Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetCommandLineA
cmp eax, 0xffffff17
jne 0x401084
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xfffffeeb
jne 0x40111c
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
ret
call sub.user32.dll_GetCursor
cmp eax, 0xfffffee1
jne 0x40118c
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xffffff1f
jne 0x401206
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_NtIsSystemResumeAutomatic
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
ret
jmp 0x475917
add ecx, edx
not edx
jmp 0x477a71
call esi
sub edx, 0x2643623
mov edi, 0x26476f7
sub ecx, ebx
xor edx, ebx
bswap edx
shl ecx, 0x13
sub ebx, ecx
neg ebx
jmp 0x478294
call fcn.004795e0
dec edi
dec edi
sub edx, 0x27d0301
shr edi, 0x11
mov edx, ecx
neg ecx
xchg edx, ebx
neg edi
add ecx, edx
xchg edx, edi
jmp 0x475928
pop esi
sub edi, 0x286f15d
xchg ebx, edi
nop
ror edi, 8
add ecx, 0x287e0c9
xchg ebx, edi
xor ebx, edi
inc edx
xchg edx, ebx
inc edi
jmp 0x475eda
call fcn.004795e0
sub edi, 0x295528f
and edi, 0x2958e09
xor ebx, ecx
and ecx, ebx
and ebx, 0x2963c17
or edi, 0x2967849
and ebx, ecx
xchg edi, edx
mov ecx, edx
not edx
xor ebx, 0x297aa8f
add ecx, ebx
not ecx
or ecx, 0x2985abb
jmp 0x47783c
mov esi, 0x2809144b
xor ecx, 0x29e8071
xor ebx, edx
mov edi, ecx
xor ebx, edx
sub ecx, edx
mov edi, 0x29fa52d
xchg ecx, ebx
and edi, edx
jmp 0x475a5e
pop esi
add edi, ecx
ror ecx, 0x12
shr edx, 4
mov ecx, 0x2a4900f
shl ebx, 0x10
xor ebx, ecx
xchg edx, edi
inc edx
or edx, ecx
or edx, 0x2a5ff13
or ecx, 0x2a63a85
and ecx, ebx
or ebx, edx
xor ebx, edi
jmp 0x4794b0
call esi
mov edx, 0x2b592f3
shl ecx, 2
neg ebx
nop
shr edx, 0x1c
xor ecx, 0x2b6bcd3
mov ebx, edx
neg ecx
xchg ecx, edx
xor edi, ecx
jmp 0x4763bc
pop esi
xor edx, edi
sub ecx, ebx
and ebx, 0x2b91ced
ror ebx, 0x14
xchg ebx, edi
or edx, 0x2b9cdb9
and edx, 0x2ba0881
rol ecx, 0x11
dec edx
xor ecx, ebx
shl edx, 3
and ebx, ecx
rol ecx, 0x1f
or edi, ecx
jmp 0x4769c6
pop esi
or ecx, ebx
xor ebx, 0x2bc41f5
or ebx, 0x2bc8cfb
and edi, ecx
add ebx, ecx
mov edi, ebx
bswap edi
add ecx, 0x2bdac55
or ebx, 0x2bde7eb
mov ecx, 0x2be226b
jmp fcn.00478f0e
mov esi, 0x2809144b
inc edx
or edi, ebx
sub ecx, edx
mov edx, ebx
sub edi, ebx
and ecx, edi
shr ebx, 0x16
shr ecx, 9
dec ebx
mov ebx, ecx
and edx, edi
dec edi
jmp 0x477e61
push 0x1963703
and edx, ebx
mov edx, 0x2cc3549
xchg ecx, edx
shr ecx, 5
ror edx, 0xf
shl ecx, 7
ror ebx, 0x15
shl edi, 0x1a
or ebx, 0x2cde459
xchg ebx, edx
jmp 0x478089
pop esi
inc edi
add ebx, 0x2ceabfb
and edi, ebx
xor edx, ebx
xor edx, ecx
xchg ebx, ecx
xchg edx, ebx
xchg edx, edi
xor edx, ecx
ror edi, 0x10
jmp 0x4770dd
push 0x1a1cf8f
xchg ebx, ecx
or ecx, edx
bswap edx
xor ecx, edx
sub edi, edx
xor edx, 0x2d2a99b
add ebx, 0x2d2e4e1
or ecx, ebx
add ebx, edx
and ebx, ecx
or edx, ebx
mov edi, ebx
and ecx, edx
sub ecx, 0x2d48187
shr edi, 0x17
rol edx, 0xa
jmp 0x4772fe
call esi
add ecx, ebx
dec edi
and edx, edi
or edx, ebx
xor ecx, ebx
xchg ecx, edi
mov ecx, edx
neg edx
rol ebx, 0x14
xor edi, edx
or edx, ebx
neg ebx
jmp 0x47962d
push 0x74517
or edx, 0x2eb550d
mov ebx, edx
xor edx, edi
ror edx, 0x1d
dec ebx
add edx, ecx
xchg edi, edx
and edx, edi
sub ebx, edx
xchg edi, edx
and ebx, edi
not edi
add edi, 0x2ee208f
mov ebx, edi
jmp 0x47960c
pop esi
inc ecx
add edi, 0x2f9c5f9
add ebx, edx
and ebx, ecx
xor edi, ecx
mov ecx, edi
bswap edx
xor ebx, edi
jmp 0x476f00
mov esi, 0x2809144b
xchg edx, edi
or edx, ecx
mov ebx, ecx
neg ebx
or ebx, edi
add ebx, 0x300b15d
xchg edx, ebx
and edi, ebx
xor ebx, ecx
xchg ecx, edx
sub edi, ebx
sub edx, 0x3020cc9
jmp 0x4773d1
pop esi
and edi, 0x3108de1
xor ecx, edi
mov ebx, edi
xchg ecx, edx
ror ecx, 9
and ecx, edx
sub ecx, edi
not ebx
sub ebx, edi
neg edi
jmp 0x477671
call esi
xor ebx, ecx
shr ecx, 0x13
sub ebx, ecx
rol edi, 8
mov edi, ecx
add edi, ebx
mov edi, ecx
or ebx, 0x31824d9
nop
dec ecx
rol ebx, 0x14
mov ecx, edx
add ecx, ebx
xchg edx, ecx
jmp 0x477545
pop esi
inc ecx
bswap edi
add edi, edx
not ebx
and edx, ecx
or ecx, edi
jmp 0x4761fd
pop esi
mov ebx, 0x3334c91
xor edx, edi
add ecx, edx
mov edx, edi
add edx, 0x3344321
mov ebx, edx
or edx, ebx
sub edx, ebx
and edx, ecx
dec edx
and edi, ecx
nop
jmp 0x477732
push 0x1ab4f3f
or edi, ecx
and edx, edi
add edi, edx
ror edx, 0x1c
sub ecx, ebx
mov ecx, ebx
inc edx
bswap ebx
add edx, ebx
add ebx, ecx
shl edx, 0x17
not edi
mov ecx, 0x33dedf5
mov ebx, edx
dec edx
xchg edi, ecx
jmp 0x477014
pop esi
or ecx, edx
xchg ebx, ecx
or edi, 0x3415b6f
mov ecx, edi
not ecx
add ecx, ebx
sub edx, edi
or edx, ebx
jmp 0x476372
call fcn.004795e0
ror ecx, 0x13
ror ebx, 0x18
xor ecx, ebx
and ebx, 0x3590bf1
inc ecx
dec ecx
and ebx, edi
and edx, ecx
xor ecx, edx
add edi, ebx
jmp 0x478b8e
pop esi
shl edx, 0x12
mov ecx, 0x35b06ed
xor ecx, edi
sub edx, ebx
and ebx, edi
xchg ecx, edx
jmp 0x476d2a
push 0x19ec7d3
sub edi, ebx
and edi, 0x38be147
inc ecx
mov ebx, edi
dec ecx
and ebx, edi
add ecx, ebx
sub edi, 0x38d7417
and edi, ecx
not edi
jmp 0x478b6e
call esi
mov edi, 0x38e4e41
mov ecx, 0x38e8953
shl ecx, 0x10
mov ebx, edi
add edi, ecx
bswap edi
add edx, ecx
bswap ebx
sub ecx, edi
add edx, 0x3906bc9
shr edi, 0x17
add edx, ebx
jmp 0x4770b9
push 0x192ed8b
inc edi
and ecx, edi
xor edx, 0x39abd6f
bswap ecx
xchg ecx, edx
and ecx, ebx
add ebx, 0x39cf429
or ebx, edi
xor edi, ecx
xor edx, ebx
or ecx, edi
xor ecx, edi
and edi, ebx
and edi, 0x39e893d
jmp 0x476e10
push 0x1a6cccb
mov ecx, edx
inc ecx
xor ebx, ecx
or edx, ebx
or ecx, 0x3a3d86d
nop
and edi, ecx
sub edi, edx
sub edx, ebx
xor edi, 0x3a50c4b
bswap edi
add edi, ecx
jmp 0x478922
push 0x1a2e82d
rol edi, 8
mov ecx, 0x3b955ef
and edx, edi
sub edi, edx
or ecx, ebx
sub ecx, ebx
bswap edx
and ecx, ebx
jmp 0x476e3e
push 0x1a7a409
xchg edx, ecx
sub ecx, 0x3c391ab
add edx, ebx
xor edi, 0x3c415bf
or ebx, 0x3c45089
mov edx, edi
sub edx, 0x3c4c4ed
or edi, 0x3c50071
xor ebx, edi
and ecx, ebx
jmp 0x477c2f
push 0x19262bd
or edi, ebx
and edi, 0x3c5ff93
xchg edx, edi
sub edx, 0x3c6767d
and edi, ebx
dec ecx
jmp 0x477813
push 0x19cd567
xchg edi, edx
inc ecx
ror edx, 0x12
sub ebx, ecx
xor ecx, 0x3cba7b9
and edx, ebx
or edi, edx
and edi, edx
jmp 0x47824a
mov esi, 0x4132136a
dec ebx
mov ecx, ebx
xor ebx, ecx
xchg edx, ecx
shl ecx, 0x12
add ebx, 0x3dcefb7
jmp 0x477510
push 0x18feacd
or ecx, 0x3e63553
xor edi, edx
nop
add ecx, edi
jmp 0x478a46
push 0x19333d3
mov edi, ecx
dec ecx
xor edi, ecx
mov ecx, ebx
xchg edx, ecx
and ecx, ebx
xchg ebx, edi
xchg edx, edi
xor ecx, 0x3ee4f53
bswap ecx
xor edi, ebx
mov ecx, edx
mov ecx, edi
rol edi, 0x15
or ebx, edi
neg ebx
jmp 0x4778ac
mov esi, 0x2809144b
and edx, ecx
xchg ecx, edx
add ebx, edx
xchg ecx, edx
and ecx, ebx
xchg ecx, ebx
not ebx
inc edx
xchg edi, ebx
not edi
xchg edi, ecx
add ecx, ebx
add edi, edx
sub ecx, ebx
jmp 0x478eec
push 0x1a9e67f
sub ecx, edi
inc edx
and ebx, edx
neg edx
jmp 0x475c16
pop esi
and ecx, edi
add ebx, edx
shl ecx, 9
and ecx, edi
and edx, edi
shr edx, 0x16
xchg ecx, edi
xor edi, 0x3ff1389
xor edx, ebx
or edx, ecx
xor edi, edx
sub edx, ebx
shl edx, 0xe
mov edx, 0x40074df
jmp 0x4780a9
pop esi
or ebx, edi
neg edx
or edx, 0x404d5e5
and edi, ecx
inc edx
sub edx, ecx
or edx, ebx
rol edx, 0x1d
add edx, ecx
xchg ecx, ebx
or edi, ecx
rol ecx, 0x1f
jmp 0x4774c6
push 0x1ab9709
or ebx, ecx
add ebx, 0x4116d45
add edi, ecx
shr ebx, 0x1b
not ecx
sub edx, ebx
xor edi, 0x412a0c5
mov edi, 0x412db19
xchg edx, ecx
or edx, 0x413509f
or edx, edi
mov edx, ebx
jmp 0x47954e
mov esi, 0x2809144b
sub edx, ebx
add edx, ebx
inc edi
or edx, ebx
shr ecx, 8
sub ebx, ecx
mov ebx, edi
sub edx, ecx
sub edx, edi
or edi, 0x4162e3b
sub edi, edx
xchg edi, edx
and edi, edx
and edi, 0x4171681
jmp 0x479342
pop esi
and ebx, edx
neg edi
not edi
rol ecx, 0x1e
xchg ebx, ecx
xor ebx, 0x41d9c77
mov ecx, 0x41dd773
add edx, edi
rol ebx, 0x1c
shl ecx, 0x1c
jmp 0x478135
pop esi
and ecx, edx
xchg edx, ebx
mov ecx, edi
mov edx, ecx
sub ecx, 0x41fca95
rol edx, 0xe
shl edi, 0x19
mov ebx, ecx
jmp 0x476be4
pop esi
or edx, edi
bswap edx
inc edx
mov edx, ecx
ror ecx, 0x1b
shr edi, 0x10
mov ecx, ebx
add edx, ecx
or ecx, ebx
sub edi, ecx
jmp 0x4780de
call esi
shr ecx, 7
sub ebx, ecx
shl ecx, 0x13
add edx, ebx
xchg ebx, edi
add edi, ecx
or edi, 0x42633bb
ror edi, 0xd
bswap edi
xchg ebx, edx
jmp 0x47710e
pop esi
mov edi, ecx
or ebx, ecx
add edi, ebx
rol ecx, 0xa
sub ebx, 0x42b9163
sub edi, 0x42bccd1
and ebx, ecx
inc edi
and edi, 0x42cbc43
dec ecx
or ecx, edx
neg edx
or edx, 0x42daba3
xor ebx, edi
jmp 0x4775c6
push 0x1a2a2f7
and edx, edi
mov ebx, 0x44180ef
xor ecx, ebx
or edi, ebx
or edx, 0x4423a93
not ebx
xor ebx, 0x442cb27
or edx, ebx
neg edi
sub ebx, ecx
xor ecx, edi
sub ecx, ebx
jmp 0x476b1b
push 0x1a21609
shl edx, 0x15
shr ebx, 0x17
bswap ecx
neg edi
add ebx, edi
and edi, 0x4494775
jmp 0x478dce
pop esi
or edx, 0x449a079
bswap edx
or ecx, 0x44a1fdf
and edi, edx
nop
mov ebx, edx
xchg ecx, edx
sub ebx, edi
and edx, 0x44ba4f1
and edi, ebx
and ecx, ebx
rol ebx, 0x1d
jmp 0x475ebc
push 0x1a75bb1
bswap ecx
xor ecx, ebx
xor ecx, edx
sub edi, 0x44d7b59
not edi
ror ebx, 0xd
mov edi, ecx
xchg edi, edx
add ecx, edi
dec ecx
jmp 0x476bb2
push 0x198f56d
and edi, 0x4559ab1
xor ecx, edi
shr ebx, 0xc
bswap ebx
shl edi, 0x1d
mov edx, edi
neg edx
add edx, ecx
mov edx, ecx
mov ebx, edi
dec edx
add ecx, edi
jmp 0x4781aa
call fcn.004795e0
add edx, ecx
add ecx, edx
bswap ecx
not edx
add edi, ecx
bswap ecx
neg ecx
ror edi, 5
shl ecx, 4
inc edx
mov ecx, ebx
xchg edx, ebx
jmp 0x47689d
pop esi
sub ebx, edi
mov edi, ecx
and edi, ecx
neg edi
add edi, ebx
xor ebx, edx
jmp 0x4773aa
pop esi
mov edx, ebx
add edx, 0x4693a1d
and ebx, 0x469751b
xor edx, ebx
and edx, edi
xor ecx, edi
or edx, edi
or ebx, ecx
jmp 0x479224
pop esi
rol edx, 0xa
or edi, 0x46b3407
mov edx, ecx
mov edi, 0x46ba7d7
mov edx, ebx
mov ebx, edx
add ecx, 0x46c5343
inc edi
add edi, ecx
add edx, ebx
or ecx, edx
xor edx, ebx
xor ebx, edi
shr ebx, 0x19
neg edx
xchg edx, ecx
jmp 0x4774a8
pop esi
add ecx, edi
inc ecx
rol ecx, 0xd
bswap ebx
shl ecx, 0x1e
or ecx, edi
add ebx, edi
shl edi, 0xc
jmp 0x476879
call fcn.004795e0
xor ebx, ecx
not ebx
add edx, 0x4714671
not edx
mov edi, ecx
and ebx, edi
or edx, ecx
dec ecx
shl edx, 0xc
ror edx, 0x19
mov edx, 0x4733513
add ebx, 0x473700b
xchg ebx, edx
add ecx, ebx
sub edi, edx
inc edi
jmp 0x479029
pop esi
inc edx
inc ebx
xor ecx, edi
dec edi
ror ecx, 0x1e
sub edi, ecx
shl edx, 3
add ebx, ecx
and ecx, edx
and edx, 0x476d1e3
jmp 0x4774f8
pop esi
bswap edx
xor ebx, 0x47e6843
ror ebx, 0xc
ror ecx, 0x1c
add ecx, 0x47f1bc1
mov ecx, edi
and edi, ebx
mov ebx, edx
jmp 0x4792bd
pop esi
mov edx, ebx
xchg ebx, ecx
mov edx, ebx
xor edx, edi
bswap ebx
dec edi
sub ebx, edx
xor edi, ecx
mov edx, ecx
add edx, edi
jmp 0x4792ec
call esi
sub ecx, edi
xchg edx, edi
shl edi, 0x11
xor edi, 0x521943f
xor edi, 0x521d3c5
xor edi, edx
or edx, edi
mov ecx, 0x5228e4d
add ecx, edi
add ecx, 0x52318f1
xor ebx, edi
sub edx, ebx
mov edi, edx
mov ecx, ebx
xchg ecx, ebx
xor ecx, ebx
jmp 0x477179
pop esi
shl edx, 0x14
sub ecx, 0x52529fb
xchg edx, edi
xor edi, ebx
sub edx, ebx
or edi, edx
mov edx, edi
or edx, 0x526ace7
mov ebx, edx
and edx, 0x5272757
jmp 0x475dbe
push 0x192a813
xor ebx, edx
and edi, ebx
and edx, 0x5359591
mov ecx, edi
and ebx, 0x5361009
inc edx
shl edx, 8
mov edi, 0x536cdd9
neg edi
xchg edi, edx
jmp 0x476948
call esi
rol ecx, 0x16
dec edx
xor edi, 0x5388327
and ebx, edx
xchg edi, edx
xchg edx, ecx
and edx, 0x539900b
or edi, edx
xchg ecx, edx
shl edi, 0xa
jmp 0x478f4c
push 0x1937881
xchg ecx, ebx
not edx
xor edx, 0x540e155
neg ebx
rol ecx, 2
xchg edi, edx
not ecx
and edx, ecx
inc ecx
rol edx, 0x1c
xchg edx, ecx
neg ebx
jmp 0x47978e
push 0x18f601d
and ebx, edi
and edi, ecx
xor edx, edi
xor ebx, edx
sub edx, ebx
mov ecx, edx
not ebx
add ecx, 0x5e6ef33
jmp 0x478db5
push 0x18bba8d
xchg edi, ecx
and edx, ebx
and edi, ecx
add edi, ecx
xchg edx, ebx
or edi, ecx
xchg edi, ebx
and ecx, edi
sub ecx, edx
add ecx, 0x5e9803f
jmp 0x478b43
pop esi
neg edi
mov ebx, 0x5ee3acb
xchg ecx, ebx
xor ebx, edx
jmp 0x47731a
push 0x19f99a9
or edi, edx
sub edi, ecx
bswap ecx
inc edx
xchg edx, ecx
and ecx, edx
add ebx, edx
neg ecx
xor edx, edi
add ebx, 0x5fa0b4d
jmp 0x479109
mov esi, 0x2809144b
xchg ecx, edi
or ebx, 0x8120b7b
or edi, ebx
and edi, 0x812876d
add ecx, edx
or ebx, edx
xor ebx, edi
or edx, ecx
xchg edi, ebx
add edi, ebx
jmp 0x478455
push 0x40
xchg edx, ebx
mov edx, edi
and edx, 0x8293b69
add ebx, edx
or edx, edi
or edi, 0x829f477
not ecx
bswap edx
jmp 0x476009
call fcn.004795e0
mov edx, ebx
sub edx, ebx
xchg edi, edx
xor edx, 0x83cd7cf
and edx, 0x83d1685
mov edi, edx
ror ecx, 0x12
or ebx, ecx
neg edi
mov edi, 0x83e5f95
shr ecx, 0x1e
and ecx, edi
not edi
rol ebx, 0x1a
jmp 0x478867
pop esi
neg edi
xor ebx, edx
sub ebx, edx
add edx, ebx
shl edi, 0x1e
xchg ecx, edx
or ecx, ebx
or edi, edx
bswap edi
bswap ecx
rol edi, 0x13
sub edi, edx
xchg ecx, edi
xchg ecx, ebx
jmp 0x476e63
push 0x1967ded
and ecx, edi
and edx, ecx
and ecx, edx
mov ebx, edx
ror edx, 0x1c
mov ebx, edi
shr ebx, 0x16
mov ebx, edi
add ecx, edi
xor ebx, ecx
jmp 0x478a89
pop esi
and edi, 0x86a9fd9
not ebx
or ecx, edi
neg edx
jmp 0x477496
push 0x18d258d
nop
bswap ebx
mov ecx, edi
or edi, ebx
sub ecx, 0x86ed733
mov ebx, edi
or ebx, 0x86f6307
xor edx, 0x86fa365
jmp 0x476113
push 0x18ed595
neg edx
neg edi
sub edi, edx
and edi, ebx
xchg ebx, ecx
xchg edx, edi
and ecx, 0x874a1f7
dec edi
or edx, ecx
xchg edi, ecx
jmp 0x47931a
mov esi, 0x2809144b
dec edi
sub ebx, edi
and ebx, 0x87c89db
neg ecx
xor ebx, edi
xor ebx, ecx
add ecx, 0x87d881d
xor ebx, ecx
xor ecx, 0x87e1787
mov edx, ebx
and edx, 0x87e9303
xor edx, ecx
jmp 0x4765c0
push 0x1a568f7
and edi, ebx
dec edx
xor edi, 0x885681d
xor ebx, 0x885a84d
xor edx, ebx
sub edx, ebx
jmp 0x477046
push 0x19d1c1f
sub ebx, edi
mov edi, 0x8872079
xor edi, ebx
bswap edx
not edi
sub edi, edx
and ecx, edi
dec ecx
shl edx, 0xf
inc edi
xchg edi, edx
or edx, ecx
xor edx, edi
and edx, ebx
sub ebx, 0x88a2b05
and ebx, edi
jmp 0x479159
pop esi
dec ecx
or ecx, edi
xor ecx, edx
dec ecx
or ecx, 0x88e1dd1
ror edx, 0x15
mov edx, edi
and ecx, edx
not ecx
mov ebx, ecx
sub ebx, 0x88f893f
shr edx, 9
jmp 0x476428
mov esi, 0x2809144b
add edx, 0x8a760ef
or edi, ebx
sub edi, edx
xchg ebx, edi
sub ebx, ecx
dec edi
mov edx, ebx
add edi, ecx
xor edx, ecx
add edi, ebx
jmp 0x479460
call fcn.004795e0
xchg ecx, ebx
xor ecx, edx
sub edx, ecx
or ebx, ecx
rol edx, 0x16
sub ecx, ebx
and ebx, 0x8adb289
sub edx, edi
xor ecx, edi
xor ebx, ecx
mov ecx, 0x8ae9a21
xchg edx, edi
jmp 0x4776fb
call esi
add ebx, edi
xor edx, ecx
dec ecx
inc ecx
neg ecx
xchg edx, edi
dec ebx
mov edx, ebx
shr edi, 6
shr ecx, 8
jmp 0x475d8d
push 0x1ac2571
xor edi, ebx
bswap edi
ror edx, 7
or ebx, 0x8de770b
add ecx, ebx
shl edx, 0x1d
ror edi, 0x1a
shl edi, 1
jmp 0x47840a
call fcn.004795e0
add edi, ebx
add edi, ebx
shl ebx, 0x1d
and edx, edi
bswap edx
ror edx, 0x18
and edi, ebx
shr ebx, 7
add edx, ecx
mov edx, 0x8e4c66b
add edi, 0x8e50557
sub edx, edi
sub edi, ecx
mov edx, 0x8e5bfd7
jmp 0x479376
call esi
shr edx, 4
or ebx, ecx
or ebx, ecx
sub edi, ecx
add edi, ecx
dec ebx
xor edi, 0x8ea4b41
sub ebx, edx
jmp 0x478834
pop esi
add ecx, 0x8f3461d
not ecx
nop
ror ebx, 0x13
shr ecx, 0x16
and edx, ecx
xchg edx, ebx
not ecx
rol ebx, 0xb
or edi, ebx
jmp 0x475c5f
call esi
xchg ecx, ebx
add edi, edx
dec ecx
add ecx, edi
add ecx, edi
mov edx, 0x8f93cbb
shl edi, 2
and edi, ebx
mov edx, ebx
ror ebx, 0x11
jmp 0x4760c0
pop esi
sub ecx, edx
ror edx, 0x1b
not ecx
mov edx, ebx
or edx, edi
add edi, ecx
sub ecx, ebx
or edx, ecx
xor edi, 0x8fc9e2f
dec edi
jmp 0x476f66
push 0x1a713ab
xor edi, 0x9063cdd
bswap ecx
mov ebx, edi
dec ecx
jmp 0x477344
push 0x19f5465
and edx, ebx
or edi, ebx
xor ecx, edx
ror ebx, 3
jmp 0x477b45
mov esi, 0x2809144b
inc ecx
rol ecx, 0x16
add ecx, ebx
xor ecx, edx
mov edx, ecx
mov edx, ebx
sub edx, 0x919abd3
and edx, ecx
and ebx, edi
add edi, edx
jmp 0x478760
call esi
xchg edx, edi
add edi, 0x91ae6a9
shl ecx, 0x1a
mov ecx, edx
or edx, edi
shr ecx, 0xb
add ebx, 0x91c18a3
xor ecx, edi
jmp 0x478886
push 0x196c347
neg ebx
add ebx, ecx
dec edx
shl ebx, 8
add edx, edi
and ebx, edi
and edi, 0x91e119d
mov edi, 0x91e4cab
jmp 0x475e1e
call fcn.004795e0
shl ecx, 7
xchg edi, ebx
or ebx, 0x9256e3b
rol ecx, 0x1e
and edx, ebx
xchg edx, ebx
xchg ebx, edi
ror ebx, 0x10
and edx, 0x926de3d
or ebx, edi
add ebx, edx
or ecx, ebx
sub edi, ecx
and edi, edx
and ecx, ebx
or edi, ecx
jmp 0x476248
mov esi, 0x2809144b
xchg ecx, ebx
rol ebx, 4
ror edx, 3
sub edi, edx
and ebx, ecx
or ebx, ecx
sub ebx, 0x92b3593
xor ebx, 0x92b70e7
inc ebx
bswap edx
sub edx, ebx
and ebx, edi
jmp 0x4794f4
push 0x19f0d99
mov ecx, 0x92cafd3
and ebx, ecx
sub edi, ebx
and edx, 0x92d5d4f
mov ebx, edx
xor ebx, edi
sub edx, ebx
dec ecx
jmp 0x4789d9
call esi
sub ebx, edi
nop
bswap edi
and edi, edx
or ebx, 0x92fa13b
dec edi
shl ecx, 0xc
and edx, ebx
jmp 0x4765e2
call fcn.004795e0
mov edi, ebx
mov edi, edx
mov ecx, ebx
shl ebx, 7
ror edi, 0x1f
or edx, ecx
or edi, edx
xchg ecx, edx
ror ecx, 5
xor edi, edx
and ecx, edi
add ecx, ebx
jmp 0x4787b3
push esp
mov ebx, ecx
add ecx, edi
and edx, edi
mov ecx, ebx
dec edx
xchg edi, edx
jmp 0x477d6b
push 0x18fa52b
xor edi, edx
xchg edx, ebx
dec edx
xchg ecx, edi
ror edi, 0x1b
dec ecx
or ebx, edx
xchg edi, ecx
jmp 0x476dbb
push 0x1a25cf9
mov ecx, 0x957154f
sub ebx, ecx
add edi, edx
mov ebx, edx
xor ebx, ecx
mov edx, edi
not edi
or edi, edx
jmp 0x4772af
call fcn.004795e0
shr ebx, 0x19
xor ecx, edi
add ecx, edx
neg edx
xor ebx, 0x96af24b
dec ecx
and edx, edi
xor ecx, 0x96ba21d
jmp 0x478a68
pop esi
xor ebx, 0x97177e5
sub ecx, 0x971b28b
and edx, edi
and ecx, 0x972359b
and edi, edx
sub edi, ebx
jmp 0x476473
push esp
neg edx
shr edx, 0xd
or ebx, edx
sub ecx, edx
sub edi, 0x981fab7
shr ecx, 0xa
bswap edx
shr ebx, 0x1e
or ebx, edi
or ebx, 0x98337bd
mov edi, ebx
add edi, edx
jmp 0x478c64
pop esi
xchg ecx, edx
mov edx, ebx
mov edx, ebx
xchg edx, ecx
mov edi, edx
neg edx
mov ebx, edx
shl edx, 0x1f
neg edx
and edi, edx
shl edx, 6
or edx, 0x986c2cf
mov edx, ecx
add ecx, edi
sub ebx, ecx
and ecx, edi
jmp 0x477ac5
mov esi, 0x2809144b
not ebx
xor ebx, edx
and edx, ecx
mov ecx, 0x992f3e7
or ebx, edx
or ecx, 0x993701f
or edi, ecx
xor ecx, ebx
xchg edi, ecx
and edi, edx
jmp 0x478bda
mov esi, 0x2809144b
xchg ebx, edi
or ebx, edi
dec edi
inc ebx
xor edx, 0x9987f7f
mov edx, edi
and edx, 0x998f361
or edi, ecx
or ebx, edi
rol ebx, 4
and edi, ecx
shr ebx, 0x18
jmp 0x478afd
pop esi
sub edx, 0x9a53aad
add edx, ebx
and ebx, 0x9a5bd1f
add edi, 0x9a5f971
and edx, 0x9a63409
bswap edx
xchg edx, ebx
sub edi, ebx
jmp 0x47822d
pop esi
or ecx, edx
xchg edx, ebx
rol edx, 8
dec edx
shr edx, 0x1d
mov ecx, ebx
mov edi, ecx
mov ecx, edi
add ebx, edx
mov edi, edx
or ebx, 0x9b16c47
add edx, edi
add ecx, edi
xor ebx, 0x9b21ff3
inc ecx
rol edi, 0x13
jmp 0x477ff8
push 0x195f1d5
xor ebx, edx
and edi, ecx
mov edi, ecx
add edi, ebx
sub edx, ebx
or ebx, 0x9b4afab
add edi, ecx
add ebx, edi
mov ebx, edx
mov ecx, ebx
bswap edx
bswap edx
and ecx, ebx
add edi, 0x9b71525
jmp 0x475e92
push 0x18f1ad1
or edx, edi
and ebx, ecx
mov ecx, edx
mov ebx, 0x9b8335f
sub ecx, edi
or ecx, 0x9b8afcb
add edx, ecx
xor edx, ebx
xor edi, 0x9b96a79
dec ebx
jmp 0x477a53
call fcn.004795e0
and edi, ecx
and ecx, 0x9ba4157
xchg edx, ecx
add ebx, edx
and ebx, 0x9bafa91
xchg edx, ebx
sub ebx, ecx
xor edx, edi
shl edi, 0x17
neg edx
sub ebx, edx
or edx, 0x9bcc1d7
xor edx, ecx
shr ebx, 0x16
jmp 0x4785cc
call esi
or edx, ebx
xchg ebx, edi
and edx, ecx
sub edx, 0x9be5081
dec ebx
sub ecx, edi
or ecx, 0x9bf1e27
bswap ecx
jmp 0x479052
call fcn.004795e0
add ebx, edi
xor ecx, 0xa2ead51
xor edx, edi
shr edi, 0x1e
xor edi, ecx
add ebx, edx
sub ebx, 0xa307771
or edx, 0xa30b6ff
jmp 0x475d6a
pop esi
and ebx, edx
mov ebx, edi
and edx, 0xa34251f
sub ecx, 0xa3464c3
mov ebx, edx
shr ecx, 0x1b
jmp 0x475ae5
call fcn.004795e0
and edx, ebx
not edx
add edi, 0xa37d421
or edi, 0xa381387
bswap ecx
sub ecx, edx
mov edx, 0xa38d081
mov ecx, 0xa390f89
mov ebx, edi
mov edi, edx
shr ebx, 0x14
xor edx, 0xa3a173f
add ecx, edi
and ecx, ebx
mov ebx, ecx
shl edx, 6
jmp 0x477129
push 0x1abde15
sub ecx, 0xa3d85d7
or edi, ecx
mov ebx, 0xa3e0147
add edi, ebx
and edx, 0xa3f1993
add edi, ebx
add ecx, edx
sub edi, 0xa3fe4f9
mov edi, ecx
sub edi, ecx
jmp 0x47871e
push 0x401400
and ebx, ecx
and edx, ecx
add edi, ecx
sub edi, edx
or ebx, edi
xor edi, 0xa4cee05
or edx, ecx
inc edx
sub edx, ecx
sub edx, ebx
jmp 0x475fea
pop esi
xchg edx, edi
sub edx, 0xa4e7fbb
or edx, edi
and ecx, edi
bswap edi
and edi, ecx
shr edx, 6
not ecx
sub ebx, ecx
xchg ebx, edx
jmp 0x476c34
mov esi, 0x2809144b
sub ebx, ecx
shr edi, 0x15
ror edx, 0xf
and edx, ebx
inc edi
xchg ecx, edi
add edi, ecx
and edi, edx
add ecx, 0xa6b40c5
mov edi, edx
jmp 0x475ba3