Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetKBCodePage
cmp eax, 0xffffff38
jne 0x40107a
call sub.advapi32.dll_IsValidAcl
call sub.shell32.dll_RealShellExecuteW
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.advapi32.dll_IsValidAcl
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.shell32.dll_RealShellExecuteW
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.shell32.dll_RealShellExecuteW
call sub.shell32.dll_RealShellExecuteW
call sub.advapi32.dll_IsValidAcl
ret
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xfffffee0
jne 0x401112
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.shell32.dll_RealShellExecuteW
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.shell32.dll_RealShellExecuteW
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.advapi32.dll_IsValidAcl
call sub.shell32.dll_RealShellExecuteW
call sub.advapi32.dll_IsValidAcl
call sub.advapi32.dll_IsValidAcl
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.shell32.dll_RealShellExecuteW
call sub.shell32.dll_RealShellExecuteW
call sub.advapi32.dll_IsValidAcl
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.advapi32.dll_IsValidAcl
ret
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xffffff03
jne 0x401173
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.advapi32.dll_IsValidAcl
call sub.shell32.dll_RealShellExecuteW
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwRemoveIoCompletion
ret
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xfffffef2
jne 0x4011e3
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.advapi32.dll_IsValidAcl
call sub.advapi32.dll_IsValidAcl
call sub.advapi32.dll_IsValidAcl
call sub.advapi32.dll_IsValidAcl
call sub.advapi32.dll_IsValidAcl
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.shell32.dll_RealShellExecuteW
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwWaitForDebugEvent
ret
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xffffff26
jne 0x40124e
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.shell32.dll_RealShellExecuteW
call sub.shell32.dll_RealShellExecuteW
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.advapi32.dll_IsValidAcl
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.advapi32.dll_IsValidAcl
call sub.ntdll.dll_ZwWaitForDebugEvent
call sub.ntdll.dll_ZwRemoveIoCompletion
call sub.shell32.dll_RealShellExecuteW
call sub.advapi32.dll_IsValidAcl
call sub.shell32.dll_RealShellExecuteW
call sub.ntdll.dll_ZwRemoveIoCompletion
ret
jmp 0x47521c
nop
or ebx, edx
bswap esi
xchg esi, ebx
sub ebx, 0xd76e762f
bswap esi
or ebx, 0xd76f4179
jmp 0x4758e3
push 0xd792b612
xchg esi, edi
rol esi, 3
sub esi, 0xdae7886e
sub ebx, edi
rol ebx, 0xb
sub esi, ebx
sub esi, 0xdae9483f
or esi, edi
bswap ecx
jmp 0x475497
pop edx
mov ecx, 0xdaecf516
and ebx, esi
xor ebx, ecx
mov esi, 0xdaee3620
dec ecx
xchg ecx, ebx
or edi, ecx
mov edi, ebx
xor ebx, esi
jmp 0x4754b3
call fcn.00477c87
sub esi, ebx
mov ebx, 0xdaf13a55
sub ebx, edi
rol edi, 0x1d
jmp 0x476dc8
mov edx, 0x123b2f04
or ecx, edi
mov edi, esi
neg ebx
neg ecx
jmp 0x477416
call fcn.00477c87
and ebx, esi
or edi, 0xdb3a2e34
or edi, 0xdb3abd8a
sub esi, edi
rol ebx, 0x1f
or ebx, esi
jmp 0x477596
mov edx, 0x2774562b
sub esi, ecx
xor ecx, edi
and esi, ebx
sub edi, ebx
xchg esi, ecx
not ecx
sub ecx, ebx
sub ebx, esi
add ecx, esi
xchg ebx, esi
mov ebx, edi
dec ebx
jmp 0x475279
push 0xd792e535
add ebx, edi
shr ecx, 0x1c
xchg ecx, ebx
add ebx, esi
dec ecx
rol edi, 0x18
dec edi
and edi, ebx
or ebx, esi
jmp 0x477b73
pop edx
xchg ecx, edi
or esi, edi
shl ecx, 9
or edi, 0xdb815f89
bswap ebx
add ebx, 0xdb8270fb
xchg ebx, esi
xor ebx, 0xdb834966
bswap edi
sub edi, ebx
xor ebx, 0xdb849220
sub ebx, ecx
jmp 0x4755cf
call edx
xor ebx, ecx
sub ebx, 0xdb8fc95f
sub ebx, esi
sub ecx, esi
bswap ecx
xchg ecx, esi
xor esi, edi
and edi, esi
add ebx, 0xdb9bfda7
xor ecx, edi
sub esi, edi
and edi, 0xdb9d2bbd
rol ebx, 0x18
shr esi, 0x13
xchg edi, ecx
jmp 0x4760f2
pop edx
mov ecx, esi
add esi, ebx
mov edi, ecx
sub ebx, esi
xchg ebx, ecx
xor esi, 0xdbaef400
add ecx, 0xdbaf5ce5
or esi, ecx
sub edi, 0xdbb02559
xchg esi, ebx
jmp 0x4772b5
pop edx
and esi, edi
and esi, ebx
add ebx, esi
jmp 0x477a5f
pop edx
rol esi, 0x10
dec esi
sub edi, ebx
not ecx
and ecx, 0xdbb4d618
xchg ecx, edi
jmp 0x477005
push 0xd79000c6
nop
and ecx, edi
add edi, 0xdbc804ba
jmp 0x477aee
pop edx
and ebx, 0xdbc88d27
and ebx, 0xdbc8ee61
inc esi
shr ecx, 0x18
mov ecx, ebx
xor ebx, esi
add esi, edi
sub ebx, 0xdbcb8778
xor esi, ecx
jmp 0x47763f
push 0xd780e060
rol ecx, 8
dec edi
not esi
and ebx, esi
xor edi, 0xdbce611e
mov ebx, esi
and ebx, 0xdbcf52f4
rol ebx, 5
shr ecx, 5
jmp 0x475d1a
mov edx, 0x123b2f04
xor ecx, edi
sub ecx, edi
or edi, ecx
add edi, ecx
mov edi, ebx
shl esi, 0x1b
mov edi, ebx
mov esi, edi
mov esi, ecx
mov esi, edi
jmp 0x4773b2
push 0xd7791886
mov edi, ecx
or ebx, ecx
sub ecx, 0xdc17db49
mov esi, edi
add ecx, edi
xor edi, ecx
jmp 0x47662e
push 0xd77d3c53
add ebx, edi
add ecx, edi
xor esi, ecx
sub ebx, 0xdc23f68f
and ecx, ebx
add ecx, edi
ror ebx, 0x10
sub esi, edi
xchg ecx, edi
dec ebx
sub esi, ebx
jmp 0x4760b5
push 0xd779b7f7
shr ecx, 8
xchg ecx, edi
and ebx, esi
sub ecx, ebx
xor ecx, ebx
dec edi
mov ecx, edi
shr edi, 0x1c
xor esi, edi
mov esi, 0xdc2fc906
rol edi, 0xf
or edi, 0xdc30a1af
shl edi, 0xf
add edi, ebx
or ebx, esi
jmp 0x4765b2
push 0xd7753291
add ebx, edi
or esi, ebx
add edi, 0xdc33367a
or ebx, ecx
jmp 0x4770eb
pop edx
xor ebx, edi
ror esi, 0x17
or esi, 0xdc3539c5
xor esi, edi
add ebx, esi
mov edi, esi
jmp 0x476bbf
push 0xd7877958
ror esi, 0x1d
xchg ecx, esi
and ecx, 0xdc49ff24
mov ecx, ebx
sub esi, edi
sub edi, ecx
xor edi, ebx
dec ecx
and esi, 0xdc4ca36e
not ebx
sub ebx, 0xdc4d6f6b
mov ebx, esi
jmp 0x475a49
push 0xd787a240
sub ecx, 0xdc6bce2a
ror ecx, 5
not edi
xor edi, ecx
sub edi, ebx
and edi, 0xdc6e267c
xor ecx, 0xdc6e8a27
xor ecx, 0xdc6f034e
sub ecx, 0xdc6f7bcb
inc edi
xor ebx, esi
jmp 0x476612
call edx
shr ecx, 0xd
or ecx, 0xdc797f12
not ebx
add esi, edi
or ecx, 0xdc7b13d0
or ecx, 0xdc7b7cfc
and edi, esi
jmp 0x476b41
pop edx
sub ecx, edi
sub edi, 0xdc7d0377
sub edi, ecx
mov esi, edi
add edi, ecx
xor ebx, esi
and esi, edi
add ecx, ebx
mov esi, edi
xchg ecx, esi
xor ebx, 0xdc861587
or ecx, ebx
jmp 0x47567b
call fcn.00477c87
neg edi
inc esi
add esi, ebx
neg ecx
shr ecx, 0x19
or ebx, 0xdc898e94
xor ebx, ecx
add edi, 0xdc8a88e6
jmp 0x476deb
pop edx
mov ecx, ebx
xchg edi, ebx
mov ecx, ebx
and esi, 0xdc92ffe3
add edi, esi
xor ebx, esi
sub ecx, esi
and ebx, 0xdc94d1f5
and ebx, ecx
xor ebx, 0xdc959b0d
rol esi, 0x11
xor edi, esi
jmp 0x4764c2
call fcn.00477c87
xchg edi, ecx
and esi, 0xdc9c09fe
mov ebx, ecx
xchg ecx, esi
sub esi, ebx
xor esi, edi
sub esi, ecx
xor esi, 0xdca0dafd
and edi, ecx
add ebx, ecx
jmp 0x477acd
pop edx
mov edi, ecx
or ecx, edi
shr ebx, 0xe
or ebx, esi
and ebx, esi
xor ecx, esi
not edi
rol ecx, 8
xchg ebx, esi
xor edi, ebx
and edi, esi
sub esi, ebx
nop
jmp 0x476574
call edx
xor edi, esi
or ecx, esi
shr ecx, 0x1d
dec edi
and edi, 0xdcc4d401
mov ebx, 0xdcc55b2b
and ecx, ebx
sub esi, 0xdcc654e4
or ecx, ebx
or edi, esi
inc ecx
jmp 0x476cd5
push 0xd78137aa
xor ebx, 0xdcc9a84a
or esi, 0xdcca25fe
xor edi, esi
rol ecx, 0x12
sub ecx, 0xdccb915f
dec esi
add ecx, ebx
mov ebx, esi
mov ebx, ecx
add ebx, ecx
add ebx, esi
neg edi
bswap esi
xor ecx, edi
jmp 0x475e5b
mov edx, 0x2774562b
sub ecx, esi
ror esi, 0x1f
xchg edi, esi
mov ebx, ecx
inc ebx
shl ebx, 0x1a
sub ecx, edi
nop
jmp 0x476a1d
push 0xd78629df
mov edi, 0xdce7e914
xor ebx, 0xdce846eb
mov ecx, 0xdce8dc2e
or edi, ebx
jmp 0x475763
mov edx, 0x123b2f04
rol edi, 0x1e
sub esi, ebx
xor ecx, ebx
xor ebx, ecx
and ebx, 0xdcebc055
sub ecx, 0xdcec2786
bswap esi
jmp 0x476e3e
push 0xd7819f4f
xor ecx, esi
sub edi, ecx
or ebx, esi
xor ecx, esi
sub esi, edi
or ebx, 0xdcf31fe2
sub ecx, ebx
jmp 0x477290
pop edx
or edi, ecx
xor ecx, esi
mov esi, edi
neg edi
jmp 0x477216
pop edx
or ecx, 0xdcfe8da4
xor edi, 0xdcff0a69
and ecx, esi
xchg esi, ecx
add ebx, ecx
mov ebx, ecx
xor esi, 0xdd013735
sub edi, esi
mov esi, 0xdd025f3f
shl ebx, 0x1b
and ecx, 0xdd033109
add ebx, esi
jmp 0x476a54
pop edx
or edi, 0xdd0859b8
xor edi, ebx
or ecx, 0xdd09594c
and edi, esi
and ecx, 0xdd0a4a72
ror edi, 0x19
xor ecx, edi
and edi, ecx
rol esi, 6
jmp 0x47623b
pop edx
and ecx, esi
mov ecx, esi
sub ecx, edi
shl ebx, 0x11
and edi, esi
shl esi, 0x12
add edi, ebx
jmp 0x47787b
push 0xd77d8af8
add edi, 0xdd29ba6d
sub esi, ebx
xor esi, ecx
inc esi
sub ebx, edi
shl ecx, 0x19
mov esi, ebx
add ebx, esi
mov edi, ebx
or ebx, esi
shl ebx, 3
not esi
jmp 0x475e1e
call edx
and ecx, 0xdd30be63
add ecx, edi
and ebx, esi
ror ebx, 0x15
or ecx, ebx
jmp 0x475adf
pop edx
or esi, 0xdd333809
xchg ecx, edi
xor esi, edi
inc edi
mov esi, ebx
and edi, ebx
sub esi, edi
or esi, ebx
and edi, esi
xchg ecx, esi
add ebx, ecx
mov ecx, edi
xor edi, ecx
mov esi, edi
xor ecx, edi
jmp 0x4758f9
call edx
neg edi
xor ebx, edi
ror esi, 0xc
bswap esi
jmp 0x4779d1
call fcn.00477c87
xor edi, ecx
or ebx, ecx
shl ebx, 0x1f
shr ebx, 0x1c
jmp 0x477c26
mov edx, 0x2774562b
and esi, ebx
or ebx, esi
xor edi, esi
mov ecx, 0xdd44caf9
add esi, ebx
shr ecx, 0xe
xor esi, 0xdd45661c
nop
mov ecx, esi
sub ecx, esi
dec ebx
or ebx, esi
nop
and esi, ebx
add ebx, esi
jmp 0x476175
push 0x73e1c
nop
and ecx, edi
jmp 0x476abe
mov edx, 0x2774562b
or edi, ecx
add edi, ecx
shl esi, 0x12
rol ecx, 0x11
xor edi, ebx
xchg esi, ebx
mov ecx, 0xdd4f6416
or edi, ebx
jmp 0x475b05
pop edx
xchg ecx, esi
xor ebx, 0xdd522035
or ebx, ecx
mov esi, ebx
xor ecx, 0xdd53baba
and edi, ecx
or ebx, 0xdd549c82
shr ebx, 0x1a
and ecx, 0xdd5598d6
and ebx, ecx
shr esi, 0xc
jmp 0x4776a7
call edx
mov edi, ebx
add ecx, esi
and ecx, edi
mov esi, ecx
xor edi, esi
or edi, 0xdd5af6af
and ecx, edi
sub ebx, 0xdd5b84b7
xor ecx, ebx
xchg edi, ecx
xchg ecx, ebx
jmp 0x4774d3
pop edx
add ecx, edi
mov ecx, 0xdd62e9df
ror esi, 6
inc ecx
inc esi
sub ecx, 0xdd63cba0
and ecx, ebx
add edi, ecx
jmp loc.0047756a
push 0xd78ecb17
or edi, ecx
bswap ecx
sub esi, 0xdd77045d
xor esi, 0xdd776b1b
bswap ebx
add ebx, esi
and esi, ecx
rol esi, 3
jmp 0x47528f
push 0xd7895be8
sub ecx, edi
and esi, 0xdd7ebfd8
and edi, ebx
xchg edi, esi
add ebx, esi
xor esi, ebx
add ecx, 0xdd80fc5d
or esi, 0xdd816007
jmp 0x47767f
pop edx
dec esi
mov edi, ecx
inc edi
xchg ebx, ecx
jmp 0x476fda
pop edx
add ebx, esi
or edi, esi
mov ecx, 0xdd8eff31
dec edi
xchg edi, esi
ror ecx, 3
add esi, edi
mov esi, edi
and ecx, esi
dec ecx
add esi, edi
sub ebx, 0xdd935907
bswap edi
mov ecx, edi
jmp 0x47603c
mov edx, 0x4132136a
xor esi, 0xdda0eecf
add ecx, ebx
shl ecx, 0xd
xchg ebx, esi
dec ebx
mov ebx, edi
jmp 0x4766b3
pop edx
and ecx, edi
and ecx, 0xdda4a20e
mov ebx, edi
and esi, ebx
and ecx, esi
mov edi, ebx
xchg ecx, edi
xor esi, ecx
xchg edi, esi
jmp 0x4770bd
mov edx, 0x123b2f04
xor ecx, esi
add esi, edi
shl edi, 0x16
sub ecx, ebx
xor edi, esi
jmp 0x477171
pop edx
mov ecx, ebx
xor ebx, edi
xchg esi, edi
xor ecx, 0xddb1b2a6
or edi, esi
and ebx, ecx
xchg ebx, edi
add ecx, esi
shr ebx, 0xd
mov ecx, 0xddb478dd
shl ecx, 0x12
mov edi, 0xddb55be9
jmp 0x475932
push 0xd787ce58
and ebx, edi
sub edi, ebx
mov ecx, ebx
xor ebx, 0xddbd276a
sub esi, 0xddbd8b04
jmp 0x476189
push 0xd7796cf8
xchg edi, esi
sub edi, ecx
xor ecx, 0xddbf0fc1
sub edi, 0xddbf8b3e
or edi, esi
shr edi, 0x10
mov ecx, esi
neg ebx
xchg ecx, esi
neg ebx
not esi
mov ebx, edi
shl esi, 0x17
sub esi, ecx
jmp 0x4758b1
push 0xd784f7c2
xchg ecx, edi
add esi, edi
mov esi, 0xddca1e9d
not esi
mov esi, 0xddcaf6cb
xchg ecx, ebx
jmp 0x4753af
call fcn.00477c87
dec ecx
not edi
and ecx, edi
rol esi, 9
dec ebx
neg ecx
xchg ebx, edi
mov edi, ebx
or esi, edi
add edi, 0xddd450f8
jmp 0x476eec
call fcn.00477c87
add esi, ebx
and ecx, esi
dec esi
or esi, ecx
mov ecx, esi
dec esi
not ecx
neg esi
xchg esi, ecx
shl esi, 0x1d
add edi, ebx
or ebx, ecx
jmp 0x4774b4
call edx
mov ebx, 0xdde9ef68
ror edi, 0xf
mov edi, ecx
sub ecx, esi
shr ebx, 0xa
mov edi, ebx
or ecx, edi
add edi, 0xddecc441
or esi, 0xdded5a51
xchg ebx, edi
or ecx, edi
jmp 0x47694c
push 0xd78d291d
add edi, 0xddfadbf1
not esi
xchg ebx, esi
sub ebx, edi
sub esi, ebx
xor ecx, esi
or ecx, ebx
sub ebx, edi
neg esi
add ecx, 0xddfeb940
and edi, esi
jmp 0x4769a9
pop edx
xor edi, 0xde2a7f13
xor ebx, 0xde2ab214
mov edi, 0xde2b0938
mov ecx, 0xde2b3c2c
xor ebx, 0xde2b7363
shr edi, 0x1f
mov ebx, 0xde2bdc00
ror ebx, 6
sub edi, ebx
jmp 0x4767fc
push 0xd78d6b43
sub esi, 0xde2fb922
mov edi, esi
sub ecx, ebx
not edi
mov ebx, edi
add esi, ebx
nop
sub ecx, 0xde3150cb
mov ebx, ecx
jmp 0x4776f1
call fcn.00477c87
sub ecx, ebx
add ecx, edi
nop
sub edi, esi
xchg edi, ecx
add ebx, ecx
and esi, ebx
jmp 0x475abd
call fcn.00477c87
xchg ebx, ecx
shl esi, 0xb
and esi, edi
bswap ecx
sub ebx, esi
xchg esi, ecx
neg edi
bswap ecx
mov edi, 0xde39df93
jmp 0x47629a
pop edx
sub ecx, edi
add edi, ebx
xor ebx, 0xde3a97cb
inc ebx
or esi, edi
mov edi, esi
not ecx
mov ebx, esi
jmp 0x476d8e
push 0x401400
add esi, edi
add ecx, edi
not ebx
xor ecx, esi
sub ebx, 0xde5353a6
neg edi
neg edi
or ecx, 0xde54c48e
dec esi
neg ecx
xor esi, ecx
jmp 0x47676d
pop edx
mov ecx, esi
add ecx, 0xde6d233a
sub ebx, esi
xor ecx, edi
xor esi, ecx
mov ecx, esi
sub ecx, 0xde701bb7
or edi, 0xde708685
jmp 0x475c34
pop edx
ror ecx, 0x10
bswap ecx
neg ebx
sub ebx, edi
mov ecx, ebx
shr ecx, 0x17
and edi, esi
or ecx, ebx
xor ecx, 0xde819460
xor ebx, esi
xor ebx, edi
and ebx, edi
add ebx, edi
and ebx, edi
xor edi, 0xde84b9d4
jmp 0x4755c3
pop edx
xor ecx, edi
mov ebx, edi
sub ebx, ecx
xor esi, ecx
or esi, ebx
rol edi, 0x14
and ebx, edi
not edi
jmp 0x476416
mov edx, 0x2774562b
shl ebx, 0x1b
not ecx
xchg ebx, ecx
sub ecx, ebx
add ecx, edi
or ecx, 0xde940620
jmp 0x477b16
pop edx
mov edi, ebx
or ebx, esi
and ebx, 0xdeae3b8c
ror ecx, 0xe
mov ecx, esi
xor esi, edi
mov esi, ebx
neg ebx
and ecx, esi
jmp 0x4765c7
pop edx
or edi, ebx
mov esi, ebx
add esi, edi
jmp 0x47559d
push 0xd7928ab3
add edi, 0xdecd99b7
and esi, ecx
xor esi, 0xdece7613
add ecx, edi
neg ebx
xor edi, esi
shl ecx, 0x15
mov edi, ecx
rol ecx, 0x18
neg ebx
and esi, 0xded39cb7
nop
sub ebx, ecx
add ecx, 0xdf0a0b8b
shr ecx, 7
jmp 0x475236
call edx
shr esi, 0x15
nop
xchg ebx, esi
xor ecx, ebx
xchg edi, ebx
xor esi, ebx
mov edi, ebx
xor esi, 0xdf0e7137
xor esi, ebx
sub esi, ecx
sub edi, ebx
mov ecx, esi
jmp 0x475b5e
call edx
sub ecx, edi
xor edi, ecx
xchg edi, esi
xchg esi, ebx
add ebx, 0xdf12cdee
add ecx, edi
or edi, ecx
shl ebx, 0x15
or ebx, ecx
jmp 0x4764ce
push 0xd775fd16
mov ecx, edi
xor esi, 0xdf157fdd
or ebx, esi
sub edi, esi
add edi, ecx
jmp 0x475de8
call edx
nop
add ecx, esi
and edi, ebx
bswap ecx
shl ebx, 0xe
mov ecx, edi
sub edi, ecx
xor esi, ecx
sub ebx, 0xdf1b446f
jmp 0x476b91
call fcn.00477c87
add edi, esi
sub edi, ecx
inc esi
mov esi, edi
mov ecx, ebx
and ebx, edi
xor ebx, ecx
and ecx, edi
jmp 0x476e21
push esp
mov esi, 0xdf336ff5
or edi, 0xdf33ea54
xor ecx, ebx
neg ecx
inc ecx
xor esi, 0xdf35cad0
sub ecx, esi
mov ecx, ebx
xor edi, ebx
mov esi, ebx
or ebx, ecx
and ecx, 0xdf3868bc
jmp 0x47770c
pop edx
xor ecx, esi
and esi, edi
add edi, ebx
xchg esi, edi
xor ecx, ebx
and ecx, edi
bswap ebx
or edi, ebx
sub ebx, esi
xor edi, ebx
xor ecx, 0xdf57c4be
jmp 0x47525c
push 0xd785fd18
add ebx, 0xdf586f92
neg edi
or ecx, ebx
and ecx, edi
xor ebx, 0xdf5a153a
rol esi, 0x1b
neg edi
and ecx, edi
xor esi, edi
add edi, ecx
mov esi, ebx
xor ebx, ecx
jmp 0x475e02
push 0xd784cba7
shl esi, 0x1c
add esi, edi
sub esi, ebx
mov ebx, edi
and edi, 0xdf628b64
jmp 0x47667e
push 0xd778793a
sub esi, ecx
xchg esi, ebx
or ebx, ecx
rol ebx, 0x19
xor ecx, edi
inc esi
shl esi, 4
mov ecx, 0xdf80d1a1
add ebx, edi
jmp 0x4778fa
push 0xd775b230
and ecx, ebx
shl esi, 1
xor esi, ecx
add ebx, edi
xchg edi, ebx
sub esi, ebx
and esi, edi
and ebx, esi
sub ecx, esi
dec esi
not ecx
xor ebx, esi
and esi, ecx
sub esi, ecx
and esi, 0xdf8941d2
jmp 0x476e09
call fcn.00477c87
and ebx, 0xdf9ac700
inc ecx
add ecx, ebx
sub ebx, edi
mov ecx, ebx
inc edi
bswap esi
add ecx, edi
xchg ecx, edi
and ebx, ecx
sub ebx, edi
sub edi, esi
xchg ecx, esi
not ecx
and edi, ebx
not ecx
jmp 0x476119
pop edx
sub esi, ebx
and ebx, edi
and ecx, edi
neg ebx
sub ecx, edi
or ebx, edi
add ecx, edi
jmp 0x476314
pop edx
or esi, edi
sub ecx, 0xdfb27228
and edi, ecx
xor ecx, 0xdfb35eba
sub ecx, ebx
and ecx, ebx
inc edi
or edi, ecx
bswap ecx
mov ecx, esi
jmp 0x476d82
mov edx, 0x2774562b
add edi, esi
not esi
and ecx, esi
rol ecx, 8
rol ecx, 0x18
ror esi, 0x11
not esi
xor ebx, 0xdfc46cd4
add edi, esi
and edi, ecx
jmp 0x476a34
push 0xd77ceab7
not ebx
or ebx, esi
add ecx, esi
inc edi
not ebx
sub esi, 0xdfc831c5
or edi, 0xdfc8a53f
sub edi, ecx
xor edi, ecx
jmp 0x47586c
mov edx, 0x2774562b
and esi, ecx
mov esi, 0xdfd396fe
jmp 0x475390
call fcn.00477c87
xor edi, esi
sub edi, ebx
neg edi
add esi, ebx
add edi, ebx
dec ecx
bswap esi
sub esi, ecx
sub ebx, ecx
sub edi, esi
nop
jmp 0x475ce9
call fcn.00477c87
and edi, ebx
ror esi, 0x13
xor ebx, ecx
xor edi, ebx
xchg esi, ecx
mov ecx, 0xe006aa58
or edi, esi
or ecx, 0xe0077738
or esi, edi
jmp 0x4760dc
push 0xd780060e
shl edi, 0x1e
inc ecx
or esi, 0xe009284d
bswap ebx
shl esi, 8
or edi, ebx
sub edi, 0xe00f6d9b
and edi, ebx
rol esi, 0x17
and ecx, esi
not esi
xor ecx, edi
jmp 0x477a38
call edx
xchg esi, ebx
and edi, ecx
dec ecx
and ebx, 0xe03619ee
bswap ecx
nop
sub ecx, 0xe03749f9
mov esi, ecx
not ebx
jmp 0x475eca
pop edx
bswap esi
sub ebx, edi
or ecx, ebx
and ebx, 0xe03ca465
xchg ebx, esi
not ebx
and edi, ebx
jmp 0x476fba
call edx
mov ecx, edi
sub esi, ebx
rol esi, 0x11
xor esi, ecx
add esi, ebx
mov esi, edi
bswap edi
dec ebx
jmp 0x4771dd
push 0xd7892f9e
xor esi, 0xe074fb81
and ebx, esi
bswap ecx
and edi, ecx
bswap ebx
jmp 0x476457
push 0xd78987af
bswap esi
rol ebx, 0x11
xchg esi, edi
jmp 0x477c66
pop edx
and esi, ecx
shr esi, 0x10
sub ebx, ecx
and ebx, esi
sub ecx, edi
mov edi, ecx
and ecx, 0xe08cbe9c
and ecx, 0xe08d285b
or ecx, edi
add esi, ecx
dec ecx
add ebx, edi
xor edi, esi
jmp 0x47655a
push 0xd78d968f
sub edi, ebx
dec ebx
sub ebx, esi
xor edi, esi
xor ecx, edi
mov edi, esi
mov ecx, esi
xchg ecx, edi
or edi, ecx
jmp 0x476c1c
push esp
add edi, ecx
shl ecx, 5
mov esi, ebx
neg ebx
sub ecx, edi
add esi, ebx
and esi, edi
nop
mov esi, ecx
mov edi, ecx
xchg esi, edi
xor esi, ebx
and esi, ecx
and ebx, ecx
bswap ecx
add esi, edi
jmp 0x47777f
push 0x40
shr edi, 3
shr ecx, 4
dec esi
xor edi, 0xe0ad8b4b
or ecx, edi
add esi, edi
mov ecx, ebx
and esi, edi
xchg esi, ecx
shl edi, 0x1b
xor ecx, edi
or ecx, esi
sub ebx, edi
inc ebx
mov ecx, esi
jmp 0x4761db
mov edx, 0x2774562b
rol edi, 3
xor edi, ecx
mov ecx, esi
inc ebx
and ebx, ecx
inc ecx
shl ebx, 0x13
xor esi, 0xe0d02ebc
xchg ebx, edi
jmp 0x4766d4
pop edx
xor ecx, ebx
or ebx, 0xe0d7fb8f
sub ebx, 0xe0d8641f
bswap esi
and edi, ecx
dec esi
add esi, ebx
or esi, 0xe0da992a
sub edi, ecx
add ebx, 0xe0db5e9e
jmp 0x477c01
push 0xd7913ae5
sub esi, 0xe0e4b54f
sub ebx, esi
or edi, esi
or esi, 0xe0e5f168
xchg edi, esi
shl ebx, 4
shr ebx, 0x16
add edi, ecx
add esi, ebx
xchg ecx, esi
add ecx, 0xe0e8f836
add ebx, esi
or esi, 0xe0ea40aa
xor ebx, 0xe0eaad3a
jmp 0x4778c5
push 0xd7916697
mov esi, edi
xchg esi, edi
and esi, ebx
sub ecx, edi
or edi, ecx
and ecx, 0xe0ef3a5b
xor esi, edi
add ecx, ebx
mov ebx, 0xe0f0ae61
sub ebx, 0xe0f112d2
sub ebx, 0xe0f172f0
sub esi, 0xe0f214a5
jmp 0x4777cd
push 0xd778c951
sub esi, ecx
xor ecx, 0xe0f2fdaa
ror ebx, 0x17
mov ebx, 0xe0f3e85c
mov edi, ecx
mov edi, ebx
add edi, ecx
jmp 0x47581f
pop edx
xor edi, ecx
xor esi, ecx
mov edi, ecx
sub edi, ecx
inc esi
dec ebx
or edi, 0xe124de58
neg ebx
jmp 0x475ebc
push 0xd78057a8
and edi, ecx
mov ebx, edi
shl ebx, 0x1b
sub edi, esi
and ecx, ebx
bswap ecx
inc esi
not ebx
xor esi, 0xe1336dcd
xor edi, ebx
dec edi
add edi, esi
add ecx, ebx
jmp 0x4756b2
pop edx
sub edi, esi
add esi, 0xe135d25b
ror ebx, 0x18
add esi, 0xe1363cc1
xor ecx, edi
add ebx, esi
xor ebx, edi
neg ecx
jmp 0x47743a
call edx
and ebx, 0xe148c12f
sub esi, edi
mov esi, edi
not esi
shl esi, 3
xor ebx, edi
rol ecx, 0x19
xor esi, ebx
dec ebx
rol edi, 0xe
jmp 0x475f17
push 0xd7902f74
inc esi
shr ebx, 0x1f
and ecx, edi
sub ebx, esi
or ebx, 0xe154e77f
ror ecx, 0x1c
xor ecx, ebx
add esi, 0xe15614b3
dec edi
xor esi, ecx
xchg edi, ebx
jmp 0x476212
call fcn.00477c87
shr ebx, 0x18
mov esi, ecx
xor ebx, edi
sub ebx, esi
xchg ebx, edi
mov ecx, 0xe16599ea
or esi, ecx
xchg esi, edi
jmp 0x47551d
push 0xd793102c
mov edi, 0xe173f181
or ecx, edi
or ecx, esi
and esi, ecx
or ebx, 0xe175ad95
and edi, 0xe1762096
or ebx, edi
jmp 0x477325
pop edx
or esi, ecx
or ecx, edi
neg ebx
xor ebx, 0xe190bee2
rol esi, 0x1c
xor ebx, edi
add esi, ebx
xor esi, 0xe1927cf1
xor edi, esi
mov edi, esi
or ecx, edi
jmp 0x47568e
call edx
add esi, 0xe19456cc
inc edi
or ecx, 0xe1952713
not ebx
not esi
not edi
add esi, 0xe1970429
sub ecx, edi
bswap ebx
jmp 0x477820
mov edx, 0x123b2f04
xor esi, 0xe19bb98b
sub ebx, ecx
bswap ebx
xchg edi, esi
or edi, ebx
ror ecx, 0x1c
sub edi, 0xe19e72ab
jmp 0x475bb5