Function at 0x140116a46
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0xc6698f64
pushf
not eax
add eax, 0xb983f3e4
xor eax, 0xdf9e1f87
rol eax, 0x83
popf
pushf
not eax
add eax, 0x96baf3b9
xor eax, 0x9986d78d
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xae58bd38
xor eax, 0xfe4334c1
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x930b8b16
xor eax, 0xb3bf0f9c
rol eax, 0xd7
popf
cmp eax, 4
jne 0x140116aa9
popf
pop rax
jmp 0x140116ec5
cmp eax, 0
jne 0x140116ab8
popf
pop rax
jmp 0x140116c11
cmp eax, 3
jne 0x140116ac7
popf
pop rax
jmp 0x140116e34
cmp eax, 1
jne 0x140116ad6
popf
pop rax
jmp 0x140116ce6
cmp eax, 0xd
jne 0x140116ae5
popf
pop rax
jmp 0x1401172f3
cmp eax, 7
jne 0x140116af4
popf
pop rax
jmp 0x140116fec
cmp eax, 0xe
jne 0x140116b03
popf
pop rax
jmp 0x140117392
cmp eax, 0xb
jne 0x140116b12
popf
pop rax
jmp 0x1401171ca
cmp eax, 0xc
jne 0x140116b21
popf
pop rax
jmp 0x140117262
cmp eax, 8
jne 0x140116b30
popf
pop rax
jmp 0x140117071
cmp eax, 0x10
jne 0x140116b3f
popf
pop rax
jmp 0x1401174e9
cmp eax, 0x17
jne 0x140116b4e
popf
pop rax
jmp 0x140117865
cmp eax, 9
jne 0x140116b5d
popf
pop rax
jmp 0x140117115
cmp eax, 0x12
jne 0x140116b6c
popf
pop rax
jmp 0x14011760e
cmp eax, 0x18
jne 0x140116b7b
popf
pop rax
jmp 0x1401178d9
cmp eax, 0x11
jne 0x140116b8a
popf
pop rax
jmp 0x14011757d
cmp eax, 5
jne 0x140116b99
popf
pop rax
jmp 0x140116f5d
cmp eax, 0x16
jne 0x140116ba8
popf
pop rax
jmp 0x14011781a
cmp eax, 0xa
jne 0x140116bb7
popf
pop rax
jmp 0x14011716c
cmp eax, 0x14
jne 0x140116bc6
popf
pop rax
jmp 0x140117707
cmp eax, 0xf
jne 0x140116bd5
popf
pop rax
jmp 0x140117420
cmp eax, 0x13
jne 0x140116be4
popf
pop rax
jmp 0x14011764e
cmp eax, 0x15
jne 0x140116bf3
popf
pop rax
jmp 0x140117789
cmp eax, 2
jne 0x140116c02
popf
pop rax
jmp 0x140116d9c
cmp eax, 6
jne 0x140116c11
popf
pop rax
jmp 0x140116fdb
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rax, qword [rcx + 0xf8]
mov rbx, rcx
test rax, rax
je 0x140116c8d
push rax
pushf
mov eax, 0x6b50f31b
pushf
not eax
add eax, 0xce9a621c
xor eax, 0xcdde1c0f
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xc33740b1
xor eax, 0xc23e96b1
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x907e23f9
xor eax, 0xb61ab847
rol eax, 0x57
popf
pushf
not eax
add eax, 0xcb9d946f
xor eax, 0xa90dfca0
rol eax, 0x58
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0x17bc1cca
pushf
not eax
add eax, 0xdfe07e0f
xor eax, 0xe62a731d
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xef2038d4
xor eax, 0xf698c04f
rol eax, 0x34
popf
pushf
not eax
add eax, 0x9e0c061e
xor eax, 0x85d1818b
rol eax, 0x54
popf
pushf
not eax
add eax, 0xa99db863
xor eax, 0xdef88229
rol eax, 0x39
popf
jmp 0x140116a9a
lea rcx, [0x1bb5ac75a]
pushf
sub rcx, 0x7b56168a
popf
cmp rax, rcx
je 0x140116d43
push rax
pushf
mov eax, 0x5a6eb62
pushf
not eax
add eax, 0xdec47838
xor eax, 0xea09e5a6
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x95a9f85a
xor eax, 0xae254be4
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xe1bcc119
xor eax, 0xc47a9eef
rol eax, 0x10
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0xdb3e8fdf
pushf
not eax
add eax, 0xde34fe77
xor eax, 0xce3b55f2
rol eax, 0x63
popf
pushf
not eax
add eax, 0xb409e3f6
xor eax, 0xc2bcc82a
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x8ce578be
xor eax, 0xb58861e5
rol eax, 0xec
popf
pushf
not eax
add eax, 0xb691851c
xor eax, 0xf9bce404
rol eax, 0xfc
popf
jmp 0x140116a9a
mov rax, qword [rbx + 0xe0]
test rax, rax
je 0x140116ddb
push rax
pushf
mov eax, 0x245a81
pushf
not eax
add eax, 0xc669a79f
xor eax, 0x9ab0a300
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x8445e157
xor eax, 0xfceea3eb
rol eax, 0xfc
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0x2388a216
pushf
not eax
add eax, 0xf3a566a2
xor eax, 0xb9e3ef3e
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xe67c9a99
xor eax, 0xc97e0b61
rol eax, 0xba
popf
pushf
not eax
add eax, 0xa4a13ee6
xor eax, 0xd651b1a8
rol eax, 0x97
popf
pushf
not eax
add eax, 0xc5706ab1
xor eax, 0x88198779
rol eax, 0xdf
popf
jmp 0x140116a9a
cmp dword [rax], 0
jne 0x140116e7f
push rax
pushf
mov eax, 0x560faa7d
pushf
not eax
add eax, 0xd11f1ca6
xor eax, 0x8b307c2d
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x9b11c458
xor eax, 0xddb0b47a
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xe2c34d2f
xor eax, 0xa897f734
rol eax, 0x5b
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0xfc4a8dd
pushf
not eax
add eax, 0xd623735d
xor eax, 0xe612dc0b
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xf651792c
xor eax, 0xff15630d
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x89c84b3f
xor eax, 0xf718bf6b
rol eax, 0xf1
popf
jmp 0x140116a9a
mov rcx, qword [rbx + 0xf0]
test rcx, rcx
je 0x140116f17
push rax
pushf
mov eax, 0xa3962375
pushf
not eax
add eax, 0xe91c2fa0
xor eax, 0x92832bb8
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x83b8cf25
xor eax, 0xf2d5b6a2
rol eax, 0x41
popf
pushf
not eax
add eax, 0xbaf51b37
xor eax, 0xdf47a144
rol eax, 0x78
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0x1e12e6bd
pushf
not eax
add eax, 0xb2010a26
xor eax, 0xa0436678
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xb39afc62
xor eax, 0xff7e534a
rol eax, 5
popf
pushf
not eax
add eax, 0xc1d95554
xor eax, 0x8445d581
rol eax, 0x88
popf
jmp 0x140116a9a
cmp dword [rcx], 0
jne 0x140116fa8
push rax
pushf
mov eax, 0x49f9a327
pushf
not eax
add eax, 0xf76c9271
xor eax, 0xcf26889f
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xcefbffaa
xor eax, 0x901ba4f1
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x9a1a640c
xor eax, 0xb4b75910
rol eax, 0xf0
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0x6e1704b1
pushf
not eax
add eax, 0x9224f584
xor eax, 0xe763acc7
rol eax, 6
popf
pushf
not eax
add eax, 0xf187576a
xor eax, 0xf5f051f9
rol eax, 0xa3
popf
jmp 0x140116a9a
call fcn.14019fe1c
mov rcx, qword [rbx + 0xf8]
call fcn.140092bcb
mov rcx, qword [rbx + 0xe8]
test rcx, rcx
je 0x14011702b
push rax
pushf
mov eax, 0xae862fb9
pushf
not eax
add eax, 0xe23eabdd
xor eax, 0x8d7447e8
rol eax, 0x54
popf
pushf
not eax
add eax, 0x95f69b7b
xor eax, 0xd93aaeb3
rol eax, 0xc1
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0x3d14706a
pushf
not eax
add eax, 0xd128e0b2
xor eax, 0x9870bf38
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xbd6bf83b
xor eax, 0xf17a98e8
rol eax, 0x94
popf
pushf
not eax
add eax, 0xc8336803
xor eax, 0xe8692772
rol eax, 0x73
popf
jmp 0x140116a9a
cmp dword [rcx], 0
jne 0x1401170cf
push rax
pushf
mov eax, 0x27a9a248
pushf
not eax
add eax, 0xe3df2756
xor eax, 0xb1216868
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xa70442f3
xor eax, 0xb305752b
rol eax, 0x73
popf
pushf
not eax
add eax, 0xe6a1f843
xor eax, 0xcc6be4d0
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xb1d6ddb4
xor eax, 0xbf951eae
rol eax, 0xd0
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0x5ce328d
pushf
not eax
add eax, 0xa1b6ed80
xor eax, 0x815f19db
rol eax, 8
popf
pushf
not eax
add eax, 0x894b22c8
xor eax, 0xd927d226
rol eax, 0x70
popf
pushf
not eax
add eax, 0xbe0ac6b6
xor eax, 0x927fbe95
rol eax, 0x9c
popf
jmp 0x140116a9a
call fcn.14019fe1c
mov rcx, qword [rbx + 0xf8]
call fcn.1400c8933
push rax
pushf
mov eax, 0x5448bc7b
pushf
not eax
add eax, 0x8e4ff381
xor eax, 0xe488bef3
rol eax, 0x42
popf
pushf
not eax
add eax, 0xac590336
xor eax, 0x9a709e8a
rol eax, 0x23
popf
pushf
not eax
add eax, 0xed0b9ae9
xor eax, 0xa9b96d23
rol eax, 0x3b
popf
jmp 0x140116a9a
mov rcx, qword [rbx + 0xe0]
call fcn.14019fe1c
mov rcx, qword [rbx + 0xf8]
call fcn.14019fe1c
push rax
pushf
mov eax, 0xdf68adc9
pushf
not eax
add eax, 0xeb7e1cd4
xor eax, 0x8cc06920
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xff81cb01
xor eax, 0xa3775623
rol eax, 7
popf
pushf
not eax
add eax, 0xe7402a2a
xor eax, 0xb8106f81
rol eax, 0x6b
popf
jmp 0x140116a9a
mov rax, qword [rbx + 0x100]
test rax, rax
je 0x14011721c
push rax
pushf
mov eax, 0xdc300df
pushf
not eax
add eax, 0xa3c40ff1
xor eax, 0xadca0324
rol eax, 0x92
popf
pushf
not eax
add eax, 0xcb5aad1e
xor eax, 0xade0b562
rol eax, 0x50
popf
pushf
not eax
add eax, 0xc269298c
xor eax, 0xb9d5f426
rol eax, 0x59
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0x2d0b3ff3
pushf
not eax
add eax, 0xc0bdf330
xor eax, 0xec0ea7ae
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xa1bfe346
xor eax, 0xba24a49a
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xa463cc63
xor eax, 0xf0650f3c
rol eax, 0x41
popf
jmp 0x140116a9a
cmp dword [rax], 0
jne 0x1401172c0
push rax
pushf
mov eax, 0x77fdd6b4
pushf
not eax
add eax, 0xb0ff1213
xor eax, 0xf002f572
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x8cc7fb90
xor eax, 0xcc69d6c3
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xc7207c87
xor eax, 0xdd4b06d2
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xfc5dfaa0
xor eax, 0x88200bc8
rol eax, 0x96
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0x467d2b2c
pushf
not eax
add eax, 0x84330c36
xor eax, 0xec98362f
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xebe0da8f
xor eax, 0xa06b60da
rol eax, 0x15
popf
jmp 0x140116a9a
mov rcx, qword [rbx + 0x108]
sub rcx, 0xfe
call fcn.14019fe1c
mov rcx, qword [rbx + 0x110]
mov edi, 0xe4e0856
pushf
not edi
add edi, 0xa2612815
xor edi, 0xd8f3580a
rol edi, 0x2b
popf
pushf
not edi
add edi, 0xcd0df2b1
xor edi, 0xcad05849
rol edi, 0xdc
popf
sub rcx, rdi
call fcn.14019fe1c
mov rcx, qword [rbx + 0x118]
sub rcx, rdi
call fcn.14019fe1c
mov rcx, qword [rbx + 0x100]
call fcn.14019fe1c
push rax
pushf
mov eax, 0x6291af4b
pushf
not eax
add eax, 0xefdafd72
xor eax, 0x85e1aa2a
rol eax, 0xd
popf
pushf
not eax
add eax, 0xa0b2cee1
xor eax, 0x84314e4b
rol eax, 0xba
popf
jmp 0x140116a9a
mov rcx, qword [rbx + 0x120]
call fcn.140061a1a
lea rsi, [rbx + 0x128]
mov ebp, 0x229f25e9
pushf
not ebp
add ebp, 0x8484c54b
xor ebp, 0xd6fd683e
rol ebp, 0x9e
popf
pushf
not ebp
add ebp, 0xc0105120
xor ebp, 0xcd372140
rol ebp, 0x79
popf
pushf
not ebp
add ebp, 0xd859b75d
xor ebp, 0xc816bcf8
rol ebp, 0xef
popf
lea rdi, [rbx + 0x38]
push rax
pushf
mov eax, 0xac3cb32d
pushf
not eax
add eax, 0x87e9a81d
xor eax, 0xbba2690d
rol eax, 0x57
popf
pushf
not eax
add eax, 0xa1e7bcaa
xor eax, 0xb0b7cd5b
rol eax, 0x75
popf
jmp 0x140116a9a
lea rax, [0x1b97207d7]
pushf
sub rax, 0x796d53af
popf
cmp qword [rdi - 0x10], rax
je 0x140117490
push rax
pushf
mov eax, 0xfc4d4cb1
pushf
not eax
add eax, 0xb8fd2c08
xor eax, 0xd2bd2a2b
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x960f5fe2
xor eax, 0xa62e6779
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xfd93cc6c
xor eax, 0xaa893728
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xbd929479
xor eax, 0xb3bf9c52
rol eax, 0xb1
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0xca7f8f16
pushf
not eax
add eax, 0xa0b3bd40
xor eax, 0x99998ae9
rol eax, 0xce
popf
pushf
not eax
add eax, 0x8d9b5d6e
xor eax, 0x923a787b
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xe0e05250
xor eax, 0xb6716a28
rol eax, 0x25
popf
pushf
not eax
add eax, 0xe0d0ac25
xor eax, 0x8148383a
rol eax, 0x88
popf
jmp 0x140116a9a
mov rcx, qword [rdi]
test rcx, rcx
je 0x140117537
push rax
pushf
mov eax, 0x492fc0ff
pushf
not eax
add eax, 0xe633c74f
xor eax, 0x904bc1be
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xe29018b0
xor eax, 0xde43cba2
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xd80a528d
xor eax, 0xa062c19b
rol eax, 0xe0
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0xcc32fc7d
pushf
not eax
add eax, 0x9e8ddfa1
xor eax, 0xddb64379
rol eax, 0x13
popf
pushf
not eax
add eax, 0xf09ba20f
xor eax, 0xebeadf59
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x9b745223
xor eax, 0xe76e3025
rol eax, 0xe6
popf
jmp 0x140116a9a
cmp dword [rcx], 0
jne 0x1401175c8
push rax
pushf
mov eax, 0x6b74758e
pushf
not eax
add eax, 0xf85eebb1
xor eax, 0x81f92d7d
rol eax, 0x68
popf
pushf
not eax
add eax, 0xe1248884
xor eax, 0x95fe536f
rol eax, 0x45
popf
pushf
not eax
add eax, 0x937bf384
xor eax, 0x8c8cb218
rol eax, 0x1b
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0xf7c1182f
pushf
not eax
add eax, 0x80b540e7
xor eax, 0x8206f9a0
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x9532f3d5
xor eax, 0x9a390e35
rol eax, 0x62
popf
pushf
not eax
add eax, 0x984969e6
xor eax, 0xcacee436
rol eax, 0x7d
popf
jmp 0x140116a9a
call fcn.14019fe1c
mov rcx, qword [rsi]
call fcn.14019fe1c
push rax
pushf
mov eax, 0x900125d3
pushf
not eax
add eax, 0xfd93cba2
xor eax, 0xae819e08
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xb40dd5fd
xor eax, 0xe51d1538
rol eax, 0x74
popf
jmp 0x140116a9a
cmp qword [rdi - 0x18], 0
je 0x1401176ae
push rax
pushf
mov eax, 0x130e9dd7
pushf
not eax
add eax, 0xef08515e
xor eax, 0xf7505f9e
rol eax, 0x85
popf
pushf
not eax
add eax, 0x85d0f6db
xor eax, 0xbd2b40d7
rol eax, 0x86
popf
pushf
not eax
add eax, 0xcf665f79
xor eax, 0xa47f9584
rol eax, 0xf
popf
pushf
not eax
add eax, 0xb0c8f6dd
xor eax, 0xab181509
rol eax, 0x7c
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0xe604413d
pushf
not eax
add eax, 0xd2b76b74
xor eax, 0x9ee99d91
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xccef37cc
xor eax, 0xc41e89b8
rol eax, 0x21
popf
pushf
not eax
add eax, 0xadd46d83
xor eax, 0x9d7b2de5
rol eax, 0x86
popf
pushf
not eax
add eax, 0x954432bc
xor eax, 0xbf868a9c
rol eax, 0x29
popf
jmp 0x140116a9a
mov rcx, qword [rdi - 8]
test rcx, rcx
je 0x140117743
push rax
pushf
mov eax, 0xe2415077
pushf
not eax
add eax, 0x9d1324f4
xor eax, 0xcd448667
rol eax, 0x46
popf
pushf
not eax
add eax, 0xc86e404c
xor eax, 0xe319b93a
rol eax, 0x9e
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0xece1eb4b
pushf
not eax
add eax, 0xf7266ce3
xor eax, 0xe24f7277
rol eax, 0xa
popf
pushf
not eax
add eax, 0x97b22650
xor eax, 0xa2c038e2
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xd3f8dc2b
xor eax, 0xf7fab286
rol eax, 0x8e
popf
jmp 0x140116a9a
cmp dword [rcx], 0
jne 0x1401177d4
push rax
pushf
mov eax, 0xe601cf0a
pushf
not eax
add eax, 0xb51ceb98
xor eax, 0x8be8ae7d
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x932af968
xor eax, 0xb9b2b986
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x9062dc3c
xor eax, 0x9ea6f3fe
rol eax, 0x54
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0x4c323a59
pushf
not eax
add eax, 0xeb78af61
xor eax, 0xb7ccacf1
rol eax, 0x91
popf
pushf
not eax
add eax, 0xa682deeb
xor eax, 0xc022a637
rol eax, 0xb
popf
pushf
not eax
add eax, 0xfc48d64d
xor eax, 0x9ae9c4b2
rol eax, 0x22
popf
jmp 0x140116a9a
call fcn.14019fe1c
push rax
pushf
mov eax, 0xfe9a290
pushf
not eax
add eax, 0xdf462f32
xor eax, 0x82c53968
rol eax, 0x35
popf
pushf
not eax
add eax, 0x861753b0
xor eax, 0xc1021210
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x80510689
xor eax, 0xa0ec347a
rol eax, 0
popf
jmp 0x140116a9a
add rsi, 8
add rdi, 0x20
sub rbp, 1
jne 0x1401178a6
push rax
pushf
mov eax, 0x94f031d4
pushf
not eax
add eax, 0x82c08d8f
xor eax, 0xc79ca381
rol eax, 0x79
popf
pushf
not eax
add eax, 0xe433a405
xor eax, 0xaddf0a14
rol eax, 0xa5
popf
jmp 0x140116a9a
push rax
pushf
mov eax, 0x9189aaf4
pushf
not eax
add eax, 0xca392b06
xor eax, 0xe26f5b50
rol eax, 0x85
popf
pushf
not eax
add eax, 0xed8e72ad
xor eax, 0x96b30a71
rol eax, 0xea
popf
jmp 0x140116a9a
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
jmp fcn.14019fe1c