Function at 0x14006c9c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using salsa20 or chacha

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov qword [rsp + 0x18], r8
mov r8d, dword [rcx]
mov r10d, dword [rcx + 4]
mov r11d, dword [rcx + 8]
mov edi, dword [rcx + 0xc]
mov esi, dword [rcx + 0x10]
mov r14d, dword [rcx + 0x14]
mov r15d, dword [rcx + 0x18]
mov r12d, dword [rcx + 0x1c]
mov ecx, dword [rdx]
mov eax, dword [rdx + 4]
mov ebx, dword [rdx + 8]
mov edx, dword [rdx + 0xc]
mov dword [rsp + 4], 0x61707865
mov dword [rsp + 8], 0x3320646e
mov dword [rsp + 0xc], 0x79622d32
mov dword [rsp + 0x10], 0x6b206574
nop dword [rax]
mov qword [rsp + 0x20], r9
mov ebp, dword [rsp + 4]
add ebp, r8d
xor ecx, ebp
rol ecx, 0x10
add esi, ecx
xor r8d, esi
rol r8d, 0xc
add ebp, r8d
xor ecx, ebp
rol ecx, 8
add esi, ecx
mov dword [rsp + 0x14], esi
xor r8d, esi
rol r8d, 7
mov r9d, dword [rsp + 8]
add r9d, r10d
xor eax, r9d
rol eax, 0x10
add r14d, eax
xor r10d, r14d
rol r10d, 0xc
add r9d, r10d
xor eax, r9d
rol eax, 8
add r14d, eax
xor r10d, r14d
rol r10d, 7
mov esi, dword [rsp + 0xc]
add esi, r11d
xor ebx, esi
rol ebx, 0x10
add r15d, ebx
xor r11d, r15d
rol r11d, 0xc
add esi, r11d
xor ebx, esi
rol ebx, 8
add r15d, ebx
xor r11d, r15d
rol r11d, 7
mov r13d, dword [rsp + 0x10]
add r13d, edi
xor edx, r13d
rol edx, 0x10
add r12d, edx
xor edi, r12d
rol edi, 0xc
add r13d, edi
xor edx, r13d
rol edx, 8
add r12d, edx
xor edi, r12d
rol edi, 7
add ebp, r10d
xor edx, ebp
rol edx, 0x10
add r15d, edx
xor r10d, r15d
rol r10d, 0xc
add ebp, r10d
mov dword [rsp + 4], ebp
xor edx, ebp
rol edx, 8
add r15d, edx
xor r10d, r15d
rol r10d, 7
add r9d, r11d
xor ecx, r9d
rol ecx, 0x10
add r12d, ecx
xor r11d, r12d
rol r11d, 0xc
add r9d, r11d
mov dword [rsp + 8], r9d
xor ecx, r9d
mov r9, qword [rsp + 0x20]
rol ecx, 8
add r12d, ecx
xor r11d, r12d
rol r11d, 7
add esi, edi
xor eax, esi
rol eax, 0x10
add dword [rsp + 0x14], eax
xor edi, dword [rsp + 0x14]
rol edi, 0xc
add esi, edi
mov dword [rsp + 0xc], esi
xor eax, esi
mov esi, dword [rsp + 0x14]
rol eax, 8
add esi, eax
xor edi, esi
rol edi, 7
add r13d, r8d
xor ebx, r13d
rol ebx, 0x10
add r14d, ebx
xor r8d, r14d
rol r8d, 0xc
add r13d, r8d
mov dword [rsp + 0x10], r13d
xor ebx, r13d
rol ebx, 8
add r14d, ebx
xor r8d, r14d
rol r8d, 7
add r9, 0xfffffffffffffffe
jne 0x14006ca20
mov rdi, qword [rsp + 0x18]
mov r9d, dword [rsp + 4]
mov byte [rdi], r9b
mov ebp, ecx
mov ecx, r9d
mov byte [rdi + 1], ch
mov r8d, r9d
shr r8d, 0x10
mov byte [rdi + 2], r8b
shr r9d, 0x18
mov byte [rdi + 3], r9b
mov r9d, dword [rsp + 8]
mov byte [rdi + 4], r9b
mov esi, eax
mov eax, r9d
mov byte [rdi + 5], ah
mov r8d, r9d
shr r8d, 0x10
mov byte [rdi + 6], r8b
shr r9d, 0x18
mov byte [rdi + 7], r9b
mov r9d, dword [rsp + 0xc]
mov byte [rdi + 8], r9b
mov r11d, ebx
mov ebx, r9d
mov byte [rdi + 9], bh
mov r8d, r9d
shr r8d, 0x10
mov byte [rdi + 0xa], r8b
shr r9d, 0x18
mov byte [rdi + 0xb], r9b
mov r9d, dword [rsp + 0x10]
mov byte [rdi + 0xc], r9b
mov r10d, edx
mov edx, r9d
mov byte [rdi + 0xd], dh
mov r8d, r9d
shr r8d, 0x10
mov byte [rdi + 0xe], r8b
shr r9d, 0x18
mov byte [rdi + 0xf], r9b
mov eax, ebp
mov byte [rdi + 0x10], al
mov byte [rdi + 0x11], ah
mov r8d, ebp
shr r8d, 0x10
mov byte [rdi + 0x12], r8b
shr eax, 0x18
mov byte [rdi + 0x13], al
mov eax, esi
mov byte [rdi + 0x14], al
mov byte [rdi + 0x15], ah
mov ecx, esi
shr ecx, 0x10
mov byte [rdi + 0x16], cl
shr eax, 0x18
mov byte [rdi + 0x17], al
mov ecx, r11d
mov byte [rdi + 0x18], cl
mov byte [rdi + 0x19], ch
mov eax, r11d
shr eax, 0x10
mov byte [rdi + 0x1a], al
shr ecx, 0x18
mov byte [rdi + 0x1b], cl
mov ecx, r10d
mov byte [rdi + 0x1c], cl
mov byte [rdi + 0x1d], ch
mov eax, r10d
shr eax, 0x10
mov byte [rdi + 0x1e], al
shr ecx, 0x18
mov byte [rdi + 0x1f], cl
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret