Function at 0x627cd0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using salsa20 or chacha

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
mov eax, dword [ebp + 0x10]
xor ecx, ecx
xor edx, edx
push ebx
mov ch, byte [eax + 3]
mov dl, byte [eax + 1]
mov cl, byte [eax + 2]
mov ebx, dword [ebp + 8]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax]
push esi
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 5]
mov dword [ebp - 0x30], ecx
xor ecx, ecx
push edi
mov ch, byte [eax + 7]
mov dword [ebp - 0x40], 0x61707865
mov cl, byte [eax + 6]
mov dword [ebp - 0x3c], 0x3320646e
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 4]
mov dword [ebp - 0x38], 0x79622d32
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 9]
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov dword [ebp - 0x34], 0x6b206574
mov ch, byte [eax + 0xb]
mov cl, byte [eax + 0xa]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 8]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 0xd]
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov ch, byte [eax + 0xf]
mov cl, byte [eax + 0xe]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 0xc]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 0x11]
mov dword [ebp - 0x24], ecx
xor ecx, ecx
mov ch, byte [eax + 0x13]
mov cl, byte [eax + 0x12]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 0x10]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 0x15]
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov ch, byte [eax + 0x17]
mov cl, byte [eax + 0x16]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 0x14]
shl ecx, 8
or ecx, edx
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
xor edx, edx
mov ch, byte [eax + 0x1b]
mov dl, byte [eax + 0x19]
mov cl, byte [eax + 0x1a]
mov esi, dword [ebp + 0x14]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 0x18]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 0x1d]
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov ch, byte [eax + 0x1f]
mov cl, byte [eax + 0x1e]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [eax + 0x1c]
mov eax, dword [ebp + 0x18]
shl ecx, 8
or ecx, edx
xor edx, edx
mov dl, byte [esi + 1]
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov dword [ebp - 0x10], eax
mov ch, byte [esi + 3]
xor eax, eax
mov cl, byte [esi + 2]
mov al, byte [esi]
shl ecx, 8
or ecx, edx
xor edx, edx
shl ecx, 8
or ecx, eax
mov dl, byte [esi + 5]
mov dword [ebp - 0xc], ecx
xor ecx, ecx
mov ch, byte [esi + 7]
xor eax, eax
mov cl, byte [esi + 6]
mov al, byte [esi + 4]
shl ecx, 8
or ecx, edx
xor edx, edx
shl ecx, 8
or ecx, eax
mov dl, byte [esi + 9]
mov dword [ebp - 8], ecx
xor ecx, ecx
mov ch, byte [esi + 0xb]
xor eax, eax
mov cl, byte [esi + 0xa]
mov al, byte [esi + 8]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
mov eax, dword [ebp + 0xc]
cmp eax, 0x40
mov dword [ebp - 4], ecx
jbe 0x627ef9
dec eax
shr eax, 6
mov dword [ebp + 8], eax
mov ecx, 0x10
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x80]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x80]
push ecx
call fcn.00627f80
add esp, 4
xor esi, esi
xor edx, edx
mov edi, dword [ebp + esi - 0x80]
mov dh, byte [ebx + 3]
xor eax, eax
mov dl, byte [ebx + 2]
mov al, byte [ebx + 1]
shl edx, 8
or edx, eax
mov eax, dword [ebp + esi - 0x40]
xor ecx, ecx
add eax, edi
mov cl, byte [ebx]
add esi, 4
shl edx, 8
or edx, ecx
add ebx, 4
xor edx, eax
mov cl, dl
mov eax, edx
mov byte [ebx - 4], cl
mov ecx, eax
mov dword [ebp + esi - 0x84], edx
shr edx, 8
shr ecx, 0x10
shr eax, 0x18
mov byte [ebx - 3], dl
mov byte [ebx - 2], cl
mov byte [ebx - 1], al
cmp esi, 0x40
jl 0x627e88
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
inc edx
sub ecx, 0x40
dec eax
mov dword [ebp - 0x10], edx
mov dword [ebp + 0xc], ecx
mov dword [ebp + 8], eax
jne 0x627e6d
mov ecx, 0x10
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x80]
lea edx, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
push edx
call fcn.00627f80
add esp, 4
xor eax, eax
mov ecx, dword [ebp + eax - 0x80]
mov esi, dword [ebp + eax - 0x40]
add esi, ecx
mov dword [ebp + eax - 0x40], esi
mov dl, byte [ebp + eax - 0x40]
mov ecx, esi
mov byte [ebp + eax - 0x80], dl
shr ecx, 8
mov byte [ebp + eax - 0x7f], cl
mov edx, esi
mov ecx, esi
add eax, 4
shr edx, 0x10
shr ecx, 0x18
mov byte [ebp + eax - 0x82], dl
mov byte [ebp + eax - 0x81], cl
cmp eax, 0x40
jl 0x627f14
mov esi, dword [ebp + 0xc]
test esi, esi
jbe 0x627f6c
lea eax, [ebp - 0x80]
sub eax, ebx
mov dl, byte [eax + ebx]
mov cl, byte [ebx]
xor cl, dl
mov byte [ebx], cl
inc ebx
dec esi
jne 0x627f5f
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret