Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetCapture
cmp eax, 0xffffff07
jne 0x401093
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtUnlockFile
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtAllocateUserPhysicalPages
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xfffffefb
jne 0x40113a
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.shell32.dll_DragFinish
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtUnlockFile
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtAllocateUserPhysicalPages
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xffffff06
jne 0x4011be
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtUnlockFile
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtUnlockFile
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtUnlockFile
call sub.shell32.dll_DragFinish
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtUnlockFile
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xffffff03
jne 0x40122e
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.shell32.dll_DragFinish
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.ntdll.dll_RtlFindActivationContextSectionString
call sub.ntdll.dll_NtAllocateUserPhysicalPages
call sub.shell32.dll_DragFinish
call sub.shell32.dll_DragFinish
call sub.ntdll.dll_NtAllocateUserPhysicalPages
ret
jmp 0x4753b4
rol ebx, 0x1e
jmp 0x47650c
push 0x30e40661
mov edx, 0x35252f0a
xchg ecx, esi
or edx, esi
xchg ebx, esi
bswap esi
sub ebx, ecx
or edx, 0x3527840a
or esi, ebx
bswap edx
or edx, ecx
jmp 0x477f76
push 0x30df7dfa
rol esi, 0x17
not ebx
ror esi, 0x1c
add ecx, ebx
mov esi, edx
xchg ecx, edx
jmp 0x476f14
call fcn.00475e24
sub esi, ecx
xchg esi, edx
sub ebx, esi
mov ebx, ecx
mov esi, ecx
add edx, ebx
mov esi, ecx
jmp 0x47708d
push 0x30e0c026
bswap ecx
not ebx
or ebx, esi
sub esi, ebx
and edx, ecx
rol ecx, 0x13
sub ecx, edx
dec ecx
and esi, ecx
ror ebx, 9
jmp 0x477452
pop edi
sub ebx, 0x37a2c98f
and ebx, esi
shr ecx, 0x18
dec ebx
mov edx, ecx
and edx, esi
jmp 0x478c10
push 0x30dcaf22
ror esi, 0x13
mov ecx, ebx
add ebx, ecx
and ebx, esi
xchg ebx, esi
and edx, ebx
sub ebx, ecx
or ebx, edx
mov esi, 0x37f7a4f0
add edx, ebx
jmp 0x476bec
push 0x30dd0569
xor edx, ecx
or esi, edx
or ecx, esi
and ecx, ebx
xor ebx, 0x38fda0d1
ror ecx, 8
sub esi, ebx
xchg esi, ebx
add ebx, esi
or ecx, edx
or ebx, edx
sub edx, 0x3900698b
sub ebx, ecx
inc ebx
shl edx, 1
or ecx, ebx
jmp 0x477891
push 0x30e3afd0
mov edx, ecx
mov edx, ecx
ror ebx, 0x1f
xchg ecx, edx
inc ebx
or ebx, ecx
xchg edx, esi
mov ebx, 0x3913980c
sub edx, esi
xor edx, ebx
or ebx, edx
add ebx, 0x39151c06
and esi, 0x39158140
jmp 0x475487
push 0x30dfce9b
or esi, ebx
dec ecx
xchg edx, ebx
bswap esi
or ebx, ecx
jmp 0x4778c5
call edi
and ebx, ecx
neg edx
and ecx, 0x398170e5
shl ebx, 0xa
xor edx, esi
or ebx, 0x39821888
xor edx, ebx
mov ecx, edx
add esi, ebx
xchg ecx, edx
nop
jmp 0x477f20
mov edi, 0x123b2f04
xchg esi, edx
xchg edx, ebx
xor ebx, esi
sub edx, ecx
or ebx, edx
xchg ebx, esi
xor esi, ecx
xor ebx, edx
and ecx, 0x3a0a0747
add ecx, esi
or ebx, edx
mov ebx, esi
add esi, ecx
jmp 0x475ba4
pop edi
nop
add ebx, esi
and ebx, edx
shl ebx, 0xc
jmp 0x47631b
push 0x30dd518c
and ebx, edx
inc ebx
ror ebx, 0x11
and ecx, esi
or ebx, ecx
sub esi, edx
or ebx, edx
and ebx, ecx
xor ecx, esi
jmp 0x477afb
push 0x30e01f3a
or esi, edx
sub ebx, edx
add ecx, ebx
shr ecx, 0xa
dec ebx
mov ebx, edx
xor ecx, esi
xchg esi, edx
shl ebx, 0x14
mov esi, ebx
jmp 0x477c25
pop edi
xchg ebx, edx
add esi, ecx
sub ebx, esi
shr edx, 1
or esi, edx
xor ecx, 0x3b22c06c
xchg ecx, ebx
jmp 0x478414
mov edi, 0x123b2f04
rol ebx, 1
and ebx, edx
and edx, ecx
and edx, esi
sub ecx, edx
sub ebx, 0x3b4ad2ab
add ecx, edx
jmp 0x478807
push 0x30e06a14
bswap esi
ror esi, 0xd
xchg esi, ecx
mov ecx, edx
add esi, 0x3b718688
xchg ebx, edx
and esi, ecx
rol esi, 0x1b
xor esi, ebx
and ebx, 0x3b751a5c
xchg ecx, ebx
jmp 0x476019
pop edi
sub edx, 0x3b782b27
shr ecx, 7
sub esi, ecx
and ebx, 0x3b7961d6
mov ecx, ebx
xor esi, ebx
bswap ebx
add ecx, esi
not ecx
dec ebx
not esi
and ecx, 0x3b7ebb60
or esi, 0x3b7f1d17
sub edx, ecx
neg ebx
jmp 0x4779b1
pop edi
mov ecx, edx
and edx, 0x3b84842e
xor ebx, 0x3b84ec72
add ebx, ecx
and esi, 0x3b85ddd7
xor esi, edx
xor esi, ebx
mov edx, ebx
or ecx, esi
mov edx, ebx
not ebx
jmp 0x477744
pop edi
bswap ebx
xor esi, 0x3bdebf26
mov ecx, esi
sub ebx, esi
sub esi, 0x3bdfea67
jmp 0x477cbe
mov edi, 0x123b2f04
xor edx, 0x3bea8faa
sub ecx, edx
xor ecx, ebx
xor ecx, esi
not esi
and ecx, 0x3bec7fa9
add esi, ebx
mov esi, ebx
sub ecx, 0x3bedaf16
add ecx, esi
jmp 0x4785d9
pop edi
add ebx, esi
xor ebx, esi
add esi, ecx
sub esi, 0x3cb771b3
sub edx, ebx
mov ebx, 0x3cb837a8
shl ecx, 0x11
sub esi, 0x3cc11e29
xchg esi, ecx
jmp 0x475719
jmp loc.0047b36a
call fcn.00475e24
xor ebx, ecx
add esi, ebx
mov ecx, edx
shr ecx, 1
sub esi, 0x3d745a9f
rol esi, 6
xchg edx, ebx
mov esi, edx
mov ecx, edx
and ebx, esi
jmp 0x478a03
call edi
shr ecx, 0x1b
xor esi, ebx
mov ecx, 0x3dc3bc14
rol esi, 0x1a
inc ebx
xchg ebx, edx
shl esi, 0x17
xor ebx, esi
mov ebx, 0x3dc6552e
sub esi, 0x3dc6b825
rol ecx, 0x1a
and edx, ebx
jmp 0x477c6a
pop edi
xchg ebx, edx
rol ecx, 0x1a
or ecx, 0x3e0f249e
and ebx, esi
not ebx
dec ecx
xor esi, 0x3e10b468
neg esi
rol edx, 0x13
or esi, ebx
or esi, 0x3e135d16
nop
shl ebx, 0xe
jmp 0x476c62