Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
and edi, ebx
xor esi, ecx
add esi, edi
or ecx, esi
neg edi
call sub.kernel32.dll_GetUserDefaultLangID
add esi, ecx
add ecx, esi
or ebx, esi
and ebx, edi
cmp eax, 0xfffffef6
jne 0x4010b9
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call main
call sub.oleaut32.dll_VarDecInt
call main
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.oleaut32.dll_VarDecInt
call main
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
call main
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.oleaut32.dll_VarDecInt
call main
call sub.oleaut32.dll_VarDecInt
call main
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
ret
bswap esi
sub ebx, ecx
and ecx, esi
call sub.kernel32.dll_GetSystemDefaultLCID
and edi, ebx
shl ebx, 1
mov edi, ebx
sub ebx, esi
inc ebx
cmp eax, 0xffffff0d
jne 0x401175
call sub.oleaut32.dll_VarDecInt
call main
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.oleaut32.dll_VarDecInt
call main
call sub.oleaut32.dll_VarDecInt
call main
call main
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
call main
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.oleaut32.dll_VarDecInt
call main
call main
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call main
call sub.oleaut32.dll_VarDecInt
call main
ret
xor edi, ecx
sub ecx, ebx
or edi, ecx
sub edi, 0x32d5e1eb
mov esi, ecx
and edi, ebx
or ebx, edi
call sub.kernel32.dll_GetUserDefaultLangID
shl edi, 0x1a
nop
xor esi, 0x32d8539d
xchg ebx, ecx
cmp eax, 0xfffffeff
jne 0x4011fe
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
call main
call sub.oleaut32.dll_VarDecInt
call main
call main
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
ret
or edi, 0x32dae654
dec ebx
xchg ecx, esi
add ecx, ebx
add esi, edi
call sub.user32.dll_GetDoubleClickTime
mov ecx, 0x32dcf4d8
bswap edi
or edi, ebx
cmp eax, 0xfffffeed
jne 0x401284
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
call main
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call main
call sub.oleaut32.dll_VarDecInt
call main
call sub.oleaut32.dll_VarDecInt
call sub.oleaut32.dll_VarDecInt
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.oleaut32.dll_VarDecInt
call main
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.oleaut32.dll_VarDecInt
call main
ret
jmp 0x4942f9
and edi, ecx
add esi, ebx
xor ebx, esi
sub ecx, esi
jmp 0x4959a9
pop ecx
mov esi, edx
sub ebx, edi
not edi
and ebx, edx
jmp 0x4974ec
call ecx
or edi, esi
mov esi, edx
sub edi, edx
xor ebx, esi
or esi, ebx
jmp 0x496a2b
push 0x340bcc6b
neg esi
add esi, edi
sub edx, edi
mov edi, 0x3a521632
dec esi
xor esi, 0x3a52fdeb
sub ebx, edx
or ebx, edx
and ebx, 0x3a54140b
shl edx, 8
sub ebx, 0x3a54ceb2
and esi, edi
mov ebx, edi
or esi, edi
jmp 0x496536
call fcn.00497590
sub esi, edx
or esi, edx
and edx, edi
xor edi, esi
xor ebx, esi
and edi, edx
add ebx, edx
sub ebx, esi
shr edi, 5
and edi, ebx
ror edx, 5
jmp 0x4946f9
pop ecx
bswap edx
xchg edi, ebx
add edx, esi
xchg esi, ebx
bswap esi
rol edi, 0x1e
add esi, 0x3af4eb28
jmp 0x496f11
push 0x340b82fd
not ebx
xor ebx, 0x3b1c9fea
ror esi, 0x10
xchg edi, ebx
inc edx
or ebx, 0x3b1e22d2
mov edx, edi
and esi, ebx
jmp 0x4947b4
push 0x340c615d
shl edi, 0x12
or esi, edx
sub edx, edi
jmp 0x496f8e
push 0x340f5db1
shl ebx, 0x1d
mov edx, esi
and ebx, edi
and edi, edx
mov ebx, 0x3b857ee5
jmp 0x4956fb
push 0x340fec40
or edx, esi
and edx, edi
or edx, 0x3b9d259f
sub edx, ebx
xchg edx, ebx
xor esi, 0x3b9e54fb
rol edx, 0xb
not edx
sub esi, edi
neg esi
add edx, edi
jmp 0x496993
push 0x340fa75c
add ebx, edi
mov esi, 0x3c245536
bswap ebx
bswap esi
mov esi, edx
xchg ebx, edi
ror esi, 4
xchg ebx, edi
jmp 0x495241
push 0x340b29a6
inc esi
or esi, edi
add esi, 0x3c73a4e3
jmp 0x494e14
push 0x340c1445
and esi, ebx
neg ebx
mov edx, 0x3ddbd57c
or edx, 0x3ddc34ae
add ebx, edx
add ebx, esi
inc ebx
sub esi, ebx
add edx, ebx
jmp 0x494edc
jmp loc.0049a000
mov ecx, 0x123b2f04
bswap edi
sub esi, edi
not esi
sub esi, edx
jmp 0x4967b4
pop ecx
xor ebx, esi
ror esi, 0x11
or edi, ebx
or edi, ebx
add edi, ebx
mov edx, ebx
jmp 0x496efe
pop ecx
or esi, 0x3f78b1cf
shl edi, 0x17
and edi, esi
xchg ebx, edi
jmp 0x49449e
push 0x340f13b6
rol edx, 0x14
xor edi, esi
shr edi, 5
xor ebx, edx
sub edi, ebx
shl edi, 7
xor edi, edx
shl esi, 0xd
jmp 0x495164
mov ecx, 0x123b2f04
shl edx, 0x11
mov edx, ebx
xor edx, esi
and edx, 0x3f89b144
ror ebx, 0x1a
or edi, ebx
add edx, esi
jmp 0x494c09
pop ecx
or edi, 0x402093e9
and edi, esi
ror edi, 0x18
or ebx, esi
and edx, ebx
and edx, ebx
or edi, ebx
mov edx, 0x4023232a
add edx, 0x40238bda
bswap edx
xor ebx, edi
jmp 0x494cad