Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xfffffee3
jne 0x401070
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xfffffef6
jne 0x401117
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xffffff02
jne 0x401191
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xffffff2f
jne 0x401201
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
ret
jmp 0x4788e0
sub ecx, ebx
not edx
ror esi, 0x12
sub esi, ecx
mov ecx, 0x786de3cd
jmp 0x47ae36
push 0x787a94e0
neg ecx
and ecx, 0x7fb51cb5
and edi, 0x7fb591c5
or ecx, ebx
xchg ecx, edx
jmp 0x479950
pop esi
sub ebx, ecx
and edi, ecx
xchg ebx, edx
mov edx, 0x7ff7f5bc
rol edx, 0xd
shr edi, 0xf
xor ebx, edx
and ebx, edx
not ecx
shr ebx, 0xc
and ebx, 0x7ffac28a
inc ebx
shl ebx, 0x18
bswap edx
or ebx, ecx
jmp 0x479ff5
push 0x7885d5c7
sub edi, ebx
neg ecx
and edx, edi
mov edi, ecx
and edx, ebx
jmp 0x47a163
call esi
sub ecx, edi
xchg ecx, edi
shl ebx, 0x11
and ecx, 0x8060c41e
add edx, 0x80612642
or edi, 0x8061a325
shl ebx, 1
xchg edi, edx
neg edx
or edi, ebx
bswap ecx
jmp 0x47948f
pop esi
xor ebx, edx
and ebx, ecx
shl edi, 0xd
mov edx, 0x80cf099c
dec edx
or edx, ecx
and edi, 0x80d08472
add edx, edi
jmp 0x47af16
mov esi, 0x123b2f04
mov edi, ebx
bswap ecx
add edx, ebx
sub edx, ebx
bswap edi
not edx
add edx, edi
sub ecx, edx
xor edi, 0x81a1e433
mov edx, ecx
xor edx, edi
sub edi, 0x81a30efe
bswap ebx
jmp 0x47a5c0
pop esi
xchg ecx, edi
and edi, ecx
mov edx, edi
xchg ebx, edi
add ebx, edi
shl ecx, 0x17
shr ebx, 2
shl ecx, 0xf
bswap ebx
or edi, edx
and ebx, ecx
xor ecx, ebx
jmp 0x478e8c
pop esi
add edi, ecx
and edx, ebx
xor edi, edx
or ebx, ecx
xor edi, 0x81bb9f9e
add ebx, edi
or ecx, 0x81bc8dbf
or ecx, ebx
jmp 0x479865
pop esi
bswap ebx
and edi, ecx
inc ecx
xchg ebx, ecx
shr ecx, 0xc
xor edi, 0x820a19a7
xchg ebx, ecx
sub edi, ebx
add ebx, ecx
shr edx, 6
not ebx
rol ecx, 5
dec ebx
jmp 0x4799e8
push 0x78770aa6
and edi, 0x820d9fbb
and ecx, 0x820e012c
add edi, 0x820e64cb
ror edx, 0x12
and ecx, edx
xor ecx, edi
bswap edi
bswap edi
xor edx, 0x821108d5
xor edx, 0x82118195
add ebx, 0x8211f753
or ecx, edx
mov ebx, 0x8212bec6
jmp 0x47a17d
call fcn.004789be
xor ecx, ebx
xor edi, ecx
shl ebx, 0xc
add edx, ecx
dec ecx
and edx, edi
ror edx, 0x1c
xor ebx, 0x82240f8f
rol edi, 0x1c
add ecx, edi
jmp 0x47aaf2
pop esi
shr edx, 0x13
nop
xor ecx, edx
rol ecx, 0xc
or ecx, edx
xor edi, edx
xchg edx, ebx
shl ebx, 1
add edx, edi
jmp 0x4798ef
push 0x7879b23f
mov ecx, edx
add edx, edi
shr edi, 4
mov ebx, edx
or edi, ebx
xor edx, 0x826f5b5e
not edi
jmp 0x47a530
call fcn.004789be
add ebx, edx
xor ebx, edi
add edx, edi
or ecx, 0x82b5b958
or ebx, edx
mov ecx, edx
or edi, ebx
sub edx, ecx
or edx, ebx
shl edi, 0x18
nop
add edi, ebx
mov ecx, edx
xor edx, ebx
add edi, ebx
sub edi, 0x82bee0fa
jmp 0x47a6ed
pop esi
and ecx, edx
or edi, ecx
mov edx, edi
and ecx, 0x82c33a6c
or ecx, 0x82c3acc0
bswap ebx
sub ecx, edx
dec edx
or ecx, edi
jmp 0x479c09
pop esi
shr ebx, 0x16
ror edx, 6
xor edi, ebx
mov edx, ecx
dec edi
xchg edx, edi
sub edx, ebx
jmp 0x47a5e2
mov esi, 0x2774562b
sub ebx, 0x82dee49a
or ecx, edi
sub ebx, edx
and edi, 0x82e05269
add ecx, ebx
nop
bswap edx
jmp 0x47a030
push 0x7876503b
xor edi, 0x830c959b
mov edx, ecx
inc edi
mov ecx, edx
jmp 0x47a0f5
mov esi, 0x2774562b
add edx, edi
mov ebx, 0x83184a8b
xchg ecx, edx
nop
and ebx, ecx
shr edx, 4
not ebx
or ecx, 0x831b1bf0
xor edx, ebx
and ecx, 0x831bf0e9
or edx, ebx
jmp 0x47981c
pop esi
sub edx, ebx
sub edx, edi
shr edi, 0xd
add ebx, ecx
mov ecx, edi
xor edx, ecx
add ebx, edi
and ebx, edi
jmp 0x47969c
push 0x78795d2d
mov edi, edx
or ebx, edx
mov edi, ecx
add edi, ecx
sub edx, ebx
or ebx, 0x839a369c
xor edx, ecx
jmp 0x4796f2
pop esi
ror edi, 0x12
add edx, edi
xor ebx, 0x83ac9103
and ecx, edx
mov ebx, edx
xor ecx, ebx
sub ebx, 0x83ae24b3
jmp 0x47a394
call fcn.004789be
mov edi, 0x83c20780
xor ecx, ebx
or ecx, 0x83c2fd4f
shl edx, 0x1c
rol edi, 0xa
and edi, ecx
add ebx, edx
mov ebx, edi
xor edx, edi
shl edx, 0xb
jmp 0x478d6f
mov esi, 0x2774562b
sub edi, 0x83c6642c
or edi, ecx
and ebx, ecx
or ebx, 0x83c7cd45
and edx, ebx
dec ebx
add ebx, edx
shl edi, 0x12
or edi, edx
add edi, edx
sub ebx, ecx
jmp 0x479d1e
push 0x7883620a
or edi, ebx
sub ecx, edi
rol ecx, 0x1f
or ebx, edx
bswap edx
bswap edi
nop
sub ebx, edi
ror ecx, 0x17
xchg ecx, edi
and edi, ebx
jmp 0x479a4b
push 0x787a48cb
sub ecx, edx
sub ebx, edx
shr ecx, 0xd
xchg edx, ebx
sub ecx, edx
or edi, ecx
or edi, edx
add ecx, ebx
xor ebx, edx
add edi, 0x83fcb93f
bswap edi
xor edi, ecx
jmp 0x478a25
pop esi
xchg ebx, ecx
inc edx
shl ebx, 0x1e
add edx, ecx
sub ebx, edi
ror edi, 7
not ecx
and edx, edi
mov ecx, 0x8429b4f8
xor ecx, 0x842a18e6
neg ecx
xor ecx, ebx
mov ecx, edx
mov edx, ecx
jmp 0x479bf2
pop esi
sub ebx, ecx
xchg ebx, ecx
add edx, 0x845398f3
shr edi, 3
sub ecx, edi
or edi, edx
neg edi
or edi, ebx
rol ebx, 0x12
dec edx
xor ebx, edx
jmp 0x479c4c
call esi
dec ecx
neg edx
and ebx, edx
and ebx, ecx
xor edx, edi
xor edx, edi
or edi, ebx
ror ecx, 4
shr ebx, 0x10
jmp 0x478aef
call fcn.004789be
and ecx, edi
nop
add ecx, 0x845cb682
add edx, edi
mov edx, ebx
or edi, edx
xchg ecx, edi
jmp 0x47aca6
push 0x7876a2da
or edi, edx
mov ebx, 0x8474cb8f
add ebx, 0x847531e0
nop
mov ebx, 0x84763972
shl ebx, 0x11
mov ecx, ebx
jmp 0x4794b4
mov esi, 0x2774562b
xor ecx, ebx
rol ecx, 0x13
inc ecx
and ecx, edi
shl edx, 0x11
dec ecx
or edx, ebx
sub edi, ebx
jmp 0x47a4aa
mov esi, 0x123b2f04
mov ecx, edx
xor ecx, edx
or ecx, edi
sub ecx, 0x84874984
xor edx, edi
jmp 0x47955f
push 0x78831530
inc edx
ror edx, 0xf
rol edx, 0x19
xchg ecx, edx
jmp 0x479e4c
jmp loc.004804d6
push 0x7879fed4
or ecx, ebx
xor ebx, 0x851b0c4e
sub ecx, 0x851fd190
xchg edx, ecx
neg edi
nop
mov edx, ecx
mov ecx, edx
shl ecx, 0x17
jmp 0x479eaf
call fcn.004789be
inc edx
sub edi, 0x853202de
inc edx
inc edi
mov ecx, edx
ror ecx, 2
sub ebx, 0x85343983
bswap ecx
or edi, ecx
jmp 0x47a016
pop esi
add ecx, ebx
mov edx, ebx
and ebx, 0x853677e2
add edx, ebx
nop
or ebx, ecx
jmp 0x47adf9
call esi
xor ebx, ecx
mov edi, edx
xor ebx, edx
xchg ecx, edi
add edx, ecx
mov ecx, edx
rol ebx, 0x10
and ebx, edx
ror edi, 0x16
dec ebx
xchg ecx, edx
not ebx
jmp 0x479249
pop esi
and ebx, edi
neg edx
ror ecx, 0xd
shl ebx, 0x1f
or edx, 0x856fe911
xor ecx, edi
sub ebx, ecx
add edx, ebx
jmp 0x479299
call esi
and edx, ebx
mov ebx, 0x85e0bd2a
or ebx, ecx
mov ecx, ebx
sub edi, ecx
or edi, ebx
rol edx, 0x18
ror ecx, 0x19
ror edi, 0xd
shl ecx, 0x12
and ecx, 0x85e4c4f8
shl ebx, 0xb
jmp 0x47a7a3
call esi
xchg edi, ecx
sub edx, 0x86160169
add edi, ebx
and ecx, 0x86171682
jmp 0x479ee9
push 0x787ec71f
xchg ebx, ecx
xor ecx, ebx
mov ebx, ecx
sub edi, ebx
xor edx, edi
jmp 0x47921d
push 0x787e7375
inc ecx
and edx, 0x86362f35
rol edx, 0x19
neg edx
and edx, ecx
and ecx, ebx
shr edi, 0x12
jmp 0x47acf0
push 0x787e1385
shl ecx, 0x16
add ecx, 0x863cde97
add ebx, edx
shr edx, 0x1a
or edx, 0x863e411c
shl ebx, 4
mov edx, ebx
or ecx, ebx
and ecx, edx
sub edx, ecx
sub edi, edx
jmp 0x47adbf
push 0x787473a7
or edi, 0x8643c0ea
shr ebx, 2
mov edx, ecx
or ebx, edx
or ebx, ecx
and ebx, ecx
dec edx
jmp 0x479d46
push 0x78857c0d
sub edx, 0x86681b17
or edi, 0x8668a849
jmp 0x478ca4