Function at 0x1400e02b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using salsa20 or chacha

Disassembly:
push r15
mov r10, rcx
mov rax, rdx
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
test r9, r9
je 0x1400e0650
mov edx, dword [r9 + 4]
mov ecx, dword [r9]
mov dword [rsp + 0x20], edx
mov edx, dword [r9 + 8]
mov dword [rsp + 0x24], edx
mov edx, dword [r9 + 0xc]
mov dword [rsp + 0x28], edx
mov ebx, dword [r8 + 4]
mov dword [rsp + 0x50], ecx
mov r14d, dword [r8 + 8]
mov dword [rsp], 0
mov edi, dword [r8 + 0x10]
mov edx, dword [r8 + 0x14]
mov r15d, dword [r8 + 0x1c]
mov dword [rsp + 4], ebx
mov r12d, dword [rax + 4]
mov dword [rsp + 8], r14d
mov r13d, dword [rax + 0xc]
mov dword [rsp + 0x30], edi
mov r9d, dword [r8]
mov dword [rsp + 0x34], edx
mov ebp, dword [r8 + 0xc]
mov dword [rsp + 0x3c], r15d
mov r11d, dword [r8 + 0x18]
mov dword [rsp + 0x44], r12d
mov r8d, dword [rax]
mov dword [rsp + 0x4c], r13d
mov esi, dword [rax + 8]
mov dword [rsp + 0x10], edi
mov eax, dword [rsp + 0x28]
mov dword [rsp + 0xc], r12d
mov r12d, ecx
mov edi, dword [rsp + 0x20]
mov dword [rsp + 0x2c], ebp
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x40], r8d
mov dword [rsp + 0x18], eax
mov eax, r15d
mov r15d, dword [rsp + 0x24]
mov dword [rsp + 0x48], esi
mov dword [rsp + 0x14], r15d
mov r15d, r9d
mov dword [rsp + 0x54], r9d
mov r9d, dword [rsp + 0x10]
mov qword [rsp + 0xb0], r10
mov ecx, dword [rsp + 0x18]
mov r10d, r13d
mov r13d, edx
mov edx, dword [rsp + 0x14]
mov dword [rsp + 0x58], ebx
mov ebx, ebp
mov dword [rsp + 0x5c], r14d
mov r14d, eax
nop word [rax + rax]
lea ebp, [r12 + r13]
rol ebp, 7
xor ebp, ebx
lea eax, [rbp + r12]
rol eax, 9
xor eax, esi
mov ebx, eax
lea eax, [rbp + rax]
mov dword [rsp + 0x10], ebx
rol eax, 0xd
xor eax, r13d
lea r13d, [r15 + rdi]
add ebx, eax
mov dword [rsp + 0x14], eax
rol r13d, 7
ror ebx, 0xe
xor r13d, r10d
xor ebx, r12d
lea eax, [r13 + rdi]
rol eax, 9
xor eax, r11d
lea r12d, [r13 + rax]
mov dword [rsp + 0x18], eax
rol r12d, 0xd
xor r12d, r15d
mov r15d, dword [rsp + 8]
lea r10d, [rax + r12]
lea eax, [r8 + rdx]
ror r10d, 0xe
xor r10d, edi
rol eax, 7
mov edi, dword [rsp + 4]
xor eax, r14d
lea esi, [rax + rdx]
rol esi, 9
xor esi, edi
lea edi, [rax + rsi]
rol edi, 0xd
xor edi, r8d
lea r8d, [rsi + rdi]
ror r8d, 0xe
xor edx, r8d
lea r8d, [r9 + rcx]
rol r8d, 7
xor r8d, r15d
mov r15d, dword [rsp + 0xc]
lea r11d, [r8 + rcx]
rol r11d, 9
xor r11d, r15d
lea r14d, [r8 + r11]
lea r15d, [rbx + r8]
rol r14d, 0xd
xor r14d, r9d
lea r9d, [r11 + r14]
ror r9d, 0xe
xor r9d, ecx
rol r15d, 7
xor r15d, r12d
mov dword [rsp + 0x1c], r9d
lea ecx, [rbx + r15]
rol ecx, 9
mov r12d, ecx
xor r12d, esi
lea ecx, [r15 + r12]
mov esi, r12d
mov dword [rsp + 4], r12d
rol ecx, 0xd
mov r12d, ecx
xor r12d, r8d
lea r8d, [rbp + r10]
mov dword [rsp + 8], r12d
lea r12d, [rsi + r12]
rol r8d, 7
xor r8d, edi
ror r12d, 0xe
lea ecx, [r10 + r8]
xor r12d, ebx
rol ecx, 9
mov edi, ecx
lea ecx, [r13 + rdx]
xor edi, r11d
lea ebx, [r8 + rdi]
rol ecx, 7
mov dword [rsp + 0xc], edi
mov esi, ecx
mov ecx, dword [rsp + 0x10]
rol ebx, 0xd
xor esi, r14d
xor ebx, ebp
mov ebp, dword [rsp + 0x1c]
mov r9d, esi
add edi, ebx
mov r14d, dword [rsp + 0x14]
lea esi, [rdx + rsi]
ror edi, 0xe
rol esi, 9
xor edi, r10d
xor esi, ecx
lea r10d, [r9 + rsi]
rol r10d, 0xd
xor r10d, r13d
lea ecx, [rsi + r10]
lea r13d, [rax + rbp]
ror ecx, 0xe
xor edx, ecx
rol r13d, 7
mov ecx, dword [rsp + 0x18]
xor r13d, r14d
lea r11d, [rbp + r13]
rol r11d, 9
xor r11d, ecx
lea r14d, [r13 + r11]
rol r14d, 0xd
xor r14d, eax
lea ecx, [r11 + r14]
ror ecx, 0xe
add dword [rsp], 2
xor ecx, ebp
mov eax, dword [rsp]
cmp dword [rsp + 0xd0], eax
jg 0x1400e03b0
mov dword [rsp + 0x18], ecx
mov ecx, dword [rsp + 0x50]
mov ebp, ebx
mov eax, r14d
mov dword [rsp + 0x10], r9d
mov r9d, dword [rsp + 0x54]
mov dword [rsp + 0x14], edx
mov edx, r13d
mov r13d, r10d
mov r10, qword [rsp + 0xb0]
mov ebx, dword [rsp + 0x58]
add ecx, r12d
mov r14d, dword [rsp + 0x5c]
mov dword [r10], ecx
lea ecx, [r9 + r15]
mov r15d, dword [rsp + 4]
mov dword [r10 + 4], ecx
add ebx, r15d
mov dword [r10 + 8], ebx
mov ebx, dword [rsp + 8]
add r14d, ebx
mov ebx, dword [rsp + 0x2c]
mov dword [r10 + 0xc], r14d
add ebx, ebp
mov dword [r10 + 0x10], ebx
mov ebx, dword [rsp + 0x20]
add ebx, edi
mov edi, dword [rsp + 0x44]
mov dword [r10 + 0x14], ebx
mov ebx, dword [rsp + 0x40]
add r8d, ebx
mov ebx, dword [rsp + 0xc]
mov dword [r10 + 0x18], r8d
add ebx, edi
mov dword [r10 + 0x1c], ebx
mov ebx, dword [rsp + 0x48]
add esi, ebx
mov ebx, dword [rsp + 0x4c]
mov dword [r10 + 0x20], esi
mov esi, dword [rsp + 0x14]
add r13d, ebx
mov ebx, dword [rsp + 0x24]
mov dword [r10 + 0x24], r13d
add ebx, esi
mov esi, dword [rsp + 0x10]
mov dword [r10 + 0x28], ebx
mov ebx, dword [rsp + 0x30]
add ebx, esi
mov dword [r10 + 0x2c], ebx
mov ebx, dword [rsp + 0x34]
add ebx, edx
mov edx, dword [rsp + 0x38]
mov dword [r10 + 0x30], ebx
add edx, r11d
mov dword [r10 + 0x34], edx
mov edx, dword [rsp + 0x3c]
add edx, eax
mov eax, dword [rsp + 0x28]
mov dword [r10 + 0x38], edx
mov edx, dword [rsp + 0x18]
add eax, edx
mov dword [r10 + 0x3c], eax
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsp + 0x28], 0x6b206574
mov ecx, 0x61707865
mov dword [rsp + 0x24], 0x79622d32
mov dword [rsp + 0x20], 0x3320646e
jmp 0x1400e02ea