Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Query or enumerate registry value

Disassembly:
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xfffffee0
jne 0x4010a7
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.user32.dll_UserHandleGrantAccess
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.user32.dll_UserHandleGrantAccess
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff2c
jne 0x401112
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xfffffefe
jne 0x401182
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.user32.dll_UserHandleGrantAccess
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xfffffee0
jne 0x401201
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.user32.dll_UserHandleGrantAccess
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.user32.dll_UserHandleGrantAccess
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.user32.dll_UserHandleGrantAccess
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.ntdll.dll_NtAccessCheckByTypeResultListAndAuditAlarm
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
call sub.user32.dll_UserHandleGrantAccess
ret
jmp 0x4752f0
add edi, ecx
jmp 0x476639
pop edi
and ecx, esi
xchg ebx, esi
shl edx, 0x1f
and esi, 0x6ccf3754
and edx, ecx
sub edx, ebx
jmp 0x475c75
pop edi
or esi, ecx
sub edx, esi
or edx, ecx
sub esi, ebx
xchg esi, edx
sub ecx, 0x6cd7ac4c
ror edx, 0x15
or ecx, ebx
dec edx
xchg edx, esi
jmp 0x4776cc
push 0x6c586452
xchg edx, ecx
xchg ebx, ecx
add edx, 0x6cda1b3c
or ebx, esi
xor ecx, edx
or ebx, esi
not esi
mov ebx, ecx
jmp 0x475ad6
pop edi
dec esi
xor ebx, ecx
shl ebx, 0x10
mov ebx, ecx
jmp 0x476a5d
pop edi
add ebx, edx
sub ebx, esi
mov ebx, esi
and ecx, edx
neg ebx
add ecx, esi
sub ecx, ebx
mov edx, ebx
jmp 0x475939
call edi
mov ebx, 0x6ce40bb6
or edx, esi
sub ecx, ebx
sub ecx, esi
or edx, 0x6ce47654
xchg ebx, esi
jmp 0x47797d
push 0x6c5abca2
neg ecx
dec esi
sub ecx, esi
xchg edx, ecx
bswap esi
sub ecx, esi
sub ecx, 0x6ce95500
mov ecx, 0x6ce975b6
ror edx, 0x18
or edx, ebx
jmp 0x476b8a
call edi
shr ebx, 8
mov edx, ecx
xor ecx, ebx
add esi, edx
add ebx, esi
ror ecx, 0xa
or ecx, esi
xor ecx, ebx
xor ebx, esi
xchg esi, ebx
jmp 0x475ffd
pop edi
shr ebx, 9
neg esi
add esi, edx
and ecx, ebx
xchg ecx, ebx
mov esi, 0x6cebed7a
inc ebx
sub esi, edx
sub edx, ecx
and ecx, esi
inc edx
sub ebx, edx
or ebx, ecx
and ecx, esi
jmp 0x477cf4
push 0x6c595358
xor ebx, esi
or edx, 0x6cf13fb2
add ebx, edx
or ebx, ecx
and edx, ecx
not ebx
sub ecx, esi
and edx, 0x6cf202f4
xor ebx, ecx
sub ebx, esi
jmp 0x477c07
call edi
mov ebx, esi
or ebx, ecx
or esi, ecx
or ecx, ebx
add ebx, edx
xor ebx, 0x6cfbc5ce
add esi, ebx
inc esi
mov esi, ebx
mov edx, ecx
mov ecx, esi
mov edx, ebx
jmp 0x4757f9
pop edi
rol ecx, 0x13
sub ebx, esi
or edx, 0x6cfcbdde
ror edx, 0xd
add edx, esi
shl esi, 4
xchg edx, esi
xor ebx, edx
jmp 0x477bca
push esp
dec esi
and edx, esi
xchg esi, ebx
sub edx, ebx
ror ecx, 0xd
bswap esi
xor ebx, 0x6cfe150c
xor edx, 0x6cfe319c
jmp 0x47606c
push 0x6c5847ca
and edx, ecx
add edx, 0x6cfe709c
inc esi
or esi, 0x6cfea7bc
and ecx, esi
xor edx, 0x6cfee0ae
jmp 0x475407
pop edi
xor edx, ecx
and ecx, ebx
bswap ebx
inc ebx
and ebx, edx
mov esi, edx
neg esi
dec edx
xor edx, ebx
shr esi, 0x17
jmp 0x4772ec
call edi
sub esi, edx
neg edx
and ebx, edx
xor edx, ecx
not edx
shr ebx, 0x10
jmp 0x4764f8
mov edi, 0x33274000
or ecx, 0x6d05e5a4
rol edx, 0x1e
add ecx, edx
sub ecx, edx
and ebx, esi
mov ecx, 0x6d0667ba
bswap ecx
shr edx, 0x1d
bswap ecx
sub esi, ecx
sub edx, ebx
and ecx, edx
jmp 0x477c93
pop edi
or esi, ecx
bswap esi
neg ecx
dec ebx
neg edx
bswap ecx
rol esi, 0x17
mov ebx, ecx
bswap esi
not edx
jmp 0x476df5
push esp
or edx, ebx
or esi, 0x6d0d8fae
and edx, ebx
add ebx, 0x6d0dc352
add edx, 0x6d0dde94
add ecx, 0x6d0df9a2
sub edx, ecx
bswap ecx
jmp 0x475816
call fcn.00475635
sub edx, esi
and edx, ebx
xchg ecx, ebx
mov edx, 0x6d0ea8b4
xor ebx, 0x6d0ec31e
add ecx, 0x6d0ede2c
jmp 0x4764bc
mov edi, 0x33274000
xor esi, ecx
and edx, ebx
inc ebx
and ebx, edx
and ecx, esi
and ecx, edx
add edx, ecx
or ebx, ecx
add esi, edx
and ecx, ebx
jmp 0x476af9
call fcn.00475635
add ecx, edx
xor edx, ecx
not edx
add esi, ecx
xor ebx, edx
dec ebx
sub ebx, 0x6d185eba
or esi, edx
jmp 0x47658d
push 0x6c62201c
xor edx, esi
not edx
jmp 0x476096
push 0x6c566002
sub ecx, esi
sub ecx, 0x6d1f001a
neg edx
rol ebx, 0x1f
neg esi
xchg esi, ebx
dec ebx
add ebx, ecx
xchg ebx, esi
and ecx, edx
jmp 0x477ab5
call fcn.00475635
rol esi, 6
sub esi, 0x6d225cfe
jmp 0x475a04
pop edi
neg edx
add edx, ebx
and esi, edx
or ecx, ebx
xor edx, esi
xchg esi, edx
jmp 0x475f16
pop edi
dec ecx
mov esi, edx
mov esi, ebx
or ecx, 0x6d27a234
ror ecx, 0xb
add ecx, edx
add esi, 0x6d27f2f6
xor esi, ebx
ror esi, 0x19
shr edx, 5
or edx, esi
sub edx, ebx
jmp 0x47675b
call fcn.00475635
sub esi, edx
rol esi, 0x19
jmp 0x47727f
push 0x6c57396e
dec ecx
neg esi
and ebx, esi
or edx, ecx
inc esi
add edx, esi
mov ecx, esi
sub esi, ecx
xor edx, 0x6d2b402c
add esi, 0x6d2b5b3a
xor ebx, ecx
add ecx, 0x6d2b91e2
jmp 0x4770c7
push 0x6c5a9d27
or ebx, esi
xchg esi, edx
and ecx, ebx
sub edx, 0x6d33463c
add edx, ecx
inc esi
xchg ecx, esi
shr ebx, 0x1c
mov ebx, 0x6d33d18e
add ebx, ecx
mov esi, ecx
sub ebx, edx
jmp 0x4755bd
pop edi
add ecx, edx
mov ecx, 0x6d3a400a
add ebx, edx
neg edx
mov esi, ebx
xor ebx, esi
dec ecx
add ecx, edx
and edx, ecx
add edx, ebx
jmp 0x47758c
push 0x73ef0
and edx, 0x6d3b3a12
sub esi, ecx
add ecx, edx
xor esi, ebx
ror edx, 0xf
add ecx, esi
sub esi, ebx
xor esi, ebx
jmp 0x47691a
mov edi, 0x33274000
mov ecx, ebx
add esi, 0x6d3cdb4a
sub esi, ebx
add ecx, ebx
xor esi, edx
not ecx
jmp 0x475a2a
push 0x40
mov ebx, esi
add edx, ecx
xchg ebx, ecx
sub ecx, edx
sub ebx, 0x6d3dd52e
xor ecx, edx
xchg esi, ecx
sub ecx, esi
sub ecx, 0x6d3e436c
sub ebx, ecx
not ebx
xor edx, esi
jmp 0x476019
mov edi, 0x33274000
xchg edx, ebx
add ebx, 0x6d3ed646
add ecx, edx
shl edx, 0xe
or ecx, edx
neg ecx
shr esi, 0x1f
xchg ecx, esi
jmp 0x477823
push 0x6c610cf8
xchg ecx, ebx
sub ebx, edx
mov ecx, edx
xchg edx, ecx
add ecx, esi
sub edx, esi
xor ebx, 0x6d415ab4
and esi, ebx
and ebx, 0x6d4193f0
sub esi, ecx
and edx, esi
or ebx, ecx
and ebx, esi
ror ebx, 0xd
jmp 0x476330
push 0x6c5829f6
and ebx, ecx
not esi
shl ecx, 9
or edx, ecx
and esi, ebx
add edx, 0x6d430df0
sub edx, esi
and ecx, ebx
and edx, ecx
and esi, edx
or ecx, ebx
mov ebx, 0x6d43a532
jmp 0x475834
call fcn.00475635
and ebx, edx
and ecx, esi
add ecx, edx
sub edx, esi
and edx, ebx
add ecx, esi
add edx, ebx
add ecx, ebx
jmp fcn.004757b5
call fcn.00475635
xor edx, ecx
or edx, esi
and ebx, 0x6d45ffae
mov ecx, ebx
shl ebx, 0x15
and ebx, edx
or edx, ebx
and edx, ecx
jmp 0x4767a6
push 0x6c631728
xchg esi, edx
and esi, 0x6d4ce83a
and ebx, esi
xchg ebx, esi
or esi, ebx
add ebx, 0x6d4d555e
xor esi, edx
inc ebx
jmp 0x47729a
mov edi, 0x33274000
and edx, esi
or ebx, ecx
not ecx
xor esi, ebx
xor edx, esi
or ebx, esi
jmp 0x476bdc
push 0x6c5f20fe
xor ebx, esi
mov edx, ecx
xchg edx, ecx
or ebx, ecx
neg ebx
neg ecx
or ecx, 0x6d56e6fc
and ecx, edx
jmp 0x476657
push 0x6c5c08e6
shl edx, 0x1e
mov edx, esi
and esi, edx
add edx, ecx
neg ebx
or ebx, esi
mov edx, ebx
or ecx, esi
jmp 0x476c73
pop edi
add ebx, 0x6d5cb8d2
sub esi, ebx
and ecx, edx
xor esi, ebx
neg ebx
sub esi, edx
jmp 0x477772
push 0x6c5beadc
xchg ecx, esi
sub ebx, 0x6d5d8170
mov ecx, 0x6d5d9c58
sub edx, 0x6d5dbc5a
add ecx, edx
mov ecx, 0x6d5def0a
add ebx, edx
bswap esi
rol ecx, 2
sub ecx, ebx
jmp 0x4763df
call edi
mov ecx, 0x6d5e7f68
sub ecx, ebx
mov edx, ebx
and edx, 0x6d5ecc0c
and ebx, edx
xor ecx, ebx
xchg ecx, ebx
sub ecx, edx
sub ebx, 0x6d5f5360
and edx, ebx
jmp 0x476dcf
push 0x6c598e1e
mov edx, ecx
xchg ecx, esi
sub ebx, ecx
add edx, ecx
add edx, esi
mov ecx, ebx
jmp 0x477242
pop edi
mov ebx, 0x6d603bbe
sub ebx, esi
and ebx, ecx
xor ecx, edx
xchg edx, ecx
sub ebx, ecx
mov ecx, ebx
xchg ebx, ecx
xor edx, esi
ror edx, 0x1f
jmp 0x476479
call edi
add ecx, ebx
add edx, ecx
sub esi, edx
add ecx, edx
xor esi, ebx
and ebx, edx
sub esi, 0x6d65f3a0
sub ebx, esi
or edx, ecx
add ebx, esi
xor esi, ecx
and edx, ebx
jmp 0x4775e8
pop edi
sub ebx, ecx
sub edx, ecx
xor edx, ecx
ror ecx, 7
mov ebx, esi
xor esi, 0x6d671b74
add esi, ebx
shr edx, 7
sub ebx, esi
add esi, ebx
jmp 0x476e24
push 0x6c547f7b
xchg ecx, edx
not ecx
xor esi, ebx
add esi, ecx
jmp 0x47718d
push 0x6c5f3e54
or esi, ecx
sub edx, esi
bswap edx
not ecx
xor esi, ebx
and esi, ebx
add esi, 0x6d6c26f0
inc ebx
or ecx, esi
sub edx, 0x6d6c7bf4
inc edx
or edx, 0x6d6cb2ee
rol esi, 5
sub edx, ecx
jmp 0x477e57
pop edi
xor ecx, edx
xor ecx, ebx
sub esi, edx
and esi, ebx
dec edx
xor edx, ebx
or esi, ecx
mov esi, ecx
bswap edx
not ecx
sub ebx, esi
or edx, 0x6d703b8c
jmp 0x477a24
call edi
xchg ebx, ecx
dec ecx
ror ebx, 0x17
mov ebx, edx
add edx, 0x6d717cf4
xor edx, esi
jmp 0x47683d
push 0x6c580bed
xor esi, ebx
neg ebx
add edx, esi
shr edx, 0xb
mov edx, 0x6d730e96
or esi, ebx
jmp 0x47611f
pop edi
neg ecx
shl esi, 0xf
xchg edx, esi
xor ecx, ebx
dec edx
mov edx, ecx
and esi, 0x6d73f700
xchg ebx, edx
or ebx, 0x6d742d06
mov esi, ecx
jmp 0x477546
mov edi, 0x33274000
ror ecx, 0xc
xor ecx, 0x6d748e4a
jmp 0x476185
call edi
add edx, ebx
or ebx, 0x6d755992
not ecx
add ecx, esi
mov ebx, esi
sub ecx, edx
sub ebx, 0x6d75dbdc
rol ebx, 0x1b
jmp 0x47745b
call edi
and edx, 0x6d762334
xor ebx, ecx
and esi, ecx
inc esi
jmp 0x4754f8
pop edi
add ebx, ecx
mov esi, ebx
jmp 0x477925
push 0x6c5d5694
xchg ebx, ecx
or ecx, esi
mov esi, ebx
sub ebx, edx
sub edx, ecx
xchg esi, ecx
xchg ebx, esi
not esi
add edx, 0x6d7fbe50
xchg edx, ebx
or ebx, ecx
not ecx
jmp 0x4776ab
push 0x401400
and ebx, 0x6d80369c
dec ecx
neg esi
shr ebx, 0x1b
mov esi, ecx
xor ecx, ebx
jmp 0x4757d7
push 0x6c557156
dec edx
xor ebx, 0x6d8103dc
or ebx, esi
xchg esi, edx
and esi, 0x6d8152e8
xor ecx, edx
and ecx, 0x6d8187ea
xor esi, edx
shl ebx, 0x10
not esi
inc edx
mov edx, ecx
shr ebx, 4
mov ebx, 0x6d824828
jmp 0x4769fd
push 0x6c558f50
or ebx, edx
mov ecx, esi
xchg esi, edx
and edx, 0x6d88cfac
add esi, ecx
rol ebx, 3
jmp 0x477329
pop edi
ror ecx, 3
add ebx, 0x6d8baffa
jmp 0x476288
push 0x6c5cbea0
sub ebx, edx
shl edx, 3
xchg ecx, esi
or ecx, 0x6d8c269e
xor edx, ebx
and esi, 0x6d8c5b6c
rol ebx, 5
or esi, ebx
bswap edx
rol ebx, 0x17
add ebx, esi
add ecx, 0x6d8d00c8
jmp 0x47677d
call fcn.00475635
xor esi, ebx
or esi, ecx
add ebx, 0x6d8fd424
xor edx, 0x6d8ff08e
or ecx, edx
and edx, 0x6d902824
mov ecx, esi
or ecx, 0x6d905cd4
jmp 0x477849
push 0x6c5ada86
sub ebx, esi
or ecx, ebx
jmp 0x4772c3
call fcn.00475635
add edx, 0x6d95e74c
sub edx, esi
xor ebx, 0x6d961c74
bswap ecx
xchg esi, ecx
or ebx, ecx
and esi, 0x6d968b5c
xor ebx, edx
and esi, edx
add esi, ecx
jmp 0x4767c6
pop edi
or ebx, 0x6d993466
xor ebx, esi
add esi, 0x6d996958
mov ebx, esi
add ecx, esi
dec edx
xchg edx, esi
not esi
jmp 0x4752f7
mov edi, 0x33274000
add ebx, esi
or ebx, edx
or ecx, esi
or esi, ebx
add ebx, edx
sub ebx, edx
sub esi, edx
add ebx, ecx
bswap edx
sub esi, edx
jmp 0x477030
pop edi
rol esi, 0xf
add esi, 0x6da5373c
xor esi, ecx
neg ebx
jmp 0x4765b0
push 0x6c61c43c
sub edx, esi
xor ebx, 0x6da631c0
dec ebx
rol esi, 0x1a
xor ebx, 0x6da684f2
xor esi, 0x6da6a4ce
jmp 0x476f6c
pop edi
mov ecx, ebx
xchg edx, ebx
bswap ebx
dec esi
jmp 0x475cef
call fcn.00475635
sub esi, ecx
xor ecx, ebx
rol ecx, 9
sub edx, 0x6dae48e0
jmp 0x477d88
push 0x6c61e392
xchg ebx, edx
or ecx, esi
xchg edx, esi
add esi, edx
mov edx, esi
mov edx, ebx
add esi, edx
mov ebx, esi
inc edx
xor ebx, esi
jmp 0x4773a6
call fcn.00475635
or esi, 0x6db81802
xor ecx, esi
not ebx
add ebx, ecx
xor ecx, esi
xor ecx, edx
xchg edx, ecx
add esi, 0x6db8d55c
jmp 0x4755e2
mov edi, 0x33274000
or edx, esi
sub ecx, 0x6db91b14
ror edx, 0x19
and edx, 0x6db952b2
xchg edx, ecx
sub ecx, esi
sub ecx, 0x6db9a2c0
neg edx
jmp 0x4774d4
mov edi, 0x33274000
neg ecx
xor ebx, ecx
xchg ecx, ebx
neg esi
sub esi, edx
or esi, ebx
dec ecx
rol ecx, 0x10
and edx, ecx
and esi, edx
or ecx, ebx
add esi, ecx
jmp 0x477b6d
push 0x6c635602
and ecx, ebx
add ebx, esi
add ebx, ecx
xor ebx, 0x6dbe0ea4
add edx, ebx
xchg esi, ebx
and esi, ecx
add ebx, 0x6dbe791e
add ecx, edx
add esi, 0x6dbeadf4
jmp 0x477e97
pop edi
mov edx, ebx
add esi, ebx
or esi, 0x6dc110b8
xchg ebx, esi
xchg edx, esi
shr edx, 9
neg edx
shl ebx, 0x10
jmp 0x476741
push 0x6c549ffa
xor ecx, ebx
sub ebx, edx
or edx, ebx
mov ebx, 0x6dc2f6d8
and ebx, edx
xor ecx, esi
xchg esi, ecx
dec esi
jmp 0x477b2a
push 0x6c59ac72
mov edx, esi
mov edx, ebx
or ecx, edx
mov edx, esi
xchg edx, esi
xchg esi, edx
jmp 0x476052
call edi
mov ebx, esi
mov ebx, ecx
and esi, ecx
and ebx, 0x6dcaeab0
sub esi, ecx
and ecx, edx
xor esi, ecx
bswap ebx
jmp 0x4753ce
push 0x6c6337dc
shl edx, 7
and ecx, ebx
mov edx, 0x6dcbb6a2
xor ecx, edx
jmp 0x4770e9
push 0x6c5af880
and ecx, esi
xor esi, edx
add edx, ebx
mov esi, 0x6dccc012
mov ebx, esi
add edx, 0x6dccf49e
shl esi, 0x1b
or ecx, edx
xor ecx, ebx
sub esi, edx
sub esi, ecx
inc ecx
jmp 0x47772f
pop edi
and ecx, edx
add edx, ecx
xchg esi, ebx
or ebx, ecx
sub esi, edx
sub edx, ecx
rol esi, 5
mov ebx, edx
jmp 0x477303
push 0x6c555372
sub edx, esi
add ebx, esi
add ecx, ebx
and ecx, 0x6dcee6da
add esi, edx
xchg esi, ecx
and esi, 0x6dcf3934
rol ebx, 3
mov ebx, edx
nop
jmp 0x476934
mov edi, 0x33274000
neg ecx
shr esi, 0x17
mov esi, ecx
ror esi, 0x1d
xchg edx, ecx
and edx, 0x6dd03784
shr esi, 0x17
mov edx, esi
jmp 0x477e0d
push 0x6c6202c4
xor ebx, ecx
sub esi, edx
xor esi, edx
sub esi, 0x6dd3d8c2
shl edx, 3
and edx, 0x6dd413ae
xor ebx, ecx
and esi, ecx
dec esi
xor edx, ecx
jmp 0x475ba1
pop edi
rol esi, 9
dec ebx
rol esi, 2
sub edx, ecx
mov ebx, 0x6dd9bb50
sub ebx, esi
jmp 0x4768f4
call edi
shl ecx, 0x10
sub edx, esi
sub ebx, edx
or ecx, 0x6dda5492
not edx
xor esi, 0x6dda9072
jmp 0x477497
pop edi
or esi, ecx
and edx, 0x6ddad0f4
dec esi
ror edx, 0x16
not ebx
xor edx, ecx
xchg ecx, edx
mov edx, ecx
mov ecx, esi
mov ecx, ebx
mov ebx, edx
and ecx, 0x6ddbda88
jmp 0x477572
call fcn.00475635
and edx, ebx
add ecx, edx
ror esi, 0xb
neg edx
shl edx, 0x12
xchg ecx, esi
mov esi, ecx
sub esi, ecx
add edx, ecx
inc edx
jmp 0x4777c4
pop edi
rol esi, 1
mov ebx, edx
xchg edx, ecx
add ecx, esi
xchg edx, ebx
ror edx, 5
or edx, ebx
mov esi, ecx
bswap ebx
and esi, 0x6de13f26
sub esi, 0x6de15bb6
add ebx, 0x6de1766a
jmp 0x475697
pop edi
xchg edx, ebx
or ebx, ecx
and esi, 0x6de1cf5e
rol ebx, 7
and esi, ebx
mov esi, 0x6de2232a
jmp 0x477150
pop edi
xchg edx, ebx
xor ebx, 0x6de266f2
shr ebx, 7
xchg ecx, edx
jmp 0x476a6c
pop edi
or edx, 0x6de3ed14
ror edx, 0x1d
sub edx, ecx
and ecx, esi
xor esi, edx
neg ecx
shl esi, 0x1f
or esi, ebx
or ebx, esi
xor ebx, edx
jmp 0x4776ba
pop edi
xor esi, edx
sub ebx, ecx
or ecx, esi
sub edx, 0x6de5558e
or ebx, ecx
mov ecx, edx
mov ebx, esi
xor esi, ecx
neg ecx
sub esi, ebx
ror ecx, 0xc
or ecx, esi
mov esi, ebx
sub ebx, edx
jmp 0x4766d2
mov edi, 0x33274000
shr ebx, 0x14
mov ecx, esi
jmp 0x475dee
push 0x6c60edd4
sub ecx, ebx
and edx, 0x6deb97c0
jmp 0x4760e1
mov edi, 0x4132136a
xor ecx, edx
bswap esi
xor ebx, 0x6debf90c
xor edx, 0x6dec159c
and edx, 0x6dec3050
shr esi, 6
jmp 0x475cdc
mov edi, 0x33274000
xor edx, ecx
or edx, esi
or ebx, edx
mov ecx, esi
mov ecx, ebx
and ebx, 0x6deeb612
xchg esi, ebx
sub esi, ecx
mov esi, 0x6def0bee
sub ecx, esi
jmp 0x475b84
pop edi
neg esi
shr ecx, 6
bswap ebx
and ecx, ebx
mov edx, 0x6defb8ae
bswap ecx
and ebx, edx
sub ebx, 0x6df00d24
jmp 0x475d8f
pop edi
mov ebx, edx
xchg edx, ecx
xor esi, 0x6df06982
add esi, 0x6df08828
or edx, esi
xor ecx, 0x6df0bed0
dec ecx
add ebx, edx
and ecx, edx
xor esi, ecx
jmp 0x475611
call edi
xor ecx, esi
not ebx
xor edx, 0x6df2fe80
not ecx
xor esi, ebx
and ecx, edx
sub esi, 0x6df36eec
add edx, esi
shl esi, 1
or esi, ebx
jmp 0x4775c8
call fcn.00475635
xor esi, ebx
neg ebx
or ebx, edx
xor edx, ebx
not ecx
add ebx, esi
add ebx, ecx
mov esi, ebx
mov edx, ecx
neg ecx
xchg edx, ebx
add ebx, 0x6df70520
jmp 0x47670a
call edi
rol ecx, 0xa
add ecx, ebx
shl ecx, 0x13
add esi, ecx
jmp 0x477754
pop edi
inc edx
and ebx, ecx
and ecx, edx
add ecx, ebx
and ecx, 0x6dfde070
xchg esi, ebx
nop
xor edx, ecx
not edx
xor esi, ecx
or esi, edx
mov ebx, esi
jmp 0x4754a2
pop edi
xor ecx, edx
xchg edx, ecx
sub ecx, esi
sub ecx, 0x6e01f852
mov edx, 0x6e021316
sub ecx, edx
not ecx
and esi, edx
jmp 0x476c56
pop edi
bswap ecx
xor ebx, esi
or ebx, ecx
or edx, ecx
add ebx, 0x6e07d230
sub edx, ebx
jmp 0x477c78
push 0x6c571b30
rol edx, 7
sub esi, 0x6e0b97ee
add edx, ebx
add ecx, edx
xor ebx, 0x6e0be20c
xor esi, ecx
and ecx, edx
xchg ecx, edx
mov ebx, edx
inc ecx
rol ebx, 0x1f
bswap ebx
dec esi
sub esi, 0x6e0cd6aa
jmp 0x475dfd
mov edi, 0x33274000
xchg ecx, esi
shl esi, 0x15
xor ecx, edx
xor esi, 0x6e0f2c5e
jmp 0x476ef3
call fcn.00475635
and ebx, esi
not ebx
sub ebx, edx
mov ebx, edx
bswap ecx
shr ecx, 0x16
jmp 0x47747b
push 0x6c5f0119
xchg ecx, edx
xchg ebx, edx
xchg esi, ebx
mov edx, 0x6e137dfc
sub ecx, edx
or ebx, edx
xchg ecx, edx
add edx, 0x6e13e9e8
mov ebx, edx
sub ebx, ecx
shl edx, 0x1f
shr edx, 0x14
jmp 0x4763ad
push 0x6c597196
mov esi, ecx
or edx, esi
rol esi, 6
xor ebx, 0x6e1577f4
xor esi, ecx
sub ebx, 0x6e15b058
jmp 0x4764e2
pop edi
add ebx, ecx
rol ecx, 0x12
or esi, edx
add ebx, 0x6e18d692
and esi, edx
sub ecx, edx
mov edx, ecx
or ecx, esi
jmp 0x47648f
call fcn.00475635
not esi
add ecx, esi
and ebx, 0x6e1995e4
xor esi, edx
or esi, ebx
or ebx, ecx
add esi, 0x6e19fcc6
or ebx, edx
jmp 0x4758d0
push 0x6c605344
and ecx, 0x6e1bd594
sub esi, edx
neg ecx
shl esi, 0x1d
not esi
add ebx, ecx
rol ecx, 0x13
and esi, ecx
jmp 0x477052
call edi
shl edx, 7
or ecx, edx
or edx, esi
xchg edx, ebx
sub edx, 0x6e2078bc
rol edx, 0xd
add edx, 0x6e20b34c
add edx, ebx
jmp 0x47586d
call fcn.00475635
sub ebx, edx
and ecx, esi
sub ecx, edx
xor ebx, esi
and esi, ebx
xchg ecx, ebx
sub ecx, 0x6e250b7e
xor edx, ecx
jmp 0x47553b
push 0x6c5f5d86
shr ebx, 0x1b
not ecx
add ebx, esi
nop
or esi, ebx
sub ecx, ebx
mov edx, ebx
add edx, 0x6e2876c4
add edx, ebx
and ecx, 0x6e28a9f4
jmp 0x47590e
mov edi, 0x33274000
and ecx, 0x6e298252
mov ecx, edx
shl ecx, 0x12
mov ebx, edx
xchg edx, ebx
xchg ecx, ebx
neg esi
xchg esi, ebx
bswap ecx
add esi, ecx
jmp 0x476160