Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
inc esi
rol edx, 1
neg esi
mov ecx, esi
inc edx
mov edx, 0x3dfb67ec
shl esi, 0x12
call sub.kernel32.dll_GetLastError
rol edx, 0x19
cmp eax, 0xffffff12
jne 0x4010b1
call sub.shell32.dll_ShellMessageBoxW
call sub.shell32.dll_ShellMessageBoxW
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.shell32.dll_ShellMessageBoxW
call sub.shell32.dll_ShellMessageBoxW
call sub.shell32.dll_ShellMessageBoxW
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.advapi32.dll_CredGetTargetInfoA
call sub.shell32.dll_ShellMessageBoxW
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.shell32.dll_ShellMessageBoxW
call sub.shell32.dll_ShellMessageBoxW
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ntdll.dll_RtlQueryProcessLockInformation
ret
or esi, ecx
call sub.kernel32.dll_GetLastError
xchg esi, ecx
xchg esi, ebx
mov edx, ebx
mov ecx, ebx
not esi
cmp eax, 0xffffff00
jne 0x401155
call sub.advapi32.dll_CredGetTargetInfoA
call sub.shell32.dll_ShellMessageBoxW
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.shell32.dll_ShellMessageBoxW
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_CredGetTargetInfoA
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.shell32.dll_ShellMessageBoxW
call sub.shell32.dll_ShellMessageBoxW
call sub.advapi32.dll_CredGetTargetInfoA
call sub.advapi32.dll_CredGetTargetInfoA
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ole32.dll_HGLOBAL_UserSize
call sub.shell32.dll_ShellMessageBoxW
call sub.advapi32.dll_CredGetTargetInfoA
call sub.shell32.dll_ShellMessageBoxW
call sub.ole32.dll_HGLOBAL_UserSize
call sub.shell32.dll_ShellMessageBoxW
call sub.shell32.dll_ShellMessageBoxW
call sub.advapi32.dll_CredGetTargetInfoA
ret
or esi, ecx
add ecx, 0x3e08f88c
call sub.kernel32.dll_GetCurrentProcess
inc edx
add ecx, ebx
mov edx, ebx
shl ebx, 0x1b
inc ecx
cmp eax, 0xffffff0b
jne 0x4011c7
call sub.shell32.dll_ShellMessageBoxW
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.advapi32.dll_CredGetTargetInfoA
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ole32.dll_HGLOBAL_UserSize
ret
mov ebx, esi
add edx, esi
dec edx
bswap edx
and esi, ecx
sub edx, ecx
call sub.kernel32.dll_GetCurrentProcess
neg ebx
add ebx, 0x3e134c60
xchg ecx, esi
and ecx, edx
bswap edx
cmp eax, 0xfffffee1
jne 0x401250
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.advapi32.dll_CredGetTargetInfoA
call sub.shell32.dll_ShellMessageBoxW
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.shell32.dll_ShellMessageBoxW
call sub.shell32.dll_ShellMessageBoxW
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.advapi32.dll_CredGetTargetInfoA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_RtlQueryProcessLockInformation
call sub.shell32.dll_ShellMessageBoxW
call sub.advapi32.dll_CredGetTargetInfoA
call sub.shell32.dll_ShellMessageBoxW
call sub.shell32.dll_ShellMessageBoxW
ret
jmp 0x4b7348
not ebx
add ebx, edx
jmp 0x4b992a
call ebx
ror esi, 6
sub ecx, esi
and esi, edx
or edi, esi
add edx, ecx
jmp 0x4ba106
call fcn.004ba520
bswap esi
add ecx, edi
xor ecx, edi
xor esi, edi
rol edx, 0x14
neg edi
and ecx, 0x48c2861c
sub ecx, edi
and esi, edx
and edx, edi
mov ecx, edx
jmp 0x4b944b
pop ebx
mov edi, edx
dec edx
xchg ecx, edx
or ecx, 0x4931e23e
add edi, ecx
jmp 0x4b9c45
push 0x3f1f3fad
inc esi
add esi, 0x49401d1a
and edi, esi
shr ecx, 8
and ecx, 0x494169ba
bswap ecx
inc esi
sub edx, ecx
add ecx, edx
jmp 0x4b9a0a
call ebx
xchg edi, esi
sub esi, 0x494ccb5c
and ecx, edi
add ecx, edx
or ecx, edx
dec ecx
xchg esi, edi
add esi, ecx
sub edi, ecx
not esi
jmp 0x4b9c16
call fcn.004ba520
mov edi, edx
or edx, esi
add esi, edx
add esi, 0x4952109d
rol edx, 5
or ecx, edi
rol ecx, 0x15
xor edi, ecx
xor edi, ecx
mov edx, esi
mov edi, edx
sub esi, 0x49559067
add edi, ecx
inc esi
jmp 0x4b7351
mov ebx, 0x2774562b
and edi, ecx
shr esi, 0xe
xor edx, edi
sub esi, 0x495d9e0d
xchg ecx, edx
and ecx, 0x495e7a77
rol edi, 3
shl edi, 0x10
rol esi, 0x14
xor edx, 0x49604ed3
add edx, esi
or edi, ecx
add esi, 0x4961d7bb
not esi
jmp 0x4b7a2d
push 0x3f238cf8
xchg ecx, esi
xor edx, ecx
add edx, edi
and esi, ecx
xchg edi, esi
xor ecx, esi
or esi, edi
xor esi, 0x496cb5db
add esi, 0x496d28b9
jmp 0x4b905f
pop ebx
neg esi
or ecx, edi
and esi, 0x496ead47
bswap edx
add edx, ecx
or edx, esi
ror ecx, 0x1f
sub edx, ecx
not ecx
jmp 0x4ba2a1
push 0x3f259196
sub edx, esi
mov esi, ecx
xchg ecx, esi
rol edi, 0x16
inc edi
xor ecx, 0x499f9b32
add edx, esi
sub ecx, 0x49a072ed
xor edi, esi
jmp 0x4b9460
jmp loc.004bf000
push 0x3f253d9e
add edx, esi
add edx, 0x49b287c4
xchg ecx, esi
bswap esi
or ecx, edi
sub edi, 0x49b645b0
or edx, 0x49b6bad4
xor esi, 0x49b728c1
add edx, edi
or edi, esi
add ecx, edx
xor ecx, esi
sub ecx, 0x49b950b5
jmp 0x4b7a09
mov ebx, 0x123b2f04
inc esi
xor edx, esi
dec edi
add esi, 0x49d2896c
dec edx
sub esi, edx
neg edx
jmp 0x4b7534
push 0x3f1cb386
xchg edx, esi
add edi, edx
mov edi, 0x49f996c9
sub edi, esi
add esi, ecx
mov edi, 0x49faf382
jmp 0x4b7b60
call fcn.004ba520
xchg edi, esi
xor edx, esi
and ecx, edx
xor ecx, esi
xor edx, ecx
or edi, esi
sub esi, edi
jmp 0x4b7f60
push 0x3f278d4e
mov ecx, edi
xor edx, edi
xor edx, 0x4a01ce3a
xchg edx, esi
bswap edx
and ecx, esi
and esi, edi
xor edx, ecx
jmp 0x4b8caf
call fcn.004ba520
bswap ecx
mov esi, edi
xor edi, edx
or ecx, esi
inc edi
mov esi, edx
mov edx, esi
xchg esi, edx
jmp 0x4b7ea4
push 0x3f1c6416
or esi, edi
inc edi
sub edx, esi
bswap esi
mov edi, esi
mov edx, ecx
sub edx, ecx
ror edi, 0x10
xchg edi, esi
or edx, edi
or ecx, 0x4a2f898d
rol edi, 0xa
mov edx, 0x4a306913
jmp 0x4b7c70
mov ebx, 0x123b2f04
ror edi, 0x10
or edx, edi
or edi, edx
or esi, 0x4a3238e0
xor edx, ecx
xor ecx, edx
jmp 0x4b9d45
pop ebx
xchg ecx, esi
neg ecx
xor edi, edx
xor edi, 0x4a356ad5
add edi, 0x4a35e275
and ecx, 0x4a3657d2
add ecx, 0x4a36ddd5
inc esi
xchg edx, edi
jmp 0x4b902a
call ebx
and edx, esi
or esi, edx
sub edi, ecx
sub ecx, 0x4a56a51a
ror ecx, 5
or edx, esi
or edi, ecx
add ecx, edi
or edi, 0x4a5b218c
shl ecx, 0x1c
jmp 0x4b824a
push 0x3f2bbaa6
sub edi, esi
xchg ecx, edi
xor edx, esi
mov edx, 0x4a5d69e1
mov ecx, edx
xor edi, ecx
or esi, edx
dec ecx
xchg edi, edx
jmp 0x4b8620
push 0x3f1a72bd
add edx, 0x4a60297f
dec esi
and esi, edx
shl edx, 0x16
jmp 0x4b814a
call ebx
or ecx, esi
xor edi, ecx
xchg ecx, edx
inc edx
sub edx, esi
shl edx, 4
add esi, 0x4a751ce8
shl edi, 0x15
not esi
shl edx, 0xd
sub edi, edx
xor edx, ecx
jmp 0x4b8a61
mov ebx, 0x2774562b
xor edx, 0x4abf4337
xor esi, 0x4ac0029b
xchg esi, edi
jmp 0x4b7d78
pop ebx
mov edi, edx
or edi, 0x4ae703d6
sub ecx, edi
sub edx, 0x4ae7d87f
xchg ecx, esi
and edi, edx
neg edi
mov edi, edx
xchg edx, esi
xchg ecx, edx
sub edx, ecx
jmp 0x4b8b59
push 0x3f2c6f62
xor esi, 0x4b45b43e
or ecx, edi
ror ecx, 5
add esi, edx
xchg edi, esi
or edi, esi
xor esi, edi
inc edi
sub edi, edx
add ecx, edi
jmp 0x4b7846
call fcn.004ba520
add edx, esi
not esi
dec edx
xor ecx, edi
and edx, edi
sub esi, edx
sub edi, esi
mov esi, edx
bswap esi
rol esi, 0x12
add edx, 0x4b94db4b
add edx, 0x4b95158d
xchg edi, edx
xor esi, 0x4b959709
jmp 0x4b9b07
push 0x3f2c140c
or ecx, edi
add edx, ecx
neg edi
mov esi, 0x4bb50001
and ecx, 0x4bb57a06
sub edx, ecx
xchg esi, ecx
jmp 0x4b82df
push 0x3f1e9794
or edi, edx
sub edx, 0x4c0425f6
ror edi, 8
shl edi, 0x1e
neg ecx
add ecx, 0x4c0609ec
and esi, edi
and edi, edx
mov ecx, 0x4c0754b4
jmp 0x4ba1e5
pop ebx
dec ecx
xchg edi, ecx
and edi, 0x4c4cacf4
and ecx, edi
xor edx, esi
sub edi, ecx
sub edx, ecx
jmp 0x4b7aa4
pop ebx
or esi, ecx
or ecx, esi
xor edi, ecx
add edi, 0x4c718e9a
xor esi, edx
xchg ecx, edi
xor edx, 0x4c72de28
ror esi, 0x17
bswap edi
add ecx, esi
add edx, esi
add edi, esi
xchg edx, edi
shr esi, 9
jmp 0x4b7d91
pop ebx
shl edi, 0x18
shr edi, 0x12
mov edi, 0x4c7e6aa1
and edx, 0x4c7ed690
or esi, edx
shl edx, 7
xor ecx, edi
xchg esi, edx
rol ecx, 6
shl esi, 0x16
or edi, ecx
jmp 0x4b78ae
push 0x3f27dcc7
xor ecx, esi
add ecx, esi
mov edi, ecx
or esi, 0x4cae32d9
and esi, edx
jmp 0x4b9529
pop ebx
rol esi, 0x1f
neg esi
xor esi, 0x4d4908e9
add ecx, edi
mov esi, edi
and edx, edi
shl edx, 2
add esi, edx
add edi, ecx
jmp 0x4b8883
mov ebx, 0x2774562b
and edi, ecx
xchg ecx, edi
add esi, edx
and esi, ecx
add esi, edx
sub esi, ecx
or edx, 0x4d53a751
xchg esi, ecx
shr ecx, 0xc
add esi, ecx
and edi, ecx
and edx, ecx
xor edi, edx
jmp 0x4b7c8c
pop ebx
or edx, esi
not ecx
shr esi, 9
mov ecx, edi
mov ecx, esi
sub edi, ecx
neg edx
sub edi, 0x4d706ec7
shr ecx, 0xa
mov edi, edx
sub ecx, 0x4d71acb0
nop
mov esi, edx
or ecx, edx
jmp 0x4b8b9b
call ebx
xchg ecx, esi
add edx, esi
ror ecx, 1
mov edi, ecx
mov esi, edi
add esi, edi
nop
jmp 0x4b7dd8
mov ebx, 0x123b2f04
mov esi, 0x4defbedd
xor edi, ecx
and ecx, edi
sub edi, ecx
xor ecx, esi
or ecx, edx
mov esi, 0x4df25730
dec edx
ror esi, 1
and edi, 0x4df3a60d
add edi, ecx
ror ecx, 0xf
inc ecx
jmp 0x4b84e3
push 0x3f2832d4
shl edx, 0x15
bswap ecx
add edx, ecx
and edx, ecx
or esi, ecx
mov edi, edx
sub esi, edi
rol edi, 0x19
or esi, 0x4e1113af
jmp 0x4ba1c0
pop ebx
or edi, ecx
xor edi, esi
and edi, edx
and esi, edx
xchg esi, ecx
and esi, ecx
and esi, 0x4e5b1b88
mov ecx, 0x4e5b8b5d
xor edi, edx
and esi, ecx
jmp 0x4b7745
push 0x3f1a0d1d
mov edx, ecx
inc ecx
bswap edx
xchg esi, edx
xchg edx, edi
and esi, ecx
add esi, edi
xor esi, edi
or edi, ecx
or edi, 0x4eab04b5
or edi, esi
inc edx
xchg ecx, esi
jmp 0x4b7ee7
mov ebx, 0x2774562b
and edi, esi
xchg edi, ecx
inc ecx
xor edi, esi
shl edi, 0xf
sub edi, ecx
mov esi, edi
and ecx, esi
inc edx
and edx, edi
mov edx, 0x4ed022df
xchg edx, edi
rol esi, 3
mov edx, 0x4ed1778c
jmp 0x4b7802
call ebx
not ecx
or edi, ecx
sub edx, 0x4ef14339
and edx, ecx
bswap edi
jmp 0x4b78d2
pop ebx
and ecx, edx
xchg edx, edi
and edi, ecx
sub edx, edi
xor edx, esi
xchg edi, ecx
inc ecx
and edi, 0x4f1fbb55
not ecx
and ecx, 0x4f20a899
mov edx, 0x4f2114b3
bswap esi
shl ecx, 7
mov edx, ecx
add edi, ecx
jmp 0x4b9710
pop ebx
sub edi, 0x4f239578
ror esi, 0x10
sub edi, ecx
sub ecx, edi
mov edi, ecx
mov edx, 0x4f25b495
xchg edx, edi
and ecx, edx
sub esi, ecx
and edx, edi
jmp 0x4b7ec9
call fcn.004ba520
or edx, ecx
or edx, 0x4f5c0b8f
and edi, ecx
xchg edx, esi
xor edi, edx
add ecx, edx
xor edx, esi
or edi, edx
mov esi, ecx
jmp 0x4b77e4
pop ebx
add edi, edx
mov esi, 0x4fe8b7a6
xor edi, ecx
and edi, ecx
mov edi, esi
or esi, 0x4fea7c42
sub edx, 0x4feaea6e
add edi, esi
jmp 0x4b913a
push 0x3f2883c8
or ecx, esi
add edi, esi
shl ecx, 0x1f
or esi, edx
xor edx, 0x50047890
sub ecx, esi
not edx
inc edx
add edi, esi
xor edx, edi
or ecx, edx
dec ecx
jmp 0x4b7dbd
push 0x3f1ee949
sub edx, esi
and ecx, edi
sub esi, 0x500af2a1
or ecx, esi
sub esi, ecx
not esi
or ecx, esi
or edi, edx
mov ecx, esi
ror esi, 0x18
dec esi
or edx, ecx
xor edx, 0x500f43c2
add edi, 0x500fa924
dec ecx
jmp 0x4b779f
pop ebx
add edi, 0x50266150
xchg edx, edi
sub esi, ecx
xchg esi, ecx
and esi, ecx
sub esi, edx
add edi, ecx
not edi
add edx, esi
xchg ecx, esi
jmp 0x4b7cb7