Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff28
jne 0x4010a7
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xfffffed6
jne 0x401144
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff02
jne 0x4011cd
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff2e
jne 0x401256
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.oleaut32.dll_GetVarConversionLocaleSetting
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.ntdll.dll_ZwPrivilegeCheck
call sub.oleaut32.dll_GetVarConversionLocaleSetting
ret
jmp 0x47540c
and edi, edx
not ebx
not edx
mov ebx, edi
or edx, 0xd3824ca2
jmp 0x478106
pop edi
xchg esi, ebx
xchg edx, ecx
jmp 0x4776bf
push 0xd386d419
not edx
mov edx, ecx
sub esi, 0xd3e60902
and ebx, edx
and edx, 0xd3e63b9e
add esi, 0xd3e659fa
jmp 0x47660e
push 0xd386110a
dec ebx
xor ebx, ecx
or edx, ebx
xor edx, 0xd3eaddc8
jmp 0x47713d
pop edi
or ebx, esi
xor ecx, edx
xor edx, esi
rol esi, 9
xor esi, edx
xchg ebx, ecx
jmp 0x477a4f
pop edi
xor ecx, ebx
xchg ecx, esi
sub esi, ecx
neg ebx
mov ecx, 0xd3ec10bc
xor ebx, esi
or edx, esi
inc ebx
jmp 0x478197
call fcn.00476001
mov esi, 0xd3f2788e
xchg ebx, esi
xchg ecx, edx
dec ebx
neg edx
xchg ecx, edx
jmp 0x47837a
call edi
sub ecx, esi
xor edx, esi
xchg ecx, ebx
xor esi, edx
xchg ebx, ecx
sub ecx, ebx
jmp 0x475f6e
call fcn.00476001
inc ebx
xor ebx, edx
jmp 0x4756df
call fcn.00476001
or ecx, edx
xchg ecx, esi
inc esi
or edx, esi
sub esi, ecx
sub edx, ecx
neg edx
mov ecx, ebx
or esi, 0xd3fc0fbc
and esi, 0xd3fc2946
xchg esi, ecx
and ebx, ecx
jmp 0x477ac9
pop edi
add ecx, edx
or ebx, ecx
and edx, 0xd3fe05e0
bswap edx
xchg edx, esi
add ebx, esi
and ecx, edx
or esi, ecx
jmp 0x477d17
push 0xd38b8e80
neg edx
xchg ecx, esi
inc esi
dec edx
dec esi
xor esi, ecx
xchg esi, ebx
not ebx
jmp 0x4782b9
push 0xd39137ea
mov esi, ecx
dec ebx
or esi, ebx
sub ecx, edx
xor edx, ecx
xor esi, edx
dec ecx
shr edx, 5
jmp 0x476146
push 0xd387cfce
and ecx, esi
sub ebx, ecx
neg esi
xchg esi, edx
neg esi
xchg esi, edx
jmp 0x477f3c
pop edi
xor esi, 0xd40a9556
xor edx, esi
xchg ecx, ebx
dec edx
mov ecx, ebx
mov ecx, edx
add edx, ebx
or ecx, esi
jmp 0x4764be
push 0xd3911aa0
mov edx, ebx
sub edx, 0xd40df84e
sub ecx, edx
add ebx, 0xd40e2bc6
and edx, esi
sub ebx, esi
jmp 0x47599d
pop edi
ror esi, 9
not edx
nop
add ebx, 0xd40fe718
jmp 0x477080
push 0xd38e4425
add esi, edx
xor esi, edx
and esi, ecx
add esi, ebx
shr ebx, 0xe
shl ebx, 0x10
jmp 0x4770f5
push 0xd38ff742
shr ecx, 9
shr ebx, 0x1d
shl ebx, 0x1f
and edx, ebx
and ebx, edx
sub esi, ebx
jmp 0x476712
push 0xd38450c4
shr esi, 6
shr edx, 0x1a
add ebx, esi
nop
or ecx, ebx
mov edx, ecx
rol ecx, 3
rol ebx, 0x17
or ebx, esi
mov edx, ebx
jmp 0x477ada
push 0xd3843462
not ecx
xchg esi, ebx
xor ebx, edx
xor ecx, esi
xor esi, ebx
or edx, esi
jmp 0x475be2
push 0xd38cadac
rol esi, 0x16
or ecx, esi
xor ecx, 0xd4213566
not ecx
bswap esi
add ecx, edx
or ebx, ecx
inc edx
shl edx, 0xe
shl ecx, 4
jmp 0x475e84
mov edi, 0x43370267
xor ecx, ebx
xor edx, ecx
and edx, esi
xor edx, ecx
ror edx, 5
add ecx, ebx
jmp 0x47732a
push 0xd38cca8c
or edx, ecx
sub edx, 0xd42a23da
xchg edx, ebx
add esi, ebx
dec ebx
mov ebx, edx
jmp 0x47695b
pop edi
or ebx, edx
sub ecx, 0xd42ac6b2
or esi, ebx
xor esi, ecx
add ebx, esi
add ecx, ebx
not ecx
mov ebx, 0xd42b5e72
shr esi, 0xa
or ebx, edx
inc ecx
xchg ebx, esi
and esi, 0xd42bde7a
not esi
jmp 0x476090
push 0xd3880684
dec ebx
mov ebx, edx
neg ebx
and edx, 0xd42c6a68
bswap edx
add ecx, ebx
xor edx, ecx
mov ecx, edx
xor esi, edx
and edx, ecx
add esi, edx
neg ebx
xchg esi, ecx
or ecx, edx
jmp 0x476b32
pop edi
add edx, ebx
add edx, ecx
dec ecx
mov edx, ecx
bswap edx
inc ecx
add edx, ebx
xor esi, ecx
xchg esi, ebx
add edx, ebx
mov ebx, esi
shr ebx, 6
jmp 0x47767b
pop edi
xor esi, edx
xor ebx, esi
and edx, 0xd4350ec2
add esi, ebx
or ecx, esi
or esi, 0xd43557fe
jmp 0x477e25
push 0xd38a71b0
add ebx, esi
xchg edx, esi
xor ebx, ecx
mov ecx, 0xd436f6b8
or ecx, edx
xor ebx, 0xd43728b6
mov ecx, edx
sub edx, ecx
rol esi, 0x11
mov esi, 0xd437904a
add edx, ebx
mov esi, ecx
jmp 0x476d3e
pop edi
inc ecx
xor ecx, edx
xor edx, esi
and ebx, 0xd43a1b4a
jmp 0x476a72
push 0xd38b55f8
or ecx, edx
shr ecx, 0x13
and esi, edx
mov edx, ebx
jmp 0x476fe7
mov edi, 0x43370267
shl ebx, 0x1d
xor ebx, 0xd43e96bc
and ebx, esi
add ebx, esi
add ebx, ecx
sub ebx, ecx
and esi, ebx
mov ecx, edx
jmp 0x477a6a
pop edi
and ecx, esi
or edx, 0xd43f6410
sub ebx, ecx
xor ebx, esi
not ebx
mov esi, ecx
and ebx, ecx
or edx, ebx
neg esi
add ebx, ecx
jmp 0x476870
call edi
mov esi, ecx
xchg esi, ecx
xchg edx, esi
shr edx, 6
shr ecx, 0x1a
and esi, edx
add esi, ecx
or esi, ecx
or ecx, ebx
rol esi, 0xe
or ecx, esi
mov ebx, edx
jmp 0x47584a
call fcn.00476001
mov ecx, ebx
and edx, esi
sub esi, ebx
and edx, ecx
add esi, edx
or ebx, esi
xchg esi, edx
xchg ebx, edx
jmp 0x476b7b
push 0xd3891ef8
not ecx
xchg esi, ebx
not ebx
bswap esi
shl ecx, 1
xor ecx, 0xd447dc0c
inc edx
nop
jmp 0x4774ae
call edi
add esi, 0xd4491210
xor ebx, esi
xor edx, ebx
nop
shl edx, 2
mov esi, ecx
xor esi, 0xd449abd0
mov ecx, esi
jmp 0x477110
push 0xd383fd78
or esi, ecx
add ecx, edx
and edx, ecx
xor ebx, 0xd44c63f2
mov ecx, edx
and ebx, ecx
and ecx, 0xd44cab2c
sub esi, edx
jmp 0x477990
pop edi
and esi, 0xd4517fea
xor ebx, edx
neg esi
add ebx, 0xd451ccac
xor ecx, esi
not ebx
add ebx, edx
xchg ecx, ebx
mov ebx, esi
and ecx, ebx
jmp 0x478225
call fcn.00476001
mov esi, 0xd4540446
shr ecx, 0x19
and esi, edx
shl ebx, 0xd
xor esi, 0xd4546ffa
sub esi, 0xd45489d6
mov ecx, 0xd454a27e
dec edx
jmp 0x47681b
call edi
xchg ebx, esi
xor ebx, 0xd4568054
shl ebx, 0x19
xor ebx, 0xd456b400
bswap ecx
dec edx
jmp 0x476b5c
pop edi
sub ecx, esi
neg ebx
mov ebx, edx
or ecx, 0xd457d25c
mov edx, esi
bswap esi
add ecx, edx
mov ebx, edx
jmp 0x4782dd
pop edi
mov ecx, edx
xor edx, esi
bswap esi
or ebx, esi
bswap esi
and ebx, ecx
add edx, 0xd45e2bbc
ror ebx, 9
mov ecx, edx
neg esi
add ebx, ecx
sub ebx, ecx
jmp 0x476a97
push 0xd386f0a8
sub edx, ecx
add edx, esi
neg edx
sub ebx, esi
xor ecx, edx
dec esi
mov edx, 0xd4625fc4
and ecx, edx
sub esi, edx
or ecx, esi
sub ebx, 0xd462c526
xor ebx, 0xd462e0c8
jmp 0x476cca
call edi
not ebx
add edx, esi
jmp 0x475ac5
pop edi
and ebx, esi
and esi, 0xd4647fdc
or esi, ebx
neg ecx
xchg ebx, esi
or ecx, esi
dec ecx
mov ecx, 0xd4651b24
jmp 0x475fe7
call fcn.00476001
sub ebx, esi
and esi, edx
and ecx, ebx
sub esi, ebx
mov esi, edx
and edx, ecx
jmp 0x477b65
push 0xd3901476
add edx, esi
and esi, edx
xchg esi, ecx
and ebx, 0xd469844e
mov ecx, ebx
shr edx, 0x17
jmp 0x476c78
call edi
add esi, ecx
or esi, ebx
and ecx, ebx
add ebx, esi
xor ecx, 0xd46c6f36
add ecx, ebx
xor edx, ecx
xor esi, edx
add ecx, ebx
nop
shl edx, 0x1a
and edx, esi
jmp 0x477cfd
call edi
sub ebx, edx
and esi, ecx
and ebx, esi
mov edx, ebx
sub edx, 0xd470b3b4
ror esi, 0x15
add esi, 0xd470e760
neg esi
add ebx, ecx
mov ebx, esi
jmp 0x47723e
pop edi
add ebx, 0xd471550a
not ecx
xchg esi, ecx
add esi, ebx
or esi, ecx
mov edx, ebx
inc ebx
xor ebx, edx
jmp 0x476165
push 0xd38c736c
xor edx, ebx
mov ecx, edx
ror edx, 0x10
or ecx, ebx
sub esi, 0xd47305f6
xchg ebx, esi
or ecx, esi
not ebx
neg esi
xor ecx, 0xd4738a54
mov esi, 0xd473a4fc
inc esi
jmp 0x47813c
mov edi, 0x43370267
add esi, 0xd4793676
and ebx, 0xd4795062
add edx, ecx
xor ecx, 0xd4798294
shl ecx, 0x14
mov esi, 0xd479ba9a
not esi
and edx, ebx
xchg ecx, ebx
sub ebx, ecx
or ecx, esi
ror ecx, 8
jmp 0x4766e1
push 0xd38a38a8
sub esi, ecx
or esi, ebx
add ebx, edx
add esi, ecx
add esi, 0xd480fafa
dec esi
xchg ebx, ecx
shr ecx, 0x17
or ebx, esi
inc edx
or edx, ecx
xchg esi, edx
jmp 0x476bbe
pop edi
sub esi, ebx
add esi, ecx
sub ecx, esi
sub ebx, 0xd4822090
shr ecx, 8
xchg esi, ecx
sub esi, edx
xor ecx, ebx
xor edx, ecx
xor esi, edx
or esi, edx
xor ebx, esi
jmp 0x477d70
mov edi, 0x43370267
add ecx, 0xd486b326
neg ecx
xchg ebx, esi
add edx, esi
xor edx, 0xd4871eac
and ecx, edx
or ecx, 0xd4874f38
xchg ecx, edx
sub ebx, esi
and ecx, ebx
jmp 0x4771bf
pop edi
neg edx
xchg ecx, esi
xor ecx, edx
xor edx, esi
or edx, esi
and ebx, esi
shr ebx, 0x1d
add ecx, 0xd48875be
xor edx, ebx
bswap ecx
jmp 0x477a3d
call edi
or ebx, ecx
not ecx
mov edx, ebx
sub ecx, ebx
jmp 0x4781be
push 0xd38a5424
add edx, 0xd48afdc8
mov ebx, 0xd48b160e
add ecx, edx
and edx, ecx
add esi, edx
sub esi, ecx
add ecx, ebx
and esi, edx
jmp 0x476027
push 0xd38e7e64
xor esi, edx
xor ecx, 0xd48da4f0
bswap edx
add ecx, ebx
add ecx, 0xd48df0cc
sub ebx, ecx
and edx, ebx
xchg ecx, ebx
jmp 0x476c45
mov edi, 0x43370267
sub esi, ebx
add ebx, esi
bswap ebx
not ecx
xchg esi, ebx
shl esi, 0x1d
dec esi
mov esi, ebx
jmp 0x47831f
mov edi, 0x43370267
add edx, ebx
shl ecx, 9
shl ebx, 0xa
and edx, ebx
add ecx, esi
xor esi, ebx
shr ebx, 0x1e
mov esi, ecx
bswap ebx
not esi
xor esi, 0xd4911f5e
sub esi, 0xd491394a
xor esi, ebx
inc esi
jmp 0x4756c7
mov edi, 0x43370267
mov esi, ebx
nop
rol edx, 0x13
or ecx, edx
xor edx, ebx
sub ecx, esi
neg esi
neg esi
and esi, ecx
mov ebx, esi
shr ebx, 0x15
xor edx, ecx
xchg ecx, esi
shl ebx, 4
jmp 0x4757e5
push 0xd3895684
mov edx, ebx
inc ebx
bswap edx
add edx, ecx
or ecx, ebx
or ecx, 0xd495d97e
and edx, ebx
add ebx, 0xd4960b8a
neg ebx
mov esi, ebx
jmp 0x477823
mov edi, 0x43370267
mov edx, esi
inc edx
shl esi, 0x17
add ebx, ecx
mov esi, ecx
dec ebx
jmp 0x477c17
call fcn.00476001
sub edx, ecx
and esi, edx
jmp 0x476666
pop edi
or ebx, esi
or ebx, 0xd4a45dae
and ecx, esi
sub edx, 0xd4a49394
mov ebx, esi
mov ecx, ebx
and ecx, edx
add esi, 0xd4a4f24c
jmp 0x4779cb
pop edi
mov edx, ecx
not ecx
xchg esi, ecx
add esi, ebx
or edx, esi
neg ebx
xchg esi, edx
neg ebx
and edx, ecx
or edx, ecx
jmp 0x47658a
push 0xd38b72d8
nop
inc esi
and esi, 0xd4aa3e1e
mov esi, 0xd4aa5c7a
not ebx
add ebx, edx
or ebx, 0xd4aaa86c
nop
mov edx, ebx
inc ebx
jmp 0x475875
pop edi
and ecx, edx
shr edx, 2
or esi, 0xd4aecd6e
and edx, esi
and ecx, ebx
shr ecx, 0x1d
and esi, edx
or ebx, edx
sub esi, ebx
mov esi, edx
and edx, ecx
rol ecx, 0x12
jmp 0x475e9d
push 0xd38e62e8
add ebx, esi
xor ebx, edx
xor ecx, esi
add esi, 0xd4b29d30
rol ecx, 5
not ecx
jmp 0x476c23
pop edi
or ecx, 0xd4b2fd3e
xchg ecx, edx
sub edx, 0xd4b331b2
add edx, 0xd4b34bae
mov ebx, edx
and edx, ebx
rol ebx, 0x13
or ebx, esi
xor ecx, ebx
or ebx, edx
inc ecx
mov edx, 0xd4b41590
jmp 0x4773eb
mov edi, 0x43370267
sub ecx, ebx
xor ebx, 0xd4b4512e
sub esi, 0xd4b46b30
xor ecx, edx
xor edx, esi
and edx, 0xd4b4bc94
mov ecx, esi
sub esi, ecx
nop
not edx
jmp 0x4773c8
call fcn.00476001
and esi, 0xd4b80ba6
or esi, ebx
sub esi, edx
neg ecx
mov ebx, esi
or esi, edx
jmp 0x477725
pop edi
mov ecx, 0xd4bbbfc6
dec edx
mov ecx, 0xd4bbf3c4
or edx, esi
not ebx
add ebx, edx
bswap ebx
mov ebx, 0xd4bc751a
jmp 0x475b01
call fcn.00476001
or edx, ecx
not edx
xchg ebx, ecx
sub ecx, 0xd4c32114
xchg edx, esi
or edx, ebx
dec edx
add esi, edx
add ecx, ebx
nop
jmp 0x4762b3
mov edi, 0x43370267
not esi
sub ecx, 0xd4ed8c48
shl edx, 0x1b
add ebx, 0xd4edc33c
xor esi, ecx
xor esi, ebx
xchg edx, ebx
mov ecx, esi
bswap ebx
shr edx, 0x1d
jmp 0x4757f2
call fcn.00476001
or edx, ebx
and ebx, ecx
xor edx, ebx
rol esi, 0x1e
bswap edx
bswap edx
or edx, ebx
not edx
mov edx, ecx
and edx, ebx
add esi, ecx
sub ebx, ecx
jmp 0x47677c
push 0xd38fda62
and esi, ebx
rol ecx, 6
jmp 0x475b2c
push 0xd387975a
mov esi, ecx
xor ebx, esi
xchg edx, esi
shr edx, 0x15
sub ecx, esi
mov edx, 0xd4f2b1ba
add ecx, esi
or edx, 0xd4f2e78a
mov ebx, edx
or ebx, edx
jmp 0x4775da
push 0xd3893aa0
and edx, 0xd4f4fea6
sub esi, edx
xor esi, 0xd4f53182
and ecx, esi
xor esi, edx
or ecx, 0xd4f57c88
inc ecx
or ecx, esi
not ebx
xor edx, 0xd4f5e9f8
and edx, 0xd4f6023e
xchg edx, ebx
jmp 0x476d19
push 0xd387b380
and ecx, 0xd4fdbfcc
or edx, ebx
xchg edx, ebx
or edx, ecx
xchg ecx, edx
xor ecx, 0xd4fe41ea
sub ecx, 0xd4fe5bc6
xor ecx, 0xd4fe7586
and ecx, ebx
not ebx
jmp 0x475a00
pop edi
or ebx, ecx
xchg ebx, edx
mov esi, 0xd5021646
or esi, ecx
add edx, 0xd5024dce
neg edx
shr ecx, 1
and esi, edx
jmp 0x477441
pop edi
xor ebx, esi
ror edx, 0x1a
and edx, ebx
xor esi, ebx
neg esi
and esi, ecx
jmp 0x47550f
pop edi
sub edx, ecx
or ebx, edx
mov ebx, ecx
add esi, 0xd50571a0
or ecx, esi
or esi, 0xd505a3be
and edx, esi
or edx, esi
and ebx, esi
and esi, 0xd5060474
jmp 0x47842a
call edi
shl edx, 9
dec edx
mov ecx, ebx
add ecx, edx
not edx
mov edx, ecx
jmp 0x476671
mov edi, 0x43370267
mov esi, ecx
bswap ebx
jmp 0x476e78
pop edi
xor edx, ecx
xor esi, edx
or ecx, 0xd50e9ee8
xchg ebx, ecx
and esi, edx
shr esi, 9
shr edx, 0x1d
or ebx, ecx
bswap ecx
mov ecx, 0xd50f55da
jmp 0x4776e5
mov edi, 0x43370267
sub ebx, 0xd51088fa
add esi, ecx
neg edx
xchg ecx, esi
inc esi
mov ecx, edx
not ecx
add ecx, esi
inc ecx
xor edx, ebx
sub esi, 0xd5118cf0
or ebx, 0xd511a6b0
jmp 0x47642c
push 0xd384195c
and esi, ecx
xchg edx, ecx
add ebx, esi
add ecx, 0xd518eeae
mov ebx, ecx
dec edx
bswap ebx
dec esi
jmp 0x475c7c
push 0xd385d9b1
and ebx, ecx
add edx, ecx
sub edx, 0xd51a8b60
xor edx, ebx
xor ecx, esi
or ebx, 0xd51adb2e
xchg ebx, edx
sub ecx, 0xd51b0f58
add ecx, 0xd51b29e0
mov ebx, ecx
jmp 0x47820c
pop edi
sub edx, ebx
rol edx, 0xe
inc ecx
xchg esi, edx
and ebx, ecx
xchg ebx, esi
jmp 0x4755df
pop edi
and esi, edx
xor ecx, 0xd51e160e
shl ecx, 6
sub edx, ebx
xchg ecx, edx
and esi, ecx
sub esi, edx
sub ecx, edx
jmp 0x477831
call fcn.00476001
sub ebx, edx
or ebx, 0xd51eec14
xor ebx, esi
xor edx, ebx
and ebx, 0xd51f3834
xchg esi, ebx
xchg esi, edx
or ecx, ebx
sub esi, 0xd51fa2b6
mov ecx, ebx
sub ebx, esi
or edx, 0xd51feb36
jmp fcn.00477dd9
call edi
sub esi, ecx
dec ebx
mov edx, ebx
mov ecx, 0xd521cb14
jmp 0x476f3e
mov edi, 0x43370267
add ecx, esi
and ebx, ecx
neg esi
dec ebx
neg edx
xchg ecx, esi
jmp 0x476242
call edi
add edx, ecx
xor edx, ecx
xor esi, edx
shl ebx, 0x12
sub ecx, edx
sub ebx, 0xd526d934
xchg ecx, esi
inc esi
jmp 0x475a16
call fcn.00476001
mov edx, ecx
or esi, ecx
dec ecx
xchg edx, esi
add ecx, ebx
sub ecx, 0xd52a29fc
or ecx, 0xd52a4386
add edx, ecx
jmp 0x4761a2
pop edi
add esi, edx
shl ecx, 0x17
dec ecx
or ebx, 0xd52ad2c2
xor ebx, esi
add ebx, 0xd52b042e
jmp 0x477e79
call fcn.00476001
mov esi, ecx
xor ecx, ebx
sub ebx, esi
or esi, edx
shl ebx, 5
dec ebx
xchg edx, esi
xchg esi, ecx
jmp 0x47817a
pop edi
mov ecx, 0xd52ed458
dec edx
mov ecx, ebx
ror ecx, 0x1e
and ecx, 0xd52f3a38
inc ecx
bswap esi
xor ecx, esi
bswap esi
inc edx
jmp 0x477ea3
pop edi
or ecx, ebx
xchg esi, edx
neg ebx
or esi, 0xd531d81a
xor edx, esi
sub edx, 0xd5320ce0
jmp 0x47544d
pop edi
or edx, 0xd5323272
add edx, 0xd5325022
jmp 0x47683f
push 0xd38b386c
xor ebx, ecx
mov ebx, edx
add ecx, ebx
add ecx, 0xd534bf4c
dec ecx
xchg edx, ebx
xchg esi, ecx
rol edx, 1
xor esi, ecx
or esi, ecx
and edx, ecx
mov ebx, esi
jmp 0x476114
pop edi
xor esi, ebx
neg esi
not esi
xchg edx, esi
xor ebx, ecx
bswap esi
or ebx, esi
or ebx, 0xd53a3fce
or esi, ecx
xor ebx, ecx
jmp 0x4763d4
push 0xd38db220
or esi, 0xd53be9a0
xor ebx, ecx
xor ecx, edx
add edx, 0xd53c396e
mov ebx, edx
or ecx, 0xd53c6a42
xor ecx, ebx
add ecx, 0xd53c9df0
jmp 0x477877
push 0xd390e060
add esi, edx
inc ecx
or ecx, 0xd53cfa8a
neg ecx
xor ecx, edx
xchg edx, ebx
jmp 0x47823b
push 0xd387ea74
not edx
add ecx, ebx
and edx, ebx
add ebx, 0xd540bd6a
not ecx
add ebx, esi
sub ebx, esi
or esi, edx
or ecx, edx
add esi, ecx
dec ecx
mov ebx, esi
jmp 0x475eca
pop edi
add esi, ecx
xor esi, ebx
xchg ebx, edx
xchg edx, ebx
sub esi, ebx
add edx, 0xd545a692
or esi, ecx
add esi, edx
xchg edx, ecx
or ebx, ecx
jmp 0x477c94
push 0xd3890284
shl edx, 0x1a
and ecx, ebx
xor esi, ebx
and esi, 0xd549d088
xor ebx, edx
sub ebx, ecx
shl ecx, 6
xchg edx, ebx
and esi, ebx
sub esi, edx
mov ebx, ecx
or ebx, 0xd54a9bc0
xor ebx, esi
xor ecx, ebx
jmp 0x476278
push 0xd383dd40
mov ecx, edx
sub edx, esi
xor ebx, 0xd54e9e5a
and ebx, esi
bswap edx
sub ecx, edx
add ebx, 0xd54f08c4
shl esi, 0x10
jmp 0x47630f
push 0xd38c9096
shl esi, 0x1c
inc ebx
sub ebx, 0xd550261c
or esi, ebx
sub esi, edx
xchg ebx, edx
or ebx, esi
and ebx, edx
rol ebx, 0x10
and esi, ebx
jmp 0x475d41
call edi
sub ebx, edx
and edx, ecx
sub edx, esi
and ecx, ebx
xor esi, ebx
neg ecx
neg edx
and esi, ebx
rol esi, 0x12
shr ebx, 0x10
jmp 0x476f7a
push 0xd38f496a
xchg ebx, esi
xor esi, 0xd552f75a
sub esi, 0xd553116c
xor esi, 0xd5532b76
mov edx, ecx
not esi
xchg edx, ecx
shr ecx, 0xc
jmp 0x475e14
pop edi
xor edx, 0xd553b998
or edx, ecx
jmp 0x4755cc
push 0xd385f6cc
mov esi, 0xd555adc4
xor edx, esi
and esi, ebx
xor ecx, edx
xor edx, esi
xchg ecx, ebx
jmp 0x4755b7
pop edi
xchg ebx, esi
bswap esi
add ecx, edx
xchg ebx, edx
and ecx, 0xd556bb8e
mov ecx, edx
jmp 0x478068
push 0xd390fd40
or esi, ecx
xchg esi, ecx
shl esi, 0xc
dec esi
and edx, esi
or ecx, ebx
add esi, ebx
xor ebx, ecx
jmp 0x475a81
mov edi, 0x43370267
mov ecx, edx
xor ecx, ebx
or ebx, edx
xor ebx, esi
jmp 0x477bdc
pop edi
xchg edx, ecx
xchg edx, esi
jmp 0x477bfd
call fcn.00476001
inc esi
add esi, ecx
add esi, 0xd55d35d4
sub esi, ebx
bswap ebx
mov ebx, 0xd55d82ae
xor ebx, edx
and edx, ebx
xchg ecx, ebx
or edx, 0xd55dea58
xor ecx, edx
and ecx, esi
shr esi, 4
sub esi, edx
jmp 0x476491
call edi
mov edx, esi
xor ebx, 0xd55f6e8a
sub edx, ebx
mov edx, esi
mov edx, ebx
or ebx, esi
inc edx
mov esi, 0xd5600590
or ebx, 0xd5601f8c
or esi, ecx
jmp 0x47839f
pop edi
mov ecx, 0xd5605dea
not ecx
mov esi, edx
xchg ebx, ecx
inc ecx
inc ebx
xchg edx, ebx
add esi, ebx
jmp 0x477fd9
push 0xd3854bac
and ecx, 0xd5647684
bswap ecx
or ebx, ecx
and edx, 0xd564c3dc
or edx, esi
and ebx, 0xd564f972
jmp 0x4773a0