Function at 0x401000
Capabilities:
Encrypt data using chaskey
Extract resource via kernel32 functions
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xffffff19
jne 0x401075
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.kernel32.dll_LockResource
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xffffff22
jne 0x4010f9
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.kernel32.dll_LockResource
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xffffff29
jne 0x4011a5
call sub.kernel32.dll_LockResource
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xfffffef2
jne 0x401242
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.advapi32.dll_DuplicateEncryptionInfoFile
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
call sub.oleaut32.dll_VarI8FromStr
call sub.kernel32.dll_LockResource
call sub.oleaut32.dll_VarI8FromStr
ret
jmp 0x475068
neg edi
jmp 0x4762b8
push 0x401400
and edi, ebx
or esi, 0xe9aa2896
and esi, ebx
xchg ebx, esi
rol esi, 0x1e
sub ecx, 0xe9ab2cca
jmp 0x476cea
call fcn.0047841b
ror ebx, 0xf
or edi, 0xe9abc2c2
sub ebx, edi
inc ecx
mov esi, ecx
xchg esi, edi
xchg ecx, edi
add esi, edi
xor ecx, edi
shl ecx, 0xe
sub ecx, esi
jmp 0x476ac6
push 0xe8b9c13c
sub edi, ebx
mov ecx, esi
sub edi, 0xe9af8bee
or edi, esi
not ecx
bswap ebx
and ebx, edi
mov ebx, esi
xchg ecx, ebx
shl esi, 0x1d
sub esi, 0xe9b18af9
xchg ecx, esi
jmp 0x476245
pop edx
inc edi
or esi, ebx
xchg ecx, ebx
not ecx
xchg esi, ebx
xchg ecx, esi
shl edi, 0xd
dec edi
mov edi, ebx
ror ebx, 2
jmp 0x4755b7
push 0xe8a7006a
ror edi, 0x16
xor edi, ecx
nop
neg esi
shl esi, 0xc
add ebx, esi
or esi, edi
xchg esi, ecx
xor ecx, edi
and ebx, 0xe9bee6e5
not esi
shr esi, 0x16
and ebx, esi
xor esi, edi
neg ebx
add esi, ecx
jmp 0x475cc6
mov edx, 0x123b2f04
sub edi, ebx
xor ecx, edi
and ebx, 0xe9c12da8
and ebx, 0xe9c16c99
mov ebx, ecx
sub ebx, edi
or ebx, 0xe9c2a0df
mov esi, ebx
jmp 0x477365
pop edx
shr esi, 0x11
xor ecx, esi
add ecx, esi
nop
or ecx, edi
shr ecx, 7
inc esi
sub ecx, esi
sub ecx, edi
shr esi, 0x13
shl ebx, 6
xchg esi, ecx
not edi
or ebx, esi
jmp 0x476c1c
push 0xe8c06b87
mov ebx, 0xe9d407d1
neg ebx
or ebx, esi
xor esi, ebx
sub esi, 0xe9d4fde0
inc edi
shl ecx, 0x12
xchg ecx, edi
inc edi
jmp 0x4783bf
pop edx
add edi, esi
and esi, edi
xchg edi, ecx
sub ebx, edi
xchg ebx, edi
and edi, ebx
inc ecx
add esi, ecx
sub ecx, edi
jmp 0x4753d9
pop edx
sub edi, esi
add edi, 0xe9da138e
sub ebx, esi
or edi, ecx
sub ecx, 0xe9daccf2
mov ebx, ecx
add esi, 0xe9db461a
sub ecx, ebx
sub edi, esi
jmp 0x475f26
mov edx, 0x123b2f04
and ecx, edi
mov edi, ebx
inc edi
add edi, esi
or ebx, edi
and ebx, 0xe9e39a69
bswap ebx
bswap esi
mov esi, ecx
jmp 0x47607e
call edx
shl ebx, 0x1c
or ebx, esi
xor ecx, ebx
or ecx, 0xe9e56855
xor edi, 0xe9e5a8ef
mov esi, 0xe9e5e7b4
or esi, ebx
or ecx, ebx
rol ecx, 0x17
xchg ebx, ecx
and edi, ecx
jmp 0x47658b
pop edx
xchg edi, ebx
sub edi, 0xe9e7c286
xor edi, ecx
mov ecx, ebx
bswap edi
or edi, ecx
shl ebx, 0xd
dec ecx
sub ecx, 0xe9e9881b
and ecx, 0xe9e9c7d0
shl esi, 0xf
ror edi, 0x1b
or esi, ebx
mov ecx, ebx
mov ebx, 0xe9eafefd
sub esi, edi
jmp 0x476947
pop edx
bswap ebx
add edi, ebx
xor edi, 0xe9ed36f6
rol ebx, 5
or ebx, edi
add esi, ecx
mov ebx, edi
not ebx
jmp 0x475db2
push 0xe8a46562
dec edi
or ecx, ebx
and ebx, esi
add ebx, edi
bswap esi
dec esi
xchg edi, esi
or ecx, 0xe9fbcb9f
or edi, ecx
nop
jmp 0x476ec6
push 0xe8c102ac
shl ecx, 4
sub edi, ebx
xchg edi, esi
shr ecx, 4
or ebx, esi
or ebx, ecx
xchg ecx, esi
mov ebx, ecx
neg edi
jmp 0x476a8c
pop edx
add edi, ecx
sub ecx, 0xe9ff467f
bswap edi
mov ecx, ebx
sub edi, ebx
add esi, ecx
xor ecx, edi
xor esi, 0xea00c969
or edi, ebx
shl esi, 0xc
rol ecx, 5
shr edi, 0x11
dec ecx
xor esi, ecx
jmp 0x47830f
mov edx, 0x123b2f04
xchg ebx, edi
mov ecx, edi
sub edi, esi
add ebx, 0xea034fde
xor ebx, esi
add ebx, esi
bswap ecx
inc edi
or esi, ecx
add ebx, edi
add esi, 0xea0510df
and edi, esi
jmp 0x475c65
pop edx
mov edi, esi
bswap ecx
add edi, 0xea0d45d6
sub ecx, edi
neg esi
neg ebx
jmp 0x476cc4
pop edx
and ebx, 0xea0fc540
rol esi, 0x1b
ror ebx, 0x1c
add ebx, ecx
ror edi, 0x12
inc ebx
shl edi, 0x16
shr edi, 0x1b
add ebx, edi
xchg esi, ebx
add esi, ebx
jmp 0x47751e
push 0xe8ac41f8
or edi, ebx
xchg esi, ecx
or edi, 0xea1c1130
xor esi, ebx
shr ebx, 7
xchg ecx, esi
and ecx, 0xea1d15d0
or ecx, esi
or ebx, esi
jmp 0x4759f3
mov edx, 0x73716341
and ecx, esi
add edi, ecx
or edi, 0xea24d67e
shl edi, 4
xor esi, edi
mov ebx, esi
neg ebx
add edi, esi
xor esi, 0xea26573e
and ebx, esi
xor ecx, 0xea26d0b3
or edi, esi
bswap ecx
jmp 0x477e26
call fcn.0047841b
mov ebx, esi
bswap ecx
xchg ecx, esi
xchg esi, edi
xor esi, ecx
or edi, 0xea329850
or edi, ecx
and edi, ecx
and ecx, 0xea333d9a
xchg ebx, edi
jmp 0x477ca0
pop edx
shr esi, 0x10
sub edi, 0xea340043
xchg ebx, edi
and esi, ecx
xor esi, 0xea34b7db
xor esi, 0xea34ef42
xor esi, 0xea352988
jmp 0x4768d8
push 0xe8ad8e49
mov ebx, edi
inc edi
shl ecx, 0x1b
xchg esi, edi
xor esi, ecx
add esi, ebx
xchg edi, ebx
or ecx, edi
or esi, 0xea405f4b
xor ebx, esi
xchg ebx, edi
jmp 0x477f96
pop edx
add edi, 0xea4cad2f
or esi, ebx
sub ebx, edi
xor ebx, ecx
sub esi, 0xea4d8bab
sub edi, ebx
neg ebx
xor ecx, edi
add edi, 0xea4e7afd
jmp 0x4776f5
push 0xe8ac9467
sub ebx, esi
add edi, ecx
not ebx
and ebx, 0xea5929f6
xor esi, ecx
inc esi
jmp 0x47829b
pop edx
mov edi, 0xea5d6fed
xchg edi, ebx
shr esi, 0xf
mov ecx, 0xea5e2830
xor ecx, esi
add ebx, edi
rol ebx, 0x17
xor edi, ebx
add edi, ecx
and ecx, edi
and ecx, esi
shr ecx, 0x11
or esi, edi
jmp 0x476788
call edx
xchg edi, ecx
rol ebx, 0x12
xor ecx, ebx
add esi, edi
mov edi, esi
nop
xor ecx, edi
add ecx, esi
ror ebx, 0x1f
shl ecx, 0x1f
or esi, ebx
sub esi, ecx
jmp 0x478232
pop edx
sub edi, esi
mov ecx, ebx
rol edi, 9
or edi, ecx
jmp 0x476e0e
push 0x73c68
and ecx, ebx
and ecx, esi
sub edi, ebx
jmp 0x47506f
pop edx
shr edi, 0x18
mov ebx, edi
add edi, esi
sub edi, ebx
add esi, ecx
mov ecx, edi
mov ebx, 0xea798099
ror ebx, 0x1b
bswap ecx
xor esi, ecx
xor ecx, 0xea7a85f8
rol ecx, 6
jmp 0x4752c8
call edx
and esi, ecx
dec ebx
add edi, 0xea7b8f4c
xor esi, 0xea7bdf8c
and edi, esi
xchg ebx, esi
or ecx, edi
shl esi, 0x18
sub ebx, esi
xchg esi, ecx
xor esi, edi
jmp 0x4752b1
call fcn.0047841b
shl ecx, 4
xor ebx, edi
shr edi, 0xf
sub ebx, esi
sub esi, edi
mov ecx, ebx
xor esi, ecx
ror ecx, 3
and ebx, 0xea7fd6c2
sub esi, 0xea8014ee
sub edi, 0xea8052c2
xor ecx, 0xea808f42
jmp 0x477d67
mov edx, 0x123b2f04
or esi, edi
xor esi, ecx
rol ebx, 4
add ecx, edi
add ebx, esi
jmp 0x4779f1
push 0xe8b27ecf
xchg ecx, ebx
ror edi, 0x15
inc ecx
add edi, ebx
add edi, ecx
xchg esi, ecx
jmp 0x4761c3
call fcn.0047841b
mov ecx, esi
xchg ecx, esi
sub ecx, 0xea871e18
xor ecx, esi
jmp 0x475365
call edx
or esi, ecx
shr ecx, 0x10
xor ebx, edi
xor ebx, edi
rol ecx, 0x18
ror ecx, 0x1c
rol ecx, 1
sub esi, ecx
add esi, ecx
sub ebx, ecx
xor esi, 0xea8ade40
jmp 0x4769f9
mov edx, 0x73716341
mov esi, 0xea8b3ce4
or edi, ecx
neg ebx
xchg edi, ebx
mov ebx, esi
add ebx, 0xea8c8387
xor edi, esi
dec ebx
add esi, ecx
and ecx, ebx
or edi, ecx
jmp fcn.00476f42
push 0xe8a75493
add ebx, esi
add esi, edi
and edi, 0xea8eb367
xor ecx, ebx
and esi, 0xea8f2f67
dec ebx
bswap ecx
or edi, ecx
jmp 0x476f72
push 0xe8a270a5
and ecx, esi
bswap edi
xor edi, esi
add ebx, edi
sub edi, ecx
xor esi, edi
xchg ecx, edi
jmp 0x47770a
pop edx
shr edi, 5
xchg ebx, ecx
xchg edi, ebx
mov ebx, ecx
xor ebx, 0xeabcd8bb
bswap ebx
or esi, 0xeabd5672
add ecx, edi
jmp 0x47516a
push 0xe8b61da6
xor edi, ebx
add ebx, edi
xor esi, 0xeacdfcd0
or ebx, esi
inc esi
rol edi, 0x19
sub ebx, edi
jmp 0x477ded
call fcn.0047841b
add edi, ebx
mov esi, 0xead4a1ff
xchg esi, ebx
sub ecx, 0xead51bbd
neg edi
sub esi, ebx
jmp 0x475aca
pop edx
shl esi, 4
bswap ecx
sub esi, edi
add edi, ecx
sub ecx, 0xeadfefb6
mov ebx, esi
rol ebx, 0x11
add edi, 0xeae0a5d3
and ebx, 0xeae0e237
jmp 0x4778f0
push 0xe8b96c95
xchg ebx, esi
sub esi, edi
xchg ebx, esi
add esi, ecx
mov ecx, esi
and ecx, edi
or ebx, 0xeae88c8a
sub ebx, 0xeae8c948
inc ebx
and ebx, ecx
xchg esi, ecx
jmp 0x4750b3
push 0xe8b2d2aa
not ebx
mov edi, ebx
not ecx
jmp 0x4765b4
push 0xe8ba16c8
mov esi, ecx
mov ebx, 0xeaf46777
mov ecx, edi
not edi
xor ecx, edi
or esi, ecx
or esi, ecx
dec edi
jmp 0x477c50
push 0xe8a0144f
mov ebx, 0xeafb605b
mov ecx, 0xeafb99cc
or ebx, ecx
add esi, ecx
and esi, ecx
ror ebx, 0x10
bswap ebx
xor ecx, ebx
sub edi, 0xeafd2c0a
jmp 0x477a2c
pop edx
xor ecx, edi
or edi, ebx
dec ecx
xor ecx, ebx
jmp 0x476189
call edx
inc esi
mov edi, 0xeb02ca3f
ror ecx, 0xe
and ecx, ebx
sub ecx, 0xeb0382da
xchg edi, ebx
and ebx, esi
add ecx, edi
jmp 0x47538f
push 0xe8aa476e
mov esi, ecx
mov ecx, 0xeb0656ae
xor ecx, ebx
and edi, 0xeb06c5e5
bswap ecx
ror esi, 9
mov ebx, esi
and edi, ecx
shl esi, 0x12
dec esi
xchg edi, esi
not esi
add edi, esi
jmp 0x477bae
call fcn.0047841b
xchg ecx, ebx
ror ecx, 0x10
inc ecx
dec edi
jmp 0x476fa1
push 0xe8b22ad1
xchg ebx, edi
dec edi
or ebx, ecx
sub edi, ecx
dec edi
xor edi, ecx
shl ebx, 0x1e
add ebx, esi
nop
jmp 0x475c4f
call fcn.0047841b
sub esi, ecx
dec esi
and ecx, edi
add esi, ebx
not ecx
dec ecx
or esi, ebx
shl esi, 8
ror edi, 0x13
add ecx, esi
jmp 0x475c7b
pop edx
xor esi, edi
and edi, ecx
sub edi, ebx
xchg ecx, ebx
jmp 0x47593b
pop edx
shr esi, 1
or ecx, esi
add ebx, edi
and edi, 0xeb3030f7
mov edi, ebx
mov ebx, esi
bswap edi
add ebx, edi
jmp 0x477e76
mov edx, 0x123b2f04
mov esi, edi
sub ebx, esi
or ecx, edi
sub ebx, ecx
mov edi, ebx
and ecx, ebx
not ecx
and ebx, 0xeb332f9b
sub esi, 0xeb337de1
mov ebx, edi
xchg edi, ecx
mov esi, edi
or esi, ebx
rol ebx, 0x16
jmp 0x478251
pop edx
mov esi, ebx
neg esi
xor ecx, edi
sub ecx, esi
dec ecx
and edi, ecx
or ebx, esi
add esi, ecx
mov ebx, 0xeb421d02
mov ebx, ecx
xchg ebx, ecx
jmp 0x4773b3
push 0xe8b52099
inc esi
or esi, edi
sub edi, ebx
rol edi, 7
mov edi, 0xeb48a187
sub ebx, ecx
jmp 0x477853
mov edx, 0x4132136a
mov ecx, edi
neg ebx
or ecx, esi
xor edi, esi
xor ebx, 0xeb547f82
xchg esi, ebx
xchg esi, ecx
or edi, ecx
add esi, 0xeb558ab1
and ebx, esi
jmp 0x47508e
push 0xe8c70f9d
bswap ebx
xor esi, ecx
sub ebx, esi
sub ebx, esi
or edi, ebx
add esi, 0xeb6e0c13
neg ecx
sub ebx, edi
inc ecx
mov ecx, edi
sub esi, ebx
or ecx, edi
jmp 0x477248
pop edx
or ebx, 0xeb71c778
sub esi, ebx
or edi, ebx
or edi, 0xeb7281b1
xchg ecx, ebx
or esi, ebx
xchg ecx, esi
and ecx, edi
or edi, ecx
xchg ecx, esi
not ecx
and edi, ebx
bswap ecx
xchg ebx, edi
jmp 0x476698
pop edx
sub ebx, edi
mov edi, 0xeb7596cf
and ecx, ebx
and edi, ecx
and esi, edi
sub esi, ecx
xor ecx, 0xeb76d793
add esi, 0xeb7716a3
mov esi, ecx
xor esi, 0xeb779061
add ebx, ecx
jmp 0x476c83
pop edx
xchg esi, ecx
xchg esi, edi
neg esi
add esi, edi
mov esi, ecx
xchg edi, ecx
add ecx, esi
jmp 0x477e55
push 0xe8c14d01
bswap ebx
or edi, esi
xchg edi, ebx
xchg ecx, esi
jmp 0x47519a
push esp
sub ecx, esi
xor ecx, edi
and ebx, ecx
inc ebx
and ecx, 0xeb96eae9
or ecx, 0xeb973ad3
and ecx, edi
mov edi, 0xeb97b613
sub ecx, esi
jmp 0x47800c
pop edx
sub esi, ecx
xor edi, ebx
mov edi, 0xebabbbd1
and ecx, 0xebabfaaf
jmp 0x47631e
push 0xe8c01f73
mov ecx, ebx
dec edi
dec edi
xor ecx, edi
jmp 0x47528f
pop edx
and esi, 0xebb607b1
inc ecx
mov edi, ecx
shr ecx, 0x1c
xor ecx, edi
sub ecx, edi
inc esi
sub ecx, esi
or ecx, esi
jmp 0x476bf0
pop edx
bswap edi
shr esi, 0x15
sub ebx, ecx
ror esi, 0xc
xchg esi, ebx
add ebx, ecx
ror esi, 0x14
xchg ecx, esi
mov edi, 0xebbc84ba
or ecx, esi
xor ecx, esi
sub ecx, ebx
sub edi, ecx
jmp 0x4754ca
call edx
xchg ebx, ecx
neg ecx
and ebx, esi
sub ebx, esi
add edi, 0xebbede90
or ebx, esi
xor edi, 0xebbf5885
inc ecx
rol edi, 0x1f
sub ecx, edi
jmp 0x4757b2
push 0xe8a9f30c
bswap edi
xchg esi, edi
ror ebx, 6
xchg ebx, esi
xor edi, 0xebc29f96
sub esi, edi
not ebx
or ecx, esi
sub ecx, edi
shl ecx, 0x13
mov esi, ebx
shr edi, 0xa
jmp 0x476362
pop edx
and esi, ebx
and ecx, 0xebd273a6
mov ebx, esi
and edi, 0xebd2ea15
xchg ebx, esi
add ecx, edi
jmp 0x47814e
push 0xe8a4b800
add esi, ecx
add esi, 0xebdf03ae
xchg ebx, esi
mov esi, ecx
sub ebx, edi
mov ebx, esi
dec esi
add edi, ebx
xchg ecx, esi
dec ecx
add edi, esi
xchg ecx, edi
dec ecx
jmp 0x475c3a
call edx
xchg ecx, ebx
add ebx, 0xebea6900
xchg ebx, edi
shr esi, 7
bswap edi
add esi, 0xebeb60b8
jmp 0x4750ec
push 0xe8a7a7c2
or edi, ecx
and ecx, esi
shl edi, 8
xor ebx, ecx
or edi, ebx
or esi, ebx
and esi, ebx
add ebx, esi
or ebx, 0xebeda440
xchg ebx, edi
or ebx, ecx
jmp 0x4754f6
call edx
bswap ebx
sub ebx, 0xebef526c
xor esi, edi
nop
add edi, ebx
dec esi
mov esi, ebx
xchg ecx, ebx
sub ebx, 0xebf10bd1
mov ebx, edi
sub edi, esi
bswap ecx
and ebx, edi
add esi, ebx
jmp 0x4772e7
call fcn.0047841b
inc esi
ror ecx, 5
add edi, ecx
xor ecx, ebx
add esi, ebx
xor ecx, 0xebf6822a
add edi, 0xebf6d095
sub ecx, esi
sub ecx, ebx
xor esi, ebx
mov ebx, esi
jmp 0x477dc9
pop edx
and ebx, ecx
shr esi, 0x1f
jmp 0x477e18
mov edx, 0x123b2f04
mov ebx, ecx
add esi, ebx
not edi
and esi, edi
bswap ebx
bswap ecx
and ebx, esi
bswap esi
ror ecx, 0xa
shl edi, 0x12
inc ebx
sub ebx, 0xec3fd1e0
jmp 0x475be1
push 0xe8c759df
xchg edi, ebx
nop
or esi, 0xec4e8193
mov edi, 0xec4ec882
mov ecx, esi
or edi, ebx
jmp 0x4781c3
push 0xe8b5c825
not ecx
xor edi, 0xec50814b
inc ecx
mov ebx, ecx
add ecx, 0xec514927
xor edi, esi
xchg edi, ebx
dec esi
sub esi, 0xec523ff1
sub ecx, esi
or edi, 0xec52b839
jmp 0x476021
pop edx
xchg edi, ebx
shl ebx, 7
sub ecx, 0xec5923f2
xchg edi, esi
mov esi, ecx
xchg ecx, ebx
mov ecx, esi
and edi, ecx
jmp 0x4783e1
call edx
ror edi, 5
xchg esi, edi
xor edi, ebx
and edi, 0xec5f7050
jmp 0x475b94
call fcn.0047841b
and ebx, ecx
bswap ebx
and edi, 0xec626197
sub ecx, edi
not ebx
xchg esi, edi
inc ebx
or ebx, ecx
or ecx, ebx
dec esi
jmp 0x4776bd
push 0xe8b083ea
or ebx, edi
add ecx, 0xec67182d
shl esi, 8
bswap edi
xor ebx, esi
inc ebx
rol ebx, 0x1d
neg ecx
rol esi, 0xd
and ebx, 0xec69187f
add ebx, ecx
inc esi
xor esi, ebx
or ecx, esi
or esi, 0xec6a46e0
jmp 0x475346
pop edx
xor ecx, esi
sub edi, ecx
or edi, 0xec77c845
sub ecx, 0xec780664
xor esi, 0xec784475
xor ebx, esi
xor edi, esi
or ebx, edi
sub esi, 0xec79465c
jmp 0x47691d
push 0xe8bd2d5b
xor edi, ebx
bswap esi
add edi, 0xec7a1a0b
or edi, ebx
and ecx, ebx
neg ecx
add esi, 0xec7b1eed
jmp 0x477d88
pop edx
ror esi, 0x15
add ecx, ebx
dec esi
dec ebx
sub ebx, 0xec81fff4
mov ecx, 0xec823d7c
jmp 0x4766f0
call fcn.0047841b
add ecx, esi
dec ebx
xor ebx, ecx
add ebx, edi
mov esi, ecx
inc ecx
or ecx, esi
sub ecx, edi
not ecx
dec ebx
sub ecx, edi
jmp 0x47632b
call edx
mov ebx, ecx
sub edi, ebx
rol esi, 0x1a
xor edi, esi
sub ecx, esi
rol esi, 1
bswap edi
jmp 0x476111
pop edx
mov edi, ebx
dec ecx
xor ecx, esi
sub esi, ecx
inc ebx
or esi, ecx
mov ecx, ebx
shl esi, 0x12
jmp 0x476d24
mov edx, 0x73716341
bswap ecx
add ebx, esi
jmp 0x47646c
push 0xe8bdc497
or edi, esi
xor ebx, 0xeca9b9ea
not ebx
bswap esi
ror ebx, 4
dec edi
and ecx, esi
jmp 0x47715e
push 0xe8b574e1
and ecx, esi
shl esi, 0x18
not edi
mov esi, 0xecc0f891
and ecx, ebx
add esi, edi
xor esi, edi
sub ebx, ecx
jmp 0x477264
pop edx
shr edi, 0x13
mov esi, 0xed79d985
add edi, ebx
xor esi, edi
add esi, 0xed7a93cc
dec ebx
mov ecx, edi
sub edi, 0xed7b5ebb
and ecx, 0xed7b9d00
mov edi, ecx
sub edi, ecx
sub esi, ecx
xchg ecx, edi
xor ecx, 0xed7cd27f
sub ecx, esi
jmp 0x4770c5
push 0x40
sub esi, ecx
rol esi, 0x1d
neg ecx
mov edi, ebx
neg ebx
rol esi, 0x14
or esi, ecx
mov ecx, ebx
and ebx, edi
or edi, esi
neg edi
shl esi, 0x17
and esi, ebx
and edi, esi
xor ecx, 0xed8598a5
jmp 0x475b84
call fcn.0047841b
xchg esi, ebx
xchg esi, ecx
bswap esi
and edi, esi
xor edi, esi
xor esi, ebx
sub ecx, edi
or ecx, esi
jmp 0x47733b
push 0xe8a0732d
xor ecx, ebx
xchg ebx, edi
mov ebx, ecx
xor ebx, esi
sub esi, 0xed924dc8
jmp 0x4756d4
push 0xe8ad3cb1
ror edi, 0xf
or esi, ebx
or esi, ebx
and ebx, ecx
or edi, esi
xor edi, esi
or ebx, ecx
xor ebx, edi
or ebx, esi
mov ebx, edi
or esi, ecx
xor ecx, 0xed9554b0
xchg esi, ecx
inc esi
jmp 0x475874
mov edx, 0x123b2f04
add ecx, 0xedad1e9b
add ebx, 0xedad5b98
mov esi, 0xedad98ef
dec edi
or ebx, ecx
shl edi, 0x1c
rol ecx, 0x13
shl ebx, 0x11
rol esi, 0x14
add ecx, 0xedaf557b
jmp 0x47578c
mov edx, 0x123b2f04
inc edi
sub ebx, ecx
dec edi
shr ebx, 0x1c
shr esi, 0x1d
and ebx, esi
rol ecx, 0x16
sub edi, ebx
mov esi, edi
mov ecx, ebx
nop
and esi, edi
jmp 0x476ffa
call edx
xchg esi, ebx
add edi, ecx
ror ecx, 0x1a
neg edi
or esi, 0xedbe3206
and ecx, ebx
and edi, esi
or edi, 0xedbee5e7
rol ebx, 0x11
rol ebx, 0x1b
xor ebx, 0xedbfad78
add esi, ebx
and edi, esi
sub ecx, ebx
rol ebx, 0x1b
jmp 0x476599
call edx
xchg esi, ebx
xchg esi, ebx
add ecx, ebx
inc ebx
rol ecx, 0xa
inc ebx
and esi, 0xedcd1927
xchg ebx, ecx
rol ecx, 0x10
mov ebx, esi
sub edi, ecx
jmp 0x475b54
push 0xe8bd79a1
not edi
sub ecx, esi
sub edi, ebx
dec ecx
or ebx, 0xedcf653b
sub esi, 0xedcfa3b5
jmp 0x477743
call edx
xchg ebx, edi
xchg ebx, ecx
or ebx, 0xedd3b50a
sub ecx, 0xedd3f3b6
or ecx, edi
or ecx, esi
xchg ebx, ecx
inc ecx
and esi, ebx
add ecx, ebx
or esi, edi
jmp 0x475585
push 0xe8b671eb
sub edi, ecx
bswap ecx
shl ebx, 3
or esi, 0xedd6b11f
sub edi, ebx
xor esi, 0xedd72a34
and ecx, 0xedd7676a
xchg esi, ecx
mov ebx, ecx
xchg ebx, ecx
jmp 0x478074
pop edx
or esi, ecx
and ebx, esi
or ecx, esi
xchg ecx, ebx
jmp 0x475a32
call fcn.0047841b
add edi, 0xedd99624
mov ecx, 0xedd9d3c5
xchg edi, ecx
inc ecx
xor edi, 0xedda8a6e
xchg ebx, ecx
xor esi, ebx
xchg edi, ecx
and edi, ecx
rol esi, 0x1a
or edi, ebx
or ebx, ecx
or ebx, ecx
jmp 0x475bbc
push 0xe8a41232
ror ebx, 0x14
sub edi, esi
or ebx, 0xeddd4866
add edi, esi
add edi, esi
not ecx
sub ebx, edi
sub ebx, ecx
xor esi, edi
jmp 0x47548d
pop edx
xchg edi, ecx
bswap esi
mov ecx, ebx
add ecx, edi
sub esi, edi
and ecx, edi
mov edi, esi
inc ecx
mov ebx, 0xede104ac
and edi, 0xede141e8
jmp 0x475647
mov edx, 0x73716341
xor esi, edi
mov edi, ecx
add edi, 0xedf4f765
mov ecx, esi
add ebx, ecx
sub ebx, edi
xor ebx, edi
mov ecx, ebx
not ebx
neg ebx
jmp 0x47638e
push esp
sub esi, edi
sub ebx, edi
mov esi, edi
bswap ecx
and edi, ebx
shl ecx, 0x17
xchg esi, ebx
xor esi, edi
mov ecx, ebx
jmp 0x477961
mov edx, 0x123b2f04
xor esi, ebx
xchg edi, ecx
add ebx, ecx
or esi, ecx
xor ecx, 0xee0b4bce
add esi, edi
jmp 0x47761f
pop edx
xor esi, ebx
rol ebx, 0x13
and esi, ecx
shl edi, 0x1b
ror ebx, 0xe
xchg edi, esi
add ecx, 0xee25c26c
jmp 0x4751e5
push 0xe8c7a361
xor ecx, 0xee2caaee
or ebx, edi
mov ecx, edi
xchg edi, ebx
and edi, esi
and ebx, edi
xchg ebx, ecx
xchg ecx, edi
neg edi
xchg ecx, esi
jmp 0x475ca0
pop edx
mov ecx, esi
add edi, ecx
dec ebx
shr esi, 2
sub edi, 0xee368bc2
mov edi, ecx
inc edi
add edi, esi
or ebx, 0xee377e8b
jmp 0x476452
call fcn.0047841b
sub ebx, edi
or edi, ebx
or ecx, esi
mov edi, 0xee388aee
or ebx, esi
and edi, ecx
sub edi, esi
xchg ecx, edi
ror edi, 0x1b
jmp 0x476f56
push 0xe8ace8c8
or edi, 0xee3da6d9
or ebx, edi
add ebx, esi
and edi, ecx
xchg edi, ebx
or esi, 0xee3eebba
jmp 0x477a44
push 0xe8bce296
add edi, 0xee45d4bb
and edi, ebx
sub ecx, 0xee466042
xor ecx, esi
inc ecx
add ecx, esi
or ecx, 0xee475235
sub ecx, esi
xchg esi, ebx
jmp 0x4774b7
push 0xe8c0b6da
and edi, ecx
mov edi, 0xee51cb9e
mov ebx, edi
and edi, esi
bswap ebx
sub ecx, ebx
sub ecx, esi
and esi, ecx
rol edi, 9
and esi, ebx
jmp 0x4754ac
pop edx
inc ecx
xchg edi, ecx
or edi, esi
and ebx, esi
sub esi, 0xee55203a
mov ecx, ebx
bswap edi
jmp 0x47748f