Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetMessageTime
cmp eax, 0xffffff33
jne 0x4010ac
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff2f
jne 0x40113a
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
ret
call sub.user32.dll_GetMessageExtraInfo
cmp eax, 0xffffff0d
jne 0x4011e6
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xffffff09
jne 0x401292
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.user32.dll_OpenWindowStationW
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
call sub.advapi32.dll_SaferCloseLevel
ret
jmp 0x474ffd
neg edi
sub edx, 0x823bab95
shl ebx, 9
mov ebx, edi
jmp 0x47718c
push 0x824ab2ab
neg esi
and ecx, edx
and ebx, edx
shr esi, 4
mov ecx, esi
bswap edx
sub ecx, 0x83145967
dec ecx
add ecx, 0x8314e781
mov edx, 0x83152697
jmp 0x475faa
mov edi, 0x2809144b
sub esi, ecx
not ebx
mov ecx, 0x83167d45
and ecx, ebx
jmp 0x4780bf
call edi
and ecx, 0x831b5421
or ebx, ecx
sub ecx, 0x831bd093
shr esi, 0x14
xor ebx, 0x831c50f3
inc edx
xor edx, 0x831ce053
add ebx, esi
rol ecx, 0xe
xor ebx, ecx
and ebx, esi
mov ebx, 0x831e15b7
bswap ecx
xor edx, ebx
jmp 0x47752c
call fcn.00478a0c
xchg edx, ecx
neg ebx
and ebx, edx
add ebx, ecx
xchg esi, ebx
shl ebx, 1
xor edx, esi
and esi, 0x832ef303
jmp 0x4756de
pop edi
xor ebx, edx
neg ebx
xor ecx, esi
not ebx
and ebx, edx
rol esi, 0x16
xor edx, 0x833b1e5f
bswap ecx
xchg edx, ecx
ror edx, 0xc
xor ebx, ecx
bswap edx
add ebx, esi
mov esi, ecx
jmp 0x47800b
pop edi
sub ebx, esi
and ecx, 0x833db2f3
sub ecx, ebx
and ebx, ecx
or ebx, esi
mov edx, ebx
mov ecx, ebx
mov ebx, esi
xor esi, 0x833f5131
xor ecx, edx
neg edx
xor edx, ebx
jmp 0x477c66
push 0x8263655b
xchg ebx, edx
or esi, 0x834ac1c7
inc edx
rol ebx, 9
xchg esi, ebx
not esi
and ecx, 0x834bfa03
mov ecx, edx
jmp 0x475077
call edi
xchg esi, ecx
inc esi
xchg ebx, edx
or esi, 0x834d3793
sub ecx, edx
ror ebx, 5
mov ebx, 0x834df811
or ebx, esi
mov edx, ebx
dec ebx
shl ebx, 0x18
sub ecx, edx
jmp 0x4771c8
push 0x401400
and edx, esi
xchg ecx, ebx
xor esi, ebx
inc ebx
or edx, ebx
neg esi
xor ebx, esi
and esi, ecx
add edx, esi
shl ebx, 0x1f
or ecx, edx
ror ecx, 0x11
jmp 0x476f94
pop edi
sub esi, edx
inc edx
add ebx, esi
rol esi, 3
xor edx, esi
or ecx, esi
neg ebx
or ecx, esi
mov esi, ecx
xchg ecx, edx
or edx, esi
mov ecx, edx
jmp 0x4786fb
push esp
add edx, ebx
not ecx
add esi, ecx
xor ecx, esi
xchg ecx, edx
mov edx, esi
or edx, esi
rol ecx, 0xb
mov edx, ecx
xchg esi, ecx
jmp 0x4777ca
push 0x825fe047
or ecx, ebx
nop
inc edx
rol esi, 0xa
and ebx, ecx
or ebx, esi
jmp 0x476b9a
pop edi
inc ecx
mov esi, edx
and esi, ebx
xor esi, 0x83989b7b
sub ecx, edx
or ebx, ecx
jmp 0x476c8c
pop edi
sub ebx, ecx
xchg esi, ecx
mov esi, ecx
sub ebx, esi
xor ecx, ebx
mov ecx, esi
and esi, ebx
xchg ebx, esi
sub ecx, edx
xchg ebx, edx
jmp 0x475e86
push 0x825717b1
and edx, 0x83a3d915
sub edx, ecx
xchg ebx, ecx
and ecx, edx
rol ebx, 0xc
inc ecx
add esi, ebx
shr edx, 7
add ebx, esi
mov esi, ecx
jmp 0x477d4e
mov edi, 0x2809144b
neg ebx
xchg ecx, esi
nop
or ecx, edx
add esi, 0x83b424d9
shl edx, 0xe
xor edx, ecx
or esi, ebx
and esi, ebx
mov edx, ebx
jmp 0x477a4e
call fcn.00478a0c
or edx, ebx
sub edx, esi
ror esi, 0xb
shl esi, 9
sub ecx, ebx
and ecx, 0x83b6ca55
xchg esi, ecx
add ecx, ebx
add edx, ecx
xor edx, ecx
jmp 0x476759
pop edi
add ecx, edx
dec ecx
and edx, ebx
or esi, ebx
mov ecx, esi
sub ebx, edx
bswap ebx
xchg ecx, ebx
add ebx, ecx
not esi
add esi, 0x83c51853
xor ebx, ecx
jmp 0x47807e
pop edi
and ebx, edx
add edx, ecx
sub ecx, 0x83cc5583
sub ebx, esi
and ebx, edx
sub ecx, edx
shr edx, 2
add ecx, edx
sub ecx, 0x83cddd6f
neg esi
or ebx, esi
xchg esi, ebx
jmp 0x47736a
call edi
mov edx, ebx
xchg ebx, edx
sub ebx, edx
and ebx, 0x83d14311
and esi, ebx
mov esi, 0x83d1bf49
mov ecx, ebx
neg esi
mov ebx, esi
and ebx, edx
and ebx, ecx
sub esi, ebx
and ebx, ecx
or ecx, ebx
jmp 0x475f75
pop edi
or ecx, edx
mov ecx, esi
xor edx, ecx
add ecx, ebx
sub ebx, edx
xor edx, ecx
jmp 0x478386
push 0x825683db
xor ebx, edx
and edx, ecx
neg ecx
neg ebx
shl esi, 4
xor ecx, 0x83ef033d
inc esi
inc ebx
add edx, 0x83efd261
shr esi, 1
jmp 0x477254
pop edi
ror ebx, 0x1a
add ebx, ecx
xor esi, ecx
xor edx, ecx
or ebx, 0x83ff317d
and ebx, edx
mov esi, ecx
xchg ebx, ecx
sub edx, esi
neg ebx
jmp 0x47716d
push 0x824e2583
add edx, ecx
xchg ecx, esi
xor esi, ecx
ror ecx, 0x1c
shr ebx, 7
or ebx, esi
xchg edx, ecx
or edx, ecx
or esi, ecx
inc ecx
sub esi, ecx
xchg esi, ecx
jmp 0x477e37
push 0x8244f3d5
neg edx
mov esi, ecx
rol edx, 0x10
xor ecx, edx
bswap edx
and edx, ebx
bswap ebx
dec esi
jmp 0x477923
mov edi, 0x2809144b
sub edx, 0x841c6613
shr ebx, 5
xor esi, ecx
mov ebx, ecx
ror edx, 0x16
mov edx, ecx
and edx, 0x841dead7
mov ecx, 0x841e29ff
bswap ebx
add esi, ebx
ror edx, 0xd
ror ecx, 8
bswap ebx
xchg esi, ecx
jmp 0x477e8f
pop edi
add esi, edx
xchg ecx, ebx
xor edx, ebx
or ebx, 0x8423990f
rol ecx, 0x1e
dec edx
add edx, ebx
and ebx, 0x84251b7d
add ebx, 0x84256a13
shl ecx, 0xb
or ecx, esi
mov ecx, ebx
xor ebx, edx
add ecx, ebx
jmp 0x476b6f
pop edi
dec ecx
sub edx, 0x84362f05
inc edx
mov ebx, edx
mov ebx, esi
dec ebx
jmp 0x477457
mov edi, 0x2809144b
rol edx, 7
sub esi, 0x843a7b5f
or ebx, edx
or edx, ecx
xor ebx, ecx
mov ebx, ecx
or ebx, edx
not ebx
xor edx, ecx
rol edx, 0xd
dec esi
xchg esi, edx
xchg esi, ebx
xchg edx, ebx
shl ecx, 0xa
ror ebx, 0x11
jmp 0x478250
pop edi
add edx, ecx
and edx, ebx
inc esi
or ecx, edx
inc ecx
xchg esi, ebx
mov edx, esi
add ecx, esi
or esi, 0x8447b3e3
and ebx, edx
sub edx, 0x84482e1b
xchg edx, ecx
jmp 0x476c9c
push 0x82631a0f
and ecx, 0x845181ff
shr ebx, 0xe
ror ebx, 0x19
mov edx, ecx
shr esi, 0x1c
sub edx, ebx
jmp 0x475334
pop edi
shr edx, 7
mov ecx, ebx
sub esi, 0x845380b1
rol edx, 8
inc ebx
xchg ebx, edx
inc ecx
shr ecx, 2
and esi, edx
neg esi
neg edx
mov esi, 0x8455a54b
sub esi, 0x8455e053
mov esi, 0x84561b45
jmp 0x4759a8
call fcn.00478a0c
sub ecx, edx
and ebx, esi
add edx, ecx
shr edx, 0x16
or esi, ecx
inc esi
add esi, ecx
neg edx
xor esi, ebx
or ecx, esi
mov ebx, edx
xchg ebx, ecx
xor ebx, ecx
xor edx, esi
jmp 0x476348
call fcn.00478a0c
mov esi, ecx
neg ecx
neg ecx
xor edx, esi
mov ebx, ecx
mov ecx, ebx
dec esi
xor edx, ecx
add edx, esi
xchg edx, esi
and edx, ebx
xor ebx, 0x846f3b2f
jmp 0x4787a9
call edi
add ebx, esi
inc ecx
xor edx, ecx
nop
sub esi, ecx
add ebx, 0x84838c43
jmp 0x476e17
mov edi, 0x2809144b
xor ecx, edx
add edx, ebx
inc ecx
shr edx, 0x1a
or ecx, edx
rol esi, 0xc
add ebx, ecx
xchg edx, ecx
jmp 0x476732
pop edi
rol edx, 0x1e
xor esi, edx
xor ebx, edx
or edx, esi
xchg ecx, ebx
mov ebx, 0x84949abb
neg ebx
mov esi, 0x84951f9d
inc esi
xchg edx, ebx
or esi, edx
dec edx
and ecx, ebx
sub edx, esi
jmp 0x478829
push 0x8244ab25
and ebx, 0x84a95787
sub esi, ebx
bswap ebx
or esi, edx
or ebx, 0x84aa5099
mov esi, edx
sub ebx, 0x84aadb53
or edx, ebx
shl esi, 8
add esi, ebx
jmp 0x475db9
push 0x825f960f
or ecx, edx
xchg esi, ecx
ror ecx, 0xc
mov edx, ecx
mov edx, esi
sub edx, ecx
add edx, esi
or edx, 0x84bf9cd3
or esi, edx
sub ebx, esi
jmp 0x47571e
push 0x825a4cf7
shr esi, 6
and edx, esi
dec ebx
bswap ecx
add ecx, 0x84c526bb
sub ebx, 0x84c56641
bswap ebx
sub ebx, edx
jmp 0x4776f8
push 0x824860c9
shr ebx, 8
or ecx, edx
ror esi, 0xe
ror edx, 1
mov ebx, edx
and edx, 0x84c78307
jmp 0x478125
call fcn.00478a0c
sub ebx, edx
neg ecx
sub edx, esi
mov ecx, ebx
inc ebx
xor edx, 0x84cbadb5
not edx
shr ecx, 1
sub ebx, edx
add ebx, esi
ror ecx, 0xf
bswap ebx
jmp 0x475a4f
call edi
sub ebx, ecx
and ebx, edx
mov edx, ebx
or edx, 0x84ce358f
dec edx
or ebx, edx
dec ebx
bswap esi
and esi, ecx
sub ebx, 0x84cfbef7
jmp 0x475b67
mov edi, 0x2809144b
and ecx, 0x84d01c93
or ecx, edx
or esi, ecx
or esi, edx
shl ebx, 6
shl edx, 0xd
sub ebx, ecx
mov esi, 0x84d1cfd9
and esi, ecx
ror esi, 0xb
jmp 0x4780d7
pop edi
inc ecx
nop
and ecx, esi
shl esi, 5
mov esi, edx
sub ecx, esi
add ecx, 0x84e965a7
add edx, ebx
sub esi, 0x84e9e1a5
add esi, edx
jmp 0x478276
pop edi
bswap ebx
dec edx
or esi, edx
xchg edx, ebx
jmp 0x477c3e
call fcn.00478a0c
shr ebx, 0xf
shr esi, 0x19
dec edx
xor ecx, ebx
dec ebx
ror esi, 0x11
not ebx
xchg ebx, esi
mov esi, 0x84edb2c7
shr ebx, 0x15
and ecx, 0x84ee326f
ror esi, 0x16
jmp 0x4750d2
mov edi, 0x2809144b
shl ebx, 0xc
shl esi, 4
sub edx, esi
bswap ecx
add ebx, esi
shr ecx, 3
dec edx
sub ecx, 0x84f42a71
and esi, 0x84f469fb
ror ecx, 6
jmp 0x476245
call fcn.00478a0c
shr ebx, 7
add edx, ebx
and esi, 0x84f7ae1b
not ecx
ror ebx, 8
shl ecx, 0x13
and ecx, edx
neg edx
xchg ecx, edx
bswap esi
and esi, 0x84f9b989
neg ecx
jmp 0x475356
push 0x82514f89
or edx, ecx
sub ebx, esi
or edx, ecx
sub ebx, ecx
xchg edx, ecx
xor ebx, 0x8503f381
dec ecx
ror ebx, 0x19
mov esi, ebx
and ecx, esi
xor esi, 0x85053ccb
sub ebx, edx
not esi
sub ebx, ecx
mov esi, ebx
or esi, ebx
jmp 0x47877e
push 0x8247ce03
and ebx, 0x8506ca39
xor ebx, 0x85070a6f
shl edx, 4
add esi, ecx
add ebx, ecx
add ebx, edx
jmp 0x4782a1
push 0x8259b751
mov edx, 0x8511f38b
shl ecx, 0x13
and esi, ecx
mov ebx, 0x8512ae8b
and esi, 0x8512ee1b
add ebx, esi
and ecx, ebx
add esi, 0x8513b719
jmp 0x476f2a
pop edi
neg edx
add ebx, esi
mov edx, ebx
neg edx
jmp 0x476a54
pop edi
xchg ebx, esi
mov ecx, edx
add ebx, 0x851c5bd5
bswap ecx
mov esi, 0x851ce1a7
xchg ecx, ebx
xchg ecx, edx
sub esi, ecx
jmp 0x475bca
push 0x82602ac7
mov ebx, ecx
dec edx
and ecx, ebx
or ebx, ecx
xchg ebx, edx
xor esi, ebx
ror edx, 0x10
xor esi, edx
xchg ecx, esi
mov ecx, esi
jmp 0x47677a
pop edi
sub ecx, ebx
mov ebx, 0x852df68b
or edx, ebx
dec esi
jmp 0x475ca4
pop edi
shl ebx, 0xe
and edx, esi
xor ecx, esi
and esi, 0x852f7e99
and ebx, 0x852fc90b
ror esi, 0x13
sub esi, 0x85304155
add ecx, ebx
xor esi, edx
and esi, 0x8530eeb7
jmp 0x475263
mov edi, 0x2809144b
xor ebx, esi
and ebx, 0x8534e973
or ecx, ebx
shr ebx, 0xe
rol ebx, 4
bswap esi
add ecx, ebx
mov esi, edx
sub ecx, edx
inc ecx
dec edx
shr esi, 0x1c
and edx, 0x85381da7
inc edx
jmp fcn.00475ab7
call edi
and ebx, ecx
mov ecx, esi
add esi, ebx
and esi, ecx
neg ebx
mov ecx, ebx
xchg ecx, ebx
ror edx, 7
add esi, 0x853cd153
or esi, ebx
or edx, ebx
rol esi, 0x1a
ror ebx, 0x14
and ecx, 0x853e0b17
jmp 0x47775f
pop edi
bswap ebx
mov edx, ecx
add ebx, edx
sub edx, 0x8549f959
not esi
mov esi, 0x854a8701
jmp 0x4771fb
push 0x826283d9
xor esi, ecx
sub esi, 0x854b23d5
and esi, edx
sub esi, ebx
and esi, ebx
rol edx, 0xf
ror esi, 9
sub edx, ebx
sub edx, esi
sub ebx, esi
or ecx, esi
mov edx, 0x854da0ab
jmp 0x478862
pop edi
xchg edx, esi
xchg ebx, esi
or ecx, 0x854e7c11
bswap ebx
xchg ecx, ebx
xchg ebx, edx
not ebx
or ebx, edx
jmp 0x4755f0
push 0x825a01a3
shr esi, 6
mov ecx, ebx
mov esi, edx
xor ecx, ebx
mov ebx, edx
xchg ecx, ebx
or ecx, ebx
sub esi, ecx
rol ecx, 0x13
add esi, 0x855d5695
xchg edx, ecx
bswap edx
jmp 0x4766d2
call edi
or esi, edx
mov ecx, ebx
not ecx
or ecx, 0x856458e5
and ebx, 0x8564a319
mov edx, ebx
jmp 0x477218
pop edi
or ecx, edx
and ebx, 0x857f9c93
dec ecx
or edx, ecx
add esi, edx
rol ebx, 4
ror esi, 0x1a
or ecx, edx
bswap ebx
or ecx, 0x85860d41
xchg esi, ebx
not ecx
jmp 0x4757c4
pop edi
and edx, ebx
and ebx, ecx
xor ebx, ecx
and ecx, edx
bswap edx
ror ecx, 0x14
mov ebx, edx
mov edx, esi
and esi, ecx
or ebx, 0x858ce40f
jmp 0x476aeb
push 0x82429a8d
sub esi, 0x858d3ba1
add edx, esi
xor ecx, 0x858db709
and ebx, esi
xchg edx, ebx
sub ebx, edx
jmp 0x47638c
pop edi
add ecx, esi
add esi, ecx
or ecx, 0x85910a9b
or esi, 0x85914a61
jmp 0x476b7d
pop edi
or edx, ecx
mov ecx, esi
xchg edx, esi
sub esi, ebx
bswap esi
sub ecx, edx
sub edx, esi
xor ebx, esi
or esi, 0x8595cee5
inc ecx
jmp 0x477b21
pop edi
neg edx
sub edx, ecx
mov esi, ebx
mov esi, ebx
shl ecx, 2
or esi, edx
jmp 0x476689
call edi
and ecx, esi
and esi, ecx
xor ebx, 0x85989369
neg edx
ror ecx, 0xb
shl ebx, 0x18
or edx, 0x8599918b
xor ecx, 0x8599d13d
and edx, esi
and edx, ebx
jmp 0x475733
push 0x8256cde3
add ecx, 0x859aa467
xchg ecx, esi
mov edx, ebx
dec edx
jmp 0x4757f1
mov edi, 0x2809144b
mov ecx, ebx
and ecx, 0x85a38c95
xchg ebx, edx
or esi, edx
dec edx
or ebx, esi
inc esi
add edx, ecx
mov edx, ecx
rol ecx, 0x1f
mov ecx, 0x85a5cb53
or edx, ecx
jmp 0x4758f1
pop edi
rol ecx, 4
add ecx, 0x85b1a4c3
not ebx
add ebx, esi
inc ecx
bswap edx
jmp 0x478723
push 0x8244635d
mov esi, edx
and esi, ebx
not ecx
shl edx, 7
xchg edx, esi
or ecx, edx
bswap esi
and edx, ebx
mov ebx, 0x85bc544f
and edx, esi
and ecx, ebx
bswap esi
jmp 0x47655a
push 0x826238a3
or ebx, 0x85c10a4f
ror esi, 8
or ecx, edx
xor edx, esi
or ebx, ecx
or edx, 0x85c25179
jmp 0x476e30
push 0x82441927
dec edx
shr ebx, 0x10
sub esi, 0x85c51fef
sub ebx, ecx
or ebx, esi
add edx, 0x85c5cdad
shl edx, 0x18
sub esi, 0x85c644c1
xor edx, ecx
and ecx, edx
jmp 0x4773d4
pop edi
or ecx, ebx
mov ebx, ecx
and ecx, 0x85c77ec7
and ecx, 0x85c7b9b3
or ebx, esi
xor ebx, esi
jmp 0x4785c5
pop edi
xchg ecx, edx
shl esi, 0xf
add esi, ebx
inc edx
jmp 0x477482
call edi
and esi, ecx
add ebx, edx
sub ecx, esi
and ebx, 0x85dfd225
add edx, ecx
and ecx, ebx
jmp 0x476046
call edi
xchg ebx, ecx
shr ebx, 0x1b
bswap edx
xor ebx, ecx
xor ebx, 0x85ec9bfd
and esi, 0x85ecd943
or esi, 0x85ed172f
bswap ecx
mov edx, ecx
shl ecx, 0x12
inc esi
dec edx
or ebx, esi
or esi, ecx
xor esi, edx
xor ecx, ebx
jmp 0x47528b
push 0x825a970f
add ebx, ecx
add esi, ecx
add ecx, 0x85f78bbf
xchg ebx, edx
add ecx, ebx
xor edx, esi
sub edx, ebx
ror ebx, 0x18
xor ecx, esi
or ecx, ebx
mov ecx, ebx
sub edx, ecx
neg ecx
shl ebx, 0x16
xchg esi, edx
add ebx, edx
jmp 0x478143
pop edi
xor esi, edx
shr ebx, 0xa
xchg ecx, ebx
sub ecx, ebx
and ebx, edx
add esi, ecx
sub esi, ebx
shr ecx, 0x15
add ebx, 0x86025f49
shr esi, 0x1b
jmp 0x47710b
push esp
add ecx, edx
rol ecx, 3
nop
xor edx, ecx
xor ebx, esi
or edx, 0x8608f38f
dec ebx
and edx, ebx
neg ebx
mov esi, 0x8609efd9
sub ebx, 0x860a2f63
inc edx
jmp 0x47822f
call fcn.00478a0c
xchg esi, ebx
and esi, 0x861821b1
shr esi, 0xc
and ebx, edx
mov edx, ebx
xor ebx, 0x861929d7
jmp 0x47722b
push 0x82453ba5
sub esi, edx
xor edx, esi
add ecx, edx
dec esi
or edx, 0x86224929
mov edx, ebx
xchg edx, ecx
sub ecx, ebx
add ebx, ecx
add esi, 0x8623784b
jmp 0x4758cf
push 0x82510605
bswap edx
xor edx, ebx
xchg edx, ecx
and edx, esi
ror ebx, 0x18
and ecx, ebx
xchg ecx, ebx
sub ecx, edx
and esi, ebx
or ecx, edx
xchg edx, ecx
and esi, ebx
and ebx, esi
xchg ebx, esi
dec edx
shr edx, 4
jmp 0x476a22
call fcn.00478a0c
xor edx, esi
and ecx, 0x86395307
xor esi, 0x8639a2c3
mov esi, 0x8639e1db
jmp 0x476d44
pop edi
inc ecx
add ecx, esi
shl ebx, 0x14
xchg esi, edx
mov esi, ebx
xor esi, ebx
sub ecx, ebx
add edx, esi
nop
inc edx
and esi, ecx
shl ebx, 0x1f
or esi, edx
dec ebx
jmp 0x47504e
call edi
xchg edx, esi
inc esi
add ecx, ebx
mov ebx, edx
or esi, ebx
and ecx, edx
add ebx, edx
add ecx, esi
shl ebx, 0xe
shr ebx, 5
jmp 0x4768b3
call edi
add edx, ebx
mov ebx, esi
and edx, 0x8658f27b
or ecx, esi
add ebx, esi
ror esi, 8
not ebx
not esi
jmp 0x476e5b
mov edi, 0x4132136a
not esi
not ebx
xchg edx, ecx
sub ebx, edx
and ecx, edx
mov ecx, ebx
and esi, 0x8660a4fb
add ebx, esi
and ecx, esi
shl esi, 0x18
shl ecx, 0x10
add edx, esi
jmp 0x4751cb
push 0x824c227f
xor ecx, 0x86624343
or esi, 0x866282fb
xchg esi, ecx
sub ebx, esi
add esi, ebx
and esi, ecx
or ebx, 0x8663c68d
and ebx, esi
nop
rol edx, 0x17
jmp 0x4772bf
mov edi, 0x2809144b
inc ebx
xor ecx, esi
sub ecx, ebx
inc ebx
not edx
and ebx, esi
xor esi, 0x866e011b
mov ebx, 0x866e3c27
and ecx, esi
xor ebx, ecx
jmp 0x476983
push 0x825761a7
not edx
dec ebx
add esi, edx
shr ebx, 0x19
sub ecx, 0x86730931
ror edx, 0x16
sub edx, ecx
xor esi, ecx
or ebx, 0x8674032b
add edx, ebx
xchg edx, ecx
neg ecx
jmp 0x477ef5
push 0x824e6f07
xor ecx, ebx
and ecx, esi
xor ecx, 0x868464c3
sub ecx, esi
dec ecx
or edx, 0x868521ab
xor ebx, edx
not ebx
xor edx, esi
mov esi, ecx
and esi, ecx
shr ebx, 0x1c
xchg edx, ecx
or edx, ecx
mov esi, ebx
and esi, ebx
jmp 0x47693c
call fcn.00478a0c
add edx, ebx
mov ebx, esi
sub edx, 0x868b82ed
mov ebx, edx
dec ebx
mov ecx, edx
ror ebx, 0x1f
xor ecx, ebx
xor esi, edx
inc ebx
jmp 0x4775b7
mov edi, 0x2809144b
mov ebx, edx
sub esi, ebx
xchg esi, ecx
neg esi
inc esi
mov edx, ecx
xor esi, 0x86935bc9
shr esi, 0xd
neg edx
xor esi, ebx
jmp 0x4778a7
push 0x8251e34f
add ecx, ebx
mov ecx, ebx
shl esi, 0xd
xchg edx, ebx
or esi, ecx
sub esi, ebx
or ecx, 0x8695e319
and ebx, ecx
add edx, esi
ror esi, 0x18
shl edx, 0x1d
mov edx, 0x86972af3
and esi, edx
or ecx, esi
xor ebx, esi
or ebx, ecx
jmp 0x475e28
pop edi
mov edx, ecx
not esi
and edx, ecx
xor esi, ebx
shr edx, 5
xor edx, esi
and edx, esi
xchg ebx, esi
jmp 0x4789dd
push 0x82668b5d
xchg edx, ebx
sub ecx, 0x86ae6ddb
shl edx, 0x18
xor ecx, esi
shr esi, 0x10
and ebx, ecx
bswap esi
mov ecx, 0x86afde7f
jmp 0x476cf9
call fcn.00478a0c
neg ecx
sub ebx, 0x86b39821
ror ebx, 4
shr ecx, 4
jmp 0x477be3
call fcn.00478a0c
shr ebx, 0xb
xchg esi, ebx
sub ecx, esi
xor edx, esi
mov ebx, esi
rol edx, 0xd
neg esi
xor edx, ebx
xor esi, 0x86b68659
xchg esi, ecx
and esi, ecx
or ebx, 0x86b740f5
xchg edx, ebx
xchg edx, ecx
add esi, edx
mov ebx, 0x86b83865
jmp 0x477b7a
mov edi, 0x2809144b
add ebx, ecx
neg esi
or esi, 0x86bb364f
xor ebx, esi
and ebx, edx
add ebx, esi
and ebx, ecx
xchg ebx, ecx
jmp 0x47621f
mov edi, 0x2809144b
xor esi, 0x86bcc0f1
mov ebx, edx
mov ebx, ecx
xor ebx, esi
xchg ecx, esi
mov ebx, edx
shl ecx, 0x17
add ecx, ebx
mov edx, esi
xchg ecx, esi
or ebx, 0x86bf34c3
xor ecx, ebx
add ecx, esi
and esi, ebx
mov esi, edx
add esi, ebx
jmp 0x4768e1
pop edi
xor ecx, edx
add esi, ecx
shl edx, 0x1c
add esi, ecx
bswap ebx
not edx
add edx, ecx
ror edx, 6
ror ecx, 8
and ebx, edx
mov ebx, ecx
ror edx, 0xc
mov edx, ebx
neg ebx
jmp 0x477424
push 0x40
xchg esi, ebx
sub esi, edx
or esi, ecx
not ecx
xor esi, ebx
inc ebx
or esi, ecx
xchg esi, ecx
xor ebx, esi
xor ebx, edx
add esi, edx
mov esi, ecx
jmp 0x478903
call fcn.00478a0c
xchg ecx, edx
bswap esi
sub ebx, esi
nop
sub edx, ebx
not edx
add ebx, ecx
mov edx, esi
or ecx, 0x86d3d9d9
xor esi, ecx
mov ebx, edx
rol ecx, 0xe
jmp 0x477665
pop edi
xor edx, 0x86d4ee79
shr edx, 0x1e
sub ebx, 0x86d56be7
add ebx, esi
sub edx, esi
neg edx
xchg ebx, esi
mov ecx, 0x86d6b1a1
neg edx
rol esi, 0x18
nop
rol edx, 0xe
jmp 0x4781ba
push 0x824817f7
and ebx, esi
and ebx, edx
xchg esi, ebx
or esi, edx
xor edx, ebx
or ebx, ecx
xor edx, ecx
dec ebx
xchg edx, ebx
or edx, esi
bswap ecx
xchg ecx, esi
xor esi, ecx
mov edx, ebx
jmp 0x4766f4
push 0x8254c663
not esi
rol ebx, 0xb
xor esi, ecx
sub esi, edx
sub ecx, 0x86dc8e17
add ebx, ecx
rol ecx, 0x19
add esi, edx
shl edx, 0x13
shr ebx, 5
xor esi, ecx
dec esi
jmp 0x477cfa
push 0x824d92b9
mov ebx, edx
sub esi, 0x86eb5e6f
mov ecx, ebx
or ebx, edx
jmp 0x4785fc
push 0x82547c35
or ecx, 0x870bd077
xor esi, edx
sub ebx, esi
xchg ebx, ecx
add ebx, edx
xor edx, esi
jmp 0x4782c6
pop edi
or esi, ecx
and esi, ebx
xor ebx, 0x8714e559
and edx, ebx
jmp 0x4768d4
push 0x824ddce9
and ebx, ecx
or edx, 0x87180315
sub ebx, 0x8718437b
dec ebx
or ebx, 0x8718c295
add ecx, ebx
rol ecx, 0x17
mov edx, ecx
mov esi, edx
mov ebx, edx
dec esi
or ebx, 0x871a820f
ror ebx, 0xb
shl edx, 0x18
jmp 0x475ce8
pop edi
rol esi, 2
add ebx, edx
or esi, ebx
add ebx, edx
mov ecx, edx
xor ecx, edx
xor ebx, esi
sub ebx, 0x872ca5a9
mov ecx, 0x872ce00d
inc ebx
inc ebx
add ecx, edx
neg ecx
xchg esi, ecx
jmp 0x476101
push 0x8250bca3
sub edx, 0x872e59b7
rol ecx, 0x19
inc esi
xor esi, ecx
mov esi, ecx
mov edx, 0x872f7e91
dec edx
ror edx, 0x13
add ebx, ecx
neg ecx
add ecx, 0x8730b65f
xchg ebx, esi
xchg ecx, edx
bswap ecx
mov esi, 0x8731a1ff
sub ecx, esi
jmp 0x477948
push 0x825199d7
sub ebx, edx
or ebx, 0x8734642f
mov ebx, esi
neg ebx
or ebx, esi
mov edx, 0x87355b85
sub ebx, 0x87359717
ror ecx, 2
ror ecx, 2
add esi, ebx
jmp 0x477f17
call edi
and esi, ecx
xor ebx, 0x8736d30b
or ecx, 0x87370e19
mov edx, esi
xor edx, ecx
xchg edx, ebx
inc ebx
and esi, ecx
bswap ecx
or esi, 0x8738b50d
jmp 0x47642b
pop edi
add ecx, edx
bswap ebx
add esi, ecx
mov esi, 0x874027ef
xchg ecx, edx
and ecx, edx
add ecx, esi
not ebx
and esi, ecx
xor ebx, ecx
sub ebx, esi
xor edx, 0x87420631
jmp 0x475a16
push 0x8262cff7
not edx
mov ebx, 0x8743aaa5
bswap esi
mov esi, ebx
xor ecx, esi
and edx, ecx
ror ecx, 1
dec esi
xor ecx, 0x874555f7
and edx, 0x8745909f
neg esi
or esi, ebx
and ebx, edx
neg esi
jmp 0x4760e4
push 0x73bfd
xor ebx, edx
mov edx, esi
inc ebx
dec edx
or esi, ecx
and esi, edx
mov ebx, ecx
xor ecx, esi
xor ebx, edx
rol ecx, 2
jmp 0x475592
pop edi
add ecx, esi
add ecx, edx
mov esi, ecx
shl edx, 8
xchg ebx, ecx
mov esi, 0x876151c1
and esi, ecx
inc ebx
jmp 0x478552