Function at 0x401000
Capabilities:
Encrypt data using chaskey
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff1b
jne 0x4010a2
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.advapi32.dll_GetSecurityDescriptorGroup
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff35
jne 0x401126
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xfffffedb
jne 0x4011d2
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
ret
call sub.user32.dll_GetFocus
cmp eax, 0xffffff0d
jne 0x401274
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ntdll.dll_NtOpenDirectoryObject
call sub.ole32.dll_OleQueryCreateFromData
call sub.advapi32.dll_GetSecurityDescriptorGroup
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
call sub.ole32.dll_OleQueryCreateFromData
ret
jmp 0x47505a
xor ecx, edx
jmp 0x475bf8
push 0xae59467d
or edx, edi
not ebx
xchg esi, ebx
xchg esi, edx
xchg esi, edi
bswap edi
not edx
mov edx, ebx
add edx, esi
jmp 0x4762cb
push 0xae5dcaf9
and ebx, edx
not edx
xchg edi, edx
mov edx, ebx
mov edi, edx
add edi, 0xaf430ee5
neg edi
or edx, 0xaf438aba
jmp 0x476244
push 0xae620702
or edi, ebx
or ebx, edx
sub esi, edi
sub edx, 0xaf46f117
xchg edi, esi
add esi, 0xaf476c29
jmp 0x475ea2
pop ecx
add esi, edx
or ebx, edx
xor edi, esi
bswap edx
xchg edi, edx
add ebx, 0xaf4f2b28
and edx, 0xaf4f696b
mov edi, edx
sub edi, ebx
jmp 0x4761e0
mov ecx, 0x2a371b56
not edi
xchg ebx, edi
bswap edi
and edi, 0xaf56044a
xor edx, 0xaf5642d0
shr ebx, 0x11
xor esi, edx
rol edi, 0x1a
shl ebx, 0xb
or edi, esi
shr esi, 8
add esi, edx
xor esi, edi
jmp 0x477bab
pop ecx
add edx, ebx
ror edi, 0x14
xor esi, edi
rol esi, 4
xor edi, esi
shr edx, 8
and ebx, edi
or edi, esi
add esi, 0xaf727ca9
sub edi, edx
sub edi, esi
and edi, edx
jmp 0x47574a
call ecx
not edx
bswap edi
add esi, edi
dec edx
and ebx, 0xaf748957
xor edx, ebx
neg edx
sub ebx, 0xaf754197
bswap edx
jmp 0x477d0d
pop ecx
xor esi, 0xaf861063
and esi, edx
not esi
xor edi, ebx
rol edi, 0x13
jmp 0x476e55
push 0xae515163
add edx, edi
xor edx, edi
xor esi, edx
or edx, ebx
or ebx, edx
add edx, 0xaf933faf
xchg edi, esi
inc ebx
xor esi, edi
inc edx
mov esi, ebx
xchg ebx, edx
sub esi, ebx
or ebx, esi
jmp 0x4767cb
push 0xae56e772
or esi, ebx
xor edx, ebx
xor ebx, edx
xor ebx, edi
add edx, edi
xor ebx, esi
add edx, edi
xor edi, esi
jmp 0x476fde
pop ecx
or edx, ebx
xor edi, ebx
bswap esi
shl edx, 0x18
and esi, ebx
or esi, ebx
xchg ebx, esi
xor edx, 0xafaff1c4
and esi, edx
jmp 0x4767fa
call ecx
bswap esi
xchg esi, edi
ror edx, 0xb
or esi, ebx
bswap edi
or edi, 0xafb1c6e7
nop
add edi, esi
add ebx, edx
xor edi, 0xafb2c758
mov edi, 0xafb3069e
or esi, edi
jmp 0x47809c
mov ecx, 0x2a371b56
sub ebx, edx
mov edi, 0xafbd04db
rol esi, 0x1f
jmp 0x476296
pop ecx
rol edx, 0x18
add edx, ebx
add ebx, edx
mov edi, ebx
inc edi
or edi, edx
add esi, ebx
add edx, 0xafbf5563
mov edx, esi
ror esi, 0x1d
add edi, ebx
and ebx, edx
xor esi, edx
shl edi, 0x1b
jmp 0x4780c2
push 0xae3f3d4d
neg edi
sub edx, edi
mov esi, edi
and edi, ebx
and esi, ebx
not ebx
bswap esi
mov edx, edi
xor ebx, edi
xchg edi, esi
mov edx, edi
xchg edx, ebx
sub edx, ebx
sub edi, 0xafca8af1
mov esi, edx
jmp 0x477c51
call fcn.004769b0
mov edx, edi
not edx
mov ebx, edx
ror edx, 0x10
add esi, edi
dec edi
jmp 0x476709
pop ecx
or edi, edx
or edi, 0xafd1557e
xor esi, edi
shr edi, 7
add ebx, esi
or esi, ebx
sub ebx, edi
or edx, edi
xor edi, 0xafd38dc6
jmp 0x4764a0
pop ecx
rol esi, 0x12
mov edi, ebx
xor edi, esi
or esi, ebx
sub edi, 0xafe95e29
or ebx, edx
mov edx, 0xafea02f4
rol edi, 5
bswap ebx
neg edi
and edx, ebx
neg edi
inc esi
xchg edx, edi
xor edx, 0xafed7505
jmp 0x476db6
pop ecx
inc ebx
and edx, esi
xchg ebx, edi
ror esi, 0xd
bswap esi
xor edi, esi
sub edi, 0xaff9efa1
sub edi, edx
xor esi, edx
xor esi, edi
or edx, 0xaffae185
xor edx, ebx
xor edi, edx
jmp 0x4774c6
push 0xae4532b9
add esi, ebx
add edx, edi
inc edx
mov esi, 0xb01b9587
mov ebx, edi
xor edx, 0xb01c13f9
xor edi, esi
jmp 0x477418
pop ecx
not ebx
mov ebx, esi
and ebx, esi
sub edx, 0xb01d726f
not edi
sub edi, 0xb01ec666
jmp 0x476de5
push 0xae3eeb45
add edi, edx
or esi, ebx
bswap esi
add esi, edi
or ebx, esi
xor esi, 0xb0263228
mov edx, edi
and edi, esi
or edi, 0xb026e913
jmp 0x4757b9
pop ecx
shl esi, 8
xor edx, edi
mov edx, edi
and edi, 0xb029aca0
jmp 0x4759ac
pop ecx
mov esi, ebx
xchg edi, ebx
and edx, edi
shr ebx, 0x17
and ebx, 0xb02ce27d
and edx, 0xb02d1f01
add esi, ebx
shl edi, 0xb
jmp 0x477833
pop ecx
xor ebx, esi
or esi, ebx
xor ebx, 0xb02e7714
not esi
bswap edx
mov esi, ebx
ror edi, 4
dec edi
mov esi, edx
rol ebx, 0x1d
bswap esi
rol esi, 0x1a
jmp 0x475820
push 0xae64aaf0
add ebx, edi
sub esi, edx
inc ebx
xor esi, edx
add esi, ebx
add edi, 0xb03d0f17
add ebx, edx
add edx, ebx
xor ebx, 0xb03dd2c0
jmp 0x4777ef
call ecx
sub esi, 0xb03e2831
sub esi, edx
and edi, 0xb03ea5bb
or esi, 0xb03ef167
sub edx, 0xb03f2fd0
or ebx, edx
bswap edx
xchg ebx, edx
jmp 0x476a35
call ecx
and edi, edx
xchg ebx, edx
add ebx, 0xb046e085
add esi, ebx
xor edi, esi
add edx, 0xb0479912
mov edx, ebx
xchg ebx, esi
jmp 0x477f33
pop ecx
sub edi, esi
sub edx, esi
add edi, esi
mov edx, esi
or edi, edx
and ebx, 0xb07ff568
mov edx, 0xb0803dec
jmp 0x47638d
pop ecx
shr edi, 0xc
and ebx, edi
and edi, esi
xor edi, ebx
or edx, 0xb081b8da
mov ebx, esi
shr edx, 0x1c
and edi, 0xb0829ff3
inc esi
or edi, esi
add esi, edx
add ebx, esi
jmp 0x475528
call ecx
or ebx, edi
sub esi, ebx
mov edi, edx
mov edx, 0xb088370a
nop
xor edi, 0xb088d8bf
jmp 0x4753b0
push 0xae6252c9
and ebx, 0xb08eef42
add edi, 0xb08f2c75
shr edx, 0x1d
add esi, 0xb08fa7cb
and edx, ebx
mov edx, ebx
shl edi, 0x15
dec ebx
add edx, ebx
xor ebx, 0xb0911fbd
or edx, edi
or ebx, edx
jmp 0x475269
pop ecx
and edx, 0xb09403ad
xchg edx, esi
and edi, edx
rol esi, 0xe
xor edi, ebx
and edi, 0xb0953b3e
and edi, ebx
or edi, ebx
xchg edx, esi
and esi, ebx
xchg ebx, edx
jmp 0x4754de
pop ecx
xor edx, esi
sub esi, edi
ror edx, 0xa
xor edi, esi
and edx, edi
xor esi, 0xb09bb777
add esi, edx
or edi, esi
xor esi, 0xb09c7d06
ror esi, 0x14
sub ebx, esi
or ebx, edx
jmp 0x475df2
push 0xae67248e
and edi, 0xb0a62e69
xor ebx, edx
dec ebx
xor esi, edi
or edx, esi
or ebx, esi
add esi, 0xb0a7beb9
dec edi
add edx, 0xb0a84afe
or ebx, esi
jmp fcn.00475937
push 0xae5d8099
shl ebx, 0x1e
shr esi, 0x1d
mov edx, ebx
or esi, edi
or edi, 0xb0afff26
add ebx, edx
ror edx, 0x1a
sub edi, ebx
or edi, 0xb0b10304
add esi, 0xb0b1402f
xchg ebx, edx
or ebx, 0xb0b1bae2
jmp 0x47515b
push 0xae5d350c
and edx, 0xb0b214f8
not edx
xchg edi, esi
or edi, ebx
or edx, esi
and edx, edi
or ebx, edi
add ebx, edx
not esi
sub edi, edx
sub edi, 0xb0b4806d
rol esi, 0x10
jmp 0x476064
call fcn.004769b0
and edi, 0xb0b7a45e
inc edx
or edi, esi
xchg edx, ebx
or esi, 0xb0b89df5
xor edi, ebx
xor edi, ebx
xchg esi, ebx
add esi, edi
and esi, edi
xor ebx, edx
jmp 0x477ef1
pop ecx
mov esi, edi
shr esi, 6
rol esi, 0x10
add edi, ebx
xor edi, 0xb0bb7bb0
mov edx, 0xb0bbb77a
dec esi
rol edx, 0x10
neg edi
jmp 0x476099
call fcn.004769b0
xor esi, ebx
or edx, esi
add edx, edi
mov ebx, edi
or esi, ebx
xchg edi, ebx
add esi, edx
jmp 0x47677b
pop ecx
xor edx, ebx
and edx, esi
add ebx, 0xb0c85259
or edx, ebx
xchg esi, edi
or edx, esi
xor ebx, esi
xchg ebx, esi
xchg edx, ebx
shl edi, 6
jmp 0x4764f7
push 0xae5e15a2
rol esi, 0xc
bswap edi
sub edi, esi
inc edx
mov ebx, edi
not edi
add edi, ebx
xor esi, 0xb0d126d2
xchg esi, edx
dec esi
jmp 0x476637
call fcn.004769b0
neg edx
inc edi
and esi, edx
rol ebx, 0xe
or edx, esi
mov edx, ebx
and ebx, edi
sub esi, ebx
add ebx, esi
jmp 0x477161
push 0xae5991d9
mov ebx, edx
xor edi, esi
and edi, 0xb0d93bab
bswap edi
shl edx, 2
xor edi, 0xb0da086f
xchg edx, edi
xor esi, edx
or edx, edi
jmp 0x475736
push 0xae617239
sub ebx, esi
or edi, 0xb0e880bd
shr edi, 0xd
mov ebx, 0xb0e8fb00
sub edi, esi
or ebx, edi
sub edx, ebx
and ebx, edi
and edx, ebx
neg ebx
xchg edx, ebx
jmp 0x476cd4
mov ecx, 0x2a371b56
or ebx, esi
add edx, esi
and edx, ebx
not esi
add edi, 0xb0f1446a
mov ebx, edi
rol esi, 0x15
shl esi, 7
jmp 0x4771a9
pop ecx
and ebx, edx
mov esi, 0xb0f2a075
shl edx, 6
and ebx, edi
shl edi, 0xf
xor edx, ebx
jmp 0x475659
call ecx
or esi, ebx
and esi, 0xb0fb3c3c
or edi, esi
sub edi, edx
dec esi
and esi, edx
shl esi, 9
or esi, ebx
add edx, edi
xchg esi, edx
jmp 0x477191
push 0xae418c8e
or edx, ebx
or edx, 0xb1039bc8
ror edx, 0x1c
and edi, ebx
add ebx, edx
bswap edx
xor edi, 0xb104d981
or esi, edi
inc esi
dec ebx
sub ebx, edi
xchg esi, edi
xchg esi, edi
add ebx, edx
xchg esi, edi
jmp 0x476bb4
push 0xae4ad167
xchg edi, ebx
xor esi, edx
add edx, 0xb10a48f0
add ebx, esi
rol esi, 5
dec edx
and esi, ebx
xchg edi, edx
or edi, 0xb10c1882
jmp 0x476d0b
pop ecx
and ebx, esi
neg edx
and ebx, esi
neg esi
ror esi, 4
sub edx, esi
not edi
or ebx, edi
xchg edi, esi
xor edi, esi
sub edx, ebx
shl esi, 3
and edx, esi
and edi, edx
not edx
jmp 0x4769ca
call fcn.004769b0
neg esi
mov ebx, edx
or edx, esi
jmp 0x475d45
call fcn.004769b0
and edx, edi
or esi, edx
ror edx, 0x1e
sub ebx, esi
mov ebx, esi
xchg edx, esi
not edx
mov ebx, edx
xor esi, edx
or edx, 0xb11bb868
and edx, esi
xor ebx, edx
and esi, edi
jmp 0x475db8
push 0xae4c8d67
add esi, edi
ror edx, 4
add edx, ebx
add ebx, 0xb1213ea0
or edi, 0xb121c52a
add edi, esi
and esi, ebx
bswap edx
mov edx, esi
xor esi, 0xb123249b
shr edi, 0xc
bswap edx
jmp 0x477308
mov ecx, 0x5027095f
inc esi
shl edx, 0xa
ror ebx, 8
and ebx, edi
and esi, edx
and edx, esi
xchg edx, esi
jmp 0x477743
push esp
sub edx, 0xb125d728
add esi, ebx
neg esi
and esi, edi
jmp 0x477d1d
call fcn.004769b0
mov edx, esi
nop
add esi, 0xb12bc5e6
xchg ebx, edx
bswap edx
bswap esi
or edi, esi
sub edx, 0xb12d10b5
and ebx, edx
xchg edx, ebx
not edi
jmp 0x477b94
call ecx
and edi, edx
ror esi, 2
bswap esi
mov esi, edx
bswap edi
xchg edi, ebx
add edi, esi
inc esi
jmp 0x475673
call ecx
xor esi, edx
and ebx, 0xb13de4c0
add ebx, esi
mov edi, edx
or ebx, edx
shr ebx, 0x10
add ebx, 0xb13f4d34
rol ebx, 0x14
neg ebx
not ebx
and edi, 0xb140589a
jmp 0x475f4c
mov ecx, 0x5027095f
xchg ebx, edi
not edi
rol edx, 0x15
shl edx, 0xc
add edi, edx
mov edi, ebx
dec edx
neg edx
jmp 0x47580a
mov ecx, 0x4132136a
mov ebx, 0xb14706d5
shl edi, 6
or esi, edi
and esi, 0xb147c49b
mov edx, edi
xchg edx, ebx
add edi, 0xb1488daf
xor edi, edx
and esi, ebx
mov edx, esi
jmp 0x476d58
pop ecx
or esi, 0xb14f14c2
sub ebx, edi
xor edx, edi
or ebx, edi
and edx, esi
xor edx, edi
xchg esi, edi
mov edx, 0xb150c5a8
sub edx, esi
mov esi, edi
or edx, edi
and esi, edi
add edx, edi
dec ebx
not edi
nop
jmp 0x477bdb
pop ecx
sub edi, ebx
mov ebx, 0xb153b033
or ebx, edx
and esi, edi
ror edi, 0x1a
add esi, edi
mov esi, 0xb1553da3
add edx, edi
add edx, esi
and ebx, esi
and esi, edi
jmp 0x475ef7
pop ecx
inc edi
sub edx, edi
add edi, 0xb157144f
sub edi, ebx
not edi
mov edi, edx
xchg edx, ebx
jmp 0x47520e
mov ecx, 0x2a371b56
ror esi, 0xd
bswap ebx
or ebx, edi
mov esi, 0xb166057b
or edx, ebx
sub esi, 0xb1669459
jmp 0x47669d
pop ecx
not edx
xchg ebx, esi
sub esi, edi
inc esi
sub esi, ebx
mov edi, esi
jmp 0x475dd7
call fcn.004769b0
mov ebx, edx
inc edi
add edx, ebx
dec edx
and edx, edi
xchg edi, ebx
or edx, edi
or ebx, edi
or ebx, esi
jmp 0x47772a
pop ecx
shr edx, 4
shl ebx, 8
inc ebx
or ebx, edi
and edi, ebx
rol edx, 0xd
sub edi, ebx
or edx, edi
xor ebx, 0xb177fda6
or edi, esi
jmp 0x477a68
push 0xae44a19f
mov edx, ebx
sub edx, 0xb18683c7
and ebx, esi
mov ebx, edx
mov edx, esi
xor esi, 0xb1878434
jmp 0x477f77
mov ecx, 0x2a371b56
add edi, edx
rol edx, 4
xchg esi, edi
or edx, 0xb18de278
not esi
xchg edi, esi
jmp 0x4760e8
push 0xae47d5a1
mov ebx, edi
sub ebx, 0xb18ef1ac
sub esi, edi
add esi, 0xb18f90fc
add edx, 0xb18fce66
sub edi, esi
shl edi, 0x10
ror edi, 2
xchg edx, esi
shl edi, 0x16
mov esi, 0xb19155e4
xor ebx, edx
add esi, edx
xor esi, 0xb1920a92
xor ebx, edi
add edx, ebx
jmp 0x477fa3
push 0xae41d591
xchg edi, edx
neg edx
sub edx, esi
or edi, esi
mov esi, ebx
nop
rol esi, 0x1e
mov edi, ebx
sub ebx, 0xb194d735
add edx, edi
xor ebx, edx
or edx, 0xb1958d73
xor edi, edx
ror ebx, 0xd
add ebx, esi
bswap edx
jmp 0x477915
call ecx
and edi, ebx
xchg edx, esi
not edi
or esi, edx
and edi, edx
and edi, edx
rol ebx, 1
nop
xchg esi, edx
add edi, 0xb19ffa6b
jmp 0x475c30
push 0xae61bc67
or ebx, edx
add ebx, esi
rol edi, 0x15
add esi, 0xb1a818ab
jmp 0x47519e
mov ecx, 0x2a371b56
add esi, 0xb1ab305c
sub esi, edx
or edx, esi
rol esi, 0x1f
add edi, ebx
rol esi, 8
mov ebx, esi
rol esi, 0xe
jmp 0x476d90
pop ecx
sub esi, edx
xchg edi, ebx
not ebx
sub edi, 0xb1ae3f3a
mov ebx, edi
add edx, edi
or edx, esi
xor edx, 0xb1af3f69
mov ebx, edx
jmp 0x475d22
call fcn.004769b0
sub edx, edi
shl esi, 0x1b
shl esi, 0xf
shr ebx, 0x16
mov edi, edx
shr edi, 0x1f
mov ebx, 0xb1b1e4af
xor ebx, edx
add ebx, esi
jmp 0x476650
call fcn.004769b0
xor edx, ebx
add edi, 0xb1b4b7e5
bswap edi
dec edx
or ebx, 0xb1b57371
add edx, ebx
or esi, edi
inc ebx
add edx, esi
xor edi, esi
mov edx, esi
jmp 0x477711
push 0xae58fc53
bswap edi
add edx, ebx
shr esi, 0x18
sub edx, edi
add esi, ebx
shr esi, 2
xchg ebx, edi
xchg esi, edi
and esi, edi
jmp 0x4750e8
pop ecx
ror ebx, 0x1d
ror ebx, 5
xchg ebx, esi
jmp 0x476ed4
push 0xae5bc07b
xchg edx, ebx
xor esi, ebx
or edi, 0xb1c3a047
xchg esi, edx
and edx, ebx
dec edi
sub esi, edx
and esi, edx
and edx, esi
add edx, 0xb1c56f95
shl edx, 6
xchg ebx, esi
sub ebx, 0xb1c66867
ror ebx, 0x1e
mov esi, edi
jmp 0x477d43
push 0xae477e8b
add ebx, edi
rol esi, 0x11
xchg edi, ebx
xor esi, ebx
xchg edx, ebx
and edi, edx
dec ebx
mov esi, ebx
neg ebx
xor edi, 0xb1cf1488
mov edx, edi
jmp 0x476b74
call fcn.004769b0
mov edx, ebx
xchg ebx, edx
sub edi, edx
inc esi
add edx, 0xb1d7b74c
or ebx, 0xb1d7ff33
and esi, edx
or esi, edx
add edi, esi
add ebx, 0xb1d9045d
nop
jmp 0x475690
push 0xae573deb
sub edi, ebx
and ebx, edx
add edi, esi
xchg edi, ebx
xor esi, edx
and edi, ebx
sub edx, 0xb1e4199a
or edx, 0xb1e4588b
and edi, edx
rol esi, 5
not ebx
add ebx, esi
jmp 0x477290
call fcn.004769b0
add ebx, edi
mov esi, edi
xchg edx, esi
or ebx, edi
xor esi, ebx
or esi, 0xb1ec2ec4
xchg esi, edx
mov esi, edx
xor ebx, esi
xor ebx, edx
xor esi, ebx
neg ebx
jmp 0x477e9b
call ecx
or ebx, edx
and ebx, 0xb2006578
add esi, edi
sub ebx, 0xb200e13f
xor edi, edx
mov ebx, 0xb2015e92
and esi, edi
shl edi, 0x15
or ebx, edi
mov edx, ebx
xchg edx, esi
rol edi, 0x14
add edx, esi
sub edx, ebx
jmp 0x4768a2
pop ecx
add edx, edi
and ebx, edi
nop
sub edi, edx
shl edi, 8
mov ebx, edx
xchg ebx, edx
add ebx, edx
not ebx
jmp 0x47762b
call fcn.004769b0
or ebx, edx
mov ebx, esi
jmp 0x476c4f
mov ecx, 0x5027095f
rol ebx, 0x12
inc edx
and esi, ebx
and edx, edi
or esi, edx
or edi, edx
and ebx, edi
jmp 0x476f45
mov ecx, 0x2a371b56
and ebx, edx
dec edi
xor edx, 0xb220875a
sub edx, 0xb220c79a
xor edx, esi
and esi, 0xb221436e
ror ebx, 5
not esi
and edx, esi
add esi, 0xb2224f66
and esi, edx
dec edx
or esi, ebx
add ebx, 0xb22347ef
xchg ebx, esi
jmp 0x47614b
pop ecx
dec edi
or ebx, edi
ror esi, 0x19
mov edi, esi
or edx, esi
shr edx, 0x1e
ror edx, 0x1b
or ebx, edi
not ebx
jmp 0x478050
mov ecx, 0x5027095f
mov edi, 0xb2343d0e
bswap edi
xchg edx, esi
and ebx, edi
xor esi, edi
neg esi
shl esi, 0xc
xor edx, edi
and esi, edi
jmp 0x4765a2
push 0x401400
xor ebx, esi
dec edx
sub edx, 0xb23c4367
rol edx, 0xd
add ebx, edx
xchg edi, esi
mov esi, ebx
xchg edi, edx
not edi
bswap edx
jmp 0x476481
push 0xae66b756
xchg edx, edi
add edi, ebx
mov esi, edx
not edi
xor edi, esi
or ebx, edi
sub edi, ebx
add edx, ebx
add esi, ebx
jmp 0x475ff1
push 0xae556312
shr edx, 1
mov esi, edi
xchg esi, edx
or edx, ebx
add ebx, edi
and ebx, edi
and edi, esi
jmp 0x47697c
call ecx
shr ebx, 0x16
ror edi, 0x1e
xchg ebx, edx
add esi, edx
rol edi, 0x11
or esi, ebx
inc ebx
and edi, ebx
jmp 0x477343
call ecx
neg edx
and edx, esi
xor ebx, edi
or edi, ebx
mov esi, ebx
and edx, edi
xor ebx, edi
xchg edi, esi
or ebx, edx
jmp 0x47610f
call fcn.004769b0
and edx, esi
rol esi, 2
sub edx, edi
neg ebx
mov edx, 0xb273e243
and edi, 0xb27422c5
mov ebx, edx
bswap esi
jmp 0x4753d5
push 0xae64f583
neg edx
nop
mov edx, 0xb27e641b
and edx, esi
and edx, edi
shr edx, 0x14
sub edx, edi
xchg edi, edx
add ebx, edi
xor edx, 0xb2802305
jmp 0x476410
push 0xae44574d
sub esi, edx
bswap edx
xor esi, edx
shl ebx, 0x18
xor esi, 0xb2834dbb
and ebx, esi
or ebx, esi
inc edi
mov esi, ebx
mov edx, 0xb2848f55
and edx, 0xb284ce04
or edx, 0xb2850de5
jmp 0x476b01
pop ecx
xor ebx, esi
inc esi
mov edi, 0xb28976c3
inc ebx
mov edx, esi
neg esi
and edx, esi
xchg ebx, edx
add esi, 0xb28aff7f
or esi, edi
sub edx, edi
dec edx
jmp 0x475c74
mov ecx, 0x5027095f
or esi, ebx
add edx, edi
xchg edi, esi
shl ebx, 2
xor edx, esi
add ebx, 0xb28d564f
rol ebx, 5
xor edx, edi
or esi, ebx
dec ebx
or esi, 0xb28e8f14
or edx, esi
rol edx, 2
jmp 0x4765b2
push 0xae421d52
mov edx, esi
or edx, edi
xor edi, ebx
add edi, 0xb29493c3
and edx, 0xb294d2a6
inc edi
and esi, 0xb2955184
and esi, ebx
jmp 0x476b59
pop ecx
ror ebx, 0x1d
shl edx, 0x1e
mov edx, esi
and ebx, edx
xchg ebx, edi
shr ebx, 0x11
jmp 0x475ba3
call ecx
add edx, esi
xor edi, edx
add ebx, esi
mov ebx, edi
sub edi, edx
and esi, 0xb2c877f1
jmp 0x476430
call fcn.004769b0
inc edx
bswap edi
mov edi, ebx
and esi, edi
or edi, ebx
sub edi, ebx
xchg edi, esi
neg esi
shl esi, 9
add edx, edi
not edx
and esi, ebx
xchg ebx, edx
jmp 0x475e3e
pop ecx
and edx, edi
and edi, ebx
or edx, esi
mov ebx, 0xb2ce0799
sub edi, 0xb2ce4525
xor edx, edi
shr edx, 0x19
mov esi, ebx
inc edx
mov esi, edi
inc esi
add edx, 0xb2d00a81
jmp 0x475c54
push 0xae3f8604
and edx, esi
and edi, 0xb2d553db
or ebx, esi
mov esi, ebx
shr esi, 5
xor edi, esi
sub ebx, esi
not esi
sub esi, edi
not ebx
jmp 0x477d67
push 0x40
shl edi, 0x1d
and edi, 0xb2dddd04
sub edx, 0xb2de2c08
dec edx
add esi, edx
sub edx, ebx
shr ebx, 0x13
jmp 0x477ffc
pop ecx
and edx, ebx
and esi, edi
neg ebx
not ebx
xchg esi, ebx
jmp 0x47656c
push esp
xor ebx, edx
mov edi, esi
and esi, edx
xor esi, 0xb2e4a4e3
add edi, 0xb2e4e3d6
and edi, 0xb2e52210
sub edi, edx
xchg edi, esi
add ebx, esi
sub esi, edi
jmp 0x477cba
mov ecx, 0x5027095f
or edx, 0xb2e66f38
rol edi, 0x1a
not edi
add edx, esi
or edi, esi
add esi, ebx
mov edx, edi
mov esi, 0xb2e81d67
not edi
jmp 0x476a1b
mov ecx, 0x5027095f
ror edx, 0xa
sub ebx, edi
xor edi, ebx
add esi, edi
xchg edx, esi
or ebx, 0xb2ea06d9
jmp 0x47704b
push 0xae487474
xchg edx, edi
or edx, 0xb2eff5ec
shl esi, 0x16
or ebx, edx
sub edx, 0xb2f0c071
and ebx, edx
add edx, 0xb2f13bea
and esi, edx
sub edx, esi
jmp 0x4778b3
call ecx
xchg edi, ebx
or edi, edx
add edx, ebx
inc edx
xchg edx, ebx
or edx, ebx
ror edi, 0xf
add edx, 0xb3005952
jmp 0x477891
call ecx
or ebx, edx
and esi, edx
xchg edi, ebx
not edx
xor edx, 0xb30667ae
or esi, edi
shl esi, 0xb
shr edi, 0x15
jmp 0x476877
pop ecx
mov esi, edx
sub esi, edi
add edi, esi
not esi
sub ebx, esi
add esi, 0xb30b04a2
xor esi, ebx
and ebx, 0xb30b926b
shl esi, 1
jmp 0x4768c5
push 0xae44e9e0
ror ebx, 0x14
xor edi, edx
xor edi, 0xb30f0479
shl esi, 0x18
sub esi, edx
and edi, 0xb30fd0dd
and edi, 0xb3100e66
and edx, 0xb3104d6d
jmp 0x475b85
push 0xae481ec9
mov edi, edx
or edi, ebx
xor ebx, esi
shr ebx, 6
not edx
shl esi, 0xe
jmp 0x477dc4
push 0x73c5a
mov edx, 0xb315ce67
shr esi, 0x1e
xor esi, edi
xor edx, 0xb316897f
xor edx, edi
mov esi, edi
sub esi, edi
add edi, 0xb3178ec5
add ebx, edi
sub ebx, 0xb3181252
dec ebx
jmp 0x47747d
push 0xae4c44b5
add ebx, esi
mov edi, edx
and edi, ebx
xchg edx, ebx
rol edi, 9
or ebx, edx
inc edi
mov edx, 0xb31df195
rol edx, 0x18
and edx, esi
add esi, edx
xchg edx, edi
and ebx, edi
and ebx, edi
sub ebx, 0xb31fec8b
jmp 0x476607
pop ecx
mov ebx, esi
ror ebx, 0x1c
or esi, edx
mov edx, edi
xchg edx, edi
ror edx, 0xb
xchg edx, esi
mov esi, ebx
xchg ebx, edi
xor esi, ebx
and esi, 0xb324d1a7
sub edx, esi
xor ebx, esi
jmp 0x475907
pop ecx
neg esi
mov ebx, esi
dec edx
xchg ebx, edi
xor ebx, edi
and esi, edi
neg esi
ror esi, 5
add esi, edx
add ebx, edx
mov edi, esi
sub ebx, 0xb3285ddb
jmp 0x476d2c