Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetInputState
cmp eax, 0xfffffed5
jne 0x4010a2
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xfffffefb
jne 0x40111c
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
ret
call sub.kernel32.dll_GetCurrentProcess
cmp eax, 0xffffff1e
jne 0x401191
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.advapi32.dll_LsaICLookupSidsWithCreds
ret
call sub.kernel32.dll_GetCurrentProcess
cmp eax, 0xffffff33
jne 0x401224
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetTitleBarInfo
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.user32.dll_GetWindowLongW
call sub.advapi32.dll_LsaICLookupSidsWithCreds
call sub.user32.dll_GetTitleBarInfo
call sub.user32.dll_GetTitleBarInfo
ret
jmp 0x4750ea
add ebx, ecx
jmp 0x477d26
push 0x29e70e29
shl ebx, 0xe
mov esi, ebx
shl ebx, 0x17
rol ebx, 0x18
mov ebx, ecx
or ebx, esi
add ebx, esi
neg esi
xchg esi, ecx
jmp 0x475e02
call fcn.004781d1
xchg edi, ebx
sub ebx, edi
sub esi, ebx
and esi, 0x2b4bc592
xor edi, ecx
xchg edi, ecx
jmp 0x475614
call edx
sub ebx, edi
and edi, ecx
ror ebx, 0x1e
sub ebx, esi
rol ebx, 6
xor ebx, 0x2b50b003
rol ebx, 5
or edi, ebx
bswap ecx
xor ecx, edi
add ebx, ecx
not ecx
xor ebx, esi
sub edi, esi
dec esi
jmp 0x47740d
pop edx
mov ebx, esi
add ecx, 0x2b5b03d8
or esi, edi
or ecx, ebx
sub ecx, 0x2b5bbce2
mov ecx, edi
shr edi, 8
sub ebx, esi
xchg esi, ecx
shr esi, 0x10
shr ebx, 0x1e
jmp 0x47791a
call fcn.004781d1
bswap edi
and ebx, edi
xor ebx, edi
shr edi, 0x1d
ror esi, 0x1c
dec esi
sub ebx, edi
jmp 0x4763f0
pop edx
nop
mov ecx, ebx
and esi, edi
and esi, 0x2b603b55
xor esi, ecx
jmp 0x47787f
pop edx
xchg esi, ecx
and ecx, edi
mov esi, edi
add edi, esi
xchg edi, ecx
not ecx
jmp 0x476a65
push 0x2a0dcd64
sub esi, 0x2b644816
inc esi
xchg esi, edi
sub ecx, edi
mov ecx, edi
mov edi, 0x2b658dd5
sub ebx, edi
xor esi, ebx
xchg edi, esi
jmp 0x477517
call fcn.004781d1
or esi, 0x2b6e814a
and ebx, esi
rol esi, 0xf
sub ecx, edi
add esi, 0x2b6f8776
add ecx, edi
or ebx, ecx
add ecx, edi
xchg ebx, esi
jmp 0x475c12
call edx
neg ebx
and esi, edi
jmp 0x47601a
push 0x2a002221
mov edi, 0x2b894ae8
mov ebx, edi
or esi, ecx
sub ecx, esi
sub ebx, 0x2b8a3eaf
sub edi, esi
add ecx, ebx
sub ebx, ecx
add esi, ebx
shl edi, 5
xor esi, 0x2b8bbe67
shl edi, 0x12
jmp 0x477c58
push 0x29ed5051
xor ebx, esi
or ebx, edi
not esi
not ebx
bswap ebx
or esi, edi
sub edi, ecx
mov ecx, esi
and edi, 0x2b945b03
add edi, 0x2b94994c
or esi, ebx
sub ecx, esi
sub edi, 0x2b9552e6
or edi, ecx
jmp 0x4780ac
push esp
sub ebx, 0x2b9f350a
mov ecx, ebx
mov ebx, 0x2b9faeef
sub edi, ecx
nop
xor ecx, esi
and edi, ebx
add esi, ebx
ror ecx, 0xf
jmp 0x476392
call edx
shl edi, 0x1f
nop
or edi, 0x2ba66f94
or esi, ecx
add ecx, 0x2ba74679
sub esi, 0x2ba7c0d1
mov ecx, edi
or esi, edi
jmp 0x477604
mov edx, 0x123b2f04
or esi, ebx
xor ebx, edi
dec edi
mov edi, esi
rol ebx, 0xd
and ebx, edi
sub ecx, edi
or edi, ebx
dec esi
and edi, ecx
or esi, ebx
xor ebx, edi
shr ebx, 0x1c
jmp 0x475865
pop edx
sub edi, ebx
mov esi, 0x2bbe66f9
nop
add ecx, esi
neg ecx
ror edi, 0x19
and edi, ecx
add edi, ebx
mov ebx, ecx
not ecx
jmp 0x477316
pop edx
xor edi, ecx
and ebx, edi
add edi, 0x2bc55b4d
sub ecx, 0x2bc59a25
and esi, 0x2bc5d996
sub ecx, edi
neg ebx
or esi, edi
mov esi, edi
and ecx, esi
jmp 0x475da3
call fcn.004781d1
or edi, ebx
dec ebx
or ecx, ebx
add ecx, edi
and esi, ecx
xor ebx, ecx
mov ecx, 0x2bca9d68
mov ebx, ecx
mov ecx, 0x2bcb2810
jmp 0x4774a8
pop edx
xor ecx, ebx
shl ecx, 0x16
sub edi, ebx
or esi, ebx
add ebx, 0x2bcccf9d
xor ecx, esi
shl edi, 0x19
shl edi, 1
and ecx, edi
or esi, 0x2bce143e
or ecx, ebx
jmp 0x477941
call fcn.004781d1
add esi, ecx
rol ecx, 0xf
inc esi
xchg esi, edi
or ecx, ebx
xchg ebx, ecx
add edi, esi
sub esi, ecx
xor ebx, 0x2bd0a38a
add ecx, 0x2bd0e283
shr ecx, 8
or edi, ebx
jmp 0x4771c4
pop edx
or ebx, edi
dec esi
xor esi, edi
xor esi, edi
jmp 0x475c5a
push 0x2a0a1434
and ebx, edi
sub esi, ecx
sub esi, ebx
mov edi, ebx
or edi, 0x2be0fd2e
and edi, esi
add ebx, esi
jmp 0x477343
pop edx
mov esi, edi
sub ebx, 0x2be52440
xchg edi, esi
bswap ebx
shr ebx, 0x17
xchg esi, ebx
or ebx, esi
or ecx, ebx
ror ebx, 0xe
mov esi, 0x2be72a9d
xor ecx, 0x2be769c5
jmp 0x477c85
push 0x29e6ae2b
and ebx, ecx
add ecx, esi
rol ecx, 0x16
shl ecx, 0x11
add ebx, ecx
neg ecx
and ebx, edi
and ebx, 0x2bfaabf9
jmp 0x4751e5
call fcn.004781d1
sub edi, esi
xor ecx, ebx
xor edi, ecx
xchg ebx, esi
and esi, 0x2bfc0a65
jmp 0x475674
call edx
add edi, 0x2c02de28
xor edi, esi
xchg ecx, edi
mov esi, edi
bswap esi
not esi
bswap ebx
shl esi, 0xc
jmp 0x475998
pop edx
or esi, edi
shl ebx, 0xd
shr esi, 9
sub ebx, edi
and ebx, edi
xor ecx, edi
jmp 0x477475
pop edx
or esi, 0x2c0fe034
mov esi, 0x2c101e76
sub edi, 0x2c105df6
xor ecx, 0x2c109cb2
and esi, ebx
bswap ebx
add ecx, 0x2c11568d
ror esi, 9
bswap esi
invalid
invalid
invalid
invalid