Function at 0x1400489b0
Capabilities:
Accept command line arguments
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x14012d228]
xor rax, rsp
mov qword [rbp + 0x58], rax
mov rbx, r8
mov qword [rsp + 0x40], rbx
mov r9, rdx
xor ecx, ecx
mov r14d, ecx
mov dword [rsp + 0x24], ecx
mov rax, qword [r8 + 8]
sub rax, qword [r8]
cmp rax, 0x40
jb 0x140049231
test rdx, rdx
je 0x140049231
mov dword [rsp + 0x28], ecx
lea rdx, [rsp + 0x28]
mov rcx, r9
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rdi, rax
mov qword [rsp + 0x38], rax
test rax, rax
je 0x140049231
xor r9d, r9d
mov esi, r9d
mov dword [rsp + 0x30], r9d
cmp dword [rsp + 0x28], r9d
jle 0x140048fea
mov dword [rsp + 0x58], r9d
lea rax, [0x14012f050]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 8]
call fcn.140046080
nop
mov cl, 1
call fcn.14005c8c0
mov qword [rsp + 0x50], rax
mov rdx, qword [rdi]
xor r12d, r12d
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r12w
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], r12w
jne 0x140048aa0
lea rcx, [rbp - 0x28]
call fcn.140004260
nop
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rdx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x18]
lea r9, [rdx + rax*2]
lea rax, [rbp - 0x28]
cmovae rax, qword [rbp - 0x28]
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r12w
mov qword [rsp + 0x68], r9
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x48]
mov qword [rbp - 0x80], rax
xor r9d, r9d
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x68]
call fcn.14003eca0
mov r14d, 2
mov dword [rsp + 0x24], r14d
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x140048b66
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048b61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049266
call fcn.14005a920
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r12w
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140048baa
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140029715.0]
mov r8, rax
test rax, rax
je 0x140048baa
mov rcx, qword [rax]
mov rax, qword [rcx]
mov edx, 1
mov rcx, r8
call qword [case.0x140029715.0]
cmp dword [rsp + 0x58], 0
jne 0x140048f4b
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rcx, qword [rbp - 0x68]
lea rdx, str..exe
call fcn.1400bb620
test rax, rax
je 0x140048f4b
lea rdx, [rbp - 0x68]
mov r8, qword [rbp - 0x68]
mov r9, qword [rbp - 0x50]
cmp r9, 8
cmovae rdx, r8
mov rdi, qword [rbp - 0x58]
test rdi, rdi
je 0x140048c27
lea rcx, [rdi - 1]
mov rax, rdi
cmp rcx, rdi
cmovb rax, rcx
lea rbx, [rdx + rax*2]
cmp word [rbx], 0x5c
je 0x140048c1f
nop dword [rax]
cmp rbx, rdx
je 0x140048c27
sub rbx, 2
cmp word [rbx], 0x5c
jne 0x140048c10
sub rbx, rdx
sar rbx, 1
jmp 0x140048c2e
mov rbx, 0xffffffffffffffff
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
lea rsi, [rbp - 0x68]
cmp r9, 8
cmovae rsi, r8
cmp rdi, 8
jae 0x140048c66
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x48], xmm0
mov r15, rdi
mov qword [rbp - 0x38], rdi
mov r14d, 7
mov r13, qword [rbp - 0x48]
jmp 0x140048cc5
mov r14, rdi
or r14, 7
movabs rax, 0x7ffffffffffffffe
cmp r14, rax
cmova r14, rax
lea rcx, [r14 + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14004926c
lfence
add rcx, rcx
call fcn.140004450
mov r13, rax
mov qword [rbp - 0x48], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.1400bac40
mov r15, rdi
mov qword [rbp - 0x38], rdi
mov rdi, qword [rbp - 0x58]
mov qword [rbp - 0x30], r14
cmp rbx, 0xffffffffffffffff
je 0x140048d85
mov r8, rdi
sub r8, rbx
inc rbx
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x48], r12
mov qword [rbp + 0x50], 7
cmp rdi, rbx
jb 0x140049272
lfence
mov rax, qword [rbp - 0x58]
sub rax, rbx
cmp rax, r8
cmovb r8, rax
lea rax, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rax, qword [rbp - 0x68]
lea rdx, [rax + rbx*2]
lea rcx, [rbp + 0x38]
call fcn.140004260
mov dword [rsp + 0x24], 6
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x140048d69
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048d64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049278
call fcn.14005a920
movups xmm0, xmmword [rbp + 0x38]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rbp + 0x48]
movups xmmword [rbp - 0x38], xmm1
mov r14, qword [rbp - 0x30]
mov r15, qword [rbp - 0x38]
mov r13, qword [rbp - 0x48]
mov cl, 1
call fcn.14005c8c0
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 8]
mov rdi, qword [rbp - 8]
mov r12, qword [rbp + 0x10]
cmp r12, 8
cmovae rcx, rdi
mov rdx, qword [rbp + 8]
lea rbx, [rcx + rdx*2]
lea rsi, [rbp - 8]
cmovae rsi, rdi
cmp rsi, rbx
je 0x140048dfa
nop dword [rax]
movzx edi, word [rsi]
lea rcx, [rbp - 0x78]
call fcn.14003fc10
mov r8, rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x40]
movzx edx, di
mov rcx, r8
call qword [case.0x140029715.0]
mov word [rsi], ax
add rsi, 2
cmp rsi, rbx
jne 0x140048dc0
mov r12, qword [rbp + 0x10]
mov rdx, qword [rbp + 8]
mov rdi, qword [rbp - 8]
lea r11, [rbp - 0x48]
cmp r14, 8
cmovae r11, r13
lea rsi, [rbp - 8]
cmp r12, 8
cmovae rsi, rdi
cmp r15, rdx
ja 0x140048ebc
test r15, r15
jne 0x140048e29
xor esi, esi
mov ebx, esi
jmp 0x140048ec5
sub rdx, r15
lea rax, [rdx + 1]
lea rax, [rsi + rax*2]
mov qword [rsp + 0x30], rax
mov rbx, rsi
movzx r10d, word [r11]
sub rax, rbx
sar rax, 1
mov ecx, 0
je 0x140048e69
cmp word [rbx], r10w
je 0x140048e66
cmp rax, 1
je 0x140048e69
dec rax
add rbx, 2
cmp word [rbx], r10w
jne 0x140048e53
mov rcx, rbx
mov rbx, rcx
test rcx, rcx
je 0x140048ebc
mov r8, r15
mov rax, r11
movzx ecx, word [rcx]
movzx edx, r10w
cmp cx, r10w
jb 0x140048ea9
mov r9, rbx
sub r9, r11
cmp cx, dx
ja 0x140048ea9
cmp r8, 1
je 0x140048eb4
dec r8
add rax, 2
movzx ecx, word [rax + r9]
movzx edx, word [rax]
cmp cx, dx
jae 0x140048e8d
add rbx, 2
mov rax, qword [rsp + 0x30]
jmp 0x140048e40
sub rbx, rsi
sar rbx, 1
jmp 0x140048ec3
mov rbx, 0xffffffffffffffff
xor esi, esi
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x140048ef8
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140029715.0]
mov r8, rax
test rax, rax
je 0x140048ef8
mov rcx, qword [rax]
mov rax, qword [rcx]
mov edx, 1
mov rcx, r8
call qword [case.0x140029715.0]
nop
cmp rbx, 0xffffffffffffffff
setne sil
mov dword [rsp + 0x30], esi
cmp r14, 8
jb 0x140048f3f
lea rdx, [r14*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x140048f37
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004927e
mov rcx, r13
call fcn.14005a920
mov rbx, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x24]
jmp 0x140048f53
mov r12, qword [rbp + 0x10]
mov rdi, qword [rbp - 8]
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140048f93
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048f8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049284
call fcn.14005a920
xor r9d, r9d
mov qword [rbp - 0x58], r9
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r9w
cmp r12, 8
jb 0x140048fe5
lea rdx, [r12*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140048fda
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004928a
mov rcx, rdi
call fcn.14005a920
xor r9d, r9d
mov rdi, qword [rsp + 0x38]
mov byte [rsp + 0x20], 0
mov r13, qword [rbx]
mov rax, qword [rbx + 8]
mov qword [rsp + 0x48], rax
cmp r13, rax
je 0x14004921f
mov r8d, esi
mov qword [rsp + 0x40], r8
movabs rbx, 0xcbf29ce484222325
nop word [rax + rax]
mov rcx, qword [r13 + 0x10]
add rcx, r8
movsxd rdx, dword [rsp + 0x28]
cmp rcx, rdx
jne 0x140049202
mov r12d, esi
cmp esi, edx
jge 0x14004921a
lea r15, [rdi + r8*8]
mov rdx, qword [r15]
test rdx, rdx
je 0x140049172
mov qword [rbp + 0x18], r9
mov qword [rbp + 0x28], r9
mov qword [rbp + 0x30], 7
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140049070
lea rcx, [rbp + 0x18]
call fcn.140004260
or r14d, 1
mov dword [rsp + 0x24], r14d
lea r8, [rbp + 0x18]
mov r11, qword [rbp + 0x18]
mov rsi, qword [rbp + 0x30]
cmp rsi, 8
cmovae r8, r11
mov rcx, rbx
mov rbx, qword [rbp + 0x28]
lea r9, [rbx + rbx]
xor eax, eax
mov edx, eax
test r9, r9
je 0x1400490d8
movabs rsi, 0x100000001b3
nop
movzx eax, byte [rdx + r8]
xor rcx, rax
imul rcx, rsi
inc rdx
cmp rdx, r9
jb 0x1400490c0
mov rsi, qword [rbp + 0x30]
and rcx, qword [r13 + 0x30]
add rcx, rcx
mov rax, qword [r13 + 0x18]
mov r10, qword [rax + rcx*8 + 8]
mov r14, qword [r13 + 8]
cmp r10, r14
je 0x14004917a
mov rdi, qword [rax + rcx*8]
nop dword [rax]
lea rax, [r10 + 0x10]
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140049112
mov rax, qword [rax]
lea r9, [rbp + 0x18]
cmp rsi, 8
cmovae r9, r11
cmp rbx, rcx
jne 0x140049159
mov r8, rbx
test rbx, rbx
je 0x140049164
movzx ecx, word [r9]
movzx edx, word [rax]
cmp cx, dx
jb 0x140049159
sub r9, rax
cmp cx, dx
ja 0x140049159
cmp r8, 1
je 0x140049164
dec r8
add rax, 2
movzx ecx, word [rax + r9]
movzx edx, word [rax]
cmp cx, dx
jae 0x14004913d
cmp r10, rdi
je 0x14004917a
mov r10, qword [r10 + 8]
jmp 0x140049100
test r10, r10
je 0x14004917a
cmp r10, r14
je 0x14004917a
xor bl, bl
jmp 0x14004917c
mov rsi, qword [rbp + 0x30]
mov r11, qword [rbp + 0x18]
mov bl, 1
mov r14d, dword [rsp + 0x24]
test r14b, 1
je 0x1400491cb
and r14d, 0xfffffffe
mov dword [rsp + 0x24], r14d
cmp rsi, 8
jb 0x1400491cb
lea rdx, [rsi*2 + 2]
mov rax, r11
cmp rdx, 0x1000
jb 0x1400491c3
add rdx, 0x27
mov r11, qword [r11 - 8]
sub rax, r11
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049260
mov rcx, r11
call fcn.14005a920
test bl, bl
jne 0x1400491ef
inc r12d
add r15, 8
cmp r12d, dword [rsp + 0x28]
jge 0x14004921a
xor r9d, r9d
movabs rbx, 0xcbf29ce484222325
jmp 0x140049044
mov esi, dword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
movabs rbx, 0xcbf29ce484222325
add r13, 0x40
cmp r13, qword [rsp + 0x48]
je 0x14004921f
mov rdi, qword [rsp + 0x38]
xor r9d, r9d
jmp 0x140049020
mov byte [rsp + 0x20], 1
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
movzx eax, byte [rsp + 0x20]
jmp 0x140049233
xor al, al
mov rcx, qword [rbp + 0x58]
xor rcx, rsp
call fcn.14005aef0
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400bf5d0
nop
call fcn.1400bf5d0
nop
call fcn.140001ea0
nop
call fcn.14000afa0
int3
call fcn.1400bf5d0
nop
call fcn.1400bf5d0
nop
call fcn.1400bf5d0
nop
call fcn.1400bf5d0
int3