Function at 0x424db0
Capabilities:
Encode data using xor
Hash data using murmur3

Disassembly:
dec esp
int3
mov ecx, dword [esp + 0xc]
movzx eax, byte [esp + 8]
mov edx, edi
pushal
pushfd
call fcn.00406772
neg edx
and esi, 0x934970
rol esi, 0xd
mov eax, 0x1508805a
or edi, dword [0x4491d8]
sub ebx, 0x2916b04
not ecx
dec esi
rol eax, 0xb
test esi, ecx
jo 0x424da3
inc eax
rol eax, 0x16
shl ebx, 0xb
test eax, esi
jo 0x424de8
xor esi, edx
rol esi, 6
mov eax, edx
test eax, 0x59dee10
jo 0x424e12
mov ecx, 0x497043
shl eax, 0x1a
loopne 0x424e24
shr eax, 7
rol edx, 0x19
neg esi
shr edi, 0x1a
inc eax
neg eax
rol esi, 0xd
inc esi
shl eax, 0x16
mov dword [0x4569b6], 0x1601340
add byte [eax + 0x13], al
pushal
add dword [edi - 0x261db140], eax
xchg eax, eax
dec esi
loop 0x424e07
test ecx, ecx
jb 0x424e08
mov ecx, 0x170b53
mov dword [0x456a76], edi
rol esi, 8
call fcn.00406040
inc esi
neg eax
inc eax
shr eax, 5
call fcn.0040dce0
xchg edx, eax
not edx
ror edi, 0xa
xor dword [0x456766], ecx
xchg esi, eax
loop 0x424e37
mov ecx, 0xe65728
not eax
shr edx, 0x18
rol esi, 5
not eax
mov dword [0x45681a], edx
neg eax
test eax, 0x145f1ec4
jo 0x424e29
neg esi
rol eax, 9
loop 0x424e67
ror esi, 0x1e
mov eax, 0x1f6737d8
not edx
mov ecx, dword [0x449b40]
dec edx
mov esi, 0x64aeca9
xor edi, esi
mov edx, 0xa404156
push 0
neg eax
xor eax, eax
sub esi, eax
xor esi, eax
rol ecx, 5
sub esi, eax
xor dword [0x45676c], edx
call fcn.0040dce0
xor esi, eax
sub dword [0x456796], 0x38cdad1
neg esi
rol esi, 0x1f
not eax
mov ebx, 0x90d
add dword [0x4565c2], ecx
call fcn.00405942
sub ecx, ebx
xor edx, dword [0x456b69]
add esi, eax
neg edx
mov dword [0x456617], 0x4a1d060
add eax, ebp
sub ecx, dword [0x456d60]
xor esi, 0x90b8740
xor esi, 0x90b8740
or ecx, dword [ecx]
sub eax, ebp
xor dword [0x4569f4], 0x123f0d2f
neg edx
sub esi, eax
add ecx, ebx
call fcn.00402be1
xor dword [0x45689b], ecx
push ebx
call fcn.00402fff
sub eax, edx
dec eax
sub dword [0x456939], esi
xchg edi, eax
call fcn.00403af2
xor esi, dword [0x456cde]
inc eax
add esi, eax
xor ecx, 0x5c2b8fd
xor edx, dword [0x456b06]
rol eax, 0xb
sub edx, dword [0x456d94]
xchg eax, eax
add ecx, dword [0x456d92]
call fcn.00401115
sub edi, dword [0x456e06]
xor esi, 0x1c3058b2
call fcn.00407d3c
sub dword [0x4569ed], ebx
sub dword [0x456942], edi
call fcn.004086fd
xor esi, 0x1c3058b2
call fcn.00407549
xchg eax, eax
ror eax, 0xb
xor ecx, 0x5c2b8fd
sub esi, eax
dec eax
call fcn.004020c4
xchg edi, eax
mov dword [0x45691e], esi
inc eax
add eax, edx
call fcn.004036fa
push 0
rol edx, 0x10
sub dword [0x4566c0], ecx
ror edx, 3
xor edx, dword [0x456d14]
add edi, dword [0x456c78]
inc edx
call fcn.004062dd
xchg eax, eax
add ecx, eax
call fcn.00407e44
xor esi, eax
sub dword [0x456606], edx
call fcn.004076cd
rol esi, 0x1a
neg eax
xor edi, dword [0x456c8f]
call fcn.00402fff
and dword [0x456a5f], edx
xor edx, dword [0x456f64]
mov dword [0x4569c9], ecx
neg eax
ror esi, 0x1a
call fcn.00402928
xor esi, eax
call fcn.00401090
sub ecx, eax
xchg eax, eax
call fcn.00401303
dec edx
rol edx, 3
mov dword [0x4569a6], ecx
ror edx, 0x10
push 0x40
sub ecx, dword [0x456dd2]
dec esi
xor dword [0x4567ad], 0xaeffac3
call fcn.00406108
ror edx, 0xe
inc ecx
sub esi, dword [0x456dc6]
inc eax
sub esi, esp
add esi, dword [0x456f64]
neg eax
xor ecx, edx
call fcn.00406b5c
xor esi, eax
neg esi
xor ebx, dword [0x456d42]
dec esi
not esi
ror edi, 0xf
xor eax, 0xe4d9834
xor eax, 0xe4d9834
rol edi, 0xf
not esi
inc esi
neg esi
xor esi, eax
call fcn.00406c28
xor ecx, edx
neg eax
add esi, esp
dec eax
dec ecx
rol edx, 0xe
call fcn.00405197
mov dword [0x4569cd], 0x941c3a9
inc esi
push 0
mov dword [0x4566f2], ecx
call fcn.00401950
ror eax, 0x15
xor dword [0x456a80], 0x2a22cf50
neg edx
xor edi, ecx
not esi
xor edx, dword [0x456d28]
sub dword [0x4568fe], ecx
ror esi, 0xe
xchg esi, eax
ror edx, 0x16
not edi
or dword [0x456862], 0x2cbc059e
xor esi, 0x104abce
xor esi, 0x104abce
not edi
rol edx, 0x16
xchg esi, eax
rol esi, 0xe
or dword [0x456671], ebx
not esi
xor edi, ecx
neg edx
mov dword [0x45683a], 0x16898340
rol eax, 0x15
call fcn.00405197
xor dword [0x456622], ebx
push 0xffffffffffffffff
call fcn.0040849b
mov dword [0x45699a], 0x422f0e6
sub edx, 0xf006e
inc eax
xor ebx, eax
xor edx, ebp
neg esi
add ecx, esp
xor dword [0x456a1c], ecx
neg esi
add dword [0x4569de], edx
not eax
rol eax, 0x1d
call fcn.00404396
or dword [0x456749], edx
add esi, dword [0x456d7a]
sub ecx, dword [0x456e63]
ror esi, 0xb
not eax
xor esi, eax
neg esi
xor ebx, esi
xor ebx, esi
neg esi
xor esi, eax
not eax
rol esi, 0xb
mov dword [0x45694a], ecx
ror eax, 0x1d
not eax
mov dword [0x45677d], ebx
neg esi
add dword [0x456946], ebx
sub ecx, esp
neg esi
xor edx, ebp
xor ebx, eax
dec eax
add edx, 0xf006e
mov dword [0x456970], 0xab4d2d5
call fcn.00402fff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x4567ed], 0x54eb5a5
xor ebx, esp
sub edx, eax
xor esi, eax
inc esi
xor ecx, dword [0x456b0c]
xor dword [0x456a71], edx
mov dword [0x4566ac], 0x1ac5b462
xchg eax, eax
xor edi, esp
dec esi
neg esi
neg esi
inc esi
xor edi, esp
xchg eax, eax
or dword [0x4566ab], 0x3b76424
dec esi
xor esi, eax
add edx, eax
xor ebx, esp
xor dword [0x456a7b], 0x1c872f90
push ebx
ror eax, 0x1d
call fcn.004035d1
sub edx, eax
call fcn.004062f2
sub ecx, dword [0x456da1]
inc esi
ror eax, 0x15
call fcn.00403499
add edi, edx
not ebx
xor esi, ebx
xor esi, ebx
not ebx
sub edi, edx
call fcn.0040849b
rol eax, 0x15
dec esi
add edx, eax
call fcn.004047b1
rol eax, 0x1d
push 0
xor ecx, 0xa228f17
xor ecx, dword [0x456b52]
rol eax, 0xc
xchg eax, esi
sub dword [0x45664c], 0x1bd75134
sub ecx, dword [0x456d85]
call fcn.00405197
rol eax, 5
xor ebx, dword [0x456ebe]
xor ecx, 0x1507d0fd
xor esi, 0x11608a26
xor edx, 0x2b40080f
sub ebx, dword [0x456dce]
xor eax, 0x135819ae
not edi
dec eax
xor ebx, dword [0x456aea]
inc eax
not edi
xor eax, 0x135819ae
xor edx, 0x2b40080f
xor esi, 0x11608a26
xor ecx, 0x1507d0fd
ror eax, 5
call fcn.0040309e
mov dword [0x456830], 0x24813188
xchg eax, esi
ror eax, 0xc
xor ecx, 0xa228f17
push 0
neg edx
dec eax
xor edi, dword [0x456dd0]
xor eax, 0x2962808
sub ebx, dword [0x456fd4]
ror edx, 0xb
xor ecx, dword [0x456c4c]
sub ecx, dword [0x456df7]
xor eax, 0xe69fea0
inc ecx
dec ecx
xor eax, 0xe69fea0
rol edx, 0xb
xor eax, 0x2962808
inc eax
neg edx
push 0x22
or dword [0x456766], ecx
add edx, dword [0x456f37]
sub ecx, dword [0x456cde]
xor edx, dword [0x456fbc]
add edx, esp
dec eax
mov dword [0x456a6e], 0x247cac01
sub ecx, dword [0x456ce0]
xor ecx, dword [0x456efa]
call fcn.00402928
dec eax
add ecx, dword [0x456bc6]
xchg edx, eax
xor ebx, dword [0x456b35]
neg edi
xor eax, ebx
dec esi
call fcn.0040455a
sub esi, eax
add esi, eax
call fcn.00402fff
inc esi
xor eax, ebx
neg edi
xchg edx, eax
inc eax
call fcn.00404280
inc eax
sub edx, esp
or dword [0x456a23], edx
push eax
mov dword [0x456a7b], 0x8ddfdd5
rol eax, 1
neg eax
xor ecx, dword [0x456fb8]
ror eax, 5
xor ecx, dword [0x456e51]
xor esi, eax
xor eax, ebp
dec esi
add ecx, dword [0x456eda]
xor esi, 0x18d8aadc
not ecx
not ecx
xor esi, 0x18d8aadc
inc esi
xor eax, ebp
xor esi, eax
rol eax, 5
neg eax
ror eax, 1
or dword [0x4568eb], 0x26a925d0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
xor ecx, ebp
add eax, esi
sub esi, ebp
xor esi, eax
xor edi, eax
call fcn.00401dee
or dword [0x45684a], ebx
xor esi, eax
call fcn.00407d3c
sub esi, 0x948086
add esi, 0x948086
call fcn.004020c4
xor esi, eax
call fcn.00405197
xor edi, eax
xor esi, eax
add esi, ebp
sub eax, esi
xor ecx, ebp
mov ecx, ebx
ror esi, 0x1a
inc esi
rol esi, 0x11
not ebx
xor esi, eax
mov dword [0x456646], edx
mov dword [0x456a3c], ebx
neg eax
ror edi, 3
xchg ebx, edx
xor ebx, eax
xor dword [0x4566ce], 0x2e69fefc
sub edi, eax
xor ecx, dword [0x456e3c]
mov dword [0x456913], 0x63ecabd
mov dword [0x456a00], esi
xchg esi, esi
sub edi, dword [0x456aea]
xchg esi, esi
or dword [0x4567ef], esi
add edi, eax
or dword [0x4568a1], 0xe17c0c4
xor ebx, eax
xchg ebx, edx
rol edi, 3
neg eax
sub dword [0x456793], edi
xor dword [0x456604], esi
xor esi, eax
not ebx
ror esi, 0x11
dec esi
rol esi, 0x1a
call 0x4254b2
add esi, eax
xor ecx, esi
ror eax, 0x18
not esi
add esi, eax
inc edx
xchg eax, esi
xor ebx, edx
inc eax
and dword [0x456748], 0x11304948
dec eax
xor ebx, edx
xchg eax, esi
dec edx
sub esi, eax
not esi
rol eax, 0x18
xor ecx, esi
sub esi, eax
pop esi
xchg ecx, edx
xor esi, 0x6bd8ead
ror eax, 0xa
or dword [0x4566f5], edi
mov dword [0x456862], 0x14489550
rol eax, 0xd
xor ecx, esp
ror esi, 0x1a
neg ebx
sub esi, eax
or dword [0x4566d0], esi
xor ecx, dword [0x456cdf]
xchg ecx, eax
xor ecx, dword [0x456f10]
neg esi
xchg eax, edx
xor esi, 0xe91e54
xor dword [0x4567ba], ecx
xor esi, 0xe91e54
xchg eax, edx
neg esi
xchg ecx, eax
or dword [0x456881], edi
add esi, eax
neg ebx
rol esi, 0x1a
xor ecx, esp
ror eax, 0xd
add dword [0x456700], 0x4b3ce82
rol eax, 0xa
xor esi, 0x6bd8ead
xchg ecx, edx
add esi, 0x26e
sub esi, eax
xor ecx, dword [0x456bc2]
xor edi, dword [0x456ad0]
xor edi, dword [0x456fa5]
sub ecx, dword [0x456c5e]
neg edi
xor dword [0x456a17], 0x24471ee8
neg esi
ror eax, 6
xor ecx, dword [0x456d88]
rol eax, 6
neg esi
mov dword [0x456976], 0x31e1541
neg edi
add esi, eax
mov edi, eax
xor eax, 0x289e3ba8
rol eax, 8
xor dword [0x4569c6], edx
add esi, eax
xor ecx, dword [0x456c37]
call fcn.00405942
xor dword [0x456978], ecx
xchg ebx, eax
dec eax
call fcn.00407a6f
sub esi, eax
sub dword [0x456672], ecx
sub ecx, dword [0x456e18]
xor esi, 0x12784ec0
sub esi, eax
add edx, dword [0x456ecd]
add ecx, dword [0x456b49]
xor dword [0x456986], ecx
sub dword [0x4568f8], 0x3be0bfc
sub ebx, dword [0x456fc9]
or dword [0x456728], esi
add esi, eax
xor esi, 0x12784ec0
or dword [0x456608], ecx
add esi, eax
call fcn.00405942
inc eax
xchg ebx, eax
sub dword [0x4569ee], ebx
call fcn.00405eb5
sub esi, eax
ror eax, 8
xor eax, 0x289e3ba8
rep movsb byte es:[edi], byte [esi]
sub esi, ecx
not eax
inc esi
ror ebx, 0xa
call fcn.00405cd2
mov dword [0x4567e8], 0xef84eaa
add esi, eax
neg edi
mov dword [0x456674], esi
xor ebx, esp
sub dword [0x456754], 0x1fe224d2
call fcn.00407a1d
mov dword [0x4567f8], 0x1b283c8
call fcn.00402151
sub dword [0x4566b4], 0x22e94700
call fcn.004085c3
or dword [0x456684], 0xa1d66a5
xor ebx, esp
neg edi
sub esi, eax
xor dword [0x4568c5], 0x8286480
call fcn.00405942
rol ebx, 0xa
dec esi
not eax
add esi, ecx
jmp eax