Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff1e
jne 0x401098
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xfffffef1
jne 0x401144
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffef6
jne 0x4011a5
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffed8
jne 0x40121f
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
call sub.ntdll.dll_NtSetEventBoostPriority
call sub.kernel32.dll_WriteProfileStringW
call sub.kernel32.dll_WriteProfileStringW
ret
jmp 0x4812e2
and edi, ecx
dec ecx
ror ecx, 0x1d
xor edi, esi
sub edi, ecx
add edx, esi
and edx, ecx
jmp 0x483f43
call fcn.00481693
mov edx, ecx
dec edx
bswap esi
xchg edi, edx
or ecx, esi
mov esi, edi
sub edx, 0x9af3226b
sub edx, ecx
shr edi, 3
mov edi, esi
add edx, 0x9b073e01
bswap ecx
mov edi, esi
or esi, edx
jmp 0x481933
call ebx
xor ecx, edi
ror edx, 0xa
xchg esi, edi
xchg ecx, edi
sub edx, edi
and ecx, edi
not edi
jmp 0x483d91
push 0x91dd1136
sub edx, 0x9c0e41e5
mov edx, 0x9c109497
jmp 0x48397a
push 0x910c1711
xor ecx, edi
mov esi, edx
rol esi, 0x1e
mov ecx, edx
or edi, esi
add ecx, 0x9c1dccc6
bswap esi
xchg esi, edi
sub esi, edi
jmp 0x4843d3
push 0x911a1d92
not edx
mov ecx, esi
rol edi, 0x12
jmp 0x484701
push 0x911d17d6
or edx, ecx
shr edx, 0x1b
sub edx, esi
neg esi
and ecx, esi
bswap ecx
and edx, 0x9c3b4e96
ror edx, 2
or esi, edx
jmp 0x482852
mov ebx, 0x40495727
xor edi, ecx
shr ecx, 0x18
not edi
sub ecx, edx
sub ecx, edx
sub edi, 0x9d051e1f
inc ecx
add esi, edi
or ecx, edi
and esi, ecx
add edi, esi
xchg ecx, edx
xor esi, 0x9d140a5e
or edx, ecx
jmp 0x4826ed
pop ebx
add esi, edi
xchg ecx, edx
xchg esi, ecx
mov edx, 0x9d4aa4cf
mov edi, ecx
inc esi
jmp 0x4827ba
push 0x91f1f1c0
and edx, 0x9f30f853
sub edx, 0x9f335326
mov edi, 0x9f3573df
xor ecx, edx
add edx, esi
sub edi, esi
jmp 0x48267c
call ebx
neg ecx
sub ecx, esi
xor esi, edx
nop
add edi, 0x9f5d4446
and ecx, esi
xchg esi, ecx
shl edx, 0xf
sub esi, 0x9f65a0d3
jmp 0x48318b
pop ebx
bswap esi
shl edi, 0x11
add edx, 0x9f6c610a
mov esi, edx
sub esi, ecx
jmp 0x48379c
push 0x91600813
mov esi, edx
xor esi, 0x9ffe6953
xchg edi, ecx
or ecx, edx
xor esi, ecx
inc esi
shl edi, 1
mov ecx, 0xa00b54a1
sub edx, ecx
or edx, edi
jmp 0x483d53
pop ebx
mov edi, edx
rol edi, 0x13
bswap ecx
mov edi, ecx
xor edi, 0xa036414b
add edi, ecx
mov esi, 0xa043f579
jmp 0x4846af
mov ebx, 0x40495727
sub edi, esi
and edx, edi
and edi, edx
mov ecx, 0xa0a2d7d6
xor ecx, edi
neg ecx
sub edx, ecx
xor esi, edx
add edx, edi
xor ecx, edx
jmp 0x4828c0
push 0x91308ce2
add ecx, 0xa0c57a97
add esi, ecx
bswap edx
sub esi, ecx
add edi, esi
or ecx, edx
jmp 0x481da3
mov ebx, 0x73716341
xchg ecx, edx
shl edi, 8
and edx, esi
and edi, 0xa1021ae6
not esi
xor edx, ecx
sub edi, ecx
or edi, 0xa10ab41b
shl ecx, 8
mov edi, 0xa1136a13
or esi, edi
jmp 0x482c8f
pop ebx
shl edi, 0xe
or edi, edx
or edi, 0xa131f432
xchg esi, edi
shr edx, 0x14
sub edi, edx
xor ecx, edi
sub edi, 0xa13d4889
and edx, esi
xor esi, ecx
jmp 0x48247c
call ebx
xchg ecx, esi
mov edx, esi
neg esi
shl edi, 2
and edx, edi
shl ecx, 0x1a
mov ecx, edi
sub ecx, 0xa17b0702
or edi, edx
sub edx, edi
sub ecx, esi
jmp 0x4845dd
push esp
shl ecx, 0xa
sub edi, esi
xor edx, esi
mov edx, edi
xchg edi, ecx
or ecx, edi
xor edi, 0xa19c3f32
mov esi, ecx
add edx, esi
shr ecx, 0xb
or esi, edx
jmp 0x482ddb
push 0x91c36195
shr edx, 1
sub edx, esi
mov edi, 0xa1f1782f
xchg ecx, edx
jmp 0x483599
push 0x91320874
xchg edx, ecx
rol edi, 0x15
sub ecx, edi
and ecx, esi
or edi, edx
xchg ecx, esi
or edi, edx
jmp 0x48373e
pop ebx
shr ecx, 0xf
or edx, 0xa2a8b1ca
add ecx, 0xa2aaa153
add ecx, edi
add esi, edi
shl esi, 0x18
sub ecx, esi
xchg ecx, esi
or ecx, esi
jmp 0x482075
push 0x91ade467
xchg esi, edi
inc edx
xor esi, ecx
xchg esi, ecx
or ecx, edx
xchg edx, esi
jmp 0x48204e
push 0x91ac6004
add ecx, 0xa394919b
sub edx, 0xa396b85c
xchg edi, esi
and esi, ecx
and edi, 0xa39f9f82
bswap esi
shl esi, 7
xchg ecx, edx
xchg edx, esi
shl esi, 0x10
and ecx, edi
jmp 0x481e98
pop ebx
nop
nop
or edx, 0xa3e360cb
add esi, 0xa3e5ac0a
jmp 0x482a1f
push 0x915967da
xchg ecx, edi
mov edx, esi
xor edi, edx
or edi, edx
mov edi, edx
and edi, edx
add ecx, edi
xchg esi, edi
neg ecx
mov ecx, 0xa46495f6
ror edi, 0xc
jmp 0x483a92
push 0x91af6446
sub esi, ecx
or edi, 0xa46b5429
or ecx, edx
bswap ecx
sub esi, edi
and edx, edi
sub ecx, edi
mov esi, ecx
mov ecx, 0xa47b2f10
and esi, ecx
mov edi, ecx
jmp 0x481665
pop ebx
sub esi, ecx
shl ecx, 0x1b
mov edx, edi
bswap edx
and edi, ecx
ror edi, 0xa
mov ecx, edi
shl esi, 0xb
and esi, 0xa4943332
xchg edx, esi
xchg esi, ecx
not ecx
jmp 0x483334
pop ebx
mov edi, edx
ror edi, 0x12
xor edx, 0xa4a3672b
xchg edx, ecx
or edx, edi
mov edx, 0xa4a9c51a
add edx, edi
shl edi, 0x10
and edx, ecx
and ecx, edi
jmp 0x483f0f
mov ebx, 0x73716341
xchg edx, ecx
shr edi, 0x15
and esi, edx
dec edx
xchg ecx, esi
xor edi, ecx
and esi, ecx
or esi, 0xa4c4752f
shr esi, 9
jmp 0x483e32
mov ebx, 0x73716341
neg esi
or edx, 0xa4ead31a
sub esi, edi
mov edi, ecx
xchg ecx, edi
rol edi, 0x1f
or ecx, 0xa4f5aa84
not edi
xor esi, 0xa4fa3339
sub ecx, edx
add ecx, edi
jmp 0x48134d
pop ebx
xchg ecx, esi
and edx, 0xa5030d85
add edi, 0xa50541a1
rol edx, 0xa
shl edi, 7
not edx
sub edx, edi
or esi, edi
mov esi, edx
xor edx, esi
mov edi, ecx
add edx, edi
jmp 0x481dbc
push 0x9141c6dc
xor edi, edx
dec edi
sub esi, edi
xor edx, ecx
xor esi, ecx
shr edi, 0x1e
mov edx, edi
and edx, edi
inc ecx
or ecx, 0xa54588c7
sub edi, ecx
jmp 0x482ac8
pop ebx
mov ecx, esi
add esi, ecx
mov esi, ecx
xor ecx, edx
inc ecx
xor edx, 0xa57d440e
mov edi, ecx
add esi, ecx
and ecx, edx
xor esi, edi
sub ecx, edi
jmp 0x481b3e
pop ebx
xchg ecx, edi
and esi, edx
mov esi, 0xa5c34fbf
or ecx, esi
jmp 0x4814d7
push 0x9177af1f
add ecx, 0xa65e9c76
rol edi, 0xd
bswap ecx
mov ecx, edx
jmp 0x48375d
pop ebx
bswap ecx
xor esi, ecx
and edi, 0xa68561cb
not edx
or ecx, edx
neg edx
jmp 0x4843f8
pop ebx
not esi
xchg ecx, edi
sub ecx, edx
rol edi, 0x14
xor esi, edi
xchg edx, esi
neg edi
jmp 0x48311e
push 0x401400
xor edi, esi
sub esi, edx
xchg esi, edx
sub esi, edi
xor edi, ecx
xchg edi, edx
or ecx, edx
sub edi, esi
mov edx, 0xa6bbba38
jmp 0x481c4a
push 0x90f412c0
xor esi, 0xa6be33f6
mov ecx, 0xa6c05255
add edx, ecx
not esi
and esi, edx
and edi, ecx
mov edx, edi
and edx, edi
and ecx, edi
xchg ecx, esi
xchg ecx, edx
jmp 0x484197
pop ebx
rol edi, 0x10
rol edx, 0xf
or ecx, 0xa6daa77f
mov esi, ecx
xor esi, edx
sub edi, ecx
or edi, 0xa6e317a9
or edx, 0xa6e7269e
mov esi, ecx
jmp 0x482621
pop ebx
add esi, edx
and edx, 0xa7797853
or edi, 0xa77bcc05
xchg esi, edx
add edx, ecx
xchg ecx, edi
jmp 0x48215c
mov ebx, 0x40495727
inc ecx
add edi, 0xa7c51426
xor edi, 0xa7c73163
and edi, edx
inc esi
xor edi, edx
mov esi, 0xa7d24e8a
or ecx, 0xa7d4981b
shl ecx, 5
bswap ecx
or ecx, esi
mov esi, edi
not edx
shl edi, 0xb
inc edx
jmp 0x4827fb
pop ebx
xor edi, esi
xor ecx, esi
sub edx, 0xa82d3abe
sub edi, 0xa82f6933
and edx, 0xa8319bbf
add edi, esi
ror esi, 1
inc edx
sub edx, ecx
xchg esi, edx
ror esi, 0x16
rol esi, 0x1a
shl esi, 0x19
and ecx, 0xa845f29f
shl edx, 6
jmp 0x482e8b
pop ebx
add edx, 0xa878dc2c
xchg edi, edx
mov esi, edi
or esi, 0xa87f5866
shl esi, 0x13
xchg edi, esi
sub edi, 0xa8862921
or ecx, edi
rol edi, 0xb
not edx
or esi, edi
xchg edx, edi
jmp 0x48415e
mov ebx, 0x73716341
or ecx, 0xa8a9ea7a
and edi, 0xa8ac3566
neg ecx
or esi, 0xa8b097f0
add ecx, 0xa8b2c737
not edx
or esi, 0xa8b7224b
mov esi, ecx
add ecx, esi
and ecx, esi
rol ecx, 0xc
and ecx, edx
bswap edx
xchg esi, edx
rol ecx, 0x18
jmp 0x4844a6
call fcn.00481693
not esi
dec esi
add ecx, esi
add esi, edx
ror esi, 1
xor esi, edi
sub edx, ecx
xchg ecx, esi
xor ecx, 0xa8f87794
mov edi, esi
mov ecx, esi
jmp 0x4842c2
call ebx
add esi, 0xa9534bbf
shr edi, 0xb
mov edi, 0xa957b79f
add ecx, esi
sub edi, esi
and esi, ecx
mov esi, ecx
neg edx
jmp 0x483031
pop ebx
and ecx, 0xa965486e
inc esi
and edi, edx
add ecx, edi
sub ecx, 0xa974058e
sub edi, ecx
jmp 0x4840e3
call fcn.00481693
neg ecx
sub edx, edi
add esi, edi
neg esi
or ecx, 0xa997af94
xor edi, esi
and edi, 0xa9a2cd55
add edx, ecx
or ecx, 0xa9a735c6
add esi, edi
add esi, edi
add edx, ecx
or esi, edi
and edx, edi
jmp 0x4836ad
mov ebx, 0x40495727
xchg ecx, edi
add esi, 0xa9d197b6
inc ecx
and edi, edx
ror edx, 0x15
bswap edx
inc esi
or esi, edx
xchg ecx, edi
xchg edx, esi
jmp 0x484312
call ebx
neg edx
or ecx, edx
neg ecx
add edi, 0xa9ec32ad
or esi, edi
xor esi, ecx
sub edx, 0xa9f29a39
xor esi, edx
mov edi, 0xa9f71bf9
add esi, 0xa9f9387f
add edx, ecx
xchg esi, ecx
jmp 0x4832f5
call fcn.00481693
mov ecx, esi
bswap ecx
xor edi, 0xaa2098ce
or ecx, 0xaa22d210
neg ecx
shr edx, 0xe
sub edx, ecx
or edi, ecx
shl ecx, 0x13
inc edx
jmp 0x483e4c
call ebx
neg edi
or esi, edi
and ecx, edi
mov edi, esi
and esi, ecx
ror edi, 0x1e
mov ecx, edi
add esi, edx
xor ecx, edi
mov edi, esi
xchg ecx, edi
jmp 0x484651
mov ebx, 0x4132136a
sub ecx, 0xabecca71
and ecx, edi
mov edi, esi
rol edi, 8
not ecx
xchg esi, edi
rol edi, 0xf
xor edx, ecx
xchg esi, edi
xor esi, 0xac69346b
jmp 0x4844f3
push 0x919e40db
xchg edi, ecx
xor edi, ecx
and edi, 0xad6c2d3f
dec ecx
xchg esi, edx
and edi, 0xad731958
neg edx
or ecx, edx
sub edx, ecx
neg edi
dec esi
jmp 0x481b96
push 0x91434a82
dec ecx
neg edx
xchg ecx, edx
bswap ecx
rol ecx, 8
or edx, edi
add ecx, esi
mov esi, ecx
jmp 0x483c43
push 0x9149c584
ror edx, 0xd
and edx, edi
or edx, esi
mov esi, 0xadd145d7
add esi, edx
mov ecx, edx
dec edx
or edx, esi
sub esi, edx
jmp 0x482107
pop ebx
rol edi, 0xb
xchg edx, edi
xchg esi, edi
add esi, edi
xor edx, ecx
shr ecx, 0x17
and edi, ecx
xor esi, edx
shl edx, 0x11
xor edx, ecx
or ecx, 0xae8e8930
xor edi, 0xae91c6e2
jmp 0x4835e8
call fcn.00481693
xor edi, 0xaf49db27
or ecx, esi
add edx, ecx
add esi, ecx
mov edx, ecx
and edi, 0xaf54aea5
or ecx, esi
not ecx
or edi, 0xaf5b2808
mov edx, esi
add ecx, 0xaf5f7507
or esi, 0xaf62447e
jmp 0x482a01
push 0x91728b52
or edx, 0xaf65919e
rol ecx, 2
or edi, edx
add edi, esi
sub edi, ecx
xchg edi, ecx
and edi, ecx
and edx, esi
add ecx, esi
and edx, 0xaf8c5dea
sub edx, ecx
dec edx
bswap ecx
mov ecx, esi
jmp 0x4822e9
pop ebx
xor ecx, 0xb01d8cfe
bswap edx
shl ecx, 0x10
bswap edi
and esi, 0xb081cf27
shl edx, 0x10
add esi, 0xb086263b
sub ecx, edx
xor edx, ecx
or esi, ecx
not esi
mov edx, ecx
xor edx, ecx
xor edx, 0xb09aede6
sub edi, edx
jmp 0x48239f
push 0x40
mov esi, ecx
sub esi, 0xb0da3df3
xchg edx, esi
xchg esi, edi
sub edx, 0xb0ec3dda
and esi, edx
mov edi, esi
add edx, edi
add edi, 0xb0fa327f
jmp 0x483415
mov ebx, 0x73716341
and esi, edx
and esi, 0xb1179087
neg edi
xchg esi, edx
sub edi, 0xb11dfef0
inc esi
mov edi, esi
xchg ecx, edi
mov edx, esi
mov edx, ecx
add edi, esi
rol edi, 3
xchg ecx, edi
add ecx, edi
jmp 0x483e14
pop ebx
sub edx, 0xb18447fa
or ecx, esi
not edi
xor edx, 0xb18a8313
or edi, 0xb18ca40d
shl edx, 0x1b
xor edx, edi
sub edi, 0xb19504e5
xchg ecx, edi
jmp fcn.004823d9
mov ebx, 0x40495727
xor edx, edi
and edi, ecx
bswap edx
xor ecx, 0xb3209d42
jmp 0x4838ee
pop ebx
add edx, esi
inc ecx
xor edi, edx
mov esi, edx
xor ecx, edi
xor edi, edx
sub edi, esi
or edx, esi
neg edx
jmp 0x482337
mov ebx, 0x73716341
xor ecx, 0xb3c7e710
and edx, ecx
or edx, edi
neg esi
add edx, 0xb3df066c
shr edx, 0x1b
mov ecx, edx
jmp 0x4838a1
call ebx
and edi, edx
dec edx
add esi, ecx
not esi
xchg edx, edi
xor esi, edi
add edx, 0xb40c6346
shr ecx, 0x1b
sub edx, edi
xor edi, esi
sub edx, 0xb414e23b
jmp 0x482bab
push 0x9118a6ff
xor edi, 0xb48837bd
not edi
or edx, 0xb48d138a
neg edx
shr ecx, 0x19
xchg edi, edx
ror esi, 0x15
and edi, ecx
and ecx, edi
xor esi, 0xb4b3a282
or ecx, edi
jmp 0x48150d
pop ebx
shr edx, 0x10
sub edi, ecx
add edi, esi
xchg esi, edi
sub esi, ecx
add ecx, edi
mov edx, esi
add edi, edx
sub ecx, esi
neg edx
sub ecx, edi
jmp 0x481a51
pop ebx
or esi, ecx
mov ecx, 0xb7bb1653
and ecx, edi
sub ecx, edx
sub ecx, edx
add esi, edx
or esi, ecx
sub ecx, 0xb7c803c5
rol edi, 1
jmp 0x481be9
pop ebx
mov ecx, esi
mov edi, esi
xor esi, edx
sub esi, edi
sub esi, edx
shl edx, 0xf
add edi, 0xb7ed6b3a
xchg ecx, esi
shr esi, 0x1d
xchg ecx, esi
add edi, ecx
sub esi, ecx
jmp 0x481ce5
push 0x7fee2
sub esi, edi
sub esi, 0xba556dd3
mov edi, edx
xor ecx, edx
rol ecx, 7
xor edx, ecx
xor edi, edx
or ecx, edx
or esi, edi
or esi, edi
mov ecx, esi
xor edi, ecx
rol esi, 0x18
jmp 0x482359
pop ebx
xchg ecx, edi
dec ecx
and ecx, esi
and esi, edx
or esi, edi
mov ecx, 0xbb3da20d
and edx, 0xbb403544
xchg ecx, edi
xchg edi, esi
jmp 0x484389
push 0x919cc19d
not ecx
add edi, ecx
xchg ecx, edi
xor ecx, edi
xchg esi, edx
add ecx, 0xbb529a44
or edx, esi
ror edi, 7
jmp 0x482a7b
push 0x91c4e6f7
or ecx, 0xbb650780
xchg ecx, edi
sub edx, ecx
sub ecx, esi
or esi, edx
sub ecx, 0xbb70a6ce
and edi, ecx
xchg ecx, esi
jmp 0x4824fa
pop ebx
add ecx, edi
rol ecx, 0x11
xor edx, ecx
mov esi, edi
dec edi
ror edi, 0x15
xchg esi, edx
jmp 0x481f85
call ebx
add ecx, edi
xor edi, ecx
sub esi, edx
and edx, esi
sub edi, 0xbc480742
and edx, 0xbc4a3e1a
neg ecx
add esi, ecx
xor edx, ecx
and esi, edx
dec edx
jmp 0x4816de
push 0x9133847e
or esi, 0xbcc85706
mov edi, esi
add edi, esi
xchg esi, ecx
add edi, esi
sub edx, esi
rol ecx, 9
and esi, edi
jmp 0x482ff6
mov ebx, 0x40495727
bswap edi
and esi, edx
rol edx, 8
or edx, ecx
sub edi, edx
ror ecx, 6
jmp 0x483c28
push 0x91eee52a
or edi, esi
xor ecx, 0xbd293df5
mov edi, ecx
add edx, 0xbd2d8829
or edx, 0xbd2fad1b
shl edx, 0xc
sub ecx, edi
mov edi, edx
jmp 0x483c67
pop ebx
xchg esi, edi
or edx, esi
and edx, ecx
or ecx, edx
xor edi, ecx
inc ecx
and ecx, edi
inc esi
xchg edx, edi
jmp 0x482321
call fcn.00481693
and esi, edx
not esi
add ecx, esi
dec edx
or edi, edx
mov edx, 0xc1cd1552
mov edx, ecx
shl edx, 0x15
or edi, edx
jmp 0x483de2
call fcn.00481693
mov ecx, esi
bswap esi
add edi, ecx
bswap esi
sub esi, edi
xor ecx, edx
sub esi, edi
sub edx, edi
and esi, ecx
shl esi, 0x13
dec edi
sub ecx, edx
nop
or esi, edx
jmp 0x482873
call ebx
sub esi, ecx
mov ecx, 0xc209b3d5
xor esi, 0xc20bddc4
mov edi, 0xc20e0bb6
or ecx, 0xc21058cc
mov edx, edi
xchg esi, edx
mov edx, esi
and esi, edx
sub esi, ecx
not edi
xchg ecx, edx
jmp 0x483bdb
push 0x91de9800
or edx, esi
or esi, 0xc248791d
add edx, edi
bswap edi
nop
inc ecx
not edi
and edi, edx
inc edx
ror edx, 7
sub ecx, edi
xor esi, 0xc25ebc37
and edi, edx
ror ecx, 0xd
neg ecx
mov edi, ecx
jmp 0x4820bd
pop ebx
rol edx, 6
xor ecx, edx
xor edi, edx
xor esi, edi
mov ecx, edi
add esi, 0xc297eaa2
mov esi, edi
or edi, 0xc29c2cc8
rol edx, 3
and esi, edi
jmp 0x483da4
call fcn.00481693
add esi, edi
mov esi, 0xc2f50076
xor edx, edi
sub edx, ecx
xor esi, 0xc2fbae9a
bswap edx
jmp 0x48279b
push 0x915ae596
neg ecx
and edx, 0xc3029e08
xchg esi, edi
xchg ecx, edi
xor esi, edi
shl edi, 0x19
or edx, ecx
bswap ecx
xchg ecx, esi
bswap edi
add ecx, esi
add esi, edx
or ecx, 0xc31b9796
jmp 0x481a0f
pop ebx
sub esi, ecx
xchg edx, ecx
sub ecx, edi
or edi, edx
inc edx
mov edx, esi
xchg ecx, edi
mov ecx, edx
or esi, ecx
and edx, 0xc8d6752b
sub esi, edx
not edi
add ecx, 0xc8dd9989
mov edi, edx
and edi, 0xc8e2d76b
jmp 0x481954
call fcn.00481693
and edx, esi
and esi, 0xc8fc5e8c
xor edx, edi
xchg edx, esi
mov esi, 0xc902d5d2
jmp 0x4830c2
push 0x91484c9c
xchg esi, edi
xchg esi, ecx
sub esi, 0xc909b463
xor ecx, esi
bswap edx
and edx, 0xc910448b
and edi, esi
add edi, edx
add edx, ecx
jmp 0x482b08
push 0x91f06f77
and esi, 0xc919c2f0
and ecx, esi
sub edx, ecx
ror ecx, 0x17
or ecx, edi
add ecx, edi
not esi
and edi, ecx
rol ecx, 0xa
shl ecx, 0x1b
jmp 0x4818f3
pop ebx
xor esi, ecx
sub ecx, edx
shr edx, 0x1d
or edi, edx
xor edi, ecx
mov edi, ecx
jmp 0x48202a
pop ebx
xchg edx, edi
shl ecx, 2
mov ecx, esi
mov esi, 0xc9bd153a
xor edi, ecx
or esi, 0xc9c10e7f
neg ecx
sub esi, ecx
neg esi
add esi, ecx
shl ecx, 0x12
mov ecx, esi
jmp 0x482d65
push 0x916184c6
and ecx, edx
xchg edx, esi
xor esi, ecx
not ecx
sub ecx, edx
shl ecx, 0x14
xchg edi, esi
mov esi, ecx
or ecx, edi
not ecx
or edi, edx
jmp 0x482e2b
pop ebx
not edx
xchg edi, ecx
mov ecx, edx
dec edx
xor esi, ecx
or ecx, edx
mov edi, esi
jmp 0x4839db
pop ebx
neg edi
mov edx, 0xca126bc7
or ecx, edi
shr edx, 4
xor esi, ecx
shr edx, 0x14
and esi, edi
xchg ecx, esi
bswap edi
jmp 0x4821a0
call ebx
xor esi, 0xca3f905a
add esi, ecx
xchg esi, edx
and edi, 0xca45cca2
or edx, esi
xor ecx, esi
and ecx, edx
add edi, 0xca4e20fc
xchg esi, ecx
add esi, 0xca5215dd
neg esi
add esi, edi
inc ecx
not esi
jmp 0x4837d5
call fcn.00481693
not esi
mov edi, 0xca5eb68f
add edi, edx
xchg esi, edx
or esi, edx
rol esi, 2
or edi, esi
xchg ecx, edi
jmp 0x4845fe
call fcn.00481693
mov esi, edx
add esi, edi
add esi, 0xca72eacb
add edx, esi
xor esi, edi
xor edx, esi
jmp 0x483913
call ebx
not edi
or ecx, 0xca7d20e3
sub edx, ecx
and edx, esi
rol esi, 3
ror edi, 0x18
xor esi, edi
mov edi, ecx
xor edx, esi
jmp 0x48220d
push 0x91aae360
or ecx, edx
dec edx
dec esi
neg edi
xchg esi, edx
add edx, esi
and ecx, edi
bswap edi
inc esi
jmp 0x481f0f
push 0x90f29944
xchg esi, edx
sub esi, edi
add edi, esi
not edx
bswap edi
xchg esi, ecx
add edx, edi
mov esi, ecx
ror esi, 0xc
or ecx, edx
jmp 0x482378
push 0x91d19946
xchg edx, edi
sub edi, edx
add edi, 0xcc3323b1
and esi, edi
xor edi, edx
inc esi
or esi, edi
not esi
xor esi, 0xcc3f23cc
xchg esi, ecx
xor ecx, esi
jmp 0x481af9
push 0x91710876
inc ecx
or esi, edx
or edi, ecx
mov edx, 0xcc83838b
and ecx, edi
or edi, ecx
not edx
jmp 0x482cc5
push 0x90f7088f
or edi, edx
and edi, 0xcc8d8446
sub edi, 0xcc8f86ee
xor esi, edx
mov ecx, edi
nop
mov edx, edi
jmp 0x4830a1
push 0x90f58e72
or edx, ecx
inc edi
or edi, 0xcc9e6c77
and esi, 0xcca070a3
dec ecx
ror edx, 0xf
bswap edx
xor esi, 0xcca89340
dec ecx
xor edx, edi
jmp 0x484178
call ebx
or edi, edx
sub ecx, 0xcd612f77
mov edi, edx
mov edx, edi
shl ecx, 0xe
or edx, esi
xchg ecx, esi
and ecx, esi
sub edx, edi
xor ecx, edi
and edx, ecx
sub esi, edx
sub esi, ecx
xchg esi, ecx
add edx, esi
jmp 0x482134
call fcn.00481693
mov edx, 0xcdb669cf
xchg edi, ecx
add esi, 0xcdbb654a
or esi, edi
not esi
mov esi, edx
or edx, 0xcdc536f7
mov edi, edx
and edx, 0xcdca4399
add esi, edx
or esi, edi
sub esi, edx
xor edx, esi
xor esi, 0xcdd6a46a
jmp 0x4814c1
push 0x910a99fe
or ecx, 0xcdfe06df
or edi, 0xce0150aa
mov edi, 0xce034a26
inc edx
ror edi, 0x1c
add edi, 0xce094a33
mov esi, edi
add edx, esi
mov esi, edi
sub edi, edx
xor edi, edx
jmp 0x4814ec
mov ebx, 0x73716341
mov edx, ecx
xchg edx, edi
rol esi, 2
xor esi, 0xce2954fa
add edi, 0xce2b4d80
xor edi, esi
xor esi, edi
or ecx, edi
xchg edi, esi
jmp 0x483a75
pop ebx
sub ecx, esi
add edx, ecx
mov edx, ecx
bswap edi
rol ecx, 0x15
and esi, edx
and edi, 0xce40ca7b
jmp 0x483547
call fcn.00481693
xor esi, edi
not edx
dec edx
xchg ecx, edi
add ecx, edi
inc edi
add edi, esi
shl edi, 5
xor ecx, edx
or edi, esi
xchg edi, esi
not edi
add edi, ecx
sub ecx, 0xcead142e
or edx, edi
jmp 0x48462f
call fcn.00481693
mov esi, 0xcec7abfb
sub esi, edx
sub edi, edx
neg edi
dec edx
xchg edx, esi
sub edi, edx
jmp 0x484668
pop ebx
xor edi, esi
xor ecx, edi
sub edi, 0xcf4fb84a
mov edx, 0xcf51b2e3
or esi, 0xcf53da1b
add ecx, edx
or esi, edx
sub ecx, edx
jmp 0x483565
call ebx
xchg edi, esi
xchg edx, ecx
sub esi, edi
or edx, 0xcf61f7f1
xor edx, ecx
add edi, 0xcf65f34d
mov edi, esi
add ecx, 0xcf69fb4b
inc ecx
xor esi, ecx
xor esi, 0xcf70af10
xchg ecx, esi
dec edi
mov ecx, esi
jmp 0x483d2c
call ebx
add esi, ecx
dec edi
xchg edx, ecx
shl edi, 0x15
mov ecx, edi
xchg edi, ecx
bswap edx
add edi, ecx
or ecx, esi
ror edi, 0x1d
not edx
add esi, ecx
or esi, edx
jmp 0x48259c
pop ebx
ror ecx, 0x1b
mov ecx, esi
and ecx, edx
dec ecx
xchg edx, esi
and esi, ecx
mov esi, ecx
inc edi
or esi, edi
jmp 0x48209a
push esp
mov edi, esi
dec esi
neg edx
add edx, edi
and esi, 0xd0abc3b5
shl edx, 0x18
bswap edi
mov edx, ecx
neg edi
xor edi, esi
xor ecx, 0xd0b7a8c6
xor edx, esi
jmp 0x481c81
pop ebx
rol edi, 0xf
and edi, edx
sub esi, edx
and edx, edi
add edi, esi
or edi, ecx
mov edx, 0xd156810a
shr edx, 0x19
mov esi, ecx
ror edi, 3
jmp 0x483ce3
push 0x911b9a8b
mov edx, ecx
and edx, ecx
or edx, edi
jmp 0x48151e