Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff25
jne 0x401089
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xfffffedf
jne 0x401130
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xfffffed7
jne 0x4011cd
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xfffffede
jne 0x401242
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.ntdll.dll_RtlClearBits
call sub.ntdll.dll_RtlClearBits
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
call sub.kernel32.dll_SetTapePosition
ret
jmp 0x4751c1
or esi, ecx
or edx, edi
xor edx, 0xb30b077e
xor edx, esi
xor esi, ecx
mov edx, edi
and edx, 0xb30cf226
jmp 0x4760c4
push 0xb331f72f
bswap ecx
or ecx, edi
mov edx, ecx
dec edx
xor edi, ebx
sub ebx, 0xb80cc8ba
shl edx, 0x19
xchg ebx, edx
ror ecx, 4
dec ebx
and ecx, edi
mov ebx, edi
and ebx, 0xb80f89ac
jmp 0x475d14
push 0xb339e4b0
sub ecx, ebx
shl ebx, 6
and ecx, 0xb86496e2
add ebx, 0xb8651aba
sub ebx, edi
and edx, ecx
xor edi, 0xb8666e97
and edx, ecx
add edx, edi
jmp 0x47798c
call esi
rol edi, 0x17
not edx
bswap edi
xor edi, edx
add ecx, edi
xchg edi, edx
or edi, edx
xor ecx, edi
or edx, edi
or ebx, edi
jmp 0x47725e
mov esi, 0x2774562b
xchg edi, ebx
sub ebx, 0xb8d8dd76
and ebx, ecx
add edi, ecx
add edx, edi
jmp 0x475c3c
call esi
xor edi, edx
shr ecx, 0x16
dec ebx
and edx, edi
bswap ecx
bswap ebx
xor edx, ecx
and edi, ecx
mov edx, 0xb8f87589
or ebx, ecx
jmp 0x476061
pop esi
mov ebx, ecx
and ebx, edi
nop
or ecx, 0xb904adec
mov edx, 0xb9051035
jmp 0x475e23
call fcn.00477ee7
sub edi, 0xb955e16e
xchg edx, ebx
or edx, edi
shl ebx, 1
mov ecx, ebx
jmp 0x477a40
push 0xb32fc45f
inc edx
and ebx, edx
add edx, ebx
rol edx, 0x10
sub ecx, edx
or edx, edi
jmp 0x475878
push 0xb33253b0
xor edx, edi
neg ebx
xor edi, ecx
add edx, 0xb971f10c
xchg edx, edi
or ecx, edx
and ecx, edi
add ecx, edi
add ecx, edi
mov ebx, edx
sub ecx, edi
xor ecx, ebx
add ecx, ebx
mov edx, 0xb97645a2
rol ecx, 0x11
jmp 0x476b1e
call fcn.00477ee7
neg ecx
sub ecx, edx
and edx, ecx
sub ecx, edx
add edx, edi
add edx, edi
sub ebx, edi
xchg ecx, edi
and edx, edi
add edi, ebx
or ebx, 0xb98ae36b
jmp 0x47570d
push 0xb3356c28
xchg edx, ecx
or ecx, edx
add ecx, 0xb996b0e5
xor edx, edi
xor ecx, edi
add edx, ebx
sub ebx, edi
or ebx, edi
sub ebx, edx
sub edi, 0xb999bda6
sub edx, 0xb99a2ca9
jmp 0x476492
push 0xb33ae06e
xor ebx, edx
mov ebx, edx
jmp 0x47607f
push 0xb338d595
bswap ebx
and ebx, edi
or ebx, 0xb9ca7545
xchg edi, edx
xor ebx, ecx
xchg edx, edi
or edx, edi
and edi, edx
jmp 0x4779b0
pop esi
not ecx
or edi, ecx
and edx, edi
add ebx, 0xb9df58da
sub ebx, 0xb9dfc0fe
sub ecx, 0xb9e024a5
jmp 0x475fe6
mov esi, 0x123b2f04
xor ecx, ebx
shr ebx, 0x17
add ecx, ebx
shr edx, 0xf
or ebx, 0xb9e24f26
xor edx, ecx
or edi, ecx
or ebx, edi
xor edi, edx
jmp 0x477a5e
push 0xb32421b2
ror ecx, 0x1c
ror edx, 8
and edx, edi
bswap ebx
not edx
jmp 0x4769a9
pop esi
xchg edi, ebx
or ebx, edx
nop
ror ebx, 3
xchg ebx, ecx
xchg ecx, ebx
rol ebx, 0xc
sub edx, ecx
add ecx, ebx
jmp 0x476c85
mov esi, 0x123b2f04
mov ecx, 0xba9091d6
neg ebx
or edx, 0xba917d87
xchg ebx, edi
add edx, ecx
xor edx, 0xba92bc39
xor edi, ecx
inc edx
add edi, ebx
xor edx, edi
rol edi, 0x17
xor ebx, edi
xor ecx, 0xba95dd42
add ecx, edx
add edx, ebx
jmp 0x477c0c
pop esi
or ebx, 0xbb0c2097
xor edx, ebx
or edx, 0xbb0cfc07
xor ebx, ecx
xor ecx, edi
and edx, ecx
jmp 0x476d43
mov esi, 0x2774562b
or ebx, edx
sub edi, ecx
and edi, 0xbb4f54d4
or edx, ecx
xor edx, edi
and edx, edi
xor ebx, 0xbb50fe28
neg edi
xchg ebx, ecx
inc edx
jmp 0x477d52
mov esi, 0x2774562b
or edi, ecx
xchg edx, edi
or edi, ebx
add ecx, 0xbb7e5ea5
xchg ebx, edx
bswap edi
and edx, ecx
jmp 0x475dc1
mov esi, 0x123b2f04
xor ecx, ebx
mov ebx, ecx
mov edi, ebx
not edi
and edx, ecx
mov ebx, edx
dec edi
sub ecx, 0xbb9e8644
sub ecx, ebx
and edx, ecx
sub ebx, 0xbb9fc177
jmp 0x477052
push 0xb326ae18
inc edi
mov edx, ebx
sub edi, edx
sub ebx, edx
sub edx, edi
neg ecx
xor edi, ecx
xchg edx, edi
xor ecx, edx
or ebx, edx
mov edx, ecx
xor ebx, edi
jmp 0x477464
pop esi
shr edi, 9
sub edx, 0xbc147a19
and edi, 0xbc14dfb1
or ecx, edi
xor edx, 0xbc15aca1
shl ecx, 8
shl edx, 3
add ecx, edx
and edx, edi
xchg ecx, ebx
add ecx, edi
jmp 0x475ccb
call esi
ror ebx, 2
sub ebx, edx
add edi, 0xbc396405
bswap ecx
not edx
add ebx, 0xbc3a9b27
jmp 0x476178
call fcn.00477ee7
and edx, edi
and edi, ecx
xchg edx, ebx
ror ecx, 0x1f
xor ecx, 0xbc7daa4b
or ecx, edi
xor ebx, ecx
xor ebx, edx
xor ecx, 0xbc7f4484
jmp 0x477729
pop esi
mov edx, ebx
inc ecx
shr ebx, 5
dec edx
neg edi
xchg ebx, ecx
and edi, ebx
not edx
and edi, edx
inc ebx
or edi, ebx
add ebx, 0xbcca6892
jmp 0x4759a5
push 0xb3273354
xchg ecx, edx
dec edi
xor ebx, edx
sub ecx, ebx
bswap ebx
xor ebx, 0xbd09cb0c
mov ebx, edi
and ebx, ecx
ror ecx, 0x1d
jmp 0x476c08
call esi
ror ecx, 0x10
sub ebx, 0xbd6e7f84
xor ecx, 0xbd6f1abc
and ebx, edx
xchg ebx, ecx
or ecx, edx
xor ebx, ecx
sub edx, ebx
sub ebx, 0xbd71e2c4
xor edx, ecx
not edi
mov ecx, ebx
or ecx, ebx
shr ecx, 0x1c
and ebx, edx
jmp 0x4767c3
push 0xb33a6319
shl ebx, 0x1e
and ecx, 0xbdbf89c9
and ecx, edi
shl ecx, 0x11
ror edi, 6
shl edx, 0xb
mov edx, ecx
mov edi, edx
sub edx, edi
jmp 0x475edd
push 0xb33986a4
dec edx
shr edx, 0xc
sub edx, edi
mov ecx, 0xbdc4da2d
xchg ecx, edi
or ebx, ecx
xor edi, ecx
xor edi, edx
jmp 0x4755ab
call esi
sub ecx, 0xbdd55f67
mov ecx, edi
add edi, edx
add edx, edi
sub edi, 0xbdd6d278
or edi, ebx
dec ebx
mov ebx, edi
jmp 0x477c42
jmp loc.0047a000
call fcn.00477ee7
sub ebx, edi
sub ebx, edi
xor edx, ecx
not ebx
rol ebx, 0x11
xor ebx, edx
xor ebx, 0xbe164976
mov edi, 0xbe16aabd
jmp 0x475951
pop esi
sub ecx, 0xbe1902b1
add edx, edi
inc ebx
and ecx, edi
mov edi, 0xbe1a8436
mov ecx, edx
add edi, edx
bswap edi
jmp 0x475305
call fcn.00477ee7
sub ecx, 0xbe3b837d
and ebx, ecx
and ecx, ebx
or ecx, edi
sub edx, 0xbe3d0cf5
mov edx, edi
ror ecx, 5
xor edi, ebx
sub ebx, 0xbe3ec0d3
jmp 0x476e56