Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
not esi
or edx, ecx
call sub.user32.dll_GetDesktopWindow
and esi, ecx
and edx, edi
rol esi, 0x15
cmp eax, 0xffffff0b
jne 0x4010a8
call sub.user32.dll_SetWindowLongW
call sub.kernel32.dll_GetModuleHandleExA
call sub.oleaut32.dll_VarUI8FromUI1
call sub.oleaut32.dll_VarUI8FromUI1
call sub.user32.dll_SetWindowLongW
call sub.user32.dll_SetWindowLongW
call sub.kernel32.dll_GetModuleHandleExA
call sub.oleaut32.dll_VarUI8FromUI1
call sub.ntdll.dll_RtlStatMemoryStream
call sub.ntdll.dll_RtlStatMemoryStream
call sub.kernel32.dll_GetModuleHandleExA
call sub.ntdll.dll_RtlStatMemoryStream
call sub.kernel32.dll_GetModuleHandleExA
call sub.user32.dll_SetWindowLongW
call sub.kernel32.dll_GetModuleHandleExA
call sub.kernel32.dll_GetModuleHandleExA
call sub.kernel32.dll_GetModuleHandleExA
call sub.kernel32.dll_GetModuleHandleExA
call sub.kernel32.dll_GetModuleHandleExA
call sub.kernel32.dll_GetModuleHandleExA
call sub.kernel32.dll_GetModuleHandleExA
call sub.ntdll.dll_RtlStatMemoryStream
call sub.ntdll.dll_RtlStatMemoryStream
call sub.oleaut32.dll_VarUI8FromUI1
call sub.oleaut32.dll_VarUI8FromUI1
call sub.kernel32.dll_GetModuleHandleExA
call sub.kernel32.dll_GetModuleHandleExA
call sub.user32.dll_SetWindowLongW
ret
or edx, edi
or edi, 0x5e05e72b
call sub.kernel32.dll_GetVersion
add esi, ecx
xor ecx, esi
sub esi, edx
add edi, ecx
add ecx, esi
xor edx, 0x5e08a1c0
sub esi, edx
add edi, edx
cmp eax, 0xffffff1a
jne 0x401166
call sub.user32.dll_SetWindowLongW
call sub.user32.dll_SetWindowLongW
call sub.user32.dll_SetWindowLongW
call sub.ntdll.dll_RtlStatMemoryStream
call sub.user32.dll_SetWindowLongW
call sub.ntdll.dll_RtlStatMemoryStream
call sub.ntdll.dll_RtlStatMemoryStream
call sub.kernel32.dll_GetModuleHandleExA
call sub.ntdll.dll_RtlStatMemoryStream
call sub.oleaut32.dll_VarUI8FromUI1
call sub.oleaut32.dll_VarUI8FromUI1
call sub.user32.dll_SetWindowLongW
call sub.user32.dll_SetWindowLongW
call sub.kernel32.dll_GetModuleHandleExA
call sub.user32.dll_SetWindowLongW
call sub.oleaut32.dll_VarUI8FromUI1
call sub.user32.dll_SetWindowLongW
call sub.user32.dll_SetWindowLongW
call sub.user32.dll_SetWindowLongW
call sub.oleaut32.dll_VarUI8FromUI1
call sub.user32.dll_SetWindowLongW
call sub.oleaut32.dll_VarUI8FromUI1
call sub.kernel32.dll_GetModuleHandleExA
call sub.ntdll.dll_RtlStatMemoryStream
call sub.kernel32.dll_GetModuleHandleExA
call sub.kernel32.dll_GetModuleHandleExA
call sub.user32.dll_SetWindowLongW
call sub.ntdll.dll_RtlStatMemoryStream
call sub.kernel32.dll_GetModuleHandleExA
ret
xor esi, edx
add edx, 0x5e0dab29
add edi, edx
sub edx, edi
xchg ecx, edx
add edx, 0x5e0f618a
shr edi, 4
and esi, 0x5e10441e
call sub.user32.dll_GetDesktopWindow
xchg edx, ecx
cmp eax, 0xffffff0f
jne 0x401204
call sub.kernel32.dll_GetModuleHandleExA
call sub.user32.dll_SetWindowLongW
call sub.kernel32.dll_GetModuleHandleExA
call sub.oleaut32.dll_VarUI8FromUI1
call sub.oleaut32.dll_VarUI8FromUI1
call sub.ntdll.dll_RtlStatMemoryStream
call sub.oleaut32.dll_VarUI8FromUI1
call sub.kernel32.dll_GetModuleHandleExA
call sub.oleaut32.dll_VarUI8FromUI1
call sub.ntdll.dll_RtlStatMemoryStream
call sub.kernel32.dll_GetModuleHandleExA
call sub.user32.dll_SetWindowLongW
call sub.kernel32.dll_GetModuleHandleExA
call sub.kernel32.dll_GetModuleHandleExA
call sub.oleaut32.dll_VarUI8FromUI1
call sub.oleaut32.dll_VarUI8FromUI1
call sub.kernel32.dll_GetModuleHandleExA
call sub.user32.dll_SetWindowLongW
call sub.kernel32.dll_GetModuleHandleExA
call sub.oleaut32.dll_VarUI8FromUI1
call sub.user32.dll_SetWindowLongW
call sub.kernel32.dll_GetModuleHandleExA
ret
jmp 0x4b72d3
shl edx, 0x1d
mov esi, 0x5f41bc2f
mov esi, edx
or edx, esi
jmp 0x4ba69f
push 0x5f5bd2e3
and ebx, edi
or edx, esi
sub edi, 0x66274d63
or edx, esi
add esi, ebx
jmp 0x4b95fe
mov ecx, 0x2774562b
sub edi, ebx
mov edx, ebx
shl edx, 0xa
mov edi, 0x66471378
or esi, ebx
and ebx, 0x6647aae9
ror edx, 0xb
xor esi, ebx
xchg edi, edx
add esi, edx
xchg ebx, esi
jmp 0x4b79ab
pop ecx
rol edi, 9
and edx, edi
add esi, edi
or edx, esi
or esi, edx
nop
or edx, 0x667c2af1
and ebx, 0x667ca307
bswap edi
or esi, edx
mov ebx, edx
sub edx, edi
jmp 0x4b7f5f
call fcn.004b9edb
sub esi, ebx
bswap ebx
add edx, 0x66b71168
add ebx, edx
jmp 0x4b8032
push 0x5f5efc56
mov edi, ebx
and esi, edi
xchg ebx, edi
xor ebx, 0x66b96e0b
and ebx, edi
xor esi, 0x66ba8224
sub esi, 0x66baf3e4
or ebx, esi
mov edi, esi
mov edi, ebx
sub edi, ebx
and edi, 0x66bd1493
dec edi
jmp 0x4b7f38
pop ecx
sub esi, ebx
inc edx
rol edi, 5
mov ebx, edx
or edx, 0x677b214b
xor edx, edi
sub esi, ebx
not esi
add ebx, edx
add edx, esi
jmp 0x4ba7e1
push 0x5f4fed81
or edx, esi
sub esi, edi
xchg ebx, edi
xchg ebx, edx
and esi, edx
inc edx
sub edx, ebx
xor edx, ebx
jmp 0x4ba944
mov ecx, 0x2774562b
or edx, 0x684e0efb
xchg edi, esi
add edx, 0x684eef97
sub edx, ebx
add ebx, 0x684fb62e
mov edx, ebx
shr edi, 0x19
neg ebx
jmp 0x4b8c1b
pop ecx
xchg edi, esi
or edi, edx
add edi, esi
or edi, esi
ror esi, 0x17
or edi, esi
xor ebx, edi
bswap ebx
and esi, edi
xchg ebx, esi
xchg ebx, edi
mov esi, 0x6854512c
add esi, edx
jmp 0x4b9e47
push 0x5f4a3846
xchg ebx, edi
xor esi, ebx
bswap edx
mov ebx, edx
neg edi
rol edx, 0x19
jmp 0x4b851e
call ecx
xchg esi, edx
xor edx, ebx
xor edx, ebx
or edx, 0x686a8067
not ebx
mov edx, edi
or esi, edx
sub esi, edi
and edx, esi
add ebx, edx
sub ebx, esi
mov esi, 0x686e3352
add edi, 0x686ea670
xor edi, esi
sub ebx, edi
jmp 0x4b969b
call fcn.004b9edb
shr ebx, 2
or ebx, 0x687d1cd4
xchg ebx, edi
add esi, edi
or edi, 0x687e5d88
add esi, ebx
add esi, edi
xchg edx, edi
or edx, 0x688020ae
and esi, edx
xor ebx, edx
sub edi, esi
rol ebx, 0xe
jmp 0x4b8b75
call ecx
xor edx, 0x68ce9b4b
or esi, 0x68cf0a57
mov edi, 0x68cf790e
xor edx, edi
and edi, 0x68d0615c
add edi, esi
add edx, edi
or ebx, edi
xchg edx, esi
jmp 0x4ba836
pop ecx
mov ebx, edx
sub esi, edx
or edi, edx
or edi, edx
and edx, esi
ror esi, 0x11
add ebx, edi
shr edi, 0xf
jmp 0x4b9aec
pop ecx
and ebx, edi
and ebx, edi
sub ebx, esi
xchg esi, edi
dec edi
add ebx, edx
mov esi, 0x691c8d9c
dec ebx
or edi, 0x691d6dfc
sub edi, esi
and edx, esi
jmp 0x4b79c1
push 0x5f4a80e5
xor edx, 0x693a13b8
xor edi, 0x693a810c
or edi, esi
inc edi
mov edi, edx
mov edx, esi
jmp 0x4ba785
push 0x5f49aa32
and edx, ebx
or edx, edi
ror edx, 0xa
xchg ebx, edi
xchg esi, edx
sub edx, edi
xor edi, 0x69d37086
mov edi, esi
sub ebx, edx
jmp 0x4ba6d1
pop ecx
sub ebx, esi
or esi, edx
mov edx, 0x69f226e5
bswap esi
xor ebx, edx
xor edi, edx
or ebx, edi
jmp 0x4b97c2
call ecx
or ebx, edi
xor edx, edi
shl esi, 8
sub edx, ebx
not ebx
bswap esi
or edx, 0x6a5ecdcc
rol ebx, 9
and edx, 0x6a5fc6da
and esi, ebx
mov edx, ebx
add ebx, esi
add edx, edi
add edi, esi
jmp 0x4b7a84
jmp loc.004be000
call fcn.004b9edb
bswap ebx
rol esi, 0x1d
nop
dec esi
not edi
sub edx, ebx
xor esi, edi
sub esi, ebx
sub edx, edi
or esi, edx
jmp 0x4b8207
pop ecx
sub edx, 0x6bea0c80
sub edi, edx
xchg edi, edx
xor edx, esi
xor esi, edi
or ebx, esi
add esi, 0x6bec8337
or edi, esi
xchg ebx, edx
neg edi
sub edx, esi
jmp 0x4b9fc3
push 0x5f5c1ec4
sub ebx, edi
xor ebx, esi
or ebx, edi
or edi, ebx
mov edi, ebx
add edx, 0x6c1d775d
not edx
jmp 0x4ba96a
pop ecx
sub ebx, esi
and esi, edx
xchg edi, esi
mov esi, edi
add edi, 0x6c4566f6
inc edx
jmp 0x4b7889
pop ecx
ror edx, 0x14
bswap edi
xor edi, 0x6c672fcc
or esi, ebx
bswap esi
jmp 0x4b9fac
push 0x5f5b829d
or ebx, edi
ror edx, 7
or edx, edi
ror ebx, 7
add edi, 0x6cf64040
and esi, 0x6cf67df4
xchg edi, esi
xor edi, 0x6cf6fe2c
or edi, ebx
inc ebx
rol esi, 0xb
mov edi, esi
xchg edx, edi
xchg edi, edx
or ebx, esi
mov ebx, edi
jmp 0x4b7644
push 0x5f50cf6e
or esi, 0x6d06e418
xor edi, ebx
or esi, 0x6d07dd4b
or edi, 0x6d084d09
xor esi, ebx
or edi, esi
xor edi, 0x6d09a7e4
jmp 0x4b7764
pop ecx
shr edi, 8
add ebx, edx
and ebx, 0x6d8b59be
mov edx, edi
xchg edx, ebx
dec edx
bswap edx
add edi, ebx
jmp 0x4b8329
push 0x5f5081fa
and edx, ebx
shl ebx, 7
add ebx, edi
xor edx, edi
xchg edx, esi
sub edx, esi
mov ebx, edx
xor ebx, 0x6d99332c
jmp 0x4b9b24
pop ecx
xor edx, edi
sub edi, esi
add edx, 0x6dbe64a0
ror ebx, 3
or ebx, edx
xchg esi, edi
jmp 0x4b9497
push 0x5f4fa187
inc edi
and esi, edx
and esi, 0x6dc1267f
and ebx, esi
bswap edx
shr edi, 0x1b
and ebx, edx
mov esi, edx
add ebx, esi
or edx, 0x6dc421bb
jmp 0x4b7b51
pop ecx
sub edx, ebx
and edx, ebx
bswap esi
or ebx, edi
add edx, edi
add edi, edx
mov ebx, edx
and esi, 0x6e0e628f
jmp 0x4b842a
mov ecx, 0x123b2f04
mov esi, ebx
xor edi, edx
add ebx, 0x6e9a2e44
and edx, ebx
xchg esi, edi
xor esi, 0x6e9bb5e6
add edi, ebx
xor esi, edi
or edi, 0x6e9ce9ba
rol edx, 9
ror esi, 0x18
not ebx
jmp 0x4b80c0
push 0x5f49496e
xor edx, esi
xchg edi, esi
add esi, 0x6eeaa171
xor edx, 0x6eeb148d
add edx, edi
mov esi, ebx
or edi, 0x6eec5b44
sub edx, 0x6eecc6ac
sub edx, 0x6eed4b6f
or edx, ebx
jmp 0x4b880d
push 0x5f49f13d
sub ebx, edi
or edi, esi
xor edi, ebx
sub esi, 0x6ef1792d
add edx, edi
or edx, edi
sub edi, edx
xor esi, 0x6ef33d9f
jmp 0x4b7f83
mov ecx, 0x2774562b
sub edi, edx
and ebx, esi
xchg esi, edx
add edx, esi
shl ebx, 2
xor edx, edi
bswap esi
xor edi, edx
rol esi, 0x18
jmp 0x4b8e8a
pop ecx
mov edx, edi
add edi, esi
xchg edi, esi
ror ebx, 0x12
jmp 0x4ba153
pop ecx
add edx, edi
and edi, edx
not edx
xor edx, edi
inc esi
sub esi, edi
jmp 0x4b88cc
push 0x5f503baa
or esi, ebx
inc edi
add edi, ebx
mov edx, esi
sub esi, edx
or esi, 0x6f7604a8
neg edi
add ebx, edx
mov edx, esi
sub ebx, 0x6f7810cd
dec esi
jmp 0x4b9e61
push 0x5f5c6be9
mov edi, esi
xor edx, 0x6f797c04
not edi
not ebx
jmp 0x4ba517