Function at 0x402a70
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using salsa20 or chacha

Disassembly:
sub esp, 0x4c
push ebx
push ebp
push esi
mov esi, edx
movzx edx, byte [eax + 3]
shl edx, 8
push edi
movzx edi, byte [eax + 2]
or edx, edi
movzx edi, byte [eax + 1]
shl edx, 8
or edx, edi
movzx edi, byte [eax]
shl edx, 8
or edx, edi
mov dword [esp + 0x2c], edx
movzx edx, byte [eax + 7]
movzx edi, byte [eax + 6]
shl edx, 8
or edx, edi
movzx edi, byte [eax + 5]
shl edx, 8
or edx, edi
movzx edi, byte [eax + 4]
shl edx, 8
or edx, edi
movzx edi, byte [eax + 0xa]
mov dword [esp + 0x30], edx
movzx edx, byte [eax + 0xb]
shl edx, 8
or edx, edi
movzx edi, byte [eax + 9]
shl edx, 8
or edx, edi
movzx edi, byte [eax + 8]
shl edx, 8
or edx, edi
movzx edi, byte [eax + 0xf]
mov dword [esp + 0x40], edx
movzx edx, byte [eax + 0xe]
movzx ebx, byte [esi + 2]
shl edi, 8
or edi, edx
movzx edx, byte [eax + 0xd]
shl edi, 8
or edi, edx
movzx edx, byte [eax + 0xc]
shl edi, 8
or edi, edx
movzx edx, byte [esi + 3]
shl edx, 8
or edx, ebx
movzx ebx, byte [esi + 1]
shl edx, 8
or edx, ebx
movzx ebx, byte [esi]
movzx ebp, byte [esi + 0xb]
shl edx, 8
or edx, ebx
movzx ebx, byte [esi + 6]
mov dword [esp + 0x14], edx
mov dword [esp + 0x48], edx
movzx edx, byte [esi + 7]
shl edx, 8
or edx, ebx
movzx ebx, byte [esi + 5]
shl edx, 8
or edx, ebx
movzx ebx, byte [esi + 4]
shl edx, 8
or edx, ebx
movzx ebx, byte [esi + 0xa]
shl ebp, 8
or ebp, ebx
movzx ebx, byte [esi + 9]
shl ebp, 8
or ebp, ebx
mov dword [esp + 0x28], 0x61707865
mov dword [esp + 0x18], 0x3320646e
mov dword [esp + 0x50], edx
shl ebp, 8
movzx ebx, byte [esi + 8]
or ebp, ebx
movzx ebx, byte [esi + 0xe]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x54], ebp
movzx ebp, byte [esi + 0xf]
shl ebp, 8
or ebp, ebx
movzx ebx, byte [esi + 0xd]
shl ebp, 8
or ebp, ebx
movzx ebx, byte [esi + 0xc]
shl ebp, 8
or ebp, ebx
movzx ebx, byte [eax + 0x13]
shl ebx, 8
mov dword [esp + 0x10], ebp
mov dword [esp + 0x58], ebp
movzx ebp, byte [eax + 0x12]
or ebx, ebp
movzx ebp, byte [eax + 0x11]
shl ebx, 8
or ebx, ebp
movzx ebp, byte [eax + 0x10]
shl ebx, 8
or ebx, ebp
movzx ebp, byte [eax + 0x16]
mov dword [esp + 0x34], ebx
movzx ebx, byte [eax + 0x17]
shl ebx, 8
or ebx, ebp
movzx ebp, byte [eax + 0x15]
shl ebx, 8
or ebx, ebp
movzx ebp, byte [eax + 0x14]
shl ebx, 8
or ebx, ebp
movzx ebp, byte [eax + 0x1a]
mov dword [esp + 0x38], ebx
movzx ebx, byte [eax + 0x1b]
shl ebx, 8
or ebx, ebp
movzx ebp, byte [eax + 0x19]
shl ebx, 8
or ebx, ebp
movzx ebp, byte [eax + 0x18]
shl ebx, 8
or ebx, ebp
movzx ebp, byte [eax + 0x1f]
mov dword [esp + 0x3c], ebx
movzx ebx, byte [eax + 0x1e]
shl ebp, 8
or ebp, ebx
movzx ebx, byte [eax + 0x1d]
movzx eax, byte [eax + 0x1c]
shl ebp, 8
or ebp, ebx
shl ebp, 8
mov dword [esp + 0x1c], 0x79622d32
or ebp, eax
mov dword [esp + 0x24], 0x6b206574
mov dword [esp + 0x44], 0xa
jmp 0x402c50
mov eax, dword [esp + 0x28]
mov ebx, dword [esp + 0x38]
add ebx, eax
rol ebx, 7
xor edi, ebx
lea ebx, [edi + eax]
rol ebx, 9
mov eax, dword [esp + 0x20]
xor eax, ebx
lea ebx, [eax + edi]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x38]
rol ebx, 0xd
xor eax, ebx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x38], eax
add eax, ebx
ror eax, 0xe
xor dword [esp + 0x28], eax
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x18]
add eax, ebx
rol eax, 7
xor dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
add ebx, eax
mov eax, dword [esp + 0x3c]
rol ebx, 9
xor eax, ebx
mov ebx, dword [esp + 0x10]
add ebx, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x2c]
rol ebx, 0xd
xor eax, ebx
mov ebx, dword [esp + 0x3c]
add ebx, eax
ror ebx, 0xe
xor dword [esp + 0x18], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x1c]
add eax, ebx
rol eax, 7
xor ebp, eax
mov eax, dword [esp + 0x1c]
lea ebx, [eax + ebp]
mov eax, dword [esp + 0x30]
rol ebx, 9
xor eax, ebx
lea ebx, [eax + ebp]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
rol ebx, 0xd
xor eax, ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x14], eax
add eax, ebx
mov ebx, dword [esp + 0x24]
ror eax, 0xe
xor dword [esp + 0x1c], eax
mov eax, dword [esp + 0x34]
add ebx, eax
mov eax, dword [esp + 0x40]
rol ebx, 7
xor eax, ebx
mov ebx, dword [esp + 0x24]
add ebx, eax
rol ebx, 9
xor edx, ebx
lea ebx, [edx + eax]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x34]
rol ebx, 0xd
xor eax, ebx
mov dword [esp + 0x34], eax
add eax, edx
ror eax, 0xe
xor dword [esp + 0x24], eax
mov eax, dword [esp + 0x40]
mov ebx, dword [esp + 0x28]
add ebx, eax
rol ebx, 7
mov eax, dword [esp + 0x2c]
xor eax, ebx
mov ebx, dword [esp + 0x28]
add ebx, eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x30]
rol ebx, 9
xor eax, ebx
mov ebx, dword [esp + 0x2c]
add ebx, eax
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x40]
rol ebx, 0xd
xor eax, ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x40], eax
add eax, ebx
ror eax, 0xe
xor dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
add eax, edi
rol eax, 7
xor dword [esp + 0x14], eax
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
add eax, ebx
rol eax, 9
xor edx, eax
mov eax, dword [esp + 0x14]
add eax, edx
rol eax, 0xd
mov ebx, dword [esp + 0x10]
xor edi, eax
lea eax, [edx + edi]
ror eax, 0xe
xor dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
add ebx, eax
mov eax, dword [esp + 0x34]
rol ebx, 7
xor eax, ebx
mov ebx, dword [esp + 0x1c]
add ebx, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x20]
rol ebx, 9
xor eax, ebx
mov ebx, dword [esp + 0x34]
add ebx, eax
rol ebx, 0xd
xor dword [esp + 0x10], ebx
mov dword [esp + 0x20], eax
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
add eax, ebx
ror eax, 0xe
xor dword [esp + 0x1c], eax
mov eax, dword [esp + 0x24]
lea ebx, [eax + ebp]
mov eax, dword [esp + 0x38]
rol ebx, 7
xor eax, ebx
mov ebx, dword [esp + 0x24]
add ebx, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x3c]
rol ebx, 9
xor eax, ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x3c], eax
add eax, ebx
mov ebx, dword [esp + 0x24]
rol eax, 0xd
xor ebp, eax
mov eax, dword [esp + 0x3c]
add eax, ebp
ror eax, 0xe
xor ebx, eax
sub dword [esp + 0x44], 1
mov dword [esp + 0x24], ebx
jne 0x402c50
movzx edi, byte [esi + 7]
mov eax, dword [esp + 0x48]
sub eax, eax
add dword [esp + 0x14], eax
movzx eax, byte [esi + 6]
shl edi, 8
or edi, eax
movzx eax, byte [esi + 5]
shl edi, 8
or edi, eax
movzx eax, byte [esi + 4]
shl edi, 8
or edi, eax
mov eax, dword [esp + 0x50]
sub eax, edi
movzx edi, byte [esi + 0xa]
add edx, eax
movzx eax, byte [esi + 0xb]
shl eax, 8
or eax, edi
movzx edi, byte [esi + 9]
shl eax, 8
or eax, edi
movzx edi, byte [esi + 8]
shl eax, 8
or eax, edi
mov edi, dword [esp + 0x54]
sub edi, eax
mov eax, edi
add dword [esp + 0x20], eax
movzx eax, byte [esi + 0xf]
movzx edi, byte [esi + 0xe]
shl eax, 8
or eax, edi
movzx edi, byte [esi + 0xd]
movzx esi, byte [esi + 0xc]
shl eax, 8
or eax, edi
shl eax, 8
or eax, esi
mov esi, dword [esp + 0x58]
sub esi, eax
mov eax, esi
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x28]
mov byte [ecx], al
shr eax, 8
mov byte [ecx + 1], al
shr eax, 8
mov byte [ecx + 2], al
shr eax, 8
mov byte [ecx + 3], al
mov eax, dword [esp + 0x18]
mov byte [ecx + 4], al
shr eax, 8
mov byte [ecx + 5], al
shr eax, 8
mov byte [ecx + 6], al
shr eax, 8
mov byte [ecx + 7], al
mov eax, dword [esp + 0x1c]
mov byte [ecx + 8], al
shr eax, 8
mov byte [ecx + 9], al
shr eax, 8
mov byte [ecx + 0xa], al
shr eax, 8
mov byte [ecx + 0xb], al
mov byte [ecx + 0xc], bl
shr ebx, 8
mov eax, ebx
mov byte [ecx + 0xd], al
shr eax, 8
mov byte [ecx + 0xe], al
shr eax, 8
mov byte [ecx + 0xf], al
mov eax, dword [esp + 0x14]
mov byte [ecx + 0x10], al
shr eax, 8
mov byte [ecx + 0x11], al
shr eax, 8
mov byte [ecx + 0x12], al
shr eax, 8
mov byte [ecx + 0x13], al
mov eax, dword [esp + 0x20]
mov byte [ecx + 0x14], dl
shr edx, 8
mov byte [ecx + 0x15], dl
shr edx, 8
mov byte [ecx + 0x16], dl
shr edx, 8
mov byte [ecx + 0x17], dl
mov byte [ecx + 0x18], al
shr eax, 8
mov byte [ecx + 0x19], al
shr eax, 8
mov byte [ecx + 0x1a], al
shr eax, 8
mov byte [ecx + 0x1b], al
mov eax, dword [esp + 0x10]
mov byte [ecx + 0x1c], al
shr eax, 8
mov byte [ecx + 0x1d], al
shr eax, 8
pop edi
mov byte [ecx + 0x1e], al
pop esi
shr eax, 8
pop ebp
mov byte [ecx + 0x1f], al
xor eax, eax
pop ebx
add esp, 0x4c
ret