Function at 0x401000
Capabilities:
Encrypt data using chaskey
Enumerate services
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetSystemDefaultLCID
cmp eax, 0xffffff18
jne 0x401075
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.advapi32.dll_EnumServicesStatusExA
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xffffff29
jne 0x4010f4
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.advapi32.dll_EnumServicesStatusExA
call sub.kernel32.dll_FindVolumeClose
call sub.advapi32.dll_EnumServicesStatusExA
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
ret
call sub.kernel32.dll_GetSystemDefaultLCID
cmp eax, 0xffffff2c
jne 0x401196
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.kernel32.dll_FindVolumeClose
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.kernel32.dll_FindVolumeClose
call sub.advapi32.dll_EnumServicesStatusExA
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.advapi32.dll_EnumServicesStatusExA
call sub.advapi32.dll_EnumServicesStatusExA
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.ntdll.dll_NtLockProductActivationKeys
ret
call sub.kernel32.dll_GetSystemDefaultLCID
cmp eax, 0xffffff14
jne 0x401224
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.kernel32.dll_FindVolumeClose
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.ntdll.dll_NtLockProductActivationKeys
call sub.advapi32.dll_EnumServicesStatusExA
call sub.kernel32.dll_FindVolumeClose
call sub.advapi32.dll_EnumServicesStatusExA
call sub.advapi32.dll_EnumServicesStatusExA
ret
jmp 0x475348
xchg ecx, ebx
sub ebx, ecx
xchg ebx, esi
sub esi, edx
xor esi, ebx
add ebx, ecx
jmp 0x477a25
call ecx
xor edi, esi
not esi
xor edx, esi
sub edi, 0xae0d9063
and ebx, 0xae0dd4fa
and ebx, esi
ror edi, 6
jmp 0x476b69
pop ecx
rol esi, 0x1c
mov esi, edx
or esi, edi
or edx, 0xae1ad0b7
add ebx, esi
not edi
and edx, esi
neg edi
mov ebx, edx
add edx, esi
jmp 0x476546
call ecx
and edi, esi
inc edx
neg esi
shl edi, 0x1f
add esi, edi
sub edx, esi
or edx, esi
add ebx, esi
mov edi, esi
jmp 0x475862
pop ecx
dec ebx
xchg edi, edx
or ebx, edx
or esi, edi
sub edi, edx
and ebx, 0xae20b1a4
jmp 0x476ebc
mov ecx, 0x123b2f04
shl esi, 0xf
and ebx, esi
xor edi, edx
not ebx
and esi, ebx
mov edi, edx
xchg ebx, edx
add ebx, 0xae25280f
xchg esi, edx
jmp 0x476c66
push 0xabdccdca
xchg edx, edi
add edi, 0xae2d2dd9
shr edx, 0x1f
xchg edx, esi
and edx, 0xae2e0876
ror ebx, 3
mov ebx, 0xae2e95db
or esi, edx
jmp 0x47700b
push 0xabf0ad68
mov edi, esi
xor edx, esi
sub ebx, 0xae351419
mov ebx, edx
xor esi, edx
jmp 0x475679
push 0xabebe377
sub edx, esi
and ebx, edx
sub edx, 0xae403837
and edx, esi
and esi, 0xae40be93
mov edi, esi
mov ebx, 0xae4145f5
mov edx, ebx
jmp 0x476215
push 0xabf0e7c3
add edx, ebx
mov edi, esi
nop
and esi, ebx
not esi
shr edx, 6
and esi, edi
xchg esi, edi
xor edx, edi
jmp 0x476320
push 0xabd9f944
mov edx, edi
add edi, 0xae4cbb1c
bswap edi
xchg edi, esi
sub edi, edx
and ebx, 0xae4dd9f6
ror edx, 0x1e
jmp 0x476cbd
pop ecx
or edi, 0xae514586
sub edx, edi
and esi, 0xae51dac6
add esi, edx
xor edx, esi
jmp 0x475ebc
pop ecx
and esi, 0xae55fb2a
shr edi, 8
nop
rol edx, 0x12
sub esi, ebx
add edx, edi
add esi, 0xae57a0f7
add edi, ebx
jmp 0x47587d
push 0xabdc95fd
add edi, esi
sub ebx, esi
sub edx, 0xae5fb2cc
or edx, 0xae5ff81d
xor ebx, edx
or edi, 0xae608e6a
and edi, edx
or edi, ebx
and edi, ebx
add esi, 0xae619864
rol edi, 0x11
and esi, 0xae6222b2
jmp 0x4754d8
pop ecx
xor esi, edx
inc esi
and ebx, edi
neg edx
sub edx, esi
bswap edi
inc edx
bswap ebx
shr edi, 0xd
sub edx, ebx
and ebx, edi
jmp 0x476838
pop ecx
inc ebx
sub esi, edi
xor edi, 0xae79d91e
xor edx, edi
add esi, edx
add esi, edx
xor esi, edx
and esi, ebx
xchg esi, edx
jmp 0x477a9c
mov ecx, 0x123b2f04
shr esi, 0x1a
xor esi, 0xae83416e
inc edi
sub esi, edx
sub ebx, esi
add edi, esi
mov edi, ebx
sub edx, esi
mov ebx, 0xae85228e
xchg esi, ebx
add edi, edx
sub edx, ebx
and edx, esi
shl ebx, 2
jmp 0x477ac3
mov ecx, 0x123b2f04
or edx, ebx
or esi, edx
neg edx
ror esi, 0x13
xor esi, ebx
dec edi
sub ebx, 0xae886de3
shl edi, 0xf
bswap edi
or esi, 0xae894a1c
xor edx, esi
jmp 0x475be3
pop ecx
add esi, edi
shr ebx, 0x12
mov edi, 0xae8a76f4
dec ebx
and edx, 0xae8b0079
and edi, edx
and edi, esi
xor esi, 0xae8bd980
sub edi, esi
shr edx, 0x19
mov esi, edx
rol edi, 0xa
neg edx
jmp 0x475b9c
pop ecx
not ebx
dec ebx
add edi, ebx
and edi, edx
jmp 0x475da2
push 0xabe9d6a4
dec edi
and edx, 0xae8f0ef2
neg edi
xor ebx, edi
and edi, edx
xor ebx, 0xae902d9d
add ebx, edi
add ebx, edx
shl esi, 7
bswap edx
jmp 0x4776ae
mov ecx, 0x6e447c44
and ebx, edx
or edx, esi
neg esi
add ebx, edx
or edi, 0xae9b0d1c
or ebx, 0xae9b51ae
or esi, ebx
mov esi, 0xae9bd6d0
add ebx, edi
add edx, 0xae9c5faf
jmp 0x476909
pop ecx
add esi, ebx
neg edx
shr edx, 0x1d
add edx, esi
xor esi, ebx
add esi, ebx
or edi, 0xaebb82b7
mov esi, edx
xor edx, esi
nop
bswap edx
mov edi, esi
add esi, 0xaebd2637
jmp 0x476b25
call fcn.0047551e
bswap ebx
shl edi, 1
shl edi, 0x10
sub ebx, esi
xor edx, ebx
mov ebx, 0xaec2789b
and esi, edi
ror edi, 0x1d
add ebx, edi
and esi, edx
shl esi, 0x10
or ebx, edi
add edx, 0xaec45be8
jmp 0x4762e0
call ecx
bswap edi
and edi, edx
jmp 0x47629b
pop ecx
add esi, edi
xor edx, edi
mov esi, edi
mov ebx, edx
and edi, esi
sub edi, edx
ror esi, 0x13
add edi, edx
jmp 0x4755e7
call ecx
mov edi, esi
xor ebx, edx
rol edx, 0x19
xchg edx, esi
shl ebx, 0x17
xchg ebx, esi
add esi, edx
add edi, ebx
or edx, 0xaedc61ef
sub ebx, esi
mov ebx, edx
add edx, 0xaedd2603
add esi, edx
jmp 0x477741
push 0xabd8630a
sub edx, esi
mov edi, edx
sub esi, ebx
sub edi, esi
sub edx, esi
or ebx, esi
mov edi, esi
jmp 0x47546a
call ecx
add edx, edi
xor edi, edx
shl edx, 0xd
neg edi
and edx, 0xaee0d6dd
and esi, edx
neg edi
xchg edi, esi
and ebx, edx
mov edi, esi
jmp 0x475714
push 0xabe92648
xor edi, edx
xor edi, esi
or esi, edx
or edi, esi
jmp 0x477e9d
pop ecx
inc edi
sub edi, esi
ror edx, 0xe
and edx, esi
not ebx
inc edx
add ebx, edx
mov ebx, esi
inc edx
sub edi, edx
xor ebx, esi
shl esi, 0x1e
not edx
mov edx, esi
jmp 0x475cc2
mov ecx, 0x123b2f04
and ebx, edi
dec ebx
xchg edi, ebx
add edx, 0xaeec8adc
xchg edi, edx
jmp 0x477dcf
push 0xabda65f7
xchg ebx, edx
xor ebx, edx
mov esi, edx
or edx, esi
and edi, esi
mov esi, ebx
sub esi, edx
rol edi, 0x15
xor ebx, esi
add edi, edx
jmp 0x4776a0
push 0xabe29701
xor edx, esi
sub edi, edx
sub edx, 0xaef42be2
or ebx, edx
dec esi
shr esi, 0x10
xor edx, ebx
jmp 0x477647
pop ecx
add ebx, esi
add esi, ebx
add edx, edi
xchg edi, ebx
or edx, esi
xchg ebx, edx
mov esi, edx
ror edx, 4
jmp 0x4772f6
push 0xabe42556
not esi
bswap edi
xchg esi, edi
add edi, esi
xchg edi, esi
jmp 0x477b77
push 0xabe5ba3a
shl edi, 0x1e
xor ebx, edx
not edi
and edi, 0xaf05c418
mov edx, edi
or ebx, 0xaf064811
add edx, esi
not esi
and ebx, edi
bswap edx
or ebx, esi
or esi, 0xaf07ebfc
add edx, 0xaf082fdd
mov ebx, 0xaf0872b0
jmp 0x47647d
call ecx
inc ebx
add edx, ebx
xchg edi, edx
neg ebx
ror edi, 0x1f
jmp 0x477869
call ecx
ror ebx, 0xe
sub ebx, edx
and esi, ebx
mov esi, 0xaf1495d5
sub edx, edi
and edx, esi
ror ebx, 0xe
and edi, edx
inc edx
and edi, ebx
and edx, 0xaf1678c8
jmp 0x477bba
push 0xabee62b5
or edi, 0xaf1e335b
add edx, ebx
shr edx, 3
shr edi, 0xc
sub edi, ebx
add esi, ebx
xchg ebx, edx
or ebx, 0xaf201612
bswap ebx
sub edx, 0xaf20a0e0
and ebx, edi
not edx
rol ebx, 0x17
and esi, edx
jmp 0x476343
push 0xabf3699f
bswap ebx
mov esi, edx
mov ebx, esi
mov edi, edx
mov esi, edi
and ebx, edi
mov edi, esi
or edx, edi
xchg edi, esi
and edi, esi
jmp 0x4777db
pop ecx
sub ebx, 0xaf2ba940
add edi, ebx
inc esi
xor edi, 0xaf2c8300
neg edx
shl ebx, 0x16
mov esi, edx
inc edi
jmp 0x476dbe
push 0x73f48
add ebx, edx
mov ebx, edi
or ebx, edx
sub edi, ebx
sub ebx, esi
dec ebx
and esi, ebx
and edx, 0xaf2fc5a8
add esi, ebx
sub esi, ebx
or ebx, edi
jmp 0x477d7a
call fcn.0047551e
add edx, edi
sub edi, edx
sub ebx, esi
mov edx, 0xaf3a3a5c
shr edi, 6
dec edx
or edi, ebx
jmp 0x475ffa
push 0xabec1ac9
xor edi, ebx
mov edi, ebx
or edx, 0xaf3f9d63
sub ebx, edi
jmp 0x477ebf
call ecx
and esi, edi
xor ebx, edx
or edi, edx
or edx, 0xaf43942b
xchg edx, esi
mov esi, ebx
sub esi, edx
xor ebx, edi
and esi, edi
xchg edi, edx
add ebx, edi
not ebx
xor edx, 0xaf45fef0
jmp 0x47754a
pop ecx
or edi, esi
xchg edi, esi
inc edi
rol edx, 0x18
mov edi, edx
neg edi
and edx, esi
xchg ebx, edi
and ebx, edx
add edi, 0xaf4bab94
jmp 0x4776dd
call ecx
xor esi, edx
or ebx, edx
not edx
sub edx, ebx
xchg edx, ebx
or edx, edi
or esi, edx
or esi, edi
dec ebx
dec edx
and edx, ebx
sub edx, esi
jmp 0x47594c
push 0xabf11ef1
xor edx, 0xaf55d5e8
add esi, 0xaf561872
xor ebx, edi
sub ebx, edx
sub edx, ebx
add esi, edi
dec edi
xor esi, edx
and esi, edx
jmp 0x476d99
push 0xabee9d2e
xchg edx, esi
mov ebx, edx
and esi, 0xaf5bd64d
shl edi, 0x1d
sub edi, ebx
xchg esi, edi
xor edx, 0xaf5db03e
mov esi, ebx
sub edx, esi
jmp 0x475923
pop ecx
add ebx, 0xaf612f85
ror edx, 9
mov edx, 0xaf61b878
add edx, ebx
add edx, ebx
xor ebx, edx
or esi, 0xaf62d15c
dec esi
jmp 0x477f4e
mov ecx, 0x123b2f04
xchg edx, esi
add edi, 0xaf76636d
rol edx, 5
sub edi, ebx
add edx, 0xaf772f6d
jmp 0x476564
push 0xabde8f74
sub edi, ebx
and edi, 0xaf84bdb6
mov edi, edx
neg edx
xchg edi, ebx
xchg edx, edi
add edx, esi
bswap ebx
jmp 0x47704f
call fcn.0047551e
neg ebx
xchg edx, esi
xchg ebx, edi
rol esi, 0x1c
xchg ebx, edi
dec ebx
xchg esi, ebx
and edx, edi
rol edi, 0xa
and esi, edx
xchg ebx, edx
jmp 0x477df7
push 0xabf070fc
and esi, 0xaf916439
sub esi, 0xaf91a8d3
add edi, ebx
or esi, ebx
mov edi, edx
mov edi, esi
add esi, edi
add esi, edi
xchg edi, edx
or edi, 0xaf93c608
xchg ebx, edx
and edx, ebx
xor ebx, edi
add esi, edi
xor esi, 0xaf951534
bswap edi
jmp 0x47554a
mov ecx, 0x4132136a
add edx, esi
sub esi, edi
or edx, ebx
bswap esi
and ebx, 0xaf96cbed
add edx, edi
mov ebx, 0xaf975fcd
jmp 0x477846
pop ecx
mov ebx, esi
shl esi, 3
or esi, edx
sub ebx, esi
mov edx, ebx
mov edx, ebx
sub edx, 0xaf995b2a
jmp 0x47613c
call fcn.0047551e
ror edx, 4
dec ebx
mov edx, edi
and ebx, edx
mov edi, esi
add edx, esi
bswap edi
jmp 0x475f8e
push 0xabedef44
add edx, edi
sub edx, esi
not esi
shr esi, 0x1f
shr edx, 0xd
and ebx, 0xafa4a65d
rol esi, 0xf
mov edi, edx
jmp 0x4770d7
push 0xabe99a17
xor esi, 0xafb1ef9d
add edx, edi
add edi, esi
or esi, edx
and edi, edx
sub ebx, edi
rol ebx, 9
and edx, edi
jmp 0x475986
push esp
add edx, edi
xchg edx, esi
and edx, 0xafb9d51f
nop
sub esi, 0xafba6f05
or esi, 0xafbab20d
sub esi, edx
jmp 0x476d6b
push 0xabe8eacd
or edi, edx
dec ebx
xor esi, ebx
sub esi, edi
ror edx, 0x18
and edx, 0xafc05a53
xor edi, esi
add ebx, edi
jmp 0x475d84
call fcn.0047551e
xchg edx, edi
mov esi, 0xafd15b3c
sub edx, 0xafd1ae27
sub edi, 0xafd1f294
jmp 0x47791c
mov ecx, 0x6e447c44
shl edi, 0x11
and edx, esi
add esi, edx
add esi, 0xafe9e69f
add ebx, edi
or ebx, edx
ror edx, 0x18
neg edx
and ebx, esi
add edx, edi
add ebx, esi
mov ebx, esi
jmp 0x477ef8
pop ecx
and esi, 0xb00fbe31
xchg edx, esi
mov esi, ebx
add ebx, esi
or esi, edx
or edi, 0xb0110b2c
ror edi, 0x1c
xor ebx, 0xb011a2bf
jmp 0x477f1e
pop ecx
xchg edi, ebx
add edx, 0xb015a6a3
or esi, edi
inc edx
dec edx
xor edx, edi
xchg edx, edi
jmp 0x477a56
call fcn.0047551e
inc ebx
nop
or esi, 0xb0285e26
ror edx, 2
jmp 0x475d64
push 0xabda2fb1
inc ebx
and ebx, 0xb02f75db
mov edi, 0xb02fb8e8
mov edx, ebx
xchg ebx, esi
mov edx, ebx
mov ebx, edi
and edx, esi
sub ebx, 0xb0315092
dec edx
add ebx, edi
ror edi, 0x1d
jmp 0x475e0b
push 0x40
dec edx
add esi, edx
rol ebx, 0x13
xor ebx, 0xb03d11da
and edx, esi
sub ebx, esi
and esi, 0xb03dd6de
neg ebx
add edi, 0xb03e718b
add edx, 0xb03eb400
jmp 0x476159
push 0xabf15950
or edi, edx
xchg esi, edi
rol edi, 0x1f
shr esi, 0x10
inc edi
xor edi, esi
xor edi, 0xb040cb3b
xchg edi, ebx
add esi, 0xb041502f
jmp 0x475a1a
push 0xabe0fedf
or esi, edx
shl ebx, 2
xor edi, esi
add ebx, 0xb0428ddb
and ebx, 0xb042d0bb
jmp 0x47732c
pop ecx
sub esi, ebx
add edx, ebx
xchg ebx, edx
sub edi, ebx
and edx, esi
sub ebx, edi
and ebx, edx
shl edi, 0x14
xchg esi, edx
jmp 0x4779b9
pop ecx
add ebx, 0xb054b03a
sub edx, edi
nop
and esi, 0xb0558cc4
xchg edx, edi
jmp 0x475979
pop ecx
xor edx, ebx
neg edx
and ebx, esi
xor esi, edx
or edi, ebx
xor esi, edx
xor edi, esi
or edi, 0xb058183f
bswap esi
xchg ebx, edx
and esi, edi
sub esi, edx
jmp 0x4771df
pop ecx
and esi, edi
bswap edi
mov esi, 0xb0615dd0
xchg esi, edi
or edi, 0xb061e714
or edx, ebx
sub edi, 0xb0626dd0
sub edi, esi
jmp 0x4756dc
pop ecx
and ebx, edx
dec esi
xchg ebx, esi
xor esi, ebx
and ebx, 0xb0642141
add esi, ebx
xchg ebx, esi
add ebx, esi
sub ebx, esi
neg edx
xor esi, edi
jmp 0x47661b
push 0xabdd0439
and esi, edi
add esi, edi
and edi, esi
or ebx, esi
and ebx, esi
xor edx, esi
xor esi, edx
inc edi
shr edx, 9
xor esi, edx
jmp 0x477407
push 0xabdec7a7
mov edx, ebx
mov esi, ebx
mov ebx, edx
add edx, esi
neg esi
xor esi, edx
jmp 0x477ce9
push 0xabee29a8
neg edx
and edi, esi
sub ebx, edx
and ebx, edi
xchg edx, esi
shl edx, 0x1e
xor esi, ebx
sub edi, ebx
jmp 0x476089
pop ecx
xchg edx, ebx
sub edi, 0xb091c083
sub edx, ebx
and ebx, edx
inc esi
xor esi, 0xb092dfb9
xor edx, edi
add ebx, esi
and ebx, 0xb093a79d
jmp 0x477bdd
pop ecx
and esi, edx
xchg ebx, edi
or esi, 0xb0aac7e6
add edi, esi
jmp 0x4753f6
mov ecx, 0x123b2f04
xchg esi, edi
or edi, ebx
ror ebx, 0x1c
xor edx, 0xb0b11616
neg edi
add edi, esi
jmp 0x476653
pop ecx
xchg edx, ebx
sub esi, edx
add edi, edx
add esi, edi
and edx, 0xb0c19ee6
or esi, edi
mov ebx, edx
sub edx, edi
mov ebx, 0xb0c2abe0
jmp 0x4766b9
mov ecx, 0x123b2f04
xor ebx, 0xb0c51cbd
mov edi, esi
add ebx, edi
sub ebx, 0xb0c5e200
add esi, edi
ror ebx, 0x19
mov edi, edx
mov esi, edx
jmp 0x477c0c
push 0xabe25c25
sub esi, edx
sub edx, esi
xor ebx, edi
or esi, 0xb0d03849
rol ebx, 2
and esi, ebx
xchg esi, edx
sub esi, edi
mov edx, 0xb0d19aa5
sub esi, ebx
and esi, 0xb0d22271
rol edx, 4
and esi, edx
and ebx, 0xb0d2ee3e
dec esi
mov ebx, edx
jmp 0x475e68
pop ecx
dec esi
xor esi, 0xb0de4a8e
dec edx
xor edi, ebx
and esi, 0xb0df1854
mov esi, 0xb0df5fb8
not esi
and esi, edi
xchg edi, edx
add esi, edx
jmp 0x476f78
call fcn.0047551e
dec edx
and esi, 0xb0e367fe
or edx, edi
ror ebx, 0xc
mov esi, edx
and ebx, esi
or ebx, edx
xor edx, edi
and edx, ebx
ror ebx, 0x12
jmp 0x47624c
pop ecx
ror edi, 0x1d
xchg ebx, esi
add esi, edi
sub edx, 0xb0ef701c
mov ebx, 0xb0efb6c5
mov edx, esi
xor edi, ebx
sub edi, ebx
or edx, edi
inc edx
xor ebx, esi
jmp 0x476eec
mov ecx, 0x6e447c44
shl edi, 3
and edx, ebx
xor esi, edx
xchg edx, ebx
neg ebx
neg esi
or edi, 0xb0f3546e
inc edx
mov edx, esi
or edx, edi
add esi, edx
or esi, edx
add edi, ebx
xchg edi, esi
rol edx, 2
jmp 0x477590
push 0xabda9bab
xchg ebx, esi
add edx, ebx
jmp 0x477aeb
mov ecx, 0x123b2f04
xchg edi, ebx
ror edx, 2
shl esi, 0xa
ror edx, 0xb
bswap edx
add edx, edi
add edi, esi
xor ebx, edx
and esi, edi
or edx, esi
sub edi, esi
xor ebx, 0xb0fc4f01
sub ebx, 0xb0fc9223
jmp 0x4761cf
pop ecx
ror edx, 0xb
sub ebx, 0xb0fd3d0f
sub edx, ebx
add ebx, edi
xchg edx, esi
or ebx, 0xb0fe579c
jmp 0x475f3b
pop ecx
sub edi, 0xb10538a4
mov edx, esi
sub esi, edx
shl esi, 0x1a
add esi, 0xb10647d2
xor edx, 0xb1069bf9
add edx, esi
mov esi, edx
or edx, edi
mov ebx, 0xb107a54a
add edx, esi
jmp 0x477624
push 0xabf3a243
or ebx, edi
xor esi, edi
sub edi, edx
and ebx, esi
neg esi
and esi, ebx
mov esi, ebx
not edi
and edi, ebx
rol edi, 9
sub esi, edx
xor esi, edi
jmp fcn.004754ae
pop ecx
xchg ebx, esi
or ebx, esi
xchg ebx, edi
xor esi, 0xb1179120
xor edx, esi
shl edi, 0x17
xchg ebx, esi
sub edx, ebx
xor esi, edx
shr ebx, 0xb
jmp 0x47663a
call fcn.0047551e
sub esi, edx
mov ebx, edi
xor ebx, edx
or edx, 0xb11a6ca3
shr edi, 0x10
xor edx, ebx
and esi, edi
xor edi, esi
not edi
mov edi, edx
jmp 0x477e8a
pop ecx
and edx, esi
sub edx, esi
and edx, esi
rol esi, 8
and edx, 0xb11d7ff9
sub edx, 0xb11dc513
shr edx, 7
jmp 0x477d2d
call ecx
shr esi, 0x10
xchg ebx, edx
mov edi, edx
add ebx, 0xb12beb62
and ebx, 0xb12c2fec
mov ebx, edi
shr edx, 6
add esi, edx
add esi, edx
jmp 0x47542e
pop ecx
bswap ebx
or edx, esi
xor esi, edx
jmp 0x477826
pop ecx
and ebx, esi
and edi, edx
xchg edx, ebx
neg esi
xchg edi, ebx
mov esi, edx
rol edx, 0x1f
and ebx, esi
or esi, edi
jmp 0x476385
push 0xabd81b32
dec esi
xchg esi, edi
mov esi, ebx
xor esi, 0xb146b780
or edx, edi
sub edx, ebx
neg esi
and edx, esi
or esi, 0xb1495589
xor esi, edi
and ebx, esi
add esi, edi
bswap esi
and edi, edx
neg edx
mov edi, esi
jmp 0x475d4c
pop ecx
dec edi
mov edx, ebx
or ebx, edi
jmp 0x4773cb
push 0xabd9c168
xchg ebx, edx
xor esi, edi
or edx, 0xb154fa62
ror esi, 0x16
xor ebx, esi
shl esi, 0xd
and ebx, 0xb1561c33
mov ebx, edx
shl edi, 0xb
jmp 0x475695
call fcn.0047551e
dec ebx
bswap esi
xchg esi, edx
or edx, esi
add esi, edx
mov edi, ebx
mov esi, edx
or ebx, edx
add edx, esi
mov esi, 0xb159696d
xor edx, 0xb159ac33
add esi, edi
jmp 0x475c2e
mov ecx, 0x123b2f04
add ebx, edx
mov edi, 0xb15a8bd5
mov edx, ebx
mov edx, 0xb15b2195
jmp 0x477b2b
call fcn.0047551e
xchg ebx, edi
add edx, 0xb15e4e14
and edx, edi
rol esi, 0x19
mov esi, edx
jmp 0x475d21
push 0xabe45c64
and esi, 0xb1636770
add esi, 0xb163ab8a
or edx, ebx
or esi, 0xb16441ab
sub edx, ebx
jmp 0x4758f5
pop ecx
or edi, ebx
mov ebx, 0xb16864c1
dec edi
shr edx, 0x1c
mov esi, ebx
inc edx
add ebx, edi
or esi, 0xb16a0a99
dec edx
sub ebx, 0xb16a97ad
jmp 0x476ed5
pop ecx
not edx
xor ebx, edi
and edi, 0xb16b7f63
or edx, esi
add edi, edx
or ebx, esi
and esi, 0xb16c9703
inc edx
and ebx, esi
jmp 0x475792
call fcn.0047551e
or edi, 0xb16e8165
add esi, ebx
sub ebx, edi
mov edx, edi
not ebx
and esi, ebx
inc ebx
or edx, edi
ror ebx, 0x1f
and edx, esi
xor esi, edx
xor esi, 0xb17172bc
not ebx
jmp 0x477c7d
call ecx
sub ebx, 0xb1783a23
sub edx, ebx
or esi, ebx
xor edi, 0xb179cec1
not edi
shl edx, 0x18
xor edi, esi
ror ebx, 0xb
xchg ebx, esi
add edx, esi
add edx, 0xb17c48f7
add edi, esi
add edx, esi
xor edi, edx
jmp 0x475e84
push 0xabdefe8e
xor edi, esi
sub edi, esi
shr edi, 9
or ebx, 0xb1859397
and ebx, 0xb185d641
shl esi, 0x1a
xor esi, ebx
shl esi, 1
and edi, edx
add edx, esi
xor edi, 0xb1888a49
mov edi, 0xb1890abc
add edx, esi
xor edi, 0xb189db81
mov ebx, edi
and ebx, 0xb18a6f13
jmp 0x477d97
push 0xabe2250b
xor edx, edi
sub edx, ebx
rol ebx, 4
or esi, 0xb18c94fc
xor ebx, 0xb18d322f
bswap ebx
add esi, ebx
xchg edx, esi
jmp 0x477493
push 0x401400
dec edx
shl edi, 5
xor edx, esi
dec edx
add edx, 0xb198155a
mov edx, ebx
xor ebx, edx
and esi, edi
jmp 0x475415
push 0xabdf3911
or edx, edi
and edx, esi
not esi
sub edx, edi
add ebx, 0xb19b43ce
xchg esi, ebx
mov ebx, 0xb19c11ce
shr edx, 0xf
sub esi, 0xb19c9d79
xchg ebx, esi
xchg edx, esi
bswap edi
jmp 0x475df4
call fcn.0047551e
mov esi, edi
bswap edx
xor esi, ebx
xor esi, edx
add edx, 0xb1a0a6b2
xchg esi, ebx
jmp 0x477de9
call ecx
xchg ebx, edx
add edi, ebx
rol edi, 0x1d
jmp 0x4779ad
call ecx
sub esi, edi
inc edx
or ebx, 0xb1a3ca58
xor esi, edi
mov esi, 0xb1a47c7d
or edx, esi
neg edi
jmp 0x476f99
push esp
sub edx, edi
shr ebx, 0x18
or esi, edx
xor edx, ebx
dec ebx
add ebx, edi
inc ebx
jmp 0x4767ef
push 0xabe9605d
and edi, esi
add esi, edx
mov ebx, 0xb1b3b0ff
add edi, 0xb1b3f77a
xchg esi, ebx
bswap ebx
xor edx, esi
shl edi, 0x13
jmp 0x47678e
push 0xabec54d6
neg edx
xor ebx, edx
bswap edi
ror edx, 3
sub edi, esi
xor ebx, esi
sub edi, edx
xchg edx, ebx
add edi, edx
jmp 0x4769fd
call fcn.0047551e
xchg edi, ebx
xchg esi, edi
not edx
shr edi, 0x16
xchg edi, esi
mov ebx, 0xb1bd50be
and esi, ebx
or ebx, edx
and ebx, esi
xor edi, 0xb1bece9a
jmp 0x475359
pop ecx
and ebx, 0xb1bf7656
xchg edx, ebx
dec edx
mov edi, esi
inc edi
mov edi, edx
and ebx, edi
mov edx, esi
inc edi
sub edi, 0xb1c26666
mov ebx, 0xb1c2e007
or edx, edi
xor edi, ebx
and edx, edi
ror edx, 0x14
rol edi, 0x1c
jmp 0x4765e1
pop ecx
and ebx, edx
and esi, ebx
and ebx, 0xb1c5e232
add edi, ebx
and ebx, 0xb1c66802
xchg ebx, edi
jmp 0x4760d3