Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api
Print debug messages

Disassembly:
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xfffffefe
jne 0x40107f
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.advapi32.dll_SetNamedSecurityInfoExA
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff08
jne 0x4010f4
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ole32.dll_HBITMAP_UserSize
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffeda
jne 0x40119b
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.kernel32.dll_OutputDebugStringA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ole32.dll_HBITMAP_UserSize
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xffffff36
jne 0x401206
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ole32.dll_HBITMAP_UserSize
ret
jmp 0x4751a8
add edx, ecx
and edi, esi
jmp 0x477895
call ebx
xchg ecx, esi
add ecx, esi
xor edi, ecx
or esi, edx
not ecx
and edx, edi
jmp 0x47796f
call ebx
sub esi, edi
shr esi, 0x1c
and edi, 0x691eb173
xor edx, esi
jmp 0x47652a
push 0x654294b0
add edi, edx
sub edx, 0x691f874f
sub edi, 0x691fbd4c
sub esi, edi
neg edi
mov ecx, edx
add edx, 0x692096e7
sub ecx, esi
shl ecx, 0x1c
shl esi, 0x18
jmp 0x47621b
pop ebx
dec esi
xchg esi, edx
add edi, 0x69341a10
and esi, edi
inc edx
and edx, 0x6934c2c2
xchg edx, esi
ror esi, 0x1a
sub ecx, edi
jmp 0x475451
push 0x654bc8b4
or edi, edx
or ecx, esi
dec edi
jmp 0x4775f3
push 0x654ccb87
add ecx, 0x695d9b2a
sub edx, ecx
and esi, edi
mov edi, edx
sub ecx, 0x695ea691
xor edx, 0x695f08a6
sub esi, edx
and edx, 0x695fe235
rol ecx, 6
not edx
sub edi, ecx
sub edi, edx
mov edx, 0x6961cfa3
jmp 0x476148
push 0x65457ced
xor esi, 0x69677778
xchg esi, edx
dec edi
jmp 0x4756e5
push 0x6552c7af
or edi, ecx
sub ecx, edx
sub esi, ecx
mov ecx, 0x696e6a85
neg esi
xor esi, ecx
sub edi, 0x696f0bd6
sub edx, 0x696f3f0b
jmp 0x475e58
pop ebx
ror ecx, 0x16
mov edi, 0x6971b360
sub ecx, 0x6971e6de
sub ecx, edi
xor ecx, 0x69724f78
sub ecx, edx
xor edx, 0x6972c000
sub edi, 0x6972f739
sub edx, edi
sub ecx, edx
ror esi, 0xf
ror ecx, 0xd
mov esi, edx
jmp 0x47536b
mov ebx, 0x123b2f04
xchg esi, edi
not esi
and edx, esi
neg edi
inc edx
xor ecx, 0x6975aab9
and ecx, edi
sub edx, 0x69767c4f
mov esi, ecx
sub ecx, 0x69773f37
inc esi
and esi, 0x697801ba
not edx
xchg ecx, esi
add esi, edi
jmp 0x478076
call fcn.00477b62
inc esi
xor edi, ecx
not esi
ror ecx, 0x1b
mov edx, edi
and edx, 0x69826e58
bswap ecx
dec esi
xchg esi, edx
or edi, ecx
jmp 0x476ba5
pop ebx
xchg edx, ecx
and edx, esi
xchg edi, esi
sub edx, 0x6984ea7c
add edx, esi
ror edi, 0x12
sub edx, esi
xchg edi, edx
and edi, esi
xor edx, ecx
xchg edx, esi
rol esi, 0xe
xor esi, ecx
jmp 0x477add
pop ebx
and esi, ecx
add edx, ecx
xor esi, ecx
add ecx, esi
sub edx, 0x69f787e0
shr edi, 0xd
jmp 0x47650e
pop ebx
sub edi, ecx
add ecx, edx
sub ecx, 0x6a03f1e8
add edi, 0x6a044a0f
rol edx, 0x1f
jmp 0x475ce6
push 0x65522e3e
mov ecx, 0x6a08d4a9
and edx, 0x6a093947
and edi, esi
shr ecx, 0xd
sub edx, ecx
inc ecx
sub edi, edx
bswap edx
mov edx, ecx
sub edx, ecx
xchg esi, edi
jmp 0x476243
push 0x654939ec
and edi, 0x6a181014
mov edi, 0x6a1847a6
dec edx
dec edi
sub ecx, 0x6a18f01c
mov ecx, esi
xchg edi, ecx
xor esi, 0x6a198a1f
neg edi
add esi, ecx
sub esi, edi
rol edx, 0x11
jmp 0x476e4f
push 0x655315f7
or edx, ecx
sub edx, edi
ror esi, 0xc
sub esi, ecx
jmp 0x476adb
pop ebx
xor edi, edx
xor esi, edx
add esi, 0x6a276c17
mov ecx, 0x6a27a320
shr edx, 0x16
sub edi, esi
or esi, 0x6a28418c
jmp 0x475770
jmp loc.0047b52a
push 0x65452b35
add esi, edx
shr edi, 1
and ecx, edx
add ecx, esi
or edx, ecx
sub ecx, 0x6a5a8742
and esi, ecx
xor edi, ecx
or esi, ecx
xor esi, edi
and esi, ecx
jmp 0x475635
push 0x654d1a7c
add edi, esi
sub esi, edi
xchg esi, edi
xor esi, edi
dec edi
shr edi, 8
jmp 0x4779b1
push 0x6542ebec
sub esi, ecx
xchg edi, ecx
neg edi
or esi, edx
neg ecx
sub ecx, 0x6a699ace
shr ecx, 0xb
xor edx, esi
sub ecx, edx
xchg esi, ecx
dec ecx
mov esi, ecx
mov edi, edx
jmp 0x477e78
push 0x65527bd4
inc esi
mov esi, 0x6a6b8fc7
shr edx, 0x13
bswap esi
add ecx, 0x6a6c2c9e
shr edx, 0x16
neg edx
and edx, ecx
or esi, 0x6a6d0810
or edi, esi
jmp 0x475673
pop ebx
add edi, esi
and edx, esi
not esi
mov edx, edi
jmp 0x475c04
push 0x6550538f
shr edx, 3
not esi
mov edi, esi
add esi, 0x6a871b8a
rol edx, 0x15
sub esi, edx
xor edx, esi
add ecx, edi
xor edx, 0x6a8828c0
sub esi, edi
sub edi, esi
xchg edi, edx
xor esi, ecx
jmp 0x477ec2
pop ebx
mov ecx, esi
shr esi, 0x13
rol ecx, 0x1b
mov edi, 0x6aac9657
dec edi
neg ecx
add edi, edx
xor edi, esi
mov edx, esi
jmp 0x4763c0
pop ebx
xor ecx, edi
xchg edx, ecx
inc esi
dec edx
add edx, edi
inc edx
not edi
sub edx, esi
or edi, esi
jmp 0x476908
call ebx
ror ecx, 0xb
inc ecx
nop
xchg esi, edi
xor edi, edx
or ecx, 0x6ae2b8a0
and ecx, esi
sub esi, 0x6ae375c7
and ecx, edi
jmp 0x475cae
pop ebx
and edi, esi
and edx, edi
sub edx, esi
add esi, edi
xor edi, ecx
or edi, esi
jmp 0x47626d
call fcn.00477b62
and esi, edi
add edx, ecx
jmp 0x4766c9
call ebx
xor edi, esi
xchg edi, esi
sub esi, 0x6b3ffaf8
shl ecx, 5
xchg ecx, edi
and edx, esi
add ecx, edi
sub edi, esi
mov esi, edi
or edi, 0x6b42a820
add esi, ecx
jmp 0x475e91
push 0x654c6c77
xchg edx, esi
not edx
and ecx, edi
add ecx, edx
mov edx, esi
jmp 0x4755ce
mov ebx, 0x123b2f04
and ecx, edi
or edi, 0x6b514c83
add edi, esi
mov ecx, esi
xor edx, esi
xchg edx, edi
xchg ecx, esi
mov ecx, edx
and ecx, edi
rol edi, 0x10
xor esi, edx
jmp 0x475f4b
call ebx
or edx, edi
xor edi, ecx
and esi, 0x6b6aebd1
xor esi, edi
sub edi, ecx
sub edx, esi
xor edx, 0x6b6cace4
or edx, edi
xor edi, ecx
mov edi, esi
inc esi
xchg edx, ecx
jmp 0x477bc7
push 0x654986e1
shr edx, 0xb
inc edx
add esi, edx
and esi, 0x6bb5a319
and esi, edx
mov esi, edx
sub ecx, esi
mov edi, ecx
sub ecx, edx
not esi
xor edi, esi
sub esi, edi
and edi, 0x6bb980ad
rol edx, 0x14
jmp 0x477a09
push 0x6548eff2
or edi, ecx
xchg edi, edx
add ecx, 0x6bbb3b61
or edi, ecx
jmp 0x475dc9
pop ebx
shr esi, 0x1f
mov edx, esi
or esi, edx
or ecx, edi
inc esi
sub esi, edx
not esi
bswap edx
xor ecx, esi
xchg edx, ecx
xor esi, ecx
mov edi, esi
or edi, ecx
ror edx, 2
rol esi, 0x18
jmp 0x476e88
call fcn.00477b62
add ecx, 0x6c97154f
sub edx, edi
xchg esi, edx
or edx, ecx
xor edi, edx
add edx, esi
xor esi, 0x6c99a6ac
xchg edi, ecx
and ecx, 0x6c9a7ac4
xor edi, 0x6c9b15e0
ror esi, 0x12
jmp 0x475265
call fcn.00477b62
and edi, edx
mov ecx, edx
xor ecx, edi
and ecx, edi
xor ecx, esi
jmp 0x476a3f
push 0x654c181c
xchg edi, ecx
mov edx, 0x6ca3c4cd
and esi, edx
xor ecx, edi
sub esi, edx
xor edx, esi
mov edx, esi
shl esi, 0x1e
add ecx, edx
neg ecx
or esi, ecx
jmp 0x476a65
push 0x65423da1
sub edi, 0x6cf9cd34
and esi, edi
bswap ecx
mov ecx, edi
mov ecx, edi
dec edi
or esi, edx
mov edx, 0x6cfce39c
sub edi, esi
inc esi
or ecx, esi
inc ecx
xchg edx, edi
jmp 0x475279
pop ebx
and esi, 0x6d172ba2
rol edi, 3
or esi, 0x6d18354a
or edi, 0x6d1898ca
add esi, 0x6d190631
nop
inc esi
mov edx, edi
jmp 0x477204
mov ebx, 0x2774562b
add edx, ecx
xchg ecx, edx
dec esi
sub edi, esi
add ecx, 0x6d20c950
add ecx, esi
xchg esi, edx
xchg esi, edi
shl edi, 3
mov esi, edi
and ecx, esi
xchg esi, edi
jmp 0x477583
mov ebx, 0x123b2f04
mov esi, ecx
sub edi, ecx
or edi, esi
not edi
xchg edx, ecx
not ecx
add esi, edi
neg edi
sub ecx, esi
and edx, edi
xor esi, ecx
not esi
jmp 0x47574f
pop ebx
inc edi
add esi, ecx
or edx, edi
dec esi
and edx, 0x6d47e463
neg edi
or edi, edx
jmp 0x476123
pop ebx
or edx, edi
bswap edi
bswap edx
xor edx, esi
or ecx, 0x6d5e7097
sub esi, 0x6d5edfde
inc edi
ror edx, 2
rol esi, 0xc
jmp 0x4756af
mov ebx, 0x123b2f04
xchg ecx, esi
xor esi, edi
mov edx, 0x6db02b0c
ror edx, 0x1d
add edx, 0x6db0fc39
sub ecx, 0x6db1692f
and edx, esi
mov edi, ecx
sub edi, edx
xor ecx, edx
add esi, ecx
sub edx, edi
add edx, esi
jmp 0x4775b4
mov ebx, 0x123b2f04
not ecx
ror ecx, 0x14
add ecx, esi
or edi, edx
sub edi, ecx
inc edi
xor edi, esi
sub edi, esi
dec edx
and edi, esi
and edx, esi
or ecx, 0x6dbce360
add ecx, esi
sub edi, edx
xor ecx, esi
jmp 0x476968
call fcn.00477b62
dec ecx
xor ecx, edi
add edi, 0x6ded0704
or edi, esi
and ecx, edx
or edx, ecx
shr ecx, 0x1c
and edx, ecx
mov edx, ecx
and edi, ecx
jmp 0x47520d