Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get file attributes
Hash data using murmur3
Register raw input devices

Disassembly:
call sub.user32.dll_GetCaretBlinkTime
cmp eax, 0xfffffef3
jne 0x401075
call sub.user32.dll_RegisterRawInputDevices
call sub.user32.dll_RegisterRawInputDevices
call sub.user32.dll_RegisterRawInputDevices
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.advapi32.dll_SystemFunction026
call sub.advapi32.dll_SystemFunction026
call sub.user32.dll_RegisterRawInputDevices
call sub.advapi32.dll_SystemFunction026
call sub.oleaut32.dll_VarDateFromUI1
call sub.advapi32.dll_SystemFunction026
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.advapi32.dll_SystemFunction026
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.oleaut32.dll_VarDateFromUI1
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.user32.dll_RegisterRawInputDevices
call sub.oleaut32.dll_VarDateFromUI1
call sub.user32.dll_RegisterRawInputDevices
ret
call sub.kernel32.dll_GetLastError
cmp eax, 0xfffffee8
jne 0x4010f9
call sub.user32.dll_RegisterRawInputDevices
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.advapi32.dll_SystemFunction026
call sub.advapi32.dll_SystemFunction026
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.advapi32.dll_SystemFunction026
call sub.advapi32.dll_SystemFunction026
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.advapi32.dll_SystemFunction026
call sub.advapi32.dll_SystemFunction026
call sub.advapi32.dll_SystemFunction026
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.oleaut32.dll_VarDateFromUI1
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.user32.dll_RegisterRawInputDevices
call sub.oleaut32.dll_VarDateFromUI1
call sub.advapi32.dll_SystemFunction026
call sub.advapi32.dll_SystemFunction026
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.advapi32.dll_SystemFunction026
ret
call sub.user32.dll_GetCaretBlinkTime
cmp eax, 0xfffffee5
jne 0x401191
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.oleaut32.dll_VarDateFromUI1
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.oleaut32.dll_VarDateFromUI1
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.oleaut32.dll_VarDateFromUI1
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.advapi32.dll_SystemFunction026
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.oleaut32.dll_VarDateFromUI1
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.user32.dll_RegisterRawInputDevices
call sub.user32.dll_RegisterRawInputDevices
call sub.user32.dll_RegisterRawInputDevices
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.oleaut32.dll_VarDateFromUI1
call sub.user32.dll_RegisterRawInputDevices
call sub.oleaut32.dll_VarDateFromUI1
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.oleaut32.dll_VarDateFromUI1
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.advapi32.dll_SystemFunction026
call sub.user32.dll_RegisterRawInputDevices
call sub.oleaut32.dll_VarDateFromUI1
call sub.user32.dll_RegisterRawInputDevices
ret
call sub.user32.dll_GetCaretBlinkTime
cmp eax, 0xffffff05
jne 0x40121a
call sub.user32.dll_RegisterRawInputDevices
call sub.oleaut32.dll_VarDateFromUI1
call sub.oleaut32.dll_VarDateFromUI1
call sub.oleaut32.dll_VarDateFromUI1
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.oleaut32.dll_VarDateFromUI1
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.user32.dll_RegisterRawInputDevices
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.user32.dll_RegisterRawInputDevices
call sub.user32.dll_RegisterRawInputDevices
call sub.user32.dll_RegisterRawInputDevices
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.oleaut32.dll_VarDateFromUI1
call sub.user32.dll_RegisterRawInputDevices
call sub.oleaut32.dll_VarDateFromUI1
call sub.user32.dll_RegisterRawInputDevices
call sub.advapi32.dll_SystemFunction026
call sub.user32.dll_RegisterRawInputDevices
call sub.ntdll.dll_NtQueryDirectoryFile
call sub.user32.dll_RegisterRawInputDevices
call sub.oleaut32.dll_VarDateFromUI1
call sub.user32.dll_RegisterRawInputDevices
ret
jmp 0x478a53
or edx, edi
mov edx, 0x2067fdcc
or edi, ecx
sub ebx, edi
and ebx, edi
jmp 0x47ba58
pop edi
mov edx, 0x2b2f8116
dec esi
add ebx, edx
neg ecx
add edx, 0x2b3149cc
and edx, esi
mov ecx, edx
ror ebx, 4
add esi, 0x2b331e2b
bswap edx
or esi, 0x2b33f75c
xor esi, edx
jmp 0x47bbcb
pop edi
xchg esi, edx
xor edx, ecx
xor ecx, ebx
add edx, ecx
sub ebx, 0x2b36915b
bswap ecx
jmp 0x479af0
push 0x2089e58c
mov ebx, ecx
xchg ebx, esi
mov ebx, ecx
rol ecx, 0x12
xchg ebx, edx
and esi, 0x2b3a10f5
jmp 0x478b97
pop edi
xchg ebx, edx
sub ecx, esi
add esi, ebx
mov edx, ebx
inc edx
xor ecx, 0x2b4f7cd9
bswap esi
or ecx, 0x2b507463
neg esi
add esi, ebx
shl esi, 0x1e
shr edx, 0x17
add ebx, ecx
jmp 0x47b1c2
pop edi
mov ecx, esi
or edx, ebx
or ebx, ecx
jmp 0x4793e8
mov edi, 0x2774562b
and ebx, esi
sub ebx, edx
mov esi, ecx
shl ebx, 0x17
jmp 0x47aa17
call edi
xor esi, ecx
dec esi
shl ebx, 0xf
add ebx, edx
jmp 0x47b530
call edi
add ecx, 0x2b58b857
or edx, esi
ror ecx, 2
neg ecx
sub ebx, ecx
sub ecx, edx
mov edx, 0x2b5b970c
shl ebx, 0x1c
add ecx, edx
rol ecx, 0x10
and ebx, edx
xchg ecx, edx
jmp 0x47987e
call fcn.0047b884
rol esi, 0x1b
xor ebx, 0x2b79660f
add esi, edx
ror edx, 0x1b
mov ecx, edx
xchg ecx, esi
and ecx, edx
and edx, ebx
jmp 0x479490
push 0x20709ee0
add ecx, esi
neg edx
xchg ecx, edx
neg esi
rol ecx, 0x12
not ebx
or edx, ebx
or ebx, 0x2b85688e
mov esi, 0x2b860cbb
add ecx, esi
xor ecx, edx
xor ebx, esi
and edx, ecx
jmp 0x47ba84
mov edi, 0x123b2f04
inc ebx
sub esi, edx
or esi, ebx
sub esi, 0x2b89566c
not ebx
not edx
and esi, edx
mov ecx, edx
add edx, ebx
or esi, edx
sub edx, ebx
rol ecx, 0xf
xor ebx, ecx
jmp 0x47b9a1
push 0x20771c5a
and ecx, 0x2bf44938
inc ecx
shl ecx, 0x1c
and ebx, ecx
xor ecx, 0x2bf635da
and edx, ebx
rol ecx, 0xc
mov esi, 0x2bf78ecd
xor ebx, ecx
and ecx, esi
mov ecx, esi
not edx
jmp 0x478f8f
pop edi
or edx, ecx
and ecx, ebx
and ebx, esi
mov esi, ebx
xor edx, ebx
xor ecx, edx
add edx, ecx
sub edx, 0x2c1f8931
jmp 0x47a406
mov edi, 0x123b2f04
xchg ecx, esi
inc ecx
shl esi, 0xa
mov ecx, edx
xor esi, ebx
or ecx, edx
ror esi, 0xe
xor ebx, esi
add edx, 0x2c6bb601
jmp 0x47b073
push 0x20737f21
xor esi, ecx
xchg ebx, esi
and edx, esi
mov ecx, esi
xor ebx, 0x2c7b15c7
sub ebx, esi
add edx, 0x2c7c2676
or ecx, edx
rol edx, 7
sub ebx, 0x2c7d7972
jmp 0x4799b3
call fcn.0047b884
or esi, ecx
rol ecx, 0x16
xchg esi, ecx
xchg edx, esi
bswap ebx
or ecx, ebx
or ebx, edx
add ecx, 0x2c8135ed
xchg edx, ebx
bswap ebx
xchg edx, esi
jmp 0x47a503
push 0x208c9887
shr edx, 0x1d
sub esi, ebx
shr ebx, 7
mov esi, ebx
sub ebx, 0x2ca33145
or ecx, esi
mov esi, ecx
jmp 0x47953f
push 0x20732f1e
sub ebx, 0x2cab628b
shl edx, 0x1a
sub ecx, esi
not esi
shl esi, 0xb
add esi, ebx
and ecx, 0x2cae15dd
or esi, ebx
or ecx, esi
jmp 0x479011
call fcn.0047b884
or esi, ebx
xor edx, ecx
xor ebx, edx
or ecx, edx
mov ebx, ecx
neg esi
xor esi, edx
mov ecx, ebx
xor ecx, edx
add ebx, edx
and ecx, edx
inc ebx
jmp 0x47970a
push 0x2097272f
and esi, 0x2cb7a71b
sub edx, esi
neg esi
and ecx, esi
add ecx, ebx
xor edx, ebx
or ecx, esi
mov ecx, ebx
xchg edx, ecx
jmp 0x47b16b
mov edi, 0x2774562b
ror edx, 0x12
xchg esi, ebx
sub ecx, ebx
and edx, ecx
or edx, 0x2cd2350c
xor edx, ecx
and edx, 0x2cd2ff62
and esi, edx
sub esi, 0x2cd3de95
xor ebx, 0x2cd43cc9
mov ebx, esi
jmp 0x47b37a
push 0x2087b2f2
inc esi
add ebx, edx
shl esi, 2
rol edx, 0x17
sub ecx, esi
mov ecx, 0x2cf2ba96
or ecx, esi
mov esi, edx
shr esi, 9
mov esi, edx
xor esi, ebx
sub ebx, esi
xor edx, ebx
shl ecx, 0x15
not esi
jmp 0x47a059
call edi
and esi, ecx
xor ebx, ecx
shr edx, 0x11
and esi, 0x2cf8a725
or ebx, 0x2cf911fb
jmp 0x47ad31
push 0x207e21ca
sub esi, edx
xchg esi, ecx
mov esi, 0x2cfa650c
or esi, edx
and edx, ecx
and ecx, ebx
sub ecx, esi
jmp 0x479a83
call edi
add edx, ecx
mov ebx, 0x2cfd4203
xchg ecx, edx
mov esi, edx
dec edx
jmp 0x4794d2
pop edi
and esi, ebx
xchg edx, esi
and ebx, esi
mov edx, 0x2d276402
or ecx, ebx
or ebx, edx
xor esi, ebx
sub edx, 0x2d295234
xchg ebx, ecx
add ebx, edx
sub ecx, 0x2d2a964c
dec edx
jmp 0x47b311
push 0x209be196
and edx, 0x2d4fa038
add esi, edx
bswap ebx
xor esi, ecx
mov esi, ebx
add ebx, esi
or ebx, esi
and esi, 0x2d543bf7
ror esi, 0x16
shl ebx, 0xf
jmp 0x47a8ae
call edi
sub esi, ecx
inc esi
neg edx
sub ebx, 0x2d66fe81
sub ebx, 0x2d6771dd
and edx, ecx
add ebx, edx
or edx, ebx
and ebx, esi
neg ecx
xor esi, ecx
add ebx, ecx
jmp 0x47aa8d
pop edi
add esi, ecx
and edx, 0x2d754f0a
shl ebx, 0xb
or esi, 0x2d762cb5
or ecx, 0x2d76acfe
mov esi, edx
jmp 0x47a5b1
push 0x208cf0fb
neg esi
ror edx, 1
xor ecx, ebx
add ecx, esi
and ecx, edx
inc ebx
jmp 0x479d3e
call edi
xor ecx, edx
or esi, 0x2d954e66
add esi, ecx
or ebx, edx
add ecx, esi
sub ecx, 0x2d970c4d
or esi, ecx
mov ecx, edx
neg esi
jmp 0x47b496
pop edi
and ebx, esi
not esi
xor edx, 0x2db3fd8a
shl ecx, 0x15
or esi, edx
or ebx, 0x2db57243
jmp 0x47aae7
call edi
xor ecx, esi
add ecx, 0x2dc6c62b
mov ecx, 0x2dc72a26
xchg esi, ebx
rol ecx, 1
or ecx, esi
sub ecx, 0x2dc8dbfa
add esi, ecx
add ebx, edx
shr ebx, 3
xchg ecx, ebx
and esi, edx
add edx, ebx
jmp 0x479775
pop edi
sub esi, ebx
sub edx, ecx
or ebx, esi
inc ebx
neg ebx
and esi, edx
sub edx, esi
xor ebx, edx
and ebx, ecx
mov esi, ebx
xor ebx, esi
rol edx, 0xf
xor ecx, ebx
dec edx
jmp 0x478b62
pop edi
or ecx, esi
neg esi
sub ebx, edx
jmp 0x47b15c
push 0x20898f22
or ecx, ebx
neg esi
add esi, ebx
inc ebx
jmp 0x478aa8
push 0x77653
add ebx, esi
sub ebx, edx
xor ecx, edx
or ebx, edx
add ebx, edx
xor edx, ebx
jmp 0x47b260
push 0x2073c9da
shl ebx, 0x1d
mov ecx, edx
mov edx, ecx
and edx, ebx
or ecx, ebx
xor ecx, edx
neg ecx
neg ebx
jmp 0x47b567
pop edi
add ecx, edx
inc ecx
mov esi, 0x2ec6e004
neg esi
or esi, edx
or ebx, esi
bswap ebx
shr ecx, 0xa
or edx, esi
and edx, ecx
inc edx
not ecx
xor ecx, 0x2ecb8545
jmp 0x4791d5
push 0x207e7534
xor esi, edx
mov edx, ecx
rol esi, 0xc
add ecx, edx
mov ecx, esi
inc ecx
shr ebx, 0xc
mov ecx, esi
or esi, ecx
xchg ebx, esi
sub ecx, 0x2ee25ffb
sub edx, ecx
xor ecx, edx
xor ebx, 0x2ee3934c
jmp 0x47915f
call fcn.0047b884
ror esi, 4
shr edx, 0x19
xor ebx, edx
add ecx, ebx
or ebx, ecx
xchg ecx, edx
xchg ebx, edx
ror ebx, 1
and esi, ebx
jmp 0x47bc7f
pop edi
shl edx, 0x1d
xor ecx, 0x2eedfe46
and edx, esi
rol esi, 0xd
jmp 0x479d7d
call edi
xor edx, 0x2f44ce8a
or esi, ecx
xor ecx, esi
jmp 0x479b87
pop edi
inc ecx
shr esi, 0x1c
bswap ecx
sub ebx, esi
mov ecx, edx
and ebx, edx
xor ebx, edx
or ebx, ecx
bswap ecx
and esi, 0x2f4a848f
ror ebx, 0x17
and ecx, esi
mov ecx, ebx
jmp 0x479d9e
push 0x209d3369
sub ecx, ebx
sub esi, ebx
not ebx
ror ebx, 0x12
dec ecx
xor ecx, 0x2f81ae36
xchg edx, ebx
jmp 0x478d52
push 0x208f4a5e
or ebx, 0x2f8df40a
mov esi, ecx
or edx, ebx
xchg edx, esi
or edx, esi
and esi, edx
shl edx, 0x19
add ebx, 0x2f9117c6
add ecx, ebx
mov ecx, 0x2f91e17b
and ebx, 0x2f924aae
shr ebx, 0x1d
jmp 0x47b582
mov edi, 0x123b2f04
shl ebx, 2
add edx, ecx
neg esi
shr ecx, 0x18
xor esi, edx
bswap edx
mov ebx, edx
bswap edx
jmp 0x4790dd
push 0x20818f36
sub ebx, ecx
xor ebx, 0x2fcb5fbd
shl ebx, 0x1a
sub edx, esi
xchg edx, ecx
add esi, 0x2fcd38fc
add ebx, ecx
jmp 0x47b4c9
pop edi
sub esi, ecx
ror ecx, 0x13
or ebx, ecx
sub esi, ecx
bswap esi
or esi, ecx
jmp 0x479a3c
pop edi
rol ecx, 6
xor edx, esi
sub edx, 0x30ef94a0
or edx, ecx
mov esi, 0x30f07512
xor ecx, edx
sub edx, esi
xchg ebx, edx
mov ebx, edx
jmp 0x47a80d
call fcn.0047b884
xor esi, ebx
sub ebx, 0x30f4686e
or ecx, 0x30f506cc
mov ebx, esi
add ecx, edx
rol esi, 7
sub ebx, 0x30f6cab4
inc esi
shr edx, 0xc
mov ebx, esi
jmp 0x47ba0c
push 0x40
nop
xor esi, 0x30f9301a
bswap ebx
add ecx, esi
and ebx, ecx
and ecx, ebx
xor edx, 0x30fb54ec
or ebx, esi
jmp 0x47999d
mov edi, 0x123b2f04
and ebx, edx
ror edx, 0xb
sub ecx, esi
add esi, ebx
inc ebx
mov ebx, edx
dec ebx
bswap esi
mov ecx, 0x31308640
sub ecx, ebx
jmp 0x479eb0
push 0x208238e8
add esi, 0x313e96d9
and ecx, 0x313efa4e
add ecx, ebx
or edx, 0x313fc3c4
sub ebx, 0x3140261b
mov esi, ebx
mov esi, ecx
and ebx, 0x31508f7c
jmp 0x47ba25
call fcn.0047b884
not ecx
mov ebx, esi
bswap esi
mov edx, esi
or edx, ecx
mov ebx, esi
or ebx, 0x315ba7b7
mov ecx, ebx
or ebx, ecx
add ebx, ecx
xor esi, ecx
and ebx, ecx
jmp 0x47ae79
push 0x2076b43d
shl ebx, 0xa
sub ebx, 0x31b4a829
bswap edx
add ecx, 0x31b574e3
xchg edx, ecx
add ebx, edx
mov ebx, edx
sub esi, edx
or edx, 0x31b77f43
jmp 0x478e52
call fcn.0047b884
mov edx, 0x31b8097c
mov ebx, esi
ror edx, 0x10
xchg ebx, edx
rol esi, 7
and ecx, edx
xor ebx, esi
rol ebx, 0xb
add ebx, esi
mov esi, ebx
jmp 0x47bc64
mov edi, 0x4132136a
mov esi, edx
not ecx
or ecx, esi
inc ebx
xor ecx, esi
shr ecx, 0xd
xchg esi, ebx
xchg edx, ecx
add esi, ecx
xor edx, ebx
and esi, ebx
xchg edx, esi
and edx, ecx
inc edx
neg edx
jmp 0x47a127
push 0x209a0850
xor esi, edx
mov ecx, ebx
or ebx, ecx
inc ebx
xor ecx, edx
dec ecx
xchg esi, edx
ror ecx, 0xe
jmp 0x47b094
call fcn.0047b884
ror ecx, 0x1b
sub esi, 0x32a20ee3
ror ecx, 3
add ebx, esi
not edx
xchg esi, edx
nop
or edx, ebx
nop
and esi, edx
mov esi, edx
add esi, ebx
jmp 0x47b4d7
call edi
xchg ebx, esi
mov ebx, esi
xchg esi, ebx
or ecx, esi
and edx, esi
xor ebx, edx
xor esi, 0x32ad360f
jmp 0x47bb85
push 0x20947c50
xchg esi, ebx
xchg ebx, ecx
sub edx, esi
xor ecx, edx
not esi
add esi, edx
xchg edx, ebx
dec ecx
neg ebx
mov edx, ebx
xor esi, ebx
and ebx, ecx
jmp 0x47b973
pop edi
or esi, ecx
inc edx
mov edx, 0x32e474d6
or edx, esi
mov ecx, 0x32e5425e
and ecx, ebx
xor esi, ecx
xchg ebx, esi
or edx, ecx
xor ebx, 0x32e73a35
inc ecx
and esi, edx
xor edx, 0x32e85746
jmp 0x47b420
push 0x20704ee9
add edx, 0x32fce723
shr edx, 0xa
and esi, ebx
mov edx, 0x32fe3d61
rol edx, 1
bswap edx
add ebx, esi
xor esi, edx
neg ebx
jmp 0x478d26
pop edi
or ebx, ecx
not edx
mov ecx, 0x333a85e5
xchg esi, ecx
or ecx, edx
add ebx, esi
or ecx, ebx
xor esi, ecx
xor edx, ecx
and esi, edx
add edx, 0x333dcd84
xor edx, esi
ror esi, 0xb
rol ebx, 0x16
or edx, 0x336528f4
jmp 0x47a89b
pop edi
xchg ebx, edx
xchg edx, ebx
and ebx, edx
xor esi, ebx
add ebx, 0x336db389
or esi, ebx
or edx, ecx
neg ecx
jmp 0x47affe
pop edi
rol ebx, 0x11
not esi
sub esi, ecx
add ecx, esi
mov ecx, edx
neg ebx
jmp 0x4790b7
push 0x209c3cae
add ecx, esi
add edx, esi
and esi, ecx
xor edx, ecx
and ecx, esi
xchg esi, ebx
xchg edx, ecx
sub ebx, esi
mov edx, esi
xor esi, ecx
and edx, ebx
or ecx, ebx
jmp 0x47afdc
push esp
xor esi, ebx
and ebx, edx
or edx, ebx
add ecx, ebx
dec edx
add esi, 0x33a47e0d
bswap ebx
xor ecx, 0x33a584ba
jmp 0x479edb
pop edi
not edx
or edx, ecx
or ebx, esi
or ebx, esi
and ecx, 0x33c5a72a
jmp 0x479944
call fcn.0047b884
xor ecx, 0x33ce9a7a
not ebx
sub ecx, 0x33cf5971
neg ecx
or ebx, 0x33d023d0
or edx, esi
sub esi, ebx
bswap ecx
jmp 0x479203
push 0x207d78bb
shr edx, 1
shr esi, 9
sub ebx, esi
sub edx, 0x33dacfa8
or esi, 0x33db43cc
jmp 0x47b68d
pop edi
xor edx, ecx
xchg ebx, ecx
jmp 0x47b204
pop edi
xchg edx, ecx
shr ebx, 0x1b
xor edx, ecx
or edx, ecx
or esi, ecx
and esi, 0x33f1b65c
add ebx, ecx
shr ebx, 1
add esi, ebx
neg edx
sub ecx, edx
xchg esi, ecx
jmp 0x47ac33
pop edi
nop
xor ecx, esi
jmp 0x478a92
call fcn.0047b884
or esi, 0x348f4f2f
and edx, esi
and edx, ebx
sub ecx, ebx
or ecx, 0x34910ba6
xor ebx, esi
xor ecx, esi
shr ebx, 0x17
shl ecx, 0x16
xor ecx, ebx
sub ecx, 0x349f8fd5
and esi, ebx
xchg ecx, edx
add esi, 0x34a0af14
jmp 0x478baa
pop edi
xchg esi, ebx
or esi, 0x34a851f7
xchg esi, edx
or ebx, edx
and esi, 0x34a98294
sub ecx, esi
dec esi
jmp 0x4792cc
mov edi, 0x123b2f04
rol esi, 3
add edx, ecx
ror ecx, 0x14
neg edx
shr edx, 7
sub esi, ebx
or ecx, 0x34afc676
bswap edx
not ebx
add ebx, ecx
inc esi
shr ecx, 2
shl ecx, 0x1c
shr edx, 4
neg esi
jmp 0x47b351
push esp
mov esi, edx
neg edx
xor ecx, edx
bswap esi
neg esi
sub ecx, ebx
jmp 0x47a92c
call edi
ror esi, 0xa
bswap ecx
or esi, ecx
or edx, esi
xor esi, 0x34e05ca1
xor ecx, 0x34e0d823
add edx, esi
sub ebx, ecx
neg ecx
inc edx
add edx, ebx
sub ecx, edx
xchg ebx, edx
neg edx
jmp 0x479686
push 0x209c9398
sub edx, ecx
rol ecx, 0x1f
neg ebx
xchg ecx, edx
not esi
xor ebx, ecx
mov esi, 0x35052398
add esi, 0x35059fe4
jmp 0x47b8a3
pop edi
xor edx, ecx
xchg ecx, esi
shl edx, 0xd
jmp 0x47a22c
call fcn.0047b884
add esi, ecx
or ebx, edx
xor ecx, ebx
and ebx, esi
mov ebx, ecx
xor ecx, edx
xor edx, ebx
mov edx, ecx
mov edx, ecx
shl ecx, 0x1e
bswap ebx
jmp 0x4795ce
mov edi, 0x123b2f04
add ecx, 0x35805b1d
xchg ecx, edx
rol ebx, 0xe
xor ebx, esi
xor edx, esi
shr ebx, 0x11
shl edx, 0xa
or esi, 0x3583b57b
sub ecx, 0x35841d20
jmp 0x47a4ba
pop edi
ror esi, 7
shr ebx, 0x15
ror edx, 8
sub ecx, edx
not edx
xor ebx, edx
ror esi, 0xc
mov ebx, 0x3595aa10
sub ebx, ecx
rol ebx, 0x1c
jmp 0x478a65
pop edi
and edx, esi
xor ecx, 0x35ae0795
inc esi
jmp 0x47a613
mov edi, 0x123b2f04
or ecx, ebx
xor ecx, edx
add ecx, 0x35afc66d
sub ebx, esi
xor ecx, edx
add ebx, ecx
xor ebx, esi
xchg esi, edx
inc esi
xor ecx, edx
and ecx, 0x35b3610b
and edx, 0x35b3c7ef
xchg ebx, ecx
and edx, 0x35b49b70
inc ebx
jmp 0x47903c
pop edi
add edx, ebx
inc edx
sub edx, esi
ror ebx, 0x12
xor ebx, edx
add ecx, edx
or edx, esi
jmp 0x479c2f
push 0x2096747b
xchg ebx, esi
xor ecx, 0x35d66b5d
add ebx, 0x35d6f530
mov esi, ebx
and ecx, ebx
not ecx
and esi, 0x35dd8af4
mov ebx, 0x35ddf2bd
shr esi, 0x13
bswap esi
jmp 0x47b9ea
push 0x209620ea
add edx, 0x35df5ec6
or esi, edx
bswap ebx
shr ebx, 1
xor edx, 0x35e104ce
mov edx, ebx
sub ecx, ebx
sub ebx, ecx
xchg edx, ebx
xor edx, esi
jmp 0x47b1d6
push 0x401400
neg edx
shl esi, 7
shl ecx, 1
xchg edx, esi
not ebx
and edx, ecx
mov ebx, esi
xchg esi, edx
or ebx, edx
mov ebx, ecx
or ebx, 0x35fc4ca4
sub esi, edx
sub esi, ebx
jmp 0x479238
push 0x208c119f
and ebx, edx
and edx, 0x361a2e90
mov edx, esi
sub ebx, esi
dec edx
shl ecx, 0x11
add ecx, esi
and ebx, 0x361ccbc1
rol ebx, 9
jmp 0x47907e
call fcn.0047b884
mov ecx, esi
mov ecx, edx
add edx, ebx
mov ebx, edx
bswap esi
or edx, esi
xchg ecx, edx
xchg esi, edx
shr esi, 7
or ebx, edx
sub ebx, esi
neg esi
xor esi, ecx
or ebx, ecx
xor edx, ebx
jmp 0x479b76
call fcn.0047b884
xchg esi, ebx
shl ecx, 0x18
mov ecx, edx
mov edx, ecx
add esi, 0x3628c3e6
xor edx, esi
sub edx, ebx
mov edx, esi
not edx
mov edx, 0x362ae6f4
ror ecx, 0x1d
sub edx, 0x362bae48
jmp 0x47aee3
push 0x20850e2a
shr ecx, 0x11
inc edx
xor esi, edx
xor ebx, edx
ror esi, 0x1e
shl esi, 0xd
jmp 0x47bb07
push 0x2084b7c9
add esi, ebx
dec ecx
inc ecx
add esi, ecx
add esi, ecx
and ecx, edx
and ecx, esi
sub ecx, 0x363ef995
add ebx, 0x363f7a27
jmp 0x47b3f6
call fcn.0047b884
and ecx, 0x36401442
xchg edx, esi
and ebx, 0x3640d4dc
add ebx, edx
dec edx
or edx, 0x3642055c
mov ecx, ebx
add esi, edx
or ecx, 0x364ca3b2
jmp 0x478bb9
pop edi
or esi, ecx
or esi, 0x3653ac04
nop
not ebx
neg edx
bswap esi
add ecx, ebx
rol edx, 0xa
and esi, 0x365697f1
dec esi
and edx, 0x3657622e
xchg ebx, ecx
sub edx, ecx
or esi, ecx
and ecx, 0x3658f150
jmp 0x47b9d1
push 0x2081ec2a
or ecx, ebx
and esi, ecx
jmp 0x47a0bc
call edi
shr edx, 4
xchg ecx, esi
or ebx, esi
or edx, 0x3660a31a
and edx, esi
shr ebx, 0x19
or ecx, 0x3667808d
inc edx
xor ecx, ebx
jmp 0x478b8b
pop edi
add ebx, 0x366e4ff6
sub ecx, edx
xchg esi, ebx
or ecx, esi
or ecx, edx
mov ebx, ecx
add ebx, edx
xchg esi, ebx
dec ecx
jmp 0x479e81
mov edi, 0x2774562b
mov ecx, 0x36722499
neg ebx
and edx, ebx
dec ecx
mov edx, esi
and edx, 0x36742810
jmp 0x47acbc
push 0x2074158e
shl ebx, 0x1e
not ebx
sub ebx, esi
mov esi, ebx
add edx, ecx
xor esi, edx
dec edx
rol esi, 0x19
jmp 0x47b54b
mov edi, 0x123b2f04
and esi, 0x36781b98
sub esi, ebx
and ecx, 0x3678f015
or ecx, edx
and ecx, 0x3679cfdf
xor edx, 0x367a2fd9
and esi, ebx
not esi
xchg ecx, ebx
jmp 0x47a255
push 0x207dd33a
xchg ebx, ecx
or edx, ebx
sub esi, ecx
and ebx, edx
xor ebx, edx
not ebx
xor edx, 0x37c96ffe
and edx, ecx
mov ecx, edx
jmp 0x47921d
push 0x207d2a8f
and esi, edx
xchg edx, ecx
add ebx, 0x380bf0a2
mov esi, ecx
and ecx, 0x3816f8a6
and edx, esi
sub ebx, edx
dec ebx
xor esi, ecx
jmp 0x47aa6f
push 0x209ce2f4
and esi, ebx
and ecx, 0x383cf00b
and ecx, edx
neg edx
xchg edx, esi
mov ecx, ebx
mov ebx, edx
xor ecx, 0x383f6105
and ecx, edx
add ecx, 0x3843947d
neg ebx
or ecx, edx
mov ebx, ecx
jmp 0x479be1
mov edi, 0x2774562b
inc ecx
mov edx, 0x38a243b1
xor ebx, ecx
sub ebx, 0x38a30635
sub edx, 0x38a36bad
xchg esi, edx
add edx, ebx
neg ebx
mov esi, ecx
or esi, ecx
xor ebx, 0x38a605b0
jmp 0x478cd0
jmp loc.00480000
pop edi
add edx, ecx
mov esi, ecx
add esi, edx
not edx
xor esi, ebx
add edx, ebx
inc ebx
add ecx, esi
neg ecx
xchg esi, edx
jmp 0x47b798
push 0x2096d211
xor edx, ecx
or ecx, 0x38be8c02
xchg edx, ecx
add esi, edx
or edx, ecx
sub ecx, ebx
add esi, edx
or ecx, esi
shr ecx, 6
inc ecx
jmp 0x4790fe
call edi
add ebx, 0x38c512ce
add edx, ebx
add ebx, 0x38c8c47a
sub edx, ebx
or ebx, ecx
jmp 0x47a9b9
mov edi, 0x123b2f04
or edx, esi
xor ebx, esi
xchg edx, ebx
or edx, ecx
or edx, esi
xchg edx, ebx
jmp 0x47b442
push 0x206fd7a7
inc esi
xor esi, 0x38d0047a
dec ebx
add ebx, esi
and edx, ecx
or ebx, edx
xor ecx, ebx
mov ebx, 0x38d2f5b1
or edx, ecx
and esi, 0x38d3c819
mov ebx, esi
rol ebx, 0x13
jmp 0x47a6c2
mov edi, 0x123b2f04
and esi, ecx
dec edx
ror ebx, 0xa
neg edx
and edx, esi
neg ecx
and esi, ebx
jmp 0x479ad1
push 0x20855e55
xchg edx, ecx
or ecx, edx
shl ecx, 0x1d
dec esi
ror edx, 6
and ebx, 0x38f3c464
xor esi, 0x38f42ba6
add esi, ecx
or edx, 0x38f4e723
rol ecx, 8
neg esi
jmp 0x47ad61
pop edi
inc ecx
xor ecx, edx
or ebx, ecx
xchg edx, ebx
xor esi, 0x38f7dbeb
dec edx
bswap esi
bswap ebx
and esi, ebx
and edx, esi
jmp 0x47a7b8
pop edi
add edx, ecx
xor esi, edx
xchg edx, ecx
dec ecx
or ebx, edx
sub edx, ebx
mov esi, edx
and esi, edx
bswap ecx
inc ecx
xor edx, 0x39250d8d
xchg edx, esi
jmp 0x47b0e7
pop edi
sub edx, 0x392a58cb
sub esi, edx
xchg ecx, esi
shl esi, 0x1e
sub esi, ecx
and esi, 0x392c5b07
not esi
add ebx, esi
and esi, ebx
mov esi, ecx
jmp 0x47a449
call edi
dec esi
xor edx, esi
xor ebx, ecx
sub esi, ecx
xor ecx, edx
shl edx, 9
or edx, ebx
xor edx, ecx
xchg ebx, edx
xor ebx, edx
jmp 0x478f12
call edi
sub ebx, edx
or ebx, 0x3942d998
mov ecx, edx
or esi, ebx
add ebx, edx
mov edx, ebx
xor edx, esi
mov ecx, ebx
neg edx
or ebx, edx
sub edx, ebx
shl edx, 0x16
xor ecx, esi
add ecx, esi
add esi, ebx
jmp 0x47bb35