Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
add ecx, 0x88514e3b
bswap ecx
call sub.kernel32.dll_GetCommandLineA
mov esi, 0x8851fdc8
or esi, 0x88523acd
and ecx, esi
xor ebx, esi
cmp eax, 0xffffff36
jne 0x4010c3
call sub.user32.dll_GetWindowWord
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
ret
ror ecx, 0xb
or esi, edx
call sub.user32.dll_GetMessageExtraInfo
xchg esi, edx
xchg ebx, esi
xor ebx, ecx
neg esi
mov ebx, 0x885680f0
cmp eax, 0xfffffef9
jne 0x401159
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.user32.dll_GetWindowWord
call sub.user32.dll_GetWindowWord
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
ret
and ecx, edx
and ebx, 0x8858717a
or ebx, esi
and ecx, ebx
sub esi, ebx
shr ecx, 1
and edx, esi
call sub.kernel32.dll_GetCommandLineA
mov ecx, edx
or ecx, ebx
cmp eax, 0xffffff16
jne 0x4011d1
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
ret
xor ebx, ecx
shr ecx, 3
and ecx, ebx
mov ebx, 0x885c7ac9
call sub.user32.dll_GetMessageExtraInfo
sub ebx, edx
xchg ecx, ebx
mov edx, ecx
bswap ebx
xor ebx, esi
xchg esi, edx
cmp eax, 0xfffffefc
jne 0x401295
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_NtUnlockFile
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.user32.dll_GetWindowWord
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_LdrShutdownThread
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.user32.dll_GetWindowWord
call sub.user32.dll_GetWindowWord
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_LdrShutdownThread
call sub.ntdll.dll_NtUnlockFile
call sub.ntdll.dll_NtUnlockFile
call sub.user32.dll_GetWindowWord
ret
jmp 0x494680
add ecx, esi
xor ebx, 0x89a721dd
sub edx, ecx
jmp 0x4957e6
push 0x89b0f860
mov edi, 0x8e3a803e
and ecx, 0x8e3acde8
and ebx, esi
bswap esi
shl edi, 0x15
sub esi, ecx
shr esi, 0x1c
sub esi, ecx
jmp 0x4961c1
push 0x89abdb2e
rol esi, 0xa
bswap edi
or edi, ebx
xor esi, 0x8e46864b
or ebx, 0x8e46c44b
nop
sub ebx, edi
add esi, edi
jmp 0x494e4d
call fcn.00497ab5
or esi, 0x8e6bc957
xchg ecx, edi
inc ecx
sub ecx, esi
or edi, 0x8e6cc948
inc ecx
bswap edi
mov esi, ebx
and esi, 0x8e6dbebc
jmp 0x495d42
pop edx
add esi, ecx
mov edi, ecx
neg edi
add ecx, ebx
sub esi, edi
xor ebx, 0x8ee77ddc
xor ecx, ebx
xor edi, ecx
and edi, esi
jmp 0x495c64
mov edx, 0x123b2f04
or edi, esi
add edi, 0x8ef621df
neg esi
sub ebx, edi
sub ecx, ebx
mov ebx, edi
jmp 0x4952cc
pop edx
add esi, ebx
mov ebx, esi
add edi, 0x8ef7ebbc
sub esi, 0x8ef8283b
bswap edi
and edi, esi
or ebx, 0x8ef8ee42
add edi, esi
sub ebx, edi
xor ebx, ecx
inc edi
jmp 0x495dcc
push 0x89b0d1df
xor ecx, esi
or edi, 0x8f07b354
or edi, ebx
xchg ebx, esi
xor ebx, 0x8f08951d
inc ebx
xchg esi, edi
and ebx, edi
sub edi, esi
jmp 0x49468f
pop edx
add ecx, 0x8f1c8452
and esi, 0x8f1cc55f
or ebx, 0x8f1d05ac
bswap edi
neg edi
add ebx, edi
sub esi, 0x8f1e0bdb
shl edi, 0x17
inc esi
shr esi, 0xc
jmp 0x4964fc
call fcn.00497ab5
inc esi
add ebx, ecx
add edi, ebx
shl ecx, 0x10
shl ebx, 0x19
inc edi
and esi, ebx
rol ebx, 0x14
xchg edi, ecx
xor ecx, esi
xor ebx, ecx
sub ebx, ecx
and edi, 0x8f50c8ea
jmp 0x496721
mov edx, 0x2774562b
xor esi, edi
or edi, ecx
xchg ebx, edi
mov edi, ebx
xor ecx, ebx
mov esi, ebx
add esi, edi
jmp 0x496c0b
pop edx
or edi, ecx
neg ebx
and ebx, 0x8f865192
add ecx, edi
or esi, ebx
xchg ecx, edi
xor edi, ebx
mov ebx, esi
sub esi, edi
rol esi, 7
bswap ebx
jmp 0x494e67
push 0x89af79c8
not esi
rol edi, 0x13
xor ebx, 0x8fb701ea
rol edi, 0x1d
neg ebx
and esi, ebx
rol edi, 0x18
bswap ebx
xor ebx, ecx
jmp 0x4961b0
push 0x89ab4a68
mov ecx, edi
or ecx, esi
or edi, ebx
nop
add ebx, 0x8fccc2d1
and esi, edi
add ecx, edi
bswap ecx
inc ecx
rol esi, 0x16
jmp 0x4963fe
push 0x89b07829
and ecx, ebx
sub ecx, esi
xor ebx, ecx
add ebx, esi
not ebx
xor ebx, esi
xchg edi, ebx
sub edi, ecx
rol esi, 0x10
jmp 0x496fd9
pop edx
shr edi, 0x10
or esi, edi
ror ebx, 7
xchg ecx, edi
shr ebx, 0x16
or ecx, ebx
jmp 0x496b30
pop edx
sub ebx, edi
mov ecx, edi
add ebx, esi
and ecx, edi
sub ecx, 0x900fda3d
or ebx, 0x90102572
jmp 0x495e3b
pop edx
inc esi
xchg esi, edi
xchg ecx, ebx
mov ebx, ecx
or esi, ecx
sub ecx, ebx
add edi, 0x9011f384
add ecx, 0x9012335e
jmp 0x495a70
push 0x89b2a856
and ecx, edi
and ecx, edi
or edi, ecx
and edi, ebx
add edi, esi
sub ebx, 0x903f21b8
and edi, ecx
xchg esi, edi
and edi, 0x903fe5f5
sub ecx, 0x90402284
add ecx, edi
jmp 0x4972b1
call edx
sub esi, ebx
add edi, ebx
xchg esi, edi
dec esi
ror ebx, 9
and ebx, ecx
bswap edi
rol ecx, 0x15
xor edi, 0x90504be7
add esi, edi
shr ebx, 2
jmp 0x497162
pop edx
shl ecx, 0x13
mov ecx, esi
mov esi, ecx
add ecx, esi
shl edi, 1
neg edi
and esi, edi
add ecx, edi
bswap ecx
sub edi, ebx
ror ecx, 0x13
and ecx, ebx
mov ebx, edi
jmp 0x495f81
push 0x89af4d19
mov esi, ecx
and esi, ebx
add ebx, edi
add ecx, 0x90621d1d
jmp 0x495706
pop edx
xchg esi, edi
add esi, ebx
xor edi, ecx
add esi, ebx
sub esi, 0x9072618c
bswap ebx
or edi, esi
sub ecx, 0x907327c5
ror ebx, 1
xor ebx, esi
dec esi
sub edi, ebx
rol edi, 5
jmp 0x494d7c
pop edx
dec ecx
or ecx, edi
xor ecx, edi
mov esi, ecx
add ebx, 0x908dbb56
sub esi, edi
add edi, ebx
shr esi, 0xb
jmp 0x495a97
push 0x89ad6b9d
add edi, 0x90b9dd01
or esi, ebx
sub edi, ebx
sub edi, 0x90bf5d7e
xor esi, 0x90bf9d95
or edi, esi
sub ecx, edi
add ebx, esi
mov edi, ecx
xor ebx, ecx
jmp 0x497d64
mov edx, 0x123b2f04
ror ebx, 0x13
or esi, edi
xchg ecx, edi
jmp 0x4948e3
push 0x89b1234a
add ebx, esi
sub esi, edi
not ebx
sub esi, ecx
not ebx
add edi, ecx
sub ebx, edi
jmp 0x497541
push 0x89ab84f3
xor esi, ecx
xchg edi, ebx
and ebx, esi
bswap edi
add ebx, 0x91010bc6
xchg ecx, ebx
xor ecx, esi
xchg ecx, esi
and esi, 0x91027c6e
mov ebx, 0x9102ef2e
xor esi, ebx
mov edi, 0x91058f0c
add ecx, ebx
xchg esi, edi
jmp 0x496515
pop edx
add ebx, edi
xor esi, ebx
or ecx, 0x91218ab7
shl edi, 0xf
add esi, 0x9122082a
jmp 0x495ab1
push 0x89abb057
shr ebx, 0xd
or ebx, ecx
rol esi, 0xe
shl ecx, 0x17
rol esi, 0x1f
jmp 0x494714
call edx
xor esi, 0x9154a638
neg ecx
mov ebx, ecx
inc ecx
dec ecx
jmp 0x49506a
call edx
rol edi, 1
mov ebx, 0x91b12a1f
inc edi
add esi, edi
and ebx, ecx
add edi, ebx
jmp 0x497add
push 0x89ad3eb0
xor esi, edi
mov edi, ecx
and ebx, 0x91b2f7bc
and esi, 0x91b33427
bswap edi
sub esi, edi
bswap ecx
or ecx, esi
add ebx, ecx
sub ebx, edi
jmp 0x496186
jmp loc.0049b02e
pop edx
xor edi, esi
or esi, ebx
xor edi, esi
or edi, ecx
jmp 0x495983
call edx
or esi, edi
shr ebx, 0x10
xchg edi, ecx
xor ecx, 0x91e4aa25
and esi, edi
and edi, 0x91e52717
sub edi, ebx
sub ebx, 0x91e5d30a
mov esi, edi
neg ecx
jmp 0x495d65
push 0x89adbf2f
and esi, ebx
or ebx, 0x920fa90c
add edi, 0x920fe9b7
neg ebx
neg ebx
add ebx, 0x9210b2e6
inc esi
shr ebx, 0xe
xor ebx, esi
jmp 0x4973b6
push 0x89b0a4cb
or esi, ecx
ror ecx, 0x1e
add ebx, edi
sub edi, 0x9222d872
xchg ecx, esi
add ebx, ecx
neg edi
inc edi
sub ebx, 0x92258d32
and edi, esi
dec ecx
jmp 0x494f45
pop edx
xor edi, ebx
ror edi, 0xa
dec ecx
jmp 0x496c5b
push 0x89b2d49b
xchg ebx, esi
add esi, 0x926932c9
xchg esi, ecx
sub esi, edi
neg ebx
neg edi
or ebx, ecx
not ecx
sub esi, 0x926af431
shl edi, 0x1c
or edi, esi
xor ecx, 0x926be6bd
jmp 0x49545f
mov edx, 0x123b2f04
shr ebx, 3
dec edi
sub ecx, esi
mov esi, edi
not ebx
and ebx, esi
and edi, ecx
and esi, ecx
xor ecx, 0x927fa64d
jmp 0x4982bf
mov edx, 0x2774562b
not ebx
xor ebx, 0x92a424e7
sub edi, esi
xor ecx, 0x92a4a01e
xor ebx, esi
xchg esi, ecx
xor edi, ebx
and ecx, 0x92a59b41
xchg ecx, ebx
and ecx, esi
bswap esi
shr esi, 9
add ebx, edi
mov edi, ebx
xor edi, ecx
jmp 0x4976b1
call fcn.00497ab5
sub esi, ecx
inc esi
xchg ebx, ecx
xchg ebx, edi
inc ebx
xchg ecx, edi
sub ecx, ebx
sub ebx, ecx
xchg ebx, esi
and ecx, 0x92c2fa5e
jmp 0x496d33
pop edx
add ebx, 0x9319a0b1
and ebx, edi
mov ebx, 0x931a26eb
xor ecx, ebx
sub ebx, edi
jmp 0x4984b1
push 0x89ad9497
xor edi, esi
add ebx, esi
or ebx, edi
shl ecx, 0x18
ror ebx, 0x14
xor edi, 0x93544bef
xor ecx, 0x93549513
and ecx, esi
or ecx, edi
xor edi, ebx
or ecx, edi
shr ebx, 0x11
sub ecx, 0x93560608
xor ecx, 0x935646b5
jmp 0x496edf
call fcn.00497ab5
rol ebx, 0x1d
and ebx, ecx
sub esi, ecx
add ebx, ecx
or edi, 0x93c6b532
add esi, ebx
jmp 0x496b1a
pop edx
ror esi, 0x19
or esi, ebx
mov esi, 0x93f19974
or esi, ecx
add esi, ecx
bswap edi
add ebx, esi
rol ecx, 6
and esi, ecx
jmp 0x495510