Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Query or enumerate registry value

Disassembly:
call sub.user32.dll_GetActiveWindow
cmp eax, 0xfffffeed
jne 0x4010ac
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
ret
call sub.user32.dll_GetCursor
cmp eax, 0xfffffeef
jne 0x401126
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xffffff07
jne 0x4011c8
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.advapi32.dll_RegQueryValueA
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
ret
call sub.user32.dll_GetActiveWindow
cmp eax, 0xffffff11
jne 0x40125b
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.kernel32.dll_SetErrorMode
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_SetErrorMode
call sub.ole32.dll_OleCreateLinkFromDataEx
call sub.advapi32.dll_RegQueryValueA
call sub.ole32.dll_OleCreateLinkFromDataEx
ret
jmp 0x4754a9
bswap esi
xor edi, ecx
add ebx, 0x7abd6df5
jmp 0x47577b
push 0x7b64adb0
add edx, ecx
xor ecx, 0x7be3d082
xchg edi, ecx
sub edx, edi
jmp 0x4771a5
push 0x7ac8ebd0
or ecx, 0x7be4b12d
and esi, 0x7be4ef1f
xor esi, edx
not edx
xor edi, edx
mov edi, ecx
xchg ecx, esi
mov ecx, edi
and edi, 0x7be6aa16
or esi, 0x7be6e9a8
ror esi, 0xd
xchg edi, esi
xor edx, edi
sub esi, ecx
xor edi, 0x7be81d78
jmp 0x477cc0
call fcn.00477121
inc edi
and esi, edi
or edx, ecx
neg esi
xor edi, esi
or ecx, edx
neg ecx
xor ecx, edx
ror edx, 4
sub edx, 0x7bf5b7dd
jmp 0x4764c9
push 0x7ac4e056
shl ecx, 0xd
not esi
add esi, edi
rol ecx, 0x16
not esi
xchg ecx, esi
mov edi, esi
add esi, ecx
or esi, edi
and esi, 0x7bf846a7
jmp 0x476151
mov ebx, 0x33274000
inc edi
xor ecx, edi
add ecx, esi
xchg ecx, edx
sub edi, esi
sub ecx, edi
xchg ecx, esi
shl esi, 0x1c
or esi, 0x7cc9d3c5
and edi, ecx
jmp 0x475f21
pop ebx
dec esi
and edi, ecx
mov ecx, edx
and edi, esi
sub edi, ecx
xchg ecx, edx
and esi, edi
neg edx
jmp 0x4767e2
push 0x7ac28508
and ecx, esi
mov esi, edi
shl ecx, 9
sub ecx, 0x7ccd2c6d
xor esi, edi
or ecx, esi
or ecx, esi
xchg edx, esi
dec edi
mov edi, edx
and ecx, esi
nop
xchg edi, esi
sub ecx, esi
add ecx, edi
jmp 0x477a6a
push 0x7ac8a2bc
rol edi, 0x15
inc edi
mov esi, edi
xchg esi, ecx
xor edx, esi
ror esi, 6
and edx, edi
and edx, ecx
sub esi, 0x7cd57aab
mov esi, 0x7cd5b88a
ror ecx, 0xd
and edi, 0x7cd635db
or ecx, esi
jmp 0x475546
push 0x7ac9c7b8
and ecx, edx
shr edx, 0x1d
xor esi, 0x7ce0ebf8
or edi, 0x7ce129ed
shr edx, 0x11
xchg edx, ecx
or ecx, esi
sub edi, 0x7ce22189
shl esi, 0x16
jmp 0x476ac3
push 0x7ad598e6
add edx, esi
mov esi, 0x7ce304ee
not edi
add edi, 0x7ce38367
mov edx, ecx
xor ecx, esi
jmp 0x476958
push esp
rol ecx, 0x17
sub esi, 0x7ce49353
add edi, 0x7ce4e2c1
add ecx, edx
xor edx, 0x7ce55c7e
add edx, edi
jmp 0x477946
push 0x7acd1a8d
mov esi, 0x7ce5eb5b
shr edi, 0x15
sub edx, esi
not edi
bswap edi
inc edi
xor edx, 0x7ce775cb
shl esi, 0xf
neg esi
inc esi
jmp 0x478219
push 0x7b60912a
dec edx
bswap edi
or ecx, esi
or edx, ecx
and edi, edx
add esi, edx
jmp 0x477d20
mov ebx, 0x33274000
sub ecx, edi
mov esi, edx
shr ecx, 0x12
neg edx
and edi, ecx
xor edx, esi
jmp 0x47738f
pop ebx
sub esi, ecx
or edx, 0x7cf133ea
add edi, 0x7cf17d3d
and ecx, edi
or edx, esi
xor ecx, edi
mov esi, edi
jmp 0x4768f4
mov ebx, 0x33274000
or esi, 0x7cf3838d
rol edx, 0x14
neg edx
add edi, 0x7cf42d1e
neg edx
inc edi
or edi, 0x7cf4d8d4
xchg edi, edx
xor esi, edx
xchg edi, ecx
mov esi, edi
jmp 0x476f92
push 0x7ac498a8
xor ecx, 0x7cf82cfe
or edx, ecx
or edx, 0x7cf8abec
bswap edx
not esi
inc esi
jmp 0x475637
push 0x7ad74eac
rol ecx, 0x1b
mov esi, 0x7cfca7f3
nop
dec ecx
xor ecx, edx
or edx, edi
neg edi
mov esi, edx
jmp 0x4780da
pop ebx
or esi, edi
sub edi, 0x7d09e592
sub esi, edx
ror edi, 0xf
or ecx, esi
and esi, edi
or esi, ecx
xchg esi, edi
add edi, ecx
xor ecx, edi
sub edi, edx
jmp 0x476707
call ebx
or esi, edi
rol edi, 8
add ecx, esi
mov ecx, edx
xor esi, 0x7d193173
xchg esi, edx
sub ecx, esi
and ecx, edi
dec edx
xchg edx, ecx
xor esi, ecx
xchg edx, ecx
or esi, edx
mov ecx, 0x7d1b3169
add esi, 0x7d1b6920
or esi, 0x7d1ba149
jmp 0x4762bc
pop ebx
sub edi, esi
add ecx, esi
rol edi, 2
and esi, ecx
xor esi, 0x7d247bb8
xor ecx, 0x7d252f28
sub edi, 0x7d2577d1
bswap edi
xor edi, 0x7d25e85f
and edi, esi
jmp 0x476b30
pop ebx
add edi, ecx
add edi, ecx
sub esi, ecx
sub esi, ecx
xchg edx, esi
xor ecx, edi
shl edx, 0x1b
xchg edi, esi
or edi, esi
sub esi, ecx
jmp 0x477892
push 0x7adbd837
mov ecx, esi
or ecx, edi
not ecx
and esi, ecx
or edi, ecx
xchg edi, ecx
jmp 0x47641b
pop ebx
and edi, edx
xor ecx, edx
shr ecx, 0x19
sub esi, edx
jmp 0x477209
push 0x7ada1fe1
add ecx, edi
and edi, 0x7d4027a6
or ecx, esi
ror edi, 5
sub edx, esi
shl edi, 0x15
ror esi, 0x17
mov ecx, 0x7d41a260
and edx, edi
and edx, 0x7d421a90
rol edi, 0xa
or ecx, edi
xor ecx, esi
sub ecx, edi
add edi, 0x7d4348d3
jmp 0x477599
push 0x401400
bswap edi
or edx, 0x7d4c20a5
add edi, 0x7d4c5dc5
sub edx, ecx
and ecx, esi
neg edi
neg esi
or edx, edi
xor edx, 0x7d4dd646
mov esi, 0x7d4e147b
bswap esi
jmp 0x47687d
call fcn.00477121
xchg ecx, esi
sub edi, 0x7d4ee590
bswap edx
or esi, ecx
and edi, ecx
or ecx, esi
and esi, edi
dec edi
sub esi, 0x7d509a23
sub ecx, edx
xchg ecx, edi
jmp 0x4780bf
mov ebx, 0x3f4d7907
bswap esi
and edx, edi
neg ecx
xchg ecx, edx
mov esi, edi
sub edi, 0x7d55c88a
shr esi, 2
jmp 0x47777e
push 0x7b6046d6
shl ecx, 0xb
neg ecx
xor edx, esi
and ecx, esi
mov edx, ecx
jmp 0x47590d
call fcn.00477121
xchg edi, edx
not edx
xor ecx, edx
xchg esi, ecx
and edx, edi
xchg edx, esi
xchg ecx, edi
and edx, esi
shr ecx, 6
xor edx, edi
xor ecx, edi
add edx, esi
add esi, ecx
xor ecx, 0x7d5ee4fc
or edi, esi
inc ecx
jmp 0x476b74
call ebx
shl ecx, 0x1e
not esi
sub ecx, esi
xor edi, edx
mov esi, ecx
sub edi, 0x7d6a0083
sub esi, ecx
and ecx, edi
inc ecx
add esi, ecx
jmp 0x47596f
push 0x7ac52941
mov esi, edi
xchg ecx, edx
mov edi, 0x7d75c730
add esi, edi
xor ecx, edi
or esi, edx
xchg ecx, esi
and ecx, esi
or esi, 0x7d774453
or ecx, 0x7d7783bc
mov ecx, edi
jmp 0x475f78
call fcn.00477121
and edi, ecx
sub edx, esi
xor edx, esi
xchg edx, esi
add esi, ecx
or edx, edi
and esi, edi
or edx, 0x7d79cd74
mov edi, ecx
xor esi, 0x7d7a49b7
xor esi, ecx
jmp 0x475c0a
call ebx
sub ecx, esi
add esi, 0x7d7c4c8b
xchg edx, ecx
mov edx, esi
mov edx, ecx
or edi, edx
ror edi, 8
add esi, edi
inc edi
dec edx
mov esi, edi
mov esi, ecx
and edi, ecx
mov esi, 0x7d7f3599
or edx, esi
jmp 0x477e80
push 0x7b646201
shl edx, 0x10
add edx, 0x7d835bf9
xor esi, edi
bswap edx
mov ecx, 0x7d8425c2
or edi, ecx
mov edi, 0x7d849f39
xor edi, edx
and edx, edi
and edx, esi
and edx, ecx
jmp 0x475530
pop ebx
and esi, ecx
shr edi, 0x1f
or edx, esi
nop
jmp 0x4777a5
pop ebx
shr edi, 0x12
sub edx, ecx
and edx, 0x7d9040f5
xor edx, ecx
and edi, ecx
xor edx, esi
and esi, edx
not ecx
xor ecx, esi
sub edx, 0x7d9205a4
sub ecx, edi
not esi
mov edi, 0x7d92bf7b
mov ecx, edx
jmp 0x477bb4
mov ebx, 0x3f4d7907
or edi, 0x7d95abeb
xchg edx, esi
xor edi, ecx
shr esi, 0x19
and edx, 0x7d96b4ec
xor edi, esi
and esi, edi
nop
and ecx, 0x7d97ad0d
jmp 0x475615
push 0x7adc21f0
add esi, edx
sub ecx, edx
rol edx, 3
add edi, esi
or ecx, edi
bswap edx
mov esi, ecx
sub edx, edi
or edx, edi
sub edi, 0x7dac6e97
and ecx, edi
or edx, ecx
inc ecx
jmp 0x477d82
pop ebx
or edi, edx
xor edx, ecx
shl edi, 0x15
xchg ecx, esi
rol edi, 0x1a
xchg esi, edi
xchg edi, esi
xchg ecx, esi
and edi, esi
shl ecx, 8
xor edx, esi
dec edx
xchg edi, esi
rol ecx, 0x15
jmp 0x477db8
push 0x7ad1eb78
shl esi, 0x17
sub edi, esi
nop
and edi, esi
sub esi, ecx
xchg edi, edx
or esi, edi
xchg ecx, edx
jmp 0x47757c
call ebx
or esi, 0x7db8a2b7
add esi, edi
not edi
shl edx, 0x10
not edx
and esi, ecx
or ecx, esi
mov edx, ecx
sub ecx, 0x7dbad4e8
jmp 0x476ebe
pop ebx
ror edi, 0xc
add ecx, 0x7dbb6aaf
and ecx, esi
and edi, 0x7dbbf01b
mov esi, 0x7dbc2d44
jmp 0x4764af
call ebx
xor edi, esi
or ecx, edx
sub edx, edi
dec edx
and esi, ecx
add esi, 0x7dc795c7
jmp 0x477a15
mov ebx, 0x3f4d7907
xchg ecx, esi
sub ecx, esi
add ecx, edi
or ecx, edi
xor edi, ecx
dec edi
add edi, edx
or edx, 0x7dcfa2c2
inc esi
sub ecx, 0x7dd01d55
shl edi, 5
jmp 0x4776b2
push 0x7ac72e48
and ecx, esi
add edx, edi
add esi, edi
or ecx, esi
ror ecx, 0x1d
and esi, ecx
shl esi, 0x1e
and esi, edi
and edi, edx
xchg edi, esi
sub edi, ecx
ror edi, 6
jmp 0x475744
push 0x7ac97e2a
mov edx, edi
sub edx, ecx
or ecx, 0x7dde24f6
xor edi, ecx
jmp 0x475881
push 0x7b5e3567
mov edx, edi
shl esi, 0xd
and ecx, esi
add ecx, 0x7de417c9
sub ecx, 0x7de4543b
add edi, 0x7de4916a
xchg ecx, esi
xor edx, edi
add edi, 0x7de557e2
shl ecx, 5
and esi, edx
not edi
and esi, 0x7de64be4
and edi, ecx
sub ecx, esi
jmp 0x477cf9
call fcn.00477121
xchg esi, ecx
mov edi, ecx
xchg edx, edi
sub edx, esi
dec edi
xor ecx, 0x7de85993
sub edx, edi
bswap edi
jmp 0x4760a9
call fcn.00477121
sub edi, edx
neg edx
neg esi
add ecx, 0x7deefb58
mov edx, 0x7def387f
neg edx
sub ecx, edi
ror edi, 0x18
and edx, esi
neg edx
jmp 0x4761b4
pop ebx
or edi, 0x7df32c61
xor ecx, 0x7df36aa1
rol esi, 0x1a
rol edx, 0x10
jmp 0x477a9d
call fcn.00477121
xchg edi, esi
add edi, ecx
inc ecx
and esi, ecx
shr edi, 0x14
add edx, ecx
add ecx, 0x7dfb9769
xchg ecx, edi
shr edi, 0x1b
bswap ecx
jmp 0x477ed2
call ebx
add edx, esi
add ecx, esi
or edi, edx
mov edi, edx
not edx
or edi, esi
add edx, 0x7e008ee9
sub edi, edx
neg edx
rol edx, 9
dec edi
and edx, esi
xchg edi, esi
xchg edi, ecx
jmp 0x4764eb
pop ebx
sub edi, edx
mov ecx, esi
mov esi, ecx
or edx, ecx
add esi, edi
and esi, 0x7e0381af
or ecx, 0x7e03b9a5
xor edi, edx
or edx, 0x7e04370f
and esi, 0x7e04709a
add edi, ecx
neg edx
xor edx, 0x7e051803
neg edx
sub edi, ecx
jmp 0x4757d2
pop ebx
rol ecx, 8
sub ecx, 0x7e0758c7
or esi, edx
sub ecx, edx
neg edx
mov esi, 0x7e0835dd
xor edx, 0x7e086e73
and esi, ecx
and edx, edi
jmp 0x476be6
pop ebx
and edi, edx
mov edi, esi
or edx, esi
mov ecx, 0x7e0af0d7
neg ecx
inc ecx
dec ecx
or esi, ecx
jmp 0x475e49
mov ebx, 0x33274000
sub edx, edi
sub edi, ecx
ror ecx, 0xe
add edx, esi
shr ecx, 7
dec esi
sub esi, edx
add esi, 0x7e102261
inc edi
or edx, edi
sub edx, 0x7e10ca3d
and esi, edx
xor esi, ecx
dec ecx
jmp 0x4767a7
push 0x7ad2c26a
and edi, 0x7e142038
or esi, edi
dec ecx
add esi, edx
sub edx, edi
and esi, 0x7e16026f
add edx, 0x7e163f3c
mov edx, esi
or esi, ecx
jmp 0x4771ce
mov ebx, 0x33274000
rol edx, 3
add edi, 0x7e174afa
shl ecx, 0x10
xchg edi, edx
xor ecx, edi
xchg edi, edx
add edx, 0x7e188947
or esi, edi
jmp 0x47617c
push 0x7accd2be
xchg esi, edi
add ecx, edx
sub edi, edx
xor esi, edi
jmp 0x4758e8
pop ebx
xor edx, ecx
sub edx, esi
sub ecx, esi
mov esi, edx
and edi, edx
jmp 0x477cdb
mov ebx, 0x33274000
mov edx, ecx
sub edx, esi
inc edx
or edi, esi
sub edi, edx
dec edi
add ecx, esi
jmp 0x476835
call fcn.00477121
and ecx, edx
mov edi, 0x7e2871c3
add esi, edi
mov esi, edi
xor edi, esi
xor edi, esi
mov ecx, edi
and ecx, 0x7e2aaa54
xor edx, ecx
shl edx, 1
xor edx, 0x7e2b667e
jmp 0x476599
pop ebx
not ecx
or edx, esi
bswap edx
xor ecx, 0x7e2f618a
or esi, ecx
not edx
mov ecx, edi
bswap esi
jmp 0x47769a
push esp
neg edi
dec ecx
shl edi, 0x12
shr ecx, 0x1d
add ecx, edi
xchg edx, esi
dec esi
add esi, 0x7e36161a
add edx, ecx
xchg ecx, esi
xor edx, ecx
jmp 0x4758c9
pop ebx
add edx, 0x7e3ea077
xchg edx, esi
mov esi, edx
xchg edx, esi
xchg edx, esi
and esi, ecx
bswap esi
xor esi, 0x7e40609f
xchg esi, edi
jmp 0x476ee4
push 0x7ad27a4b
inc ecx
ror ecx, 0x1c
sub ecx, 0x7e4176db
inc edi
xor esi, ecx
jmp 0x4769ad
pop ebx
mov ecx, edi
or ecx, edx
add ecx, edx
ror ecx, 0x1f
or ecx, edi
inc edx
or edx, esi
mov edi, 0x7e4eaaeb
inc ecx
shl edi, 0x17
xchg ecx, edi
add edx, edi
and edi, 0x7e4fe2f0
jmp 0x47701b
mov ebx, 0x3f4d7907
xor edi, 0x7e5beb3a
xor esi, edx
ror edx, 7
and edx, ecx
and ecx, 0x7e5cf4e0
shl ecx, 0xc
or ecx, edi
add edx, edi
and esi, ecx
jmp 0x476ad9
call fcn.00477121
and ecx, esi
xor ecx, edi
xor edi, esi
and edi, ecx
xor ecx, edx
xor edi, ecx
or edx, edi
xor esi, 0x7e62027b
inc ecx
bswap edi
mov edi, 0x7e62bc72
xchg edx, edi
add esi, edx
jmp 0x4772f9
call ebx
mov edx, 0x7e6b87e9
or esi, edx
sub edx, esi
xor ecx, 0x7e6ceae8
sub edi, esi
mov edx, ecx
jmp 0x4762ae
pop ebx
xchg edx, ecx
xor edx, ecx
shl edi, 0x1a
not ecx
xor ecx, esi
or edi, edx
or esi, edx
shr edi, 2
and edx, esi
and esi, edi
shr esi, 0xa
xor edi, ecx
shl edx, 0xb
add edx, ecx
jmp 0x477ef8
pop ebx
xchg ecx, esi
add edi, 0x7e7897e2
xchg esi, edx
ror edi, 0x12
xchg edx, edi
nop
add esi, 0x7e7a98d5
xchg edx, esi
jmp 0x475b21
call fcn.00477121
xchg edi, edx
xchg edx, edi
or edx, 0x7e858bc5
xor edx, 0x7e85c801
and ecx, edi
add esi, edi
add edx, 0x7e867970
or edx, ecx
add edx, ecx
xchg edi, ecx
jmp 0x477f44
pop ebx
sub esi, edx
and edx, ecx
sub edx, ecx
add edx, esi
add edx, ecx
xor edx, ecx
mov ecx, 0x7e88f489
sub edi, esi
sub ecx, 0x7e897b7e
mov edx, ecx
xchg edx, edi
xor esi, ecx
rol esi, 0xb
mov edx, ecx
sub esi, edx
jmp 0x475766
pop ebx
sub edi, 0x7e8b3642
xchg ecx, edx
or edx, edi
ror esi, 9
shl ecx, 6
add edx, ecx
or edx, esi
and edx, 0x7e8cea97
and esi, 0x7e8d2707
mov esi, 0x7e8d6406
mov edx, esi
sub esi, ecx
neg edi
xor esi, ecx
jmp 0x477e23
pop ebx
neg edx
dec edi
xor ecx, edx
add esi, 0x7e902b11
xor edx, esi
shr edx, 6
xor edi, ecx
mov edx, ecx
and esi, ecx
shl edx, 0x12
sub edx, edi
or esi, edi
jmp 0x475cb2
push 0x7b64f7d2
xchg esi, edi
not edi
xor ecx, edi
add esi, edx
xor ecx, 0x7eacb28a
not esi
shr edi, 8
sub edx, esi
add edx, edi
and edx, 0x7eadf713
sub esi, ecx
jmp 0x475941
push 0x7ad30b33
xor edx, edi
shr edi, 5
mov ecx, edx
not esi
xor esi, edx
sub edx, edi
jmp 0x477eb0
pop ebx
mov edi, edx
neg ecx
sub edi, 0x7eb32591
add esi, edi
and edi, edx
and edx, ecx
and ecx, edx
mov edx, edi
xchg esi, edi
jmp 0x478110
pop ebx
xor ecx, edx
or ecx, esi
inc edi
sub esi, edi
mov edx, edi
sub edx, esi
xchg edi, edx
sub edi, 0x7ebd2972
or ecx, edi
and edx, edi
sub edx, 0x7ebdf25d
add edx, ecx
jmp 0x475f95
push 0x740a9
or edi, edx
xor ecx, edx
add edi, ecx
sub edx, ecx
ror edi, 0x14
shr edx, 4
jmp 0x475ef2
call ebx
bswap edx
and edi, edx
xchg esi, edi
shl edi, 0x1b
xchg ecx, esi
dec edi
inc edx
xor esi, edi
xor edi, ecx
and edx, esi
or esi, 0x7ec56459
not edx
jmp 0x476fbc
push 0x7adcb4bd
xchg edx, ecx
inc esi
and esi, edi
neg edi
xor esi, edi
ror ecx, 0xe
xor ecx, 0x7eca4eb0
mov edi, edx
jmp 0x477658
call ebx
or edx, 0x7ecaf4ca
xor edi, edx
and edi, esi
shr esi, 0x18
bswap ecx
xor ecx, 0x7ecc2ab4
xchg edi, esi
mov edi, ecx
jmp 0x475d0c
call fcn.00477121
sub edx, edi
sub esi, 0x7ecf17c9
or edi, esi
or edx, 0x7ecf9227
add edx, 0x7ecfe1dd
xor edx, 0x7ed020ca
ror edi, 0xa
shl edi, 1
bswap edi
dec esi
jmp fcn.00475c71
push 0x7b641700
or esi, 0x7ee21e40
shl ecx, 0x1a
and esi, 0x7ee29d76
add edx, ecx
shr edi, 9
add edx, 0x7ee36727
jmp 0x47620a
push 0x7ad23380
or ecx, edx
shl ecx, 0x1e
ror edi, 0x11
xchg edx, esi
sub edx, esi
xchg edx, edi
shl edi, 0x1b
sub esi, ecx
jmp 0x476c06
mov ebx, 0x3f4d7907
and edi, 0x7ef3e9ad
shl edi, 2
mov edx, esi
not edx
add edi, 0x7ef4f07f
jmp 0x477f15
mov ebx, 0x33274000
sub ecx, 0x7f00d2a5
xchg edx, edi
or edi, esi
sub ecx, esi
shr edi, 4
add ecx, 0x7f0218bd
jmp 0x476745
pop ebx
not ecx
and edx, 0x7f05ba29
and edi, esi
or edi, edx
and esi, edx
xchg edx, ecx
and edx, esi
jmp 0x477492
call fcn.00477121
sub ecx, edx
xor ecx, edi
dec edx
shl edx, 8
xor edx, esi
neg ecx
sub esi, ecx
bswap edi
xchg edx, ecx
jmp 0x476e53
call fcn.00477121
add edx, edi
mov edx, edi
rol edi, 4
mov edx, ecx
add edi, esi
xor ecx, 0x7f16cc2c
and edx, ecx
xchg edx, edi
mov edi, edx
and edi, esi
add edx, edi
add edx, edi
jmp 0x477f5f
pop ebx
or esi, 0x7f18834c
sub edx, 0x7f18c190
shr edx, 0x13
ror ecx, 0x10
xchg ecx, edx
xor edx, 0x7f19c696
dec ecx
xor esi, edx
jmp 0x476927
push 0x7adb8fdd
neg edx
inc edx
sub ecx, 0x7f289621
and edx, edi
sub edx, esi
or esi, edx
add ecx, edx
and edx, 0x7f29cf85
jmp 0x475d27
push 0x40
rol edx, 0xb
not esi
xor esi, ecx
sub ecx, edx
xchg esi, edx
rol edi, 0xc
not edx
add edi, 0x7f359498
sub edx, 0x7f35d11e
jmp 0x4772ce
pop ebx
add edi, 0x7f426f98
shr ecx, 6
sub esi, 0x7f42eace
add ecx, esi
and edx, ecx
mov esi, edi
add ecx, 0x7f43e7ae
jmp 0x477289
push 0x7ac2d904
mov ecx, 0x7f4774ea
xchg ecx, edx
inc edi
xor edx, 0x7f483da5
dec ecx
or ecx, 0x7f48b80e
xchg esi, ecx
mov esi, edi
mov esi, edi
or ecx, esi
jmp 0x4769dc
pop ebx
or edi, esi
mov esi, edi
sub edi, esi
bswap ecx
dec ecx
or ecx, edx
jmp 0x478140
push 0x7b612609
mov edx, ecx
add esi, 0x7f55e975
shr edi, 0x12
and edx, 0x7f5665a1
mov esi, edi
rol edx, 0xd
rol edi, 0xa
xor edi, ecx
or edi, ecx
add ecx, 0x7f57df89
xor esi, edx
or edx, esi
jmp 0x477c74
pop ebx
xchg edi, edx
neg esi
inc esi
ror ecx, 0x1c
xchg ecx, edi
sub ecx, edi
mov edx, esi
add esi, edx
ror esi, 0x13
jmp 0x4759f0
pop ebx
and edx, 0x7f65783d
dec ecx
xor esi, ecx
shl edx, 0x1c
inc edi
xchg edi, esi
sub edx, 0x7f66f7b3
xchg edi, edx
sub edi, ecx
xor ecx, 0x7f67ab67
jmp 0x476fe8
push 0x7b617019
and edx, edi
ror ecx, 0xf
ror esi, 0x10
sub edi, esi
inc edi
jmp 0x47599c
push 0x7ac93424
or edi, esi
sub esi, ecx
inc edi
and ecx, 0x7f7153f0
sub ecx, 0x7f71a0d2
jmp 0x4766bd
pop ebx
sub edi, ecx
and edx, esi
mov edi, ecx
not edi
mov edi, ecx
dec esi
inc esi
xchg ecx, edi
shl esi, 0x1d
add edi, ecx
add ecx, esi
ror edx, 0x17
jmp 0x476a00
push 0x7b5e8073
xor ecx, edx
sub edi, esi
or edi, edx
or esi, edx
add esi, edi
neg edi
xor edi, edx
or ecx, 0x7f76a1bd
mov edi, 0x7f76de0f
mov esi, ecx
xor ecx, esi
jmp 0x476d7b
push 0x7b60dcef
xor edi, esi
or esi, edi
mov edx, 0x7f782221
xor edx, 0x7f7871c2
xchg edi, esi
shr ecx, 3
sub edi, 0x7f7929e9
sub esi, 0x7f796820
and edx, ecx
or edi, esi
inc ecx
jmp 0x477b3e
push 0x7adc6a04
xor edi, ecx
or edx, esi
sub edi, ecx
add edi, esi
inc esi
jmp 0x47733b
mov ebx, 0x4132136a
xchg edx, ecx
xor edx, ecx
and esi, ecx
add edx, 0x7f82927d
mov esi, edi
and edi, esi
jmp 0x475fe8
push 0x7ad705b5
or edx, 0x7f87b543
shl edi, 0xd
rol edx, 5
jmp 0x475a2e
pop ebx
and ecx, 0x7f889479
and ecx, esi
shr edi, 0x1d
shr edx, 0x19
add esi, edi
or edi, edx
mov edx, edi
xor esi, edi
inc esi
xor edx, 0x7f8ac0ef
rol esi, 0x13
shr edi, 9
xor edx, ecx
jmp 0x476641
pop ebx
and edi, esi
mov esi, 0x7f8f7e22
not ecx
rol edx, 5
rol edi, 1
sub edx, edi
xor ecx, edx
sub esi, edx
not esi
xor edi, esi
or edx, esi
add edx, ecx
jmp 0x477e0d
mov ebx, 0x3f4d7907
rol edx, 1
mov ecx, edx
add edi, esi
xchg ecx, edi
neg esi
shr esi, 0xd
nop
mov edi, edx
and esi, edi
mov edx, 0x7fa579b5
jmp 0x476db8
call ebx
or esi, 0x7fa5d8a1
mov edx, 0x7fa61695
add esi, ecx
sub edx, edi
sub esi, edx
add ecx, edi
and ecx, edi
and edx, esi
or edx, ecx
or edi, edx
xchg esi, ecx
add edi, esi
jmp 0x475d73
pop ebx
and edi, edx
sub ecx, edi
or edi, ecx
mov esi, edi
mov esi, edi
mov esi, 0x7faa1467
mov edx, esi
add esi, edx
or edi, esi
and ecx, edi
jmp 0x476443
call fcn.00477121
xor edx, edi
shl esi, 0x1b
bswap ecx
not esi
xor ecx, edx
rol edi, 0xb
nop
and ecx, esi
neg edx
jmp 0x477359
call ebx
add ecx, edx
mov esi, edi
dec edx
shl edi, 0x1c
add edi, edx
sub ecx, 0x7fafa0e6
mov esi, edi
xor edi, edx
jmp 0x476cb2
call ebx
add esi, ecx
sub ecx, edx
or ecx, edx
inc edi
not ecx
shl edi, 3
or edx, ecx
xor esi, 0x7fb22d62
add edx, 0x7fb26c84
add edi, esi
xor ecx, edx
jmp 0x477c21
call ebx
mov edi, ecx
mov edi, 0x7fca31ac
neg edi
shl esi, 0xd
add edx, esi
add esi, ecx
xchg ecx, esi
or edi, esi
jmp 0x4768a4
push 0x7ad79686
inc esi
shr esi, 0xc
or edx, edi
ror esi, 0x12
mov edx, esi
xor esi, edi
dec edx
or edx, 0x7fce34b7
sub edx, 0x7fce813a
and ecx, 0x7fcebfa6
xor edx, 0x7fcefccb
and ecx, edx
xchg esi, ecx
bswap esi
jmp 0x4765f0
pop ebx
sub ecx, edi
ror ecx, 0x17
inc ecx
nop
rol esi, 7
or esi, 0x7fd19d3a
inc edx
shl esi, 0x10
nop
mov edi, 0x7fd28e9f
xchg esi, ecx
and edi, ecx
jmp 0x476a82
pop ebx
xchg esi, ecx
xor edi, esi
neg edi
or edi, 0x7fd4c7f3
and ecx, edi
sub edx, ecx
not edx
jmp 0x4758ac
push 0x7acd627a
sub edi, esi
dec edi
dec ecx
sub edx, ecx
ror edi, 0x11
not edi
add ecx, edi
xor edi, edx
add edi, esi
xchg edx, esi
rol edi, 0x1d
bswap edi
and edx, ecx
add ecx, edi
add edx, ecx
jmp 0x47630c