Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetCurrentProcess
cmp eax, 0xfffffeea
jne 0x40107a
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.kernel32.dll_GlobalFix
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.kernel32.dll_GlobalFix
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ntdll.dll_RtlInitUnicodeStringEx
ret
call sub.kernel32.dll_GetCurrentProcess
cmp eax, 0xffffff24
jne 0x401112
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.kernel32.dll_GlobalFix
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.kernel32.dll_GlobalFix
call sub.kernel32.dll_GlobalFix
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.kernel32.dll_GlobalFix
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff2f
jne 0x40118c
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.kernel32.dll_GlobalFix
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.kernel32.dll_GlobalFix
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ole32.dll_OleDestroyMenuDescriptor
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff11
jne 0x401215
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.kernel32.dll_GlobalFix
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ntdll.dll_RtlInitUnicodeStringEx
call sub.kernel32.dll_GlobalFix
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.kernel32.dll_GlobalFix
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ole32.dll_OleDestroyMenuDescriptor
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_ZwMapUserPhysicalPages
call sub.ntdll.dll_RtlInitUnicodeStringEx
ret
jmp 0x4982a8
mov edx, ebx
and edx, ebx
jmp 0x499623
call fcn.004991c5
ror edx, 0x18
sub edi, ecx
xor esi, edi
and esi, 0xef803ad1
xchg edi, esi
jmp 0x4992bd
pop ebx
add esi, 0xefda50e5
add esi, ecx
add edx, esi
add esi, edi
mov esi, ecx
xchg ecx, edx
shl esi, 5
xor ecx, edx
mov edi, ecx
mov edx, edi
and esi, 0xefe1622d
or ecx, esi
jmp 0x49b6a3
call fcn.004991c5
neg esi
dec edx
sub esi, edx
add ecx, edx
add edx, edi
inc edx
xchg ecx, esi
mov ecx, edx
xchg esi, ecx
add edi, 0xf06aa1fd
or edx, ecx
xor edi, ecx
shl edx, 5
add edx, edi
xchg edi, ecx
jmp 0x498db8
mov ebx, 0x2774562b
sub edx, ecx
and edx, esi
xor esi, ecx
sub edi, esi
inc edx
and edi, ecx
jmp 0x49b48a
pop ebx
and esi, edi
inc ecx
add edx, edi
jmp 0x49ae4b
push 0xe584b778
sub ecx, edx
and edi, 0xf10ee73c
mov edx, esi
or esi, ecx
mov esi, edx
xchg edi, esi
bswap ecx
add edi, ecx
not esi
jmp 0x49b820
push 0xe58b1753
add edx, ecx
xchg ecx, edi
or esi, edi
bswap edi
ror ecx, 6
add edi, 0xf11c6852
jmp 0x498eae
push 0xe583bb27
mov esi, 0xf1266222
xchg edi, esi
and esi, edx
add edx, 0xf1276227
xor edi, 0xf1279906
xor edi, ecx
mov ecx, edi
not edx
and ecx, edi
and edi, 0xf1289d74
jmp 0x499c23
pop ebx
ror ecx, 0x17
xchg edx, ecx
mov ecx, edx
mov ecx, edx
xchg edx, edi
jmp 0x498b66
push 0xe58ac40e
or esi, ecx
xor esi, 0xf187f7bf
mov ecx, edi
xor esi, 0xf188d377
xor esi, ecx
jmp 0x498acc
call ebx
and edi, esi
or edi, esi
add edi, 0xf1d66c80
sub edx, esi
shl edi, 0x1d
jmp 0x498c40
push 0xe58b642a
and esi, 0xf1f230fb
mov edx, 0xf1f2936b
add edi, esi
sub edx, 0xf1f35c94
not edi
not edx
or edi, esi
or edx, esi
xchg esi, edi
shl edi, 0x15
xor edx, 0xf220d862
sub esi, edx
mov ecx, edx
jmp 0x499bcc
call ebx
or edi, edx
xor edi, ecx
add edi, esi
mov edx, edi
mov edx, edi
sub ecx, 0xf2f1e34d
mov esi, edi
xchg edi, esi
or edx, 0xf2f289e8
add ecx, edx
mov esi, edi
xchg edx, esi
xchg ecx, edx
neg edx
jmp 0x498439
push 0xe57f8127
mov edi, edx
sub edi, esi
ror edi, 0x1a
sub edx, esi
xchg esi, edx
and ecx, edx
shl esi, 2
inc ecx
add edi, ecx
jmp 0x49bacc
push 0xe57f2832
inc esi
xchg esi, edi
or esi, ecx
inc esi
xchg edx, edi
or edx, edi
jmp 0x4993ee
pop ebx
and edi, esi
mov edx, edi
mov edx, ecx
add esi, edx
or esi, edi
and edi, ecx
shr ecx, 0x17
sub edx, ecx
not edi
mov ecx, edx
mov edi, ecx
or ecx, edx
add edi, edx
jmp 0x49b131
mov ebx, 0x2774562b
or ecx, edi
xor ecx, edi
sub edi, 0xf46d4529
or edi, ecx
shr esi, 0xb
add edx, ecx
add ecx, edi
neg esi
or esi, edi
jmp 0x49b372
call ebx
ror esi, 7
mov ecx, edx
sub edx, edi
sub ecx, edi
bswap esi
mov edx, 0xf47c2f69
sub edi, ecx
or esi, edx
add edx, edi
jmp 0x49971e
push 0xe58224cb
sub edx, ecx
and esi, edi
neg esi
or ecx, esi
dec edx
and edx, 0xf4ec395a
and esi, 0xf4ec9ebd
and edi, esi
xchg ecx, edi
inc edi
xor esi, edi
sub esi, edx
xchg ecx, edx
sub edi, 0xf4efce2a
jmp 0x49a25f
mov ebx, 0x2774562b
not esi
or ecx, 0xf4f0d3cf
xor edi, ecx
and edx, esi
not edi
jmp 0x49ac98
push 0xe584108f
rol edi, 2
or esi, edx
and esi, ecx
or ecx, edi
jmp 0x49acd3
pop ebx
or edx, 0xf52c572b
and edx, edi
mov esi, edx
jmp 0x499b9c
pop ebx
and edx, esi
add edi, esi
add edx, 0xf57f574e
or esi, 0xf58056ae
and esi, edi
xchg ecx, esi
jmp 0x499dd6
pop ebx
inc ecx
rol edx, 0x10
bswap ecx
xor edi, ecx
mov esi, ecx
and edx, esi
and ecx, esi
or ecx, 0xf58a39ba
ror edi, 0x1a
or ecx, edi
mov edi, 0xf58b68ad
shl edx, 0x1b
xchg edi, esi
xchg edx, esi
add esi, edi
jmp 0x49b332
push 0xe58a7309
xchg edi, esi
inc edx
ror edi, 0x1a
and ecx, esi
mov esi, edi
xor ecx, edx
jmp 0x498d4e
pop ebx
and esi, edi
dec edx
add ecx, edx
mov ecx, edi
add esi, edx
shr esi, 0x17
mov esi, 0xf5ec6fa8
xchg edi, ecx
add ecx, edx
shr esi, 0x13
jmp 0x4988f9
mov ebx, 0x2774562b
mov edx, ecx
xchg esi, ecx
not edx
mov edx, esi
add esi, edi
not ecx
xchg edi, ecx
xchg esi, edi
neg esi
jmp 0x498606
push 0xe588378c
mov edi, 0xf7c4e302
xor edi, esi
xchg edx, ecx
shl edx, 0x15
and ecx, edi
xchg edx, edi
jmp 0x498769
jmp loc.004a1000
push 0xe5845a70
or esi, 0xf892dc0e
or edx, ecx
or esi, edx
mov edx, ecx
and ecx, edi
jmp 0x498a19
push 0xe58a2011
ror edi, 0xc
and esi, edx
xor esi, edi
neg edx
bswap ecx
xor esi, ecx
or ecx, edi
not edi
sub esi, 0xf8b9f70e
jmp 0x499e25
mov ebx, 0x123b2f04
rol edx, 0x16
sub ecx, 0xf8c5241b
or ecx, edi
neg edx
rol edi, 0x16
xor ecx, 0xf8c61cec
and esi, edx
neg edx
and esi, edx
sub ecx, 0xf8c70333
add esi, ecx
or ecx, edx
add edi, esi
jmp 0x4982c7
pop ebx
xor edi, 0xf92e374c
or esi, 0xf92e9819
inc esi
mov edi, esi
ror edx, 8
ror edx, 0x1f
neg esi
and esi, 0xf930fa47
xor ecx, esi
dec edi
mov edi, ecx
jmp 0x499c73
call ebx
xchg edx, ecx
or edx, 0xf9a7fd1a
and edi, edx
mov ecx, 0xf9a8f9b8
sub edi, edx
mov edi, edx
mov edx, ecx
ror edx, 5
or edx, esi
jmp 0x49a0a4
push 0xe587e70f
neg ecx
add edi, edx
and edi, ecx
and ecx, edi
or edx, ecx
inc ecx
xchg edi, esi
jmp 0x49a928
call fcn.004991c5
bswap edx
xchg edx, esi
sub edi, ecx
bswap esi
shr esi, 7
shr ecx, 0x1c
mov ecx, edx
sub edi, ecx
or edi, ecx
inc esi
or ecx, edx
jmp 0x49995f
call fcn.004991c5
sub edi, ecx
neg edx
and ecx, esi
sub ecx, edx
or edx, ecx
mov edi, esi
shl esi, 0x1d
mov edx, 0xf9e929eb
and ecx, edx
add edi, 0xf9ea05c6
add edi, 0xf9ea62e3
mov edi, 0xf9eac02f
or esi, ecx
inc edx
sub ecx, edi
xor edx, edi
jmp 0x49b2bf
pop ebx
xor esi, 0xfab4250b
xor edx, esi
or edi, 0xfab4edf5
sub edi, ecx
and edx, edi
add edx, 0xfab62028
add ecx, esi
rol edi, 0x1e
mov edx, esi
xor edx, 0xfab7adf4
or ecx, 0xfab80cdc
jmp 0x49c022
push 0xe5850163
xor esi, edx
add esi, edx
mov edi, 0xfb193da0
neg esi
add edx, ecx
shl edi, 1
mov edx, edi
rol edx, 7
sub edx, edi
rol edi, 0x10
xchg edi, ecx
or edx, 0xfb1cc46a
ror esi, 1
jmp 0x49aee4
push 0xe57fce10
sub esi, edx
sub edx, edi
mov edx, edi
rol ecx, 9
add edx, 0xfbc3251a
mov ecx, edi
xchg edx, edi
not edx
or edi, esi
xor edx, edi
add edi, edx
add ecx, esi
mov esi, ecx
inc ecx
mov ecx, edi
jmp 0x4998d7
pop ebx
add esi, 0xfd0a9206
xor ecx, edi
and ecx, 0xfd0b0836
ror esi, 0x1f
jmp 0x499d98