Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
add edx, ebx
or esi, 0x112c6bf1
mov edx, esi
add ebx, ecx
or ebx, ecx
shl ecx, 0x13
call sub.user32.dll_GetActiveWindow
rol ebx, 9
xor edx, esi
sub esi, ebx
or edx, esi
and edx, esi
cmp eax, 0xfffffed5
jne 0x4010be
call sub.user32.dll_mouse_event
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
ret
xchg esi, ebx
dec esi
mov ecx, 0x1137471e
xchg edx, ebx
sub esi, 0x1138372e
or ecx, 0x1138ae7f
mov edx, ecx
add esi, ebx
call sub.user32.dll_GetActiveWindow
sub ebx, esi
or esi, 0x113b121f
xchg esi, edx
or esi, edx
xor esi, 0x113c7613
xor ecx, ebx
sub ebx, esi
sub ebx, esi
cmp eax, 0xffffff2b
jne 0x40115b
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.user32.dll_mouse_event
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
call sub.user32.dll_SetDeskWallpaper
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.shell32.dll_ShellMessageBoxW
ret
add esi, edx
xor ecx, ebx
and esi, 0x114254ae
call sub.kernel32.dll_GetCommandLineW
mov ebx, 0x1142f6e2
cmp eax, 0xffffff2a
jne 0x4011ee
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.user32.dll_mouse_event
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.ntdll.dll_ZwDebugActiveProcess
ret
mov esi, ebx
and ecx, esi
mov esi, ecx
and esi, edx
or edx, ecx
xor edx, 0x1148b430
or edx, 0x11492b24
call sub.kernel32.dll_GetCommandLineW
rol esi, 0x1d
sub ecx, 0x114a7228
xchg edx, ecx
sub ecx, 0x114b5df2
and ebx, ecx
bswap ecx
xor ecx, edx
not edx
cmp eax, 0xffffff20
jne 0x401283
call sub.user32.dll_SetDeskWallpaper
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
ret
jmp 0x4a0102
xor esi, ebx
dec edx
add ebx, edx
shl edx, 0x19
neg edx
mov esi, 0x11fd0eaa
jmp 0x4a35bc
mov esi, 0x2774562b
xor edx, edi
sub edi, edx
sub edx, 0x18f72a21
sub edx, ecx
xchg ebx, edi
xchg ecx, edi
sub ebx, ecx
jmp 0x4a23c5
jmp loc.004a8000
push 0x120414b6
rol edi, 0x10
shr edx, 0x18
sub edx, 0x1fe72c57
sub ebx, ecx
sub ecx, edi
mov ebx, 0x1fe8828e
bswap ebx
rol ebx, 0xa
shl ebx, 8
bswap edi
jmp 0x4a04dd