Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff1e
jne 0x401089
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
ret
call sub.user32.dll_GetInputDesktop
cmp eax, 0xfffffeec
jne 0x40112b
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff14
jne 0x4011cd
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
ret
call sub.kernel32.dll_GetSystemDefaultLCID
cmp eax, 0xffffff0f
jne 0x40125b
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.ntdll.dll_RtlSetControlSecurityDescriptor
call sub.advapi32.dll_BuildImpersonateTrusteeW
call sub.advapi32.dll_BuildImpersonateTrusteeW
ret
jmp 0x480b65
mov ecx, esi
sub ecx, edi
neg ecx
or edi, 0xb88bef78
sub ecx, edx
sub edx, esi
xchg esi, edx
xor edx, 0xb897acbe
jmp 0x483def
push 0xb91cb618
dec ecx
xor edx, 0xc1a4b945
add ebx, edx
xor ecx, ebx
add ebx, 0xc1aa459d
shl ecx, 4
or ebx, edx
jmp 0x482c87
pop esi
bswap ecx
xor edx, ecx
ror edi, 0xf
xchg ecx, edx
or edi, ecx
add ecx, 0xc1c74e89
neg ebx
rol ebx, 7
and ebx, edi
mov edi, ebx
jmp 0x4826a6
call fcn.00481170
xchg edi, ebx
or edi, ebx
mov edi, edx
add ebx, ecx
xor edx, 0xc2573f7e
neg ecx
neg edx
inc edi
or edi, ecx
xchg ecx, ebx
dec edi
sub edi, edx
ror ebx, 0x17
ror edx, 0x14
xor edi, edx
jmp 0x482d3a
call fcn.00481170
sub ecx, edx
add ebx, ecx
xchg ebx, edi
jmp 0x482159
push 0xb932bfe6
or edi, ecx
shr edx, 0x13
inc edx
mov ebx, edx
ror ecx, 0x1d
xchg edi, ebx
shr ebx, 0xa
xchg edi, ebx
xor edx, ebx
mov ebx, edx
xchg ecx, ebx
jmp 0x482da1
call esi
sub ecx, ebx
and ecx, ebx
or ebx, edi
or ecx, ebx
add edx, ecx
or edi, 0xc2d8c41f
add edx, 0xc2daeadb
dec ecx
rol edi, 1
jmp 0x481c9a
pop esi
xchg edx, ecx
rol ebx, 0xd
xchg ecx, edx
shr ebx, 0xe
inc ebx
and ebx, edx
sub edi, edx
add edx, ecx
shr edx, 0x12
and edx, 0xc354281e
and ecx, edi
sub ecx, edi
xchg ecx, edx
jmp 0x48326b
push 0xb8dc2f4a
and edx, ebx
add edi, ebx
add ebx, edi
mov edx, ecx
add edx, edi
jmp 0x48254f
push 0xb9aac2fd
nop
sub ecx, 0xc586e6f5
and ebx, ecx
and ebx, ecx
jmp 0x481fea
push 0xb94805c8
xchg ecx, edx
and ebx, ecx
xor ebx, ecx
or edx, edi
xchg edx, ebx
xchg ecx, ebx
sub edx, ebx
xor edx, ebx
jmp 0x482c59
pop esi
ror ecx, 0x1b
or ebx, ecx
mov ecx, edx
inc ebx
add ecx, edx
mov ebx, edi
shl edi, 0x1c
and edx, 0xc860a8b1
or edx, ebx
rol ecx, 8
mov edx, ebx
and edx, edi
shl edi, 3
not edx
dec edi
jmp 0x48180b
call fcn.00481170
add edi, ecx
rol ecx, 0x17
add ebx, 0xc8e6d7a1
xor edx, 0xc8e8deaa
add edx, 0xc8eb0961
mov ecx, ebx
or ecx, 0xc8eeff00
sub edi, edx
or ecx, edx
and edi, ecx
add edx, ebx
add ebx, ecx
jmp 0x4828bd
push 0xb95e6074
mov ebx, edi
and edi, ecx
xchg edx, ecx
sub edi, ecx
not edx
add ebx, ecx
jmp 0x48199b
pop esi
xor edx, edi
shl ecx, 0xb
xchg edx, ebx
sub ecx, edi
and edi, ecx
xor edx, 0xc97d3361
jmp 0x48297b
call esi
shl edx, 0x13
neg edi
mov edi, 0xc9dbb8e1
xor edx, ebx
and edx, ebx
add edx, ebx
neg ecx
and ecx, 0xc9e5af7d
or ebx, edx
sub ebx, 0xc9e98d2c
jmp 0x480e26
push 0xb8c26836
and ecx, ebx
mov edx, ecx
neg edx
and edi, ecx
xor ebx, edx
add ecx, ebx
ror edx, 0x19
or edx, ecx
xor edx, ebx
jmp 0x482254
push 0xb9b3d105
rol edi, 1
shl edi, 0xd
add ecx, edi
mov ebx, edx
bswap edx
jmp 0x484188
call esi
add edi, 0xcc0ae466
nop
inc ebx
and ebx, 0xcc10ec4c
xchg edi, edx
sub edi, edx
xor edx, ecx
inc ebx
add edi, ecx
or ecx, 0xcc1d0500
mov edi, ebx
ror edx, 0x14
inc ebx
neg edx
shr edx, 1
jmp 0x48174b
push 0xb954b3cc
and edx, ebx
xor ebx, edi
dec ebx
sub edi, edx
sub edi, ecx
not ebx
xchg ecx, ebx
xor edi, 0xcc45dca9
xor edx, 0xcc47dd23
jmp 0x481c16
call fcn.00481170
or edi, ecx
neg edi
sub edx, 0xcc4e77ce
add edx, ecx
jmp 0x4835af
pop esi
xor edx, edi
and edx, edi
mov edx, ebx
shr edx, 5
sub edi, ebx
jmp 0x481372
pop esi
sub ebx, 0xcc6ed46a
mov edi, ecx
xor ebx, edx
sub ecx, ebx
jmp 0x480b92
call esi
add ebx, edi
inc edi
mov edi, edx
sub ecx, ebx
rol ebx, 0x17
not edx
or ebx, 0xcca35207
and edx, ebx
inc edi
jmp 0x48260b
call esi
dec ecx
add edi, ebx
or ecx, edi
and edi, ebx
jmp 0x4811fd
pop esi
or ebx, 0xccc4aa5a
sub edx, 0xccc6b72f
or edi, 0xccc8de46
not edx
xor edi, ebx
or edx, ebx
and edi, edx
jmp 0x481712
mov esi, 0x40495727
sub ebx, edx
or ebx, edx
add ecx, 0xcd4f90f9
and ebx, edi
or edi, edx
mov edx, edi
xor ebx, 0xcd57b6f8
add edi, 0xcd59be46
or ebx, ecx
shl ecx, 1
or ecx, ebx
rol ecx, 0xc
shr edi, 6
jmp 0x483d8c
pop esi
xor edi, ebx
or ebx, ecx
add ecx, edi
xor ecx, edi
mov ebx, 0xcd7ce02e
rol edi, 0xd
jmp 0x483c36
call fcn.00481170
and edx, ebx
sub edi, ecx
shl edx, 4
and ebx, ecx
dec edx
jmp 0x48141a
mov esi, 0x73716341
neg ebx
rol ebx, 0x15
add ebx, ecx
add ebx, edx
xor ebx, edi
xor ebx, edx
or edx, edi
and edi, ebx
shr ebx, 0x1f
ror ecx, 9
jmp 0x4812af
push 0xb8dab486
mov edx, ebx
sub edx, ebx
mov ebx, edi
and ebx, 0xce3a857b
jmp 0x480eee
call fcn.00481170
mov edi, edx
and edx, 0xce4d763a
xchg ecx, edx
add ebx, edi
xchg ebx, edi
and edi, ebx
bswap ebx
rol ebx, 0x13
add edi, ecx
neg ecx
xchg edx, ebx
xchg edx, ecx
rol edi, 2
jmp 0x48299f
pop esi
or edx, edi
xor ecx, edx
xchg edx, ebx
ror ecx, 0x10
jmp 0x4824ec
push 0xb95634c1
dec edi
and edx, 0xcf995141
or edi, edx
mov ebx, edx
shl ebx, 1
sub ecx, ebx
add ebx, ecx
ror ebx, 0x1a
shr edi, 9
jmp 0x4820f1
push 0xb9a0302e
xor edx, ecx
bswap ecx
xor ebx, edi
bswap edi
xor ebx, edx
xor edi, 0xcfc78192
not edx
add edi, edx
and edx, ecx
add edi, 0xcfcfb056
jmp 0x482fd2
pop esi
shl ebx, 0x13
add ebx, edi
xor edx, ebx
and ebx, ecx
ror edi, 2
and edx, edi
mov edi, ebx
xor ecx, 0xcfeda1bb
bswap edx
neg ebx
mov edx, ebx
nop
xchg edi, edx
rol edi, 0xf
shl ecx, 3
jmp 0x4833dc
push 0xb9314272
sub ecx, 0xd074768e
and edx, 0xd07a73ae
mov edx, ebx
add edi, ebx
jmp 0x480d3c
pop esi
sub edi, ecx
shr edi, 7
xchg ebx, edi
jmp 0x482681
pop esi
ror ecx, 0xb
sub edx, 0xd0f36fa1
sub ebx, edx
and ebx, edi
xchg ebx, edx
add edx, 0xd0fb4712
inc edi
dec ebx
sub edx, 0xd1018440
jmp 0x481a41
call esi
or edx, edi
and edx, ecx
shr edx, 3
and ebx, edi
xor ebx, edx
mov edi, ebx
or edx, edi
add edx, ecx
jmp 0x4828fc
mov esi, 0x40495727
sub ecx, ebx
and ecx, edi
add ebx, edi
sub ecx, 0xd1b3de5f
and ecx, edi
bswap edx
jmp 0x481a72
mov esi, 0x40495727
and edi, ebx
shl edi, 0x14
sub ecx, edx
and edx, ebx
xchg ecx, edi
sub ecx, edx
neg ebx
sub ecx, edx
mov edi, ecx
or ebx, 0xd1f1c662
and edi, 0xd1f3c516
xor edx, ebx
and edi, ebx
jmp 0x4831a6
pop esi
sub ecx, 0xd218b4a4
sub ecx, ebx
bswap ebx
or edx, ecx
rol edx, 0x1f
or edi, ebx
shl ecx, 9
xor ebx, 0xd22e300d
sub edi, ebx
and ecx, ebx
add ebx, edx
jmp 0x481d94
pop esi
xor ebx, edx
xchg ecx, edi
mov ecx, ebx
mov ebx, 0xd2939bcd
jmp 0x481526
push 0xb957b34a
add ecx, 0xd2a127c4
xchg ecx, ebx
or ecx, 0xd2a53b22
xchg ebx, edi
shl ebx, 0xc
and edi, 0xd2b0851e
mov edi, ebx
jmp 0x482e1f
push esp
not edx
sub edx, ebx
xor edx, ebx
add ecx, ebx
or ebx, edi
or edi, ebx
or edi, ebx
xor ebx, edx
or ecx, edx
xor ecx, 0xd3730f9e
jmp 0x482ec7
pop esi
and ebx, 0xd540b1b9
and ebx, ecx
xchg ecx, ebx
and ebx, edi
sub ebx, edx
and edi, 0xd54a2ea9
and edx, ecx
and ebx, ecx
xchg edi, ecx
xor ebx, edx
xor ecx, 0xd5543931
sub edi, 0xd556350c
jmp 0x482d7c
push 0xb8c3e230
rol ecx, 0x12
not edi
sub edi, edx
inc ebx
mov edx, edi
mov edi, 0xd563a6fe
add edi, ebx
jmp 0x483e0a
call fcn.00481170
or ecx, edi
and edx, 0xd57c2689
mov ebx, edi
sub ecx, ebx
add ebx, ecx
and ebx, edi
mov edi, ebx
add ecx, edx
xchg ecx, edi
or ecx, 0xd58bd88b
mov edi, 0xd58dc601
mov ebx, ecx
mov ecx, edi
jmp 0x4823d4
push 0xb96f97b9
xor edi, edx
dec ecx
xchg edx, ecx
or edi, 0xd5c1d160
shl ecx, 0x18
xchg edi, ecx
add ecx, edx
xor edx, 0xd5cba05e
and edi, ebx
jmp 0x4829f7
call esi
add ecx, edx
not edx
shl edx, 7
xchg edx, ecx
or edi, 0xd64b6cb0
jmp 0x483ab3
push 0xb90d1dbe
mov ebx, edi
or edx, edi
rol edi, 8
add ecx, 0xd6a32ac3
shr ecx, 0x12
sub ebx, 0xd6a7689d
or edx, edi
add edi, 0xd6ab5829
rol edi, 9
xor edx, ebx
xchg edi, ecx
and edx, ebx
sub edx, ebx
jmp 0x482aa4
push 0xb92324ec
and ecx, ebx
mov edx, ecx
and edi, ecx
sub ecx, edi
or edx, ebx
rol edi, 8
xor ecx, edx
xchg ebx, edi
jmp 0x4818cf
push 0xb8ebc6f7
sub edi, edx
mov ecx, edx
sub edi, edx
mov ebx, 0xd6ce3986
neg edi
xor ecx, edx
add edi, 0xd6d43386
xchg ecx, ebx
mov edx, ebx
xchg edi, edx
jmp 0x483c0f
pop esi
xor edi, edx
sub edi, edx
and ebx, 0xd6e031e5
or edi, 0xd6e2b78b
shl edx, 0x13
jmp 0x483a2c
mov esi, 0x73716341
xor edx, ebx
rol ebx, 3
or edx, ecx
add ecx, edi
mov ebx, 0xd7147ebc
add edi, ecx
and ecx, edi
not edx
or edx, ebx
and ebx, ecx
jmp 0x4825a5
call fcn.00481170
sub ecx, 0xd73f2a0e
mov ecx, ebx
xchg edi, edx
sub edi, edx
jmp 0x481f4a
pop esi
mov ebx, edx
sub ecx, edx
neg edi
add ebx, edi
rol edx, 0x14
xor edx, ecx
xor edi, ebx
inc edx
dec ecx
jmp 0x483e1e
pop esi
neg edx
or ecx, edx
rol ebx, 0xd
xor ecx, ebx
mov ecx, edx
xor edx, edi
xor edx, ebx
xchg edx, edi
sub edx, ebx
jmp fcn.00483347
pop esi
add edi, ebx
shl edx, 6
neg ecx
sub ecx, 0xd7c75c53
xor edi, ebx
add edx, ecx
mov edx, ebx
or edi, ecx
xor ebx, 0xd7d1e7b2
and edx, ecx
neg edx
jmp 0x483daa
push 0xb8e8b830
and ecx, ebx
bswap edi
inc edi
inc edx
mov ebx, ecx
xor edx, ebx
sub edx, 0xd7e483a4
sub edi, ebx
sub edi, edx
sub ebx, ecx
jmp 0x4836a1
mov esi, 0x73716341
not edx
add ecx, 0xd88ca8d2
xchg edx, ecx
dec edx
sub edi, ebx
xor edi, 0xd894b27b
or ebx, ecx
or ebx, 0xd898acc2
mov ebx, 0xd89aadf6
jmp 0x4835cb
call fcn.00481170
or ecx, ebx
mov ebx, edi
xor ecx, 0xd8c058d5
sub edi, ecx
jmp 0x4816cb
call esi
xor edx, 0xd939b0a1
xor edx, 0xd93bb23f
inc ecx
add ecx, 0xd93fecdb
add ebx, ecx
shl ecx, 0xa
not ebx
neg ebx
add ecx, edx
jmp 0x484016
pop esi
sub edi, edx
rol ecx, 0x19
rol ebx, 8
mov edx, ebx
ror ecx, 0xf
add edx, ebx
rol ecx, 2
add ebx, edi
or ebx, 0xd96cd7eb
mov edi, ebx
add ebx, 0xd970c80d
sub ecx, 0xd972c90a
add edi, edx
sub ecx, 0xd976b852
jmp 0x480bd1
push 0x401400
or edi, edx
neg ecx
shr edx, 0x15
xor edx, 0xd997aec2
shr ebx, 0x15
sub edi, edx
xor ebx, edx
xchg edx, ecx
jmp 0x4817c3
push 0xb9a94492
mov ecx, ebx
xor ebx, ecx
xchg edi, ecx
or ebx, 0xd9a8e54e
xor edx, ecx
xor ebx, edi
sub ebx, edi
sub ecx, edx
and edx, 0xd9b2ecc6
jmp 0x481065
call esi
or edx, 0xd9b55949
inc ebx
and ebx, ecx
mov ecx, edx
and edx, ecx
sub ecx, ebx
or ebx, edi
or ebx, ecx
sub ebx, ecx
jmp 0x482f37
push 0xb97119c1
or ecx, 0xd9ee7987
and ecx, ebx
shl ecx, 0x17
ror edx, 0x1e
or ecx, edi
sub ecx, 0xd9f87135
and ebx, 0xd9faacf8
or edx, ebx
add ebx, edi
shr edx, 9
jmp 0x484026
call esi
xor edi, edx
shl edi, 0x18
xor edx, edi
xchg ebx, edi
shr ecx, 0xd
dec ecx
sub edx, edi
jmp 0x482226
push 0xb90e9841
shr edi, 9
and ecx, 0xda4b3358
inc edx
mov edi, 0xda4f5536
and edx, edi
neg ecx
inc ebx
mov ecx, edi
sub ecx, ebx
add ebx, edi
jmp 0x483194
pop esi
add edi, ecx
xor ebx, 0xda753943
neg ecx
xor edi, edx
ror ecx, 1
nop
or edx, edi
add edx, ebx
and edx, 0xda830fd7
add ebx, ecx
or edi, 0xda87b174
shr ebx, 9
jmp 0x482eeb
pop esi
xchg ecx, ebx
xor ecx, 0xdb283543
xor ebx, 0xdb2a2a62
or edx, ecx
or ebx, edx
and edi, 0xdb36b875
or edx, ecx
xchg edi, ebx
add ebx, edx
jmp 0x482f26
mov esi, 0x73716341
add edi, ecx
or edx, ebx
sub ebx, 0xdb428887
xor ebx, ecx
xor edx, ecx
xchg ebx, ecx
ror edi, 0x11
xchg edi, ecx
or edx, 0xdb4e776a
sub ebx, edx
or edi, edx
shr edi, 0x10
and ecx, ebx
jmp 0x4833bb
push 0xb921ab79
add ebx, edi
or ecx, edi
sub ecx, edi
neg edx
xor ecx, 0xdb6025e9
add ecx, edi
or ecx, 0xdb63d483
add ebx, 0xdb65b657
sub edx, edi
xor edx, ecx
add ecx, edx
jmp 0x4824ac
mov esi, 0x73716341
add ecx, 0xdb9614ee
rol edi, 0xb
xor ebx, edx
mov edi, ebx
mov edx, 0xdb9dd34e
sub edx, ecx
inc edx
xchg ecx, edx
or edi, edx
xor ecx, edx
jmp 0x48404f
call esi
xor edx, edi
mov edx, 0xdbac1c8a
rol ecx, 0x1f
not ecx
mov ebx, edi
mov ecx, edx
neg edi
add ecx, 0xdbb815be
jmp 0x483f70
call esi
sub edx, edi
or edi, 0xdbbc705b
and edi, 0xdbbe5e1d
xchg edi, ecx
xor edx, 0xdbc27184
jmp 0x4820ce
pop esi
and edx, 0xdbd77a2e
sub edx, edi
mov ebx, 0xdbdb5742
neg ecx
bswap ecx
mov ecx, edx
xor ecx, 0xdbe417ff
and ecx, edi
neg edi
mov ecx, edx
jmp 0x48177a
push 0xb9343d96
inc ebx
sub edi, ecx
bswap ebx
rol ecx, 6
add edi, edx
xor edx, ebx
shr ebx, 0x14
and edx, ecx
xor ecx, edi
jmp 0x482cf6
push 0xb95ce331
add ebx, edx
add edx, 0xdc42c2a1
sub edi, ecx
not ecx
add edx, edi
nop
or ebx, ecx
add edi, edx
add edi, 0xdc50f2dc
jmp 0x481344
call esi
sub edx, ebx
inc edi
not ebx
xchg edi, edx
mov edi, 0xdc6421de
xor edx, ebx
add ecx, 0xdc683f0a
add ebx, edi
jmp 0x4825f4
push esp
add edi, 0xdc9724cb
dec ecx
add ecx, edx
add ebx, 0xdc9cdd75
add ecx, edi
or edi, ecx
or edx, ebx
shl ecx, 9
xchg ecx, edx
xor ebx, edi
xchg edx, ecx
jmp 0x48420f
push 0xb9468498
add edx, ecx
add edi, ebx
rol ebx, 8
xor edx, edi
add ecx, edi
sub edx, edi
add edx, 0xdcb904ad
sub edx, ecx
sub edx, 0xdcbd333e
add edi, ecx
add edx, 0xdcc10c8e
and edx, 0xdcc30ed4
and ecx, edx
or edx, 0xdcc6fa42
jmp 0x48110d
pop esi
add ebx, edi
shr ebx, 0x1e
mov edi, ebx
not edx
and edi, ecx
jmp 0x481617
pop esi
xor edx, 0xdcd3ff41
add ecx, edx
or edi, ebx
sub edi, ebx
xchg ecx, edx
xor ecx, 0xdcddc972
bswap ecx
jmp 0x482fe2
push 0xb8c6d882
add ecx, edx
and edx, ecx
xchg edx, ecx
not edi
or edi, 0xdcea4424
add edi, ebx
or ebx, ecx
and ebx, edi
dec ecx
xor edx, edi
mov edx, edi
xchg edi, edx
jmp 0x48407d
mov esi, 0x73716341
neg ecx
and ebx, ecx
or edx, ebx
jmp 0x482834
push 0xb90ba029
ror edx, 0x19
sub edi, 0xdd42b9f7
or ebx, 0xdd44f299
rol ecx, 0x13
jmp 0x482479
mov esi, 0x40495727
add edi, ebx
xor edx, edi
rol ebx, 1
mov ebx, 0xde0d0611
and ecx, ebx
dec edi
or edx, edi
add edi, 0xde14e15d
jmp 0x481969
mov esi, 0x40495727
not ebx
xchg ecx, ebx
or ecx, ebx
xor edx, edi
jmp 0x483380
call fcn.00481170
xor edi, edx
or edi, ecx
xor ebx, 0xde659333
xor edx, ebx
rol edi, 5
inc edx
xor ecx, 0xde6e0e5e
shl edi, 0xd
jmp 0x4840cb
pop esi
and ebx, 0xdec17809
xor edi, ebx
rol ecx, 0x15
sub edx, 0xdec76a57
xchg edi, ecx
xchg ecx, edx
mov edi, ebx
ror edx, 0x19
sub edi, 0xded17604
xchg edi, ebx
or ebx, edx
jmp 0x48398b
call fcn.00481170
rol edi, 0xd
ror ecx, 0xb
add edi, ebx
sub edi, edx
inc ebx
or ecx, ebx
ror edi, 8
jmp 0x482a42
call fcn.00481170
xor edx, ecx
xor edi, edx
sub ecx, edi
sub ecx, ebx
dec edx
add edx, 0xdf79c4a1
xor ecx, 0xdf7baede
or edi, ecx
jmp 0x4817fd
pop esi
mov ecx, 0xdf801326
xor edi, edx
shr edx, 0x18
jmp 0x482aee
call esi
rol ecx, 0xe
or ecx, edi
and ecx, edx
shl ecx, 0xf
dec edi
sub edx, 0xe0a9377c
sub edi, ecx
and ebx, ecx
jmp 0x483e9b
call fcn.00481170
add ecx, 0xe0af6162
ror edx, 2
xchg ebx, edi
add ebx, edi
bswap edx
sub edi, 0xe0b91d76
xchg ecx, edx
rol ebx, 2
nop
and ecx, ebx
xor edx, ecx
shl ecx, 6
nop
jmp 0x482e56
push 0xb8ea4c16
sub ecx, 0xe1222485
or ecx, edx
add ecx, 0xe125faf2
mov edi, ebx
sub edx, edi
rol edi, 1
sub ebx, 0xe12e0448
or edi, edx
xor ebx, edx
sub edx, ecx
jmp 0x4824c7
pop esi
xchg edx, ecx
add edx, ebx
xchg edi, ecx
xor edx, ebx
xor ecx, edx
sub edx, ebx
add ecx, 0xe1ecde96
sub edx, ecx
xor edi, ecx
sub edx, 0xe1f30794
xor edx, edi
rol ebx, 0x13
inc edi
xor edx, ebx
xor ecx, edx
jmp 0x482038
mov esi, 0x4132136a
xor edi, 0xe2efaad9
or ecx, edx
mov ecx, ebx
add edx, ecx
ror edi, 4
xor edi, edx
neg edi
or edi, 0xe2fd9bd4
or edi, ebx
add edi, edx
jmp 0x480d2c
push 0xb900c0e9
mov ebx, edx
bswap edx
xchg edi, ebx
inc edx
sub ecx, edi
and edx, ebx
rol edi, 0x14
dec ebx
xor edi, ebx
mov ebx, ecx
sub ecx, ebx
add ebx, edi
xchg edi, ecx
and ecx, edi
xchg ecx, ebx
jmp 0x481fb1
pop esi
and ebx, 0xe3a712cb
and ebx, ecx
mov ecx, 0xe3aae0ea
xor edi, 0xe3acd0dc
xor ebx, 0xe3aec449
xchg ecx, ebx
mov ecx, edx
neg edx
not ebx
add ebx, ecx
xchg ebx, edi
mov edi, ebx
sub edx, edi
mov ecx, edi
jmp 0x48191e
pop esi
sub edi, 0xe3dc2471
mov edx, ecx
rol edi, 0x12
or ecx, 0xe3e1e992
mov edi, edx
xchg edi, ecx
mov ecx, 0xe3e7efcb
add edx, edi
add edi, ecx
and edi, ecx
and ebx, edi
xchg ecx, ebx
add edi, 0xe3f4cf68
jmp 0x481dae
push 0xb8ed3f22
add ecx, 0xe46d723d
xor edi, ebx
mov edi, edx
bswap edx
or ebx, edx
xchg edi, edx
add ebx, edi
rol edi, 0x1a
or edi, 0xe48e8003
xchg ebx, ecx
jmp 0x4827df
pop esi
mov edx, ebx
xor edx, 0xe494c43e
or edi, edx
or ecx, 0xe49a74c6
sub edi, edx
or ecx, 0xe49e814b
bswap ecx
neg edi
or edi, ecx
not edx
mov ebx, 0xe4a8b98d
jmp 0x481e74
call fcn.00481170
or edi, 0xe56a6807
sub ecx, ebx
mov ecx, 0xe56e2912
inc edi
neg ebx
add edx, ecx
add ebx, edi
jmp 0x482d1b
pop esi
mov edi, edx
add ecx, ebx
or edi, 0xe57c5dab
inc ecx
and edi, edx
mov ebx, edx
mov edi, ebx
jmp 0x48230a
push 0xb8b754ab
and ecx, edi
dec edi
inc ebx
shl ecx, 0x1b
add edx, ecx
xor ebx, edx
xchg ecx, ebx
or ebx, ecx
add edx, edi
jmp 0x48425d
push 0xb8c55d31
or ecx, 0xe5aa0708
xor ebx, edi
sub ecx, edi
jmp 0x482f53
pop esi
xchg ecx, edi
sub ecx, edx
or ecx, edx
and ecx, edi
and ecx, edx
mov ecx, edx
sub edx, 0xe5bd1723
dec edi
nop
or ecx, edi
jmp 0x481b90
pop esi
and edi, edx
or ecx, edx
and ebx, 0xe5c9a89a
or edi, ecx
jmp 0x48433f
pop esi
sub ecx, 0xe5f6dbc3
mov ebx, ecx
or edx, ebx
and edx, 0xe5fcbaee
add ecx, 0xe5febb92
neg ebx
dec edi
xchg ebx, edi
inc ecx
and ecx, 0xe60bfe45
mov edx, ebx
jmp 0x483e3a
push 0x7f765
add edi, ebx
not edx
add edi, ecx
mov ecx, ebx
sub ecx, 0xe6d29e6b
ror ecx, 0x10
sub ecx, ebx
add edi, edx
xchg ebx, edx
jmp 0x48295b
pop esi
xchg edx, ecx
xchg ecx, edi
xor ecx, edi
mov ecx, ebx
inc edx
xor ecx, 0xe6f8ff5e
xor ecx, edi
xor edx, 0xe6fde23a
add edi, ecx
jmp 0x483817
pop esi
add edx, ecx
not ecx
sub edi, ecx
xchg ebx, edi
xchg ebx, edx
jmp 0x483b10
mov esi, 0x40495727
xor ecx, edx
add ecx, edi
sub ebx, ecx
and edx, ecx
neg ebx
and ebx, ecx
mov ecx, edx
add edx, ecx
xor edi, 0xe7600a36
mov edi, 0xe761f70e
and ecx, edi
and ebx, edi
jmp 0x481735
call fcn.00481170
sub edx, 0xe7bc73b9
ror ebx, 0x14
and edx, 0xe7c10e68
sub edi, ebx
xor ebx, 0xe7c67d19
dec edi
and ecx, edi
sub edi, ecx
add edx, 0xe7cfcfa6
add edi, ecx
jmp 0x480d5e
mov esi, 0x73716341
and edi, ecx
bswap edx
dec edi
or ecx, edx
xor edi, edx
neg edx
mov ebx, 0xe7e64d26
or edi, edx
and edi, 0xe7eb5aad
xchg ebx, ecx
bswap edx
mov ecx, ebx
xchg edx, ecx
jmp 0x482299
call esi
and ecx, ebx
sub edx, ebx
add edx, ecx
xor edx, ecx
sub ecx, edi
add ebx, edx
and edx, edi
mov ecx, edx
xchg edi, ebx
jmp 0x482c35
push 0xb9ba5bd1
xor ecx, edx
xor edx, ebx
xchg ebx, edx
shr edx, 0xc
and edi, 0xe89a5858
or ecx, edi
add edi, edx
add edx, 0xe8a129b1
xor edx, ebx
or ebx, 0xe8a57ae6
xchg ecx, edi
jmp 0x4830fd
push 0x40
mov edi, ebx
neg ebx
sub ebx, edx
and ebx, 0xea5a2f91
and ecx, edi
add ecx, 0xea5e6e3b
and ebx, ecx
add edi, ecx
xor ebx, ecx
mov ebx, 0xeae8804e
neg ebx
mov edx, ecx
jmp 0x483f33
mov esi, 0x73716341
sub edx, ecx
and edi, ecx
mov ecx, 0xeb060f96
nop
jmp 0x480c91
push 0xb99977aa
rol ecx, 0x16
ror ecx, 1
xchg edi, ecx
rol edi, 6
xor ebx, 0xeb933d4a
xor edx, ebx
xor ecx, edi
mov edx, 0xeb99b7d5
dec edi
mov ecx, edx
add edx, ebx
and edx, edi
add edi, ebx
inc edx
jmp 0x481c58