Function at 0x427c30
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using salsa20 or chacha

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, 0x1418
call fcn.00435f50
mov eax, dword [0x462040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
movups xmm1, xmmword [0x45da50]
mov eax, dword [0x45da70]
movups xmm2, xmmword [0x45da60]
mov ecx, dword [0x45da74]
movaps xmm0, xmm1
movaps xmmword [ebp - 0x30], xmm1
psrldq xmm0, 4
movd dword [ebp - 0x5c], xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
movd dword [ebp - 0x58], xmm0
movaps xmm0, xmm2
psrldq xmm0, 4
mov esi, dword [0x45da78]
movd dword [ebp - 0x4c], xmm0
movaps xmm0, xmm2
movaps xmmword [ebp - 0x20], xmm2
movd dword [ebp - 0x60], xmm1
movd dword [ebp - 0x50], xmm2
psrldq xmm1, 0xc
psrldq xmm0, 8
psrldq xmm2, 0xc
push esi
movd dword [ebp - 0x54], xmm1
movd dword [ebp - 0x48], xmm0
movd dword [ebp - 0x44], xmm2
mov dword [ebp - 0x70], 0x61707865
mov dword [ebp - 0x6c], 0x3320646e
mov dword [ebp - 0x68], 0x79622d32
mov dword [ebp - 0x64], 0x6b206574
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
call fcn.00439af3
add esp, 4
mov edi, eax
mov dword [ebp - 0x1404], edi
push esi
push 0
push edi
call fcn.00436bc0
add esp, 0xc
lea ecx, [ebp - 0x70]
mov edx, 0x45da7c
push esi
push edi
call fcn.004268e0
mov ax, word [edi]
add esp, 8
mov word [0x465870], ax
mov eax, dword [edi + 2]
mov ecx, dword [edi + 6]
mov dword [0x465878], eax
mov dword [0x46587c], ecx
call fcn.00434918
xor edx, edx
mov dword [ebp - 0x78], 0x55555555
mov edi, eax
mov dword [ebp - 0x74], 0x55555555
mov dword [ebp - 0x13f8], edi
mov dword [ebp - 0x13f4], edx
lea esi, [edx + 1]
push 0x5851f42d
mov ecx, edx
xor eax, eax
push 0x4c957f2d
shr ecx, 0x1e
xor eax, edx
xor ecx, edi
push eax
push ecx
call fcn.00435b50
mov edi, eax
add edi, esi
mov dword [ebp + esi*8 - 0x13f8], edi
adc edx, 0
mov dword [ebp + esi*8 - 0x13f4], edx
inc esi
cmp esi, 0x138
jb 0x427d74
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
lea eax, [ebp - 0x1400]
mov dword [ebp - 0x1400], 0x138
push eax
call fcn.0042a250
mov edi, dword [ebp - 0x1404]
mov esi, 0x11
mov dword [0x465880], eax
mov dword [0x465884], edx
mov eax, dword [edi + 0xa]
mov dword [0x465888], eax
mov al, byte [edi + 0xe]
mov byte [0x46588c], al
movzx eax, word [edi + 0xf]
test ax, ax
je 0x427e12
mov esi, eax
lea eax, [edi + 0x11]
push esi
push eax
push 0x46588d
call fcn.004361e0
add esp, 0xc
add esi, 0x11
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x427e3f
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x46598d
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x427e6c
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x4659ad
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
mov al, byte [edi + esi]
mov byte [0x4659cd], al
movzx eax, word [edi + esi + 1]
add esi, 3
test ax, ax
je 0x427ea2
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x4659ce
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
mov edx, 0x465818
mov ecx, 0x4659ce
call fcn.00427a50
movzx eax, byte [edi + esi]
mov byte [0x465dce], al
mov al, byte [edi + esi + 1]
add esi, 2
mov byte [0x465dcf], al
test al, al
je 0x427f77
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x427efb
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x465dd0
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
mov edx, 0x465dd0
lea ecx, [ebp - 0x28]
call fcn.004278c0
push eax
mov ecx, 0x463b68
call fcn.00429510
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x427f4d
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x427f43
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4284ea
push ecx
push edx
call fcn.0043515f
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
movzx eax, byte [edi + esi]
mov byte [0x465ed0], al
movzx eax, byte [edi + esi + 1]
add esi, 2
mov dword [ebp - 0x14], 7
mov byte [0x465ed1], al
mov eax, dword [edi + esi]
mov dword [0x465ed4], eax
mov eax, dword [edi + esi + 4]
mov dword [0x465ed8], eax
mov eax, dword [edi + esi + 8]
mov dword [0x465edc], eax
movzx eax, byte [edi + esi + 0xc]
mov byte [0x465ee0], al
movzx eax, byte [edi + esi + 0xd]
mov byte [0x465ee1], al
mov al, byte [edi + esi + 0xe]
add esi, 0xf
mov byte [0x465ee2], al
test al, al
je 0x427ff4
mov eax, dword [edi + esi]
mov dword [0x465ee4], eax
mov eax, dword [edi + esi + 4]
mov dword [0x465ee8], eax
movzx eax, word [edi + esi + 8]
add esi, 0xa
test ax, ax
je 0x427ff4
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x465eec
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
mov al, byte [edi + esi]
inc esi
mov byte [0x465fec], al
test al, al
je 0x4280a2
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x428032
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x465fed
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x42805f
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x4660ed
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x42808c
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x4661ed
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
movzx eax, byte [edi + esi]
mov byte [0x4662ed], al
movzx eax, byte [edi + esi + 1]
add esi, 2
mov byte [0x4662ee], al
mov al, byte [edi + esi]
inc esi
mov byte [0x4662ef], al
test al, al
je 0x428189
mov al, byte [edi + esi]
inc esi
mov byte [0x4662f0], al
test al, al
je 0x428111
mov eax, dword [edi + esi]
mov dword [0x4662f4], eax
mov eax, dword [edi + esi + 4]
mov dword [0x4662f8], eax
mov eax, dword [edi + esi + 8]
mov dword [0x4662fc], eax
mov eax, dword [edi + esi + 0xc]
mov dword [0x466300], eax
movups xmm0, xmmword [edi + esi + 0x10]
movups xmmword [0x466304], xmm0
movups xmm0, xmmword [edi + esi + 0x20]
movups xmmword [0x466314], xmm0
mov eax, dword [edi + esi + 0x30]
mov ecx, dword [edi + esi + 0x34]
add esi, 0x38
mov dword [0x466324], eax
mov dword [0x466328], ecx
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x42813e
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x46632c
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
mov edx, 0x4657e8
mov ecx, 0x46632c
call fcn.00427a50
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x42817a
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x46672c
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
mov edx, 0x465824
mov ecx, 0x46672c
call fcn.00427a50
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x42838c
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x466b2c
call fcn.004361e0
add esp, 0xc
lea ecx, [ebp - 0x28]
mov edx, 0x466b2c
add esi, edi
call fcn.004278c0
push eax
mov ecx, 0x463b50
call fcn.00429510
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x428206
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4281fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4284ef
push ecx
push edx
call fcn.0043515f
add esp, 8
mov edi, dword [ebp - 0x1404]
mov al, byte [edi + esi]
inc esi
mov byte [0x466b4d], al
test al, al
je 0x42830d
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x42824a
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x466b4e
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
mov edx, 0x465800
mov ecx, 0x466b4e
call fcn.00427a50
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x428286
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x466f4e
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
mov edx, 0x4657dc
mov ecx, 0x466f4e
call fcn.00427a50
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x4282c2
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x46734e
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
mov edx, 0x46580c
mov ecx, 0x46734e
call fcn.00427a50
movzx eax, word [edi + esi]
add esi, 2
test ax, ax
je 0x4282fe
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x46774e
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
mov edx, 0x4657f4
mov ecx, 0x46774e
call fcn.00427a50
mov al, byte [edi + esi]
inc esi
mov byte [0x467b4e], al
test al, al
je 0x428359
mov eax, dword [edi + esi]
mov dword [0x467b50], eax
mov eax, dword [edi + esi + 4]
mov dword [0x467b54], eax
movzx eax, word [edi + esi + 8]
add esi, 0xa
test ax, ax
je 0x428359
mov edi, eax
mov eax, dword [ebp - 0x1404]
push edi
add eax, esi
push eax
push 0x467b58
call fcn.004361e0
add esp, 0xc
add esi, edi
mov edi, dword [ebp - 0x1404]
movzx eax, word [edi + esi]
mov ecx, eax
mov word [0x467c58], ax
mov eax, 0xdead
cmp word [0x465870], ax
jne 0x4284cc
mov eax, 0xbeef
cmp cx, ax
jne 0x4284cc
mov al, 1
jmp 0x4284ce
mov byte [ebp - 0x1414], 0
mov byte [ebp - 0x1413], 0x5a
mov byte [ebp - 0x1412], 0x4e
mov byte [ebp - 0x1411], 0x60
mov byte [ebp - 0x1410], 0x4e
mov byte [ebp - 0x140f], 0x70
mov byte [ebp - 0x140e], 0x4e
mov byte [ebp - 0x140d], 0x7a
mov byte [ebp - 0x140c], 0x4e
mov byte [ebp - 0x140b], 0x60
mov byte [ebp - 0x140a], 0x4e
mov byte [ebp - 0x1409], 0xa
mov byte [ebp - 0x1408], 0x4e
mov byte [ebp - 0x1407], 0x4e
mov byte [ebp - 0x1406], 0x4e
mov al, byte [ebp - 0x1413]
mov al, byte [ebp - 0x1414]
test al, al
jne 0x42843f
xor ecx, ecx
mov dword [ebp - 0x1418], 0x7f
mov al, byte [ebp + ecx - 0x1413]
movzx eax, al
sub eax, 0x4e
imul eax, eax, 0x19
cdq
idiv dword [ebp - 0x1418]
lea eax, [edx + 0x7f]
cdq
idiv dword [ebp - 0x1418]
mov byte [ebp + ecx - 0x1413], dl
inc ecx
cmp ecx, 0xe
jb 0x428411
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x1413]
movaps xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x1c], 0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428460
sub ecx, edx
lea eax, [ebp - 0x1413]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00415660
lea eax, [ebp - 0x30]
mov ecx, 0x463b50
push eax
call fcn.00429510
mov ecx, dword [ebp - 0x1c]
cmp ecx, 7
jbe 0x42820c
mov edx, dword [ebp - 0x30]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4284bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4284f4
push ecx
push edx
call fcn.0043515f
add esp, 8
jmp 0x42820c
xor al, al
mov ecx, dword [ebp - 4]
mov byte [0x465843], al
xor ecx, ebp
movzx eax, al
pop edi
dec eax
pop esi
call fcn.00434f21
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00439e1a
call fcn.00439e1a
call fcn.00439e1a
int3