Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xfffffeef
jne 0x40108e
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.shell32.dll_ExtractIconExA
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
ret
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xffffff21
jne 0x401112
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff02
jne 0x401187
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff1e
jne 0x401206
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
call sub.kernel32.dll_GetNumberOfConsoleInputEvents
call sub.ntdll.dll_RtlQueryProcessBackTraceInformation
ret
jmp 0x475641
mov esi, 0xd49269e2
jmp 0x4781bb
pop ecx
xor esi, edx
ror edi, 0xd
add edi, 0xd9c9d4c4
and edx, esi
xchg ebx, esi
xor ebx, edx
jmp 0x477d3e
mov ecx, 0x123b2f04
xchg edi, edx
or esi, edx
xchg edx, edi
xor edi, ebx
bswap edx
shl edx, 0x18
xchg ebx, edx
xchg edi, esi
xor ebx, esi
xchg esi, edx
xchg edx, edi
jmp 0x476396
push 0xd4b31115
add ebx, edx
and edx, edi
add edi, esi
bswap edx
inc edi
sub edi, 0xd9e99849
sub ebx, esi
jmp 0x477409
pop ecx
and edi, edx
sub ebx, 0xd9f3731b
bswap edx
and esi, ebx
add edi, ebx
neg edx
mov ebx, edi
xchg edi, esi
mov ebx, edx
bswap ebx
xor esi, ebx
jmp 0x47647e
push 0x40
and edx, edi
and ebx, edi
xor ebx, edi
shl ebx, 5
bswap edi
shl edi, 0xb
sub edx, esi
add edx, ebx
or esi, ebx
jmp 0x477194
mov ecx, 0x2774562b
inc ebx
and edi, edx
xchg edx, edi
inc esi
and edi, esi
jmp 0x475ec7
call ecx
sub ebx, 0xda07240e
xchg edi, esi
sub esi, edi
rol esi, 6
mov edi, edx
shl esi, 0x1a
sub esi, ebx
inc edx
and edx, edi
xor edx, esi
xchg edx, ebx
jmp 0x476810
call fcn.00476a89
shr edi, 0x18
mov edx, esi
mov edx, ebx
and edi, 0xda0a16c2
not edi
dec ebx
and ebx, esi
neg edx
rol edi, 6
jmp 0x477674
call ecx
neg ebx
rol edi, 4
xor edx, 0xda10910d
and ebx, 0xda10c4b3
jmp 0x476aed
push 0xd4adaaf6
xchg ebx, esi
xor ebx, esi
or esi, edi
add esi, edi
xor edx, esi
not esi
ror ebx, 0x10
xchg edx, ebx
or esi, ebx
jmp 0x476b65
push 0xd4ac50c8
sub esi, 0xda1776bb
and esi, 0xda17d4a6
or ebx, edx
neg edi
sub ebx, edx
not esi
xor edi, ebx
xor edi, edx
or ebx, 0xda2539f7
jmp 0x477c2d
push 0xd4ad2956
xchg esi, edi
shl esi, 0x12
sub edx, edi
and ebx, edi
xchg edx, esi
or edx, 0xda30b560
sub ebx, esi
dec esi
and edi, esi
jmp 0x477587
push 0xd4c0d0b3
ror edi, 6
neg edi
shl edi, 5
xchg edi, esi
xchg ebx, edx
and edi, esi
or esi, edx
sub edx, esi
jmp 0x476f4c
call ecx
bswap esi
xor edi, 0xda3f3e9e
xor esi, edx
mov edi, edx
and edx, ebx
xor esi, ebx
or esi, ebx
sub ebx, esi
ror ebx, 1
or edi, 0xda463e24
bswap edx
sub edi, 0xda46a891
bswap ebx
and ebx, 0xda4712c8
jmp 0x475723
pop ecx
add edi, ebx
xchg edx, ebx
or ebx, esi
sub edx, edi
or edx, esi
jmp 0x476c22
push 0xd4b2bb86
shl edx, 0xc
sub edx, esi
and edi, esi
nop
xor edi, edx
bswap ebx
xor edx, edi
neg edi
not ebx
shl edx, 4
mov esi, edi
xor esi, 0xda53bdb5
or edx, 0xda53f150
jmp 0x477201
push 0xd4d1d8d8
and ebx, 0xda543cef
or ebx, edi
dec ebx
add edi, edx
mov edi, ebx
sub edi, esi
xchg esi, edx
jmp 0x475f23
mov ecx, 0x123b2f04
xchg edi, ebx
xor edi, esi
ror esi, 0x12
and esi, ebx
dec ebx
and edi, edx
add edi, ebx
neg edi
shl edx, 0x1f
add esi, edx
mov ebx, esi
rol ebx, 0x14
mov edx, esi
inc edx
inc ebx
jmp 0x477086
push 0xd4bf9878
and esi, edx
dec edi
add ebx, edx
and edi, esi
add edx, esi
xor ebx, 0xda765558
xor edi, edx
jmp 0x475f5e
mov ecx, 0x123b2f04
sub esi, 0xda85a6c3
neg edx
mov esi, 0xda866936
xor edi, esi
neg esi
inc edx
add ebx, esi
jmp 0x4759f0
call fcn.00476a89
mov edi, edx
sub esi, edi
xor esi, 0xda97ec69
xor esi, edx
jmp 0x4769b9
mov ecx, 0x2774562b
inc esi
inc ebx
add esi, edi
or ebx, edi
xor edi, ebx
neg edi
rol edx, 0x16
xor edi, ebx
inc edx
jmp 0x47714c
push 0xd4bfc4c9
add edi, esi
sub edx, edi
mov ebx, edi
add esi, ebx
xchg ebx, esi
and ebx, esi
or ebx, esi
and esi, edi
add ebx, 0xdaab57f7
xor esi, edx
xor esi, 0xdaac207c
mov edi, ebx
jmp 0x4759bc
pop ecx
xchg ebx, esi
dec edx
not edx
mov edx, ebx
mov ebx, edi
bswap ebx
not edi
mov esi, edi
inc esi
or esi, edx
jmp 0x476d05
push 0xd49eda89
mov ebx, edx
mov esi, 0xdac92f1a
xchg esi, ebx
not esi
xchg ebx, edi
jmp 0x4779b2
call ecx
mov esi, edx
xor esi, edx
and esi, ebx
shl ebx, 0xb
jmp 0x476709
push 0xd4aa0e7f
xor esi, 0xdada4062
nop
mov edx, 0xdadaaa30
shr ebx, 0x15
add edi, edx
mov edx, esi
neg edi
dec edx
add edi, ebx
dec ebx
add esi, ebx
jmp 0x476279
mov ecx, 0x123b2f04
shr edi, 0x19
rol esi, 0x15
xor esi, edi
xchg ebx, edx
xor esi, ebx
and edi, edx
jmp 0x47665f
call fcn.00476a89
sub ebx, esi
and esi, edi
not edi
and esi, 0xdaec87b5
rol edi, 9
bswap esi
shl esi, 0x1e
or edi, edx
xor esi, ebx
mov edi, esi
xor esi, ebx
or esi, edx
or edx, 0xdaee63cb
xor ebx, 0xdaee9765
jmp 0x477231
pop ecx
mov ebx, edx
or esi, ebx
mov edx, esi
mov edi, edx
add esi, ebx
add esi, edx
bswap ebx
shl edx, 0xc
mov edi, ebx
xchg esi, edi
or edx, edi
or edx, edi
xchg esi, edi
sub ebx, 0xdaf181e1
xor edi, edx
not edx
jmp 0x476d5a
push 0xd4aa3ae4
sub edi, ebx
sub edi, 0xdb0017df
mov edx, edi
mov esi, edi
and esi, 0xdb014d53
add edx, 0xdb01b0df
xor ebx, edx
sub edx, edi
mov ebx, edx
jmp 0x477280
pop ecx
rol edx, 0xb
mov edx, esi
and ebx, edx
or edi, ebx
and edi, esi
mov esi, ebx
dec esi
jmp 0x477a5c
mov ecx, 0x123b2f04
mov esi, edi
xchg edi, edx
shr edi, 7
add edx, edi
or esi, edx
xor ebx, esi
jmp 0x476950
pop ecx
add ebx, edx
xchg edi, edx
shr esi, 0x11
add edi, esi
jmp 0x476c0e
call fcn.00476a89
xchg edx, ebx
and edi, ebx
mov esi, edx
and esi, ebx
xor ebx, edi
sub esi, ebx
not esi
sub esi, edx
jmp 0x475be1
pop ecx
dec ebx
add esi, edx
not ebx
mov esi, edx
or edx, 0xdb352c4a
or esi, 0xdb356008
and ebx, edx
or edx, esi
and edi, esi
xor edi, 0xdb363653
xchg esi, edi
or esi, edi
and edx, esi
xor edx, esi
mov edi, esi
and ebx, edx
jmp 0x476317
pop ecx
and esi, edi
add ebx, edx
sub edi, esi
and ebx, 0xdb3c47f1
xchg edi, edx
mov esi, edi
xor edx, ebx
ror edx, 0x12
add edi, 0xdb48b90d
xor esi, 0xdb48eca0
add ebx, esi
jmp 0x477119
push 0xd4b0da25
xor edi, edx
not ebx
inc edi
sub ebx, edi
and edx, edi
xchg edi, ebx
and ebx, edi
neg ebx
sub ebx, esi
not esi
inc edi
sub ebx, edx
jmp 0x4770ce
push 0xd4b26296
xor edx, 0xdb5090e4
xchg ebx, esi
nop
xchg esi, edx
sub edx, 0xdb56660d
and esi, 0xdb569dc0
add ebx, edi
and edx, esi
sub edi, ebx
xor esi, edi
jmp 0x476d25
push 0xd49da6df
and edx, 0xdb5ddaf6
sub edi, 0xdb5e0e48
xchg esi, edi
dec edi
xor esi, edi
bswap esi
inc edx
and ebx, edx
add esi, edi
jmp 0x4762e0
call fcn.00476a89
and edx, esi
bswap edx
neg ebx
not edx
mov edi, esi
add ebx, esi
xor edx, edi
jmp 0x4771d6
call fcn.00476a89
and esi, edx
or esi, 0xdb651f83
xor edi, ebx
shl esi, 0xe
mov edi, esi
or edx, ebx
xchg esi, ebx
and ebx, 0xdb665c42
dec edx
jmp 0x476b19
pop ecx
sub edx, ebx
xor ebx, edx
sub edi, esi
add edx, ebx
or edi, 0xdb6adf80
sub ebx, edx
xor edx, esi
and edi, 0xdb6b8521
mov edi, ebx
neg edi
jmp 0x475b7f
pop ecx
neg esi
mov ebx, 0xdb745821
and ebx, edi
or esi, edi
jmp 0x477976
push 0xd4af80fe
sub edi, edx
inc edx
xor edi, esi
sub edi, ebx
nop
neg esi
mov edi, esi
xor edi, edx
xchg edi, esi
add esi, edi
xor esi, ebx
xor edx, 0xdb7750f7
xchg edx, ebx
sub ebx, edx
jmp 0x4780aa
pop ecx
mov edx, esi
xor edx, 0xdb80eb3f
inc edx
and edi, esi
add edx, ebx
sub ebx, esi
add edx, ebx
and esi, edx
or ebx, edx
mov edi, ebx
xchg esi, edi
jmp 0x477bcf
call fcn.00476a89
add ebx, edi
sub ebx, 0xdb94ba5a
and edx, edi
sub esi, edx
add edi, esi
bswap esi
xor edi, 0xdb95eda8
and ebx, 0xdb9621a5
or edx, edi
shl edi, 0x15
jmp 0x477c72
pop ecx
xchg ebx, esi
mov edx, 0xdb9708e4
mov ebx, 0xdb973c4f
or esi, edi
sub edi, ebx
sub edi, ebx
inc esi
not ebx
jmp 0x476e86
pop ecx
add edx, esi
mov ebx, esi
rol esi, 0xa
shl edx, 0x13
and ebx, edi
mov edx, ebx
jmp 0x475abd
call ecx
and edi, esi
or edi, esi
sub edi, esi
xchg edi, edx
jmp 0x478233
push 0xd4c128c4
sub edi, 0xdba8113f
shl edi, 1
xchg edx, ebx
add ebx, edx
xor ebx, esi
xor edi, edx
shr ebx, 7
xchg edx, esi
and ebx, 0xdba9b775
and edx, edi
add ebx, edx
xor edx, edi
and edi, edx
or edx, ebx
bswap edi
jmp 0x477170
pop ecx
add esi, 0xdbad91df
rol edx, 0x15
bswap edx
xor ebx, 0xdbae2e3a
add ebx, edx
xchg edx, ebx
add ebx, edx
jmp 0x475b09
call fcn.00476a89
not edx
shr edx, 0x11
and edi, esi
sub edx, edi
jmp 0x477d76
pop ecx
shl edx, 4
sub edx, edi
or esi, edx
shl edi, 0x10
add edx, 0xdbb0d903
xchg edi, ebx
add esi, ebx
bswap edi
jmp 0x4766b5
call ecx
mov ebx, edi
add edi, 0xdbb6547d
dec ebx
add edx, 0xdbb6c136
neg edi
mov ebx, edi
ror ebx, 0x1b
xchg esi, edx
and esi, 0xdbb7d19a
bswap ebx
mov edi, ebx
and esi, 0xdbb88d5c
jmp 0x476963
pop ecx
sub edx, ebx
rol edx, 3
mov esi, edx
add edi, 0xdbc45d43
or edi, edx
sub ebx, esi
rol edx, 2
jmp 0x476a29
pop ecx
add edx, 0xdbc5538b
add edx, esi
and ebx, esi
xor ebx, edx
xor edi, edx
xchg ebx, edi
sub edx, esi
xor ebx, 0xdbc6c2f4
add edi, 0xdbc6f71c
jmp 0x477c45
push 0x401400
xor edx, edi
bswap edx
sub edi, ebx
ror esi, 7
rol ebx, 0xe
add edx, edi
or edi, ebx
sub esi, edi
xor esi, ebx
shl edi, 0x16
shr edi, 0xa
xor ebx, esi
and edx, esi
mov esi, edi
jmp 0x4773e1
pop ecx
sub edx, ebx
mov ebx, edi
mov edx, ebx
mov edx, esi
not esi
rol ebx, 0xd
sub esi, 0xdbdcae5c
ror edx, 1
bswap ebx
xchg esi, edx
or edx, ebx
xchg ebx, edi
xor ebx, edi
sub ebx, edx
and edi, edx
neg ebx
jmp 0x47726b
call ecx
add ebx, edx
add esi, 0xdbdf0b7a
add ebx, edi
sub ebx, esi
sub esi, edx
shl edx, 9
xchg esi, edx
jmp 0x47682b
call ecx
and edi, esi
and esi, edx
add ebx, esi
xor esi, edx
xor edx, ebx
add edi, esi
bswap ebx
or esi, 0xdbe1c2f2
mov esi, edi
jmp 0x47821a
mov ecx, 0x2774562b
shl esi, 0x1e
sub edx, 0xdbe9488f
not ebx
bswap edi
xchg edi, esi
and edx, edi
add edx, edi
add edx, esi
or esi, edx
jmp 0x477a34
push 0xd4af2a46
dec edx
add ebx, 0xdbef3483
sub esi, ebx
add ebx, edx
xor ebx, esi
xchg ebx, edi
add esi, edi
jmp 0x476f89
pop ecx
shr esi, 7
add edi, ebx
and esi, edx
and esi, edx
add esi, edi
dec esi
add edx, esi
jmp 0x47651f
push 0xd4ab7626
mov ebx, esi
and edx, esi
and edi, edx
mov esi, edx
mov edx, edi
jmp 0x47615b
pop ecx
or ebx, edi
xor esi, edi
xor edi, edx
bswap edx
sub edi, edx
or edi, 0xdbff65e5
neg edx
jmp 0x4764f6
push 0xd4ad81de
or edx, esi
ror edx, 9
mov esi, 0xdc0b8cc4
sub ebx, edx
dec edx
and ebx, edi
mov edx, edi
bswap ebx
jmp 0x475aa0
push 0xd4af0122
bswap esi
mov edx, ebx
ror esi, 1
or edx, esi
add edx, edi
not edi
add edx, edi
sub ebx, edi
mov ebx, edi
ror edi, 4
jmp 0x476bc6
push 0xd4b28ecf
sub ebx, edi
mov edx, 0xdc161aaa
xchg esi, edi
or edx, esi
mov edx, 0xdc16b429
xor edi, edx
xor edi, esi
xor edi, edx
sub edi, 0xdc1791ab
xor esi, edx
sub edi, 0xdc188b23
neg esi
nop
not esi
xor edx, ebx
jmp 0x475c50
pop ecx
add esi, edi
shr edx, 0x14
xor edx, 0xdc1a4953
sub edi, ebx
and ebx, edi
xor edx, edi
inc edx
or edx, esi
jmp 0x4776b0
push 0xd4d1ac7d
xor esi, 0xdc25c4f8
shl edi, 0xa
mov ebx, edi
bswap esi
sub esi, edx
xor ebx, edi
sub edi, esi
xor edx, ebx
add ebx, edi
xchg esi, edi
or ebx, edx
or ebx, 0xdc280375
jmp 0x475c7d
push 0xd4ceb1f8
mov edi, edx
xchg edi, ebx
ror edx, 0x12
add esi, 0xdc2f4b22
mov ebx, 0xdc2f7eb7
xchg esi, ebx
sub edx, esi
or ebx, 0xdc301b5e
mov esi, ebx
xor esi, ebx
or edx, esi
shl esi, 4
sub ebx, esi
add edi, edx
ror ebx, 0x1e
and esi, edi
jmp 0x4779c6
pop ecx
rol ebx, 0x16
mov esi, edx
or edi, 0xdc35042c
mov edi, esi
add edi, 0xdc357504
sub esi, edi
mov ebx, 0xdc35dd85
and ebx, 0xdc361174
and edi, edx
dec edx
jmp 0x4761e9
push 0xd4c0fcf1
xchg esi, edi
inc ebx
add esi, edi
xor edi, 0xdc45e6b2
and edx, esi
and edi, ebx
shl esi, 7
or edx, ebx
or ebx, esi
sub esi, edx
or edx, ebx
jmp 0x4768dc
push 0xd4af57f4
add ebx, edx
xor edi, edx
add esi, 0xdc4e7e9d
mov ebx, 0xdc4eb205
add ebx, edx
rol edx, 6
shr esi, 0x1b
jmp 0x47671a
push 0xd4d017e9
sub ebx, edx
or edx, ebx
xchg esi, ebx
jmp 0x475e88
call fcn.00476a89
shl esi, 0x12
shl ebx, 0xd
mov edx, esi
and edi, esi
bswap edx
bswap edx
add edx, esi
shl esi, 9
bswap edx
sub ebx, edx
or ebx, edi
mov edi, esi
add edx, 0xdc67e417
jmp 0x475a52
push 0xd4b106a0
and ebx, 0xdc6ea457
mov edx, edi
bswap esi
sub ebx, esi
and edx, edi
or ebx, edi
add ebx, edi
mov esi, 0xdc7012e6
and edx, edi
or edi, ebx
xor ebx, esi
jmp 0x4774dd
push 0xd4cfe8d6
sub ebx, 0xdc72f802
mov edx, 0xdc732f58
shr ebx, 9
or esi, 0xdc739b8d
add edi, 0xdc73cf98
sub esi, edi
ror edx, 0xf
xchg esi, ebx
and esi, edx
rol esi, 0x19
nop
or esi, edi
jmp 0x476fe6
jmp loc.0047b000
push 0xd4c15520
bswap esi
or ebx, edi
xchg esi, edi
add edx, edi
add ebx, esi
mov ebx, esi
xor esi, 0xdc7dcb5a
add edx, 0xdc7dff51
xor edx, esi
jmp 0x4757ae
push 0x74241
mov esi, 0xdc7e8bf4
or esi, edx
sub ebx, edx
sub esi, 0xdc7f2589
mov ebx, edx
or edi, 0xdc7f9243
add esi, 0xdc7fc60c
add esi, ebx
nop
sub ebx, esi
jmp 0x476a4d
push esp
and edi, esi
add esi, edi
and edi, 0xdc824454
bswap edx
sub esi, edi
add edx, 0xdc82ef7f
not edi
add edi, 0xdc835952
or ebx, edx
shl esi, 0xd
not edx
xchg ebx, edx
jmp 0x47790c
push 0xd4b2e406
ror edi, 9
or edx, ebx
xor esi, edx
not esi
sub edx, edi
jmp 0x4758ab
call ecx
add ebx, esi
sub edx, edi
and edx, esi
add ebx, edi
and ebx, edi
sub esi, ebx
mov edx, 0xdc8a1525
sub edi, edx
xor ebx, edi
sub ebx, 0xdc8ad03c
jmp 0x476933
pop ecx
ror esi, 0xc
rol edx, 0x16
add edi, ebx
sub edx, edi
mov edi, ebx
neg edi
dec edi
jmp 0x47814a
mov ecx, 0x123b2f04
mov edx, esi
xchg ebx, edx
or edx, 0xdc8edc2d
xchg ebx, edi
dec esi
neg edi
sub ebx, edi
jmp 0x477474
mov ecx, 0x123b2f04
and ebx, edx
add edx, ebx
inc ebx
or esi, edi
xor edi, edx
xor edi, esi
add edx, 0xdc9cc81f
mov esi, edx
mov edi, esi
xor edx, 0xdc9d5e00
jmp 0x4767e5
push 0xd4d1527d
and esi, edx
inc ebx
mov esi, ebx
and edi, ebx
mov ebx, edx
sub edx, ebx
mov ebx, 0xdca92af0
sub ebx, 0xdca96bea
bswap edx
xor esi, ebx
jmp 0x477dab
call ecx
or edx, ebx
xchg esi, edx
mov edi, edx
and edx, ebx
xchg edi, ebx
neg edi
sub edi, ebx
and edx, edi
and ebx, edi
mov esi, edx
neg esi
and esi, 0xdcb86fd3
dec esi
and ebx, edi
sub esi, ebx
jmp 0x4781a1
mov ecx, 0x2774562b
sub edi, ebx
bswap edx
and edx, esi
or ebx, esi
mov ebx, edi
and esi, 0xdcbc1971
and esi, edi
or edx, ebx
and edi, ebx
jmp 0x477df0
call fcn.00476a89
shl edi, 0x1c
add edx, esi
inc edx
inc esi
inc esi
inc edx
bswap edx
add esi, ebx
or esi, edx
or edi, ebx
and edi, ebx
xor ebx, edx
and esi, ebx
or edx, ebx
xchg edi, edx
jmp 0x476b33
push 0xd4b13386
add edx, ebx
mov esi, 0xdcd48217
rol ebx, 8
inc edi
and edx, edi
add ebx, 0xdcd55e2f
jmp 0x475d5e
push 0xd49d7c65
sub ebx, esi
add esi, ebx
dec edx
add edx, esi
sub edi, esi
xchg ebx, edi
and edx, esi
and ebx, edx
or edi, 0xdcdaa209
jmp 0x4765e4
push 0xd4ad52a3
xchg esi, edi
ror edx, 0xd
xor ebx, esi
or edi, edx
add edi, esi
shr ebx, 0x1c
sub edi, 0xdce43c0a
nop
bswap edx
mov edx, esi
xchg ebx, edx
or edi, esi
mov edi, edx
jmp 0x476ce8
call ecx
add edi, esi
and ebx, 0xdcf2d86d
or esi, edi
and edi, esi
xchg ebx, edi
add ebx, edi
mov esi, edi
jmp 0x476776
pop ecx
xchg edx, esi
add esi, edx
rol ebx, 0x17
mov ebx, esi
add ebx, edx
sub edx, ebx
mov edx, ebx
neg esi
and edx, ebx
mov edx, 0xdcfd964b
add edi, esi
sub ebx, 0xdcfdfc68
xchg esi, edi
xchg edx, edi
jmp 0x475db2
call fcn.00476a89
xor ebx, edx
or ebx, edx
sub esi, edi
xor ebx, edi
shr edx, 0xc
mov ebx, edx
inc esi
mov edx, ebx
and esi, 0xdd34c067
mov esi, edx
and esi, edi
add esi, ebx
rol edi, 0x1b
inc esi
jmp 0x476892
push esp
inc esi
or edx, edi
add ebx, edi
mov esi, 0xdd3b0ce0
jmp 0x475980
pop ecx
mov esi, edx
shl ebx, 8
sub ebx, esi
or edx, ebx
xor edi, ebx
sub esi, ebx
inc ebx
sub esi, edi
sub ebx, edi
jmp 0x477f03
mov ecx, 0x2774562b
sub edi, ebx
sub ebx, esi
bswap edx
neg edx
and esi, edx
jmp 0x47789d
push 0xd4cedd3c
ror edi, 0x13
xchg edx, edi
sub edx, edi
or edi, edx
mov esi, 0xdd520c63
mov edx, esi
add edx, 0xdd5273cf
jmp 0x4772f1
call fcn.00476a89
add edx, ebx
xor ebx, esi
and edi, ebx
or edi, edx
or edi, 0xdd582f4c
and edi, edx
mov esi, edx
add ebx, 0xdd58d17e
or esi, edi
xor ebx, edi
xor ebx, edi
jmp 0x47604e
pop ecx
or esi, edx
mov edx, esi
shr ebx, 9
and edx, edi
jmp 0x478301
pop ecx
and esi, edi
mov ebx, edx
ror edx, 0xb
not edx
ror edi, 0xf
or edx, 0xdd7b67d9
mov edi, edx
xor ebx, edi
or esi, 0xdd7cf687
and edi, ebx
xor edx, esi
shl esi, 3
jmp 0x47815f
mov ecx, 0x123b2f04
or ebx, 0xdd82884a
not edi
xchg edx, edi
not edi
not ebx
jmp 0x4761b5
pop ecx
not esi
sub edx, ebx
bswap ebx
xor edx, 0xdd845085
xor edx, esi
sub ebx, edx
or edx, ebx
ror edi, 2
shr ebx, 0xa
mov edx, ebx
mov edi, esi
xchg esi, ebx
dec edx
and edi, 0xdd865c32
and edi, ebx
jmp 0x476037
call ecx
xchg ebx, edx
and esi, edx
or ebx, edi
or edx, esi
or edx, 0xdd87a901
and esi, 0xdd87dcd5
add ebx, edi
xchg ebx, esi
mov esi, edi
sub edi, ebx
xchg edi, ebx
sub edi, ebx
jmp 0x476c63
pop ecx
mov edi, ebx
and ebx, edi
add edi, esi
add ebx, esi
add edi, 0xdda13230
jmp 0x4762bc
call ecx
shr edi, 0xa
mov edx, ebx
add esi, 0xdda431d1
or edx, esi
sub edx, edi
mov ebx, edi
ror ebx, 0xe
ror edi, 0x11
jmp 0x476a0f
push 0xd4d18187
mov edx, 0xddab837b
and ebx, esi
and edx, edi
or ebx, 0xddac1b88
rol edi, 0x18
mov edi, 0xddac858a
neg edx
or edi, esi
not edx
or ebx, edi
jmp 0x476df6
call fcn.00476a89
xchg edx, edi
xchg edx, edi
or esi, ebx
xor edx, edi
inc edi
inc edi
not edx
or edx, 0xddb787fa
ror esi, 0xc
xor edi, edx
xor edx, 0xddb825f3
xchg esi, edi
bswap esi
jmp 0x4759ce
pop ecx
xchg edx, esi
and esi, edx
neg ebx
xor esi, edx
inc ebx
or esi, edx
xor esi, edi
jmp 0x475fb4
call ecx
mov edx, esi
xchg edx, edi
or ebx, edi
add ebx, esi
sub esi, edi
sub esi, edi
xchg edx, ebx
shl edi, 0xa
mov edi, esi
xchg edi, esi
mov esi, 0xddeaf277
xor edi, esi
xor ebx, 0xddeb5a30
not ebx
ror ebx, 0x15
and edx, edi
jmp 0x47591e
mov ecx, 0x123b2f04
xchg ebx, edi
inc edx
xchg edi, esi
inc edi
shr edi, 0xe
and edi, 0xddf214e1
shr edx, 0xa
jmp 0x47817f
pop ecx
xor edx, edi
or esi, edi
xor edx, ebx
sub ebx, edx
sub esi, edx
inc edx
or edi, edx
sub ebx, edx
jmp 0x476561
push 0xd4d12788
bswap ebx
dec ebx
nop
xchg esi, edi
not edi
xchg edx, esi
and edx, esi
mov edi, ebx
xor edi, 0xde04846d
and edi, esi
jmp 0x477373
call fcn.00476a89
and ebx, 0xde050168
ror ebx, 0x13
shl esi, 0xd
add esi, ebx
add edi, ebx
inc ebx
and edx, edi
sub edx, ebx
xor esi, ebx
dec ebx
jmp 0x478048
pop ecx
and ebx, edx
xor ebx, esi
mov ebx, edi
and ebx, edx
mov esi, edi
sub ebx, edx
xor esi, ebx
xor edx, esi
shl ebx, 6
dec edi
jmp 0x476e39
push 0xd49d477b
or edx, ebx
sub edi, esi
and edx, edi
and ebx, esi
xor edi, esi
inc edx
neg ebx
or esi, edx
rol edx, 5
mov ebx, edi
sub edx, 0xde1117fa
xchg esi, edi
jmp 0x477523
pop ecx
sub ebx, edi
add ebx, 0xde151ba4
inc edx
sub edi, esi
inc ebx
shl ebx, 8
mov ebx, edx
or ebx, edi
jmp 0x475c40
pop ecx
mov esi, 0xde1b8d15
inc edx
xor esi, 0xde1bf6c1
xor edx, 0xde1c2de6
add edx, esi
sub edx, edi
xor edx, ebx
shr edi, 0x14
mov edi, 0xde1d3a91
sub esi, edi
jmp 0x4760d7
mov ecx, 0x4132136a
mov esi, edi
mov esi, edx
or esi, 0xde364b0c
xchg edi, ebx
or ebx, esi
add esi, edi
or esi, 0xde37164c
and esi, edi
sub edi, esi
rol edi, 0xd
and esi, edi
dec esi
add esi, edi
xor edi, 0xde388cba
jmp 0x476647