Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
mov edi, ecx
call sub.user32.dll_GetKBCodePage
or edx, 0x1558ea23
dec edi
shl ecx, 0xb
cmp eax, 0xfffffeef
jne 0x401077
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_GlobalReAlloc
call sub.ntdll.dll_NtQuerySection
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_SetSystemTimeAdjustment
ret
add ecx, 0x155cfd24
and edx, 0x155d7132
inc esi
mov esi, ecx
xor ecx, 0x155f0d98
mov ecx, edx
rol ecx, 0xb
inc edx
call sub.user32.dll_GetDialogBaseUnits
or ecx, 0x15615dae
mov ecx, esi
and edi, esi
and esi, edi
and ecx, 0x156365e5
dec edi
xchg esi, ecx
not esi
cmp eax, 0xfffffeec
jne 0x401150
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_GlobalReAlloc
call sub.ntdll.dll_NtQuerySection
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_SetSystemTimeAdjustment
ret
mov edi, esi
sub esi, edi
and ecx, edi
shl edi, 0x1b
or edx, 0x156ba3f8
sub ecx, esi
dec ecx
shl esi, 6
call sub.kernel32.dll_GetCurrentProcess
or edi, edx
or edx, edi
or esi, 0x156ed093
cmp eax, 0xffffff02
jne 0x401207
call sub.kernel32.dll_GlobalReAlloc
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_GlobalReAlloc
call sub.ntdll.dll_NtQuerySection
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.ntdll.dll_NtQuerySection
call sub.ntdll.dll_NtQuerySection
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.ntdll.dll_NtQuerySection
call sub.ntdll.dll_NtQuerySection
call sub.kernel32.dll_GlobalReAlloc
call sub.kernel32.dll_GlobalReAlloc
ret
jmp 0x4a067a
and esi, ecx
sub edi, 0x16089f88
rol ecx, 0x15
sub esi, 0x16098cd1
dec edx
jmp 0x4a2782
push 0x16137b5b
xor ecx, edx
xchg ebx, edi
and ebx, edx
mov edx, 0x1af51191
and edi, ecx
ror edi, 0x1b
sub ebx, edi
add edx, ecx
not ecx
and ecx, ebx
xor ebx, ecx
xor edi, edx
and ecx, ebx
sub ecx, edx
or edi, ecx
or ecx, 0x1afb90ea
jmp 0x4a0cce
call esi
dec ecx
sub edi, ebx
and edi, ecx
add edi, 0x1b0ba685
mov ecx, ebx
or edi, edx
xchg ebx, edx
mov edx, 0x1b0dc60e
jmp 0x4a0fde
push 0x1610e3a8
add edx, ebx
add ebx, 0x1b12b092
mov edi, ecx
xor ecx, edi
sub ebx, 0x1b143c46
xchg ecx, ebx
or edi, 0x1b154017
xchg edi, ebx
rol edx, 0xd
add ecx, ebx
jmp 0x4a322b
call fcn.004a365e
add edi, 0x1b1c2d47
xor ebx, ecx
sub ecx, edx
mov edx, 0x1b1d764f
xor ecx, edx
or ecx, edx
or ebx, edi
or edi, edx
mov edi, 0x1b1fdb37
or ecx, edi
jmp 0x4a1b31
mov esi, 0x2774562b
and ecx, edi
mov ebx, ecx
add ecx, edi
and ebx, edi
xor edi, ebx
mov ecx, edx
shr edi, 0x1f
add ecx, edi
mov edx, ecx
xor edi, edx
rol ecx, 0x1f
mov ebx, ecx
shl ecx, 0x1d
rol ebx, 0x11
mov ecx, ebx
nop
jmp 0x4a14ab
pop esi
add edi, ebx
mov ebx, edi
or edi, ecx
bswap edi
mov ecx, edi
jmp 0x4a1522
push 0x161a61aa
neg ebx
mov ebx, edi
and edx, ebx
add ebx, edx
bswap ecx
mov ebx, edi
or edx, ebx
sub edi, ebx
and edx, edi
nop
mov ecx, ebx
jmp 0x4a136b
call fcn.004a365e
add ebx, 0x1bb34556
and edi, ebx
and ecx, ebx
add edi, ebx
sub edi, ebx
nop
add ecx, edi
inc ebx
bswap ebx
inc edi
jmp 0x4a10b9
pop esi
ror edi, 0xf
sub ebx, edx
or edi, edx
inc edx
or ecx, edx
or edi, 0x1bdeb45b
xor edx, edi
jmp 0x4a1f0d
call fcn.004a365e
ror edi, 1
or ecx, 0x1bf15c6a
or ebx, edx
add ebx, edx
add edx, ecx
xchg ebx, edx
xchg ecx, edx
shr ebx, 9
neg ecx
inc ebx
shl edi, 3
xor ebx, edx
jmp 0x4a17ef
call esi
mov edx, ebx
neg ecx
mov ebx, 0x1bfbcb43
or ecx, ebx
or edi, 0x1bfcac95
xor ebx, 0x1bfd387c
xchg ebx, edi
jmp 0x4a2bec
pop esi
sub ecx, edi
mov edx, 0x1bfed46f
and ebx, 0x1bff4543
or edx, ebx
inc ebx
mov edi, ecx
xor ecx, ebx
or edx, 0x1c019917
or ecx, edi
jmp 0x4a25ed
mov esi, 0x2774562b
add edx, 0x1c5768df
or ebx, edi
rol edx, 8
xor ecx, 0x1c58c150
and ebx, ecx
inc ebx
and ecx, edx
xchg edi, ecx
mov edi, ebx
mov edi, ebx
jmp 0x4a0ea5
pop esi
and ebx, 0x1c5c315a
mov ecx, edx
xor edi, edx
dec ecx
sub ebx, edx
add edi, 0x1c5e5109
or ecx, edx
or ebx, edx
or ebx, 0x1c5fefbc
or edi, ecx
xor edx, 0x1c60d332
jmp 0x4a10d9
call fcn.004a365e
xchg ebx, ecx
sub edi, ebx
bswap edx
xchg ebx, ecx
mov ecx, ebx
mov ebx, edi
rol ecx, 0x17
xor ecx, 0x1d69c1d6
shl edi, 0x1e
and edx, edi
jmp 0x4a237d
pop esi
shl edi, 5
xor edi, ecx
add edi, edx
jmp 0x4a338e
call fcn.004a365e
sub edx, 0x1d72f070
add ebx, 0x1d7339dc
xor edi, ecx
mov ecx, edx
sub edx, 0x1d73ea1d
jmp 0x4a1b15
mov esi, 0x2774562b
add edx, edi
inc edi
add edi, edx
shr edx, 4
xchg edi, edx
jmp 0x4a290f
call esi
mov edi, 0x1dc35100
sub ecx, edi
and edi, edx
not edi
shl edi, 0x1c
add ebx, ecx
and ecx, ebx
jmp 0x4a3515
pop esi
xchg edi, ecx
xor edi, ebx
neg edi
inc edx
sub edi, ebx
mov edi, edx
not ebx
and edx, ebx
and ecx, edi
neg edi
jmp 0x4a1391
push 0x1615352a
shl edi, 6
xor edi, 0x1df78a02
shr edi, 0x14
mov ecx, 0x1df88c9c
xchg ecx, edx
add edi, ebx
add ebx, 0x1df9ef56
inc edi
xchg edi, ecx
and edx, ebx
add ebx, edx
neg ecx
jmp 0x4a320b
pop esi
inc ebx
bswap ecx
and ebx, edx
shr ecx, 9
mov edi, ebx
xchg ebx, edx
neg edi
jmp 0x4a2736
call esi
shl edx, 0x16
xor ecx, ebx
add edi, ebx
and edx, 0x1e3da386
not ecx
add ebx, 0x1e3e9de8
jmp 0x4a199b
call esi
not ecx
dec edx
and edi, edx
shr edi, 0x10
and ecx, ebx
sub ecx, 0x1e41b973
sub ecx, 0x1e424326
sub ebx, ecx
and ebx, 0x1e431f82
sub ebx, edx
sub ebx, edi
add edi, ecx
xchg ebx, edx
xchg edi, ecx
jmp 0x4a0d11
push 0x161d4075
add edx, 0x1ea9a462
mov ecx, ebx
add ebx, edi
jmp 0x4a2455
pop esi
dec ebx
xchg edx, ebx
shl ecx, 0x1d
or ebx, edx
and edi, 0x1ec7b703
ror ecx, 0x1f
mov edx, ecx
sub edi, ebx
jmp 0x4a378f
mov esi, 0x123b2f04
dec ecx
add ecx, edx
mov ecx, edi
xor edx, edi
xor edi, ecx
sub edi, ebx
shl ecx, 8
dec edx
xor edi, 0x1ecdfdbe
jmp 0x4a154d
pop esi
add ebx, ecx
ror ecx, 0x11
add ecx, ebx
jmp 0x4a1928
push 0x1615dc58
xchg edi, ecx
xor ebx, edi
rol edx, 0x1c
or ecx, edi
xor ecx, 0x1f11da25
xchg edx, ebx
or ecx, edx
neg ebx
shr ebx, 0x1c
and ecx, ebx
add edi, ecx
and edx, 0x1f15809e
add edx, ecx
mov ebx, ecx
mov edi, ecx
jmp 0x4a2c2b
push 0x162057a4
and ebx, edi
add ebx, edi
mov ebx, edi
sub edi, ecx
shr edi, 2
or edx, 0x1f532d91
sub edi, ecx
or ebx, ecx
sub edi, ecx
and edx, ebx
xchg edx, ebx
xchg ebx, edi
sub ebx, 0x1f565f2d
or ecx, edx
jmp 0x4a1791
push 0x1618608e
shr ecx, 0x1d
rol ecx, 0xc
add ecx, edi
and edx, edi
xchg edi, ebx
sub edi, ecx
and ecx, edx
mov edi, edx
ror edi, 0xd
jmp 0x4a1f28
call esi
mov edx, ecx
xor ebx, ecx
sub edx, edi
xor ebx, edi
sub ebx, ecx
mov edx, edi
mov edx, ebx
sub ebx, ecx
rol edi, 0xe
jmp 0x4a2030
mov esi, 0x123b2f04
xor edi, edx
rol ebx, 2
mov ecx, 0x1fa4690a
not edi
inc edx
bswap ebx
jmp 0x4a106f
push 0x161c51b9
rol ebx, 4
xor edx, 0x1fa9afcb
shr ecx, 0xb
or ebx, 0x1faace7d
jmp 0x4a344d
call fcn.004a365e
or ebx, edx
add ecx, 0x1fbd1135
mov edi, ecx
or edi, 0x1fbdef4f
add ebx, edx
shl ebx, 0x17
sub ecx, edx
or edi, ecx
ror ebx, 0xa
add edx, edi
neg edi
jmp 0x4a09e9
push 0x16200553
not edi
sub edx, 0x1fd98c1c
ror ecx, 3
and edi, ebx
xchg ecx, edi
add edx, ecx
sub ebx, ecx
add ebx, 0x1fdc6cd7
and edx, edi
mov ecx, edx
rol edx, 4
ror edx, 0x14
and edx, ecx
jmp 0x4a2221
push 0x161a12e4
sub ecx, edi
add ebx, 0x20079698
xchg ebx, edx
xchg ecx, edx
or ecx, edx
rol edi, 7
add ebx, 0x200a0bef
xchg edi, ebx
sub ebx, ecx
xor edi, 0x200b4f9b
jmp 0x4a0dbd
push 0x161000ad
or edi, edx
shl edx, 3
and edi, 0x20101523
sub edx, edi
or edi, 0x2010e821
and edi, ebx
xchg edx, edi
sub edi, ebx
add ecx, ebx
xor ecx, ebx
inc ebx
shr edi, 0xf
add ecx, ebx
add ecx, ebx
sub ebx, 0x201587f0
jmp 0x4a3158
jmp loc.004a8000
pop esi
ror edx, 4
sub edi, edx
or edi, ebx
xor ebx, 0x20b45a3c
shl edi, 0x1f
and ecx, 0x20b559b4
xor edi, edx
and ecx, ebx
xor ebx, 0x20b6b0c4
sub ebx, ecx
add ecx, ebx
jmp 0x4a30f8
mov esi, 0x2774562b
or ebx, ecx
or edi, ebx
xor edi, edx
sub ecx, edx
or edx, edi
or ecx, ebx
ror edi, 0x1c
mov edi, 0x20beee1e
jmp 0x4a2514
pop esi
not edx
sub ecx, ebx
mov ecx, edi
add ecx, edx
not edi
or edx, ebx
shl edi, 2
dec edi
and edx, 0x218a977c
sub ecx, edi
jmp 0x4a247f
push 0x1610767a
bswap edx
neg edx
jmp 0x4a0a1d
push 0x16158cd0
and ebx, ecx
or ecx, ebx
or ebx, 0x21ab847a
xchg ecx, edx
or ecx, edi
sub ebx, edi
ror edx, 4
shr ecx, 0x14
jmp 0x4a203d
mov esi, 0x2774562b
xchg edx, ecx
xchg ecx, edi
shl ecx, 4
add edi, 0x21b03707
xor edi, ecx
sub ecx, ebx
mov ecx, ebx
rol ecx, 1
jmp 0x4a0a5f
pop esi
sub edx, ebx
sub edx, edi
mov edi, ebx
bswap ebx
and edi, ebx
neg edi
and edx, ecx
jmp 0x4a0954
push 0x161ca4dd
shr ecx, 0xb
xchg edi, ecx
mov edi, edx
sub edx, 0x21f92c16
jmp 0x4a3487
push 0x161cf7f2
shl ecx, 4
sub edi, ecx
not ecx
shr ebx, 0xa
sub edx, ecx
sub edx, ebx
or ebx, edi
add edx, edi
shr ecx, 0x14
and edi, ecx
add ebx, ecx
jmp 0x4a1e3a
pop esi
mov ecx, ebx
mov edx, edi
dec ecx
or edx, ebx
shr edx, 0x10
or ebx, edi
xor edi, ecx
or ecx, ebx
dec ebx
xchg edx, edi
or edx, ebx
shl ebx, 0xe
xor ebx, edx
sub ecx, edx
jmp 0x4a18f4
pop esi
or ecx, 0x226b0875
sub edx, edi
xor ecx, 0x226bf1b4
dec ecx
xchg ebx, edx
add edx, ecx
neg edx
sub edi, ecx
or ebx, edi
ror ebx, 0x15
xchg edi, edx
and ecx, edi
or ebx, 0x2270dab5
jmp 0x4a2285