Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xffffff29
jne 0x401070
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xfffffed9
jne 0x4010e0
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff33
jne 0x401182
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xffffff07
jne 0x4011e8
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xffffff2f
jne 0x401294
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
call sub.ntdll.dll_ZwIsProcessInJob
call sub.advapi32.dll_TraceEvent
call sub.advapi32.dll_TraceEvent
ret
jmp 0x4750e1
rol esi, 0x12
shl ebx, 0xf
inc esi
shl edi, 0xd
jmp 0x47675c
call fcn.004772ce
xor esi, ecx
and ecx, esi
sub esi, edi
mov edi, ecx
xchg ecx, ebx
inc esi
ror ecx, 7
xor ebx, ecx
add ecx, ebx
add ecx, 0x6859745f
jmp 0x476a90
mov edx, 0x73716341
sub esi, ecx
xor ecx, edi
or esi, 0x68611b27
and esi, 0x68615bd3
add ecx, edi
sub ebx, ecx
xor ecx, esi
dec ecx
neg esi
or ecx, ebx
xor ebx, ecx
not ecx
neg ecx
neg edi
mov esi, ebx
ror edi, 8
jmp 0x476ebd
mov edx, 0x73716341
shr edi, 0xf
or esi, 0x6866ad4b
or ebx, 0x6866ed03
xor esi, ebx
mov ecx, 0x68676cbb
or ebx, 0x6867ad7b
bswap edi
mov ecx, esi
and ebx, ecx
xor ecx, esi
and edi, ebx
mov ecx, ebx
and ebx, esi
or edi, esi
jmp 0x478d83
mov edx, 0x73716341
sub ecx, 0x686bb39b
add ecx, 0x686bf46b
add edi, ecx
shl ebx, 0xc
xchg esi, ecx
add ebx, esi
jmp 0x4776e4
pop edx
rol ecx, 0xe
bswap edi
or ecx, 0x688626ad
add ebx, edi
and ecx, edi
xor edi, 0x6886e265
add esi, edi
not esi
xor ecx, ebx
add ebx, edi
sub ecx, 0x68882e47
or ecx, ebx
sub ebx, 0x6888acb5
xchg esi, ecx
jmp 0x47645c
push 0x66b88761
shr edi, 7
and esi, 0x688c3173
inc esi
xchg esi, edi
xchg esi, ebx
xchg ebx, ecx
neg edi
or ecx, 0x688dc323
and ebx, edi
xchg ecx, edi
jmp 0x477fc9
call edx
not ebx
or edi, esi
add esi, edi
shl esi, 2
dec ebx
add ebx, 0x68a31e49
xchg ebx, ecx
ror ebx, 3
or ebx, 0x68a409c5
shl edi, 0x1f
neg edi
mov ebx, esi
add edi, 0x68a526d3
and esi, ecx
jmp 0x477224
call edx
sub esi, edi
xchg edi, ecx
dec ebx
mov edi, ecx
shl edi, 1
and ecx, esi
jmp 0x4776ff
call edx
add ecx, 0x68a7a4c9
sub ebx, esi
mov edi, ebx
shr esi, 0xb
xor ecx, esi
sub edi, ebx
xor edi, ecx
add esi, ebx
and esi, ebx
rol edi, 0xa
xor esi, ecx
neg edi
or esi, ebx
not ebx
jmp 0x477123
push 0x66ca6fb3
not esi
add esi, ebx
mov ecx, ebx
and edi, esi
sub esi, edi
xor ecx, 0x68ad2583
and esi, edi
ror ecx, 0x1f
shl ecx, 0x1c
shr ecx, 0x16
or edi, 0x68ae8cbb
rol esi, 0xa
jmp fcn.00478da8
pop edx
sub edi, esi
xchg ecx, ebx
shr ecx, 0x11
add esi, ebx
add esi, 0x68b066ff
mov ebx, edi
and ecx, esi
sub edi, ecx
jmp 0x476713
push 0x66bca691
sub esi, ebx
mov ebx, edi
or ebx, ecx
mov esi, ebx
bswap ebx
or esi, ecx
and ecx, 0x68bf0e03
or ebx, 0x68bf8e45
and ecx, esi
xor ebx, esi
and ebx, 0x68c0ebbd
rol ecx, 0x15
jmp 0x4759cb
mov edx, 0x73716341
xchg esi, ebx
not esi
mov ecx, edi
mov edi, esi
bswap ebx
inc ebx
add ecx, esi
sub esi, ecx
jmp 0x477af6
call fcn.004772ce
bswap esi
add edi, esi
sub esi, ecx
shr esi, 0x1a
or edi, ecx
add ebx, ecx
sub ebx, esi
bswap esi
add ecx, edi
sub edi, 0x68f175cf
xchg ecx, ebx
mov esi, ebx
mov esi, edi
xor ecx, 0x68f28d59
and edi, esi
add ebx, 0x68f31af1
jmp 0x476a44
push 0x66b04fb1
add esi, edi
xor esi, 0x68f77305
xor edi, esi
xor edi, esi
shl edi, 0x1d
shl ecx, 4
dec ecx
or esi, ecx
jmp 0x478003
pop edx
shr ecx, 0xa
mov ecx, esi
sub edi, ebx
mov ecx, esi
sub esi, edi
bswap esi
bswap esi
shr edi, 0x11
jmp 0x479313
call edx
neg ebx
or esi, ebx
bswap ebx
rol ecx, 0x19
or esi, ecx
sub edi, ebx
neg ecx
ror esi, 0x11
xchg ebx, edi
shl edi, 8
jmp 0x477324
push 0x66bcf245
and ebx, 0x69197b27
mov ebx, ecx
shr edi, 0x13
add esi, 0x691ae437
or edi, ecx
inc ecx
jmp 0x4779f0
pop edx
and esi, ebx
rol edi, 0x14
or ecx, 0x691c6911
inc esi
or ebx, edi
xchg ecx, esi
shr esi, 0x15
rol esi, 5
jmp 0x478e7d
call fcn.004772ce
neg esi
xor esi, 0x6922221b
or ecx, edi
mov ecx, esi
mov ebx, ecx
and ecx, esi
and edi, ecx
dec ecx
add edi, 0x69241d75
and edi, esi
sub esi, 0x6924aa39
shr ecx, 0x15
jmp 0x4764a9
push 0x66c45b4f
xchg esi, edi
add edi, ecx
or ebx, edi
sub ecx, 0x6966109f
add ebx, 0x696658eb
add edi, ecx
sub esi, 0x6966f949
sub ecx, ebx
add edi, esi
bswap ebx
jmp 0x47853b
pop edx
mov ecx, edi
add esi, ecx
dec edi
or edi, esi
xor edi, ebx
or edi, 0x698138bb
or esi, 0x698193db
sub esi, ecx
jmp 0x47810b
push 0x66af25e9
mov esi, edi
xor ecx, ebx
or edi, 0x6982c9a5
xor esi, edi
neg edi
and esi, 0x6983a19b
inc ecx
or ecx, ebx
xchg edi, ebx
and ebx, ecx
sub ecx, esi
inc ecx
jmp 0x47876f
mov edx, 0x73716341
and ecx, 0x6990998b
not ebx
shr ecx, 0xc
sub ecx, 0x699173d3
and ebx, 0x6991bbe9
mov esi, edi
add esi, ebx
nop
add ecx, ebx
or esi, edi
jmp 0x47797d
mov edx, 0x73716341
add esi, ecx
not edi
add ecx, ebx
or ebx, 0x69a6bb27
mov ebx, ecx
xor edi, ecx
dec edi
and ecx, esi
mov esi, ecx
inc ebx
shl esi, 0x1d
or esi, 0x69a96a77
inc ecx
sub ecx, edi
jmp 0x47510d
push 0x66bfe77f
bswap ebx
xor edi, esi
xchg ecx, esi
xor ebx, 0x69b28b85
or edi, ebx
mov ecx, 0x69b31935
add esi, edi
add esi, edi
dec esi
mov esi, 0x69b446d3
add ebx, ecx
sub ecx, ebx
jmp 0x47518e
push 0x66c6bd21
and esi, ecx
sub ebx, 0x69b57f37
or ecx, 0x69b5c71b
and esi, 0x69b60f15
and ecx, 0x69b66a69
dec ebx
mov ebx, 0x69b6fa1b
or ecx, esi
dec esi
ror ecx, 0x10
jmp 0x475671
call edx
or ebx, ecx
sub ecx, ebx
ror ebx, 3
xchg esi, ecx
and esi, ebx
inc ecx
shl edi, 0x12
sub ebx, edi
sub esi, 0x69e1a82f
or esi, edi
inc ebx
mov ebx, ecx
sub ebx, edi
add ebx, edi
jmp 0x477465
pop edx
shl ecx, 0x1a
mov ecx, edi
and esi, ecx
neg esi
jmp 0x47929b
push 0x66afbacb
and esi, edi
inc edi
and esi, 0x69f9252f
add ebx, esi
add ecx, esi
shr ecx, 0x1c
xor edi, ecx
or ebx, 0x69fb1b7d
mov esi, 0x69fb81cf
xor ebx, ecx
shl edi, 0xc
ror ebx, 0xb
jmp 0x4764fb
push 0x66bbc4e3
rol esi, 0xb
xor esi, ecx
xchg ecx, edi
inc edi
and edi, esi
ror esi, 8
xchg esi, ebx
sub edi, 0x69fe7041
jmp 0x4789f5
pop edx
or ebx, edi
shl edi, 5
inc ebx
mov ebx, edi
add esi, edi
dec esi
xor esi, ecx
xor ecx, esi
mov ebx, 0x6a05b1c3
dec ebx
jmp 0x475e68
pop edx
xor ebx, 0x6a065017
xchg edi, esi
shl ecx, 5
neg ebx
add ebx, 0x6a0752c5
and esi, ecx
bswap esi
inc ebx
xchg ebx, ecx
and edi, ebx
inc edi
sub esi, edi
jmp 0x4782fc
call edx
add ecx, 0x6a0c3707
and ecx, esi
mov esi, ebx
neg edi
shl ecx, 0x11
add ebx, esi
mov ebx, 0x6a0dc1a1
dec ebx
add ecx, ebx
or esi, edi
ror ebx, 0x1b
xor ecx, 0x6a0f005f
jmp 0x4759e9
push 0x66b0054b
sub ebx, esi
shr edi, 0x1d
xor esi, 0x6a1290c7
or ecx, esi
inc edi
sub ebx, edi
jmp 0x475842
mov edx, 0x73716341
mov esi, edi
or ecx, 0x6a13f659
neg ecx
xchg esi, edi
jmp 0x478e44
call edx
nop
xchg edi, ebx
xchg ecx, edi
and esi, ebx
and ebx, edi
neg edi
sub edi, 0x6a1f0f59
sub esi, 0x6a1f506b
jmp 0x475e4b
push 0x66b386e9
add ecx, edi
xchg esi, edi
xor ebx, 0x6a2b8949
add ecx, esi
neg esi
inc esi
xor edi, ebx
rol ecx, 1
and edi, ebx
sub ebx, 0x6a2d58af
add ebx, 0x6a2d9975
add ecx, edi
and ecx, edi
mov ecx, edi
mov esi, ecx
sub ebx, 0x6a2ece7f
jmp 0x47522a
pop edx
add ebx, esi
add esi, edi
sub esi, ecx
sub ebx, edi
jmp 0x47893f
push 0x66b594a9
and ebx, edi
add ebx, 0x6a31a61b
add esi, ecx
mov ebx, edi
sub ecx, esi
add esi, 0x6a32b291
or edi, ebx
add ebx, ecx
mov edi, 0x6a336eff
xor edi, 0x6a33affd
jmp 0x477d0c
pop edx
shl edi, 0x19
and edi, ebx
not ebx
xchg esi, ebx
shr ebx, 1
add ecx, 0x6a3ab23b
xchg edi, ebx
add ebx, 0x6a3b319d
jmp 0x478cae
push 0x66a3d5d7
not ecx
xor ebx, 0x6a3f740b
add ecx, esi
xor ecx, ebx
not esi
add esi, ecx
mov esi, edi
ror ecx, 0x1e
xor ecx, esi
shr ecx, 0xd
jmp 0x4771f5
push 0x66c6712d
ror esi, 0x1a
mov ecx, 0x6a47007f
mov ebx, esi
xor ecx, edi
shr ebx, 9
shr edi, 0xc
not ebx
or ecx, edi
add esi, 0x6a48cdfb
add ecx, ebx
jmp 0x4760b8
pop edx
and esi, 0x6a58ccfd
sub ebx, 0x6a590d7d
xor edi, esi
ror edi, 0x17
xor ebx, 0x6a59def5
xor esi, ebx
or ecx, edi
and esi, ebx
jmp 0x4789ca
push 0x66acbc79
or edi, ecx
or esi, 0x6a5b31cb
add ebx, 0x6a5b7193
or edi, esi
shr ecx, 0x1c
or ebx, 0x6a5c31df
and ecx, 0x6a5c82eb
not edi
or esi, edi
shr ebx, 4
not edi
xchg ecx, ebx
sub esi, edi
and ebx, edi
jmp 0x476515
push 0x66b968d1
add ecx, edi
xchg edi, ebx
xor esi, 0x6a661fab
sub esi, edi
or ecx, esi
add ebx, edi
or edi, esi
sub edi, 0x6a675805
xchg edi, ebx
add esi, 0x6a67e8af
xchg esi, ebx
ror ecx, 0x1f
jmp 0x475f2c
push 0x66ac34d7
rol ebx, 0x1f
add edi, ecx
add ebx, esi
xchg ecx, edi
xor esi, edi
sub ebx, esi
xchg esi, ecx
dec ebx
xchg ebx, ecx
xchg ebx, ecx
jmp 0x4768c9
pop edx
and esi, 0x6a70579f
mov edi, esi
inc ebx
not edi
and edi, ecx
ror edi, 0x1b
mov esi, 0x6a71d5a5
xchg edi, ecx
and ebx, ecx
and ebx, 0x6a72a3ad
and edi, ebx
and edi, ebx
jmp 0x4766aa
call edx
inc ecx
add esi, ebx
dec ebx
or esi, ecx
not ecx
or esi, 0x6a776f5f
shl esi, 3
and ebx, edi
dec esi
xchg esi, ebx
ror ecx, 0xe
neg ebx
and edi, ebx
add esi, ecx
rol ecx, 2
mov edi, esi
jmp 0x47858b
call edx
xor esi, ecx
add ebx, esi
xor ecx, esi
or esi, 0x6a7dc8af
and ebx, edi
add esi, 0x6a7e46dd
or esi, ecx
add esi, ebx
mov ecx, ebx
xchg esi, ebx
neg ecx
add ebx, edi
sub ebx, esi
neg edi
jmp 0x475382
call fcn.004772ce
nop
or ebx, 0x6a9a1e71
shr edi, 0x1c
add esi, 0x6a9aafbf
jmp 0x476c72
push 0x66b33baf
mov esi, ecx
mov esi, 0x6a9eaa0f
dec esi
or ecx, 0x6a9f2c79
or edi, esi
rol ecx, 0x15
or ecx, ebx
and ebx, 0x6aa029f7
shl esi, 0x18
shl ecx, 0x1b
and esi, ecx
nop
rol esi, 6
ror ecx, 0x11
jmp 0x476662
call edx
xor ecx, ebx
ror esi, 0xd
xor ecx, ebx
mov esi, 0x6aa2d781
xchg edi, ecx
shr ecx, 0x11
mov esi, 0x6aa39823
not ebx
and ecx, 0x6aa42ab3
sub ecx, esi
add esi, 0x6aa4a907
sub ebx, esi
jmp 0x476e17
pop edx
mov esi, 0x6aba9999
shl edi, 5
and ebx, 0x6abb1a95
and ecx, ebx
sub ecx, edi
sub ecx, 0x6abbd70d
dec edi
sub ebx, edi
xor ecx, edi
and ebx, 0x6abce7a5
jmp 0x477a60
pop edx
add ebx, esi
xchg edi, esi
add esi, ecx
add ebx, esi
xor esi, ebx
xor ebx, esi
inc esi
not ecx
sub ebx, edi
xor edi, ecx
jmp 0x478423
pop edx
and ebx, esi
rol ebx, 0x1d
shl ecx, 0x14
ror ebx, 0xc
sub ecx, edi
xor edi, ebx
mov ecx, esi
shr edi, 0x1c
mov ecx, ebx
ror esi, 0x1b
add ecx, edi
neg ecx
jmp 0x478675
call fcn.004772ce
add ebx, esi
xor edi, ecx
ror esi, 0xa
shr ebx, 0x11
jmp 0x4783d1
pop edx
xchg ecx, edi
shr ecx, 0xa
ror ebx, 0xa
and ecx, edi
xchg ebx, ecx
sub ecx, 0x6ad5849b
and ebx, esi
and edi, 0x6ad60297
neg ecx
inc edi
or edi, ecx
not esi
jmp 0x476441
call edx
sub edi, ecx
ror edi, 4
dec esi
xor esi, ecx
or esi, ebx
xor esi, 0x6ae0cc77
mov ebx, edi
or ebx, edi
sub ebx, esi
xor edi, esi
jmp 0x4781de
call fcn.004772ce
bswap ecx
and edi, 0x6afd2c0b
and ecx, 0x6afd6ca3
bswap edi
or ecx, 0x6afdeeab
xchg ebx, ecx
or ecx, 0x6afe6eb9
and edi, ebx
xor ebx, esi
xor ecx, esi
jmp 0x4754ad
pop edx
inc edi
inc edi
and ecx, 0x6b006631
xchg ebx, edi
inc ecx
or ebx, ecx
and edi, ebx
xor edi, 0x6b019e93
dec ebx
xor esi, 0x6b021829
xor ecx, ebx
add ecx, 0x6b028ffd
neg esi
mov esi, ebx
jmp 0x47850a
call fcn.004772ce
add ecx, 0x6b0358b1
rol esi, 4
or esi, ebx
not edi
or ebx, esi
xor ebx, esi
not ebx
xchg esi, ecx
shr ecx, 0x18
dec ecx
jmp 0x4754f1
mov edx, 0x73716341
mov esi, ecx
inc esi
sub edi, esi
xchg ecx, edi
rol esi, 0x15
sub ecx, edi
jmp 0x477151
pop edx
shr ecx, 0xe
xor edi, ecx
shl ebx, 3
ror ecx, 5
and ecx, esi
mov esi, ebx
add esi, edi
sub esi, 0x6b159f01
or edi, 0x6b15e02d
or edi, esi
jmp 0x475548
pop edx
mov ecx, edi
sub esi, 0x6b1e4015
shl esi, 0x1a
xor ecx, esi
sub ecx, 0x6b1f1119
mov ecx, ebx
jmp 0x478fae
pop edx
sub ecx, 0x6b2574cb
xor esi, ecx
or ebx, edi
or ebx, esi
or ebx, edi
xchg esi, edi
sub esi, ecx
or esi, ecx
sub esi, edi
mov ecx, esi
jmp 0x476ee6
pop edx
not ebx
and edi, ebx
xchg ebx, esi
shl edi, 0x13
mov ebx, 0x6b3fc6eb
xchg esi, edi
mov ebx, 0x6b4046e7
xchg edi, ecx
or esi, ebx
add edi, ebx
bswap edi
mov ecx, 0x6b419463
jmp 0x47639c
push 0x66a845bf
not ecx
add edi, 0x6b481faf
and ebx, edi
mov esi, 0x6b489ded
add ebx, esi
xor edi, ecx
bswap esi
add edi, esi
ror edi, 0xb
xor ebx, ecx
mov edi, 0x6b4a6a77
and ebx, edi
xchg ecx, edi
add edi, ecx
sub ebx, edi
add ebx, 0x6b4ba3bd
jmp 0x477b78
call fcn.004772ce
xor esi, ebx
and edi, esi
add esi, ecx
sub edi, 0x6b513061
jmp 0x4754de
call fcn.004772ce
sub ebx, ecx
ror ebx, 0x11
and edi, ebx
xor ecx, esi
and edi, esi
xor edi, esi
add ecx, esi
and esi, ecx
jmp 0x476f83
pop edx
xor esi, 0x6b75a3c7
add esi, edi
mov ecx, edi
and esi, 0x6b765ef9
sub esi, edi
or ecx, edi
xchg ecx, esi
dec esi
and ecx, 0x6b77aedd
xor ebx, esi
mov esi, 0x6b782d0f
inc edi
and esi, ebx
mov esi, ebx
jmp 0x4774e6
call fcn.004772ce
not ebx
xor edi, ecx
add esi, ecx
sub ecx, 0x6ba89d7b
xchg ecx, esi
sub ebx, esi
mov ebx, ecx
xor esi, ebx
jmp 0x4782de
mov edx, 0x73716341
or esi, ecx
dec edi
mov esi, ecx
sub ebx, edi
mov ebx, 0x6bb1681b
add edi, ebx
inc ecx
xor edi, ecx
not ebx
not esi
jmp 0x478460
pop edx
bswap ecx
xor edi, ebx
xor esi, 0x6bb9aa37
mov ebx, edi
not esi
sub edi, esi
xor esi, 0x6bbabb97
or esi, edi
bswap ebx
bswap ebx
jmp 0x4763da
pop edx
mov edi, esi
xor edi, ecx
sub esi, ecx
sub edi, esi
mov edi, esi
mov edi, esi
or esi, 0x6bbd4ccf
mov ebx, 0x6bbd8cc7
and ecx, esi
add edi, ecx
not ebx
mov edi, ebx
jmp 0x476e78
call fcn.004772ce
add esi, ecx
bswap ebx
rol edi, 0x19
and esi, edi
bswap ecx
or edi, esi
neg ecx
add ebx, edi
jmp 0x47627a
push 0x66a8905f
and ecx, ebx
and edi, ebx
add esi, ecx
not ecx
sub ecx, esi
sub ebx, ecx
sub ebx, 0x6bd0d3ef
sub esi, 0x6bd11471
shl ebx, 0xa
neg edi
not ecx
xchg edi, esi
jmp 0x478ccc
mov edx, 0x73716341
neg ecx
neg ecx
and esi, ebx
dec edi
add ebx, 0x6bf19775
mov ebx, esi
not edi
xor ecx, esi
xor edi, ebx
not ecx
jmp 0x476bea
call edx
or ebx, esi
and edi, ecx
or esi, edi
and ecx, edi
xchg edi, ecx
add edi, 0x6bf8531b
and esi, ecx
nop
rol esi, 0x17
or edi, 0x6bf964ed
add edi, 0x6bf9a4bb
sub ecx, esi
jmp 0x47847b
push 0x66c1aead
xchg ebx, ecx
add edi, 0x6bfd2ecf
rol edi, 0x12
shr ebx, 7
shl ecx, 0x1f
sub ecx, edi
add ebx, ecx
mov esi, ebx
add ebx, edi
ror ecx, 0x1d
or ebx, ecx
and ecx, edi
xchg ebx, edi
mov ecx, edi
jmp 0x47918f
pop edx
neg ebx
xor ecx, edi
add ebx, 0x6c076ddd
bswap ebx
xor ebx, 0x6c07efc3
or esi, edi
xor ebx, 0x6c086e8d
and ebx, edi
xchg ebx, ecx
and ebx, ecx
add esi, 0x6c097a41
not esi
xor ecx, edi
rol ebx, 0x1b
xor edi, 0x6c0a7ba9
xor ecx, ebx
jmp 0x4790fb
mov edx, 0x73716341
and edi, esi
bswap esi
add ecx, edi
or ebx, ecx
xor ebx, edi
mov ebx, edi
xor esi, edi
add ecx, 0x6c10b143
xor ecx, 0x6c10f1a5
xor edi, esi
jmp 0x477551
push 0x66b8d225
and esi, ebx
or edi, ecx
bswap ebx
inc esi
or ebx, ecx
xor esi, 0x6c278c67
jmp 0x4791e7
mov edx, 0x73716341
neg ecx
shl ecx, 0x1b
add esi, ecx
and edi, 0x6c2b3f5b
xor edi, ecx
neg ebx
inc ebx
xor ebx, esi
shl esi, 4
or ecx, 0x6c2cd275
sub esi, ecx
inc esi
jmp 0x47916b
pop edx
or edi, esi
add edi, 0x6c388cd7
add ebx, edi
and edi, esi
sub esi, 0x6c394803
sub esi, edi
add ecx, esi
mov edi, esi
add ecx, ebx
xor esi, edi
jmp 0x4769f9
pop edx
xchg ecx, edi
sub ecx, esi
add edi, ecx
xor esi, 0x6c3de0a5
mov ecx, 0x6c3e2145
bswap edi
rol ecx, 3
sub esi, edi
neg edi
sub ecx, 0x6c3f75df
jmp 0x475964
pop edx
sub esi, 0x6c4d37ed
mov edi, 0x6c4da953
xor edi, 0x6c4e3147
bswap edi
xor edi, esi
sub edi, esi
shl ecx, 3
inc ebx
add ebx, ecx
or ebx, 0x6c518cc7
jmp 0x4780ca
push 0x66c6253b
or ebx, ecx
and ecx, ebx
and edi, ebx
dec ebx
sub edi, ecx
xor edi, 0x6c5f3e55
rol ebx, 1
xchg ebx, ecx
jmp 0x4767c1
call edx
not ebx
xor ecx, ebx
and edi, ecx
xor esi, ecx
mov esi, 0x6c612829
ror ebx, 0x15
nop
bswap edi
or ecx, edi
add esi, ebx
jmp 0x4768a6
pop edx
bswap esi
and esi, 0x6c63071d
and esi, 0x6c6358a9
xor esi, edi
jmp 0x475d06
call edx
and esi, ecx
mov esi, ecx
add ebx, esi
sub ebx, edi
sub ebx, esi
rol edi, 0xc
xchg esi, ecx
mov esi, 0x6c730791
neg esi
and esi, 0x6c7389ab
add ebx, esi
or ebx, edi
jmp 0x477e38
push 0x66b70dc3
xor ebx, ecx
not ecx
rol edi, 0x1e
neg ebx
neg esi
bswap esi
mov esi, ecx
rol ebx, 0x1b
or ecx, esi
mov edi, 0x6c79de4f
jmp 0x478e18
call fcn.004772ce
mov ebx, 0x6c7c6cbd
shr ecx, 5
ror esi, 2
mov ecx, edi
add edi, esi
and edi, ebx
jmp 0x47659f
pop edx
neg ebx
and ecx, edi
bswap esi
sub esi, 0x6c7f2ee1
xor esi, ebx
mov ecx, 0x6c7fadc7
mov edi, esi
mov ecx, edi
xor ecx, esi
and esi, ebx
jmp 0x479341
push 0x66b2f175
add ebx, esi
neg edi
shr edi, 0xb
mov ecx, ebx
nop
xor esi, edi
rol ecx, 9
ror ebx, 0x10
rol edi, 0x12
neg esi
add ebx, esi
mov ebx, 0x6c89ebdb
jmp 0x476c3e
push 0x66a55969
mov ebx, ecx
xor edi, ecx
add ebx, esi
or ebx, 0x6c8afd65
xor ebx, 0x6c8b3dcd
and ebx, 0x6c8b7da7
inc ecx
and ebx, 0x6c8c0fb1
add ebx, esi
or esi, 0x6c8c8d45
jmp 0x4751d7
mov edx, 0x73716341
and edi, ebx
or edi, ebx
dec esi
add ecx, 0x6c8db7e3
neg ecx
sub ecx, esi
jmp 0x475a36
pop edx
add ebx, ecx
shr ecx, 4
and esi, ebx
xor ebx, ecx
add esi, 0x6c9366fb
xor ebx, esi
rol ebx, 0x18
xor edi, 0x6c94268d
jmp 0x4753d4
pop edx
and ecx, esi
or ebx, ecx
sub edi, ecx
sub esi, edi
add esi, edi
mov edi, ebx
jmp 0x4784e2
mov edx, 0x73716341
add ebx, ecx
sub edi, 0x6cb14913
or edi, ebx
shr edi, 3
sub ebx, 0x6cb21a43
mov esi, 0x6cb25a1f
bswap esi
add esi, 0x6cb2dc4b
and edi, ebx
neg esi
add ecx, ebx
not ecx
jmp 0x4770f5
push 0x66af7045
xor ecx, 0x6cb433bb
xchg esi, edi
nop
mov edi, ebx
and edi, 0x6cb55f8d
not ecx
add esi, edi
xor esi, ebx
add esi, 0x6cb744b3
shl edi, 1
add edi, ecx
sub edi, esi
sub edi, ebx
rol esi, 0x1f
jmp 0x4763ab
push 0x66bf9b1f
or esi, ebx
or ecx, ebx
and esi, 0x6cdb7b3f
mov esi, 0x6cdbbb07
inc esi
mov esi, 0x6cdc3d41
mov edi, ebx
and esi, 0x6cdcbaa3
and edi, esi
rol ebx, 0x19
mov ecx, 0x6cdd8aff
sub ebx, edi
jmp 0x47608d
pop edx
or ecx, 0x6ce52605
shl edi, 0x15
xchg edi, ecx
or edi, 0x6ce5e687
not ecx
and edi, ecx
and esi, ebx
sub ecx, esi
or ecx, 0x6ce7328f
add ecx, 0x6ce77341
jmp 0x476da0
push 0x66bc0f8d
sub ebx, esi
not ecx
xor ecx, edi
mov esi, 0x6ce89cb1
xor ecx, edi
shl ebx, 4
dec edi
sub ebx, edi
bswap edi
and ebx, ecx
jmp 0x478b8c
pop edx
mov ecx, edi
and ecx, ebx
sub edi, ebx
or edi, esi
inc edi
and ebx, 0x6ceea907
xchg edi, esi
xchg ecx, ebx
sub edi, ebx
mov edi, ebx
xchg edi, esi
bswap edi
and ecx, edi
neg esi
jmp 0x47551a
push 0x66bc5b33
not ecx
and edi, ecx
shl ebx, 0x1d
ror edi, 1
xor ebx, edi
not ecx
sub ebx, ecx
add ebx, 0x6d082517
sub ecx, edi
sub ebx, esi
jmp 0x4755e9
push 0x66aba867
or edi, 0x6d1ab8b5
mov ecx, 0x6d1af8bb
ror ebx, 2
add edi, 0x6d1b8aa7
jmp 0x4769b3
push 0x66a8dae9
sub edi, ecx
mov ebx, edi
xchg ecx, edi
mov edi, ecx
xchg ecx, edi
sub edi, ecx
dec edi
xchg edi, ebx
shr esi, 4
shr ecx, 6
and ebx, esi
xchg edi, ebx
jmp 0x47873d
call fcn.004772ce
inc ecx
xchg ecx, edi
add ebx, 0x6d2a256b
not esi
or ecx, edi
or edi, ecx
add esi, ecx
mov ebx, edi
xchg esi, ebx
not ecx
sub edi, ecx
mov ecx, esi
jmp 0x477d71
mov edx, 0x73716341
neg edi
sub ebx, ecx
not ecx
or edi, esi
mov ebx, edi
add ecx, esi
bswap edi
not edi
xchg ebx, ecx
xor edi, 0x6d38e83d
jmp 0x4757e3
call fcn.004772ce
ror ebx, 0xf
mov esi, ebx
mov esi, 0x6d3a36dd
xor ebx, esi
ror esi, 0xc
xchg edi, ecx
mov edi, 0x6d3b3647
xor esi, ebx
xor ecx, ebx
ror esi, 0xb
jmp 0x4759a1
push 0x66c5d94b
or ebx, esi
add esi, edi
add esi, ecx
mov ecx, esi
add ecx, esi
mov edi, 0x6d3ead43
or ecx, esi
xchg esi, ebx
mov ebx, esi
sub edi, esi
shr esi, 0x17
bswap ecx
add ecx, esi
neg ebx
rol esi, 0xd
xor edi, ebx
jmp 0x4782c0
pop edx
mov edi, esi
dec ebx
xchg ecx, esi
xchg ebx, ecx
or edi, ebx
not edi
bswap edi
shr ecx, 0x1a
dec ebx
add ecx, ebx
jmp 0x477a82
push 0x66c246dd
add esi, edi
xor edi, 0x6d612621
sub ebx, 0x6d619669
dec ecx
xchg esi, ecx
add edi, esi
mov ebx, ecx
or edi, 0x6d63e0d1
jmp 0x47601a
pop edx
bswap ebx
xor esi, 0x6d757a0b
mov edi, ebx
mov ebx, 0x6d760853
sub ecx, 0x6d7648ed
mov edi, 0x6d7688d5
xchg ebx, esi
mov ebx, 0x6d770873
shr ecx, 0x15
mov edi, ebx
jmp 0x477dc3
call fcn.004772ce
xor ecx, ebx
sub edi, ecx
or ebx, ecx
ror ecx, 4
not ebx
sub esi, ecx
add esi, ebx
ror ebx, 0x1d
sub edi, esi
sub esi, 0x6d801fb1
jmp 0x479205
push 0x66c1facd
xor esi, 0x6d807b4d
sub ebx, edi
and ecx, ebx
mov esi, ebx
inc ebx
xor edi, 0x6d81c821
mov edi, ecx
sub esi, edi
xchg esi, edi
xor edi, esi
xchg esi, ecx
xor ebx, 0x6d83450f
jmp 0x47902f
push 0x66b91d05
or ecx, ebx
sub esi, 0x6d878371
xchg ecx, edi
and esi, edi
add esi, edi
or ecx, ebx
or edi, ebx
sub ebx, ecx
jmp 0x476969
call edx
add esi, 0x6d8962e9
and ebx, esi
xchg esi, ebx
and ebx, ecx
xor ebx, ecx
or esi, ebx
xor esi, ecx
mov ecx, esi
and esi, 0x6d8b675f
rol esi, 0xa
sub edi, 0x6d8be947
sub esi, edi
sub ebx, ecx
xchg ebx, edi
xor edi, esi
add ecx, esi
jmp 0x4772b3
pop edx
xchg ecx, ebx
xor ecx, edi
sub ebx, edi
add ecx, edi
and esi, edi
rol ecx, 7
mov esi, 0x6d966c67
sub ebx, esi
ror ecx, 0xb
or esi, 0x6d973c81
xchg edi, esi
xor ebx, ecx
shr edi, 0x15
xchg edi, esi
jmp 0x478a44
pop edx
sub edi, ecx
xor esi, ebx
add esi, edi
xor ecx, edi
jmp 0x47669c
push 0x66a6cfbb
mov ebx, ecx
add ecx, esi
add ebx, edi
add ecx, edi
xor ecx, esi
and ecx, edi
mov ecx, 0x6da41095
bswap esi
inc esi
and esi, edi
ror edi, 0x12
xor ebx, ecx
shr edi, 0x16
shr esi, 0x1c
jmp 0x477ea7