Function at 0x401798
Capabilities:
Encode data using xor
Hash data using murmur3

Disassembly:
xor edi, eax
rol esi, 0x1a
not edx
mov esi, eax
neg edx
not eax
xor esi, esp
and esi, 0x3ddd2f4
mov edx, ebx
sub ebx, ecx
ror esi, 0xc
mov ecx, ecx
mov ecx, eax
xor ebx, edx
or esi, 0x181bf394
mov edx, 0x19efa84e
rol eax, 0xf
and ecx, 0x7e3f74c
ror eax, 0x14
shl eax, 0xb
add esi, eax
xor esi, dword [0x40a150]
mov ecx, 0x1fe530
not eax
or ebx, dword [0x40a167]
neg eax
call fcn.004014ab
and edi, dword [0x40a150]
dec esi
shr esi, 0x17
ror esi, 0x12
or dword [0x40cbc0], esi
inc eax
mov ebx, dword [0x40a008]
inc edx
loop 0x4017e1
and edi, dword [0x40a0d5]
sub ebx, 0xaa6b31d
rol eax, 0x11
or edx, dword [0x40a130]
xor ebx, esp
test ebx, edx
jo 0x401844
xor ecx, ecx
test edx, ebx
jo 0x4018a3
rol eax, 0x1e
inc esi
ror ebx, 0x18
mov ecx, 0x9da311
call fcn.00402b21
shl edx, 0xb
sub dword [0x40c8f3], ecx
rol edi, 0x1c
neg eax
sub dword [0x40c968], 0x16b9ee08
shr edx, 0x18
sub ebx, dword [0x40a0b8]
test esi, esi
enter 0x40, 0xffffffffffffffc1
invalid
mov al, byte [0xf6850040]
jo 0x40186e
rol edx, 0x1a
loop 0x40183a
dec ebx
xor eax, 0x16384716
cmp byte [esi], dl
or esi, edi
xor esi, eax
and esi, edi
and esi, edi
or esi, edi
rol ecx, 0x10
mov edx, eax
mov ebx, eax
xor edi, eax
mov esi, 0xc46a6f8
mov edi, dword [0x40a067]
mov edi, ebp
rol esi, 9
mov ebx, esp
mov edx, eax
xor edi, eax
inc eax
and edx, 0x3db357c
or eax, 0x43a06ec
test esp, esp
jo 0x40185d
push es
cmp al, byte [eax*4 + 0x33b370e4]
ror dword [ebx + 0x68c681f6], 1
mov al, ah
add dword [ebx], ebp
salc
xor edx, ecx
mov esi, esi
add esi, 0x1e08868
sub edx, esi
mov esi, eax
test ebx, edx
jo 0x4018cb
not esi
mov ebx, eax
or esi, 0x4395c29
ror esi, 5
sub eax, 0x17486907
mov eax, ecx
mov ecx, dword [0x40a1df]
mov eax, eax
pop es
imul ecx, dword [eax + 0x17], 0xd8bc18b
fbld tbyte [ecx - 0x3f74ffc0]
xor esi, eax
neg ebx
mov esi, edx
call fcn.0040542d
mov ecx, 0x450230
or esi, dword [0x40a154]
rol eax, 5
neg ebx
call fcn.00402b21
neg eax
inc esi
shr eax, 4
xchg esi, esi
shr edi, 0x12
rol edx, 7
inc eax
mov dword [0x40cb8a], 0x13618ce
loop 0x4018e9
mov eax, 0xd785cbd
xor edi, 0x87a160
xchg dword [eax], eax
xor ecx, esp
sub edx, 0x157ad1af
test ebx, 0x298ea20
jo 0x40191d
add dword [0x40c900], 0x9db7ebd
or esi, edi
not eax
dec ebx
mov eax, 0x142aa1ac
not ebx
sub edi, edx
mov ecx, 0x87c41e
inc esi
rol esi, 1
add esi, dword [0x40a1b1]
xor dword [0x40cb4e], ebx
call fcn.00402d90
inc edx
sub dword [0x40c9da], esi
rol eax, 0x12
dec edx
shr eax, 0x11
shl edx, 0x1e
test ebx, ebx
jo 0x401943
mov dword [0x40c939], 0x2c45380
loop 0x40194c
push str.KERNEL32.dll
rol eax, 0x19
xor ecx, dword [0x40a00c]
xor eax, eax
dec eax
neg esi
inc ecx
call fcn.0040542d
rol eax, 1
sub dword [0x40cc60], 0x22a48aa
add eax, eax
xor eax, eax
mov dword [0x40c920], 0x37729d70
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xchg edx, esi
mov dword [0x40cc40], ebx
xchg eax, eax
xor esi, eax
xchg eax, eax
xor eax, ebx
mov dword [0x40cab8], edi
xor esi, 0x2a309bc0
dec eax
call fcn.00402b21
xor esi, esp
neg ecx
xchg esi, eax
xor eax, esi
sub ecx, dword [0x40cd2a]
call fcn.00403566
not esi
xor ecx, dword [0x40ce8b]
add esi, 0x173c06d5
xor esi, eax
xor esi, eax
sub esi, 0x173c06d5
not esi
call fcn.00402b21
xor eax, esi
xchg esi, eax
neg ecx
xor esi, esp
call fcn.00402b21
inc eax
xor esi, 0x2a309bc0
or dword [0x40cb5a], ebx
xor eax, ebx
xchg eax, eax
xor esi, eax
xchg eax, eax
sub dword [0x40ca14], ecx
xchg edx, esi
push 0
not esi
xor esi, eax
call fcn.00402b21
dec eax
neg edi
call fcn.0040542f
ror edx, 0xe
mov dword [0x40c926], 0xacab034
sub ebx, eax
xor esi, eax
not eax
call fcn.00403566
add ecx, dword [0x40ce6d]
xor ecx, edx
inc eax
sub ecx, dword [0x40ccd0]
xor ecx, esi
sub esi, ebx
sub esi, dword [0x40ccf4]
add edi, dword [0x40ccf8]
add esi, ebx
xor ecx, esi
dec eax
xor ecx, edx
call fcn.004012de
not eax
xor esi, eax
add ebx, eax
mov dword [0x40cb0f], 0x25a7d416
rol edx, 0xe
call fcn.0040542f
neg edi
inc eax
xor esi, eax
not esi
push 0x636f6c6c
call fcn.004048b5
xchg esi, esi
neg eax
sub eax, esp
xor esi, 0x52664e
sub esi, eax
xor ebx, esp
rol edx, 0xe
sub ecx, dword [0x40cd76]
sub ecx, esp
mov dword [0x40cab7], 0xf735294
xor esi, esp
inc ebx
dec ebx
xor esi, esp
mov dword [0x40ca88], 0x1fecbb11
add ecx, esp
ror edx, 0xe
xor ebx, esp
add esi, eax
xor esi, 0x52664e
add eax, esp
neg eax
xchg esi, esi
push 0x416c6175
sub esi, dword [0x40ceee]
xchg esi, edx
not edx
xchg edx, edx
xor edi, 0x1059921f
xor dword [0x40c9b0], edi
dec esi
call fcn.00402efa
rol ebx, 9
call fcn.0040173b
sub dword [0x40cc41], 0x63087fb
dec eax
xor dword [0x40cb1b], edx
sub ecx, dword [0x40cdc8]
xor edx, eax
xchg esi, eax
or dword [0x40ca8c], edx
xor edi, dword [0x40cdd0]
xor esi, eax
rol ebx, 0x13
xor esi, dword [0x40cce3]
rol ecx, 0x19
ror ecx, 0x19
ror ebx, 0x13
xor esi, eax
or dword [0x40c8f4], ebx
xchg esi, eax
xor edx, eax
mov dword [0x40c986], ecx
inc eax
mov dword [0x40ca04], 0x164d98a
call fcn.00402b21
ror ebx, 9
inc esi
xor dword [0x40c8f2], edi
xor edi, 0x1059921f
xchg edx, edx
not edx
xchg esi, edx
push 0x74726956
xor esi, 0x4f36386
ror esi, 0xa
call fcn.00403e99
sub ebx, dword [0x40cc70]
add ecx, dword [0x40cf98]
sub esi, 0x17f1d080
xor edx, dword [0x40cee0]
mov dword [0x40cb8a], 0x1e66d908
mov dword [0x40c96a], ecx
call fcn.00402b21
xor ebx, esp
xor dword [0x40c9b6], ecx
call fcn.00402b21
neg edx
sub dword [0x40cc14], ebx
sub edx, dword [0x40ccb6]
xchg eax, esi
call fcn.00403058
call fcn.0040707c
xchg eax, esi
sub dword [0x40caea], esi
neg edx
sub dword [0x40ca2a], ecx
xor ebx, esp
call fcn.00402b21
mov dword [0x40cab4], esi
add esi, 0x17f1d080
rol esi, 0xa
xor esi, 0x4f36386
push esp
xor ecx, eax
sub eax, 0xc57c204
xchg edi, eax
xor ebx, esi
rol esi, 0xe
mov dword [0x40cba4], esi
mov dword [0x40cbed], 0x3cb9fec
inc ebx
xor edi, dword [0x40ce87]
rol ecx, 2
ror ecx, 2
dec ebx
or dword [0x40c910], 0x30994a07
ror esi, 0xe
xor ebx, esi
xchg edi, eax
add eax, 0xc57c204
xor ecx, eax
push eax
neg eax
call fcn.00403e99
neg esi
xor esi, eax
add ebx, eax
sub esi, dword [0x40ccd8]
and dword [0x40c908], 0x289cdb7
add esi, edi
or dword [0x40cad8], esi
xor ecx, dword [0x40ce68]
mov dword [0x40ca10], 0x54a0d7c
ror esi, 0x1b
sub ebx, dword [0x40ce84]
inc edi
call fcn.0040360e
sub eax, 0x3be93d56
xor ebx, eax
sub dword [0x40cc43], ebx
xchg edx, eax
xchg edx, eax
add dword [0x40c90c], edx
xor ebx, eax
add eax, 0x3be93d56
call fcn.0040143d
dec edi
rol esi, 0x1b
sub dword [0x40ca1e], 0x16a8656
xor dword [0x40cc35], ecx
sub esi, edi
sub ebx, eax
xor esi, eax
neg esi
neg eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
xor esi, eax
rol eax, 0x13
sub edx, ebx
xchg esi, eax
dec esi
ror eax, 2
sub ebx, edi
xchg eax, edx
add ecx, dword [0x40ce84]
mov dword [0x40cbfc], ecx
ror esi, 6
xor ebx, 0x9fbee70
rol eax, 0x18
neg eax
rol ebx, 0xc
sub eax, 0x301341d
xor esi, esp
add dword [0x40cafa], ecx
and dword [0x40cb90], 0x1b584d68
xor edx, esp
or dword [0x40caac], esi
mov dword [0x40cab4], ebx
xor edx, esp
and dword [0x40caaf], ebx
xor esi, esp
add eax, 0x301341d
ror ebx, 0xc
neg eax
ror eax, 0x18
xor ebx, 0x9fbee70
rol esi, 6
sub dword [0x40caaa], ecx
xchg eax, edx
add ebx, edi
rol eax, 2
inc esi
xchg esi, eax
add edx, ebx
ror eax, 0x13
xor esi, eax
add esp, 0x10
inc edx
sub esi, dword [0x40ce10]
rol eax, 0xd
inc eax
mov dword [0x40c9b0], 0x54ee620
rol eax, 0x14
inc ebx
call fcn.004012de
xor eax, ebx
ror eax, 1
neg eax
sub ecx, edi
sub ebx, dword [0x40cdc2]
add ecx, edi
neg eax
rol eax, 1
xor eax, ebx
call fcn.00402b21
dec ebx
ror eax, 0x14
mov dword [0x40cb48], 0x2fec71f0
dec eax
ror eax, 0xd
dec edx
push 0x40
or dword [0x40cbf9], ecx
xor dword [0x40cc4a], 0xc8906b9
mov dword [0x40ca52], ebx
xor esi, eax
call fcn.004048b5
xchg eax, eax
call fcn.00403058
mov dword [0x40c9dd], 0xa3a9115
add edx, esp
sub ecx, dword [0x40cc70]
xor esi, 0x1758533e
dec esi
sub dword [0x40ca38], 0x1d6f640
not eax
xor esi, eax
xchg esi, esi
xchg esi, esi
xor esi, eax
not eax
inc esi
xor esi, 0x1758533e
sub edx, esp
sub dword [0x40ca18], 0x303a2741
call fcn.00404c68
xchg eax, eax
call fcn.0040707c
xor esi, eax
or dword [0x40cc17], edi
mov dword [0x40cb1e], 0x85688dc
mov dword [0x40ca49], ebx
push 0x3000
inc edx
sub ebx, dword [0x40cd94]
not esi
sub esi, dword [0x40cf38]
xor eax, ebx
mov dword [0x40cb1b], edx
rol eax, 0x1d
dec ebx
sub esi, eax
inc esi
dec esi
add esi, eax
inc ebx
ror eax, 0x1d
xor dword [0x40cc1e], ecx
xor eax, ebx
not esi
dec edx
push 0x766
add dword [0x40c95c], 0x141512da
xor esi, eax
add edx, dword [0x40ce40]
add esi, 0x2bdea70
inc esi
mov dword [0x40c923], edx
xor ecx, eax
xor esi, 0x12cda8b6
call fcn.00403e99
xchg ecx, eax
xchg ecx, eax
xor esi, 0x12cda8b6
xor ecx, eax
dec esi
sub esi, 0x2bdea70
xor esi, eax
push 0
xor edx, 0x12c35380
call fcn.00403217
xor edi, esi
inc eax
sub ecx, dword [0x40cf51]
xor ecx, dword [0x40ce12]
ror esi, 0xf
xor esi, dword [0x40ce32]
xor esi, 0x680d846
xor ecx, dword [0x40ce00]
not esi
xor edi, 0x1d8d33aa
call fcn.00402cc5
inc esi
mov dword [0x40cb78], 0x3993d4a
mov dword [0x40c950], 0x355bb2e8
dec esi
xor edi, 0x1d8d33aa
not esi
xor esi, 0x680d846
rol esi, 0xf
dec eax
xor edi, esi
call fcn.0040707c
xor edx, 0x12c35380
call eax
xor ebx, eax
sub ecx, dword [0x40cd78]
inc edi
xor ebx, eax
or dword [0x40caaa], 0x2d796c20
call fcn.00404b29
add esi, eax
ror esi, 0xa
inc esi
xor esi, eax
or dword [0x40caa0], ebx
not esi
add esi, eax
sub esi, 0x65d7453
xor eax, ebp
not ebx
ror eax, 1
add eax, esi
xor edx, dword [0x40cf32]
sub eax, esi
rol eax, 1
not ebx
xor eax, ebp
add esi, 0x65d7453
sub esi, eax
not esi
sub dword [0x40c988], ebx
xor esi, eax
dec esi
rol esi, 0xa
sub esi, eax
call fcn.00402b21
or dword [0x40cc65], 0x1c110159
xor ebx, eax
dec edi
xor ebx, eax
call 0x401fdd
rol ecx, 0xe
or dword [0x40cb26], 0x8c85949
sub ecx, dword [0x40ccc8]
ror edx, 0xd
sub ebx, esp
ror eax, 0xd
sub edx, dword [0x40cd55]
xor dword [0x40cafa], 0x1aa615ae
xor edi, 0x639bc58
xor ecx, eax
neg edx
xor esi, eax
xor ecx, dword [0x40cf48]
rol edx, 0xb
add ecx, 0x1ebfd61e
xor esi, ecx
xor esi, ecx
sub ecx, 0x1ebfd61e
ror edx, 0xb
xor esi, eax
neg edx
xor ecx, eax
xor edi, 0x639bc58
rol eax, 0xd
add ebx, esp
rol edx, 0xd
ror ecx, 0xe
pop esi
add esi, eax
rol esi, 0x11
mov dword [0x40ca7a], edx
xor esi, eax
add edi, dword [0x40cce0]
call fcn.00403058
xor esi, eax
xor ecx, dword [0x40cd08]
sub esi, eax
call fcn.00402b21
dec edx
rol eax, 0x1a
ror eax, 0x1a
inc edx
call fcn.004015ce
add esi, eax
xor esi, eax
xor esi, eax
mov dword [0x40cab2], ecx
ror esi, 0x11
sub esi, eax
add esi, 0x30d
not edi
add esi, esp
not ecx
call fcn.00402b21
sub ecx, dword [0x40cf68]
sub edx, esp
not esi
call fcn.00405f26
sub edi, dword [0x40cf21]
mov dword [0x40ca70], esi
not eax
sub dword [0x40cb90], edx
ror eax, 0xf
call fcn.00402b21
add edi, edx
xor dword [0x40cb57], ecx
xor edi, esi
neg esi
neg esi
xor edi, esi
mov dword [0x40c974], esi
sub edi, edx
call fcn.00402b21
rol eax, 0xf
sub dword [0x40ca70], edx
not eax
mov dword [0x40cb16], ecx
call fcn.004035b8
not esi
add edx, esp
call fcn.00402b21
not ecx
sub esi, esp
not edi
mov edi, eax
xor ecx, eax
neg eax
xor ecx, dword [0x40cde9]
sub esi, dword [0x40cda0]
add ebx, 0xb5b2dd6
not ebx
rol eax, 0x13
call fcn.00401368
xor eax, 0x145a5ac8
mov dword [0x40c980], ecx
xor ebx, eax
sub esi, dword [0x40cd06]
call fcn.0040707c
add ecx, ebp
or dword [0x40ca0e], 0x1047a668
or dword [0x40c9eb], 0x1923ad94
neg esi
xchg esi, esi
and dword [0x40c983], ebx
xor esi, dword [0x40cec8]
mov dword [0x40ca2e], 0x58181d4
dec ecx
inc ecx
mov dword [0x40cb5c], 0x29a29d0
xchg esi, esi
neg esi
mov dword [0x40c983], 0x7e7471a
or dword [0x40cb0a], 0x3d5a86d2
sub ecx, ebp
call fcn.00402b21
xor ebx, eax
xor eax, 0x145a5ac8
call fcn.00403e99
ror eax, 0x13
not ebx
sub ebx, 0xb5b2dd6
neg eax
xor ecx, eax
mov ecx, 0x766
sub ecx, dword [0x40cf36]
xor esi, eax
add esi, eax
sub edx, dword [0x40cf54]
call fcn.004048b5
xor eax, 0x116acc0
dec edx
add edx, ebx
mov dword [0x40ca12], 0x14146cd4
xor ebx, edx
xor ecx, dword [0x40ce50]
xor edi, ecx
not eax
sub ebx, dword [0x40ce28]
sub ecx, dword [0x40cf30]
call fcn.00402b21
xor eax, ecx
xor eax, ecx
not eax
xor edi, ecx
xor ebx, edx
sub dword [0x40cb66], 0x1986f216
sub edx, ebx
inc edx
xor eax, 0x116acc0
call fcn.00402b21
sub esi, eax
xor esi, eax
rep movsb byte es:[edi], byte [esi]
xchg esi, eax
rol edx, 6
xor dword [0x40ca48], ecx
xor esi, dword [0x40ce38]
rol esi, 1
mov dword [0x40cc22], esi
neg esi
add dword [0x40c900], 0xa75ca28
sub ebx, eax
xor edi, eax
sub edx, dword [0x40cd24]
xor edx, esi
dec ecx
call fcn.00405b2c
inc ecx
xor edx, esi
xor edi, eax
add ebx, eax
mov dword [0x40ca79], 0x1c6491f1
neg esi
ror esi, 1
xor dword [0x40ca7a], ecx
ror edx, 6
xchg esi, eax
jmp eax