Function at 0x140002e30
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], rbx
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140007040]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor ecx, ecx
mov eax, 1
cpuid
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x4c], ebx
mov dword [rbp - 0x44], edx
test ecx, ecx
jns 0x14000305b
xor ecx, ecx
mov qword [r11 + 8], rsi
mov eax, 0x40000000
mov qword [r11 + 0x10], rdi
cpuid
mov esi, ecx
mov dword [rbp - 0x50], eax
mov ecx, 0xd
mov edi, edx
call fcn.140003d0c
xor ecx, ecx
mov dword [rbp - 0x50], 0x5e594559
mov r8, rax
mov dword [rbp - 0x4c], 0x4f535a40
mov dword [rbp - 0x48], 0x1d1c1b57
mov edx, ecx
mov dword [rax + 4], esi
mov rsi, qword [rsp + 0x80]
mov dword [rax + 8], edi
mov rdi, qword [rsp + 0x88]
mov dword [rax], ebx
mov byte [rax + 0xc], 0
mov word [rbp - 0x44], pe_nt_image_headers64
nop
lea eax, [rdx + 0x12]
xor byte [rbp + rdx - 0x50], al
inc rdx
cmp rdx, 0xc
jb 0x140002ed0
lea rax, [rbp - 0x50]
mov dword [rbp - 0x50], 0x67777a5f
mov qword [rbp - 0x40], rax
mov rdx, rcx
mov dword [rbp - 0x4c], 0x7f776479
mov dword [rbp - 0x48], 0x6b543b6e
mov word [rbp - 0x44], pe_nt_image_headers64
nop word [rax + rax]
lea eax, [rdx + 0x12]
xor byte [rbp + rdx - 0x50], al
inc rdx
cmp rdx, 0xc
jb 0x140002f10
lea rax, [rbp - 0x50]
mov dword [rbp - 0x50], 0x74635e44
mov qword [rbp - 0x38], rax
mov rdx, rcx
mov dword [rbp - 0x4c], 0x544e7264
mov dword [rbp - 0x48], 0x786e7a6d
mov word [rbp - 0x44], pe_nt_image_headers64
nop word [rax + rax]
lea eax, [rdx + 0x12]
xor byte [rbp + rdx - 0x50], al
inc rdx
cmp rdx, 0xc
jb 0x140002f50
lea rax, [rbp - 0x50]
mov dword [rbp - 0x50], 0x437a764a
mov qword [rbp - 0x30], rax
mov rdx, rcx
mov dword [rbp - 0x4c], 0x7c405a5b
mov dword [rbp - 0x48], 0x50514d74
mov word [rbp - 0x44], pe_nt_image_headers64
nop word [rax + rax]
lea eax, [rdx + 0x12]
xor byte [rbp + rdx - 0x50], al
inc rdx
cmp rdx, 0xc
jb 0x140002f90
lea rax, [rbp - 0x50]
mov dword [rbp - 0x50], 0x35786162
mov qword [rbp - 0x28], rax
mov rdx, rcx
mov dword [rbp - 0x4c], 0x7c686e7e
mov dword [rbp - 0x48], 0x3d3c6d68
mov word [rbp - 0x44], pe_nt_image_headers64
nop word [rax + rax]
lea eax, [rdx + 0x12]
xor byte [rbp + rdx - 0x50], al
inc rdx
cmp rdx, 0xc
jb 0x140002fd0
lea rax, [rbp - 0x50]
mov dword [rbp - 0x50], 0x6d7b5144
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x4c], 0x61775540
mov dword [rbp - 0x48], 0x6573594c
mov word [rbp - 0x44], pe_nt_image_headers64
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x12]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x140003010
lea rax, [rbp - 0x50]
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x40]
nop dword [rax]
mov rdx, qword [rcx]
mov rax, qword [rdx]
cmp rax, qword [r8]
jne 0x14000304e
mov eax, dword [rdx + 8]
cmp eax, dword [r8 + 8]
jne 0x14000304e
movzx eax, byte [rdx + 0xc]
cmp al, byte [r8 + 0xc]
je 0x140003077
add rcx, 8
lea rax, [rbp - 0x10]
cmp rcx, rax
jne 0x140003030
xor al, al
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.140003ca0
mov rbx, qword [rsp + 0x90]
add rsp, 0x70
pop rbp
ret
call fcn.140001940
mov al, 1
jmp 0x14000305d