Function at 0x140071e80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using salsa20 or chacha

Disassembly:
push rbp
mov rax, rdx
mov rbp, rsp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
and rsp, 0xfffffffffffffff0
add rsp, 0xffffffffffffff80
mov qword [rbp + 0x10], rcx
test r9, r9
je 0x140072638
mov ecx, dword [r9]
mov dword [rsp + 0x50], ecx
mov ecx, dword [r9 + 4]
mov dword [rsp + 0x3c], ecx
mov ecx, dword [r9 + 8]
mov dword [rsp + 0x38], ecx
mov ecx, dword [r9 + 0xc]
mov dword [rsp + 0x34], ecx
mov r14d, dword [r8 + 4]
mov r11d, dword [r8 + 8]
mov esi, dword [r8 + 0x10]
mov edi, dword [r8 + 0xc]
mov r12d, dword [rax + 0xc]
mov r15d, dword [r8]
mov dword [rsp + 4], r14d
mov edx, dword [r8 + 0x14]
mov r10d, dword [r8 + 0x18]
mov dword [rsp + 8], r11d
mov r9d, dword [r8 + 0x1c]
mov r13d, dword [rax]
mov dword [rsp + 0x10], esi
mov r8d, dword [rax + 4]
mov ebx, dword [rax + 8]
mov dword [rsp + 0x5c], esi
mov eax, dword [rsp + 0x38]
mov esi, dword [rsp + 0x3c]
mov dword [rsp + 0x64], r11d
mov r11d, edi
mov dword [rsp + 0x68], r14d
mov ecx, dword [rsp + 0x34]
mov dword [rsp], r15d
mov r14d, esi
mov esi, r12d
mov dword [rsp + 0xc], edi
mov dword [rsp + 0x14], edx
mov dword [rsp + 0x18], r10d
mov dword [rsp + 0x1c], r9d
mov dword [rsp + 0x20], r13d
mov dword [rsp + 0x24], r8d
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x2c], r12d
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x60], r8d
mov r8d, dword [rsp + 0x50]
mov dword [rsp + 0x70], 0
nop dword [rax + rax]
lea edi, [r8 + rdx]
lea r12d, [r15 + r14]
rol edi, 7
rol r12d, 7
xor edi, r11d
xor r12d, esi
lea eax, [rdi + r8]
rol eax, 9
xor eax, ebx
mov ebx, eax
lea eax, [rdi + rax]
rol eax, 0xd
mov r11d, ebx
mov dword [rsp + 0x58], ebx
xor eax, edx
mov edx, dword [rsp + 0x40]
add r11d, eax
mov dword [rsp + 0x6c], eax
lea eax, [r12 + r14]
rol eax, 9
ror r11d, 0xe
xor eax, r10d
xor r11d, r8d
mov esi, eax
lea eax, [r12 + rax]
rol eax, 0xd
mov dword [rsp + 0x54], esi
xor r15d, eax
lea eax, [r13 + rdx]
rol eax, 7
add esi, r15d
xor eax, r9d
ror esi, 0xe
lea r8d, [rax + rdx]
xor esi, r14d
rol r8d, 9
xor r8d, dword [rsp + 0x68]
lea r14d, [rax + r8]
rol r14d, 0xd
xor r14d, r13d
mov r13d, dword [rsp + 0x5c]
lea r9d, [r8 + r14]
ror r9d, 0xe
xor r9d, edx
lea edx, [r13 + rcx]
rol edx, 7
xor edx, dword [rsp + 0x64]
lea r10d, [rdx + rcx]
rol r10d, 9
xor r10d, dword [rsp + 0x60]
lea ebx, [rdx + r10]
rol ebx, 0xd
xor ebx, r13d
lea r13d, [r10 + rbx]
ror r13d, 0xe
xor ecx, r13d
lea r13d, [r11 + rdx]
rol r13d, 7
xor r15d, r13d
lea r13d, [r11 + r15]
rol r13d, 9
xor r13d, r8d
lea r8d, [r15 + r13]
mov dword [rsp + 0x68], r13d
rol r8d, 0xd
xor r8d, edx
mov edx, r8d
mov dword [rsp + 0x64], r8d
mov r8d, r13d
lea r13d, [rdi + rsi]
rol r13d, 7
add r8d, edx
xor r13d, r14d
ror r8d, 0xe
lea edx, [rsi + r13]
xor r8d, r11d
rol edx, 9
xor edx, r10d
lea r11d, [r13 + rdx]
mov dword [rsp + 0x60], edx
rol r11d, 0xd
xor r11d, edi
lea r14d, [rdx + r11]
lea edx, [r12 + r9]
rol edx, 7
ror r14d, 0xe
xor edx, ebx
xor r14d, esi
lea ebx, [r9 + rdx]
mov dword [rsp + 0x5c], edx
rol ebx, 9
xor ebx, dword [rsp + 0x58]
lea esi, [rdx + rbx]
rol esi, 0xd
xor esi, r12d
lea edx, [rbx + rsi]
ror edx, 0xe
xor edx, r9d
mov dword [rsp + 0x40], edx
lea edx, [rax + rcx]
rol edx, 7
xor edx, dword [rsp + 0x6c]
lea r10d, [rcx + rdx]
rol r10d, 9
xor r10d, dword [rsp + 0x54]
lea r9d, [rdx + r10]
rol r9d, 0xd
xor r9d, eax
add dword [rsp + 0x70], 2
lea eax, [r10 + r9]
ror eax, 0xe
xor ecx, eax
mov eax, dword [rsp + 0x70]
cmp dword [rbp + 0x30], eax
jg 0x140071f68
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x30], ecx
mov edi, r11d
mov r12d, esi
mov r11d, dword [rsp + 0x3c]
mov esi, r14d
mov r14d, r9d
add edx, dword [rsp + 0x14]
add eax, r8d
mov r8d, dword [rsp + 0x64]
add edi, dword [rsp + 0xc]
mov dword [rsp + 0x3c], edx
mov ecx, eax
mov eax, dword [rsp]
add r11d, esi
mov esi, dword [rsp + 0x60]
add esi, dword [rsp + 0x24]
add r10d, dword [rsp + 0x18]
mov dword [rsp + 0x70], edi
add eax, r15d
mov r15d, dword [rsp + 0x68]
add r15d, dword [rsp + 4]
mov dword [rsp + 0x58], esi
mov r9d, r15d
mov r15d, dword [rsp + 0x38]
add r15d, dword [rsp + 0x40]
mov esi, eax
mov dword [rsp + 0x64], r15d
mov r15d, dword [rsp + 0x1c]
shr esi, 8
mov edx, eax
add ebx, dword [rsp + 0x28]
mov edi, dword [rsp + 0x5c]
mov dword [rsp + 0x60], r10d
shr edx, 0x10
add r15d, r14d
mov r14d, esi
mov esi, eax
add r13d, dword [rsp + 0x20]
shr esi, 0x18
add r12d, dword [rsp + 0x2c]
add edi, dword [rsp + 0x10]
mov dword [rsp + 0x54], ebx
mov r10d, esi
mov esi, r9d
add r8d, dword [rsp + 8]
mov dword [rsp + 0x6c], r13d
shr esi, 8
movzx r10d, r10b
mov dword [rsp + 0x68], r12d
mov ebx, dword [rsp + 0x34]
mov dword [rsp + 0x50], edi
movzx edx, dl
shl r10, 8
movzx r14d, r14b
mov dword [rsp + 0x5c], r15d
add ebx, dword [rsp + 0x30]
or r10, rdx
mov r15d, r8d
mov dword [rsp + 0x40], esi
mov esi, r9d
shr r15d, 0x18
mov edi, ecx
mov dword [rsp + 0x38], ebx
shr esi, 0x18
mov ebx, r9d
shl r10, 8
mov dword [rsp + 0x30], esi
shr ebx, 0x10
mov esi, r8d
mov r12d, ecx
mov dword [rsp + 0x34], ebx
mov r13d, ecx
mov ebx, r8d
shr esi, 0x10
or r10, r14
movzx edx, r15b
shr edi, 8
movzx esi, sil
shr r12d, 0x10
shr r13d, 0x18
movzx eax, al
movzx edi, dil
shr ebx, 8
shl r10, 8
movzx r13d, r13b
movzx r12d, r12b
shl rdx, 8
movzx ebx, bl
or r10, rax
movzx eax, cl
or rdx, rsi
movzx ecx, r8b
shl r10, 8
mov r15d, dword [rsp + 0x58]
shl rdx, 8
or r10, r13
or rdx, rbx
shl r10, 8
shl rdx, 8
or r10, r12
or rdx, rcx
movzx ecx, byte [rsp + 0x30]
shl r10, 8
shl rdx, 8
or r10, rdi
or rdx, rcx
movzx ecx, byte [rsp + 0x34]
shl r10, 8
shl rdx, 8
mov r8, r10
mov r10d, r15d
or rdx, rcx
movzx ecx, byte [rsp + 0x40]
or r8, rax
mov eax, dword [rsp + 0x70]
shl rdx, 8
mov qword [rsp + 0x40], r8
or rdx, rcx
movzx ecx, r9b
mov r9d, dword [rsp + 0x6c]
mov ebx, eax
shl rdx, 8
mov esi, eax
mov edi, eax
mov eax, r15d
or rdx, rcx
mov rcx, qword [rbp + 0x10]
mov r14d, r9d
mov r8d, r9d
mov qword [rsp + 0x48], rdx
movdqa xmm0, xmmword [rsp + 0x40]
shr r14d, 8
shr ebx, 8
shr esi, 0x10
shr edi, 0x18
movzx ebx, bl
movups xmmword [rcx], xmm0
mov ecx, r11d
movzx edi, dil
movzx esi, sil
shr ecx, 8
mov r12d, ecx
mov ecx, r11d
shr ecx, 0x10
movzx r12d, r12b
mov r13d, ecx
mov ecx, r11d
movzx r11d, r11b
shr ecx, 0x18
movzx r13d, r13b
mov edx, ecx
mov ecx, r9d
mov r9d, r15d
movzx edx, dl
shr ecx, 0x10
shr r8d, 0x18
shr eax, 0x18
movzx ecx, cl
shl rdx, 8
shr r10d, 0x10
movzx eax, al
movzx r8d, r8b
shl rax, 8
or rdx, r13
movzx r10d, r10b
shr r9d, 8
shl rdx, 8
or rax, r10
movzx r9d, r9b
or rdx, r12
shl rax, 8
shl rdx, 8
or rax, r9
movzx r9d, r15b
mov r15d, dword [rsp + 0x50]
or rdx, r11
shl rax, 8
movzx r11d, byte [rsp + 0x70]
shl rdx, 8
or rax, r9
mov r10d, r15d
mov r9d, dword [rsp + 0x64]
or rdx, rdi
shl rax, 8
shl rdx, 8
or rax, r8
mov r8d, r9d
or rdx, rsi
shl rax, 8
shl rdx, 8
or rax, rcx
movzx ecx, r14b
mov r14d, dword [rsp + 0x54]
or rdx, rbx
shl rax, 8
shl rdx, 8
or rax, rcx
movzx ecx, byte [rsp + 0x6c]
mov ebx, r14d
mov rsi, rdx
shl rax, 8
mov edi, r14d
or rsi, r11
mov r11d, r15d
mov qword [rsp + 0x70], rsi
mov rsi, rax
mov eax, dword [rsp + 0x68]
or rsi, rcx
shr ebx, 8
mov rcx, qword [rbp + 0x10]
mov edx, eax
mov r13d, eax
mov r12d, eax
mov eax, r15d
shr edx, 0x18
shr r13d, 0x10
mov qword [rsp + 0x78], rsi
mov esi, r14d
movzx edx, dl
movzx r13d, r13b
shr r12d, 8
movzx ebx, bl
shr eax, 0x18
movzx r12d, r12b
shr edi, 0x18
movdqa xmm1, xmmword [rsp + 0x70]
shl rdx, 8
shr r11d, 0x10
movzx eax, al
movzx edi, dil
or rdx, r13
movzx r11d, r11b
shl rax, 8
movups xmmword [rcx + 0x10], xmm1
shl rdx, 8
or rax, r11
shr r10d, 8
mov ecx, r9d
shr esi, 0x10
or rdx, r12
movzx r12d, byte [rsp + 0x68]
movzx r10d, r10b
shl rdx, 8
shl rax, 8
movzx esi, sil
shr r9d, 0x18
or rdx, r12
or rax, r10
movzx r10d, r15b
shl rdx, 8
shl rax, 8
movzx r9d, r9b
shr ecx, 8
or rdx, rdi
or rax, r10
shr r8d, 0x10
shl rdx, 8
shl rax, 8
movzx r8d, r8b
movzx ecx, cl
or rdx, rsi
shl rdx, 8
or rdx, rbx
movzx ebx, r14b
shl rdx, 8
or rax, r9
shl rax, 8
mov rdi, rdx
or rax, r8
or rdi, rbx
shl rax, 8
or rax, rcx
movzx ecx, byte [rsp + 0x64]
mov qword [rsp + 0x70], rdi
shl rax, 8
mov r14d, dword [rsp + 0x3c]
mov rdi, rax
mov eax, dword [rsp + 0x60]
or rdi, rcx
mov esi, r14d
mov rcx, qword [rbp + 0x10]
mov ebx, r14d
mov edx, eax
mov r13d, eax
mov r12d, eax
mov eax, dword [rsp + 0x5c]
shr edx, 0x18
shr r13d, 0x10
mov qword [rsp + 0x78], rdi
mov edi, r14d
movzx edx, dl
movzx r13d, r13b
shr r12d, 8
mov r15d, eax
shr edi, 0x18
movzx r12d, r12b
movdqa xmm2, xmmword [rsp + 0x70]
shr esi, 0x10
shl rdx, 8
shr r15d, 0x10
movzx edi, dil
movzx esi, sil
or rdx, r13
mov r8d, r15d
mov r15d, eax
movups xmmword [rcx + 0x20], xmm2
shl rdx, 8
shr r15d, 0x18
mov ecx, eax
movzx r8d, r8b
shr ebx, 8
or rdx, r12
movzx r12d, byte [rsp + 0x60]
mov r9d, r15d
shl rdx, 8
mov r15d, dword [rsp + 0x38]
movzx ebx, bl
shr ecx, 8
or rdx, r12
movzx r9d, r9b
movzx ecx, cl
shl rdx, 8
mov eax, r15d
mov r11d, r15d
mov r10d, r15d
shr eax, 0x18
or rdx, rdi
shr r11d, 0x10
shl rdx, 8
movzx eax, al
shr r10d, 8
movzx r11d, r11b
or rdx, rsi
movzx r10d, r10b
movzx esi, r14b
shl rdx, 8
or rdx, rbx
shl rdx, 8
shl rax, 8
or rax, r11
or rdx, rsi
shl rax, 8
mov qword [rsp + 0x70], rdx
or rax, r10
movzx r10d, r15b
shl rax, 8
or rax, r10
shl rax, 8
or rax, r9
shl rax, 8
or rax, r8
shl rax, 8
or rax, rcx
movzx ecx, byte [rsp + 0x5c]
shl rax, 8
or rax, rcx
mov qword [rsp + 0x78], rax
mov rax, qword [rbp + 0x10]
movdqa xmm3, xmmword [rsp + 0x70]
movups xmmword [rax + 0x30], xmm3
lea rsp, [rbp - 0x38]
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov dword [rsp + 0x34], 0x6b206574
mov dword [rsp + 0x38], 0x79622d32
mov dword [rsp + 0x3c], 0x3320646e
mov dword [rsp + 0x50], 0x61707865
jmp 0x140071ec6