Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Query or enumerate registry value

Disassembly:
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff26
jne 0x40109d
call sub.ws2_32.dll_WSANtohs
call sub.ws2_32.dll_WSANtohs
call sub.advapi32.dll_RegQueryValueA
call sub.ws2_32.dll_WSANtohs
call sub.ws2_32.dll_WSANtohs
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
call sub.advapi32.dll_RegQueryValueA
call sub.ws2_32.dll_WSANtohs
call sub.ws2_32.dll_WSANtohs
call sub.advapi32.dll_RegQueryValueA
call sub.ws2_32.dll_WSANtohs
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
call sub.advapi32.dll_RegQueryValueA
ret
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xfffffee7
jne 0x40112b
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.advapi32.dll_RegQueryValueA
call sub.ws2_32.dll_WSANtohs
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
call sub.ws2_32.dll_WSANtohs
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
ret
call sub.kernel32.dll_GetConsoleWindow
cmp eax, 0xfffffeed
jne 0x401196
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.advapi32.dll_RegQueryValueA
call sub.ws2_32.dll_WSANtohs
call sub.ws2_32.dll_WSANtohs
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.ws2_32.dll_WSANtohs
call sub.ws2_32.dll_WSANtohs
call sub.ws2_32.dll_WSANtohs
call sub.ws2_32.dll_WSANtohs
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.advapi32.dll_RegQueryValueA
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff2c
jne 0x40121f
call sub.ws2_32.dll_WSANtohs
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.ws2_32.dll_WSANtohs
call sub.ws2_32.dll_WSANtohs
call sub.ws2_32.dll_WSANtohs
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.advapi32.dll_RegQueryValueA
call sub.kernel32.dll_GetProcessPriorityBoost
call sub.ws2_32.dll_WSANtohs
ret
jmp 0x4756e9
mov ecx, edi
add ebx, ecx
ror ebx, 0x1b
and edi, ecx
and ecx, edi
jmp 0x476411
pop ecx
and edi, edx
rol edi, 0xa
and edx, esi
sub edi, esi
not ebx
mov edi, esi
shr esi, 1
xor edi, ebx
ror edx, 0x1c
and edx, edi
mov ebx, 0xf6d2e4d6
xor edx, 0xf6d39ae5
jmp 0x478f5e
call ecx
or edi, ebx
xor ebx, edi
add ebx, 0xf6d5ffb3
sub edx, esi
dec ebx
add esi, ebx
or esi, edi
jmp 0x47906a
pop ecx
and edx, ebx
mov edi, esi
ror edx, 0x12
shr edi, 5
and ebx, esi
shr esi, 0x1f
neg edx
jmp 0x47610a
pop ecx
xor esi, ebx
dec edi
and edi, edx
add edx, ebx
add edx, 0xf728be6c
or esi, ebx
xchg ebx, esi
inc esi
sub edx, edi
xor ebx, edi
jmp 0x478b99
push 0xf49b4846
shl esi, 8
xor ebx, edi
or edi, esi
and ebx, esi
bswap esi
dec ebx
add edi, 0xf72f7c4f
or ebx, edi
add ebx, edi
or esi, edx
or esi, edx
bswap edx
rol esi, 0x1b
or edi, edx
neg edx
jmp 0x47680b
pop ecx
and esi, edi
mov edi, 0xf742b057
dec ebx
and ebx, edi
ror ebx, 0x1a
and edx, esi
mov edx, 0xf74520ca
or esi, ebx
mov edi, ebx
jmp 0x478c73
pop ecx
rol edi, 3
neg edi
xchg edi, edx
and esi, ebx
sub ebx, esi
dec esi
xor esi, edi
jmp 0x478e5a
push 0xf46e644d
or edi, esi
ror ebx, 0xe
neg ebx
shl esi, 1
and ebx, esi
xor edi, esi
or ebx, esi
xchg edx, esi
or ebx, edi
jmp 0x475db7
pop ecx
or ebx, esi
xor esi, edx
mov edx, ebx
and ebx, esi
add edi, ebx
shl esi, 8
mov edx, esi
and edx, edi
and ebx, edx
jmp 0x4781cf
pop ecx
and edx, edi
and ebx, esi
jmp 0x4786f4
push 0xf477e92d
inc esi
sub esi, ebx
or edi, edx
shr ebx, 3
mov ebx, esi
jmp 0x478a3b
pop ecx
bswap esi
bswap edx
xor edi, esi
sub esi, edi
or ebx, 0xf7a26b47
jmp 0x476603
push 0xf4a1e8cd
bswap edx
xor edi, ebx
neg edx
mov esi, edx
xor edx, esi
sub esi, 0xf7a87324
sub edi, edx
jmp 0x4782ab
mov ecx, 0x40495727
and edi, ebx
and esi, edx
mov ebx, edi
rol edx, 0x19
ror ebx, 0x13
or esi, edx
xor edx, 0xf7ab323a
shl edx, 6
shl esi, 0xa
add esi, edi
jmp 0x477d46
call fcn.0047672f
rol ebx, 0x14
xor edx, 0xf7ad187a
and esi, edi
add ebx, 0xf7add631
jmp 0x4778a8
pop ecx
mov edi, 0xf7b5209d
and edx, 0xf7b57557
xor edi, esi
xchg esi, ebx
xor edi, 0xf7b674b3
xor edi, esi
xchg esi, ebx
or edi, 0xf7b772ba
and edx, 0xf7b7dd28
and edi, esi
sub esi, ebx
shl ebx, 0x11
sub esi, edi
sub edx, ebx
add ebx, esi
not edx
jmp 0x478553
push 0xf47471fc
sub esi, edx
not edi
or edx, 0xf7c062ee
add edi, esi
add ebx, edi
rol esi, 9
or edx, esi
or esi, edx
xor esi, edx
xor edx, 0xf7c2c1ed
dec edx
nop
not esi
add esi, 0xf7c41b97
shl edi, 0xe
mov edi, 0xf7c4c6c2
jmp 0x476b3f
call ecx
add ebx, edi
mov edi, esi
dec ebx
add esi, edi
or edi, esi
mov edi, 0xf7cb157e
or edx, edi
mov edx, ebx
xor edi, esi
or esi, edi
or ebx, edx
xchg ebx, esi
jmp 0x476b74
pop ecx
add esi, ebx
xor edi, esi
inc esi
and edi, ebx
xchg esi, edi
sub edx, edi
ror edi, 0x1f
sub esi, edi
bswap edi
mov edi, ebx
jmp 0x478d92
push 0xf4846abf
sub edi, edx
xor edi, ebx
mov esi, edx
sub ebx, edx
bswap esi
add ebx, edi
or edi, esi
and edi, 0xf7ed1140
jmp 0x478b63
pop ecx
inc esi
shr edx, 0x1e
bswap edx
and edi, esi
shl edi, 0x1a
or edx, 0xf7ef49a0
mov edx, esi
xor ebx, edx
shr edi, 0x13
jmp 0x477280
pop ecx
xchg edi, edx
mov esi, edx
add edi, ebx
and edx, edi
xchg ebx, esi
shl esi, 0x12
add ebx, 0xf7fe43a8
and esi, 0xf7feae72
inc edx
xor esi, edx
jmp 0x476e88
push 0xf4a11cb4
mov edi, 0xf7ffd4af
nop
sub esi, ebx
inc edx
and edx, ebx
bswap edi
xor edx, 0xf801d32f
mov esi, 0xf802282d
and ebx, esi
sub edi, ebx
shl edx, 1
xchg esi, edi
xor edi, edx
jmp 0x475d9b
push 0xf4714623
sub ebx, edi
or edi, ebx
jmp 0x478b0f
call fcn.0047672f
mov esi, ebx
or edi, edx
add ebx, 0xf809672c
xor esi, 0xf809bdd8
ror ebx, 0x12
jmp 0x475f04
push 0xf484f10b
shr ebx, 0x17
and edi, edx
sub ebx, esi
and edx, ebx
xor edx, esi
or edi, esi
xor edx, esi
xchg ebx, edx
add edx, edi
xor esi, 0xf81882a6
xor edi, edx
jmp 0x478004
push 0xf494106f
and edx, esi
bswap esi
mov edi, ebx
add esi, edi
mov esi, edx
or esi, edi
add esi, 0xf81b3f94
neg ebx
mov esi, edx
and edx, edi
jmp 0x478bf0
mov ecx, 0x33274000
nop
add ebx, edi
or edi, esi
xor edx, ebx
or edi, ebx
jmp 0x477c11
call fcn.0047672f
xchg edx, edi
add edi, ebx
or esi, ebx
and ebx, edx
and edx, 0xf82b069e
and ebx, edx
mov edx, edi
sub ebx, edi
jmp 0x475721
push 0xf4842603
sub edi, ebx
and ebx, edi
add esi, edx
mov edx, 0xf83e6127
or ebx, edi
or esi, ebx
xor ebx, edi
sub edx, ebx
jmp 0x476036
push 0xf469bea4
and esi, edi
sub esi, edi
or edx, ebx
neg ebx
mov ebx, esi
xchg ebx, esi
sub ebx, edi
xor ebx, 0xf84ecdca
xor ebx, edi
xchg edi, esi
jmp 0x4775e9
pop ecx
shr edx, 0x1e
mov edx, edi
mov edx, edi
or edi, ebx
neg edi
xchg ebx, edi
add edx, edi
xor edx, edi
xchg edx, ebx
not ebx
xchg esi, edx
or esi, 0xf8603284
and ebx, edx
jmp 0x47741a
push 0x742e9
sub edi, ebx
and ebx, esi
shr ebx, 0x19
and ebx, edi
bswap ebx
neg ebx
rol edx, 0xc
mov edi, 0xf863647c
or esi, 0xf863ba38
sub edi, esi
nop
dec ebx
jmp 0x477f8c
pop ecx
mov ebx, esi
or edx, esi
and edx, ebx
not edi
sub edi, edx
rol edi, 0xe
jmp 0x4772a8
push 0xf47c4773
add edx, esi
mov edi, esi
inc edx
xor edx, edi
sub esi, 0xf88f00a0
add edx, 0xf88f5539
xor edi, 0xf88fac60
mov edi, esi
neg edx
sub ebx, edx
shr edx, 0x1d
add edi, ebx
jmp 0x47693e
push 0xf499b0fb
or edi, edx
sub esi, ebx
shr edi, 0xf
shr esi, 0x1f
jmp 0x4785d1
mov ecx, 0x33274000
add esi, edi
and ebx, esi
and esi, 0xf8b4cea1
and edi, ebx
sub ebx, edx
and esi, edx
sub edi, ebx
bswap edi
jmp 0x476fb9
push 0xf4779fe1
add ebx, esi
xor esi, ebx
or edi, 0xf8b7a7e7
and ebx, edx
bswap esi
neg edx
sub esi, ebx
sub edx, ebx
xchg edi, edx
jmp 0x475c5b
push 0xf46dd1cf
rol ebx, 0xc
bswap esi
xor esi, edi
ror edx, 4
sub edx, esi
and esi, ebx
xor esi, 0xf8c6c4b2
mov edi, edx
and edi, ebx
xor ebx, edx
or ebx, edi
not edx
jmp 0x4785fe
push 0xf47e5489
and esi, edi
or edi, edx
or edi, edx
xchg esi, edx
sub edi, esi
and esi, edi
dec esi
add ebx, edx
and edx, edi
jmp 0x4788e8
push 0xf47c9257
sub edx, ebx
and esi, ebx
and esi, ebx
jmp 0x4775bb
call fcn.0047672f
sub edi, esi
add edx, ebx
and ebx, 0xf8de362d
and edx, ebx
or edi, 0xf8df61e1
mov edi, esi
dec edi
neg edi
jmp 0x47897b
mov ecx, 0x40495727
sub edi, ebx
mov edx, 0xf8e5988d
and edx, ebx
sub ebx, edx
add edi, esi
add esi, 0xf8e6e42a
mov esi, edx
xchg edx, ebx
neg edi
and edi, 0xf8e84de8
xor edx, esi
shr ebx, 0x12
shr edi, 5
jmp 0x47837b
push 0xf483e4ad
and edi, esi
mov ebx, esi
shl edi, 0x14
shl edi, 0xb
sub ebx, edx
dec ebx
xor edi, esi
sub ebx, edi
or ebx, edx
or edx, edi
jmp 0x47637c
push esp
xchg edx, esi
and edx, 0xf8ef7f56
not ebx
xor esi, 0xf8f02c4c
sub edx, esi
or esi, edi
add edi, edx
not edx
sub edi, 0xf8f1e8bc
jmp 0x478465
pop ecx
sub edx, esi
xchg edi, esi
xor edi, ebx
and edi, esi
jmp fcn.00478b23
push 0xf474bb93
mov ebx, edi
or edi, 0xf90b0411
xor ebx, edx
neg edx
jmp 0x47802c
pop ecx
neg edi
add edi, 0xf9102314
or edi, esi
sub edx, 0xf910cc2d
rol esi, 7
xchg edi, esi
neg ebx
xchg edi, esi
inc esi
mov edi, esi
xchg edx, esi
and edx, ebx
inc edx
jmp 0x476e70
push 0xf470fc40
not ebx
mov ebx, edx
and esi, 0xf932aa45
xor esi, 0xf932f8ee
xor ebx, 0xf9333513
sub ebx, edx
sub edx, esi
inc edx
jmp 0x476137
pop ecx
shl edi, 4
xor edx, edi
or esi, edx
xor ebx, esi
xchg ebx, edx
mov esi, edx
xchg edi, ebx
xor ebx, edi
xor ebx, 0xf93a3ea1
and edx, 0xf93a7cf2
neg esi
xchg edi, edx
inc edx
jmp 0x476687
pop ecx
add ebx, 0xf93d7fd5
xor esi, edx
and edx, esi
xor edi, esi
sub edi, edx
not esi
or edx, ebx
add edi, esi
dec edi
add ebx, edx
jmp 0x477443
push 0xf47a3d9d
ror edi, 7
sub edx, 0xf9404d5b
or edx, ebx
inc edx
and edx, esi
shl edi, 9
mov esi, 0xf94183f2
mov ebx, 0xf941d29e
xor ebx, 0xf94211d5
mov edi, esi
xchg edi, esi
not edx
sub esi, edx
inc esi
or esi, ebx
jmp 0x47625d
pop ecx
xor edx, edi
xchg ebx, edi
or edx, esi
mov esi, edx
add esi, edi
xchg edx, edi
bswap esi
and esi, edx
xor edi, ebx
jmp 0x4756f9
pop ecx
rol ebx, 7
xor edx, edi
ror edx, 0x1d
or ebx, edi
sub esi, edx
ror ebx, 0x1e
or edx, edi
jmp 0x4767a4
call fcn.0047672f
xor edx, ebx
mov edi, 0xf96d9fd3
and edi, esi
sub ebx, edi
add ebx, esi
xor edi, esi
mov edx, esi
jmp 0x477edc
mov ecx, 0x33274000
sub edx, esi
xchg ebx, edx
shl edx, 0x14
inc edi
xor ebx, edi
mov edi, ebx
neg ebx
xchg ebx, esi
dec edi
add ebx, 0xf971724d
jmp 0x479025
pop ecx
rol edx, 9
shl edi, 0xb
mov edx, edi
xor ebx, edx
rol edi, 0x16
xchg ebx, edi
and edx, ebx
xchg esi, edx
xchg edx, ebx
sub ebx, esi
sub ebx, edi
add esi, 0xf9748120
jmp 0x476d01
pop ecx
and edx, edi
ror ebx, 0x10
mov esi, ebx
sub edi, 0xf97d3eb8
sub esi, edi
sub edi, ebx
xor edi, edx
or edi, 0xf97e443e
and edi, ebx
jmp 0x475a06
pop ecx
and edx, esi
and edi, 0xf98ac912
add esi, ebx
xor edx, 0xf98b4354
and edx, 0xf98b8234
shl esi, 4
xor edx, esi
sub edi, edx
xchg edx, esi
shl edi, 0xb
sub ebx, edx
bswap esi
xchg edx, ebx
sub esi, edx
xchg esi, edx
jmp 0x47621c
call fcn.0047672f
sub edi, ebx
mov edx, ebx
ror edi, 0x19
xor edx, edi
sub edi, 0xf9968987
mov edi, 0xf996c798
inc edi
add ebx, 0xf99745d2
and edi, ebx
sub edx, esi
jmp 0x477c2f
pop ecx
mov esi, edi
sub ebx, esi
dec edx
or edi, edx
jmp 0x47844e
mov ecx, 0x4132136a
nop
dec edx
xor ebx, esi
or ebx, esi
bswap edx
mov esi, edx
xchg edi, ebx
jmp 0x478c1d
mov ecx, 0x33274000
neg esi
or edi, ebx
mov esi, ebx
neg edx
sub esi, ebx
jmp 0x475ddd
push 0xf470b3ad
xchg edi, edx
or edx, 0xf9bfdb0e
xchg ebx, edx
or ebx, 0xf9c0585c
xchg ebx, edx
inc esi
ror esi, 0xa
and edx, ebx
shr edi, 9
mov esi, edi
and esi, edx
jmp 0x476cb2
pop ecx
ror edi, 0x18
mov edi, edx
sub esi, edi
bswap ebx
add edx, edi
shl ebx, 3
xchg edi, esi
jmp 0x478856
mov ecx, 0x33274000
xor ebx, edi
inc esi
xchg ebx, edx
xor edi, esi
not edi
mov edi, edx
ror ebx, 0x1a
xchg edi, edx
add esi, edx
xchg edx, esi
jmp 0x4771d9
push 0xf474278a
neg edx
dec edx
xor esi, edi
inc edx
jmp 0x475e9d
push 0xf46a1103
mov edx, ebx
inc esi
add edi, edx
or edi, edx
mov ebx, edi
add edx, 0xf9e17638
neg edi
sub esi, 0xf9e1f47f
xchg edi, ebx
or esi, edx
jmp 0x478782
push 0xf46aec52
xor esi, 0xf9f73093
add esi, edx
add esi, ebx
add esi, edi
ror edi, 0x17
or esi, 0xf9f87003
or ebx, 0xf9f8aff5
jmp 0x478356
push 0x40
neg edx
xchg edx, ebx
add edi, esi
xor edx, 0xfa0a01d2
and edx, edi
neg ebx
mov esi, edx
mov edi, 0xfa0b0796
jmp 0x4764d8
call ecx
or edx, esi
or ebx, esi
add edx, ebx
shl esi, 0x15
inc ebx
mov edi, ebx
or esi, edi
sub ebx, esi
and edx, edi
jmp 0x477ea4
call ecx
xchg esi, ebx
xor edx, 0xfa141cb6
mov esi, edi
jmp 0x4760e8
call ecx
or edx, esi
add esi, edx
not esi
xor ebx, edi
jmp 0x4781f4
push 0xf479f3b1
and edx, edi
add ebx, edi
add edx, 0xfa2e2fc7
and ebx, edi
and edx, ebx
xchg edx, ebx
or edi, esi
xchg esi, edi
xor edx, ebx
or edx, esi
and ebx, 0xfa3029ab
jmp 0x476d66
pop ecx
or edx, edi
rol edx, 1
xor ebx, 0xfa3626be
not edi
shr esi, 0x14
mov esi, ebx
shl edi, 0x16
sub esi, edi
sub esi, edi
sub esi, edx
add ebx, edx
and ebx, esi
mov edx, edi
mov edi, edx
jmp 0x4790f9
call fcn.0047672f
rol edi, 6
and edx, esi
sub ebx, edi
bswap ebx
shr esi, 0x13
or edx, esi
xchg edi, esi
or edx, ebx
sub edi, edx
jmp 0x47798a
call ecx
rol edx, 0x1d
xor edx, esi
and edx, edi
xor esi, edi
shr esi, 0x15
add edx, esi
or edx, esi
sub ebx, edx
add edi, 0xfa56a68a
jmp 0x4759a7
call fcn.0047672f
add ebx, edi
and esi, 0xfa6b1072
neg edx
shl edi, 0xa
and esi, ebx
xor esi, 0xfa6cc232
and esi, ebx
shr edi, 0x13
jmp 0x47901a
call ecx
mov edi, esi
shl edx, 0x1b
and esi, edi
or edx, ebx
xchg esi, ebx
or edi, edx
mov edi, 0xfa75803c
sub edx, esi
add edi, 0xfa75fcdf
or ebx, edx
not edx
or edi, esi
jmp 0x4758f4
pop ecx
or esi, edx
rol edi, 0x1b
or ebx, edi
shl esi, 0xf
mov edi, esi
bswap esi
rol esi, 0x1a
xchg edi, esi
add edi, ebx
add esi, ebx
jmp 0x475f85
call fcn.0047672f
and edi, edx
add edi, esi
shr ebx, 8
mov edi, ebx
jmp 0x477fe2
pop ecx
dec ebx
or esi, edi
xor ebx, esi
add edx, ebx
dec esi
dec ebx
not esi
add esi, 0xfa870188
ror edi, 0x1f
mov edx, 0xfa877ff8
neg ebx
jmp 0x475b78
call ecx
shl esi, 9
xchg ebx, edi
sub edx, esi
xchg ebx, esi
mov edi, ebx
add edi, ebx
and ebx, 0xfa8bee33
or edx, esi
mov esi, edi
jmp 0x475bc8
call fcn.0047672f
sub ebx, edi
add ebx, 0xfa94be9b
inc esi
neg esi
add ebx, edx
sub esi, 0xfa95b073
add edi, ebx
add edi, esi
or esi, ebx
or ebx, esi
dec edx
and edx, 0xfa9725e0
or esi, edi
nop
jmp 0x477874
push 0x401400
and ebx, edx
dec esi
sub edi, esi
rol esi, 0xd
add edx, ebx
xchg esi, ebx
mov esi, ebx
or edx, 0xfa99a928
or edx, esi
add edi, ebx
add ebx, 0xfa9a5b53
xor edi, 0xfa9a9908
jmp 0x478d6c
call ecx
and edi, ebx
and edx, edi
xchg esi, edi
neg ebx
bswap esi
xor edi, esi
and esi, edx
mov esi, edi
xchg edx, esi
and edx, esi
sub edx, 0xfaa05a6b
inc edi
jmp 0x478aed
mov ecx, 0x40495727
and edx, edi
shr edx, 0x1f
shl esi, 0x1b
mov edx, ebx
mov edi, 0xfaa1f25e
shr esi, 6
sub edi, esi
xor edx, esi
shr edx, 0xe
not edi
shr ebx, 0x1b
jmp 0x477e72
push 0xf4750504
and esi, edi
neg ebx
xor esi, edx
neg ebx
not edi
ror edx, 5
and esi, edi
or edi, edx
and esi, edi
jmp 0x4769d7
pop ecx
dec edx
mov esi, edx
xor esi, ebx
or edx, ebx
and esi, edx
sub esi, edi
and esi, 0xfac99373
or ebx, 0xfac9d23a
ror edi, 3
not esi
shl esi, 8
jmp 0x475e34
pop ecx
or esi, edi
and esi, 0xfacb2534
xchg edi, edx
shl edi, 6
and esi, edi
sub edi, ebx
and edi, esi
rol ebx, 0x12
add edi, ebx
dec edi
xor edi, esi
sub ebx, 0xfacd9c45
and edx, edi
jmp 0x476ff5
mov ecx, 0x40495727
sub edx, 0xfad8fe18
shl edx, 0x11
and esi, edi
xor edi, ebx
dec edi
sub ebx, 0xfada4568
and edx, esi
ror edx, 4
jmp 0x4762c9
mov ecx, 0x33274000
or esi, ebx
sub ebx, edi
shl esi, 0xf
xchg esi, edx
sub esi, 0xfae6e42b
shl ebx, 5
bswap esi
mov edx, 0xfae7a078
xor ebx, esi
jmp 0x476171
call fcn.0047672f
or edx, edi
xchg edx, ebx
not edi
and ebx, edi
and ebx, esi
rol esi, 0x17
xor esi, 0xfae9a83d
shr ebx, 0x16
neg ebx
jmp 0x477db6
pop ecx
xchg edi, ebx
mov esi, ebx
rol edx, 0x11
rol edi, 4
mov ebx, esi
sub edx, edi
shr edx, 6
jmp 0x4764b3
push esp
shl esi, 0x1f
xor ebx, edx
or esi, ebx
and ebx, edi
jmp 0x477815
push 0xf473ddc3
xchg edi, edx
xor edx, ebx
and ebx, edx
or ebx, 0xfb9e6a02
xchg edi, edx
mov ebx, edi
jmp 0x4775d9
push 0xf49a7c14
dec edx
add esi, edi
shl ebx, 0xa
add edi, ebx
jmp 0x475910
push 0xf46e1a4b
shl edx, 0xe
mov edi, 0xfba88749
xchg edx, esi
bswap edi
dec edi
and ebx, 0xfba983d6
or ebx, edx
shr ebx, 0xb
add edx, esi
add esi, ebx
add edx, ebx
and ebx, 0xfbabd12f
sub esi, ebx
neg ebx
jmp 0x475a39
pop ecx
mov ebx, 0xfbbe23a1
sub ebx, 0xfbbe6a72
mov edx, edi
bswap esi
or edi, 0xfbbf3e56
add ebx, edi
mov edx, esi
xor ebx, edx
mov esi, 0xfbc064c9
ror edi, 0x12
jmp 0x4758a1
push 0xf46a5b77
add edi, esi
xor edx, 0xfbcaeb8c
and edi, ebx
sub edi, edx
not ebx
mov esi, edx
mov edx, ebx
mov esi, ebx
sub esi, edi
not esi
or edi, esi
sub edi, ebx
mov edi, edx
mov esi, 0xfbce62b6
jmp 0x478900
pop ecx
sub edi, ebx
and edi, edx
xor edx, 0xfbdc3062
or edx, ebx
ror ebx, 0xc
add edi, 0xfbdceb5f
xor ebx, edi
shr esi, 1
jmp 0x47714b
push 0xf47e9fba
or esi, ebx
xchg edi, ebx
sub ebx, esi
mov ebx, edi
and edx, esi
not esi
or edi, esi
jmp 0x476fd4
push 0xf46aa4f9
add edi, ebx
and edx, esi
bswap ebx
or edi, ebx
and edi, 0xfc1684a3
mov edi, esi
and esi, edi
inc edx
xor edi, 0xfc178b63
ror edx, 0x10
sub edi, edx
xor edx, esi
dec esi
jmp 0x477727
call ecx
mov edi, 0xfc20f875
and edi, 0xfc215bbe
mov edx, edi
xor esi, edi
xchg edi, edx
xor esi, 0xfc23c99a
not edi
xor esi, edi
sub edx, ebx
and edi, esi
and esi, edi
add ebx, edx
jmp 0x477e1a
mov ecx, 0x33274000
mov edx, 0xfc31f623
sub edx, 0xfc323565
and ebx, edx
add edx, edi
add edi, ebx
mov edx, esi
xor edx, ebx
xchg edi, esi
xor esi, ebx
neg ebx
xor edi, esi
jmp 0x47698c
pop ecx
shl edx, 0x18
mov esi, ebx
xchg ebx, edx
sub edi, 0xfc3fddad
sub ebx, edi
or ebx, edx
mov esi, edi
nop
sub ebx, 0xfc411fb4
or ebx, esi
jmp 0x476d49
push 0xf47190ac
sub esi, edi
xchg edi, esi
dec ebx
add ebx, edx
shr edx, 0xd
jmp 0x478fa9
call ecx
neg edi
bswap ebx
xor esi, 0xfc471f70
mov edi, esi
jmp 0x475d68
push 0xf484ad24
shr ebx, 3
mov esi, edi
shr ebx, 0x17
nop
neg esi
and ebx, edi
add edi, esi
or edx, esi
xchg edi, edx
and esi, edi
and edi, esi
xor edx, ebx
jmp 0x4761f7
pop ecx
xor ebx, edi
add edi, ebx
add edi, 0xfc4c8eb1
mov esi, edi
or edi, 0xfc4d08a7
xor edi, edx
shr edx, 0x1a
shr edi, 1
mov esi, edi
shl edx, 3
bswap edx
jmp 0x477098
push 0xf494dd94
or ebx, edi
add edx, 0xfc521897
add ebx, edx
xchg esi, ebx
sub edx, 0xfc52dd4c
inc edx
xchg esi, ebx
not esi
rol ebx, 0x10
and esi, 0xfc541809
ror ebx, 2
jmp 0x477338
call fcn.0047672f
ror ebx, 7
dec edx
xor edx, esi
bswap ebx
or edi, 0xfc55aca9
mov ebx, esi
and esi, ebx
bswap edx
or esi, ebx
not edi
mov edx, 0xfc572eec
xchg edx, ebx
jmp 0x476a45
pop ecx
shr ebx, 0x19
sub ebx, esi
shr edi, 0x1e
add esi, 0xfc5b1ccf
xor esi, edi
jmp 0x4768fb
call ecx
and esi, 0xfc6c8f46
ror edi, 2
dec esi
and edi, ebx
xchg edi, esi
dec edi
and ebx, edx
xor ebx, 0xfc6e49e8
and ebx, esi
shr esi, 0x12
xchg edi, edx
inc edi
jmp 0x478f47
push 0xf479a877
or esi, 0xfc6f90c8
xor ebx, edx
and edx, esi
rol ebx, 0xf
mov edx, 0xfc7092a7
not edi
xor esi, 0xfc710e0d
or edi, edx
jmp 0x4779ff
pop ecx
sub esi, edi
xchg ebx, esi
mov ebx, edi
or ebx, 0xfc7ce108
add edx, edi
xchg edx, esi
sub edx, esi
add esi, edi
sub edx, edi
and esi, ebx
jmp 0x476829
pop ecx
inc edi
sub ebx, 0xfc8da6b3
xor esi, edx
and esi, ebx
and esi, ebx
and edi, ebx
sub ebx, edx
jmp 0x476a08
pop ecx
xor edi, 0xfc8f218b
bswap edx
rol edx, 0x14
add edx, edi
or edi, edx
mov edx, 0xfc905f3b
xor edi, ebx
shr edi, 1
or edx, 0xfc911570
jmp 0x477a7d
mov ecx, 0x40495727
and edi, ebx
sub esi, edi
or edi, esi
sub esi, edi
xor esi, ebx
xor ebx, edi
mov edi, esi
xchg edx, esi
not edi
or esi, ebx
sub edx, 0xfc9691c3
jmp 0x477f5d
call ecx
or edx, edi
and ebx, edx
jmp 0x476054
call fcn.0047672f
xor edi, esi
shr edx, 0x19
xchg edi, ebx
dec esi
or edi, esi
shl esi, 0xb
or edx, ebx
sub ebx, esi
mov esi, edx
add edi, ebx
xchg ebx, edx
rol edi, 0x12
shr esi, 0x1a
neg ebx
xchg esi, edi
jmp 0x478b50
pop ecx
sub esi, 0xfca2fe14
add edx, ebx
or ebx, 0xfca3768d
sub edx, ebx
or edx, esi
or edx, esi
xor edx, 0xfca466e1
neg ebx
or edi, edx
jmp 0x476ab5
push 0xf46d8742
xor ebx, edx
xor edi, esi
and esi, edi
ror edx, 0x1b
jmp 0x4768ab