Function at 0x4794a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
mov eax, dword [0x509040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, edx
mov edi, ecx
call fcn.00488150
mov esi, eax
test esi, esi
je 0x479b9e
push edi
push 0x2712
push esi
call fcn.0048ba30
push str.Content_Type:_application_json
push 0
call fcn.004883e0
push eax
push 0x2727
push esi
mov dword [ebp - 0x6c], eax
call fcn.0048ba30
push 1
push 0x2f
push esi
call fcn.0048ba30
push ebx
push 0x271f
push esi
call fcn.0048ba30
push 0x479440
push 0x4e2b
push esi
call fcn.0048ba30
add esp, 0x44
push 0x587acc
push 0x2711
push esi
call fcn.0048ba30
push esi
call fcn.004881b0
add esp, 0x10
test eax, eax
je 0x4795f6
mov cl, 0x3f
mov byte [ebp - 0x24], 0x4d
mov dl, cl
mov byte [ebp - 9], 0x7d
xor cl, byte [ebp - 0x24]
mov al, 8
xor al, byte [ebp - 0x24]
mov ch, 0x6e
mov byte [ebp - 0x23], al
mov dh, 0x74
mov al, byte [ebp - 9]
mov bl, 0x22
mov byte [ebp - 0x22], cl
mov ah, 0x6d
mov cl, byte [ebp - 0x24]
mov bh, 0x79
xor al, cl
mov byte [ebp - 0xa], 0x63
mov byte [ebp - 0x1b], al
xor dl, cl
mov al, byte [ebp - 0xa]
xor dh, cl
xor bl, cl
mov byte [ebp - 0x21], dl
xor ah, cl
mov byte [ebp - 0x1d], dh
xor ch, cl
mov byte [ebp - 0x19], 0
xor bh, cl
mov byte [ebp - 0x1e], ch
xor al, cl
mov byte [ebp - 0x20], bl
sub esp, 0x18
mov byte [ebp - 0x1f], ah
mov edx, esp
mov byte [ebp - 0x1c], bh
xorps xmm0, xmm0
mov byte [ebp - 0x1a], al
lea ecx, [ebp - 0x23]
mov byte [ebp - 0x19], 0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4795b7
sub ecx, edi
lea eax, [ebp - 0x23]
push ecx
push eax
mov ecx, edx
call fcn.0045c380
call fcn.00442680
add esp, 0x18
push dword [ebp - 0x6c]
call fcn.00488460
push esi
call fcn.00488110
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004870f9
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x200002
push esi
call fcn.00488130
add esp, 0xc
cmp dword [ebp - 8], 0x194
jne 0x4796e2
xor ecx, ecx
cmp byte [0x509418], cl
je 0x479679
movaps xmm0, xmmword [0x4fee10]
movups xmmword [ebp - 0x38], xmm0
movaps xmm0, xmmword [0x4fec70]
movups xmmword [ebp - 0x28], xmm0
nop dword [eax]
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0x1e
jb 0x479640
sub esp, 0x18
mov byte [ebp - 0x19], 0
mov edx, esp
lea ecx, [ebp - 0x37]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x479670
jmp 0x4796cc
movaps xmm0, xmmword [0x4ffb70]
movups xmmword [ebp - 0x38], xmm0
mov word [ebp - 0x18], 0x61
movaps xmm0, xmmword [0x4ff9b0]
movups xmmword [ebp - 0x28], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0x20
jb 0x479695
sub esp, 0x18
mov byte [ebp - 0x17], 0
mov edx, esp
lea ecx, [ebp - 0x37]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4796c5
sub ecx, edi
lea eax, [ebp - 0x37]
push ecx
push eax
mov ecx, edx
call fcn.0045c380
call fcn.00442680
add esp, 0x18
cmp dword [ebp - 8], 0x195
jne 0x4797f0
xor ecx, ecx
cmp byte [0x509418], cl
je 0x479771
movaps xmm0, xmmword [0x4ffe10]
movups xmmword [ebp - 0x54], xmm0
mov dword [ebp - 0x24], 0x75263427
movaps xmm0, xmmword [0x4ffc50]
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x20], 0x203b7530
movaps xmm0, xmmword [0x4ff900]
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x1c], 0x3a273038
mov word [ebp - 0x18], 0x26
mov al, byte [ebp - 0x54]
xor byte [ebp + ecx - 0x53], al
inc ecx
cmp ecx, 0x3c
jb 0x479735
sub esp, 0x18
mov byte [ebp - 0x17], 0
mov edx, esp
lea ecx, [ebp - 0x53]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x479765
lea eax, [ebp - 0x53]
jmp 0x4797dd
movaps xmm0, xmmword [0x500280]
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x20], 0x4e49465e
movaps xmm0, xmmword [0x501010]
movups xmmword [ebp - 0x40], xmm0
mov word [ebp - 0x1c], 0x5859
movaps xmm0, xmmword [0x5001e0]
movups xmmword [ebp - 0x30], xmm0
mov byte [ebp - 0x1a], 0
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x35
jb 0x4797a3
sub esp, 0x18
mov byte [ebp - 0x1a], 0
mov edx, esp
lea ecx, [ebp - 0x4f]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4797d3
lea eax, [ebp - 0x4f]
sub ecx, edi
push ecx
push eax
mov ecx, edx
call fcn.0045c380
call fcn.00442680
add esp, 0x18
cmp dword [ebp - 8], 0x196
jne 0x47990e
xor ecx, ecx
cmp byte [0x509418], cl
je 0x47987d
movaps xmm0, xmmword [0x500a70]
movups xmmword [ebp - 0x68], xmm0
mov word [ebp - 0x18], 0x1c
movaps xmm0, xmmword [0x500080]
movups xmmword [ebp - 0x58], xmm0
movaps xmm0, xmmword [0x4feea0]
movups xmmword [ebp - 0x48], xmm0
movaps xmm0, xmmword [0x500020]
movups xmmword [ebp - 0x38], xmm0
movaps xmm0, xmmword [0x500a80]
movups xmmword [ebp - 0x28], xmm0
mov al, byte [ebp - 0x68]
xor byte [ebp + ecx - 0x67], al
inc ecx
cmp ecx, 0x50
jb 0x479844
sub esp, 0x18
mov byte [ebp - 0x17], 0
mov edx, esp
lea ecx, [ebp - 0x67]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x479874
jmp 0x4798f8
movaps xmm0, xmmword [0x500140]
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x28], 0x42115452
movaps xmm0, xmmword [0x5007d0]
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x24], 0x44455045
movaps xmm0, xmmword [str.CX_V]
movups xmmword [ebp - 0x48], xmm0
mov word [ebp - 0x20], 0x1f42
movaps xmm0, xmmword [0x500940]
movups xmmword [ebp - 0x38], xmm0
mov byte [ebp - 0x1e], 0
mov al, byte [ebp - 0x68]
xor byte [ebp + ecx - 0x67], al
inc ecx
cmp ecx, 0x49
jb 0x4798c1
sub esp, 0x18
mov byte [ebp - 0x1e], 0
mov edx, esp
lea ecx, [ebp - 0x67]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4798f1
sub ecx, edi
lea eax, [ebp - 0x67]
push ecx
push eax
mov ecx, edx
call fcn.0045c380
call fcn.00442680
add esp, 0x18
cmp dword [ebp - 8], 0x197
jne 0x4799df
cmp byte [0x509418], 0
je 0x479971
movaps xmm0, xmmword [0x501230]
xor ecx, ecx
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 0x18], 0
mov al, byte [ebp - 0x28]
xor byte [ebp + ecx - 0x27], al
inc ecx
cmp ecx, 0xf
jb 0x479935
sub esp, 0x18
mov byte [ebp - 0x18], 0
mov edx, esp
lea ecx, [ebp - 0x27]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x479965
lea eax, [ebp - 0x27]
jmp 0x4799cc
mov cl, 0x6b
mov dword [ebp - 0x24], 0x1d05226b
mov dword [ebp - 0x20], 0xf02070a
xor eax, eax
mov dword [ebp - 0x1c], 0x120e004b
mov word [ebp - 0x18], 0x45
xor byte [ebp + eax - 0x23], cl
inc eax
cmp eax, 0xc
jae 0x47999f
mov cl, byte [ebp - 0x24]
jmp 0x479990
sub esp, 0x18
mov byte [ebp - 0x17], 0
mov edx, esp
lea ecx, [ebp - 0x23]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4799c2
lea eax, [ebp - 0x23]
sub ecx, edi
push ecx
push eax
mov ecx, edx
call fcn.0045c380
call fcn.00442680
add esp, 0x18
cmp dword [ebp - 8], 0x198
jne 0x479add
xor ecx, ecx
mov byte [ebp - 0x18], 0
cmp byte [0x509418], cl
je 0x479a61
movaps xmm0, xmmword [0x5003e0]
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x24], 0x5958420d
movaps xmm0, xmmword [0x500af0]
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], 0x650d425f
mov dword [ebp - 0x1c], 0x369647a
mov al, byte [ebp - 0x44]
xor byte [ebp + ecx - 0x43], al
inc ecx
cmp ecx, 0x2b
jb 0x479a25
sub esp, 0x18
mov byte [ebp - 0x18], 0
mov edx, esp
lea ecx, [ebp - 0x43]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x479a55
lea eax, [ebp - 0x43]
jmp 0x479aca
movaps xmm0, xmmword [0x501260]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x1c], 0x3e545947
movaps xmm0, xmmword [0x5010d0]
movups xmmword [ebp - 0x3c], xmm0
movaps xmm0, xmmword [0x500920]
movups xmmword [ebp - 0x2c], xmm0
nop dword [eax]
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x33
jb 0x479a90
sub esp, 0x18
mov byte [ebp - 0x18], 0
mov edx, esp
lea ecx, [ebp - 0x4b]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x479ac0
lea eax, [ebp - 0x4b]
sub ecx, edi
push ecx
push eax
mov ecx, edx
call fcn.0045c380
call fcn.00442680
add esp, 0x18
cmp dword [ebp - 8], 0xc8
jne 0x4795d4
sub esp, 0x18
cmp byte [0x509418], 0
mov ecx, esp
push 0x587acc
je 0x479b55
call fcn.0045bc70
call fcn.00442720
movaps xmm0, xmmword [0x5007f0]
add esp, 0x18
movups xmmword [ebp - 0x38], xmm0
xor ecx, ecx
mov byte [ebp - 0x18], 0
movaps xmm0, xmmword [str.GYRO]
movups xmmword [ebp - 0x28], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0x1f
jb 0x479b26
sub esp, 0x18
mov byte [ebp - 0x18], 0
mov ecx, esp
lea eax, [ebp - 0x37]
push eax
call fcn.0045bc30
call fcn.00442720
add esp, 0x18
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.0045bc70
call fcn.00442720
movaps xmm0, xmmword [0x501000]
add esp, 0x18
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0x7a3b697e
xor ecx, ecx
mov dword [ebp - 0x1c], 0x75727a7c
mov word [ebp - 0x18], 0x35
mov al, byte [ebp - 0x30]
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 0x18
jb 0x479b83
sub esp, 0x18
mov byte [ebp - 0x17], 0
mov ecx, esp
lea eax, [ebp - 0x2f]
jmp 0x479b3f
mov cl, 0x56
mov byte [ebp - 0x24], 0x24
mov dl, cl
mov byte [ebp - 0xa], 0x15
xor cl, byte [ebp - 0x24]
mov al, 0x61
xor al, byte [ebp - 0x24]
mov ch, 7
mov byte [ebp - 0x23], al
mov dh, 0x1d
mov al, byte [ebp - 0xa]
mov bl, 0x4b
mov byte [ebp - 0x22], cl
mov ah, 4
mov cl, byte [ebp - 0x24]
mov bh, 0x10
xor al, cl
mov byte [ebp - 9], 0xa
mov byte [ebp - 0x1b], al
xor dl, cl
mov al, byte [ebp - 9]
xor dh, cl
xor bl, cl
mov byte [ebp - 0x21], dl
xor ah, cl
mov byte [ebp - 0x1d], dh
xor ch, cl
mov byte [ebp - 0x19], 0
xor bh, cl
mov byte [ebp - 0x1e], ch
xor al, cl
mov byte [ebp - 0x20], bl
sub esp, 0x18
mov byte [ebp - 0x1f], ah
mov edx, esp
mov byte [ebp - 0x1c], bh
xorps xmm0, xmm0
mov byte [ebp - 0x1a], al
lea ecx, [ebp - 0x23]
mov byte [ebp - 0x19], 0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x479c20
sub ecx, esi
lea eax, [ebp - 0x23]
push ecx
push eax
mov ecx, edx
call fcn.0045c380
call fcn.00442680
mov ecx, dword [ebp - 4]
add esp, 0x18
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.004870f9
mov esp, ebp
pop ebp
ret