Function at 0x1000ace0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10045cb8
mov eax, dword fs:[0]
push eax
sub esp, 0x64
mov eax, dword [0x100571c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x70], 0
call fcn.1001b2b0
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test al, al
jne 0x1000ad95
call fcn.1001b360
test al, al
jne 0x1000ad95
mov edx, 0xd9
xor ecx, ecx
mov al, byte [ecx + 0x100507d0]
xor al, dl
mov byte [ebp + ecx - 0x20], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xd
jb 0x1000ad31
push 0
lea eax, [ebp - 0x20]
mov byte [ebp - 0x13], 0
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x1000ad95
mov eax, str.r_jaajkmfg
lea ecx, [ebp - 0x6c]
sub eax, 0x3ed419b4
push eax
call fcn.10012f30
push eax
call ebx
test eax, eax
jne 0x1000ad95
mov eax, str.zGINS_nAJK
lea ecx, [ebp - 0x2c]
sub eax, 0x13b12eb4
push eax
call fcn.10012f70
push eax
call ebx
test eax, eax
jne 0x1000ad95
xor al, al
jmp 0x1000ad97
mov al, 1
test al, al
je 0x1000ade8
mov edx, 0xe8
xor ecx, ecx
mov al, byte [ecx + 0x100507f8]
xor al, dl
mov byte [ebp + ecx - 0x58], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x2a
jb 0x1000ada2
mov byte [ebp - 0x2e], 0
push 0x1388
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 0
push eax
push ecx
mov edx, 2
mov ecx, 0x1019e0a8
call fcn.1001c800
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp byte [0x1019d8d8], 0
je 0x1000ae12
mov al, byte [0x1019d8db]
test al, al
je 0x1000ae6f
cmp byte [0x1019d8dc], 0
je 0x1000ae6b
cmp byte [0x1019d8d9], 0
jne 0x1000af9b
jmp 0x1000ae6b
mov edx, 0x7b
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + str.__5_:]
xor al, dl
mov byte [ebp + ecx - 0x60], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x30
jb 0x1000ae20
mov byte [ebp - 0x30], 0
push 0x1388
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 1
push eax
push ecx
mov edx, 2
mov ecx, 0x1019e0a8
call fcn.1001c800
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov al, byte [0x1019d8db]
test al, al
jne 0x1000aec6
mov edx, 0x6f
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + str.4_9_651_3__8_411]
xor al, dl
mov byte [ebp + ecx - 0x60], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x31
jb 0x1000ae80
mov byte [ebp - 0x2f], 0
push 0x1388
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 2
push eax
push ecx
mov edx, 2
mov ecx, 0x1019e0a8
call fcn.1001c800
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp byte [0x1019d8d9], 0
je 0x1000af26
mov edx, 0xb5
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + 0x1005088c]
xor al, dl
mov byte [ebp + ecx - 0x60], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x32
jb 0x1000aee0
mov byte [ebp - 0x2e], 0
push 0x1388
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 3
push eax
push ecx
mov edx, 2
mov ecx, 0x1019e0a8
call fcn.1001c800
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp byte [0x1019d8dc], 0
jne 0x1000af86
mov edx, 0x70
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + str._:_142___.___70]
xor al, dl
mov byte [ebp + ecx - 0x60], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x2f
jb 0x1000af40
mov byte [ebp - 0x31], 0
push 0x1388
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 4
push eax
push ecx
mov edx, 2
mov ecx, 0x1019e0a8
call fcn.1001c800
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp dword [pe_dos_header]
mov edx, 0x2d
xor ecx, ecx
mov al, byte [ecx + str.ZICcFSCv_PQ_KI]
xor al, dl
mov byte [ebp + ecx - 0x20], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xe
jb 0x1000afa2
mov esi, str._8____
mov byte [ebp - 0x12], 0
sub esi, 0x365e22f2
lea ecx, [ebp - 0x2c]
push esi
call fcn.10012e40
lea ecx, [ebp - 0x20]
push ecx
push eax
call ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call ebx
test eax, eax
je 0x1000aff3
cmp byte [0x1019d8d1], 0
jne 0x1000aff3
mov al, 1
jmp 0x1000aff5
xor al, al
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
test al, al
je 0x1000b0d8
mov edx, 0x2d
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + str.ZICcFSCv_PQ_KI]
xor al, dl
mov byte [ebp + ecx - 0x20], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xe
jb 0x1000b010
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x12], 0
call fcn.10012e40
lea ecx, [ebp - 0x20]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call ebx
mov byte [ebp - 0x24], 0
xorps xmm0, xmm0
movq qword [ebp - 0x2c], xmm0
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x18], 0
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
test eax, eax
je 0x1000b0d8
cmp byte [eax], 0xe9
jne 0x1000b0d8
push 0x3449d026
lea ecx, [ebp - 0x2c]
call fcn.10012d20
mov ecx, eax
call fcn.1001b560
push 0x1f4
call edi
push 0x49290e2c
lea ecx, [ebp - 0x2c]
call fcn.10012db0
mov ecx, eax
call fcn.1001b560
push 0x1f4
call edi
push 0x348caa81
lea ecx, [ebp - 0x5c]
call fcn.10012eb0
push 0x1388
push eax
push ecx
mov edx, 2
mov dword [ebp - 4], 5
mov ecx, 0x1019e0a8
call fcn.1001c800
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1019fc38]
cmp byte [eax], 0xe9
je 0x1000b10e
mov eax, dword [0x1019fc50]
cmp byte [eax], 0xe9
je 0x1000b10e
mov eax, dword [0x1019fc64]
cmp byte [eax], 0xe9
je 0x1000b10e
mov eax, fcn.100062a0
cmp byte [eax], 0xe9
je 0x1000b10e
mov eax, 0x10006780
cmp byte [eax], 0xe9
jne 0x1000b18f
push 0x3449d026
lea ecx, [ebp - 0x2c]
call fcn.10012d20
mov ecx, eax
call fcn.1001b560
push 0x1f4
call edi
push 0x49290e2c
lea ecx, [ebp - 0x2c]
call fcn.10012db0
mov ecx, eax
call fcn.1001b560
push 0x1f4
call edi
mov edx, 0x8c
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x100508f0]
xor al, dl
mov byte [ebp + ecx - 0x5c], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x2e
jb 0x1000b150
mov byte [ebp - 0x2e], 0
push 0x1388
lea eax, [ebp - 0x5c]
mov dword [ebp - 4], 6
push eax
push ecx
mov edx, 2
mov ecx, 0x1019e0a8
call fcn.1001c800
add esp, 0xc
mov dword [0x1019d8d8], 0
mov byte [0x1019d8dc], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10027e1f
mov esp, ebp
pop ebp
ret