Function at 0x140027e30
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using salsa20 or chacha

Disassembly:
push r15
mov r10, rcx
mov rax, rdx
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
test r9, r9
je 0x1400281d0
mov edx, dword [r9 + 4]
mov ebx, dword [r9]
mov dword [rsp + 0x20], edx
mov edx, dword [r9 + 8]
mov dword [rsp + 0x24], edx
mov edx, dword [r9 + 0xc]
mov dword [rsp + 0x28], edx
mov esi, dword [rax + 4]
mov r9d, dword [r8]
mov dword [rsp], 0
mov r14d, dword [r8 + 4]
mov r15d, dword [r8 + 8]
mov edi, dword [r8 + 0x10]
mov edx, dword [r8 + 0x14]
mov dword [rsp + 0x2c], esi
mov r12d, dword [r8 + 0x1c]
mov r13d, dword [rax + 0xc]
mov dword [rsp + 0x30], r15d
mov ebp, dword [r8 + 0xc]
mov r11d, dword [r8 + 0x18]
mov ecx, edi
mov dword [rsp + 0x38], edi
mov r8d, dword [rax]
mov esi, dword [rax + 8]
mov dword [rsp + 0x44], r12d
mov eax, dword [rsp + 0x28]
mov edi, dword [rsp + 0x2c]
mov dword [rsp + 0x3c], edx
mov dword [rsp + 0x50], r13d
mov dword [rsp + 0x14], eax
mov eax, r12d
mov r12d, dword [rsp + 0x24]
mov dword [rsp + 0xc], edi
mov edi, dword [rsp + 0x20]
mov dword [rsp + 0x10], r12d
mov r12d, ebx
mov dword [rsp + 8], r15d
mov r15d, r9d
mov dword [rsp + 4], r14d
mov dword [rsp + 0x34], ebp
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x48], r8d
mov dword [rsp + 0x4c], esi
mov dword [rsp + 0x54], ebx
mov ebx, ebp
mov dword [rsp + 0x58], r9d
mov r9d, ecx
mov ecx, dword [rsp + 0x14]
mov qword [rsp + 0xb0], r10
mov r10d, r13d
mov r13d, edx
mov edx, dword [rsp + 0x10]
mov dword [rsp + 0x5c], r14d
mov r14d, eax
nop dword [rax]
lea ebp, [r12 + r13]
rol ebp, 7
xor ebp, ebx
lea eax, [rbp + r12]
rol eax, 9
xor eax, esi
mov ebx, eax
lea eax, [rbp + rax]
rol eax, 0xd
mov dword [rsp + 0x10], ebx
xor eax, r13d
lea r13d, [r15 + rdi]
rol r13d, 7
add ebx, eax
mov dword [rsp + 0x14], eax
xor r13d, r10d
ror ebx, 0xe
lea eax, [r13 + rdi]
xor ebx, r12d
rol eax, 9
xor eax, r11d
lea r12d, [r13 + rax]
mov dword [rsp + 0x18], eax
rol r12d, 0xd
xor r12d, r15d
mov r15d, dword [rsp + 8]
lea r10d, [rax + r12]
lea eax, [r8 + rdx]
rol eax, 7
ror r10d, 0xe
xor eax, r14d
xor r10d, edi
mov edi, dword [rsp + 4]
lea esi, [rax + rdx]
rol esi, 9
xor esi, edi
lea edi, [rax + rsi]
rol edi, 0xd
xor edi, r8d
lea r8d, [rsi + rdi]
ror r8d, 0xe
xor edx, r8d
lea r8d, [r9 + rcx]
rol r8d, 7
xor r8d, r15d
mov r15d, dword [rsp + 0xc]
lea r11d, [r8 + rcx]
rol r11d, 9
xor r11d, r15d
lea r15d, [rbx + r8]
lea r14d, [r8 + r11]
rol r14d, 0xd
xor r14d, r9d
lea r9d, [r11 + r14]
ror r9d, 0xe
xor r9d, ecx
rol r15d, 7
xor r15d, r12d
mov dword [rsp + 0x1c], r9d
lea ecx, [rbx + r15]
rol ecx, 9
mov r12d, ecx
xor r12d, esi
lea ecx, [r15 + r12]
mov esi, r12d
mov dword [rsp + 4], r12d
rol ecx, 0xd
mov r12d, ecx
xor r12d, r8d
lea r8d, [rbp + r10]
rol r8d, 7
mov dword [rsp + 8], r12d
lea r12d, [rsi + r12]
xor r8d, edi
ror r12d, 0xe
lea ecx, [r10 + r8]
xor r12d, ebx
rol ecx, 9
mov edi, ecx
lea ecx, [r13 + rdx]
xor edi, r11d
rol ecx, 7
lea ebx, [r8 + rdi]
mov esi, ecx
mov ecx, dword [rsp + 0x10]
mov dword [rsp + 0xc], edi
xor esi, r14d
rol ebx, 0xd
mov r14d, dword [rsp + 0x14]
xor ebx, ebp
mov r9d, esi
lea esi, [rdx + rsi]
mov ebp, dword [rsp + 0x1c]
add edi, ebx
rol esi, 9
xor esi, ecx
ror edi, 0xe
xor edi, r10d
lea r10d, [r9 + rsi]
rol r10d, 0xd
xor r10d, r13d
lea r13d, [rax + rbp]
rol r13d, 7
lea ecx, [rsi + r10]
ror ecx, 0xe
xor r13d, r14d
xor edx, ecx
lea r11d, [rbp + r13]
mov ecx, dword [rsp + 0x18]
rol r11d, 9
xor r11d, ecx
lea r14d, [r13 + r11]
rol r14d, 0xd
xor r14d, eax
lea ecx, [r11 + r14]
ror ecx, 0xe
add dword [rsp], 2
mov eax, dword [rsp]
xor ecx, ebp
cmp dword [rsp + 0xd0], eax
jg 0x140027f30
mov ebp, ebx
mov ebx, dword [rsp + 0x54]
mov dword [rsp], r9d
mov eax, r14d
mov r9d, dword [rsp + 0x58]
mov r14d, dword [rsp + 0x5c]
mov dword [rsp + 0x10], edx
mov edx, r13d
mov dword [rsp + 0x14], ecx
mov r13d, r10d
lea ecx, [rbx + r12]
mov r10, qword [rsp + 0xb0]
mov ebx, dword [rsp + 4]
mov dword [r10], ecx
lea ecx, [r9 + r15]
mov r15d, dword [rsp + 8]
add r14d, ebx
mov ebx, dword [rsp + 0x30]
mov dword [r10 + 4], ecx
mov dword [r10 + 8], r14d
add ebx, r15d
mov dword [r10 + 0xc], ebx
mov ebx, dword [rsp + 0x34]
add ebx, ebp
mov dword [r10 + 0x10], ebx
mov ebx, dword [rsp + 0x20]
add ebx, edi
mov edi, dword [rsp + 0x2c]
mov dword [r10 + 0x14], ebx
mov ebx, dword [rsp + 0x48]
add r8d, ebx
mov ebx, dword [rsp + 0xc]
mov dword [r10 + 0x18], r8d
add ebx, edi
mov dword [r10 + 0x1c], ebx
mov ebx, dword [rsp + 0x4c]
add esi, ebx
mov ebx, dword [rsp + 0x50]
mov dword [r10 + 0x20], esi
mov esi, dword [rsp + 0x10]
add r13d, ebx
mov ebx, dword [rsp + 0x24]
mov dword [r10 + 0x24], r13d
add ebx, esi
mov esi, dword [rsp]
mov dword [r10 + 0x28], ebx
mov ebx, dword [rsp + 0x38]
add ebx, esi
mov dword [r10 + 0x2c], ebx
mov ebx, dword [rsp + 0x3c]
add ebx, edx
mov edx, dword [rsp + 0x40]
mov dword [r10 + 0x30], ebx
add edx, r11d
mov dword [r10 + 0x34], edx
mov edx, dword [rsp + 0x44]
add edx, eax
mov eax, dword [rsp + 0x28]
mov dword [r10 + 0x38], edx
mov edx, dword [rsp + 0x14]
add eax, edx
mov dword [r10 + 0x3c], eax
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsp + 0x28], 0x6b206574
mov ebx, 0x61707865
mov dword [rsp + 0x24], 0x79622d32
mov dword [rsp + 0x20], 0x3320646e
jmp 0x140027e6a