Function at 0x140048a00
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x140cf0080]
xor rax, rsp
mov qword [rbp - 0x10], rax
movdqa xmm0, xmmword [0x140cd2cf0]
xor ebx, ebx
mov rdi, rcx
mov dword [rbp - 0x20], 0x4652715d
movdqu xmmword [rbp - 0x30], xmm0
mov ecx, ebx
mov dword [rbp - 0x1c], 0x100465c
nop
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x16
jb 0x140048a40
mov rsi, 0xffffffffffffffff
mov byte [rbp - 0x19], bl
mov rax, rsi
lea rcx, [rbp - 0x30]
inc rax
cmp byte [rcx + rax], bl
jne 0x140048a61
cmp qword [rdi + 0x18], 0x10
mov rcx, rdi
jb 0x140048a76
mov rcx, qword [rdi]
mov rdx, qword [rdi + 0x10]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x88], r14
xor r8d, r8d
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x20], rax
call fcn.1400361f0
cmp rax, rsi
jne 0x140048f4b
movdqa xmm0, xmmword [0x140cd1cc0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x20], 1
nop dword [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xf
jb 0x140048ac0
mov r15, qword [rdi + 0x10]
lea rcx, [rbp - 0x30]
mov r14, qword [rdi + 0x18]
mov rax, rsi
mov byte [rbp - 0x20], bl
inc rax
cmp byte [rcx + rax], bl
jne 0x140048ae2
mov rcx, rdi
cmp r14, 0x10
jb 0x140048af6
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x140048f4b
mov dword [rbp - 0x30], 0x4344524b
mov rcx, rbx
mov dword [rbp - 0x2c], 0x43575150
mov word [rbp - 0x28], 0x100
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 8
jb 0x140048b30
mov byte [rbp - 0x27], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140048b50
mov rcx, rdi
cmp r14, 0x10
jb 0x140048b64
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x140048f4b
movdqa xmm0, xmmword [0x140cd1cb0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x20], 1
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xf
jb 0x140048ba0
mov byte [rbp - 0x20], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140048bc0
mov rcx, rdi
cmp r14, 0x10
jb 0x140048bd4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x140048f4b
movdqa xmm0, xmmword [0x140cd34f0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x5170424a
mov dword [rbp - 0x1c], 0x475b47
mov byte [rbp - 0x18], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x17
jb 0x140048c20
mov byte [rbp - 0x18], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140048c40
mov rcx, rdi
cmp r14, 0x10
jb 0x140048c54
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x140048f4b
movdqa xmm0, xmmword [0x140cd3060]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x70484240
mov dword [rbp - 0x1c], 0x756a4c5c
mov word [rbp - 0x18], 0x100
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x18
jb 0x140048ca0
mov byte [rbp - 0x17], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140048cc0
mov rcx, rdi
cmp r14, 0x10
jb 0x140048cd4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x140048f4b
movdqa xmm0, xmmword [0x140cd2cc0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x6e5e5d
mov byte [rbp - 0x1c], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x13
jb 0x140048d10
mov byte [rbp - 0x1c], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140048d30
mov rcx, rdi
cmp r14, 0x10
jb 0x140048d44
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x140048f4b
movdqa xmm0, xmmword [0x140cd3b10]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x20], 0x6c
mov byte [rbp - 0x1e], 1
nop dword [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x140048d80
mov byte [rbp - 0x1e], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140048da0
mov rcx, rdi
cmp r14, 0x10
jb 0x140048db4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x140048f4b
movdqa xmm0, xmmword [0x140cd3f50]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x949b97b7
mov dword [rbp - 0x1c], 0x8f9e92ba
mov dword [rbp - 0x18], 0xbca189
mov byte [rbp - 0x14], 1
nop word [rax + rax]
lea eax, [rcx - 0x1b]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x140048e00
mov byte [rbp - 0x14], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140048e20
mov rcx, rdi
cmp r14, 0x10
jb 0x140048e34
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x140048f4b
movdqa xmm0, xmmword [0x140cd2fc0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x5a725c43
mov dword [rbp - 0x1c], 0x69414756
mov word [rbp - 0x18], 0x74
mov byte [rbp - 0x16], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x19
jb 0x140048e80
mov byte [rbp - 0x16], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140048ea0
mov rcx, rdi
cmp r14, 0x10
jb 0x140048eb4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, rsi
jne 0x140048f4b
movdqa xmm0, xmmword [0x140cd2ce0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x4a5e7242
mov dword [rbp - 0x1c], 0x100776c
nop dword [rax + rax]
lea eax, [rbx + 0x1f]
xor byte [rbp + rbx - 0x30], al
inc rbx
cmp rbx, 0x16
jb 0x140048ef0
mov byte [rbp - 0x19], 0
lea rax, [rbp - 0x30]
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140048f10
mov rcx, rdi
cmp r14, 0x10
jb 0x140048f25
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, r15
call fcn.1400361f0
cmp rax, 0xffffffffffffffff
jne 0x140048f4b
mov rcx, rdi
call fcn.14002ca30
xor al, al
jmp 0x140048f55
mov rcx, rdi
call fcn.14002ca30
mov al, 1
mov r15, qword [rsp + 0x90]
mov r14, qword [rsp + 0x88]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14013c780
mov rbx, qword [rsp + 0x98]
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret