Function at 0x14004dfe0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rbp
push rbx
push rdi
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x140cf0080]
xor rax, rsp
mov qword [rbp - 0x10], rax
cmp qword [rcx + 0x18], 0x10
mov rdi, rcx
mov r8, qword [rcx + 0x10]
mov rbx, rcx
jb 0x14004e00d
mov rbx, qword [rcx]
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], r15
test r8, r8
je 0x14004e049
mov edx, 0x2f
mov rcx, rbx
call fcn.14013dbec
test rax, rax
je 0x14004e049
sub rax, rbx
cmp rax, 0xffffffffffffffff
jne 0x14004e8c3
xor ebx, ebx
mov dword [rbp - 0x30], 0x4353414f
mov ecx, ebx
mov dword [rbp - 0x2c], 0x52504c40
mov word [rbp - 0x28], 0x42
mov byte [rbp - 0x26], 1
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 9
jb 0x14004e070
mov r15, qword [rdi + 0x10]
lea rcx, [rbp - 0x30]
mov r14, qword [rdi + 0x18]
mov rsi, 0xffffffffffffffff
mov rax, rsi
mov byte [rbp - 0x26], bl
nop dword [rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e0a0
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e0b4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8c3
mov dword [rbp - 0x30], 0x84928f
mov rcx, rbx
mov byte [rbp - 0x2c], 1
nop
lea eax, [rcx - 0x27]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 3
jb 0x14004e0e0
mov byte [rbp - 0x2c], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e100
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e114
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
mov dword [rbp - 0x30], 0x43534952
mov rcx, rbx
mov dword [rbp - 0x2c], 0x1004b47
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 6
jb 0x14004e150
mov byte [rbp - 0x29], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e170
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e184
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
mov dword [rbp - 0x30], 0x43534952
mov rcx, rbx
mov dword [rbp - 0x2c], 0x4a674b47
mov dword [rbp - 0x28], 0x1004d52
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xa
jb 0x14004e1c0
mov byte [rbp - 0x25], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e1e0
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e1f4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
mov dword [rbp - 0x30], 0x43534952
mov rcx, rbx
mov dword [rbp - 0x2c], 0x43774b47
mov word [rbp - 0x28], 0x43
mov byte [rbp - 0x26], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 9
jb 0x14004e230
mov byte [rbp - 0x26], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e250
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e264
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
mov dword [rbp - 0x30], 0x47554168
mov rcx, rbx
mov dword [rbp - 0x2c], 0x4a757b51
mov dword [rbp - 0x28], 0x4c4646
mov byte [rbp - 0x24], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xb
jb 0x14004e2a0
mov byte [rbp - 0x24], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e2c0
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e2d4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
mov dword [rbp - 0x30], 0x4354515e
mov rcx, rbx
mov dword [rbp - 0x2c], 0x4a4c4571
mov word [rbp - 0x28], 0x100
nop dword [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 8
jb 0x14004e310
mov byte [rbp - 0x27], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e330
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e344
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
mov dword [rbp - 0x30], 0xa5b5b58b
mov rcx, rbx
mov word [rbp - 0x2c], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x27]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 4
jb 0x14004e380
mov byte [rbp - 0x2b], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e3a0
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e3b4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
mov dword [rbp - 0x30], 0x52544f5c
mov rcx, rbx
mov word [rbp - 0x2c], 0x46
mov byte [rbp - 0x2a], 1
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 5
jb 0x14004e3f0
mov byte [rbp - 0x2a], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e410
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e424
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
mov dword [rbp - 0x30], 0x4942494f
mov rcx, rbx
mov dword [rbp - 0x2c], 0x167a5476
mov dword [rbp - 0x28], 0x6a7710
mov byte [rbp - 0x24], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xb
jb 0x14004e460
mov byte [rbp - 0x24], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e480
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e494
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
movdqa xmm0, xmmword [0x140cd3bb0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x20], 0x6c
mov byte [rbp - 0x1e], 1
nop dword [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x14004e4d0
mov byte [rbp - 0x1e], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e4f0
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e504
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
movdqa xmm0, xmmword [0x140cd31f0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x5e427941
mov dword [rbp - 0x1c], 0x69515a52
mov word [rbp - 0x18], 0x74
mov byte [rbp - 0x16], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x19
jb 0x14004e550
mov byte [rbp - 0x16], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e570
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e584
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
mov dword [rbp - 0x30], 0x43454153
mov rcx, rbx
mov dword [rbp - 0x2c], 0x47534d6d
mov word [rbp - 0x28], 0x78
mov byte [rbp - 0x26], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 9
jb 0x14004e5c0
mov byte [rbp - 0x26], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e5e0
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e5f4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
movdqa xmm0, xmmword [0x140cd2c20]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x1007370
nop dword [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x12
jb 0x14004e630
mov byte [rbp - 0x1d], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e650
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e664
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
movdqa xmm0, xmmword [0x140cd3910]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x20], 0x100
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x10
jb 0x14004e6a0
mov byte [rbp - 0x1f], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e6c0
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e6d4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
mov dword [rbp - 0x30], 0x727e705d
mov rcx, rbx
mov dword [rbp - 0x2c], 0x49574157
mov dword [rbp - 0x28], 0x585c4954
mov dword [rbp - 0x24], 0x1006f74
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xe
jb 0x14004e710
mov byte [rbp - 0x21], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e730
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e744
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
movdqa xmm0, xmmword [0x140cd2a70]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x20], 0x70
mov byte [rbp - 0x1e], 1
nop dword [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x14004e780
mov byte [rbp - 0x1e], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e7a0
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e7b4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
movdqa xmm0, xmmword [0x140cd2b80]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x5d43404e
mov dword [rbp - 0x1c], 0x4056b5d
mov dword [rbp - 0x18], 0x1007b68
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1a
jb 0x14004e800
mov byte [rbp - 0x15], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004e820
mov rcx, rdi
cmp r14, 0x10
jb 0x14004e834
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x14004e8bf
movdqa xmm0, xmmword [0x140cd28e0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x45547e4a
mov word [rbp - 0x1c], 0x6c
mov byte [rbp - 0x1a], 1
nop dword [rax + rax]
lea eax, [rbx + 0x1f]
xor byte [rbp + rbx - 0x30], al
inc rbx
cmp rbx, 0x15
jb 0x14004e870
mov byte [rbp - 0x1a], 0
lea rax, [rbp - 0x30]
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14004e890
cmp r14, 0x10
jb 0x14004e8a2
mov rdi, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, r15
mov rcx, rdi
call fcn.1400361f0
cmp rax, 0xffffffffffffffff
je 0x14004e8c3
mov al, 1
jmp 0x14004e8c5
xor al, al
mov r15, qword [rsp + 0x98]
mov r14, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x88]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14013c780
add rsp, 0x60
pop rdi
pop rbx
pop rbp
ret