Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetOpenClipboardWindow
cmp eax, 0xffffff2f
jne 0x401093
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xfffffed9
jne 0x401103
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.advapi32.dll_AddAce
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffeef
jne 0x4011a5
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffef5
jne 0x401251
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_NtYieldExecution
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_ZwProtectVirtualMemory
call sub.ntdll.dll_NtYieldExecution
call sub.advapi32.dll_AddAce
call sub.ntdll.dll_NtYieldExecution
ret
jmp 0x4753c2
mov esi, 0xf6bed717
and esi, edx
or esi, 0xf6bf5a5b
xor edi, 0xf6bf9a6e
jmp 0x477784
pop ebx
dec edi
and esi, 0xf75d70ba
add edi, 0xf75dad28
add ecx, 0xf75dfc12
xor edi, esi
add esi, edx
or ecx, edx
xor esi, edi
jmp 0x475d88
call ebx
or edx, 0xf75f5b61
add edi, ecx
mov edx, ecx
xchg edx, esi
sub edi, ecx
and esi, edi
add esi, 0xf760d661
and esi, 0xf7611651
dec esi
jmp 0x4764a7
call ebx
shl ecx, 8
dec edi
dec ecx
shr ecx, 0x1e
xchg ecx, edx
and esi, edx
bswap edi
xor edx, ecx
mov ecx, esi
xor esi, edx
and ecx, 0xf764781e
xor esi, 0xf764b78e
jmp 0x477254
call ebx
add edx, esi
add edx, esi
bswap edx
sub ecx, edi
and edx, edi
add esi, 0xf76708bc
xchg esi, edx
neg edi
xchg edi, edx
jmp 0x477877
pop ebx
or esi, edx
add ecx, 0xf76c6229
add edi, 0xf76cb15b
add ecx, edx
and esi, 0xf76d2c77
or ecx, esi
bswap edi
mov edx, 0xf76de8f3
jmp 0x476e13
pop ebx
sub ecx, edx
xor ecx, edx
mov edi, 0xf779a7c5
add esi, edi
mov ecx, edx
neg ecx
mov esi, ecx
mov edx, edi
xchg esi, edi
jmp 0x475a13
push 0xf6e7569d
and ecx, 0xf786b324
shr esi, 0x17
xor edx, ecx
sub edx, ecx
dec edi
or ecx, edi
sub esi, edi
add esi, edx
xchg esi, ecx
xchg ecx, esi
or esi, 0xf7892f55
rol edx, 0x1d
jmp 0x47710d
mov ebx, 0x6332a2e
ror ecx, 0x1e
shr edx, 0x14
ror edx, 0xe
and ecx, 0xf78a86f3
sub ecx, 0xf78ac408
add esi, ecx
inc edx
add esi, 0xf78b7ef9
sub edx, esi
xchg edx, edi
shl esi, 0x16
sub esi, ecx
neg ecx
mov edi, ecx
and ecx, edi
shl esi, 0x18
jmp 0x477860
push 0xf6d755bc
and edi, 0xf78dd8f9
bswap edx
add edi, edx
ror esi, 0x1c
add ecx, 0xf78ee46f
shl esi, 1
jmp 0x476f4d
pop ebx
inc edi
nop
jmp 0x47665f
call ebx
add edx, 0xf79025d8
sub edi, ecx
sub ecx, edx
or edi, edx
jmp 0x477a2b
pop ebx
xchg edi, ecx
mov edx, ecx
xchg esi, ecx
and edx, edi
or edx, esi
or edi, esi
neg esi
and ecx, 0xf7a04a20
jmp 0x4762f4
call fcn.00477954
add ecx, edi
xor edi, edx
add ecx, esi
mov esi, ecx
add edi, esi
jmp 0x475427
call fcn.00477954
not edi
sub edx, esi
or edi, edx
sub esi, ecx
or esi, 0xf7b175c3
jmp 0x475472
pop ebx
and edi, edx
and esi, edi
sub ecx, esi
xchg edi, ecx
xchg ecx, edx
add edx, ecx
bswap esi
jmp 0x476349
push 0xf6e5084a
mov edi, edx
or edx, edi
inc edx
xor edx, edi
mov esi, 0xf7bdc041
add edi, ecx
or ecx, esi
mov edx, 0xf7be77db
jmp 0x477097
mov ebx, 0x6440607e
shr esi, 0xc
add esi, ecx
mov edx, ecx
mov ecx, edx
neg esi
and ecx, 0xf7c02bd2
and esi, edx
ror edx, 0xd
xor edx, ecx
sub edx, edi
jmp 0x47585b
pop ebx
and edi, ecx
add ecx, 0xf7c57c8f
sub esi, ecx
mov edx, 0xf7c60820
jmp 0x475406
pop ebx
shl edx, 0x18
rol ecx, 0xe
rol esi, 0x1c
jmp 0x476485
call fcn.00477954
neg ecx
add edx, ecx
or ecx, 0xf7c7c87c
bswap edi
bswap esi
and esi, edi
add edi, edx
jmp 0x4756b2
call fcn.00477954
sub esi, ecx
add edi, ecx
xor edi, 0xf7cc5c32
or esi, edx
jmp 0x475d5c
push 0xf6e67a25
shl edi, 0xb
or edi, esi
bswap esi
add ecx, esi
ror edx, 0x16
ror ecx, 9
or edi, edx
sub esi, edi
jmp 0x476000
push 0xf6c5c142
add edx, esi
add edi, edx
or edi, esi
mov edx, esi
xchg edi, ecx
and ecx, esi
and edx, 0xf7d378ae
mov ecx, esi
jmp 0x476c97
push 0xf6d70b38
add edx, edi
xchg esi, edx
and esi, 0xf7db6819
mov esi, 0xf7dba8f0
or edx, edi
neg edi
or edi, ecx
and edx, ecx
add ecx, edx
add ecx, esi
shr edx, 0xb
xor ecx, esi
jmp 0x47568a
pop ebx
xchg esi, ecx
mov ecx, esi
sub ecx, esi
sub esi, edx
mov esi, edx
xor esi, 0xf7df3fbd
add esi, edi
add ecx, edx
rol edi, 0xc
xor esi, ecx
add ecx, edi
xor edx, ecx
sub ecx, esi
and ecx, edi
add edx, 0xf7e17527
jmp 0x4773ca
call fcn.00477954
neg edi
dec edi
ror edx, 0x1d
ror edi, 0x12
sub edx, esi
or esi, edi
add ecx, esi
or edx, esi
mov ecx, 0xf7e6ad27
bswap edi
jmp 0x476aa2
push 0xf6d5031b
or edi, edx
xchg edx, edi
neg ecx
xor ecx, esi
add edx, esi
and esi, edi
xor ecx, esi
bswap edx
jmp 0x477193
call ebx
add esi, edi
and esi, ecx
shl esi, 0x1e
add edx, ecx
xor ecx, edi
or ecx, esi
add edi, ecx
sub ecx, edx
jmp 0x476322
pop ebx
xor ecx, edx
or edx, 0xf7f148b9
xor edx, edi
mov esi, 0xf7f1c266
or edx, ecx
neg edx
xor esi, ecx
rol ecx, 0x1f
dec esi
neg esi
mov edi, 0xf7f382cb
and esi, edx
rol edx, 0xe
dec ecx
jmp 0x47784e
push 0xf6de104f
dec ecx
neg ecx
and esi, ecx
mov edi, esi
ror edi, 0x13
mov edi, ecx
mov ecx, edi
sub edi, esi
neg ecx
shr esi, 0x16
add edi, 0xf9792450
jmp 0x47627a
pop ebx
xchg ecx, edi
mov edi, 0xf97c5eb6
and esi, edi
xchg edx, ecx
xor ecx, 0xf97d1210
rol edx, 0xb
mov edi, edx
or edi, esi
or ecx, edx
xor esi, edx
jmp 0x476104
push 0xf6d7e9bb
add edx, edi
xchg ecx, esi
or esi, edx
inc esi
or esi, edi
sub ecx, edi
sub esi, edi
jmp 0x477239
push 0xf6d12548
and edx, 0xf9844434
sub edx, edi
jmp 0x4762c2
pop ebx
bswap edx
sub edi, edx
sub edx, edi
xor ecx, edi
xor ecx, esi
or ecx, edx
neg ecx
and edx, edi
mov edx, esi
or edi, edx
shl esi, 0x16
mov esi, ecx
or edi, ecx
jmp 0x4762a8
call ebx
bswap esi
shr edi, 0x16
and edx, 0xf98dcac2
and esi, 0xf98e07cb
add edi, edx
add edx, ecx
or ecx, edi
xor esi, 0xf98ef48e
sub esi, edi
xchg esi, ecx
mov ecx, edi
or edi, esi
jmp 0x475566
pop ebx
inc ecx
mov esi, ecx
or edx, ecx
rol esi, 0xc
sub edi, esi
xor edi, 0xf9917a6d
add edi, edx
shl esi, 0x12
or edx, ecx
add esi, 0xf9927b4f
sub edi, 0xf992b807
jmp 0x47734d
push 0xf6c3a444
xchg edx, ecx
xor edi, 0xf999cd3c
or edi, 0xf99a0bbe
shl edi, 0xf
and esi, edx
add esi, edx
xchg esi, edx
or esi, 0xf99b488a
and esi, edx
or edi, ecx
xor esi, edx
add edi, esi
jmp 0x476a90
call ebx
mov edi, ecx
add edi, esi
or esi, 0xf99d0199
sub edi, ecx
mov edi, esi
add edx, esi
xor edi, ecx
mov edx, edi
xor esi, ecx
jmp 0x47754f
push 0xf6e2f238
or esi, 0xf9b46c64
or edx, ecx
or ecx, edi
and edi, ecx
add edi, esi
shl edi, 0x15
and ecx, esi
or ecx, 0xf9b60eb5
not esi
add esi, 0xf9b6984b
and esi, 0xf9b6d6a4
add edx, ecx
add esi, ecx
mov edi, 0xf9b7871e
neg ecx
mov edx, ecx
jmp 0x477380
push 0xf6ce4391
xchg esi, edi
ror edi, 2
add ecx, edi
or esi, edi
sub edx, 0xf9b9493f
bswap edx
and edx, ecx
sub edx, 0xf9b9ff08
and edx, 0xf9ba4c28
jmp 0x475650
push 0xf6e6c371
xchg edx, ecx
rol edi, 0x11
xor ecx, edi
and esi, edx
sub edi, edx
or edi, edx
mov esi, ecx
jmp 0x4764f3
mov ebx, 0x6332a2e
mov esi, ecx
sub edx, esi
xchg esi, edi
or esi, edi
shr edx, 0x14
sub edi, ecx
not edi
add edi, esi
xchg esi, edx
xchg edx, esi
shl ecx, 0x1a
jmp 0x4764c7
pop ebx
xor esi, 0xf9d9105f
add edi, esi
shr ecx, 4
xor esi, ecx
add ecx, 0xf9dbe7e2
xor esi, edx
neg edi
xchg edi, edx
xchg edi, esi
jmp 0x4768fe
pop ebx
not edx
mov ecx, edi
xchg esi, edi
inc edi
rol edx, 3
sub edx, ecx
mov esi, ecx
add edx, 0xf9e8ed96
sub esi, edx
xor edx, ecx
sub edi, edx
jmp 0x47598f
pop ebx
sub esi, ecx
shr esi, 6
add edx, esi
or edx, 0xf9f63f02
add edx, ecx
and edi, ecx
ror edx, 0x18
or esi, 0xf9f8a112
add edi, esi
neg esi
and edi, esi
xor esi, ecx
bswap edx
or edx, esi
mov ecx, esi
jmp 0x476fe3
push 0xf6caa6aa
or edx, esi
xor esi, edx
mov esi, 0xfa045497
xchg edi, esi
add esi, ecx
and ecx, 0xfa05bc73
or edi, edx
or ecx, edx
xor ecx, edx
add edi, ecx
jmp 0x477177
call ebx
xor esi, ecx
and esi, edi
ror edx, 2
or edi, esi
and edi, esi
xor edi, esi
or edx, ecx
or esi, edx
add edi, 0xfa180ab7
jmp 0x4756aa
mov ebx, 0x6332a2e
shr esi, 5
xor esi, 0xfa19228a
xchg esi, ecx
xor ecx, edi
sub esi, edi
xchg esi, edi
not ecx
and edi, esi
add edi, edx
ror edx, 0x12
sub edx, ecx
xor edx, esi
and esi, 0xfa1eac42
jmp 0x4779c4
push 0xf6d04803
and edi, esi
xchg edi, ecx
add ecx, esi
add edi, esi
or edi, esi
or edx, edi
sub edx, esi
xor edi, esi
jmp 0x477935
push 0xf6d16fdd
and esi, 0xfa2376de
and ecx, 0xfa23f5bb
and ecx, edx
add edi, edx
and edi, esi
sub edx, ecx
xor ecx, 0xfa268ef5
mov edx, 0xfa2711c8
shr edi, 0x14
or ecx, edx
add ecx, edi
sub edx, edi
jmp 0x4772df
pop ebx
or edi, ecx
bswap edx
bswap ecx
sub edi, ecx
dec ecx
shr esi, 0x19
xchg ecx, esi
jmp 0x47670b
pop ebx
or esi, 0xfa2f9ae8
xor edx, ecx
add ecx, esi
bswap edx
sub edi, 0xfa30a434
add edx, 0xfa30e3db
not edx
dec edi
sub edi, 0xfa31a3c6
jmp 0x477a19
pop ebx
mov esi, edi
sub esi, edx
xchg edi, esi
mov esi, ecx
rol edx, 0x11
xor edi, ecx
sub edi, esi
add edx, 0xfa33bf12
inc edx
sub edx, edi
bswap edx
jmp 0x475aa8
mov ebx, 0x4132136a
and esi, 0xfa48705b
add edx, ecx
add edi, edx
and esi, edi
add edi, esi
and ecx, edx
sub edx, edi
and esi, 0xfa4a1f1b
jmp 0x476803
pop ebx
shl edx, 0x1a
and ecx, edx
bswap edi
or edi, ecx
dec esi
sub edi, ecx
sub esi, edx
add edx, ecx
neg edx
add edx, esi
or esi, ecx
add ecx, esi
xor edx, ecx
jmp 0x476ce3
call fcn.00477954
sub ecx, 0xfa4db17f
xchg ecx, esi
sub esi, ecx
or ecx, esi
xor ecx, edx
xchg edx, esi
or edi, 0xfa4f2d11
inc edi
ror edi, 1
or ecx, edx
xor ecx, edx
neg esi
mov edi, ecx
jmp 0x475e3d
push 0xf6e70c4d
dec edi
inc esi
add edi, esi
mov edi, ecx
sub ecx, edi
or edx, 0xfa5231bd
jmp 0x475625
pop ebx
or edi, edx
shl edx, 0xa
xchg edi, esi
mov edx, esi
xor esi, ecx
mov edx, esi
xor edi, 0xfb8dace4
ror edi, 8
and edi, 0xfb8e341c
mov edx, edi
add esi, ecx
xor esi, edi
sub edx, 0xfb8f2927
or esi, ecx
xor ecx, 0xfb8fa41b
xchg ecx, edx
jmp 0x47780a
pop ebx
or edx, 0xfba556c9
rol edx, 0x1e
xor edi, ecx
xchg edx, edi
ror ecx, 6
xor esi, ecx
and edi, esi
and ecx, edi
add edx, edi
jmp 0x475d0d
mov ebx, 0x6440607e
shl ecx, 0x16
xchg edx, esi
shr edx, 0x1c
sub edi, 0xfbade6e8
xor edi, 0xfbae2e97
shr edi, 0x15
xor edx, ecx
sub edi, 0xfbaf171c
sub edi, ecx
or esi, edi
dec edx
and edx, esi
sub esi, edx
jmp 0x47579e
pop ebx
neg edx
sub edi, ecx
ror esi, 0x1c
xor esi, 0xfbb44d5e
xor ecx, esi
xchg ecx, edx
sub ecx, edx
jmp 0x47597a
pop ebx
xor ecx, esi
sub ecx, edi
neg edx
mov ecx, 0xfbb6835b
xor edx, 0xfbb6e80e
mov esi, edx
jmp 0x476144
call fcn.00477954
sub ecx, 0xfbcb4570
add esi, 0xfbcb9474
shl ecx, 0x12
sub ecx, edx
xchg edi, edx
add edi, edx
neg edx
not edi
sub edi, ecx
jmp 0x4771f6
push 0xf6d0dc8d
sub esi, ecx
sub edi, ecx
rol edx, 0x1d
neg edx
xor ecx, edi
neg esi
xchg edi, ecx
jmp 0x475ccc
pop ebx
or edi, 0xfbdc1b0b
and ecx, 0xfbdc6af0
rol edx, 0x10
xchg esi, edi
dec edi
shr edi, 0x18
or edx, 0xfbdda53e
jmp 0x47653e
call ebx
sub ecx, esi
neg ecx
add esi, edx
ror edi, 1
and edx, esi
xor esi, edx
shr esi, 3
or edx, ecx
or esi, edi
jmp 0x47753c
push 0xf6c576e7
mov edi, ecx
shl edi, 0xc
and edi, 0xfbf468a8
sub esi, edi
add esi, 0xfbf4e515
xchg edi, ecx
xor ecx, edi
add edi, edx
sub ecx, 0xfbf607fb
dec ecx
shl ecx, 0x15
mov esi, edx
or esi, edx
jmp 0x475a30
push 0xf6ca5c0c
xchg ecx, edi
mov edx, 0xfbf7977d
xor edi, ecx
shr edi, 0x1c
and ecx, edi
or edx, 0xfbf89fd5
jmp 0x4761ff
push 0xf6c3edf8
or edi, edx
xchg esi, edx
nop
dec edi
mov edx, ecx
jmp 0x476a24
call ebx
or ecx, edi
or edx, edi
not esi
shl edx, 2
jmp 0x4777c5
call fcn.00477954
mov esi, 0xfc03e1b6
or edi, 0xfc042098
rol edx, 5
sub edx, 0xfc049fa1
or edx, edi
bswap ecx
sub edx, 0xfc056e5b
add edi, esi
bswap edx
add edx, edi
xchg edx, ecx
jmp 0x475b9f
pop ebx
dec esi
add edx, edi
or esi, 0xfc6db568
or esi, 0xfc6df4b4
and ecx, 0xfc6e33a5
and edi, edx
xor edx, edi
add edx, esi
xchg edi, edx
jmp 0x4758fd
pop ebx
and esi, 0xfc7bb8d0
mov edx, ecx
and esi, edi
add edx, 0xfc7c6e71
shl edx, 0xe
and esi, edx
or edi, edx
jmp 0x475c5b
call ebx
add ecx, edx
sub ecx, edi
xchg esi, edx
add edx, edi
sub edi, edx
shl edi, 6
bswap esi
mov ecx, esi
mov esi, 0xfc8097cb
inc esi
jmp 0x475772
mov ebx, 0x6332a2e
mov edx, esi
xchg edx, ecx
sub ecx, edi
not ecx
xor ecx, 0xfc8225b0
ror esi, 0x10
and esi, 0xfc82a3e2
mov edi, ecx
xchg esi, edi
xor edi, edx
jmp 0x475b1e
call ebx
or ecx, 0xfc83c727
neg edi
sub edx, esi
mov edi, ecx
and edx, 0xfc84ce18
not edi
mov edx, esi
sub esi, edx
and edx, esi
or esi, edx
sub edx, edi
jmp 0x4766f2
push 0xf6e0f064
shr esi, 0x18
dec esi
xor ecx, edi
jmp 0x4779f3
call fcn.00477954
add ecx, edx
nop
xor esi, 0xfc8a0b9b
sub esi, edx
add esi, edx
xor ecx, edi
mov edi, esi
mov esi, edi
neg edx
and ecx, edi
sub edi, ecx
and esi, edi
and edx, 0xfc8cf0bd
add ecx, edi
and esi, ecx
jmp 0x476cbe
call ebx
ror ecx, 0x10
shl esi, 0xc
or ecx, 0xfc8e3790
xor edx, 0xfc8e7455
xchg edi, esi
mov edx, ecx
and ecx, 0xfc8f38dd
shl edi, 0x1e
and edi, edx
add edi, esi
ror esi, 0x16
sub edx, esi
jmp 0x476c5c
call fcn.00477954
add edi, edx
shl esi, 1
shl esi, 0x18
mov ecx, 0xfca70c61
xchg esi, ecx
neg edx
add edx, edi
rol ecx, 0x1d
and ecx, edi
xor ecx, 0xfca8fbb9
or ecx, 0xfca93758
jmp 0x476d47
call fcn.00477954
and esi, edx
xor edx, 0xfcad9abc
xor edi, ecx
add ecx, edx
add edi, edx
dec esi
inc ecx
sub edx, ecx
neg edi
sub esi, 0xfcaf9c16
jmp 0x476c79
pop ebx
xor edi, esi
xor ecx, esi
and esi, edi
or esi, edi
or edx, esi
shl edx, 0x17
xor esi, ecx
and edx, ecx
jmp 0x477475
push 0xf6d79e23
or ecx, 0xfcc9db36
dec ecx
and edx, edi
add edi, 0xfcca9690
add ecx, edx
add ecx, edi
xor esi, 0xfccb5e73
sub esi, ecx
jmp 0x475cb5
push 0xf6df8044
xchg ecx, esi
shr esi, 0x1d
ror ecx, 0x1c
not ecx
xchg edx, edi
sub esi, 0xfcd500d5
xor edx, esi
xchg edi, ecx
add ecx, edx
xor edx, 0xfcd609db
or edi, esi
mov edi, esi
jmp 0x4766a3
mov ebx, 0x6440607e
xor edi, 0xfce3e6bf
xchg edx, esi
mov edi, esi
add edi, 0xfce4aaa6
add ecx, edx
mov edx, esi
xchg edx, ecx
or esi, edi
xchg esi, edx
jmp 0x4759dd
mov ebx, 0x6332a2e
inc esi
and esi, ecx
xor esi, ecx
mov edx, edi
xor esi, 0xfcedb2af
xor esi, 0xfcedeee9
or ecx, edx
rol edx, 0x18
rol edx, 9
or esi, edi
sub edi, ecx
jmp 0x476d18
push 0xf6caeff6
or edi, edx
mov ecx, 0xfcf6199f
mov ecx, edi
ror ecx, 0x1a
neg edx
mov ecx, edx
and edi, esi
jmp 0x47591c
mov ebx, 0x6440607e
nop
and esi, 0xfcf7f413
inc ecx
or edi, edx
rol ecx, 0x1a
xor esi, 0xfcf8fd13
jmp 0x477b78
push 0xf6ca125d
sub esi, edx
xor edi, edx
bswap esi
bswap esi
and edx, ecx
or edx, 0xfcfceb89
shr edx, 0xb
add edx, ecx
xor ecx, edx
mov esi, edx
sub ecx, edi
xor edi, ecx
sub edi, esi
jmp 0x476a55
push esp
mov esi, 0xfcff028a
add ecx, esi
bswap edi
rol esi, 0x13
nop
xor edi, 0xfd003ea3
xchg esi, edi
or edx, edi
jmp 0x4779a2
push 0xf6d83338
add esi, edx
add edx, edi
dec ecx
neg esi
inc ecx
ror ecx, 7
or ecx, esi
and ecx, edi
sub edi, esi
jmp 0x4774e6
pop ebx
xchg edx, edi
sub edx, edi
sub edx, esi
neg edi
mov esi, ecx
or edx, esi
xchg ecx, edx
xor esi, edi
add edx, ecx
and edi, edx
inc esi
dec esi
or esi, edx
jmp 0x475c15
mov ebx, 0x6332a2e
and ecx, edi
or edi, ecx
xor ecx, edi
xor esi, edx
xor edi, edx
xor esi, edx
or edi, edx
jmp 0x476d76
push 0x40
xor esi, 0xfd163ba7
and edi, 0xfd1678b8
sub esi, edi
mov ecx, 0xfd16f46c
add ecx, esi
xor ecx, edx
xchg ecx, edi
add edx, 0xfd17e9c1
xor ecx, esi
not edi
mov esi, edi
and edx, esi
or edx, esi
xor ecx, edi
shr ecx, 0xf
and ecx, esi
jmp 0x477370
mov ebx, 0x401400
mov edx, ecx
add ecx, 0xfd1acdbc
xchg edx, ecx
not esi
neg esi
sub edx, esi
and edi, esi
add esi, edi
add edx, ecx
ror edx, 9
jmp loc.004765a7
push 0x73fc2
sub ecx, edi
xchg esi, edx
mov edx, esi
jmp 0x47774c
push 0xf6e34b3e
mov edi, edx
shl edi, 0x1a
and ecx, edx
or edx, 0xfd1ecd0e
sub edi, 0xfd1f0c25
not esi
mov edx, edi
jmp 0x477428
push 0xf6d4b81b
sub ecx, 0xfd1ffbcc
shr edi, 8
inc ecx
mov ecx, esi
xchg esi, ecx
or edx, 0xfd212bba
rol ecx, 0x1b
xor edi, 0xfd21b90a
xchg esi, edx
jmp 0x475b85
push 0xf6cdb0f8
xchg esi, edx
and edi, 0xfd2289bf
and edx, ecx
dec edx
jmp 0x477b29
mov ebx, 0x6332a2e
sub ecx, edi
bswap ecx
mov edx, edi
mov edx, 0xfd297f1e
add esi, ecx
ror ecx, 0xd
or esi, ecx
sub edx, ecx
shr edi, 6
jmp 0x47599e
pop ebx
xor esi, ecx
sub edx, ecx
or edx, 0xfd2f256b
add edi, edx
or edx, ecx
or edi, esi
inc esi
bswap esi
ror edx, 0x10
and edx, esi
add esi, edx
mov esi, ecx
xor esi, edx
xor ecx, edi
ror edx, 0xf
sub edi, 0xfd325066
jmp 0x475bcf
mov ebx, 0x6332a2e
bswap edx
mov esi, ecx
sub ecx, esi
or edx, edi
inc edi
sub edi, edx
shl ecx, 0x14
add ecx, edi
neg ecx
sub edx, ecx
jmp 0x476dc9
pop ebx
rol edi, 0x1d
bswap edi
add esi, ecx
xor edi, ecx
neg ecx
add edx, esi
jmp 0x4758bf
pop ebx
xor edx, ecx
or esi, 0xfd3e7441
inc ecx
inc esi
and edx, ecx
xor ecx, 0xfd3f6d0d
add edi, edx
xor edx, 0xfd3ff7ff
jmp 0x4771cd
call ebx
bswap edi
and edx, edi
dec esi
add edx, ecx
add ecx, edx
mov ecx, esi
mov edi, esi
sub edx, 0xfd547a9b
jmp 0x4761aa
mov ebx, 0x6332a2e
and ecx, esi
bswap edi
shl edi, 6
and ecx, edi
xor esi, edi
mov ecx, edx
dec ecx
not esi
sub edx, 0xfd56d214
jmp 0x476b1f
push 0x401400
not edx
add edx, ecx
add edi, esi
xchg edi, esi
mov ecx, esi
add ecx, esi
and ecx, edx
jmp 0x47544b
push 0xf6c3539d
and edi, esi
xor esi, ecx
dec edi
xor edi, 0xfd63fc49
or esi, edi
xor esi, edx
jmp 0x475e0e
pop ebx
add esi, 0xfd64d8ab
not ecx
or esi, edi
xchg esi, ecx
and edx, esi
and edi, 0xfd661031
shr ecx, 4
mov ecx, esi
rol ecx, 0xd
add esi, edx
xor esi, edx
xchg ecx, edi
jmp 0x4778c2
pop ebx
mov edx, edi
and esi, edi
or esi, edi
xchg ecx, edi
mov ecx, 0xfd68b59d
xor edx, edi
xor edi, 0xfd692eb9
shr ecx, 0x18
sub esi, 0xfd69bb8c
or edi, 0xfd69f8ae
or esi, ecx
sub edi, ecx
mov edx, edi
rol edi, 2
sub edx, esi
jmp 0x4754c9
push 0xf6d46e30
sub edi, esi
rol edx, 0x12
or edi, ecx
or esi, edi
xor edx, edi
or edi, edx
add edi, ecx
neg esi
xor ecx, 0xfd6e4b2b
mov edi, esi
xchg ecx, edi
shl edi, 8
jmp 0x4773a1
push 0xf6c8a196
or ecx, edi
sub ecx, 0xfd70f4fb
jmp 0x4760bc
call fcn.00477954
add ecx, edx
xor edx, ecx
dec edi
not ecx
inc edi
xor esi, ecx
ror esi, 2
jmp 0x47625c
pop ebx
xchg edi, ecx
mov edi, 0xfd735507
bswap esi
and edi, 0xfd73ce49
dec ecx
xchg edi, edx
mov edi, 0xfd74941e
xor edi, esi
mov esi, edi
jmp 0x47779d
pop ebx
sub esi, edx
xchg esi, edi
xor edx, ecx
add esi, ecx
or edx, 0xfd798fec
and edx, esi
add esi, edx
jmp 0x475ad2
push 0xf6d092ec
or edi, esi
add esi, ecx
shl edi, 3
mov ecx, 0xfd812ee2
xchg esi, edi
mov ecx, 0xfd81b931
or esi, ecx
jmp 0x4768bd
push esp
add esi, 0xfd880be2
add ecx, edx
shr edx, 0xa
and edx, ecx
and esi, edi
and ecx, edi
dec ecx
or esi, edi
sub ecx, 0xfd89f9c4
xor edx, ecx
jmp 0x477313
call fcn.00477954
shl edx, 3
or ecx, edi
and esi, edx
and esi, ecx
sub ecx, esi
and ecx, edi
jmp 0x47768e
push 0xf6e13965
or edx, ecx
sub esi, 0xfd91b8f9
xor ecx, esi
add esi, 0xfd9286f7
bswap esi
and edx, esi
xor ecx, 0xfd9338bf
neg esi
jmp 0x4776a8
pop ebx
xor edx, edi
sub ecx, 0xfd95b258
xchg edx, esi
and edx, edi
jmp 0x475f82
pop ebx
and ecx, esi
xor edx, esi
or ecx, edx
ror edi, 0x16
xor edx, esi
and edi, edx
mov edi, 0xfd97fcd3
add edi, edx
xor edx, edi
and edx, esi
jmp 0x476b94
push 0xf6cdf910
sub esi, ecx
and edx, edi
xchg esi, ecx
and esi, edi
mov esi, edx
shl edx, 7
rol edx, 0xc
sub ecx, esi
add ecx, edx
sub esi, 0xfda964f2
bswap ecx
jmp 0x475fc0
call fcn.00477954
dec edi
and esi, edi
and ecx, 0xfdace8a1
xchg ecx, esi
add edi, esi
and edx, ecx
bswap ecx
or edx, esi
xchg edx, ecx
not esi
and edx, edi
add edx, edi
xchg edx, edi
and ecx, esi
jmp 0x47693a