Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff1a
jne 0x40109d
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_DbgPrompt
call sub.ntdll.dll_DbgPrompt
call sub.ntdll.dll_DbgPrompt
call sub.user32.dll_FindWindowExA
call sub.ntdll.dll_DbgPrompt
call sub.user32.dll_FindWindowExA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.user32.dll_FindWindowExA
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ntdll.dll_DbgPrompt
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.user32.dll_FindWindowExA
call sub.ntdll.dll_DbgPrompt
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_DbgPrompt
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.user32.dll_FindWindowExA
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.user32.dll_FindWindowExA
ret
call sub.kernel32.dll_GetCurrentThreadId
cmp eax, 0xffffff23
jne 0x40113f
call sub.user32.dll_FindWindowExA
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.user32.dll_FindWindowExA
call sub.ntdll.dll_DbgPrompt
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.user32.dll_FindWindowExA
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ntdll.dll_DbgPrompt
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.user32.dll_FindWindowExA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.user32.dll_FindWindowExA
call sub.ntdll.dll_DbgPrompt
call sub.user32.dll_FindWindowExA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_DbgPrompt
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff09
jne 0x4011d7
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ntdll.dll_DbgPrompt
call sub.user32.dll_FindWindowExA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.user32.dll_FindWindowExA
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_DbgPrompt
call sub.user32.dll_FindWindowExA
call sub.ntdll.dll_DbgPrompt
call sub.user32.dll_FindWindowExA
call sub.ntdll.dll_DbgPrompt
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
ret
call sub.kernel32.dll_GetCurrentThreadId
cmp eax, 0xfffffeda
jne 0x401274
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.user32.dll_FindWindowExA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.user32.dll_FindWindowExA
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ntdll.dll_DbgPrompt
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.user32.dll_FindWindowExA
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.user32.dll_FindWindowExA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.user32.dll_FindWindowExA
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ntdll.dll_DbgPrompt
call sub.user32.dll_FindWindowExA
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ole32.dll_HGLOBAL_UserSize
call sub.ntdll.dll_DbgPrompt
call sub.advapi32.dll_GetAuditedPermissionsFromAclA
call sub.ole32.dll_HGLOBAL_UserSize
ret
jmp 0x4752f5
or edx, ecx
jmp 0x476bac
push 0x4e8879e7
ror ebx, 0x1f
or edx, ecx
and ecx, ebx
add esi, ecx
or esi, 0x4f5ee503
jmp 0x477de8
pop edi
or esi, ebx
sub esi, ebx
and esi, 0x4f6faf62
xchg edx, esi
add ecx, edx
and esi, edx
xor edx, ecx
rol ecx, 3
inc edx
jmp 0x477eac
mov edi, 0x6e447c44
neg edx
ror ecx, 6
and ecx, edx
bswap edx
jmp 0x475ad7
mov edi, 0x2d734e3d
and ebx, 0x4f782a27
or edx, 0x4f78688a
sub edx, esi
xchg esi, ebx
xchg ebx, ecx
add esi, 0x4f796811
mov ecx, edx
and ecx, 0x4f7a3ff1
sub edx, ebx
or ecx, 0x4f7ab747
rol ecx, 0x13
jmp 0x476864
pop edi
mov esi, ecx
inc ecx
add ebx, esi
or esi, edx
xchg ecx, esi
xor ebx, esi
mov ebx, edx
shl ebx, 0xe
or ebx, edx
jmp 0x4788bc
pop edi
xchg ecx, edx
or ebx, ecx
sub ecx, esi
add esi, 0x4f882d30
or edx, esi
mov ecx, edx
dec ecx
mov ecx, ebx
or esi, 0x4f895815
jmp 0x4769f1
mov edi, 0x6e447c44
inc ecx
sub ecx, edx
dec esi
and esi, 0x4f8def73
or edx, ebx
and ecx, esi
add ebx, edx
or edx, ebx
jmp 0x4765d3
call edi
sub esi, ecx
sub ebx, esi
or esi, edx
or edx, 0x4f8fe5a8
or esi, ecx
bswap ecx
dec ebx
jmp 0x4783ca
push 0x4e754708
add esi, 0x4f910147
shl ecx, 0x1d
add ecx, ebx
inc ecx
mov ecx, esi
inc ecx
xor ebx, 0x4f926ebd
add edx, ecx
and ebx, 0x4f92f5b0
and ecx, 0x4f9332df
neg esi
or ebx, ecx
and esi, ebx
add edx, ebx
jmp 0x4773cd
pop edi
shr esi, 2
and edx, 0x4fa049d2
mov ebx, 0x4fa090d4
jmp 0x4783ba
pop edi
or ebx, esi
xchg edx, esi
mov esi, edx
xchg ecx, edx
sub edx, ecx
neg edx
mov ecx, edx
xor edx, 0x4fa3e844
neg edx
shr edx, 0x16
not ecx
jmp 0x4762c0
push 0x4e7d3ed6
or edx, ecx
rol ecx, 0x11
rol edx, 0x17
or ecx, edx
mov ecx, ebx
or edx, 0x4fa612ef
shl ecx, 0x18
sub ebx, 0x4fa6982a
inc esi
sub ecx, esi
add edx, 0x4fa74711
and ebx, 0x4fa781b6
xchg esi, edx
jmp 0x47651b
pop edi
add ecx, 0x4fabfe1f
xchg esi, edx
dec esi
xor ebx, edx
rol edx, 0x1d
inc esi
xchg edx, ebx
shl esi, 0x1a
or ecx, edx
inc edx
and edx, ebx
or ebx, 0x4fae7745
add ecx, ebx
mov ecx, 0x4faee6d4
jmp 0x4782fd
push 0x4e800147
xor ebx, edx
dec esi
xchg ecx, edx
xor esi, 0x4fb8710b
and edx, ebx
xor ecx, ebx
and ebx, esi
jmp 0x4780d2
mov edi, 0x2d734e3d
or ecx, esi
xchg esi, ecx
or ecx, ebx
mov ecx, esi
not edx
bswap edx
not edx
xor ebx, ecx
xchg ecx, esi
or ecx, esi
jmp 0x478933
pop edi
add ecx, esi
sub ebx, edx
xor ebx, edx
or edx, esi
not ebx
add ecx, 0x4fc980b4
jmp 0x478826
pop edi
ror ebx, 0x1a
mov edx, 0x4fd25fc4
or ebx, 0x4fd29713
xor edx, 0x4fd2cf5c
and edx, 0x4fd30836
neg edx
add ebx, edx
dec ecx
xchg edx, esi
add edx, ecx
mov esi, ebx
bswap ebx
mov edx, ecx
jmp 0x478a87
push 0x4e8575ac
and ebx, edx
xchg ecx, ebx
xor ebx, 0x4fd70498
rol edx, 0x12
or ebx, edx
mov ebx, edx
xor edx, esi
jmp 0x478612
call fcn.00476156
inc edx
or esi, ebx
jmp 0x475f0d
mov edi, 0x6e447c44
mov esi, ecx
xchg ecx, edx
and ebx, ecx
sub edx, 0x4fe64a98
xchg ebx, edx
neg ebx
sub ecx, edx
xor ebx, edx
shr ecx, 2
and ecx, ebx
dec ecx
jmp 0x4774df
mov edi, 0x6e447c44
ror ecx, 0x16
mov esi, edx
and edx, ecx
sub edx, ecx
and ebx, edx
mov ecx, edx
sub esi, 0x4ffcb4cc
or edx, esi
xor esi, 0x4ffd2d68
sub edx, ebx
jmp 0x477743
call fcn.00476156
xchg edx, ecx
sub ebx, edx
add ebx, edx
mov ebx, 0x500a4090
add ecx, edx
shr ecx, 0x1a
add edx, 0x500b0553
sub esi, ebx
sub esi, ebx
jmp 0x477315
pop edi
ror esi, 0x16
add ecx, edx
and ecx, edx
dec ebx
sub esi, edx
add ebx, esi
jmp 0x477e2d
pop edi
dec ecx
add esi, ecx
add ecx, 0x5014ed30
sub edx, ebx
add ecx, esi
mov ebx, 0x5015af42
neg esi
jmp 0x477ce6
call edi
or ecx, ebx
shl esi, 4
and esi, edx
sub esi, edx
xor ecx, edx
and ecx, esi
or edx, 0x50228f8a
jmp 0x475e46
call edi
or esi, 0x5022e42f
or ebx, 0x5023312f
add esi, edx
add ebx, 0x5023a854
xchg ecx, esi
mov edx, esi
not esi
jmp 0x4787a7
push 0x4e5a196d
xchg esi, ecx
or ecx, edx
xor ebx, edx
and edx, 0x502565e5
xor ecx, 0x5025a2d3
xor ebx, ecx
bswap esi
inc esi
jmp 0x476c17
push 0x4e677db0
mov ecx, 0x503e56ec
or ebx, esi
sub esi, edx
bswap esi
add esi, ecx
or esi, ecx
xchg esi, ecx
jmp 0x477691
pop edi
add edx, ebx
and esi, 0x504b964a
shl esi, 0x18
and esi, 0x504c219f
sub edx, 0x504c5fa8
inc ebx
jmp 0x478462
push 0x4e68596c
and ebx, esi
mov edx, ecx
mov edx, ebx
xor esi, ebx
xchg ebx, edx
mov esi, ebx
jmp 0x476c3f
pop edi
rol ecx, 0x1f
or ebx, edx
neg esi
add ebx, esi
shl ecx, 0x18
mov edx, 0x5064c950
jmp 0x477ba3
push 0x4e782f72
xchg esi, edx
dec edx
neg ecx
not edx
bswap ebx
not edx
or ecx, ebx
jmp 0x478b05
push 0x4e7d8870
sub edx, esi
sub esi, ebx
sub ebx, 0x50902e55
xor edx, ecx
add esi, edx
mov ecx, 0x5090e3db
xchg edx, ebx
jmp 0x4768f1
call fcn.00476156
add ecx, edx
add edx, 0x5092eb87
or ecx, edx
neg ecx
add ebx, edx
shr ecx, 0x1e
not esi
jmp 0x475694
push 0x401400
mov esi, edx
sub ecx, ebx
shr esi, 4
xor ebx, esi
mov edx, esi
nop
sub edx, ebx
add ecx, ebx
add ebx, edx
add ebx, 0x509a772b
not edx
mov edx, 0x509ae87f
mov esi, edx
jmp 0x4776b0
call fcn.00476156
xchg ebx, ecx
xchg ecx, ebx
add esi, edx
sub ecx, ebx
jmp 0x476f5a
pop edi
and ecx, 0x509e932f
mov esi, edx
shl esi, 9
dec esi
mov esi, ecx
jmp 0x47578b
mov edi, 0x6e447c44
xor ecx, 0x509fd253
dec ebx
mov ecx, esi
xor edx, ebx
not ecx
xchg ebx, edx
or edx, ebx
shl edx, 0xc
jmp 0x477a4f
call fcn.00476156
and ecx, 0x514ff946
not ebx
xor edx, esi
sub ebx, 0x5150c658
mov ecx, esi
jmp 0x475f27
push 0x4e746a4a
xchg edx, ecx
add edx, esi
and ecx, esi
bswap ecx
xchg esi, ebx
mov edx, ecx
jmp 0x4770aa
mov edi, 0x2d734e3d
add ecx, edx
neg ebx
xchg edx, ecx
sub edx, esi
or edx, ecx
neg ebx
not edx
and ebx, esi
xor esi, edx
jmp 0x476554
call edi
add ebx, esi
mov edx, ebx
xor esi, ebx
mov ecx, 0x516614f4
and ebx, 0x51667205
or esi, ecx
ror ebx, 0x19
add ebx, 0x51674644
or esi, ebx
xor ebx, ecx
xor ecx, 0x51682a57
or esi, 0x516872da
xor ecx, 0x5168babc
inc esi
xor esi, 0x51695d2d
jmp 0x4757b4
call fcn.00476156
mov ecx, edx
neg ebx
shr edx, 0x1f
not esi
add ebx, esi
xor edx, 0x516ec356
or edx, 0x516f0bd5
xor esi, edx
and esi, ecx
jmp 0x477da7
pop edi
rol ebx, 0x13
xchg esi, ebx
mov esi, edx
sub edx, ecx
bswap esi
mov edx, esi
not ecx
not ebx
add ecx, edx
mov ebx, esi
neg edx
and edx, 0x5176ebd7
and ecx, ebx
jmp 0x47635e
push 0x4e7ca9c9
shl edx, 9
xchg edx, esi
sub ebx, esi
shl ecx, 1
shr esi, 0x11
or esi, 0x517fd013
sub ebx, ecx
xchg esi, edx
ror edx, 0x10
jmp 0x4774b6
call edi
or esi, 0x51933837
mov esi, ecx
or ecx, ebx
ror ecx, 0x16
or ecx, ebx
neg ebx
shl ebx, 0x1e
mov ecx, esi
jmp 0x476602
push 0x4e55b619
or esi, ebx
bswap esi
sub esi, ebx
inc ebx
dec esi
xchg edx, ecx
add ecx, edx
mov ecx, edx
and ebx, 0x51974e44
jmp 0x478269
pop edi
xchg ebx, ecx
and ebx, ecx
inc esi
sub esi, ebx
shl esi, 9
add edx, 0x5198dd3f
xchg ecx, edx
bswap ecx
xor edx, esi
sub ebx, esi
mov ecx, 0x519a245f
shr esi, 0x17
jmp 0x4759f8
push 0x4e5a6336
not ebx
sub ebx, edx
and edx, ecx
mov ecx, 0x519e8cc6
add ebx, 0x519ecd7c
sub esi, ecx
rol ebx, 0x19
sub edx, ecx
xor esi, ecx
and edx, esi
sub ecx, edx
jmp 0x4784ae
mov edi, 0x2d734e3d
add ebx, edx
inc ecx
mov ebx, esi
shl edx, 0x10
or esi, ecx
and ebx, esi
add esi, edx
jmp 0x476999
call edi
or ebx, edx
mov edx, ebx
add esi, ebx
add ebx, ecx
add edx, ecx
jmp fcn.00476375
call fcn.00476156
bswap esi
add ebx, ecx
or ecx, ebx
bswap esi
mov esi, ecx
sub ebx, 0x51c2791a
mov ebx, 0x51c2b8db
xor ecx, edx
xor ebx, esi
or ebx, ecx
add ecx, esi
neg esi
sub edx, esi
or esi, edx
jmp 0x477b71
call edi
and esi, edx
shr ecx, 0x15
sub edx, ecx
mov ebx, 0x51e1350c
add esi, edx
shl esi, 0x10
and ebx, ecx
dec ebx
jmp 0x47735b
pop edi
shl edx, 8
xor ecx, ebx
xor ecx, 0x51e7634e
or esi, 0x51e7a3bc
sub edx, ecx
mov esi, edx
and edx, 0x51e86a22
add ecx, ebx
jmp 0x478bb1
push 0x4e5816cd
not edx
sub edx, 0x51f6ff97
add ecx, ebx
and edx, esi
sub ebx, esi
rol esi, 2
and ecx, esi
and ebx, 0x51f886fa
add edx, esi
add edx, 0x51f90504
and esi, ebx
jmp 0x475914
push 0x4e74b490
xor esi, 0x51fa1a02
and edx, ebx
mov ebx, edx
shr esi, 0x16
shr ecx, 0x17
or ecx, esi
or ebx, 0x51fb91c3
add edx, esi
mov esi, ecx
add ecx, edx
mov edx, 0x51fc8d08
sub esi, edx
jmp 0x477187
push 0x4e5cfcc7
mov ecx, edx
and ecx, 0x51fd5a14
rol esi, 0x17
ror esi, 0x1d
and esi, ebx
sub edx, ebx
sub ecx, 0x51fe9c70
bswap ebx
mov edx, 0x51ff185c
or ecx, ebx
sub ebx, esi
xchg esi, ebx
jmp 0x478328
pop edi
shr ecx, 2
or esi, 0x52067b68
sub esi, 0x5206b87b
mov ebx, 0x5206f62a
or ecx, esi
not esi
and ecx, edx
or edx, 0x5207fa51
mov esi, edx
mov ecx, esi
add edx, ebx
add ebx, esi
add ecx, esi
jmp 0x4758f9
push 0x4e74fe8a
or ebx, edx
neg ecx
add ecx, ebx
xor edx, ecx
jmp 0x4756ac
push 0x4e5f399b
xchg ecx, edx
rol ecx, 9
shl esi, 0x10
xchg esi, ebx
or edx, ecx
dec ecx
jmp 0x475556
pop edi
nop
add ecx, ebx
or ecx, edx
add esi, edx
add esi, ecx
mov ecx, ebx
sub ecx, edx
neg edx
add esi, edx
or ebx, esi
jmp 0x477b17
call edi
mov edx, ebx
add edx, 0x5227dcbd
and esi, edx
shr esi, 0xa
bswap ebx
or esi, 0x5228e880
sub esi, 0x522928b3
rol esi, 0xa
jmp 0x475df1
pop edi
inc ebx
shr esi, 0xe
and esi, edx
ror ecx, 0x1d
neg edx
or esi, ebx
not edx
rol ebx, 0x1e
and ecx, ebx
mov esi, ecx
sub ebx, edx
xor esi, edx
not esi
xchg esi, edx
shl edx, 0x1d
jmp 0x478b8d
push 0x4e80b01b
xor ecx, esi
shr ecx, 0xc
or ebx, edx
shl esi, 9
or ebx, edx
or esi, 0x52335ec9
jmp 0x477aba
push 0x4e7591d8
rol esi, 0x13
mov ecx, ebx
and esi, ecx
ror esi, 0x13
or edx, 0x52363076
mov ebx, edx
xchg ecx, esi
shl ebx, 0x15
ror edx, 1
jmp 0x47806a
call fcn.00476156
mov ebx, esi
add edx, ecx
not ecx
and ecx, ebx
mov ebx, ecx
mov ecx, esi
xor edx, ecx
add ebx, edx
xor ecx, edx
jmp 0x47779d
push 0x4e7ae79f
mov ebx, edx
add edx, 0x524390bf
shr ecx, 0x15
and ebx, ecx
or edx, ecx
sub ecx, 0x5244876f
add edx, esi
jmp 0x475543
pop edi
and edx, ecx
add esi, ebx
and ebx, ecx
mov ebx, edx
add ecx, ebx
add edx, ecx
jmp 0x475a78
push 0x4e7cf494
mov ebx, ecx
sub ebx, esi
not ecx
and esi, edx
xor edx, ecx
or esi, ebx
xor ebx, ecx
shl edx, 0xb
jmp 0x4757d5
call fcn.00476156
or esi, ecx
add edx, ebx
mov ecx, ebx
xor esi, ecx
mov edx, ecx
sub ebx, 0x524ad6f1
jmp 0x476d3c
pop edi
not ecx
rol ebx, 0x19
sub ecx, ebx
xor ebx, ecx
sub edx, ebx
sub esi, edx
xor ecx, 0x525382af
xor esi, edx
jmp 0x477eec
push 0x4e67c7a9
sub ebx, edx
sub esi, ecx
xor esi, ebx
dec edx
not esi
and esi, ebx
or edx, esi
bswap ebx
add edx, 0x526a7b24
jmp 0x4778e0
call edi
or ebx, ecx
sub esi, edx
add ecx, ebx
and esi, ecx
add ebx, ecx
add ecx, esi
mov ebx, edx
jmp 0x477f12
call fcn.00476156
or ecx, edx
or ecx, edx
and ebx, edx
inc ecx
and edx, ebx
shr esi, 0x1e
mov esi, 0x52770002
jmp 0x477856
call edi
inc ebx
shr edx, 0xd
and ecx, esi
xchg ecx, ebx
and ecx, edx
xor edx, ecx
jmp 0x475844
call edi
ror ecx, 0x16
mov edx, 0x528782a0
sub ebx, 0x5287cfe4
and edx, ecx
jmp 0x4774a4
push 0x4e681062
mov ecx, ebx
xor ebx, esi
shl esi, 0xd
mov esi, ecx
neg ebx
xchg ebx, ecx
or ecx, edx
xchg ebx, esi
xchg ebx, edx
add ecx, ebx
jmp 0x476259
pop edi
or ecx, esi
neg ecx
mov ebx, ecx
sub ecx, ebx
or ecx, esi
mov edx, esi
not edx
or esi, ebx
dec esi
xchg ebx, edx
jmp 0x477aa3
push 0x73ef5
not ecx
shr ecx, 0x10
or ecx, edx
sub ebx, ecx
mov ecx, ebx
rol ebx, 0x13
xor ebx, 0x52a6822c
mov ebx, 0x52a6c152
or ecx, esi
xchg ebx, ecx
add ebx, esi
mov ecx, ebx
or ecx, esi
shr esi, 0xa
jmp 0x4765a8
call fcn.00476156
and esi, ebx
shl esi, 9
xchg ecx, esi
neg ecx
not ecx
mov ebx, ecx
jmp 0x476b8f
push 0x4e882d53
and ebx, edx
xor edx, ebx
and edx, esi
add edx, ecx
add edx, ecx
inc ecx
sub edx, esi
xor edx, esi
or edx, 0x52af6b0c
neg esi
xor edx, ecx
add esi, 0x52b02473
jmp 0x4753c7
pop edi
and esi, ebx
xchg edx, ecx
sub ebx, ecx
xchg ebx, ecx
and esi, edx
mov ebx, 0x52b352d1
or edx, ebx
jmp 0x477157
mov edi, 0x6e447c44
sub ebx, ecx
mov edx, ebx
rol edx, 8
or ecx, esi
sub ecx, edx
sub ecx, esi
xchg esi, edx
rol ebx, 0x17
or esi, edx
sub ebx, ecx
bswap ebx
mov ebx, ecx
inc esi
mov esi, 0x52b70807
jmp 0x477f69
pop edi
xchg edx, ebx
mov esi, ebx
mov esi, 0x52bb5f01
sub ebx, esi
neg ebx
rol ecx, 8
shr edx, 0xa
xchg ecx, esi
or ebx, 0x52bce10b
xor ebx, edx
xor ebx, esi
jmp 0x4770d9
push esp
xor ebx, ecx
add ecx, 0x52c17388
or edx, ecx
add ebx, 0x52c1eb9c
jmp 0x477d45
push 0x4e7a9c5f
add ecx, ebx
shr edx, 0xf
or esi, edx
sub esi, ecx
xor ecx, edx
sub edx, ebx
or esi, ebx
sub edx, esi
bswap esi
and ebx, ecx
jmp 0x477483
pop edi
mov ebx, 0x52db4969
add edx, esi
and esi, edx
sub esi, 0x52dc0148
shr esi, 0x13
or edx, ebx
sub ecx, esi
xor esi, 0x52dd0ad0
neg esi
jmp 0x476a69
push 0x40
mov ecx, esi
ror esi, 0x1e
xchg esi, ecx
xor edx, ecx
and esi, 0x52e051f6
or edx, ebx
mov ecx, ebx
rol edx, 0x1e
add ecx, 0x52e149e8
add ecx, edx
jmp 0x4779fa
push esp
shr ebx, 0x13
add edx, esi
mov edx, esi
and ebx, ecx
sub ecx, ebx
not ecx
jmp 0x477d1d
call edi
inc ebx
or ebx, edx
sub ebx, edx
shl esi, 0x18
nop
bswap ecx
or edx, esi
xor ecx, 0x52eae961
xor edx, 0x52eb3be6
xchg esi, ebx
xor ebx, ecx
jmp 0x478a44
mov edi, 0x2d734e3d
sub ebx, edx
neg edx
mov ecx, ebx
ror ebx, 0xf
add ecx, 0x52ed1f0c
sub ebx, esi
xor edx, ecx
jmp 0x477420
push 0x4e88d392
mov ecx, ebx
add esi, 0x52ee4334
or ecx, esi
sub ecx, edx
xchg ecx, edx
xor ebx, 0x52ef3ac1
jmp 0x4788e1
pop edi
sub esi, 0x52f26b84
mov esi, ebx
xchg edx, ecx
sub esi, ebx
and ebx, edx
xor ecx, 0x52f3ae63
or ecx, edx
neg edx
add ecx, ebx
sub edx, ecx
xchg ebx, edx
and ecx, ebx
jmp 0x478b75
pop edi
sub ecx, 0x52fb2c28
sub esi, ecx
inc ebx
rol ecx, 8
rol ecx, 1
shl ecx, 0x1a
rol ecx, 0x17
mov edx, ebx
or ecx, ebx
shr esi, 9
jmp 0x4755a8
pop edi
sub esi, 0x530020b2
and esi, ecx
nop
mov ecx, ebx
xor edx, ebx
not ebx
rol ebx, 0x13
sub ebx, esi
ror ebx, 0x12
xor edx, ebx
sub esi, ebx
dec edx
or edx, ebx
not ebx
jmp 0x476182
pop edi
mov edx, ebx
xor ecx, ebx
or edx, esi
and ecx, 0x5304dd0e
mov edx, esi
bswap ebx
rol ecx, 1
mov esi, 0x5305e491
sub edx, 0x530622f1
or edx, ebx
mov ebx, edx
and ecx, ebx
jmp 0x4768c5
call fcn.00476156
or ecx, esi
add edx, esi
dec ecx
add ebx, edx
add esi, ecx
mov edx, ecx
xchg esi, ecx
or ecx, edx
sub esi, ecx
or ebx, 0x5309518d
mov ebx, edx
mov ecx, ebx
xchg edx, esi
or ecx, 0x530a40ab
jmp 0x47692b
call fcn.00476156
mov edx, 0x530a97a5
mov edx, 0x530ad4b6
sub edx, ebx
add esi, 0x530b4df0
xchg edx, ecx
mov edx, ecx
sub ecx, edx
add esi, ebx
add ecx, esi
xchg edx, ecx
jmp 0x478873
mov edi, 0x2d734e3d
xchg ecx, ebx
and esi, edx
add ebx, ecx
ror esi, 1
sub ebx, edx
mov ecx, ebx
sub edx, esi
add ebx, 0x531f74ce
nop
jmp 0x475d9f
push 0x4e805816
add ebx, esi
dec ebx
nop
rol edx, 6
add ebx, esi
add ecx, ebx
xor esi, edx
add esi, edx
add ebx, ecx
shr ebx, 4
jmp 0x477399
mov edi, 0x2d734e3d
dec ecx
sub ecx, edx
bswap edx
bswap ebx
add ebx, ecx
add edx, 0x5329ad51
add ecx, ebx
mov edx, 0x532a35f2
xor ebx, edx
add esi, 0x532aaf9e
jmp 0x477f3c
push 0x4e896928
add ebx, esi
add edx, ebx
xchg esi, ecx
not esi
sub ecx, esi
mov ebx, ecx
xchg ebx, edx
add ecx, esi
xchg esi, edx
mov esi, ebx
xchg ebx, edx
bswap ecx
jmp 0x475bab
push 0x4e560b5b
and ebx, ecx
or ecx, ebx
xor edx, ebx
nop
add esi, 0x53462506
shl edx, 0xd
xchg edx, ebx
and edx, 0x53474efe
add edx, ebx
or ebx, 0x5347d857
xor ecx, 0x534818a5
xchg ebx, edx
and ecx, edx
shr edx, 0xd
inc ebx
jmp 0x475cc7
pop edi
and ebx, esi
shl edx, 0xf
shl esi, 0x1f
mov esi, 0x53515b87
and ebx, edx
mov ebx, ecx
add esi, 0x535214a3
mov ecx, ebx
mov edx, esi
xor ecx, 0x5352dba9
mov esi, ebx
inc esi
dec ecx
jmp 0x4772aa
push 0x4e5d4503
ror esi, 0x1f
xchg ebx, esi
xchg esi, ecx
and ebx, ecx
mov ecx, esi
neg ebx
or ebx, esi
or edx, ebx
ror ebx, 0xe
ror ecx, 0x1d
sub esi, 0x5356bea5
mov ebx, 0x53572858
xor edx, esi
and esi, ecx
mov edx, 0x5357ed0e
jmp 0x4771f4
pop edi
add ebx, 0x535f332c
and ecx, edx
neg esi
jmp 0x477a66
pop edi
xor ecx, edx
mov esi, 0x53605499
and ebx, edx
xor esi, ecx
and edx, 0x5361703b
shl edx, 9
jmp 0x477928
push 0x4e83126e
sub esi, ecx
mov esi, ebx
or esi, 0x536d33ef
sub edx, esi
ror ecx, 8
or esi, edx
and ecx, edx
xor edx, esi
add esi, ebx
rol ebx, 0x10
jmp 0x475678
push 0x4e5aac01
xchg ecx, ebx
inc edx
sub edx, esi
xchg ecx, edx
add esi, ecx
not ebx
bswap esi
xor esi, 0x53740023
xor edx, esi
bswap ebx
mov esi, edx
jmp 0x477dcb
push 0x4e85ce1a
or edx, 0x538eb1cd
xor ebx, ecx
neg edx
mov ebx, ecx
xchg esi, edx
inc ebx
xchg esi, ecx
xor ecx, esi
xchg ecx, esi
not edx
jmp 0x476616
call edi
and ecx, 0x53a9b83f
xor ecx, ebx
add edx, esi
dec esi
add edx, esi
xchg ecx, ebx
ror edx, 7
and ecx, edx
rol ebx, 0x19
shl ecx, 0xe
jmp 0x476bca
pop edi
and ebx, ecx
ror ebx, 0x1c
sub ebx, 0x53b19010
or ebx, 0x53b1fb0d
shr ecx, 4
xor ecx, ebx
xor ecx, 0x53b2cfe2
xor ebx, esi
or esi, edx
and ebx, ecx
jmp 0x476fb4
push 0x4e59d007
and edx, esi
mov ecx, edx
and esi, 0x53ba0272
and ecx, 0x53ba411f
sub esi, 0x53ba9019
mov ecx, 0x53bacfcd
mov ebx, ecx
or ecx, esi
sub ebx, esi
bswap edx
dec ecx
mov ebx, 0x53bc4418
jmp 0x475f48
call edi
mov ecx, ebx
sub edx, ecx
sub esi, ecx
mov edx, esi
jmp 0x47754e
mov edi, 0x4132136a
or ecx, esi
and ebx, ecx
sub ecx, ebx
add edx, ebx
shl edx, 9
mov ecx, ebx
dec ecx
mov ebx, esi
sub esi, ecx
mov edx, ebx
xchg ebx, edx
or esi, ecx
shl ecx, 0x13
jmp 0x476dbc
push 0x4e891ef6
xchg esi, ebx
mov ecx, ebx
add esi, ebx
or edx, ecx
rol ecx, 0x13
xchg edx, esi
xor ebx, ecx
xchg ecx, esi
xchg ebx, edx
sub ebx, edx
inc esi
xor ecx, ebx
jmp 0x478247
call fcn.00476156
xor ecx, edx
xchg ecx, ebx
add ecx, 0x53cf9d7a
add esi, 0x53cfe58c
sub esi, 0x53d050aa
ror ecx, 0x14
mov ecx, edx
mov ebx, edx
shl ebx, 0x12
sub ebx, ecx
bswap esi
dec ecx
and ebx, ecx
shl ebx, 0x10
jmp 0x478742
pop edi
xor ecx, edx
xchg edx, esi
xchg esi, edx
xor esi, edx
mov ecx, edx
add esi, 0x53e363e9
jmp 0x4754d9
push 0x4e57cc49
or esi, ecx
and esi, edx
sub edx, esi
xchg ecx, edx
mov ebx, esi
mov edx, 0x53e8b4ef
xchg edx, ebx
mov edx, esi
xchg esi, ebx
and ebx, ecx
rol ecx, 0xa
or ebx, esi
or esi, edx
jmp 0x47707d
push 0x4e787aae
mov ebx, edx
and edx, esi
xchg edx, ebx
not esi
neg esi
or esi, ebx
xchg ecx, esi
jmp 0x4780f0
pop edi
inc esi
ror ebx, 0x1c
sub esi, edx
mov edx, ebx
nop
xchg edx, ecx
ror ebx, 0x10
sub ecx, ebx
and edx, esi
jmp 0x475627
push 0x4e851cd1
xchg ecx, edx
dec ecx
add edx, esi
dec edx
xchg ebx, edx
add esi, ebx
xchg esi, ebx
bswap edx
xor edx, ecx
neg esi
sub ebx, edx
sub esi, 0x540015ce
jmp 0x475aba
pop edi
mov esi, ebx
sub ecx, esi
sub edx, ecx
add ecx, edx
sub edx, ecx
xor edx, ecx
or esi, ebx
and esi, edx
dec ebx
not esi
sub edx, ebx
bswap ecx
xchg ecx, edx
sub ecx, 0x5404541b
or esi, 0x540492f9
jmp 0x4760c0