Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
add edx, ebx
or esi, 0x112c6bf1
mov edx, esi
add ebx, ecx
or ebx, ecx
shl ecx, 0x13
call sub.user32.dll_GetActiveWindow
rol ebx, 9
xor edx, esi
sub esi, ebx
or edx, esi
and edx, esi
cmp eax, 0xfffffed5
jne 0x4010be
call sub.user32.dll_mouse_event
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
ret
xchg esi, ebx
dec esi
mov ecx, 0x1137471e
xchg edx, ebx
sub esi, 0x1138372e
or ecx, 0x1138ae7f
mov edx, ecx
add esi, ebx
call sub.user32.dll_GetActiveWindow
sub ebx, esi
or esi, 0x113b121f
xchg esi, edx
or esi, edx
xor esi, 0x113c7613
xor ecx, ebx
sub ebx, esi
sub ebx, esi
cmp eax, 0xffffff2b
jne 0x40115b
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.user32.dll_mouse_event
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
call sub.user32.dll_SetDeskWallpaper
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.shell32.dll_ShellMessageBoxW
ret
add esi, edx
xor ecx, ebx
and esi, 0x114254ae
call sub.kernel32.dll_GetCommandLineW
mov ebx, 0x1142f6e2
cmp eax, 0xffffff2a
jne 0x4011ee
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.user32.dll_mouse_event
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.ntdll.dll_ZwDebugActiveProcess
ret
mov esi, ebx
and ecx, esi
mov esi, ecx
and esi, edx
or edx, ecx
xor edx, 0x1148b430
or edx, 0x11492b24
call sub.kernel32.dll_GetCommandLineW
rol esi, 0x1d
sub ecx, 0x114a7228
xchg edx, ecx
sub ecx, 0x114b5df2
and ebx, ecx
bswap ecx
xor ecx, edx
not edx
cmp eax, 0xffffff20
jne 0x401283
call sub.user32.dll_SetDeskWallpaper
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_SetDeskWallpaper
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.ntdll.dll_ZwDebugActiveProcess
call sub.shell32.dll_ShellMessageBoxW
call sub.shell32.dll_ShellMessageBoxW
call sub.user32.dll_mouse_event
call sub.user32.dll_mouse_event
call sub.user32.dll_SetDeskWallpaper
call sub.user32.dll_mouse_event
ret
jmp 0x4a0102
xor esi, ebx
dec edx
add ebx, edx
shl edx, 0x19
neg edx
mov esi, 0x11fd0eaa
jmp 0x4a35bc
push 0x12085deb
or ebx, ecx
dec edx
mov ebx, ecx
mov ebx, ecx
dec ecx
nop
and edx, ecx
sub edi, edx
add edx, edi
neg ecx
not ebx
jmp 0x4a202b
pop esi
sub ebx, 0x18835fdf
sub ebx, ecx
rol ebx, 9
sub ecx, edx
sub ebx, edi
or edi, edx
and edx, ecx
xor ecx, 0x18867afb
shl ebx, 0x15
jmp 0x4a2f15
mov esi, 0x123b2f04
sub edi, ebx
ror ecx, 9
or ecx, edx
xor edi, edx
dec ecx
neg edi
jmp 0x4a2d91
mov esi, 0x2774562b
xor edx, edi
sub edi, edx
sub edx, 0x18f72a21
sub edx, ecx
xchg ebx, edi
xchg ecx, edi
sub ebx, ecx
jmp 0x4a23c5
push 0x12080c4f
sub ebx, ecx
not ecx
mov ebx, ecx
xor ebx, 0x191a9421
jmp 0x4a017c
call esi
and edx, edi
xchg ebx, edx
add ecx, 0x1ab6387d
mov edi, ecx
sub ecx, edi
add ebx, 0x1ab6fac2
bswap edx
mov ecx, edi
mov ecx, edi
and ecx, ebx
or edi, ecx
xchg ebx, edi
jmp 0x4a01dd
mov esi, 0x123b2f04
mov ecx, edi
mov ecx, 0x1c2ceab6
or ebx, edx
xchg ecx, ebx
bswap ecx
shl edi, 0x16
inc edx
rol ecx, 0x16
inc edi
and ecx, edx
xor ecx, ebx
jmp 0x4a24ca
push 0x1208a8ae
xor ecx, ebx
and ebx, edx
sub edx, edi
add ebx, 0x1ccf8ec6
dec edx
and ebx, 0x1cd07fbd
add ebx, 0x1cd107b7
and ecx, ebx
xchg ebx, edx
jmp 0x4a1bca
call esi
mov ecx, edi
or edi, 0x1d013204
add ecx, edi
add edx, ebx
and ebx, ecx
neg edi
xchg ecx, ebx
or ecx, edi
dec ecx
or ebx, ecx
and edi, edx
bswap ebx
ror edi, 0x10
rol ecx, 0x12
sub edi, edx
jmp 0x4a325f
call fcn.004a374c
and edi, ebx
sub edx, ebx
rol edi, 0x1c
not ebx
xchg edx, edi
add ebx, 0x1d4f8583
add ebx, 0x1d50002a
shr ebx, 0x1c
add edi, edx
jmp 0x4a124a
jmp loc.004a8494
call fcn.004a374c
add ebx, edx
shl ebx, 3
xor ecx, edi
inc edi
jmp 0x4a2198
push 0x1205f4f1
and ebx, 0x1ef547f5
nop
xor edi, 0x1ef62e6a
and ecx, 0x1ef6a32d
sub edi, edx
shl edi, 0xe
mov edi, 0x1ef817b0
add edx, ebx
jmp 0x4a03fc
pop esi
ror edi, 0x10
and ebx, ecx
neg ecx
mov edi, edx
jmp 0x4a3714
push 0x120414b6
rol edi, 0x10
shr edx, 0x18
sub edx, 0x1fe72c57
sub ebx, ecx
sub ecx, edi
mov ebx, 0x1fe8828e
bswap ebx
rol ebx, 0xa
shl ebx, 8
bswap edi
jmp 0x4a04dd
push 0x1207bb82
shl ebx, 0xf
or edi, 0x2011bae7
sub edx, edi
inc ecx
mov edi, edx
mov edi, ebx
xor edx, edi
and ecx, edx
and edx, ecx
or edx, ecx
or edx, ebx
jmp 0x4a05c9