Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff15
jne 0x40106b
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xfffffee0
jne 0x4010ea
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.advapi32.dll_InitializeSid
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff2b
jne 0x401173
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
ret
call sub.kernel32.dll_GetLastError
cmp eax, 0xffffff14
jne 0x4011f7
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xfffffef4
jne 0x4012a3
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.oleaut32.dll_VarCyFromUI2
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.advapi32.dll_InitializeSid
call sub.oleaut32.dll_VarCyFromUI2
call sub.advapi32.dll_InitializeSid
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.advapi32.dll_InitializeSid
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
call sub.ntdll.dll_NtAccessCheckAndAuditAlarm
call sub.oleaut32.dll_VarCyFromUI2
call sub.oleaut32.dll_VarCyFromUI2
ret
jmp 0x475345
sub esi, ecx
xor esi, ecx
and ecx, edi
add edi, ecx
bswap ecx
jmp 0x47629e
pop ebx
xor edi, 0x1e8c3a0a
xchg edi, edx
sub edi, esi
neg edx
or esi, edx
sub ecx, esi
or edx, edi
or ecx, 0x1e8d9807
add edx, 0x1e8dd6b7
ror esi, 0x19
jmp 0x477b1f
call fcn.004784f2
and edi, esi
xchg ecx, edx
add esi, edi
and edx, ecx
dec edx
mov esi, ecx
xchg edx, ecx
dec ecx
jmp 0x475592
push 0x1bc31a52
neg edx
mov edx, ecx
sub edi, esi
mov edi, ecx
and edi, esi
mov esi, 0x1e9eb8d6
inc esi
jmp 0x476e16
pop ebx
and edi, 0x1e9f743e
add ecx, esi
xchg esi, edi
or edx, 0x1ea00672
shl esi, 0x16
jmp 0x47715d
pop ebx
sub edx, 0x1ea086eb
ror edi, 0x1a
sub edi, edx
xor edx, edi
xor edx, 0x1ea156fa
sub esi, edx
jmp 0x475354
call ebx
and edx, esi
sub ecx, 0x1eadd5e3
xor ecx, edi
dec esi
mov ecx, esi
neg edi
neg edx
xor esi, edx
mov edx, edi
jmp 0x476bb0
push 0x1bce577b
xchg edx, esi
rol edx, 0x15
add edx, ecx
shr edx, 0xb
xor esi, edi
sub ecx, edx
ror ecx, 2
jmp 0x477a99
push 0x1bcf7e96
and edi, esi
shl edi, 0xb
xchg edi, edx
add edi, 0x1eb5037c
xchg edx, edi
jmp 0x4761b5
push 0x1bcfd224
or ecx, edx
and edi, edx
or edx, ecx
xor ecx, edi
sub edx, 0x1ec5fe7d
or edx, edi
add ecx, esi
sub edx, ecx
jmp 0x4769c9
call ebx
or ecx, 0x1ec8ba63
add edi, 0x1ec8eb9b
xor edx, edi
sub esi, 0x1ec95874
and ecx, edx
jmp 0x47683b
push 0x1bcade94
xchg esi, edx
sub ecx, edx
mov edx, ecx
or edi, esi
xor edx, 0x1ed1735d
xor ecx, esi
mov edx, edi
xchg esi, edx
not ecx
xchg esi, edx
sub ecx, 0x1ed2a31e
shr ecx, 0x1f
xor esi, ecx
or edx, edi
xchg edi, esi
sub edi, ecx
jmp 0x47858f
push 0x1bc46346
xchg esi, edi
xor edi, ecx
xor ecx, esi
or ecx, esi
jmp 0x476d8c
push 0x1bc15227
add esi, ecx
or ecx, 0x1ee41283
and esi, 0x1ee4441c
and edx, ecx
mov ecx, esi
add edx, edi
mov edi, edx
xor edx, ecx
jmp 0x477c42
pop ebx
and edi, ecx
sub ecx, 0x1eee5553
add edx, 0x1eee863a
xor esi, 0x1eeeb85b
or ecx, edx
and esi, edx
sub edi, ecx
and edi, ecx
sub ecx, edx
or ecx, edi
jmp 0x4768ac
push 0x1bd37f83
or esi, ecx
add esi, edi
or esi, edi
and ecx, edx
shl esi, 0xb
dec edi
xor ecx, edx
sub esi, edi
neg ecx
or esi, edi
or ecx, esi
and esi, edi
jmp 0x476955
pop ebx
mov edi, ecx
sub edx, edi
xor edx, 0x1ef3133e
sub ecx, 0x1ef345f1
add edi, edx
mov edi, esi
and edi, 0x1ef3e102
add esi, 0x1ef412c4
mov edi, edx
jmp loc.00476437
pop ebx
and ecx, esi
ror edx, 5
and edx, 0x1f01fc8e
ror esi, 8
sub ecx, esi
add edi, 0x1f029170
or esi, edi
rol edx, 0x1a
add ecx, edx
xchg ecx, esi
jmp 0x476505
push 0x1bc7eb68
neg edx
ror ecx, 3
inc esi
add edx, edi
xchg ecx, esi
and edx, 0x1f0d7024
mov edx, 0x1f0da1ac
ror esi, 0x12
bswap ecx
and edi, ecx
sub esi, edx
shr ecx, 2
sub ecx, esi
or ecx, esi
and esi, edx
sub esi, 0x1f0f6421
jmp 0x477e30
push 0x1bc43a01
sub esi, ecx
add ecx, 0x1f1b1585
and esi, edi
and edx, 0x1f1b8130
sub esi, 0x1f1bb2be
or esi, edx
sub edx, edi
xor esi, 0x1f1c453e
bswap edi
and edi, esi
sub edx, edi
jmp 0x4758d4
mov ebx, 0x183c2e20
bswap edi
mov esi, edx
mov edi, edx
and edi, edx
neg edx
sub esi, edi
mov edx, 0x1f2f20ec
add edx, ecx
jmp 0x476f8d
push 0x1bca8b77
shl esi, 0x13
add ecx, esi
dec edx
sub esi, edi
xor esi, 0x1f306414
add edx, 0x1f3095a5
jmp 0x476b77
pop ebx
bswap edi
sub edi, 0x1f3a52b6
xor edi, esi
inc ecx
and edi, 0x1f3ae730
mov esi, edx
neg edi
sub edi, esi
inc esi
xor edx, edi
and ecx, esi
neg ecx
sub ecx, 0x1f3c7a1c
bswap edx
or esi, edi
xor edx, edi
jmp 0x476ed3
push 0x1bd0fd04
inc ecx
and esi, edx
or esi, ecx
inc esi
xor edi, edx
and esi, edi
and edi, esi
mov edi, ecx
xchg edx, edi
ror ecx, 0xc
bswap edx
add edi, esi
mov ecx, edi
jmp 0x47685a
pop ebx
mov ecx, 0x1f48bb54
add esi, edi
and ecx, esi
add ecx, edx
xor esi, ecx
and esi, edx
shl esi, 1
mov ecx, edx
sub ecx, 0x1f4a42b7
xor esi, ecx
jmp 0x475f04
pop ebx
inc esi
mov esi, edx
and edi, ecx
and ecx, esi
xchg ecx, edi
and esi, ecx
ror ecx, 0x1c
or edx, edi
and edx, esi
sub edi, edx
mov edx, ecx
or esi, ecx
xor ecx, edi
mov edi, esi
jmp 0x4782ae
pop ebx
neg esi
rol edx, 7
and esi, ecx
mov ecx, 0x1f532f41
rol edx, 0x14
mov edx, esi
mov ecx, 0x1f53c120
mov edi, edx
add edi, ecx
or esi, 0x1f545aa2
and edi, edx
neg esi
bswap ecx
jmp 0x476411
push 0x1bca627d
and ecx, esi
and ecx, 0x1f5802a6
dec edi
or edx, esi
or ecx, esi
not edi
or ecx, 0x1f59041a
jmp 0x475e55
pop ebx
sub esi, ecx
mov ecx, edx
add edi, ecx
and ecx, edi
jmp 0x4759e5
push 0x1bcfa955
xor esi, edx
xor edi, esi
xchg esi, edx
sub edx, esi
and edi, esi
ror ecx, 7
dec edi
jmp 0x475748
pop ebx
dec ecx
add esi, ecx
add edx, ecx
xchg edx, edi
jmp 0x475b3a
call ebx
mov esi, ecx
bswap esi
not edx
xor ecx, edx
bswap edi
jmp 0x476b9f
call fcn.004784f2
mov edi, esi
and edi, ecx
sub ecx, edi
ror esi, 0x19
and edx, esi
mov edi, 0x1f6f7c87
or edi, 0x1f6fba3c
and ecx, edx
neg ecx
rol edx, 0xe
add edx, esi
jmp 0x476745
push 0x1bc0cd5d
ror edx, 0x10
xor edx, ecx
mov edi, ecx
shl ecx, 0x1f
not edi
rol esi, 0x1e
and esi, edx
add edi, ecx
jmp 0x477a27
pop ebx
xor edi, edx
xor ecx, edi
and edi, ecx
jmp 0x475a2d
mov ebx, 0x183c2e20
and edi, edx
mov esi, 0x1f7bfc62
xor edx, ecx
and esi, edx
xchg ecx, edx
xor ecx, edx
or esi, 0x1f7d0d27
or edx, 0x1f7d4312
jmp 0x4765c6
call ebx
and esi, edx
and esi, ecx
and edi, esi
or esi, edx
xchg edi, ecx
shr edx, 0xf
mov edx, 0x1f80446f
xor ecx, 0x1f809009
mov edi, edx
and esi, edi
jmp 0x47549f
push 0x73f45
shr edi, 0x1c
and ecx, edx
mov edx, esi
and edi, ecx
ror ecx, 0x1a
rol edi, 8
sub esi, edi
xor edi, edx
or ecx, esi
sub edx, esi
jmp 0x477d85
push 0x1bc4b3aa
or esi, ecx
bswap edx
shr esi, 0x1b
sub esi, edx
bswap edx
or edx, edi
not edi
mov edi, edx
sub edx, 0x1f8a2676
jmp 0x476aef
push 0x1bd3d4d2
sub ecx, edi
xor ecx, edx
xor edx, esi
or ecx, 0x1f8b0cda
mov esi, ecx
shl edi, 2
mov edi, edx
dec esi
and edi, 0x1f8bff25
jmp 0x477bb2
push 0x1bce02d9
or ecx, esi
and esi, edx
mov edi, esi
xchg edx, esi
shl edi, 2
add ecx, edx
mov edi, esi
rol edx, 0x10
neg ecx
sub esi, 0x1f914fe2
sub esi, edi
jmp 0x476f4d
call fcn.004784f2
and esi, 0x1f99f13c
not ecx
xor esi, 0x1f9a55c8
add esi, edi
mov esi, edi
xor esi, edx
sub ecx, 0x1f9b1e32
mov esi, edi
or ecx, 0x1f9b7e40
add edx, ecx
neg esi
or edi, edx
sub edi, 0x1f9c41f3
xor esi, 0x1f9c7380
jmp 0x4777fc
pop ebx
add esi, 0x1f9cb842
xor ecx, edi
xor edi, esi
sub edi, edx
jmp 0x478182
push esp
xor edx, esi
xor ecx, edx
inc edi
xchg ecx, esi
or ecx, esi
mov ecx, edx
jmp 0x477c8e
call fcn.004784f2
inc ecx
and edi, ecx
ror edx, 0x1d
dec esi
mov ecx, esi
inc esi
add ecx, edx
not ecx
jmp 0x476323
call fcn.004784f2
mov edi, edx
or ecx, esi
rol ecx, 0x17
rol edi, 0xd
mov esi, edi
or ecx, edx
jmp 0x477c13
pop ebx
neg edi
and edi, edx
mov edx, 0x1fac6a91
xchg esi, ecx
and edi, edx
or esi, edi
ror ecx, 9
and edi, esi
jmp 0x475ffb
pop ebx
xchg edi, edx
bswap edx
inc edx
xor esi, 0x1fb99d12
shl edx, 3
sub edi, esi
neg ecx
sub ecx, 0x1fba6dd5
and edi, 0x1fba9e94
shr ecx, 0xe
jmp 0x477b96
call ebx
xchg edx, edi
mov edi, esi
rol edi, 0xe
add ecx, 0x1fbe651c
add ecx, esi
mov edi, esi
sub edx, 0x1fbef309
or ecx, esi
mov esi, edi
mov edx, 0x1fbf8c0a
xor edx, 0x1fbfbdd2
jmp 0x476192
pop ebx
xchg edi, ecx
mov edi, edx
nop
or edi, edx
and edx, esi
add ecx, edi
mov edi, esi
neg ecx
xor edi, 0x1fc1903f
jmp 0x475fad
pop ebx
bswap edi
xor ecx, edx
shl ecx, 8
jmp 0x4783b8
call fcn.004784f2
xor esi, ecx
sub esi, ecx
xor esi, edi
xor esi, edx
jmp 0x477ada
push 0x1bd127e3
shl esi, 0xb
bswap ecx
mov esi, 0x1fcd7800
xor edx, 0x1fcdb42c
sub edx, esi
or edx, edi
shr ecx, 9
or edi, 0x1fce7618
jmp 0x4775b3
pop ebx
bswap esi
sub esi, edi
ror ecx, 0x13
and esi, ecx
sub esi, edx
xchg edx, esi
mov edi, esi
mov edi, ecx
or edx, edi
xor esi, edx
jmp 0x476c0c
pop ebx
neg edi
inc ecx
or edx, 0x1fd8adb4
shr esi, 8
or ecx, 0x1fd9110f
mov edx, edi
xchg edx, ecx
sub edx, edi
jmp 0x476e31
push 0x1bd3aa2f
xchg esi, edi
shr ecx, 3
mov edi, 0x1fe85201
add edi, 0x1fe8847a
or edi, esi
sub edi, ecx
and esi, 0x1fe9220b
or edi, 0x1fe95323
xchg edi, ecx
shl edi, 0xf
add edx, ecx
xor ecx, edi
mov edx, edi
jmp 0x4763bb
mov ebx, 0x43370267
inc ecx
sub esi, 0x1fee692e
ror ecx, 0x16
or ecx, esi
mov edi, edx
xor esi, ecx
xchg ecx, edx
bswap esi
mov ecx, 0x1fefca9c
add edi, esi
jmp 0x477ec0
push 0x1bc678f9
nop
and esi, 0x1ff0730d
mov edx, ecx
jmp 0x478377
call fcn.004784f2
and ecx, edx
neg edi
add edx, edi
sub esi, edx
nop
or esi, edi
bswap edi
xor ecx, 0x1ff253e4
mov ecx, edx
jmp 0x4784a7
call fcn.004784f2
xchg edx, ecx
xor ecx, edi
sub esi, 0x1ff6895d
xor esi, 0x1ff6c51e
mov esi, 0x1ff6f6c3
bswap esi
or ecx, 0x1ff759b5
bswap edx
or edi, 0x1ff7bec0
jmp 0x476517
mov ebx, 0x43370267
xchg edi, esi
add esi, edx
shr edx, 9
inc edx
add ecx, esi
sub esi, 0x1ffed980
sub edx, ecx
rol edx, 0x11
bswap esi
xor ecx, 0x20011439
and ecx, edx
jmp 0x476848
pop ebx
not edi
add edi, edx
mov esi, edx
or ecx, esi
jmp 0x477a69
push 0x1bcab44e
shl edi, 0xb
mov ecx, edx
shl edx, 0x17
xchg edx, edi
jmp 0x47581d
pop ebx
bswap ecx
or edx, esi
inc ecx
add esi, 0x200ba4b1
jmp 0x477508
pop ebx
xchg ecx, edx
shl esi, 3
or ecx, edx
sub ecx, edi
add edx, esi
sub edx, 0x200cdf68
xor ecx, esi
xor esi, edi
xor edi, 0x200d7bc2
dec edx
shr edx, 0x12
mov ecx, edx
jmp 0x477efd
push 0x1bd27e57
xchg esi, ecx
dec ecx
or ecx, 0x20103fba
and edx, 0x20107146
xor edx, esi
add edi, ecx
shl edx, 0x1c
jmp 0x4774cf
pop ebx
and ecx, edi
dec edx
xor edi, 0x2011b4e5
mov esi, edx
jmp 0x47844e
pop ebx
or edi, esi
add edx, esi
sub esi, edx
mov edx, edi
not esi
add edx, esi
or ecx, esi
rol edx, 8
and edx, 0x2018b76c
dec esi
or edi, 0x20191a89
jmp 0x478422
push 0x1bc12a1b
xor edx, 0x201b3fd8
xor edi, ecx
add ecx, esi
and edi, ecx
not edi
neg esi
or esi, 0x201c6e5b
jmp 0x475967
push 0x1bc48b7a
xor esi, edx
or edi, 0x20254d79
mov ecx, esi
sub esi, 0x2025b76a
bswap esi
add edi, edx
mov ecx, 0x20264993
sub edi, ecx
sub ecx, edx
sub edi, 0x2026dc4c
jmp 0x47639a
mov ebx, 0x183c2e20
mov edi, 0x202cc6a5
mov edi, ecx
inc edi
and edx, esi
xchg edx, esi
xchg esi, edx
rol edi, 3
jmp 0x4764c7
push 0x1bc41065
mov edx, 0x202e3bd9
shr ecx, 0xb
jmp 0x475ced
pop ebx
mov ecx, esi
and edx, ecx
sub edx, esi
jmp 0x476c80
push 0x1bc2f1b8
xchg edx, edi
add esi, edi
xor esi, edx
jmp 0x47546c
push 0x1bce2d4f
ror ecx, 0x1b
or esi, 0x203e298c
or edx, edi
ror edx, 0x16
rol edi, 5
add ecx, edi
xor esi, ecx
mov esi, 0x203f5801
add esi, 0x203f8901
nop
or edi, edx
sub edx, 0x20401d4f
jmp 0x4755fb
call ebx
mov esi, edi
dec edi
nop
and edi, ecx
jmp 0x477cdf
call fcn.004784f2
and edi, ecx
or esi, ecx
sub edi, ecx
mov esi, 0x2041d5a9
add ecx, 0x20421246
sub edi, edx
jmp 0x477af4
pop ebx
and edx, edi
mov ecx, edx
shr edi, 0x18
xor esi, edi
or ecx, esi
and ecx, edx
and ecx, esi
add edi, esi
xor edx, edi
add edx, 0x20498a45
or ecx, esi
jmp 0x47690b
call ebx
add ecx, edx
and ecx, esi
or esi, 0x204d244a
and edi, esi
xchg edx, ecx
sub edi, esi
jmp 0x4762bb
mov ebx, 0x183c2e20
rol ecx, 0x18
sub edi, edx
and edx, ecx
neg esi
and ecx, edi
add edi, edx
mov edi, 0x20547e38
jmp 0x477abf
push 0x1bc627c7
inc edx
or esi, 0x2059d818
ror edi, 0x11
not edi
xor esi, ecx
xor esi, ecx
not edi
dec edi
bswap edi
or edx, 0x205b7226
ror edx, 0x17
jmp 0x4783d4
pop ebx
xchg edi, esi
xchg ecx, edx
or edx, ecx
sub ecx, 0x20632e3b
mov ecx, 0x20635fa7
mov edx, esi
mov edx, ecx
jmp 0x477bf6
push 0x1bc93833
or ecx, 0x2067b111
xor ecx, 0x2067e2a6
or ecx, edx
jmp 0x4775cc
push 0x1bc90ebe
mov ecx, edx
and edi, 0x206d2c11
xor esi, edx
sub edx, ecx
and ecx, 0x206dc838
mov esi, edi
mov ecx, edi
jmp 0x477259
mov ebx, 0x183c2e20
xchg edi, ecx
shl ecx, 5
add ecx, edi
xchg ecx, edx
or esi, edx
jmp 0x47537b
pop ebx
sub edi, 0x20928da8
sub esi, edi
add ecx, esi
xchg edi, esi
xchg edx, edi
add esi, edx
or edi, ecx
mov esi, edx
mov edi, ecx
add ecx, esi
neg edi
dec ecx
jmp 0x4772ca
mov ebx, 0x183c2e20
and edx, esi
not esi
sub edi, esi
mov edx, ecx
mov edi, esi
jmp 0x477967
push 0x1bd151a8
or edx, 0x209ce46b
sub esi, edi
xor esi, edx
xor esi, edx
xchg edx, esi
inc ecx
jmp 0x477767
mov ebx, 0x43370267
mov ecx, 0x209e28df
dec edx
xor edi, 0x209e8cdd
sub esi, ecx
dec esi
dec ecx
shr edi, 0x1b
xchg ecx, edi
neg edi
shl edi, 6
not esi
not ecx
jmp 0x476575
mov ebx, 0x4132136a
xor edx, ecx
and edi, esi
dec edi
sub edx, edi
xor edx, ecx
sub esi, ecx
xor esi, edx
add esi, edx
ror ecx, 0x18
mov esi, 0x20a5543a
jmp 0x476a5c
mov ebx, 0x183c2e20
or edx, ecx
xchg edx, edi
inc esi
add edi, esi
mov esi, ecx
and edx, esi
add esi, ecx
xor ecx, edi
neg edi
bswap esi
jmp 0x478002
call ebx
xchg esi, ecx
and ecx, edi
shl ecx, 9
or edx, ecx
sub esi, edx
sub edi, edx
xchg edx, ecx
add edi, 0x20c59684
xor ecx, esi
shr edx, 0xb
mov ecx, esi
jmp 0x47701b
push 0x40
and esi, edi
add edi, ecx
mov ecx, esi
add ecx, esi
sub esi, 0x20ce0875
and esi, edx
sub edi, 0x20ce6ffb
jmp 0x47636b
call fcn.004784f2
shl edi, 0x1b
or esi, edi
mov edi, esi
sub esi, edi
shl esi, 0x12
jmp 0x47623e
push 0x1bc101cc
not edi
xchg esi, edi
mov edi, 0x20e52a34
xor ecx, esi
sub edx, 0x20e58c2c
ror edi, 5
or esi, edi
mov edx, 0x20e62065
jmp 0x476cca
pop ebx
or ecx, esi
add esi, 0x20e860a7
and ecx, edi
rol esi, 0x1a
or esi, 0x20e8fd99
ror esi, 8
sub esi, 0x20e9617c
sub esi, 0x20e9923d
xchg edx, ecx
xor ecx, 0x20e9f5d3
jmp 0x476616
mov ebx, 0x183c2e20
mov esi, edx
rol edx, 0x11
add esi, edi
jmp 0x476a01
call fcn.004784f2
sub ecx, edi
ror edi, 0x1a
shr edi, 0xd
or edi, edx
and edx, esi
nop
add esi, edx
xor edx, edi
jmp 0x477072
call ebx
sub esi, edx
and edi, esi
sub edx, esi
add edi, esi
bswap edx
neg esi
and edi, edx
inc edx
xor edx, esi
xor esi, ecx
jmp 0x476231
call ebx
and edx, 0x20efdeaa
and edx, edi
mov edi, edx
or esi, 0x20f06d57
or edi, edx
and ecx, edi
and esi, edx
jmp 0x476b4f
push 0x1bca38b8
sub esi, edx
add edx, 0x20f25ea8
mov edx, esi
xor ecx, edi
sub esi, edi
and ecx, edi
mov edi, 0x20f357c7
jmp 0x47610a
pop ebx
mov edi, 0x20f81f58
sub ecx, edx
not edx
and esi, edi
sub ecx, esi
inc esi
sub edi, ecx
sub edx, edi
sub edx, esi
xchg edi, edx
jmp 0x475c04
push 0x1bd3fe57
and ecx, edx
or edx, esi
shr edx, 0xc
xor edx, ecx
sub ecx, edi
xor esi, edx
or edi, 0x20fc6086
xor edi, edx
neg edx
not edi
xor edx, ecx
mov edx, esi
and edx, ecx
jmp 0x4770e9
pop ebx
sub edx, esi
xor edx, edi
xor edi, edx
add edx, esi
xchg edi, ecx
mov ecx, edi
shl edi, 0x12
add edx, edi
or edx, 0x2101549e
jmp 0x476bec
call ebx
and esi, 0x21019833
or ecx, edx
dec edi
bswap edx
rol edi, 0x1e
ror esi, 0x1b
add ecx, esi
xchg edi, ecx
add esi, edi
jmp 0x47607f
push 0x1bc17a61
inc ecx
or edx, 0x2104e670
and edi, 0x210517c9
or edi, edx
and ecx, edi
add esi, edx
sub esi, edi
not ecx
mov ecx, esi
rol esi, 0x1f
xor ecx, edi
mov esi, edx
xor esi, edx
and ecx, edx
xchg esi, ecx
jmp 0x475e38
push esp
dec ecx
dec ecx
sub edi, ecx
xchg esi, edx
mov edx, esi
xor ecx, 0x210a847c
mov edi, esi
inc edx
shr edx, 0x16
or edi, edx
jmp 0x477888
pop ebx
xor ecx, edx
xor edi, 0x210e8aa4
add edx, ecx
xor esi, ecx
xor edx, esi
mov ecx, edx
jmp 0x477203
push 0x401400
or ecx, 0x2116c155
shr edi, 0xb
mov edx, esi
or edx, esi
xor esi, edx
not ecx
xor esi, 0x2117e664
or esi, 0x211822c7
not edi
xchg ecx, edi
xor esi, edi
sub ecx, 0x211adedb
add edi, esi
shr ecx, 7
jmp 0x477fa6
push 0x1bc814e6
shr edx, 0x1f
add edi, edx
xchg edx, ecx
neg edi
and edi, edx
add ecx, edi
xor ecx, edx
sub edi, esi
xor esi, edi
rol ecx, 0xe
add ecx, 0x21245014
shl edx, 0x15
rol ecx, 0x19
add esi, 0x2124e76e
jmp 0x47759f
call fcn.004784f2
and edi, ecx
mov ecx, edx
and edi, ecx
and edx, esi
or edi, ecx
dec edi
and esi, edx
xchg edx, edi
xchg esi, edx
xchg edx, esi
jmp 0x475789
push 0x1bd35531
xor esi, ecx
add edx, 0x212dfe3f
xor ecx, 0x212e2fb3
ror edi, 1
add ecx, 0x212e9e5f
sub esi, ecx
jmp 0x475a0b
call ebx
or esi, ecx
xchg ecx, edx
shr ecx, 0xc
and edx, esi
or esi, edx
xchg edi, ecx
bswap edi
xor esi, ecx
jmp 0x4760a1
call fcn.004784f2
bswap edx
shr ecx, 5
xor esi, 0x213e0486
mov esi, edx
not edx
and esi, 0x213e964a
xchg esi, ecx
and edi, ecx
add edi, ecx
add esi, edx
jmp 0x476f80
pop ebx
mov ecx, esi
bswap edi
sub ecx, edx
dec edx
mov edx, esi
sub edx, esi
xchg edx, ecx
mov ecx, edx
or ecx, esi
not esi
bswap esi
jmp 0x475486
pop ebx
mov esi, ecx
sub edx, edi
inc edx
mov esi, edx
dec esi
sub ecx, edx
add esi, 0x2166d513
and esi, ecx
sub edx, ecx
not ecx
jmp 0x4766ec
push 0x1bc6a150
xor esi, ecx
bswap edx
add esi, edx
add esi, ecx
sub ecx, esi
add ecx, esi
inc edi
mov esi, ecx
add ecx, esi
and edi, esi
jmp 0x4762ef
pop ebx
add edi, esi
rol esi, 1
and edx, 0x2176de94
ror edi, 0x15
sub esi, edi
not edx
xchg esi, edx
xor ecx, esi
jmp 0x476772
push 0x1bc65050
add ecx, 0x2178167e
add edx, ecx
and esi, 0x2178808d
sub edi, edx
sub edi, edx
mov edi, edx
bswap esi
sub esi, edx
xor esi, 0x2179eda3
jmp 0x4769ee
pop ebx
mov edx, esi
or ecx, 0x217f7053
xor ecx, esi
and edi, edx
xchg edi, edx
jmp 0x475616
pop ebx
neg edi
xor edi, ecx
or esi, edx
nop
xor edi, esi
xchg edx, ecx
sub esi, 0x21839ff7
mov esi, 0x2183d0ef
shr ecx, 0x13
mov edx, 0x218433a6
and edx, edi
sub edi, edx
not ecx
jmp 0x47761b
call ebx
and esi, 0x2187ec9b
rol edx, 0x1a
neg edi
shr edi, 0x1c
xor edi, 0x2188c0e6
shl edx, 3
add esi, edx
xchg esi, ecx
add ecx, edx
jmp 0x476e92
mov ebx, 0x43370267
add edi, ecx
shl edx, 0xe
add esi, ecx
xchg ecx, edi
and edi, ecx
ror ecx, 5
neg edx
xchg esi, edi
mov edi, ecx
mov ecx, 0x2196910c
xchg esi, ecx
add ecx, esi
jmp 0x476275