Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Send data
Send data on socket

Disassembly:
mov edx, ebx
rol ebx, 0x1f
mov edx, ebx
sub ecx, esi
inc ecx
inc ebx
or ebx, esi
rol ecx, 0x12
call sub.kernel32.dll_GetCurrentThread
xor esi, ecx
xor edx, ebx
mov esi, edx
xor ebx, esi
and esi, 0x660f50e0
cmp eax, 0xffffff2d
jne 0x4010a2
call sub.user32.dll_DdeCmpStringHandles
call sub.ws2_32.dll_WSASend
call sub.ws2_32.dll_WSASend
call sub.ole32.dll_CoRevertToSelf
call sub.ws2_32.dll_WSASend
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_RemovePropW
call sub.ws2_32.dll_WSASend
call sub.ws2_32.dll_WSASend
call sub.ws2_32.dll_WSASend
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_RemovePropW
call sub.user32.dll_RemovePropW
call sub.ole32.dll_CoRevertToSelf
call sub.ws2_32.dll_WSASend
call sub.user32.dll_RemovePropW
call sub.user32.dll_RemovePropW
call sub.user32.dll_DdeCmpStringHandles
call sub.user32.dll_RemovePropW
call sub.ws2_32.dll_WSASend
call sub.user32.dll_DdeCmpStringHandles
call sub.ws2_32.dll_WSASend
call sub.user32.dll_RemovePropW
ret
sub edx, ecx
xor esi, ebx
add ecx, edx
or edx, ecx
sub ecx, 0x6613cf37
call sub.kernel32.dll_GetCurrentThread
and esi, edx
sub edx, 0x6614dad5
shr esi, 0x19
cmp eax, 0xffffff0e
jne 0x401144
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_DdeCmpStringHandles
call sub.user32.dll_RemovePropW
call sub.user32.dll_DdeCmpStringHandles
call sub.user32.dll_RemovePropW
call sub.user32.dll_RemovePropW
call sub.user32.dll_DdeCmpStringHandles
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_RemovePropW
call sub.user32.dll_DdeCmpStringHandles
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_RemovePropW
call sub.ws2_32.dll_WSASend
call sub.ws2_32.dll_WSASend
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_RemovePropW
call sub.user32.dll_RemovePropW
call sub.user32.dll_DdeCmpStringHandles
call sub.user32.dll_DdeCmpStringHandles
call sub.user32.dll_RemovePropW
call sub.user32.dll_DdeCmpStringHandles
call sub.ole32.dll_CoRevertToSelf
call sub.ws2_32.dll_WSASend
call sub.ole32.dll_CoRevertToSelf
ret
mov esi, 0x66189ff0
add esi, edx
or edx, ebx
sub edx, esi
and ebx, esi
call sub.kernel32.dll_GetCurrentThread
shl ecx, 4
shr esi, 0xd
or ecx, edx
cmp eax, 0xffffff0c
jne 0x4011c9
call sub.ole32.dll_CoRevertToSelf
call sub.ole32.dll_CoRevertToSelf
call sub.ws2_32.dll_WSASend
call sub.user32.dll_RemovePropW
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_DdeCmpStringHandles
call sub.user32.dll_RemovePropW
call sub.user32.dll_RemovePropW
call sub.user32.dll_DdeCmpStringHandles
call sub.ws2_32.dll_WSASend
call sub.ws2_32.dll_WSASend
call sub.user32.dll_DdeCmpStringHandles
call sub.ws2_32.dll_WSASend
call sub.ws2_32.dll_WSASend
call sub.ole32.dll_CoRevertToSelf
call sub.ws2_32.dll_WSASend
call sub.ws2_32.dll_WSASend
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_RemovePropW
ret
mov ebx, edx
call sub.kernel32.dll_GetCurrentThread
sub esi, edx
xchg ebx, esi
add ebx, esi
sub ecx, edx
cmp eax, 0xfffffee5
jne 0x401261
call sub.user32.dll_RemovePropW
call sub.user32.dll_DdeCmpStringHandles
call sub.ws2_32.dll_WSASend
call sub.user32.dll_DdeCmpStringHandles
call sub.user32.dll_DdeCmpStringHandles
call sub.ws2_32.dll_WSASend
call sub.user32.dll_RemovePropW
call sub.ws2_32.dll_WSASend
call sub.user32.dll_DdeCmpStringHandles
call sub.user32.dll_DdeCmpStringHandles
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_RemovePropW
call sub.user32.dll_RemovePropW
call sub.user32.dll_DdeCmpStringHandles
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_RemovePropW
call sub.ole32.dll_CoRevertToSelf
call sub.ws2_32.dll_WSASend
call sub.user32.dll_DdeCmpStringHandles
call sub.ws2_32.dll_WSASend
call sub.ole32.dll_CoRevertToSelf
call sub.user32.dll_RemovePropW
call sub.user32.dll_RemovePropW
call sub.user32.dll_DdeCmpStringHandles
call sub.ws2_32.dll_WSASend
ret
jmp 0x4945e6
ror esi, 0x15
shr edx, 0x14
jmp 0x496d28
push 0x67c03edd
sub ebx, esi
bswap esi
add edi, esi
mov ebx, edi
add ebx, esi
add ebx, esi
xor esi, ecx
jmp 0x495ec2
mov edx, 0x4132136a
xchg ebx, ecx
or edi, ecx
sub esi, 0x7205c14e
shr ebx, 0x12
sub ecx, edi
ror edi, 0x19
and ecx, esi
and esi, ecx
and esi, edi
jmp 0x494a3e
call edx
and edi, esi
xchg esi, ecx
add ebx, ecx
sub esi, 0x722674b6
jmp 0x4972bb
push 0x67c9e23a
mov ebx, esi
or ecx, 0x722791ad
mov ecx, esi
jmp 0x496205
mov edx, 0x123b2f04
sub esi, 0x723f65d1
sub esi, ebx
neg edi
add edi, esi
inc edi
or ecx, ebx
or esi, edi
or esi, ecx
xchg ebx, edi
jmp 0x494943
pop edx
dec ebx
xchg edi, ecx
mov edi, ebx
add ecx, ebx
add ecx, 0x725f0817
mov esi, ecx
xchg edi, esi
ror esi, 7
or ecx, edi
jmp 0x49587f
push 0x67dfe865
sub esi, ecx
neg ebx
shr ebx, 0xb
add esi, 0x728db8b2
and edi, ebx
add esi, ecx
and edi, 0x728f13cc
and esi, 0x728f8889
neg ecx
jmp 0x4971d1
call fcn.00494c57
mov edi, ebx
or esi, ebx
inc edi
shr ebx, 0x1e
xchg edi, ecx
xor esi, ecx
mov esi, ebx
bswap ebx
xor edi, ebx
xchg edi, ecx
sub esi, edi
jmp 0x494766
call fcn.00494c57
or ebx, ecx
bswap ebx
xchg ecx, edi
xor ebx, edi
dec edi
not ebx
mov edi, esi
jmp 0x4967b4
jmp loc.0049a000
call fcn.00494c57
and ebx, esi
neg ecx
add edi, esi
shr ebx, 0x19
xchg ebx, esi
not ebx
add ecx, 0x737d97d0
add ebx, edi
and edi, esi
not edi
add edi, ebx
jmp 0x49546b
call fcn.00494c57
xor esi, ebx
shl ebx, 2
xchg edi, ecx
and esi, 0x73826e19
xor ebx, 0x7382cb8f
or edi, ecx
xor edi, esi
xchg esi, edi
mov edi, ecx
sub ecx, 0x73840da6
jmp 0x4954df
call edx
add ecx, 0x73b6ed35
or ebx, 0x73b737ef
and ebx, 0x73b7769b
and edi, 0x73b7b6d9
mov ebx, ecx
dec ebx
jmp 0x4963c2
push 0x67ca81ff
add ecx, 0x73daed03
dec ecx
xor edi, 0x73dbd2f9
rol esi, 0x1f
inc esi
mov esi, ecx
mov ecx, edi
xor ebx, 0x73de558a
mov edi, esi
jmp 0x496b19
pop edx
ror ebx, 0xd
shl edi, 0xe
jmp 0x497283
pop edx
mov edi, ebx
sub edi, esi
xor ecx, 0x743e37d8
neg ebx
mov edi, esi
or esi, ecx
xor edi, ecx
mov ecx, esi
mov ecx, edi
mov ecx, esi
bswap ecx
jmp 0x49489a
call edx
xor esi, 0x744a706f
mov ebx, edi
shl ebx, 0x15
shl ecx, 0xf
xor ecx, edi
mov ebx, edi
xor edi, esi
shr ecx, 0x17
inc esi
jmp 0x496123
push 0x67df3d6a
mov esi, ebx
xor ebx, ecx
sub esi, ecx
shl ecx, 2
not edi
add ebx, ecx
or esi, 0x74526bc0
sub esi, ecx
rol esi, 0x14
mov ebx, esi
jmp 0x497487
call edx
sub ebx, edi
mov esi, 0x74599f1d
sub edi, esi
sub edi, ebx
dec ebx
and edi, esi
and ebx, edi
mov ecx, ebx
bswap esi
sub ecx, edi
xor ecx, esi
sub ebx, ecx
and ecx, ebx
jmp 0x4968b8
push 0x67d60a42
mov esi, ecx
or edi, ebx
neg edi
xor ebx, 0x7482f6a3
shr esi, 0xb
jmp 0x49701c
pop edx
xor edi, 0x7483febd
mov ecx, esi
jmp 0x495410
push 0x67bb8cd6
mov ecx, esi
xor ecx, esi
mov ecx, edi
mov esi, ecx
mov ebx, esi
neg edi
add ebx, esi
ror edi, 9
add esi, ebx
jmp 0x4947eb
pop edx
add esi, edi
mov ecx, ebx
add ebx, esi
mov ebx, 0x74b84dc5
xchg esi, ecx
or esi, edi
and ebx, edi
shl ebx, 0x1a
add edi, esi
add esi, ebx
xor edi, esi
bswap ecx
ror ecx, 0x1c
xor esi, ecx
or edi, 0x74bdcde1
jmp 0x49470b
push 0x67d3bdd5
xchg ecx, esi
shr ecx, 0x13
sub ecx, ebx
xor ecx, ebx
xchg esi, ebx
shr ecx, 0x1a
and ecx, esi
xor ecx, ebx
mov edi, ebx
xor ecx, edi
and ecx, edi
mov esi, ebx
mov ebx, esi
and ecx, esi
jmp 0x49629a
push 0x67bab5e2
or ebx, ecx
and ecx, ebx
mov esi, ecx
dec ebx
mov esi, edi
bswap ecx
or esi, 0x75301f12
mov esi, 0x75308c46
add ecx, edi
not esi
or ebx, edi
not ecx
and edi, ebx
sub ebx, ecx
sub edi, ebx
jmp 0x497366
push 0x67bb41d4
add ecx, edi
and ecx, esi
sub edi, esi
xor esi, edi
not ebx
jmp 0x495667
pop edx
or edi, esi
xchg edi, esi
mov ecx, 0x757c67f1
or esi, ebx
and ecx, 0x757cf2e3
rol ecx, 9
xor ebx, esi
mov edi, 0x757daca7
and ecx, ebx
ror ebx, 0x11
and ecx, edi
xchg edi, esi
add ecx, 0x7580fe71
shl esi, 0x14
or edi, ecx
add edi, ecx
jmp 0x49548a
pop edx
add esi, ebx
xor ecx, edi
shl edi, 2
xor esi, ebx
xor ebx, ecx
mov ebx, 0x7598b6d4
add esi, ecx
add edi, 0x75993b7c
dec edi
shl esi, 0x19
mov esi, ecx
jmp 0x49730b
push 0x67c09261
or esi, ebx
and edi, esi
sub esi, edi
inc ebx
bswap ecx
shl edi, 0x13
mov edi, ebx
shr esi, 0x10
and ecx, edi
jmp 0x494779
pop edx
or ebx, edi
sub esi, ecx
dec ecx
add edi, ecx
xor ecx, esi
bswap esi
xor ebx, ecx
or ebx, esi
sub ebx, 0x75f646d2
sub esi, 0x75f68404
jmp 0x495c8b
pop edx
neg ecx
and ecx, edi
mov ecx, 0x75f7804e
and ebx, ecx
neg esi
add edi, ebx
ror ecx, 0x1e
xor ebx, 0x75f8c133
xor ebx, esi
mov ecx, ebx
xor edi, ecx
jmp 0x496de5
pop edx
rol ebx, 7
or ebx, ecx
mov edi, ebx
jmp 0x4961ad
pop edx
add ecx, ebx
bswap esi
xchg ecx, ebx
rol ebx, 9
rol edi, 0xb
add ecx, edi
sub edi, ecx
xor esi, 0x7614fc5f
add ecx, 0x76156e24
mov edi, esi
mov ebx, ecx
jmp 0x496779
push 0x67ca39b9
add ebx, edi
add ebx, edi
xor ecx, edi
mov edi, esi
sub ebx, ecx
dec esi
rol edi, 0x16
xor edi, esi
dec ebx
neg ebx
jmp 0x49515c
mov edx, 0x123b2f04
add edi, esi
add edi, esi
mov esi, ebx
and esi, edi
or ecx, edi
mov esi, ecx
ror ecx, 8
and edi, esi
jmp 0x496952
pop edx
mov ebx, esi
add ecx, edi
xchg esi, edi
inc ecx
or edi, 0x764afa86
xor ecx, 0x764b45c6
sub ecx, edi
and edi, ebx
and ebx, ecx
add edi, esi
sub ecx, edi
xchg ecx, edi
jmp 0x49560e
pop edx
xor ecx, esi
add ebx, ecx
not ecx
ror ecx, 0xb
sub esi, 0x766f20c0
xor edi, esi
xchg ebx, ecx
xchg edi, ecx
or esi, 0x76715f69
xor edi, ebx
rol esi, 0xb
jmp 0x497042
push 0x67e09209
sub ecx, ebx
mov ebx, 0x76a0413d
shl edi, 3
xor esi, ebx
xchg esi, edi
xor edi, 0x76a1430b
and esi, edi
sub esi, 0x76a1bc98
mov ebx, edi
jmp 0x496e6c
push 0x67d5bcce
xchg ebx, edi
xchg edi, ecx
sub ebx, ecx
or ecx, esi
rol ecx, 0x15
xor ecx, ebx
sub ecx, edi
and edi, ecx
sub ecx, 0x76be92a9
neg edi
jmp 0x4955f5
pop edx
mov esi, ecx
shr ecx, 0xf
xor esi, ebx
and edi, ebx
jmp 0x49541c
call edx
or esi, ebx
xor ebx, esi
xor esi, 0x76d3e4b7
and ecx, edi
or ecx, esi
jmp 0x495d6c
pop edx
xchg esi, ecx
xchg esi, ecx
or ecx, edi
or edi, esi
sub ecx, ebx
add ecx, ebx
inc ecx
jmp 0x4971b2
call fcn.00494c57
add esi, 0x77183625
or edi, ebx
bswap esi
or ebx, 0x7718fd54
nop
jmp 0x49500a
push 0x67be8d02
dec esi
xchg edi, ecx
sub esi, ecx
mov ebx, esi
sub ebx, 0x771cf831
xchg esi, edi
sub ecx, esi
add ebx, 0x771e60c9
sub ebx, edi
xor edi, esi
or ecx, ebx
shr esi, 0x1e
xor ebx, edi
jmp 0x497563
mov edx, 0x123b2f04
xchg edi, esi
add ecx, esi
xor ecx, 0x775d71d1
dec edi
not ecx
xor esi, ecx
not ebx
shr ecx, 0x17
sub esi, 0x775ef5c8
xchg ebx, esi
or edi, ecx
jmp 0x494d4f
pop edx
xor ebx, 0x779164d3
sub esi, ebx
or edi, ecx
rol ebx, 0xa
neg esi
sub ecx, edi
and esi, edi
or esi, ebx
xchg ecx, esi
jmp 0x494607
push 0x67ba6f2d
xor edi, ebx
mov ebx, 0x77d1b832
or ebx, esi
add ecx, edi
sub ecx, ebx
add ecx, edi
jmp 0x495aab
pop edx
bswap esi
shl ecx, 0x12
rol edi, 0xb
and edi, esi
neg esi
jmp 0x495771
mov edx, 0x123b2f04
sub esi, ebx
xchg ebx, esi
and ecx, 0x77f07f3a
sub ebx, ecx
jmp 0x494d9e
call edx
sub ecx, edi
xchg ecx, ebx
and esi, ecx
add ecx, 0x780be34b
shl ebx, 0x11
mov edi, ecx
add esi, edi
and ecx, esi
not edi
mov ecx, ebx
add ecx, ebx
sub ebx, ecx
add ebx, ecx
jmp 0x496be8
push 0x67d65a9c
and esi, ebx
add ebx, edi
sub ebx, esi
or ecx, ebx
or edi, 0x781f6bac
xor ebx, esi
mov ebx, edi
xor edi, esi
add edi, 0x78217763
add edi, ecx
jmp 0x4975c2
push 0x67d5687d
shr ecx, 0xa
xor ebx, 0x7822be9b
inc edi
mov esi, ebx
shl ebx, 0x18
ror edi, 9
sub edi, 0x7823f753
or ebx, 0x78243497
jmp 0x4966f8
call fcn.00494c57
xor edi, ebx
add ebx, 0x783d54dc
xor edi, esi
ror edi, 6
and ecx, esi
add ebx, ecx
xchg edi, ecx
jmp 0x496f57
pop edx
sub edi, ebx
bswap edi
neg ecx
xchg ecx, ebx
or esi, ecx
shr edi, 0xd
and esi, ecx
add ecx, 0x784096b0
or edi, ecx
mov ebx, esi
jmp 0x4960ff
push 0x67e03e69
or ebx, edi
mov esi, 0x78444a01
add ebx, ecx
or ebx, ecx
and ecx, ebx
mov ecx, 0x78460c16
or ebx, ecx
shl edi, 5
or ecx, ebx
and ebx, edi
xor ebx, esi
neg esi
rol esi, 0x1a
mov edi, ebx
xchg esi, edi
jmp 0x4965fb
pop edx
add esi, edi
add ebx, ecx
xor esi, 0x7860ed70
and edi, 0x78612bd5
jmp 0x49696d
pop edx
xchg ebx, ecx
shl ebx, 0x1b
xchg ebx, esi
xchg ecx, esi
shr esi, 1
add esi, ecx
nop
and edi, esi
jmp 0x4962e6
pop edx
or edi, ebx
xchg edi, esi
ror esi, 0x15
add esi, ecx
xor ebx, 0x7887dbd0
or esi, ecx
mov ecx, esi
add ebx, edi
or esi, 0x788bebe2
jmp 0x4960de
push 0x67baf0af
shl esi, 0xb
xor ebx, esi
nop
xor esi, edi
xor ecx, esi
inc ecx
mov edi, esi
add ebx, ecx
mov esi, 0x7890d26f
neg ebx
not ebx
jmp 0x495b0b
push 0x67df96d9
xor esi, ecx
xchg ebx, ecx
rol edi, 3
or ecx, esi
ror ebx, 4
and edi, ebx
jmp 0x49491a
mov edx, 0x123b2f04
or esi, ecx
dec edi
mov esi, edi
mov edi, esi
or ecx, 0x78e346e2
xchg esi, edi
shr esi, 1
xor esi, 0x78e95f31
add ebx, edi
xchg ecx, edi
and edi, esi
ror ebx, 0x18
and esi, 0x78eab68c
jmp 0x497195
mov edx, 0x2774562b
xor ebx, 0x78f8619d
sub ebx, 0x78f8a5be
inc ebx
neg esi
or edi, esi
or ecx, ebx
bswap ecx
or ecx, edi
jmp 0x4949b0