Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff02
jne 0x401066
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff1a
jne 0x401112
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff29
jne 0x4011b9
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff2f
jne 0x40121f
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
ret
jmp 0x478634
xor ecx, edi
mov edx, 0xd1278c5e
jmp 0x47994f
pop ecx
sub ebx, edx
or esi, edx
not esi
xor edi, 0xd7586d9e
dec edi
and edx, esi
sub ebx, edx
or esi, edx
mov edi, edx
jmp 0x478f08
push 0xd139e1db
sub ebx, 0xd75ee52d
xor edx, edi
dec esi
inc edx
sub esi, ebx
ror edx, 0x10
neg edx
shl edx, 0xa
sub edx, ebx
or edi, edx
jmp 0x47ae75
push 0xd131e7f1
add edi, 0xd7806bca
xchg ebx, edi
or esi, edx
or edi, 0xd781133c
neg edi
add edi, ebx
jmp 0x47b49e
pop ecx
and ebx, 0xd781c388
add esi, edi
and ebx, edx
xchg edx, edi
not esi
xchg edx, edi
ror edi, 7
shl esi, 0x16
xor esi, edx
or esi, 0xd783a048
jmp 0x4787d0
call ecx
not edi
sub edx, 0xd7a38e7a
shl edx, 9
shr edi, 0x1f
xchg esi, edx
bswap esi
mov esi, edx
xchg edi, ebx
jmp 0x479c52
pop ecx
dec esi
dec esi
dec ebx
xor edx, esi
and edi, esi
inc ebx
sub esi, edi
shr ebx, 4
mov ebx, esi
jmp 0x47abdd
call fcn.0047b2be
and esi, ebx
sub ebx, esi
add esi, 0xd82bb6bb
xor ebx, 0xd82c366b
sub esi, edx
sub edi, 0xd82d0661
add esi, 0xd82d6406
or edx, 0xd82dd886
shr esi, 7
xchg ebx, esi
xchg esi, edx
sub edi, ebx
jmp 0x479a61
call fcn.0047b2be
sub ebx, esi
mov esi, edi
inc edi
sub edx, esi
or esi, 0xd8340c36
sub edx, esi
sub edi, esi
jmp 0x47a304
mov ecx, 0x123b2f04
mov edx, ebx
neg edx
mov esi, 0xd84c5b42
not ebx
add edi, edx
mov edi, edx
sub edx, ebx
add esi, 0xd84dcb6b
mov edx, edi
or edx, 0xd84e2cd3
or esi, edx
xor esi, edi
add ebx, esi
xor ebx, edi
dec esi
jmp 0x47ac96
push 0xd13585ed
xchg ebx, edi
sub ebx, 0xd865d6ba
xchg ebx, esi
dec edi
and ebx, esi
sub esi, edx
dec esi
not ebx
ror esi, 0xb
dec esi
jmp 0x47a56f
push 0xd13994ae
ror edx, 0x11
or edx, 0xd8a680f3
or edi, ebx
xchg edi, esi
xor edi, edx
xor esi, edi
inc ebx
and edx, ebx
jmp 0x478808
pop ecx
inc edi
nop
inc ebx
xor esi, ebx
add edx, 0xd8f0dd9c
sub esi, edi
xchg ebx, edi
jmp 0x47b368
mov ecx, 0x2774562b
sub edi, 0xd903a058
sub ebx, esi
mov esi, edi
and ebx, esi
mov ebx, edx
xor edx, edi
mov edx, edi
and esi, edx
xor edi, esi
inc edx
or edi, edx
mov esi, edi
or esi, edx
jmp 0x47a51d
call ecx
xchg ebx, edi
xor edx, edi
sub esi, ebx
or edi, esi
mov ebx, edx
xor edx, ebx
jmp 0x47948b
pop ecx
neg esi
or esi, edi
not ebx
sub esi, ebx
sub edx, ebx
add esi, ebx
jmp 0x478dfc
pop ecx
mov edx, 0xd9947b77
add esi, edx
or edi, 0xd994dda6
xor edi, edx
add ebx, edi
or ebx, 0xd99581f3
jmp 0x479b05
push 0xd12e9b8f
not edi
add edi, esi
not edi
add edi, ebx
mov edx, 0xd9969f03
add edx, ebx
or edi, edx
rol edx, 0xd
and esi, 0xd99824e1
jmp 0x47a642
push 0xd13da9ff
xchg edi, edx
and esi, edi
xchg edx, edi
neg ebx
xor edi, edx
add edi, ebx
jmp 0x47b585
push 0xd12e4231
xchg esi, edx
mov ebx, esi
and edx, 0xda194308
mov edx, edi
add ebx, esi
dec edi
sub ebx, esi
shr edi, 0xa
xchg edx, esi
xchg edx, edi
and ebx, esi
mov edx, 0xda1cee93
sub edi, edx
jmp 0x4794a8
call ecx
neg esi
or edi, esi
sub edi, ebx
shr esi, 0x13
jmp 0x47ac69
pop ecx
or esi, edi
or edx, edi
xor edx, edi
add edx, esi
add edi, 0xda3d14ff
xor esi, 0xda3d4e1d
xchg edi, edx
shl ebx, 0x16
rol ebx, 0x1e
dec esi
xor ebx, edi
xchg esi, ebx
and edi, 0xda3ecaea
jmp 0x47a0f4
push 0xd1371d76
shl edx, 0x18
sub ebx, edi
xor edx, ebx
sub ebx, edx
xchg edi, ebx
xor esi, 0xda4b6dfb
mov esi, 0xda4bc4ad
mov edx, 0xda4c3c72
not edi
dec esi
jmp 0x47aa1e
pop ecx
xor esi, edx
or esi, 0xda612487
or ebx, esi
xor edi, esi
and esi, edi
xor esi, 0xda61f656
xchg ebx, edi
or ebx, edx
ror edx, 9
dec ebx
inc edx
mov edx, esi
and ebx, edx
jmp 0x479b88
mov ecx, 0x2774562b
and ebx, esi
add esi, 0xda88a504
dec ebx
xor edx, 0xda8aa034
shr edx, 4
shl esi, 4
rol edx, 9
jmp 0x478cd2
pop ecx
and edi, esi
or ebx, edx
mov edx, ebx
and edx, esi
sub edi, esi
neg edx
mov edx, esi
xor edx, 0xda9094f6
xor edi, ebx
or esi, edi
or edi, edx
or ebx, 0xda916771
jmp 0x478aeb
pop ecx
or esi, edi
shl edi, 0x11
and ebx, edx
neg ebx
or esi, edx
xor ebx, 0xdb06018b
sub edx, edi
jmp 0x47b35a
pop ecx
ror edi, 0xa
mov edx, edi
mov esi, edx
and edi, 0xdb4ec256
add edx, esi
shl edx, 0x11
mov edi, edx
or edx, 0xdb50671f
rol ebx, 0x17
shl esi, 9
mov edi, edx
sub esi, edx
mov edx, ebx
shl edi, 3
jmp 0x479f6b
pop ecx
ror edi, 0xf
shr ebx, 0x1b
not edx
or edi, ebx
xor edi, 0xdb6ecd95
shr edx, 0x11
nop
sub ebx, edx
add esi, 0xdb7074a3
sub edx, esi
mov edi, edx
add ebx, esi
shl edi, 0xa
and edi, 0xdb72532a
xchg edi, edx
jmp 0x47ab4a
call ecx
add edx, esi
nop
xor edi, ebx
or edi, ebx
and ebx, edx
or esi, edi
jmp 0x4788a1
push 0xd13191fe
or esi, edi
xchg esi, ebx
add esi, edx
or ebx, edi
add ebx, edi
or edi, esi
xor edx, esi
sub edi, ebx
jmp 0x478883
call fcn.0047b2be
mov ebx, 0xdca1f96f
mov esi, 0xdca25bb3
mov ebx, edx
shl edi, 0xf
sub edx, esi
sub esi, ebx
sub ebx, esi
xor edx, ebx
sub edi, edx
xor edi, ebx
jmp 0x47939f
call ecx
mov edi, esi
mov edx, edi
xor edi, 0xdcaaf82f
mov edi, edx
ror edi, 0x13
mov esi, ebx
mov ebx, edi
and edi, esi
jmp 0x47a1b5
mov ecx, 0x2774562b
sub ebx, esi
or esi, edx
and esi, 0xdcae3242
xor edx, 0xdcae8fa0
neg edx
mov esi, edi
xor ebx, esi
xchg edi, esi
xchg edi, edx
add ebx, 0xdcb13217
shl esi, 4
nop
add esi, edi
jmp 0x47b00b
push 0xd1329d7b
xchg ebx, esi
and edi, edx
and esi, edi
dec edx
bswap ebx
bswap ebx
and edx, esi
mov ebx, esi
or edx, edi
jmp 0x479d82
push 0xd12eeb58
or edi, edx
xor ebx, edx
add edx, esi
sub edi, esi
or esi, edx
sub esi, edx
sub ebx, esi
jmp 0x478d65
push 0xd13a8116
xor edx, 0xdd41fac0
sub ebx, 0xdd427aff
xor esi, edi
jmp 0x47b0fc
push 0xd1376c06
xchg edx, esi
mov esi, ebx
bswap ebx
or ebx, 0xdd75f250
and edx, esi
jmp 0x47b42e
pop ecx
xor esi, 0xdda8dc59
xchg edi, edx
xor ebx, 0xddaa610b
or esi, edi
or ebx, edi
xchg ebx, esi
and edi, edx
add edx, esi
mov ebx, edx
or esi, edi
shl esi, 0x12
xor edi, 0xddaeaa31
jmp 0x47910e
pop ecx
rol esi, 0xe
neg edx
inc ebx
sub ebx, edx
mov esi, ebx
or edx, edi
and edi, ebx
sub ebx, edx
xchg edx, esi
neg esi
xchg edi, edx
add edx, esi
and esi, 0xddcdba0a
jmp 0x4793ce
pop ecx
neg edi
xchg edx, ebx
sub edx, ebx
shl ebx, 0xe
mov ebx, 0xdde103ac
xchg edx, ebx
sub edx, ebx
inc esi
xchg esi, edx
xor esi, ebx
xor ebx, 0xdde4f062
xor edi, esi
and edi, ebx
sub edi, 0xdde61a26
jmp 0x479da4
call fcn.0047b2be
or edx, esi
xor ebx, 0xdde7b937
ror edx, 3
shl edi, 0x1d
not esi
ror edx, 1
or ebx, edi
xor esi, edx
shr esi, 7
jmp 0x47a553
push 0xd13a36ff
nop
mov edx, edi
xchg edx, edi
neg edi
mov edi, edx
and edx, ebx
xchg ebx, edx
bswap edx
not edx
xor edi, ebx
jmp 0x47a8a9
call fcn.0047b2be
and edx, ebx
add edx, esi
sub edi, esi
sub esi, 0xdef8766a
add edx, esi
and esi, edi
sub esi, edx
dec edx
add edi, edx
add esi, 0xdefc43df
and edi, edx
sub edi, 0xdeff8cbd
jmp 0x4789de
push 0xd13ac9f5
or ebx, edx
xor edi, ebx
shl esi, 0x16
and esi, ebx
shr esi, 0xb
ror esi, 0x1d
jmp 0x4791d7
pop ecx
or edi, esi
not ebx
add edi, edx
sub ebx, edi
jmp 0x479588
push 0xd131441d
sub edx, esi
rol ebx, 0x14
xor edx, 0xdfe521cb
and esi, 0xdfe5ca57
and edi, edx
xor esi, 0xdfe7674c
add ebx, esi
jmp 0x47a4b3
mov ecx, 0x2774562b
xchg edx, ebx
shr esi, 0x10
add ebx, edi
xchg ebx, esi
and esi, ebx
jmp 0x478d09
push 0xd132525d
xor edi, 0xe045ee31
inc edx
xor ebx, edx
sub esi, edi
and esi, edx
and ebx, esi
xor ebx, edi
jmp 0x47a59f
jmp loc.00480000
mov ecx, 0x123b2f04
xor esi, edx
xor edi, 0xe0e4ece4
xchg edx, esi
ror ebx, 0x1f
inc edx
xor edi, ebx
shl esi, 1
or edx, ebx
mov esi, 0xe0ec970e
sub edi, esi
mov esi, 0xe0ef9dc6
add ebx, esi
sub ebx, 0xe0f22a7e
xchg esi, ebx
xor edi, edx
jmp 0x47b573