Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xffffff32
jne 0x40107a
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_lstrcmpA
call sub.advapi32.dll_StopTraceA
call sub.advapi32.dll_StopTraceA
call sub.advapi32.dll_StopTraceA
call sub.advapi32.dll_StopTraceA
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_FatalExit
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_lstrcmpA
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_LocalReAlloc
call sub.advapi32.dll_StopTraceA
call sub.advapi32.dll_StopTraceA
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xffffff13
jne 0x4010f4
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_LocalReAlloc
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_lstrcmpA
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_LocalReAlloc
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_lstrcmpA
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_FatalExit
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xffffff20
jne 0x40117d
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_LocalReAlloc
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_lstrcmpA
call sub.advapi32.dll_StopTraceA
call sub.advapi32.dll_StopTraceA
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_lstrcmpA
call sub.advapi32.dll_StopTraceA
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_lstrcmpA
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_FatalExit
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_FatalExit
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xffffff22
jne 0x40120b
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_LocalReAlloc
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_lstrcmpA
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_FatalExit
call sub.advapi32.dll_StopTraceA
call sub.advapi32.dll_StopTraceA
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_lstrcmpA
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_lstrcmpA
call sub.advapi32.dll_StopTraceA
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_LocalReAlloc
call sub.kernel32.dll_FatalExit
call sub.kernel32.dll_lstrcmpA
ret
jmp 0x4986e3
or ecx, edi
xchg edi, edx
not edi
jmp 0x498f84
mov ecx, 0x123b2f04
or edx, esi
and edx, edi
sub esi, edi
add ebx, edx
rol edi, 0x11
jmp 0x49a40a
call ecx
sub ebx, edx
sub edx, edi
mov esi, edx
mov edx, ebx
or edx, ebx
add ebx, edi
add ebx, esi
add edi, ebx
mov esi, 0xbd99c11b
mov edx, 0xbd9a242e
jmp 0x49bd86
push 0xb95b9a15
or esi, 0xbda20cf6
sub esi, edi
and edx, esi
add ebx, edx
dec ebx
and edx, ebx
sub edi, edx
jmp 0x4998a3
pop ecx
add ebx, esi
xor edx, ebx
bswap edx
jmp 0x499cb5
push 0xb9420ef8
add edi, ebx
xchg ebx, edi
or edi, esi
shr edx, 0xd
add edx, 0xbdffde73
and ebx, edx
jmp 0x499bd2
pop ecx
xchg edi, edx
and esi, 0xbe258fc5
xchg edx, ebx
bswap ebx
mov edx, 0xbe26d0fb
rol ebx, 0x1f
sub edx, edi
mov ebx, esi
and edx, edi
not ebx
jmp 0x49b7b7
call ecx
xor edi, edx
bswap esi
mov ebx, esi
jmp 0x49b4c2
push 0xb93e6fb4
xchg ebx, edi
mov ebx, edi
shr edi, 0x1d
xor ebx, esi
add edi, 0xbeedf7d5
xor esi, 0xbeee5a99
add ebx, 0xbeeebaac
shr ebx, 0x17
or edi, ebx
jmp 0x4995a9
push 0xb95e2d74
and esi, edi
not edx
add edx, edi
mov ebx, 0xbef75243
sub ebx, 0xbef7b155
shl edx, 0x1c
or edx, 0xbef878df
rol esi, 3
xchg esi, edi
xor ebx, esi
xor edx, edi
add ebx, edx
mov edx, ebx
jmp 0x49a73b
push 0xb95903a2
add edx, esi
xor ebx, edx
inc edi
xor esi, 0xbfa6cd57
xor edi, edx
or ebx, edx
xchg edx, esi
mov edi, edx
mov edx, ebx
jmp 0x49a584
call fcn.004997d2
xor ebx, 0xbfaf0065
sub esi, 0xbfaf6797
xor ebx, 0xbfafc886
rol edx, 0x1c
sub ebx, 0xbfb0936a
mov edx, ebx
and esi, edx
and esi, edx
jmp 0x498efa
call fcn.004997d2
xor edx, 0xbfb24533
mov ebx, edx
sub esi, edi
ror edi, 7
jmp 0x49a212
push 0xb93ed197
xor esi, ebx
or esi, ebx
add edi, ebx
jmp 0x49a646
pop ecx
mov ebx, 0xc01afa11
neg edx
sub ebx, edi
mov edi, 0xc01ba334
mov ebx, edx
add ebx, edi
jmp 0x499f36
call fcn.004997d2
mov edi, 0xc038840a
sub esi, edi
rol ebx, 0x1e
not ebx
add edi, esi
or edx, 0xc03a72b8
add ebx, 0xc03acd84
mov edx, 0xc03b2942
mov ebx, edx
or edi, edx
jmp 0x499dd6
mov ecx, 0x123b2f04
sub ebx, edx
mov ebx, edx
xchg edi, ebx
mov edi, esi
and esi, ebx
or edi, ebx
add edx, ebx
rol esi, 0x18
and esi, edx
shl edx, 3
xor ebx, edi
jmp 0x49baab
push 0xb95ecbe2
sub esi, ebx
xchg ebx, edi
ror edx, 0x16
sub esi, 0xc06d2320
and edx, ebx
jmp 0x498741
push 0xb95b4689
xor edi, ebx
add ebx, esi
sub edi, 0xc07a7d52
inc edi
add esi, edi
jmp 0x49885f
pop ecx
sub ebx, edx
xor esi, edx
and edi, 0xc0b4cbbf
inc ebx
or ebx, esi
or esi, edi
dec ebx
sub ebx, 0xc0b75660
or esi, edx
and esi, edx
neg ebx
jmp 0x49964c
push 0xb9425918
xchg edx, esi
rol edi, 0xc
sub edi, ebx
mov edx, 0xc0f057b8
inc esi
sub ebx, edx
bswap ebx
jmp 0x49af40
pop ecx
add esi, 0xc10b727b
xchg edx, ebx
sub ebx, esi
jmp 0x49bccd
call ecx
xchg edx, esi
xchg esi, edi
neg ebx
xchg edi, ebx
xor esi, edi
xor ebx, esi
xchg ebx, edi
or ebx, 0xc1f9ecf3
bswap ebx
and esi, edx
jmp 0x49bc93
push 0xb95aabf3
xor ebx, edx
xor esi, ebx
and edi, 0xc1fd1151
and ebx, esi
xor esi, ebx
rol edi, 4
mov esi, ebx
mov ebx, edi
or edi, esi
add ebx, esi
or edi, ebx
jmp 0x49a3e6
push 0xb9416ee1
xor esi, edi
neg edi
or ebx, edi
inc edi
rol ebx, 0xa
sub esi, edx
mov ebx, esi
or esi, edi
not edi
and ebx, 0xc229e96b
xchg esi, ebx
add ebx, 0xc22a81ed
add edi, ebx
xor ebx, esi
mov ebx, 0xc22b9fba
or ebx, edi
jmp 0x49a7ee
call fcn.004997d2
dec edx
sub edx, edi
or ebx, edi
jmp 0x4987ff
call ecx
and edi, edx
xor edi, esi
mov esi, edx
sub esi, ebx
shl ebx, 0x15
and edi, ebx
or edx, edi
and edx, edi
xor edx, ebx
jmp 0x4989ca
pop ecx
rol esi, 0xb
inc esi
mov esi, edx
sub edi, edx
mov edi, esi
and edx, 0xc24b0fb2
mov edx, edi
add edx, esi
jmp 0x498fed
call ecx
and edi, edx
shl edx, 7
xor ebx, edx
mov ebx, edi
and edx, ebx
sub ebx, 0xc25ed895
xchg esi, ebx
xchg ebx, esi
add edi, edx
rol ebx, 2
sub ebx, 0xc260cf0c
rol ebx, 4
mov ebx, esi
xchg edi, ebx
jmp 0x49b406
pop ecx
mov edi, 0xc29851b0
or edi, esi
sub ebx, edx
and esi, edi
mov edi, edx
sub ebx, esi
sub ebx, edi
or ebx, edi
sub edi, esi
xor ebx, edx
inc esi
and edi, esi
jmp 0x49bd13
push 0xb95af452
mov edx, ebx
mov esi, ebx
or ebx, esi
sub edx, 0xc29ebd1a
and edi, edx
and esi, edx
and esi, edi
or esi, edi
xchg edi, edx
sub ebx, esi
or edx, esi
jmp 0x4999dd
jmp loc.004a0000
mov ecx, 0x123b2f04
xchg ebx, edi
bswap esi
mov ebx, esi
mov edx, ebx
xor esi, edx
xor edx, esi
add edx, edi
ror ebx, 2
sub ebx, 0xc2e49e3b
or edx, 0xc2e4d2ab
or esi, edx
add edx, edi
or esi, edi
and ebx, edi
jmp 0x49939c
push 0xb93f2a55
add edi, esi
mov edi, 0xc2efbb5d
xchg ebx, edi
or edx, 0xc2f02f26
sub ebx, edi
xor ebx, 0xc2f096c9
sub edi, ebx
xor edx, ebx
jmp 0x49b423
push 0xb95e7922
xor esi, edx
or edi, ebx
or edi, esi
ror esi, 0x1e
xor ebx, 0xc300a195
sub edx, 0xc300da94
or ebx, edi
rol ebx, 3
dec ebx
xchg edi, ebx
or ebx, 0xc301e890
mov esi, edx
jmp 0x4998ea
push 0xb941c0cb
sub edi, 0xc32489fd
xchg esi, edx
sub edi, esi
or ebx, edi
sub edx, edi
sub esi, edx
nop
xor esi, 0xc3260c84
rol ebx, 0xf
sub ebx, edi
jmp 0x498ad5
mov ecx, 0x123b2f04
xchg edx, edi
inc edi
inc edx
xor edx, esi
xor edi, edx
xchg edi, ebx
add ebx, edi
sub ebx, 0xc4169e24
jmp 0x499371
pop ecx
or edx, edi
not edx
or edx, 0xc4a6ea01
and edx, edi
ror edx, 0xb
mov ebx, edx
add edx, 0xc4a7c2da
jmp 0x499e19
mov ecx, 0x2774562b
mov edi, ebx
xchg ebx, edi
or edi, 0xc4a872c5
xchg edi, edx
add esi, edx
shl ebx, 0xc
jmp 0x499f6b
pop ecx
xchg esi, edi
not edx
sub edx, ebx
mov edi, esi
xor edx, ebx
add edi, ebx
dec edx
jmp 0x49a394
push 0xb94510b9
shr ebx, 0x18
mov edi, edx
or edi, edx
sub esi, ebx
and ebx, edx
or edx, esi
mov esi, edx
not esi
shr edx, 9
jmp 0x49bc3c
call fcn.004997d2
or ebx, edx
mov ebx, 0xc55cd4e8
and esi, edi
mov esi, edi
dec ebx
sub edx, 0xc55db632
xchg edx, ebx
jmp 0x499fbb
mov ecx, 0x123b2f04
add esi, 0xc598f87f
dec esi
xchg esi, ebx
sub esi, ebx
or edx, 0xc599d58b
xor edi, 0xc59a0f08
jmp 0x499754
pop ecx
or edx, 0xc59d7ef6
sub ebx, edi
add ebx, edx
and esi, ebx
xchg ebx, esi
ror edx, 0x10
and esi, edi
add edi, esi
xor esi, ebx
mov edx, edi
inc esi
jmp 0x499329
pop ecx
xor edi, edx
add edi, esi
sub edi, esi
xchg ebx, edx
or edi, 0xc5a20478
and ebx, edx
xchg ebx, edi
and edx, ebx
xor edi, 0xc5a2d613
jmp 0x49a0ad
pop ecx
rol ebx, 0x18
shr esi, 0xa
shr edi, 0x14
xor edx, 0xc5a6318e
mov edi, ebx
dec ebx
mov esi, 0xc5a6d9f2
inc ebx
and edx, 0xc5a744ef
mov esi, ebx
xchg esi, ebx
jmp 0x498b77
pop ecx
bswap esi
mov ebx, esi
add edx, edi
sub ebx, esi
rol edi, 0x13
jmp 0x499b06