Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetConsoleWindow
cmp eax, 0xfffffeea
jne 0x4010ac
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_EraseTape
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_LCMapStringA
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_EraseTape
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_EraseTape
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_EraseTape
call sub.user32.dll_UnhookWindowsHook
call sub.user32.dll_UnhookWindowsHook
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_EraseTape
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_EraseTape
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.user32.dll_UnhookWindowsHook
call sub.user32.dll_UnhookWindowsHook
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_EraseTape
ret
call sub.kernel32.dll_GetConsoleWindow
cmp eax, 0xffffff2f
jne 0x401158
call sub.user32.dll_UnhookWindowsHook
call sub.user32.dll_UnhookWindowsHook
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_EraseTape
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_EraseTape
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_EraseTape
call sub.user32.dll_UnhookWindowsHook
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_EraseTape
call sub.user32.dll_UnhookWindowsHook
call sub.user32.dll_UnhookWindowsHook
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_LCMapStringA
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_EraseTape
call sub.user32.dll_UnhookWindowsHook
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
call sub.user32.dll_UnhookWindowsHook
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
ret
call sub.kernel32.dll_GetConsoleWindow
cmp eax, 0xffffff32
jne 0x401204
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_LCMapStringA
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_LCMapStringA
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_EraseTape
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_LCMapStringA
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_EraseTape
call sub.kernel32.dll_EraseTape
call sub.user32.dll_UnhookWindowsHook
call sub.kernel32.dll_EraseTape
call sub.user32.dll_UnhookWindowsHook
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
call sub.user32.dll_UnhookWindowsHook
call sub.advapi32.dll_SetInformationCodeAuthzPolicyW
call sub.kernel32.dll_LCMapStringA
ret
jmp 0x4758b4
and ebx, ecx
jmp 0x475df3
mov ecx, 0x123b2f04
and edx, ebx
rol edi, 8
shl ebx, 0x16
xor edx, ebx
and ebx, 0xb29a2266
add edx, edi
and edi, 0xb29afb03
jmp 0x478633
push 0xb07d13ce
or ebx, edi
not esi
sub ebx, edx
and edx, 0xb2b2977d
bswap edx
xor esi, 0xb2b38ab6
not edx
xor ebx, edi
xor ebx, esi
add esi, 0xb2b55b14
shr edx, 0xc
or edi, ebx
or edx, ebx
sub esi, ebx
mov edi, esi
xor edx, esi
jmp 0x477c14
push 0xb08137d1
add esi, 0xb2b849b4
not edi
and esi, ebx
or edi, ebx
xor ebx, esi
shl edx, 2
rol esi, 0x14
shl edx, 0x1e
and edi, edx
sub edi, edx
add edi, esi
jmp 0x476000
push 0xb0786b8f
mov edx, edi
or ebx, edx
sub edi, 0xb30192b1
not edx
or ebx, esi
or esi, 0xb3031b9b
mov edi, edx
xchg edx, esi
jmp 0x4780d4
pop ecx
or edx, esi
mov ebx, edi
mov esi, edi
inc edx
or edi, ebx
or edi, edx
or esi, edi
shl edi, 1
and esi, 0xb31e69a1
add edi, 0xb31ed033
and edx, esi
nop
jmp 0x475b7b
call fcn.004782e6
xchg edx, esi
add edx, ebx
jmp 0x478101
push 0xb0818678
and edi, edx
xor edi, esi
xor edx, ebx
sub esi, ebx
xor edi, esi
jmp 0x478290
pop ecx
xor edi, edx
add edx, edi
sub esi, edx
ror edi, 0x13
or ebx, edx
or ebx, edx
xor esi, edx
and edi, ebx
jmp 0x47818d
push 0xb07db635
neg edx
bswap edx
add edx, 0xb41a1626
or ebx, 0xb41a7859
sub esi, edi
add edi, 0xb41b4873
shl edx, 0xe
sub edi, ebx
or esi, edi
or ebx, esi
jmp 0x4785bf
mov ecx, 0x2774562b
add edi, edx
sub edx, 0xb424c6de
or ebx, esi
shr edi, 4
xor edi, esi
add edx, 0xb4265682
and ebx, edx
and edi, esi
and edx, ebx
sub ebx, esi
or edi, ebx
not ebx
bswap esi
or esi, edi
shr ebx, 5
jmp 0x475f6b
pop ecx
or esi, edx
add ebx, 0xb42f0c5c
and edi, 0xb42f87bd
xchg esi, ebx
dec esi
mov ebx, 0xb430f4fe
jmp 0x476db7
pop ecx
mov edi, esi
and edi, ebx
sub ebx, edi
sub edi, esi
or edx, 0xb433343c
xor edi, 0xb433dfc8
xor ebx, edx
jmp 0x47797b
mov ecx, 0x2774562b
neg edi
ror ebx, 2
nop
add edi, 0xb43629da
add ebx, edi
xchg ebx, edx
add edx, edi
neg ebx
xor edx, edi
inc edx
jmp 0x477f73
pop ecx
ror edx, 0x1f
not ebx
xor edx, esi
jmp 0x475eb8
mov ecx, 0x2774562b
sub esi, edi
and esi, 0xb44fb3f1
xor esi, 0xb4501525
not ebx
and esi, 0xb451132d
or edx, esi
jmp 0x478203
call ecx
or edx, 0xb472df59
add ebx, edx
bswap edi
dec edi
xchg esi, edx
sub ebx, 0xb4750ce0
xchg esi, edi
mov edx, edi
and esi, edx
xchg ebx, edi
sub edx, 0xb47721e7
jmp 0x477920
pop ecx
xor edx, 0xb4bccb0d
or ebx, edx
mov ebx, esi
sub edi, esi
and esi, edi
add edx, ebx
mov edi, edx
jmp 0x47680e
push 0xb07acb5b
xchg esi, ebx
xor edi, 0xb5046c77
inc ebx
xchg edx, ebx
mov edx, esi
bswap esi
jmp 0x478125
call ecx
not ebx
and edi, 0xb541e1cb
jmp 0x47678d
push 0xb0822121
mov edi, edx
xchg ebx, esi
add edx, edi
xchg esi, edi
add ebx, esi
mov esi, edi
xchg esi, edx
ror ebx, 0x11
neg edx
rol ebx, 0x1e
dec edi
or edi, edx
and edx, esi
jmp 0x475a75
pop ecx
mov ebx, esi
shl ebx, 8
mov esi, edx
shl edi, 0xe
inc edi
or edx, edi
xchg edi, edx
xor esi, 0xb69cbcff
xor esi, ebx
xchg esi, edi
jmp 0x476771
pop ecx
or esi, 0xb6a60bcb
and edi, 0xb6a66994
shl edx, 0xf
bswap edx
or ebx, 0xb6a7db2f
or esi, edi
neg ebx
add ebx, 0xb6a90e20
neg ebx
shr edx, 0x1c
mov ebx, edx
jmp 0x476b8b
push 0xb07d665c
or edx, ebx
mov esi, ebx
xor esi, edx
and ebx, esi
neg edx
xor ebx, edx
xor esi, ebx
ror edx, 7
mov ebx, edi
add esi, edx
mov ebx, 0xb6ffcbcb
not edx
xor edi, esi
and esi, ebx
jmp 0x4766c3
call fcn.004782e6
or esi, edx
and ebx, 0xb76f6f2c
xor esi, edi
mov ebx, edx
sub edx, 0xb770b573
rol edi, 0x1b
or esi, edx
add edi, edx
mov edx, 0xb772a216
sub edx, esi
sub ebx, 0xb7737290
or edi, ebx
jmp 0x476f7e
push 0xb078ce6b
shr edi, 0x15
or edx, edi
jmp 0x47687c
call ecx
xor edx, edi
ror ebx, 0x11
add edx, edi
bswap edx
and ebx, edx
jmp 0x47656a
push 0xb07b1bbd
xchg edx, edi
not esi
xchg esi, edi
shr edi, 0x1c
and ebx, 0xb7aaccf4
mov ebx, edx
inc esi
inc edx
xor edi, 0xb7aca8fe
jmp 0x47671c
pop ecx
xor ebx, esi
bswap edi
sub esi, edx
shl edi, 1
xor esi, edi
ror ebx, 5
mov esi, edi
or edx, esi
jmp 0x475b44
call fcn.004782e6
xor edx, 0xb7cb8c97
or edx, edi
and edi, 0xb7cc89f3
bswap edx
add ebx, 0xb7cddfd5
add esi, 0xb7ce44f4
sub esi, edx
and edx, ebx
jmp 0x4769ad
push 0xb081d34f
add ebx, esi
or edx, edi
add edi, ebx
sub edi, edx
neg edx
sub esi, ebx
or edx, 0xb7dee469
rol esi, 0x1a
or edx, 0xb7e015ce
and edx, ebx
mov ebx, esi
sub ebx, edi
add esi, ebx
or edi, esi
mov edi, edx
add edi, edx
jmp 0x477624
push 0xb07e58a6
dec edx
ror edx, 0x19
xchg edx, esi
sub edx, edi
xor esi, edi
bswap esi
mov edi, esi
and ebx, esi
and edx, ebx
ror edx, 0x1c
xor ebx, esi
jmp 0x4767a9
push 0xb07e05e1
bswap edi
xchg ebx, edx
sub edi, edx
and edi, ebx
sub esi, edx
jmp 0x4782f8
jmp loc.0047b000