Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xfffffef1
jne 0x40108e
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff31
jne 0x40111c
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xffffff0f
jne 0x4011a0
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff2d
jne 0x401238
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.ntdll.dll_RtlInitializeGenericTableAvl
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.advapi32.dll_QueryUsersOnEncryptedFile
call sub.ntdll.dll_RtlInitializeGenericTableAvl
ret
jmp 0x475413
add edi, 0xdc297231
mov esi, ecx
shr ebx, 2
mov edi, ecx
jmp 0x476e52
pop ecx
inc edx
xor ebx, edi
add edx, ebx
mov edi, esi
shr esi, 0xf
mov edx, 0xdd00f9cf
add esi, edx
shl ebx, 0x1f
jmp 0x477d86
pop ecx
ror ebx, 0x1f
and edx, esi
shr ebx, 1
and edi, esi
shr edi, 0xf
xchg edi, ebx
jmp 0x477175
push 0xdc4ad5e5
inc edi
xchg edi, ebx
add edx, 0xdd0e0f0f
or esi, edx
xor esi, 0xdd0e9f07
xor edx, 0xdd0ee065
xchg edi, edx
add esi, edx
rol edi, 0x10
sub edx, edi
jmp 0x47695f
push 0xdc38e189
xor ebx, esi
neg ebx
xchg esi, edi
xchg edi, edx
xor edx, 0xdd114755
ror ebx, 9
jmp 0x4769bb
call fcn.00478719
xor esi, 0xdd18aa8d
neg edi
bswap edx
xor edi, ebx
neg esi
add ebx, 0xdd19ee4b
or edx, ebx
add esi, ebx
mov edi, edx
or edi, edx
or edi, ebx
not edi
jmp fcn.0047745a
call fcn.00478719
shl edx, 0x10
add ebx, esi
mov ebx, edx
xor edi, 0xdd1c8961
add esi, edx
shl edx, 4
xchg ebx, edi
xchg edi, edx
xchg edi, esi
sub esi, edx
xor ebx, edi
sub edx, 0xdd1e966d
jmp 0x4758cf
call ecx
shl ebx, 0x1c
mov edi, 0xdd23fc87
xchg edi, ebx
shr esi, 0x1c
not edi
add esi, 0xdd250de1
xor esi, edx
dec ebx
rol edi, 0x17
or edx, ebx
jmp 0x478629
push 0x40
xchg edi, esi
mov ebx, 0xdd31c055
xchg edx, esi
and ebx, 0xdd32401b
sub edx, ebx
or ebx, esi
jmp 0x4760f8
call fcn.00478719
add edx, edi
mov ebx, esi
dec ebx
sub ebx, esi
xor ebx, edx
dec ebx
xchg edi, esi
ror esi, 0xa
and edx, ebx
and esi, ebx
and edx, esi
not ebx
mov esi, 0xdd41a8b7
or esi, edi
or edx, ebx
xor ebx, edx
jmp 0x4758a6
push 0xdc3c16e3
xor edi, 0xdd4aab27
mov edx, 0xdd4aeb3b
xor esi, edx
sub edi, 0xdd4b7a87
dec edx
xchg edx, edi
jmp 0x475ddd
push 0xdc30b71d
and ebx, esi
inc edx
or edi, ebx
ror esi, 4
and ebx, edi
rol edi, 7
xor ebx, edi
sub edi, ebx
jmp 0x47624f
push 0xdc2ea94d
or ebx, edx
add esi, edx
or edi, edx
xchg ebx, edi
dec edx
sub ebx, edi
xchg edx, ebx
xchg edi, esi
jmp 0x477146
call ecx
sub edi, ebx
add edi, ebx
xor edi, esi
and esi, edi
xor esi, ebx
rol edi, 0x1c
and ebx, 0xdd561011
sub edi, 0xdd5650dd
ror edx, 0x1c
add esi, edx
and ebx, edi
xor esi, edx
jmp 0x47732f
call ecx
mov esi, 0xdd57a46b
shr edx, 0x18
xor esi, edi
xor ebx, edx
sub ebx, edi
xor edx, ebx
add edi, ebx
xor edi, 0xdd596f47
jmp 0x478344
pop ecx
and edi, edx
or edi, 0xdd5a543d
or esi, edx
xchg esi, ebx
bswap edi
or ebx, edi
sub ebx, 0xdd5ba319
and edi, edx
jmp 0x477b35
push 0xdc40827f
xor edx, 0xdd7294fb
neg edx
xor ebx, 0xdd7315a5
sub esi, 0xdd73562f
shr ebx, 0xa
or edi, edx
not edx
xor edx, ebx
not esi
and edi, esi
add ebx, esi
neg edi
jmp 0x476492
pop ecx
xor ebx, 0xdd75ba0d
shl esi, 0x18
neg edi
sub ebx, edi
xchg esi, edx
xchg edi, edx
not esi
mov esi, edx
xchg ebx, edx
mov ebx, edx
xor edi, esi
and esi, edx
jmp 0x476cf5
push esp
dec edx
shl ebx, 0xd
sub edi, 0xdd9bebf9
or ebx, edi
and edi, ebx
xchg ebx, edi
bswap edx
and ebx, edi
xor esi, edi
add edx, 0xdd9db38f
sub esi, ebx
xchg edi, esi
jmp 0x4756cc
push 0xdc51f1b7
mov esi, 0xdda5937b
xor edi, 0xdda5d32f
or esi, 0xdda6244b
xchg esi, ebx
and esi, edx
rol edx, 9
and esi, edx
or edi, 0xdda75fc9
mov esi, 0xdda79f01
inc edx
jmp 0x475e9f
pop ecx
sub edi, esi
add edx, edi
ror esi, 0x16
add edx, esi
and esi, 0xddae9f01
and edx, 0xddaee02d
add esi, ebx
dec edi
mov edx, ebx
xchg edi, edx
dec edi
xchg edi, esi
or edx, edi
ror esi, 6
jmp 0x47600e
pop ecx
sub edi, esi
and edx, 0xddb4a2fb
or ebx, 0xddb4e2e7
xchg esi, edi
add esi, edi
or edi, 0xddb5b073
xchg edx, ebx
xchg esi, ebx
jmp 0x47543f
mov ecx, 0x123b2f04
ror ebx, 0x1d
bswap ebx
shr edx, 3
and edi, 0xddb74a1b
or ebx, edx
xor ebx, 0xddb7d8a3
mov edi, 0xddb818d9
and esi, 0xddb858db
shr edi, 4
mov edx, ebx
jmp 0x4774f4
pop ecx
xor edi, edx
and ebx, esi
inc ebx
sub ebx, edi
bswap esi
sub edx, 0xddba7c45
jmp 0x476610
mov ecx, 0x123b2f04
mov edi, 0xddbad897
xchg edi, edx
bswap esi
shl edi, 0x1f
bswap edi
or edx, 0xddbc2bf7
jmp 0x477fd3
push 0xdc4f9241
add edi, 0xddbc881b
shr ebx, 9
not ebx
sub ebx, edx
add ebx, esi
xor edi, esi
xor edx, edi
inc edx
add esi, 0xddbe9637
xor ebx, edi
jmp 0x475e22
push 0xdc523dcb
add esi, edi
shl edi, 0x1e
shl esi, 0x18
xchg edx, edi
sub edi, edx
xchg edx, edi
bswap edi
sub esi, ebx
jmp 0x47791b
push 0xdc4a3ed5
and edi, ebx
add esi, ebx
and edx, edi
xor edx, esi
add edx, esi
inc edx
bswap edx
sub ebx, 0xddc9d495
mov edx, esi
mov edx, ebx
jmp 0x476a5e
call fcn.00478719
sub edi, edx
add edi, ebx
and edi, edx
ror edx, 0xb
inc ebx
mov ebx, edi
jmp 0x476188
call fcn.00478719
dec ebx
or esi, edx
sub ebx, edx
not esi
mov esi, edi
rol ebx, 0x15
xor edx, ebx
and esi, edx
or edi, 0xddd2e40b
or esi, 0xddd34fc9
jmp 0x4767c0
pop ecx
shr edi, 0x1b
mov edx, esi
mov edi, edx
or esi, 0xddd4a07b
or edx, 0xddd4e079
and esi, 0xddd51faf
shr edx, 0x1a
xchg ebx, edx
jmp 0x47700d
pop ecx
mov ebx, 0xdddcc0b7
sub edx, esi
xchg esi, edx
rol ebx, 0x11
or esi, edx
sub esi, edx
add ebx, edi
sub edi, edx
jmp 0x4784a9
call ecx
or ebx, 0xdde08d7b
or edx, 0xdde0cd5d
sub ebx, edi
rol edx, 0x1f
and edi, 0xdde19ca9
mov ebx, edi
xchg edi, esi
add ebx, 0xdde2589d
mov edi, 0xdde2997f
xor ebx, edx
shl ebx, 0x1a
add esi, edx
jmp 0x4758ee
push 0x74013
mov esi, ebx
shr ebx, 0x13
shr esi, 0x17
add ebx, 0xddedd2f3
dec esi
xchg edi, esi
mov edx, ebx
mov esi, edi
sub esi, 0xddef1c57
add edi, 0xddef5c7b
shl esi, 7
xor ebx, esi
jmp 0x476edc
pop ecx
sub edx, ebx
rol esi, 8
sub esi, 0xddf3d997
ror edi, 0x18
or esi, edx
or esi, edx
neg edi
sub esi, 0xddf527db
sub edi, 0xddf567b7
xor ebx, 0xddf5a7a7
mov edi, 0xddf5e709
mov edi, esi
sub edi, esi
rol edx, 2
jmp 0x477123
call ecx
bswap edx
ror esi, 0x15
or ebx, edi
xor edi, edx
add esi, edi
sub edi, 0xddf8369d
sub edx, edi
or edx, esi
dec ebx
and ebx, edi
and edx, edi
shr edi, 0xa
jmp 0x477fb4
call ecx
mov edi, ebx
rol edi, 0x1d
sub edx, esi
xchg esi, ebx
mov ebx, 0xddfd4ee7
xor esi, 0xddfd8ec3
or esi, edx
and ebx, 0xddfe0cc7
xchg esi, ebx
sub ebx, edi
jmp 0x477a00
push 0xdc31020d
bswap edx
ror edi, 0xa
rol edx, 0x1d
xchg esi, edx
ror ebx, 0x1f
and edx, 0xde05e523
xor edi, ebx
sub esi, edx
jmp 0x477dd1
push 0xdc482d39
add ebx, esi
add ebx, esi
add edx, 0xde0c2045
sub esi, edx
and edx, edi
xor esi, ebx
or ebx, 0xde0d1bf5
sub edi, ebx
jmp 0x47794c
call fcn.00478719
mov ebx, 0xde1c8341
sub edi, esi
xor edi, edx
mov edi, esi
sub ebx, 0xde1d7e6b
xor ebx, 0xde1dbee7
bswap ebx
and edx, ebx
sub edi, ebx
add esi, edx
jmp 0x476b28
push 0xdc397735
and ebx, edi
shl ebx, 0x18
shl edi, 1
and esi, ebx
mov esi, edx
inc edx
rol edx, 4
add edi, 0xde2b6d33
shl esi, 0x1e
ror ebx, 0xb
xor edi, edx
and ebx, edi
jmp 0x476cc2
push 0xdc40cd41
and esi, edi
or edi, esi
add edx, edi
dec esi
mov edi, esi
and edx, 0xde2e0c1f
shr ebx, 0x1f
and esi, 0xde2e8c93
jmp 0x477ae8
pop ecx
and ebx, 0xde321039
or edi, edx
xchg edx, ebx
add esi, edx
shl edx, 0x12
sub ebx, 0xde33e6cd
add esi, edi
sub esi, ebx
and esi, edx
rol edx, 0xb
sub ebx, esi
xchg esi, edx
jmp 0x475425
push 0xdc35ad6f
sub edi, ebx
bswap edx
xchg edi, esi
not esi
rol edx, 0xf
mov edi, 0xde374bbf
ror edx, 6
or esi, edx
jmp 0x476e98
push 0xdc458873
or edi, ebx
xchg edi, ebx
or edi, edx
xchg ebx, edx
jmp 0x476c91
pop ecx
sub esi, edx
rol edi, 1
xor esi, edx
or esi, 0xde3fc8bb
and ebx, esi
and esi, edi
xor edx, esi
mov esi, edi
or esi, edx
xor esi, 0xde414e3b
shr ebx, 6
ror ebx, 0xc
jmp 0x475cde
push 0xdc3517ad
and esi, ebx
or esi, edx
mov edi, edx
and ebx, edi
neg edi
and esi, 0xde4c6af9
bswap esi
or edx, edi
jmp 0x477bd0
pop ecx
rol ebx, 0xd
dec ebx
or ebx, esi
xor esi, 0xde59f0af
xor edi, 0xde5a319f
and edi, edx
mov ebx, 0xde5ab0a5
or esi, ebx
and esi, 0xde5b4119
add ebx, 0xde5b810f
not edi
rol ebx, 4
mov esi, 0xde5c4295
neg edx
mov ebx, esi
xor esi, edx
jmp 0x4779b2
push esp
xor edi, esi
xor edi, edx
add edx, 0xde6b72bb
xchg edx, edi
and edx, edi
bswap esi
xor ebx, esi
xor ebx, edi
jmp 0x475c5c
pop ecx
bswap edi
shl edx, 0x19
neg esi
dec ebx
xor esi, edx
sub edx, esi
and esi, edx
or esi, ebx
ror edi, 0x1c
bswap esi
xchg esi, edi
inc edi
jmp 0x4769d6
pop ecx
or edx, edi
xchg esi, edi
xchg edi, esi
sub esi, 0xde883c85
inc edx
sub edx, ebx
mov esi, ebx
mov edx, ebx
jmp 0x477c59
mov ecx, 0x123b2f04
rol ebx, 0x19
add ebx, edx
xchg edx, edi
not esi
jmp 0x477284
push 0xdc392cf1
sub edx, esi
neg esi
rol ebx, 0x14
mov edx, esi
and edi, ebx
mov ebx, edi
xchg edx, edi
sub edi, edx
jmp 0x476468
pop ecx
xchg ebx, edx
neg esi
mov edi, esi
add edi, ebx
bswap edi
and edi, esi
bswap edx
add esi, 0xde9395e9
xor esi, edi
xor esi, edx
neg edx
ror edi, 0xf
ror ebx, 0x1c
ror ebx, 0x10
jmp 0x477416
push 0xdc4a8a5f
and esi, 0xde9cf7f7
or edx, ebx
ror edi, 3
and edi, edx
add edx, ebx
add esi, 0xde9e96d5
or ebx, edi
sub edi, edx
ror edi, 2
xchg edi, esi
add edi, esi
xor edx, esi
shl esi, 0xb
or edi, 0xdea0c737
jmp 0x4754e5
call ecx
or edi, edx
dec esi
or esi, edx
add ebx, edx
bswap ebx
sub esi, ebx
jmp 0x4782c7
pop ecx
inc ebx
sub ebx, 0xdeb65d13
mov ebx, edi
or esi, 0xdeb6eb03
add esi, 0xdeb72b0f
xor esi, ebx
xor edi, ebx
and edx, edi
xor ebx, edx
not ebx
jmp 0x477434
mov ecx, 0x123b2f04
sub esi, edi
and esi, 0xdec696cb
xor esi, ebx
xor edx, 0xdec716f5
and edx, edi
sub esi, 0xdec7940f
or edx, 0xdec7e64b
xchg esi, ebx
mov esi, 0xdec8652b
xchg ebx, esi
jmp 0x4770a3
push 0xdc39c09d
sub edi, 0xdec90183
add edx, 0xdec9425b
xor edx, esi
or edx, edi
or edi, ebx
nop
sub edi, edx
or esi, 0xdecace3f
xor edx, edi
and edx, esi
xor esi, ebx
rol edx, 0x1f
sub esi, ebx
shr esi, 0x1e
jmp 0x4781fe
pop ecx
inc edi
mov ebx, esi
sub edx, esi
or esi, 0xdecd5e13
add edi, esi
rol edi, 0xd
and ebx, esi
or ebx, edx
add esi, ebx
sub ebx, edi
sub edi, ebx
sub esi, 0xdecf67ef
bswap esi
or ebx, 0xdecfeabb
jmp 0x476d23
push 0xdc306c0f
bswap edx
or edx, 0xded084d7
and edi, ebx
neg edi
inc esi
or edx, edi
sub edx, 0xded1c57f
or edx, 0xded20527
rol ebx, 0x12
sub edi, edx
add edx, esi
inc edx
jmp 0x475841
push 0xdc44f1cb
xor ebx, edx
mov edx, 0xdee1138b
and ebx, esi
xchg ebx, edi
xor edi, edx
rol ebx, 8
shr edx, 0x10
sub ebx, 0xdee2a249
jmp 0x477a8b
push 0xdc2e5613
mov edx, edi
rol edi, 0xc
xor esi, ebx
add ebx, esi
xchg edi, ebx
xor esi, 0xdee7e50f
jmp 0x47588d
push 0xdc35f7c5
add ebx, esi
inc edx
sub edx, 0xdeec64a1
or ebx, 0xdeeca5d9
sub ebx, esi
sub edi, esi
inc edi
ror edi, 0x11
xchg edi, ebx
mov edi, esi
jmp 0x477367
push 0x401400
add edx, edi
add edx, esi
xor edx, esi
shl ebx, 0xf
xor edi, edx
add ebx, 0xdef3023d
add esi, edx
or esi, edi
and edx, 0xdef3bd23
and edx, ebx
jmp 0x475610
call ecx
mov ebx, edx
and edx, 0xdef49285
xor esi, edx
inc edx
sub esi, edi
and edi, esi
sub edx, 0xdef5e007
add ebx, edx
jmp 0x4785d1
mov ecx, 0x123b2f04
mov edi, 0xdefad349
mov edi, ebx
xor esi, 0xdefb51a7
inc esi
mov edi, ebx
xor edi, 0xdefc11eb
and edx, esi
inc esi
xchg esi, edi
sub esi, 0xdefd22bf
and edi, 0xdefd6285
add ebx, edx
xor edx, ebx
xchg edx, edi
sub edx, edi
mov edi, ebx
jmp 0x477ce5
call ecx
shr edx, 0xc
and edi, edx
or edi, ebx
shl esi, 0x1c
dec ebx
and edx, edi
mov edx, esi
or edx, 0xdf061deb
jmp 0x47730f
pop ecx
or esi, ebx
rol esi, 2
or edx, ebx
add edi, ebx
rol edi, 3
xor esi, edi
mov ebx, 0xdf08091d
add esi, edx
jmp 0x476946
call fcn.00478719
sub edx, edi
neg esi
rol ebx, 0x12
and esi, ebx
dec edi
shr edx, 1
mov esi, ebx
rol edi, 0x19
shl edx, 0x1c
and edx, esi
mov edx, edi
sub esi, 0xdf164729
jmp 0x476ff1
push 0xdc49f323
add edx, edi
xchg ebx, esi
xor ebx, esi
ror edx, 2
xor edi, 0xdf1e0abf
or edi, ebx
add edx, 0xdf1e8a17
or edi, edx
jmp 0x475ee5
mov ecx, 0x123b2f04
shl edx, 0xa
and ebx, edi
add edi, 0xdf1fa1bd
not esi
add edx, 0xdf2034f3
add edx, edi
mov edx, 0xdf20b33f
shl edi, 0xb
and ebx, 0xdf21357b
xchg edx, ebx
jmp 0x4782f6
pop ecx
sub esi, edx
mov ebx, edx
xchg edi, esi
and edi, 0xdf229f51
xor edx, edi
shl esi, 0xc
or esi, 0xdf23617d
mov ebx, 0xdf23a163
jmp 0x477d39
call ecx
ror esi, 0x19
mov edx, ebx
mov edi, ebx
dec edi
neg esi
xchg edi, ebx
or ebx, esi
and ebx, edx
mov edi, edx
xor edx, ebx
and edi, 0xdf29276d
or edx, esi
shr ebx, 0xf
and edx, edi
jmp 0x4764d2
push 0xdc403753
and edx, edi
dec edi
sub edi, edx
xchg esi, edi
xchg ebx, edi
or edx, 0xdf2db779
and ebx, 0xdf2e0873
add edi, esi
mov edx, ebx
mov ebx, edx
or ebx, edi
and esi, ebx
or edx, 0xdf2f7c65
and edx, 0xdf2fbcf5
jmp 0x475a63
call fcn.00478719
inc ebx
add esi, edi
mov esi, edi
not edx
sub esi, 0xdf358c65
sub esi, edx
sub edi, edx
sub edi, 0xdf364a89
rol esi, 0x10
mov edx, ebx
jmp 0x477909
pop ecx
add ebx, edx
and edi, 0xdf37617f
xor edi, 0xdf37b2bb
xchg edi, edx
jmp 0x47550f
pop ecx
nop
add edx, esi
xor edi, edx
not esi
mov esi, 0xdf3f1c01
or edi, edx
add esi, ebx
rol esi, 0x16
or ebx, 0xdf402b83
dec edi
jmp 0x477bef
pop ecx
neg edi
or esi, 0xdf41089d
inc edi
xor esi, ebx
xchg esi, edx
rol edx, 0xb
and edi, esi
shl esi, 3
sub ebx, edi
xchg ebx, esi
jmp 0x47868a
push 0xdc3641fd
sub edi, ebx
inc esi
not esi
xchg esi, edx
neg edi
and edx, 0xdf46f48b
or esi, ebx
sub edx, esi
xor edx, 0xdf47b3c3
neg ebx
jmp 0x477c12
push 0xdc4eaedd
bswap esi
xchg edi, esi
mov edx, ebx
xor ebx, edx
mov edi, ebx
add edi, edx
add edx, ebx
mov ebx, edi
or edx, 0xdf526173
xor ebx, edx
jmp 0x47831a
pop ecx
xor esi, 0xdf52fb5b
xchg edx, ebx
sub edi, ebx
bswap ebx
neg ebx
or esi, edx
not edi
sub esi, ebx
and edi, ebx
and edx, esi
jmp 0x4772aa
push 0xdc330b3f
mov esi, ebx
xor edi, 0xdf56365d
and esi, 0xdf5676b5
xchg edi, ebx
xor edi, ebx
not edi
xchg edx, ebx
xchg edx, edi
xchg ebx, edx
neg esi
jmp 0x478663
call fcn.00478719
or edx, 0xdf633a77
neg edi
shl esi, 0x1e
mov edx, 0xdf63fb89
xor esi, 0xdf643cfd
or edx, ebx
add ebx, edx
xchg esi, edi
xchg esi, ebx
add edi, edx
rol edi, 4
or edx, esi
and edx, esi
and edi, 0xdf670761
jmp 0x476f03
push 0xdc4f4651
xchg esi, edx
xor esi, ebx
sub ebx, esi
mov edi, ebx
sub ebx, esi
xor ebx, 0xdf707a57
and edx, esi
and edx, esi
jmp 0x475e40
call fcn.00478719
mov ebx, edx
mov edi, 0xdf92b325
ror ebx, 0x15
ror esi, 0xc
inc esi
mov ebx, 0xdf93b781
xchg esi, edi
or esi, 0xdf94497b
sub ebx, edx
sub esi, edi
jmp 0x47780b
call ecx
and ebx, esi
xor edi, esi
mov edi, ebx
or esi, edi
add edi, ebx
mov edx, 0xdf9fb2e5
xchg edi, edx
mov ebx, 0xdfa03231
jmp 0x475d5e
call ecx
sub ebx, 0xdfb175ed
inc ebx
xor esi, ebx
mov ebx, edi
jmp 0x478098
mov ecx, 0x123b2f04
or ebx, edx
mov edi, 0xdfb2de1f
xor esi, 0xdfb31eb7
and edi, esi
mov esi, ebx
and ebx, 0xdfb3ea7d
neg esi
mov ebx, 0xdfb46b01
xchg edi, edx
rol esi, 0x1c
sub esi, edi
xor ebx, esi
jmp 0x475578
mov ecx, 0x123b2f04
and esi, 0xdfb6eecb
or esi, edx
and ebx, edx
neg esi
inc ebx
mov esi, ebx
jmp 0x4763aa
pop ecx
dec ebx
sub edi, 0xdfc02503
or edi, edx
xchg esi, edx
dec ebx
mov edx, ebx
xor esi, ebx
and edi, edx
sub edi, ebx
xchg esi, edx
jmp 0x477f91
pop ecx
and edx, edi
xor ebx, esi
or esi, ebx
sub esi, edx
xor edi, ebx
xchg ebx, esi
or edx, 0xdfc7c50d
and edx, ebx
xor ebx, edx
xchg edx, esi
shl edx, 0x16
not edx
jmp 0x4773f4
call ecx
or edx, edi
mov edi, 0xdfcbcaeb
xchg edx, ebx
and ebx, esi
xor edx, esi
add ebx, edx
and edi, ebx
add edx, ebx
inc esi
xor edx, edi
jmp 0x475a92
push 0xdc453c8f
or esi, ebx
neg edx
add edi, 0xdfd2dac9
or ebx, edi
mov esi, edx
or edx, ebx
jmp 0x47655e
push 0xdc41170f
mov ebx, edx
shr esi, 2
or ebx, edx
xchg esi, edi
xchg edx, edi
xor edx, esi
bswap esi
add esi, 0xdfd9a327
jmp 0x477e8c
pop ecx
or esi, ebx
or ebx, esi
add ebx, edi
add ebx, esi
xor ebx, edi
not edx
mov ebx, edi
or edx, 0xdfde5af9
and edx, ebx
sub edi, edx
and esi, ebx
and ebx, 0xdfdf66fb
xor edi, 0xdfdfa691
xor edx, edi
and esi, edi
neg edx
jmp 0x475dbb
push 0xdc3562cf
shr esi, 9
xchg esi, edx
not ebx
xchg esi, edi
or edx, 0xdfe92a6f
sub ebx, edx
not edx
bswap ebx
jmp 0x4764fa
pop ecx
nop
sub esi, ebx
xor ebx, edx
or esi, ebx
and edx, ebx
shr edx, 0xd
bswap edx
xchg edx, edi
xchg ebx, edi
or edi, 0xdfed2811
shr edi, 0xf
or edx, edi
jmp 0x4766d3
mov ecx, 0x123b2f04
mov edi, 0xdfee011b
add edx, ebx
xor ebx, 0xdfee7ea1
shl esi, 0x19
add esi, 0xdfef104b
and esi, ebx
inc ebx
xor ebx, edi
ror edx, 0xe
xchg edx, edi
and esi, 0xdff08e55
mov esi, 0xdff0ce5b
jmp 0x4755a2
push 0xdc4d3217
xor edi, ebx
add edx, ebx
sub esi, 0xdff2e4d1
and esi, edi
not edx
sub esi, ebx
xor edi, 0xdff3e2c9
xchg ebx, edx
jmp 0x476f68
mov ecx, 0x123b2f04
xor edi, edx
add esi, edi
and ebx, edi
xor ebx, edi
dec edi
not esi
sub esi, edx
and ebx, esi
and esi, edi
not edi
jmp 0x475f1f
call fcn.00478719
sub edi, ebx
xor ebx, esi
xchg edi, esi
xchg esi, edi
mov edx, 0xdffdea51
dec edx
or edx, 0xdffe7d63
bswap edx
or esi, edi
xor edx, esi
shl ebx, 0x1d
xchg esi, edx
jmp 0x4761dd
push 0xdc44a6c3
or edx, esi
or esi, edx
mov edx, edi
sub ebx, esi
shr edx, 1
xchg edx, ebx
or edi, edx
shl edi, 0x1f
add edi, esi
and esi, 0xe0058413
rol edi, 5
or ebx, edi
add esi, 0xe0064473
and esi, edx
jmp 0x476e02
pop ecx
and esi, ebx
and ebx, edx
shr ebx, 0x1e
xor edx, ebx
and ebx, edx
add edi, 0xe00ab507
not esi
or esi, edx
shl ebx, 0xc
ror ebx, 0x11
bswap edx
add esi, 0xe00c371d
jmp 0x476570
mov ecx, 0x123b2f04
or edx, ebx
sub esi, ebx
rol ebx, 0xd
inc edx
bswap ebx
xor esi, 0xe010833d
sub esi, edx
or edi, ebx
nop
xchg esi, edx
add ebx, 0xe011c11d
or edi, 0xe0120215
jmp 0x475784
push 0xdc41d86b
add edi, 0xe01bf505
xchg edi, ebx
add ebx, 0xe01c755b
and ebx, 0xe01cb5c5
or ebx, edi
ror edx, 0x12
sub edx, ebx
xor esi, edx
shl esi, 4
ror edi, 0x13
jmp 0x477ed1
mov ecx, 0x123b2f04
bswap edi
or edx, 0xe0227bcd
mov edx, 0xe022c443
xchg edi, ebx
add ebx, edx
sub esi, edi
sub edi, edx
sub edi, edx
jmp 0x478552
push 0xdc47e27d
xor esi, 0xe0310091
add edx, ebx
xor edi, edx
add ebx, esi
xchg edx, edi
xor esi, edx
xchg edi, ebx
shl ebx, 3
xor edx, edi
xor ebx, edi
jmp 0x4762cc
pop ecx
and ebx, edx
or esi, ebx
shl esi, 0xe
add esi, ebx
add ebx, esi
xor edx, 0xe034db57
mov edx, ebx
xchg ebx, edx
xor esi, ebx
xor ebx, esi
jmp 0x475e0d
call fcn.00478719
shr ebx, 0x1b
shl edx, 3
mov esi, ebx
and ebx, edx
add ebx, edi
sub edi, 0xe0377e47
sub esi, edi
add ebx, edi
or edi, esi
mov edx, 0xe0388997
add edx, 0xe038ca59
or esi, edx
xchg edi, edx
not edx
rol edx, 5
xchg ebx, esi
jmp 0x4771ba
pop ecx
and esi, edx
xor edi, edx
xchg edx, edi
rol esi, 0x14
jmp 0x475821
pop ecx
sub esi, ebx
sub esi, edx
add edx, ebx
shr edi, 0x1f
not ebx
xchg ebx, esi
shl ebx, 6
add edi, esi
dec ebx
not edx
jmp 0x475f93
mov ecx, 0x4132136a
xchg ebx, edx
or esi, edx
mov edx, ebx
xor edx, 0xe06891ef
add edi, ebx
xor edx, 0xe0697d47
and esi, edi
sub esi, ebx
not edi
add edx, 0xe06ba53b
sub edx, edi
xor esi, edi
not ebx
add edx, edi
jmp 0x475f6d
mov ecx, 0x123b2f04
mov edi, 0xe080f1c3
add ebx, edi
add ebx, edx
mov ebx, edi
sub edi, edx
sub esi, edi
xor ebx, esi
sub edi, esi
or edi, 0xe084e6cf
add edi, 0xe0857295
jmp 0x47775a
pop ecx
xor esi, ebx
add edi, 0xe09ef0f3
mov esi, edx
sub ebx, 0xe09ff7d7
sub ebx, edi
sub edx, ebx
and esi, 0xe0a1997f
shl edi, 0x1f
xor ebx, edi
ror edx, 0xb
mov edi, 0xe0a3d751
bswap esi
jmp 0x476150
call fcn.00478719
add edx, ebx
xchg edx, ebx
ror edi, 0xc
sub esi, ebx
xchg esi, ebx
and edx, edi
add edi, esi
add esi, edi
ror edi, 0xc
add ebx, 0xe0a94d8f
jmp 0x477a44
push 0xdc4efa3d
xor esi, ebx
bswap ebx
shl edi, 0x17
dec edx
add ebx, 0xe0abfc81
or esi, ebx
add edi, edx
xchg edi, edx
mov edx, edi
and edi, esi
add esi, edx
xor edi, 0xe0b09871
jmp 0x4775a2
pop ecx
or edx, 0xe0b14667
mov edx, ebx
sub edi, ebx
xor edx, esi
shr esi, 0x1e
mov ebx, edi
bswap ebx
dec esi
or ebx, edi
dec ebx
inc edi
sub ebx, 0xe0b74577
jmp 0x4768c5
pop ecx
xor edi, esi
rol edx, 0x18
rol ebx, 3
neg esi
xchg ebx, edx
sub edi, ebx
and ebx, 0xe0e682f1
sub edi, ebx
add esi, 0xe0e7756b
xchg ebx, edx
shr edx, 3
or edi, 0xe0e8f917
jmp 0x47804e
call fcn.00478719
and esi, edi
xchg ebx, edi
or edx, esi
and edi, 0xe0fadeff
jmp 0x47603a
pop ecx
xor edi, ebx
bswap ebx
and ebx, edx
dec esi
xchg edi, edx
ror ebx, 8
xchg ebx, edi
xchg edi, ebx
sub esi, 0xe1109e37
mov ebx, 0xe1112ce3
jmp 0x47815b
pop ecx
add edi, edx
xor esi, edi
add ebx, edx
sub esi, ebx
and edi, esi
mov ebx, edx
jmp 0x477203
push 0xdc33559f
neg esi
add ebx, esi
mov edx, edi
shl edi, 7
xor esi, edi
xchg edi, edx
and ebx, esi
add edx, edi
sub edx, 0xe127c93f
sub ebx, 0xe12856eb
jmp 0x477c7b
pop ecx
sub edi, edx
add edx, 0xe1298d43
or edi, edx
bswap esi
xor esi, edi
or edi, ebx
and ebx, edx
shr edi, 0xd
mov esi, edx
shl edx, 3
jmp 0x476bb0