Function at 0x401000
Capabilities:
Encrypt data using chaskey
Enumerate services
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetCurrentProcess
cmp eax, 0xfffffee8
jne 0x40107f
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xfffffefc
jne 0x401126
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xffffff08
jne 0x4011a5
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xfffffee8
jne 0x401238
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
call sub.advapi32.dll_EnumServicesStatusExW
call sub.advapi32.dll_EnumServicesStatusExW
call sub.ntdll.dll_RtlRegisterSecureMemoryCacheCallback
ret
jmp 0x4752ed
mov esi, 0xf1d625da
or ebx, edx
xor edi, ebx
jmp 0x476704
pop esi
and edx, edi
not ecx
not edi
and ebx, edx
mov edx, ecx
sub edi, ebx
xchg ecx, edi
xor edi, 0xf399027c
jmp 0x477a41
pop esi
inc edx
xor ebx, edx
xor edx, ecx
mov edx, 0xf39c7cf4
or ebx, edx
and edx, edi
or edi, 0xf39d3942
or ecx, 0xf39d79d4
jmp 0x47680a
push 0xf1e9763e
xchg edx, edi
mov ecx, edi
mov edi, ecx
shl edx, 4
xchg ecx, ebx
xchg ebx, edi
mov edx, ebx
mov edx, 0xf39fa524
and ecx, edx
or ecx, 0xf3a025ac
jmp 0x476d33
call fcn.00475c89
xchg ebx, ecx
mov ebx, edi
sub ebx, 0xf3a6d612
xchg edx, ecx
jmp 0x4769e4
mov esi, 0x2809144b
mov ecx, edi
xor ecx, 0xf3b8ca44
or edi, ebx
mov edx, ebx
ror ecx, 0x17
rol ebx, 0x1e
ror edi, 0x1d
sub edi, 0xf3ba57e6
neg edx
mov edi, ecx
jmp 0x4779a8
push 0xf1e25cf8
and ecx, ebx
sub ebx, edx
xchg edx, edi
dec edi
sub ebx, ecx
shr ebx, 0x19
jmp 0x476689
push 0x401400
bswap edx
or ecx, edx
sub edx, 0xf3cb904e
or edx, 0xf3cbcecc
and ebx, 0xf3cc0d34
shl ecx, 0x15
add edx, edi
add ecx, edx
xchg edx, edi
or edx, ecx
or edx, edi
shl edx, 0x1d
jmp 0x476e6c
push 0xf1efa224
xor ecx, edi
dec ecx
or ecx, 0xf3e483d6
xchg edi, ecx
sub ecx, ebx
sub ebx, edi
or ecx, edx
add ebx, edx
jmp 0x4776e9
pop esi
or ebx, 0xf3f29264
xor edi, edx
neg edi
add edi, ebx
inc ebx
xor ecx, edi
jmp 0x477224
call esi
or edx, ebx
and edi, edx
or edi, edx
add edx, 0xf3fab8e2
jmp 0x47605b
pop esi
add edi, ecx
xchg edi, ebx
and ecx, 0xf40f9b3a
and ebx, ecx
xchg edi, ebx
and edx, edi
bswap edx
or edx, ecx
mov edi, 0xf4112c6a
mov edi, 0xf4116bbc
and ecx, ebx
shl ecx, 0x10
not edx
add edx, 0xf4129d66
jmp 0x478573
mov esi, 0x2809144b
sub ebx, 0xf412f782
sub edx, 0xf41336c8
or ecx, 0xf41375a6
bswap edx
shr edi, 7
dec edi
or edx, ecx
add ebx, edx
or ebx, ecx
and edx, edi
shl ebx, 0x1e
mov edi, 0xf415bb82
sub edx, ebx
inc edx
jmp 0x476501
pop esi
bswap edi
xchg edx, edi
add ecx, edi
shr ecx, 0x16
inc edx
sub ecx, 0xf41a73cc
shr edi, 3
xchg ebx, ecx
mov ebx, edx
xchg edi, edx
and ebx, edi
mov edx, edi
shl ecx, 0xd
bswap edx
jmp 0x475a9c
push 0xf1dee33a
shl ebx, 7
inc edi
add ecx, edx
xor edx, ecx
bswap edx
and ebx, 0xf432bd88
mov edi, ebx
sub edi, ecx
jmp 0x477d6d
call fcn.00475c89
neg ecx
mov ecx, 0xf43c5080
xor edx, edi
dec ebx
xchg ebx, ecx
not ecx
or edi, ecx
or edx, ecx
and ebx, edi
xchg ebx, edi
jmp 0x476bdf
push 0xf1edddf0
add edi, 0xf443f6b2
sub edi, edx
xor ebx, edi
xchg ebx, edx
xor ebx, 0xf444f2c8
xor ebx, 0xf445335a
mov edx, 0xf4457342
rol edx, 0xb
mov edx, ecx
rol ebx, 8
jmp 0x475f76
push 0xf1f1b2b8
rol ecx, 7
mov ebx, edx
or ecx, edx
mov ecx, edx
mov ebx, edx
sub ecx, edx
xor edx, ebx
not ebx
or ebx, edx
not ebx
jmp 0x476407
push 0xf1de995e
xor ecx, ebx
or edi, ebx
dec ebx
or edx, edi
xor ebx, 0xf44afde2
not ecx
and edi, ecx
rol edx, 0xf
and edx, ecx
xor edi, 0xf44c4576
jmp 0x475c6b
push 0xf1e92a1e
and edi, ecx
rol ebx, 0xe
shl edx, 0x1a
inc ecx
jmp 0x4754a4
call fcn.00475c89
dec ecx
neg ecx
inc edi
mov ebx, 0xf452581e
and ecx, edi
shr ecx, 0x15
jmp 0x475963
pop esi
sub ebx, 0xf4587be4
add ebx, ecx
dec ecx
xor edx, edi
dec ebx
shr ecx, 0x1d
rol ebx, 0xd
shr ebx, 0xe
ror ecx, 1
or edi, ecx
bswap edi
xchg edx, ebx
jmp 0x4781b3
push 0xf1dc916a
and edx, edi
sub ebx, edi
xor ecx, edi
shr edx, 0xb
jmp 0x476954
mov esi, 0x2809144b
rol ecx, 8
xor edx, 0xf46deb66
xchg edi, edx
xor edi, ecx
and edx, ebx
bswap edi
jmp 0x477dee
pop esi
and ebx, edi
dec edx
mov edi, ecx
xchg edx, edi
xchg edx, ebx
shl edi, 0x19
inc ebx
add ecx, edi
add edi, ecx
or edx, 0xf47e1930
jmp 0x4786fb
pop esi
sub ecx, edx
inc edx
or edx, ecx
mov edx, edi
jmp 0x477343
push 0xf1e89498
nop
rol edi, 0xb
add ebx, edx
mov edi, 0xf4804f7c
xchg ecx, edi
add ebx, edx
shl edx, 2
not ebx
sub ebx, edi
sub edi, ecx
jmp 0x476740
push 0xf1e50510
mov edx, edi
xor edi, ebx
sub edi, ebx
rol ebx, 0x15
jmp 0x4755c7
pop esi
sub edx, edi
mov edx, ebx
xchg ecx, ebx
mov ebx, edi
ror edi, 0x12
add edi, 0xf49d59b8
and ebx, 0xf49d9672
ror edi, 0x16
jmp 0x477e65
mov esi, 0x2809144b
xchg ebx, edi
and edx, ecx
sub edx, 0xf49f3f2a
and ecx, 0xf49f7b06
not ebx
xor ecx, 0xf4a08bd2
xchg edi, edx
xchg ebx, edi
jmp 0x475d04
call esi
ror edi, 0x1a
add edx, 0xf4b53cde
add edx, edi
and ebx, ecx
or ebx, edi
sub edi, 0xf4b64168
add ecx, edi
dec edx
shl edx, 0x1b
or edi, edx
jmp 0x475b22
call fcn.00475c89
add ecx, edx
and ecx, 0xf4b97086
xor ebx, edx
or edi, ecx
xchg ecx, ebx
xchg ecx, edi
shr ecx, 0x10
sub edx, ecx
jmp 0x4780be
push 0xf1fb2534
bswap ebx
or edi, ebx
inc edi
xor edx, edi
or ebx, edx
and ecx, edx
and ecx, edx
xor ebx, 0xf4bd198e
or edi, ebx
sub ebx, 0xf4bd98e2
and edi, ebx
mov ecx, edi
or ecx, ebx
sub edx, edi
jmp 0x4766db
push 0xf1e4b926
neg ebx
xchg ebx, edi
mov edi, ebx
ror edx, 0x12
and edi, edx
and ecx, ebx
jmp 0x47611e
push 0xf1f1fe4a
xor ebx, edi
shr ebx, 0x17
xchg ebx, ecx
not edi
xor ecx, ebx
mov edx, edi
xchg ebx, edi
mov ebx, edx
jmp 0x4787ce
push esp
add ecx, ebx
mov ebx, 0xf4c2e6a2
mov edi, ecx
mov ecx, 0xf4c363d0
shl ebx, 0x12
or ecx, edx
shr ecx, 0x16
xor ebx, edx
and edx, ebx
sub ecx, edi
or ecx, 0xf4c52cfe
add ecx, edx
sub edi, edx
sub edx, ecx
jmp 0x4765e3
pop esi
sub edx, 0xf4cbad5c
dec ebx
and edi, ecx
or edx, ebx
xchg edi, ecx
rol ebx, 0x17
inc ebx
not ecx
jmp 0x477a9f
call fcn.00475c89
or ecx, 0xf4d29480
add edx, 0xf4d2cfd0
xor edi, 0xf4d30ab6
rol edx, 0x17
jmp 0x476359
pop esi
and ebx, edx
or ebx, ecx
and edx, ebx
add edx, edi
nop
and edx, 0xf4d95af4
jmp 0x47802e
pop esi
add ebx, edx
sub ecx, edx
rol edi, 0xf
shl edi, 0x16
xor edx, ebx
add ebx, ecx
and edi, 0xf4df1f22
not ebx
xor ecx, 0xf4dfa50e
and edx, ecx
and ecx, edi
ror ebx, 0x1a
xchg edx, edi
shr edi, 5
jmp 0x476788
push 0x40
sub edx, 0xf4e11e56
add edi, ecx
nop
mov edx, ebx
mov edx, edi
add edi, 0xf4e24bd4
or ecx, edx
sub ecx, ebx
jmp 0x47750a
call esi
mov edx, ebx
or ecx, edi
add ebx, edi
sub ecx, ebx
xchg ecx, edx
and ebx, edx
jmp 0x4782b7
push 0xf1e2a68c
and ebx, ecx
sub ebx, 0xf4ed0ce4
or edx, 0xf4ed4b3c
add ebx, edi
add edx, edi
xor ebx, edi
not ebx
xor ecx, edi
jmp 0x477126
push 0xf1fb6dd6
xchg edx, ebx
inc ebx
add ecx, edi
bswap ecx
xor edi, 0xf4f3454e
or edx, edi
or edx, ebx
bswap edx
shl edi, 0xb
and ebx, edx
and ecx, edx
mov ebx, 0xf4f50d56
jmp 0x4772ae
push 0xf1da7bd8
add edx, ebx
ror edi, 8
inc ebx
xor ecx, edx
xor edx, edi
and ecx, edx
mov ebx, 0xf4f6eb90
add ecx, edi
add edi, edx
xchg edx, ebx
sub edi, edx
neg edx
jmp 0x47622e
push 0xf1e8dfce
rol ebx, 9
ror edx, 0x10
and edi, edx
or edx, ecx
mov edx, ebx
xor edi, ebx
shl ecx, 3
and ecx, ebx
and ebx, ecx
xchg ecx, ebx
jmp 0x475dd7
call esi
xchg ecx, edx
ror edi, 0x11
sub ebx, ecx
xchg ecx, edx
not ebx
inc ebx
neg edi
sub edi, 0xf4fe2da2
xor edx, ecx
shr edx, 0x13
mov ebx, edi
mov ebx, 0xf4ff2a6c
jmp 0x477756
push 0xf1fdef2e
mov ebx, edx
xor ebx, 0xf4ffc4a6
add edx, ebx
nop
jmp 0x477630
pop esi
xchg edi, ebx
xor edi, ecx
bswap ebx
shr ebx, 0x16
inc edi
mov ebx, ecx
or ecx, edx
xor ecx, 0xf50b1462
not edx
and ecx, edi
jmp 0x477ca8
push 0xf1f882ac
and edi, edx
sub ebx, edx
and edx, ebx
mov edi, edx
jmp 0x4786d4
mov esi, 0x2809144b
neg ebx
mov ebx, ecx
or edx, ebx
add ecx, edx
mov edx, edi
xor ebx, 0xf51ca5c0
and ecx, edi
rol edi, 0x18
bswap ecx
not ebx
and ebx, edi
dec ebx
inc edi
shr edi, 0x11
jmp 0x477040
mov esi, 0x2809144b
or edx, edi
or ebx, ecx
or edx, edi
dec ebx
not ebx
xchg ebx, edi
and edx, edi
xor edi, edx
sub edi, 0xf522dfb2
shr ebx, 0x1a
and edi, ebx
and ecx, edx
dec ecx
rol ecx, 0x1d
jmp 0x478338
mov esi, 0x4132136a
mov edi, ebx
dec edx
ror ebx, 0x1d
add ecx, ebx
neg ecx
and ecx, edx
jmp 0x475517
push esp
add edi, 0xf52af61a
mov ecx, edx
mov ecx, ebx
xor edx, ebx
add ecx, edx
neg edi
and edx, ecx
mov ebx, edx
add ecx, edx
xor ecx, edi
or edx, edi
add ecx, ebx
jmp 0x476422
call fcn.00475c89
neg edx
shr edx, 0xd
and ecx, ebx
sub edx, 0xf536dde8
shl ecx, 0x13
sub ebx, ecx
jmp 0x477923
push 0xf1f29446
or ecx, ebx
and edx, ebx
jmp 0x477e0e
pop esi
mov edx, ecx
and edx, edi
rol ecx, 1
or ecx, ebx
mov edx, ebx
add ebx, edi
add ecx, edx
and ebx, edx
xchg ecx, edi
add edi, 0xf5416ce0
jmp 0x4765b5
pop esi
neg edi
and edx, 0xf542053e
and ebx, ecx
bswap edi
bswap edx
and ebx, ecx
xchg edi, ecx
mov ecx, ebx
xchg ebx, ecx
sub edx, 0xf544097e
jmp 0x4786c1
pop esi
shr ecx, 0x1c
not ebx
sub ecx, edi
sub edi, ebx
ror ebx, 1
mov ebx, 0xf54c55c2
bswap edi
neg ebx
jmp 0x476b09
call fcn.00475c89
neg edi
sub edx, edi
mov ebx, ecx
add edx, ebx
xor edi, edx
mov ecx, edi
add edi, ebx
add ebx, ecx
jmp 0x477690
call esi
or ebx, edi
xor edi, ecx
inc ebx
nop
jmp 0x476ece
pop esi
shr ebx, 6
add ecx, edx
xchg edi, ecx
xor edi, 0xf56582e0
mov edi, ebx
ror ecx, 0x14
or ebx, edi
dec edi
jmp 0x476ea7
push 0xf1e9c018
shl ebx, 0x1b
xchg ecx, edi
sub edx, ebx
bswap edx
xor ebx, 0xf56c61e4
and edi, edx
or edx, ebx
ror ebx, 3
jmp 0x475acd
call esi
neg edx
xchg edi, ecx
or ebx, ecx
sub ecx, edx
xchg edi, ebx
add edx, ecx
or ecx, edx
and edx, edi
sub edx, ebx
shl ebx, 0x14
xchg edi, edx
and edx, edi
mov ebx, 0xf57edae4
rol ecx, 0x14
jmp 0x478164
call esi
shl edi, 0x11
add ebx, edi
rol ecx, 0x1e
mov ecx, 0xf585387c
shr edx, 5
xor edx, edi
sub edi, ecx
xor edx, ecx
jmp 0x475441
pop esi
or ecx, edx
xchg ebx, ecx
add ebx, ecx
mov ecx, edx
or ebx, edi
or edx, ebx
jmp 0x4755fd
pop esi
or edi, ebx
xor ecx, edx
and edx, 0xf58c8ec6
and edi, 0xf58ccea2
shr ecx, 0x11
mov edi, 0xf58d4f1c
inc edx
or ebx, 0xf58de16a
jmp 0x4783d5
push 0xf1ef5746
nop
sub ebx, 0xf595a0e4
or edx, ecx
neg edx
rol ecx, 0x1d
xchg ecx, edx
add ebx, ecx
xchg ecx, ebx
sub edi, 0xf5976c26
inc ecx
add edi, edx
add edi, ecx
inc ebx
xchg edi, ebx
jmp 0x475827
pop esi
xchg ebx, edi
sub edx, ecx
xchg edx, ebx
not edx
mov ebx, edx
neg edi
add ecx, edi
mov edx, edi
sub edx, edi
or edi, 0xf5a1c856
or ecx, ebx
mov edx, ebx
jmp 0x477300
call fcn.00475c89
neg edi
bswap edi
rol edi, 0xf
mov edx, ebx
shr edx, 0x1d
add edx, ebx
jmp 0x4773a9
mov esi, 0x2809144b
and ebx, 0xf5b7a86c
add ecx, 0xf5b7e46e
sub ecx, ebx
xor ebx, edi
and ecx, ebx
or edx, ecx
mov ebx, 0xf5b91958
ror edx, 0x13
jmp 0x476ba7
pop esi
shl ebx, 0x13
xor ebx, edi
inc edi
mov ecx, 0xf5c99e4e
inc edx
mov edi, ecx
mov ecx, edx
mov ebx, ecx
jmp 0x47793b
call fcn.00475c89
and edi, 0xf5cd99d4
add edx, ecx
xchg edi, edx
add edx, edi
and edi, 0xf5ce997c
or ebx, 0xf5ceebf8
sub edi, edx
xor ecx, 0xf5cf6dea
xchg ecx, edx
neg edx
not ebx
or edx, ebx
jmp 0x478352
push 0xf1fbb55a
inc ebx
xchg edi, ecx
ror ecx, 0x11
sub ecx, edx
add edi, ebx
add edx, edi
xor edx, ecx
bswap edx
mov edx, 0xf5d38188
or edi, 0xf5d3c2e0
and ecx, 0xf5d402d4
xchg ecx, ebx
jmp 0x4784bd
pop esi
or edi, ecx
and ecx, 0xf5d7a93c
not edi
add edi, ecx
mov ecx, ebx
add ecx, ebx
and ebx, ecx
ror edi, 8
jmp 0x477b10
pop esi
and edi, ebx
not edx
mov edi, 0xf5dd39ac
xchg ebx, edx
xor edi, edx
add ebx, ecx
mov edi, ecx
inc ebx
add ebx, ecx
add edi, ecx
jmp 0x47603e
call esi
or ebx, edi
add edi, 0xf5e4b050
xchg edi, ebx
and edi, ebx
xor ecx, ebx
add edx, 0xf5e5ab98
sub edi, 0xf5e5ec4a
xor ecx, edi
jmp 0x477b65
mov esi, 0x2809144b
not ecx
inc ebx
mov edx, edi
and edx, edi
jmp 0x47726c
push 0xf1df766e
and edx, ecx
and edi, 0xf5eb3ce6
xchg ebx, edx
mov ebx, edx
jmp 0x4788ce
push 0xf1dc47c0
add edi, 0xf5efb632
add edx, ebx
or ecx, ebx
sub ebx, 0xf5f072e6
sub ebx, ecx
dec ecx
shr edx, 7
add ebx, ecx
xchg edx, edi
or edi, ebx
jmp 0x475ec3
push 0x73eed
xchg ecx, ebx
shr edi, 0x13
inc edx
xor ecx, edi
shl ebx, 0x11
xchg ebx, edi
mov edi, 0xf601cb28
ror edx, 0xd
and edi, edx
shl ebx, 5
or edx, edi
xor ecx, 0xf6031aee
neg ecx
xor ebx, ecx
jmp 0x4756cd
call fcn.00475c89
xchg ebx, edx
and ecx, edi
mov ecx, 0xf606e204
shl edi, 3
add edi, edx
and edx, edi
nop
xor ebx, 0xf608313a
jmp 0x478473
pop esi
and edi, edx
bswap edx
add edx, 0xf60d5f2a
add edi, 0xf60d9f2a
and edx, edi
or ebx, edi
and edx, ecx
and edi, ebx
or ecx, edi
bswap edx
xor edx, ecx
xchg edx, ecx
shl edi, 0x12
or edi, 0xf610266a
jmp 0x476068
push 0xf1fe36c2
bswap edi
ror ecx, 0x1a
xchg ecx, ebx
xchg edx, ecx
jmp 0x477b3f
call esi
xor ecx, ebx
or edx, ebx
mov ebx, edx
and edi, 0xf61c3ec4
or edi, 0xf61c7f5c
xchg ebx, edi
sub edi, ecx
xor edx, 0xf61d580e
jmp 0x4758f8
mov esi, 0x2809144b
bswap edi
xor edi, ebx
mov ebx, 0xf6210608
xchg edx, ebx
ror ecx, 0x11
mov ecx, edi
and edx, ecx
xor ecx, 0xf62252d2
or edx, ecx
xor ebx, edi
and edx, ecx
or ebx, edx
jmp 0x477568
pop esi
or ebx, 0xf628f932
mov ebx, 0xf629395a
sub ecx, 0xf62979c0
rol edi, 0xc
mov ecx, edx
mov edi, ebx
jmp 0x476b28
push 0xf1f83698
rol ebx, 0x10
ror edi, 0x1b
sub ecx, ebx
not edi
sub ebx, edi
xor edi, 0xf635d914
xchg edi, ecx
nop
xchg ecx, ebx
mov edi, ebx
sub ebx, edx
add ecx, edx
or edi, ebx
or ecx, 0xf637e148
jmp 0x4768c0
call esi
neg ecx
or ecx, edi
not edi
ror edi, 0x1a
and edx, 0xf64b7b1c
and edx, ecx
jmp 0x475484
push 0xf1e46cd0
xchg edx, ebx
add edi, ebx
and edx, ecx
bswap ecx
jmp 0x4763f0
call fcn.00475c89
shr edx, 8
neg ebx
xor ebx, edx
xchg edi, edx
sub ebx, 0xf654b296
bswap ebx
jmp 0x477f20
push 0xf1f7ebd2
ror edx, 0x14
xor ecx, 0xf65f27fa
neg edi
mov ecx, ebx
xchg ebx, edi
inc ebx
dec edi
and ebx, edi
not edx
add ecx, edi
jmp 0x47780d
pop esi
add edi, edx
and edx, edi
add edi, ecx
xor edx, ecx
or ebx, 0xf666ea86
add ecx, edi
jmp 0x477f37
pop esi
neg edi
add ebx, ecx
and ebx, edi
not edi
jmp 0x476cd8
pop esi
mov edi, ecx
sub edi, edx
jmp 0x475e8e
push 0xf1fe7e4c
bswap edx
and ecx, edi
rol ecx, 0x16
add edi, ecx
add edi, ebx
sub ecx, edi
jmp fcn.004752fb
pop esi
add edi, edx
xchg ebx, ecx
add edx, ebx
ror ecx, 9
mov edx, 0xf67513e0
add edx, ebx
sub edi, ebx
xor ebx, edx
xor ecx, ebx
nop
xchg ecx, edx
xchg edi, ecx
ror edi, 9
neg ebx
jmp 0x475d63
pop esi
mov edi, 0xf68b60ae
rol edx, 0x17
xor edx, edi
mov ebx, ecx
and edi, ecx
or edx, edi
xor ecx, 0xf68cea4a
xor edi, ebx
or ecx, edx
bswap ecx
or edi, 0xf68de932
and ecx, 0xf68e2900
jmp 0x476201
push 0xf1df2cc6
mov edi, ebx
not edi
jmp 0x4773fb
call fcn.00475c89
sub edi, edx
xor edx, 0xf6a5a90c
jmp 0x476620
mov esi, 0x2809144b
add ecx, edx
mov edx, ebx
jmp 0x4763a4
mov esi, 0x2809144b
inc ecx
neg edi
bswap ebx
add edi, ecx
jmp 0x476a7d
pop esi
sub ebx, 0xf6ad4912
xor ebx, ecx
neg edx
or ebx, edx
and ecx, 0xf6ae71a0
and edi, ecx
rol edi, 0x16
sub edi, edx
bswap edi
mov ecx, edx
and ebx, ecx
add ebx, 0xf6b086be
mov edi, 0xf6b0d106
shr edx, 5
jmp 0x47697e
call esi
xor edi, edx
add ebx, ecx
or ecx, 0xf6bcc26e
mov ecx, edi
and ecx, edi
and ecx, edx
jmp 0x47858f
push 0xf1f167e2
xchg ebx, ecx
or edi, 0xf6be24e4
and edx, edi
dec edx
sub ecx, edi
and ecx, ebx
bswap edi
add edi, 0xf6bfb0a0
mov ebx, 0xf6bff0ee
and edx, ebx
and edx, edi
xor edi, ecx
jmp 0x475d92
pop esi
xchg edx, ebx
mov ebx, 0xf6cdcaaa
not edx
xchg edi, ebx
jmp 0x478184
call esi
xor edx, edi
and edi, 0xf6d985c8
mov edx, 0xf6d9c5c4
and edx, ecx
sub edi, edx
xor ebx, edx
sub ebx, 0xf6dac136
shl ecx, 0x17
ror edx, 0x1e
sub ebx, edx
sub ecx, 0xf6dbd2ba
mov edx, ebx
sub edi, ecx
neg edi
jmp 0x476ff2
pop esi
sub ebx, edi
xor edx, 0xf6e5b95c
ror edx, 3
add ecx, edx
add ecx, 0xf6e67768
add edx, edi
shl ecx, 0x1b
or ecx, edx
jmp 0x476b8c
push 0xf1e71d68
add ecx, edx
and ecx, edx
or edi, edx
rol ebx, 5
xor edi, 0xf6e8a6a6
add edx, ebx
jmp 0x4773ea
push 0xf1ec6444
or edi, ebx
rol edx, 0x16
shl edi, 1
inc ecx
jmp 0x476912
pop esi
xchg edi, ecx
or edx, ebx
or edx, ecx
and edx, 0xf6fe609e
mov ebx, ecx
xchg ebx, edx
jmp 0x476f63
call fcn.00475c89
neg edi
or edx, 0xf7052694
neg ecx
neg edx
and ecx, 0xf705fa24
or ebx, ecx
and edx, edi
xor ebx, 0xf706b674
jmp 0x476e0e
call fcn.00475c89
neg edi
and edx, 0xf7074e8e
and ebx, edx
xor ecx, edx
xor ebx, edx
sub ecx, ebx
jmp 0x476761
call esi
add edx, ebx
mov edi, ebx
and edx, 0xf7092caa
and ecx, 0xf7097db0
xor ebx, 0xf709be5a
xchg edi, ebx
jmp 0x4775ba
push 0xf1dbfdd2
xor edi, ecx
or edx, 0xf712817c
sub edx, 0xf712c1e6
sub ecx, edi
rol edi, 8
add edx, ecx
neg edi
shr ecx, 9
sub edx, edi
xor ecx, edx
jmp 0x477443
call esi
and edx, ecx
or ecx, edi
xor ebx, ecx
xor ecx, edx
jmp 0x476498
mov esi, 0x2809144b
sub edi, 0xf7225dd2
xchg edx, edi
add ebx, ecx
sub ecx, ebx
shl edi, 0x11
sub ecx, ebx
sub edi, 0xf723d856
or edx, edi
and ecx, 0xf7246754
and edx, ebx
jmp 0x478312
pop esi
or ecx, edx
sub edx, ecx
ror edi, 2
sub edi, 0xf73138b4
shr ecx, 0x16
xchg edi, ecx
or ebx, edi
bswap ecx
jmp 0x477b35
pop esi
add ecx, edx
xor ecx, edi
mov ebx, 0xf7330b80
xor ebx, 0xf7335c94
and edx, edi
xor ebx, ecx
mov edx, ebx
xchg ecx, ebx
dec edx
xor edi, edx
jmp 0x476555
pop esi
neg edi
xor edi, 0xf74a1b94
and edi, ebx
ror edi, 3
jmp 0x475db1
mov esi, 0x2809144b
xchg edi, ecx
neg edi
xor edx, edi
mov ecx, edx
sub ebx, ecx
sub edx, ecx
and ecx, 0xf74c8f82
add edx, ebx
or edx, ecx
xchg edi, edx
xchg edi, edx
rol ebx, 0xd
jmp 0x475e28
push 0xf1fadd88
add ebx, edi
sub edi, 0xf74e632c
or edi, edx
and edx, ebx
sub ebx, ecx
and ecx, ebx
xchg ecx, edx
neg ecx
and ecx, ebx
and ecx, ebx
jmp 0x4763c3
push 0xf1f249ec
mov edi, 0xf75d6a80
add ecx, ebx
and edi, ecx
xor ecx, 0xf75e2766
xor edi, ebx
xor edi, ecx
xor edi, ebx
mov ebx, edi
xor edx, ebx
and ebx, 0xf75fb27a
jmp 0x476afb
push 0xf1dfbffe
not edi
add ebx, edi
add edx, ecx
add ebx, edi
and edi, ecx
or edi, edx
xor edx, ecx
shr edi, 0x1f
jmp 0x477e00