Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xfffffee3
jne 0x401070
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xfffffef6
jne 0x401117
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xffffff02
jne 0x401191
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xffffff2f
jne 0x401201
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
call sub.user32.dll_GetWindowPlacement
ret
jmp 0x4788e0
sub ecx, ebx
not edx
ror esi, 0x12
sub esi, ecx
mov ecx, 0x786de3cd
jmp 0x47ae36
call esi
sub ecx, edi
xchg ecx, edi
shl ebx, 0x11
and ecx, 0x8060c41e
add edx, 0x80612642
or edi, 0x8061a325
shl ebx, 1
xchg edi, edx
neg edx
or edi, ebx
bswap ecx
jmp 0x47948f
pop esi
bswap ebx
and edi, ecx
inc ecx
xchg ebx, ecx
shr ecx, 0xc
xor edi, 0x820a19a7
xchg ebx, ecx
sub edi, ebx
add ebx, ecx
shr edx, 6
not ebx
rol ecx, 5
dec ebx
jmp 0x4799e8
push 0x78770aa6
and edi, 0x820d9fbb
and ecx, 0x820e012c
add edi, 0x820e64cb
ror edx, 0x12
and ecx, edx
xor ecx, edi
bswap edi
bswap edi
xor edx, 0x821108d5
xor edx, 0x82118195
add ebx, 0x8211f753
or ecx, edx
mov ebx, 0x8212bec6
jmp 0x47a17d
jmp loc.00480000
push 0x7876503b
xor edi, 0x830c959b
mov edx, ecx
inc edi
mov ecx, edx
jmp 0x47a0f5
call fcn.004789be
mov edi, 0x83c20780
xor ecx, ebx
or ecx, 0x83c2fd4f
shl edx, 0x1c
rol edi, 0xa
and edi, ecx
add ebx, edx
mov ebx, edi
xor edx, edi
shl edx, 0xb
jmp 0x478d6f
mov esi, 0x2774562b
sub edi, 0x83c6642c
or edi, ecx
and ebx, ecx
or ebx, 0x83c7cd45
and edx, ebx
dec ebx
add ebx, edx
shl edi, 0x12
or edi, edx
add edi, edx
sub ebx, ecx
jmp 0x479d1e
push 0x7876a2da
or edi, edx
mov ebx, 0x8474cb8f
add ebx, 0x847531e0
nop
mov ebx, 0x84763972
shl ebx, 0x11
mov ecx, ebx
jmp 0x4794b4
mov esi, 0x123b2f04
mov ecx, edx
xor ecx, edx
or ecx, edi
sub ecx, 0x84874984
xor edx, edi
jmp 0x47955f
push 0x787473a7
or edi, 0x8643c0ea
shr ebx, 2
mov edx, ecx
or ebx, edx
or ebx, ecx
and ebx, ecx
dec edx
jmp 0x479d46