Function at 0x140049310
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x140cec080]
xor rax, rsp
mov qword [rbp - 0x10], rax
movdqa xmm0, xmmword [0x140cce4d0]
xor ebx, ebx
mov rdi, rcx
mov dword [rbp - 0x20], 0x4652715d
movdqu xmmword [rbp - 0x30], xmm0
mov ecx, ebx
mov dword [rbp - 0x1c], 0x100465c
nop
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x16
jb 0x140049350
mov rsi, 0xffffffffffffffff
mov byte [rbp - 0x19], bl
mov rax, rsi
lea rcx, [rbp - 0x30]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049371
cmp qword [rdi + 0x18], 0x10
mov rcx, rdi
jb 0x140049386
mov rcx, qword [rdi]
mov rdx, qword [rdi + 0x10]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x88], r14
xor r8d, r8d
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x20], rax
call fcn.140036ac0
cmp rax, rsi
jne 0x14004985b
movdqa xmm0, xmmword [0x140ccd4e0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x20], 1
nop dword [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xf
jb 0x1400493d0
mov r15, qword [rdi + 0x10]
lea rcx, [rbp - 0x30]
mov r14, qword [rdi + 0x18]
mov rax, rsi
mov byte [rbp - 0x20], bl
inc rax
cmp byte [rcx + rax], bl
jne 0x1400493f2
mov rcx, rdi
cmp r14, 0x10
jb 0x140049406
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004985b
mov dword [rbp - 0x30], 0x4344524b
mov rcx, rbx
mov dword [rbp - 0x2c], 0x43575150
mov word [rbp - 0x28], 0x100
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 8
jb 0x140049440
mov byte [rbp - 0x27], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049460
mov rcx, rdi
cmp r14, 0x10
jb 0x140049474
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004985b
movdqa xmm0, xmmword [0x140ccd4d0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x20], 1
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xf
jb 0x1400494b0
mov byte [rbp - 0x20], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x1400494d0
mov rcx, rdi
cmp r14, 0x10
jb 0x1400494e4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004985b
movdqa xmm0, xmmword [0x140ccecb0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x5170424a
mov dword [rbp - 0x1c], 0x475b47
mov byte [rbp - 0x18], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x17
jb 0x140049530
mov byte [rbp - 0x18], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049550
mov rcx, rdi
cmp r14, 0x10
jb 0x140049564
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004985b
movdqa xmm0, xmmword [0x140cce850]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x70484240
mov dword [rbp - 0x1c], 0x756a4c5c
mov word [rbp - 0x18], 0x100
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x18
jb 0x1400495b0
mov byte [rbp - 0x17], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x1400495d0
mov rcx, rdi
cmp r14, 0x10
jb 0x1400495e4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004985b
movdqa xmm0, xmmword [0x140cce4a0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x6e5e5d
mov byte [rbp - 0x1c], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x13
jb 0x140049620
mov byte [rbp - 0x1c], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049640
mov rcx, rdi
cmp r14, 0x10
jb 0x140049654
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004985b
movdqa xmm0, xmmword [0x140ccf270]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x20], WSAGetLastError
mov byte [rbp - 0x1e], 1
nop dword [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x140049690
mov byte [rbp - 0x1e], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x1400496b0
mov rcx, rdi
cmp r14, 0x10
jb 0x1400496c4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004985b
movdqa xmm0, xmmword [0x140ccf670]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x8a8985a1
mov dword [rbp - 0x1c], 0x998c80a4
mov dword [rbp - 0x18], 0xaeb39f
mov byte [rbp - 0x14], 1
nop word [rax + rax]
lea eax, [rcx - 0x2d]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x140049710
mov byte [rbp - 0x14], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049730
mov rcx, rdi
cmp r14, 0x10
jb 0x140049744
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004985b
movdqa xmm0, xmmword [0x140cce7a0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x5a725c43
mov dword [rbp - 0x1c], 0x69414756
mov word [rbp - 0x18], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x16], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x19
jb 0x140049790
mov byte [rbp - 0x16], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x1400497b0
mov rcx, rdi
cmp r14, 0x10
jb 0x1400497c4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004985b
movdqa xmm0, xmmword [0x140cce4c0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x4a5e7242
mov dword [rbp - 0x1c], 0x100776c
nop dword [rax + rax]
lea eax, [rbx + 0x1f]
xor byte [rbp + rbx - 0x30], al
inc rbx
cmp rbx, 0x16
jb 0x140049800
mov byte [rbp - 0x19], 0
lea rax, [rbp - 0x30]
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140049820
mov rcx, rdi
cmp r14, 0x10
jb 0x140049835
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, 0xffffffffffffffff
jne 0x14004985b
mov rcx, rdi
call fcn.14002ca90
xor al, al
jmp 0x140049865
mov rcx, rdi
call fcn.14002ca90
mov al, 1
mov r15, qword [rsp + 0x90]
mov r14, qword [rsp + 0x88]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.140138a50
mov rbx, qword [rsp + 0x98]
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret