Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xffffff15
jne 0x401084
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xffffff09
jne 0x401112
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xffffff2d
jne 0x4011aa
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff03
jne 0x401210
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.oleaut32.dll_VarUI8FromDec
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
call sub.ole32.dll_CoQueryAuthenticationServices
ret
jmp 0x47525a
xchg edx, esi
jmp 0x47574f
push 0xc7d9b18f
ror edi, 0xf
mov ecx, ebx
nop
dec ebx
xchg ebx, ecx
mov ebx, 0xc9a9a0f3
or ebx, edi
ror edi, 3
jmp 0x4771fa
mov esi, 0x123b2f04
xchg ecx, edx
or ebx, edx
inc ecx
mov edx, edi
sub edx, edi
sub ecx, edi
inc edi
and ebx, edx
add edx, 0xc9afa685
sub ecx, edx
jmp 0x4765d5
mov esi, 0x2774562b
mov edi, edx
mov ebx, 0xc9b0538a
sub edx, 0xc9b0871d
ror edi, 7
xchg edi, edx
and ecx, ebx
sub edi, edx
sub ecx, 0xc9b18b8d
or edx, ebx
and edi, 0xc9b1fdb1
add ebx, ecx
sub ebx, ecx
sub edi, ecx
or edi, 0xc9b2c69d
jmp 0x47562a
push 0xc7d06cc7
mov ebx, edx
mov ebx, edx
and edi, 0xc9c715e8
xchg ebx, ecx
and edx, ecx
mov ecx, edi
xor ebx, ecx
sub edx, 0xc9c88269
neg edi
dec edi
jmp 0x476a58
push 0xc7d8e4df
sub ebx, edx
xor edx, ebx
mov ecx, 0xc9cadee4
bswap ebx
sub ecx, ebx
or ecx, 0xc9cc0efe
mov edi, ecx
sub edi, ecx
add ebx, edx
sub ecx, edi
bswap ebx
jmp 0x475fe3
push 0xc7e3abdc
add ebx, edx
neg ecx
or ecx, ebx
not edi
rol ebx, 5
shr edx, 7
dec edx
inc edx
xchg ecx, ebx
and ecx, ebx
jmp 0x475ca3
push 0xc7ce91c6
xor edx, ebx
and ebx, edi
xor edx, ecx
or ebx, ecx
and edi, ecx
neg ebx
inc edi
jmp 0x475676
push 0xc7de787e
or edx, 0xc9e628ac
add ecx, 0xc9e68a3c
or edi, ecx
sub ecx, edi
sub ebx, edx
mov edx, ecx
bswap edi
inc edi
add ebx, 0xc9e9d4c6
or edi, 0xc9ea38c0
xor ebx, ecx
xchg edi, edx
add ecx, edx
jmp 0x4758ea
push esp
or edi, ecx
or ecx, edx
mov edx, ebx
xor ecx, edx
and edx, edi
or edi, ecx
xchg ebx, edx
jmp 0x47654c
pop esi
sub ebx, ecx
xchg edi, edx
and ecx, 0xc9f904f3
neg edi
ror ecx, 0x1e
jmp 0x4771c3
call fcn.0047759f
xor edx, ecx
add ebx, edx
xchg edi, ecx
or edx, ecx
sub edi, ebx
and edx, 0xc9faf6ef
sub ebx, ecx
xor edx, ebx
sub edx, ecx
or edi, ebx
and edx, ebx
jmp 0x476c49
push 0xc7ceba8c
or edi, 0xc9ff13d0
or ecx, 0xc9ff46b3
xchg edi, edx
or ebx, ecx
add edx, edi
mov ebx, edi
add ebx, edi
nop
or ebx, edx
jmp 0x476ef8
push 0xc7e42e5b
sub ecx, edi
not edx
xor ebx, ecx
sub ebx, ecx
and edi, edx
bswap edi
xor edx, ecx
sub edx, ebx
add edi, edx
mov ecx, ebx
jmp loc.0047527e
push 0xc7c97c75
xor edi, edx
and ecx, edi
mov ecx, 0xca1310eb
neg edx
sub ecx, edi
ror ecx, 0xe
sub edx, edi
or ebx, edx
mov ecx, edx
shl ebx, 0xe
or edi, ebx
bswap ebx
jmp 0x475a0d
call esi
mov edi, 0xca1b25c3
shr ecx, 0x1f
or ecx, ebx
and ebx, 0xca1c436a
or edi, ebx
or ecx, edi
xor ebx, ecx
shl edi, 0x13
mov ebx, edi
add ebx, edx
not edx
or ebx, 0xca1f998f
sub ecx, ebx
jmp 0x47662a
call esi
xor edi, ecx
and ebx, edi
xor edi, edx
xor edx, ecx
sub edx, ecx
shl ebx, 0xc
mov edi, ebx
xor ecx, 0xca248a5e
add edx, ebx
and ebx, edi
add edx, 0xca252f16
add edx, edi
sub edx, 0xca259563
jmp 0x477413
pop esi
and ecx, ebx
add ecx, 0xca2aa052
add edi, 0xca2ae9df
neg edi
ror edx, 2
xchg ebx, edx
or ecx, edx
mov edi, 0xca2c106b
add edi, ebx
and ecx, ebx
rol edi, 2
add ebx, 0xca2cf54d
add ebx, edx
jmp 0x476744
push 0xc7dee568
neg ebx
inc ebx
sub ebx, edi
and ebx, 0xca35a221
mov ebx, edi
sub ebx, edi
dec edx
bswap edx
jmp 0x4772dd
pop esi
mov ebx, edx
sub ecx, edi
mov edx, ebx
inc ebx
ror edx, 0xd
dec edx
inc edi
xchg ecx, edx
xchg edx, ebx
add ebx, edi
mov edx, ecx
jmp 0x476055
call esi
sub edi, edx
bswap edx
and ecx, ebx
or ecx, edx
ror ebx, 0x1c
jmp 0x475b0a
push 0xc7d40b91
sub ecx, ebx
mov edi, ebx
rol edi, 0x1a
neg ecx
xor edx, edi
add edx, ecx
and ecx, edi
or edx, ecx
shl ecx, 0xd
mov ebx, edx
shr edx, 0x14
xor ecx, edx
or ecx, edi
and ecx, edx
jmp 0x476106
push 0xc7d621a6
neg edx
sub ebx, 0xca47551b
add ecx, edi
shl edx, 8
jmp 0x476886
pop esi
ror ecx, 0x10
rol edi, 0x15
xor edi, 0xca4e6028
sub edi, 0xca4e97ac
sub edi, 0xca4ecb22
sub ecx, edx
xor ebx, ecx
jmp 0x476b3d
push 0xc7c9c6f8
xchg edi, ebx
shr edi, 9
xor ecx, edx
neg ebx
xchg edx, edi
xchg edx, ecx
mov ebx, edi
shl ecx, 2
jmp 0x476ae0
call esi
xchg edx, edi
and ebx, 0xca532111
xchg edi, ebx
dec edx
jmp 0x476342
push 0xc7d3debc
mov ecx, ebx
xor ecx, ebx
mov ecx, edi
or edi, ecx
or edi, 0xca54d6a6
add ecx, edx
bswap ecx
sub edi, edx
and edi, edx
xchg ebx, edi
shr ebx, 0x14
not edi
or edx, ecx
dec ecx
or edx, edi
jmp 0x47594a
pop esi
inc ebx
sub ebx, 0xca57e340
xchg ecx, edi
dec edx
jmp 0x475973
push 0xc7e402d2
sub edi, edx
sub ebx, 0xca58f96d
dec edx
add edi, 0xca59601e
shl edx, 7
mov edx, ecx
rol edi, 0x1e
ror edi, 0x15
jmp 0x4756b5
pop esi
xor edi, ebx
add edi, edx
xor ecx, edi
dec ecx
inc ecx
xor edx, 0xca5d414f
mov ecx, 0xca5d74bf
or ecx, edx
jmp 0x4772a7
pop esi
and edi, 0xca62afec
shl ecx, 0x1c
xor ebx, 0xca631653
and edx, 0xca634a23
neg ecx
sub edx, ecx
mov ebx, 0xca63e87b
or edi, ebx
or edi, 0xca645dcc
add edx, 0xca64919f
mov edi, edx
xchg ebx, edi
xor edx, ecx
add edx, 0xca655c1d
xor edi, 0xca6592e2
jmp 0x47600c
call esi
xchg edx, edi
xor ebx, 0xca661521
or edx, ebx
inc ebx
shr edi, 0xc
shr ebx, 7
mov edi, ebx
xchg edi, edx
mov ecx, edi
jmp 0x476a7c
push 0xc7d93c17
xchg ebx, ecx
sub ecx, ebx
xchg ecx, ebx
or ebx, 0xca71df01
inc edi
sub edi, edx
and ecx, 0xca7345e7
jmp 0x47616d
pop esi
xchg ecx, edx
add edx, edi
add ecx, ebx
or ecx, 0xca7b6d5c
xor edi, ecx
shl edi, 9
mov ecx, edi
xor edi, 0xca7c3b63
add ecx, ebx
ror ecx, 0xb
and edi, ebx
bswap ebx
mov edi, edx
xor edi, ecx
and edx, ecx
xor ecx, edx
jmp 0x4763a1
push 0xc7e3d727
and ebx, ecx
xchg ebx, edi
bswap ecx
and edi, ebx
bswap edi
nop
sub edi, edx
not ebx
jmp 0x475a77
push 0x73e5a
shr ebx, 0x1a
or ecx, 0xca918125
ror ecx, 0x16
xor edi, ecx
xor edx, edi
not edi
not edi
jmp 0x477156
call fcn.0047759f
xor edi, 0xca9b6fb7
xor edx, ecx
xor edx, 0xca9bd689
and edx, ebx
bswap ecx
shl ebx, 8
shl ecx, 0x1c
mov ebx, edx
rol ecx, 0x18
ror ecx, 2
and edx, 0xca9dd860
or ecx, 0xca9e0c0d
jmp 0x475d8b
call esi
xor edi, edx
rol ecx, 0x1d
shl edi, 0x19
xor edi, edx
sub ecx, ebx
jmp 0x4765bb
pop esi
xchg edi, ecx
add ebx, ecx
neg ebx
mov edx, ebx
rol edx, 6
xchg edx, ebx
or ebx, ecx
not ecx
mov ebx, 0xcaa17b92
jmp 0x4767d0
call fcn.0047759f
xchg ebx, edi
sub edi, edx
and ebx, edi
xchg edx, ecx
xchg edi, edx
xor ecx, edi
add ebx, edi
and edi, ebx
and ecx, 0xcaa6aab2
mov ecx, 0xcaa6de1c
xor ecx, edi
mov edi, ecx
jmp 0x4757a5
call fcn.0047759f
mov ebx, edi
shl edi, 0x18
or ecx, 0xcaa80b88
and ebx, 0xcaa855c3
xchg edx, ebx
xor ecx, ebx
xor ebx, edx
xchg ebx, edi
not ecx
sub ebx, ecx
mov edx, ebx
xor edi, 0xcaaafdc1
xor ebx, edx
jmp 0x475b4e
pop esi
and edi, ecx
or edi, 0xcab7d38a
sub ebx, 0xcab83069
jmp 0x47686b
pop esi
or ebx, 0xcab8aeb8
xor edi, 0xcab92109
mov edi, ecx
ror edx, 7
or edi, ebx
and ebx, edi
mov edx, 0xcaba34d2
inc edx
mov edi, ecx
mov ecx, edi
xor edx, 0xcabb362d
jmp 0x4775d5
mov esi, 0x123b2f04
xchg edx, ecx
or ebx, edi
xor edi, ecx
xor ecx, edi
or ebx, edi
xchg edi, ecx
xchg ecx, edx
or ecx, edx
add ecx, edi
not edx
jmp 0x476d00
pop esi
inc ebx
add edi, edx
mov ebx, 0xcac830c6
add edx, 0xcac864bb
xor edx, 0xcac8aef2
sub edx, edi
and ebx, edi
xor ebx, 0xcac96614
jmp 0x4759d7
call esi
and edi, 0xcac9b9ed
xchg ecx, edx
mov ebx, edi
dec edi
or edx, ecx
xchg edx, edi
neg edi
and edi, 0xcacb5dd5
add ebx, edx
or ecx, edx
jmp 0x475ea9
push 0xc7d9110e
xor ecx, edx
sub edi, ecx
sub edi, 0xcacc9b65
shr ebx, 0xf
not edi
not edi
and edi, edx
add ecx, edx
dec edi
rol edx, 7
xor edi, 0xcace8934
jmp 0x475bc1
push 0xc7ccb9d0
xor edi, edx
not edx
mov ecx, edx
xor edx, 0xcacf815b
xor ebx, 0xcacfc9fc
xor ebx, edx
sub ecx, ebx
mov ebx, ecx
mov edi, 0xcad0c73a
mov ecx, 0xcad0fa81
or edi, ebx
sub edi, edx
sub ebx, 0xcad1a822
shr ebx, 0x1b
jmp 0x476045
push 0xc7cce33f
and edx, ebx
or ecx, ebx
xchg edi, ecx
jmp 0x477072
push 0xc7de1285
or ebx, 0xcad3145f
not ebx
sub edx, edi
and ebx, 0xcad3d071
add edi, ebx
mov edx, ebx
rol edi, 2
ror edx, 0x13
sub ecx, 0xcad4d27d
jmp 0x475541
mov esi, 0x123b2f04
or edx, edi
xor edx, ebx
sub ebx, 0xcadb2e44
or edx, 0xcadb6565
neg ecx
xchg ecx, edi
or edx, ecx
not edi
mov ebx, edi
xchg edi, edx
jmp 0x47646e
mov esi, 0x2774562b
mov ecx, edx
add ecx, ebx
mov edi, ebx
or edi, ecx
sub ebx, edx
or edi, edx
mov ecx, 0xcade7249
xor edx, ebx
sub ecx, edx
jmp 0x476b83
call fcn.0047759f
add edx, 0xcadf9818
or edi, ebx
mov ebx, edi
inc edx
sub edi, ebx
and ecx, edi
and edx, ebx
inc ebx
sub ecx, edi
jmp 0x476df3
mov esi, 0x2774562b
or edi, 0xcae3cdff
xor edi, ebx
xchg edx, ebx
and ecx, 0xcae53dc5
sub edi, ecx
shl edx, 0x1d
shr edi, 0x1b
and edi, edx
ror edx, 0x14
sub edi, edx
inc edi
jmp 0x4762f7
push 0xc7d96861
xchg ebx, edi
mov edx, ebx
xor ecx, 0xcae883fe
sub ecx, edx
dec edx
mov ecx, edi
sub edx, ebx
and edi, edx
jmp 0x475261
push 0xc7ce6402
mov edx, ecx
xchg ebx, edx
inc edi
neg edx
add edi, ebx
sub ebx, 0xcaee25b2
or ebx, edx
and edi, edx
mov ebx, edi
or ebx, 0xcaeff9ad
xchg ecx, ebx
not ebx
and edx, 0xcaf13483
jmp 0x4754d6
call fcn.0047759f
ror ebx, 6
and edx, ecx
add edx, ebx
xor ecx, 0xcaf5dcd2
or ecx, 0xcaf63ece
not edi
add edi, ebx
and ebx, edx
xor edi, ecx
xor ecx, 0xcaf8297e
or edx, edi
jmp 0x47683a
pop esi
mov ebx, ecx
and ebx, edi
xor ecx, ebx
sub ebx, edi
mov edi, 0xcafa9aa6
jmp 0x476696
pop esi
and edx, 0xcafdfc22
sub ebx, edx
add ecx, edx
add edi, ecx
neg ebx
or ecx, edx
xchg ecx, edi
mov edx, ebx
jmp 0x4761a6
call fcn.0047759f
xor edi, ecx
shr edi, 0x1c
or edx, 0xcb0fc664
and edx, 0xcb103a83
xor ebx, edi
and ecx, ebx
xchg edi, ecx
and edx, 0xcb12460d
sub edi, 0xcb12d378
sub edx, ebx
jmp 0x475fc1
pop esi
xor edx, edi
sub edi, ecx
inc edi
and ebx, edi
rol ebx, 0xd
xchg ebx, edx
mov ecx, edx
mov ebx, edx
and edi, edx
jmp 0x47685a
call esi
inc edx
or edx, ebx
dec ebx
or ebx, ecx
inc ebx
mov ebx, edx
mov edx, 0xcb1e5193
xor ecx, edi
inc edx
and ecx, ebx
mov ecx, 0xcb201cf1
neg ebx
add ecx, edx
add ecx, ebx
jmp 0x4771a1
pop esi
shl ecx, 0x12
not ecx
xchg ebx, edx
or edi, edx
and ebx, ecx
or edx, 0xcb32c84e
rol ebx, 0x1c
bswap edi
and edx, edi
xor ebx, edx
add ecx, edi
mov ecx, 0xcb352048
xchg edx, ecx
xor edx, ebx
and edi, ebx
jmp 0x477104
mov esi, 0x2774562b
and edi, edx
xor edx, 0xcb37269d
and edx, ecx
and edx, ecx
sub ebx, edi
or edx, edi
xor edx, ebx
add edx, ecx
dec edi
xor ebx, 0xcb397de0
jmp 0x47678a
call esi
shl ebx, 0xa
mov ecx, 0xcb3de6b0
or ebx, edi
not edi
dec ebx
add edi, ecx
not edi
jmp 0x4764c1
call fcn.0047759f
sub ebx, edx
xchg ebx, edi
shr edx, 0x1f
sub ebx, edi
mov ecx, 0xcb44be6e
mov edx, 0xcb453227
and ebx, edi
jmp 0x4765ac
call esi
xchg ebx, edi
and edi, edx
shr ebx, 2
jmp 0x476666
pop esi
ror edx, 0x1c
shr edx, 0xf
add ecx, ebx
add ecx, edx
add edx, edi
mov ecx, edx
xchg edi, edx
and edx, edi
jmp 0x475874
pop esi
and ebx, ecx
sub edx, 0xcb51d99f
or ecx, 0xcb520d33
inc ecx
inc edi
ror ebx, 0x1c
or edx, edi
xor ecx, edx
jmp 0x4753ee
push esp
or edx, 0xcb5697f2
sub edi, ebx
sub edi, edx
bswap edx
mov edx, 0xcb577b28
mov edi, ecx
neg edx
xor ebx, edx
nop
xor ebx, edi
mov ecx, 0xcb58fbf1
rol edx, 0x10
ror edi, 0x19
xor edx, edi
jmp 0x47672f
call esi
mov ecx, 0xcb5c8b69
shr edx, 0x12
jmp 0x477553
pop esi
and edx, ecx
and ecx, 0xcb5d464f
add ebx, edx
xor edx, 0xcb5de25a
not edi
or edx, ecx
jmp 0x477499
call fcn.0047759f
and ebx, edi
and edx, edi
or edx, ebx
mov ecx, edx
bswap edx
add ebx, ecx
dec ebx
and edi, 0xcb619a49
or ebx, edi
or ecx, edx
not edi
rol ecx, 2
jmp 0x477123
call fcn.0047759f
xor edi, edx
xor edi, edx
sub edx, ebx
add edi, 0xcb63d4bd
xor edx, 0xcb641481
not ecx
neg ecx
jmp 0x475938
pop esi
mov edi, 0xcb65c7b1
xchg edi, ecx
and edx, ebx
shl edi, 0xe
ror edi, 0x14
or edx, edi
jmp 0x475c16
pop esi
xchg ebx, edx
shl ecx, 0xb
nop
xor edi, ecx
inc ecx
or ecx, ebx
sub edi, ebx
jmp 0x475a3b
pop esi
neg ecx
add ecx, 0xcb6dbba6
not edi
and edi, ebx
rol ebx, 5
mov ecx, 0xcb6eaa21
xor edx, ebx
neg ebx
add ebx, ecx
bswap edx
jmp 0x475aad
push 0xc7d6a247
mov ebx, edi
sub edx, 0xcb702c83
mov edi, edx
sub ecx, edx
xor edx, ebx
xor edx, ecx
and edx, ebx
jmp 0x4775f7
push 0x40
shr edx, 5
mov ecx, edx
sub edi, ecx
bswap edx
xor edx, edi
jmp 0x475d12
pop esi
mov edi, edx
or edi, ebx
sub edi, edx
xor ecx, ebx
mov ebx, edx
neg ebx
sub ecx, 0xcb7aa4f6
dec ebx
and edi, ebx
jmp 0x47650b
call fcn.0047759f
rol ebx, 0x1a
shl edx, 0x1a
and edi, ebx
shr ebx, 9
and ecx, edx
xor ebx, ecx
sub edi, ebx
xor ebx, 0xcb8101e8
or ebx, 0xcb8135a7
jmp 0x475a29
pop esi
rol ebx, 0x1c
not ebx
neg ecx
sub edx, ecx
neg edx
ror edx, 9
jmp 0x47705a
pop esi
or edx, edi
sub ecx, edi
neg ebx
sub ecx, 0xcb861ff5
sub edx, 0xcb86538c
sub edx, 0xcb868719
xor ecx, edx
jmp 0x476e51
call esi
add edx, ecx
xchg ebx, edi
mov edx, edi
and ebx, 0xcb8b1067
mov ecx, edx
ror ecx, 0xa
xor edi, ebx
not edi
xchg ebx, edx
or edi, ebx
jmp 0x475a67
pop esi
nop
and ecx, edi
mov ebx, ecx
add ecx, ebx
or edi, ebx
and ebx, ecx
jmp 0x475f9d
pop esi
and ebx, edi
xchg ebx, edx
or edi, edx
and ebx, ecx
xchg edx, ecx
or edx, ebx
dec edx
not ebx
rol edi, 6
shr ebx, 0xb
jmp 0x4775bd
push 0xc7d64de1
and edi, ebx
mov ecx, edx
dec edx
not edx
rol ebx, 2
mov edx, ebx
sub edi, 0xcb92089c
add edi, ecx
xor edi, ebx
add edi, 0xcb92e957
shl ebx, 5
xor edx, 0xcb9353c0
shr ecx, 0xb
jmp 0x476a32
call fcn.0047759f
and ecx, 0xcba446ff
sub ebx, edi
and edi, ebx
not edx
xor ebx, edx
or ecx, 0xcba54ba2
or edx, 0xcba57f30
xor edi, edx
xchg ebx, ecx
add ecx, edx
and ecx, ebx
rol ebx, 6
jmp 0x47635a
push 0xc7d679be
xchg edi, ebx
and ebx, 0xcbacc3d3
xchg edx, edi
not ebx
not edi
or ebx, 0xcbada3b1
and ebx, edx
or ecx, edx
mov ecx, edi
add ecx, edx
jmp 0x4766b8
push 0xc7d09609
xor ebx, edi
mov ebx, ecx
add edi, ecx
or edi, 0xcbb02149
sub edi, ebx
and ecx, edx
sub edi, ebx
sub edi, 0xcbb3cb90
add edx, edi
jmp 0x476d85
pop esi
dec edx
dec edx
add ebx, 0xcbb5d09d
or edx, 0xcbb63260
xor edi, edx
dec edi
xchg ebx, ecx
sub edi, 0xcbb80514
xchg ecx, edx
sub ecx, edi
not edx
jmp 0x475413
mov esi, 0x123b2f04
mov ecx, edx
mov ecx, edx
xchg edi, ebx
and edx, 0xcbbdeb42
add edx, ecx
bswap edi
neg edx
mov edx, 0xcbbee6db
jmp 0x475d55
push 0xc7e13369
shl edi, 0xa
not edx
xor ebx, edi
or edx, edi
xchg edi, ecx
mov ebx, ecx
mov ebx, edx
jmp 0x476b56
push 0xc7e15f1d
sub edi, edx
mov edx, 0xcbc7998c
xor ecx, ebx
sub ecx, 0xcbc8588c
dec ebx
mov ecx, edi
or ecx, edx
mov ebx, edx
add edi, 0xcbca80c2
or ebx, 0xcbcae369
inc ecx
jmp 0x476143
call fcn.0047759f
xor ebx, edi
xchg edi, ebx
mov ebx, 0xcbcc882d
ror edi, 0xd
add edx, ebx
sub edx, 0xcbcdb253
xchg edx, edi
xor ebx, 0xcbce797f
add ecx, ebx
or ecx, edi
jmp 0x4757f8
push 0xc7cad45e
mov ecx, 0xcbd061a5
add ebx, ecx
xchg ebx, edx
add edx, edi
jmp 0x4752de
call esi
mov ecx, 0xcbd8ecf6
mov edi, ecx
and ebx, edx
shl ebx, 5
and edx, ebx
or edx, ebx
inc ecx
jmp 0x475ebd
call fcn.0047759f
mov edx, 0xcbe586ca
xor edi, 0xcbe628f9
mov edi, edx
shl edi, 0xe
jmp 0x476433
mov esi, 0x2774562b
sub ecx, edi
mov edx, ecx
rol ecx, 4
inc edi
and edx, ebx
or edi, ecx
xor ebx, edx
sub edi, ecx
and ebx, 0xcbede630
ror ebx, 0x13
xchg edi, edx
xor ecx, ebx
add edi, ecx
add ecx, ebx
jmp 0x476125
push 0xc7d0c33a
or ebx, edx
add ecx, ebx
and ecx, edi
xchg edx, edi
sub ecx, 0xcbf8ac50
add edi, 0xcbf8ecbb
not edi
jmp 0x4752be
call esi
mov ecx, ebx
dec edx
rol ecx, 0xe
sub ebx, edx
and edx, edi
dec edx
jmp 0x475615
push 0xc7d54113
xor ebx, edi
not ecx
inc ebx
add edi, ecx
xor edx, ebx
sub edx, ecx
xchg ecx, edx
xor ecx, ebx
xchg ecx, ebx
jmp 0x47717d
push 0xc7cee7ba
or ecx, edx
add edi, 0xcc173106
rol edi, 0x1b
and edx, ebx
mov ecx, edi
mov edi, edx
sub edx, ebx
xor edx, ebx
shl ebx, 1
add ecx, edi
dec edx
xor edx, edi
jmp 0x475f3a
pop esi
sub ecx, 0xcc325c5f
xor edx, ecx
inc edx
or ebx, edi
add ebx, 0xcc3365ef
dec ecx
jmp 0x477396
push 0xc7cd0fc0
and edx, edi
add ecx, edx
and edx, edi
or edi, ebx
inc edi
mov ebx, edx
xor ecx, edx
xchg ebx, edx
add edx, 0xcc36392f
add edi, 0xcc36c2e0
and edx, ebx
or edi, edx
bswap ebx
jmp 0x476d3c
pop esi
and ecx, edi
or edi, ebx
dec ecx
add edi, 0xcc470915
add ebx, ecx
or edi, ecx
add ecx, edi
mov edi, ecx
sub ecx, edi
xor edx, ebx
or ebx, edx
jmp 0x47591e
call esi
xor edi, ebx
add edx, edi
add edx, ecx
inc ecx
or edx, ecx
xor edi, ebx
xchg ebx, edi
and edx, ecx
inc edx
add edx, ebx
rol ecx, 0x19
jmp 0x47621d
push 0x401400
xor ebx, ecx
sub edx, ebx
shr edi, 6
sub edx, 0xcc4d8da5
dec edx
not ebx
sub edx, edi
sub edi, ecx
rol ecx, 3
xchg ecx, edx
or ebx, edi
bswap edx
jmp 0x47648d
mov esi, 0x2774562b
mov ebx, edx
and edi, edx
rol ebx, 7
dec edx
neg edi
sub edi, ebx
shr ecx, 0x1a
ror ecx, 0x1d
and ecx, edi
sub ebx, edx
and ebx, edi
sub ebx, edx
jmp 0x4761f0
pop esi
mov ecx, ebx
and edx, ecx
and edx, 0xcc531b84
or edx, edi
mov ecx, ebx
sub ebx, 0xcc53bf8b
xor edx, 0xcc5406a4
and edi, edx
jmp 0x475d9e
pop esi
mov edi, 0xcc549722
mov edi, ebx
and ecx, edi
or ecx, edx
sub ecx, ebx
mov ebx, ecx
and edi, edx
bswap edx
and ecx, edx
jmp 0x476263
mov esi, 0x2774562b
or ecx, edx
add edi, edx
add ecx, ebx
bswap edx
or ecx, edi
sub edi, ebx
shl edx, 0xd
mov edx, ebx
or ecx, edi
bswap ebx
and ebx, edx
add ecx, edi
bswap ecx
mov edi, edx
jmp 0x475de6
mov esi, 0x4132136a
rol edx, 0xf
xchg ecx, edx
ror edx, 0x13
sub ecx, 0xcc6a804e
not edi
shr ebx, 0xc
add edi, ebx
sub edi, edx
xor edi, edx
dec ebx
and ebx, edx
xchg ebx, ecx
xchg ecx, ebx
xor ecx, 0xcc6d9f54
xor ecx, 0xcc6de9db
jmp 0x477372
push 0xc7df62fb
or ecx, edx
xchg ebx, ecx
xor ecx, ebx
and ecx, 0xcc6ecf3c
xor edx, ebx
dec ecx
and edi, ebx
add ecx, ebx
mov ebx, edi
jmp 0x4763ce
mov esi, 0x123b2f04
mov ecx, ebx
ror edx, 0x11
sub edi, ecx
sub ecx, ebx
xchg edx, ecx
shr ebx, 0x14
or ecx, ebx
ror ecx, 0x1a
sub edx, edi
add ebx, edi
add ebx, ecx
jmp 0x475e0f
call fcn.0047759f
or edi, edx
and ecx, edi
sub ecx, ebx
rol ecx, 0xd
sub edi, ebx
not ebx
xor edx, ecx
xchg edx, ebx
mov edi, ecx
dec edi
sub ecx, edx
xchg ecx, edi
and edi, ebx
jmp 0x475601
push 0xc7d806e4
ror edi, 0x1b
mov edi, ebx
dec ebx
bswap ecx
add edx, ebx
neg edi
mov ecx, 0xcc7ebcaf
mov ebx, edi
and edi, edx
jmp 0x4772fc
pop esi
add edx, 0xcc8c9af7
sub ecx, ebx
shl ecx, 0x10
or ebx, edx
or ecx, 0xcc8d6820
xor ecx, edi
mov edx, edi
xor ecx, edi
and edx, ecx
jmp 0x4767e4
mov esi, 0x123b2f04
mov ecx, 0xcc8e860b
sub edi, edx
xchg edx, ebx
or ecx, 0xcc8f4801
and ecx, 0xcc8fb05b
or edi, ecx
jmp 0x4765fb
pop esi
sub ebx, 0xcc9957e8
xor edx, 0xcc998b62
add edi, edx
xchg edi, edx
and edi, ebx
sub ebx, 0xcc9a6337
mov ebx, 0xcc9a96a0
sub edx, ebx
xchg ecx, edi
rol edx, 0xc
jmp 0x476bbb
pop esi
and ebx, edx
add ecx, ebx
mov ebx, edi
and ecx, edx
shl ecx, 5
bswap ebx
and ebx, edx
inc edx
sub edi, edx
and edi, 0xcca83a2e
jmp 0x47543a
push 0xc7e29b9a
inc edi
mov edx, edi
nop
mov ecx, edi
mov edi, ecx
sub edi, 0xccb301f1
jmp 0x4760e0
push 0xc7cbdb33
dec ebx
or ecx, edx
or edx, ebx
xor edi, edx
sub edx, 0xccb5439b
xchg edi, ebx
mov edi, ecx
add edi, ebx
nop
or edi, ebx
xchg edx, edi
jmp 0x477434
mov esi, 0x123b2f04
shr ecx, 6
xor ebx, edi
bswap ebx
not edx
mov edx, ebx
mov ebx, 0xccba3a38
add ecx, 0xccba6e1a
rol ecx, 0x1a
and edx, ebx
jmp 0x4769b3