Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
xor ebx, 0x73467980
call sub.kernel32.dll_GetSystemDefaultUILanguage
xchg ebx, esi
rol ebx, 0x1c
xor ecx, esi
mov ebx, edx
xor ecx, ebx
sub esi, ecx
shl esi, 3
and ecx, edx
cmp eax, 0xffffff0f
jne 0x4010ba
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
call sub.oleaut32.dll_VarR8FromI4
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
ret
mov ebx, ecx
or edx, esi
call sub.user32.dll_GetInputState
xor ebx, 0x734b27a2
and ecx, ebx
add ebx, esi
xor ebx, ecx
or ebx, 0x734c625e
and esi, 0x734c9b6b
add ecx, edx
cmp eax, 0xffffff2f
jne 0x401161
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.oleaut32.dll_VarR8FromI4
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
ret
sub edx, esi
bswap ebx
sub ebx, ecx
shr esi, 6
and ebx, esi
or esi, 0x734fca8f
sub esi, 0x735004ea
shr edx, 0xa
call sub.user32.dll_GetInputState
xchg ecx, esi
xchg esi, ebx
or edx, ecx
add ecx, 0x73513e1a
shl esi, 4
cmp eax, 0xfffffefe
jne 0x4011f5
call sub.oleaut32.dll_VarR8FromI4
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.oleaut32.dll_VarR8FromI4
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
ret
mov edx, esi
sub esi, 0x7352f61a
neg edx
or esi, edx
shr ecx, 9
call sub.kernel32.dll_GetCommandLineW
mov ecx, 0x7353fa5f
or edx, 0x735435cc
neg esi
xor ebx, edx
xchg edx, ecx
xor ecx, 0x735521b3
and ecx, 0x73555b28
add ebx, edx
cmp eax, 0xffffff02
jne 0x4012cf
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.oleaut32.dll_VarR8FromI4
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.oleaut32.dll_VarR8FromI4
call sub.ntdll.dll_ZwSetTimerResolution
call sub.kernel32.dll_InterlockedExchange
call sub.kernel32.dll_InterlockedExchange
ret
jmp 0x4a604c
xor esi, ebx
xor ebx, ecx
add esi, edx
xchg ecx, edx
jmp 0x4a7459
push 0x73c859fd
inc esi
or edx, ebx
or ebx, 0x78ffa57d
dec ebx
neg esi
sub ecx, 0x790100dd
add edx, ebx
xchg esi, ecx
and ebx, edx
sub edx, ebx
and edx, 0x79033d8a
sub edx, ebx
and ebx, ecx
sub esi, ecx
or ecx, ebx
jmp 0x4a946d
call edi
and edx, ecx
or edx, ecx
mov esi, ebx
bswap ecx
add edx, 0x790acb46
xchg ebx, edx
shr esi, 0xc
mov edx, ecx
add esi, ebx
jmp 0x4a6de4
call edi
ror ebx, 0x18
and ebx, esi
xor ecx, esi
shr edx, 0x12
rol edx, 0x15
neg edx
mov ecx, edx
and edx, ebx
ror edx, 2
jmp 0x4a93f4
push 0x73ca869e
mov esi, ebx
rol ebx, 0x18
and edx, 0x792efe0a
shr esi, 8
ror edx, 0x18
and esi, 0x793053ff
sub ebx, esi
sub ebx, ecx
and esi, ecx
xor ebx, esi
xchg edx, esi
xchg ebx, ecx
inc ebx
sub ecx, 0x7933de2e
jmp 0x4a6a3b
push 0x73cbaece
and edx, ebx
xor ecx, 0x794cbf72
or ecx, 0x794d2ea7
sub edx, 0x794dbd17
or ecx, ebx
ror ebx, 0x12
dec ecx
add ecx, esi
add ebx, edx
xchg ebx, esi
jmp 0x4a7f80
pop edi
shl ecx, 0x14
and edx, ebx
xchg ecx, edx
rol ecx, 0xe
and ecx, esi
and edx, esi
sub edx, ecx
add edx, esi
or esi, 0x7961db52
add ebx, esi
jmp 0x4a84b4
call fcn.004a9545
mov ecx, ebx
or ebx, ecx
add edx, esi
or ebx, 0x79aec993
or esi, ebx
sub esi, ebx
add edx, ecx
not esi
xor ebx, 0x79b10ca8
ror edx, 0x10
shr ecx, 0x15
ror ecx, 0x1a
xchg ebx, edx
sub edx, esi
jmp 0x4a61cb
call fcn.004a9545
sub ecx, edx
xchg ecx, edx
mov ecx, edx
xor edx, ecx
add esi, 0x79bafe1d
xchg edx, esi
or ebx, 0x79bbdbc2
xor ebx, esi
or ecx, ebx
mov edx, ecx
jmp 0x4a766d
pop edi
sub ebx, 0x7a28f484
and ebx, esi
and ebx, ecx
add esi, 0x7a2a4c4e
inc edx
and edx, ebx
add esi, ebx
jmp 0x4a85c4
mov edi, 0x43370267
add ecx, edx
shl esi, 0x19
mov esi, 0x7a512968
neg ebx
add ecx, esi
xor esi, ebx
inc esi
or ecx, esi
ror esi, 9
xor esi, ecx
jmp 0x4a9217
mov edi, 0x43370267
xchg esi, edx
add ebx, ecx
or ebx, 0x7a75875b
sub ebx, edx
add ecx, esi
add ecx, edx
xchg ebx, esi
or ecx, edx
and ebx, ecx
or ebx, edx
jmp 0x4a91cf
call edi
or esi, ebx
not edx
ror ebx, 0x13
mov ebx, edx
dec ecx
xchg ebx, ecx
xor edx, ecx
and ebx, esi
sub ebx, ecx
jmp 0x4a70fc
call fcn.004a9545
dec esi
bswap ebx
sub esi, 0x7aa8c585
mov ecx, ebx
or edx, ecx
xchg ebx, ecx
xor edx, 0x7aaa8b52
or edx, esi
and edx, 0x7aad1a9d
mov edx, ebx
mov ecx, esi
or esi, ecx
add edx, esi
jmp 0x4a8ec4
pop edi
rol ecx, 8
and ebx, edx
xor ebx, ecx
xchg esi, ecx
xchg ebx, edx
shl edx, 0x17
xor esi, edx
nop
add esi, edx
xor edx, ebx
add ebx, edx
and ebx, 0x7adb6486
or edx, esi
jmp 0x4a91a4
mov edi, 0x183c2e20
xchg edx, ebx
add edx, esi
or ebx, esi
mov ecx, esi
and ebx, 0x7b099f39
or ebx, edx
and esi, ebx
rol edx, 0xe
or ebx, ecx
neg esi
xor ecx, edx
or edx, ebx
ror esi, 0x16
jmp 0x4a73fe
mov edi, 0x43370267
and ecx, esi
and esi, ecx
sub ebx, edx
sub ecx, ebx
bswap ecx
or esi, edx
and esi, ebx
sub edx, esi
inc ebx
or esi, ebx
and ebx, edx
shr esi, 0x1b
sub edx, 0x7b17bba5
or edx, ecx
jmp 0x4a6cd5
pop edi
xor ecx, ebx
mov edx, ecx
shl esi, 7
neg edx
or ecx, ebx
xchg edx, ecx
not ecx
xchg ecx, ebx
neg ecx
jmp 0x4a862c
pop edi
xor esi, edx
and ecx, ebx
or esi, ecx
sub esi, ecx
ror ebx, 0xc
sub esi, ecx
xchg ecx, edx
xchg ebx, edx
jmp 0x4a71de
push 0x73cda622
xor ecx, edx
not ecx
add esi, ebx
or ecx, edx
xchg edx, ebx
sub esi, 0x7b45d8f7
jmp 0x4a82ba
push 0x73c97fcb
shr ebx, 1
mov ecx, edx
mov ecx, ebx
and ebx, edx
xchg ebx, edx
or ecx, ebx
xchg ebx, esi
and esi, edx
inc edx
xor ecx, 0x7b533c26
jmp 0x4a6f38
jmp loc.004ae000
push 0x73c761e5
mov esi, ebx
or esi, edx
sub ebx, edx
and edx, ecx
and esi, ecx
not esi
sub ebx, edx
sub ebx, edx
ror edx, 1
jmp 0x4a8fa5
mov edi, 0x183c2e20
shl ecx, 0x14
inc esi
sub esi, 0x7b75a2d7
mov edx, 0x7b75dc88
jmp 0x4a65e9
call edi
mov edx, ebx
mov ebx, 0x7b99a5a0
bswap ebx
and ecx, ebx
mov esi, 0x7b9afc88
sub edx, 0x7b9b78a6
add edx, ebx
or ecx, ebx
xor ecx, ebx
or edx, esi
xchg ebx, edx
or esi, ecx
dec edx
jmp 0x4a6944
push 0x73ca5a5f
xor esi, edx
or edx, 0x7bde55ec
xchg edx, ebx
and esi, edx
mov esi, 0x7bdf9950
dec ecx
neg edx
not ecx
xor esi, edx
add edx, ecx
shr ecx, 0x1a
inc ebx
rol edx, 0x11
jmp 0x4a62a8
push 0x73cc2861
or ebx, ecx
mov ebx, esi
neg esi
mov edx, ebx
xor ebx, ecx
mov ebx, 0x7c5beeef
shl ecx, 0x16
or ebx, 0x7c5cd118
ror esi, 0x15
ror ebx, 0x1a
mov ebx, edx
inc ebx
xchg esi, edx
add ecx, ebx
or ebx, edx
jmp 0x4a6b56
pop edi
xchg ecx, esi
sub esi, edx
sub ecx, edx
neg ecx
or ecx, edx
jmp 0x4a638e
pop edi
shr ebx, 9
xor edx, ebx
or ecx, 0x7c8a1b42
shr edx, 0xa
shl edx, 0xf
and edx, ebx
mov ecx, 0x7c8bf661
rol esi, 0xe
shl ebx, 0x14
jmp 0x4a82d9
call fcn.004a9545
add esi, 0x7cbb4f6f
mov esi, edx
mov edx, ebx
or edx, 0x7cbc9db3
xor edx, ecx
xchg esi, ebx
mov ebx, ecx
bswap ecx
dec ebx
bswap ebx
or edx, ecx
mov ecx, 0x7cc0322d
ror esi, 0x11
and edx, ecx
xchg ecx, ebx
jmp 0x4a6bb9
push 0x73cbd8d0
sub edx, ebx
sub edx, ecx
xor esi, 0x7cdcab25
add edx, esi
sub edx, 0x7cdda903
bswap ebx
jmp 0x4a8523
mov edi, 0x183c2e20
add ebx, esi
bswap ecx
xchg ebx, esi
and esi, ebx
ror ecx, 0x1e
add edx, esi
add esi, ebx
and ecx, ebx
and ecx, esi
mov edx, ecx
jmp 0x4a7e9a
pop edi
and ecx, edx
xor edx, 0x7d5fbcb6
sub ebx, ecx
shr esi, 0x11
xor esi, 0x7d60ff9a
and ebx, 0x7d6170c2
or esi, ebx
mov edx, ecx
xchg edx, ecx
mov ecx, 0x7d6337d2
or ebx, edx
xor ecx, esi
and ecx, 0x7d64c65e
xchg edx, esi
xchg edx, ecx
or esi, edx
jmp 0x4a7115
push 0x73cb86bf
mov edx, ebx
and edx, ecx
add esi, ecx
mov ebx, edx
bswap ecx
and ebx, ecx
jmp 0x4a6305
push 0x73cc001d
sub esi, edx
sub esi, edx
mov esi, 0x7daf42fa
and esi, ebx
sub ecx, ebx
neg ebx
add ebx, esi
bswap ecx
not ecx
jmp 0x4a7bd1
pop edi
bswap esi
rol ecx, 0x17
add edx, esi
or esi, ebx
add ecx, esi
mov edx, 0x7dc79313
xchg esi, ecx
rol ecx, 5
xchg edx, ecx
jmp 0x4a72ac
push 0x73ce7a96
mov esi, 0x7dd348ca
neg ebx
shl ebx, 4
and ecx, ebx
dec edx
add esi, edx
not ebx
or ebx, esi
and edx, esi
or esi, 0x7dd75944
xor ebx, esi
dec esi
bswap edx
jmp 0x4a6ee8
call edi
and ebx, 0x7ee9c15d
xchg ebx, esi
and ebx, esi
jmp 0x4a7c02
call edi
and ebx, edx
and esi, 0x7ef21050
and esi, ebx
xchg esi, ebx
not ebx
add ebx, edx
xor ecx, 0x7ef43f92
and ecx, edx
sub ebx, edx
and ecx, esi
xchg edx, ebx
add edx, esi
xor edx, esi
jmp 0x4a90e1
mov edi, 0x43370267
or edx, ecx
xchg edx, ebx
sub esi, ecx
and edx, ebx
shr edx, 0x16
mov ebx, esi
and edx, ecx
jmp 0x4a6597
pop edi
add esi, ebx
or ebx, edx
or esi, 0x7f490e31
dec esi
and ebx, edx
and ebx, edx
jmp 0x4a7866
pop edi
inc ebx
not esi
mov esi, ecx
xchg esi, edx
mov ebx, esi
mov ecx, 0x7f61adb2
sub ecx, 0x7f621bdb
mov edx, 0x7f629658
xchg edx, ebx
or edx, ecx
add ebx, 0x7f63e405
add edx, ebx
jmp 0x4a7d20
call fcn.004a9545
or edx, ebx
rol esi, 0xb
sub edx, esi
add edx, 0x7f6633be
xor ebx, 0x7f669fff
add ebx, edx
xor esi, edx
sub esi, ecx
or ecx, ebx
xor ecx, 0x7f68cf02
jmp 0x4a61ad
call fcn.004a9545
xchg esi, edx
and ebx, edx
rol edx, 0x1c
and ebx, esi
xor ecx, edx
xchg edx, esi
add edx, esi
xchg edx, ecx
xor edx, ecx
or ebx, ecx
or ecx, esi
xchg esi, ecx
inc edx
inc ebx
add edx, esi
jmp 0x4a8e7f
pop edi
and ecx, 0x7fab2bcf
shl esi, 9
add ebx, 0x7fac0ade
bswap edx
nop
add edx, esi
and ecx, 0x7fadeafc
jmp 0x4a6159
push 0x73c883b8
and ecx, esi
xchg esi, edx
rol ebx, 0x1d
add ecx, edx
and ecx, 0x7fbb1541
and edx, ebx
xor edx, ebx
inc edx
sub ebx, 0x7fbce984
jmp 0x4a74b9