Function at 0x1400028e4
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
mov esi, r8d
mov qword [rsp + 0x38], 0
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x29], 1
mov al, 0x24
mov byte [rsp + 0x2a], al
mov byte [rsp + 0x2b], 0x36
mov byte [rsp + 0x2c], 0x21
mov byte [rsp + 0x2d], 0x30
mov byte [rsp + 0x2e], 0x29
mov byte [rsp + 0x2f], 0x73
mov byte [rsp + 0x30], 0x72
mov byte [rsp + 0x31], 0x6e
mov byte [rsp + 0x32], al
mov al, 0x2c
mov byte [rsp + 0x33], al
mov byte [rsp + 0x34], al
mov byte [rsp + 0x35], 0x40
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002958
mov eax, 1
xor byte [rsp + rax + 0x28], 0x40
inc rax
cmp rax, 0xe
jne 0x14000294a
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x29], 0x66
mov al, 0x48
mov byte [rsp + 0x2a], al
mov byte [rsp + 0x2b], 0x5f
mov byte [rsp + 0x2c], 0x43
mov byte [rsp + 0x2d], al
mov al, 0x41
mov byte [rsp + 0x2e], al
mov byte [rsp + 0x2f], 0x1e
mov byte [rsp + 0x30], 0x1f
mov byte [rsp + 0x31], 3
mov byte [rsp + 0x32], 0x49
mov byte [rsp + 0x33], al
mov byte [rsp + 0x34], al
mov byte [rsp + 0x35], 0x2d
mov al, byte [rsp + 0x28]
test al, 1
jne 0x1400029b8
mov eax, 1
xor byte [rsp + rax + 0x28], 0x2d
inc rax
cmp rax, 0xe
jne 0x1400029aa
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x29], 0x42
mov byte [rsp + 0x2a], 0x69
mov byte [rsp + 0x2b], pe_nt_image_headers64
mov byte [rsp + 0x2c], 0x6d
mov byte [rsp + 0x2d], 0x7c
mov byte [rsp + 0x2e], 0x65
mov byte [rsp + 0x2f], 0x3f
mov byte [rsp + 0x30], 0x3e
mov byte [rsp + 0x31], 0x22
mov byte [rsp + 0x32], 0x68
mov al, 0x60
mov byte [rsp + 0x33], al
mov byte [rsp + 0x34], al
mov byte [rsp + 0x35], 0xc
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002a19
mov eax, 1
xor byte [rsp + rax + 0x28], 0xc
inc rax
cmp rax, 0xe
jne 0x140002a0b
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x29], 0x4e
mov al, 0x77
mov byte [rsp + 0x2a], al
mov byte [rsp + 0x2b], 0x6f
mov r8b, 0x6b
mov byte [rsp + 0x2c], r8b
mov byte [rsp + 0x2d], al
mov byte [rsp + 0x2e], 0x66
mov byte [rsp + 0x2f], al
mov byte [rsp + 0x30], 0x6e
mov byte [rsp + 0x31], 0x29
mov byte [rsp + 0x32], 0x63
mov byte [rsp + 0x33], r8b
mov byte [rsp + 0x34], r8b
mov byte [rsp + 0x35], 7
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002a7c
mov eax, 1
xor byte [rsp + rax + 0x28], 7
inc rax
cmp rax, 0xe
jne 0x140002a6e
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x29], 0x1a
mov byte [rsp + 0x2a], 0x3b
mov al, 0x3c
mov byte [rsp + 0x2b], al
mov r8b, 0x3a
mov byte [rsp + 0x2c], r8b
mov byte [rsp + 0x2d], al
mov byte [rsp + 0x2e], 0x25
mov byte [rsp + 0x2f], 0x2f
mov byte [rsp + 0x30], r8b
mov byte [rsp + 0x31], 0x66
mov byte [rsp + 0x32], 0x2c
mov al, 0x24
mov byte [rsp + 0x33], al
mov byte [rsp + 0x34], al
mov byte [rsp + 0x35], 0x48
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002ae0
mov eax, 1
xor byte [rsp + rax + 0x28], 0x48
inc rax
cmp rax, 0xe
jne 0x140002ad2
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x29], 0xc
mov byte [rsp + 0x2a], 8
mov al, 0x49
mov byte [rsp + 0x2b], al
mov byte [rsp + 0x2c], 0x24
mov byte [rsp + 0x2d], 0x48
mov byte [rsp + 0x2e], al
mov byte [rsp + 0x2f], 0x55
mov byte [rsp + 0x30], 0x1f
mov al, 0x17
mov byte [rsp + 0x31], al
mov byte [rsp + 0x32], al
mov byte [rsp + 0x33], 0x7b
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002b37
mov eax, 1
xor byte [rsp + rax + 0x28], 0x7b
inc rax
cmp rax, 0xc
jne 0x140002b29
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x29], 0x19
mov byte [rsp + 0x2a], 0x3f
mov byte [rsp + 0x2b], 0x29
mov byte [rsp + 0x2c], 0x3e
mov byte [rsp + 0x2d], 0x7f
mov byte [rsp + 0x2e], 0x7e
mov byte [rsp + 0x2f], 0x62
mov byte [rsp + 0x30], 0x28
mov al, 0x20
mov byte [rsp + 0x31], al
mov byte [rsp + 0x32], al
mov byte [rsp + 0x33], 0x4c
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002b8e
mov eax, 1
xor byte [rsp + rax + 0x28], 0x4c
inc rax
cmp rax, 0xc
jne 0x140002b80
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x29], 0x30
mov byte [rsp + 0x2a], 0xb
mov al, 0xf
mov byte [rsp + 0x2b], al
mov byte [rsp + 0x2c], 0x14
mov byte [rsp + 0x2d], 2
mov byte [rsp + 0x2e], 0x13
mov byte [rsp + 0x2f], 0xa
mov byte [rsp + 0x30], 0x4d
mov byte [rsp + 0x31], 7
mov byte [rsp + 0x32], al
mov byte [rsp + 0x33], al
mov byte [rsp + 0x34], 0x63
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002be9
mov eax, 1
xor byte [rsp + rax + 0x28], 0x63
inc rax
cmp rax, 0xd
jne 0x140002bdb
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x29], 0x3f
mov byte [rsp + 0x2a], 4
mov byte [rsp + 0x2b], 9
mov byte [rsp + 0x2c], al
mov byte [rsp + 0x2d], al
mov byte [rsp + 0x2e], 0x5f
mov byte [rsp + 0x2f], 0x5e
mov byte [rsp + 0x30], 0x42
mov byte [rsp + 0x31], 8
mov byte [rsp + 0x32], al
mov byte [rsp + 0x33], al
mov byte [rsp + 0x34], 0x6c
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002c42
mov eax, 1
xor byte [rsp + rax + 0x28], 0x6c
inc rax
cmp rax, 0xd
jne 0x140002c34
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x29], 0x5c
mov al, 0x7f
mov byte [rsp + 0x2a], al
mov byte [rsp + 0x2b], 0x76
mov byte [rsp + 0x2c], 0x20
mov byte [rsp + 0x2d], 0x21
mov byte [rsp + 0x2e], 0x3d
mov byte [rsp + 0x2f], 0x77
mov byte [rsp + 0x30], al
mov byte [rsp + 0x31], al
mov byte [rsp + 0x32], 0x13
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002c93
mov eax, 1
xor byte [rsp + rax + 0x28], 0x13
inc rax
cmp rax, 0xb
jne 0x140002c85
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x29], 0x4f
mov r8b, 0x6c
mov byte [rsp + 0x2a], r8b
mov byte [rsp + 0x2b], 0x65
mov byte [rsp + 0x2c], 0x41
mov byte [rsp + 0x2d], 0x75
mov byte [rsp + 0x2e], 0x74
mov byte [rsp + 0x2f], 0x33
mov byte [rsp + 0x30], 0x32
mov byte [rsp + 0x31], 0x2e
mov byte [rsp + 0x32], 0x64
mov byte [rsp + 0x33], r8b
mov byte [rsp + 0x34], r8b
mov byte [rsp + 0x35], al
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002cfc
mov eax, 1
mov r8b, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x28], r8b
inc rax
cmp rax, 0xe
jne 0x140002ce9
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x29], 0x33
mov byte [rsp + 0x2a], 0x29
mov al, 0x39
mov byte [rsp + 0x2b], al
mov r8b, 0x31
mov byte [rsp + 0x2c], r8b
mov byte [rsp + 0x2d], r8b
mov byte [rsp + 0x2e], 0x73
mov byte [rsp + 0x2f], al
mov byte [rsp + 0x30], r8b
mov byte [rsp + 0x31], r8b
mov byte [rsp + 0x32], 0x5d
mov al, byte [rsp + 0x28]
test al, 1
jne 0x140002d51
mov eax, 1
xor byte [rsp + rax + 0x28], 0x5d
inc rax
cmp rax, 0xb
jne 0x140002d43
test rcx, rcx
mov eax, 0x28
cmove rax, rcx
lea rbx, [0x14000d330]
movabs rdi, 0x73fa016354902abe
mov rax, qword [rax + rbx]
add rax, rdi
jmp rax