Function at 0x14004a5f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov rdi, rdx
mov rsi, rcx
mov dword [rbp - 0x69], 0x70e15
mov dword [rbp - 0x65], 0x1c232a31
mov dword [rbp - 0x61], 0x383f464d
mov dword [rbp - 0x5d], 0x545b6269
mov dword [rbp - 0x59], 0x70777e85
mov dword [rbp - 0x55], 0x8c939aa1
mov dword [rbp - 0x51], 0xa8afb6bd
mov dword [rbp - 0x4d], 0xc4cbd2d9
mov dword [rbp - 0x49], 0xe0e7eef5
mov dword [rbp - 0x45], 0xfc030a11
mov dword [rbp - 0x41], 0x181f262d
mov dword [rbp - 0x3d], 0x343b4249
mov dword [rbp - 0x39], 0x50575e65
mov dword [rbp - 0x35], 0x6c737a81
mov dword [rbp - 0x31], 0x888f969d
mov dword [rbp - 0x2d], 0xa4abb2b9
mov dword [rbp - 0x29], 0xc0c7ced5
mov dword [rbp - 0x25], 0xdce3eaf1
mov dword [rbp - 0x21], 0xf8ff060d
mov dword [rbp - 0x1d], 0x141b2229
mov dword [rbp - 0x19], 0x30373e45
mov dword [rbp - 0x15], 0x4c535a61
mov dword [rbp - 0x11], 0x686f767d
mov dword [rbp - 0xd], 0x848b9299
mov dword [rbp - 9], 0xa0a7aeb5
mov dword [rbp - 5], 0xbcc3cad1
mov dword [rbp - 1], 0xd8dfe6ed
mov dword [rbp + 3], 0xf4fb0209
mov dword [rbp + 7], 0x10171e25
mov dword [rbp + 0xb], 0x2c333a41
mov dword [rbp + 0xf], 0x484f565d
mov dword [rbp + 0x13], 0x646b7279
mov edx, 4
mov ecx, edx
call fcn.14000ddc0
mov rbx, rax
mov qword [rbp + 0x17], rax
lea r14, [rax + 0x10]
mov qword [rbp + 0x27], r14
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rbp + 0x1f], r14
mov rcx, qword [rdi]
mov eax, dword [rcx]
bswap eax
xor eax, 0xa3b1bac6
mov dword [rbx], eax
mov edx, dword [rcx + 4]
bswap edx
xor edx, 0x56aa3350
mov dword [rbx + 4], edx
mov edx, dword [rcx + 8]
bswap edx
xor edx, 0x677d9197
mov dword [rbx + 8], edx
mov ecx, dword [rcx + 0xc]
bswap ecx
xor ecx, 0xb27022dc
mov dword [rbx + 0xc], ecx
mov r9, qword [rsi + 0x10]
mov rdx, qword [rsi + 8]
mov rcx, r9
sub rcx, rdx
sar rcx, 2
cmp rcx, 0x20
jbe 0x14004a77c
lea rax, [rdx + 0x80]
mov qword [rsi + 0x10], rax
jmp 0x14004a7c5
jae 0x14004a7c5
mov rax, qword [rsi + 0x18]
sub rax, rdx
sar rax, 2
cmp rax, 0x20
jae 0x14004a7a3
lea r8, [rbp + 0x67]
mov edx, 0x20
lea rcx, [rsi + 8]
call fcn.140028750
jmp 0x14004a7c5
mov eax, 0x20
sub rax, rcx
lea r8, [rax*4]
lea rdi, [r8 + r9]
xor edx, edx
mov rcx, r9
call sub.VCRUNTIME140.dll_memset
mov qword [rsi + 0x10], rdi
mov r13d, 5
xor r15d, r15d
lea r12, [0x1400c0e00]
nop word [rax + rax]
lea rax, [r13 - 2]
and eax, 3
lea rdi, [rbx + rax*4]
lea rax, [r13 + 1]
and eax, 3
lea r11, [rbx + rax*4]
mov rax, r13
and eax, 3
lea r9, [rax*4]
mov edx, dword [rbp + r15 - 0x69]
xor edx, dword [rdi]
xor edx, dword [r11]
xor edx, dword [r9 + rbx]
mov eax, edx
shr rax, 0x18
movzx r8d, byte [rax + r12]
shl r8d, 8
mov eax, edx
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12]
or r8d, eax
shl r8d, 8
mov eax, edx
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12]
or r8d, eax
shl r8d, 8
movzx eax, dl
movzx ecx, byte [rax + r12]
or r8d, ecx
lea rax, [r13 - 1]
and eax, 3
lea r10, [rbx + rax*4]
mov ecx, r8d
ror ecx, 0x13
mov eax, r8d
ror eax, 9
xor ecx, eax
xor ecx, r8d
xor dword [r10], ecx
mov ecx, dword [r10]
mov rax, qword [rsi + 8]
mov dword [r15 + rax], ecx
mov edx, dword [rbp + r15 - 0x65]
xor edx, dword [rdi]
xor edx, dword [r11]
xor edx, dword [r10]
mov eax, edx
shr rax, 0x18
movzx r8d, byte [rax + r12]
shl r8d, 8
mov eax, edx
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12]
or r8d, eax
shl r8d, 8
mov eax, edx
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12]
or r8d, eax
shl r8d, 8
movzx eax, dl
movzx ecx, byte [rax + r12]
or r8d, ecx
mov ecx, r8d
ror ecx, 0x13
mov eax, r8d
ror eax, 9
xor ecx, eax
xor ecx, dword [r9 + rbx]
xor ecx, r8d
mov dword [r9 + rbx], ecx
mov rax, qword [rsi + 8]
mov dword [r15 + rax + 4], ecx
mov edx, dword [rbp + r15 - 0x61]
xor edx, dword [rdi]
xor edx, dword [r10]
xor edx, dword [r9 + rbx]
mov eax, edx
shr rax, 0x18
movzx r8d, byte [rax + r12]
shl r8d, 8
mov eax, edx
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12]
or r8d, eax
shl r8d, 8
mov eax, edx
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12]
or r8d, eax
shl r8d, 8
movzx eax, dl
movzx ecx, byte [rax + r12]
or r8d, ecx
mov ecx, r8d
ror ecx, 0x13
mov eax, r8d
ror eax, 9
xor ecx, eax
xor ecx, dword [r11]
xor ecx, r8d
mov dword [r11], ecx
mov rax, qword [rsi + 8]
mov dword [r15 + rax + 8], ecx
lea rax, [r13 + 1]
and eax, 3
mov r8d, dword [rbx + rax*4]
xor r8d, dword [rbp + r15 - 0x5d]
xor r8d, dword [r10]
xor r8d, dword [r9 + rbx]
movzx eax, r8b
movzx r9d, byte [rax + r12]
mov eax, r8d
shr eax, 8
movzx ecx, al
movzx edx, byte [rcx + r12]
mov eax, r8d
shr eax, 0x10
movzx ecx, al
mov eax, r8d
shr rax, 0x18
movzx r8d, byte [rax + r12]
shl r8d, 8
movzx eax, byte [rcx + r12]
or r8d, eax
shl r8d, 8
or r8d, edx
shl r8d, 8
or r8d, r9d
mov ecx, r8d
ror ecx, 0x13
mov eax, r8d
ror eax, 9
xor ecx, eax
xor ecx, r8d
xor ecx, dword [rdi]
mov dword [rdi], ecx
mov rax, qword [rsi + 8]
mov dword [r15 + rax + 0xc], ecx
lea r15, [r15 + 0x10]
add r13, 4
cmp r13, 0x25
jne 0x14004a7e0
sub r14, rbx
sar r14, 2
mov r8d, 4
mov rdx, r14
mov rcx, rbx
call fcn.14000de60
nop
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret