Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff29
jne 0x4010a2
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff25
jne 0x401144
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xfffffef3
jne 0x4011f0
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xfffffee5
jne 0x40125b
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_RtlExpandEnvironmentStrings_U
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_ZwSetTimerResolution
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_NtQueryBootOptions
call sub.ntdll.dll_ZwSetTimerResolution
ret
jmp 0x4756eb
or ecx, esi
xor ecx, ebx
sub edi, ecx
xor ebx, edi
shl esi, 9
and esi, edi
jmp 0x4790d2
push 0xf74f2ae5
rol ecx, 0xe
mov ecx, edx
xor ecx, edi
and esi, ecx
rol ecx, 0xe
dec edi
and edx, ecx
or ecx, edx
ror ecx, 0x16
sub ecx, 0xf7c8148f
jmp 0x475721
push 0xf74f451f
shl ecx, 0x1e
xor esi, ecx
mov edi, esi
sub esi, edx
neg edx
and edx, edi
bswap esi
dec edx
sub edx, 0xf7c908af
or esi, edi
dec ecx
sub esi, edi
and edi, esi
add esi, ecx
jmp 0x476526
push 0xf753ee2f
and edi, ecx
sub esi, 0xf7cd6dff
xchg edi, edx
xchg ecx, edi
inc esi
not esi
shr edi, 0x15
add ecx, edi
dec edx
sub edx, ecx
jmp 0x478e96
push 0xf74d51e7
add edx, ecx
neg edx
mov esi, ecx
ror esi, 0x14
add esi, edi
xchg ecx, edi
inc edi
not edi
sub ecx, edx
mov edx, esi
sub edi, 0xf7d9e7f7
xchg ecx, esi
jmp 0x47798b
call fcn.004796d0
sub ecx, 0xf7da2699
shl esi, 0x14
rol edi, 0x12
and ecx, edi
sub edx, edi
add edx, edi
and edi, 0xf7dae1ff
bswap ecx
ror edx, 4
dec edx
sub edx, ecx
inc esi
mov ecx, 0xf7db7bb7
dec esi
jmp 0x477d7c
pop ebx
and edx, ecx
xor ecx, edi
sub edi, esi
add edi, 0xf7dd19c9
rol esi, 0xc
xchg esi, edx
xchg edi, esi
xor esi, edx
jmp 0x4767c6
call fcn.004796d0
shl ecx, 2
and ecx, edx
sub edx, ecx
mov edx, 0xf7dfec7f
sub edx, edi
mov edi, 0xf7e01d37
add esi, 0xf7e03bbf
rol edi, 5
and edx, 0xf7e06e11
shr ecx, 0x17
sub edx, edi
sub edx, ecx
jmp 0x47706c
call ebx
add ecx, esi
inc edi
and ecx, 0xf7e21409
shl edi, 0xc
add esi, ecx
or edi, edx
or ecx, esi
inc ecx
shr esi, 9
add edi, ecx
xchg edx, edi
xor edi, ecx
and esi, edx
sub edx, 0xf7e3275f
shl edi, 0x1b
and edx, ecx
jmp 0x476942
push 0xf74c7467
add ecx, edx
shl edx, 0x1d
mov esi, edi
sub edx, esi
dec ecx
inc edi
sub ecx, esi
or edi, 0xf7e5ede9
mov esi, edi
xor edi, esi
and ecx, 0xf7e63ab7
ror edx, 0x10
or esi, edx
dec edx
jmp 0x4772fd
push 0xf750976d
add ecx, esi
shl ecx, 0x17
sub edi, edx
shr edi, 2
xchg esi, ecx
xor ecx, edx
jmp 0x478e3a
pop ebx
mov esi, edx
and edx, esi
sub esi, edi
or edx, 0xf7e79779
or edi, 0xf7e7b1ef
sub edx, ecx
add edx, ecx
ror ecx, 0x15
ror edx, 0x13
neg edx
shl esi, 0x12
sub edi, 0xf7e866e5
or ecx, edx
xor edx, 0xf7e8979d
add ecx, edx
and ecx, 0xf7e8c72d
jmp 0x477754
call ebx
shr edi, 0xd
sub esi, edi
sub esi, ecx
xor edi, ecx
shl ecx, 0x10
and ecx, edx
sub ecx, edi
inc esi
sub ecx, edx
mov edx, esi
jmp 0x477cba
push 0xf754ee1f
and esi, 0xf7e9f11d
shr edx, 0x10
add esi, edi
xor edx, esi
xchg edi, esi
mov esi, ecx
jmp 0x4776fb
pop ebx
sub ecx, edi
sub ecx, edx
bswap esi
xor esi, 0xf7ff7b17
rol ecx, 0xc
xchg esi, ecx
add esi, ecx
add ecx, edx
and edi, ecx
or esi, ecx
jmp 0x4777cf
push 0xf7564a3b
sub edi, edx
shr edi, 3
bswap ecx
mov edi, 0xf8028a21
add esi, 0xf802a805
sub ecx, 0xf802c247
nop
add edx, 0xf802f641
add edi, esi
xor esi, edi
add edi, ecx
not edi
jmp 0x4760e0
call ebx
and esi, edx
inc esi
inc esi
xchg esi, edi
sub edx, ecx
bswap esi
add ecx, edx
and ecx, 0xf8060db3
mov edx, 0xf8062655
bswap ecx
xor ecx, 0xf8065a57
sub esi, edx
jmp 0x477972
call ebx
xor edx, esi
ror edx, 0x11
xchg edx, esi
xchg esi, edi
xchg ecx, esi
and esi, edx
rol edx, 0xc
sub edi, edx
ror edi, 0x1d
ror edi, 0xb
mov edx, ecx
xor edx, 0xf80c469d
jmp 0x477388
call ebx
xor ecx, edi
rol edi, 0x19
xchg edi, edx
add edi, edx
sub edx, 0xf80da91b
mov ecx, edx
or edi, edx
dec esi
or esi, edx
xchg edi, edx
dec edi
shr ecx, 0x1b
jmp 0x4766a5
call ebx
and esi, 0xf8106a9f
or ecx, esi
not ecx
or ecx, 0xf810b56d
xchg edx, edi
mov esi, 0xf810ece5
xor edx, 0xf8110527
add ecx, edx
jmp 0x476b24
push 0xf752456e
xchg edx, edi
mov ecx, edx
shr edi, 6
bswap ecx
mov ecx, esi
or edx, ecx
ror esi, 0xc
or edi, esi
rol edx, 0x14
xor edi, edx
and esi, edx
xor edx, esi
jmp 0x478482
push 0xf75667f3
rol ecx, 0x13
add esi, 0xf81702ff
mov ecx, 0xf8171bef
and edx, edi
add edi, edx
nop
xchg ecx, edi
shl esi, 0xe
rol edi, 0x13
mov esi, 0xf817ceb9
dec edi
sub edx, edi
sub edx, ecx
nop
jmp 0x4790fa
call fcn.004796d0
sub esi, 0xf81a60a5
sub edx, edi
mov esi, edi
and esi, edi
xchg esi, edi
shr ecx, 0xf
jmp 0x47600d
pop ebx
mov edi, ecx
xchg edi, esi
rol esi, 0x12
and ecx, 0xf81d1675
or ecx, esi
and edx, edi
xor edx, esi
mov edi, ecx
sub ecx, edx
ror edi, 0x16
or edx, 0xf81dc407
add ecx, esi
jmp 0x476d69
pop ebx
or edi, edx
ror esi, 0x15
or ecx, 0xf82658d1
add ecx, edx
shl esi, 0x1c
and edx, 0xf826a66f
jmp 0x476dc9
call fcn.004796d0
and esi, edx
sub ecx, 0xf82894ef
shl esi, 0xa
mov edx, 0xf828c79f
add ecx, edx
or edx, esi
add edi, esi
mov ecx, 0xf8292a03
jmp 0x475ea5
pop ebx
add edi, ecx
xor edx, edi
xor edx, 0xf82ac197
add ecx, edx
sub edx, 0xf82af14b
and esi, 0xf82b0a39
ror edx, 0x13
ror ecx, 1
and edi, esi
sub edx, esi
xor esi, edx
add ecx, edx
not esi
ror edi, 0xd
jmp 0x47858e
push 0xf74f62d7
and ecx, edi
xor ecx, esi
nop
add ecx, edi
and esi, 0xf84652e1
xor ecx, edi
jmp 0x4795dc
push 0xf7507b83
or ecx, 0xf84a5273
add esi, 0xf84a7413
bswap edx
bswap edx
sub edi, edx
and edi, esi
mov edi, esi
xchg edi, ecx
jmp 0x475b04
pop ebx
xchg esi, ecx
shr edx, 0xf
dec edx
sub edx, ecx
or esi, ecx
shl edi, 2
mov edi, edx
mov edx, esi
and ecx, esi
add esi, edx
jmp 0x478454
call ebx
xor edi, 0xf84fe93b
add edi, esi
mov edi, ecx
add edx, 0xf8503199
not esi
xor edx, ecx
and edi, 0xf850812f
or edi, esi
or edx, 0xf850b389
sub ecx, edx
inc ecx
or esi, 0xf850fe01
jmp 0x4792d5
pop ebx
shl edx, 0xc
add edx, esi
mov ecx, esi
or edx, esi
add edi, esi
and ecx, esi
dec esi
sub edx, esi
neg edx
shl esi, 0xd
xor esi, edx
sub esi, edi
sub esi, ecx
sub edx, esi
and edx, ecx
add ecx, 0xf85293eb
jmp 0x47836f
mov ebx, 0x3f4d7907
xor esi, 0xf857e32f
add edi, edx
sub edi, esi
bswap edi
mov edx, esi
xchg edi, edx
xchg ecx, edi
mov esi, 0xf85893b3
jmp 0x475a21
push 0xf753b6be
add ecx, 0xf859f547
not esi
ror edi, 0xb
ror edi, 0x10
or edx, 0xf85a5d99
sub ecx, edx
xchg edx, edi
neg edx
and edx, 0xf85ac6cd
or edi, ecx
dec edi
add edx, edi
jmp 0x4775aa
pop ebx
shr esi, 1
shr edx, 0x15
neg edx
dec ecx
mov esi, 0xf8619471
xchg esi, ecx
sub edx, esi
inc edi
bswap esi
mov edi, esi
jmp 0x4785c6
pop ebx
sub esi, edx
xor ecx, 0xf866e7ad
shr esi, 0x14
xchg edx, ecx
xchg esi, edx
xor edx, ecx
shr ecx, 2
sub edx, edi
mov edi, ecx
or edi, esi
xchg ecx, edi
mov edx, 0xf867e287
jmp 0x479699
push 0xf752b7cd
and esi, ecx
and ecx, edx
mov edi, 0xf8724a8b
add edi, 0xf87263fb
and edi, 0xf8727c9d
mov edx, esi
xor edi, ecx
and esi, edi
and esi, 0xf872e0dd
mov edx, ecx
jmp 0x479424
call ebx
xchg edi, ecx
xchg ecx, esi
not edx
add edi, 0xf87569b1
dec edx
dec edx
sub edx, ecx
mov esi, edx
jmp 0x476c6b
pop ebx
or esi, edx
and edx, 0xf8760d9f
not ecx
and esi, edx
xchg ecx, edx
shr edi, 0x1e
and esi, edx
shl edi, 0x17
xor ecx, 0xf876bef3
add edi, edx
jmp 0x4756fd
pop ebx
or edx, esi
add edi, 0xf87d4f99
or ecx, edx
xor edi, esi
xor edi, ecx
and ecx, esi
or ecx, edi
not edx
add edi, edx
sub esi, 0xf87e132d
jmp 0x478f28
pop ebx
mov esi, edx
sub esi, edx
xor edi, edx
mov edi, ecx
sub edx, 0xf87f43dd
xor edi, ecx
add edx, edi
mov ecx, edi
xor esi, edx
xor edx, edi
add edi, ecx
sub edx, 0xf87fe9e5
jmp 0x479214
push 0xf7485229
shl esi, 0x1a
xor ecx, edi
neg edx
sub edi, esi
add edx, ecx
xchg ecx, esi
or edx, ecx
xor esi, edx
sub esi, edi
xor esi, 0xf8850083
sub edi, edx
shl ecx, 9
jmp 0x479002
pop ebx
or edi, esi
or esi, 0xf886f39f
neg ecx
or esi, edx
and edx, ecx
xor edi, 0xf88759f9
jmp 0x478071
pop ebx
add edi, esi
add edx, edi
xor edi, ecx
or edx, edi
neg ecx
sub edi, edx
or edi, 0xf88ad109
sub edx, ecx
dec ecx
and edi, esi
xchg edx, esi
rol edi, 4
and edi, esi
xor ecx, edi
xor ecx, edx
shl esi, 0x1e
jmp 0x478b6e
pop ebx
xor esi, ecx
sub esi, edx
and esi, ecx
mov esi, edx
sub esi, edx
and esi, ecx
mov esi, edx
and esi, ecx
xchg edi, ecx
add esi, edi
jmp 0x47846f
pop ebx
add esi, edi
not edi
shl esi, 3
neg edi
shr edx, 0x19
not ecx
or edx, ecx
xor esi, edx
sub edi, ecx
shl ecx, 0x1b
sub edi, esi
or esi, ecx
jmp 0x478628
push 0xf7505e20
mov ecx, 0xf894b949
add edi, ecx
sub edx, 0xf894e90d
mov edi, edx
xchg esi, edi
mov edi, 0xf89536a3
and ecx, 0xf8954f93
xchg edx, esi
jmp 0x4765ab
push 0xf74b105b
xor esi, ecx
sub ecx, 0xf89c794b
mov ecx, esi
mov esi, edx
add edx, 0xf89cc349
and edx, 0xf89cdcb9
jmp 0x478ab7
call ebx
and esi, edx
shl edi, 0x1b
xor ecx, edi
mov edi, ecx
or edx, edi
add edx, edi
jmp 0x478030
mov ebx, 0x3f4d7907
ror esi, 0x1e
or ecx, esi
sub ecx, 0xf8a1010b
add ecx, edi
jmp 0x47903f
mov ebx, 0x3f4d7907
xchg esi, ecx
xchg edi, edx
add ecx, esi
and esi, 0xf8a55743
or edx, 0xf8a57065
sub edi, edx
bswap esi
xor edx, esi
jmp 0x476156
call fcn.004796d0
sub esi, edi
add esi, 0xf8b0fc4f
and esi, 0xf8b11561
bswap ecx
ror esi, 0xf
shr edi, 0x13
and esi, edx
shl edi, 1
jmp 0x475a6d
mov ebx, 0x3f4d7907
neg ecx
shl esi, 0x1a
xor ecx, edi
xor ecx, edx
neg edx
shl edi, 0x1b
xor edx, ecx
shr edx, 0x11
sub esi, edi
bswap ecx
mov edi, esi
inc edi
jmp 0x477a92
pop ebx
bswap esi
xor edx, esi
not ecx
xor esi, 0xf8b7c72b
jmp 0x477f5b
pop ebx
shr edi, 0xe
rol edx, 0x11
inc edi
sub esi, 0xf8b93a49
dec edi
shr esi, 7
add ecx, edi
xor edi, esi
shl edi, 3
xchg edx, esi
or edx, edi
shl edi, 9
jmp 0x475b1c
call fcn.004796d0
xor edi, esi
and esi, 0xf8bf9423
ror edx, 0x1f
dec edx
and edi, esi
and edx, ecx
sub esi, ecx
sub edx, esi
mov ecx, edx
add edi, ecx
jmp 0x476673
push 0xf74a3459
sub esi, ecx
rol edi, 0x10
and edi, edx
sub edi, 0xf8c78eef
shr esi, 9
and edx, edi
jmp 0x478cd3
push 0xf753d277
xchg edi, edx
and edx, edi
xchg esi, ecx
mov edi, edx
add esi, 0xf8c987e3
sub edi, edx
xchg edi, ecx
xchg ecx, esi
not ecx
mov edx, esi
jmp 0x4757b8
pop ebx
rol edx, 0x1a
add edi, 0xf8cc520f
mov ecx, edx
add ecx, esi
and edx, 0xf8cc9d2b
xor ecx, esi
jmp 0x4759c9
push 0xf7550bf9
not edi
sub edi, ecx
xchg edx, edi
mov esi, 0xf8d97fa9
xchg ecx, edi
and edi, edx
or esi, edx
xor ecx, edx
mov esi, edx
or edi, ecx
xchg edx, esi
not edx
jmp 0x478f91
push 0xf7527e5d
not edx
bswap edx
sub esi, ecx
neg esi
shr ecx, 0x1c
xor edx, 0xf8dbc797
jmp 0x477fd2
push 0xf7562e34
xor ecx, edi
mov esi, edi
bswap ecx
bswap ecx
or ecx, 0xf8dc5521
and edx, edi
or edx, ecx
or ecx, edx
mov esi, 0xf8dcd54d
or ecx, edi
not edx
mov edx, esi
jmp 0x475e3f
push 0xf74e9e47
shr esi, 0xf
add ecx, 0xf8e03aad
add edx, esi
or ecx, 0xf8e06e2d
jmp 0x47710c
pop ebx
mov esi, edi
add ecx, 0xf8e0a839
shl ecx, 0x10
mov esi, edx
or ecx, edx
and edx, esi
mov edx, edi
or esi, edx
xchg edi, edx
xchg ecx, edi
jmp 0x478fb5
pop ebx
mov edi, edx
and esi, edx
inc edi
sub ecx, esi
not edx
not ecx
add esi, edx
bswap ecx
ror edx, 0x15
dec edx
jmp 0x47822f
mov ebx, 0x3f4d7907
and edx, esi
ror edi, 0x1e
xchg edi, esi
mov ecx, 0xf8ed35bb
jmp 0x4791c2
mov ebx, 0x3f4d7907
xor ecx, esi
rol esi, 0x12
and ecx, 0xf8ef1c81
mov edx, 0xf8ef3577
xor ecx, 0xf8ef4fb1
or edx, 0xf8ef6827
shl ecx, 4
add edi, esi
mov esi, 0xf8efb7e1
mov edx, ecx
jmp 0x478fcc
mov ebx, 0x3f4d7907
neg ecx
neg ecx
sub edi, edx
sub esi, edi
add ecx, 0xf8f05bcf
bswap edi
xor esi, 0xf8f08fc9
or edx, ecx
sub esi, edi
sub esi, ecx
jmp 0x477485
push 0xf750d0dd
xchg edi, esi
not esi
shr edi, 0xb
add ecx, edi
dec edx
rol esi, 0xb
jmp 0x478d7c
call fcn.004796d0
add ecx, edx
or esi, 0xf8f4737f
sub ecx, 0xf8f49105
sub edi, esi
add edi, 0xf8f4c389
mov esi, edi
and esi, ecx
xchg edi, ecx
xchg ecx, esi
xchg edx, edi
jmp 0x478411
pop ebx
sub ecx, edx
not ecx
mov edx, esi
and ecx, esi
mov ecx, edi
sub edi, ecx
xchg esi, ecx
add esi, ecx
jmp 0x47756b
call ebx
or edx, esi
or edi, 0xf90a4777
nop
xor esi, 0xf90a8065
add ecx, esi
add edx, ecx
mov edi, ecx
xchg edx, ecx
jmp 0x4773b9
pop ebx
or ecx, edx
mov edi, esi
add esi, edi
inc esi
or edx, esi
not edi
xchg ecx, esi
xchg edx, ecx
shr esi, 0xb
mov edx, edi
nop
neg edi
jmp fcn.004792e1
push 0xf7529a3f
mov esi, edx
mov edi, 0xf91bd641
not ecx
shr edx, 0x16
add ecx, edx
sub esi, edi
or edi, ecx
mov ecx, esi
rol ecx, 0x10
sub edi, ecx
ror esi, 9
or esi, edi
xchg ecx, esi
inc ecx
jmp 0x476a88
pop ebx
and edx, esi
add esi, edi
add ecx, edi
and edi, esi
xor ecx, 0xf91efda5
or edx, 0xf91f160b
jmp 0x4777ea
push 0xf74df7bb
dec edi
add ecx, 0xf91f5561
shr edi, 0x1d
sub esi, edi
mov edi, esi
xchg edi, ecx
ror ecx, 9
or ecx, esi
add esi, edi
sub ecx, 0xf92218dd
jmp 0x477a04
push 0xf74c2282
not edx
xchg edi, ecx
and edi, 0xf9226f4f
inc ecx
xor esi, 0xf922a7b9
or edi, 0xf922c02f
sub edx, ecx
sub edx, 0xf922f2e7
jmp 0x478dba
pop ebx
xor edi, esi
add edx, edi
or edx, 0xf92f44a3
xor edi, 0xf92f5eed
rol ecx, 0x14
add edx, ecx
shr ecx, 0xd
xor edi, edx
jmp 0x47946f
push 0xf74b47d3
add edx, edi
or edx, 0xf93000af
or edx, esi
or edi, 0xf9303167
mov edx, 0xf9304e13
or ecx, esi
xchg edx, ecx
and edi, esi
or edi, ecx
or edi, ecx
jmp 0x478ad4
push 0xf74ddb2a
or edi, edx
and edx, edi
sub edi, ecx
not ecx
shr esi, 0x15
sub esi, edx
xor edx, 0xf9389a89
shr edi, 5
jmp 0x47804a
call ebx
or edi, ecx
or edi, ecx
or ecx, edx
ror edi, 0x1d
xchg edi, esi
mov ecx, 0xf93d58cd
ror esi, 0x1e
or esi, edi
shr ecx, 0x1e
or edi, ecx
and edx, esi
xchg edx, ecx
sub edx, edi
mov ecx, edx
inc edx
or edi, 0xf93e5157
jmp 0x476c30
pop ebx
xor esi, edi
shl ecx, 0xc
mov esi, edx
sub edx, edi
or esi, edi
xor ecx, esi
add edx, edi
neg edi
xor ecx, esi
neg ecx
jmp 0x476369
pop ebx
shr edx, 0xa
and edx, esi
add edi, 0xf9402bcb
xchg esi, edx
jmp 0x476890
push 0xf75262c9
and esi, ecx
not edi
sub edi, ecx
add ecx, edx
add edi, 0xf9410edb
sub edi, esi
jmp 0x477739
call ebx
xchg ecx, edx
and edx, esi
sub ecx, edx
xchg edx, edi
mov esi, 0xf94650af
sub esi, ecx
jmp 0x476658
pop ebx
xchg edi, esi
xor esi, edx
ror edi, 0x11
xchg ecx, edi
xor esi, edi
inc edx
or edi, 0xf9496b89
sub ecx, edi
and ecx, edx
add esi, ecx
not ecx
xor esi, 0xf949e989
jmp 0x476f11
call fcn.004796d0
add edx, esi
or ecx, esi
xchg ecx, edi
and ecx, edi
jmp 0x476b0b
push 0xf749a93f
sub edi, edx
bswap esi
shr edi, 7
add edi, edx
neg ecx
mov esi, edx
jmp 0x4770b1
pop ebx
or edi, esi
or edi, esi
or ecx, edi
sub edi, ecx
sub esi, edx
neg edi
and edx, ecx
bswap edx
mov edi, esi
and esi, edi
xor ecx, edx
sub edi, edx
add edi, edx
sub esi, 0xf94f066b
jmp 0x479294
push 0xf74c582d
shr ecx, 8
neg edx
neg ecx
rol edx, 6
xchg ecx, edx
dec edx
sub edx, ecx
inc esi
or edx, edi
and ecx, edx
sub edx, esi
rol edx, 7
jmp 0x475ad7
pop ebx
ror edx, 0x16
xchg edx, esi
or edi, esi
mov edx, ecx
rol esi, 0x1b
inc esi
or edx, ecx
xchg esi, ecx
inc edi
inc edi
jmp 0x475b75
push 0xf74b2b1f
or edx, esi
inc ecx
or edi, edx
xor ecx, esi
bswap edi
bswap esi
xchg ecx, esi
and esi, ecx
add ecx, esi
bswap esi
jmp 0x47824f
mov ebx, 0x3f4d7907
xchg ecx, esi
and esi, ecx
add ecx, 0xf974fab3
or edx, ecx
xchg edx, esi
or edi, esi
or edi, ecx
and edi, esi
jmp 0x4785b4
mov ebx, 0x3f4d7907
xor ecx, edx
sub esi, edx
or esi, edi
or esi, ecx
or edx, esi
add esi, 0xf9799de5
xchg esi, edi
mov edi, ecx
xchg edx, ecx
not edi
jmp 0x478bce
pop ebx
shl esi, 0x16
xor esi, edi
xchg edx, ecx
not esi
or edx, 0xf97be937
add ecx, edx
bswap edx
xor edi, edx
ror edi, 0xb
or esi, edi
jmp 0x4789fa
call fcn.004796d0
not esi
or edx, ecx
mov edx, ecx
xor esi, ecx
mov edi, esi
add ecx, esi
rol esi, 4
not esi
add edi, ecx
bswap esi
xchg edx, esi
shl ecx, 0x1d
jmp 0x47851a
call ebx
ror edx, 0x1b
or esi, edx
xchg esi, edx
and edx, esi
mov edi, esi
sub esi, edx
mov esi, 0xf9836a0f
shr edx, 8
ror edx, 0xd
ror ecx, 2
sub edx, 0xf983d389
or esi, ecx
bswap edi
xor edi, esi
jmp 0x4762b8
push 0xf74a5045
inc ecx
and edx, edi
add ecx, edx
sub esi, edi
bswap ecx
ror ecx, 0x1b
jmp 0x476775
mov ebx, 0x3f4d7907
and ecx, edi
add esi, ecx
ror edi, 0x1b
mov edi, esi
xchg edx, edi
and edi, edx
ror ecx, 1
neg ecx
jmp 0x4772af
push 0xf74c3d47
bswap edi
ror edi, 3
ror edi, 0x10
dec edi
shr ecx, 0x1e
mov esi, 0xf98e32ed
xchg edx, ecx
shl esi, 0x16
mov ecx, 0xf98e8273
or ecx, edx
add esi, edx
xor edx, ecx
jmp 0x478948
push 0xf750b325
mov ecx, edi
add edi, esi
or esi, ecx
and ecx, 0xf9931d6f
sub edx, esi
inc edi
bswap edi
add ecx, esi
add edx, ecx
mov esi, 0xf993b6ad
add ecx, 0xf993cf13
or edx, esi
jmp 0x477a5b
push 0xf7540be7
mov edx, ecx
sub ecx, esi
not edx
or edi, edx
dec esi
dec esi
sub edx, esi
rol edx, 0x1a
sub edi, ecx
sub esi, edx
or esi, edi
mov ecx, edx
and edx, edi
sub edi, ecx
shr edx, 0x17
ror esi, 0x16
jmp 0x4779d2
pop ebx
mov ecx, 0xf99a8167
mov edi, edx
add ecx, edi
mov esi, edx
mov edi, 0xf99ae455
or edx, ecx
xchg edx, ecx
not edi
add edi, 0xf99b4989
sub ecx, edi
jmp 0x479118
call fcn.004796d0
sub edi, 0xf99b85eb
mov ecx, edi
or edx, esi
xchg edi, ecx
and edi, esi
xor ecx, 0xf99c0299
mov edi, esi
sub ecx, esi
jmp 0x479225
mov ebx, 0x3f4d7907
sub esi, ecx
sub edx, esi
nop
add edx, 0xf99e7097
add edi, esi
sub edx, ecx
add edx, ecx
and edi, 0xf99ed089
and edx, edi
inc ecx
jmp 0x47596f
push 0xf74af5a6
xchg ecx, edx
mov ecx, esi
rol ecx, 0xc
sub edi, ecx
xchg edx, ecx
sub edi, esi
jmp 0x477026
call fcn.004796d0
or edx, esi
add esi, 0xf99fe6fd
and edi, ecx
and ecx, esi
shl edi, 7
and ecx, edi
add esi, ecx
add ecx, edx
rol edi, 2
mov ecx, 0xf9a0acad
ror esi, 0x1f
or esi, edi
neg ecx
shl edx, 0xb
xchg esi, edi
shr ecx, 0xe
jmp 0x478c5f
mov ebx, 0x3f4d7907
inc edx
or edi, esi
or ecx, esi
xor edi, esi
and ecx, edx
rol edi, 7
jmp 0x478f4c
call fcn.004796d0
and edx, esi
sub esi, edx
add edx, edi
add ecx, 0xf9a35f5f
add esi, 0xf9a379cd
sub edx, 0xf9a39265
add edx, esi
or ecx, 0xf9a3c39f
xchg edx, edi
and edi, edx
neg edx
or esi, ecx
jmp 0x475b59
push 0xf7481718
sub edi, edx
or esi, 0xf9a6f815
rol edx, 0x1b
xchg edi, ecx
xchg ecx, esi
inc ecx
not ecx
sub edx, edi
mov ecx, esi
add edi, edx
nop
inc ecx
or edi, edx
add edi, ecx
jmp 0x47961b
mov ebx, 0x3f4d7907
or edx, 0xf9a84e4b
sub ecx, edx
mov edx, ecx
and edi, ecx
sub esi, 0xf9a8b3b1
xchg esi, edx
jmp 0x47930f
pop ebx
xchg edx, ecx
xchg esi, edx
add esi, edi
xor edx, edi
xor ecx, 0xf9a95619
xor edi, esi
and ecx, edx
sub edx, esi
jmp 0x4792c3
call fcn.004796d0
sub ecx, 0xf9ae0c4b
and edx, 0xf9ae2539
ror ecx, 7
dec ecx
inc edi
nop
add ecx, esi
not edi
xor edx, edi
xor ecx, 0xf9aef791
mov edi, esi
add edi, 0xf9af277f
and ecx, edx
and edi, edx
and edi, edx
and ecx, edi
jmp 0x475fa2
pop ebx
add esi, edx
inc ecx
or edi, edx
mov edi, edx
add ecx, edi
add edx, esi
jmp 0x476187
call ebx
sub ecx, edx
ror edi, 0xd
or edi, ecx
xchg edx, esi
not edx
or edx, 0xf9b1727b
sub ecx, edx
or edi, edx
jmp 0x476e98
pop ebx
not ecx
xor ecx, 0xf9b41519
mov edi, esi
bswap esi
xor edx, 0xf9b46191
add ecx, edx
bswap edi
and edx, edi
mov edx, edi
neg ecx
or edi, 0xf9b4fad7
add edx, ecx
ror ecx, 1
mov esi, edi
jmp 0x476070
pop ebx
or esi, edi
or esi, ecx
neg ecx
xchg esi, edi
sub edx, ecx
or edx, esi
jmp 0x475949
pop ebx
and esi, ecx
inc edx
xchg edx, edi
nop
jmp 0x475de7
call fcn.004796d0
mov ecx, edi
not esi
xchg ecx, edi
sub ecx, esi
or edi, esi
ror edi, 0xc
mov edx, ecx
and esi, edi
mov ecx, edx
not ecx
or ecx, 0xf9b88615
sub ecx, edx
or esi, 0xf9b8b899
sub ecx, esi
or edi, esi
ror edi, 0xe
jmp 0x475f5b
mov ebx, 0x3f4d7907
and edx, ecx
xor edi, esi
xchg ecx, edx
xchg edx, esi
rol edx, 0xe
not edx
or edx, 0xf9c0b2db
or edi, 0xf9c0cb73
nop
add ecx, esi
jmp 0x47630d
pop ebx
mov esi, edx
mov edi, 0xf9c24ddd
or edx, ecx
add edx, 0xf9c27e95
xchg ecx, edx
xchg edx, esi
rol edx, 0x1b
add edi, 0xf9c2e73d
sub esi, 0xf9c3017f
add edx, edi
jmp 0x477613
push 0xf74f7d09
xor edx, edi
add ecx, 0xf9ce8c6d
or edx, edi
sub edi, ecx
or ecx, esi
inc edx
jmp 0x478b36
push 0xf7483743
mov edi, esi
bswap edi
xor edi, 0xf9d0b089
sub edi, ecx
bswap edx
add ecx, edx
add edi, edx
and edi, esi
xchg ecx, esi
add edi, esi
mov ecx, edx
or ecx, edi
add edi, ecx
sub edx, 0xf9d1f72b
jmp 0x476d0f
pop ebx
sub esi, edi
sub esi, ecx
and edx, 0xf9d5a2cf
shr ecx, 0xd
shl edi, 0xb
mov esi, 0xf9d5efbf
shl ecx, 0xe
and esi, ecx
xor edi, 0xf9d64395
add ecx, edi
and esi, 0xf9d674cf
xchg edi, edx
mov edi, 0xf9d6a7d5
xchg ecx, edi
jmp 0x476eb2