Function at 0x401000
Capabilities:
Encrypt data using chaskey
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff31
jne 0x40109d
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff32
jne 0x40111c
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff0c
jne 0x4011a5
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xfffffef1
jne 0x401233
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
call sub.ole32.dll_CoIsOle1Class
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ws2_32.dll_WSAEnumNetworkEvents
call sub.ole32.dll_CoIsOle1Class
ret
jmp 0x47509e
xor edi, 0xcb4df1c6
jmp 0x476a50
push 0xcb555fd6
xor ebx, 0xcbea7e63
xor edx, edi
add esi, 0xcbeaf949
or ebx, edi
xor edx, esi
mov edx, edi
add ebx, edx
mov edi, 0xcbec3858
and edx, esi
jmp 0x475caf
call fcn.00477746
mov edi, ebx
and esi, 0xcbf0f76e
sub edx, ebx
add edx, ebx
add edi, edx
or ebx, 0xcbf1fc34
mov ebx, edx
sub edx, 0xcbf27502
and edi, esi
and ebx, edx
add ebx, esi
jmp 0x4770ef
mov ecx, 0x2a676233
add ebx, 0xcbf58f20
xor edi, esi
mov esi, edx
and esi, ebx
ror ebx, 4
xor edi, ebx
rol esi, 3
sub esi, 0xcbf74e46
add ebx, esi
add ebx, edx
jmp 0x475e51
pop ecx
add ebx, edi
sub ebx, edi
neg edi
and edi, 0xcc01ef2e
jmp 0x4764ce
pop ecx
bswap esi
neg esi
rol ebx, 1
shl edx, 5
ror esi, 1
mov edi, ebx
and esi, edx
sub edx, ebx
and edi, ebx
jmp 0x477055
mov ecx, 0x4132136a
and edx, edi
bswap edi
inc edi
xchg edi, ebx
sub edx, edi
or edi, 0xcc094811
xor ebx, edi
ror esi, 0x1e
jmp 0x4759c3
pop ecx
sub edx, ebx
sub ebx, esi
or ebx, 0xcc0a966b
mov esi, edi
xchg ebx, edx
bswap edi
and edx, esi
and edx, 0xcc0bc8c9
or edi, ebx
rol ebx, 0xe
jmp 0x475d39
call ecx
or esi, edx
xor edx, 0xcc102788
add edi, 0xcc106651
or edi, edx
sub edi, esi
xor esi, edi
xchg ebx, edi
mov ebx, esi
and ebx, esi
xchg edi, esi
and esi, 0xcc1269a0
jmp 0x476402
call fcn.00477746
mov esi, ebx
xor esi, ebx
dec edi
sub edi, ebx
xchg edi, ebx
mov esi, 0xcc16c6b5
add edi, esi
add ebx, edx
or edx, 0xcc177bb6
and ebx, edi
add edx, 0xcc17f5ea
xor edi, 0xcc18337b
jmp 0x4773b2
call fcn.00477746
not edi
xchg edi, ebx
mov ebx, 0xcc1909bf
shl edx, 0x16
and esi, 0xcc1997df
sub edx, edi
sub edi, edx
jmp 0x475561
mov ecx, 0x73716341
dec ebx
or edx, 0xcc2716e2
mov edi, 0xcc275426
ror edi, 2
add edx, esi
neg esi
xchg ebx, esi
or edi, esi
or esi, edi
and edi, ebx
jmp 0x476fe6
pop ecx
neg edx
sub ebx, esi
and ebx, edx
nop
mov edi, edx
sub edi, edx
and edx, edi
neg edx
add esi, ebx
bswap ebx
sub edx, edi
and edi, 0xcc2e3d86
bswap ebx
jmp 0x47662d
call ecx
dec esi
and ebx, edx
and edx, edi
or edi, edx
ror esi, 0x13
or edx, 0xcc3c61b6
or edi, 0xcc3c9f3e
sub ebx, edi
xor ebx, edx
or edi, ebx
shr edi, 0x1d
and ebx, edx
sub edi, esi
jmp 0x4755a6
pop ecx
ror esi, 0x14
xor edx, esi
and edi, esi
sub esi, edi
shr esi, 0x16
bswap edx
or edx, ebx
shl edx, 0x1c
mov esi, edi
mov edx, edi
xchg edi, esi
neg ebx
jmp 0x4752a0
pop ecx
shl esi, 0xe
add edi, edx
not ebx
and ebx, esi
mov edi, ebx
add ebx, edx
xor ebx, edx
and edi, ebx
shr edi, 3
shl ebx, 0x15
add esi, 0xcc461050
jmp 0x47734c
push 0xcb5a85b4
and edx, edi
or edi, edx
and edx, ebx
neg edx
shl edx, 0xc
xor ebx, esi
or edi, edx
jmp 0x475b48
push 0xcb6bf033
xchg ebx, edx
or esi, ebx
mov esi, edx
or esi, ebx
xchg edx, edi
add edi, edx
shr edi, 0x1d
and edi, 0xcc5c65c8
add esi, edi
sub edx, edi
add esi, edx
add edx, esi
jmp 0x475f65
mov ecx, 0x2a676233
xchg edi, esi
add edx, esi
or edi, esi
mov ebx, edi
add edi, esi
add edx, 0xcc60b6e6
and esi, ebx
xor edi, ebx
not ebx
mov edi, edx
shl edi, 8
xor esi, 0xcc623ba7
and ebx, edi
not edx
mov esi, ebx
jmp 0x477267
push 0xcb6db4b8
bswap edx
dec edi
xchg edi, edx
or esi, edi
and edx, ebx
shl edx, 6
sub esi, edi
not ebx
sub edx, esi
shr edi, 0x1f
and ebx, esi
or esi, edi
sub edx, 0xcc6646d9
jmp 0x477524
mov ecx, 0x73716341
mov edx, edi
or ebx, edi
inc esi
xchg edi, esi
neg esi
sub edi, ebx
jmp 0x4774a3
pop ecx
and edi, esi
inc ebx
ror edx, 0x14
and edi, esi
neg edx
or ebx, 0xcc74070d
neg ebx
mov edi, 0xcc7485b3
inc edi
add ebx, edi
add edx, edi
and esi, ebx
jmp 0x475cdd
pop ecx
shr ebx, 0x1a
shl esi, 0x1b
shl edx, 0x11
jmp 0x475faf
pop ecx
add edx, edi
mov esi, ebx
inc edi
sub edx, 0xcc797896
xor ebx, esi
mov esi, ebx
add ebx, edi
inc esi
dec ebx
ror ebx, 0x19
jmp 0x47721b
call fcn.00477746
mov edi, edx
add edi, 0xcc7f167f
not edi
jmp 0x4767ac
push 0xcb57aab3
rol edi, 1
inc edi
not edx
or edx, esi
and esi, edx
neg edi
dec edi
jmp 0x475f49
call fcn.00477746
sub ebx, 0xcc920935
sub edi, 0xcc9248fc
or edi, esi
mov esi, ebx
rol edx, 0x17
xor edx, edi
xchg edx, ebx
xor ebx, 0xcc93c74b
xchg edi, edx
mov esi, edi
shr esi, 2
shl ebx, 0x12
rol esi, 0x1a
sub esi, ebx
jmp 0x47669e
push 0xcb6e4c55
xchg esi, edx
rol esi, 0x1c
sub edx, esi
xchg edx, edi
and edx, ebx
sub edx, edi
or ebx, esi
and edx, 0xcc97414a
and edx, edi
add edi, 0xcc97cdde
xor esi, edi
jmp 0x4768f5
push 0xcb6ba540
not esi
sub edx, esi
jmp 0x4756ec
call fcn.00477746
xor edx, ebx
shr esi, 0x11
xor esi, ebx
not esi
or esi, edi
or edx, ebx
jmp 0x4764e3
push 0xcb5ace4f
mov edi, ebx
xor edi, ebx
mov edx, ebx
add esi, 0xccb3c12b
neg esi
inc esi
xor edx, esi
or esi, ebx
add edx, edi
shr edi, 0x14
add esi, edi
jmp 0x47632f
push 0xcb612ba4
mov ebx, 0xccb5d321
add esi, edx
mov edx, 0xccb650e2
not edi
bswap edi
bswap esi
and ebx, edi
rol edx, 0x11
shl ebx, 0x18
mov edi, ebx
add esi, 0xccb85276
jmp 0x47689a
mov ecx, 0x73716341
mov edi, edx
bswap ebx
add edi, esi
xor ebx, edi
shl ebx, 0x12
add esi, 0xccc55d0e
xchg ebx, edi
neg edx
neg edi
jmp 0x47636b
push 0xcb76990c
add edi, 0xccc67627
add esi, edx
mov esi, edi
jmp loc.0047684b
mov ecx, 0x73716341
or edi, 0xcccd30ca
sub esi, edx
neg edi
and esi, edx
not edx
or edi, 0xccce7672
and esi, edx
sub edi, edx
and edi, esi
inc edx
xor esi, edi
xchg ebx, edi
mov edx, 0xccd02436
jmp 0x475fe3
push 0xcb5ed913
add esi, edx
add ebx, 0xccd0ca16
add esi, edx
not ebx
dec ebx
jmp 0x4772a1
call fcn.00477746
or edx, 0xccd46ddf
or ebx, edx
or edi, esi
shl edx, 3
shr edi, 0xb
add esi, ebx
add ebx, 0xccd5eebc
jmp 0x4762a8
push 0xcb730e92
and edx, 0xccd64926
xor edx, esi
or edi, ebx
xor edx, ebx
or edx, esi
sub ebx, 0xccd77ac8
add ebx, esi
dec edi
xor edx, edi
xor edx, esi
inc edi
shr edi, 3
neg edi
jmp 0x4776a4
call ecx
and ebx, esi
or ebx, edx
inc esi
sub esi, 0xccda5bd2
jmp 0x47648c
call ecx
or ebx, edx
mov esi, edx
or ebx, edx
and esi, 0xcce155df
jmp 0x476af4
mov ecx, 0x73716341
and edx, esi
rol edx, 1
mov ebx, edi
or edx, esi
xchg edi, ebx
dec edx
sub edi, edx
jmp 0x475a30
pop ecx
xchg edx, edi
neg ebx
mov esi, edi
sub edx, ebx
xchg edi, edx
xchg edx, edi
add ebx, edi
or edi, ebx
jmp 0x4770a5
pop ecx
add edi, 0xcce8e38f
and esi, ebx
bswap esi
and ebx, edi
xor ebx, 0xcce9d866
neg ebx
xchg edi, ebx
shl edx, 9
bswap ebx
xor edx, 0xcceb236e
jmp 0x475761
call fcn.00477746
mov edx, esi
xor ebx, edi
mov edx, edi
dec edi
xor edi, edx
xor edi, edx
xchg edx, ebx
sub edx, edi
or edx, esi
mov edx, edi
bswap ebx
or edx, edi
xchg edx, ebx
add edi, ebx
jmp 0x477164
call fcn.00477746
xchg edx, ebx
and edx, ebx
and esi, edi
sub edx, 0xccf5cf6c
rol edx, 1
and ebx, edi
xor edx, esi
xchg edi, ebx
or edi, 0xccf714ac
xchg edi, esi
jmp 0x47659c
pop ecx
xor edi, esi
xchg edx, ebx
dec ebx
or edx, esi
sub edx, 0xccfbab37
xchg edi, ebx
or edx, ebx
shr edx, 0x19
or esi, edi
mov esi, edx
jmp 0x475499
push 0xcb6a2d32
shl edx, 0x1d
add esi, edi
xor edx, edi
and ebx, edx
sub edx, 0xccfe4e4e
jmp 0x475de4
push 0xcb57f3e3
dec esi
and ebx, esi
xor edi, edx
xchg edx, ebx
sub esi, 0xccff9cf5
xchg ebx, edi
shl esi, 2
jmp 0x477704
mov ecx, 0x73716341
xor edx, esi
mov edi, 0xcd00c3fd
add edi, edx
add edi, esi
mov edx, esi
add edx, 0xcd01b3ba
shr ebx, 0x1d
or ebx, 0xcd0230f9
xchg edi, ebx
jmp 0x475ec3
pop ecx
xchg ebx, edx
add ebx, esi
or esi, edi
dec ebx
sub edi, ebx
neg edi
jmp 0x475865
call fcn.00477746
add edi, esi
and edi, esi
and esi, ebx
inc ebx
mov edi, ebx
sub edi, edx
or edi, 0xcd0a02ac
xchg edi, edx
inc esi
sub edi, esi
or esi, ebx
or edx, edi
xor esi, 0xcd0b820e
mov esi, 0xcd0bc1bc
xor edi, ebx
dec edx
jmp 0x47667c
pop ecx
xor edi, edx
or edi, 0xcd0cd385
rol ebx, 0x15
add esi, edx
sub edx, 0xcd0d9e9f
add esi, edx
xchg ebx, edi
xor esi, edi
inc edx
jmp 0x47605f
push 0xcb60e1e9
sub ebx, esi
xor ebx, edx
or edx, edi
mov ebx, esi
neg esi
add ebx, edx
xor edi, ebx
and edi, 0xcd14f77b
or edx, ebx
neg ebx
sub ebx, edx
shl esi, 0x15
mov edi, edx
mov edx, esi
or edx, 0xcd16f2ce
jmp 0x475b6c
mov ecx, 0x2a676233
and edi, edx
and ebx, esi
neg esi
and esi, 0xcd1fa372
sub edi, 0xcd1fe29f
mov esi, edx
not ebx
sub ebx, 0xcd20acbd
xchg edi, esi
and esi, edx
xor edx, ebx
jmp 0x47515a
push 0xcb61bfb9
inc ebx
add ebx, 0xcd2e2b20
not edx
neg esi
or esi, edi
not ebx
xor edi, 0xcd3031d0
neg esi
and edx, ebx
jmp 0x4775af
mov ecx, 0x2a676233
xchg ebx, edx
or edi, edx
mov edx, esi
and edi, edx
neg edx
xor ebx, esi
jmp 0x475d17
call ecx
xchg ebx, edi
xor edx, esi
or ebx, esi
rol edi, 5
mov edx, esi
jmp 0x477591
push 0x73c9e
xor ebx, 0xcd4c4c60
add edx, 0xcd4c8bdb
or edx, edi
add edi, ebx
mov edi, edx
or ebx, edx
nop
xor ebx, edi
and esi, edi
dec edi
add edx, edi
xchg edi, esi
jmp 0x47687d
push 0xcb5b18f8
add edi, edx
shl edi, 2
mov esi, ebx
add esi, 0xcd511515
bswap edx
jmp 0x47578a
push 0x40
sub edi, esi
and ebx, 0xcd51ee35
sub esi, ebx
dec ebx
sub edx, 0xcd52a93c
nop
and esi, edx
and edx, edi
xchg ebx, esi
inc esi
jmp 0x476307
call fcn.00477746
xchg edi, esi
mov edi, edx
neg edi
xchg ebx, edi
shl ebx, 0xa
and ebx, 0xcd565f32
and edi, edx
and ebx, edi
and edi, 0xcd572788
ror esi, 0x12
sub esi, edi
jmp 0x475da8
push 0xcb54ce4a
mov ebx, esi
shr edx, 2
mov esi, ebx
xor edi, ebx
add esi, 0xcd592564
or esi, edx
inc edi
or edi, esi
dec edx
inc esi
rol ebx, 3
xchg esi, ebx
inc edx
or edx, esi
jmp 0x476e03
push esp
xor esi, edx
sub esi, ebx
and esi, edi
bswap ebx
mov edx, ebx
and ebx, edi
and ebx, 0xcd623bbe
xchg edi, edx
mov edx, edi
jmp 0x476348
pop ecx
and edx, ebx
sub edi, edx
and edi, ebx
add esi, 0xcd63f61d
neg edx
sub ebx, esi
rol edx, 0x11
or ebx, edx
jmp 0x476e42
call ecx
shl edi, 9
or esi, 0xcd66646b
and esi, 0xcd66a3c1
sub edx, edi
xchg esi, edi
add edx, esi
and ebx, edi
xchg edx, esi
or esi, 0xcd6821e3
xor edi, ebx
sub edx, ebx
rol esi, 0x17
nop
not ebx
xchg edx, ebx
jmp 0x476738
pop ecx
add edx, ebx
mov esi, ebx
xor edi, esi
shl edi, 0xc
or ebx, 0xcd6d9dae
and edi, edx
add edx, 0xcd6e1603
and edx, esi
jmp 0x476f66
pop ecx
sub ebx, 0xcd6eaa4f
sub esi, 0xcd700c78
xchg edx, ebx
sub esi, edi
jmp 0x476ba9
pop ecx
and edx, edi
mov edi, 0xcd75c7eb
add esi, edi
sub ebx, esi
mov edi, esi
sub esi, ebx
jmp 0x476bbd
call ecx
sub edx, 0xcd772432
xchg ebx, edx
and edi, 0xcd77a07f
mov ebx, 0xcd77de1c
shr edi, 0x1e
or ebx, edx
or ebx, edi
ror esi, 0x17
jmp 0x47748d
pop ecx
add edx, 0xcd7dcb12
xor edi, esi
mov esi, edx
and esi, ebx
add edx, esi
or edi, esi
or ebx, 0xcd800d9b
xchg esi, ebx
xchg edx, ebx
jmp 0x47724a
mov ecx, 0x73716341
or ebx, edx
mov edx, ebx
xchg esi, edx
or ebx, esi
and esi, edi
or edi, edx
mov edx, 0xcd82567e
and edx, edi
add edx, ebx
xchg edx, esi
sub ebx, edi
xor edi, ebx
neg ebx
jmp 0x476d76
call ecx
xor esi, edi
mov edx, edi
dec esi
mov edx, esi
neg edx
xor edi, edx
xchg edx, esi
sub ebx, esi
mov edx, esi
xchg ebx, edi
or ebx, edx
mov esi, edx
add edx, ebx
sub edx, ebx
add ebx, 0xcd8caa6f
jmp 0x47718e
push 0xcb5d66b6
shl edx, 0xc
xchg edi, esi
xchg edi, edx
sub esi, edx
and ebx, 0xcd945423
dec edi
add edx, 0xcd954a5e
or edx, edi
jmp 0x4751a6
pop ecx
and edx, 0xcd95e5b1
or edi, 0xcd96310a
add edx, 0xcd9670aa
mov ebx, edx
and edx, esi
xor ebx, edx
dec edi
jmp 0x47723a
mov ecx, 0x73716341
sub edx, 0xcd97bcd3
sub ebx, edi
mov edx, ebx
sub edx, esi
add edx, 0xcd98aefa
xor esi, edi
xchg esi, edx
add edx, esi
shl edx, 0x16
shr ebx, 0x1b
xor edx, 0xcd9ac61d
not esi
jmp 0x4758a9
call ecx
and ebx, edx
add esi, edi
sub edx, edi
add edx, 0xcd9c675f
shr esi, 3
inc esi
sub edx, esi
dec edi
sub edx, edi
xor esi, edi
xchg edx, esi
xor edi, edx
jmp 0x475856
push esp
dec ebx
rol ebx, 6
shl ebx, 0x13
sub esi, edi
bswap edx
inc edi
shr esi, 0x1f
sub ebx, 0xcda1948f
bswap ebx
jmp 0x4763e6
push 0xcb73a560
or edx, 0xcda49303
add edi, edx
inc edi
add ebx, edx
shl ebx, 1
jmp 0x476a08
pop ecx
xchg esi, ebx
xor ebx, 0xcdadbfc9
mov ebx, 0xcdae2bc8
sub edi, 0xcdae9272
or esi, ebx
xor edi, 0xcdaf4683
add edi, edx
or edx, edi
sub ebx, esi
xchg edx, esi
add ebx, edi
jmp 0x476015
call ecx
xchg ebx, esi
not ebx
add edi, ebx
xor esi, 0xcdb80853
xor ebx, edi
xor ebx, edi
not edx
or esi, edi
shl edx, 0x19
bswap esi
sub edx, ebx
jmp 0x4752be
pop ecx
or ebx, esi
mov edx, ebx
and edx, esi
and edi, ebx
dec ebx
rol esi, 4
xor esi, 0xcdc036ab
and ebx, edi
and esi, edx
inc edx
xchg esi, edx
ror esi, 0xc
inc esi
jmp 0x4771a2
push 0x401400
mov edx, edi
mov edi, edx
add edi, ebx
neg esi
mov esi, 0xcdccc09c
add ebx, edx
or edx, esi
add edi, edx
jmp 0x4776e3
push 0xcb61745d
sub ebx, 0xcdcddb62
xchg edx, edi
dec ebx
not esi
sub edi, esi
and edx, 0xcdcf230e
inc edi
add esi, edi
jmp 0x476190
push 0xcb6e99a5
add edi, edx
xchg ebx, edi
mov ebx, edx
xchg edx, esi
not esi
shr edx, 0x11
or edx, edi
sub edi, 0xcdd7dfba
jmp 0x47710c
call ecx
and ebx, esi
add edi, ebx
shr esi, 0x13
xor ebx, esi
shr esi, 0x17
add ebx, edi
shl ebx, 1
dec esi
sub edx, edi
jmp 0x476de2
push 0xcb73f1eb
and esi, edx
add edi, edx
xchg ebx, edi
ror esi, 0x1e
xor esi, edi
sub esi, ebx
and ebx, esi
add edi, ebx
add ebx, esi
neg ebx
bswap ebx
sub esi, ebx
xor esi, ebx
jmp 0x475c2b
push 0xcb530663
or edx, 0xcdf5e174
inc ebx
or edx, ebx
add edi, esi
xor esi, 0xcdf70d38
add edx, edi
xchg esi, ebx
neg edx
or esi, 0xcdf81586
add edx, 0xcdf85254
add ebx, edi
jmp 0x47654d
pop ecx
sub edx, edi
xor edx, esi
add edi, edx
and ebx, 0xce047e8e
and edi, edx
dec ebx
shr edx, 0xd
jmp 0x47646d
push 0xcb5484e3
sub edx, ebx
or ebx, edi
dec esi
xchg edx, esi
mov edi, esi
inc edx
jmp 0x476395
pop ecx
sub ebx, 0xce159254
rol edi, 0x18
xchg ebx, esi
neg esi
bswap edx
add ebx, 0xce171160
neg ebx
xchg esi, edi
or edi, edx
dec ebx
add edx, ebx
jmp 0x475dfc
pop ecx
mov ebx, edi
add edx, edi
xor edx, 0xce1f54cf
xor esi, ebx
and edi, 0xce1fd105
or edx, edi
sub edx, 0xce205d62
sub esi, ebx
xor esi, edx
ror edi, 0x1a
rol ebx, 0x1b
mov ebx, edi
mov edi, esi
and ebx, 0xce220a7d
jmp 0x47526b
pop ecx
mov ebx, esi
and esi, edi
mov edi, esi
rol esi, 1
or ebx, esi
sub ebx, edi
and ebx, esi
sub edx, ebx
dec edi
sub edi, ebx
dec ebx
and ebx, esi
jmp 0x475259
pop ecx
add edi, 0xce2f4be9
and esi, edx
mov ebx, edi
xchg ebx, edi
jmp 0x475f30
call fcn.00477746
mov edi, esi
sub edx, 0xce3e87c2
bswap edx
sub edi, 0xce3f6013
add esi, ebx
shl ebx, 0x16
and edx, edi
jmp 0x475d64
pop ecx
xchg esi, edi
mov esi, edi
xor edx, edi
sub edi, esi
xchg edi, ebx
nop
xchg esi, ebx
mov edi, ebx
or ebx, 0xce4aaa91
xchg ebx, edx
and edi, esi
xor esi, ebx
jmp 0x476c29
push 0xcb5517ee
xor edx, 0xce4bb12a
rol ebx, 6
or edi, esi
and edx, 0xce4c7593
xor esi, edx
add edi, edx
sub ebx, 0xce4db1d3
nop
sub edx, 0xce4e9e53
sub esi, 0xce4f0c40
or esi, ebx
xchg ebx, esi
sub edx, ebx
xchg edi, ebx
and esi, edi
shl edi, 0x1c
jmp 0x4750f8
pop ecx
or ebx, edi
mov ebx, esi
and ebx, edx
ror edi, 0x12
or ebx, edx
add ebx, edi
xchg edi, ebx
jmp 0x4755c7
mov ecx, 0x73716341
and esi, 0xce5af604
or esi, edi
xchg edi, edx
ror edi, 0xe
not edx
or ebx, esi
sub esi, edi
jmp 0x47534f
mov ecx, 0x2a676233
inc ebx
xor edx, ebx
add edi, edx
inc edx
dec ebx
xor ebx, 0xce6f286a
xor esi, edx
dec edx
jmp 0x47537f
pop ecx
or edx, ebx
mov ebx, edx
add edx, ebx
or edi, esi
mov esi, 0xce722c86
and esi, edx
xchg ebx, edx
xor edi, esi
xor ebx, edx
sub ebx, edi
xor esi, edi
xor ebx, edi
jmp 0x4767ea
call fcn.00477746
xor edx, edi
and edi, ebx
or edx, edi
inc ebx
and edi, 0xce81cc39
rol ebx, 0x12
sub ebx, 0xce82b39d
mov esi, 0xce82f39e
or ebx, edi
and esi, 0xce837f70
neg ebx
mov ebx, esi
add esi, edx
xchg ebx, edx
shr esi, 0xd
jmp 0x4752fb
pop ecx
xchg edx, ebx
add edx, esi
sub edi, ebx
mov edx, edi
jmp 0x475f12
pop ecx
xor esi, ebx
xor esi, edx
xor ebx, edi
mov edi, esi
or esi, 0xce8c8082
not edi
ror esi, 2
and edi, edx
xor ebx, esi
xor ebx, edi
xor esi, edi
mov edx, ebx
jmp 0x47660b
push 0xcb64a387
add esi, edx
and edi, esi
xchg edx, edi
xor edi, esi
xor ebx, edi
bswap edi
xor edi, ebx
mov ebx, edi
mov edi, edx
jmp 0x476f4c
call ecx
xor esi, edx
sub ebx, esi
shr esi, 0xe
sub esi, 0xce9c54b2
mov ebx, esi
shl edi, 3
xchg edx, esi
or edi, edx
jmp 0x476cdc
push 0xcb6ee593
inc esi
xchg ebx, esi
sub edx, 0xce9f4ded
add ebx, esi
xor edi, esi
neg edx
add esi, ebx
add ebx, esi
or edx, 0xcea0f58b
xchg edx, edi
mov edx, ebx
jmp 0x4761b3
call ecx
sub esi, 0xcea6d3f2
mov edi, edx
xor ebx, edi
and ebx, 0xcea81dd0
xor edx, edi
dec esi
neg edi
sub edx, 0xcea989f3
mov edi, edx
shr edi, 0x14
dec edi
add esi, edi
jmp 0x47581b
pop ecx
xchg esi, ebx
and esi, edi
not ebx
and edi, 0xceabbece
or edx, esi
jmp 0x475e12
push 0xcb764e92
xor ebx, 0xceacc85a
mov esi, ebx
add ebx, edi
or edi, esi
inc edi
add ebx, 0xceae5815
mov ebx, edi
sub edi, ebx
inc edi
mov ebx, edi
neg ebx
xor edx, esi
rol esi, 1
jmp 0x475c4c
pop ecx
mov edx, ebx
and edi, ebx
add edx, esi
add esi, edi
inc ebx
neg edx
inc edi
xchg edi, edx
ror esi, 4
xchg edx, esi
xor ebx, edi
xchg esi, edx
sub edi, edx
jmp 0x475923
push 0xcb719424
sub edi, esi
dec ebx
bswap edi
nop
jmp 0x47664c
push 0xcb68b86c
mov esi, edx
shl edx, 0x12
ror ebx, 7
not edi
neg esi
dec esi
or esi, ebx
inc esi
rol edi, 7
jmp 0x4760e4
call fcn.00477746
rol edi, 6
add ebx, edx
ror esi, 2
add esi, 0xcec443f5
sub esi, edi
xor esi, ebx
mov ebx, edi
rol ebx, 0xc
xor edx, 0xcec58633
rol esi, 9
xor edx, ebx
shl edi, 8
mov ebx, edi
bswap esi
mov esi, 0xcec7d378
or esi, edi
jmp 0x47641d
push 0xcb5f2495
mov esi, ebx
xchg ebx, esi
not edi
neg esi
add edi, ebx
and esi, edi
xor edx, 0xcecb8970
and ebx, edi
not edx
jmp 0x475730
push 0xcb5a3bfd
xor edi, ebx
shr edx, 0x1b
xor ebx, 0xcedf7ffa
and edi, esi
add edx, 0xcee06b70
jmp 0x47569a
call ecx
sub ebx, esi
neg edi
sub esi, edi
bswap ebx
add edi, ebx
dec edx
xor edi, edx
bswap edi
mov edi, 0xcee9f580
and edx, esi
jmp 0x476c5d
pop ecx
shl edi, 0x1e
mov edx, 0xcef97704
mov ebx, edi
and esi, edx
xor ebx, esi
and ebx, edi
jmp 0x475a22
call fcn.00477746
xor esi, edi
sub esi, 0xcefb0d6f
mov edi, ebx
and ebx, edx
mov ebx, esi
or esi, edi
and edi, 0xcefc3b3e
add edx, esi
xor edx, 0xcefcc75b
or ebx, edi
mov edi, 0xcefd424f
sub edx, edi
not esi
shr esi, 2
jmp 0x4769b9
push 0xcb6e01c8
and ebx, esi
bswap esi
sub ebx, edi
mov ebx, 0xcf0484fb
sub esi, edx
shr edi, 6
dec esi
shr edi, 7
jmp 0x4759f9
pop ecx
ror edi, 3
add edi, ebx
xor esi, ebx
add edi, ebx
xor esi, edx
inc edx
xor edx, edi
and edi, edx
xor ebx, esi
mov edi, edx
add edi, esi
or edx, esi
jmp 0x47701e
push 0xcb620816
not ebx
neg edi
ror edx, 0xb
xor edi, 0xcf10eacb
add edx, ebx
bswap edx
bswap ebx
or edx, esi
xchg esi, ebx
sub edx, edi
and edi, esi
add esi, ebx
jmp 0x476e97
push 0xcb735904
add esi, edx
xchg esi, edi
ror ebx, 0x15
sub esi, edx
add ebx, edx
mov edi, edx
shl edi, 0x13
bswap ebx
mov esi, ebx
xchg ebx, edx
xchg edx, esi
neg edx
or esi, edi
jmp 0x4766cf
call ecx
sub ebx, edx
and edx, esi
xchg esi, edx
sub esi, 0xcf27934d
shr ebx, 0x1f
sub edi, edx
xor esi, edx
mov edx, ebx
inc edi
sub edx, esi
xchg ebx, edi
jmp 0x47652d
push 0xcb583b01
not edx
sub ebx, edx
and edx, edi
ror edx, 1
xor ebx, 0xcf2c9842
not edx
shr esi, 8
xor edi, ebx
sub esi, edx
or edi, 0xcf2fc7ec
or esi, 0xcf30040e
xor edx, ebx
add esi, 0xcf307e81
sub ebx, esi
jmp 0x47544f