Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
call sub.user32.dll_GetShellWindow
cmp eax, 0xffffff0f
jne 0x401084
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xfffffee3
jne 0x40110d
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xffffff29
jne 0x401173
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xfffffedb
jne 0x4011f7
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xfffffee1
jne 0x401285
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
call sub.ntdll.dll_RtlApplicationVerifierStop
ret
jmp 0x61b6ae
mov ecx, 0x22d17c7
or ecx, edx
and ecx, edx
xor ebx, edx
mov edi, edx
xor edi, ebx
mov ebx, edi
bswap edx
jmp 0x61b7c4
pop ebx
xchg esi, edi
ror edi, 0x18
and edx, edi
sub esi, edx
or ecx, esi
mov edi, 0x35e2d19
or ecx, edx
bswap edx
jmp 0x61bf80
push 0x238a1e3
rol ecx, 0x17
xor ecx, esi
add edx, 0x35fa1d3
sub esi, edx
mov edx, edi
add ecx, edi
xor esi, edx
xor edx, ecx
dec ecx
sub edi, 0x3605cbf
add esi, edi
xor esi, 0x360903f
jmp 0x61be68
pop ebx
sub esi, 0x36131a3
mov edx, edi
xor edi, ecx
xor esi, edi
not edi
xor edi, esi
mov esi, edi
or esi, edi
or ecx, edi
and ecx, esi
and ecx, 0x36238ad
or ecx, edx
bswap edx
xor edi, ecx
jmp 0x61d7c6
push 0x22fd282
shr ecx, 0x15
sub edx, ecx
add edx, 0x363cdb3
sub esi, edx
not edx
mov esi, 0x3641efb
jmp 0x61d4a4
push 0x239b04f
and edx, 0x3659283
sub edi, 0x365ad13
add ecx, 0x365c821
mov ecx, edx
or esi, ecx
add esi, ecx
xchg edi, edx
sub ecx, 0x36648db
mov edi, edx
and ecx, edx
sub esi, 0x3669855
dec edi
jmp 0x61ca54
call ebx
neg ecx
and esi, 0x366f687
or ecx, edi
xor edx, 0x3672a69
xor edi, esi
add edi, esi
add edi, 0x3677c61
and esi, ecx
bswap ecx
sub edx, esi
or edi, esi
ror edi, 0x11
jmp 0x61b778
pop ebx
dec esi
sub edi, edx
sub edi, 0x3685bbd
bswap edi
sub esi, edx
inc edi
xor ecx, esi
and edx, ecx
shr edx, 4
bswap esi
and esi, edi
shl esi, 0x11
jmp 0x61c3b2
pop ebx
xor ecx, edx
add edi, esi
xor edi, edx
neg edx
and edx, 0x369de1b
sub ecx, 0x369f973
add edx, ecx
neg edx
mov edi, edx
xor edi, 0x36a6567
jmp 0x61ced7
pop ebx
xor edi, esi
or ecx, esi
or edx, edi
xchg ecx, edx
mov ecx, edx
and ecx, edi
mov edx, 0x36c11f3
and ecx, 0x36c2b07
or ecx, edx
xor ecx, edi
rol esi, 0xa
and edi, esi
jmp 0x61c9d5
push 0x40
sub ecx, edi
xchg esi, edx
bswap edi
mov ecx, edx
mov esi, edx
shr ecx, 6
inc edx
add ecx, edi
bswap edx
and esi, edx
xor ecx, edi
shl esi, 0x1d
jmp 0x61be45
pop ebx
shl esi, 0x1e
neg edi
xchg esi, edi
or edx, ecx
nop
mov esi, ecx
and esi, 0x3711317
xor ecx, edx
ror ecx, 0x14
neg edi
xchg ecx, edx
sub edx, 0x3719f05
jmp 0x61cbd2
call fcn.0061cd0f
dec esi
shl esi, 7
ror edi, 0xf
mov edi, edx
mov esi, 0x372340d
add ecx, esi
sub edi, edx
xor esi, 0x37282c7
jmp 0x61c1c6
pop ebx
xchg edi, ecx
nop
xor esi, edi
or ecx, 0x373dfc9
mov esi, edi
add ecx, 0x374117f
jmp 0x61dae3
pop ebx
or ecx, esi
and ecx, 0x375a21d
sub edi, esi
xor edi, 0x375dcd3
neg ecx
sub ecx, 0x3761271
or esi, edi
xor edi, edx
jmp 0x61bc9a
call fcn.0061cd0f
or edx, esi
shr edi, 0xa
and edx, edi
and edi, ecx
xor edx, ecx
xchg esi, edi
ror edi, 0x12
shr esi, 0xd
add esi, edi
mov ecx, edi
jmp 0x61c2ba
mov ebx, 0x6332a2e
or esi, ecx
add esi, ecx
mov edx, ecx
or edi, ecx
xor esi, edi
xor esi, edx
sub esi, edx
and edi, edx
sub esi, 0x37e04b9
and edx, 0x37e1f91
sub edi, 0x37e3aa7
xchg edi, edx
nop
mov esi, ecx
and esi, edi
add esi, 0x37ebc4d
jmp 0x61c4ad
push 0x2373a13
and edi, 0x380969d
ror edx, 0xb
xor esi, 0x380cc33
xor edx, esi
add ecx, edx
and ecx, edi
or ecx, 0x38137b9
or edx, esi
mov edx, 0x3816b55
sub edi, ecx
jmp 0x61de7b
pop ebx
and ecx, edi
xor ecx, 0x3831441
mov edx, esi
and esi, ecx
rol ecx, 0x10
xchg edx, esi
add esi, ecx
xor edi, esi
add esi, edx
or ecx, 0x383e5af
xchg esi, ecx
bswap ecx
xor edx, edi
shr edx, 0x15
jmp 0x61c8eb
call fcn.0061cd0f
and ecx, 0x3873f8d
or ecx, edx
not esi
add esi, ecx
bswap ecx
mov ecx, 0x387c73b
shl ecx, 0xa
xchg edx, edi
jmp 0x61dc30
call ebx
mov edi, edx
and ecx, edx
or esi, edx
xchg edi, esi
jmp 0x61ce40
pop ebx
mov esi, ecx
and esi, 0x388b27d
or ecx, edi
or esi, ecx
mov ecx, edi
mov edi, esi
sub edx, edi
add esi, edx
nop
mov esi, ecx
mov edi, 0x3899a79
sub edi, edx
jmp 0x61e05e
call ebx
shr edi, 3
mov ecx, edi
or esi, edi
xor esi, edx
shr edi, 0x18
and edx, edi
xchg ecx, edx
or ecx, edx
jmp 0x61c838
call fcn.0061cd0f
sub edi, 0x3908a1d
and edx, 0x390a55f
xor edx, edi
sub edx, edi
sub esi, 0x390f8a5
dec edi
rol edi, 0xc
xor ecx, 0x3914a01
nop
or edx, 0x391815d
jmp 0x61d079
push 0x21a2ae
sub esi, edi
xchg edx, edi
mov edx, esi
xchg esi, ecx
xor edi, ecx
and edi, esi
not edx
rol esi, 0x17
and edi, esi
and edx, esi
or esi, edx
add esi, edx
jmp 0x61d16f
mov ebx, 0x6332a2e
and ecx, edx
xor esi, edi
xor ecx, edx
and esi, edx
bswap edx
add edx, ecx
and edx, edi
add ecx, edi
jmp 0x61baa2
call fcn.0061cd0f
dec esi
or edi, esi
mov esi, edx
neg edi
and edx, edi
xor edx, edi
and esi, edx
and ecx, edx
or esi, edx
and edx, 0x3988e8d
or ecx, esi
or edi, edx
xor esi, edx
sub ecx, esi
jmp 0x61d4e0
push 0x23a4703
inc edx
add ecx, 0x3a04729
or esi, 0x3a0626b
rol ecx, 0x1c
and esi, 0x3a09c7f
sub ecx, esi
xor edx, esi
ror ecx, 0x16
jmp 0x61de03
push 0x2306b90
inc edi
xor ecx, esi
shl edx, 0x16
sub esi, edx
sub ecx, esi
xor edi, 0x3a19303
xor edx, edi
shr edx, 0xc
add edi, 0x3a1e755
xor edx, ecx
jmp 0x61df7d
mov ebx, 0x6332a2e
neg ecx
bswap edi
add ecx, esi
or esi, ecx
mov ecx, edi
neg edi
xchg esi, ecx
sub edx, 0x3a2dffb
mov edi, esi
or ecx, esi
or edx, edi
or edi, 0x3a348fb
or edx, esi
xchg edi, edx
jmp 0x61c41b
push 0x23b3aa5
add esi, edx
shl esi, 2
xchg esi, ecx
or esi, ecx
or edi, edx
xchg edi, esi
mov esi, ecx
and esi, 0x3a6933d
sub ecx, esi
xchg ecx, edx
xor edx, ecx
add ecx, edx
not edx
mov esi, edx
jmp 0x61deb8
call fcn.0061cd0f
mov ecx, esi
mov edi, 0x3a889e7
shl esi, 0x13
xor edi, esi
mov edi, 0x3a8dd9d
or edx, 0x3a8f859
xor edi, esi
xor edx, esi
xor ecx, 0x3a9471b
xor edi, edx
neg edx
xchg esi, ecx
jmp 0x61e38a
pop ebx
xor esi, edx
add ecx, 0x3aa811f
and edx, 0x3aaa1cb
shl edi, 2
and esi, 0x3aad61b
not esi
dec esi
shr edi, 0xa
sub ecx, esi
neg esi
jmp 0x61c970
push 0x23c4c5f
add edx, ecx
dec ecx
or edi, esi
or edx, edi
dec ecx
add esi, ecx
rol edx, 5
and edi, edx
jmp 0x61c3d6
pop ebx
add edx, edi
mov edi, edx
or esi, 0x3b057eb
or esi, ecx
add esi, edx
xchg esi, edi
add ecx, 0x3b0c3f5
mov edx, edi
or esi, ecx
add esi, ecx
jmp 0x61dcef
push 0x2319165
shr edi, 2
and edx, edi
xchg edi, esi
or esi, 0x3b185b5
jmp 0x61e257
call ebx
add edi, ecx
add ecx, edi
xor ecx, edi
and edx, esi
and ecx, 0x3b213a3
not ecx
or ecx, edi
or esi, ecx
and ecx, edx
xchg edx, ecx
jmp 0x61c760
push 0x230a65f
sub ecx, edi
and edx, ecx
and esi, 0x3b46a5b
xor ecx, edx
xor edx, 0x3b4a0fd
and edx, ecx
or edx, edi
mov ecx, esi
jmp 0x61d394
pop ebx
bswap edx
add esi, ecx
xor ecx, edi
and edx, esi
shl edi, 0xa
xchg edx, ecx
and edx, 0x3b5b297
add esi, edi
add ecx, edi
nop
mov esi, ecx
not edx
xchg edx, ecx
neg edi
jmp 0x61cda0
call fcn.0061cd0f
or esi, ecx
xor esi, edi
xor esi, edx
not esi
mov edi, 0x3b6fdbb
sub edi, edx
sub edi, 0x3b7313b
mov esi, 0x3b74c65
xor edi, 0x3b76c93
shr edi, 0xb
nop
and edx, esi
jmp 0x61e165
call ebx
dec esi
add edi, edx
mov esi, edx
xor ecx, edi
shl esi, 0x17
and edx, ecx
inc edi
or esi, edi
shr esi, 0x1e
ror esi, 7
xor edi, 0x3d3dff5
xchg esi, ecx
xchg edx, ecx
xor esi, edx
jmp 0x61d199
pop ebx
dec ecx
sub edi, esi
add edx, edi
xor edi, edx
xor edi, ecx
and edi, esi
xor edi, ecx
and edi, esi
add esi, 0x3d60ffb
and edi, edx
jmp 0x61b8cf
push 0x231749b
ror esi, 0x16
xor edx, ecx
and edx, edi
shr edi, 0x1e
or esi, edi
neg ecx
xchg edx, ecx
xor edx, edi
xor ecx, esi
or esi, edx
not edi
mov edx, edi
jmp 0x61c1af
push 0x23c6abb
xchg ecx, esi
sub ecx, edi
inc edi
xchg esi, edi
xor esi, ecx
not edx
add edi, esi
and edx, 0x3dce993
add edx, ecx
or edx, esi
jmp 0x61c3f7
mov ebx, 0x6332a2e
not ecx
ror ecx, 0xd
mov edx, ecx
add edi, 0x3dd9557
sub edx, 0x3ddb04f
shr esi, 0xc
xchg edi, edx
xchg esi, edx
jmp 0x61d6dd
call fcn.0061cd0f
mov edi, ecx
or edx, 0x3de3e27
mov edi, ecx
add edx, 0x3de7103
and edi, ecx
or ecx, esi
mov esi, edx
and edi, 0x3dedbbb
jmp 0x61bc8b
call fcn.0061cd0f
xor esi, 0x3e2a377
rol edi, 0x1e
xchg edi, ecx
xchg esi, ecx
add edx, 0x3e312b1
and edx, esi
add edx, 0x3e3454b
xor ecx, edx
and esi, edx
and ecx, edx
jmp 0x61b840
push 0x232f056
xchg edx, ecx
xor esi, edx
xor ecx, esi
add edi, ecx
or edi, ecx
sub ecx, esi
jmp 0x61d699
pop ebx
dec esi
neg esi
and edx, 0x3f8af6d
and ecx, 0x3f8c92d
mov edi, ecx
and edi, 0x3f90095
rol esi, 5
and esi, ecx
jmp 0x61c0da
mov ebx, 0x6332a2e
inc edx
or edi, esi
xchg edi, esi
mov ecx, edi
jmp 0x61d419
pop ebx
and ecx, 0x3fec1e3
shr edi, 0xc
mov edi, edx
add esi, 0x3ff0fdd
sub edi, esi
xor esi, edi
or edx, ecx
or esi, edx
neg ecx
bswap edi
sub ecx, esi
mov edx, esi
or edi, edx
xchg edx, ecx
jmp 0x61dbb2
mov ebx, 0x6332a2e
or edx, edi
shl edi, 0xd
dec edx
shr esi, 0x1e
xchg edi, esi
inc edx
sub edi, ecx
add edx, edi
jmp 0x61b991
pop ebx
xor edx, 0x4045a2d
shr edi, 0x16
add edx, 0x40490c5
mov edi, esi
or ecx, esi
mov ecx, 0x404da15
mov edi, edx
sub edx, esi
xchg esi, ecx
sub edx, 0x40545e5
inc ecx
xor edi, 0x4057be3
inc edx
add edi, 0x405b06f
jmp 0x61c95d
pop ebx
shl edx, 8
add edi, ecx
xchg esi, edi
mov edx, edi
mov edi, ecx
and edi, edx
jmp 0x61b88e
pop ebx
ror ecx, 6
and esi, 0x4082129
and edi, ecx
rol edi, 2
mov edx, ecx
add edx, 0x4088725
mov edi, esi
or ecx, edx
mov edx, edi
ror edx, 0xc
mov edx, edi
or edi, esi
sub edx, ecx
shl edx, 3
add edi, ecx
and edi, esi
jmp 0x61dd74
call ebx
add edx, ecx
or edx, edi
or edi, ecx
mov edx, edi
bswap esi
sub ecx, edx
add esi, ecx
dec edi
shl edi, 0xc
mov edi, esi
jmp 0x61e18b
pop ebx
mov ecx, edi
add ecx, 0x40b7a03
mov edi, edx
xor esi, edi
add ecx, esi
and edx, 0x40be339
or ecx, esi
or edx, edi
or edi, ecx
and esi, edi
jmp 0x61b80b
mov ebx, 0x6332a2e
or edi, ecx
sub ecx, esi
neg esi
mov edi, esi
rol ecx, 0x15
xchg edx, edi
shr esi, 0x16
and ecx, edi
add esi, edx
and edi, ecx
xor edx, esi
add ecx, edi
xchg edx, ecx
xchg esi, edx
jmp 0x61c091
push 0x23d40fc
add ecx, esi
and edx, ecx
mov edi, ecx
add ecx, esi
sub edx, edi
bswap esi
xor edx, esi
mov esi, edi
rol ecx, 0xe
add edx, esi
xor ecx, 0x4124417
shr esi, 8
jmp 0x61e28b
pop ebx
add edx, 0x41285e7
mov edi, esi
xor ecx, edi
rol esi, 0x1e
mov ecx, edi
shl esi, 0xf
dec ecx
sub ecx, edi
or esi, edx
and esi, ecx
jmp 0x61e3b5
call fcn.0061cd0f
sub edx, edi
add ecx, esi
and edx, ecx
mov edx, esi
and edx, edi
mov ecx, edx
xor edi, ecx
add esi, 0x4169857
xchg esi, ecx
bswap ecx
jmp 0x61bd82
call ebx
xor ecx, esi
rol edx, 8
mov ecx, esi
shl edx, 0x19
inc edi
xor esi, ecx
add edx, ecx
sub edi, ecx
xchg ecx, esi
mov ecx, edx
mov esi, 0x41801f3
mov esi, edi
rol ecx, 0x1b
xor esi, 0x4184e63
add esi, ecx
shr esi, 0x14
jmp 0x61c18d
call ebx
or edx, esi
rol esi, 0x17
dec edx
shr esi, 0x1f
and edx, edi
or esi, edx
and edx, 0x4194ab5
mov edi, 0x41965d9
bswap edi
xchg edx, esi
jmp 0x61ba16
call ebx
mov ecx, edi
or esi, edi
and esi, 0x41ad8e5
mov edi, esi
xor edi, ecx
mov ecx, edi
mov esi, ecx
mov ecx, esi
ror edx, 4
and edi, 0x41b8b1f
jmp 0x61dd29
pop ebx
mov esi, edx
or edi, edx
mov edi, 0x41be949
mov edx, esi
xor esi, edx
mov ecx, edx
jmp 0x61cf36
push 0x236e00c
xor edx, 0x429abd7
shr edi, 7
and edx, ecx
sub edx, esi
rol edi, 5
xor edx, ecx
mov edi, 0x42a4927
sub ecx, 0x42a649d
xchg esi, edx
and ecx, edi
or edx, esi
rol esi, 9
xor ecx, edi
mov edi, ecx
jmp 0x61e33c
pop ebx
add ecx, edx
or ecx, edi
mov edx, 0x42df315
xchg esi, ecx
sub esi, edx
ror esi, 2
shl edi, 0x1f
or edi, 0x42e7bf3
ror esi, 0xb
add edx, edi
shr esi, 0x12
sub edi, edx
jmp 0x61d86b
push 0x2382929
xor edx, ecx
or edx, ecx
sub esi, ecx
dec edx
mov edi, 0x432cfe9
add edi, 0x432e9a9
sub esi, 0x4330845
and edi, esi
or edi, 0x4333b5f
xor esi, edx
shr edi, 0xf
and edx, ecx
jmp 0x61e136
push 0x23c2ef1
and esi, ecx
xor ecx, edi
xchg ecx, edx
xor edi, esi
jmp 0x61c101
push esp
or edx, 0x438282f
add ecx, edi
xchg ecx, esi
or esi, edi
inc edx
not ecx
sub esi, ecx
mov edi, ecx
jmp 0x61b8f5
push 0x2332b49
xchg esi, ecx
add edi, esi
shr edi, 9
bswap edx
jmp 0x61dda0
push esp
and esi, 0x43e87cf
add edx, esi
inc ecx
mov edi, 0x43ed481
and edi, esi
not esi
mov ecx, edi
add ecx, 0x43f3e8d
shl ecx, 0x10
add esi, edi
jmp 0x61cfaf
push 0x401400
xor ecx, edi
or edx, ecx
or esi, edx
or edi, esi
shr edx, 0x1e
or ecx, 0x446aca1
and edi, esi
mov edx, edi
inc edx
add esi, edi
sub ecx, 0x4472f4b
xchg edx, ecx
jmp 0x61d8ae
pop ebx
ror ecx, 0x1f
mov edx, esi
shr ecx, 0x14
mov esi, 0x447be5b
mov edi, esi
xor esi, ecx
add edx, esi
or ecx, 0x4482233
xor edx, ecx
add edx, 0x4485ba3
and edi, ecx
xchg ecx, edi
mov edx, ecx
mov esi, ecx
jmp 0x61d91e
pop ebx
mov edi, 0x44bd07b
mov esi, 0x44bea0d
xor ecx, edi
sub esi, edi
xor ecx, edi
add ecx, 0x44c516f
and ecx, esi
or edx, ecx
rol edx, 3
sub ecx, 0x44cbc0d
jmp 0x61b9d1
mov ebx, 0x6332a2e
xchg esi, ecx
add esi, ecx
and esi, edi
rol esi, 0x15
and esi, edi
mov edx, 0x4506a63
mov ecx, 0x4508423
xor edi, ecx
dec edx
dec ecx
jmp 0x61cb16
push 0x23b1cf5
sub ecx, 0x452103f
or edx, ecx
or esi, edx
inc esi
ror edx, 5
mov edi, 0x45298ef
jmp 0x61c03f
mov ebx, 0x6332a2e
xor ecx, 0x4559c7d
ror esi, 0x14
xchg edi, edx
and edx, ecx
mov esi, edx
xor edx, edi
ror edx, 0x1a
mov edx, edi
jmp 0x61c25c
call fcn.0061cd0f
or edi, edx
xor ecx, 0x45999e5
ror esi, 0x18
xor edx, 0x459ce35
ror edi, 0x1f
and edx, edi
xor edi, ecx
and edi, esi
shr edx, 0x15
xchg edx, esi
jmp 0x61c9a2
mov ebx, 0x6332a2e
sub edx, ecx
mov edi, esi
or edx, esi
xor edi, 0x45df1f9
mov ecx, edi
add ecx, edi
jmp 0x61d664
pop ebx
or edx, esi
mov edx, edi
or edi, esi
xchg esi, ecx
or edx, ecx
and esi, 0x45ec215
xor esi, ecx
neg esi
add edx, 0x45f17f9
mov edi, esi
jmp 0x61ded6
call ebx
add edx, ecx
shr ecx, 4
sub esi, edi
and edi, ecx
xor esi, ecx
add edx, esi
ror esi, 0x1d
mov edx, 0x4600c85
and edx, edi
or ecx, edi
jmp 0x61d22a
push 0x2348df1
mov edi, ecx
shr esi, 0xd
xchg edi, esi
shl ecx, 0x18
add esi, edi
xor ecx, edi
shl esi, 0xc
sub edx, ecx
xchg ecx, edx
ror ecx, 0x1a
mov esi, 0x46b3aab
mov esi, edi
jmp 0x61e214
call fcn.0061cd0f
rol ecx, 0x19
xor ecx, edx
xor edx, 0x46baa27
ror edi, 1
and edi, ecx
not ecx
dec esi
mov edx, ecx
xor esi, ecx
xor ecx, edx
jmp 0x61cbae
push 0x2386551
and edx, edi
and edi, ecx
xchg esi, edx
mov edi, ecx
jmp 0x61dc61
push 0x2330eef
and edi, edx
add esi, edx
xchg edi, esi
xor esi, edi
xor ecx, edx
neg edx
mov ecx, edx
xor edx, ecx
rol edi, 4
mov edx, 0x46f7abb
mov ecx, edi
xor esi, ecx
jmp 0x61d016
call fcn.0061cd0f
nop
and edi, edx
not edx
or edx, 0x471509b
mov edx, 0x4716a71
and edx, edi
or esi, edx
or edi, esi
bswap ecx
mov ecx, edi
jmp 0x61cb69
pop ebx
sub ecx, 0x476c34b
xchg edx, ecx
xor esi, edi
or edx, ecx
or esi, edx
and esi, ecx
xchg ecx, esi
xor esi, 0x4777637
or ecx, edi
rol ecx, 0x1b
or esi, edx
or edi, esi
jmp 0x61e3e2
pop ebx
or edx, esi
or esi, edi
or esi, edx
or esi, 0x47851cd
xor edi, edx
rol esi, 0x16
bswap esi
and esi, edi
xor edx, ecx
and esi, 0x478f23f
jmp 0x61e451
mov ebx, 0x4132136a
not esi
or edi, esi
dec edx
or ecx, edx
ror ecx, 0x18
neg edx
and edx, esi
add esi, edi
xchg esi, edi
neg esi
add edx, 0x47eeb97
mov edx, esi
dec edx
mov edx, 0x47f46dd
jmp 0x61bd9b
call ebx
not edi
add edi, ecx
or edx, 0x480c951
bswap edx
rol edi, 0x1c
mov edi, 0x481295f
or ecx, edx
xchg edi, edx
shr edi, 4
xor esi, ecx
bswap ecx
shr esi, 0x14
jmp 0x61c236
pop ebx
not ecx
mov edx, esi
add esi, edi
xor edi, 0x4851393
xchg ecx, edx
or ecx, esi
shl ecx, 0x1a
xor edi, edx
add esi, ecx
and esi, edi
shl esi, 0x1d
sub esi, ecx
jmp 0x61c303
push 0x231e807
xor ecx, edx
neg edx
mov edx, ecx
add edx, 0x4894e31
or ecx, 0x4896973
shr esi, 1
jmp 0x61bb1a
push 0x23540c5
or esi, ecx
or edi, edx
sub ecx, edx
mov esi, edi
jmp 0x61bfce
pop ebx
and esi, ecx
shr edx, 1
neg esi
ror edi, 0x18
or edx, 0x498fb39
xor edi, 0x49917cf
inc edx
xor edx, esi
or edx, edi
or edi, ecx
jmp 0x61d308
call ebx
or edi, ecx
add esi, edx
xor edi, 0x49cfc13
sub edx, 0x49d17a7
rol edi, 0x1e
xor edx, ecx
or esi, edi
shl esi, 0x18
add edi, edx
sub esi, 0x49db7a9
or esi, edx
sub ecx, edi
mov edi, edx
add esi, edx
jmp 0x61bbde
push 0x2388387
shr edx, 0xb
and ecx, esi
or edx, ecx
rol edx, 4
sub ecx, edx
mov edx, ecx
add edx, 0x49edc71
mov edi, esi
xchg ecx, edx
or edx, edi
and edx, esi
sub edi, esi
jmp 0x61b738
push 0x2371ded
sub esi, edx
xor edi, edx
inc esi
mov edi, edx
sub edx, esi
inc edi
or edx, ecx
or esi, edx
or edi, esi
and edi, edx
add esi, edx
mov ecx, esi
jmp 0x61bb89
push 0x23dda53
or ecx, edi
shl ecx, 0x13
sub edx, esi
add ecx, edx
add edi, ecx
xor edx, ecx
mov ecx, 0x4a358cf
mov esi, ecx
shr esi, 0x16
bswap edi
xchg edi, edx
nop
jmp 0x61e2ac
pop ebx
and edx, ecx
sub edi, edx
sub edi, ecx
xor edx, ecx
add edx, 0x4a54885
mov edi, esi
and edi, esi
rol esi, 4
and edi, ecx
not ecx
jmp 0x61bfa7
pop ebx
xchg ecx, esi
ror edi, 5
add edx, 0x4a730db
xchg edi, ecx
add ecx, 0x4a7681f
mov edi, edx
or esi, 0x4a79b4d
inc ecx
or edi, 0x4a7d14b
inc edx
mov edi, ecx
inc edx
jmp 0x61caa4
push 0x23349c1
and esi, ecx
add edi, esi
mov edx, edi
mov ecx, edx
mov edx, esi
bswap edx
sub edi, edx
sub edi, ecx
nop
bswap ecx
jmp 0x61e019
push 0x23a6533
add ecx, edi
bswap edx
xchg edi, esi
mov edx, 0x4ab62e5
xor edi, ecx
xchg edi, ecx
dec ecx
add ecx, edx
sub esi, ecx
bswap edi
dec edi
or edi, ecx
jmp 0x61d2c0
mov ebx, 0x6332a2e
add esi, 0x4af1e61
not edi
xchg edi, ecx
xor edi, edx
dec esi
add edx, edi
nop
bswap ecx
inc edx
xchg ecx, edi
jmp 0x61bc69
push 0x23b58eb
add edx, edi
xchg ecx, edi
and ecx, 0x4b18acb
dec edi
xor edx, edi
shr edx, 0xd
xchg esi, edx
sub edx, edi
jmp 0x61c807
pop ebx
xor esi, 0x4b232b5
mov ecx, esi
sub esi, edi
and edx, 0x4b27eeb
add esi, edx
shl esi, 2
sub edx, 0x4b2d099
shl ecx, 9
sub edx, esi
add edx, 0x4b31e23
and edi, ecx
bswap edi
jmp 0x61b86c
push 0x2308829
rol edi, 7
shr esi, 0x1f
xor edi, esi
or ecx, esi
ror edi, 0x10
shr edx, 7
and ecx, esi
bswap ecx
jmp 0x61c214
push 0x231cb53
add ecx, edi
rol edi, 0x1b
mov edx, 0x4beb685
mov esi, 0x4bed045
mov edx, 0x4beea05
mov esi, edx
nop
xchg ecx, esi
mov edi, edx
xchg esi, ecx
jmp 0x61d9b0
push 0x23366a3
sub ecx, edi
rol edx, 0xd
add edx, edi
or edx, 0x4bfdf0b
xor edx, esi
sub edi, edx
not edi
not edi
xchg ecx, edi
sub esi, 0x4c08235
jmp 0x61c8af
pop ebx
and edx, ecx
xchg edi, esi
sub esi, 0x4c1c4f1
and edi, esi
or edx, ecx
mov edx, esi
or edi, edx
not edi
jmp 0x61ca7c
push 0x2384775
xchg ecx, edi
or esi, 0x4c7aec3
xor edi, edx
bswap esi
bswap esi
or ecx, esi
ror edi, 0x15
mov esi, edx
and edx, 0x4c8682d
or edi, ecx
sub ecx, esi
xor edi, 0x4c8b565
jmp 0x61d687
call ebx
neg ecx
xchg ecx, edx
xor edi, esi
or ecx, esi
add ecx, 0x4c94647
mov edi, 0x4c9603d
or edx, ecx
add ecx, esi
or ecx, edi
or esi, ecx
or esi, edx
mov ecx, edx
jmp 0x61d4be
pop ebx
dec esi
mov esi, 0x4ca37af
mov esi, edi
mov edi, esi
not esi
add esi, ecx
xor esi, 0x4cab963
sub ecx, 0x4cad4f7
jmp 0x61b96a
mov ebx, 0x6332a2e
bswap edi
or edi, 0x4cdb153
add esi, edx
inc ecx
jmp 0x61be82
push 0x231ae45
mov esi, edi
mov edx, ecx
not edi
xchg edi, ecx
shr esi, 4
or edx, edi
xor ecx, edx
mov esi, 0x4cfdb07
mov esi, edi
or ecx, 0x4d00eb5
add esi, 0x4d02823
xchg ecx, edx
ror edi, 0x11
shl ecx, 3
jmp 0x61dff2
mov ebx, 0x6332a2e
sub esi, edi
xor edi, esi
xchg edi, esi
xchg esi, edx
sub edi, edx
mov ecx, edi
or ecx, esi
neg edi
sub edx, edi
dec ecx
bswap edx
add esi, edx
jmp 0x61e319
push 0x23df98d
not esi
xor edx, 0x4d2194d
xchg ecx, esi
xor esi, edx
sub edx, edi
xchg edi, ecx
jmp loc.0061d966
call fcn.0061cd0f
xor edi, ecx
sub ecx, edx
xchg edi, ecx
mov ecx, esi
shl edx, 0x11
inc edi
xor esi, ecx
neg esi
or esi, edx
sub ecx, esi
add edi, esi
shl edi, 0x1d
jmp 0x61cb38
push 0x236fe3d
xor esi, edx
add edx, esi
xchg ecx, edx
xor edi, edx
xor ecx, edi
xor edi, 0x4d6fd1b
jmp 0x61dc89
call ebx
ror ecx, 0x18
and esi, 0x4d84d1b
xchg edx, edi
mov esi, 0x4d8829b
mov esi, edi
bswap ecx
mov edi, esi
add ecx, 0x4d8e715
or edi, 0x4d9067d
sub esi, ecx
jmp 0x61b6ff
push 0x2346f78
not ecx
or esi, 0x4d96003
xor edi, edx
bswap esi
add esi, edx
mov ecx, esi
mov edi, 0x4d9e5cf
mov edi, ecx
add ecx, edx
and ecx, 0x4da2f9d
xor ecx, esi
xor edi, edx
jmp 0x61d63b
pop ebx
dec edx
xor ecx, edx
mov esi, ecx
and esi, edi
add esi, edx
xchg ecx, esi
mov ecx, edx
neg edx
xor esi, ecx
and ecx, 0x4db70a3
or ecx, edx
mov ecx, 0x4dba38f
xor esi, edi
xor ecx, edi
jmp 0x61c5dd
pop ebx
or edx, esi
rol esi, 0xb
sub edx, 0x4de5349
rol edi, 0x1f
mov edx, 0x4de8861
mov esi, edx
sub ecx, esi
and ecx, esi
mov edx, edi
ror edx, 0x1c
jmp 0x61d79f