Function at 0x140049b70
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x140cec080]
xor rax, rsp
mov qword [rbp - 8], rax
xor ebx, ebx
mov dword [rbp - 0x30], 0x4344524b
mov rdi, rcx
mov dword [rbp - 0x2c], 0x43575150
mov ecx, ebx
mov dword [rbp - 0x28], 0x514765
mov byte [rbp - 0x24], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0xb
jb 0x140049bb0
mov rsi, 0xffffffffffffffff
mov byte [rbp - 0x24], bl
mov rax, rsi
lea rcx, [rbp - 0x30]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049bd1
cmp qword [rdi + 0x18], 0x10
mov rcx, rdi
jb 0x140049be6
mov rcx, qword [rdi]
mov rdx, qword [rdi + 0x10]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x88], r14
xor r8d, r8d
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x20], rax
call fcn.140036ac0
cmp rax, rsi
jne 0x14004a0db
movdqa xmm0, xmmword [0x140cce8f0]
mov rcx, rbx
movdqa xmm1, xmmword [0x140ccf4a0]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x10], 0x100
movdqu xmmword [rbp - 0x20], xmm1
nop word [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x20
jb 0x140049c40
mov r15, qword [rdi + 0x10]
lea rcx, [rbp - 0x30]
mov r14, qword [rdi + 0x18]
mov rax, rsi
mov byte [rbp - 0xf], bl
inc rax
cmp byte [rcx + rax], bl
jne 0x140049c62
mov rcx, rdi
cmp r14, 0x10
jb 0x140049c76
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004a0db
movdqa xmm0, xmmword [0x140ccf710]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x899187a2
mov dword [rbp - 0x1c], 0x85aeb795
mov dword [rbp - 0x18], 0xadb28887
mov word [rbp - 0x14], 0x100
nop
lea eax, [rcx - 0x2d]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1c
jb 0x140049cc0
mov byte [rbp - 0x13], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049ce0
mov rcx, rdi
cmp r14, 0x10
jb 0x140049cf4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004a0db
movdqa xmm0, xmmword [0x140cce8f0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x5d45536e
mov dword [rbp - 0x1c], 0x53626b41
mov dword [rbp - 0x18], 0x54564856
mov dword [rbp - 0x14], 0x1007f64
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1e
jb 0x140049d40
mov byte [rbp - 0x11], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049d60
mov rcx, rdi
cmp r14, 0x10
jb 0x140049d74
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004a0db
movdqa xmm0, xmmword [0x140cceb90]
mov rcx, rbx
movdqa xmm1, xmmword [0x140ccf490]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x10], 0x100
movdqu xmmword [rbp - 0x20], xmm1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x20
jb 0x140049dc0
mov byte [rbp - 0xf], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049de0
mov rcx, rdi
cmp r14, 0x10
jb 0x140049df4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004a0db
movdqa xmm0, xmmword [0x140cce4a0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x6e5e5d
mov byte [rbp - 0x1c], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x13
jb 0x140049e30
mov byte [rbp - 0x1c], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049e50
mov rcx, rdi
cmp r14, 0x10
jb 0x140049e64
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004a0db
movdqa xmm0, xmmword [0x140ccf270]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x20], WSAGetLastError
mov byte [rbp - 0x1e], 1
nop dword [rax + rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x140049ea0
mov byte [rbp - 0x1e], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049ec0
mov rcx, rdi
cmp r14, 0x10
jb 0x140049ed4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004a0db
movdqa xmm0, xmmword [0x140ccf670]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x8a8985a1
mov dword [rbp - 0x1c], 0x998c80a4
mov dword [rbp - 0x18], 0xaeb39f
mov byte [rbp - 0x14], 1
nop word [rax + rax]
lea eax, [rcx - 0x2d]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x140049f20
mov byte [rbp - 0x14], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049f40
mov rcx, rdi
cmp r14, 0x10
jb 0x140049f54
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004a0db
movdqa xmm0, xmmword [0x140cce7a0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x5a725c43
mov dword [rbp - 0x1c], 0x69414756
mov word [rbp - 0x18], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x16], 1
nop dword [rax]
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x19
jb 0x140049fa0
mov byte [rbp - 0x16], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x140049fc0
mov rcx, rdi
cmp r14, 0x10
jb 0x140049fd4
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004a0db
movdqa xmm0, xmmword [0x140cce4c0]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x4a5e7242
mov dword [rbp - 0x1c], 0x100776c
nop
lea eax, [rcx + 0x1f]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x16
jb 0x14004a010
mov byte [rbp - 0x19], bl
lea rcx, [rbp - 0x30]
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14004a030
mov rcx, rdi
cmp r14, 0x10
jb 0x14004a044
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, rsi
jne 0x14004a0db
movdqa xmm0, xmmword [0x140cceb50]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x20], 0x5b
mov byte [rbp - 0x1e], 1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rbx + 0x1f]
xor byte [rbp + rbx - 0x30], al
inc rbx
cmp rbx, 0x11
jb 0x14004a080
mov byte [rbp - 0x1e], 0
lea rax, [rbp - 0x30]
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14004a0a0
mov rcx, rdi
cmp r14, 0x10
jb 0x14004a0b5
mov rcx, qword [rdi]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, r15
call fcn.140036ac0
cmp rax, 0xffffffffffffffff
jne 0x14004a0db
mov rcx, rdi
call fcn.14002ca90
xor al, al
jmp 0x14004a0e5
mov rcx, rdi
call fcn.14002ca90
mov al, 1
mov r15, qword [rsp + 0x90]
mov r14, qword [rsp + 0x88]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140138a50
mov rbx, qword [rsp + 0x98]
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret