Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetCurrentProcess
cmp eax, 0xffffff32
jne 0x40109d
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.user32.dll_DdeDisconnectList
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.user32.dll_DdeDisconnectList
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
ret
call sub.kernel32.dll_GetCurrentProcess
cmp eax, 0xffffff30
jne 0x401117
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.user32.dll_DdeDisconnectList
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.kernel32.dll_GlobalReAlloc
call sub.ole32.dll_IsValidInterface
call sub.kernel32.dll_GlobalReAlloc
call sub.user32.dll_DdeDisconnectList
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.ole32.dll_IsValidInterface
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff0e
jne 0x4011af
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.ole32.dll_IsValidInterface
call sub.kernel32.dll_GlobalReAlloc
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.kernel32.dll_GlobalReAlloc
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.kernel32.dll_GlobalReAlloc
call sub.user32.dll_DdeDisconnectList
call sub.user32.dll_DdeDisconnectList
call sub.user32.dll_DdeDisconnectList
call sub.kernel32.dll_GlobalReAlloc
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff12
jne 0x40121f
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.kernel32.dll_GlobalReAlloc
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.ole32.dll_IsValidInterface
call sub.user32.dll_DdeDisconnectList
call sub.user32.dll_DdeDisconnectList
call sub.ole32.dll_IsValidInterface
ret
jmp 0x476b1e
mov ecx, edi
xchg ecx, esi
jmp 0x476d0c
pop ebx
sub esi, edx
or edi, 0xec1c6862
and ecx, esi
xchg ecx, edi
or edi, 0xec1d5de5
xchg esi, edx
add esi, ecx
sub ecx, edx
and edx, edi
and ecx, edi
and edi, ecx
and esi, ecx
rol edi, 0x15
sub esi, 0xec2038f4
mov esi, edi
xor edi, edx
jmp 0x4794fa
push 0xe0986c24
and esi, edi
xor edi, edx
xchg edx, edi
xchg edi, ecx
jmp 0x4786c2
push esp
inc edx
inc esi
bswap edi
not edx
and ecx, edx
rol esi, 0x10
ror edx, 4
or ecx, 0xec7784f2
xor edx, esi
sub ecx, 0xec7825a6
add edx, ecx
xor ecx, edi
mov edx, esi
shr edi, 0x17
jmp 0x478d7e
call fcn.00478be8
xchg edi, edx
and edi, edx
bswap ecx
add ecx, edx
not edi
xor esi, edx
and edx, esi
rol edi, 9
or ecx, esi
jmp 0x47906b
pop ebx
add edi, edx
add ecx, esi
sub ecx, edi
mov edi, esi
sub edx, edi
or ecx, esi
or ecx, edx
rol edi, 0xa
jmp 0x479c8b
call ebx
inc edx
and edx, esi
xor edx, 0xec9abdde
add edi, 0xec9b1005
xchg edi, ecx
mov edi, edx
dec ecx
sub edx, 0xec9c5e56
jmp 0x479af6
mov ebx, 0x2809144b
bswap esi
or edi, 0xeca06d45
or edi, edx
or esi, edx
shr ecx, 0xd
sub edx, edi
neg edx
add edi, edx
xor ecx, esi
jmp 0x478582
pop ebx
rol edx, 0xc
xor ecx, esi
and edx, esi
add ecx, edi
add edx, edi
bswap edi
xchg edi, esi
xor edx, edi
sub ecx, esi
mov edi, edx
xchg ecx, edi
and edx, ecx
neg edx
jmp 0x478a57
mov ebx, 0x2809144b
shr ecx, 8
xor edx, edi
bswap edi
rol edi, 0xb
shr esi, 0x16
xor ecx, esi
mov edx, 0xecc8d167
xchg ecx, edi
mov ecx, edx
ror edx, 0x1f
shl edi, 0x1e
sub ecx, 0xecca6894
jmp 0x477701
call ebx
sub edi, esi
xor esi, ecx
and esi, 0xecf761a6
xor esi, 0xecf7b56c
xor ecx, esi
xor edx, ecx
not esi
not ecx
jmp 0x478399
call ebx
sub esi, edi
and ecx, esi
xor edx, edi
add esi, 0xecfa6a34
neg esi
bswap ecx
dec edx
jmp 0x477e43
call fcn.00478be8
shl edx, 1
or edx, esi
or ecx, edx
sub ecx, 0xed2dbcf2
dec edi
mov edi, ecx
jmp 0x4780da
push 0x40
xchg edi, edx
ror edx, 5
shl ecx, 0x1b
or esi, ecx
dec ecx
dec edx
xor edi, 0xed339c4f
sub ecx, 0xed33eeba
sub edx, 0xed344222
jmp 0x478362
call fcn.00478be8
or edi, esi
mov ecx, 0xed3503f3
and edx, ecx
not esi
sub ecx, 0xed36052a
inc edx
shr ecx, 6
dec edi
xor edi, esi
jmp 0x4788f8
call fcn.00478be8
xor esi, edx
inc ecx
or edi, edx
jmp 0x476ec3
call fcn.00478be8
or ecx, esi
xor esi, 0xee4e7f7f
and edi, 0xee4ede62
jmp 0x477445
push 0xe09a5552
sub edx, edi
sub esi, edi
xchg ecx, edi
xor edi, ecx
sub ecx, esi
sub edx, esi
xor edx, edi
and ecx, edx
rol edi, 0x1b
shr edi, 0x16
jmp 0x479bf6
pop ebx
inc edx
mov edx, 0xee9ab545
and edx, esi
add edx, edi
xchg ecx, edx
xor esi, edi
or esi, 0xee9c40ab
xor edx, 0xee9c9ebb
or esi, edi
sub edx, edi
mov edi, 0xee9d8ec4
jmp 0x478875
pop ebx
add esi, edi
add edx, edi
sub esi, edx
mov edx, 0xeebfb0c4
neg edi
ror esi, 0x18
xor edx, edi
or esi, 0xeec0fdc5
mov edx, ecx
add ecx, edx
and edx, edi
or esi, ecx
mov esi, edi
mov esi, 0xeec2db43
jmp 0x478c37
push 0x401400
dec edx
ror edx, 0x14
and ecx, esi
add edx, esi
shl edx, 0x1b
nop
not edx
inc edx
jmp 0x479785
call ebx
add edx, esi
mov edi, esi
xor edi, esi
mov edx, esi
add edi, edx
mov esi, ecx
not esi
add edi, 0xef010c4b
xor esi, edx
xor ecx, esi
sub edi, 0xef020054
inc edx
and ecx, 0xef02a728
jmp 0x478136
pop ebx
sub edx, edi
sub ecx, edi
add esi, 0xef0812de
mov esi, edi
or ecx, 0xef08b0e6
xchg ecx, edi
sub edi, esi
rol edx, 4
mov ecx, edx
sub edx, 0xef0a4e60
or ecx, 0xef0aa144
bswap esi
mov esi, 0xef0b479f
jmp 0x478fda
call ebx
add esi, ecx
xor ecx, edx
and edx, ecx
inc esi
xor edi, edx
and edx, edi
add ecx, 0xef160d9b
mov edx, edi
sub edx, edi
not esi
rol edx, 4
xor edx, esi
xor ecx, esi
sub edx, 0xef18440d
jmp 0x478f9a
push 0xe0a21b47
dec edi
rol edi, 3
shr esi, 0x11
inc edx
xchg edi, esi
mov edi, edx
xchg edi, edx
bswap edi
xor edi, edx
and ecx, edx
ror edi, 0x1e
jmp 0x47722f
push 0xe09c6925
xor edx, esi
neg ecx
jmp 0x479848
push 0x7571e
dec edx
ror edx, 0x10
add edi, 0xef3a46c4
jmp 0x478046
pop ebx
or edx, edi
mov esi, 0xef3e9494
sub edx, esi
xchg ecx, esi
jmp 0x479056
pop ebx
not edx
xchg edx, edi
xchg ecx, edi
and edi, edx
mov edi, edx
xchg edx, esi
not ecx
jmp 0x4793a3
push 0xe09e7834
add edi, esi
mov ecx, 0xefa3cab8
sub edx, esi
and edx, 0xefa46b28
xchg ecx, edi
mov esi, edx
bswap edx
dec edi
dec esi
jmp 0x477083
call fcn.00478be8
and esi, 0xefa68267
ror esi, 0x1f
mov esi, 0xefa72791
xchg edi, edx
mov edx, esi
jmp 0x477464
mov ebx, 0x4132136a
xchg edx, edi
or ecx, edx
sub edi, esi
mov ecx, edx
and ecx, edx
add esi, ecx
and edi, ecx
or ecx, edx
xor edi, esi
jmp 0x477811
mov ebx, 0x123b2f04
add edx, edi
dec ecx
inc ecx
and edi, edx
and ecx, edx
or edi, ecx
and edx, 0xefc0c7de
xchg ecx, esi
xchg ecx, edx
sub edi, 0xefc1c7df
and ecx, edi
xor edx, edi
and ecx, edi
bswap edi
jmp 0x47794d
push 0xe098bcba
or edx, edi
not edi
neg esi
add edx, 0xefc68631
xor ecx, esi
add ecx, edx
xor esi, ecx
sub edx, esi
add ecx, esi
nop
mov edx, ecx
ror ecx, 3
jmp 0x4790e8
push 0xe0a15419
rol esi, 2
xor edi, esi
add esi, edx
jmp 0x478795
push 0xe0a19673
not edi
neg ecx
xor ecx, 0xefdbc35b
mov ecx, 0xefdc1445
not edx
shl esi, 2
mov esi, edi
or edi, 0xefdd5996
add esi, ecx
xor esi, edx
sub ecx, 0xefde5544
or esi, 0xefdea6db
jmp 0x47969d
pop ebx
sub edi, esi
dec edx
xor ecx, 0xefef2b5f
mov esi, edi
and edi, edx
neg ecx
or edx, 0xeff07503
jmp 0x4798b1
call ebx
xor edx, 0xeffa64f2
sub edx, edi
add ecx, edi
sub edi, ecx
neg edx
xchg edi, esi
sub edx, ecx
sub esi, edi
and edi, esi
jmp 0x479b26
pop ebx
not edi
or ecx, 0xf01ccc87
mov ecx, esi
or ecx, edi
sub edi, 0xf01dbaf0
dec ecx
shr edi, 0xe
sub ecx, edi
add edx, ecx
neg edi
and ecx, 0xf01fb1db
mov edx, 0xf020034c
mov edx, esi
bswap ecx
add ecx, edx
jmp 0x47861e
call fcn.00478be8
inc edx
sub edx, esi
rol edi, 0x17
neg esi
and edi, ecx
add edi, esi
rol ecx, 0x14
sub edx, esi
not ecx
or edi, ecx
jmp 0x4781d2
push 0xe09fc5fd
add edx, ecx
add esi, edi
xor ecx, edi
xor edx, edi
sub ecx, esi
mov edi, ecx
jmp 0x47867b
push 0xe0a8ab57
shl esi, 6
mov edi, esi
rol edx, 0x1f
not edi
xchg edi, ecx
jmp loc.0047e000
mov ebx, 0x2809144b
sub edx, esi
xchg edx, ecx
ror esi, 0x19
xor ecx, esi
neg edi
or ecx, 0xf05cf417
jmp 0x478bc9
push esp
shl edi, 0x1e
add edi, 0xf06db8c0
mov edx, ecx
add esi, 0xf06e54b8
xchg edi, esi
rol edi, 0x1e
xor ecx, 0xf06f4923
xor edx, edi
add edx, edi
jmp 0x4776d9
pop ebx
add edx, edi
xor esi, edi
add esi, edx
neg esi
jmp 0x479613
push 0xe0a71579
sub ecx, 0xf09fe831
dec edi
not edi
add edx, ecx
sub edi, ecx
mov ecx, edi
mov ecx, edx
rol esi, 0x18
jmp 0x478cee
pop ebx
sub ecx, edi
rol esi, 0xd
rol edi, 0x1b
ror edi, 0x12
add esi, ecx
inc edi
xchg edi, ecx
rol edx, 0x1b
inc edi
jmp 0x477c41
push 0xe0a111f6
and ecx, edx
sub ecx, esi
mov edi, esi
sub ecx, edx
ror esi, 0xd
jmp 0x478737
call ebx
xchg edx, esi
sub ecx, esi
mov esi, edx
ror edx, 0xb
add esi, edx
not edx
add esi, 0xf0b5b3d2
shl ecx, 0x15
and edx, ecx
and esi, ecx
add edx, 0xf0b70079
or esi, edx
jmp 0x477cb6
mov ebx, 0x123b2f04
or esi, 0xf0bff684
not edi
add esi, ecx
add ecx, edx
sub ecx, edx
mov esi, edi
mov edi, 0xf0c1ce74
or ecx, 0xf0c22c68
sub esi, edx
and ecx, esi
sub edx, ecx
or edx, esi
add esi, ecx
jmp 0x4776a6
push 0xe0a6d359
add ecx, edi
not edi
or edx, edi
jmp 0x478fa8
pop ebx
and ecx, 0xf1240e57
shr edx, 7
sub esi, edx
sub esi, ecx
jmp 0x477110
pop ebx
or edx, ecx
not edi
sub ecx, edi
or edx, 0xf140651f
add esi, edx
xchg edx, edi
add ecx, edi
xor edi, edx
or esi, edi
add edi, ecx
shr edx, 6
shr edx, 8
add edx, edi
jmp 0x478c73
call fcn.00478be8
sub ecx, esi
xchg esi, edi
add esi, ecx
dec edx
add edx, esi
xor esi, 0xf14cf7e3
xchg edx, edi
and edx, esi
jmp 0x477039
push 0xe0a1d954
xor edi, 0xf14e1366
and edx, ecx
mov edx, esi
xchg edi, esi
add ecx, edx
not ecx
xchg edx, esi
xchg esi, edx
and edi, ecx
mov ecx, 0xf150ed4b
jmp 0x4782f5
call ebx
mov ecx, esi
xchg esi, edi
mov ecx, 0xf1605666
or ecx, edi
sub edx, esi
shl edx, 1
add ecx, edx
jmp 0x47854d
push 0xe09caa1d
or edx, edi
xor ecx, 0xf1aff3bf
or edx, ecx
sub esi, edx
inc edi
sub edi, esi
mov edx, edi
xor ecx, esi
and esi, ecx
jmp 0x479d11
pop ebx
not esi
mov edx, 0xf1b892fc
sub edi, 0xf1b8e41f
or edi, ecx
xor esi, edi
shr esi, 3
shr edx, 0xe
mov edi, 0xf1ba7eec
sub edi, esi
and esi, 0xf1bb2d84
jmp 0x478561
mov ebx, 0x123b2f04
and edi, esi
neg edi
sub esi, edi
add esi, edi
add esi, edi
mov edx, edi
sub edx, edi
sub ecx, esi
rol ecx, 0x12
and ecx, 0xf1d1fa27
jmp 0x479680
pop ebx
sub edx, edi
sub edx, edi
and ecx, 0xf1f14f8a
sub edx, ecx
xor edi, edx
and ecx, edx
sub esi, 0xf1f2901f
xor esi, ecx
xor edi, 0xf1f340e8
and edx, edi
mov esi, edx
add ecx, edi
not ecx
xchg edi, esi
and edi, edx
jmp 0x477022
pop ebx
xchg esi, edx
xor edx, esi
sub ecx, esi
mov edi, esi
sub edi, esi
mov ecx, esi
jmp 0x476b27
push 0xe09a9861
add ecx, 0xf209f053
sub edx, edi
add edi, 0xf20a9279
bswap edx
shl edi, 0x16
xor ecx, edx
and edi, edx
and esi, edx
sub ecx, 0xf20c8568
and ecx, edx
mov ecx, edi
or ecx, esi
xor ecx, edx
add ecx, 0xf20e0e79
jmp 0x479990
push 0xe09c2739
xchg esi, edx
mov edx, ecx
shl edx, 0x18
xchg edi, ecx
shl edx, 0x17
shr edi, 0x1b
neg edx
and esi, 0xf219ac0f
and edx, edi
xor edi, ecx
or ecx, edx
shr esi, 0x12
shl esi, 0x16
or esi, edi
ror ecx, 0x13
jmp 0x47832c
mov ebx, 0x123b2f04
rol edi, 9
xor edi, esi
add ecx, edi
add edx, esi
and edi, ecx
add ecx, edi
shr ecx, 0x13
shl edi, 1
and edx, esi
dec edx
mov ecx, esi
shr edi, 8
xor ecx, edx
xor edx, esi
jmp 0x477005