Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
xchg ebx, ecx
ror edx, 0xe
add edx, ebx
add edx, ebx
or ecx, 0x138d2a73
sub edi, ecx
or edx, edi
call sub.user32.dll_GetDesktopWindow
and ecx, ebx
cmp eax, 0xfffffef4
jne 0x401076
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
ret
xchg ecx, ebx
xor ecx, edx
inc ecx
inc ebx
call sub.user32.dll_GetDesktopWindow
neg ebx
sub edx, ecx
dec edi
ror ebx, 0x14
ror ebx, 0x19
shl ebx, 0xa
and edx, 0x139698d7
dec edx
cmp eax, 0xffffff15
jne 0x401106
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
ret
sub ebx, edx
call sub.user32.dll_GetDesktopWindow
dec ecx
inc edx
or ebx, edx
mov ecx, edi
cmp eax, 0xffffff26
jne 0x401183
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
ret
ror ecx, 0x1f
bswap ebx
xchg ecx, ebx
or edx, edi
and ecx, 0x13a0fbe6
ror edi, 0x14
and edx, ecx
call sub.user32.dll_GetDesktopWindow
mov edx, ecx
ror edi, 7
cmp eax, 0xffffff1f
jne 0x401248
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.ntdll.dll_NlsMbOemCodePageTag
call sub.oleaut32.dll_VarI2FromI4
call sub.ntdll.dll_NlsMbOemCodePageTag
ret
jmp 0x4b721b
and ebx, 0x152a36c2
rol ecx, 0x10
add edi, 0x152b3171
add edx, 0x152ba4e0
mov edi, edx
sub ebx, 0x152c8440
jmp 0x4b9a99
push 0x1533fd64
mov edx, ecx
xor ecx, edx
sub edi, ebx
mov edi, edx
neg ebx
mov edx, ebx
sub ecx, edi
jmp 0x4b9f67
push 0x1558177f
add edx, edi
xor ecx, edx
shr edx, 0xa
inc ecx
add ebx, edx
add ebx, edx
inc edx
dec edi
not edi
and ecx, 0x27450eec
rol ebx, 7
xor edx, 0x2745fbf8
xor ecx, edi
not edx
jmp 0x4b94e0
push 0x1557bc60
and edi, ecx
sub ebx, 0x27ad35da
mov edx, ebx
or edi, edx
xchg edi, ecx
mov edi, ebx
mov ecx, ebx
or edi, 0x27b01007
mov ebx, edx
or ecx, edi
and ebx, 0x27b16782
jmp 0x4b7255
pop esi
xor edi, edx
mov edx, 0x283e16d1
neg edx
shr edx, 0x1a
dec ecx
shl ecx, 0xa
xor ecx, 0x284826d0
xor edi, 0x2848beda
ror edi, 0x11
sub edx, 0x2849a88c
inc ecx
xor edi, ebx
sub edi, ecx
add edi, 0x284b7527
mov ecx, 0x284be460
jmp 0x4ba4e6
pop esi
xchg ecx, ebx
or edx, ecx
sub ebx, edx
or ebx, 0x28faf819
shl edi, 0x14
xchg ebx, ecx
inc ebx
or ebx, 0x28fceaa3
shr ebx, 7
dec ebx
jmp 0x4ba5ee
push 0x15a7e055
xor edi, ebx
add ebx, edi
and edi, edx
or edi, 0x290f6791
shl edi, 0x11
xchg ebx, edx
or ecx, ebx
jmp 0x4b7e88
mov esi, 0x2774562b
and edi, edx
xchg ecx, ebx
add ebx, edi
bswap ebx
add edx, edi
shr ecx, 8
sub edi, edx
add ebx, edx
xchg edx, ecx
nop
and ebx, edx
or edx, 0x29589091
jmp 0x4b7b34
pop esi
sub edx, ecx
not edx
not edi
xchg ecx, edi
shl ecx, 0x1a
xchg edx, edi
sub ecx, 0x29fe4708
xor edi, 0x29febd1f
neg ecx
bswap ebx
neg ebx
xchg ecx, ebx
mov edi, ecx
ror edx, 0x19
mov ebx, edx
jmp 0x4b95ba
push 0x15615a94
and edi, ebx
xor edi, ebx
and ecx, ebx
add ecx, 0x2a789865
and ecx, edx
sub edi, edx
jmp 0x4b9132
call fcn.004b780a
bswap edi
add ecx, edx
xor ecx, edi
rol edi, 0x18
add ecx, 0x2a82089e
and ecx, edi
xor ebx, 0x2a82f21d
bswap ecx
xor edx, ebx
jmp 0x4b9392
push 0x15aaf180
ror ebx, 0xb
dec edi
xor ecx, ebx
add ecx, 0x2b0dcf8c
add ecx, edi
jmp 0x4b8bb5
push 0x15aecb17
not edi
mov ebx, edx
add ecx, ebx
mov ebx, ecx
xor ebx, 0x2b10941f
ror ecx, 0x1e
ror ebx, 8
xor ebx, ecx
mov edi, ecx
not ebx
rol ebx, 9
add edi, ebx
or ecx, ebx
or edx, 0x2b2767f0
mov ecx, edi
jmp 0x4b8e05
mov esi, 0x2774562b
dec edi
dec ebx
mov edx, ecx
not edx
rol edi, 0x1b
or ecx, 0x2b35124f
sub edi, edx
ror ebx, 0x13
shl ebx, 0xe
mov ebx, edi
add edx, ebx
jmp 0x4ba4bc
call esi
xor edi, 0x2b3f30d9
mov edx, 0x2b3fce89
xor edi, ecx
jmp 0x4b9316
call esi
sub ebx, ecx
mov ebx, 0x2b508690
xor edi, edx
and ecx, edx
mov ecx, edi
xchg edx, ecx
mov edx, ebx
jmp 0x4ba724
push 0x15a83c7f
and ecx, edi
neg edi
xor edi, ebx
ror edx, 0x12
add edi, ebx
mov edx, ecx
sub edi, ecx
or ecx, ebx
xchg ecx, ebx
neg edx
xchg edx, edi
sub ecx, edx
add ecx, edi
shl edi, 7
dec ecx
add edx, ecx
jmp 0x4b897a
pop esi
xchg edx, ecx
xchg ecx, ebx
inc edx
ror ecx, 0xa
sub ecx, edx
xchg ebx, edx
and edx, edi
sub edi, 0x2babaa5f
rol edx, 0x19
neg ebx
xchg edx, edi
neg edi
jmp 0x4b9915
call fcn.004b780a
sub edi, ecx
sub edi, edx
inc ebx
shl edi, 0xc
rol ecx, 9
add edx, 0x2bef3b05
xchg edi, ebx
and ebx, edi
jmp 0x4b7d29
pop esi
inc edi
dec ebx
add edi, ebx
sub ecx, ebx
xor edx, 0x2bf9c982
mov ecx, edx
jmp 0x4b7648
pop esi
add ecx, edi
xchg edx, ebx
or edx, edi
xchg ecx, edi
or edx, ecx
sub edx, ecx
mov edx, ecx
jmp 0x4b80cb
push 0x15555d5b
and edx, 0x2cb6425f
mov edx, ebx
mov ecx, 0x2cb71ca6
or edx, 0x2cb7a806
and ecx, edi
xchg edx, ebx
xor edx, edi
not edx
add ecx, edi
sub edx, edi
and edi, ebx
jmp 0x4b950a
call esi
rol edi, 0x16
sub edx, 0x2d3f3b0e
shr ecx, 0x16
add edi, ecx
mov edx, ebx
xor ebx, edi
xchg edx, ebx
xor edx, ecx
inc ebx
and edx, ecx
add ebx, edx
or edi, ecx
bswap ebx
jmp 0x4b8de1
pop esi
and edi, 0x2d754c9a
xor ebx, edx
xor edi, ecx
or ecx, ebx
mov ebx, edx
add ecx, edi
xor edx, 0x2d7828d0
shl ebx, 0xc
rol edx, 0x1c
or ebx, edx
xchg edx, ebx
xor ebx, edi
mov ecx, ebx
add ecx, ebx
neg ebx
jmp 0x4ba010
push 0x155eeb50
xor ecx, edx
add edx, ecx
bswap ebx
dec ebx
and edx, ebx
xchg ecx, ebx
xor ebx, edx
xor ebx, edx
rol ecx, 4
jmp 0x4b7799
push 0x155e795b
shr edi, 0x13
and edi, 0x2ece63f1
dec edi
xor ebx, edi
add ecx, edx
xor ecx, ebx
and ecx, 0x2ed0bd40
neg ebx
jmp 0x4b817a
call esi
add ebx, ecx
mov edi, edx
shr ebx, 0x17
shl ebx, 9
mov edi, edx
and ecx, edx
jmp 0x4ba219
pop esi
shl ecx, 2
inc ecx
sub edx, ecx
or ebx, edi
not ebx
neg edi
xchg edi, ebx
add edi, ebx
or edi, ebx
jmp 0x4b76d4
pop esi
xor ecx, 0x30bfca48
rol ebx, 0xb
sub ebx, ecx
and edx, 0x30c12e4e
mov edx, ebx
neg edi
mov edx, 0x30c2f93c
xor ecx, edx
add ecx, ebx
mov edi, ecx
xor edx, 0x30c54aa2
mov edi, ecx
shr edi, 0xb
xor ebx, edi
jmp 0x4b73bd
push 0x15a895bb
and ebx, edx
or edx, ebx
and ecx, 0x317769cc
or edi, ebx
bswap ebx
add ecx, edx
sub ebx, edx
sub ecx, ebx
jmp 0x4b90ad
call esi
shl ecx, 1
xor edi, edx
sub edx, 0x31bdd7ad
xor ecx, 0x31be4d9e
add edi, ecx
dec ecx
add ecx, edx
bswap edi
jmp 0x4b9580
call fcn.004b780a
add ecx, ebx
or ecx, edi
and edi, ebx
xor ecx, ebx
or edi, 0x321cea31
xor edi, 0x321d5dbd
sub ebx, ecx
add edi, ebx
bswap ebx
add edi, edx
jmp 0x4b82eb
mov esi, 0x123b2f04
or edx, 0x325f8bf7
and ecx, 0x325ff905
or ecx, ebx
mov ecx, ebx
jmp 0x4b92aa
push 0x155e2e40
xor ecx, 0x326a16c2
add edi, 0x326abc23
add ebx, edx
shl edx, 0x17
nop
ror ebx, 0x17
not ecx
add ebx, ecx
jmp 0x4b8245
pop esi
xor edi, ebx
add edx, ebx
and edi, ecx
mov ebx, edi
xchg ebx, edx
ror edx, 0xc
not ecx
shl edi, 0x11
mov ebx, ecx
xor ecx, edx
ror ecx, 2
ror ecx, 6
sub edx, edi
jmp 0x4b8868
push 0x15af1815
or edi, 0x334f1f91
add edx, edi
or ecx, 0x334f9a77
xchg edi, ecx
xor ecx, ebx
rol ecx, 1
add edi, ecx
or edi, ecx
xor ebx, edx
inc edx
and edi, ecx
mov ebx, edi
mov edx, ecx
and ebx, edx
jmp 0x4b9ec9
mov esi, 0x2774562b
sub edi, ebx
or edi, ebx
or ecx, ebx
shl ebx, 0x14
xor edi, ecx
or ecx, ebx
jmp 0x4b7efb
push 0x1561b02f
add ebx, ecx
add ebx, ecx
shl ebx, 0xd
xor edi, ebx
sub edx, edi
add edi, ecx
bswap ebx
xor ecx, edx
add ebx, edx
jmp 0x4b9d3d
push 0x1533a168
ror edi, 3
sub ecx, edi
xchg ebx, edx
mov edi, edx
or edi, ebx
xchg edi, edx
sub ecx, 0x340a66b4
inc edi
add edx, edi
or edi, 0x340bf6ec
neg ecx
add ebx, edi
jmp 0x4b723d
call fcn.004b780a
neg edi
mov ecx, edi
shl ebx, 0x1c
or ecx, edx
mov edx, ecx
xor edi, edx
sub ecx, 0x35137a95
and edi, edx
jmp 0x4b7d9c
pop esi
and ecx, edx
ror ebx, 6
jmp 0x4b7962
call esi
sub ebx, ecx
and ecx, 0x35834140
add ecx, edi
and ecx, edx
dec ebx
sub edx, 0x358527d5
nop
mov ebx, edi
jmp 0x4b7f44
mov esi, 0x123b2f04
add ecx, ebx
rol edx, 2
sub ebx, edx
add ecx, 0x35c62025
or edx, ecx
dec edx
jmp 0x4b8b28
mov esi, 0x2774562b
add ebx, edx
shl ecx, 2
neg edi
jmp 0x4ba043
mov esi, 0x123b2f04
or ecx, edi
or ecx, 0x35e39c74
add edi, 0x35e412d4
mov ecx, edi
or ecx, ebx
mov ecx, ebx
neg ebx
xor ebx, edx
neg ecx
mov ebx, edi
bswap ebx
add ebx, edx
and edi, edx
jmp 0x4ba24e
pop esi
xchg edx, ecx
xor edx, 0x35f6608b
neg ebx
and ebx, edx
add ecx, edx
and edi, 0x35f8b61c
xor edi, edx
or edx, ebx
sub edi, ebx
dec edx
jmp 0x4b9cd2
pop esi
and ebx, edx
xor edi, 0x35fddaf0
shr ebx, 0x1c
rol edx, 0xf
inc ebx
rol edi, 0x18
or ecx, edi
mov edx, ebx
dec edx
and ecx, edi
jmp 0x4b7c5c
mov esi, 0x123b2f04
or ecx, ebx
mov ecx, edi
add edi, ebx
shr ebx, 0xa
and ebx, edx
xchg ecx, ebx
sub ecx, ebx
and ecx, edi
dec edx
bswap edi
and ecx, edi
xchg ebx, edi
xchg edi, edx
neg ebx
jmp 0x4ba664
push 0x1555021e
inc edx
bswap edx
rol edx, 0x14
sub edi, edx
xchg ecx, edx
add ebx, edi
add edx, ecx
xor edx, ebx
or edx, 0x388a7686
add edx, ecx
ror edi, 0x1d
neg ecx
xchg edx, ecx
xchg edx, ecx
xchg edi, edx
mov ebx, ecx
jmp 0x4b8053
push 0x15ae6809
and ebx, ecx
or ebx, ecx
or ecx, 0x39489fa9
sub edx, ebx
or ecx, 0x394987b4
xchg ecx, edi
xor edx, ecx
or ecx, edx
jmp 0x4b7c74
push 0x153329cf
xchg ecx, edx
sub ebx, edi
or edx, ebx
nop
mov edi, ebx
xor edx, ecx
or edx, 0x398cbcf6
and ecx, 0x398d2c60
not edi
add ebx, ecx
xor ecx, edx
jmp 0x4b914f
call esi
mov edx, edi
ror edx, 0x11
mov ecx, ebx
xchg ecx, edx
and edx, ecx
dec edi
mov edi, edx
sub ebx, 0x39984ee0
rol ecx, 0x1a
ror edx, 0x13
and edx, ecx
jmp 0x4b8016
call esi
xchg edx, ebx
xor edx, ebx
neg ecx
and ebx, edi
mov edx, edi
xor edi, 0x3a6f679d
shl edx, 8
xor edx, 0x3a7048b5
sub ebx, ecx
xor ecx, edx
jmp 0x4b74f4
jmp loc.004bf000
pop esi
add ebx, ecx
add edi, 0x3b2ad2e9
xchg edi, ecx
mov edi, ebx
and ecx, edx
xor ebx, 0x3b5b4963
jmp 0x4b84fa
push 0x156202da
or edi, edx
and ebx, edi
xor edx, edi
shr edx, 0x15
or edi, ebx
jmp 0x4b9689
mov esi, 0x2774562b
sub edi, ebx
shl ecx, 0x1e
shl edx, 0x19
mov edx, ecx
mov edi, edx
mov edx, ecx
xor ebx, edi
add edi, edx
jmp 0x4b9c68
push 0x15345188
or edx, 0x3c38eab4
shr edx, 0x18
neg ebx
xchg edi, ecx
jmp 0x4b7cd1
pop esi
inc edx
xchg edi, ebx
xor ecx, edi
rol edi, 4
xchg edx, edi
add edi, ecx
add ebx, ecx
mov edx, ecx
or ecx, ebx
add edx, ebx
shr edi, 0xc
mov ecx, 0x3c5e1876
jmp 0x4b7eb3
call fcn.004b780a
and ecx, ebx
sub ecx, edx
add edi, ecx
or edx, ecx
jmp 0x4b9be5
pop esi
bswap edi
or edi, ecx
shr ecx, 0x19
sub ebx, 0x3d0c8706
and ebx, edx
sub ebx, 0x3d0d8b3b
xor ebx, edi
or ebx, edx
neg ebx
shr edx, 0x18
nop
jmp 0x4b9a43
call fcn.004b780a
inc edi
mov ecx, edx
mov edi, edx
sub edi, 0x3d1bb436
mov edx, ebx
mov edi, 0x3d1cc7c5
sub edx, ebx
rol ecx, 0xf
or ebx, 0x3d1e3936
rol edx, 0x19
jmp 0x4b80a5
push 0x15acb732
and edi, 0x3d2da071
xchg edi, edx
add ecx, edx
xor edx, ecx
add edx, edi
or ecx, edi
xchg ebx, ecx
bswap ebx
xchg edx, edi
ror edi, 0x17
inc ebx
sub ebx, edx
jmp 0x4b94a3
call fcn.004b780a
mov edx, ecx
neg edx
xor edx, ecx
sub ecx, ebx
ror edx, 0xc
bswap edi
and ecx, 0x3e116e61
mov ecx, edx
inc edi
mov edx, edi
inc ecx
mov ecx, 0x3e13acd4
xchg edi, ecx
jmp 0x4b9ac0
pop esi
shr edi, 0xe
xchg edx, edi
neg edi
or ebx, ecx
and edx, ebx
or edi, 0x3e17ae6d
add ebx, edi
dec ecx
mov ecx, edi
xor edx, 0x3e3448a6
xchg edi, edx
mov edi, ecx
sub ecx, edi
or edx, ebx
not ecx
jmp 0x4b8be8
pop esi
and edi, ecx
or edi, 0x3e5c3f96
xchg edx, ecx
mov ebx, 0x3e7b322e
mov ebx, edi
mov ebx, ecx
add edi, ecx
and edx, ebx
add ebx, ecx
rol edi, 3
add ebx, 0x3e85c195
shl ecx, 0x14
and ebx, ecx
and ebx, ecx
xchg ebx, edx
jmp 0x4b7af2
call fcn.004b780a
bswap edi
sub ebx, 0x3e918990
xor ebx, ecx
or edi, edx
ror ebx, 9
mov ebx, edi
and ecx, edx
or edx, ebx
and ecx, edx
sub edx, 0x3e95f2a3
and ebx, edi
and edi, edx
rol edi, 0xe
jmp 0x4b89fa
pop esi
or ecx, edi
add ecx, edx
add ecx, ebx
sub ebx, edx
inc ebx
mov edx, ebx
bswap edx
mov edx, ecx
jmp 0x4ba2c5