Function at 0x401000
Capabilities:
Create process on windows
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xfffffef7
jne 0x40106b
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xfffffede
jne 0x401103
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff27
jne 0x401164
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
ret
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xfffffed7
jne 0x4011d4
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xffffff09
jne 0x401262
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
call sub.shell32.dll_ShellExecuteExW
ret
jmp 0x475519
or esi, ecx
or ecx, esi
mov ecx, edx
shr esi, 0x18
dec ecx
jmp 0x477132
pop ebx
or ecx, esi
dec ecx
xor edi, esi
rol edi, 0xc
sub esi, edx
xchg esi, ecx
shr edi, 0x10
add ecx, edi
jmp 0x4787a8
call fcn.00479221
xor esi, 0x9e7abb3c
ror esi, 2
add ecx, edi
and edi, ecx
and esi, edi
xchg ecx, edx
jmp 0x477fa2
pop ebx
sub ecx, 0x9e8f0b08
or edi, esi
and ecx, esi
and edx, edi
and esi, 0x9e8fd647
or ecx, edx
shl esi, 0x17
mov esi, ecx
and ecx, edi
jmp 0x476bfe
pop ebx
and edi, esi
inc edx
and ecx, 0x9e933fd4
xchg esi, edx
sub edx, esi
sub esi, ecx
or ecx, esi
or ecx, edi
dec edx
jmp 0x476ba7
call ebx
xchg edi, esi
xor edi, ecx
xchg edi, esi
mov edx, 0x9e957957
rol edx, 0xf
or ecx, edx
or ecx, edx
or edx, edi
sub esi, ecx
sub ecx, edi
or esi, edx
add edi, esi
sub ecx, edi
jmp 0x47871d
call ebx
shr edx, 0x13
shr ecx, 0x16
bswap ecx
sub esi, 0x9ea022dc
and edx, 0x9ea059f4
sub ecx, edx
xchg edi, edx
jmp 0x476a7f
call fcn.00479221
mov ecx, 0x9ea2e12a
xor edi, 0x9ea3179d
not ecx
and edx, ecx
shr esi, 0x16
or edx, esi
xor esi, ecx
xor edx, 0x9ea46761
xchg esi, edi
xchg edx, ecx
shr esi, 0x1a
or ecx, 0x9ea54460
add esi, edi
jmp 0x477cac
push 0x98a72862
nop
or edi, edx
or edi, 0x9eaec5d9
mov edi, 0x9eaf308f
or edx, ecx
xor ecx, edi
add ecx, esi
and edx, ecx
xor edx, esi
xor edx, ecx
xchg esi, ecx
add edx, ecx
jmp 0x47651f
push 0x983285fa
xchg ecx, edi
add edi, esi
sub edx, 0x9ebd33de
shl edx, 0xb
add esi, 0x9ebd9d5f
add edi, ecx
shl edi, 0x1e
not ecx
xchg edx, esi
jmp 0x476102
push 0x98cae63d
or edi, 0x9ebee1de
mov esi, edx
sub edx, edi
sub edi, 0x9ec9dce3
mov edi, ecx
add esi, edi
xor edi, esi
add edi, 0x9ecabb19
sub esi, 0x9ecaf11f
neg ecx
bswap ecx
xchg ecx, edi
add edi, 0x9ecbc78d
jmp 0x4792aa
push 0x9881f302
sub esi, 0x9f007ef2
sub edi, esi
and edx, 0x9f00e703
and edx, ecx
or ecx, esi
xchg esi, edx
shl edi, 0x15
shr edx, 6
mov esi, edx
rol edi, 8
jmp 0x476970
pop ebx
sub ecx, esi
ror esi, 0xe
not esi
and esi, edx
xchg edx, ecx
add edi, 0x9f0537ef
sub ecx, edx
mov edi, ecx
ror edx, 0xa
xor esi, 0x9f06110c
add esi, edi
jmp 0x4755a2
push 0x98a2aae5
mov edx, esi
xchg edi, esi
xor edx, esi
shl edi, 0xa
jmp 0x476981
pop ebx
bswap esi
sub esi, edx
or ecx, esi
inc edi
add esi, 0x9f5d8647
shr esi, 0x1f
xor edx, ecx
inc esi
xchg esi, edi
ror edi, 0x1e
mov edx, 0x9f5f1baa
jmp 0x476ee8
pop ebx
sub edx, esi
sub edi, ecx
rol esi, 0xa
mov esi, edi
rol esi, 2
jmp 0x475818
call fcn.00479221
and edx, ecx
sub edi, esi
mov edi, 0x9fa5eda1
mov edx, 0x9fa6209c
rol edx, 3
dec edi
sub ecx, esi
add ecx, 0x9fa6fe8e
jmp 0x477aa7
mov ebx, 0x123b2f04
xchg edx, ecx
and esi, ecx
inc esi
nop
shr edi, 0x10
and edi, 0xa080006f
and ecx, 0xa0806372
jmp 0x475729
call fcn.00479221
mov edx, 0xa09ef4d4
add esi, edi
mov edx, 0xa09fe9be
bswap edi
mov edi, ecx
xchg esi, edx
bswap edi
jmp 0x477a89
mov ebx, 0x123b2f04
inc edi
or ecx, edx
or esi, 0xa0a500c4
mov ecx, 0xa0a543f2
and edx, esi
add ecx, edx
shr esi, 9
rol esi, 9
and esi, edi
ror ecx, 0xf
jmp 0x477d54
push 0x97f0b67b
not esi
xchg edx, ecx
bswap edx
and esi, 0xa0c48efb
add edi, 0xa0c4cf81
xchg esi, edi
xchg esi, edi
xchg esi, edx
and edi, ecx
sub ecx, esi
sub edi, 0xa0c607bb
jmp 0x478067
mov ebx, 0x123b2f04
and ecx, esi
add edx, ecx
add edi, esi
shr edi, 0xe
mov edx, esi
jmp 0x477707
push 0x98e2752d
not ecx
add ecx, esi
xchg ecx, edx
nop
sub ecx, edx
or edx, 0xa0db7e21
sub edi, edx
xor edi, 0xa0f1d3e0
mov edx, esi
or edi, ecx
dec ecx
add edi, edx
neg ecx
and edi, edx
or ecx, 0xa0f34675
jmp 0x478373
mov ebx, 0x2774562b
or ecx, edx
and edx, 0xa14a2a4c
add edi, 0xa14a6190
or edx, ecx
or edi, 0xa14ad5cb
sub esi, edi
xchg edx, esi
jmp 0x4755b9
pop ebx
not ecx
sub ecx, edi
mov edi, 0xa150cd6c
xchg esi, edi
xor edx, 0xa15144fe
sub edi, esi
not edx
xchg ecx, edi
mov edx, ecx
and ecx, esi
jmp 0x4783ab
push 0x9832d520
add ecx, edx
or esi, edi
rol esi, 0x19
xor edi, esi
ror esi, 0x16
neg edi
add edi, edx
ror edi, 0x1f
jmp 0x478a48
push 0x9867c35d
and edi, ecx
xor edx, esi
inc ecx
add edx, edi
sub edx, 0xa170e1dd
sub esi, edi
jmp 0x47689e
pop ebx
not edi
dec edx
ror ecx, 4
add edx, ecx
neg ecx
inc edi
and edx, edi
shl edi, 5
sub esi, edx
add edi, edx
or ecx, edi
or edx, edi
add ecx, edx
neg edi
dec ecx
jmp 0x4756af
push 0x98cd3eb8
dec edx
sub edi, 0xa1c14d86
or edx, esi
sub ecx, edx
rol edi, 0x1b
shl edx, 0x1d
jmp 0x476f21
push 0x98e3849e
dec esi
sub edi, esi
sub esi, 0xa1c5a398
xor edi, esi
add ecx, esi
sub ecx, esi
add esi, ecx
or edi, ecx
mov edi, ecx
jmp 0x4760ad
mov ebx, 0x123b2f04
xor edx, ecx
xchg esi, edi
or edx, edi
xchg ecx, edi
jmp 0x4789dd
push 0x98cc618d
mov ecx, 0xa27d6d2c
and esi, ecx
xchg edx, ecx
add edx, edi
sub edi, 0xa27e6be0
mov edi, 0xa27eaae2
and esi, ecx
jmp 0x47828a
call ebx
xchg esi, ecx
or edx, ecx
sub ecx, edi
rol edx, 0x13
shl ecx, 3
neg edx
add ecx, edx
or ecx, 0xa2a098f7
jmp 0x477a04
mov ebx, 0x123b2f04
sub edi, esi
inc esi
dec edx
and ecx, esi
and edi, 0xa371f786
ror esi, 0xb
shr esi, 0xb
add ecx, esi
inc esi
shl ecx, 0x1a
dec edx
jmp 0x475c1e
pop ebx
or edi, esi
or edx, edi
add ecx, 0xa3740a52
neg edx
not ecx
mov esi, 0xa374c225
xor edx, ecx
inc edi
bswap edx
xor edx, edi
jmp 0x476e47
mov ebx, 0x2774562b
or esi, edx
shr esi, 0x16
mov edx, esi
jmp 0x47881b
push 0x98a30623
mov esi, 0xa3bb4adf
and edx, esi
xchg ecx, edi
ror esi, 0x1f
sub edi, edx
sub edi, 0xa3bd3ac6
xor ecx, edi
xchg esi, ecx
inc esi
not esi
add edi, edx
xor ecx, edx
jmp 0x47749a
push 0x98838c6e
mov esi, edx
dec edi
nop
sub esi, edi
xchg ecx, edx
neg ecx
or ecx, esi
or esi, 0xa3d034d2
xor edx, esi
sub edx, esi
shl edx, 0x17
ror ecx, 8
sub ecx, edi
shl edx, 0x19
jmp 0x476b47
pop ebx
bswap ecx
and esi, 0xa3f2b991
neg esi
add esi, 0xa3f39d08
ror esi, 0x11
dec esi
rol edi, 0x11
or edi, esi
not edx
xchg edi, esi
and ecx, edi
xchg ecx, esi
not esi
inc ecx
sub ecx, esi
sub edx, ecx
jmp 0x477d9c
mov ebx, 0x123b2f04
not esi
xchg edi, edx
inc esi
or ecx, esi
jmp 0x4778cd
push 0x9883deee
shl ecx, 0x12
xchg ecx, esi
mov ecx, edi
shl edx, 0x15
shr esi, 0xf
and ecx, edx
mov esi, 0xa46d39ac
bswap edx
jmp 0x47731d
pop ebx
bswap esi
sub edx, 0xa483437e
and edx, ecx
or edx, 0xa4a94236
add esi, ecx
sub ecx, esi
add edi, ecx
jmp 0x478c28
pop ebx
add esi, 0xa4b97871
and ecx, esi
mov edi, edx
sub esi, edi
inc ecx
and edi, 0xa4c7a3c7
add esi, ecx
ror ecx, 0x1f
mov edx, ecx
xor ecx, 0xa4c8fa51
rol ecx, 8
mov ecx, edi
jmp 0x47925f
push 0x986b3092
sub edi, ecx
xor esi, edi
add ecx, edi
mov edi, ecx
inc esi
sub ecx, 0xa524015a
rol edi, 0x1f
bswap edx
or ecx, edi
and esi, 0xa52506c2
jmp 0x47814e
pop ebx
and edx, edi
mov esi, ecx
not edi
shl ecx, 0x1e
sub edi, esi
mov edi, ecx
shr esi, 0x15
or edx, ecx
xchg ecx, edx
not ecx
jmp 0x478d3f
call fcn.00479221
xchg edx, edi
mov edi, esi
mov edi, ecx
xor esi, edi
xor edi, ecx
add ecx, edx
jmp 0x477ef9
pop ebx
or edx, ecx
or ecx, 0xa5444ed6
xor edx, esi
and edi, esi
or edi, edx
bswap edx
and edi, ecx
jmp 0x4762cb
pop ebx
sub ecx, edi
or ecx, edi
sub esi, 0xa55999dd
xchg edx, ecx
jmp 0x47566f
mov ebx, 0x2774562b
sub esi, edx
not edx
and ecx, 0xa55f7cdd
sub edi, esi
sub edx, edi
xor ecx, esi
add esi, 0xa5607390
nop
or esi, 0xa560e8f1
jmp 0x478561
pop ebx
shl ecx, 0xd
or edi, ecx
or esi, ecx
or edi, ecx
add edx, esi
sub esi, edx
xor edx, esi
and edi, edx
xor ecx, edi
jmp 0x478b72
push 0x98cd6a82
add edi, edx
dec ecx
and edi, edx
not edx
not edx
sub ecx, edi
or ecx, 0xa5690524
add edx, edi
and edx, 0xa5698d09
or ecx, 0xa569c015
xor ecx, 0xa569f788
xor ecx, esi
xchg edi, esi
inc ecx
not edx
jmp 0x477630
call fcn.00479221
or esi, edx
xchg ecx, edi
xchg edx, ecx
rol ecx, 0x13
or esi, ecx
sub edi, ecx
xor esi, 0xa56e546a
sub edx, edi
shr edi, 0x1e
and ecx, 0xa56f09d1
ror ecx, 0x11
jmp 0x477e74
push 0x97ee452c
mov edi, edx
xor ecx, esi
ror edi, 4
sub edi, 0xa5ba17b0
or esi, edx
neg edx
add esi, 0xa5bb3b72
sub edi, ecx
neg esi
mov ecx, esi
or edi, ecx
or edi, edx
shl edi, 0x1a
jmp 0x475dbe
pop ebx
dec ecx
or edx, edi
mov ecx, edi
or ecx, 0xa601e0b3
shr ecx, 0xb
or ecx, esi
jmp 0x479176
mov ebx, 0x123b2f04
bswap edi
xchg esi, edx
xchg edx, esi
sub ecx, esi
xchg edx, ecx
xchg ecx, edi
shr ecx, 0x1a
sub edi, esi
jmp 0x476d77
push 0x9885d787
xchg ecx, esi
rol edx, 0x1e
rol edi, 0xf
xchg edx, edi
mov edi, 0xa6649e34
xor edi, 0xa664d4c9
inc edx
sub edi, esi
xor edi, 0xa666357c
jmp 0x475abf
call fcn.00479221
or ecx, esi
xchg ecx, edi
or ecx, esi
shl esi, 0x17
jmp 0x4756c9
call fcn.00479221
neg edx
xchg edi, esi
bswap esi
and ecx, esi
xchg ecx, esi
or edi, 0xa6a26413
shr edi, 9
bswap edi
mov edx, esi
dec esi
jmp 0x4756ee
push 0x98a3638b
shl ecx, 0x1b
sub edi, edx
not ecx
and ecx, 0xa6cbb9fa
xor edi, 0xa6cc5bfb
or edi, ecx
not edi
xchg esi, edx
sub ecx, edi
sub ecx, edi
add ecx, 0xa6cec674
jmp 0x475e7c
push 0x986779ba
or ecx, esi
neg edx
sub esi, edi
inc ecx
mov edi, ecx
add esi, 0xa71cbbfa
xor ecx, 0xa71d4025
jmp 0x47611f
push 0x98cd9728
xor esi, edi
sub esi, edx
sub edi, 0xa71eeaa1
and esi, ecx
xchg esi, ecx
add edx, 0xa7201522
xor edx, esi
rol esi, 0x17
jmp 0x4777dc
pop ebx
neg esi
add edi, edx
inc edi
and ecx, edi
mov edi, edx
xor edi, 0xa76f6429
jmp 0x477854
call fcn.00479221
sub ecx, edx
or esi, 0xa76fe442
add edi, edx
sub edx, ecx
mov ecx, 0xa770a13c
rol esi, 0xc
ror edi, 4
and edi, 0xa77154a0
or edx, esi
xchg edi, esi
jmp 0x4791ae
push 0x98cdd9ee
bswap edx
xor ecx, edi
bswap edi
jmp 0x47900b
push 0x9847ff67
add edx, 0xa7cf79ae
neg esi
xor edi, 0xa7cfec17
neg edi
and edi, edx
add edx, 0xa7d08ade
or esi, 0xa7d0be6e
jmp 0x476e9f
call fcn.00479221
or esi, ecx
bswap edx
and esi, edx
or esi, edx
shr edi, 0xd
add ecx, edx
or esi, edi
add esi, 0xa7da9b41
mov esi, edi
xchg esi, ecx
jmp 0x4782db
pop ebx
mov edi, esi
and edi, ecx
mov esi, edi
mov esi, ecx
or esi, edx
xchg edx, esi
ror edx, 9
mov edi, ecx
dec edi
bswap esi
xchg edi, ecx
or edi, 0xa80eedc6
jmp 0x475b46
pop ebx
xchg edi, edx
add edx, edi
mov ecx, edx
add esi, 0xa82035d6
not edx
and ecx, edi
add edi, edx
not edx
bswap esi
sub edi, ecx
or esi, edi
add ecx, esi
jmp 0x476215
call ebx
xor esi, edx
dec edi
xor edi, esi
inc esi
or edi, 0xa828e32f
neg esi
or ecx, 0xa8294fdf
rol esi, 0x1c
jmp 0x47598f
call ebx
mov esi, edx
and ecx, edx
sub edi, ecx
xor edi, ecx
mov edx, esi
jmp 0x479408
push 0x9849b4a4
sub edi, ecx
dec edx
neg esi
xor ecx, edi
add edx, edi
and edi, ecx
xchg edx, edi
dec edi
mov esi, edx
and edx, edi
and edi, ecx
jmp 0x478981
call fcn.00479221
or edi, ecx
and edi, ecx
mov esi, edx
add esi, edi
sub ecx, esi
not edi
add esi, edi
xor ecx, edx
sub esi, 0xa87c6536
mov esi, 0xa87c98dd
jmp 0x478a75
call ebx
mov edx, ecx
and esi, edi
and ecx, edi
jmp 0x477243
call fcn.00479221
and edi, ecx
add edi, edx
or esi, ecx
dec ecx
add edx, 0xa8a1cab6
add edx, esi
and edi, 0xa8a250df
bswap ecx
or ecx, esi
shl esi, 0x1a
mov edi, edx
mov edi, esi
sub edi, edx
jmp 0x477ebe
pop ebx
xor ecx, edx
or esi, ecx
sub edx, esi
dec ecx
or ecx, 0xa8aa0e85
xor edx, esi
add esi, edi
bswap edi
xchg edx, esi
jmp 0x4776f2
pop ebx
and edi, esi
sub edi, esi
rol edx, 0x19
mov esi, edi
shr edi, 0x11
xchg edi, ecx
mov edx, edi
add ecx, 0xa8acc7b1
sub esi, 0xa8acfae9
jmp 0x47862a
push 0x986bcf36
or edi, edx
sub edx, 0xa9597d85
add edi, 0xa959e953
or edx, 0xa95a7b45
add edi, edx
bswap ecx
add ecx, edx
rol ecx, 0xc
jmp 0x475fac
call ebx
dec edi
and esi, ecx
or edi, 0xa97b90bd
or edx, esi
or edi, esi
neg edi
jmp 0x476d8d
call ebx
bswap esi
and edi, ecx
and edi, 0xa98355c4
dec esi
dec esi
add edi, edx
add ecx, edx
mov edx, ecx
jmp 0x4768c1
pop ebx
mov ecx, edi
sub edx, ecx
mov ecx, edi
xor edi, esi
inc ecx
shr ecx, 1
shl edi, 0xa
xchg esi, ecx
xor edx, esi
dec edx
mov esi, edx
or esi, ecx
or esi, edx
sub ecx, edx
jmp 0x4769de
call ebx
ror edx, 0xe
xchg edx, ecx
and esi, edi
add esi, ecx
or esi, edx
or edx, ecx
or ecx, 0xa9b038d5
add edx, esi
or edx, ecx
and edx, esi
jmp 0x478e2c
call ebx
xor esi, ecx
sub edi, ecx
or ecx, edi
add ecx, esi
and esi, 0xa9eda89e
shl edi, 0xf
inc edx
shl edx, 0x18
mov esi, edi
jmp loc.004792f3
mov ebx, 0x2774562b
shr edx, 6
sub edi, esi
xchg esi, edx
add edi, 0xaa1cabb8
and ecx, edx
xor edi, edx
shr edx, 0x1b
or edi, 0xaa1dae64
mov ecx, edx
bswap ecx
neg edi
mov edi, 0xaa21fea4
jmp 0x477c87
push 0x986b833e
mov edx, esi
shl ecx, 0xd
neg edx
mov edi, ecx
and edi, esi
xchg edx, edi
inc ecx
jmp 0x477dfa
pop ebx
sub edi, edx
sub edx, ecx
xor esi, 0xaa610fed
or ecx, edi
add edx, 0xaa617e2e
sub ecx, edi
sub ecx, 0xaa62367f
sub ecx, 0xaa629773
shr edx, 9
or edi, edx
jmp 0x4765aa
pop ebx
or edx, esi
xor edi, esi
not esi
ror esi, 0xa
jmp 0x477db7
pop ebx
mov edx, ecx
mov edi, edx
shr ecx, 0x1a
jmp 0x47798a
mov ebx, 0x123b2f04
mov esi, edx
xor edi, ecx
add edx, esi
and ecx, 0xaa72a0a4
xor edx, edi
xchg esi, edx
shl edx, 0x14
not edi
or ecx, edx
add ecx, edi
jmp 0x476f7b
call ebx
add esi, ecx
neg edi
not edx
add esi, ecx
or ecx, 0xaa75062f
xor ecx, 0xaa753d74
jmp 0x477ed7
call ebx
mov esi, 0xaa79d8a3
xchg edi, ecx
bswap ecx
and edi, edx
sub edi, 0xaa7aad15
xor ecx, esi
xor edx, esi
nop
xor ecx, 0xaa9a8bc6
mov esi, edi
mov esi, edi
and edi, edx
xor edx, edi
add edx, edi
jmp 0x4760d1
mov ebx, 0x123b2f04
mov edi, 0xaabef469
inc esi
or ecx, esi
bswap ecx
or esi, 0xaac0dbf3
and edx, edi
sub edx, esi
jmp 0x477444
pop ebx
add edi, 0xaae4b8a6
not esi
and edx, ecx
mov edx, esi
and edx, edi
jmp 0x478222
push 0x98a6d2bb
or esi, 0xaae9dc3e
sub edi, esi
or edx, esi
inc esi
dec ecx
jmp 0x47578f
pop ebx
or esi, edi
xor edx, 0xaaf81a75
mov esi, edi
nop
or ecx, 0xaafa9c6f
and edi, esi
nop
xor ecx, 0xaafb9f52
sub esi, ecx
bswap ecx
and ecx, edx
add ecx, 0xaafc7b4a
jmp 0x477c69
call fcn.00479221
and edi, 0xab4dc1be
xchg edi, esi
add esi, edx
mov ecx, 0xab4e5ab8
not ecx
nop
ror edi, 0xb
sub edi, 0xab4f3d4d
bswap edx
jmp 0x47920a
pop ebx
neg edi
mov esi, 0xab5d624a
ror ecx, 0x17
jmp 0x475943
pop ebx
or esi, edx
bswap ecx
or edi, esi
bswap edi
jmp 0x47824d
pop ebx
add esi, edx
xor esi, edi
mov edx, edi
neg edi
or ecx, esi
jmp 0x475be7
pop ebx
add edx, ecx
and esi, edx
mov edi, 0xab86bef9
xor ecx, edx
xchg edx, edi
or edi, edx
shr esi, 0x1f
ror esi, 0x16
or edx, esi
bswap edi
jmp 0x478e0c
pop ebx
neg edi
mov esi, 0xab9b247e
sub esi, edi
ror edx, 4
sub edx, edi
xor esi, 0xab9c1dbd
jmp 0x476ce8
push 0x98dfd384
xchg ecx, edx
add esi, 0xab9cae94
add esi, 0xab9ce5a0
mov esi, edi
bswap edx
add ecx, 0xab9d8d32
bswap edi
mov ecx, edx
rol ecx, 0x17
xchg esi, edx
xchg edx, ecx
jmp 0x475feb
mov ebx, 0x123b2f04
sub ecx, edx
mov edi, edx
mov ecx, esi
sub esi, edi
or ecx, edi
xor esi, edi
jmp 0x477457
call fcn.00479221
mov esi, edx
xchg ecx, edi
neg esi
sub edi, esi
xchg edx, ecx
add edi, 0xaba7b94b
dec edi
shl esi, 0x19
add esi, edi
sub esi, edx
xchg edi, esi
ror edx, 0x10
dec edx
and ecx, edx
jmp 0x4782ad
pop ebx
mov ecx, edi
and ecx, 0xabbc27ad
or esi, edx
shr esi, 0x18
mov ecx, esi
sub edi, ecx
xor esi, ecx
shr ecx, 0x1a
xor ecx, edi
jmp 0x477377
push 0x9866d74d
and edi, 0xabcd1025
shl ecx, 0xb
xchg edi, ecx
dec ecx
sub ecx, edx
sub esi, 0xabce3047
xchg ecx, edi
xor edx, ecx
inc ecx
xor edx, edi
dec ecx
jmp 0x478c48
call fcn.00479221
mov esi, ecx
add esi, edi
sub ecx, edi
add edi, edx
dec ecx
inc edx
and ecx, 0xabe17ede
and edx, edi
and ecx, edx
jmp 0x4765cc
push 0x98a682a1
sub esi, ecx
and esi, ecx
and edx, 0xabe2ca63
and edx, esi
add edi, 0xabf2afae
mov edi, esi
sub edx, ecx
xor edx, ecx
xor ecx, 0xabf38bcb
mov edx, ecx
sub esi, edi
or esi, 0xabf425f1
and ecx, edx
or esi, edx
jmp 0x4783fd
push 0x983329f6
sub edi, 0xabf6ae9c
mov ecx, esi
xor ecx, 0xabf71404
sub edi, edx
sub esi, edx
add edi, 0xabf7e712
mov ecx, esi
bswap ecx
xor edi, esi
xor edx, esi
add edi, esi
dec edi
jmp 0x4787ef
call ebx
neg edi
xor edi, esi
mov esi, edi
xor edi, 0xabfa28e8
xchg ecx, edi
bswap edx
add ecx, edx
neg edi
xchg edi, edx
jmp 0x4786d1
push 0x986ad034
or edi, edx
mov ecx, edi
nop
bswap esi
and edi, 0xac45f5ba
xor edi, 0xac4628ec
add ecx, esi
add ecx, edx
dec ecx
jmp 0x476cc2
push 0x98caba10
mov ecx, edi
and esi, 0xac5e3463
and edx, edi
add ecx, 0xac5ef707
mov ecx, edx
or edx, ecx
sub esi, edi
jmp 0x47583e
push 0x98672b39
xor edi, esi
xor esi, 0xac6bafac
xor edi, edx
xchg edi, esi
add esi, edi
xor edi, edx
and edi, 0xac6cc45f
xor edx, edi
xchg edi, edx
xchg edx, esi
add ecx, esi
xchg edx, esi
jmp 0x477611
pop ebx
not edx
sub edi, 0xacb88689
xor edx, esi
shl esi, 0x12
sub esi, edx
neg esi
xchg esi, ecx
add edx, ecx
xor edx, ecx
xchg esi, edx
sub edi, ecx
add esi, edi
add edi, ecx
jmp 0x4787c2
pop ebx
or edx, 0xacd9b1e0
add edx, esi
and edi, ecx
rol ecx, 8
add esi, 0xacda88ba
and ecx, edi
shl ecx, 0xe
xor esi, ecx
jmp 0x4762fa
pop ebx
and ecx, esi
sub ecx, esi
xor edx, ecx
sub edx, 0xacdc10bd
and ecx, esi
mov ecx, edx
jmp 0x47892f
push 0x98ce497b
sub ecx, 0xad84e79a
or esi, 0xad858e1f
mov ecx, edx
sub edi, ecx
xchg edx, edi
inc esi
not esi
sub esi, 0xad8820cb
and ecx, edx
and edi, 0xad8904db
neg edx
and edx, 0xad89ecea
xchg esi, ecx
jmp 0x4792c9
push 0x97f058d0
rol edx, 0x11
rol edi, 0x12
and esi, edi
shl esi, 0xe
shr edi, 0x1f
add ecx, edx
sub edi, 0xade77f40
xor ecx, edx
or edx, esi
jmp 0x475f62
call ebx
mov esi, ecx
or edi, ecx
xchg ecx, edi
dec ecx
add esi, ecx
not edi
mov edx, 0xadf81a2e
bswap edx
and edi, 0xadf8a94e
and edx, 0xadf8dc04
xchg edx, esi
inc edi
xor edx, edi
add edi, edx
add edx, edi
xchg edi, edx
jmp 0x478657
call ebx
neg esi
or edx, edi
add ecx, edx
xchg edx, esi
inc edx
ror edx, 0x13
mov edi, edx
and edi, esi
jmp 0x478438
push 0x98a61bd3
shl edi, 0x1a
dec edx
mov edx, edi
or esi, edi
and ecx, edi
jmp 0x4789fb
push 0x98cb132e
rol edi, 1
inc edi
inc edi
sub edi, edx
not ecx
shl ecx, 0x1f
and edx, ecx
sub ecx, edi
shr edi, 0xb
add edx, esi
jmp 0x476af2
mov ebx, 0x123b2f04
xchg edx, edi
mov ecx, edi
mov ecx, edi
sub edi, ecx
or edi, ecx
xor ecx, edi
xor edx, esi
or ecx, 0xae357b5a
xchg edi, ecx
sub ecx, 0xae35ee62
neg edi
or edx, ecx
jmp 0x475e41
pop ebx
xor esi, 0xae8a5cd9
sub esi, ecx
or edi, esi
or esi, 0xaea3d7be
or esi, edi
and ecx, edx
xchg edx, edi
neg edx
not edx
ror edi, 5
jmp 0x47827d