Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetCurrentThreadId
cmp eax, 0xffffff10
jne 0x401093
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
ret
call sub.kernel32.dll_GetCurrentThreadId
cmp eax, 0xffffff0c
jne 0x401126
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
ret
call sub.kernel32.dll_GetCurrentThreadId
cmp eax, 0xfffffeee
jne 0x40119b
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff08
jne 0x401206
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.kernel32.dll_WritePrivateProfileStringA
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
call sub.ntdll.dll_ZwOpenEvent
ret
jmp 0x475484
and edi, ebx
add edi, esi
add edi, ecx
xchg edi, ecx
bswap ecx
or esi, edi
or ebx, 0x7f9df2f8
jmp 0x4785dd
push 0x7fa894c4
bswap ebx
add ecx, 0x800a7294
sub edi, edx
xor edx, ecx
or ecx, ebx
nop
add edi, 0x800af776
rol ebx, 0xd
jmp 0x475f27
call esi
or ebx, 0x800d2bae
inc ecx
rol ebx, 2
and edi, ebx
neg edx
and ebx, edx
shr edi, 6
add ebx, edi
mov ecx, ebx
mov edi, 0x800e1d56
rol ebx, 4
and ebx, 0x800e544c
jmp 0x4764f2
pop esi
dec ecx
xor ebx, edx
mov edi, ecx
sub ecx, ebx
sub edi, edx
xor edx, ecx
jmp 0x477d10
mov esi, 0x6e447c44
dec ecx
shl edi, 5
and ecx, edx
add edi, 0x80114750
ror ecx, 8
sub ecx, edi
add edx, ecx
add edi, edx
jmp 0x4755d5
call fcn.00477f8c
and edx, ecx
sub ebx, edi
add ecx, edx
xor edx, 0x8014042e
add edi, edx
xchg edi, ecx
add edi, 0x801458b0
xor ebx, edx
dec ebx
xchg edi, ecx
jmp 0x477591
push 0x7fac2cd4
and edx, ecx
neg ebx
sub edi, edx
xor edx, ecx
sub ebx, ecx
add edi, 0x8019f87e
xchg ebx, edx
and ebx, 0x801a2e4e
xor ebx, edi
and ebx, edi
add edi, ebx
and ebx, edx
jmp 0x476736
mov esi, 0x6e447c44
or ecx, ebx
not edi
add edi, edx
mov edx, ecx
xor edx, 0x801d8c4a
or ebx, edx
xchg edx, edi
mov edi, edx
jmp 0x477bd8
pop esi
not edi
sub ebx, 0x801faa5a
or edx, ecx
or ebx, ecx
sub edx, ecx
sub ebx, ecx
inc edx
add ebx, edx
sub edi, 0x80206536
add edx, edi
and ebx, ecx
and ecx, edx
jmp 0x476707
pop esi
and ecx, edi
rol edi, 3
or ebx, ecx
add edx, 0x8023845e
jmp 0x476a8a
call fcn.00477f8c
xor edi, ecx
and edi, ebx
jmp 0x47652f
push 0x7fab5566
mov ecx, edx
neg edx
mov edi, 0x802a2f1a
sub edi, ebx
xor ecx, edi
xor ecx, edx
or edi, ebx
or ebx, edi
jmp 0x4781eb
mov esi, 0x6e447c44
bswap ecx
and edx, ecx
neg ebx
add ecx, edi
rol edx, 0x10
and edi, edx
or ecx, ebx
not edx
shl edx, 0x1e
neg edi
jmp 0x476fa0
call esi
bswap ebx
rol ebx, 0x11
sub edi, edx
shl edi, 5
ror edi, 1
sub edi, ebx
rol edx, 0x14
or edx, ecx
mov ecx, ebx
add ecx, 0x80327456
jmp 0x47574f
push 0x7fac878c
and edx, ecx
sub edx, 0x8032bbe2
xchg ecx, ebx
xor edi, edx
xchg ecx, edx
sub edx, 0x80332434
and edx, ebx
xchg edx, ecx
jmp 0x476198
push 0x7fa85764
mov edi, ebx
xchg ecx, edx
shl ebx, 4
mov ebx, 0x80378986
or edx, 0x8037a442
inc edi
sub edi, edx
xor edx, ecx
jmp 0x475be1
mov esi, 0x6e447c44
sub ecx, ebx
sub edx, 0x803b5082
mov edi, 0x803b6bbe
add ecx, ebx
jmp 0x477f57
mov esi, 0x6e447c44
sub edi, edx
xor edx, ecx
xor edx, ebx
not ebx
xchg edx, ebx
and ecx, edx
and edx, edi
and edi, 0x8040727a
xor edi, 0x80408ee0
inc edi
jmp 0x476f2b
push 0x7fa8753e
or edx, ebx
add ebx, 0x8048e9ec
and ebx, edx
add ebx, edi
or edx, 0x8049340e
xor edx, ecx
and edi, ebx
add ebx, 0x804987c0
add ecx, ebx
add ebx, edx
or ecx, 0x8049e124
xor edi, edx
jmp 0x4754be
pop esi
inc ecx
neg ebx
or ecx, edi
or edi, ebx
mov ecx, edi
or edi, edx
inc edx
and ebx, edx
jmp 0x476674
pop esi
xchg ebx, edi
mov edi, ebx
mov edx, ecx
not ebx
jmp 0x475697
pop esi
add edi, 0x806179f2
xor ebx, edx
xor edi, ebx
or ecx, edi
mov ebx, edx
mov ebx, 0x8061fe28
xor ecx, ebx
xor ebx, edi
dec ecx
xor ebx, edx
jmp 0x477e0c
mov esi, 0x6e447c44
inc ebx
xor ecx, edx
and edx, ebx
xchg edx, ecx
add edx, 0x80637368
xor ebx, ecx
jmp 0x4767e1
push 0x7fa63884
shr ebx, 7
xchg ecx, edx
jmp 0x475ae8
pop esi
add edi, ecx
and ebx, edi
dec edi
mov ecx, ebx
mov ebx, edx
sub edx, 0x80681c22
jmp 0x476dc6
pop esi
or ebx, ecx
not ebx
xor ecx, edx
xchg edi, edx
and edx, 0x806a8406
ror edi, 0x14
jmp 0x476c85
push 0x7fa8b2ca
add edx, 0x806c9b32
shl edx, 0x18
mov edx, 0x806cd228
sub edx, edi
add edi, ecx
xor edx, edi
add edi, 0x806d3b7e
xor ebx, ecx
jmp 0x475e1b
push 0x7fa0e57a
and ebx, 0x8074e06e
sub edi, 0x8075006c
or ebx, edx
or edx, 0x80753514
jmp 0x475703
push 0x7faca68e
add ebx, 0x807f0b9e
sub edi, ecx
and ebx, ecx
ror edi, 0x1d
add ebx, edx
or edi, 0x807fa28e
and ebx, edx
and ecx, edx
xchg edx, edi
or ecx, 0x80800e2a
inc edx
sub edi, ecx
jmp 0x4768e5
pop esi
or edx, edi
dec edi
xchg edi, edx
sub edi, 0x80821dd0
xor edx, 0x80823860
sub ebx, edx
add ecx, ebx
or edi, ecx
jmp 0x475878
push 0x7fa4ef3a
dec edi
xchg ebx, edx
and ebx, 0x80835f06
xchg ecx, edx
and ecx, 0x80839556
xor ebx, 0x8083b57e
or edi, edx
or ecx, edx
sub edi, edx
sub edi, ecx
xchg ebx, ecx
add ecx, 0x80845256
jmp 0x477a7e
mov esi, 0x6e447c44
or edx, 0x808af296
inc edi
mov ebx, ecx
sub ecx, 0x808b417e
mov edx, 0x808b5c10
xchg edi, edx
or ecx, edi
sub ecx, 0x808c2fb8
and ecx, ebx
rol ecx, 7
jmp 0x477c88
pop esi
not ecx
and edx, ecx
ror ecx, 0xe
or ecx, 0x80916242
jmp 0x477cc5
push 0x7fa0c71f
ror ebx, 0x1e
or edi, ebx
jmp 0x476055
pop esi
or edi, ebx
bswap ecx
add ebx, edi
xor edi, edx
or ebx, 0x80951538
mov edx, ebx
jmp 0x475ea7
call fcn.00477f8c
mov edi, 0x80970b6c
sub edi, ebx
xchg ecx, edi
or ebx, 0x80975b7c
add edi, ecx
and ebx, edi
and edx, ebx
add ecx, edx
xchg edx, ebx
and ecx, edx
jmp 0x47690d
pop esi
not ebx
ror edi, 0x12
inc edi
rol edx, 0x1f
and edi, edx
or edx, 0x809a54be
xor edx, edi
add edx, 0x809a8ea8
xor ebx, 0x809aa964
rol ebx, 0x17
sub ebx, edi
sub ecx, edx
jmp 0x4767c1
pop esi
add edi, ecx
shr ebx, 0x18
or ecx, 0x809b56d2
xor edx, ecx
and ebx, ecx
xor ecx, 0x809ba8ae
not edx
xchg edx, edi
xchg edi, edx
ror ebx, 0x1c
jmp 0x476db5
call esi
xor ebx, ecx
ror ebx, 0xa
or ebx, 0x809d2992
mov edx, ecx
jmp 0x476ca5
push 0x7fa1b5ae
add edi, ecx
sub edi, 0x809d841e
not ebx
xchg ebx, edi
and edi, 0x809dd652
mov edx, ebx
jmp 0x476929
push 0x7fa36f28
sub ecx, edi
and ecx, edx
and edx, edi
ror edx, 1
or edx, 0x809fa0b8
xor edx, edi
not edi
sub ebx, edx
jmp 0x476765
mov esi, 0x6e447c44
sub edi, edx
xor edx, ecx
and ebx, 0x80a2a51c
mov ebx, edi
dec edx
xor edi, edx
xor edi, ecx
sub ecx, ebx
jmp fcn.00477cac
pop esi
sub ebx, edx
xor edx, edi
not edi
xor edx, ecx
and edi, ebx
or ebx, edx
xchg edx, edi
or ebx, edx
xchg edx, edi
add edx, edi
xor edx, edi
and edx, edi
jmp 0x477144
pop esi
sub edi, ebx
xor ecx, edi
add edi, ecx
and edi, edx
xchg ecx, ebx
mov ebx, edi
dec edx
mov ecx, ebx
mov ecx, ebx
and ecx, edx
and edx, edi
or ebx, ecx
jmp 0x4779f4
pop esi
and edx, ecx
and edx, 0x80abb51e
mov ecx, edi
or ecx, 0x80abe9f8
xor edx, ecx
and edx, ecx
neg edx
ror ebx, 0x1d
bswap ebx
dec edi
xor ecx, ebx
or edi, 0x80ad99f2
add edx, ebx
rol ecx, 1
jmp 0x47755e
push 0x7fac4aae
neg edi
shr ebx, 0x1a
or edi, ecx
xor edi, 0x80ae4dec
and ebx, ecx
mov edi, 0x80ae8198
bswap edi
not edx
jmp 0x476ed1
pop esi
mov edi, 0x80aee096
add edi, edx
jmp 0x4759cf
push 0x7fa38ddc
shr ecx, 0x1c
or ebx, edi
jmp 0x477d47
push 0x7fa4974c
xor ecx, ebx
dec edx
ror ecx, 0xb
add ebx, 0x80afbe0e
add ecx, edx
mov ecx, edi
jmp 0x478253
pop esi
sub ebx, edi
sub edx, 0x80b19ec8
ror edx, 0x15
mov ecx, ebx
xor ebx, ecx
mov edi, ebx
bswap edi
mov ecx, edx
xchg ecx, edx
rol edi, 0xc
jmp 0x4761f9
call fcn.00477f8c
add ebx, edx
mov ebx, edi
mov edx, 0x80b2ccd2
add ebx, edi
shr ecx, 0x1a
add ecx, 0x80b31b90
add ecx, edi
shr edi, 0x10
jmp 0x477469
mov esi, 0x6e447c44
add edi, edx
xor edi, ebx
and edx, 0x80bad99a
mov ecx, edi
sub edx, edi
sub ebx, ecx
xor edx, ecx
and edi, ebx
ror edi, 0x11
shl ebx, 0xa
xor edi, ebx
xchg edi, ecx
jmp 0x478072
call esi
sub edx, 0x80bbec92
xchg ecx, ebx
or ecx, 0x80bc21ba
xchg ebx, ecx
rol ebx, 0x19
sub edi, edx
jmp 0x477017
push 0x7fa1d236
xchg ebx, edx
rol edi, 0x13
ror ecx, 0xb
xchg edx, ebx
jmp 0x47557a
pop esi
xor edx, ecx
not ecx
jmp 0x477cd7
push 0x7fa2a118
shr edx, 0x1d
not edx
mov edx, ecx
or edi, 0x80c81f28
and ecx, ebx
rol ecx, 0x10
xor ebx, ecx
mov edi, ebx
sub ecx, ebx
mov edi, edx
jmp 0x47773b
push 0x7faa7efc
and ebx, edx
add edi, ecx
jmp 0x476315
pop esi
shr ebx, 0x1c
bswap ecx
xchg edx, ebx
xchg edi, edx
or edx, edi
xor edi, 0x80cd263a
neg ebx
mov edi, ebx
jmp 0x4757b1
push 0x7fa9a63c
not edi
shl edi, 0xf
bswap ebx
xchg ecx, ebx
and ecx, edi
dec ebx
add edx, ebx
sub ecx, 0x80ce41be
add ebx, ecx
mov edi, ecx
shl edi, 8
xchg ebx, edi
jmp 0x475a5b
pop esi
bswap edi
not edx
and ebx, ecx
xor ecx, ebx
jmp 0x478470
pop esi
inc edx
sub edx, 0x80d7b5aa
xchg ecx, ebx
neg edi
dec edx
mov ecx, ebx
mov ecx, ebx
add edi, ebx
xchg ebx, edx
neg ebx
xchg edi, ecx
not edi
jmp 0x4763c0
pop esi
xchg ebx, edx
or edx, ebx
or edi, ecx
bswap edx
xchg edi, ebx
bswap ecx
xchg edx, ebx
xchg edi, edx
jmp 0x477a1b
pop esi
sub edi, ecx
shl edx, 0xb
neg edi
shr edx, 0x1c
or ecx, edx
sub edi, 0x80dba42c
jmp 0x477670
mov esi, 0x6e447c44
sub ecx, 0x80df72b8
xchg ecx, edx
ror ebx, 0x1c
xor ecx, ebx
sub edx, edi
not edx
xor edx, ebx
add ecx, ebx
jmp 0x4770d1
pop esi
sub ecx, ebx
mov ebx, edi
mov edx, 0x80e1679a
sub ebx, edx
jmp 0x475544
push 0x7fa5fca2
xchg edi, ebx
xchg ebx, edi
jmp 0x4777a5
push 0x7fac6832
sub edx, 0x80e9b292
xor ecx, edi
and ecx, edx
xchg ecx, edi
and edi, ecx
and ecx, ebx
jmp 0x47595a
call fcn.00477f8c
xor edi, edx
neg edx
dec ecx
sub ecx, edx
ror ecx, 6
neg edi
xor edi, edx
dec ecx
jmp 0x475937
call esi
sub edi, 0x80ed5742
shr edx, 0x17
add ebx, edx
mov ebx, edi
mov ebx, ecx
dec ebx
rol edi, 0x1a
and edi, 0x80ee139c
jmp 0x475de7
call fcn.00477f8c
xor edi, 0x80f0691c
xchg edx, ecx
or edi, 0x80f0a330
rol edi, 0x1b
xor ecx, edi
not ebx
jmp 0x477b4b
pop esi
add ecx, edx
xor ecx, edx
dec edi
xor ecx, 0x80f3889a
or ecx, ebx
xor edx, ecx
sub ebx, ecx
sub ebx, 0x80f3f55e
jmp 0x4773b7
pop esi
mov edi, 0x80f41b9a
bswap edi
and edi, edx
or edi, ebx
or edi, edx
or edx, 0x80f4b28a
inc edi
mov ebx, ecx
jmp 0x4784d0
call fcn.00477f8c
xor edi, edx
mov ecx, 0x80fa01f8
sub edx, ecx
add edi, ebx
shl edi, 0x13
or ebx, ecx
xchg ecx, edi
mov edi, ecx
shl ecx, 0x14
or edx, ecx
jmp 0x477615
pop esi
sub edx, ecx
mov ecx, edx
xor ebx, edx
inc edi
sub ecx, 0x80fb7730
dec edx
sub ecx, edi
add edx, ecx
add edi, edx
shr edi, 3
jmp 0x476439
push 0x7fa19727
bswap ecx
add ebx, 0x80fdd8b2
sub edi, ecx
xor ecx, edi
and ecx, edi
and edi, ebx
dec ecx
xor ebx, edx
xchg edx, ebx
mov edi, 0x80febd38
jmp 0x476543
pop esi
mov edi, edx
mov ebx, ecx
bswap edi
inc ecx
xor edx, ebx
xor ecx, edi
not ebx
xor ecx, ebx
mov edx, 0x80ffbf4c
sub edx, edi
xchg ebx, edi
sub ecx, ebx
jmp 0x4776a5
mov esi, 0x6e447c44
xchg edi, ebx
mov edi, edx
sub edi, edx
inc edx
sub ebx, 0x81080af0
xor ebx, edx
dec ebx
rol edx, 0x18
mov ebx, ecx
and ebx, 0x81089494
jmp 0x47582f
push 0x7fa70bd6
inc ecx
mov edx, ebx
mov ecx, edx
neg edx
jmp 0x477483
push 0x7f9fdb8a
or ecx, edi
and edi, ecx
sub ecx, edi
xor ebx, edx
dec ebx
sub ecx, ebx
and ebx, edi
dec edx
xor ebx, 0x8110099c
inc ebx
jmp 0x47726d
pop esi
or ecx, ebx
sub ebx, 0x8111d7c8
ror ebx, 0x12
sub ecx, edx
add edx, ebx
and edx, ecx
xchg edi, ecx
xchg edx, ebx
mov edi, ecx
sub edi, ecx
inc ecx
sub ebx, ecx
jmp 0x476758
call esi
or ecx, edx
sub edi, edx
inc edx
shl ebx, 0x1c
mov ebx, 0x8117f124
xor ebx, 0x811812cc
jmp 0x4763ad
push 0x7fa72986
add ecx, ebx
xor ecx, 0x8118521a
add edx, 0x81186d2c
sub ecx, ebx
add ecx, edi
rol ebx, 0xb
and ebx, 0x8118d780
mov edi, edx
sub edi, edx
inc edx
jmp 0x477ac7
call esi
sub edx, 0x81195094
mov edi, 0x81196b50
sub edi, ebx
add edi, ecx
mov edi, ebx
inc ecx
jmp 0x475ca0
pop esi
add ecx, edi
add edi, ebx
shl edi, 0x12
or ebx, 0x811f662c
inc ecx
sub edi, ebx
add ebx, edi
shr ebx, 7
or ecx, 0x811ff1d0
sub ebx, 0x81200cb6
or edx, ecx
and edi, 0x8120415e
or ebx, edi
xchg ebx, ecx
jmp 0x4772c1
call esi
bswap edx
add ecx, 0x8120b77e
rol edx, 9
xchg edx, ecx
add ebx, edx
ror ebx, 0x17
xchg ecx, edx
and ecx, 0x81215d88
jmp 0x4775f1
pop esi
xor ebx, edi
or edx, ecx
or ebx, ecx
or ebx, edx
or edi, edx
xor ecx, edx
jmp 0x476b23
call esi
xchg ecx, edx
shl ebx, 0x14
mov ebx, 0x8124f6be
neg edi
jmp 0x477f30
push 0x7f9fbe54
inc ebx
xchg edx, ebx
mov edi, 0x812573ee
bswap edi
or ecx, ebx
add edi, 0x81263f04
and ebx, edx
shr ebx, 0x1a
mov ebx, edi
mov ebx, ecx
jmp 0x47735d
pop esi
or edi, ebx
neg edi
and edi, edx
or ebx, edx
add ecx, 0x8128cb82
rol ecx, 4
jmp 0x476b3e
push 0x7fadbcd0
sub ebx, edi
sub ecx, 0x8129e16c
mov edx, 0x8129fc7e
xor edx, 0x812a1862
jmp 0x4765fc
call esi
xor ebx, edi
ror ebx, 0x10
sub ecx, edx
and ecx, ebx
shl edx, 0x16
or ecx, edi
xor ebx, ecx
inc edi
sub edi, edx
sub edi, ecx
xor edx, ebx
add ecx, 0x812c250c
jmp 0x476692
mov esi, 0x6e447c44
mov ecx, 0x812e16d6
add edx, ecx
xor ecx, edi
or ebx, edx
jmp 0x476472
push 0x7fa35274
mov ebx, 0x812f4432
mov edi, ecx
sub edi, ecx
xor edx, ebx
or edi, edx
bswap ecx
xchg ecx, edx
sub edi, ebx
xchg ecx, edi
sub ecx, edx
jmp 0x476590
push 0x7fa61ad4
and edx, ecx
or ecx, edi
or edx, ecx
mov edi, ebx
bswap edi
dec edi
xor ecx, ebx
ror ecx, 0xd
sub ecx, edi
xor ebx, edx
jmp 0x475e98
call esi
not ebx
xor ecx, 0x8138fbba
jmp 0x4764c6
push 0x7fa765e8
add edx, ecx
shl ecx, 0xf
and edx, 0x813a7c1c
ror edi, 0x1d
or edi, ecx
add edi, ebx
sub edi, ecx
not ecx
or edx, 0x813b22a6
or ecx, edi
neg ecx
inc edx
jmp 0x475917
pop esi
xor ebx, 0x8143d4a6
add ecx, 0x8143ef62
xchg edx, ecx
add edx, 0x8144255c
rol edi, 0x1a
xchg edi, ecx
mov ecx, edi
or edi, ebx
sub edx, ecx
and edx, ebx
jmp 0x4770f4
pop esi
add edx, ecx
add edi, edx
xor edi, ebx
sub ebx, edi
nop
xchg ecx, edi
sub ecx, edx
mov ecx, 0x8145a766
sub edx, ecx
xor ecx, ebx
jmp 0x475ee7
mov esi, 0x6e447c44
rol edi, 0x11
neg ecx
and edi, ebx
and edi, ecx
or ebx, ecx
or edi, ecx
add edi, ebx
shl edi, 0x1e
mov edi, 0x8148abfc
rol ebx, 0x1a
jmp 0x477c3a
push 0x7fa747e2
or edx, 0x814b06ea
xor edx, edi
sub ebx, edx
sub ecx, 0x814b5552
or edx, edi
dec edi
ror edx, 0xa
bswap ebx
ror edx, 0x11
xor ecx, ebx
jmp 0x4778c7
call esi
bswap ecx
xchg ecx, edx
and edi, ecx
neg edx
and ebx, edi
and edx, ebx
jmp 0x477b73
pop esi
add edx, ecx
rol edx, 4
mov edx, edi
xchg edi, ebx
jmp 0x476ffa
call fcn.00477f8c
xchg edi, ebx
not ebx
ror edi, 0xe
bswap ecx
or edi, ecx
or edx, 0x8154a550
xor edx, edi
not edx
xor edx, ebx
not ecx
jmp 0x4774ad
call fcn.00477f8c
not ecx
add ebx, edi
shr ecx, 0x19
and edx, ebx
not edi
inc ecx
jmp 0x4776d4
call fcn.00477f8c
inc edi
and edx, edi
xchg ebx, edx
sub ebx, edi
or edx, ecx
xor ebx, 0x815a24d2
inc ebx
mov ecx, edi
jmp 0x477ea6
call fcn.00477f8c
mov edi, 0x815a841e
sub ebx, 0x815aa448
dec ecx
xor ebx, edx
xor edi, ebx
add edi, 0x815b8b72
mov ebx, edi
or edx, edi
jmp 0x47788c
pop esi
xor ecx, edi
xor ecx, edx
add ecx, 0x815ccae4
xor edx, ecx
jmp 0x476ce0
pop esi
and edx, ecx
and edi, edx
xchg ecx, ebx
shr ebx, 2
and ecx, edi
xchg edi, ebx
or ebx, edi
sub ecx, 0x815dc804
and ecx, ebx
add edi, ecx
ror ecx, 0x15
mov edi, edx
jmp 0x476c77
pop esi
xchg edi, ecx
or ecx, edx
jmp 0x477168
mov esi, 0x6e447c44
sub edx, ecx
shr edi, 4
jmp 0x477c6c
push 0x7faa4076
xor edi, ebx
ror ecx, 6
xor ecx, edx
rol ebx, 0x19
sub edi, edx
and ecx, 0x8167e5ee
and edx, ebx
and edi, ecx
xchg edx, edi
sub edi, edx
xor edx, ecx
not edx
jmp 0x477ebc
call esi
mov edx, 0x816cfc68
bswap edx
not ecx
sub edx, edi
and edx, ecx
xchg edx, ecx
jmp 0x476a4e
push 0x7faa5fa4
add ebx, edi
sub ecx, edi
add edx, ecx
and edx, edi
jmp 0x476aae
pop esi
rol ebx, 0x13
and ebx, 0x8171435c
xchg ecx, edx
and edi, ecx
shl ebx, 0x19
or edx, ebx
sub edi, 0x8172463e
mov edi, 0x81726668
sub edi, ebx
sub edx, edi
jmp 0x475da7
call fcn.00477f8c
sub ebx, 0x8172c21c
ror ebx, 8
xor ebx, edx
xor edx, edi
add edi, edx
mov edx, 0x81734cee
sub edx, edi
add edi, ecx
jmp 0x476f44
call fcn.00477f8c
xor edi, ebx
and ebx, ecx
xor edi, ecx
or edx, ebx
sub edi, 0x817aa4c2
and ecx, edx
xchg edi, ebx
add ebx, 0x817af744
xchg ebx, ecx
and edx, ebx
jmp 0x475506
push 0x7fab74be
xchg edi, ebx
or ecx, 0x81863372
inc edx
add ecx, edx
xor edx, 0x8186832c
and edx, edi
xor edi, ebx
not edi
xor edx, ecx
sub ebx, ecx
sub ebx, edi
add ecx, edx
jmp 0x476d7c
push 0x7fa4b5d4
and ebx, edi
add edi, ebx
and edi, ecx
xor edi, edx
neg edx
xor edi, ecx
neg ecx
mov edi, ebx
mov edx, ecx
shl ebx, 0x10
and edi, ecx
dec edx
jmp 0x478420
push 0x7fa47aee
or edx, edi
mov ecx, edx
or edi, ecx
or ecx, ebx
nop
sub ebx, edx
mov edx, 0x8195b836
sub ebx, edx
mov edi, ebx
and ecx, 0x81960944
add edi, ebx
xchg ebx, edx
jmp 0x476774
push 0x7f9fa1a0
or ebx, edi
and edi, ebx
xchg ecx, edx
sub edx, 0x8196aed2
dec edi
xor edi, 0x8196e5c8
neg ebx
xor edx, ecx
add ecx, edx
xor ecx, edx
xchg ebx, edi
and edi, 0x81978708
xchg ecx, edi
or ebx, edx
jmp 0x477628
push 0x7fa4d25c
sub edx, edi
rol ebx, 0xa
or edx, ebx
or ebx, 0x8198b6ba
xor edx, ebx
not ecx
inc ebx
sub ebx, 0x81992328
jmp 0x476216
pop esi
and ebx, edi
rol ebx, 0x1d
sub ecx, 0x819ae38e
xor edi, edx
xor edi, ecx
neg ebx
xor edx, edi
not edi
inc edx
or edx, ecx
jmp 0x4783b8
push 0x7fa33540
shl edi, 0x1e
and ecx, edx
not ecx
inc ebx
sub edx, edi
add edi, ecx
mov edi, ebx
xor ecx, edi
and ecx, edi
xor edx, ebx
mov ecx, ebx
or ebx, ecx
or ecx, 0x819fc11a
rol ecx, 0x1e
jmp 0x477766
push 0x7f9f8272
rol edi, 8
neg ecx
or edx, ebx
neg edx
and ebx, edi
xor edi, edx
and edi, edx
add ecx, 0x81a832d0
sub ecx, 0x81a84db6
or edx, edi
jmp 0x4783e0