Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
call sub.user32.dll_GetKBCodePage
cmp eax, 0xfffffefc
jne 0x401093
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
ret
call sub.user32.dll_GetCapture
cmp eax, 0xfffffee4
jne 0x4010fe
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
ret
call sub.user32.dll_GetKBCodePage
cmp eax, 0xfffffef9
jne 0x401164
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
ret
call sub.user32.dll_GetCaretBlinkTime
cmp eax, 0xffffff0d
jne 0x4011f2
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
ret
call sub.user32.dll_GetKBCodePage
cmp eax, 0xfffffeed
jne 0x40128a
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.ntdll.dll_RtlUnicodeStringToInteger
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
call sub.user32.dll_UnhookWindowsHookEx
ret
jmp 0x4750f2
xchg ecx, edx
add ebx, ecx
sub ecx, 0x648c3e56
add edx, ecx
mov ebx, ecx
jmp 0x475dc2
push 0x64a49f1d
sub ebx, esi
mov ebx, esi
xchg ebx, ecx
inc esi
shl esi, 0x17
sub ecx, 0x6535c45d
sub ecx, edx
mov esi, ecx
not esi
sub edx, 0x6536a9fc
or ecx, esi
jmp 0x476949
push 0x64aefe8f
bswap edx
add edx, 0x65376906
inc edx
add ecx, ebx
not esi
or ebx, 0x6538558a
sub ebx, ecx
mov edx, ebx
xchg ebx, edx
sub ebx, 0x65392d53
and edx, ecx
sub esi, edx
jmp 0x4775f7
pop edi
rol edx, 0x15
mov esi, edx
mov edx, esi
xchg esi, ebx
and ecx, ebx
dec esi
add esi, ecx
xor ecx, edx
shl ebx, 0xe
add esi, ebx
xor esi, ecx
sub ebx, edx
inc ecx
jmp 0x477332
call edi
xchg ecx, edx
add ebx, ecx
sub edx, 0x65428569
add edx, ecx
jmp 0x476671
pop edi
xchg edx, ecx
add edx, ecx
or ecx, 0x654b011f
and edx, esi
dec edx
or esi, ecx
and ebx, edx
shr esi, 9
and ebx, ecx
xchg edx, ecx
rol ecx, 0x13
add esi, ebx
not edx
or ebx, esi
jmp 0x475273
pop edi
or edx, ebx
or edx, esi
sub ecx, esi
add ecx, esi
not ebx
and edx, esi
neg ecx
not ebx
add edx, ecx
jmp 0x476fec
call edi
xchg edx, ecx
xchg ebx, edx
or ebx, 0x65561c97
and ecx, esi
or ecx, 0x655689da
add edx, ecx
sub ecx, esi
jmp 0x475a71
call edi
sub edx, esi
shr esi, 0xa
add ebx, esi
mov ebx, edx
and ebx, esi
not esi
and ebx, esi
dec ebx
or edx, ebx
shr ecx, 4
jmp 0x476f23
pop edi
sub esi, ebx
add ecx, esi
xor ebx, edx
sub edx, esi
neg esi
add ecx, ebx
sub ecx, esi
or ebx, esi
bswap ecx
jmp 0x477152
pop edi
mov edx, ecx
add ecx, 0x65623ff6
and edx, ebx
add edx, ecx
mov esi, edx
xor ecx, ebx
add edx, ebx
and ecx, esi
and ecx, edx
and ecx, ebx
mov ebx, 0x65646b6e
or edx, ecx
jmp 0x475ecc
push 0x649e1975
and ecx, 0x65689abe
ror edx, 0x14
rol ebx, 4
shr ebx, 0xd
xor ebx, edx
xor ebx, esi
add ebx, 0x656a1dac
xor esi, ecx
shl edx, 0xd
jmp 0x47558c
push esp
add edx, esi
xor ebx, esi
and ecx, ebx
and edx, ebx
sub ecx, esi
xor ebx, 0x657535d5
jmp 0x4776f2
push 0x6499f1c1
shl ecx, 0x11
xor ebx, 0x6575cad2
xor ebx, 0x65760997
sub esi, ecx
mov esi, ecx
sub edx, 0x6576cfe3
shr esi, 0x16
jmp 0x4778a5
mov edi, 0x2774562b
sub esi, edx
add ebx, ecx
shl ecx, 0x19
and esi, 0x65811380
inc ebx
mov esi, edx
sub edx, 0x6581cb9b
add edx, 0x65820984
add esi, ecx
mov esi, ecx
shl esi, 0xb
mov ebx, 0x65830af1
or edx, 0x658348dc
jmp 0x475f86
push 0x64a7784e
sub edx, ecx
add ebx, ecx
rol edx, 0x1b
and edx, esi
xchg ebx, ecx
xor ebx, edx
shl ebx, 0x16
and esi, ebx
mov ecx, ebx
not ecx
xor ebx, ecx
xor edx, ecx
jmp 0x476853
mov edi, 0x5027095f
or esi, 0x6587bdf1
xchg esi, ebx
or esi, 0x65883870
mov ebx, ecx
not ecx
and ecx, edx
jmp 0x475b56
mov edi, 0x5027095f
or edx, ecx
mov edx, 0x6589905a
or ebx, 0x6589ce5f
xchg ebx, esi
add esi, edx
ror edx, 0xb
mov edx, ecx
add edx, esi
sub esi, ebx
xor edx, ecx
jmp 0x47774e
pop edi
add edx, ebx
sub esi, ebx
or ecx, ebx
and esi, 0x6593c5f3
mov edx, 0x65940168
and esi, 0x65943e39
add esi, 0x65947a70
add ebx, ecx
shl ecx, 0x1f
xor ecx, edx
add edx, esi
jmp 0x477268
push 0x64a73568
dec edx
xor edx, ecx
shr ebx, 0x1f
or esi, ebx
neg ecx
and edx, 0x65aa782c
mov ebx, esi
xor edx, ecx
jmp 0x475568
push 0x64ae1cd1
inc edx
rol ecx, 4
inc ebx
shr esi, 0x18
xchg ecx, ebx
and ebx, 0x65b9cbb7
mov edx, ecx
or esi, edx
xchg ebx, esi
ror edx, 4
xor ebx, 0x65baecf0
xchg edx, ecx
add esi, edx
jmp 0x475a5f
call edi
sub ecx, edx
xor esi, ebx
ror ecx, 0xf
add ecx, 0x65d07977
or ebx, 0x65d0b11a
bswap esi
jmp 0x47519c
push 0x64ae670b
or esi, ecx
ror ecx, 0xb
or esi, edx
dec ecx
jmp 0x4765bd
pop edi
sub ebx, ecx
xchg ebx, ecx
xor edx, 0x65d80b53
rol ecx, 0x11
or ebx, esi
mov esi, edx
dec edx
bswap ecx
mov ebx, esi
and ebx, 0x65d99e8c
sub ecx, ebx
and ebx, ecx
jmp 0x4764b2
push 0x64ab0aae
xor ebx, edx
or edx, ebx
or ebx, esi
mov ecx, ebx
or esi, ecx
shr ebx, 0x19
shr edx, 6
mov esi, edx
jmp 0x47752d
push 0x649faa58
shl esi, 0x1f
sub esi, ecx
and edx, ecx
mov ebx, ecx
xchg ebx, edx
dec ecx
or ecx, edx
xor ebx, esi
sub edx, ecx
inc ecx
jmp 0x476d81
call fcn.00477b12
xor ebx, edx
bswap esi
xchg edx, esi
not ebx
add ebx, ecx
xor esi, edx
shl esi, 0x1b
ror ecx, 0x16
inc ecx
dec esi
mov esi, 0x65e875a5
jmp 0x4752d9
call edi
xor esi, edx
inc esi
inc ecx
sub ebx, esi
and ecx, edx
or edx, ecx
sub edx, ebx
xchg esi, ecx
or edx, esi
sub edx, ecx
inc esi
add edx, 0x65ee4a1e
xor esi, 0x65ee84d6
add esi, 0x65eebc07
jmp 0x4773b0
push 0x6495ce34
xor ecx, ebx
shl ebx, 0x1e
add ebx, 0x65ef7968
ror ecx, 1
neg ecx
or esi, ecx
sub ebx, esi
xchg ecx, edx
mov ebx, esi
bswap ecx
jmp 0x4762f6
push 0x64958d9a
nop
xor esi, 0x65f9f20f
sub esi, edx
or ecx, edx
xchg ecx, edx
mov ecx, ebx
and ebx, esi
sub esi, edx
jmp 0x475bd2
call fcn.00477b12
add ecx, esi
add ebx, ecx
add esi, 0x6602aed0
add ecx, ebx
bswap edx
xor ebx, 0x6603540c
inc ebx
shr edx, 0xd
shl ebx, 0x1f
jmp 0x476e7c
pop edi
bswap edx
not ebx
xchg ecx, esi
xor ecx, edx
jmp 0x476b9c
push 0x649056d3
and esi, 0x6610d318
add edx, 0x66110b77
bswap esi
xor ebx, esi
or esi, ebx
sub esi, 0x6611e94e
sub edx, esi
add esi, edx
mov edx, ebx
xor edx, esi
ror ebx, 0x12
xchg ebx, esi
or esi, ecx
add esi, edx
jmp 0x4761e6
pop edi
shl edx, 0x1c
add ebx, ecx
mov esi, ecx
sub ecx, ebx
or edx, ebx
xor edx, 0x6619bb3f
sub esi, ebx
sub edx, ecx
xor esi, edx
add ebx, esi
mov ebx, 0x66272bbb
bswap esi
add edx, ecx
jmp 0x477767
pop edi
shr edx, 0x1b
sub esi, ebx
xchg esi, edx
shl edx, 0xa
add ecx, ebx
or edx, 0x662f738b
xchg esi, ebx
or ecx, edx
sub esi, edx
and edx, 0x663078d2
not edx
jmp 0x475e1e
pop edi
mov ecx, ebx
and edx, ecx
sub ecx, edx
nop
mov ebx, 0x66320229
ror edx, 0x11
xchg ebx, edx
sub edx, ecx
and edx, ecx
jmp 0x476b54
call fcn.00477b12
add edx, esi
not ecx
sub ebx, ecx
not ebx
sub edx, 0x663458e2
xor esi, ebx
dec ebx
mov ecx, edx
xchg ecx, esi
add ebx, 0x66361726
xor edx, esi
add ecx, edx
jmp 0x4759e1
call fcn.00477b12
add edx, ebx
xor ecx, edx
not ebx
mov ebx, esi
or ecx, 0x663fe3b1
add ecx, edx
or esi, ebx
jmp 0x475ba6
pop edi
or ecx, edx
mov ebx, esi
add ecx, ebx
not edx
sub ecx, esi
mov ebx, ecx
jmp 0x477590
push 0x64a2889a
shl edx, 0x18
not edx
xor ebx, ecx
bswap ebx
shl edx, 0x1a
or ebx, edx
or ebx, edx
ror edx, 6
and esi, edx
xor edx, ecx
jmp 0x477a7b
mov edi, 0x5027095f
mov esi, ebx
add esi, 0x66500ef2
xor esi, edx
xchg ecx, esi
neg ebx
nop
xchg esi, edx
add esi, ebx
sub esi, edx
inc ecx
jmp 0x476f6a
push 0x6492f84a
xor edx, ecx
add ebx, edx
inc esi
sub ecx, edx
or ebx, 0x665811e4
xor esi, ecx
xor edx, ecx
dec edx
xchg ecx, ebx
xor ebx, 0x66593413
or edx, ebx
sub esi, ebx
sub ecx, 0x6659daff
xor ebx, edx
and ebx, esi
ror edx, 0x1b
jmp 0x4773f5
push 0x6490a15b
xor ebx, edx
add ebx, edx
or ebx, esi
xor ebx, 0x66675d42
xchg ecx, esi
mov ecx, ebx
ror esi, 0x17
xor edx, 0x66684b67
or ebx, edx
xchg esi, ebx
and edx, ebx
inc ebx
or ebx, 0x66695e5e
jmp 0x476887
mov edi, 0x5027095f
shr edx, 0x13
mov ebx, esi
not esi
or esi, 0x666a5644
or esi, edx
add edx, 0x666ac5ac
ror ecx, 0xc
add ebx, esi
or esi, 0x666b7aeb
xchg edx, ebx
shr esi, 0x1c
xchg esi, ecx
and ecx, edx
or edx, ecx
sub ecx, 0x666cc45a
jmp 0x476792
pop edi
and ebx, 0x666d17f9
neg ebx
rol ecx, 6
not ecx
inc ecx
and ecx, ebx
neg esi
add ebx, ecx
ror edx, 2
jmp 0x476ebe
push 0x64960f72
shl ecx, 0xd
dec ecx
neg ecx
rol ecx, 0xf
or ebx, ecx
xor edx, esi
xor edx, ecx
add esi, 0x6679bd6b
dec edx
mov esi, ecx
and edx, 0x667a637f
not ecx
sub esi, edx
inc edx
jmp 0x4755aa
push 0x40
mov esi, edx
xchg ecx, ebx
mov esi, ecx
sub ebx, 0x667c13ba
jmp loc.0047677f
call fcn.00477b12
sub edx, ecx
sub edx, 0x667eb0cb
add ebx, ecx
add edx, 0x667f1e88
not ebx
add esi, ebx
add ecx, 0x667fc4f8
sub edx, 0x667ffcd9
add ecx, 0x66804274
jmp 0x476ad3
pop edi
rol esi, 0xc
xchg esi, ebx
add ecx, 0x668c3957
or esi, ebx
or ecx, esi
bswap ebx
and ebx, 0x668d3aa5
and ebx, ecx
mov esi, edx
inc esi
or edx, ecx
ror esi, 0x11
add edx, ebx
jmp 0x4775dd
pop edi
shl ebx, 5
and esi, edx
dec ecx
mov esi, ebx
or edx, ebx
jmp 0x475b39
pop edi
sub ecx, edx
or edx, esi
add esi, edx
add ebx, edx
sub ebx, esi
shr ecx, 2
not esi
bswap esi
sub ecx, ebx
add edx, esi
bswap edx
or ebx, edx
add edx, 0x669b4546
xor esi, 0x669b8234
jmp 0x47658a
push 0x64a6b0dd
and ebx, ecx
mov ebx, 0x669c15f0
and ecx, esi
sub ebx, 0x669c8c03
xchg esi, edx
bswap ecx
and edx, ebx
and edx, esi
bswap edx
sub ebx, 0x669e066f
and ebx, esi
xor ebx, esi
jmp 0x476d57
push 0x64a02f76
mov ebx, ecx
mov ecx, 0x669f0db4
dec ecx
xchg ebx, edx
jmp 0x47655e
push 0x64a072d3
neg ebx
or esi, 0x66a31e10
shl ebx, 8
xor edx, 0x66a39754
or ecx, edx
sub ecx, esi
xchg edx, ecx
mov esi, 0x66a4962d
sub esi, ecx
and ebx, edx
and esi, ebx
jmp 0x476087
push 0x649864b3
or esi, 0x66a59ba5
xchg esi, edx
neg ebx
or edx, esi
mov ecx, ebx
bswap ebx
inc edx
sub esi, edx
or esi, edx
jmp 0x47689a
push 0x64aeb26c
xchg ecx, ebx
or ecx, esi
and ebx, 0x66a9bffc
not ecx
mov esi, 0x66aa3077
or ecx, esi
or ebx, esi
add ebx, edx
add ecx, edx
jmp 0x47512d
mov edi, 0x5027095f
mov edx, esi
add ecx, ebx
or edx, ebx
xchg esi, ebx
add esi, edx
inc ebx
or ecx, ebx
add edx, 0x66b36dcf
sub esi, ecx
or ebx, edx
jmp 0x475ce0
pop edi
or edx, ebx
or esi, ebx
or edx, ebx
sub ebx, ecx
xor edx, 0x66b513e3
add esi, 0x66b54b28
or esi, ebx
xchg ebx, esi
add ecx, edx
and esi, edx
jmp 0x4770f4
push 0x6492b657
inc esi
mov esi, ebx
and ecx, ebx
add ecx, edx
or ecx, ebx
xor ecx, 0x66c188d7
neg edx
and edx, esi
jmp 0x4760ef
call fcn.00477b12
and ebx, ecx
not edx
dec edx
and ebx, ecx
or esi, 0x66c6df86
sub edx, ebx
add edx, ecx
add edx, ebx
or ecx, ebx
jmp 0x476eb2
push 0x649bc399
add edx, 0x66d0210b
xchg edx, ebx
shl ecx, 0x15
xor ecx, edx
not ecx
xor edx, esi
jmp 0x476c5d
mov edi, 0x2774562b
or esi, edx
or edx, 0x66d3c760
and ebx, 0x66d4058f
shl ecx, 0xb
shr edx, 8
or esi, ebx
and ecx, edx
xchg edx, ecx
or ebx, edx
bswap ecx
add ebx, edx
mov edx, esi
or esi, edx
add ecx, esi
xor ecx, edx
mov esi, edx
jmp 0x475ee7
push 0x6490e32c
sub ecx, 0x66d76fa1
or esi, ebx
inc ecx
jmp 0x475521
mov edi, 0x2774562b
shr ecx, 0x16
bswap esi
neg ebx
xchg ebx, esi
and ebx, ecx
rol edx, 0x10
add edx, 0x66d9ba83
xor esi, ebx
xor ebx, edx
xor edx, ebx
jmp 0x476ae8
mov edi, 0x4132136a
add ebx, esi
rol edx, 0x1d
add edx, ebx
and esi, ecx
sub esi, 0x66dbc31e
add ecx, edx
dec ecx
mov ecx, ebx
or ecx, esi
sub ecx, edx
shl ecx, 2
and ecx, ebx
inc ecx
xchg esi, edx
add ecx, ebx
jmp 0x4779f2
pop edi
shr edx, 0x1e
or ebx, ecx
add ecx, esi
jmp 0x476fd3
mov edi, 0x5027095f
xor esi, 0x66e5cbaf
add esi, ebx
add ebx, 0x66e642a5
not ebx
mov ecx, ebx
and esi, edx
xchg ebx, ecx
and edx, ecx
mov esi, edx
and ecx, ebx
xor ecx, edx
and ecx, esi
mov ebx, edx
sub esi, ebx
jmp 0x47778d
push 0x64954bf6
sub esi, ebx
add ecx, 0x66e96833
and esi, 0x66e9a5e9
xchg edx, ebx
ror edx, 1
xchg esi, ecx
shl esi, 0x1b
and esi, ebx
jmp 0x475c67
pop edi
neg esi
sub ebx, esi
sub ebx, edx
rol edx, 0x1d
shr edx, 0x14
and ecx, ebx
rol ebx, 1
add esi, 0x66ecf028
mov ecx, 0x66ed2c76
add edx, ecx
xchg esi, ebx
sub ebx, edx
or ebx, ecx
jmp 0x4772df
pop edi
xor esi, edx
xor ebx, edx
sub edx, 0x66eef800
add esi, edx
shl ebx, 0x15
dec ecx
and esi, 0x66efea0b
mov edx, 0x66f027bd
add esi, ebx
rol edx, 8
mov edx, ecx
sub ecx, ebx
xchg ecx, esi
xchg edx, ebx
add edx, esi
mov esi, 0x66f213eb
jmp 0x47699b
push 0x649dd721
add edx, esi
add esi, ebx
and esi, ecx
ror esi, 0xa
jmp 0x4753c8
pop edi
shr ebx, 0x19
dec edx
add ebx, esi
or ecx, 0x66fb90b1
xor edx, 0x66fbcd6b
add edx, ecx
not ebx
neg esi
jmp 0x4768be
call edi
or esi, ebx
sub ebx, ecx
mov ebx, ecx
sub esi, ecx
add ebx, esi
sub esi, ebx
or ecx, ebx
jmp 0x4769cf
call fcn.00477b12
shl edx, 6
ror esi, 0x15
neg esi
bswap ecx
xor ecx, 0x67048761
neg edx
or ebx, 0x6704facd
or edx, esi
ror edx, 6
mov edx, ecx
jmp 0x4751bc
pop edi
xchg ecx, ebx
sub ebx, esi
add ebx, ecx
xchg esi, ebx
xor ecx, ebx
sub ecx, 0x670ad84f
xchg ebx, esi
add ebx, 0x670b48aa
jmp 0x476066
pop edi
shl edx, 0xc
inc edx
or ecx, esi
rol edx, 0x1b
not esi
xchg ebx, esi
sub edx, ebx
inc edx
xor esi, ebx
or ecx, esi
jmp 0x475636
push 0x649b806b
add ecx, edx
xchg esi, edx
xchg esi, ecx
sub esi, ebx
mov esi, ecx
or ebx, 0x6715de06
mov esi, ebx
and ecx, ebx
jmp 0x47681e
push 0x649c05b8
sub ebx, edx
rol edx, 6
mov ebx, esi
or ecx, esi
jmp 0x476dfb
call edi
xor edx, esi
sub ecx, ebx
ror ecx, 0x12
jmp 0x477942
push 0x64a6f213
xchg ecx, edx
and edx, ecx
and ebx, ecx
sub ecx, ebx
mov ebx, edx
rol ecx, 0x13
add ebx, 0x672e0b2e
add ebx, edx
and esi, ebx
shr ecx, 7
xor edx, 0x672ee8ec
jmp 0x475787
push 0x649fedb0
or ecx, edx
xor esi, ecx
and esi, ebx
or ecx, edx
sub edx, 0x67301009
or esi, edx
or ecx, 0x67308ee3
or esi, ebx
xchg ebx, ecx
mov ebx, ecx
rol edx, 8
xor esi, 0x6731a2a1
xor ecx, ebx
xor ecx, ebx
jmp 0x47651a
pop edi
sub ebx, 0x6732607e
mov esi, edx
or esi, ecx
xor ebx, edx
and esi, 0x67333adc
xchg ecx, ebx
inc ebx
add ebx, edx
xchg ecx, edx
xor esi, edx
xor ecx, edx
mov edx, 0x6734c96e
jmp 0x4768ea
mov edi, 0x2774562b
dec ebx
xor ebx, esi
bswap edx
xor ebx, edx
mov ecx, 0x6738758b
add edx, ebx
shl esi, 0x1f
neg ecx
mov ebx, ecx
xor edx, 0x67399961
xchg esi, edx
or ebx, 0x673a0bbb
xor edx, ecx
jmp 0x476351
push 0x64aac1cd
add edx, 0x673a92fc
or ecx, esi
rol esi, 0xe
xor ecx, esi
jmp 0x475afd
call edi
add esi, ecx
xchg esi, ecx
shr ecx, 0x11
inc ecx
add ecx, ebx
shl edx, 0x1b
mov esi, edx
xor ecx, esi
bswap esi
and ebx, ecx
or ecx, esi
jmp 0x475ea6
call edi
mov edx, 0x6741e522
xor ebx, edx
add ebx, ecx
and ebx, edx
or esi, ecx
and ebx, esi
xor ebx, edx
jmp 0x4772fb
call edi
dec esi
add ebx, edx
or edx, ebx
jmp 0x4770b4
push 0x64a45c6d
mov ebx, 0x67444e5b
nop
or edx, esi
rol ebx, 0x1d
ror ebx, 4
jmp 0x475105
pop edi
sub ebx, esi
neg esi
xor edx, esi
not ecx
sub ebx, 0x674b29fc
add esi, edx
jmp 0x475fbf
call fcn.00477b12
sub edx, esi
and esi, ecx
sub edx, ebx
sub ebx, esi
jmp 0x476e9a
pop edi
or ebx, ecx
sub edx, 0x6755803b
xchg esi, ecx
mov edx, ebx
mov ecx, ebx
add ecx, ebx
ror edx, 0x1e
jmp 0x476e2a
push 0x64950863
or edx, esi
add ecx, esi
sub ebx, 0x675758ed
rol ecx, 0x1d
ror esi, 0x1f
or edx, ebx
xor esi, ecx
bswap edx
or esi, 0x6758b7e8
jmp 0x476977
pop edi
mov ecx, ebx
or edx, ebx
ror ebx, 3
or edx, ebx
and ebx, esi
ror ebx, 0x1a
sub esi, 0x6764379f
or esi, 0x67646fea
or edx, esi
or ecx, edx
jmp 0x47524c
push 0x6499af38
add ebx, edx
nop
add ecx, edx
xor ecx, ebx
mov ecx, 0x6767de3d
sub ecx, esi
and esi, edx
neg ecx
add ebx, 0x6768ca11
neg esi
jmp 0x47547b
pop edi
mov ecx, 0x676cddb9
ror esi, 0x18
sub edx, ebx
sub edx, esi
mov ecx, esi
jmp 0x477178
push 0x64a66e90
xchg edx, ebx
or edx, 0x676f896c
sub esi, ecx
xor edx, ecx
xchg ebx, esi
xchg ebx, edx
rol edx, 6
and ebx, 0x6770e468
jmp 0x4764ed
pop edi
and ebx, ecx
or esi, ecx
or edx, ebx
add edx, esi
xor ecx, esi
and ebx, esi
and edx, esi
dec esi
rol edx, 0x18
mov ecx, esi
and ecx, ebx
sub ebx, edx
or ebx, ecx
xchg edx, esi
and ecx, 0x6780c888
jmp 0x4764c2
call fcn.00477b12
or edx, 0x67811956
xchg esi, ebx
inc edx
add esi, ecx
shl edx, 0xa
shl esi, 0x1a
sub ebx, esi
xor edx, esi
and ebx, esi
or esi, 0x67833405
jmp 0x4752f6
pop edi
dec esi
sub esi, ecx
and ebx, ecx
dec ecx
xchg esi, ebx
mov esi, ebx
xor ebx, edx
sub esi, ecx
xor esi, 0x6788dcb7
and esi, edx
jmp 0x476a04
pop edi
and ecx, ebx
add ecx, 0x6789a70e
xor ecx, esi
jmp 0x475374
pop edi
or edx, ecx
or ebx, edx
add ebx, 0x678d0589
shr esi, 3
neg ecx
add ebx, ecx
bswap edx
or ecx, esi
sub edx, ecx
xor esi, ecx
inc ecx
xor edx, ebx
nop
jmp 0x476db4
pop edi
rol edx, 0x1d
neg edx
mov esi, edx
xor ebx, edx
jmp 0x476429
push 0x64933a3f
bswap ebx
sub ecx, ebx
shl edx, 0x14
and esi, ebx
and esi, 0x679d22e7
xor esi, ecx
xchg esi, edx
xor ecx, esi
shr edx, 8
and ebx, edx
and esi, ebx
sub ebx, 0x679ed5ca
mov esi, ebx
jmp 0x476216
push 0x64ab524b
or ecx, esi
not esi
neg edx
and edx, ecx
jmp 0x476650
pop edi
bswap ebx
add edx, esi
bswap esi
shl ebx, 0x15
xor esi, ecx
xchg esi, ebx
and edx, ecx
or ecx, edx
and esi, ecx
mov esi, 0x67b85ae1
neg esi
or ebx, edx
xchg ecx, ebx
jmp 0x476a70
pop edi
rol ecx, 0x1b
not edx
and ecx, 0x67bc62c3
sub ebx, ecx
shr esi, 7
mov ecx, edx
or ecx, esi
jmp 0x476733
mov edi, 0x2774562b
add ecx, esi
xor ebx, edx
and esi, ecx
or esi, ecx
jmp 0x477290
call edi
or ebx, esi
or esi, 0x67c4199e
mov edx, 0x67c4919f
sub ecx, edx
add ebx, edx
mov edx, ebx
add ecx, ebx
jmp 0x47764d
pop edi
xor esi, edx
mov edx, 0x67c6d291
sub ecx, 0x67c70fb6
xor ecx, edx
and ecx, esi
jmp 0x477a13
push esp
and esi, ebx
not esi
xor edx, esi
rol edx, 0x1b
xor edx, esi
xchg esi, ebx
neg ecx
dec ebx
and ecx, 0x67d203b6
neg esi
rol ebx, 8
ror ebx, 2
jmp 0x476323
call fcn.00477b12
rol ecx, 0xe
sub ebx, 0x67d7e59b
sub ecx, ebx
mov ebx, ecx
xor ebx, esi
jmp 0x477979
pop edi
or esi, 0x67d8ed1c
sub edx, esi
neg ecx
add ebx, ecx
add esi, ebx
or ebx, edx
add ecx, esi
or edx, esi
xor ebx, edx
add ecx, esi
xchg esi, ecx
add esi, edx
mov ecx, esi
sub ecx, esi
jmp 0x47588a
call fcn.00477b12
xchg ebx, ecx
rol edx, 4
xor esi, edx
jmp 0x47787b
mov edi, 0x2774562b
add ecx, esi
add ecx, esi
add ecx, ebx
xor esi, 0x67dddf33
xor ebx, ecx
and ecx, 0x67de59b4
xchg ecx, esi
and esi, ebx
mov ecx, edx
or esi, ecx
neg edx
sub ebx, ecx
jmp 0x4777ed
call fcn.00477b12
or esi, edx
sub edx, esi
bswap edx
xor ecx, ebx
add esi, ebx
jmp 0x476d0e
call edi
not ecx
sub ebx, 0x67ea7a0a
xor ebx, 0x67eab89e
sub esi, 0x67eaf5de
or ebx, esi
mov ecx, 0x67eb6cdb
xchg ecx, ebx
sub ebx, 0x67ebf45b
jmp 0x475312
mov edi, 0x2774562b
mov edx, esi
sub esi, edx
shr ecx, 0xd
xor ebx, 0x67ed0cf9
dec ecx
inc esi
rol esi, 0xb
jmp 0x47799e
pop edi
mov ebx, esi
bswap esi
jmp 0x476251
call edi
add esi, edx
and ecx, 0x67fcc7f6
dec ecx
bswap esi
ror ebx, 6
xor edx, ecx
xchg ecx, esi
not ecx
mov edx, ebx
inc esi
xor ebx, esi
neg esi
xor ebx, esi
inc ecx
jmp 0x475d61
call fcn.00477b12
xor esi, ebx
xor edx, 0x68003e87
and ecx, ebx
or edx, 0x6800c59b
jmp 0x477631
call fcn.00477b12
or edx, esi
and esi, ecx
add ebx, esi
sub ecx, edx
add edx, ecx
rol ebx, 0x18
mov ebx, ecx
sub ecx, edx
sub esi, 0x6806b269
jmp 0x475465
pop edi
shl ecx, 0x13
mov edx, esi
mov ecx, 0x68078c46
or edx, esi
bswap ecx
xor ebx, 0x68084142
jmp 0x476bee
push 0x64a2ca18
shr ebx, 0xf
neg ecx
neg ecx
xchg ecx, ebx
dec ecx
shr edx, 4
and edx, 0x680fc9d2
xor edx, 0x68100546
jmp 0x47779e