Function at 0x41b78c
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
dec ecx
jne fcn.0041b6fc
mov ecx, 0x5c95abfc
xchg edx, esi
add ebx, esi
not esi
and dword [0x6ce3c0], edx
or esi, 0x687c23f9
inc edi
test dword [0x6c761d], 0x10f44a35
jge 0x41b76d
dec edi
shl ebx, 9
not esi
neg edi
inc ebx
sub eax, 0x1791fa69
dec ecx
jne 0x41b74d
dec eax
add ecx, ebp
sub eax, 0x278edf4f
mov esi, 0x83307ed6
add dword [ebx], 0xfffffff8
test esi, 0x9a2a459e
jle 0x41b79c
call fcn.005124f8
mov edi, 0x8bcda93d
xchg ecx, eax
add edi, esp
sub edx, 0xb9eec083
or esi, 0x16845fad
mov esi, 0x40b253d7
mov dl, 0x40
xor edi, 0xb198585d
not esi
and dword [0x6ce6f6], ebx
or edi, dword [0x6ceeb5]
xor esi, dword [0x6ced74]
or eax, dword [0x6ced08]
add dword [0x6ce200], edi
call fcn.004f5528
inc edi
not esi
sub dword [0x6ce6d3], esi
add esi, 0xb6e48099
xor edx, dword [0x6cee66]
xchg edx, eax
inc edi
neg esi
xor edx, ecx
xor ecx, 0xb55f39a9
sub ebx, eax
not edi
sub eax, esi
add eax, esi
not edi
add ebx, eax
xor ecx, 0xb55f39a9
xor edx, ecx
neg esi
dec edi
xchg edx, eax
sub esi, 0xb6e48099
not esi
dec edi
call fcn.0064c10a
xor dword [0x6ce322], edi
not esi
xor edi, 0xb198585d
xor esi, 0x6b3ca3d3
ror eax, 1
xchg ecx, eax
neg esi
dec edx
ror edi, 8
xor dword [0x6ce4ee], ecx
call fcn.00544814
xor esi, dword [0x6cee77]
ror edi, 0xb
sub dword [0x6ce3e4], ecx
xor eax, dword [0x6cea0b]
call fcn.00489b20
inc ebx
not esi
inc edx
ror ebx, 4
xor edx, esp
add ebx, 0x8dcf68ce
sub ebx, 0x6c0e8ac7
add edi, ebx
call fcn.0061bf3b
call fcn.005fd64c
sub edi, ebx
add ebx, 0x6c0e8ac7
sub ebx, 0x8dcf68ce
xor edx, esp
rol ebx, 4
dec edx
not esi
dec ebx
call fcn.00653e32
rol edi, 0xb
xor dword [0x6ce6fa], ecx
rol edi, 8
inc edx
neg esi
xchg ecx, eax
rol eax, 1
add esi, 0xd4710ffc
sub edi, 0xbb198a05
and dword [0x6ce31c], eax
xor edi, dword [0x6cecca]
sub ecx, ebp
xor edi, dword [0x6ced9b]
xor esi, ecx
call fcn.00413204
xor edx, 0xcd8c9727
xor ebx, ebp
sub dword [0x6ce3c0], edx
neg edx
inc edi
sub eax, esp
call fcn.00459c2a
call fcn.0050b660
add eax, esp
dec edi
neg edx
xor dword [0x6ce3ff], ebx
xor ebx, ebp
xor edx, 0xcd8c9727
call fcn.0056ed50
xor esi, ecx
add ecx, ebp
and dword [0x6ce34c], ecx
add edi, 0xbb198a05
push esi
add ecx, dword [0x6cedca]
dec esi
call fcn.0040528b
not esi
ror edx, 4
sub edi, 0x7055783f
xor ebx, dword [0x6ce918]
neg edi
sub ebx, ecx
call fcn.004c85d5
call fcn.004f26a3
add ebx, ecx
neg edi
add edi, 0x7055783f
rol edx, 4
not esi
call fcn.0050b660
inc esi
mov ebx, 0x549f4
and dword [0x6ce814], ecx
call fcn.004c0d3d
sub esi, dword [0x6cef3b]
ror esi, 0x1a
xor ebx, dword [0x6cea48]
xor edi, 0xc06862aa
rol ecx, 0x1d
dec edx
neg esi
or ebx, dword [0x6ce9a9]
sub dword [0x6ce351], edx
call fcn.005fb5fd
xor dword [0x6ce33f], esi
xchg eax, esi
call fcn.005ef58d
sub dword [0x6ce88d], ecx
neg edx
sub dword [0x6ce873], eax
xor ebx, dword [0x6cee46]
ror ecx, 0x18
rol ecx, 0x18
sub dword [0x6ce884], eax
neg edx
sub dword [0x6ce5d3], edx
xchg eax, esi
sub dword [0x6ce49c], esi
neg esi
inc edx
ror ecx, 0x1d
xor edi, 0xc06862aa
rol esi, 0x1a
call fcn.00636a67
or dword [0x6ce3e9], esi
push ebx
add esi, ebx
neg ebx
xchg ecx, eax
xor eax, esi
call fcn.0055b75d
sub esi, dword [0x6ceba5]
and dword [0x6ce60a], 0x8adc45c5
or dword [0x6ce623], 0xfd744f5e
xor edi, 0xc922cec4
add dword [0x6ce35c], edx
dec ebx
sub ecx, dword [0x6ce97e]
rol edi, 0x15
neg edx
rol esi, 0x13
or dword [0x6ce754], 0x712f4dbc
ror edx, 0x1f
call fcn.005dcf57
xor edx, 0x9d27d850
xor ebx, dword [0x6cea54]
xchg ebx, edx
and dword [0x6ce682], edx
xchg ebx, edx
xor edx, 0x9d27d850
rol edx, 0x1f
xor dword [0x6ce79e], 0xd98700ae
ror esi, 0x13
neg edx
ror edi, 0x15
inc ebx
add dword [0x6ce512], ebx
xor edi, 0xc922cec4
mov dword [0x6ce786], 0x8840a9b9
call fcn.0041c331
xor eax, esi
xchg ecx, eax
neg ebx
sub esi, ebx
mov edx, 0x781b7fde
call fcn.00599b94
ror edx, 0xa
inc ecx
inc esi
call fcn.0040878f
or eax, dword [0x6cef9e]
sub dword [0x6ce2ad], eax
rol ecx, 8
sub ebx, edi
neg ecx
xor edi, esp
rol ecx, 0x1f
not edx
call fcn.0046f11c
not esi
mov dword [0x6ce30f], eax
sub dword [0x6ce856], esi
not esi
not edx
ror ecx, 0x1f
xor edi, esp
neg ecx
add ebx, edi
ror ecx, 8
call fcn.00560c41
dec esi
dec ecx
rol edx, 0xa
call fcn.00599b94
sub edx, 0x7a8ffd9e
neg ecx
and dword [0x6ce331], edx
inc edi
xor ecx, dword [0x6cebe6]
xor esi, dword [0x6ce926]
call fcn.00444726
dec esi
call fcn.0055db16
sub ebx, dword [0x6cea26]
call fcn.00421f62
xchg edi, eax
xor edx, edi
add edi, dword [0x6cecfe]
not ecx
sub esi, dword [0x6cef03]
call fcn.004ec331
xor dword [0x6ce3ee], ecx
inc edx
xchg ecx, edx
call fcn.00501485
call fcn.0046478a
xchg ecx, edx
dec edx
sub dword [0x6ce834], ecx
call fcn.004b17f3
not ecx
xor edx, edi
xchg edi, eax
call fcn.00459c2a
call fcn.004d899c
inc esi
call fcn.0053698c
dec edi
or dword [0x6ce7ff], ecx
neg ecx
add edx, 0x2787dc0
sub ebx, dword [0x6cef3e]
sub ebx, 0x67394793
xor eax, edx
xor ebx, dword [0x6ceb7f]
not ecx
call fcn.00548f10
or eax, dword [0x6cee36]
sub edx, dword [0x6cedc2]
not eax
rol eax, 0xb
neg ebx
ror edi, 1
call fcn.00636a67
call fcn.004da176
rol edi, 1
neg ebx
ror eax, 0xb
not eax
not ecx
xor eax, edx
add ebx, 0x67394793
push edx
sub edx, dword [0x6ceb7c]
call fcn.0046bed5
not edi
add dword [0x6ce532], edx
or esi, dword [0x6cecde]
sub esi, edi
and dword [0x6ce2f4], ebx
sub ebx, dword [0x6ced8b]
inc eax
xor ebx, esp
ror eax, 0xf
call fcn.0051e018
call fcn.0061de98
call fcn.004125ac
call fcn.004daaec
rol eax, 0xf
xor ebx, esp
dec eax
add dword [0x6ce24f], esi
add esi, edi
not edi
call fcn.005d7243
call dword [sym.imp.kernel32.dll_HeapCreate]
add edx, 0x39339636
rol eax, 0x17
neg ebx
xor ecx, dword [0x6cece8]
not esi
xor edx, esp
inc esi
add edx, eax
mov dword [0x6ce50a], edx
add ecx, esp
xchg edx, esi
neg esi
add eax, ecx
call fcn.0056ed50
call fcn.00636a67
sub eax, ecx
neg esi
xchg edx, esi
sub ecx, esp
mov dword [0x6ce5b7], ecx
sub edx, eax
dec esi
xor edx, esp
not esi
neg ebx
ror eax, 0x17
sub edx, 0x39339636
push ebx
xor eax, dword [0x6cec37]
xor esi, ecx
call fcn.00605b0d
xor dword [0x6ce66b], 0xbefdb710
or dword [0x6ce755], edi
xchg ecx, eax
dec esi
or dword [0x6ce8a4], 0xd005509c
xor ecx, ebp
xor esi, 0x2f8c4184
call fcn.005c2a2d
inc esi
mov dword [0x6ce6a1], eax
sub esi, 0x8efa953
xor esi, dword [0x6cefba]
sub dword [0x6ce324], eax
call fcn.005dbf73
add ecx, ebp
xor eax, ecx
xchg eax, edx
sub edx, eax
add edx, eax
xchg eax, edx
xor eax, ecx
sub ecx, ebp
call fcn.00498fe8
add esi, 0x8efa953
add dword [0x6ce239], edi
dec esi
xor esi, 0x2f8c4184
xor ecx, ebp
inc esi
xchg ecx, eax
or dword [0x6ce2a0], 0xb4c0e469
call fcn.005f9fbc
xor esi, ecx
mov edi, 0xfd55b93b
and dword [0x6ce258], ecx
call fcn.00612a68
neg edi
mov dword [0x6ce81b], eax
add esi, ebp
neg ecx
or ecx, dword [0x6ceee4]
xor esi, 0xe18f8c73
add ecx, dword [0x6ceb0f]
sub esi, dword [0x6ceb4d]
call fcn.0044a512
xor esi, ecx
inc ebx
not edx
xor eax, dword [0x6ceedd]
add esi, dword [0x6cead3]
inc esi
xor eax, 0x9b6f3658
neg edi
inc ecx
call fcn.0062b69e
call fcn.0047a20e
call fcn.00480cc5
dec ecx
neg edi
xor eax, 0x9b6f3658
dec esi
not edx
dec ebx
xor esi, ecx
call fcn.00514b16
xor esi, 0xe18f8c73
neg ecx
sub esi, ebp
or dword [0x6ce4c9], edi
neg edi
add edi, 0x348cc23
ror edx, 0x1e
or esi, dword [0x6ced10]
call fcn.004b378f
xor eax, edx
call fcn.005f4e21
ror edx, 7
dec eax
not ecx
xchg edi, esi
sub edi, dword [0x6ceaaa]
call fcn.004d1676
and dword [0x6ce39f], edx
dec eax
xor dword [0x6ce278], eax
call fcn.004ef830
or dword [0x6ce55b], 0x147cc75f
rol ecx, 0x16
xor eax, dword [0x6ceaca]
add ebx, dword [0x6cee24]
and dword [0x6ce62c], esi
sub ecx, 0x3f1211ad
call fcn.0060c76b
call fcn.0061ce9d
add ecx, 0x3f1211ad
mov dword [0x6ce44f], edx
ror ecx, 0x16
sub dword [0x6ce789], 0x90cd117
and dword [0x6ce440], edi
inc eax
and dword [0x6ce407], ecx
call fcn.00430c12
xchg edi, esi
not ecx
inc eax
rol edx, 7
call fcn.004eacff
xor eax, edx
call fcn.004a463c
rol edx, 0x1e
xor edi, 0x9e8556
add ecx, 0xef027d46
sub ecx, 0xdf15e151
add edx, 0x9fb9c40b
sub eax, edx
inc edi
rol edx, 5
sub edx, dword [0x6cee05]
xchg ebx, edx
add eax, dword [0x6cea56]
xor eax, ebx
call fcn.00514d74
inc ebx
not ecx
rol ebx, 8
xor edx, 0x1916ee2c
xor ecx, ebx
xor ecx, dword [0x6cef8c]
call fcn.0055b75d
call fcn.004f240a
xor ecx, ebx
xor edx, 0x1916ee2c
ror ebx, 8
not ecx
dec ebx
call fcn.00603543
xor eax, ebx
xchg ebx, edx
ror edx, 5
dec edi
add eax, edx
sub edx, 0x9fb9c40b
add ecx, 0xdf15e151
sub ecx, 0xef027d46
push edi
inc eax
ror eax, 0xd
mov dword [0x6ce234], edx
or eax, dword [0x6ced70]
inc esi
xchg ecx, edx
add ebx, edi
rol ecx, 0x1f
sub ebx, dword [0x6cee00]
neg edx
xor esi, ecx
add ecx, dword [0x6ceb1f]
call fcn.005251ef
xor esi, ecx
neg edx
ror ecx, 0x1f
sub ebx, edi
xchg ecx, edx
dec esi
xor dword [0x6ce4c7], edx
rol eax, 0xd
dec eax
push eax
neg ecx
xor edx, 0x490cb05
add ecx, dword [0x6ceb70]
ror ebx, 6
call fcn.005bff69
sub dword [0x6ce88b], ecx
xor edx, eax
not esi
or dword [0x6ce627], ebx
neg esi
inc esi
xchg ecx, edx
or ebx, dword [0x6ce9d4]
and dword [0x6ce285], eax
add esi, 0x44dff95
not esi
sub esi, dword [0x6ceb9b]
or dword [0x6ce20c], edi
ror eax, 4
rol eax, 4
and dword [0x6ce5a8], ecx
not esi
sub esi, 0x44dff95
xchg ecx, edx
dec esi
neg esi
not esi
xor edx, eax
add dword [0x6ce4b2], edx
rol ebx, 6
xor edx, 0x490cb05
neg ecx
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub ecx, dword [0x6ceb82]
call fcn.00428134
inc esi
xor esi, dword [0x6ce99a]
or ebx, dword [0x6cee22]
xor eax, edi
add dword [0x6ce4e4], edi
xor eax, dword [0x6cef3a]
call fcn.00626872
ror ecx, 7
xor edx, dword [0x6ceaeb]
call fcn.00617cd7
call fcn.0057406c
call fcn.0053e174
call fcn.00626201
rol ecx, 7
or dword [0x6ce437], edi
xor eax, edi
dec esi
lea esi, [0xa8947fcc]
and dword [0x6ce6a9], edx
add ecx, dword [0x6cee24]
xchg ebx, eax
sub edi, edx
mov dword [0x6ce24d], esi
xchg esi, edx
xor esi, dword [0x6ceb8a]
xor edx, 0xad6ff206
rol edi, 0xd
call fcn.006540bd
add ebx, dword [0x6cee02]
call fcn.00592738
neg esi
sub dword [0x6ce71d], eax
sub edx, ebx
xchg esi, eax
xchg esi, eax
add edx, ebx
neg esi
call fcn.00505eab
ror edi, 0xd
xor edx, 0xad6ff206
xchg esi, edx
mov dword [0x6ce7f7], ecx
add edi, edx
xchg ebx, eax
add dword [0x6ce4e9], esi
xor esi, 0x60479ba6
or dword [0x6ce343], edx
add edx, 0x610b086b
xor dword [0x6ce700], ecx
call fcn.004b0488
xor edx, dword [0x6cefbf]
neg eax
xor ecx, dword [0x6cecb9]
rol edx, 0xf
sub dword [0x6ce8ab], edx
xor dword [0x6ce69d], eax
inc ebx
or dword [0x6ce8b2], eax
call fcn.005e7315
xor dword [0x6ce891], ecx
dec ebx
and dword [0x6ce696], ecx
mov dword [0x6ce89e], ecx
ror edx, 0xf
neg eax
call fcn.0040528b
mov dword [0x6ce86f], esi
sub edx, 0x610b086b
and dword [0x6ce719], eax
sub esi, 0xc8619e6a
sub dword [0x6ce2c3], ecx
and dword [0x6ce6e1], eax
not ecx
or dword [0x6ce5fa], 0xbbb47aad
not esi
rol eax, 0xc
dec ecx
add ecx, ebx
mov dword [0x6ce2dd], edi
or edx, dword [0x6ced12]
xor dword [0x6ce2b1], esi
add ecx, 0x93ae1dce
call fcn.005c2ec0
dec esi
call fcn.0044ddab
inc esi
call fcn.0046bed5
sub ecx, 0x93ae1dce
mov dword [0x6ce564], edi
sub ecx, ebx
inc ecx
ror eax, 0xc
not esi
not ecx
or dword [0x6ce5e7], eax
and dword [0x6ce625], edx
mov edi, eax
ror esi, 8
xchg edx, eax
rol ebx, 0x1a
call fcn.00640813
ror esi, 0x12
xor edi, dword [0x6cec00]
not esi
add ecx, eax
sub eax, ebx
and dword [0x6ce6fd], edi
sub dword [0x6ce80b], eax
add eax, ebx
sub ecx, eax
not esi
rol esi, 0x12
call fcn.0046dda3
ror ebx, 0x1a
xchg edx, eax
rol esi, 8
mov ecx, 0x549f4
rol esi, 0x18
add eax, 0x86abc15f
dec ebx
or eax, dword [0x6ced3d]
and dword [0x6ce853], ecx
sub eax, ebx
add edi, 0x1fcdbfca
call fcn.00656ad9
or edi, dword [0x6cec00]
or ebx, dword [0x6cec86]
or dword [0x6ce728], ebx
dec ebx
neg ecx
and dword [0x6ce20b], edx
ror esi, 0x1b
call fcn.00636a67
neg esi
sub ebx, dword [0x6cec9f]
dec esi
add ebx, dword [0x6ceb25]
call fcn.005de96a
call fcn.005232df
inc esi
neg esi
rol esi, 0x1b
xor dword [0x6ce7ed], edi
neg ecx
inc ebx
sub dword [0x6ce82f], eax
sub edi, 0x1fcdbfca
add eax, ebx
and dword [0x6ce32e], ecx
inc ebx
sub eax, 0x86abc15f
ror esi, 0x18
rep movsb byte es:[edi], byte [esi]
not eax
xor ecx, 0x32e36328
or dword [0x6ce4ee], 0xb86e4e4b
xor dword [0x6ce668], esi
xor edi, eax
xor edx, 0x32c54960
sub dword [0x6ce696], 0x5df49746
add esi, dword [0x6ce9d8]
add edx, edi
call fcn.00673ea3
call fcn.0041b2b8
sub edx, edi
and dword [0x6ce72f], 0x79da21d5
xor edx, 0x32c54960
xor edi, eax
xor ecx, 0x32e36328
not eax
call fcn.004d7d86
mov dword [0x6ce2b3], 0x1b275346
call fcn.00636a67
xor ecx, 0x169041
neg ebx
sub dword [0x6ce7f2], edx
add eax, dword [0x6cef90]
add ecx, ebp
xor edx, edi
xor ecx, 0xd659fe98
xor esi, eax
call fcn.0052b6aa
mov dword [0x6ce2e4], edi
xor edi, dword [0x6ce9c0]
xchg ebx, edx
xchg ebx, edx
xor esi, eax
xor ecx, 0xd659fe98
xor edx, edi
sub ecx, ebp
add dword [0x6ce3bb], eax
neg ebx
xor ecx, 0x169041
call fcn.0066b476
xor dword [0x6ce5e2], 0x480975f
add al, al
xchg dword [eax], eax
les eax, [edi - 0x7847ffc0]
inc eax
add ah, ah
add dword [eax], 0
test byte [eax], al
fcom qword [ecx - 0x6dabffbe]
inc edx
add byte [eax], ah
xchg edx, eax
inc edx
add byte [eax], al
add byte [eax], al
add byte [edx], al
add byte [eax*2 + 0x75677241], bl
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x41c36c
jne 0x41c393
dec edi
push dx
popal
outsb dx, byte [esi]
inc ebp
js 0x41c38c
jo 0x41c3a0
imul ebp, dword [edi + 0x6e], 0x41c33400
add byte [edi], al
sbb al, 0x45
inc ecx
jb 0x41c3a1
jne 0x41c3a9
outsb dx, byte gs:[esi]
je 0x41c38f
jne 0x41c3b6
dec edi
push dx
popal
outsb dx, byte [esi]
inc ebp
js 0x41c3af
jo 0x41c3c3
imul ebp, dword [edi + 0x6e], 0x41c304
jo 0x41c31a
inc ecx
add byte [eax], al
add byte [edi], cl
push ebx
jns 0x41c3d3
je 0x41c3c7
insd dword es:[edi], dx
push ebx
jns 0x41c3da
push ebp
je 0x41c3d3
insb byte es:[edi], dx
jae 0x41c36d
add byte [eax], al
add byte [eax], al
add al, byte [eax]
add byte [eax], al
int3
add byte [eax], al
add byte [edx], al
add byte [eax], al
add ah, cl
ret
aam 0xc3
inc ecx
add byte [eax], al
add byte [eax], al
add dl, bl
ret
or al, 0x85
inc eax
add byte [eax*4 - 0x6d53ffc0], dl
test dword [eax], eax
adc al, 0x85
inc eax
add byte [edx + edx*4 - 0x7863ffbe], ch
inc eax
xchg edx, eax
inc edx
add byte [edi + eax*4 - 0x7843ffc0], bl
inc eax
add al, al
xchg dword [eax], eax
les eax, [edi - 0x7847ffc0]
inc eax
add ah, ah
add byte [edi + eax*4 - 0x783fffc0], bh
inc eax
add ah, al
xchg dword [eax], eax
mov eax, 0xe4004087
add dword [eax], 0
add byte [eax], al
test byte [eax], al
fcom qword [ecx - 0x6dabffbe]
inc edx
add ah, bl
xchg ecx, eax
inc edx
add byte [edx + edx*4 + 0x42], dl
add byte [eax], ah
xchg edx, eax
inc edx
add byte [eax], al
add byte [eax], al
add byte [edx], al
add byte [edx], cl
inc ebp
dec esp
or al, byte [ebp + 0x4c]
imul esi, dword [ebx + 0x74], 0x6f727245
jb 0x41c3e6
add byte [eax], al
in al, dx
ret