffdac
push str.start_https:__discord.gg_wUKSDhfQtX
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
movss xmm1, dword [0x58aa50]
xorps xmm0, xmm0
call fcn.00528640
mov eax, dword [0x6ba4fc]
mov esi, dword [0x6ba4f8]
sub eax, esi
mov dword [ebp - 0x60], 0x6bc918
cmp eax, 0xffffffff
jne 0x4ffde1
mov ecx, 0x6bc918
call fcn.004facf0
jmp 0x4ffdeb
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.004faca0
add eax, esi
mov byte [ebp - 0x40], 0
xor edx, edx
div edi
mov dh, dl
inc dh
mov al, dh
mov byte [ebp - 0x5c], dh
xor al, 0x4c
mov cl, dh
mov byte [ebp - 0x5b], al
xor cl, 0x72
mov al, dh
mov byte [ebp - 0x45], cl
xor al, 0x69
mov byte [ebp - 0x42], cl
mov byte [ebp - 0x5a], al
mov ah, dh
mov al, dh
xor ah, 0x20
xor al, 0x6e
mov byte [ebp - 0x54], ah
mov byte [ebp - 0x59], al
mov dl, dh
mov al, dh
mov byte [ebp - 0x50], ah
xor al, 0x6b
mov byte [ebp - 0x48], ah
mov byte [ebp - 0x58], al
xor dl, 0x65
mov al, dh
mov byte [ebp - 0x46], dl
xor al, 0x20
mov byte [ebp - 0x43], dl
mov byte [ebp - 0x57], al
mov al, dh
xor al, 0x74
mov byte [ebp - 0x56], al
mov al, dh
xor al, 0x6f
mov byte [ebp - 0x55], al
mov al, dh
xor al, 0x74
mov byte [ebp - 0x53], al
mov al, dh
xor al, 0x68
mov byte [ebp - 0x52], al
mov al, dh
xor al, 0x65
mov byte [ebp - 0x51], al
mov al, dh
xor al, 0x44
mov byte [ebp - 0x4f], al
mov al, dh
xor al, 0x69
mov byte [ebp - 0x4e], al
mov al, dh
xor al, 0x73
mov byte [ebp - 0x4d], al
mov al, dh
xor al, 0x63
mov byte [ebp - 0x4c], al
mov al, dh
xor al, 0x6f
mov byte [ebp - 0x4b], al
mov al, dh
xor al, 0x72
mov byte [ebp - 0x4a], al
mov al, dh
xor al, 0x64
mov byte [ebp - 0x49], al
mov al, dh
xor al, 0x73
mov byte [ebp - 0x47], al
mov al, dh
xor al, 0x76
mov byte [ebp - 0x44], al
mov al, dh
xor al, 0x2e
xor ecx, ecx
mov byte [ebp - 0x41], al
nop
mov al, byte [ebp + ecx - 0x5b]
xor al, dh
mov byte [ecx + 0x6bf274], al
inc ecx
cmp ecx, 0x1b
jb 0x4ffeb0
push 0x568e98
mov byte [0x6bf28f], 0
call fcn.00545e00
add esp, 4
mov ecx, 0x1000
call fcn.0051cf50
test al, al
je 0x4fff57
xor ecx, ecx
call fcn.00529090
test al, al
je 0x4fff57
mov eax, dword [0x6bb530]
movss xmm0, dword [eax + 0x3bb8]
mulss xmm0, dword [0x58a99c]
call fcn.00525b30
push 1
xor edx, edx
mov ecx, 0x6bf274
call fcn.00545620
mov ecx, dword [0x6bb530]
add esp, 4
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e48]
mov ecx, dword [edx + 0x1b4]
mov eax, dword [edx + 0x1bc]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a4], eax
lea eax, [ecx - 1]
mov dword [edx + 0x1b4], eax
call fcn.005251e0
mov ecx, 0x5646ee
call fcn.005487d0
mov esi, dword [0x6bb530]
mov edx, dword [esi + 0x3e48]
cmp byte [edx + 0xaf], 0
jne 0x4fff97
mov esi, dword [esi + 0x4a50]
test esi, esi
je 0x4fff97
movsx eax, word [esi + 0x6c]
imul ecx, eax, 0x2c
mov eax, dword [esi + 8]
test byte [ecx + eax + 4], 8
jne 0x4fff97
dec dword [edx + 0xe4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret