Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api
Lock the desktop

Disassembly:
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xffffff25
jne 0x4010a2
call sub.user32.dll_LockWorkStation
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.user32.dll_LockWorkStation
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.ole32.dll_StringFromGUID2
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.ole32.dll_StringFromGUID2
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
ret
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xffffff2a
jne 0x401117
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.user32.dll_LockWorkStation
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.user32.dll_LockWorkStation
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.user32.dll_LockWorkStation
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff2e
jne 0x401178
call sub.user32.dll_LockWorkStation
call sub.ole32.dll_StringFromGUID2
call sub.user32.dll_LockWorkStation
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.ole32.dll_StringFromGUID2
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.ole32.dll_StringFromGUID2
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffeda
jne 0x401206
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ole32.dll_StringFromGUID2
call sub.user32.dll_LockWorkStation
call sub.ole32.dll_StringFromGUID2
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.ole32.dll_StringFromGUID2
call sub.ole32.dll_StringFromGUID2
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.user32.dll_LockWorkStation
call sub.ole32.dll_StringFromGUID2
call sub.ole32.dll_StringFromGUID2
call sub.ole32.dll_StringFromGUID2
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.user32.dll_LockWorkStation
call sub.ntdll.dll_RtlEnumProcessHeaps
call sub.ntdll.dll_RtlEnumProcessHeaps
ret
jmp 0x475516
mov ecx, edi
jmp 0x476649
call fcn.00476eef
mov edx, ebx
xor esi, ebx
and ecx, edx
ror ebx, 0x10
or ecx, ebx
shr esi, 0x17
xor edx, 0xfd8ece7b
sub edx, ecx
jmp 0x476756
push 0xfcd49673
sub edx, ecx
add ebx, 0xfd92b664
ror ecx, 7
ror ecx, 1
xchg esi, ebx
or edx, 0xfd93c3a3
jmp 0x477f92
push 0xfcd12e01
shr ebx, 4
xor ebx, esi
sub edx, ecx
not ebx
ror ecx, 0x18
xchg edx, ebx
add edx, esi
dec ecx
shl ecx, 0x14
shl esi, 2
xor ebx, ecx
or edx, ebx
jmp 0x4782ea
mov edi, 0x73716341
and edx, 0xfdb22282
xor ebx, ecx
xor esi, ecx
xor ecx, esi
sub ebx, edx
jmp 0x47856d
push 0xfcd8451c
sub ebx, ecx
add ebx, edx
ror esi, 0x15
and esi, ecx
sub ebx, 0xfdb6cca7
sub ecx, 0xfdb70ba8
neg ebx
dec edx
shl ebx, 0x15
rol ebx, 0x1c
rol ebx, 0x19
inc ebx
mov ecx, ebx
jmp 0x4783b0
pop edi
or esi, ecx
sub ecx, ebx
rol ebx, 5
sub edx, 0xfdc03b3c
or esi, ebx
add esi, ebx
mov ecx, esi
xor ecx, esi
and edx, esi
jmp 0x478ef5
push 0xfcc78f45
and ebx, esi
and ebx, ecx
sub ecx, ebx
sub edx, esi
dec esi
xor edx, ecx
neg ecx
ror ebx, 0x1f
and ebx, 0xfdc3bd05
add esi, edx
add ecx, 0xfdc4346a
jmp 0x475cf3
push 0xfcd44e55
xor edx, ecx
ror ecx, 0x10
or ebx, esi
or ebx, edx
or edx, 0xfdc57c62
rol esi, 0xf
xor edx, ecx
sub esi, ecx
and ecx, ebx
dec ebx
rol ebx, 0xe
sub esi, edx
add esi, ecx
or ecx, edx
or esi, ebx
jmp 0x4755ba
push 0xfcc81ebe
xor ebx, 0xfdcb38f9
not edx
bswap edx
add esi, 0xfdcbf2e0
rol ecx, 0x13
xchg ecx, ebx
and edx, ecx
or ebx, edx
and ebx, 0xfdcd7b0b
bswap edx
and esi, edx
shl ebx, 0x10
xchg ebx, ecx
neg ecx
jmp 0x476d56
pop edi
and ecx, edx
or ecx, esi
add edx, ebx
mov ecx, 0xfdcfb369
or edx, ebx
or ebx, ecx
or esi, edx
or esi, ecx
xchg edx, ecx
xor esi, edx
jmp 0x478935
pop edi
mov ebx, edx
xchg esi, ebx
and esi, ebx
add ebx, edx
xor ebx, ecx
sub edx, ecx
sub ecx, edx
ror edx, 6
add esi, ebx
shl edx, 0xf
and ecx, 0xfddcbd33
and esi, 0xfddcfbe5
neg esi
jmp 0x478be6
push 0xfcc009b9
xchg edx, ebx
and ecx, 0xfdeca23e
shr edx, 0x1a
dec edx
mov esi, edx
shr ecx, 0x1d
bswap ecx
xchg ecx, edx
xchg edx, ecx
shl ecx, 0x14
jmp 0x475fd8
push 0xfcc09601
not edx
or ebx, 0xfdfad03a
add ecx, ebx
inc esi
shl esi, 4
rol ebx, 0x16
xor ecx, esi
xchg edx, esi
jmp 0x47851a
pop edi
dec ebx
or ebx, edx
ror ecx, 0x15
add ecx, 0xfe006859
sub ecx, edx
sub esi, ecx
add edx, 0xfe0123fb
and ecx, 0xfe01625f
or ecx, esi
shr ebx, 0xe
add ecx, ebx
add ebx, ecx
jmp 0x47761b
push 0xfce0d9d3
neg ebx
mov edx, ecx
add ecx, ebx
dec edx
and ecx, edx
not edx
sub ebx, 0xfe081ce1
or esi, edx
jmp fcn.004757d6
push 0xfccd4031
add ecx, esi
or esi, ebx
xor ecx, edx
and edx, esi
and ecx, esi
xchg ecx, esi
sub esi, ecx
xor ecx, 0xfe0a5fdb
ror edx, 0xf
and edx, ecx
mov edx, ebx
or edx, 0xfe0b67a9
not ebx
jmp 0x479126
push 0xfcc3a7a2
add esi, edx
xor ecx, edx
mov edx, 0xfe12209b
xchg ebx, edx
or ecx, ebx
or esi, 0xfe12dd30
xchg ecx, edx
xor esi, ebx
sub ecx, ebx
dec edx
rol edx, 0xb
inc esi
jmp 0x47688a
push 0xfcc7d675
sub ebx, esi
mov ecx, ebx
mov ecx, edx
add ebx, edx
mov edx, 0xfe1f2837
or ebx, ecx
sub ebx, 0xfe1fb682
dec ecx
shl esi, 0x12
sub edx, 0xfe207465
mov edx, ebx
xchg esi, ebx
mov esi, ecx
jmp 0x4758ba
pop edi
shr edx, 0xa
not edx
and ebx, esi
and esi, edx
sub edx, ebx
sub ecx, 0xfe302524
jmp 0x476e6b
mov edi, 0x3f4d7907
or ecx, ebx
ror edx, 0x11
shl edx, 0x1e
bswap edx
or ecx, esi
sub ecx, 0xfe36fc0d
dec ebx
or ebx, ecx
sub ecx, esi
inc esi
jmp 0x477be3
pop edi
and ecx, 0xfe3862de
neg edx
mov edx, esi
xchg esi, ecx
xor ebx, ecx
and edx, esi
ror esi, 0x17
jmp 0x475868
call edi
xor edx, esi
and esi, ebx
not ecx
or ebx, esi
neg ebx
ror edx, 0x12
ror esi, 3
and ecx, 0xfe3f64e8
sub ecx, ebx
xchg esi, ecx
add edx, 0xfe401fcb
mov edx, ebx
or ecx, 0xfe409a2e
or edx, ecx
jmp 0x475b4e
pop edi
ror ebx, 0x15
ror edx, 0x1f
shr ebx, 5
add esi, 0xfe41f4b3
and ecx, esi
jmp 0x477e1e
push 0xfcc050c9
xor ebx, 0xfe561bea
mov edx, ecx
bswap ecx
and esi, edx
mov ebx, esi
dec esi
neg edx
and esi, ebx
sub ebx, ecx
jmp 0x475b06
pop edi
bswap ecx
add ecx, ebx
mov ebx, esi
or edx, ecx
xor ebx, edx
jmp 0x476b77
push 0xfcbd3cc7
xchg esi, ecx
and ecx, ebx
inc esi
mov edx, ebx
or ebx, edx
xor edx, esi
xor ecx, esi
and ebx, 0xfe785880
or ecx, 0xfe78952e
bswap ecx
jmp 0x477663
pop edi
add esi, 0xfe81d9f5
mov ebx, ecx
and ecx, ebx
dec ecx
mov ebx, edx
sub ebx, esi
sub esi, ebx
jmp 0x477685
push 0xfcce5242
xchg ebx, esi
sub edx, ebx
add ebx, edx
bswap ebx
add ecx, ebx
add ebx, 0xfea688f2
xor ebx, edx
or ebx, ecx
add ecx, ebx
xor ecx, esi
xor ecx, edx
bswap ecx
jmp 0x476863
push 0xfccb487b
mov edx, ebx
or edx, esi
add ecx, edx
add esi, ebx
jmp 0x475e31
pop edi
add esi, 0xfebe46ad
add edx, ebx
or esi, ecx
and ebx, edx
add edx, esi
mov ebx, esi
inc ebx
nop
xor esi, edx
xor ebx, esi
or ebx, edx
and ebx, 0xfec0ebe2
xor ecx, edx
jmp 0x476f99
pop edi
or ecx, edx
neg ebx
shl edx, 0x18
mov esi, edx
neg ebx
sub ebx, ecx
mov ecx, edx
sub ecx, 0xfec8ba16
jmp 0x4774cb
call edi
mov esi, ebx
mov ebx, esi
and esi, 0xfec9882c
xor esi, ebx
xor ecx, ebx
ror esi, 1
rol esi, 0x1a
and ecx, 0xfecacc36
inc ebx
mov ebx, 0xfecb482a
sub ebx, 0xfecb88e3
rol esi, 0x1b
jmp 0x4773c4
push 0xfcbca406
xchg ecx, esi
xor edx, ecx
xchg esi, ebx
or esi, ebx
add ebx, edx
xchg esi, edx
rol ecx, 0xf
dec edx
neg esi
sub edx, ecx
sub ecx, edx
and ecx, 0xfed23089
jmp 0x477b0f
push 0xfcc7482f
sub ecx, esi
mov ebx, ecx
neg ecx
mov ebx, edx
bswap edx
jmp 0x475840
call edi
xchg ebx, esi
xor ecx, 0xfee51ab2
rol esi, 6
mov ebx, 0xfee5966c
dec edx
rol esi, 0xe
xor ecx, ebx
dec edx
add edx, 0xfee6cef5
jmp 0x478d36
pop edi
or esi, edx
mov esi, ecx
xchg ebx, ecx
mov ebx, ecx
shl ecx, 0x1c
rol ebx, 0xa
or ebx, 0xfee9ae29
mov esi, ecx
jmp 0x477158
mov edi, 0x3f4d7907
bswap edx
or ecx, esi
and edx, esi
and esi, 0xfeedf502
rol ebx, 0x1c
or edx, ecx
xor esi, 0xfeeec15c
or esi, edx
or ebx, esi
jmp 0x477946
push 0xfccdcf19
rol esi, 0xf
neg ebx
and esi, ebx
mov esi, 0xfef06106
add edx, 0xfef0a0bc
dec edx
xor esi, ecx
or ebx, 0xfef15c40
and esi, ecx
jmp 0x47640c
push 0xfcce9bf3
or ecx, ebx
xor esi, 0xfef878ac
inc ebx
mov edx, 0xfef90772
not ebx
add edx, esi
add ebx, edx
and ebx, 0xfef9ff04
and edx, esi
nop
jmp 0x478aaf
push 0xfcc3ed5e
xchg edx, ecx
mov ecx, esi
and esi, edx
mov edx, esi
xchg edx, esi
add esi, ebx
or esi, ecx
xchg esi, ebx
xchg esi, ecx
jmp 0x476947
pop edi
and ecx, ebx
dec ecx
ror esi, 8
sub edx, esi
sub esi, 0xff006fe7
add esi, ebx
sub edx, esi
add edx, esi
ror ebx, 0x19
xor ecx, esi
and esi, 0xff01e373
mov esi, ecx
jmp 0x4782d5
push 0xfcc434eb
or ebx, ecx
rol ebx, 0xb
xchg edx, ecx
ror edx, 9
xor edx, ebx
sub ecx, esi
jmp 0x478241
push 0xfcdbb49d
or ebx, esi
bswap esi
mov ecx, esi
ror ecx, 0x1d
xchg ebx, ecx
jmp 0x47786a
pop edi
shl ebx, 0xb
mov edx, esi
mov ebx, 0xff1ce73f
mov edx, ebx
xor ebx, ecx
jmp 0x475dd2
pop edi
or esi, edx
or ebx, ecx
dec edx
dec edx
xor ebx, 0xff3e4c88
xor ebx, 0xff3e9234
mov esi, ecx
neg edx
xor esi, ebx
and esi, 0xff3fbec0
add ebx, ecx
dec esi
add edx, ebx
jmp 0x475e53
mov edi, 0x3f4d7907
shr ecx, 8
xor ebx, ecx
and ebx, 0xff65de90
or esi, edx
mov ebx, 0xff665dbc
dec ecx
or esi, 0xff66e089
add esi, edx
xchg ebx, ecx
jmp 0x478477
pop edi
and ecx, esi
sub esi, ebx
xor esi, edx
sub esi, edx
xor edx, ecx
sub esi, ebx
xor ecx, 0xff6a78c9
shl ecx, 0x1d
and ebx, ecx
xchg ecx, ebx
jmp 0x4783d9
pop edi
mov esi, 0xff7638d6
xor esi, ebx
sub ebx, edx
shr edx, 0x10
jmp 0x477c52
pop edi
and ecx, ebx
xchg edx, ebx
mov ecx, edx
add ebx, ecx
add ebx, 0xff7adac1
and ebx, esi
sub esi, ecx
xor esi, 0xff7ba859
or ebx, esi
dec esi
add edx, ecx
mov esi, ecx
neg ecx
xchg esi, ecx
jmp 0x478588
pop edi
or ecx, edx
or esi, 0xff91e7f6
add esi, edx
rol ebx, 0xc
add ecx, 0xff92ad06
inc ebx
mov ebx, ecx
sub ebx, 0xff937fc5
add esi, ecx
jmp 0x476fdd
pop edi
xor ecx, edx
shl ecx, 4
add ecx, ebx
xor ebx, edx
or ecx, esi
and edx, esi
nop
add ebx, esi
xchg edx, ecx
jmp 0x47796c
call edi
or esi, edx
bswap ebx
or ebx, esi
shr edx, 0x11
sub esi, edx
jmp 0x47655d
call fcn.00476eef
or edx, 0xffa942cf
sub edx, 0xffa98337
xchg esi, edx
xchg ecx, ebx
xchg ecx, ebx
and esi, ecx
xor edx, esi
and edx, 0xffab748b
jmp 0x479149
mov edi, 0x73716341
shr edx, 0x1a
add ebx, esi
ror edx, 7
or ebx, esi
jmp 0x477aef
push 0xfcc360da
mov esi, edx
and edx, esi
add ebx, esi
and ecx, ebx
and ecx, esi
sub ecx, 0xffb4010f
or esi, 0xffb44237
or edx, 0xffb48348
or esi, 0xffb4d6cf
mov ecx, 0xffb516f8
or ecx, ebx
sub edx, ecx
jmp 0x475c52
push 0xfcd527b7
and ecx, ebx
mov edx, 0xffb8e5a9
xchg ebx, esi
and ecx, esi
or esi, ebx
or ebx, ecx
inc ecx
ror ecx, 0xc
dec edx
rol esi, 0x1f
xchg ebx, esi
add ebx, edx
add edx, esi
or edx, esi
jmp 0x4767d1
call edi
xchg esi, ebx
sub ebx, ecx
add esi, ecx
sub esi, edx
ror edx, 0x1b
shl esi, 0x18
or esi, edx
xchg ecx, edx
jmp 0x477cbe
pop edi
xchg ecx, ebx
sub esi, edx
sub edx, 0xffe569e0
xor edx, esi
mov ecx, ebx
or esi, ecx
or edx, ebx
xchg ecx, ebx
mov ebx, edx
jmp 0x478dd0
mov edi, 0x3f4d7907
or edx, esi
and esi, edx
mov ecx, edx
jmp 0x47819a
pop edi
add ecx, edx
mov edx, 0xfff83154
add edx, esi
xchg ecx, esi
xchg esi, edx
rol esi, 0xe
dec edx
mov ecx, 0xfff9c8b4
and ecx, ebx
mov esi, edx
and ebx, edx
xor ebx, 0xfffac517
jmp 0x47570a
mov edi, 0x73716341
not ebx
and edx, ebx
rol ebx, 4
and ebx, esi
xor edx, ebx
add ecx, 0xf50b5
dec ebx
xor edx, 0xfd271
or ebx, esi
dec edx
jmp 0x479026
pop edi
add edx, ecx
sub ecx, ebx
and esi, ecx
sub edx, esi
ror edx, 9
bswap esi
and esi, 0x1412b2
and edx, 0x1464d4
jmp 0x4768c1
push 0xfcbd8259
and ecx, ebx
xchg ebx, edx
xor edx, 0x17fc15
shr ecx, 0x16
xor ebx, edx
not edx
sub ecx, edx
xor edx, ebx
shr edx, 6
jmp 0x475770
pop edi
sub ebx, esi
sub ecx, 0x1a3391
or ecx, 0x1a74d9
sub edx, ecx
shl ecx, 0xe
bswap ecx
xor esi, ecx
add esi, ecx
xor ecx, edx
nop
xchg ecx, ebx
shl ebx, 0x10
jmp 0x477d3d
mov edi, 0x3f4d7907
shl ebx, 5
xchg ebx, edx
sub ecx, edx
sub esi, ecx
dec ebx
xor ecx, edx
and edx, esi
add edx, esi
sub ecx, edx
rol edx, 0x18
jmp 0x4770c5
push 0xfcdbfddb
and edx, ebx
xchg esi, edx
xor ebx, ecx
not edx
add esi, 0x3fb472
and esi, edx
shr esi, 6
mov esi, 0x4076dc
inc esi
jmp 0x4778cf
call edi
or ebx, ecx
mov ebx, 0x41621f
xchg ecx, ebx
add ecx, edx
and edx, ecx
xchg edx, ecx
xchg esi, ecx
jmp 0x47597d
push 0xfcdc4509
or esi, ebx
mov ecx, ebx
add ebx, edx
rol ecx, 7
xor ecx, esi
and ecx, ebx
xor ecx, ebx
add ecx, ebx
xor edx, ecx
not esi
bswap edx
mov esi, ecx
jmp 0x477fab
call fcn.00476eef
neg edx
xor esi, 0x4f9be4
or ebx, esi
or esi, 0x501bfa
add esi, ebx
xchg edx, ecx
neg edx
sub ebx, 0x512e87
jmp 0x4787f1
pop edi
add ecx, 0x518b55
sub edx, ebx
xor ebx, 0x521f94
inc edx
sub edx, 0x52a4d7
not ecx
add esi, ebx
and edx, esi
jmp 0x4758ee
push 0xfccaedff
xor edx, ecx
inc ebx
add esi, ecx
mov edx, ecx
xor esi, 0x54ba52
mov esi, ecx
xor ebx, edx
xor ecx, 0x558ad9
jmp 0x47654b
call fcn.00476eef
inc ebx
mov edx, 0x73bf0a
shl ecx, 7
ror edx, 0x17
and ecx, esi
mov ebx, edx
and ecx, 0x750e45
jmp 0x475e85
push 0xfcbcf438
mov ecx, ebx
and edx, ebx
xor ecx, esi
mov ecx, 0x762418
mov ecx, esi
sub ebx, edx
and esi, 0x76e164
xor edx, ecx
nop
shl ecx, 3
shr ecx, 0xe
add esi, ebx
sub esi, 0x787691
xor esi, ebx
jmp 0x47617f
call fcn.00476eef
xor ebx, 0x85f827
add edx, 0x86397c
rol ecx, 0x1a
rol edx, 0xb
xchg esi, ebx
jmp 0x477c7a
push 0xfcdb2113
not edx
and ecx, edx
add ecx, esi
dec ebx
xor ebx, esi
mov ecx, esi
shl edx, 2
jmp 0x4784b3
push 0xfcc70058
or ebx, edx
and ebx, 0x8e311d
or edx, esi
inc ebx
or edx, esi
rol edx, 0x17
ror ebx, 6
and ecx, 0x8fc639
rol edx, 0x18
or esi, ecx
jmp 0x47669e
call edi
sub esi, edx
bswap ecx
or ecx, ebx
sub esi, 0x91780c
sub edx, 0x91b901
or esi, ecx
inc ecx
or ecx, esi
xor esi, ebx
mov ecx, esi
bswap ecx
jmp 0x478d1b
pop edi
xor ecx, edx
mov esi, edx
mov edx, esi
add esi, ecx
shr edx, 0x15
dec ecx
sub ebx, edx
jmp 0x4788ef
pop edi
dec edx
mov esi, 0xa0806d
bswap edx
sub ecx, esi
mov esi, ecx
ror edx, 0x16
add esi, ecx
or esi, edx
not ecx
jmp 0x478f1c
pop edi
xor ebx, ecx
or edx, esi
add esi, ecx
jmp 0x478121
push 0xfce08fc1
mov ebx, ecx
neg esi
not ebx
mov edx, ecx
mov ebx, esi
or edx, ecx
sub ecx, esi
add esi, ebx
jmp 0x475bbc
push 0xfcd4df93
and esi, ebx
xchg ecx, ebx
rol esi, 9
xchg esi, ecx
xor esi, ecx
or ecx, edx
not ecx
jmp 0x4771ac
mov edi, 0x3f4d7907
add ecx, esi
and ecx, ebx
shr ecx, 0x1b
bswap edx
xor ecx, ebx
and esi, ebx
or esi, 0xd3b2f5
or esi, ecx
jmp 0x47830c
pop edi
add ecx, 0xde344f
mov ebx, 0xde726a
xor esi, ecx
mov ebx, edx
or edx, 0xdf2a39
xor ecx, edx
not ecx
xchg edx, ebx
ror ebx, 0x17
and esi, 0xe07591
and ecx, 0xe0b352
sub esi, ebx
xchg ecx, esi
sub esi, 0xe16c1c
and esi, edx
jmp 0x476791
pop edi
shr edx, 0xd
sub ebx, esi
jmp 0x47805d
push 0xfcd7fcee
not ebx
sub ebx, esi
xchg ecx, esi
xor ebx, 0xe8f384
add ecx, esi
xchg ecx, esi
rol edx, 2
or edx, esi
xor esi, ecx
ror ebx, 4
shr ebx, 0x13
xor esi, ebx
jmp 0x4757a8
push 0xfcbfc13b
dec edx
mov esi, ecx
add ecx, 0xebc8fd
xor ecx, edx
or edx, 0xec455e
neg ebx
mov edx, 0xecc490
and ecx, ebx
xchg esi, ecx
or ecx, edx
or ecx, 0xedcf61
sub ebx, ecx
xor edx, ebx
or ecx, ebx
sub esi, ebx
xchg edx, ebx
jmp 0x475a5e
call fcn.00476eef
shl ebx, 0x1a
add edx, 0xf45735
add ebx, edx
xchg ecx, esi
and ecx, esi
sub edx, 0xf549cc
add esi, edx
jmp 0x4765f1
pop edi
add ecx, ebx
and edx, 0xfa7c14
add ebx, edx
mov edx, ecx
add ebx, 0xfb4094
ror ecx, 0x1d
ror ecx, 0x12
or ebx, 0xfbfb8b
mov ebx, edx
or ebx, ecx
jmp 0x476a30
pop edi
mov edx, ebx
nop
xchg edx, ebx
xor edx, esi
xchg esi, ecx
sub ebx, esi
shl esi, 0xa
add ebx, ecx
sub esi, ecx
neg esi
shr esi, 8
jmp 0x476e3f
push 0xfcc47bf8
sub esi, ebx
add ebx, edx
xor edx, ebx
inc esi
jmp 0x4775d8
pop edi
and ebx, 0x1024060
sub ebx, edx
or ecx, esi
add ebx, ecx
shr edx, 4
add esi, ebx
rol ebx, 0x12
mov ecx, 0x103df2a
mov edx, ebx
sub edx, ebx
add esi, 0x1049f3f
xor edx, ebx
sub ecx, ebx
xchg edx, esi
add edx, ebx
neg edx
jmp 0x476019
pop edi
rol ebx, 1
xchg ebx, ecx
xchg esi, edx
xchg edx, ecx
mov ebx, edx
sub edx, ecx
and edx, ecx
jmp 0x478e27
push 0xfcd1775d
rol esi, 0x16
sub ecx, 0x10e4a6c
and edx, 0x10e97c5
and edx, ebx
shr ebx, 0x1a
sub ebx, ecx
xchg esi, edx
jmp 0x47873c
call fcn.00476eef
bswap ebx
xchg edx, ebx
or esi, ecx
or ebx, ecx
sub edx, ecx
add ecx, ebx
add esi, ecx
dec ecx
shr edx, 2
rol ebx, 0x16
jmp 0x47723e
push 0xfcd88ea9
sub ecx, ebx
mov esi, ecx
neg edx
mov ecx, edx
neg ecx
mov ebx, 0x11b5710
or esi, 0x11b9341
or ebx, esi
xor ecx, 0x1206d45
not ecx
jmp 0x4770eb
pop edi
add esi, 0x120fe78
add edx, 0x1213b89
inc ecx
shr edx, 5
dec edx
mov ebx, ecx
sub ecx, esi
add edx, 0x122b238
add edx, ebx
and ecx, ebx
xchg ebx, edx
jmp 0x475eb6
call fcn.00476eef
xor ebx, ecx
xchg edx, ebx
rol ebx, 0x15
xchg esi, ebx
xchg edx, ecx
dec edx
bswap ebx
add esi, 0x12dbfe0
and ebx, esi
add esi, 0x12e4516
sub ecx, esi
jmp 0x4770b3
push 0xfcdb6a41
xor ebx, 0x1305b61
or ebx, edx
sub ebx, edx
neg ebx
rol ecx, 0x11
xor ecx, edx
xchg esi, ecx
or ecx, 0x1320d33
sub ecx, edx
dec esi
and esi, edx
add ecx, ebx
sub ebx, ecx
xor edx, esi
and esi, 0x133aba4
jmp 0x476a1b
push 0xfcc0dd8d
xchg ecx, esi
and ebx, ecx
add ecx, esi
xchg ebx, ecx
inc ebx
and ecx, ebx
jmp 0x477474
call fcn.00476eef
inc edx
mov edx, esi
bswap ecx
dec esi
and esi, ebx
xor ebx, edx
dec esi
xor edx, esi
xor edx, ecx
and ebx, edx
jmp 0x478fdc
push 0xfcd76cb8
xchg edx, ecx
sub ebx, 0x1406d4c
mov edx, ebx
sub ecx, esi
add ecx, esi
shl esi, 0x14
and edx, ecx
and ebx, esi
sub esi, ecx
jmp 0x478b29
push 0xfcd1c0c9
xchg ebx, esi
add ecx, esi
mov ecx, 0x15d61e7
dec ecx
sub ebx, esi
and ecx, edx
not ecx
sub esi, ecx
xor edx, ecx
rol edx, 0x10
xor ebx, ecx
jmp 0x4790fe
call edi
xor ecx, edx
and esi, ecx
jmp 0x4781fc
pop edi
xor ebx, 0x17a6d53
not edx
and edx, ecx
xor ecx, edx
and ecx, esi
sub ebx, esi
xor esi, edx
or edx, ecx
or esi, ecx
mov ebx, 0x17c96eb
jmp 0x476229
push 0xfccaa610
ror ecx, 4
add edx, esi
add ecx, ebx
xchg ecx, esi
xchg ebx, esi
jmp 0x47798d
mov edi, 0x3f4d7907
bswap edx
mov ebx, edx
add edx, 0x199a6a9
jmp 0x47557d
push 0xfcd7b415
or ebx, esi
xchg esi, edx
and esi, ebx
or ebx, esi
shl esi, 0x1f
dec ebx
add esi, ebx
sub ecx, edx
or esi, ebx
sub ecx, 0x1a23a19
xor ecx, edx
shl ebx, 0x1c
jmp 0x4780f8
pop edi
bswap ecx
dec ecx
shr esi, 0x14
not ecx
mov edx, 0x1a6f864
not ebx
ror ebx, 0x1f
neg edx
add ecx, esi
add ecx, edx
rol ebx, 4
and ecx, esi
jmp 0x478bc2
pop edi
or esi, edx
xor ecx, esi
xor ecx, edx
add ebx, edx
shr esi, 7
add esi, ecx
mov ecx, esi
ror ecx, 0xd
not esi
add edx, ebx
sub esi, edx
and ecx, 0x1ae64fe
jmp 0x4765d6
pop edi
xor esi, 0x1aeb1a8
add ecx, ebx
sub ecx, edx
add ebx, 0x1af5379
or esi, edx
or edx, esi
inc ebx
xor ebx, ecx
not edx
mov ebx, edx
and esi, edx
sub edx, ecx
jmp 0x4790ec
pop edi
bswap ecx
mov ecx, 0x1c1fad1
inc ecx
xchg edx, esi
xor esi, 0x1c2a2e9
mov edx, ebx
shr ebx, 0x13
jmp 0x475823
pop edi
and ebx, 0x1c36f07
neg ebx
add esi, ecx
inc edx
and ebx, esi
ror ecx, 5
sub esi, 0x1c4bc7e
mov esi, ecx
xor ebx, ecx
jmp 0x478b77
pop edi
xor ecx, 0x1d00022
xor esi, edx
shr ecx, 4
dec ebx
add edx, ecx
rol esi, 7
or ecx, ebx
or edx, ebx
ror ebx, 6
and edx, ebx
jmp 0x4780ed
pop edi
bswap edx
xor ecx, ebx
and ecx, esi
and ebx, 0x1d7939a
or ecx, ebx
or esi, ebx
sub ebx, ecx
add edx, ebx
jmp 0x477c01
pop edi
xor ebx, 0x1e4903d
mov edx, ebx
and esi, ebx
rol ecx, 0x19
and ecx, edx
rol ebx, 0x1e
sub ebx, ecx
xchg ebx, esi
dec edx
sub esi, ebx
mov ebx, edx
and ebx, 0x1e72a59
jmp 0x475bd9
push 0xfce0443a
xchg ecx, esi
xchg ecx, edx
nop
add ebx, edx
add esi, 0x1e86e2a
sub ebx, edx
or ecx, 0x1e8f6c0
inc ecx
or ebx, ecx
jmp 0x477e6f
call edi
and edx, 0x1f4f9f0
sub edx, 0x1f537dc
add esi, 0x1f574f4
not esi
and ecx, ebx
and edx, ecx
mov ecx, ebx
sub edx, ebx
not edx
rol esi, 0x12
jmp 0x476d93
call fcn.00476eef
and esi, 0x1f99443
xor ebx, edx
add ecx, esi
sub esi, ebx
shl edx, 0x10
xor ecx, esi
ror ecx, 8
and ebx, 0x1fb4df2
add esi, edx
bswap edx
jmp 0x47788d
pop edi
sub ebx, ecx
mov esi, ecx
inc edx
dec edx
and edx, ecx
add ecx, edx
mov ebx, edx
jmp 0x478224
push 0xfcd208dc
inc ecx
xchg esi, edx
or esi, ebx
add esi, edx
and ecx, 0x20981b8
xchg ecx, edx
add esi, ebx
sub edx, ecx
nop
xchg ecx, edx
sub ebx, edx
and edx, 0x20c094c
jmp 0x477788
push 0xfccd881e
xchg ecx, ebx
dec ebx
rol esi, 9
xchg ecx, ebx
mov ebx, 0x20d8ed4
xor ecx, esi
not edx
mov ecx, esi
add esi, edx
dec esi
ror edx, 0x1d
jmp 0x4767f6
call edi
mov ecx, esi
sub edx, ecx
or esi, ebx
and edx, 0x21201dc
not edx
sub esi, 0x2127c13
or esi, ecx
xchg ecx, edx
jmp 0x478260