Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xffffff09
jne 0x401070
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_SetSecurityInfoExA
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_SetSecurityInfoExA
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xffffff29
jne 0x4010e5
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_SetSecurityInfoExA
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xfffffee5
jne 0x40117d
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_SetSecurityInfoExA
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_SetSecurityInfoExA
call sub.kernel32.dll_SetWaitableTimer
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xffffff0e
jne 0x4011e8
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_SetSecurityInfoExA
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xffffff22
jne 0x401285
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_SetSecurityInfoExA
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_SetSecurityInfoExA
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.advapi32.dll_SetSecurityInfoExA
call sub.advapi32.dll_ElfRegisterEventSourceW
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.kernel32.dll_SetWaitableTimer
call sub.advapi32.dll_AdjustTokenPrivileges
ret
jmp 0x474259
add ecx, 0xa5c57c6b
mov edx, edi
nop
jmp 0x4755d7
push 0xaa72643f
sub ebx, esi
add esi, ebx
add edi, esi
and ecx, 0xaa94b6c3
xchg esi, ecx
add ebx, edi
mov esi, edi
bswap ebx
or esi, ebx
or esi, ecx
not edi
shr edi, 1
jmp 0x47508a
push 0xa7266cb9
inc ebx
mov ebx, edi
and ecx, ebx
xor ecx, 0xaa9a2377
add ecx, 0xaa9a8e58
xchg esi, ebx
xchg esi, edi
jmp 0x475e60
call fcn.004761c0
add ebx, edi
xor ebx, ecx
or ecx, ebx
or ecx, ebx
sub ecx, esi
add edi, esi
shr ecx, 2
mov ebx, 0xaa9ee0aa
xchg ebx, esi
not edi
add esi, ecx
xchg ecx, edi
jmp 0x474d17
pop edx
xchg esi, ebx
xchg esi, ebx
not esi
or esi, 0xaaa28d39
mov edi, 0xaaa2f826
sub esi, ecx
mov ebx, esi
or edi, ecx
add esi, 0xaaa4bf86
xchg esi, ecx
or ecx, esi
or ecx, esi
and esi, edi
mov esi, ecx
jmp 0x475f53
add eax, 4
or edi, esi
or ebx, 0xaaa7d25d
mov edi, esi
mov ebx, esi
xchg esi, ebx
bswap edi
rol ecx, 0x1e
add edi, ebx
bswap edi
jmp 0x4761b6
pop edx
xor ebx, ecx
or ebx, ecx
jmp 0x475660
pop edx
add ecx, esi
and ebx, ecx
add ecx, 0xaab1b3ba
shl esi, 1
jmp 0x4743a4
push 0xa749e2a3
xchg ebx, edi
or ecx, 0xaab5f521
or esi, ebx
mov ecx, esi
add ecx, esi
mov edi, ecx
and ebx, 0xaab80020
and ecx, 0xaab86fac
inc ecx
neg esi
bswap esi
or ecx, esi
and esi, 0xaabaacb6
xor ecx, esi
jmp 0x475b9d
pop edx
shl edi, 2
and edi, esi
dec ecx
xchg ecx, esi
xor esi, ebx
xchg esi, ebx
rol esi, 0xd
add ebx, 0xaabec23f
xor esi, 0xaabf31b2
jmp 0x4757bd
pop edx
or ebx, edi
and ebx, esi
jmp 0x474806
pop edx
mov ecx, esi
xor esi, edi
add edi, ecx
xor edi, ebx
shl esi, 0x1e
shr edi, 0xe
ror ebx, 1
and ebx, 0xaac80877
jmp 0x475e47
call fcn.004761c0
xor edi, 0xaacdc096
sub ebx, esi
add ecx, 0xaace99a1
add esi, 0xaacf074c
mov esi, ecx
sub esi, 0xaad16bf3
shr ebx, 7
shl edi, 0x19
add edi, ecx
xchg esi, edi
bswap edi
sub ecx, esi
add ebx, edi
jmp 0x475264
push 0xa70a8ef6
sub esi, ecx
ror edi, 0x1b
xor ecx, 0xaadff7fa
and ebx, edi
add esi, 0xaae0737f
xchg ebx, ecx
bswap ecx
sub edi, 0xaae12fab
xchg ecx, edi
add esi, edi
mov ebx, ecx
jmp 0x4750ec
mov edx, 0x401400
xor ebx, esi
inc ebx
and ebx, esi
and edi, ecx
bswap ebx
xor esi, 0xaaeab43f
shr ebx, 0x13
add esi, ebx
jmp 0x474781
xor dword [edx], 0x1f9dd4eb
sub esi, ebx
inc ebx
or esi, ecx
mov ecx, 0xaaefaa9f
or esi, 0xaaefeb03
xchg ecx, edi
sub ecx, esi
ror ebx, 3
mov ecx, ebx
jmp 0x474953
call fcn.004761c0
sub edi, 0xaaf3b375
xor edi, ecx
or esi, 0xaaf42f19
and esi, ecx
xor ebx, 0xaaf4a990
dec edi
add ebx, ecx
add edi, ecx
sub edi, ebx
jmp 0x47541c
push 0x72e59
sub ebx, ecx
neg ebx
xchg ecx, esi
sub ecx, 0xaaf6c17f
add esi, ecx
xor esi, 0xaaf73ab6
add ebx, 0xaaf77be3
xor edi, ecx
xchg ecx, esi
shr edi, 0x1a
or esi, ebx
mov esi, ebx
add ebx, 0xaaf8fac9
add edi, 0xaaf938a3
xchg esi, ecx
jmp 0x47618e
call edx
sub ecx, edi
neg esi
bswap esi
add esi, ebx
inc ecx
and edi, esi
shr edi, 6
jmp 0x475b89
push esp
add ebx, 0xaafba85d
sub ecx, 0xaafbe6e1
inc ebx
xchg ebx, ecx
ror edi, 0xf
mov edi, 0xaafce308
sub edi, 0xaafd21da
add esi, ecx
xor esi, 0xaafda7b5
or esi, ecx
or edi, esi
or ebx, edi
neg esi
mov ecx, edi
or esi, edi
jmp 0x475c0e
push 0xa73820d8
sub esi, ecx
xchg edi, esi
add ebx, edi
inc ecx
dec edi
add edi, ecx
or ecx, ebx
bswap esi
and ebx, 0xab07fc35
xchg edi, esi
or ebx, edi
not ecx
jmp 0x475acc
push 0xa7020c84
or edi, ecx
shr esi, 0x17
or ecx, ebx
ror ecx, 0xb
shl edi, 0x18
add edi, ecx
shr esi, 0x13
mov ebx, 0xab0e126d
sub edi, ecx
shr ecx, 0x11
jmp 0x475930
call edx
or ebx, 0xab0eebc2
shl esi, 0x1a
not edi
sub edi, esi
inc ecx
or esi, 0xab1023b4
or ecx, esi
or esi, edi
jmp 0x4742cf
mov edx, 0x246e6c30
sub esi, edi
nop
xchg ecx, edi
add esi, ecx
add ebx, edi
sub ecx, 0xab16ac73
xchg ecx, esi
jmp 0x474315
pop edx
xchg ebx, edi
sub ecx, 0xab17834d
xor ebx, ecx
mov ebx, ecx
mov ebx, esi
xor esi, 0xab1883bb
not ebx
or ecx, esi
add ebx, edi
sub ebx, ecx
and ebx, esi
jmp 0x4753fb
pop edx
sub esi, edi
dec ebx
bswap ecx
mov ebx, 0xab1ca866
add ebx, 0xab1ce630
neg ebx
or ecx, esi
and edi, 0xab1da340
jmp 0x475fe4
pop edx
sub edi, ecx
add ebx, esi
sub edi, 0xab21c45b
sub esi, ebx
xor edi, ebx
or ebx, 0xab227c00
not edi
add ecx, edi
bswap ebx
mov ecx, esi
and ecx, 0xab23c00a
shr ecx, 0xa
or ecx, esi
xchg ebx, ecx
and ebx, edi
jmp 0x475977
pop edx
sub edi, ebx
xor edi, esi
or edi, ecx
jmp 0x4752e4
push 0xa7413ea9
xor edi, 0xab292e70
sub ebx, ecx
or edi, 0xab29abed
mov ebx, esi
sub ebx, 0xab2a3582
mov ecx, edi
xor ebx, 0xab2aaf8e
xor esi, edi
and ebx, edi
jmp 0x4754f3
mov edx, 0x4132136a
mov esi, edi
or edi, 0xab2bbb28
mov ecx, ebx
xor edi, ebx
or ecx, edi
neg esi
sub ecx, esi
mov edi, esi
mov edi, 0xab2dee33
and esi, edi
sub ebx, edi
jmp 0x4756df
or ebx, ecx
sub ecx, edi
add esi, ebx
mov ebx, esi
xor edi, 0xab2fb8aa
jmp 0x475a0a
pop edx
xchg ecx, esi
or ecx, ebx
mov ebx, esi
xchg ebx, esi
add ebx, ecx
nop
ror ecx, 0x18
sub ecx, ebx
jmp 0x47536b
pop edx
xor edi, 0xab38b941
xchg edi, esi
mov ebx, 0xab393015
neg ebx
xchg ebx, edi
add edi, ecx
and ebx, 0xab3a333c
mov edi, esi
ror edi, 7
jmp 0x4755b7
call fcn.004761c0
xor ebx, edi
xchg ebx, esi
add ecx, edi
xor edi, ebx
and esi, edi
xor ebx, ecx
and edi, ecx
or esi, ebx
and ecx, edi
ror esi, 0x16
jmp 0x4753d6
push 0xa73e1d19
xchg esi, ecx
nop
bswap ecx
inc edi
and esi, 0xab4156e4
add ecx, edi
or esi, edi
or esi, edi
jmp 0x475783
push 0xa7114be5
or ebx, 0xab4bd772
xchg ecx, esi
mov ebx, ecx
xor ebx, ecx
or ecx, 0xab4cc745
or ecx, ebx
bswap ebx
jmp 0x474b4f
xor dword [edx], 0x1f7a14eb
mov ecx, edi
and ecx, 0xab4de2ea
dec edi
or ecx, esi
mov ebx, esi
sub esi, ebx
mov ecx, ebx
or edi, ecx
sub ecx, 0xab4f948d
shr edi, 2
jmp 0x475d96
call edx
nop
xchg ebx, edi
xor esi, ebx
not ebx
sub ecx, ebx
jmp 0x476115
push 0xa7122106
sub edi, esi
sub ebx, edi
sub ecx, ebx
xor edi, ebx
xchg ebx, ecx
and ecx, esi
shr ecx, 4
add ecx, esi
or ecx, 0xab536e16
shl ebx, 7
jmp 0x4759c5
push 0xa710749f
not edi
or ebx, edi
neg edi
add ecx, esi
add ebx, esi
sub esi, 0xab57e4f5
shr esi, 0x11
xor edi, 0xab586198
sub ecx, 0xab58af3f
xor ecx, 0xab58eac0
neg ecx
xchg esi, ecx
xor ecx, 0xab59a32c
jmp 0x474af8
xor dword [edx], 0x1f2d74eb
and ecx, edi
xor edi, 0xab6988fa
add edi, 0xab69d9aa
mov ecx, edi
or ebx, 0xab6a5259
xchg ecx, edi
or edi, esi
sub ebx, ecx
mov ecx, edi
jmp 0x475298
call edx
shr esi, 0xf
and edi, ebx
not esi
xor esi, edi
xor edi, ebx
ror edi, 0x1c
sub edi, 0xab72f621
add ebx, edi
jmp 0x475537
push 0xa71d219b
mov esi, edi
add ecx, ebx
shr edi, 7
sub esi, ecx
shr esi, 7
mov ecx, esi
bswap ebx
sub edi, 0xab754ae1
add edi, 0xab758bb8
or edi, 0xab75cbc0
xor ecx, 0xab760a51
add edi, ebx
xchg ecx, edi
jmp 0x476056
xor eax, eax
mov ecx, edi
neg ebx
add ebx, ecx
add ecx, edi
or esi, ecx
mov edi, esi
and ecx, edi
or ecx, esi
jmp 0x474c95
push 0xa7507d9c
mov esi, edi
sub esi, ebx
xor ebx, esi
and edi, 0xab7e1645
or edi, ecx
sub ebx, ecx
or ecx, esi
neg edi
xor ebx, ecx
xchg ecx, edi
jmp 0x475c2b
call edx
xchg ecx, esi
mov ebx, esi
add ebx, esi
xchg ebx, esi
inc edi
bswap ecx
jmp 0x474461
pop edx
ror esi, 5
rol ebx, 0x10
add esi, 0xab8e31d2
xor ebx, 0xab8e9e45
dec edi
add esi, edi
xor ebx, esi
dec edi
xor ecx, ebx
add edi, 0xab90e9c6
xor edi, ecx
jmp 0x475e2b
pop edx
rol esi, 0x1d
and esi, edi
sub edi, ebx
and ebx, 0xab9235fc
bswap ebx
rol esi, 0x1b
ror ecx, 0x11
xor ebx, 0xab934047
shr esi, 0x13
xor esi, ecx
jmp 0x4744ce
call fcn.004761c0
xor esi, 0xab9e6d90
xchg ebx, esi
or esi, 0xab9ef8f5
and ecx, ebx
and ebx, edi
jmp 0x4751e3
push 0xa71b6e15
and esi, ecx
mov ecx, esi
add ebx, edi
add ecx, ebx
and ecx, ebx
mov esi, edi
or edi, 0xaba8a93b
shr esi, 1
jmp 0x475efd
push 0x40
mov esi, ebx
and ecx, ebx
ror esi, 0x19
xchg esi, edi
and esi, ecx
add ecx, ebx
jmp 0x47461e
push 0xa70f9f93
sub ecx, edi
or ebx, 0xabade7a9
nop
or ebx, 0xabae64ca
and edi, ebx
and ebx, ecx
xor edi, 0xabaf2d01
inc ecx
mov esi, ecx
or edi, ebx
jmp 0x474b97
push 0xa7490879
xor ecx, edi
xchg ebx, esi
xchg esi, ebx
add ecx, esi
bswap esi
shr ecx, 0x1e
jmp 0x4743df
call edx
sub ecx, esi
add ecx, esi
shr esi, 0xe
sub ecx, ebx
sub ebx, esi
and edi, ebx
and ecx, 0xabb35d0e
or ebx, esi
jmp 0x475bc2
mov edx, 0x246e6c30
sub edi, 0xabb3f464
or ecx, ebx
xor edi, ecx
and edi, ecx
add ecx, edi
sub edi, ebx
mov ebx, 0xabb570cd
mov edi, ecx
sub esi, ecx
jmp 0x475cb8
call fcn.004761c0
and edi, ebx
bswap edi
add ebx, 0xabb81994
shl ecx, 0x1c
sub esi, edi
mov esi, edi
xchg ebx, edi
add ebx, 0xabb94d41
add ecx, esi
and ecx, edi
jmp 0x474df0
mov edx, 0x2809144b
mov ebx, esi
xchg edi, esi
shr esi, 0x18
xor ecx, esi
add edi, 0xabbb2130
and ecx, 0xabbb5e65
rol esi, 8
rol edi, 0x17
jmp 0x475a47
pop edx
or ebx, ecx
or ecx, 0xabbc83be
sub ebx, edi
dec ecx
add esi, ecx
xchg edi, ebx
or edi, 0xabbdc6fb
rol edi, 6
jmp 0x476098
mov edx, 0x246e6c30
bswap edi
or esi, 0xabc03733
sub ebx, esi
or ebx, esi
xchg ecx, ebx
xchg ebx, esi
xor esi, 0xabc168c4
xor edi, 0xabc1a97c
xchg ebx, esi
and edi, 0xabc235ba
xchg ecx, esi
dec ecx
jmp 0x4750c5
call edx
and ecx, edi
add esi, ebx
xchg esi, edi
or esi, 0xabc617c1
mov edi, ebx
neg ebx
and edi, 0xabc6e13b
or edi, ebx
or edi, 0xabc75dcd
and ebx, edi
dec ecx
or esi, ebx
jmp 0x47594b
call edx
xchg esi, edi
xor ebx, 0xabcafd7b
rol esi, 0xe
ror ebx, 0xc
xchg esi, ebx
or edi, ecx
and edi, ebx
jmp 0x47575a
call edx
and ebx, 0xabd4d15d
not esi
bswap esi
and edi, esi
or esi, ebx
sub ebx, 0xabd6049d
or ebx, esi
xor ebx, 0xabd68e84
sub ecx, ebx
not esi
xor ebx, edi
shl ebx, 2
rol ebx, 0x13
shl ecx, 0x10
bswap ebx
jmp 0x4743ae
xor dword [edx], 0x1f6874eb
shr edi, 9
and ecx, ebx
and ebx, edi
xor esi, 0xabd9594d
ror ecx, 0xd
sub edi, ebx
or edi, ebx
rol edi, 1
jmp 0x474b18
push 0xa7406490
shr ecx, 0x1b
ror ecx, 0x10
neg ebx
sub ecx, edi
and ebx, esi
or esi, edi
and ebx, 0xabdc3c69
add ebx, 0xabdc7ac2
xor edi, esi
and edi, esi
sub ecx, esi
jmp 0x4748f8
pop edx
inc ebx
xchg esi, ecx
xor ecx, edi
rol ebx, 3
sub ebx, esi
xor edi, ebx
sub esi, ecx
or esi, ecx
xchg edi, esi
jmp 0x475ec6
pop edx
rol ecx, 0x11
add edi, esi
add esi, ebx
ror ecx, 0x13
shl esi, 0xa
bswap ecx
dec ecx
rol edi, 0x13
sub esi, ebx
xor ebx, ecx
and edi, ebx
or ebx, ecx
jmp 0x475dbb
push 0xa755b5e9
add ecx, 0xabe7d03f
sub esi, ecx
sub edi, ecx
add edi, esi
and ebx, ecx
bswap ecx
xchg esi, edi
jmp 0x4757a5
jl 0x474c95
xor edi, esi
sub ebx, esi
and ebx, ecx
xchg ebx, esi
and ecx, esi
and esi, 0xabeaddb6
or edi, 0xabeb1d02
add ebx, esi
or esi, 0xabeba79d
sub ecx, esi
and edi, esi
jmp 0x474562
call edx
not ecx
xor esi, 0xabef8bff
add esi, ecx
xor ecx, edi
or esi, ecx
sub esi, ebx
add esi, edi
inc esi
xchg edi, ecx
or ebx, edi
mov edi, ebx
xor ebx, ecx
shl edi, 0x1f
jmp 0x474435
pop edx
bswap esi
rol ecx, 0xa
sub esi, ebx
sub ebx, edi
rol edi, 0x12
add ebx, esi
rol ebx, 0x1d
rol ecx, 0x19
or ebx, edi
mov ebx, 0xabf4d2ee
jmp 0x47433b
call edx
or edi, 0xabf52a9a
or esi, 0xabf56bcb
and edi, 0xabf5a9b9
xor ecx, ebx
sub edi, 0xabf6244f
xchg ecx, esi
mov edi, ecx
mov ebx, 0xabf6dd87
neg ebx
jmp 0x475897
mov edx, 0x246e6c30
ror ebx, 0xe
ror ecx, 9
bswap edi
and edi, ecx
xor edi, esi
mov edi, ebx
xor ebx, ecx
mov ebx, ecx
or edi, ecx
sub ecx, ebx
jmp 0x474a3c
pop edx
add edi, esi
inc ebx
and edi, ebx
ror ecx, 0xb
jmp 0x475b3e
push 0xa7374905
neg ecx
ror esi, 3
xchg edi, ebx
and edi, esi
or esi, ecx
shr ebx, 0x10
xchg ebx, ecx
shl ecx, 0x16
inc ebx
sub ecx, esi
jmp 0x474707
push 0xa7012304
or edi, ecx
sub ebx, esi
or edi, 0xac152283
xor esi, ebx
and edi, ebx
mov ebx, edi
xchg esi, ebx
dec esi
xchg edi, esi
mov ebx, esi
jmp 0x47475b
xor dword [edx], 0x1f8c34eb
dec ebx
and edi, esi
xor esi, ecx
xchg edi, ecx
sub ecx, 0xac1841ff
or edi, esi
rol esi, 4
mov edi, 0xac18fb61
sub edi, ebx
and ecx, esi
add esi, ecx
jmp 0x475df0
push 0xa74f09e2
nop
sub edi, ebx
rol esi, 0x17
and edi, 0xac23c177
and esi, 0xac243303
sub ecx, edi
xor ebx, edi
xor ecx, ebx
jmp 0x474daf
call fcn.004761c0
xchg edi, ecx
mov esi, edi
or ebx, esi
shl ebx, 5
and esi, 0xac2cd74b
mov ebx, 0xac2d22a2
add ecx, ebx
shl edi, 5
add ecx, 0xac2ddc0a
sub edi, 0xac2e1af6
xchg edi, ebx
jmp 0x474670
pop edx
mov ebx, 0xac3315ed
or esi, edi
xor ecx, esi
jmp 0x4748ec
push 0xa73f88d3
mov esi, ecx
xchg edi, ecx
xchg esi, ecx
or esi, ebx
mov ecx, 0xac36ce43
mov ecx, esi
dec esi
and ebx, edi
or esi, ecx
or ecx, ebx
and esi, edi
jmp 0x4752ba
mov edx, 0x2809144b
xchg ebx, ecx
mov esi, 0xac38d458
and edi, ecx
xchg edi, ebx
dec ebx
mov edi, esi
jmp 0x475f9d
push 0xa724bdda
sub esi, 0xac3a335f
sub esi, ecx
xchg ecx, edi
sub ebx, esi
mov edi, ecx
and ebx, esi
shl ecx, 0x1e
shr edi, 7
xchg esi, ecx
jmp 0x4758d7
pop edx
shl ebx, 0x12
xchg ebx, edi
ror ebx, 0xb
or edi, ecx
shr ebx, 0x1e
ror esi, 0x14
bswap ecx
xchg ebx, edi
and edi, 0xac49eadd
jmp 0x474e79
xor esi, edi
or esi, ecx
xchg ecx, esi
and ebx, ecx
mov esi, ebx
mov ebx, 0xac4b8b80
bswap esi
mov edi, ebx
add ebx, edi
and esi, edi
and ebx, ecx
xchg ebx, esi
jmp 0x474368
push 0xa7259451
add ebx, esi
and ebx, esi
xor ecx, 0xac4dc612
shl ecx, 0x15
xor ebx, ecx
or esi, edi
or ecx, 0xac4ecfa6
xor edi, ecx
jmp 0x4742f6
push 0xa702e7d8
dec ebx
and ebx, esi
sub edi, ebx
or edi, 0xac5395a8
add edi, 0xac53e557
jmp 0x4747eb
pop edx
xor edi, ebx
and edi, 0xac547aa6
and ebx, ecx
sub ecx, ebx
inc esi
sub ecx, esi
xchg ecx, esi
or ebx, edi
mov ebx, 0xac5638dc
sub ecx, 0xac5679f4
and ebx, esi
xor ebx, ecx
neg ebx
or esi, ebx
jmp 0x47534a
push 0xa719bed7
xor ebx, 0xac57c76a
mov esi, 0xac5805e5
not edi
sub ecx, esi
rol edi, 0x1f
xor esi, ebx
xor edi, 0xac594f0c
neg ebx
jmp 0x47613c
mov edx, 0x246e6c30
and esi, ebx
dec esi
dec esi
bswap edi
ror ebx, 0x15
sub ebx, esi
xor ecx, edi
neg edi
or edi, ecx
jmp 0x474f50
add edx, 4
inc ebx
or edi, ebx
xor edi, 0xac62db48
sub esi, 0xac6319b7
xchg esi, ecx
nop
xchg ecx, esi
or esi, ebx
dec ecx
xchg esi, ebx
xor edi, esi
bswap edi
mov edi, ebx
inc edi
xor ebx, esi
jmp 0x4758b7
call fcn.004761c0
xor esi, ebx
or ecx, ebx
sub ecx, 0xac68431d
mov edi, 0xac68805e
neg ecx
add esi, ecx
shr ecx, 5
mov esi, ebx
or ecx, 0xac69c710
xor ebx, ecx
neg ecx
xchg ecx, ebx
ror esi, 0x19
shl esi, 0x13
ror ecx, 0x14
shl edi, 0x19
jmp 0x475cd7
mov edx, 0x246e6c30
or edi, 0xac719bb0
xchg edi, ebx
bswap ebx
rol ebx, 0x10
sub ebx, 0xac72965a
neg esi
add esi, ecx
xor edi, ebx
rol esi, 0x1e
ror edi, 1
mov edi, esi
jmp 0x475d72
pop edx
not edi
shr edi, 0x1e
and esi, ecx
xor edi, esi
add edi, esi
add ebx, edi
sub ecx, esi
add esi, edi
or edi, ebx
mov edi, ecx
dec ecx
mov ecx, ebx
or edi, 0xac7cb2e7
dec edi
sub ebx, ecx
rol ebx, 8
jmp 0x474ea1
pop edx
xor esi, ebx
mov ebx, edi
xchg ebx, edi
mov esi, ecx
shr esi, 5
rol esi, 5
jmp 0x475111
mov edx, 0x2809144b
not edi
xchg ebx, esi
sub ecx, 0xac817e43
xor ecx, ebx
mov ebx, ecx
shr edi, 5
not edi
sub esi, 0xac82c5d8
sub esi, ebx
jmp 0x474498
pop edx
xchg edi, ecx
mov esi, ecx
or edi, 0xac83d77e
sub edi, ecx
mov ebx, esi
and esi, ebx
bswap ebx
add edi, 0xac851b24
jmp loc.00475179
push esp
mov edi, 0xac88050e
add esi, edi
or ecx, ebx
xchg edi, esi
xor ebx, ecx
xchg edi, ebx
sub ebx, 0xac89892e
or ecx, edi
jmp 0x475018
push 0xa7512209
xchg esi, ebx
sub edi, 0xac8a5a7c
dec edi
add edi, ecx
xor ecx, 0xac8b177d
xor ecx, 0xac8b55fb
and edi, ebx
sub esi, ecx
or edi, ecx
sub edi, ecx
xor ecx, edi
and edi, esi
jmp 0x475148
pop edx
xor ecx, 0xac8d2696
or edi, ebx
xchg edi, ebx
add edi, ecx
or edi, esi
add esi, ebx
mov edi, ebx
mov ecx, ebx
add ecx, edi
sub ebx, ecx
sub esi, ebx
sub esi, ecx
jmp 0x474414
mov edx, 0x401400
mov ebx, ecx
mov ebx, 0xac932c8c
xor edi, ecx
mov esi, ecx
jmp 0x474d6a
call fcn.004761c0
or ecx, esi
and ecx, ebx
xor ebx, ecx
xor edi, 0xac94c6d3
shl ebx, 0x13
xchg ecx, esi
bswap esi
and ecx, esi
jmp 0x47506e
call edx
ror ebx, 0x10
and ecx, 0xac967627
sub esi, edi
or ebx, 0xac96f57b
xor ebx, 0xac9733f3
jmp 0x474851
call fcn.004761c0
and ebx, ecx
mov edi, esi
xor edi, ebx
add edi, ebx
ror esi, 4
neg ecx
mov edi, 0xaca15a2d
neg edi
sub edi, 0xaca1d8f0
jmp 0x47519d
xor dword [edx], 0x1f7fd4eb
xor ebx, edi
add esi, edi
or edi, ebx
sub ebx, esi
add esi, 0xaca3253f
or edi, ebx
and edi, 0xaca3a10b
xchg ecx, edi
mov esi, ecx
jmp 0x4755f8
push 0xa73d4372
add esi, edi
mov edi, ebx
sub edi, ecx
jmp 0x474a5b
xor dword [edx], 0x1f92d4eb
mov edi, 0xaca8714f
xor esi, ecx
sub ebx, esi
and ebx, edi
mov edi, esi
mov edi, 0xaca9a12b
xchg edi, esi
sub esi, ebx
or ebx, edi
or ebx, 0xacaaa686
and ebx, 0xacaae7c5
sub ebx, edi
or ecx, edi
neg ecx
add edi, 0xacabdc02
jmp 0x4745b4
pop edx
and edi, 0xacac35df
and esi, ebx
sub ebx, ecx
and esi, ecx
inc ecx
mov ebx, ecx
shl edi, 0x18
ror esi, 0xd
nop
jmp 0x474924
pop edx
inc ebx
xor esi, ecx
not ebx
xor edi, ebx
not ecx
or edi, ecx
sub esi, edi
xchg esi, ecx
add ecx, esi
bswap ecx
jmp 0x4749ab
mov edx, 0x2809144b
mov esi, edi
not ecx
bswap ecx
or ecx, ebx
shl ebx, 2
and ebx, 0xacb264d5
rol esi, 5
jmp 0x4745f7
pop edx
add edi, ebx
mov ecx, esi
or ecx, ebx
mov ebx, ecx
mov edi, ebx
add ecx, edi
xchg esi, ebx
jmp 0x474891
push 0xa71c463d
add ebx, 0xacbc30be
xor ecx, 0xacbc71e7
xchg ebx, ecx
jmp 0x474d34
pop edx
mov ebx, ecx
and esi, edi
and esi, ecx
bswap esi
mov ecx, 0xacc306dd
and ebx, esi
sub ecx, 0xacc38335
dec ebx
and ebx, ecx
ror edi, 0x10
sub edi, esi
dec esi
not esi
xor ebx, 0xacc546e3
xchg ebx, ecx
jmp 0x475057
call fcn.004761c0
and ecx, edi
or ecx, ebx
or esi, ebx
xor edi, esi
xchg ecx, edi
add ebx, ecx
sub esi, ebx
jmp 0x474b3f
push 0xa70ec68c
and ebx, esi
and esi, 0xaccd8bb7
sub edi, ecx
and ecx, esi
dec esi
add edi, ecx
not ecx
or ecx, edi
bswap esi
jmp 0x47502f
call edx
add ebx, ecx
or esi, edi
xchg ecx, esi
or esi, edi
or esi, 0xacd08396
shr ecx, 0x15
mov esi, 0xacd111d2
add ecx, 0xacd14fb4
xor edi, ebx
shr esi, 0x14
or ecx, esi
xor ebx, edi
jmp 0x4749f1
call fcn.004761c0
mov esi, 0xacd29bb2
shr ecx, 0x1f
neg ebx
and edi, ecx
ror edi, 0x1d
and edi, esi
add ebx, 0xacd41ecd
or ebx, 0xacd45f1e
jmp 0x47465b
mov edx, 0x246e6c30
shl ebx, 0x10
or ecx, esi
and edi, ebx
dec esi
or ebx, 0xacd5aa14
add ebx, 0xacd5eb54
add ebx, ecx
sub esi, ecx
or edi, esi
xor edi, esi
jmp 0x47602f
pop edx
and ebx, 0xacd90ca7
add edi, esi
and ebx, ecx
xor ecx, ebx
sub ebx, 0xacda134f
or esi, ecx
or esi, edi
and ebx, edi
neg esi
inc esi
and ebx, esi
jmp 0x475c58
pop edx
sub ecx, edi
add ebx, 0xace3ba2f
shr esi, 0x11
add esi, ebx
mov edi, ebx
xchg ebx, ecx
neg edi
or ecx, ebx
sub edi, 0xace57b85
neg edi
sub ebx, esi
bswap ebx
jmp 0x475ca3
push 0xa71a962f
mov ecx, ebx
or ebx, 0xace6d684
mov ecx, edi
or ebx, 0xace75062
jmp 0x474fc0
push 0x401400
sub edi, 0xacec85db
or edi, ebx
and edi, ecx
xchg esi, edi
shl ecx, 0xf
or esi, ebx
rol edi, 0x1f
shr ecx, 0xf
mov ebx, 0xacee85e2
xor ebx, edi
jmp 0x476003
cmp eax, 0x72e59
jmp 0x475387