Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3
Receive data
Receive data on socket

Disassembly:
xor edi, esi
rol edi, 2
xchg esi, ecx
call sub.kernel32.dll_GetThreadLocale
ror ecx, 0x1e
and edx, esi
and ecx, 0x22643262
sub edi, esi
and ecx, 0x2264a96d
ror edx, 8
cmp eax, 0xfffffee6
jne 0x401097
call sub.ws2_32.dll_recvfrom
call sub.kernel32.dll_Process32NextW
call sub.ws2_32.dll_recvfrom
call sub.ws2_32.dll_recvfrom
call sub.ws2_32.dll_recvfrom
call sub.ws2_32.dll_recvfrom
call sub.ntdll.dll_RtlFreeOemString
call sub.ws2_32.dll_recvfrom
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ntdll.dll_RtlFreeOemString
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ws2_32.dll_recvfrom
call sub.ws2_32.dll_recvfrom
call sub.ws2_32.dll_recvfrom
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ws2_32.dll_recvfrom
call sub.kernel32.dll_Process32NextW
call sub.ws2_32.dll_recvfrom
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.kernel32.dll_Process32NextW
call sub.ws2_32.dll_recvfrom
ret
mov esi, ecx
shr edi, 0xa
call sub.kernel32.dll_GetThreadLocale
xchg edx, esi
or edx, edi
or ecx, edx
or edx, esi
cmp eax, 0xfffffeea
jne 0x40113c
call sub.kernel32.dll_Process32NextW
call sub.kernel32.dll_Process32NextW
call sub.kernel32.dll_Process32NextW
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ws2_32.dll_recvfrom
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.kernel32.dll_Process32NextW
call sub.ntdll.dll_RtlFreeOemString
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ws2_32.dll_recvfrom
call sub.ntdll.dll_RtlFreeOemString
call sub.ntdll.dll_RtlFreeOemString
call sub.kernel32.dll_Process32NextW
call sub.kernel32.dll_Process32NextW
call sub.kernel32.dll_Process32NextW
call sub.ntdll.dll_RtlFreeOemString
call sub.ntdll.dll_RtlFreeOemString
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ws2_32.dll_recvfrom
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ntdll.dll_RtlFreeOemString
call sub.ntdll.dll_RtlFreeOemString
call sub.ntdll.dll_RtlFreeOemString
call sub.ole32.dll_HPALETTE_UserUnmarshal
ret
ror edi, 0x18
sub edi, esi
and edx, 0x227823fa
neg esi
xchg edx, edi
and ecx, edi
neg edx
call sub.user32.dll_GetMessageExtraInfo
rol esi, 0x1e
neg ecx
sub edx, edi
cmp eax, 0xffffff33
jne 0x4011bc
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ntdll.dll_RtlFreeOemString
call sub.kernel32.dll_Process32NextW
call sub.ws2_32.dll_recvfrom
call sub.kernel32.dll_Process32NextW
call sub.ws2_32.dll_recvfrom
call sub.kernel32.dll_Process32NextW
call sub.ntdll.dll_RtlFreeOemString
call sub.kernel32.dll_Process32NextW
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ws2_32.dll_recvfrom
call sub.ws2_32.dll_recvfrom
call sub.kernel32.dll_Process32NextW
call sub.ntdll.dll_RtlFreeOemString
call sub.ntdll.dll_RtlFreeOemString
call sub.ws2_32.dll_recvfrom
ret
and edi, 0x228eda9a
bswap esi
xor edi, 0x228f5c96
or ecx, esi
call sub.kernel32.dll_GetCommandLineW
xor ecx, 0x228ff3b5
add edi, ecx
add edx, edi
sub edx, ecx
and esi, edx
mov edi, ecx
sub ecx, 0x229494f2
xchg edx, esi
cmp eax, 0xfffffee8
jne 0x401254
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ws2_32.dll_recvfrom
call sub.kernel32.dll_Process32NextW
call sub.ws2_32.dll_recvfrom
call sub.ntdll.dll_RtlFreeOemString
call sub.kernel32.dll_Process32NextW
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ws2_32.dll_recvfrom
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.kernel32.dll_Process32NextW
call sub.kernel32.dll_Process32NextW
call sub.ws2_32.dll_recvfrom
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ws2_32.dll_recvfrom
call sub.kernel32.dll_Process32NextW
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
ret
jmp 0x5a1086
mov edx, ecx
xor ecx, esi
sub edi, 0x25ba43b9
mov ecx, esi
and edx, esi
jmp 0x5a119e
push 0x25bf68b4
add edx, 0x41b0f800
sub ebx, ecx
xor ecx, 0x41b1710c
add ecx, 0x41b1bea2
or edx, edi
jmp 0x5a3066
mov esi, 0x123b2f04
and ecx, ebx
xor ebx, edi
sub edi, 0x41b4494d
xchg edx, edi
add edi, ecx
xchg ecx, edx
jmp 0x5a39d9
push 0x25bf05ca
add ebx, edx
add edx, ecx
xor edx, 0x41c10977
add edx, 0x41c14bbc
shr ebx, 0xc
rol edx, 0x19
xor edi, ecx
add ecx, edi
xor edx, edi
or edi, edx
rol ecx, 0x1a
xor edi, 0x41c4bf01
sub ecx, edx
and edx, ecx
jmp 0x5a230c
call fcn.005a1829
or edi, 0x41d63730
xchg edx, ebx
and ecx, ebx
add edi, edx
sub ecx, edi
sub edx, ebx
bswap edx
jmp 0x5a1a4f
pop esi
and edi, edx
xor edx, ebx
and ecx, 0x41ecc8cc
or edx, edi
add edi, ebx
xchg edx, ecx
or ecx, edi
and edx, 0x41ee3b44
xor edx, 0x41f3550d
xor ebx, 0x41f394d7
and ecx, 0x41f3db60
jmp 0x5a349c
pop esi
xor ebx, ecx
dec ecx
and ecx, edi
add edi, 0x42440bc9
mov ecx, edx
add edi, edx
jmp 0x5a3689
mov esi, 0x2774562b
xchg ebx, edx
sub ebx, 0x426a03a4
mov edi, edx
bswap edi
rol ecx, 0x1d
and ecx, ebx
mov ecx, 0x426b3933
xor ecx, 0x426b7b88
xor ebx, edx
jmp 0x5a1262
jmp loc.005a802c
call esi
xor ebx, ecx
xor edx, ecx
rol edi, 0x17
xchg edi, edx
rol ebx, 8
xor edx, ecx
xor edi, ebx
add ecx, 0x42e8d20d
sub edi, ebx
sub edi, ecx
xor edi, 0x42ea2724
mov ebx, ecx
neg ebx
jmp 0x5a1d8f
mov esi, 0x123b2f04
rol ebx, 0x1d
xchg edx, ebx
or edx, edi
shr ebx, 0x16
mov ebx, 0x4357cc48
shr ecx, 0x1f
inc edx
mov edx, ebx
xor ebx, ecx
add ebx, ecx
mov ecx, edi
jmp 0x5a3287
push 0x25c4585d
xor edi, ecx
sub ecx, edi
xchg edi, edx
sub edi, 0x436172f4
mov edi, edx
add edx, ecx
xor ecx, edx
xor edi, edx
bswap edx
and edi, ebx
xor edx, ecx
and edi, ebx
ror edi, 0xe
xchg edx, edi
bswap ebx
jmp 0x5a360e
pop esi
xchg ecx, ebx
add edx, 0x437a3946
xor ebx, edi
ror edx, 0x16
xchg ebx, edi
and ecx, 0x437fe0aa
rol edi, 0x1b
or edx, ecx
xor edi, ecx
sub ecx, edi
sub edx, 0x43811dad
jmp 0x5a25c4
call esi
sub edi, ebx
not ebx
add edx, ebx
or edx, ecx
ror ecx, 9
jmp 0x5a14f8
pop esi
xor edi, ebx
mov ebx, edi
mov ebx, ecx
add edi, ebx
mov ebx, 0x43adfc7e
add ecx, edx
sub edi, ebx
sub edx, 0x43aebd25
mov ebx, edi
xor ebx, edi
xor edi, ecx
xor ebx, edx
jmp 0x5a2e9a
pop esi
add ebx, 0x43d8dfc4
add ebx, 0x43d91955
rol ecx, 5
xchg ecx, ebx
xor ecx, edi
mov ebx, ecx
xor edi, 0x43da7eae
not edi
add edx, 0x43dafaa4
mov edi, ebx
jmp 0x5a23c6
push 0x25bf42d6
xor edx, ebx
and ecx, 0x4422aba8
xchg ecx, edx
and edi, ebx
ror ecx, 6
and edx, ecx
or edi, ebx
jmp 0x5a10e4
push 0x25bfbef1
and ebx, ecx
or edx, 0x44311e5c
mov ecx, edi
and edx, edi
neg ebx
dec ecx
jmp 0x5a3a0e
pop esi
mov edx, 0x4434fa86
xor ebx, ecx
sub ecx, edi
or ecx, edx
or ebx, edx
and ecx, 0x4436253e
and ebx, 0x443666a3
not ecx
mov edi, edx
shr edi, 6
or ebx, ecx
neg edi
or ebx, ecx
xchg edi, edx
add ebx, edx
jmp 0x5a212a
push 0x25c35373
xor ebx, edi
add edx, ebx
sub ecx, edx
xchg ebx, ecx
xchg edi, ecx
sub ecx, edi
sub ecx, ebx
xchg edx, ecx
xor edx, ecx
sub ebx, edi
add ebx, edx
and edx, ecx
neg ebx
jmp 0x5a16ee
call fcn.005a1829
or edi, 0x44861296
xchg edi, ebx
xchg ebx, edx
neg edx
ror edi, 0xa
add edi, 0x44874cf5
rol ebx, 0x18
jmp 0x5a1e6a
push 0x25c42caa
add edi, ecx
ror edi, 0x1d
or ecx, 0x4488641b
xor ebx, edx
inc ebx
xor ecx, 0x4489fb42
jmp 0x5a1cfc
push 0x25c24f7c
or edx, ebx
xor ecx, edi
rol ebx, 0x13
xor ebx, 0x44d9d96e
rol edi, 2
xor ecx, edi
mov ecx, ebx
sub edx, ebx
not ebx
bswap edi
or ecx, 0x44db8e33
jmp 0x5a1cd7
call esi
add edi, ecx
bswap edx
and ecx, 0x44dee222
add ebx, edi
rol edx, 0x17
neg edx
rol edi, 0x11
xor ebx, edx
shr edx, 0x16
or ecx, 0x44e099a1
neg edx
dec edi
xor edx, 0x44e15b30
xchg ecx, edx
and ebx, edx
add ecx, edx
jmp 0x5a1f10
push 0x25c146ce
or edi, ebx
mov edx, 0x45d6114b
xchg edi, ebx
sub edx, edi
ror ebx, 0x12
xor ebx, edi
jmp 0x5a111a
call esi
and edi, edx
neg edi
nop
xor edx, ebx
rol edi, 0xf
xchg edi, ecx
add edx, ebx
inc ebx
bswap edi
mov edx, ebx
jmp 0x5a2396
pop esi
neg ebx
xor ecx, ebx
xor edx, ecx
xor ecx, edi
or edi, edx
bswap ebx
bswap edx
rol edi, 0x1b
dec ebx
shl edi, 2
jmp 0x5a1294
push 0x25c22008
xor ecx, edx
sub edx, ecx
mov ecx, edx
shr edi, 0x12
inc edi
not edx
sub edi, ebx
add edi, edx
jmp 0x5a2869
push 0x25bf963e
shr edi, 0x14
and ecx, edx
and edi, edx
and edx, ecx
xor edx, ebx
jmp 0x5a2357
call fcn.005a1829
xchg ebx, edx
sub edx, ecx
and edi, ecx
sub ecx, edi
dec ecx
xor edi, edx
add edi, 0x46e8f0d0
xor edx, edi
mov ecx, edi
sub ecx, ebx
add edi, 0x46e9e6f1
jmp 0x5a2ce2
pop esi
mov ecx, 0x47309452
sub ecx, edi
sub ecx, ebx
and edi, 0x47315437
shr edx, 0x1f
sub edi, 0x4731d099
sub ecx, edx
mov ecx, ebx
sub edx, edi
neg edx
or edx, edi
jmp 0x5a2c7b
mov esi, 0x123b2f04
inc ebx
sub edx, 0x477b912f
and edi, ecx
and ecx, ebx
and ecx, edx
xchg edx, edi
or ebx, edx
or edx, edi
jmp 0x5a18b2
pop esi
mov edi, ebx
add edx, 0x478701ed
xchg ebx, edi
and edi, 0x47878ad5
inc edx
jmp 0x5a2d4e
call fcn.005a1829
xchg edi, ecx
or edi, ebx
xor edi, ecx
xor edi, ecx
sub edi, 0x47e12105
not edx
add ebx, edx
or edi, 0x47e1e54e
xchg ecx, edi
add edx, ebx
or ecx, ebx
mov edx, ebx
neg edx
and ecx, 0x47e35146
shl ebx, 1
jmp 0x5a28bc
mov esi, 0x2774562b
add ecx, edi
rol ecx, 0x16
and ebx, edx
inc ecx
mov ecx, edi
xor ecx, ebx
sub edi, ecx
xchg edx, edi
add ebx, 0x48000446
and edx, edi
jmp 0x5a25a2