Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetMessageTime
cmp eax, 0xffffff08
jne 0x40108e
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffefe
jne 0x40112b
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff05
jne 0x4011a0
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffeec
jne 0x40121a
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateCaptureBuffer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_CsrAllocateMessagePointer
call sub.ntdll.dll_RtlUnicodeToCustomCPN
ret
jmp 0x5457f2
sub edi, edx
xchg edx, ebx
or ebx, 0xd83ee6b2
xor ecx, edx
mov ecx, edx
add edx, ecx
sub ecx, ebx
jmp 0x545cb3
push 0xd864a95c
or ebx, edi
mov ecx, ebx
add ebx, esi
sub edi, ecx
neg edi
bswap ebx
xor esi, ecx
shl esi, 0x15
neg edi
or ecx, edi
dec esi
sub ebx, esi
add ebx, ecx
or edi, ebx
and ebx, edi
xor esi, edi
jmp 0x546c1f
call fcn.00548c69
sub edi, esi
xor edi, ecx
add ebx, 0xda8dd39e
shl ecx, 6
neg edi
sub ecx, ebx
sub ebx, edi
jmp 0x54889f
pop edx
mov edi, esi
add esi, 0xda930055
dec esi
or edi, 0xda937b4b
xchg ecx, edi
mov ebx, esi
shl ebx, 0x16
jmp 0x545f0e
push 0xd84f9275
bswap esi
and ebx, edi
or ecx, 0xda9eb0c4
or ecx, esi
or ecx, 0xda9f282c
or ecx, 0xda9f7533
mov ebx, ecx
bswap ebx
or ebx, esi
and ecx, edi
mov ebx, ecx
dec edi
jmp 0x545a74
pop edx
sub edi, 0xdaa7a79f
mov esi, edi
mov ebx, edi
xor edi, esi
sub ebx, edi
xor edi, 0xdaa8eb93
xor esi, ebx
and edi, ebx
xchg ecx, edi
add ecx, edi
sub esi, 0xdaaa2677
xchg edi, ecx
neg edi
xchg edi, esi
jmp 0x546419
pop edx
sub ebx, esi
bswap edi
nop
and ecx, edi
or esi, 0xdaae6e16
mov ecx, esi
xor edi, esi
or ebx, 0xdaaf317f
bswap esi
mov edi, ebx
jmp 0x5470af
push 0xd84fda1c
mov ebx, ecx
xor ecx, ebx
sub ecx, edi
sub ecx, ebx
sub edi, 0xdab36e13
xchg esi, edi
xor esi, 0xdab3e88e
mov ecx, edi
and edi, esi
jmp 0x547dcf
pop edx
and edi, ebx
sub ecx, edi
bswap edi
xor edi, esi
mov ebx, ecx
and esi, ebx
xor ebx, edi
mov esi, ebx
add ebx, edi
or edi, ebx
xor esi, edi
xor edi, esi
not ebx
jmp 0x5476e1
pop edx
ror ebx, 9
and esi, 0xdac244f5
sub esi, ecx
sub ecx, esi
xor ecx, edi
and edi, ebx
or edi, ecx
ror esi, 0x1a
jmp 0x547d7e
push 0xd848a2b6
xor esi, ebx
add ecx, ebx
xor esi, edi
sub esi, ebx
xor ecx, ebx
shr ebx, 0x13
rol ebx, 0x10
and esi, 0xdac7cc4c
add ecx, edi
sub esi, edi
and edi, esi
xor ecx, 0xdac9be27
jmp 0x547ab4
push 0xd8571961
rol edi, 9
add ecx, esi
shr edi, 6
mov ecx, edi
or ebx, edi
mov edi, ebx
jmp 0x546eb3
push 0xd867c529
add ecx, esi
xor ebx, ecx
sub esi, ebx
and esi, ecx
xor ebx, ecx
jmp 0x547797
call fcn.00548c69
add ecx, ebx
bswap edi
add ebx, edi
dec esi
jmp 0x547e9f
mov edx, 0x6332a2e
shr ecx, 0xb
and ecx, 0xdce4cdf2
or edi, ecx
mov ecx, ebx
xchg esi, edi
shl ebx, 0x1d
xor esi, ebx
and edi, esi
and ecx, esi
inc esi
or esi, 0xdce8855d
and esi, ebx
jmp 0x545c77
push 0xd847c3b3
add ebx, 0xdcea24a7
mov ebx, edi
add esi, edi
rol esi, 0x1d
add esi, 0xdceb5c8f
sub esi, 0xdceba303
mov ecx, 0xdcebea36
inc ecx
mov edi, 0xdcec799e
jmp 0x546bdc
push 0xd8568a93
xor ebx, esi
ror ecx, 0x14
or edi, esi
or edi, esi
neg edi
or ebx, esi
mov ecx, 0xdd1b160a
xchg ecx, esi
xor edi, ecx
shr esi, 0x17
not edi
rol edi, 0x1f
xor esi, 0xdd1cc9b6
ror esi, 0x1c
xor edi, ebx
jmp 0x545f5d
pop edx
ror ebx, 0x17
mov ecx, 0xdd2b81fd
xchg edi, ebx
jmp 0x546c90
pop edx
or edi, ebx
add edi, ebx
ror ecx, 0x1f
mov esi, edi
mov ecx, edi
mov ebx, esi
mov ecx, esi
dec edi
or edi, esi
sub ebx, edi
neg edi
and ebx, ecx
or ecx, ebx
jmp 0x546efa
pop edx
xor ebx, edi
neg esi
mov ecx, ebx
rol esi, 0x13
rol ebx, 5
and edi, ebx
sub edi, 0xdd35ecb3
not ecx
ror ecx, 0x1b
and ebx, edi
shl edi, 0x13
shr esi, 0x13
jmp 0x546d3d
pop edx
neg edi
neg ecx
mov edi, ebx
add edi, ecx
or ebx, ecx
and ecx, ebx
or ebx, esi
sub edi, ebx
ror ecx, 0x17
xor ecx, esi
neg esi
jmp 0x547fc8
push 0xd856d152
shr esi, 0x1a
xor ecx, esi
neg edi
and esi, ebx
sub ebx, edi
sub esi, ecx
xor ecx, esi
neg ebx
dec esi
xor ecx, 0xdd57f722
add ebx, edi
or esi, ecx
nop
and ebx, 0xdd59dc50
sub esi, 0xdd5a4a15
jmp 0x545c32
push 0xd852f148
xor ebx, esi
xor ecx, edi
sub esi, ecx
jmp 0x5485d3
push 0x1443f2
or ebx, edi
ror edi, 0x14
neg ecx
rol ecx, 0x13
xchg esi, ebx
jmp 0x547db4
push 0xd85a34be
mov ecx, esi
sub esi, 0xdd9131c3
sub esi, 0xdd919987
rol edi, 0xd
mov ebx, ecx
sub esi, ebx
xor ebx, edi
mov edi, 0xdd93a952
jmp 0x5473c8
push 0xd8506a1f
shl esi, 0x1d
shl esi, 0x19
and edi, esi
xchg ebx, edi
mov ebx, esi
neg ebx
sub ebx, 0xdda18b00
xchg ebx, edi
or esi, 0xdda2036a
mov esi, ecx
neg esi
jmp 0x546cd2
call edx
or ebx, ecx
or esi, ebx
or ecx, ebx
or edi, esi
add edi, ebx
mov ebx, ecx
xor edi, esi
sub ecx, esi
xchg edi, ebx
xor ecx, 0xddb7d338
and edi, 0xddb81109
or ebx, edi
xor edi, ebx
mov ecx, ebx
xchg esi, ecx
jmp 0x546f67
push 0xd869c8a7
and ecx, esi
add esi, ecx
sub edi, esi
nop
jmp 0x545c88
push 0xd84cee41
xor esi, edi
not ecx
jmp 0x547398
pop edx
not ecx
or edi, ecx
xchg ecx, ebx
shl ebx, 0x12
add edi, 0xddcbfd8f
xchg ebx, esi
mov ecx, esi
jmp 0x5458c6
pop edx
xchg ecx, esi
and ebx, edi
xor ecx, ebx
or ecx, 0xddce7951
add edi, 0xddcfc0f9
ror ecx, 8
xchg esi, edi
and ecx, esi
sub edi, ebx
rol esi, 0xf
or edi, 0xddd1316c
jmp 0x547fe1
push 0xd8485b9d
shl esi, 9
shl esi, 4
add edi, ecx
inc ebx
xor edi, ebx
mov edi, 0xdddd1aeb
xchg ebx, esi
xchg ebx, ecx
jmp 0x545b7a
mov edx, 0x43370267
add esi, ebx
sub ecx, ebx
and ecx, esi
xchg ecx, ebx
add ebx, ecx
xor esi, ebx
or ebx, edi
jmp 0x547595
call fcn.00548c69
or edi, 0xddee4e9b
add esi, 0xddee8a17
xchg esi, edi
and edi, 0xddef039b
and ecx, 0xddef3fcb
add esi, ebx
xchg ecx, esi
xchg ebx, esi
and esi, ebx
jmp 0x547198
push 0xd860223c
or ebx, edi
xor ecx, ebx
and ebx, ecx
xor esi, edi
sub ebx, ecx
sub edi, esi
xor ebx, edi
jmp 0x54819c
call edx
ror esi, 0x1f
add ecx, edi
xor edi, esi
and ecx, edi
or ecx, ebx
sub esi, ecx
bswap ecx
jmp 0x5459e6
push 0xd863855c
not ebx
or ecx, ebx
neg ebx
mov esi, ecx
or edi, ecx
or esi, 0xde0004c7
or ebx, 0xde003d9f
dec ebx
mov esi, 0xde00ada2
jmp 0x548ae0
push 0xd864602c
xchg edi, ebx
or esi, edi
add esi, ebx
or ecx, ebx
and esi, edi
mov esi, 0xde020e12
sub ecx, ebx
xor edi, ebx
xchg ecx, ebx
xchg ecx, ebx
mov ecx, edi
jmp 0x54586a
pop edx
and esi, ecx
bswap ebx
ror edi, 0x19
and esi, 0xde06459d
sub ecx, edi
xchg edi, ecx
jmp 0x547884
push 0xd8564290
shl esi, 0xe
xor ebx, esi
xor esi, ebx
mov esi, edi
dec ebx
mov ecx, ebx
mov ebx, 0xde08588f
jmp 0x545d0f
pop edx
and ebx, ecx
or esi, ebx
xchg ebx, edi
or esi, 0xde0bdcb6
xor ebx, esi
inc ebx
sub ecx, ebx
mov edi, ecx
sub edi, ecx
shl ecx, 8
sub edi, 0xde0d8c2f
ror esi, 0xd
shl ecx, 0xb
jmp 0x546e8c
push 0x40
xchg esi, ebx
sub esi, ecx
and esi, edi
mov edi, esi
not ebx
not edi
sub ecx, esi
or esi, ecx
jmp 0x5460de
mov edx, 0x6332a2e
xchg ecx, esi
xor esi, 0xde2d92dd
xchg esi, ebx
shr ebx, 7
sub esi, ecx
jmp 0x547725
call edx
and ebx, ecx
add esi, 0xde45f265
mov ecx, ebx
not ebx
and ecx, esi
mov ebx, ecx
and edi, ebx
and edi, 0xde47b74d
add esi, ecx
xor ecx, esi
jmp 0x546722
pop edx
mov esi, 0xde502c16
bswap esi
xor ebx, esi
mov ebx, edi
xchg ecx, edi
inc edi
xor ecx, 0xde51ab05
shl esi, 0x1b
jmp 0x5489a7
push 0xd86edcd8
mov esi, 0xde59191e
add ebx, edi
xchg esi, ecx
sub edi, ebx
mov ecx, edi
add ecx, edi
not ebx
jmp fcn.0054833a
push 0xd848133a
add ecx, ebx
and edi, ebx
xchg ecx, esi
sub esi, edi
sub edi, esi
sub ebx, edi
and ebx, esi
xor ecx, 0xde61a74b
jmp 0x5464e1
mov edx, 0x43370267
sub edi, esi
xchg ebx, edi
xor esi, edi
or ecx, edi
sub ecx, esi
or ecx, edi
xchg edi, esi
and edi, ebx
xchg edi, ecx
not ecx
xchg ecx, ebx
mov ebx, 0xde64e30b
jmp 0x547f9b
mov edx, 0x6332a2e
and esi, ebx
xchg edi, ecx
sub edi, ebx
bswap ebx
mov edi, ebx
or esi, ebx
mov esi, edi
jmp 0x547b7a
pop edx
mov ebx, esi
and esi, edi
mov ecx, 0xde6787dd
xor esi, ebx
xchg esi, ecx
bswap ecx
dec edi
mov edi, ecx
sub ecx, 0xde690ba3
bswap edi
or esi, ebx
jmp 0x547e12
mov edx, 0x4132136a
dec esi
mov ebx, edi
mov esi, 0xde6a5a9d
mov ecx, ebx
or ecx, esi
add edi, ecx
xchg ecx, edi
jmp 0x548b6e
pop edx
add ebx, ecx
mov esi, ebx
or esi, edi
and ebx, ecx
or ebx, 0xde6ebd02
and ecx, 0xde6f0b6a
sub ecx, esi
sub esi, edi
jmp 0x5480bf
mov edx, 0x43370267
add esi, edi
shl esi, 0x1d
mov ebx, edi
rol esi, 3
or esi, ebx
mov ebx, esi
xor edi, ebx
dec ebx
and ebx, esi
add ebx, edi
shr esi, 2
xchg ebx, ecx
jmp 0x547012
push esp
add esi, 0xde965524
add esi, 0xde969301
xchg esi, edi
add esi, edi
or ecx, edi
mov esi, edi
and ebx, esi
and ecx, 0xde981144
and edi, ebx
mov ecx, edi
not esi
neg edi
jmp 0x5467e4
pop edx
or edi, ebx
add esi, 0xde9bb275
inc ecx
xor ebx, 0xde9c2b14
add edi, 0xde9c688a
inc edi
xor ebx, ecx
dec esi
sub ebx, ecx
jmp 0x545df9
push 0xd860fc6f
mov edi, ecx
dec esi
shl ebx, 0x1b
mov ebx, edi
or edi, esi
or ebx, ecx
sub edi, ecx
xor esi, edi
jmp 0x547c34
pop edx
xchg ecx, edi
mov ebx, ecx
xor esi, ecx
and ebx, edi
add ecx, ebx
neg ebx
xor ecx, 0xdea935b7
xchg edi, esi
and edi, ebx
jmp 0x546739
call fcn.00548c69
inc ecx
xchg esi, edi
or edi, 0xdeaba00a
xchg ecx, ebx
add edi, ebx
and ecx, esi
jmp 0x546a8a
pop edx
and esi, ebx
inc edi
nop
or ecx, esi
mov esi, edi
jmp 0x546c37
push 0xd8576136
shl edi, 0x13
or ecx, edi
or ecx, esi
or edi, ebx
mov edi, esi
sub esi, ebx
sub ebx, 0xdebaec9d
and ecx, esi
jmp 0x547ac9
pop edx
sub ebx, edi
and ecx, ebx
mov ecx, 0xdebfb00c
shr ebx, 0x19
jmp 0x546fec
pop edx
shl edi, 0x17
xor ecx, esi
xchg edi, ebx
jmp 0x547a7e
pop edx
inc ecx
xor ebx, edi
mov ecx, ebx
add ebx, esi
mov ecx, edi
mov edi, ecx
and ebx, edi
or ebx, ecx
bswap ecx
sub edi, ebx
jmp 0x5489de
pop edx
or ebx, esi
mov ecx, edi
mov edi, ebx
or ebx, ecx
rol esi, 0x10
xor edi, esi
jmp 0x5470ce
call fcn.00548c69
and ebx, edi
or edi, esi
sub ebx, ecx
or ebx, esi
sub ecx, edi
or esi, ecx
jmp 0x546699
call edx
sub esi, ebx
and edi, ebx
add edi, 0xdedced24
xchg edi, ebx
or ecx, 0xdedd67e1
mov esi, ebx
shl ebx, 9
and ebx, edi
mov ecx, 0xdede556f
sub edi, ecx
jmp 0x546b05
pop edx
add ecx, esi
mov esi, ebx
mov ebx, edi
or ecx, edi
mov ecx, edi
dec esi
xchg ebx, ecx
xchg edi, ecx
add ebx, esi
xchg ecx, esi
mov esi, ebx
sub esi, edi
xor esi, ebx
jmp 0x5466af
push 0xd84c7693
and ecx, edi
xor ecx, ebx
or ecx, esi
and ecx, 0xdee2cb44
inc ecx
inc ecx
mov esi, 0xdee3851b
mov esi, ebx
xchg edi, ecx
ror ebx, 0x17
and edi, esi
mov ebx, esi
or ebx, 0xdee4fdb0
mov ebx, ecx
jmp 0x54639d
call edx
xor edi, esi
inc esi
xchg esi, ebx
xor esi, ebx
shr edi, 6
jmp 0x546f74
mov edx, 0x43370267
mov esi, ecx
sub esi, edi
sub esi, 0xdefe9358
sub ecx, ebx
xchg ecx, edi
xor ecx, edi
and ecx, esi
add ecx, 0xdeffce8d
jmp 0x5465b2
push 0xd864165d
xor ebx, 0xdf01869b
sub ebx, 0xdf01c3ce
ror ecx, 0x15
and ecx, ebx
xor ecx, 0xdf0288f7
jmp 0x5466d5
pop edx
not esi
xchg esi, edi
mov ebx, 0xdf040595
mov edi, esi
xchg ebx, ecx
neg ecx
xor esi, ecx
or ecx, 0xdf06d428
and esi, ebx
jmp 0x547706
push 0xd84d681a
or esi, ecx
mov esi, ebx
mov esi, ebx
jmp 0x54651d
mov edx, 0x43370267
add ecx, esi
or esi, edi
sub edi, 0xdf1ae8cb
or edi, 0xdf1b7414
xchg ecx, ebx
neg ebx
mov ecx, edi
xor ebx, 0xdf1c7567
or esi, ebx
and ebx, esi
or ebx, 0xdf1d2721
or ecx, ebx
mov ecx, 0xdf1d9ffa
jmp 0x547b1a
call edx
xor edi, ebx
and esi, edi
shr ecx, 0x18
rol ebx, 0x12
mov ecx, ebx
ror ebx, 0x14
rol ebx, 0x10
shr ecx, 0x1e
sub ebx, 0xdf33321e
xor ecx, edi
bswap ebx
mov ecx, edi
dec edi
jmp 0x5487cf
call fcn.00548c69
and ecx, 0xdf4dfb3d
or ecx, esi
sub ebx, ecx
inc edi
jmp 0x5462df
call fcn.00548c69
inc ecx
and edi, ecx
or ebx, ecx
xchg ebx, edi
mov esi, ebx
inc ecx
or edi, 0xdf596021
sub edi, esi
dec edi
mov ebx, esi
or ecx, esi
inc ecx
mov ebx, ecx
sub esi, ebx
jmp 0x5485aa
push 0xd85de381
sub ecx, edi
mov esi, 0xdf68fe33
or edi, ebx
xchg edi, ebx
mov ecx, 0xdf69c14d
or ebx, ecx
inc ecx
or ecx, 0xdf6a77e8
sub ecx, ebx
jmp 0x5487f2
pop edx
xchg ecx, ebx
xchg ebx, edi
or ebx, 0xdf6b8208
xor ecx, edi
sub ebx, ecx
mov ebx, 0xdf6c341e
add ebx, 0xdf6c801e
jmp 0x545a34
call fcn.00548c69
not esi
add ecx, ebx
xor ecx, edi
or edi, ecx
mov ecx, edi
xor edi, ecx
xchg esi, ebx
and ebx, 0xdf6e78f4
add edi, 0xdf6ec5c5
mov ebx, edi
shr edi, 0x18
jmp 0x54826e
mov edx, 0x43370267
and ecx, ebx
xchg edi, esi
add edi, ecx
add ecx, esi
mov edi, 0xdf765d74
sub esi, ecx
or esi, ecx
ror ebx, 0xb
nop
shl edi, 0x13
jmp 0x546e04
push 0xd86e93cd
add ebx, edi
mov ebx, edi
sub esi, 0xdf7ca880
or ecx, 0xdf7ce5a2
xor edi, 0xdf7d216d
or ecx, ebx
mov edi, ecx
sub ecx, ebx
bswap ebx
add esi, 0xdf7e5bb4
sub ebx, 0xdf7e98a3
jmp 0x546b7d
pop edx
inc ecx
sub esi, ebx
rol ebx, 0x14
shr esi, 0x10
not ecx
bswap ecx
dec esi
add edi, esi
or edi, ecx
rol edi, 0xc
xchg ecx, ebx
jmp 0x547a5e
call fcn.00548c69
bswap ebx
and ebx, 0xdf9b2919
sub ecx, esi
rol esi, 2
sub edi, ecx
or edi, 0xdf9c09ca
dec ecx
xor esi, ecx
not ebx
or edi, esi
xchg edi, ecx
or ecx, 0xdf9d6779
sub esi, ebx
xor esi, ecx
sub esi, 0xdf9e0d77
not ebx
jmp 0x548105
pop edx
mov ebx, ecx
xor ecx, esi
xchg ebx, esi
xor edi, 0xdfa6c483
xchg ebx, edi
dec edi
xor ecx, ebx
xchg ecx, esi
or ebx, ecx
xchg edi, ebx
jmp 0x545e75
push 0xd8697e01
or ecx, edi
and esi, 0xdfa897f2
add ecx, edi
add esi, ebx
xchg ebx, esi
or esi, ecx
inc edi
mov ebx, edi
rol edi, 0x1d
jmp 0x54632f
pop edx
mov esi, 0xdfaa7317
and esi, edi
not ebx
xchg edi, ecx
dec ebx
sub esi, ecx
inc ebx
mov edi, ecx
add esi, 0xdfac3fdf
shr ebx, 0x1f
jmp 0x54814c
mov edx, 0x6332a2e
and ebx, esi
mov esi, 0xdfadf8dc
xor ecx, edi
and ecx, ebx
jmp 0x547998
mov edx, 0x6332a2e
bswap ecx
and edi, ebx
sub esi, edi
nop
sub edi, esi
and esi, ecx
shr ecx, 0x16
shl esi, 0x1b
or esi, 0xdfb0ae68
and ecx, esi
jmp 0x54760e
call fcn.00548c69
add ecx, edi
bswap esi
xchg ecx, edi
dec ebx
add ecx, ebx
and esi, edi
sub ecx, esi
or ecx, 0xdfb632ef
mov ecx, 0xdfb66a2c
shl ecx, 0xe
jmp 0x547088
call fcn.00548c69
or edi, ebx
mov edi, ecx
or esi, 0xdfbc8aff
dec edi
neg esi
not esi
xchg ecx, edi
mov edi, ebx
mov edi, ecx
jmp 0x54885a
call edx
inc ebx
dec edi
and ecx, edi
sub edi, esi
sub edi, ecx
jmp 0x548b93
mov edx, 0x6332a2e
neg esi
sub ecx, 0xdfc83840
xchg ebx, edi
neg ecx
jmp 0x545894
pop edx
add edi, 0xdfd49b35
and ecx, esi
xor ebx, 0xdfd514ba
mov ecx, ebx
sub ecx, ebx
inc edi
and ebx, edi
add ecx, edi
add edi, ebx
and edi, ebx
xor ecx, ebx
add edi, ebx
add ecx, esi
jmp 0x54868e
push 0xd8677ce0
ror ecx, 0x1e
xchg ecx, esi
xchg ecx, ebx
dec esi
ror edi, 1
bswap esi
or esi, ebx
jmp 0x545c4a
push 0x401400
rol ebx, 0x13
or ecx, ebx
or ecx, edi
add edi, esi
or edi, ecx
mov ecx, ebx
xor ecx, ebx
xor esi, edi
jmp 0x5474e2
push 0xd85022f1
add edi, ecx
shl edi, 0xf
sub esi, edi
shl ebx, 0x18
xchg ecx, edi
add ecx, 0xdfe98f69
and ebx, edi
and ebx, esi
bswap edi
mov ecx, ebx
bswap ecx
jmp 0x5461cb
pop edx
or esi, ecx
xchg ecx, esi
xchg ecx, edi
mov edi, ebx
inc ebx
and ebx, edi
mov esi, ecx
sub esi, ebx
mov edi, ebx
or ecx, ebx
jmp 0x545b42
call edx
add ecx, 0xdff8fb77
or ebx, 0xdff938c7
add edi, ebx
mov ebx, 0xdff9ae8e
or ecx, 0xdff9eb8d
and ecx, edi
xchg esi, ecx
add ecx, 0xdffaae4c
or ecx, ebx
jmp 0x546432
call fcn.00548c69
shl edi, 0x17
sub ebx, edi
or esi, edi
and ebx, 0xe00a3222
xor esi, edi
xor edi, esi
and ebx, edi
not edi
xchg esi, ebx
not esi
bswap edi
xor ebx, edi
add edi, 0xe00c6034
jmp 0x547c25
push 0xd852aab1
or esi, ebx
and ebx, esi
xor edi, ecx
add ebx, ecx
add ebx, edi
ror ebx, 0x17
xor edi, ecx
jmp 0x5460ce
pop edx
add ebx, 0xe00f58a0
add ebx, 0xe00f908b
mov edi, ebx
xor edi, ebx
or ebx, ecx
xchg ecx, ebx
add esi, ecx
and ecx, ebx
or ebx, edi
mov esi, edi
mov ecx, edi
shl edi, 4
add ecx, 0xe011fb76
or edi, 0xe0123581
add ecx, 0xe0126c0d
jmp 0x546c59
push 0xd85c2fc7
and esi, ecx
sub esi, ecx
or ecx, edi
and esi, 0xe01e074a
sub ebx, esi
xchg ebx, edi
or esi, edi
and ecx, 0xe01f0681
xchg esi, edi
mov ebx, esi
jmp 0x546bfa
push 0xd859eb62
mov esi, ecx
or esi, 0xe0201b01
or edi, ecx
and ebx, ecx
xchg edi, ebx
xor ecx, edi
and edi, esi
add ebx, ecx
shl edi, 2
jmp 0x546153
call edx
shl ecx, 0x18
or ebx, edi
or ebx, edi
bswap edi
rol ecx, 0x1c
and ebx, esi
ror ecx, 0x1c
or edi, ebx
xor edi, ecx
jmp 0x54857f
pop edx
sub edi, ecx
sub edi, ebx
or esi, ebx
sub esi, ecx
or esi, edi
add ebx, ecx
or esi, 0xe031cc73
inc edi
mov ebx, esi
xor ecx, 0xe0327d29
xor ebx, edi
jmp 0x545964
push 0xd8606b60
bswap ecx
xchg edi, ebx
shl ecx, 0xc
not ebx
or ecx, edi
bswap edi
add esi, ebx
jmp 0x548495
call edx
or ebx, esi
and esi, edi
or edi, ecx
shl ebx, 0x10
xchg edi, ebx
and ecx, 0xe04613f7
xor edi, 0xe0464f47
ror ebx, 5
or ebx, edi
mov ecx, ebx
jmp 0x547cd4
push esp
sub ecx, esi
inc esi
shl edi, 2
mov esi, ebx
and ecx, edi
bswap ecx
xor ebx, edi
rol ebx, 6
add ebx, esi
jmp 0x546cf6
push 0xd860b494
or ebx, 0xe06d0c61
or edi, 0xe06d49a8
neg ebx
sub esi, ebx
shl ebx, 0xf
and ebx, 0xe06e49c5
jmp 0x546d5e
pop edx
sub esi, edi
xchg ebx, ecx
xchg ebx, esi
sub edi, ebx
ror edi, 5
dec edi
sub ecx, edi
jmp 0x545e31
call edx
and ecx, ebx
mov esi, 0xe0873d12
inc esi
sub ebx, edi
ror esi, 2
xor esi, ebx
and ebx, ecx
inc edi
mov edi, esi
add esi, ebx
not edi
sub esi, 0xe08a3d70
xchg esi, ecx
xchg edi, esi
jmp 0x547a41
push 0xd8533907
add ecx, edi
mov ebx, 0xe08b422d
mov esi, ecx
xchg ebx, edi
rol edi, 0x14
neg edi
shr esi, 7
sub ebx, esi
or ebx, ecx
rol edi, 0x17
jmp 0x547263
push 0xd85be7a1
mov ecx, 0xe08e48bc
inc ecx
add esi, 0xe08ec1c2
xor edi, 0xe08efd64
dec ebx
or edi, 0xe08f77f3
rol ebx, 0xd
add ebx, 0xe08ff1be
and ecx, 0xe0903fe0
add ebx, ecx
and ecx, edi
add esi, ebx
shr edi, 0x11
xor edi, ebx
and esi, ecx
jmp 0x548099
pop edx
add esi, ebx
sub esi, ecx
xor ebx, edi
xor esi, ecx
sub ebx, esi
sub ebx, esi
jmp 0x54666d
pop edx
sub ecx, esi
xor ecx, edi
sub esi, ecx
add ebx, edi
add esi, edi
xchg ebx, edi
xor edi, ecx
xchg ebx, edi
sub edi, esi
sub esi, 0xe0b58942
ror ebx, 6
not ecx
jmp 0x5477f0
push 0xd85e2bc5
bswap ecx
xchg ebx, esi
inc ecx
ror edi, 6
xor edi, esi
xchg edi, ebx
add esi, 0xe0b7debf
add ebx, edi
mov ecx, ebx
and edi, ebx
xor ecx, edi
and ebx, 0xe0b9161d
jmp 0x546951
call edx
xchg esi, ecx
mov ecx, edi
add ecx, 0xe0be5071
mov ebx, 0xe0be8eb1
or edi, esi
rol edi, 0x1d
xchg ecx, ebx
sub esi, ecx
or edi, 0xe0bfd168
bswap edi
not ebx
add ecx, ebx
add ebx, 0xe0c0c25a
xor edi, esi
jmp 0x546774
call edx
shl edi, 0x18
shl edi, 0x1e
or ecx, edi
rol edi, 0x1d
add edi, ebx
jmp 0x5472cb
pop edx
or edi, ecx
add edi, ebx
xor ebx, edi
sub esi, ebx
or ecx, esi
and ebx, edi
ror edi, 0xf
jmp 0x5485f7
pop edx
xchg edi, ecx
inc edi
add ebx, 0xe10b53bc
or edi, esi
and ecx, ebx
mov ebx, esi
mov ebx, ecx
mov ebx, ecx
mov ecx, ebx
ror ebx, 4
neg edi
add ebx, edi
mov edi, ecx
jmp 0x546dd9
push 0xd863ce21
xor ecx, 0xe11f3c24
add ecx, 0xe11f886e
sub ecx, edi
add ebx, 0xe12020ee
mov ebx, esi
or esi, ebx
sub ecx, esi
xor ecx, edi
and ebx, ecx
xor ecx, 0xe121a9b5
and esi, edi
xor ebx, esi
ror ecx, 0xd
jmp 0x5472a0
call fcn.00548c69
mov edi, 0xe127f703
and edi, ecx
shr edi, 0x14
add edi, esi
sub ebx, 0xe128eb79
or ebx, esi
ror edi, 2
xchg ebx, esi
sub edi, ecx
jmp 0x5483a1
pop edx
mov ecx, ebx
bswap edi
rol edi, 0x12
add edi, ebx
dec esi
mov ecx, esi
and edi, esi
shr ebx, 0x16
dec ebx
jmp 0x545b22