Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xfffffefc
jne 0x401061
call sub.kernel32.dll_SetErrorMode
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.kernel32.dll_SetErrorMode
call main
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call main
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff0e
jne 0x4010db
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.kernel32.dll_SetErrorMode
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.kernel32.dll_SetErrorMode
call main
ret
call sub.kernel32.dll_GetCurrentThreadId
cmp eax, 0xffffff1e
jne 0x40113c
call main
call sub.kernel32.dll_SetErrorMode
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call sub.kernel32.dll_SetErrorMode
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.kernel32.dll_SetErrorMode
call sub.ntdll.dll_NtQueryDefaultUILanguage
ret
call sub.kernel32.dll_GetCurrentThreadId
cmp eax, 0xfffffed7
jne 0x4011cf
call main
call main
call main
call main
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call main
call main
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call main
call main
call main
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xfffffee7
jne 0x401249
call main
call sub.kernel32.dll_SetErrorMode
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call sub.kernel32.dll_SetErrorMode
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.kernel32.dll_SetErrorMode
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
call main
call sub.kernel32.dll_SetErrorMode
call main
call sub.ntdll.dll_NtQueryDefaultUILanguage
call sub.ntdll.dll_NtQueryDefaultUILanguage
call main
ret
jmp 0x478480
mov edx, 0x3f3e7f3b
jmp 0x479d51
pop ecx
mov ebx, edx
mov ebx, 0x434e99e8
xor edx, edi
ror edi, 0x10
sub edx, ebx
and edx, 0x434f6e78
sub edi, edx
shl ebx, 4
sub esi, 0x4350109c
jmp 0x4795bb
call ecx
inc edi
sub ebx, esi
mov edx, edi
or edi, 0x43a49359
xchg edx, esi
jmp 0x47aa4a
mov ecx, 0x123b2f04
dec ebx
inc ebx
sub ebx, 0x4403adfc
or edx, edi
or ebx, edx
sub edx, ebx
ror edx, 0xe
mov ebx, edx
shr ebx, 2
bswap edx
jmp 0x479bcf
pop ecx
sub edx, edi
xchg edi, edx
or edx, ebx
add esi, ebx
xor esi, edi
xor ebx, 0x441dd49e
and edi, 0x441e092b
xor esi, 0x441e4221
or edi, esi
mov edx, 0x441eb3be
xchg edi, edx
sub edi, edx
ror edi, 0x18
add esi, 0x441f837d
xor esi, edi
jmp 0x47a4ed
push 0x3f4378b4
xor edi, ebx
xor edi, esi
inc edi
and esi, edi
add ebx, esi
or esi, 0x44ab10c7
xor edx, edi
jmp 0x47a182
push 0x3f453ae8
dec edi
sub ebx, edx
not esi
mov edi, esi
sub esi, edi
add edi, 0x4515caaf
add edx, esi
jmp 0x47996a
push 0x3f4566b1
sub edx, esi
and ebx, 0x456969c6
mov ebx, esi
shr edx, 0x14
add esi, ebx
mov esi, ebx
mov edi, edx
xor esi, edx
xor edx, 0x456adacb
jmp 0x47a705
jmp loc.0047f000
pop ecx
xchg edi, esi
ror esi, 0x18
neg edi
inc ebx
jmp 0x478f45
push 0x3f42ef74
and edi, ebx
mov edx, edi
ror esi, 1
or esi, ebx
jmp 0x47a0fb
push 0x3f4327ac
or edi, esi
sub ebx, edx
shl edx, 0x1d
or edx, ebx
ror ebx, 5
sub edi, 0x4627ffd7
xor edx, ebx
sub ebx, edx
dec esi
rol edx, 0x13
jmp 0x47ad13
push 0x3f43a6ef
add esi, 0x462ee87c
add edx, edi
mov ebx, edi
mov edi, ebx
xor esi, ebx
shl esi, 0xc
neg edi
xchg ebx, esi
shl edi, 0x10
jmp 0x47a9a5
pop ecx
add edi, ebx
sub ebx, edx
and ebx, edx
add edx, esi
dec edx
xchg edi, ebx
and edx, ebx
add ebx, edx
sub edx, edi
mov ebx, 0x468c8bad
jmp 0x478757
push 0x3f459282
and edx, esi
mov edi, 0x46b34c37
add edi, 0x46b3806d
mov edi, 0x46b3b496
inc edi
shr ebx, 0x10
jmp 0x47a795
push 0x3f45b8fd
add ebx, edx
sub edx, 0x46b9f585
not ebx
dec ebx
shl esi, 1
add edx, ebx
bswap edi
jmp 0x478da4
mov ecx, 0x123b2f04
or esi, 0x46e630ab
xchg esi, edx
and esi, ebx
xchg edi, ebx
sub ebx, esi
nop
sub edi, esi
add ebx, edx
shl ebx, 2
add edi, edx
mov ebx, edx
jmp 0x47abf9
pop ecx
bswap edx
neg edx
bswap esi
add edx, edi
mov edx, 0x46feb3f6
xor edi, edx
xor ebx, edx
jmp 0x479d43
call fcn.0047aef7
dec esi
add ebx, edx
jmp 0x478a09
push 0x3f435286
or ebx, esi
and esi, ebx
or esi, 0x473924b2
and esi, ebx
xor edi, 0x47399aec
xchg ebx, esi
xchg ebx, edx
jmp 0x4792eb