Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
xchg edi, ecx
sub edi, ebx
add ebx, esi
bswap edi
shl esi, 0xe
bswap ebx
mov esi, ebx
and ecx, 0x51b623fe
call sub.user32.dll_GetCaretBlinkTime
sub ecx, esi
add ecx, esi
cmp eax, 0xffffff05
jne 0x40109d
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
ret
and edi, ebx
mov ebx, esi
bswap ecx
mov ecx, 0x51d19111
xor ecx, 0x51d24a95
and esi, 0x51d325f0
call sub.user32.dll_GetProcessWindowStation
sub edi, esi
cmp eax, 0xffffff10
jne 0x40111c
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
ret
ror edi, 0xb
neg edi
sub esi, edi
call sub.user32.dll_GetProcessWindowStation
xor edi, ecx
mov esi, edi
bswap esi
and ecx, 0x51e82b84
add ebx, ecx
cmp eax, 0xffffff10
jne 0x4011a1
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
ret
sub edi, ebx
add edi, ebx
xor ecx, ebx
bswap esi
shr ebx, 0x14
xor edi, esi
add ebx, esi
call sub.user32.dll_GetProcessWindowStation
shl ecx, 0x13
and ebx, edi
sub edi, ebx
bswap edi
cmp eax, 0xffffff20
jne 0x40124c
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_EnumCalendarInfoExA
call sub.kernel32.dll_CreateActCtxW
ret
jmp 0x49413f
bswap ecx
or ecx, 0x57d0d322
mov ebx, esi
mov edi, 0x57d1a97b
xchg edi, ebx
xor esi, edi
xor esi, 0x57d34651
or edi, ebx
jmp 0x496d97
push 0x57f2e2e9
inc edi
and edx, ecx
add edx, ebx
or edx, ebx
and ebx, ecx
jmp 0x49751f
pop esi
inc ecx
mov edi, ebx
xchg edi, edx
or edx, ebx
neg ecx
mov edi, ecx
add ebx, 0x5e9918ba
jmp 0x4955eb
push 0x57e3e97d
mov edi, edx
xchg edx, ebx
add edi, edx
mov edi, ebx
jmp 0x494a73
pop esi
xchg edx, ecx
inc edi
or edi, 0x5ecaa58c
not edi
bswap edi
or ebx, ecx
add edx, edi
xor ebx, edx
neg edx
jmp 0x495c1e
push 0x57f801e4
sub ebx, 0x5f2d4fe5
add edi, edx
or edx, 0x5f2e2f36
xchg ebx, edx
mov ecx, ebx
or ebx, edi
add ecx, edi
or ebx, ecx
jmp 0x494dd0
pop esi
shl ecx, 2
rol edi, 0x1f
or ecx, 0x5f31fe1f
xchg edx, edi
or edi, edx
or ebx, edx
dec ecx
add ecx, ebx
jmp 0x496b60
mov esi, 0x2774562b
rol ebx, 5
sub edx, ecx
add ecx, edx
add edx, ecx
mov edx, ecx
xchg edx, edi
dec edx
xchg ebx, edi
mov edx, ebx
rol ebx, 7
jmp 0x496146
pop esi
or ecx, ebx
inc ebx
add ecx, ebx
dec ebx
shl edx, 0xe
add edx, edi
add ecx, edx
sub ecx, edi
shr edi, 6
jmp 0x494251
push 0x57e43bc5
neg edi
and edx, ebx
mov ebx, edx
xchg ecx, edi
add ebx, edi
or edx, ebx
xchg edx, edi
and ebx, edi
add ecx, edi
sub ecx, edx
sub ecx, 0x61280df2
xchg ebx, ecx
jmp 0x496c76
push 0x57f85423
and ebx, edx
mov ebx, ecx
not ebx
mov edi, edx
bswap edx
inc edx
not edx
add ebx, 0x619fd97c
sub ecx, edi
jmp 0x496953
pop esi
add edx, 0x61aa71b9
xchg ecx, edx
xchg ebx, ecx
sub ecx, edi
and ecx, edx
mov edx, ebx
and ecx, edx
sub edx, ebx
xor ebx, edx
xor edx, ebx
mov ecx, edx
add ecx, 0x61af07c3
xor edx, 0x61af75b6
add ecx, ebx
jmp 0x49641f
pop esi
and edi, 0x61bb72c8
and edi, ecx
neg ecx
or ebx, edx
and ecx, ebx
jmp 0x4978a5
pop esi
or edi, ecx
sub ecx, edx
shr edx, 3
sub edx, ecx
add ebx, 0x61c782ea
shl edi, 8
or ebx, 0x61c863ff
bswap ecx
and ebx, edi
jmp 0x4970e2
call fcn.004951ee
nop
mov edi, ecx
sub edi, ebx
shr edi, 3
inc edx
mov ecx, ebx
add ebx, edx
jmp 0x495ca2
mov esi, 0x2774562b
nop
mov ebx, edx
xor ebx, ecx
or edx, ecx
xor ebx, edx
xor ebx, edi
shl ecx, 4
mov edx, 0x61ffb029
jmp 0x49583e
push 0x57e4e19f
add edx, ecx
xor edx, 0x62003fcd
not edx
xchg edx, edi
nop
jmp 0x496c64
pop esi
shl ecx, 1
or ebx, edi
or edx, ebx
rol edi, 0xe
mov ecx, edi
dec edi
shl edx, 6
or edx, ecx
sub edx, edi
ror ecx, 2
jmp 0x4941cf
push 0x57f1ef7b
and ebx, 0x622388cd
xor edx, 0x6223c950
or edi, edx
xchg edx, ecx
shl edx, 1
xor ecx, ebx
mov edx, 0x622507c8
and edx, 0x6225456a
jmp 0x496adf
push 0x57f5e3f7
add edx, ecx
xchg ecx, edx
xchg ecx, edx
not ebx
neg ebx
and ecx, 0x623a71f6
xchg ecx, edi
dec ebx
xor edi, ecx
ror ecx, 2
bswap edi
xor ecx, ebx
nop
shl edx, 0x17
jmp 0x4950f3
push 0x57dedcfb
shl ebx, 0x1e
bswap edx
xor edi, ecx
neg ecx
and ecx, 0x625c3f9f
shr ebx, 0x18
jmp 0x496e49
mov esi, 0x123b2f04
bswap edi
or ebx, 0x625d0d10
and edx, 0x625d4aa0
xor ecx, ebx
and edi, ecx
add ecx, edx
mov ebx, 0x625e3d89
or ebx, ecx
or edx, ecx
shr ecx, 8
dec edx
ror edx, 0x13
jmp 0x496d5c
pop esi
shr edx, 0xf
inc ebx
mov edx, edi
mov edx, ebx
dec ecx
bswap ebx
ror ecx, 0x13
xor ecx, ebx
and ecx, edi
add ebx, ecx
jmp 0x496fd0
push 0x57db845b
xor edi, 0x6272debe
or edx, ecx
dec ecx
or edx, ecx
add edi, ebx
sub edx, ebx
and edi, edx
mov ebx, 0x62748ff2
and ecx, edx
shl ecx, 2
add edx, ecx
dec edi
jmp 0x495c65
push 0x57dae266
xor ecx, edi
or edx, ecx
and edi, ecx
dec ecx
add edi, ebx
sub ecx, 0x62794e4e
neg ebx
add edx, edi
inc edi
jmp 0x4973c2
call fcn.004951ee
sub ebx, ecx
sub ebx, ecx
and edx, edi
mov edx, 0x628de6d5
xchg edx, ebx
sub ebx, ecx
jmp 0x495d8e
pop esi
mov edi, edx
rol edx, 5
shl edi, 0x12
neg ebx
not edi
sub ecx, edi
xor edi, ebx
xchg ecx, edx
and ebx, 0x62d27c91
and ebx, edi
jmp 0x49433c
mov esi, 0x2774562b
xchg edx, edi
and edi, edx
mov edi, edx
jmp 0x495074
call esi
ror ecx, 0xb
sub ecx, ebx
and edx, ecx
sub ecx, 0x62da10bc
bswap ecx
xchg ebx, edi
shr edx, 0xe
or ebx, 0x62db0a95
shr ebx, 5
xor ebx, 0x62db9385
shl edx, 0xe
xchg edi, ebx
or ecx, edi
jmp 0x49435e
call fcn.004951ee
and ebx, edi
mov ecx, ebx
xor ecx, 0x62e62570
add ebx, 0x62e662bf
and edx, edi
xor edx, 0x62e70f2d
jmp 0x49665a
call esi
not ebx
sub ecx, 0x62e98533
nop
or ecx, 0x62ea003a
or ebx, edi
xchg edx, edi
jmp 0x494263
pop esi
sub edx, edi
sub ecx, edx
and edx, ebx
and edi, 0x6317c5fd
add ecx, ebx
xchg ecx, ebx
or ebx, ecx
or edi, ecx
mov edx, 0x6318f804
sub ecx, ebx
mov edx, 0x631972ac
nop
and edi, 0x6319f1a9
add ecx, edx
jmp 0x496a8f
call fcn.004951ee
bswap edi
or ebx, edx
jmp 0x4974b5
pop esi
xchg ecx, edi
sub edi, ebx
and edx, ecx
mov ebx, 0x635dc940
inc ebx
xor edx, ecx
neg edx
jmp 0x4952b3
push 0x57f29158
sub edx, ebx
sub ebx, edi
xor ecx, 0x636245d6
xor ebx, 0x63628396
xchg ebx, edi
xchg edx, ecx
xchg edi, ebx
bswap edi
add ebx, edi
and ebx, ecx
jmp 0x494194
call esi
mov edi, 0x63880497
xchg edi, ecx
xchg edx, ecx
sub edx, ebx
ror edi, 0x1f
sub edx, edi
or ebx, edi
xor edi, ecx
bswap ebx
add ecx, edi
rol edi, 0x10
jmp 0x4951d1
jmp loc.0049afa8
mov esi, 0x2774562b
not edx
and ebx, ecx
bswap edi
mov ecx, 0x63bce33b
bswap edi
add ecx, ebx
add edi, ecx
mov ebx, ecx
jmp 0x4967a9
pop esi
xchg ecx, ebx
add ecx, ebx
add edi, ebx
xchg ecx, ebx
and ecx, 0x63c6d660
and ecx, edi
xor edi, ecx
xor ecx, edi
jmp 0x496a6f
pop esi
bswap edx
add edx, edi
jmp 0x496026
pop esi
sub edi, ebx
mov ebx, 0x63d29266
xchg edi, edx
xchg ecx, edx
sub edi, edx
and edi, ecx
or ecx, 0x63d3c2c2
and edx, ecx
mov edi, ecx
sub edi, 0x63d48174
jmp 0x49746c
push 0x57f24391
add ebx, edx
inc ecx
not ecx
add ebx, ecx
mov ebx, 0x63d980d0
or ebx, edx
or ecx, edx
inc edi
xor edx, edi
xchg ebx, edi
and edi, edx
add ecx, 0x63db3587
xor edx, ebx
jmp 0x496461
push 0x57df9625
sub edx, edi
add ecx, edx
inc edi
nop
xor edi, ecx
or edx, edi
xor edi, ecx
or edi, ecx
xor edi, 0x63ddce74
or ecx, edi
mov ebx, ecx
jmp 0x494460
pop esi
xchg ecx, ebx
ror edi, 0xd
add edx, ebx
sub edx, ecx
sub ecx, 0x63e34a43
jmp 0x494ec8
mov esi, 0x2774562b
sub ecx, ebx
xchg edi, ecx
xor edi, ecx
mov edi, edx
jmp 0x497628
push 0x57e48fed
add edx, 0x63f6585c
or edi, edx
xchg edx, edi
sub ebx, edx
or ebx, edx
or ecx, 0x63f79288
and ebx, edx
or ebx, edx
mov ecx, 0x63f849b9
jmp 0x495110
call fcn.004951ee
mov ecx, ebx
rol ebx, 0x1c
and edi, ebx
not ebx
sub edx, ebx
ror edi, 5
neg edi
xor edx, ecx
and ebx, edx
jmp 0x49760e
push 0x57da7fd8
xor edi, ecx
and edx, ecx
add edi, ecx
sub ecx, 0x64296580
add edx, 0x6429a365
mov edx, ecx
dec ebx
xchg ebx, edx
jmp 0x495723
push 0x57de84c1
not ecx
sub ebx, edx
mov ebx, ecx
rol edx, 6
xchg ebx, edx
xor edx, ecx
xor ebx, edx
and edi, ebx
or edx, ecx
ror ebx, 0x13
add edi, ebx
jmp 0x4955a1
push 0x57df4d72
inc ebx
mov ebx, edx
shr edx, 0x15
and edi, edx
mov edi, edx
ror edi, 0x17
sub ebx, edi
sub ebx, 0x6436f930
shl ecx, 0x19
dec ecx
shl edx, 0x12
jmp 0x496b08
pop esi
add ecx, edi
sub ebx, ecx
inc edi
add ebx, edi
add ebx, 0x6467d305
or ecx, edx
nop
mov ebx, edi
ror edx, 0x1c
xor edi, 0x646a1ef6
jmp 0x49788e
call esi
or edx, 0x6475c3b1
xor edx, ebx
or ebx, edi
mov ebx, 0x6476833b
jmp 0x494f22
pop esi
sub edi, 0x647c5f02
xor edx, ecx
add edi, 0x647cd892
neg edx
bswap ecx
shl edx, 0x12
and edx, ebx
sub ebx, edi
nop
xchg ecx, edx
xor ecx, edx
jmp 0x494e3c
push 0x57db365c
xor ecx, edx
or edi, ecx
not edi
and edi, ecx
sub edx, 0x64b9f797
and ebx, edx
sub ebx, edx
jmp 0x4956e3
push 0x57e239db
xchg ecx, edi
add ebx, 0x64c57508
shr edx, 0xf
and ecx, edx
mov ebx, 0x64c62ff9
or ebx, ecx
sub edx, ecx
or edi, ecx
xchg edi, edx
or edx, ebx
jmp 0x4955bd
call esi
inc ebx
xor ecx, edi
add edx, ebx
shr ebx, 0x1f
add edi, ecx
mov ebx, 0x64caf85d
ror edx, 9
inc ecx
bswap ebx
mov edx, edi
sub ebx, ecx
jmp 0x4969dc
mov esi, 0x123b2f04
xor edi, ebx
xchg edx, ebx
mov edi, 0x64d22c9a
mov ebx, ecx
add edi, 0x64d2a6e6
nop
add ecx, 0x64d324d2
xor edi, 0x64d36e54
add edx, ebx
add edx, ebx
not edx
mov edi, edx
mov ecx, edx
jmp 0x495d4e
call esi
and edx, 0x64e0c606
xor ebx, edx
or ecx, ebx
xor ecx, ebx
and ebx, ecx
or ebx, edi
or edi, ecx
dec edx
jmp 0x494a2c
call fcn.004951ee
add edi, ecx
xor edi, edx
xor edx, 0x64e34fd8
jmp 0x497075
push 0x57f59329
or edx, ebx
sub edx, edi
or ecx, 0x650fa2f0
dec edi
sub edi, edx
jmp 0x4953f9
pop esi
sub ebx, ecx
xor ecx, edi
mov ebx, edi
shr edx, 0x14
xor ecx, 0x65116a89
xor edx, 0x6511a832
xor ebx, ecx
or edx, ecx
not ebx
jmp 0x496db8