Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get uefi variable
Hash data using murmur3

Disassembly:
shl edi, 8
xor ebx, esi
inc edx
and edx, edi
or edx, ebx
call sub.kernel32.dll_GetUserDefaultLCID
sub esi, edi
or esi, edx
or esi, ebx
or edx, 0x5a0c0f36
or edi, esi
and edx, edi
cmp eax, 0xfffffee9
jne 0x4010b2
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
ret
sub edx, ebx
add ebx, esi
call sub.kernel32.dll_GetUserDefaultLCID
sub edi, ebx
inc edx
cmp eax, 0xffffff02
jne 0x401129
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
ret
nop
add edi, ebx
ror esi, 0xd
and edx, 0x5a1128a0
or ebx, 0x5a11621b
add esi, 0x5a119bbd
sub edx, edi
xor edx, edi
call sub.kernel32.dll_GetUserDefaultLCID
or ebx, 0x5a125db0
dec esi
cmp eax, 0xffffff15
jne 0x4011df
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
ret
inc edx
sub ebx, edx
shl ebx, 2
shl edx, 1
call sub.kernel32.dll_GetUserDefaultLCID
ror esi, 0x16
cmp eax, 0xffffff03
jne 0x401283
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
call sub.kernel32.dll_GetFirmwareEnvironmentVariableW
ret
jmp 0x4b9941
xchg edi, edx
and esi, ebx
rol edx, 3
and edi, esi
neg edi
xchg edx, esi
ror edi, 3
jmp 0x4baa7c
call fcn.004bcdc9
sub edi, ecx
xor esi, edx
sub esi, edx
mov ecx, esi
rol edi, 0xb
xchg edx, edi
sub ecx, 0x5fce52f2
xchg edx, ecx
jmp 0x4bc8f5
mov ebx, 0x183c2e20
shl ecx, 0x1e
sub edi, esi
add edx, ecx
ror edi, 0x16
jmp 0x4b9c37
mov ebx, 0x183c2e20
xor esi, edi
or ecx, 0x60018ec5
xor ecx, 0x6001c8f4
add edx, edi
mov esi, 0x60023a51
add edi, edx
or esi, edi
sub ecx, esi
rol edi, 9
xchg edx, esi
dec edi
and edi, ecx
jmp 0x4bbc57
pop ebx
sub ecx, esi
xor edi, edx
sub edx, esi
and edx, esi
and edx, esi
rol esi, 4
xor ecx, esi
sub edx, 0x60232485
add ecx, edx
sub esi, 0x602395ac
mov edi, esi
or edi, edx
jmp 0x4bc93e
pop ebx
or edi, ecx
add edi, esi
and esi, ecx
add ecx, 0x6037294d
xchg edi, ecx
neg ecx
add edx, ecx
rol esi, 9
shr edi, 7
xor esi, edx
neg edx
bswap edi
rol edi, 0x1b
xchg edx, edi
xor edi, esi
jmp 0x4ba0f5
push 0x5a9a77e6
sub edx, ecx
neg ecx
sub ecx, edx
or edx, esi
not ecx
xchg edx, esi
sub edi, esi
sub esi, 0x604255c1
dec edi
and ecx, esi
jmp 0x4bc881
pop ebx
xor edi, ecx
or ecx, esi
or esi, edi
shr edx, 2
mov esi, edx
xchg ecx, edi
ror edx, 3
and ecx, esi
or ecx, 0x60787a93
jmp 0x4bb6c2
pop ebx
mov edi, ecx
xchg ecx, edx
xchg ecx, esi
xor esi, edi
sub ecx, edi
xor esi, edi
jmp 0x4bb839
pop ebx
sub edi, esi
xchg edi, edx
dec esi
add edi, edx
or edx, ecx
and edx, esi
xor edx, ecx
mov edx, 0x60aaea05
not edx
inc esi
add edx, ecx
sub ecx, edi
inc edi
or edi, esi
jmp 0x4ba237
push 0x5a990cfb
and ecx, esi
mov edx, esi
and edi, 0x60c1f0fc
jmp 0x4b9e0c
push 0x5a98687b
neg edx
and edx, esi
sub ecx, esi
and edx, esi
bswap edi
mov esi, edx
nop
sub esi, 0x60c95fd0
neg esi
or ecx, 0x60c9de0d
nop
add ecx, edi
dec esi
shr edx, 0xe
and edi, edx
jmp 0x4bcc39
call fcn.004bcdc9
mov edi, edx
xchg edi, ecx
mov esi, edx
shr ecx, 0x1c
add ecx, edi
or edi, esi
sub edx, 0x610beb02
inc edx
or edi, ecx
mov edi, esi
or edi, esi
and ecx, 0x610d1070
xor edi, edx
xor esi, ecx
or ecx, edx
jmp 0x4bc5f3
push 0x5a9cc377
sub ecx, edi
dec ecx
sub edx, esi
jmp 0x4b9f39
pop ebx
mov edx, edi
sub ecx, edx
not ecx
or edx, edi
or esi, ecx
bswap edi
xchg ecx, edi
jmp 0x4ba2b6
mov ebx, 0x183c2e20
shr ecx, 0x1e
or edi, esi
shr edx, 0x16
add edi, esi
jmp 0x4bae2c
call fcn.004bcdc9
xor edi, edx
xchg esi, edi
mov edx, ecx
or edi, edx
mov edx, ecx
add esi, ecx
add edi, ecx
nop
jmp 0x4bc423
mov ebx, 0x183c2e20
mov ecx, esi
and esi, ecx
xor ecx, esi
xor edi, edx
shr esi, 0x12
xchg ecx, edx
xchg edx, ecx
add ecx, esi
and esi, 0x6180dd01
and ecx, esi
and ecx, edx
xor ecx, edi
sub edi, 0x6182880d
jmp 0x4bb267
push 0x5a9b899f
or edi, 0x61c556d2
sub esi, edx
sub edx, esi
or ecx, 0x61c6011f
or esi, ecx
mov edx, esi
xor esi, edx
bswap ecx
not ecx
and esi, edx
mov ecx, edi
xor ecx, edx
xor ecx, esi
and ecx, esi
rol esi, 5
jmp 0x4bb16e
push 0x5a9c4f80
or edi, ecx
add edx, ecx
mov ecx, edi
mov edi, ecx
and ecx, edx
inc edx
xchg esi, edx
dec ecx
neg esi
mov ecx, 0x61f116d5
jmp 0x4bb8d3
push 0x5a98c02d
add edx, 0x61f37fdc
xchg edx, ecx
and edx, edi
shl esi, 0xa
add edi, esi
add esi, edx
jmp 0x4bc0df
push 0x5a9c774c
xchg esi, ecx
xor edx, esi
ror ecx, 3
bswap edx
xor edx, 0x61faabc7
add edi, 0x61faeea9
jmp 0x4bcb0d
pop ebx
xor edi, edx
and ecx, edi
bswap edi
xchg ecx, edx
or edx, esi
neg esi
or esi, edi
add esi, edi
add esi, edx
and ecx, esi
rol esi, 5
xor edi, 0x6204b991
jmp 0x4ba5f2
jmp loc.004c1000
push 0x5a98e6ab
neg edi
rol ecx, 0x1a
rol ecx, 0x1e
jmp 0x4baa0d
call ebx
or esi, edi
or edx, edi
or esi, ecx
sub ecx, esi
inc esi
xor esi, edx
shr edi, 0x13
sub esi, edi
inc edi
sub esi, ecx
shr edx, 0x16
add ecx, 0x62c61724
or esi, 0x62c651ff
jmp 0x4bb95a
call ebx
or ecx, 0x63004e4a
add esi, 0x63025112
or edi, ecx
inc edi
mov ecx, 0x6302fd94
sub edx, ecx
sub ecx, edx
rol ecx, 0x14
jmp 0x4ba850
push 0x5a9a9ea4
add ecx, esi
and edi, edx
sub esi, ecx
xor edi, esi
mov esi, edx
or esi, edx
shr edi, 0x15
or edi, esi
mov ecx, 0x634e0ece
and esi, 0x63502354
shr edi, 0x12
sub ecx, esi
xor edi, esi
xor ecx, edx
jmp 0x4bb35c
call ebx
add esi, edx
or edx, ecx
dec edi
or edx, ecx
dec edx
mov edx, 0x635bfd59
add edi, 0x635c3733
xor ecx, edx
add edx, esi
neg ecx
xchg ecx, edx
jmp 0x4ba8bd
pop ebx
xor edi, esi
inc ecx
dec edi
and edi, ecx
bswap ecx
add ecx, esi
jmp 0x4bb14e
push 0x5a9c9d21
mov edx, esi
xchg edx, ecx
or ecx, 0x63b67f38
neg edx
sub esi, edi
xor edi, 0x63b72d55
shr esi, 3
bswap ecx
xchg edx, esi
jmp 0x4bb0b4
push 0x5a9899e6
and edx, ecx
or ecx, esi
xor edi, ecx
sub edi, edx
or esi, edx
and edi, ecx
sub esi, edx
sub edi, esi
add edx, edi
jmp 0x4bb878