Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffeee
jne 0x4010a2
call sub.user32.dll_EnumDisplaySettingsW
call sub.advapi32.dll_QueryAllTracesA
call sub.ntdll.dll_RtlDeleteTimer
call sub.user32.dll_EnumDisplaySettingsW
call sub.advapi32.dll_QueryAllTracesA
call sub.oleaut32.dll_VarUI2FromI8
call sub.ntdll.dll_RtlDeleteTimer
call sub.ntdll.dll_RtlDeleteTimer
call sub.advapi32.dll_QueryAllTracesA
call sub.user32.dll_EnumDisplaySettingsW
call sub.ntdll.dll_RtlDeleteTimer
call sub.ntdll.dll_RtlDeleteTimer
call sub.user32.dll_EnumDisplaySettingsW
call sub.oleaut32.dll_VarUI2FromI8
call sub.advapi32.dll_QueryAllTracesA
call sub.oleaut32.dll_VarUI2FromI8
call sub.advapi32.dll_QueryAllTracesA
call sub.ntdll.dll_RtlDeleteTimer
call sub.oleaut32.dll_VarUI2FromI8
call sub.oleaut32.dll_VarUI2FromI8
call sub.advapi32.dll_QueryAllTracesA
call sub.advapi32.dll_QueryAllTracesA
call sub.ntdll.dll_RtlDeleteTimer
call sub.oleaut32.dll_VarUI2FromI8
call sub.user32.dll_EnumDisplaySettingsW
call sub.advapi32.dll_QueryAllTracesA
call sub.user32.dll_EnumDisplaySettingsW
call sub.advapi32.dll_QueryAllTracesA
call sub.advapi32.dll_QueryAllTracesA
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffee8
jne 0x401108
call sub.oleaut32.dll_VarUI2FromI8
call sub.advapi32.dll_QueryAllTracesA
call sub.advapi32.dll_QueryAllTracesA
call sub.ntdll.dll_RtlDeleteTimer
call sub.advapi32.dll_QueryAllTracesA
call sub.ntdll.dll_RtlDeleteTimer
call sub.oleaut32.dll_VarUI2FromI8
call sub.oleaut32.dll_VarUI2FromI8
call sub.oleaut32.dll_VarUI2FromI8
call sub.advapi32.dll_QueryAllTracesA
call sub.ntdll.dll_RtlDeleteTimer
call sub.advapi32.dll_QueryAllTracesA
call sub.ntdll.dll_RtlDeleteTimer
call sub.advapi32.dll_QueryAllTracesA
call sub.oleaut32.dll_VarUI2FromI8
call sub.advapi32.dll_QueryAllTracesA
call sub.ntdll.dll_RtlDeleteTimer
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xffffff38
jne 0x401178
call sub.oleaut32.dll_VarUI2FromI8
call sub.user32.dll_EnumDisplaySettingsW
call sub.ntdll.dll_RtlDeleteTimer
call sub.advapi32.dll_QueryAllTracesA
call sub.oleaut32.dll_VarUI2FromI8
call sub.user32.dll_EnumDisplaySettingsW
call sub.advapi32.dll_QueryAllTracesA
call sub.ntdll.dll_RtlDeleteTimer
call sub.oleaut32.dll_VarUI2FromI8
call sub.advapi32.dll_QueryAllTracesA
call sub.oleaut32.dll_VarUI2FromI8
call sub.ntdll.dll_RtlDeleteTimer
call sub.oleaut32.dll_VarUI2FromI8
call sub.oleaut32.dll_VarUI2FromI8
call sub.user32.dll_EnumDisplaySettingsW
call sub.advapi32.dll_QueryAllTracesA
call sub.oleaut32.dll_VarUI2FromI8
call sub.user32.dll_EnumDisplaySettingsW
call sub.user32.dll_EnumDisplaySettingsW
ret
call sub.kernel32.dll_GetCommandLineA
cmp eax, 0xffffff2e
jne 0x401210
call sub.ntdll.dll_RtlDeleteTimer
call sub.ntdll.dll_RtlDeleteTimer
call sub.advapi32.dll_QueryAllTracesA
call sub.advapi32.dll_QueryAllTracesA
call sub.advapi32.dll_QueryAllTracesA
call sub.oleaut32.dll_VarUI2FromI8
call sub.advapi32.dll_QueryAllTracesA
call sub.advapi32.dll_QueryAllTracesA
call sub.oleaut32.dll_VarUI2FromI8
call sub.advapi32.dll_QueryAllTracesA
call sub.user32.dll_EnumDisplaySettingsW
call sub.ntdll.dll_RtlDeleteTimer
call sub.oleaut32.dll_VarUI2FromI8
call sub.oleaut32.dll_VarUI2FromI8
call sub.oleaut32.dll_VarUI2FromI8
call sub.oleaut32.dll_VarUI2FromI8
call sub.advapi32.dll_QueryAllTracesA
call sub.ntdll.dll_RtlDeleteTimer
call sub.oleaut32.dll_VarUI2FromI8
call sub.user32.dll_EnumDisplaySettingsW
call sub.advapi32.dll_QueryAllTracesA
call sub.oleaut32.dll_VarUI2FromI8
call sub.ntdll.dll_RtlDeleteTimer
call sub.user32.dll_EnumDisplaySettingsW
call sub.advapi32.dll_QueryAllTracesA
call sub.user32.dll_EnumDisplaySettingsW
call sub.ntdll.dll_RtlDeleteTimer
ret
jmp 0x47cb24
and ecx, edi
or ebx, edi
or ecx, esi
shr ebx, 5
bswap esi
xor ebx, ecx
and esi, 0xf55d8ef1
and edi, ebx
jmp 0x47fbcd
push 0xf561786f
add edi, ecx
shr edx, 1
and esi, ecx
xchg ecx, esi
xor esi, ecx
bswap edx
or edx, 0xf89e72c8
sub esi, edx
or ecx, edx
add ecx, esi
jmp 0x47ede9
mov ebx, 0x43370267
nop
and edi, ecx
or edi, ecx
xchg edi, esi
xor ecx, edi
jmp 0x47e07f
jmp loc.00484bd7
push 0xf56151be
sub esi, edx
neg edi
inc ecx
and edi, edx
and ecx, esi
and edi, ecx
and esi, ecx
sub ecx, 0xfa894735
jmp 0x47cbee
push 0xf561a0d9
xor edi, ecx
sub edi, ecx
and edx, esi
sub edx, edi
or esi, 0xfaa52e75
or ecx, esi
or edi, ecx
sub edx, esi
or ecx, edx
inc edi
shr edi, 0x13
rol ecx, 0x11
add edi, ecx
jmp 0x47defa
push 0xf5611e33
or edi, esi
neg esi
mov edx, esi
and ecx, edi
sub edi, edx
jmp 0x47ec00