Function at 0x1400028f0
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov r14, rdx
mov rdi, rcx
xor ecx, ecx
mov dword [rbp - 0x40], ecx
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi], rcx
mov qword [rdi + 8], rcx
mov qword [rdi + 0x10], rcx
mov dword [rbp - 0x40], 1
test r8d, r8d
jle 0x140002c3a
mov r12d, r8d
mov r13d, 0xf
nop dword [rax]
mov rcx, r14
call fcn.140004490
mov rbx, rax
test rax, rax
je 0x140002c2c
lea rcx, [rax + 0x38]
call fcn.140004490
cmp rax, qword [0x14000a760]
jne 0x140002c2c
lea rcx, [rbx + 0x430]
call fcn.140004490
mov rsi, rax
test rax, rax
je 0x140002c2c
lea rcx, [rbx + 0x230]
call fcn.140004490
mov r15, rax
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rax
mov byte [rbp - 0x38], 0x3b
mov byte [rbp - 0x37], 0x5d
mov byte [rbp - 0x36], 0x25
mov byte [rbp - 0x35], 0x5f
mov byte [rbp - 0x34], 0x35
mov byte [rbp - 0x33], 0x1b
mov byte [rbp - 0x32], 0xa
mov byte [rbp - 0x31], 0x1c
mov byte [rbp - 0x30], 5
mov byte [rbp - 0x2f], 0x52
mov byte [rbp - 0x2e], 0x49
mov byte [rbp - 0x2d], 0x43
mov byte [rbp - 0x2c], 0x5b
mov byte [rbp - 0x2b], 0x41
mov byte [rbp - 0x2a], 0xa
mov byte [rbp - 0x29], 0x5b
mov byte [rbp - 0x28], 0
mov byte [rbp - 0x27], 0x8c
mov byte [rbp - 0x26], 0x88
movzx eax, byte [rbp - 0x38]
xor r9d, r9d
movabs rdi, 0xfd07da05bc7d96f
mov r10, rdi
lea rax, [rbp - 0x38]
sub r10, rax
nop dword [rax]
nop dword [rax + rax]
lea r8, [rbp - 0x38]
add r8, r9
mov rcx, r9
and ecx, r13d
cmp rcx, r13
cmovae rcx, r13
shl cl, 2
mov rdx, rdi
shr rdx, cl
and dl, r13b
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 - 0x38], dl
inc r9
cmp r9, 0x13
jb 0x140002a20
mov rdx, rbx
lea rcx, [rbp - 0x38]
call fcn.140001060
mov byte [rbp - 0x38], 0x3b
mov byte [rbp - 0x37], 0x5d
mov byte [rbp - 0x36], 0x2e
mov byte [rbp - 0x35], 0x58
mov byte [rbp - 0x34], 0x3a
mov byte [rbp - 0x33], 0x13
mov byte [rbp - 0x32], 3
mov byte [rbp - 0x31], 0x18
mov byte [rbp - 0x30], 0x3d
mov byte [rbp - 0x2f], 0x1b
mov byte [rbp - 0x2e], 0x1b
mov byte [rbp - 0x2d], 0xb
mov byte [rbp - 0x2c], 0x15
mov byte [rbp - 0x2b], 0x11
mov byte [rbp - 0x2a], 0x16
mov byte [rbp - 0x29], 0x1d
mov byte [rbp - 0x28], 4
mov byte [rbp - 0x27], 0xa6
mov byte [rbp - 0x26], 0xbe
mov byte [rbp - 0x25], 0xb6
mov byte [rbp - 0x24], 0xa7
mov byte [rbp - 0x23], 0xb6
mov byte [rbp - 0x22], pe_nt_image_headers64
mov byte [rbp - 0x21], 0xa5
mov byte [rbp - 0x20], 0xfe
mov byte [rbp - 0x1f], 0x8e
mov byte [rbp - 0x1e], 0x86
movzx eax, byte [rbp - 0x38]
xor r9d, r9d
movabs rbx, 0xde311fc96524a26f
mov r10, rbx
lea rax, [rbp - 0x38]
sub r10, rax
mov rdi, qword [rbp + 0x30]
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp - 0x38]
add r8, r9
mov rcx, r9
and ecx, r13d
cmp rcx, r13
cmovae rcx, r13
shl cl, 2
mov rdx, rbx
shr rdx, cl
and dl, r13b
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 - 0x38], dl
inc r9
cmp r9, 0x1b
jb 0x140002b00
mov rdx, rsi
lea rcx, [rbp - 0x38]
call fcn.140001060
mov byte [rbp - 0x38], 0x3b
mov byte [rbp - 0x37], 0x5d
mov byte [rbp - 0x36], 0x2e
mov byte [rbp - 0x35], 0x58
mov byte [rbp - 0x34], 0x25
mov byte [rbp - 0x33], 0x19
mov byte [rbp - 0x32], 0x1f
mov byte [rbp - 0x31], 4
mov byte [rbp - 0x30], 0x3d
mov byte [rbp - 0x2f], 0x1b
mov byte [rbp - 0x2e], 0x1b
mov byte [rbp - 0x2d], 0xb
mov byte [rbp - 0x2c], 0x15
mov byte [rbp - 0x2b], 0x11
mov byte [rbp - 0x2a], 0x16
mov byte [rbp - 0x29], 0x1d
mov byte [rbp - 0x28], 4
mov byte [rbp - 0x27], 0xa6
mov byte [rbp - 0x26], 0xbe
mov byte [rbp - 0x25], 0xb6
mov byte [rbp - 0x24], 0xa7
mov byte [rbp - 0x23], 0xb6
mov byte [rbp - 0x22], pe_nt_image_headers64
mov byte [rbp - 0x21], 0xa5
mov byte [rbp - 0x20], 0xfe
mov byte [rbp - 0x1f], 0x8e
mov byte [rbp - 0x1e], 0x86
movzx eax, byte [rbp - 0x38]
xor eax, eax
nop dword [rax + rax]
mov rcx, rax
and ecx, r13d
cmp rcx, r13
cmovae rcx, r13
shl cl, 2
mov rdx, rbx
shr rdx, cl
and dl, r13b
movzx ecx, byte [rbp + rax - 0x38]
xor dl, cl
lea ecx, [rax + 0x6f]
xor dl, cl
mov byte [rbp + rax - 0x38], dl
inc rax
cmp rax, 0x1b
jb 0x140002bc0
mov rdx, r15
lea rcx, [rbp - 0x38]
call fcn.140001060
mov rdx, qword [rdi + 8]
cmp rdx, qword [rdi + 0x10]
je 0x140002c20
movups xmm0, xmmword [rbp - 0x18]
movups xmmword [rdx], xmm0
movsd xmm1, qword [rbp - 8]
movsd qword [rdx + 0x10], xmm1
add qword [rdi + 8], 0x18
jmp 0x140002c2c
lea r8, [rbp - 0x18]
mov rcx, rdi
call fcn.140004bc0
add r14, 8
sub r12, 1
jne 0x140002950
mov rax, qword [0x14000a7a8]
cmp rax, qword [0x14000a7b0]
je 0x140002c51
mov qword [0x14000a7b0], rax
lea rax, [0x14000a7a8]
cmp rax, rdi
je 0x140002c87
mov rcx, qword [rdi + 8]
sub rcx, qword [rdi]
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, qword [rdi]
call fcn.140004950
mov rax, rdi
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret