Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff02
jne 0x401066
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff1a
jne 0x401112
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff29
jne 0x4011b9
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff2f
jne 0x40121f
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.kernel32.dll_DnsHostnameToComputerNameW
call sub.ntdll.dll_RtlGetNtProductType
call sub.kernel32.dll_DnsHostnameToComputerNameW
ret
jmp 0x478634
xor ecx, edi
mov edx, 0xd1278c5e
jmp 0x47994f
push 0xd14b01c4
or esi, edx
or edi, edx
sub esi, ebx
xchg esi, edx
add edx, ebx
xor ebx, edx
and edx, esi
shr esi, 0xd
or edi, esi
bswap ebx
xor ebx, edx
mov edx, 0xd7300cc2
or edx, edi
mov ebx, edx
jmp 0x479505
pop ecx
sub esi, edx
add ebx, edx
sub edi, esi
xchg ebx, edx
or edi, edx
xor edx, 0xd749c764
shl edx, 0xb
shl edi, 1
and edx, edi
mov edi, 0xd74b7a86
jmp 0x478ea4
pop ecx
sub edx, ebx
mov ebx, edi
xor edx, ebx
add edi, 0xd74d2ae8
xchg edx, edi
inc edx
and edi, edx
jmp 0x479e9e
pop ecx
sub ebx, edx
or esi, edx
not esi
xor edi, 0xd7586d9e
dec edi
and edx, esi
sub ebx, edx
or esi, edx
mov edi, edx
jmp 0x478f08
push 0xd139e1db
sub ebx, 0xd75ee52d
xor edx, edi
dec esi
inc edx
sub esi, ebx
ror edx, 0x10
neg edx
shl edx, 0xa
sub edx, ebx
or edi, edx
jmp 0x47ae75
push 0xd131e7f1
add edi, 0xd7806bca
xchg ebx, edi
or esi, edx
or edi, 0xd781133c
neg edi
add edi, ebx
jmp 0x47b49e
pop ecx
and ebx, 0xd781c388
add esi, edi
and ebx, edx
xchg edx, edi
not esi
xchg edx, edi
ror edi, 7
shl esi, 0x16
xor esi, edx
or esi, 0xd783a048
jmp 0x4787d0
mov ecx, 0x123b2f04
mov esi, edi
sub edx, edi
bswap esi
sub ebx, esi
xor edx, esi
not esi
jmp 0x479e65
call ecx
not edi
sub edx, 0xd7a38e7a
shl edx, 9
shr edi, 0x1f
xchg esi, edx
bswap esi
mov esi, edx
xchg edi, ebx
jmp 0x479c52
mov ecx, 0x123b2f04
xchg esi, edx
and edi, edx
add esi, 0xd7b08b97
add esi, ebx
sub esi, ebx
sub edx, edi
xor esi, edx
inc esi
not ebx
ror esi, 0x1e
add edx, esi
mov edi, edx
neg esi
inc edx
jmp 0x479fa6
call ecx
xchg esi, edx
not ebx
shr edx, 0x10
nop
ror edi, 0xf
jmp 0x47b29d
pop ecx
dec esi
dec esi
dec ebx
xor edx, esi
and edi, esi
inc ebx
sub esi, edi
shr ebx, 4
mov ebx, esi
jmp 0x47abdd
push 0xd1453c8f
sub edi, ebx
mov edx, ebx
xor ebx, edi
and edx, ebx
ror edx, 0x1d
not esi
sub edx, 0xd8154978
not edi
bswap ebx
add esi, ebx
mov esi, edx
and edx, 0xd81b3f3d
and ebx, edi
and esi, 0xd81cb5eb
xor ebx, 0xd81e0070
jmp 0x479bf9
call fcn.0047b2be
and esi, ebx
sub ebx, esi
add esi, 0xd82bb6bb
xor ebx, 0xd82c366b
sub esi, edx
sub edi, 0xd82d0661
add esi, 0xd82d6406
or edx, 0xd82dd886
shr esi, 7
xchg ebx, esi
xchg esi, edx
sub edi, ebx
jmp 0x479a61
call fcn.0047b2be
sub ebx, esi
mov esi, edi
inc edi
sub edx, esi
or esi, 0xd8340c36
sub edx, esi
sub edi, esi
jmp 0x47a304
mov ecx, 0x123b2f04
mov edx, ebx
neg edx
mov esi, 0xd84c5b42
not ebx
add edi, edx
mov edi, edx
sub edx, ebx
add esi, 0xd84dcb6b
mov edx, edi
or edx, 0xd84e2cd3
or esi, edx
xor esi, edi
add ebx, esi
xor ebx, edi
dec esi
jmp 0x47ac96
push 0xd13585ed
xchg ebx, edi
sub ebx, 0xd865d6ba
xchg ebx, esi
dec edi
and ebx, esi
sub esi, edx
dec esi
not ebx
ror esi, 0xb
dec esi
jmp 0x47a56f
push 0xd15442c1
add esi, edx
shr edi, 5
dec esi
dec ebx
rol edx, 0x17
or esi, ebx
and ebx, 0xd8998233
nop
mov edx, esi
jmp 0x47b61e
pop ecx
xchg ebx, esi
or ebx, 0xd89b9e0e
and edi, ebx
jmp 0x47b6b7
call ecx
mov edi, 0xd8a393dc
inc edi
not ebx
neg esi
sub esi, edi
xor ebx, edx
xchg edi, edx
or esi, ebx
or esi, 0xd8a54315
add edi, ebx
and edx, edi
jmp 0x4795de
push 0xd13994ae
ror edx, 0x11
or edx, 0xd8a680f3
or edi, ebx
xchg edi, esi
xor edi, edx
xor esi, edi
inc ebx
and edx, ebx
jmp 0x478808
pop ecx
add ebx, esi
xchg edx, esi
sub ebx, edi
mov esi, 0xd8b0a358
jmp 0x47a42f
push 0xd13ff3ae
mov ebx, 0xd8bd2696
xor edi, esi
rol edi, 0x16
shr edx, 9
xor edx, 0xd8bebbf7
add esi, edx
and ebx, 0xd8bf83b5
sub edx, edi
xchg ebx, edi
xor ebx, edx
xchg edi, edx
jmp 0x4788c5
pop ecx
xchg edi, ebx
or edi, ebx
or esi, edi
and ebx, 0xd8daf701
bswap esi
nop
mov ebx, esi
xor ebx, 0xd8dcb5e0
xor edx, 0xd8dd3f48
jmp 0x479d5f
pop ecx
add edi, ebx
inc esi
mov edx, edi
shl ebx, 0xe
add edi, edx
xor edi, edx
jmp 0x47b4d6
push 0xd14bc2c3
xchg edi, esi
xchg esi, edi
and edi, 0xd8e96de3
neg edx
and ebx, edi
sub esi, 0xd8eb1c30
inc esi
neg edi
xor esi, ebx
bswap edi
jmp 0x47a455
pop ecx
inc edi
nop
inc ebx
xor esi, ebx
add edx, 0xd8f0dd9c
sub esi, edi
xchg ebx, edi
jmp 0x47b368
mov ecx, 0x2774562b
sub edi, 0xd903a058
sub ebx, esi
mov esi, edi
and ebx, esi
mov ebx, edx
xor edx, edi
mov edx, edi
and esi, edx
xor edi, esi
inc edx
or edi, edx
mov esi, edi
or esi, edx
jmp 0x47a51d
mov ecx, 0x123b2f04
or edi, edx
add edi, 0xd9306eb3
shr esi, 0x17
not edx
mov edx, edi
mov edi, 0xd9354c19
shr esi, 0x1b
or edx, edi
and edx, ebx
jmp 0x47a095
call ecx
sub edi, edx
not edi
and esi, edi
or ebx, edi
add esi, edx
ror edi, 0x19
and ebx, 0xd9478d08
or edi, esi
xor edi, edx
jmp loc.0047aac2
call ecx
xchg ebx, edi
xor edx, edi
sub esi, ebx
or edi, esi
mov ebx, edx
xor edx, ebx
jmp 0x47948b
call ecx
inc edx
sub edi, ebx
mov edi, edx
or esi, 0xd97fcf5e
add edx, 0xd98056b2
or edi, edx
add esi, ebx
jmp 0x478753
pop ecx
neg esi
or esi, edi
not ebx
sub esi, ebx
sub edx, ebx
add esi, ebx
jmp 0x478dfc
pop ecx
mov edx, 0xd9947b77
add esi, edx
or edi, 0xd994dda6
xor edi, edx
add ebx, edi
or ebx, 0xd99581f3
jmp 0x479b05
push 0xd12e9b8f
not edi
add edi, esi
not edi
add edi, ebx
mov edx, 0xd9969f03
add edx, ebx
or edi, edx
rol edx, 0xd
and esi, 0xd99824e1
jmp 0x47a642
push 0xd14b68a6
ror ebx, 8
or edx, edi
dec edi
xor edx, edi
rol edx, 0x1b
xor edx, esi
neg edx
and edx, 0xd9a59345
or edi, 0xd9a6420c
or esi, edx
jmp 0x4790e9
push 0xd146ac6c
xchg ebx, edx
xchg edx, ebx
bswap esi
and ebx, edi
and ebx, esi
jmp 0x478a4d
push 0xd13da9ff
xchg edi, edx
and esi, edi
xchg edx, edi
neg ebx
xor edi, edx
add edi, ebx
jmp 0x47b585
pop ecx
or edi, edx
or edi, ebx
ror ebx, 0xd
shl esi, 0x1a
or edi, edx
or esi, 0xd9b6501f
xchg esi, edx
xor edi, esi
xor edi, esi
rol ebx, 0xc
dec edi
jmp 0x47a3e2
call fcn.0047b2be
dec edx
bswap esi
and esi, ebx
xchg esi, edx
neg edi
sub esi, edx
mov esi, ebx
and esi, 0xd9cf822c
and edi, edx
or esi, edx
neg edx
jmp 0x47acba
push 0xd14f1959
shr edi, 0xf
inc edx
sub edi, esi
xor esi, 0xd9da2c27
sub edi, ebx
and edx, 0xd9daa340
xor ebx, edi
xor edi, esi
or esi, 0xd9ddbb10
mov edi, ebx
jmp 0x479891
call fcn.0047b2be
sub edx, ebx
and edi, esi
xor edi, edx
or edx, esi
xchg esi, edi
xor ebx, edi
sub edi, 0xd9fdec10
or edi, 0xd9fea8e4
neg edx
neg edx
jmp 0x47a3bc
push 0xd14f64d0
and edi, 0xda06128f
dec edi
mov ebx, edx
shr edi, 0x13
jmp 0x4792b6
call fcn.0047b2be
add edi, esi
rol edi, 0x1c
add ebx, 0xda076c39
xor edx, esi
or edx, esi
mov esi, ebx
mov esi, edi
or esi, edi
sub edx, 0xda08a8f5
add ebx, 0xda08dd9a
add esi, ebx
not edi
xchg ebx, esi
add edx, ebx
and edx, esi
jmp 0x479301
push 0xd12e4231
xchg esi, edx
mov ebx, esi
and edx, 0xda194308
mov edx, edi
add ebx, esi
dec edi
sub ebx, esi
shr edi, 0xa
xchg edx, esi
xchg edx, edi
and ebx, esi
mov edx, 0xda1cee93
sub edi, edx
jmp 0x4794a8
call ecx
xor edx, ebx
and edi, esi
add esi, ebx
add esi, edi
xchg esi, edx
bswap esi
sub edx, ebx
add esi, ebx
mov esi, ebx
sub esi, 0xda24f029
jmp 0x47a9c2
push 0xd145fdd7
xor esi, edi
dec edi
mov edi, ebx
or edx, ebx
jmp 0x47a78c
call ecx
neg esi
or edi, esi
sub edi, ebx
shr esi, 0x13
jmp 0x47ac69
mov ecx, 0x2774562b
mov ebx, edx
sub edi, ebx
inc esi
jmp 0x479709
pop ecx
or esi, edi
or edx, edi
xor edx, edi
add edx, esi
add edi, 0xda3d14ff
xor esi, 0xda3d4e1d
xchg edi, edx
shl ebx, 0x16
rol ebx, 0x1e
dec esi
xor ebx, edi
xchg esi, ebx
and edi, 0xda3ecaea
jmp 0x47a0f4
push 0xd1371d76
shl edx, 0x18
sub ebx, edi
xor edx, ebx
sub ebx, edx
xchg edi, ebx
xor esi, 0xda4b6dfb
mov esi, 0xda4bc4ad
mov edx, 0xda4c3c72
not edi
dec esi
jmp 0x47aa1e
push 0xd1459dea
add ebx, 0xda593f62
add edx, edi
and esi, 0xda5a8937
or esi, edx
ror edi, 0x1f
jmp 0x479a24
pop ecx
xor esi, edx
or esi, 0xda612487
or ebx, esi
xor edi, esi
and esi, edi
xor esi, 0xda61f656
xchg ebx, edi
or ebx, edx
ror edx, 9
dec ebx
inc edx
mov edx, esi
and ebx, edx
jmp 0x479b88
call ecx
or ebx, esi
or ebx, 0xda73e115
xchg ebx, edi
sub edx, ebx
xor esi, ebx
xchg esi, edi
jmp 0x47b820
push 0xd1539cb7
bswap edx
or ebx, 0xda811d17
mov ebx, 0xda81d96c
xchg ebx, edi
add edi, edx
and edx, ebx
neg ebx
sub edx, edi
and edi, edx
jmp 0x479f57
mov ecx, 0x2774562b
and ebx, esi
add esi, 0xda88a504
dec ebx
xor edx, 0xda8aa034
shr edx, 4
shl esi, 4
rol edx, 9
jmp 0x478cd2
pop ecx
and edi, esi
or ebx, edx
mov edx, ebx
and edx, esi
sub edi, esi
neg edx
mov edx, esi
xor edx, 0xda9094f6
xor edi, ebx
or esi, edi
or edi, edx
or ebx, 0xda916771
jmp 0x478aeb
push 0x401400
xor ebx, 0xda98d463
and edx, edi
or edx, ebx
mov edi, esi
xor edi, 0xda99a3e9
or ebx, esi
mov edx, 0xda9a1621
not ebx
and ebx, esi
neg edx
xor ebx, esi
xor esi, edx
and esi, edi
jmp 0x479d17
call fcn.0047b2be
rol esi, 0xc
add esi, 0xda9bcf83
add ebx, edx
not esi
sub esi, edi
sub ebx, edx
shl ebx, 0xb
jmp 0x478ee5
pop ecx
xor ebx, 0xda9f9f39
not edi
add esi, 0xdaa00a03
add esi, 0xdaa03ebf
sub edi, 0xdaa0739d
and edi, 0xdaa0a435
ror edx, 6
shl edi, 1
ror esi, 9
or esi, 0xdaa1a479
add esi, edi
sub ebx, 0xdaa20ece
mov ebx, edx
or edx, ebx
or esi, edx
jmp 0x47b273
push 0xd14eca6c
add edi, esi
sub esi, edi
xor edx, esi
sub ebx, esi
sub edi, esi
add esi, edx
add edi, esi
xchg edx, ebx
or edi, esi
add ebx, esi
jmp 0x479781
push 0xd153f3f8
add ebx, edi
add esi, ebx
sub ebx, esi
xor ebx, esi
add edi, edx
jmp 0x478e72
pop ecx
or esi, edi
shl edi, 0x11
and ebx, edx
neg ebx
or esi, edx
xor ebx, 0xdb06018b
sub edx, edi
jmp 0x47b35a
call fcn.0047b2be
or edx, edi
mov edi, esi
sub esi, ebx
add edx, edi
xchg edx, edi
or edi, ebx
sub esi, ebx
bswap edi
xor edi, edx
jmp 0x4793b2
call fcn.0047b2be
add edx, 0xdb2d05bc
xchg edi, ebx
inc ebx
xor esi, 0xdb2e4a1e
mov edi, esi
sub ebx, edx
sub ebx, 0xdb2f8678
jmp 0x4799a9
call fcn.0047b2be
or esi, ebx
sub ebx, edx
inc ebx
xchg edi, edx
xor esi, edx
not ebx
add esi, ebx
sub edx, 0xdb3a3fa0
sub edi, 0xdb3aa050
or edx, ebx
sub edx, edi
or ebx, 0xdb3bc138
or ebx, edi
inc esi
xor esi, edi
jmp 0x47a7da
pop ecx
ror edi, 0xa
mov edx, edi
mov esi, edx
and edi, 0xdb4ec256
add edx, esi
shl edx, 0x11
mov edi, edx
or edx, 0xdb50671f
rol ebx, 0x17
shl esi, 9
mov edi, edx
sub esi, edx
mov edx, ebx
shl edi, 3
jmp 0x479f6b
pop ecx
ror edi, 0xf
shr ebx, 0x1b
not edx
or edi, ebx
xor edi, 0xdb6ecd95
shr edx, 0x11
nop
sub ebx, edx
add esi, 0xdb7074a3
sub edx, esi
mov edi, edx
add ebx, esi
shl edi, 0xa
and edi, 0xdb72532a
xchg edi, edx
jmp 0x47ab4a
call ecx
add edx, esi
nop
xor edi, ebx
or edi, ebx
and ebx, edx
or esi, edi
jmp 0x4788a1
mov ecx, 0x123b2f04
and ebx, esi
sub ebx, edx
or ebx, edi
xor edx, edi
sub esi, edx
xchg edi, edx
xor edi, esi
sub esi, 0xdc707d23
add edi, esi
add esi, ebx
jmp 0x4798a7
push 0xd13f9c32
bswap esi
mov edx, edi
mov ebx, edx
or ebx, 0xdc78228f
not ebx
sub esi, edx
mov edi, edx
jmp 0x478f7f
push esp
or esi, 0xdc7b3a3b
and edi, ebx
not edx
xor esi, 0xdc7bd6b6
add edx, esi
or ebx, edx
add ebx, edi
bswap edx
xor edx, ebx
and edi, 0xdc7db2f8
jmp 0x47b5fd
pop ecx
and esi, 0xdc7dfc8f
not edx
xor ebx, edx
or edi, edx
or edi, esi
xor edi, edx
xor ebx, edx
or esi, 0xdc80e7de
or ebx, edi
jmp 0x478f42
mov ecx, 0x4132136a
sub edx, 0xdc84bf71
xchg ebx, edx
mov edx, esi
inc edi
dec ebx
and edi, 0xdc8869be
add ebx, esi
xor esi, 0xdc89ad35
mov ebx, edx
jmp 0x479817
mov ecx, 0x123b2f04
dec edi
and edi, ebx
mov edi, esi
and edx, edi
add edi, esi
inc edx
or esi, edx
and ebx, 0xdc8bb6f2
xor esi, edi
and esi, edx
bswap ebx
and ebx, edi
xor edi, ebx
mov edi, 0xdc8ceb38
jmp 0x47a65a
push 0xd13191fe
or esi, edi
xchg esi, ebx
add esi, edx
or ebx, edi
add ebx, edi
or edi, esi
xor edx, esi
sub edi, ebx
jmp 0x478883
push 0xd151c7cf
and edi, esi
xor ebx, 0xdc9af03e
mov esi, ebx
xchg edi, ebx
jmp 0x479af6
call fcn.0047b2be
mov ebx, 0xdca1f96f
mov esi, 0xdca25bb3
mov ebx, edx
shl edi, 0xf
sub edx, esi
sub esi, ebx
sub ebx, esi
xor edx, ebx
sub edi, edx
xor edi, ebx
jmp 0x47939f
call ecx
mov edi, esi
mov edx, edi
xor edi, 0xdcaaf82f
mov edi, edx
ror edi, 0x13
mov esi, ebx
mov ebx, edi
and edi, esi
jmp 0x47a1b5
mov ecx, 0x2774562b
sub ebx, esi
or esi, edx
and esi, 0xdcae3242
xor edx, 0xdcae8fa0
neg edx
mov esi, edi
xor ebx, esi
xchg edi, esi
xchg edi, edx
add ebx, 0xdcb13217
shl esi, 4
nop
add esi, edi
jmp 0x47b00b
push 0xd1329d7b
xchg ebx, esi
and edi, edx
and esi, edi
dec edx
bswap ebx
bswap ebx
and edx, esi
mov ebx, esi
or edx, edi
jmp 0x479d82
push 0xd1577c87
mov edx, ebx
or edi, edx
jmp 0x47a316
push 0xd12eeb58
or edi, edx
xor ebx, edx
add edx, esi
sub edi, esi
or esi, edx
sub esi, edx
sub ebx, esi
jmp 0x478d65
call fcn.0047b2be
or ebx, edx
xor edi, esi
neg edi
xor edx, 0xdcd309a8
or edx, esi
sub edx, edi
rol edx, 0x1a
jmp 0x47a8c1
pop ecx
or edx, esi
xor edi, ebx
xor edi, 0xdcd8cbad
shr edi, 0x12
shl ebx, 0xb
add esi, edx
xor ebx, esi
xor edx, esi
xchg esi, edx
jmp 0x47adcb
push 0xd1465030
or edi, esi
rol ebx, 0xc
or ebx, 0xdd0d37cd
rol esi, 0x1d
neg edx
mov edx, edi
or esi, ebx
mov ebx, 0xdd0f2e47
or edx, esi
add edx, edi
jmp 0x47954f
call ecx
add ebx, edx
xor edi, 0xdd14a7c9
shl esi, 3
xchg ebx, edx
xor edi, ebx
add esi, 0xdd1c99f3
bswap edi
xor esi, 0xdd1e0b1c
mov esi, edx
jmp 0x478776
push 0xd13a8116
xor edx, 0xdd41fac0
sub ebx, 0xdd427aff
xor esi, edi
jmp 0x47b0fc
call ecx
xchg ebx, edx
or edx, esi
or edx, esi
inc edi
xor edi, 0xdd45252e
jmp 0x47ad99
push 0xd1571896
or ebx, edx
or ebx, edi
shr ebx, 0x15
or esi, ebx
or ebx, edx
neg edi
not esi
rol ebx, 0x18
add esi, ebx
or ebx, esi
jmp 0x47a61d
pop ecx
and esi, ebx
sub edi, ebx
mov esi, edi
add edi, esi
xchg edi, ebx
rol edi, 0x14
and ebx, edi
jmp 0x47a68d
push 0xd1376c06
xchg edx, esi
mov esi, ebx
bswap ebx
or ebx, 0xdd75f250
and edx, esi
jmp 0x47b42e
push 0x77234
add ebx, 0xdd924572
xor esi, ebx
xchg ebx, edi
bswap esi
xchg esi, edi
sub edx, 0xdd94320a
rol ebx, 0xd
xchg esi, ebx
inc ebx
jmp 0x479e36
pop ecx
xor esi, 0xdda8dc59
xchg edi, edx
xor ebx, 0xddaa610b
or esi, edi
or ebx, edi
xchg ebx, esi
and edi, edx
add edx, esi
mov ebx, edx
or esi, edi
shl esi, 0x12
xor edi, 0xddaeaa31
jmp 0x47910e
pop ecx
rol esi, 0xe
neg edx
inc ebx
sub ebx, edx
mov esi, ebx
or edx, edi
and edi, ebx
sub ebx, edx
xchg edx, esi
neg esi
xchg edi, edx
add edx, esi
and esi, 0xddcdba0a
jmp 0x4793ce
pop ecx
neg edi
xchg edx, ebx
sub edx, ebx
shl ebx, 0xe
mov ebx, 0xdde103ac
xchg edx, ebx
sub edx, ebx
inc esi
xchg esi, edx
xor esi, ebx
xor ebx, 0xdde4f062
xor edi, esi
and edi, ebx
sub edi, 0xdde61a26
jmp 0x479da4
call fcn.0047b2be
or edx, esi
xor ebx, 0xdde7b937
ror edx, 3
shl edi, 0x1d
not esi
ror edx, 1
or ebx, edi
xor esi, edx
shr esi, 7
jmp 0x47a553
call ecx
xchg esi, ebx
mov ebx, 0xddee30ed
shl ebx, 0x13
jmp 0x47905f
push 0x40
or esi, edx
shl esi, 0x17
mov esi, 0xddf36ed5
xor edi, esi
shr edx, 1
mov esi, ebx
inc edx
mov edi, esi
xor edi, 0xddf774e7
sub edx, edi
sub ebx, edi
xchg ebx, esi
xor ebx, edx
jmp 0x47aacd
push 0xd13f4bd2
or edi, 0xde08119b
ror edi, 0x15
xor ebx, esi
or edx, edi
and edi, 0xde0c9fa1
or ebx, esi
add edx, ebx
jmp 0x47a381
pop ecx
and esi, 0xde19be51
neg ebx
or edi, edx
add edx, 0xde1cf481
sub esi, 0xde1dc64b
and esi, ebx
nop
and edx, esi
sub edi, 0xde216dde
mov esi, edi
rol esi, 0x1d
not esi
or edi, ebx
xor ebx, edi
jmp 0x4790bc
pop ecx
sub esi, 0xde287910
rol esi, 0xd
xor edi, ebx
and ebx, edi
jmp 0x47b095
push 0xd13a36ff
nop
mov edx, edi
xchg edx, edi
neg edi
mov edi, edx
and edx, ebx
xchg ebx, edx
bswap edx
not edx
xor edi, ebx
jmp 0x47a8a9
pop ecx
xchg ebx, edi
mov esi, edi
xchg esi, ebx
neg edi
add edx, esi
ror edx, 0xb
or esi, 0xdeb0e004
and esi, 0xdeb14478
or edi, esi
bswap edi
jmp 0x479f39
push 0xd14a9bd9
and edi, esi
or edx, edi
shl esi, 3
or esi, edx
mov esi, ebx
jmp 0x47866b
call fcn.0047b2be
and edx, ebx
add edx, esi
sub edi, esi
sub esi, 0xdef8766a
add edx, esi
and esi, edi
sub esi, edx
dec edx
add edi, edx
add esi, 0xdefc43df
and edi, edx
sub edi, 0xdeff8cbd
jmp 0x4789de
push 0xd156bfaf
rol ebx, 0x1e
and edx, esi
xor edx, edi
or ebx, esi
mov ebx, esi
xchg edi, esi
xchg ebx, esi
jmp 0x47a940
push 0xd13ac9f5
or ebx, edx
xor edi, ebx
shl esi, 0x16
and esi, ebx
shr esi, 0xb
ror esi, 0x1d
jmp 0x4791d7
pop ecx
xor ebx, edx
mov esi, edx
xchg ebx, edi
or esi, 0xdf75907d
xor edx, 0xdf76a140
mov edi, 0xdf782282
xchg ebx, esi
and edx, edi
add edx, ebx
xchg edi, esi
jmp 0x47b2fd
pop ecx
neg edx
ror edx, 0x12
ror esi, 8
and edi, 0xdf8e907f
xor edi, 0xdf8fe75e
sub edx, 0xdf90807e
or edx, esi
inc esi
shr edx, 0x14
neg edx
or edi, esi
jmp 0x47a4dc
pop ecx
dec edi
sub edi, ebx
ror ebx, 0x19
sub edi, ebx
mov ebx, esi
ror edx, 0x12
and edx, ebx
not ebx
or esi, edx
or edx, 0xdfa11b9d
or edi, esi
jmp 0x47ad45
pop ecx
sub ebx, edi
mov edx, ebx
shr edi, 0x1c
and ebx, edx
mov esi, 0xdfc992e2
ror ebx, 1
shl esi, 0xd
and edx, edi
xor edi, ebx
add ebx, 0xdfcd29b8
jmp 0x47af91
pop ecx
or edi, esi
not ebx
add edi, edx
sub ebx, edi
jmp 0x479588
push 0xd131441d
sub edx, esi
rol ebx, 0x14
xor edx, 0xdfe521cb
and esi, 0xdfe5ca57
and edi, edx
xor esi, 0xdfe7674c
add ebx, esi
jmp 0x47a4b3
mov ecx, 0x2774562b
xchg edx, ebx
shr esi, 0x10
add ebx, edi
xchg ebx, esi
and esi, ebx
jmp 0x478d09
push 0xd132525d
xor edi, 0xe045ee31
inc edx
xor ebx, edx
sub esi, edi
and esi, edx
and ebx, esi
xor ebx, edi
jmp 0x47a59f
pop ecx
not edi
inc ebx
or edx, esi
and ebx, edi
mov edx, edi
shr edx, 0x1c
xor edx, ebx
bswap edx
add edi, ebx
jmp 0x47aeb7
call fcn.0047b2be
mov edi, ebx
mov ebx, esi
xor esi, edi
xchg edx, edi
jmp 0x478a76
mov ecx, 0x123b2f04
xor esi, edx
xor edi, 0xe0e4ece4
xchg edx, esi
ror ebx, 0x1f
inc edx
xor edi, ebx
shl esi, 1
or edx, ebx
mov esi, 0xe0ec970e
sub edi, esi
mov esi, 0xe0ef9dc6
add ebx, esi
sub ebx, 0xe0f22a7e
xchg esi, ebx
xor edi, edx
jmp 0x47b573
push esp
and edx, edi
inc edx
sub edx, esi
xchg ebx, esi
bswap esi
inc edx
xor edi, 0xe121eeec
or edx, ebx
sub esi, ebx
xor edx, ebx
add esi, ebx
ror edi, 3
jmp 0x47accb
mov ecx, 0x123b2f04
add esi, edx
mov ebx, esi
and ebx, 0xe12898b0
sub edx, 0xe1299daa
xor edi, 0xe12af716
mov edx, ebx
add esi, edi
and esi, ebx
shl ebx, 0x1b
mov esi, 0xe13122b0
xor esi, edi
mov esi, edi
or ebx, 0xe13335a7
and ebx, edx
xor edi, ebx
mov edx, ebx
jmp 0x47a04d
pop ecx
sub esi, 0xe178cd0b
not edi
or edx, edi
and esi, ebx
sub esi, edx
xor esi, 0xe1809279
mov edx, 0xe1813a29
and edx, 0xe1826ca8
jmp 0x47b210
pop ecx
sub edi, esi
or edx, edi
xor ebx, edx
jmp 0x478c65