Function at 0x401e90
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x68
push esi
mov esi, ecx
mov dword [esp + 0x2c], 0x5958425b
push edi
mov dword [esp + 0x14], esi
xor edx, edx
mov word [esp + 0x34], 0x49
mov byte [esp + 0x36], 1
mov al, dl
add al, 0x2f
xor byte [esp + edx + 0x30], al
inc edx
cmp edx, 5
jb 0x401eb7
lea edi, [esi + 0x58]
mov byte [esp + 0x36], 0
push 0x2a
mov edx, edi
mov dword [esp + 0x1c], edi
lea ecx, [esp + 0x34]
call fcn.0040d700
add esp, 4
test al, al
je 0x402529
mov dword [esp + 0x30], 0x5345130c
xor ecx, ecx
mov dword [esp + 0x34], 0x1004751
nop dword [eax + eax]
mov al, cl
add al, 0x2f
xor byte [esp + ecx + 0x30], al
inc ecx
cmp ecx, 6
jb 0x401f00
lea ecx, [esp + 0x30]
mov byte [esp + 0x37], 0
call fcn.0042c8d0
test al, al
je 0x402524
mov dword [esp + 0x24], 0x56505f43
xor ecx, ecx
mov dword [esp + 0x28], 0x1004656
mov al, cl
add al, 0x2f
xor byte [esp + ecx + 0x24], al
inc ecx
cmp ecx, 6
jb 0x401f36
mov edi, dword [0x43c6e8]
mov byte [esp + 0x2b], 0
mov eax, dword [edi + 0x1ba8]
cmp byte [eax + 0x8f], 0
jne 0x402521
mov edi, dword [edi + 0x1fb0]
test edi, edi
je 0x402521
push 0
push 0
lea edx, [esp + 0x2c]
mov ecx, edi
call fcn.0042e2d0
add esp, 8
test al, al
je 0x402521
movsx eax, word [edi + 0x6c]
mov ecx, dword [edi + 8]
lea eax, [eax + eax*4]
mov ecx, dword [ecx + eax*8]
call fcn.004105d0
mov eax, dword [0x43c6e8]
mov edx, dword [eax + 0x1ba8]
mov ecx, edx
cmp dword [ecx + 0x170], 0
movss xmm3, dword [ecx + 0x208]
movss xmm2, dword [ecx + 0x20c]
jne 0x401fcb
cmp dword [eax + 0x1f64], 0
je 0x401fd3
movss xmm3, dword [ecx + 0x1d8]
movss xmm1, dword [eax + 0x1568]
movss xmm0, dword [eax + 0x1534]
addss xmm1, xmm1
mulss xmm0, dword [0x438b58]
subss xmm2, dword [edx + 0xd4]
subss xmm3, dword [edx + 0xd0]
or dword [eax + 0x1c84], 2
addss xmm0, xmm1
mov dword [eax + 0x1c8c], 1
movss dword [esp + 0x1c], xmm3
subss xmm2, xmm0
movss dword [eax + 0x1ca4], xmm3
xorps xmm0, xmm0
comiss xmm3, xmm0
movss dword [esp + 0x20], xmm2
movss dword [eax + 0x1ca8], xmm2
jbe 0x4021cc
comiss xmm2, xmm0
jbe 0x4021cc
mov dword [esp + 0x30], 0xd7dd9e9f
xor ecx, ecx
mov dword [esp + 0x34], 0xa6a5afa1
mov dword [esp + 0x38], 0xa1aaa8
mov byte [esp + 0x3c], 1
mov al, cl
sub al, 0x44
xor byte [esp + ecx + 0x30], al
inc ecx
cmp ecx, 0xb
jb 0x402068
sub esp, 8
mov byte [esp + 0x44], 0
lea edx, [esp + 0x24]
lea ecx, [esp + 0x38]
call fcn.0040af70
add esp, 8
test al, al
je 0x4021cc
xor edi, edi
cmp dword [esi + 0x5c], edi
jle 0x4021c7
mov eax, dword [esi + 0x64]
xor ecx, ecx
mov dword [esp + 0x24], 0x6c1a74
mov byte [esp + 0x28], 1
mov esi, dword [eax + edi*4]
mov dword [esp + 0x1c], esi
nop word [eax + eax]
mov al, cl
add al, 0x2f
xor byte [esp + ecx + 0x24], al
inc ecx
cmp ecx, 3
jb 0x4020c0
lea eax, [esp + 0x24]
mov byte [esp + 0x28], 0
push eax
push esi
call dword [sym.imp.VCRUNTIME140.dll_strstr]
add esp, 8
test eax, eax
je 0x4020ef
movaps xmm0, xmmword [0x438cd0]
jmp 0x402131
mov dword [esp + 0x30], 0x6c1b74
xor ecx, ecx
mov byte [esp + 0x34], 1
nop
mov al, cl
add al, 0x2f
xor byte [esp + ecx + 0x30], al
inc ecx
cmp ecx, 3
jb 0x402100
lea eax, [esp + 0x30]
mov byte [esp + 0x34], 0
push eax
push esi
call dword [sym.imp.VCRUNTIME140.dll_strstr]
add esp, 8
test eax, eax
je 0x4021ac
movaps xmm0, xmmword [0x438ce0]
mov esi, dword [0x43c6e8]
lea eax, [esp + 0x5c]
movaps xmmword [esp + 0x40], xmm0
push eax
mov dword [esp + 0x60], 0
movups xmm0, xmmword [esi + 0x15f0]
lea ecx, [esi + 0x1ce4]
movups xmmword [esp + 0x64], xmm0
call fcn.00416cc0
movaps xmm0, xmmword [esp + 0x40]
xor edx, edx
push ecx
mov ecx, dword [esp + 0x20]
movups xmmword [esi + 0x15f0], xmm0
call fcn.004293a0
mov esi, dword [0x43c6e8]
add esp, 4
mov eax, dword [esi + 0x1ce4]
mov ecx, dword [esi + 0x1cec]
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, 0x15f
add eax, eax
movups xmmword [esi + eax*8], xmm0
dec dword [esi + 0x1ce4]
jmp 0x4021b9
push ecx
xor edx, edx
mov ecx, esi
call fcn.004293a0
add esp, 4
mov esi, dword [esp + 0x14]
inc edi
cmp edi, dword [esi + 0x5c]
jl 0x4020a1
call fcn.0040b010
cmp dword [0x43c098], 0
jne 0x4021d8
dec dword [esi + 0x5c]
call fcn.00402560
mov edx, eax
call fcn.0042b3f0
test al, al
je 0x4021ef
mov byte [0x43c710], 1
movss xmm1, dword [0x438c00]
xorps xmm0, xmm0
call fcn.00410950
mov eax, dword [0x43c6e8]
mov edx, dword [eax + 0x1ba8]
mov ecx, edx
cmp dword [ecx + 0x170], 0
movss xmm0, dword [ecx + 0x208]
jne 0x402226
cmp dword [eax + 0x1f64], 0
je 0x40222e
movss xmm0, dword [ecx + 0x1d8]
subss xmm0, dword [edx + 0xd0]
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x24], 0x5142594b
mov dword [esp + 0x28], 0x51465c
addss xmm0, dword [eax + 0x1564]
mov byte [esp + 0x2c], 1
addss xmm0, dword [eax + 0x1530]
mov byte [ecx + 0x8c], 1
xor ecx, ecx
mov eax, dword [eax + 0x1ba8]
movss xmm1, dword [eax + 0xc]
subss xmm1, dword [eax + 0x58]
addss xmm1, xmm0
movss xmm0, dword [eax + 0xe8]
maxss xmm0, xmm1
movss dword [eax + 0xd0], xmm1
movss dword [eax + 0xe8], xmm0
mov al, cl
add al, 0x2f
xor byte [esp + ecx + 0x24], al
inc ecx
cmp ecx, 7
jb 0x4022a4
push ecx
lea edx, [esp + 0x34]
mov byte [esp + 0x30], 0
lea ecx, [esp + 0x28]
call fcn.0042a190
add esp, 4
test al, al
je 0x40230b
mov dword [esp + 0x30], 0x5c544040
xor ecx, ecx
mov word [esp + 0x34], 0x100
nop dword [eax]
mov al, cl
add al, 0x2f
xor byte [esp + ecx + 0x30], al
inc ecx
cmp ecx, 4
jb 0x4022e0
push 0xa
push 0
push 0
push str.https:__discord.gg_49aSgpVjNM
lea eax, [esp + 0x40]
mov byte [esp + 0x45], 0
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
movss xmm1, dword [0x438c00]
xorps xmm0, xmm0
call fcn.00410950
cmp byte [0x43c710], 0
jne 0x402339
mov eax, dword [0x43c0a0]
cmp dword [eax], 0xffffffff
je 0x402339
cmp byte [eax + 4], 0
mov byte [esp + 0x12], 0
jne 0x40233e
mov byte [esp + 0x12], 1
mov esi, dword [0x43c6e8]
mov ecx, dword [esi + 0x1c30]
lea edx, [esi + 0x1c30]
mov eax, ecx
shr eax, 2
test al, 1
jne 0x402380
cmp byte [esp + 0x12], 0
je 0x402385
movss xmm0, dword [esi + 0x1528]
movss dword [esi + 0x2f28], xmm0
mulss xmm0, dword [esi + 0x152c]
movss dword [esi + 0x1528], xmm0
or ecx, 4
mov dword [edx], ecx
push edx
lea ecx, [esi + 0x1d14]
call fcn.004025d0
inc word [esi + 0x2f2c]
xor ecx, ecx
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x30], 0x575b5e46
mov dword [esp + 0x34], 0x1004050
nop word [eax + eax]
mov al, cl
add al, 0x2f
xor byte [esp + ecx + 0x30], al
inc ecx
cmp ecx, 6
jb 0x4023c0
push ecx
lea edx, [esp + 0x28]
mov byte [esp + 0x3b], 0
lea ecx, [esp + 0x34]
call fcn.0042a190
add esp, 4
test al, al
je 0x4023ef
mov byte [0x43c710], 1
mov esi, dword [0x43c6e8]
mov edx, dword [esi + 0x1c30]
dec dword [esi + 0x1d14]
dec word [esi + 0x2f2c]
mov ecx, dword [esi + 0x1d14]
mov eax, dword [esi + 0x1d1c]
shr edx, 2
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x1c30], eax
test dl, 1
je 0x402436
test al, 4
jne 0x402436
mov eax, dword [esi + 0x2f28]
mov dword [esi + 0x1528], eax
cmp byte [0x43c710], 0
je 0x4024d1
call fcn.00402560
mov esi, eax
mov dword [esp + 0x24], 0x1c035c47
mov dword [esp + 0x28], 0x504c56
xor ecx, ecx
mov byte [esp + 0x2c], 1
mov al, cl
add al, 0x2f
xor byte [esp + ecx + 0x24], al
inc ecx
cmp ecx, 7
jb 0x402461
sub esp, 0x18
mov byte [esp + 0x44], 0
mov edx, esp
lea ecx, [esp + 0x3c]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402494
sub ecx, edi
lea eax, [esp + 0x3c]
push ecx
push eax
mov ecx, edx
call fcn.00401ce0
mov ecx, esi
call fcn.0042fc10
mov dword [0x43c098], eax
cmp eax, 4
je 0x4024ca
cmp eax, 2
je 0x4024ca
cmp eax, 1
je 0x4024ca
cmp eax, 3
jne 0x4024d1
mov byte [0x43c710], 0
mov edx, dword [0x43c6e8]
mov eax, dword [edx + 0x1ba8]
cmp byte [eax + 0x8f], 0
jne 0x402517
mov esi, dword [edx + 0x1fb0]
test esi, esi
je 0x402517
movsx eax, word [esi + 0x6c]
mov edi, dword [esp + 0x18]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 8]
mov esi, dword [esp + 0x14]
test byte [eax + ecx*8 + 4], 8
jne 0x402524
mov eax, dword [edx + 0x1ba8]
dec dword [eax + 0xc4]
jmp 0x402524
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
jmp 0x402524
lea edi, [esi + 0x58]
call fcn.0042ce60
call fcn.0040ffe0
cmp byte [edi], 0
jne 0x402554
mov eax, dword [0x43c0a0]
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x402550
push ecx
mov byte [eax + 4], 0
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov byte [esi + 4], 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret