Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
ror esi, 0xe
dec esi
call sub.kernel32.dll_GetProcessHeap
xor ebx, edx
sub ebx, edx
xchg ebx, edi
ror ebx, 0x1e
neg esi
bswap edi
mov esi, edx
not edx
cmp eax, 0xffffff15
jne 0x40108a
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
ret
xchg edx, esi
neg ebx
xor edi, 0xd2c7d87f
add esi, edi
xchg edi, edx
add edx, ebx
bswap edi
add esi, edx
call sub.kernel32.dll_GetProcessHeap
xor edi, 0xd2caeb6d
xor edi, esi
sub ebx, edx
and ebx, 0xd2cc5cd4
rol ebx, 0x1f
cmp eax, 0xffffff20
jne 0x401144
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
ret
or ebx, edi
xchg esi, edi
call sub.user32.dll_GetForegroundWindow
and ebx, edi
and esi, 0xd2d26266
neg ebx
and esi, edi
shr edi, 5
sub ebx, edi
shl edx, 0xf
xchg edi, edx
cmp eax, 0xfffffef3
jne 0x4011ce
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
ret
add edi, esi
mov ebx, esi
and esi, edx
shl edi, 0x12
and edi, esi
neg edx
call sub.user32.dll_GetForegroundWindow
sub edx, esi
or esi, edx
or edx, esi
sub edi, ebx
sub esi, 0xd2e0a1ec
cmp eax, 0xfffffed7
jne 0x40125e
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
call sub.shell32.dll_DoEnvironmentSubstW
call sub.ws2_32.dll_WSANtohl
ret
jmp 0x4b765c
mov edi, ebx
xor ebx, edi
xor edx, edi
jmp 0x4b911e
mov esi, 0x2774562b
xor ecx, edx
sub ecx, ebx
sub edi, 0xdcfeb2e2
xchg edx, ecx
shl ecx, 9
xchg edx, edi
xor ebx, 0xdd0fb3c0
and edx, ecx
jmp 0x4b96a1
jmp loc.004bf000
call esi
xor edx, ebx
shr ecx, 3
or ecx, 0xdf1c2cba
not edi
sub ebx, ecx
and ecx, ebx
shr edx, 0x10
mov edx, ecx
sub edi, ebx
jmp 0x4b910c
push 0xd3dc1ab6
or edi, 0xdfb99ca9
rol ecx, 0x1d
xchg ebx, edi
add edi, edx
add ebx, ecx
jmp 0x4b92bf
pop esi
ror ecx, 9
xor edx, ecx
add ebx, edx
mov edx, 0xe0f9cf11
jmp 0x4b873c
push 0xd3da51cf
xchg ecx, ebx
nop
add edx, ecx
mov ebx, 0xe0fc1052
xchg ecx, ebx
xor edx, ebx
bswap edi
jmp 0x4b77ed
push 0xd3dc68e1
bswap ebx
dec edx
mov edi, ecx
and ecx, 0xe13e48cc
and edi, 0xe13ea1c9
xchg ebx, edx
mov edi, edx
sub edx, ebx
jmp 0x4b943d
mov esi, 0x2774562b
or edi, ecx
bswap edi
sub edx, 0xe1738e9d
add ecx, edx
sub ecx, ebx
or ecx, edx
xor ebx, edi
or edx, ebx
or edx, edi
shl ecx, 0x1a
sub ecx, edi
xchg edx, ebx
jmp 0x4b8044
call fcn.004ba854
or edi, 0xe1e99639
mov ebx, edi
add edx, ebx
add ebx, 0xe1eb4fbd
shl ecx, 0x19
or ecx, edx
add ecx, ebx
inc edx
xor edx, 0xe1ee1406
and edx, ecx
jmp 0x4b821a