Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
mov esi, 0xc0c8e121
add esi, ebx
sub edi, ecx
sub ecx, 0xc0ca5403
add esi, edi
call sub.kernel32.dll_GetUserDefaultLCID
mov esi, ebx
xchg esi, ecx
not ecx
cmp eax, 0xffffff17
jne 0x40108c
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
ret
mov ebx, 0xc0cf50f9
not edi
shl ecx, 5
not edi
sub ecx, ebx
inc edi
inc ebx
call sub.kernel32.dll_GetUserDefaultLCID
bswap edi
sub esi, 0xc15284af
mov esi, ebx
cmp eax, 0xfffffeea
jne 0x40110c
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
ret
xor ebx, 0xc154c37b
sub ecx, edi
sub ebx, ecx
not esi
mov edi, ecx
xchg esi, ebx
call sub.kernel32.dll_GetUserDefaultLCID
shr esi, 3
shr esi, 0x1e
mov esi, ebx
sub esi, 0xc1570c3e
xor edi, 0xc1574ab7
cmp eax, 0xfffffee9
jne 0x4011dc
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
ret
bswap edi
call sub.kernel32.dll_GetUserDefaultLCID
nop
xchg ebx, edi
and ecx, 0xc15a45ce
xchg esi, edi
sub ecx, 0xc15ae15b
shr ecx, 0x13
xchg ecx, ebx
cmp eax, 0xffffff13
jne 0x401287
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
call sub.ntdll.dll_ZwOpenDirectoryObject
ret
jmp 0x4b7673
mov ecx, esi
mov ebx, edi
inc ebx
and ecx, ebx
and ecx, esi
xchg ecx, ebx
and ebx, edi
mov ebx, edi
jmp 0x4b8788
mov ebx, 0x2774562b
sub esi, ecx
xchg edi, ecx
xor esi, ecx
xor edx, 0xcdd41d5f
jmp 0x4b9a45
call fcn.004b954a
ror edi, 0x1f
and edi, esi
xchg edi, esi
mov edi, esi
xor esi, 0xce38625a
ror edi, 0x10
add edi, esi
bswap edi
jmp 0x4b8f4d
push 0xc2e84be5
shl edx, 2
xor edi, ecx
and esi, 0xce894b2f
or esi, edi
jmp 0x4b93b6
push 0xc2e69b4e
add edi, edx
or edx, esi
add ecx, esi
shr ecx, 6
xor esi, edi
shr ecx, 0xc
ror ecx, 0x11
mov ecx, edx
and edi, esi
jmp 0x4ba33f
mov ebx, 0x2774562b
neg esi
neg ecx
neg ecx
add ecx, edx
dec edi
and edi, edx
xchg edx, esi
xor edi, 0xcf3ce56a
shl esi, 0x1b
jmp 0x4b7913
pop ebx
or edx, ecx
add ecx, esi
or edx, edi
rol ecx, 0x1f
nop
ror ecx, 0x19
add edx, esi
xor esi, ecx
jmp 0x4b95f6
push 0xc2e65922
xchg ecx, esi
xchg ecx, esi
jmp 0x4b7dd2
pop ebx
xor edx, 0xd0f50adf
xchg esi, edx
and esi, edi
xor esi, 0xd0f5b117
ror edx, 0xf
inc edi
xchg edi, ecx
sub edx, ecx
jmp 0x4ba15b
call ebx
xor edx, esi
add edi, 0xd1eef655
sub edx, ecx
ror esi, 0xc
add edx, esi
xor esi, edi
mov ecx, esi
jmp 0x4b80b4
push 0xc2e87142
add ecx, edx
bswap esi
add edx, 0xd3422874
rol ecx, 7
sub edx, esi
sub edx, 0xd342d564
mov edx, edi
rol edx, 0x15
ror ecx, 8
add ecx, 0xd34919a6
jmp 0x4b7729
pop ebx
bswap esi
or esi, 0xd3b717e0
ror edx, 0x13
nop
mov edx, 0xd3b7c800
sub edx, edi
or esi, edx
and edi, edx
jmp 0x4b8895
jmp loc.004bf570
push 0xc2e8223d
add ecx, edx
rol edi, 0x19
neg edx
xor esi, edx
xor ecx, 0xd4d2816d
sub edi, 0xd4d2bfe9
add esi, ecx
or esi, edx
shl edx, 9
jmp 0x4b7a7e
push 0xc2e6c01c
inc edx
ror ecx, 4
xor ecx, 0xd4fb38dd
mov edi, ecx
xchg edi, ecx
xchg ecx, esi
neg edi
or edi, ecx
or edx, esi
jmp 0x4b7e4e