Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api
Print debug messages

Disassembly:
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xfffffefe
jne 0x40107f
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.advapi32.dll_SetNamedSecurityInfoExA
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff08
jne 0x4010f4
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ole32.dll_HBITMAP_UserSize
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffeda
jne 0x40119b
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.kernel32.dll_OutputDebugStringA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ole32.dll_HBITMAP_UserSize
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
call sub.kernel32.dll_OutputDebugStringA
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xffffff36
jne 0x401206
call sub.kernel32.dll_OutputDebugStringA
call sub.ole32.dll_HBITMAP_UserSize
call sub.kernel32.dll_OutputDebugStringA
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ws2_32.dll_inet_addr
call sub.ole32.dll_HBITMAP_UserSize
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.ws2_32.dll_inet_addr
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_OutputDebugStringA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.ole32.dll_HBITMAP_UserSize
ret
jmp 0x4751a8
add edx, ecx
and edi, esi
jmp 0x477895
call ebx
xchg ecx, esi
add ecx, esi
xor edi, ecx
or esi, edx
not ecx
and edx, edi
jmp 0x47796f
call ebx
sub esi, edi
shr esi, 0x1c
and edi, 0x691eb173
xor edx, esi
jmp 0x47652a
push 0x654294b0
add edi, edx
sub edx, 0x691f874f
sub edi, 0x691fbd4c
sub esi, edi
neg edi
mov ecx, edx
add edx, 0x692096e7
sub ecx, esi
shl ecx, 0x1c
shl esi, 0x18
jmp 0x47621b
pop ebx
dec esi
xchg esi, edx
add edi, 0x69341a10
and esi, edi
inc edx
and edx, 0x6934c2c2
xchg edx, esi
ror esi, 0x1a
sub ecx, edi
jmp 0x475451
push 0x654bc8b4
or edi, edx
or ecx, esi
dec edi
jmp 0x4775f3
pop ebx
or esi, ecx
sub ecx, esi
add edx, 0x69456876
xor ecx, edi
add edi, ecx
and edi, esi
mov edx, 0x69467ad2
shr esi, 4
xor edx, esi
and esi, 0x694718b9
and edx, 0x69474cba
or esi, ecx
jmp 0x4763ee
pop ebx
shr ecx, 0x18
not edi
shl ecx, 0xa
and ecx, 0x695a5f7a
sub edx, 0x695ac5fc
mov esi, ecx
shl edi, 0xd
jmp 0x4759fb
push 0x654ccb87
add ecx, 0x695d9b2a
sub edx, ecx
and esi, edi
mov edi, edx
sub ecx, 0x695ea691
xor edx, 0x695f08a6
sub esi, edx
and edx, 0x695fe235
rol ecx, 6
not edx
sub edi, ecx
sub edi, edx
mov edx, 0x6961cfa3
jmp 0x476148
push 0x65457ced
xor esi, 0x69677778
xchg esi, edx
dec edi
jmp 0x4756e5
push 0x6552c7af
or edi, ecx
sub ecx, edx
sub esi, ecx
mov ecx, 0x696e6a85
neg esi
xor esi, ecx
sub edi, 0x696f0bd6
sub edx, 0x696f3f0b
jmp 0x475e58
pop ebx
ror ecx, 0x16
mov edi, 0x6971b360
sub ecx, 0x6971e6de
sub ecx, edi
xor ecx, 0x69724f78
sub ecx, edx
xor edx, 0x6972c000
sub edi, 0x6972f739
sub edx, edi
sub ecx, edx
ror esi, 0xf
ror ecx, 0xd
mov esi, edx
jmp 0x47536b
mov ebx, 0x123b2f04
xchg esi, edi
not esi
and edx, esi
neg edi
inc edx
xor ecx, 0x6975aab9
and ecx, edi
sub edx, 0x69767c4f
mov esi, ecx
sub ecx, 0x69773f37
inc esi
and esi, 0x697801ba
not edx
xchg ecx, esi
add esi, edi
jmp 0x478076
call fcn.00477b62
inc esi
xor edi, ecx
not esi
ror ecx, 0x1b
mov edx, edi
and edx, 0x69826e58
bswap ecx
dec esi
xchg esi, edx
or edi, ecx
jmp 0x476ba5
pop ebx
xchg edx, ecx
and edx, esi
xchg edi, esi
sub edx, 0x6984ea7c
add edx, esi
ror edi, 0x12
sub edx, esi
xchg edi, edx
and edi, esi
xor edx, ecx
xchg edx, esi
rol esi, 0xe
xor esi, ecx
jmp 0x477add
call ebx
xor edx, 0x69920e66
mov ecx, edx
and esi, 0x6992c863
sub ecx, edx
dec edi
mov esi, ecx
or ecx, edi
mov ecx, edi
or edx, edi
shr edx, 0xa
sub edx, edi
bswap ecx
jmp 0x47785a
pop ebx
xchg edi, edx
sub edx, ecx
add esi, 0x69c7f9ba
xchg edi, esi
xchg ecx, edx
add edi, 0x69c93124
and edi, esi
sub ecx, edx
add ecx, esi
xor esi, edi
shr ecx, 1
mov edx, 0x69cb0536
and edi, 0x69cb38bb
jmp 0x476c89
call ebx
sub esi, 0x69cb8012
or ecx, edi
mov edi, edx
shr edi, 0xf
xor esi, edi
mov esi, edi
dec ecx
rol edi, 1
xchg ecx, edx
and edi, ecx
shr edi, 0x19
jmp 0x475594
pop ebx
and esi, ecx
add edx, ecx
xor esi, ecx
add ecx, esi
sub edx, 0x69f787e0
shr edi, 0xd
jmp 0x47650e
pop ebx
sub edi, ecx
add ecx, edx
sub ecx, 0x6a03f1e8
add edi, 0x6a044a0f
rol edx, 0x1f
jmp 0x475ce6
push 0x65522e3e
mov ecx, 0x6a08d4a9
and edx, 0x6a093947
and edi, esi
shr ecx, 0xd
sub edx, ecx
inc ecx
sub edi, edx
bswap edx
mov edx, ecx
sub edx, ecx
xchg esi, edi
jmp 0x476243
push 0x654939ec
and edi, 0x6a181014
mov edi, 0x6a1847a6
dec edx
dec edi
sub ecx, 0x6a18f01c
mov ecx, esi
xchg edi, ecx
xor esi, 0x6a198a1f
neg edi
add esi, ecx
sub esi, edi
rol edx, 0x11
jmp 0x476e4f
push 0x655315f7
or edx, ecx
sub edx, edi
ror esi, 0xc
sub esi, ecx
jmp 0x476adb
pop ebx
xor edi, edx
xor esi, edx
add esi, 0x6a276c17
mov ecx, 0x6a27a320
shr edx, 0x16
sub edi, esi
or esi, 0x6a28418c
jmp 0x475770
jmp loc.0047b000
call fcn.00477b62
and ecx, edx
xor edx, esi
shl ecx, 6
and ecx, 0x6a3301d5
xchg esi, ecx
ror ecx, 9
neg esi
xchg edx, ecx
neg edx
bswap edx
mov esi, edi
jmp 0x475a2b
push 0x65452b35
add esi, edx
shr edi, 1
and ecx, edx
add ecx, esi
or edx, ecx
sub ecx, 0x6a5a8742
and esi, ecx
xor edi, ecx
or esi, ecx
xor esi, edi
and esi, ecx
jmp 0x475635
push 0x654d1a7c
add edi, esi
sub esi, edi
xchg esi, edi
xor esi, edi
dec edi
shr edi, 8
jmp 0x4779b1
call fcn.00477b62
sub edi, edx
xchg ecx, esi
sub edx, 0x6a5e5181
and edx, esi
nop
xchg edi, esi
xor edi, esi
or edx, edi
add ecx, edx
shl edi, 0x18
add ecx, edx
jmp 0x475806
mov ebx, 0x2774562b
and edx, edi
add esi, 0x6a67e018
and edi, esi
jmp 0x475eb1
push 0x6542ebec
sub esi, ecx
xchg edi, ecx
neg edi
or esi, edx
neg ecx
sub ecx, 0x6a699ace
shr ecx, 0xb
xor edx, esi
sub ecx, edx
xchg esi, ecx
dec ecx
mov esi, ecx
mov edi, edx
jmp 0x477e78
push 0x65527bd4
inc esi
mov esi, 0x6a6b8fc7
shr edx, 0x13
bswap esi
add ecx, 0x6a6c2c9e
shr edx, 0x16
neg edx
and edx, ecx
or esi, 0x6a6d0810
or edi, esi
jmp 0x475673
pop ebx
add edi, esi
and edx, esi
not esi
mov edx, edi
jmp 0x475c04
push 0x6550538f
shr edx, 3
not esi
mov edi, esi
add esi, 0x6a871b8a
rol edx, 0x15
sub esi, edx
xor edx, esi
add ecx, edi
xor edx, 0x6a8828c0
sub esi, edi
sub edi, esi
xchg edi, edx
xor esi, ecx
jmp 0x477ec2
push 0x655834b1
sub edx, esi
add ecx, edi
xor ecx, edx
xchg ecx, edi
add edx, esi
sub edx, edi
or esi, edx
xor ecx, edx
mov edx, ecx
or edx, ecx
xor esi, ecx
or edx, esi
jmp 0x476943
pop ebx
mov ecx, esi
shr esi, 0x13
rol ecx, 0x1b
mov edi, 0x6aac9657
dec edi
neg ecx
add edi, edx
xor edi, esi
mov edx, esi
jmp 0x4763c0
pop ebx
xor ecx, edi
xchg edx, ecx
inc esi
dec edx
add edx, edi
inc edx
not edi
sub edx, esi
or edi, esi
jmp 0x476908
pop ebx
sub ecx, edi
or ecx, edi
or edx, edi
rol edi, 2
mov esi, edi
and esi, edi
ror edx, 6
dec esi
and edx, ecx
xchg ecx, edx
jmp 0x476576
push 0x6555b489
or edi, esi
shr edi, 0x14
add esi, edi
inc edi
mov esi, edi
sub esi, 0x6abb0a67
sub ecx, esi
or esi, edi
and edx, esi
add edx, esi
shr esi, 0x17
jmp 0x476705
call ebx
ror ecx, 0xb
inc ecx
nop
xchg esi, edi
xor edi, edx
or ecx, 0x6ae2b8a0
and ecx, esi
sub esi, 0x6ae375c7
and ecx, edi
jmp 0x475cae
push 0x6556099f
inc ecx
and esi, edx
add edi, esi
sub edx, ecx
sub ecx, 0x6ae9ec47
add ecx, esi
jmp 0x478042
pop ebx
and edi, esi
and edx, edi
sub edx, esi
add esi, edi
xor edi, ecx
or edi, esi
jmp 0x47626d
push 0x655889a1
add edi, 0x6b28f89a
and ecx, edi
or edi, esi
add edx, 0x6b2a1c9e
shr edi, 5
nop
and edi, esi
and edx, ecx
xchg edx, edi
dec esi
jmp 0x477279
call fcn.00477b62
and esi, edi
add edx, ecx
jmp 0x4766c9
call ebx
xor edi, esi
xchg edi, esi
sub esi, 0x6b3ffaf8
shl ecx, 5
xchg ecx, edi
and edx, esi
add ecx, edi
sub edi, esi
mov esi, edi
or edi, 0x6b42a820
add esi, ecx
jmp 0x475e91
push 0x654c6c77
xchg edx, esi
not edx
and ecx, edi
add ecx, edx
mov edx, esi
jmp 0x4755ce
mov ebx, 0x123b2f04
and ecx, edi
or edi, 0x6b514c83
add edi, esi
mov ecx, esi
xor edx, esi
xchg edx, edi
xchg ecx, esi
mov ecx, edx
and ecx, edi
rol edi, 0x10
xor esi, edx
jmp 0x475f4b
call ebx
or edx, edi
xor edi, ecx
and esi, 0x6b6aebd1
xor esi, edi
sub edi, ecx
sub edx, esi
xor edx, 0x6b6cace4
or edx, edi
xor edi, ecx
mov edi, esi
inc esi
xchg edx, ecx
jmp 0x477bc7
pop ebx
mov ecx, edi
not edx
dec ecx
sub esi, ecx
sub ecx, edi
xchg ecx, edi
sub esi, 0x6b7c5cdc
jmp 0x47655b
push 0x654986e1
shr edx, 0xb
inc edx
add esi, edx
and esi, 0x6bb5a319
and esi, edx
mov esi, edx
sub ecx, esi
mov edi, ecx
sub ecx, edx
not esi
xor edi, esi
sub esi, edi
and edi, 0x6bb980ad
rol edx, 0x14
jmp 0x477a09
push 0x6548eff2
or edi, ecx
xchg edi, edx
add ecx, 0x6bbb3b61
or edi, ecx
jmp 0x475dc9
pop ebx
shr esi, 0x1f
mov edx, esi
or esi, edx
or ecx, edi
inc esi
sub esi, edx
not esi
bswap edx
xor ecx, esi
xchg edx, ecx
xor esi, ecx
mov edi, esi
or edi, ecx
ror edx, 2
rol esi, 0x18
jmp 0x476e88
push 0x6558f4be
or edx, esi
xor edi, esi
sub edx, edi
add esi, edi
sub esi, edx
sub edx, 0x6c39f284
shl edi, 0xd
xchg esi, ecx
or edx, 0x6c3b1b1c
mov esi, 0x6c3b7c73
shl ecx, 0x11
jmp 0x476207
call fcn.00477b62
add ecx, 0x6c97154f
sub edx, edi
xchg esi, edx
or edx, ecx
xor edi, edx
add edx, esi
xor esi, 0x6c99a6ac
xchg edi, ecx
and ecx, 0x6c9a7ac4
xor edi, 0x6c9b15e0
ror esi, 0x12
jmp 0x475265
call fcn.00477b62
and edi, edx
mov ecx, edx
xor ecx, edi
and ecx, edi
xor ecx, esi
jmp 0x476a3f
push 0x654c181c
xchg edi, ecx
mov edx, 0x6ca3c4cd
and esi, edx
xor ecx, edi
sub esi, edx
xor edx, esi
mov edx, esi
shl esi, 0x1e
add ecx, edx
neg ecx
or esi, ecx
jmp 0x476a65
pop ebx
and edx, esi
sub esi, ecx
and edi, 0x6cf1699f
add ecx, edi
mov edi, 0x6cf23506
not edi
xor ecx, esi
neg esi
xor edi, ecx
or edx, 0x6cf625a0
jmp 0x475482
push 0x65423da1
sub edi, 0x6cf9cd34
and esi, edi
bswap ecx
mov ecx, edi
mov ecx, edi
dec edi
or esi, edx
mov edx, 0x6cfce39c
sub edi, esi
inc esi
or ecx, esi
inc ecx
xchg edx, edi
jmp 0x475279
pop ebx
and esi, 0x6d172ba2
rol edi, 3
or esi, 0x6d18354a
or edi, 0x6d1898ca
add esi, 0x6d190631
nop
inc esi
mov edx, edi
jmp 0x477204
mov ebx, 0x2774562b
add edx, ecx
xchg ecx, edx
dec esi
sub edi, esi
add ecx, 0x6d20c950
add ecx, esi
xchg esi, edx
xchg esi, edi
shl edi, 3
mov esi, edi
and ecx, esi
xchg esi, edi
jmp 0x477583
mov ebx, 0x123b2f04
mov esi, ecx
sub edi, ecx
or edi, esi
not edi
xchg edx, ecx
not ecx
add esi, edi
neg edi
sub ecx, esi
and edx, edi
xor esi, ecx
not esi
jmp 0x47574f
pop ebx
inc edi
add esi, ecx
or edx, edi
dec esi
and edx, 0x6d47e463
neg edi
or edi, edx
jmp 0x476123
pop ebx
or edx, edi
bswap edi
bswap edx
xor edx, esi
or ecx, 0x6d5e7097
sub esi, 0x6d5edfde
inc edi
ror edx, 2
rol esi, 0xc
jmp 0x4756af
mov ebx, 0x123b2f04
xchg ecx, esi
xor esi, edi
mov edx, 0x6db02b0c
ror edx, 0x1d
add edx, 0x6db0fc39
sub ecx, 0x6db1692f
and edx, esi
mov edi, ecx
sub edi, edx
xor ecx, edx
add esi, ecx
sub edx, edi
add edx, esi
jmp 0x4775b4
mov ebx, 0x123b2f04
not ecx
ror ecx, 0x14
add ecx, esi
or edi, edx
sub edi, ecx
inc edi
xor edi, esi
sub edi, esi
dec edx
and edi, esi
and edx, esi
or ecx, 0x6dbce360
add ecx, esi
sub edi, edx
xor ecx, esi
jmp 0x476968
mov ebx, 0x2774562b
sub esi, edx
xor ecx, edx
or esi, edi
xchg esi, edi
jmp 0x476169
call fcn.00477b62
dec ecx
xor ecx, edi
add edi, 0x6ded0704
or edi, esi
and ecx, edx
or edx, ecx
shr ecx, 0x1c
and edx, ecx
mov edx, ecx
and edi, ecx
jmp 0x47520d