Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xfffffedc
jne 0x40109d
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xfffffef8
jne 0x401149
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff28
jne 0x4011dc
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xffffff16
jne 0x401247
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
call sub.shell32.dll_IsNetDrive
ret
jmp 0x475813
xor ebx, ecx
or edx, esi
mov ebx, edx
or ecx, edx
jmp 0x475a61
pop edx
add ecx, edi
xor esi, ebx
or edi, ecx
shl ecx, 0x1b
mov ebx, esi
sub ecx, ebx
sub ecx, esi
neg esi
sub ecx, edi
add esi, ecx
add ecx, ebx
dec ecx
jmp 0x477797
push 0xe0160899
xor esi, edi
sub ebx, edi
add ebx, ecx
rol esi, 7
inc esi
jmp 0x476ada
pop edx
xor ebx, ecx
bswap edi
mov ecx, 0xe32f884e
xchg esi, edi
add ecx, 0xe32ff34e
xor ecx, esi
xchg ecx, edi
xchg ebx, esi
sub esi, ecx
dec ebx
xor ecx, ebx
xor ecx, 0xe3316b29
add ebx, ecx
jmp 0x476bb7
push 0xe0054346
add esi, edi
add ecx, ebx
xchg edi, ecx
xchg esi, ebx
and ebx, ecx
or esi, ebx
bswap esi
jmp 0x4774e6
call fcn.00478984
xor ecx, ebx
dec esi
or edi, ebx
xor ebx, 0xe33fc416
add esi, ebx
and ecx, 0xe3409cbf
and edi, ecx
dec esi
mov ebx, esi
ror edi, 0x12
and ebx, 0xe34278fb
and esi, 0xe342da12
mov ebx, edi
jmp 0x47814f
call fcn.00478984
mov edi, 0xe34a2b6a
mov ecx, 0xe34c75ad
ror esi, 0x15
inc edi
add ebx, esi
neg esi
add ecx, edi
add ecx, edi
and edi, ebx
jmp 0x477553
push 0xe00bb28f
shr edi, 8
neg ebx
and ecx, ebx
add ebx, esi
sub esi, edi
xchg ecx, ebx
jmp 0x47749a
push 0xe00296b9
and ecx, 0xe354abc7
or ebx, ecx
or esi, ebx
not ebx
shl esi, 0x1b
or ebx, ecx
inc edi
add edi, ecx
xor esi, 0xe3569296
xor edi, 0xe356c97c
xor esi, edi
not ebx
sub ebx, 0xe3579b00
jmp 0x476b5a
push 0xe0194363
or ebx, esi
ror esi, 0xf
inc edi
mov ecx, edi
mov esi, 0xe3602ab2
mov ecx, esi
dec ebx
add ebx, edi
and edi, esi
xor ebx, edi
jmp 0x47868b
push 0xe0081528
add ecx, edi
sub esi, ebx
not esi
dec ecx
bswap esi
mov edi, 0xe36dc6e0
and esi, ecx
xchg ecx, ebx
add ebx, esi
jmp 0x476466
pop edx
and esi, edi
xor ecx, ebx
add ecx, 0xe36f187b
jmp 0x476431
mov edx, 0x4132136a
sub ecx, esi
or ebx, esi
and edi, ecx
or ecx, edi
bswap ebx
ror edi, 0xb
sub edi, 0xe370a708
add edi, ecx
not ecx
mov ecx, ebx
mov ecx, esi
bswap ecx
xchg ecx, esi
jmp 0x47806b
pop edx
and esi, edi
xor edi, ecx
or ecx, esi
mov edi, ecx
sub esi, edi
mov ecx, ebx
and edi, ecx
jmp 0x475b67
push 0xe00c0fee
or ecx, esi
shl esi, 0xb
xor ebx, ecx
xchg edi, ebx
mov edi, 0xe3885fd0
xchg edi, ebx
rol esi, 0x12
xchg esi, ecx
mov ecx, edi
mov ebx, esi
jmp 0x476d05
pop edx
dec edi
bswap esi
xchg ecx, ebx
rol edi, 0x10
not esi
mov ebx, 0xe38acc05
xchg edi, esi
and edi, esi
xor edi, ecx
or edi, ebx
add ecx, 0xe38bd056
mov edi, esi
jmp 0x476ffc
pop edx
sub ecx, ebx
and esi, edi
sub ecx, 0xe38cbce1
jmp 0x475b57
mov edx, 0x2774562b
mov ebx, edi
sub edi, ebx
xor esi, ecx
shl edi, 0xf
and ebx, esi
inc ecx
or edi, ebx
and edi, esi
and ebx, 0xe38eb035
sub ebx, esi
add esi, ecx
neg ecx
jmp 0x4770aa
call edx
mov ecx, edi
rol edi, 7
add ecx, 0xe38fff7d
inc esi
shl edi, 0x19
dec esi
or esi, 0xe390d565
bswap ebx
sub ecx, edi
jmp 0x476878
pop edx
rol ecx, 0xa
xchg esi, edi
add ecx, ebx
xor edi, 0xe395fe96
mov ebx, ecx
sub ebx, ecx
and esi, edi
jmp 0x477aaa
push 0xe008c240
or ebx, edi
add edi, esi
shr ebx, 0xb
add edi, ebx
add esi, ecx
add ecx, ebx
or ebx, 0xe39ca8a7
sub esi, 0xe39d15e3
bswap ebx
and esi, 0xe39dd946
mov ebx, esi
jmp 0x477ac1
mov edx, 0x123b2f04
add edi, esi
mov edi, 0xe3a74cf1
sub esi, edi
shl edi, 4
and ebx, edi
or edi, 0xe3a81c79
sub ebx, 0xe3a853aa
add edi, esi
jmp 0x478503
pop edx
or esi, ebx
xor edi, ebx
neg edi
and ecx, 0xe3a96ebe
not esi
not edi
add esi, ecx
jmp 0x47797e
pop edx
xor ecx, 0xe3b0c28d
sub edi, 0xe3b0f98e
xchg ecx, esi
sub ecx, ebx
and esi, edi
inc edi
xor ecx, ebx
sub edi, 0xe3b23a03
mov ecx, 0xe3b270f5
jmp 0x4763c8
push 0xe01e1a66
xor edi, ecx
dec edi
mov edi, ecx
bswap ecx
xchg esi, ecx
or esi, ebx
inc edi
and esi, 0xe3b4be8a
xor edi, ecx
or edi, ebx
bswap edi
jmp 0x4770cb
push 0xe0150d80
dec ebx
mov ecx, 0xe3b6e36d
or esi, 0xe3b7416a
shr ecx, 5
xchg ebx, edi
shr edi, 5
add esi, ecx
xchg ebx, esi
and esi, 0xe3b9cf89
jmp 0x476378
mov edx, 0x2774562b
xor ecx, edi
sub edi, 0xe3be3e25
and edi, ecx
bswap ecx
shl ecx, 0x17
add ebx, 0xe3bfe169
and ecx, 0xe3c04083
jmp 0x475944
call edx
or esi, edi
dec ecx
or ecx, edi
add edi, ebx
add ecx, edi
xor esi, ebx
xor ebx, edi
neg edi
shr esi, 0xd
sub edi, esi
mov esi, ebx
not ecx
and esi, ecx
mov ecx, 0xe3cbdb15
jmp 0x47792f
pop edx
inc ebx
add esi, ebx
or esi, edi
ror ecx, 7
and ecx, ebx
and edi, 0xe3cd2a40
sub ecx, esi
sub esi, edi
or esi, edi
dec esi
add ecx, edi
xor ecx, ebx
dec esi
jmp 0x47879a
pop edx
add ecx, 0xe3d60fe9
xchg ebx, ecx
add esi, 0xe3d676ee
add esi, ecx
nop
and ebx, 0xe3d8c1b3
jmp 0x477cc5
push 0xe0070cfc
mov ebx, ecx
and esi, edi
add ebx, ecx
xor ecx, esi
or esi, 0xe3dfecc7
or edi, ebx
rol edi, 0xb
dec ecx
or edi, ecx
add esi, ecx
jmp 0x47866d
pop edx
dec ebx
sub ebx, edi
and ecx, 0xe3e78c0e
mov ecx, esi
add ecx, 0xe3e7f5e4
dec ebx
and edi, esi
mov ebx, esi
sub ecx, esi
jmp 0x477e75
push esp
bswap ecx
mov ebx, 0xe3f9688a
and esi, ebx
or edi, ecx
or edi, esi
sub edi, ecx
xor esi, ecx
jmp 0x477a25
push 0xe012ee90
sub ecx, edi
add ecx, esi
ror ebx, 0x13
mov ebx, ecx
xchg esi, ecx
inc ecx
add ecx, 0xe3fd23cb
not ecx
mov ebx, esi
dec edi
mov edi, esi
or edi, 0xe3fe319f
neg ebx
jmp 0x4776f7
push 0xe0155f61
xor ebx, ecx
xor ecx, 0xe401a476
xchg edi, ebx
add ecx, esi
mov ebx, 0xe4023edb
xor esi, ebx
nop
dec ecx
or ecx, edi
add esi, ebx
jmp 0x478753
call fcn.00478984
mov ebx, 0xe403f402
mov esi, edi
or edi, 0xe4045dde
sub ebx, 0xe404910f
neg edi
sub ecx, esi
or esi, edi
sub ebx, ecx
xor ecx, 0xe405a0cf
and ebx, esi
jmp 0x4785c9
pop edx
and edi, ecx
sub ebx, ecx
ror esi, 7
rol ebx, 0x17
xor esi, 0xe406fc51
sub edi, esi
jmp 0x475f0f
push 0xe00a4afc
sub ecx, 0xe40c79a5
sub edi, esi
mov esi, 0xe40ce0bd
or ecx, 0xe40d17f6
bswap ecx
neg esi
rol edi, 0x1c
sub esi, ecx
xchg ebx, edi
add ebx, esi
xchg edi, esi
mov ebx, ecx
mov esi, edi
shr ebx, 1
not esi
jmp 0x478473
push 0xe0084183
and ecx, edi
sub ecx, edi
shr ecx, 0x13
and esi, ebx
or edi, ebx
xchg esi, edi
xor esi, ebx
and edi, esi
bswap esi
jmp 0x477677
pop edx
and esi, 0xe428a85a
xor ecx, edi
sub esi, 0xe4291c6c
and ecx, edi
rol ebx, 0xe
jmp 0x4784c2
pop edx
sub ebx, esi
xchg ebx, esi
xchg edi, ecx
shl esi, 5
shl ebx, 0x11
mov edi, 0xe42ae2cb
mov ecx, 0xe42b19ca
jmp 0x47883e
push 0xe0222eed
add esi, 0xe444fb0a
and esi, 0xe4452e7a
or esi, edi
neg edi
xor ebx, 0xe445cf82
inc ebx
xchg ebx, edi
xchg esi, ebx
mov edi, ecx
mov esi, ecx
not esi
add edi, ebx
jmp loc.00477ebe
pop edx
or ebx, 0xe4675e11
or ecx, edi
or ecx, esi
xchg ecx, ebx
or ebx, ecx
rol ebx, 1
or ebx, ecx
bswap ebx
jmp 0x477b5a
pop edx
and ecx, edi
and ebx, esi
and ebx, esi
xor esi, ecx
xor esi, edi
xchg edi, ecx
add esi, ebx
sub ebx, esi
add ecx, ebx
mov ecx, edi
sub edi, 0xe4880a48
inc ebx
jmp 0x477bb9
call fcn.00478984
and esi, ebx
sub ecx, ebx
and edi, esi
add ecx, 0xe4899b36
xchg ebx, edi
sub ebx, ecx
mov ebx, 0xe48a4077
and edi, ebx
add edi, ebx
jmp 0x47790b
push 0xe010d915
sub edi, ebx
mov esi, ebx
neg esi
mov ecx, 0xe492f460
xor ebx, ecx
sub esi, 0xe4935c43
not ebx
jmp 0x476f08
push 0xe01659be
xor ecx, 0xe4973584
mov ecx, esi
dec ecx
add ebx, esi
mov ebx, ecx
bswap edi
neg edi
dec ecx
ror edi, 0x1f
and esi, ecx
jmp 0x475cf5
push 0xe002f5ff
or esi, edi
inc ecx
mov esi, 0xe4a21445
sub ecx, esi
dec esi
xor esi, edi
and edi, ecx
jmp 0x475e12
pop edx
shr ecx, 0x18
xchg ebx, edi
xor ecx, esi
bswap ebx
xchg ebx, esi
and ebx, 0xe4a9ef92
xchg ecx, edi
sub ebx, edi
or edi, ecx
xchg ecx, esi
xchg edi, ecx
inc esi
jmp 0x477c82
push 0xe00c3827
dec ecx
mov edi, ebx
shr edi, 0x11
xchg esi, edi
add ebx, esi
and edi, 0xe4c3888e
xchg ebx, esi
xchg ecx, esi
jmp 0x476dd8
pop edx
add ebx, edi
or ebx, 0xe4ccce9c
and edi, ebx
or ebx, 0xe4cd690f
mov ebx, edi
sub esi, 0xe4ce2f10
xor ecx, 0xe4cea8c9
shr ebx, 0x13
dec esi
add ebx, esi
ror ecx, 0xd
jmp 0x47600b
mov edx, 0x2774562b
inc edi
sub ecx, edi
or ecx, edi
neg ebx
ror ecx, 5
xchg esi, edi
or ecx, ebx
mov ebx, 0xe4d3b999
rol esi, 2
dec edi
sub esi, edi
bswap edi
shr esi, 0x14
jmp 0x4769ed
push 0xe01107e5
xor ebx, esi
rol esi, 0xd
or ebx, esi
mov esi, 0xe4eacc28
and esi, ebx
jmp 0x477817
push 0x74413
bswap edi
and edi, ecx
not edi
xor edi, ebx
neg esi
add ecx, 0xe4f54ff7
xor esi, edi
shr ecx, 0x14
and esi, ebx
xchg ebx, esi
add ecx, edi
and ecx, ebx
mov esi, 0xe4f6c302
jmp 0x47826d
pop edx
mov ecx, esi
ror ecx, 0x14
or edi, esi
or esi, ebx
and edi, esi
sub edi, esi
not ecx
xor ecx, 0xe502d32f
inc edi
and ebx, esi
rol esi, 0x1a
xor edi, ecx
sub ecx, edi
jmp 0x477119
pop edx
sub edi, ebx
mov ebx, edi
or edi, ebx
xor ecx, 0xe505f92e
add esi, ecx
xor esi, edi
sub esi, edi
xor ebx, ecx
jmp 0x4760ae
call fcn.00478984
sub ecx, ebx
nop
inc esi
jmp 0x4780a8
push 0xe01e77ee
xchg edi, ecx
inc edi
sub ecx, edi
not edi
xor esi, ecx
rol esi, 0x13
add ebx, esi
neg ecx
neg ebx
xor ecx, esi
and ecx, esi
or ebx, 0xe5144ae4
not ebx
and ebx, ecx
jmp 0x4783b2
pop edx
xor ecx, edi
add edi, ecx
add ecx, ebx
and edi, esi
add esi, ecx
or esi, edi
inc ebx
neg esi
xchg esi, ebx
mov edi, ecx
rol ecx, 0x17
jmp 0x477b31
pop edx
mov esi, ecx
dec esi
shr edi, 0x1b
jmp 0x4781a4
push 0xe0137407
bswap ecx
shl ebx, 0x11
xchg esi, ebx
and ecx, ebx
rol edi, 0x1f
add ecx, ebx
shl ebx, 0xd
jmp 0x4778ab
push 0xe021daab
or esi, ebx
not ecx
xor ebx, 0xe52bd1f9
mov edi, ebx
add esi, 0xe52c37c5
sub ecx, edi
xor ecx, edi
xchg edi, esi
add ebx, 0xe52d105e
add esi, 0xe52d4b2f
or edi, 0xe52db09e
xchg edi, ebx
jmp 0x4766cd
call edx
and ecx, esi
not ecx
not edi
xor esi, edi
shr edi, 7
jmp 0x47703d
push 0xe01348ba
mov ebx, ecx
rol edi, 2
and esi, edi
add ecx, ebx
xchg esi, ebx
mov esi, ebx
xor esi, edi
or ebx, edi
rol edi, 0x1f
and edi, ebx
jmp 0x4771b7
push 0xe00b8632
not edi
or ebx, 0xe55542d1
sub edi, esi
xor edi, ecx
jmp 0x475a09
push 0xe00bdedc
add edi, esi
not edi
xor esi, edi
neg ecx
xor ecx, esi
or ebx, edi
mov edi, 0xe55c642f
add ebx, edi
or edi, esi
sub ecx, edi
xchg esi, edi
and esi, ebx
xor edi, ecx
rol ebx, 0xc
jmp 0x475c9d
mov edx, 0x123b2f04
and ecx, esi
mov esi, edi
or ebx, 0xe5610e59
not esi
xor edi, esi
xchg edi, ebx
or esi, 0xe562a9cf
and ebx, 0xe5630852
add esi, ebx
jmp 0x47801a
call edx
sub ebx, 0xe56a3211
and ebx, ecx
sub ebx, ecx
xchg esi, edi
xor ebx, edi
shl esi, 0x13
xor ebx, 0xe56c2aad
sub ecx, esi
xor ebx, esi
shr esi, 2
jmp 0x4788e6
pop edx
xor ebx, esi
ror ebx, 0x18
and esi, 0xe5720bad
or edi, ecx
mov ecx, edi
add edi, ebx
add ecx, edi
and esi, ecx
jmp 0x477696
call edx
xor ebx, 0xe57352a2
mov ebx, esi
mov ebx, edi
or esi, ebx
mov ecx, 0xe5742650
xor ebx, esi
xor ebx, 0xe5749182
dec esi
bswap ebx
dec edi
sub esi, ebx
jmp 0x475c13
push 0x40
shr edi, 4
sub ecx, ebx
or ecx, ebx
mov ecx, edi
not edi
sub edi, 0xe578f163
inc ebx
mov edi, esi
mov ebx, 0xe579d81c
add edi, 0xe57a3ea6
not esi
jmp 0x476f6e
push 0xe0086a24
add edi, ebx
and ecx, esi
not ecx
mov esi, edi
dec edi
mov edi, ebx
sub ebx, edi
and edi, esi
add ecx, ebx
sub esi, ebx
and ebx, edi
jmp 0x477c34
pop edx
xchg ebx, esi
and edi, ebx
not ecx
xchg edi, ecx
jmp 0x476d92
pop edx
and ecx, esi
xor esi, ecx
xchg ebx, esi
shl ecx, 7
and ebx, ecx
sub ebx, esi
sub ecx, edi
rol ecx, 0x13
bswap esi
shl ecx, 0x1d
xor ecx, edi
sub edi, ebx
jmp 0x475ec7
push 0xe0131dd8
inc edi
ror ecx, 0xf
inc ecx
and ebx, ecx
inc ebx
nop
sub ebx, edi
or ebx, ecx
xor edi, 0xe5901dca
shl ecx, 0xe
sub esi, ecx
shl esi, 5
jmp 0x4773a2
pop edx
neg edi
xor edi, 0xe59b1ba9
mov ebx, 0xe59b4ec8
or ebx, 0xe59b8203
xchg ecx, ebx
add ecx, edi
and edi, 0xe59c721d
and ebx, edi
add edi, ecx
add esi, edi
xor edi, ecx
jmp 0x477f5b
push 0xe00dc7ab
ror esi, 0x1a
sub edi, ebx
and ebx, esi
neg ebx
xchg esi, ecx
or edi, esi
ror ecx, 0xe
xor esi, ebx
xor ebx, esi
neg ecx
add ebx, edi
xchg ecx, edi
xchg edi, esi
xor ecx, edi
jmp 0x477d0a
call fcn.00478984
sub esi, 0xe5a3563f
or edi, ebx
and ebx, 0xe5a41cc1
mov ecx, esi
sub ebx, esi
neg ebx
sub edi, 0xe5a5b498
dec esi
neg ecx
sub ecx, ebx
add ecx, esi
sub ebx, edi
jmp 0x4775da
push 0xe0113381
dec ebx
xchg edi, esi
inc esi
xor ecx, esi
xor ecx, ebx
shl edi, 0x1a
sub ebx, 0xe5a8f3f2
xor ecx, esi
bswap ecx
and ecx, 0xe5a99deb
add edi, ebx
add ebx, edi
or ecx, 0xe5aa32dc
bswap ecx
xor ecx, 0xe5aa9f25
jmp 0x475f55
mov edx, 0x123b2f04
sub ebx, 0xe5b1781a
or ebx, esi
xchg esi, ebx
neg ebx
not ecx
rol ebx, 3
or ebx, 0xe5b2b780
sub edi, ebx
or edi, esi
jmp 0x478558
call edx
inc ebx
ror ebx, 9
not ebx
and edi, esi
inc ebx
add esi, ebx
dec esi
mov edi, ecx
xchg ecx, esi
xor esi, ebx
add esi, ebx
shl ecx, 0x16
rol esi, 0xc
mov ebx, edi
inc esi
jmp 0x475865
pop edx
inc edi
xor ecx, ebx
or ebx, edi
nop
or esi, 0xe5c3412d
mov ebx, ecx
and ebx, ecx
or edi, 0xe5c47c16
sub edi, ebx
jmp 0x4761d2
call fcn.00478984
mov ebx, 0xe5c55b5e
neg ecx
sub ebx, ecx
rol edi, 0x13
sub ebx, esi
mov ecx, ebx
jmp 0x4787f5
pop edx
xchg edi, ecx
sub ebx, ecx
add ecx, edi
mov ebx, esi
bswap edi
bswap edi
jmp 0x4776d6
push esp
or esi, edi
or ebx, edi
or ebx, ecx
xor ecx, esi
or ecx, edi
or ecx, ebx
xchg ecx, edi
neg edi
jmp 0x477625
pop edx
or ecx, edi
shl esi, 9
dec edi
sub ebx, edi
xchg ecx, esi
add esi, ecx
inc esi
sub ebx, ecx
sub edi, ebx
jmp 0x475ad1
mov edx, 0x123b2f04
shr ebx, 0x13
dec esi
mov esi, ebx
and ebx, ecx
inc edi
xchg ebx, edi
mov ebx, 0xe5f38df0
shl esi, 4
or edi, 0xe5f470a1
jmp 0x478604
push 0xe012c3d3
shr esi, 2
shr ebx, 9
sub ecx, ebx
and ebx, ecx
mov edi, ebx
xchg edi, ebx
or ebx, edi
or edi, 0xe6007da8
mov ecx, 0xe600b066
or esi, edi
add edi, esi
jmp 0x47631d
push 0xe0107d36
xchg edi, esi
sub ebx, esi
xor ebx, edi
and edi, ebx
mov edi, esi
neg esi
jmp 0x478179
pop edx
sub esi, 0xe60af296
dec ecx
ror edi, 1
sub ecx, edi
or edi, ecx
xchg edi, ecx
sub edi, 0xe60c3872
xor edi, esi
dec ecx
jmp 0x475b39
pop edx
or ecx, esi
xchg ebx, edi
or ebx, edi
or edi, ecx
rol ebx, 0x12
xchg edi, ebx
xor edi, ecx
not ebx
shr edi, 0x1a
and ebx, 0xe610ce81
sub ecx, edi
shl edi, 0x1f
mov ebx, edi
not edi
jmp 0x4777c2
push 0xe0089760
xor ecx, esi
mov ecx, ebx
not esi
neg ecx
not ebx
or ecx, edi
rol ebx, 0xa
or esi, edi
and ebx, 0xe619bf9d
sub ebx, 0xe619f2c6
sub ebx, 0xe61a29e7
bswap edi
jmp 0x475d8d
push 0xe004f572
add esi, ecx
and ebx, edi
xor ebx, edi
and edi, 0xe61d1430
inc ecx
jmp 0x4758ff
push 0xe006e0db
sub esi, ecx
add ecx, esi
xor esi, 0xe6205687
shr esi, 9
shr edi, 0x1e
or edi, ecx
xor edi, ecx
and ebx, edi
mov ecx, 0xe6219d32
add edi, 0xe621d09c
mov edi, ecx
mov edi, ebx
jmp 0x47613f
mov edx, 0x123b2f04
xor ebx, esi
and ecx, 0xe6268201
sub ebx, ecx
xchg ecx, ebx
add ebx, edi
jmp 0x4777ea
pop edx
xor ecx, esi
xchg ecx, ebx
add ebx, ecx
sub edi, 0xe6302109
bswap ebx
and ebx, esi
or ebx, edi
mov edi, ebx
xor ebx, 0xe631871e
and ecx, ebx
xchg edi, ecx
xor edi, esi
not ebx
jmp 0x4764fb
pop edx
xor ebx, edi
shr esi, 0x1d
mov esi, edi
or edi, esi
sub esi, 0xe6457f99
sub esi, 0xe645de83
neg esi
jmp 0x475ce5
pop edx
add esi, edi
add ecx, edi
or ebx, ecx
mov edi, ebx
jmp 0x4788a9
call fcn.00478984
add ebx, ecx
mov ecx, 0xe6695ed7
or ecx, esi
mov esi, ecx
xor esi, ecx
rol esi, 6
xchg ebx, esi
or edi, ebx
xor edi, 0xe66ad7ee
bswap edi
not ecx
jmp 0x47732f
call fcn.00478984
xor edi, esi
rol ecx, 4
rol edi, 0xc
and ecx, 0xe66e188d
ror ecx, 0xe
xor edi, 0xe66e84d9
sub esi, 0xe66ec47e
jmp 0x4762f1
call edx
sub ebx, ecx
ror esi, 0x11
or ebx, 0xe6707ac7
and esi, ebx
sub ecx, 0xe670ef78
mov esi, 0xe6712225
add ebx, ecx
jmp 0x477d87
call edx
or esi, 0xe67bf2c8
nop
mov esi, edi
jmp 0x477193
push 0xe010aa2e
add ecx, ebx
add ebx, esi
not ebx
and edi, ebx
shl ecx, 0x1f
jmp 0x476a90
pop edx
xchg esi, ecx
xor ecx, edi
xchg esi, ebx
ror ecx, 0x1e
not ebx
xor edi, esi
mov ebx, ecx
and ebx, esi
or ecx, edi
xchg ebx, ecx
ror edi, 0x1a
not edi
xor edi, esi
mov ebx, esi
or ecx, ebx
jmp 0x475cc0
push 0x401400
not ebx
mov esi, 0xe690f58c
sub edi, 0xe6912873
sub edi, ebx
and ecx, edi
add edi, 0xe691cec1
neg ecx
xchg esi, edi
jmp 0x475d1b
mov edx, 0x123b2f04
sub edi, ecx
not ecx
sub edi, ecx
add ecx, ebx
or esi, ebx
sub ebx, edi
add ebx, 0xe6aa291e
and esi, 0xe6aa8a5c
and ebx, esi
add ecx, ebx
or edi, ecx
jmp 0x4759db
push 0xe01dc177
dec edi
mov edi, ebx
add esi, ecx
and ebx, edi
shl ecx, 0x1d
xchg ecx, edi
sub ebx, esi
sub edi, ebx
mov ebx, ecx
or ebx, 0xe6b45e24
or esi, ebx
xchg esi, edi
jmp 0x475eed
push 0xe00a7762
and edi, ecx
xor esi, ebx
jmp 0x4785e1
pop edx
mov ebx, ecx
dec esi
add esi, edi
shl edi, 0x1c
ror ebx, 1
add edi, ecx
dec ecx
add edi, esi
jmp 0x475d54
call fcn.00478984
xor ebx, edi
and edi, ebx
mov edi, 0xe6c3331f
add esi, edi
add edi, 0xe6c3ee02
mov esi, ecx
inc edi
sub esi, 0xe6c5254e
or edi, ebx
add ebx, edi
sub esi, ebx
jmp 0x478729
call fcn.00478984
shl ebx, 7
mov esi, 0xe6c9a5eb
nop
xchg esi, ecx
add esi, 0xe6cacbc7
xor edi, 0xe6cb3cf7
jmp 0x4788c2
call edx
dec esi
xor ecx, ebx
sub ecx, edi
mov edi, 0xe6d0e1b9
xchg edi, esi
mov ebx, 0xe6d15558
jmp 0x476514
mov edx, 0x123b2f04
sub edi, esi
xor esi, edi
xchg esi, ebx
mov ebx, edi
and ebx, esi
ror esi, 0xb
add edi, esi
not ebx
add ecx, esi
sub ebx, 0xe6d37766
jmp 0x47639b
call fcn.00478984
ror esi, 6
dec ebx
xchg edi, esi
or ecx, esi
sub ebx, ecx
or esi, edi
sub edi, 0xe6d50226
mov esi, ebx
mov ebx, ecx
jmp 0x475fe5
mov edx, 0x123b2f04
inc ecx
and edi, ecx
mov ecx, esi
not esi
dec ebx
or ebx, edi
and edi, esi
add edi, ebx
xor edi, ebx
and ebx, esi
mov esi, edi
jmp 0x47794d
push 0xe0199272
xor edi, 0xe6dceca2
not esi
dec ecx
sub esi, ebx
jmp 0x478424
call edx
and esi, ebx
xor edi, esi
add edi, ecx
mov edi, ebx
add ecx, edi
and ebx, ecx
dec edi
jmp 0x4758b2
push 0xe015af57
add edi, 0xe6ea335d
or ecx, edi
not ecx
add ecx, edi
and edi, ecx
xchg ebx, edi
jmp 0x475883
push 0xe0218935
and ecx, ebx
shr ebx, 0x10
xor ecx, ebx
or esi, ecx
xor edi, esi
or ecx, esi
add esi, ecx
or esi, ebx
add ebx, ecx
jmp 0x47723c
call edx
sub esi, ecx
and ecx, edi
xor esi, ecx
and ebx, ecx
or ebx, 0xe6f47ecb
and ecx, ebx
mov ebx, 0xe6f4e7db
add ecx, 0xe6f51b11
jmp 0x4769cc
pop edx
and ecx, edi
xchg ecx, ebx
shl ecx, 0x10
shl ecx, 6
shl esi, 3
sub ebx, ecx
add ebx, edi
add ebx, edi
jmp 0x477433
pop edx
or ebx, edi
bswap ecx
mov ebx, ecx
neg edi
xor esi, edi
and edi, ecx
or ebx, edi
inc ebx
and ebx, ecx
mov esi, ebx
jmp 0x477bd8
call edx
mov ebx, edi
sub edi, ecx
mov esi, ecx
shr ebx, 0x13
add edi, ebx
and esi, 0xe7027aba
xor esi, ecx
and ebx, ecx
xchg ecx, edi
and esi, edi
or edi, ecx
and ecx, ebx
jmp 0x475e38
pop edx
or edi, ebx
and ebx, 0xe7043695
sub edi, ecx
xor ebx, edi
xchg ebx, esi
xchg ecx, ebx
bswap ecx
xchg ecx, edi
xchg edi, ebx
or ecx, esi
neg ecx
jmp 0x4775bf