Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
mov esi, edx
or esi, 0x3f9d6fa6
xchg edi, ecx
bswap ecx
call sub.user32.dll_GetProcessWindowStation
inc edx
xchg edi, esi
and edx, ecx
xchg edx, edi
add edx, edi
cmp eax, 0xffffff38
jne 0x40108a
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_VarUI8FromI2
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_SafeArrayLock
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_SafeArrayLock
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_SafeArrayLock
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_VarUI8FromI2
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_VarUI8FromI2
ret
xor edx, edi
mov ecx, edx
xchg edi, edx
ror ecx, 6
bswap edx
xor edi, ecx
call sub.user32.dll_GetProcessWindowStation
xchg edx, ecx
add ecx, esi
cmp eax, 0xffffff03
jne 0x40113d
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_SafeArrayLock
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_VarUI8FromI2
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_SafeArrayLock
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_SafeArrayLock
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_VarUI8FromI2
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_SafeArrayLock
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_SafeArrayLock
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_VarUI8FromI2
call sub.user32.dll_DestroyIcon
ret
or edi, edx
ror edi, 0x12
add ecx, edi
add ecx, edx
dec edi
xor ecx, esi
call sub.user32.dll_GetProcessWindowStation
xchg ecx, edx
or ecx, edx
add edx, edi
nop
xor edx, edi
and edx, 0x3fb91d00
cmp eax, 0xffffff14
jne 0x401204
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_SafeArrayLock
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_VarUI8FromI2
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_SafeArrayLock
call sub.user32.dll_DestroyIcon
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_SafeArrayLock
call sub.oleaut32.dll_VarUI8FromI2
call sub.user32.dll_DestroyIcon
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_VarUI8FromI2
call sub.oleaut32.dll_SafeArrayLock
ret
jmp 0x4b7794
sub esi, edi
and ecx, esi
sub ecx, edi
sub edi, esi
jmp 0x4b87e5
call ecx
xor edi, 0x4a235a06
xor edi, esi
shl edx, 4
xchg edx, esi
bswap esi
xor edi, 0x4a257d00
add ebx, edi
jmp 0x4b8d45
mov ecx, 0x2774562b
not edi
or edx, ebx
add edi, ebx
add esi, 0x4a66cf46
inc ebx
dec edx
ror edx, 5
xor esi, edi
jmp 0x4b96b2
mov ecx, 0x123b2f04
ror ebx, 0xe
xchg esi, ebx
xchg edi, ebx
mov edi, 0x4c997aa0
xor esi, ebx
ror ebx, 3
mov esi, edx
xchg ebx, esi
and ebx, 0x4c9bdc00
mov edi, ebx
or edi, edx
add ebx, edx
jmp 0x4b8dff
call ecx
sub esi, edi
add edi, 0x4d1a238f
ror esi, 0x18
xchg ebx, esi
or edx, ebx
and edi, esi
mov edx, edi
xchg edi, edx
xor edx, esi
mov edi, esi
neg edi
jmp 0x4b8e5d
mov ecx, 0x123b2f04
and edx, edi
xor esi, ebx
add edx, 0x4d863173
xor edx, ebx
mov edx, ebx
mov ebx, 0x4d87766f
mov edx, 0x4d87dd95
add edi, ebx
jmp 0x4b88c6
push 0x409fd352
xor esi, edi
shr edi, 0x13
neg esi
or ebx, edx
and edi, edx
neg ebx
or ebx, edx
xchg ebx, edi
xor edx, edi
shr ebx, 6
or ebx, edx
sub ebx, edi
ror edi, 0xe
and edi, ebx
jmp 0x4b82d4
jmp loc.004bf000
pop ecx
mov edx, ebx
bswap esi
xor edx, ebx
add edi, edx
and edi, 0x4ecfcb59
shl ebx, 5
sub esi, ebx
xor edx, edi
ror ebx, 1
add esi, edi
jmp 0x4ba271
call fcn.004b7d04
ror edi, 0x17
and esi, 0x4eea17da
neg esi
add ebx, 0x4eeaf273
add esi, ebx
sub esi, edi
shl edx, 6
mov ebx, edx
xor esi, ebx
mov edx, esi
mov edi, 0x4eeddf44
xor esi, ebx
not edi
jmp 0x4b852f
pop ecx
sub edx, esi
or ebx, 0x4ef409f6
xor edi, esi
and esi, edx
sub esi, edi
sub edx, edi
add edx, esi
xor edx, ebx
ror edx, 0x16
and ebx, edx
sub ebx, 0x4ef7e95c
jmp 0x4ba259
call fcn.004b7d04
or ebx, 0x50378f84
xor esi, 0x5037f942
sub edx, edi
inc edi
add edi, edx
xor edi, ebx
xor esi, ebx
and edx, 0x503a88c3
mov esi, 0x503afb9c
jmp 0x4b7a31
push 0x40a3d14c
neg edi
mov edx, ebx
and edi, esi
or edx, ebx
jmp 0x4ba04d
push 0x40a42377
and edi, 0x519facc0
or edx, esi
xor edx, edi
or edx, edi
xor ebx, esi
add esi, 0x51a20e79
add edx, edi
jmp 0x4ba54e
push 0x40a17953
and ebx, edi
or ebx, edi
bswap ebx
and edi, esi
mov edi, ebx
neg ebx
sub edx, ebx
jmp 0x4ba432
pop ecx
shr edi, 4
xor edx, 0x51f3b007
mov esi, 0x51f79938
sub edi, ebx
rol edi, 0xf
ror ebx, 9
sub ebx, edi
sub edx, esi
and ebx, edx
and ebx, edx
and edi, ebx
jmp 0x4b9747
push 0x40a1ca63
add edi, esi
add edx, edi
or ebx, edi
inc ebx
shl edx, 0x12
jmp 0x4b7b9e
push 0x40a46e66
xor edi, ebx
xchg edi, esi
shl ebx, 0x1d
ror ebx, 0x11
bswap ebx
sub ebx, edx
sub ebx, edx
or edi, edx
jmp 0x4b8778