Function at 0x40338f
Capabilities:
Check os version
Encode data using xor
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
sub esp, 0x2d4
push ebx
push esi
push edi
push 0x20
pop edi
xor ebx, ebx
push 0x8001
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xbfffffff
cmp ax, 6
mov dword [0x47aeec], eax
je 0x4033df
push ebx
call fcn.00406694
cmp eax, ebx
je 0x4033df
push 0xc00
call eax
mov esi, str.UXTHEME
push esi
call fcn.00406624
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea esi, [esi + eax + 1]
cmp byte [esi], 0
jne 0x4033e4
push 0xa
call fcn.00406694
push 8
call fcn.00406694
push 6
mov dword [0x47aee4], eax
call fcn.00406694
cmp eax, ebx
je 0x403427
push 0x1e
call eax
test eax, eax
je 0x403427
or byte [0x47aeef], 0x40
push ebp
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov dword [0x47afb8], eax
push ebx
lea eax, [esp + 0x34]
push 0x2b4
push eax
push ebx
push 0x440208
xor ebx, ebp
or ecx, 0x4b6a55c4
mov edx, ebx
mov eax, esi
sub ecx, eax
or edi, esi
xor ecx, 0x574aace0
or ecx, 0x27ea747a
call fcn.004058a0
shl eax, 3
add esi, ebx
call fcn.004029d2
add ebx, dword [0x40a093]
mov esi, 0xb8dfb554
cmp dword [0x40a371], 0x628b9b94
jne 0x403493
and ebx, 0x37744364
rol edi, 0xc
sub ebx, edx
mov ebx, ebx
xor ecx, 0x30070c60
dec eax
shl ecx, 0xa
mov ecx, 0x391c9b48
xchg edi, esi
mov ebx, eax
not esi
cmp ebx, 0x3e47c5f3
jb 0x4034ba
shr ebx, 0xd
dec edx
or edx, 0xed8f517c
neg esi
rol ebx, 8
xchg edi, esi
or edx, 0x2668ab48
test eax, edx
jbe 0x4034d3
inc edx
call fcn.00406a00
shr edi, 0xd
sub ebx, dword [0x40a5d3]
not esi
dec ecx
jne 0x4034a9
xchg esi, eax
call fcn.0040589f
add ecx, esi
xor eax, 0xc8871ddc
not edx
and eax, 0xb2e09682
ror ecx, 0xa
and edx, esp
and eax, edi
add esi, 0x365cfa0f
cmp edx, 0x8a8b75ff
jb 0x403515
xor edx, ebx
xor edi, 0x5972cdff
ror ecx, 0x13
test esp, edi
jnp 0x403523
inc edx
mov ebx, edi
and edi, 0x40acaf79
shr ecx, 0x1a
test esp, ecx
jge 0x403535
shl edi, 0xe
mov ecx, 0x3a92281a
ror edi, 3
not esi
xchg eax, edx
shl eax, 0x1e
ror edx, 0xa
xchg eax, edx
inc esi
xor edi, dword [str..]
call fcn.004058a0
shl edi, 0x11
dec ecx
jne 0x40353a
mov esi, ecx
sub ebx, ebp
shl ecx, 0x16
test dword [0x40a0a9], ebp
jnp 0x40356d
not esi
cmp ecx, 0xd793ec75
jns 0x403577
add eax, esi
sub eax, esp
inc esi
xor esi, eax
add edi, edx
xor edi, edi
sub edx, ebx
cmp edx, 0x206fb44f
jge 0x40358c
add eax, edi
dec edi
mov ecx, 0x5bc14a40
call fcn.00406a00
mov ebx, 0xe0b6682d
rol esi, 0x16
ror esi, 3
shl ebx, 8
inc ebx
shl ebx, 7
or edx, dword [0x40a47f]
sub ebx, 0xed234bb3
or esi, dword [0x40a21e]
dec ecx
jne 0x403592
call fcn.004059df
sub esi, esi
test dword [0x40a0b1], 0xc7133cde
jne 0x4035dc
cmp dword [0x40a465], 0x1f0dbfec
jne 0x4035e0
sub ebx, esp
neg esi
ror eax, 0x18
add edx, 0x3eac6784
inc edi
xor ebx, esp
add edi, 0x6c339de5
sub edx, eax
test dword [0x40a0b2], 0x9c6993a4
jg 0x403604
xor edx, ebp
mov eax, ecx
shr esi, 0xc
inc edx
not edx
xchg ebx, edx
add ebx, esi
sub eax, 0x3413c85f
mov ebx, 0x33c5e158
dec esi
rol edi, 3
sub ebx, esp
inc ecx
inc edi
call fcn.00404da3
xor esi, esp
add eax, 0x5ba9a1be
xor edx, 0x4e62f758
not eax
sub edx, esp
add esi, edi
call fcn.00401fc8
rol esi, 0x1e
inc ecx
dec eax
neg esi
add eax, 0x2e8a31d6
xchg ecx, esi
xor ecx, 0x5bbeae65
xor esi, ebp
call fcn.004014c2
call fcn.004014c2
xor esi, ebp
xor ecx, 0x5bbeae65
xchg ecx, esi
sub eax, 0x2e8a31d6
neg esi
inc eax
dec ecx
ror esi, 0x1e
call fcn.004029d2
sub esi, edi
add edx, esp
not eax
xor edx, 0x4e62f758
sub eax, 0x5ba9a1be
xor esi, esp
dec edi
dec ecx
add ebx, esp
ror edi, 3
inc esi
sub ebx, 0x8bfacdeb
sub ebx, 0x83a77854
dec ebx
xor ecx, ebp
call fcn.00402569
rol esi, 7
xor eax, 0x56978fc1
not esi
xor ebx, ecx
rol edx, 0x1f
add edi, ecx
xchg ecx, esi
call fcn.004056e4
add ebx, ecx
xchg edx, eax
call fcn.00404da3
sub eax, ecx
call fcn.00406ce6
neg esi
add edi, eax
sub edi, eax
neg esi
call fcn.004050ba
add eax, ecx
call fcn.00404da3
xchg edx, eax
sub ebx, ecx
xchg ecx, esi
sub edi, ecx
ror edx, 0x1f
xor ebx, ecx
not esi
xor eax, 0x56978fc1
ror esi, 7
xor ecx, ebp
inc ebx
add ebx, 0x83a77854
xor ebx, 0xa7cb136d
neg edi
sub eax, 0x9a4cae3
xchg ecx, edx
sub eax, ebp
inc ecx
xor ebx, eax
not eax
call fcn.00401920
xor edi, esp
dec edx
rol ecx, 4
sub ebx, 0xd4bbeef8
inc edi
neg esi
xor eax, esi
not eax
dec edx
xor ebx, 0xe04683dc
not edi
call fcn.00404da3
inc ecx
not esi
not esi
dec ecx
not edi
xor ebx, 0xe04683dc
inc edx
not eax
xor eax, esi
neg esi
dec edi
add ebx, 0xd4bbeef8
ror ecx, 4
inc edx
xor edi, esp
call fcn.00404da3
not eax
xor ebx, eax
dec ecx
add eax, ebp
xchg ecx, edx
add eax, 0x9a4cae3
neg edi
push ebx
add edi, 0xba14a5fd
dec esi
rol ebx, 8
xchg ebx, edx
call fcn.00402780
inc ebx
rol edx, 0x1e
dec edx
xor ecx, esi
inc edx
not ecx
call fcn.00402311
add esi, 0x66fb60a1
ror edi, 0x1c
rol edi, 0x1c
sub esi, 0x66fb60a1
not ecx
dec edx
xor ecx, esi
inc edx
ror edx, 0x1e
dec ebx
call fcn.00406ce6
xchg ebx, edx
ror ebx, 8
inc esi
sub edi, 0xba14a5fd
mov edi, 0x15403445
xchg edx, eax
dec ecx
call fcn.004050ba
neg edx
xchg ebx, edx
not esi
call fcn.00406842
sub edi, eax
inc ebx
inc edx
xor edx, esp
inc esi
inc edi
xchg edi, eax
xor edi, ebp
sub ebx, 0x232e92f7
add ebx, 0x232e92f7
xor edi, ebp
xchg edi, eax
dec edi
dec esi
xor edx, esp
dec edx
dec ebx
add edi, eax
not esi
xchg ebx, edx
neg edx
call fcn.00406ce6
inc ecx
xchg edx, eax
xor edi, 0xbea17f5d
xor edx, 0x143eca95
inc ebx
neg eax
rol eax, 0x15
call fcn.00406a00
add eax, esi
inc ebx
ror ebx, 0x1d
neg ebx
xchg esi, edx
xchg esi, edx
neg ebx
rol ebx, 0x1d
dec ebx
sub eax, esi
call fcn.00404da3
ror eax, 0x15
neg eax
dec ebx
xor edx, 0x143eca95
add edi, 0x8652214d
call fcn.0040238a
neg ebx
inc ebx
call fcn.0040160d
xchg edi, eax
xor ecx, ebx
dec edx
not esi
xor ebx, 0x327a1c41
call fcn.00404da3
rol edi, 5
sub edx, ebx
call fcn.00403375
inc eax
xor eax, esi
call fcn.00404da3
neg esi
ror ecx, 0x1a
xor edi, 0x28764f69
add ecx, 0x12425d67
sub ecx, 0x12425d67
xor edi, 0x28764f69
rol ecx, 0x1a
neg esi
call fcn.00402311
xor eax, esi
dec eax
add edx, ebx
ror edi, 5
call fcn.00406e77
xor ebx, 0x327a1c41
not esi
inc edx
xor ecx, ebx
xchg edi, eax
call fcn.004056e4
dec ebx
neg ebx
call fcn.00406842
push edi
xor eax, ebx
call fcn.00406842
rol edx, 5
neg ecx
call fcn.004014c2
ror ecx, 0x19
inc edi
sub ebx, 0x5fa45ed0
xchg esi, edx
xor esi, 0x143897e
xchg ebx, esi
neg esi
inc ecx
dec edx
neg ecx
rol eax, 0x17
inc ebx
xor ebx, edi
call fcn.0040607f
xor ebx, edi
dec ebx
ror eax, 0x17
neg ecx
inc edx
dec ecx
neg esi
xchg ebx, esi
xor esi, 0x143897e
xchg esi, edx
add ebx, 0x5fa45ed0
dec edi
rol ecx, 0x19
neg ecx
ror edx, 5
call fcn.004016ff
xor eax, ebx
mov edx, 0xb86e3a4f
inc ecx
dec edx
rol edi, 0xc
dec edi
ror esi, 8
or byte [esi - 9], al
salc
xor eax, edi
sub edi, 0xa92e1633
not ebx
inc ecx
rol ebx, 9
neg edi
dec edi
sub ebx, 0xa5f26042
call fcn.00403375
not esi
rol edx, 0xf
call fcn.00402569
xor eax, 0xef7d8b24
call fcn.004056e4
call fcn.0040589f
xor eax, 0xef7d8b24
ror edx, 0xf
not esi
call fcn.004056e4
add ebx, 0xa5f26042
inc edi
neg edi
ror ebx, 9
dec ecx
not ebx
add edi, 0xa92e1633
xor eax, edi
not esi
dec esi
rol esi, 8
inc edi
ror edi, 0xc
inc edx
dec ecx
and edx, 0x735c0f85
ror eax, 0x10
inc esi
not eax
add eax, esp
call fcn.00404da3
xor edx, 0x2f4b6f84
ror ebx, 5
xor ecx, edi
call fcn.00404da3
call fcn.004053b8
call fcn.00402780
call fcn.00404da3
xor ecx, edi
rol ebx, 5
xor edx, 0x2f4b6f84
sub eax, esp
not eax
dec esi
rol eax, 0x10
add edx, 0x3e265b66
ror ecx, 0x19
neg esi
rol ecx, 0x1e
call fcn.00402780
rol edx, 0xd
call fcn.00404da3
neg ecx
call fcn.004029d2
not ecx
call fcn.00402c40
call fcn.00402c40
not ecx
neg ecx
ror edx, 0xd
call fcn.0040589f
ror ecx, 0x1e
neg esi
rol ecx, 0x19
push edx
xor eax, esp
ror esi, 0x18
add eax, 0x1532910f
call fcn.004059df
not esi
add esi, 0xd02b5644
ror eax, 5
xchg ebx, esi
sub ebx, 0xd02272db
call fcn.004056e4
inc esi
dec esi
call fcn.004056e4
add ebx, 0xd02272db
xchg ebx, esi
rol eax, 5
sub esi, 0xd02b5644
not esi
call fcn.00402569
sub eax, 0x1532910f
rol esi, 0x18
xor eax, esp
push esp
inc ebx
inc esi
ror esi, 9
xor edx, ebx
call fcn.00404da3
inc edx
inc edx
rol esi, 0x10
xor ecx, 0x65c4632f
xor edi, 0xc47d90e2
neg ecx
sub edi, ebp
rol edx, 0x1e
add ebx, eax
xor eax, esp
call fcn.004016ff
add ebx, esi
call fcn.00402780
neg ecx
call fcn.00406842
neg ecx
sub ebx, esi
call fcn.0040607f
xor eax, esp
sub ebx, eax
ror edx, 0x1e
add edi, ebp
neg ecx
xor edi, 0xc47d90e2
xor ecx, 0x65c4632f
ror esi, 0x10
dec edx
dec edx
xor edx, ebx
rol esi, 9
dec esi
dec ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
rol ecx, 0x19
call fcn.00404da3
dec ecx
sub eax, esp
xor edx, 0x8d32af62
sub esi, ebp
inc eax
xor edi, ecx
call fcn.004053b8
xchg eax, edx
xor esi, ecx
dec esi
neg edi
dec eax
not edx
not edx
inc eax
neg edi
inc esi
xor esi, ecx
xchg eax, edx
call fcn.00401f42
xor edi, ecx
dec eax
add esi, ebp
xor edx, 0x8d32af62
add eax, esp
inc ecx
ror ecx, 0x19
add esp, 0xc
dec edi
xchg ebx, eax
call fcn.004014c2
rol edi, 8
call fcn.00406842
not edx
sub esi, edx
call fcn.0040607f
rol edx, 0x12
neg edx
xor ecx, 0xa0a565ca
dec edi
xor ecx, eax
call fcn.0040589f
neg edi
xor edx, ebx
neg edx
call fcn.00404da3
inc ecx
sub ebx, 0x6c6fee81
call fcn.004059df
call fcn.0040607f
add ebx, 0x6c6fee81
dec ecx
neg edx
xor edx, ebx
neg edi
call fcn.00406e77
xor ecx, eax
inc edi
xor ecx, 0xa0a565ca
neg edx
ror edx, 0x12
add esi, edx
not edx
ror edi, 8
call fcn.00404da3
xchg ebx, eax
inc edi
mov esi, 0xbb88b250
ror eax, 0xb
dec ebx
xchg edi, eax
add edi, 0x54bff227
not eax
sub ecx, ebp
call fcn.004014c2
neg edi
inc ecx
ror ebx, 0xc
xchg edx, esi
xor esi, 0x50f2b8d7
call fcn.00404da3
xor esi, 0x50f2b8d7
xchg edx, esi
rol ebx, 0xc
dec ecx
neg edi
add ecx, ebp
not eax
sub edi, 0x54bff227
xchg edi, eax
inc ebx
rol eax, 0xb
or esi, 0x21f14676
sub edx, ebp
rol edx, 5
inc ebx
neg esi
sub ecx, 0x4ea25b33
xchg ecx, esi
xor ecx, 0xb638c602
add esi, esp
inc ecx
neg edi
xchg edi, eax
add edi, esi
call fcn.0040218a
call fcn.00404da3
sub edi, esi
xchg edi, eax
neg edi
dec ecx
sub esi, esp
xor ecx, 0xb638c602
xchg ecx, esi
add ecx, 0x4ea25b33
neg esi
dec ebx
ror edx, 5
add edx, ebp
sub esi, 0xbbf9f676
neg eax
xchg ecx, edx
xor eax, esi
dec edx
rol ebx, 0x1b
xchg esi, edx
dec ecx
add ecx, ebx
call fcn.00403375
xor ecx, 0x55987553
call fcn.00404da3
call fcn.004014c2
xor ecx, 0x55987553
call fcn.0040518a
sub ecx, ebx
inc ecx
xchg esi, edx
ror ebx, 0x1b
inc edx
xor eax, esi
xchg ecx, edx
neg eax
push esi
rol ebx, 9
call fcn.0040589f
xor ebx, 0x4ec16ea2
rol esi, 0xf
xor edx, eax
rol ebx, 0x1d
call fcn.00406ce6
xchg edx, esi
add edi, esp
rol esi, 0x1e
dec esi
xchg edi, edx
sub ebx, ecx
ror ecx, 0x19
rol ecx, 0x19
add ebx, ecx
xchg edi, edx
inc esi
ror esi, 0x1e
sub edi, esp
xchg edx, esi
call fcn.00404da3
ror ebx, 0x1d
xor edx, eax
ror esi, 0xf
xor ebx, 0x4ec16ea2
call fcn.00406c6b
ror ebx, 9
mov ecx, 0x9181630c
add edx, esi
inc esi
call fcn.004014c2
ror eax, 1
xor eax, 0x5e53ffb6
xor ebx, edi
call fcn.00404da3
sub edi, edx
ror ebx, 9
inc edi
xor esi, edi
ror edi, 8
rol edi, 8
xor esi, edi
dec edi
rol ebx, 9
add edi, edx
xor ebx, edi
xor eax, 0x5e53ffb6
rol eax, 1
call fcn.00404da3
dec esi
sub edx, esi
xor ecx, 0x73f42f34
xchg esi, edx
not esi
add ebx, 0xd28d29fb
call fcn.004056e4
inc ecx
dec edx
not ecx
add eax, 0x7dd09add
call fcn.004056e4
not esi
xchg ecx, esi
add eax, 0x89add4d6
call fcn.0040160d
neg edi
xchg edi, eax
ror eax, 0x17
call fcn.004027e3
not esi
ror ecx, 0x1f
add ebx, ebp
sub ebx, ebp
rol ecx, 0x1f
not esi
rol eax, 0x17
xchg edi, eax
neg edi
sub eax, 0x89add4d6
xchg ecx, esi
not esi
call fcn.004056e4
sub eax, 0x7dd09add
not ecx
inc edx
dec ecx
call fcn.004050fe
sub ebx, 0xd28d29fb
not esi
xchg esi, edx
add ecx, 0x80fa2034
inc eax
neg edx
call fcn.00404da3
dec eax
call fcn.00404da3
neg esi
xchg edi, eax
neg esi
sub ecx, 0xb8f97fe3
xor ecx, 0x8cc65256
not esi
ror ecx, 0x1d
sub edi, 0x22b42add
rol edx, 0x10
sub ebx, 0x458a6dac
add edx, esi
dec ecx
call fcn.00402f5d
call fcn.00404da3
call fcn.004014c2
inc ecx
sub edx, esi
add ebx, 0x458a6dac
ror edx, 0x10
add edi, 0x22b42add
rol ecx, 0x1d
not esi
xor ecx, 0x8cc65256
add ecx, 0xb8f97fe3
neg esi
xchg edi, eax
neg esi
call fcn.004053b8
inc eax
neg edx
dec eax
push ecx
sub eax, ecx
xor edx, 0xe7d91da7
xor ecx, esi
not esi
xor edx, 0x4d7ea94e
call fcn.004056e4
add eax, ebp
rol ecx, 7
inc eax
dec esi
sub ecx, 0xfae8d225
xchg edi, edx
xchg edi, edx
add ecx, 0xfae8d225
inc esi
dec eax
ror ecx, 7
sub eax, ebp
call fcn.004017ca
xor edx, 0x4d7ea94e
not esi
xor ecx, esi
xor edx, 0xe7d91da7
add eax, ecx
mov edi, 0x80bae1be
rol edx, 0x10
call fcn.004050ba
xchg eax, esi
call fcn.004053b8
inc edi
neg edi
rol edi, 0x1a
sub ecx, esi
add esi, 0x2e75eaaa
ror ebx, 6
call fcn.00406842
rol ebx, 6
sub esi, 0x2e75eaaa
add ecx, esi
ror edi, 0x1a
neg edi
dec edi
xchg eax, esi
call fcn.0040218a
ror edx, 0x10
add edi, 0xaa4c4d65
xchg esi, edx
sub edx, eax
dec esi
xchg eax, esi
not edi
rol eax, 7
add ecx, ebp
sub esi, edi
inc edi
not ebx
not ebx
dec edi
add esi, edi
sub ecx, ebp
ror eax, 7
not edi
xchg eax, esi
inc esi
add edx, eax
xchg esi, edx
add edi, 0x16653252
dec ecx
add esi, ebp
dec eax
not esi
inc ebx
add ecx, 0x56367101
xor ecx, 0x488667a7
add edx, 0xd5922b28
call fcn.00404da3
not esi
add edi, ebx
neg esi
xor eax, ebx
call fcn.0040518a
sub esi, ecx
add edi, 0x16145b70
xor ebx, ebp
xchg eax, esi
xor ecx, eax
call fcn.0040607f
xor edi, edx
call fcn.00401f42
call fcn.00401da6
xor edi, edx
call fcn.00404da3
xor ecx, eax
xchg eax, esi
xor ebx, ebp
sub edi, 0x16145b70
add esi, ecx
call fcn.00404da3
xor eax, ebx
neg esi
sub edi, ebx
not esi
call fcn.004056e4
sub edx, 0xd5922b28
xor ecx, 0x488667a7
sub ecx, 0x56367101
dec ebx
not esi
inc eax
sub esi, ebp
inc ecx
push edi
xor edx, edi
add esi, edx
inc ecx
dec esi
xor esi, 0x979b3d22
xor eax, 0x1643d115
call fcn.00404da3
add edi, ebx
dec ebx
not ecx
call fcn.00404da3
xor esi, esp
xor esi, esp
rol edx, 7
sub eax, edx
call fcn.0040607f
call fcn.00404da3
add eax, edx
ror edx, 7
xor esi, esp
xor esi, esp
not ecx
inc ebx
sub edi, ebx
call fcn.00403375
xor eax, 0x1643d115
xor esi, 0x979b3d22
inc esi
dec ecx
sub esi, edx
xor edx, edi
mov esi, 0x48e48aec
xor ebx, ebp
not edi
call fcn.00403375
sub eax, 0x54fe611c
call fcn.004050ba
ror ebx, 7
inc esi
call fcn.0040589f
add esi, eax
inc eax
call fcn.004053c9
xchg ebx, eax
call fcn.00404da3
call fcn.00402780
xchg ebx, eax
call fcn.00401b81
dec eax
sub esi, eax
call fcn.004014c2
dec esi
rol ebx, 7
add eax, 0x54fe611c
not edi
xor ebx, ebp
xor esi, 0xe2d6f8a6
dec edi
rol edx, 0xa
neg eax
xor eax, ecx
not eax
dec ecx
add eax, ebx
call fcn.00404da3
add edx, ecx
neg esi
sub ebx, 0x98a0eda5
not esi
xor esi, 0x4e972cbe
xor ecx, eax
xchg ecx, eax
not esi
call fcn.004014c2
inc edi
dec edx
call fcn.0040607f
ror edx, 0x13
rol edx, 0x13
call fcn.00406842
inc edx
dec edi
call fcn.004017ca
not esi
xchg ecx, eax
xor ecx, eax
xor esi, 0x4e972cbe
not esi
add ebx, 0x98a0eda5
neg esi
sub edx, ecx
sub eax, ebx
inc ecx
not eax
xor eax, ecx
neg eax
ror edx, 0xa
inc edi
sub esi, 0x35c008f4
not edx
ror ecx, 0x1d
xor ebx, 0x1a47cd10
ror edi, 0x10
not eax
call fcn.00401da6
ror edi, 0x18
xor ebx, esp
sub ebx, 0xdd79f2c3
call fcn.00404da3
add ebx, 0xdd79f2c3
xor ebx, esp
rol edi, 0x18
call fcn.0040607f
not eax
rol edi, 0x10
xor ebx, 0x1a47cd10
rol ecx, 0x1d
not edx
push esi
xchg ebx, edx
ror edx, 0x14
dec edi
sub edi, 0x29191ae3
xor ecx, edi
call fcn.00404da3
xor ebx, edx
ror edi, 2
neg esi
xor edi, 0x78b891ba
ror edx, 0x1c
ror eax, 0x12
rol eax, 0x12
rol edx, 0x1c
xor edi, 0x78b891ba
neg esi
rol edi, 2
xor ebx, edx
call fcn.00404da3
xor ecx, edi
add edi, 0x29191ae3
inc edi
rol edx, 0x14
xchg ebx, edx
push esp
xor edx, esi
call fcn.00406ce6
add edx, 0x21a97399
xor ebx, 0xfae91153
inc ecx
xor esi, ecx
xchg eax, edx
add ebx, 0xd804bcdf
inc edi
inc ecx
rol edx, 3
call fcn.00401fc8
xor edx, ecx
add ebx, ecx
call fcn.00404da3
xor ebx, 0x5a5c4786
xor edx, 0xce9e3613
xor edi, esi
rol ebx, 0x1d
call fcn.00402780
ror ebx, 0x1d
xor edi, esi
xor edx, 0xce9e3613
xor ebx, 0x5a5c4786
call fcn.00404da3
sub ebx, ecx
xor edx, ecx
call fcn.004056e4
ror edx, 3
dec ecx
dec edi
sub ebx, 0xd804bcdf
xchg eax, edx
xor esi, ecx
dec ecx
xor ebx, 0xfae91153
sub edx, 0x21a97399
call fcn.004050ba
xor edx, esi
push eax
neg esi
sub ecx, esi
neg edi
call fcn.00402780
rol edx, 1
not esi
add edi, edx
ror edi, 3
add eax, edi
xchg ecx, edx
dec eax
neg edx
call fcn.00404da3
inc ebx
sub ecx, 0x3689ab19
add ecx, edi
not esi
xor ebx, 0xe2d45e0b
call fcn.004027e3
call fcn.00406842
xor ebx, 0xe2d45e0b
not esi
sub ecx, edi
add ecx, 0x3689ab19
stosd dword es:[edi], eax
mov dword [esi], esi
dec ebx
call fcn.00404da3
neg edx
inc eax
xchg ecx, edx
sub eax, edi
rol edi, 3
sub edi, edx
not esi
ror edx, 1
neg edi
add ecx, esi
neg esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
add eax, esi
mov byte [ecx + 0x2ff6caf0], 0x3c
ror esi, 0xd
add edx, 0x4500a88c
inc eax
xor ebx, 0x175c068a
dec ebx
add eax, 0xa30d4a89
ror esi, 0x16
inc edi
dec edi
rol esi, 0x16
sub eax, 0xa30d4a89
inc ebx
xor ebx, 0x175c068a
dec eax
invalid