Function at 0x180028ef0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using salsa20 or chacha

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
movups xmm1, xmmword [rcx + 0x50]
mov rbx, rcx
mov dword [rbp - 0x58], 0x61707865
mov dword [rbp - 0x54], 0x3320646e
lea rdx, [rbp - 0x48]
mov dword [rbp - 0x50], 0x79622d32
mov r8d, 0x40
mov dword [rbp - 0x4c], 0x6b206574
movups xmm0, xmmword [rbp - 0x58]
movups xmmword [rbp - 0x28], xmm1
movups xmmword [rbp - 0x48], xmm0
movups xmm0, xmmword [rcx + 0x40]
mov rcx, qword [rcx + 0x60]
mov rax, rcx
shr rcx, 0x24
shr rax, 4
mov dword [rbp - 0x18], eax
mov eax, 0xdeadbeef
mov dword [rbp - 0x14], ecx
mov rcx, rbx
mov dword [rbp - 0xc], eax
mov dword [rbp - 0x10], eax
movups xmmword [rbp - 0x38], xmm0
call fcn.1800a6850
mov eax, dword [rbx + 0x28]
mov ecx, dword [rbx + 0x10]
mov edx, dword [rbx + 0x30]
mov r14d, dword [rbx + 0x20]
mov esi, dword [rbx + 0x14]
mov r15d, dword [rbx + 4]
mov r8d, dword [rbx + 0x34]
mov r12d, dword [rbx + 0x24]
mov r9d, dword [rbx + 0x18]
mov r13d, dword [rbx + 8]
mov r10d, dword [rbx + 0x38]
mov r11d, dword [rbx + 0x1c]
mov edi, dword [rbx + 0x3c]
mov dword [rbp + 0x58], eax
mov eax, dword [rbx + 0xc]
mov dword [rbp + 0x48], eax
mov eax, dword [rbx + 0x2c]
mov dword [rbp + 0x50], eax
mov qword [rbp + 0x60], 0xa
add dword [rbx], ecx
add r15d, esi
xor edx, dword [rbx]
add r13d, r9d
add dword [rbp + 0x48], r11d
xor r8d, r15d
xor edi, dword [rbp + 0x48]
xor r10d, r13d
rol edi, 0x10
add dword [rbp + 0x50], edi
xor r11d, dword [rbp + 0x50]
rol edx, 0x10
add r14d, edx
rol r8d, 0x10
add r12d, r8d
rol r10d, 0x10
xor esi, r12d
rol r11d, 0xc
add dword [rbp + 0x48], r11d
xor ecx, r14d
xor edi, dword [rbp + 0x48]
rol esi, 0xc
add r15d, esi
rol edi, 8
add dword [rbp + 0x50], edi
xor r8d, r15d
xor r11d, dword [rbp + 0x50]
rol r8d, 8
add r12d, r8d
rol ecx, 0xc
add dword [rbx], ecx
xor esi, r12d
xor edx, dword [rbx]
rol esi, 7
mov eax, esi
rol edx, 8
add dword [rbx], eax
add r14d, edx
xor edi, dword [rbx]
xor ecx, r14d
mov esi, dword [rbp + 0x58]
add esi, r10d
rol edi, 0x10
xor r9d, esi
rol r11d, 7
rol r9d, 0xc
add r13d, r9d
rol ecx, 7
xor r10d, r13d
add r13d, r11d
rol r10d, 8
xor r8d, r13d
add esi, r10d
rol r8d, 0x10
xor r9d, esi
add esi, edi
rol r9d, 7
add r15d, r9d
mov dword [rbp + 0x58], esi
xor esi, eax
xor edx, r15d
mov eax, dword [rbp + 0x58]
rol edx, 0x10
add dword [rbp + 0x50], edx
xor r9d, dword [rbp + 0x50]
rol r9d, 0xc
rol esi, 0xc
add r15d, r9d
add dword [rbx], esi
xor edx, r15d
xor edi, dword [rbx]
rol edx, 8
add dword [rbp + 0x50], edx
xor r9d, dword [rbp + 0x50]
rol edi, 8
add eax, edi
rol r9d, 7
xor esi, eax
mov dword [rbp + 0x58], eax
rol esi, 7
add r14d, r8d
add dword [rbp + 0x48], ecx
xor r11d, r14d
xor r10d, dword [rbp + 0x48]
rol r10d, 0x10
add r12d, r10d
rol r11d, 0xc
xor ecx, r12d
add r13d, r11d
rol ecx, 0xc
xor r8d, r13d
add dword [rbp + 0x48], ecx
xor r10d, dword [rbp + 0x48]
rol r10d, 8
rol r8d, 8
add r12d, r10d
add r14d, r8d
xor ecx, r12d
xor r11d, r14d
rol ecx, 7
rol r11d, 7
sub qword [rbp + 0x60], 1
jne 0x180028fb3
mov dword [rbx + 0x28], eax
mov eax, dword [rbp + 0x48]
mov dword [rbx + 0x10], ecx
lea rcx, [rbp - 0x48]
mov dword [rbx + 0xc], eax
sub rcx, rbx
mov eax, dword [rbp + 0x50]
mov dword [rbx + 0x30], edx
mov edx, 0x10
mov dword [rbx + 0x2c], eax
mov dword [rbx + 0x20], r14d
mov dword [rbx + 0x14], esi
mov dword [rbx + 4], r15d
mov dword [rbx + 0x34], r8d
mov dword [rbx + 0x24], r12d
mov dword [rbx + 0x18], r9d
mov dword [rbx + 8], r13d
mov dword [rbx + 0x38], r10d
mov dword [rbx + 0x1c], r11d
mov dword [rbx + 0x3c], edi
mov eax, dword [rcx + rbx]
add dword [rbx], eax
lea rbx, [rbx + 4]
sub rdx, 1
jne 0x18002913f
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret