Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xfffffefe
jne 0x40109d
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff03
jne 0x40110d
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff04
jne 0x401178
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffef1
jne 0x40121a
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_RtlEncodeSystemPointer
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_ZwQueryIntervalProfile
call sub.ntdll.dll_RtlEncodeSystemPointer
ret
jmp 0x4756c0
or edx, edi
jmp 0x4767e5
call fcn.0047733e
and esi, edi
or edi, esi
shl edx, 7
or ebx, esi
and edi, edx
add edi, ebx
xor edx, ebx
sub ebx, edx
and edi, ebx
add edx, 0x6521faa4
xchg edx, edi
and edx, ebx
jmp 0x476966
push 0x4b2f7aeb
and edi, 0x6522c979
and ebx, edi
inc ebx
ror ebx, 0x10
neg esi
not edx
mov edi, esi
add esi, edi
mov edi, esi
jmp 0x477ac6
pop ecx
dec esi
add edx, ebx
and esi, ebx
xchg esi, edx
xor esi, edi
bswap edi
xor edx, edi
add edi, edx
add edi, ebx
mov ebx, 0x6528d6d8
jmp 0x476703
pop ecx
mov edx, edi
xchg edi, ebx
xchg edi, esi
and esi, edi
xor edx, 0x65301b39
or edx, 0x65305a1a
jmp 0x47736f
push 0x4b3232f4
bswap ebx
add ebx, 0x6530f3fc
nop
or edi, esi
and edi, 0x6531bee9
sub edi, esi
dec edi
jmp 0x476210
pop ecx
or ebx, edi
add esi, 0x6534c5af
sub esi, 0x653504cc
or esi, edi
add esi, 0x653590e6
dec esi
sub edx, edi
inc edx
jmp 0x476016
pop ecx
or ebx, 0x6536caa0
add ebx, edi
add edi, ebx
shl ebx, 0x1e
sub esi, ebx
xor ebx, esi
sub ebx, 0x6538d2f3
xchg esi, edx
jmp 0x476a65
push 0x4b39675a
nop
shr edx, 0x10
ror ebx, 5
ror edx, 0x1d
neg esi
add esi, edi
or edi, ebx
jmp loc.0047722e
pop ecx
and ebx, edi
sub edx, esi
xchg esi, edx
and edi, 0x654f94aa
neg esi
and edi, edx
xchg ebx, edx
jmp 0x4757e6
call fcn.0047733e
mov edi, ebx
rol ebx, 0x11
shl esi, 0xe
dec edi
inc ebx
neg ebx
inc edi
jmp 0x475a74
pop ecx
xor edx, ebx
add edi, ebx
xchg esi, edx
bswap edx
xor edx, ebx
mov ebx, edi
xor esi, 0x65668c93
mov edx, 0x6567028b
or edi, ebx
dec ebx
jmp 0x47790a
call fcn.0047733e
add edx, 0x657944ca
xor edi, edx
xor esi, ebx
add esi, 0x657b675c
not esi
or edx, 0x657d72f6
jmp 0x476620
call fcn.0047733e
xchg ebx, edx
shr edi, 0x12
dec edx
sub edi, edx
and edx, ebx
xchg edi, ebx
shl esi, 5
sub ebx, esi
xor ebx, esi
or edx, esi
jmp 0x476f28
mov ecx, 0x2774562b
sub edx, edi
and ebx, edx
or esi, 0x658ea280
xor esi, edi
not ebx
and esi, 0x658fd955
xor edx, esi
mov edi, 0x65905843
jmp 0x475930
call ecx
inc edi
and edi, esi
shl edi, 0x16
or esi, 0x659186f6
bswap esi
bswap esi
or ebx, edx
and edx, 0x65928487
or edi, 0x6592c42f
add edx, ebx
inc ebx
jmp 0x475cda
pop ecx
or edi, edx
add edx, edi
xchg ebx, edx
mov esi, ebx
xchg ebx, edi
or edx, ebx
mov edi, edx
bswap ebx
add esi, 0x65984d49
and edx, ebx
jmp 0x4765e1
pop ecx
or esi, 0x659ca358
not edi
xor edx, esi
or esi, ebx
xor ebx, esi
sub esi, 0x659ddf16
bswap ebx
sub ebx, esi
and ebx, esi
or ebx, esi
mov ebx, edx
jmp 0x4776f9
pop ecx
ror ebx, 0x10
xchg ebx, edi
or edx, 0x65a8d805
ror ebx, 0x1f
xor edi, esi
add edi, edx
and edx, esi
xchg edi, edx
add esi, edi
xor esi, edi
jmp 0x4757cc
call ecx
add esi, edi
not esi
xchg esi, edx
shr ebx, 6
bswap esi
sub edi, 0x65acd0f8
rol edx, 0x1c
xor edx, esi
and esi, ebx
mov esi, edx
xchg esi, edi
xor ebx, edx
sub esi, 0x65ae84ad
jmp 0x476d79
call ecx
mov ebx, edi
add esi, 0x65b5ee31
xor edi, edx
bswap edi
or edi, 0x65b6bd3f
add ebx, edx
add ebx, 0x65b739dc
or esi, 0x65b77838
add ebx, 0x65b7e7b1
not edi
xchg edi, esi
jmp 0x47596f
push 0x4b2ecdbd
sub edx, ebx
mov ebx, edx
shl esi, 0x1e
or edx, ebx
xor edx, ebx
xchg edi, edx
dec esi
mov ebx, 0x65c153c0
xor edx, edi
jmp 0x477725
pop ecx
inc esi
xchg edi, ebx
xchg ebx, edx
add ebx, edi
mov edi, ebx
not edx
and edx, 0x65c47c40
jmp 0x4772be
mov ecx, 0x2809144b
sub edx, esi
and ebx, esi
xchg ebx, edx
or ebx, edi
mov esi, edx
sub edx, ebx
mov esi, edx
mov edi, edx
xor ebx, esi
and edi, 0x65dad398
xchg esi, ebx
and esi, ebx
jmp 0x4761c4
push 0x4b35f1ee
mov ebx, 0x65e86a3e
shl ebx, 2
bswap esi
sub ebx, 0x65e92a1b
ror ebx, 5
or edx, edi
add edx, 0x65e9e86b
shl edx, 0x1a
or ebx, 0x65ea9248
jmp 0x4761e0
call ecx
add ebx, 0x65ee4a0a
or esi, edi
and edx, ebx
add edx, edi
mov esi, 0x65ef409b
and edx, esi
add ebx, edx
add esi, edx
jmp 0x477a4d
push 0x4b25e86a
xor esi, edi
add ebx, esi
add edi, esi
dec edx
and edi, edx
sub edi, 0x660464f8
add ebx, edx
rol esi, 0x1f
add edi, esi
sub edi, edx
jmp 0x47634a
call fcn.0047733e
xor ebx, esi
and edi, esi
shr ebx, 0x17
sub edx, edi
xor ebx, 0x66073632
inc esi
add esi, 0x6607dd26
or edx, ebx
dec edi
jmp 0x47729a
push 0x4b0f6def
add esi, edi
or edx, ebx
not ebx
sub ebx, esi
mov edx, ebx
and edi, ebx
jmp 0x4766a4
push 0x4b16620a
add ebx, esi
add ebx, edx
ror esi, 0x11
and esi, edx
mov ebx, 0x660eb75a
dec edi
inc edx
add ebx, 0x660fdd68
or edi, ebx
add esi, ebx
and edx, ebx
xor edx, esi
add esi, edx
and edi, edx
jmp 0x4771e2
pop ecx
and esi, edi
sub ebx, esi
bswap esi
neg ebx
inc ebx
xchg ebx, esi
add edx, 0x661c6fe9
jmp 0x477cab
push 0x4b2bc0ad
add edi, edx
mov edx, edi
mov ebx, edx
sub esi, edi
sub edx, 0x6624828b
sub esi, edx
bswap edi
jmp 0x477043
call fcn.0047733e
add ebx, edx
not ebx
nop
xor edi, esi
or edx, ebx
or edx, esi
mov esi, edx
ror edx, 0x1a
mov esi, edi
jmp 0x4776e9
mov ecx, 0x2774562b
nop
sub edi, ebx
and edx, 0x66285d12
and edx, esi
add edx, edi
dec edx
mov edx, esi
jmp 0x476038
pop ecx
and ebx, 0x662a3467
shr esi, 0xb
xchg ebx, esi
xchg edx, ebx
shl edi, 0x19
jmp 0x477196
push 0x4b328810
xor ebx, edx
mov edi, 0x662c607a
and ebx, esi
mov ebx, esi
jmp 0x477b61
push 0x4b0bb746
sub esi, ebx
ror esi, 0x12
sub edi, 0x6634b904
sub edi, esi
or edi, edx
bswap esi
xor esi, ebx
rol esi, 0x15
xor ebx, edx
xor edx, ebx
jmp 0x477cc3
push 0x4b270311
and esi, edx
not edi
and edx, edi
or edx, 0x6638861a
sub edx, 0x6638d57f
xor ebx, edx
mov ebx, edx
mov edx, esi
xor esi, 0x6639c6da
jmp 0x477c18
mov ecx, 0x2809144b
sub ebx, 0x66438288
and ebx, edx
nop
shl edi, 0x15
jmp 0x4764bc
push 0x4b265844
add edi, esi
rol edx, 0xa
mov ebx, edx
not esi
bswap edi
xor edi, edx
xor edx, esi
xchg ebx, edx
add edi, edx
sub edx, edi
xor edi, ebx
xor edi, 0x6648f444
jmp 0x47753e
push 0x4b1e44c1
not ebx
xchg ebx, edi
dec edi
jmp 0x47731a
call fcn.0047733e
or edi, ebx
and esi, edx
xchg edi, edx
mov esi, edi
jmp 0x476a34
push 0x4b152627
xchg edx, esi
xor edx, ebx
bswap edx
xor ebx, esi
or edx, ebx
and edx, esi
neg edx
xor edi, ebx
jmp 0x4779bf
call fcn.0047733e
mov esi, edx
xor ebx, edi
mov edi, esi
xchg ebx, esi
sub edx, 0x6673267a
add edi, 0x66738f61
and esi, edi
add esi, 0x667460a2
add edi, ebx
and ebx, esi
jmp 0x475c30
call ecx
and ebx, edi
or ebx, edi
xor ebx, 0x66762390
and ebx, esi
and edx, esi
xchg edi, esi
and edi, ebx
and edi, 0x66775648
add edx, esi
xor edi, ebx
sub edx, edi
add esi, ebx
xor edx, edi
add edi, 0x6678d954
jmp 0x47697b
pop ecx
and edi, edx
xchg esi, edi
xor edi, 0x6679adb2
shr esi, 0xd
xor esi, edx
xor edi, esi
or edi, 0x667ab9da
or edx, 0x667af83b
shr esi, 0x1d
jmp 0x477bb6
call ecx
sub esi, ebx
sub esi, 0x667db720
xchg ebx, edi
or esi, edx
mov edi, edx
add esi, edi
and edi, 0x667f2e85
jmp 0x477585
push 0x4b0ffe23
add edx, edi
inc edx
xor edx, esi
or ebx, edi
add esi, edi
inc edx
dec esi
not esi
and esi, 0x66897270
or edx, ebx
jmp 0x4766f0
push 0x4b10925a
sub ebx, edi
ror edx, 0xf
mov esi, ebx
bswap edx
jmp 0x4774bc
pop ecx
and ebx, edi
and edx, ebx
add edx, esi
or esi, edx
bswap edx
mov edx, ebx
and edx, 0x66910d97
add esi, edi
sub esi, edx
xor esi, edi
inc esi
inc ebx
jmp 0x4761fa
push 0x40
add esi, 0x66a153fa
inc edi
mov ebx, edi
xor edi, esi
jmp 0x477a61
push 0x4b0b02f3
shr ebx, 0x1d
xchg edi, esi
inc edx
and esi, ebx
add ebx, edi
neg esi
xor edx, edi
jmp 0x476c77
push 0x4b1d9a6c
add edi, ebx
mov esi, edi
xor edi, edx
ror esi, 0x1e
or edi, 0x66a8302c
shl esi, 0xf
add edx, edi
mov edx, esi
bswap esi
sub esi, 0x66a97359
xchg edx, esi
add edx, esi
xchg esi, ebx
jmp 0x4768f7
call fcn.0047733e
add edi, esi
add esi, ebx
inc edi
and edx, ebx
shr edx, 8
shr edi, 3
mov edx, 0x66af429a
xor edi, 0x66af81e4
or edi, edx
jmp 0x476f68
push 0x4b1def3d
sub edx, esi
and edi, esi
add edx, esi
jmp 0x476463
push 0x4b1d45e5
xchg edx, esi
sub edx, edi
or edi, edx
nop
add ebx, esi
and edx, edi
xchg edx, ebx
inc esi
add ebx, esi
jmp 0x476827
push esp
and edi, esi
xchg ebx, edi
xor esi, edi
dec esi
not ebx
xor esi, edi
xor edi, ebx
or edi, esi
jmp 0x4769b6
pop ecx
add ebx, edx
add edi, edx
add edi, 0x66c1b208
add edx, esi
ror edi, 3
mov edx, esi
jmp 0x477be3
push esp
sub edx, edi
or esi, edx
add edi, esi
shr esi, 0x1f
bswap esi
nop
jmp 0x4767d0
mov ecx, 0x2809144b
sub edi, edx
sub esi, ebx
xor esi, edx
or ebx, 0x66c78786
jmp 0x476881
push 0x4b19b5d2
and ebx, edi
xor edi, esi
sub ebx, edi
xor ebx, edi
nop
ror ebx, 0xc
jmp 0x477774
call ecx
ror ebx, 4
mov esi, ebx
not edx
xchg edi, esi
rol edx, 0x1f
xor edi, 0x66cf194c
jmp 0x475b0f
pop ecx
neg ebx
mov edx, 0x66d1e048
shl edx, 3
add ebx, edx
mov edx, edi
sub esi, ebx
sub edx, 0x66d3494f
xor edi, edx
dec ebx
add edx, ebx
xchg edi, esi
add ebx, edi
rol edx, 6
jmp 0x477daa
pop ecx
mov edi, ebx
xor edx, esi
mov ebx, edx
or edi, 0x66dfe93f
shl edi, 0x10
and edx, 0x66e06692
or ebx, edx
bswap esi
or esi, ebx
mov ebx, edx
jmp 0x476d66
push 0x4b0b62e9
rol edi, 3
mov esi, ebx
xchg edi, ebx
mov edi, edx
add esi, edi
jmp 0x47626a
push 0x4b359916
rol edi, 8
add edx, esi
or ebx, esi
add edx, 0x66ffc892
xchg esi, ebx
xor edx, 0x670054c2
rol edx, 0x18
and ebx, edi
mov edi, esi
add edx, esi
add edi, esi
jmp 0x475e9d
mov ecx, 0x2809144b
xor edx, 0x67046353
or esi, ebx
mov edx, edi
ror edx, 0x1d
xor ebx, 0x67058011
mov edx, ebx
and edx, ebx
mov ebx, 0x67063563
xor esi, ebx
and edi, ebx
and esi, ebx
mov ebx, esi
or esi, 0x67079a98
xchg esi, edi
xchg ebx, esi
jmp 0x476ecf
pop ecx
ror edx, 0x1d
mov esi, 0x670912f3
add edx, esi
and edi, ebx
and edi, ebx
ror esi, 0x14
or edi, edx
rol ebx, 2
sub ebx, edx
mov esi, edx
add ebx, esi
xchg ebx, edi
sub ebx, edi
add ebx, edx
jmp 0x477842
push 0x4b2e77e6
add edx, esi
bswap edx
ror ebx, 0x1d
add esi, edx
jmp 0x475caa
pop ecx
or ebx, 0x670e146c
or esi, edi
mov esi, ebx
mov edx, 0x670f08d7
neg edi
mov edi, edx
xor esi, edi
sub ebx, esi
jmp 0x475761
call fcn.0047733e
xor esi, edx
dec edi
ror edi, 6
mov ebx, 0x671b4b72
mov esi, edx
and edx, ebx
sub esi, 0x671c005b
dec esi
sub esi, ebx
sub ebx, esi
and esi, edi
neg edi
bswap esi
xor ebx, 0x671dbf39
jmp 0x4765b2
call ecx
add edi, ebx
neg edi
or ebx, edx
xor esi, edx
mov edi, edx
and ebx, esi
shr edi, 9
mov edx, 0x6724cfa6
mov edx, edi
jmp 0x47581b
call fcn.0047733e
neg edx
ror edx, 0x15
sub edx, 0x6729959d
mov edi, ebx
jmp 0x475eec
pop ecx
sub esi, 0x672a2bb8
xchg ebx, esi
ror edi, 0xd
or edx, edi
dec ebx
and edx, esi
sub ebx, esi
xor esi, edi
xor edi, 0x672c250e
or ebx, edi
xchg esi, ebx
xor esi, ebx
mov esi, ebx
jmp 0x475b99
pop ecx
neg ebx
or ebx, esi
xor ebx, edx
add edi, edx
dec esi
jmp 0x4772dc
call ecx
add edi, 0x67303667
shr edx, 0xd
shl ebx, 5
and ebx, edi
and edx, 0x67314cd4
sub esi, edx
inc esi
mov ebx, 0x67328960
xchg esi, edi
xchg ebx, edi
or edi, edx
jmp 0x477135
call ecx
xchg esi, edi
shl esi, 4
and esi, 0x673659e3
add edx, ebx
mov esi, 0x6736d2eb
shr ebx, 0x1f
sub edx, edi
xchg ebx, edi
xchg esi, ebx
sub edx, 0x673815ab
mov edi, edx
jmp 0x4775b7
pop ecx
and edx, 0x6742c6b7
xor esi, 0x67431ccc
jmp 0x47735f
call fcn.0047733e
sub ebx, edx
xor edi, edx
or edi, 0x674465a5
and ebx, edx
mov esi, edi
jmp 0x475bb9
push 0x4b2c17b4
or edi, edx
mov edi, 0x67458091
bswap edx
or edi, 0x6745febc
xor esi, ebx
or esi, 0x674679be
xor esi, 0x6746b712
ror ebx, 0xe
or edx, edi
bswap edx
mov ebx, 0x6747ea60
jmp 0x475a4f
pop ecx
xor esi, edi
xor esi, edx
xchg esi, ebx
or ebx, edi
and edi, ebx
mov edi, edx
shr esi, 0x1d
sub edx, ebx
sub edx, esi
ror esi, 7
jmp 0x477019
push 0x4b0ed837
xor edx, esi
xchg esi, ebx
xchg edi, ebx
and esi, edx
add edx, esi
inc edx
xor edx, edi
not edx
not esi
or ebx, edx
jmp 0x476070
pop ecx
mov edi, 0x67629ce9
xor ebx, edi
xor edi, esi
and esi, edi
and edx, ebx
shl edi, 0x17
ror edi, 0xe
add ebx, edi
shl edx, 4
jmp 0x476d3e
push 0x4b16b7e4
dec edi
sub ebx, esi
neg esi
and edi, esi
xchg edx, edi
mov esi, edi
shl ebx, 0x13
sub edi, 0x6766c6a9
sub edi, ebx
mov ebx, edx
add edi, esi
rol edi, 8
jmp 0x476325
call ecx
shr edi, 0x1f
and ebx, edx
mov edi, ebx
sub edi, edx
mov edx, edi
and ebx, edi
xchg edx, edi
xchg esi, edi
sub esi, edi
rol esi, 0x1d
add edi, esi
add edi, edx
shl esi, 0xb
jmp 0x477746
pop ecx
neg ebx
bswap ebx
shl ebx, 0x17
add edi, esi
xchg edx, edi
rol esi, 0x1d
or edx, ebx
xor edx, esi
or esi, edi
sub edi, ebx
or edi, edx
jmp 0x476b0f
push 0x4b3543e6
xchg edi, edx
shl edx, 1
xchg esi, ebx
mov edx, 0x677a9b9b
mov esi, edi
and edi, 0x677b14b1
or esi, ebx
jmp 0x476cb8
pop ecx
or ebx, edi
not ebx
ror edx, 0xd
not edx
shl ebx, 0xb
and edi, 0x677ced6e
shr edi, 0xb
ror edi, 6
jmp 0x4771c4
mov ecx, 0x2774562b
xchg edx, esi
add edi, esi
xor ebx, edi
mov esi, edx
sub edi, edx
xor edi, edx
and edx, 0x677f3ab6
mov esi, edi
add ebx, 0x677fb3a9
jmp 0x476588
pop ecx
sub esi, edi
xor edi, esi
xor esi, 0x67831bed
jmp 0x4758f4
push 0x4b29b729
sub edx, 0x678373ef
or esi, edi
rol edx, 0xf
rol edx, 7
or ebx, edx
or ebx, edi
xor esi, edi
add esi, edx
jmp 0x4777e0
pop ecx
xchg edx, edi
dec ebx
mov ebx, edx
jmp 0x477762
push 0x4b112a73
add ebx, esi
sub edi, ebx
or edi, esi
mov ebx, 0x679b2fcf
xor ebx, esi
xchg edx, ebx
add edx, esi
jmp 0x476d06
push 0x4b26ae4c
dec edi
sub esi, 0x67a4243a
xor ebx, edi
sub edi, 0x67a495f4
or ebx, 0x67a4dd55
add edx, esi
jmp 0x47628e
pop ecx
neg edi
not ebx
neg esi
add esi, ebx
mov edi, esi
bswap ebx
mov esi, ebx
or edi, ebx
and esi, edx
xor ebx, esi
or ebx, edi
mov ebx, esi
jmp 0x476f0e
pop ecx
or esi, ebx
dec esi
add esi, ebx
xor edx, ebx
add ebx, esi
rol edx, 0xc
xor esi, edi
jmp 0x476ee6
pop ecx
or edi, edx
add esi, edx
add esi, edx
sub esi, edi
shl edx, 6
mov edx, edi
not ebx
add edx, edi
mov ebx, edi
add edi, 0x67af34f9
jmp 0x477567
push 0x401400
add ebx, esi
xor edx, edi
add edi, esi
or edx, 0x67b9602f
not ebx
bswap esi
add edi, esi
jmp 0x476e88
call ecx
and edx, edi
and edi, ebx
dec esi
sub esi, edx
bswap edx
jmp 0x47583b
pop ecx
or ebx, esi
mov edi, esi
xchg esi, edi
jmp 0x477430
push 0x4b2f24c1
or edi, ebx
mov edi, 0x67cc37bc
add esi, ebx
xor edx, ebx
add edx, edi
dec edi
or ebx, edx
xor ebx, edi
rol edi, 1
and edx, esi
jmp 0x475729
pop ecx
or ebx, edx
xor esi, edi
mov ebx, esi
xor edx, 0x67cf5a92
mov esi, edx
bswap ebx
and ebx, 0x67d016af
jmp 0x477b3b
pop ecx
and edi, ebx
shl esi, 4
inc esi
neg ebx
sub edx, esi
add edx, ebx
jmp 0x477d6b
push 0x4b1a0ac3
mov esi, edi
sub ebx, esi
sub edi, 0x67d29766
or esi, 0x67d30170
sub edx, 0x67d36f73
jmp 0x475ddc
mov ecx, 0x2809144b
sub edi, ebx
mov ebx, edi
xchg esi, ebx
shl edx, 0x16
add ebx, edx
sub edi, edx
xor edx, edi
mov esi, ebx
add esi, ebx
jmp 0x476e1e
pop ecx
or edi, 0x67e000e0
mov ebx, edi
xor edi, edx
shl edx, 0x12
jmp 0x47656e
mov ecx, 0x4132136a
xor edi, esi
mov ebx, edx
and edx, ebx
xchg edx, esi
mov esi, ebx
dec esi
inc esi
sub edx, edi
xchg esi, ebx
sub esi, ebx
inc edx
xor edx, 0x67e40859
not ebx
jmp 0x475702
pop ecx
xor edi, esi
add ebx, edx
sub ebx, 0x67f1247a
xchg esi, edx
mov esi, edi
add ebx, edx
rol esi, 0x10
rol esi, 0x16
dec edx
jmp 0x4772fc
push 0x4b157bda
add edi, edx
shl ebx, 2
and ebx, 0x68006d60
neg esi
xchg edi, ebx
xor edx, 0x6801456c
or edi, edx
or esi, edx
or edi, edx
and ebx, esi
xchg ebx, edx
xor esi, 0x6802c053
mov edi, esi
nop
jmp 0x477d17
pop ecx
or edi, edx
add ebx, esi
rol ebx, 5
add edi, edx
shl ebx, 0x16
mov esi, edi
jmp 0x475abf
push 0x742c0
add esi, edi
rol edi, 0x11
and ebx, edx
add edx, esi
ror ebx, 5
xor edx, ebx
xor edx, 0x680f1707
jmp 0x477666
mov ecx, 0x2809144b
rol edi, 0x1c
xor edx, ebx
mov edi, 0x681571cd
and esi, edi
jmp 0x475a26
pop ecx
add edi, ebx
and edx, ebx
mov esi, edi
jmp 0x476126
push 0x4b32df79
xchg esi, edx
xchg esi, edx
add edi, ebx
and edi, 0x68207aa7
sub edi, esi
and ebx, 0x6820f56b
sub esi, ebx
ror edx, 8
jmp 0x4769c8
pop ecx
dec esi
neg edx
mov edi, edx
add esi, edi
not ebx
dec esi
or edx, edi
bswap edi
jmp 0x47782f
push 0x4b2b690e
sub edi, esi
xor edi, 0x682a4870
add ebx, edx
shr esi, 0x16
not edi
shr esi, 0x1c
jmp 0x4761a8
mov ecx, 0x2809144b
and edi, edx
or esi, edx
add esi, edi
sub edi, 0x682e390f
sub edx, 0x682e78d5
xor esi, edx
mov ebx, esi
not ebx
ror edx, 3
jmp 0x4759dc
mov ecx, 0x2809144b
sub ebx, 0x6831e95c
sub ebx, esi
mov edx, esi
and ebx, 0x6832afb9
xchg edx, edi
inc edi
jmp 0x47702b
push 0x4b388ed3
neg edi
add edi, edx
or esi, edx
or esi, ebx
xchg esi, edi
xchg ebx, edi
mov edi, edx
jmp 0x477e0b
push 0x4b0c0b7e
shl esi, 2
add edx, ebx
add edx, esi
not ebx
mov esi, edx
and ebx, edi
xor ebx, edx
or edi, ebx
xchg ebx, edi
jmp 0x477c5c
push 0x4b15cf0b
or ebx, edi
not esi
and edx, 0x68420a2e
add edi, 0x68424aa0
and edx, 0x68428982
jmp 0x476093
pop ecx
add ebx, esi
shl edx, 0x15
mov edx, ebx
xor edx, edi
nop
shr edx, 0xa
not ebx
and edx, edi
xor edi, esi
jmp 0x4769ea
push 0x4b1cef2a
neg esi
xor ebx, 0x684e5714
add edi, 0x684e9837
and ebx, edx
not esi
and ebx, esi
sub edi, edx
mov edi, esi
and ebx, esi
bswap edx
nop
sub edx, 0x68510817
and edi, 0x6851486b
jmp 0x476907
push 0x4b39118f
sub ebx, edx
xor esi, ebx
rol esi, 0xc
sub edx, edi
mov edi, 0x6856845a
sub edx, 0x6856c469
add ebx, edx
add edx, 0x685750d9
add edx, esi
inc edi
or edi, edx
inc ebx
rol ebx, 8
jmp 0x475879