Function at 0x140227ef0
Capabilities:
Encode data using xor
Encrypt data using chaskey
Hash data using murmur3
Resolve function by parsing pe exports

Disassembly:
test r8, r8
je 0x1402286df
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
mov eax, 0x60
call fcn.1402cdb60
sub rsp, rax
mov esi, dword [rcx]
mov rax, r8
mov edi, dword [rcx + 4]
mov ebx, dword [rcx + 8]
mov r11d, dword [rcx + 0xc]
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x20], esi
mov dword [rsp + 0x24], edi
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x2c], r11d
nop word [rax + rax]
movzx r8d, byte [rdx]
dec rax
movzx r9d, byte [rdx + 4]
mov ecx, r11d
movzx r10d, byte [rdx + 8]
xor ecx, ebx
mov qword [rsp + 0x90], rax
and ecx, edi
movzx eax, byte [rdx + 1]
xor ecx, r11d
shl eax, 8
or r8d, eax
movzx eax, byte [rdx + 2]
shl eax, 0x10
or r8d, eax
movzx eax, byte [rdx + 3]
shl eax, 0x18
or r8d, eax
movzx eax, byte [rdx + 5]
shl eax, 8
add ecx, r8d
or r9d, eax
mov dword [rsp + 0x88], r8d
movzx eax, byte [rdx + 6]
mov r8d, ebx
shl eax, 0x10
xor r8d, edi
or r9d, eax
add ecx, esi
movzx eax, byte [rdx + 7]
shl eax, 0x18
or r9d, eax
rol ecx, 3
movzx eax, byte [rdx + 9]
and r8d, ecx
shl eax, 8
xor r8d, ebx
or r10d, eax
mov dword [rsp + 8], r9d
movzx eax, byte [rdx + 0xa]
add r8d, r9d
shl eax, 0x10
add r8d, r11d
movzx r11d, byte [rdx + 0xc]
or r10d, eax
movzx eax, byte [rdx + 0xb]
mov r9d, edi
shl eax, 0x18
xor r9d, ecx
or r10d, eax
rol r8d, 7
movzx eax, byte [rdx + 0xd]
and r9d, r8d
shl eax, 8
xor r9d, edi
or r11d, eax
mov dword [rsp], r10d
movzx eax, byte [rdx + 0xe]
add r9d, r10d
shl eax, 0x10
add r9d, ebx
movzx ebx, byte [rdx + 0x10]
or r11d, eax
movzx eax, byte [rdx + 0xf]
mov r10d, r8d
shl eax, 0x18
xor r10d, ecx
or r11d, eax
rol r9d, 0xb
movzx eax, byte [rdx + 0x11]
shl eax, 8
or ebx, eax
mov dword [rsp + 0x14], r11d
movzx eax, byte [rdx + 0x12]
shl eax, 0x10
or ebx, eax
movzx eax, byte [rdx + 0x13]
shl eax, 0x18
or ebx, eax
mov dword [rsp + 0x98], ebx
and r10d, r9d
movzx eax, byte [rdx + 0x15]
xor r10d, ecx
movzx r13d, byte [rdx + 0x20]
add r10d, r11d
shl eax, 8
add r10d, edi
movzx edi, byte [rdx + 0x14]
mov r11d, r8d
or edi, eax
ror r10d, 0xd
movzx eax, byte [rdx + 0x16]
xor r11d, r9d
shl eax, 0x10
and r11d, r10d
or edi, eax
xor r11d, r8d
movzx eax, byte [rdx + 0x17]
add r11d, ebx
movzx ebx, byte [rdx + 0x18]
add r11d, ecx
shl eax, 0x18
mov ecx, r9d
or edi, eax
rol r11d, 3
movzx eax, byte [rdx + 0x19]
xor ecx, r10d
shl eax, 8
and ecx, r11d
or ebx, eax
mov dword [rsp + 0x10], edi
movzx eax, byte [rdx + 0x1a]
xor ecx, r9d
shl eax, 0x10
add ecx, edi
movzx edi, byte [rdx + 0x1c]
or ebx, eax
movzx eax, byte [rdx + 0x1b]
add ecx, r8d
shl eax, 0x18
mov r8d, r10d
or ebx, eax
rol ecx, 7
movzx eax, byte [rdx + 0x1d]
xor r8d, r11d
shl eax, 8
and r8d, ecx
or edi, eax
mov dword [rsp + 4], ebx
movzx eax, byte [rdx + 0x1e]
xor r8d, r10d
shl eax, 0x10
add r8d, ebx
or edi, eax
add r8d, r9d
movzx eax, byte [rdx + 0x1f]
mov ebx, ecx
movzx r9d, byte [rdx + 0x24]
xor ebx, r11d
shl eax, 0x18
or edi, eax
rol r8d, 0xb
movzx eax, byte [rdx + 0x21]
and ebx, r8d
shl eax, 8
xor ebx, r11d
or r13d, eax
mov dword [rsp + 0x1c], edi
movzx eax, byte [rdx + 0x22]
add ebx, edi
shl eax, 0x10
add ebx, r10d
or r13d, eax
ror ebx, 0xd
movzx eax, byte [rdx + 0x23]
shl eax, 0x18
or r13d, eax
movzx eax, byte [rdx + 0x25]
shl eax, 8
or r9d, eax
movzx eax, byte [rdx + 0x26]
shl eax, 0x10
or r9d, eax
movzx r12d, byte [rdx + 0x28]
movzx eax, byte [rdx + 0x27]
mov r10d, ecx
movzx edi, byte [rdx + 0x2c]
xor r10d, r8d
movzx ebp, byte [rdx + 0x30]
and r10d, ebx
movzx r15d, byte [rdx + 0x34]
xor r10d, ecx
shl eax, 0x18
add r10d, r13d
or r9d, eax
add r10d, r11d
movzx eax, byte [rdx + 0x29]
mov r11d, r8d
shl eax, 8
xor r11d, ebx
or r12d, eax
mov dword [rsp + 0xc], r9d
movzx eax, byte [rdx + 0x2a]
shl eax, 0x10
or r12d, eax
rol r10d, 3
movzx eax, byte [rdx + 0x2b]
and r11d, r10d
shl eax, 0x18
xor r11d, r8d
or r12d, eax
add r11d, r9d
movzx eax, byte [rdx + 0x2d]
add r11d, ecx
shl eax, 8
mov r9d, ebx
or edi, eax
rol r11d, 7
movzx eax, byte [rdx + 0x2e]
xor r9d, r10d
shl eax, 0x10
and r9d, r11d
or edi, eax
xor r9d, ebx
movzx eax, byte [rdx + 0x2f]
add r9d, r12d
shl eax, 0x18
add r9d, r8d
or edi, eax
rol r9d, 0xb
movzx eax, byte [rdx + 0x31]
mov ecx, r11d
shl eax, 8
xor ecx, r10d
or ebp, eax
mov dword [rsp + 0x18], edi
movzx eax, byte [rdx + 0x32]
and ecx, r9d
shl eax, 0x10
xor ecx, r10d
or ebp, eax
add ecx, edi
movzx eax, byte [rdx + 0x33]
add ecx, ebx
shl eax, 0x18
mov r8d, r11d
or ebp, eax
ror ecx, 0xd
movzx eax, byte [rdx + 0x35]
xor r8d, r9d
shl eax, 8
and r8d, ecx
or r15d, eax
xor r8d, r11d
movzx eax, byte [rdx + 0x36]
add r8d, ebp
shl eax, 0x10
add r8d, r10d
or r15d, eax
movzx eax, byte [rdx + 0x37]
shl eax, 0x18
or r15d, eax
rol r8d, 3
movzx eax, byte [rdx + 0x39]
mov r10d, r9d
movzx esi, byte [rdx + 0x38]
xor r10d, ecx
movzx r14d, byte [rdx + 0x3c]
lea rdx, [rdx + 0x40]
shl eax, 8
and r10d, r8d
or esi, eax
xor r10d, r9d
movzx eax, byte [rdx - 6]
add r10d, r15d
shl eax, 0x10
add r10d, r11d
or esi, eax
rol r10d, 7
movzx eax, byte [rdx - 5]
mov r11d, ecx
shl eax, 0x18
xor r11d, r8d
or esi, eax
and r11d, r10d
movzx eax, byte [rdx - 3]
xor r11d, ecx
shl eax, 8
add r11d, esi
or r14d, eax
add r11d, r9d
movzx eax, byte [rdx - 2]
lea r9d, [r8 + 0x5a827999]
shl eax, 0x10
mov ebx, r10d
xor ebx, r8d
rol r11d, 0xb
or r14d, eax
and ebx, r11d
movzx eax, byte [rdx - 1]
xor ebx, r8d
shl eax, 0x18
or r14d, eax
mov eax, r11d
add ebx, r14d
add ebx, ecx
mov ecx, r11d
ror ebx, 0xd
or ecx, ebx
and eax, ebx
and ecx, r10d
mov r8d, ebx
or ecx, eax
add ecx, dword [rsp + 0x88]
add r9d, ecx
mov ecx, ebx
rol r9d, 3
and ecx, r9d
or r8d, r9d
mov eax, r8d
and eax, r11d
or eax, ecx
add eax, 0x5a827999
add eax, dword [rsp + 0x98]
add r10d, eax
rol r10d, 5
and r8d, r10d
or r8d, ecx
add r8d, 0x5a827999
add r8d, r13d
add r11d, r8d
rol r11d, 9
mov ecx, r11d
mov eax, r11d
or ecx, r9d
and eax, r9d
and ecx, r10d
or ecx, eax
add ecx, 0x5a827999
add ecx, ebp
add ebx, ecx
mov ecx, r11d
rol ebx, 0xd
or ecx, ebx
and ecx, r10d
mov eax, r11d
and eax, ebx
mov r8d, ebx
or ecx, eax
add ecx, 0x5a827999
add ecx, dword [rsp + 8]
add r9d, ecx
mov ecx, ebx
rol r9d, 3
and ecx, r9d
or r8d, r9d
mov eax, r8d
and eax, r11d
or eax, ecx
add eax, 0x5a827999
add eax, dword [rsp + 0x10]
add r10d, eax
rol r10d, 5
and r8d, r10d
or r8d, ecx
add r8d, 0x5a827999
add r8d, dword [rsp + 0xc]
add r11d, r8d
rol r11d, 9
mov ecx, r11d
mov eax, r11d
or ecx, r9d
and eax, r9d
and ecx, r10d
or ecx, eax
mov eax, r11d
add ecx, 0x5a827999
add ecx, r15d
add ebx, ecx
mov ecx, r11d
rol ebx, 0xd
or ecx, ebx
and eax, ebx
and ecx, r10d
mov r8d, ebx
or ecx, eax
add ecx, 0x5a827999
lea edi, [rbx + 0x5a827999]
add ecx, dword [rsp]
add r9d, ecx
mov ecx, ebx
rol r9d, 3
and ecx, r9d
or r8d, r9d
mov eax, r8d
and eax, r11d
or eax, ecx
lea ebx, [r9 + 0x5a827999]
add eax, 0x5a827999
add eax, dword [rsp + 4]
add r10d, eax
rol r10d, 5
and r8d, r10d
or r8d, ecx
add r8d, 0x5a827999
add r8d, r12d
add r11d, r8d
rol r11d, 9
mov ecx, r11d
mov eax, r11d
or ecx, r9d
and eax, r9d
and ecx, r10d
or ecx, eax
mov eax, r11d
add ecx, esi
add edi, ecx
mov ecx, r11d
rol edi, 0xd
or ecx, edi
and eax, edi
and ecx, r10d
or ecx, eax
add ecx, dword [rsp + 0x14]
add ebx, ecx
lea r9d, [r10 + 0x5a827999]
rol ebx, 3
lea r10d, [r11 + 0x5a827999]
mov r8d, edi
or r8d, ebx
mov ecx, edi
mov eax, r8d
and ecx, ebx
and eax, r11d
or eax, ecx
add eax, dword [rsp + 0x1c]
add r9d, eax
rol r9d, 5
and r8d, r9d
or r8d, ecx
add r8d, dword [rsp + 0x18]
add r10d, r8d
mov r8d, r9d
rol r10d, 9
xor r8d, r10d
mov r11d, r10d
or r11d, ebx
mov eax, r10d
and eax, ebx
and r11d, r9d
or r11d, eax
mov eax, r10d
add r11d, 0x5a827999
add r11d, r14d
add r11d, edi
rol r11d, 0xd
xor eax, r11d
xor r8d, r11d
add r8d, 0x6ed9eba1
add r8d, dword [rsp + 0x88]
add r8d, ebx
rol r8d, 3
xor eax, r8d
add eax, 0x6ed9eba1
add eax, r13d
add r9d, eax
rol r9d, 9
mov eax, r9d
mov ecx, r9d
xor eax, r11d
xor eax, r8d
add eax, 0x6ed9eba1
add eax, dword [rsp + 0x98]
add r10d, eax
rol r10d, 0xb
xor ecx, r10d
mov eax, ecx
xor eax, r8d
add eax, 0x6ed9eba1
add eax, ebp
add r11d, eax
mov eax, r10d
rol r11d, 0xf
xor eax, r11d
xor ecx, r11d
add ecx, 0x6ed9eba1
add ecx, dword [rsp]
add r8d, ecx
rol r8d, 3
xor eax, r8d
add eax, 0x6ed9eba1
add eax, r12d
add r9d, eax
rol r9d, 9
mov eax, r9d
mov ecx, r9d
xor eax, r11d
xor eax, r8d
add eax, 0x6ed9eba1
add eax, dword [rsp + 4]
add r10d, eax
rol r10d, 0xb
xor ecx, r10d
mov eax, ecx
xor eax, r8d
add eax, 0x6ed9eba1
add eax, esi
lea ebx, [r9 + 0x6ed9eba1]
add r11d, eax
mov esi, dword [rsp + 0x20]
rol r11d, 0xf
lea edi, [r10 + 0x6ed9eba1]
xor ecx, r11d
mov eax, r10d
xor eax, r11d
add ecx, 0x6ed9eba1
add ecx, dword [rsp + 8]
add r8d, ecx
rol r8d, 3
xor eax, r8d
add eax, dword [rsp + 0xc]
add ebx, eax
rol ebx, 9
lea r9d, [r8 + 0x6ed9eba1]
mov eax, ebx
mov ecx, ebx
xor eax, r11d
xor eax, r8d
add eax, dword [rsp + 0x10]
lea r10d, [rbx + 0x6ed9eba1]
mov ebx, dword [rsp + 0x28]
add edi, eax
rol edi, 0xb
xor ecx, edi
mov eax, ecx
xor eax, r8d
add eax, 0x6ed9eba1
lea r8d, [rdi + 0x6ed9eba1]
add eax, r15d
add r11d, eax
mov eax, edi
mov edi, dword [rsp + 0x24]
rol r11d, 0xf
xor eax, r11d
xor ecx, r11d
add ecx, dword [rsp + 0x14]
add r9d, ecx
rol r9d, 3
lea ecx, [r11 + 0x6ed9eba1]
xor eax, r9d
add esi, r9d
add eax, dword [rsp + 0x18]
add r10d, eax
mov dword [rsp + 0x20], esi
rol r10d, 9
mov eax, r10d
xor eax, r11d
mov r11d, dword [rsp + 0x2c]
xor eax, r9d
add r11d, r10d
add eax, dword [rsp + 0x1c]
add r8d, eax
mov dword [rsp + 0x2c], r11d
rol r8d, 0xb
mov eax, r10d
xor eax, r8d
add ebx, r8d
xor eax, r9d
mov dword [rsp + 0x28], ebx
add eax, r14d
add ecx, eax
mov rax, qword [rsp + 0x80]
rol ecx, 0xf
add edi, ecx
mov dword [rsp + 0x24], edi
mov dword [rax], esi
mov dword [rax + 4], edi
mov dword [rax + 8], ebx
mov dword [rax + 0xc], r11d
mov rax, qword [rsp + 0x90]
test rax, rax
jne 0x140227f50
mov r15, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov r13, qword [rsp + 0x48]
mov r12, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
pop rdi
pop rsi
pop rbx
ret