Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetKBCodePage
cmp eax, 0xffffff15
jne 0x401070
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call main
call main
call main
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff08
jne 0x4010e5
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xfffffefe
jne 0x401146
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
ret
call sub.user32.dll_GetKBCodePage
cmp eax, 0xfffffee2
jne 0x4011d4
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call main
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
ret
call sub.user32.dll_GetKBCodePage
cmp eax, 0xffffff0f
jne 0x40124e
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
ret
jmp 0x4e6ada
xor esi, 0x23ed908b
add edi, ebx
mov edi, esi
xor ebx, esi
or ebx, esi
or ebx, esi
jmp 0x4e8994
push 0x23f254b6
mov ecx, edx
xor ecx, ebx
dec ecx
or ecx, esi
and edx, esi
and esi, edx
neg ebx
shr ecx, 0x13
and edx, ecx
xchg ecx, edx
inc edx
xchg edx, ecx
inc ebx
add edx, 0x2844b1f5
jmp 0x4e710f
mov edi, 0x123b2f04
xchg ebx, edx
dec ebx
sub ebx, ecx
and esi, ebx
jmp 0x4e99bf
push 0x23f27f0a
shr ebx, 3
and ebx, ecx
xchg edx, ecx
inc ebx
mov ebx, esi
bswap esi
bswap edx
mov esi, 0x28c251d8
jmp 0x4e7027
push 0x23f1cb4c
shl ecx, 7
sub esi, 0x2bc3d27e
xor ecx, ebx
add edx, 0x2bc48f6d
sub ecx, 0x2bc4f173
bswap ecx
sub edx, ebx
ror ecx, 0x1f
xchg esi, edx
ror esi, 0xe
jmp 0x4e8ca1
push 0x23f200ef
mov ecx, 0x2c1d493b
shr ecx, 6
xor ebx, esi
shr ecx, 0xa
and ecx, 0x2c1eebc5
or esi, edx
not esi
xchg ebx, ecx
mov ebx, esi
bswap ebx
jmp 0x4e9930
push 0x23f22abf
and ecx, 0x2dae910d
xor ebx, esi
and ecx, edx
ror ecx, 7
and edx, ecx
jmp 0x4e6ce9
jmp loc.004eff7a