Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetShellWindow
cmp eax, 0xfffffee5
jne 0x4010a2
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xfffffedd
jne 0x401130
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xffffff17
jne 0x4011b4
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_GetModuleHandleA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xffffff13
jne 0x40124c
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.advapi32.dll_SetNamedSecurityInfoExA
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.oleaut32.dll_OleLoadPictureFile
call sub.kernel32.dll_GetModuleHandleA
call sub.kernel32.dll_GetModuleHandleA
ret
jmp 0xa2281e
xor edi, ebx
xor edx, 0xdc35ff39
mov ebx, 0xdc361af1
neg ecx
jmp 0xa22f8a
pop esi
bswap edi
shr ebx, 0xa
inc ecx
and edi, edx
inc edx
and ecx, ebx
mov ecx, edx
xor edx, ebx
mov edi, ebx
mov edi, ecx
add edi, 0xe05ac27b
shl ebx, 0xc
add edx, ebx
sub edx, ebx
jmp 0xa24501
push 0xdc4221f3
add edi, ebx
xchg edx, ecx
xchg edi, ecx
inc edi
xchg ebx, ecx
shl ecx, 0x13
jmp 0xa23545
push 0xdc39a98f
or edi, edx
shr edx, 0x1b
mov edx, edi
or ebx, edx
and edx, ebx
xor edx, ebx
xchg ebx, edi
xor ecx, 0xe06076d5
or ebx, 0xe0609331
xor edx, edi
jmp 0xa22ab7
push 0xdc3cd611
add edi, edx
and edi, edx
or ebx, edi
mov edx, 0xe063bea1
sub ecx, 0xe06531a7
shl edi, 6
jmp 0xa248c9
call esi
bswap ebx
xor edi, ebx
sub ebx, ecx
mov edx, ebx
add edi, edx
and edi, ebx
xchg ebx, edi
sub ebx, edi
sub edi, ecx
and edi, ecx
or edx, edi
or ecx, edx
jmp 0xa234cb
push 0xdc39c789
and ecx, edi
add edi, ecx
ror edx, 0x14
mov edx, ebx
dec edx
not ecx
sub ebx, 0xe0ba796d
xchg ecx, ebx
mov edx, edi
or edx, ebx
sub edx, ebx
ror ecx, 1
mov ecx, edi
neg edx
jmp 0xa24555
pop esi
xor ecx, 0xe0be71cb
shr edi, 0xb
and edx, ebx
dec edx
xor edi, ebx
shr ebx, 0xf
xor ecx, edi
mov edx, ebx
and edx, edi
xchg edi, edx
jmp 0xa24a64
pop esi
mov edx, ebx
and edx, edi
sub ecx, edx
and ecx, edx
add ecx, edi
xor ebx, ecx
add edx, edi
xor ecx, edi
jmp 0xa22cb5
call fcn.00a228ec
sub ebx, edx
xor ebx, edi
bswap edi
shl edx, 0x12
mov edx, edi
mov edi, ebx
bswap edx
or edi, ebx
mov ecx, ebx
shl edx, 0xd
jmp 0xa24bc9
pop esi
and ebx, edx
add edx, ebx
xchg ebx, edx
mov ebx, ecx
xor ebx, edi
dec ecx
jmp 0xa2363a
push 0xdc414663
and ebx, 0xe0ccd305
xor ecx, edx
add ebx, edi
inc ebx
xchg ecx, edx
ror edx, 0xe
and edi, edx
and ecx, edx
dec ebx
xor edx, ecx
xchg ecx, ebx
xor edx, 0xe0ce0165
jmp 0xa24dd3
call esi
or edi, edx
and edi, 0xe0cf979b
xor edx, ecx
or edx, 0xe0cfcd13
xor edi, ecx
xchg ebx, ecx
and edi, edx
and ecx, edx
add ebx, 0xe0d057e1
xchg ecx, edx
jmp 0xa23315
push 0xdc3ea185
add edx, ebx
or edx, edi
dec edx
bswap ebx
xor ebx, ecx
mov edi, ecx
add edi, edx
xor edx, edi
or edi, edx
ror edi, 0x15
shr edx, 0x17
and edi, ecx
jmp 0xa239de
pop esi
bswap edx
rol edi, 0xe
dec edi
bswap ecx
mov edx, ebx
xor edi, ecx
bswap ebx
bswap ebx
jmp 0xa2550f
call esi
mov ebx, 0xe0da32fb
inc edi
ror ecx, 0x13
shr ebx, 0x10
sub ebx, ecx
shr edi, 0x1e
inc edi
xor edx, ebx
mov edx, ecx
xor edi, ebx
mov edi, ecx
xchg ecx, edi
jmp 0xa22b36
pop esi
ror ebx, 0xc
add edi, ebx
sub edx, 0xe0dbc617
dec ebx
and ecx, edi
add edi, ecx
not ebx
ror edi, 0x16
or edi, ebx
mov ebx, edi
shl edx, 1
neg ebx
sub edx, edi
add ecx, edx
jmp 0xa2459f
pop esi
and ecx, edi
xchg edi, ebx
nop
xchg edx, ebx
add ebx, edi
or ecx, edx
sub ebx, 0xe0dfc787
xchg ecx, ebx
xor edx, 0xe0dffd7f
and edx, 0xe0e0198f
xor edx, ebx
and ebx, edi
xor edi, edx
bswap ecx
jmp 0xa23af8
push 0xdc37fc7f
mov edi, edx
sub edx, 0xe0e2d0ff
xchg edi, ebx
and ebx, ecx
xor ebx, ecx
or edx, ebx
add edx, 0xe0e36f49
mov ecx, edi
add ecx, edi
or ecx, ebx
jmp 0xa2309e
pop esi
or ebx, ecx
rol edi, 0xc
shl edx, 0x1e
sub ecx, 0xe0e476f7
ror edi, 8
sub ebx, edx
or ecx, 0xe0e4cc61
mov ecx, edi
jmp 0xa24710
push esp
xor ebx, 0xe0e69453
and edi, 0xe0e6b0bf
xor edx, ecx
xor edi, ebx
mov ebx, 0xe0e70075
rol edx, 0x1f
dec edx
bswap ebx
xchg ecx, edx
mov ebx, 0xe0e790ad
jmp 0xa244af
push 0xdc4318d1
mov ebx, edx
nop
mov edi, ebx
xor edi, edx
add ebx, ecx
sub edi, 0xe0e83aff
xchg ebx, ecx
xchg edi, edx
inc edx
add edx, 0xe0e8ac55
jmp 0xa253fc
mov esi, 0x43370267
sub ecx, ebx
mov edx, edi
rol ebx, 3
xor edi, 0xe0ea8edf
not ecx
mov ecx, ebx
xchg ecx, edi
and ebx, edi
or ebx, ecx
sub ecx, ebx
or ecx, ebx
and edx, edi
and ecx, edx
mov ebx, edi
jmp 0xa241fb
mov esi, 0x43370267
xchg edi, ecx
neg edi
xor edi, ecx
and edx, 0xe0ec58bb
and edx, ebx
xor edi, ebx
inc ebx
xor edi, ecx
jmp 0xa24189
pop esi
xchg edi, edx
sub ecx, edx
mov ebx, 0xe0edf36f
shl edx, 0xe
add ecx, 0xe0ee2e1d
and ebx, edx
jmp 0xa23680
push 0xdc44ccb9
mov edi, ebx
or ebx, edi
xor edx, ecx
shl edx, 0xd
not ebx
or edi, edx
or ecx, edx
sub edx, ecx
jmp 0xa242d2
mov esi, 0x43370267
shl ecx, 0x1f
or ebx, edi
bswap ebx
xor ecx, ebx
and edx, edi
rol edx, 0x14
dec ebx
and edi, 0xe0f8c1df
or edx, 0xe0f8e12f
add ecx, 0xe0f8fd0b
shr edi, 0xb
or edx, edi
shl edi, 0x1b
xor ecx, 0xe0f96d1d
mov ecx, edi
bswap ecx
jmp 0xa2501d
push 0x62141e
shl edi, 2
ror ecx, 0xc
bswap ebx
add edx, ecx
shl edx, 0x17
dec ecx
add edx, ebx
mov ebx, edi
jmp 0xa2473b
call fcn.00a228ec
shr ebx, 0x15
ror edx, 0x14
sub ecx, 0xe0fc6b4f
or ecx, edx
xor edi, 0xe0fca093
inc edx
jmp 0xa251f2
push 0xdc3dad67
xor ecx, ebx
xor edx, 0xe0fd000b
mov edx, ebx
and ebx, edi
mov ebx, ecx
xchg ebx, edi
sub ecx, edi
and edx, edi
or ecx, edx
xor edi, ebx
dec edi
or edx, 0xe0fe103d
add ecx, ebx
or edx, edi
jmp 0xa254d6
pop esi
add ecx, ebx
nop
add edi, ebx
add ebx, edi
add edx, ecx
rol edi, 8
jmp 0xa23dba
push 0xdc3c0541
xchg ecx, edi
shl ecx, 0x1b
dec ebx
mov edx, 0xe1051593
add ecx, 0xe105353d
and ebx, edx
jmp 0xa2321a
mov esi, 0x43370267
add edi, edx
inc edx
neg ebx
sub ebx, ecx
and edx, 0xe106a0f5
ror ecx, 0x1d
xor ebx, 0xe106dbb3
mov ecx, edi
jmp 0xa24fef
push 0xdc44af61
mov edi, ecx
and ecx, 0xe10a5983
mov edx, ebx
inc ecx
neg edx
sub ebx, edi
jmp 0xa2315d
pop esi
bswap edi
add ebx, edx
xor ecx, ebx
not edi
mov edx, 0xe10f5155
or edx, 0xe10f75eb
dec ecx
mov ecx, ebx
jmp 0xa253d3
call fcn.00a228ec
mov ecx, edi
sub ecx, edi
and ebx, ecx
mov ecx, ebx
sub ecx, edx
xchg ebx, edx
jmp 0xa229f0
push 0xdc423ecb
add edi, edx
xor edi, 0xe169e43b
mov ecx, ebx
shl edx, 0xf
add edx, edi
shl edi, 3
jmp 0xa24b8d
call fcn.00a228ec
dec ecx
dec edx
not edi
mov edx, 0xe16f23cb
or ecx, edi
and edi, ecx
and edx, 0xe16f84bf
sub ebx, edi
jmp 0xa237ee
pop esi
and edi, edx
xchg edx, edi
neg edx
and ecx, 0xe1730b6d
or edi, ecx
add edx, edi
jmp 0xa23985
push 0xdc3e8357
add edx, 0xe17365af
mov edx, ecx
inc edx
rol ecx, 8
jmp 0xa22d7f
push 0xdc412965
or edi, edx
xchg edx, ecx
sub edx, ecx
mov ebx, 0xe175b511
inc edi
rol edx, 0x12
mov ecx, 0xe1760d8f
or ebx, edi
dec ecx
xor ecx, edi
sub ecx, ebx
and ebx, edx
jmp 0xa22d03
call esi
shr edx, 0x1b
sub edx, 0xe176d503
xchg edi, ebx
xor edi, ecx
add ecx, edx
and edi, ebx
xchg ebx, edx
and ecx, 0xe177771b
jmp 0xa23624
call esi
sub ecx, 0xe1779eff
add edx, ebx
or edx, edi
not edi
and edi, 0xe1780c0b
sub edx, ecx
sub ecx, ebx
and ebx, edx
xor edx, 0xe17877bf
or edx, ebx
jmp 0xa25362
push 0xdc3898d0
add ebx, 0xe17aa309
and ebx, ecx
sub edi, ecx
not edx
mov edi, 0xe17b1375
shl edi, 0x1a
neg edx
or ecx, edi
jmp 0xa24a34
call fcn.00a228ec
or edi, edx
mov ecx, edi
dec ecx
add edi, ecx
not ebx
ror edi, 0x1f
not edi
add edx, 0xe17f2a71
or edx, 0xe17f46b7
mov edx, ebx
and edx, edi
xor edx, edi
jmp 0xa23f50
call esi
sub ecx, edi
xchg ebx, ecx
add ecx, edx
xor edi, edx
dec ebx
rol edi, 0x1f
or ecx, ebx
sub edi, 0xe1816275
xor edx, 0xe1818277
xor edi, ebx
xor edi, edx
mov edx, 0xe181d22d
ror ebx, 6
sub edx, edi
jmp 0xa23c03
pop esi
xchg edi, edx
mov ecx, edi
ror ecx, 5
mov ecx, ebx
sub ecx, ebx
and ebx, edx
sub edx, ebx
xor edx, ebx
jmp 0xa23714
call esi
or edx, edi
xchg edx, edi
bswap edx
not ecx
inc ebx
shr edi, 4
rol edx, 0x11
sub edx, ebx
add ebx, ecx
or ebx, edi
jmp 0xa22f21
push 0xdc3b3125
and edi, edx
rol edx, 0x1a
mov ebx, ecx
bswap edi
or edx, 0xe188ffb1
xor edi, ecx
or ecx, 0xe18938cf
add ebx, edi
jmp 0xa240f8
call esi
add ebx, edi
and edx, ecx
xor ebx, ecx
inc edi
xor ecx, ebx
or ecx, edx
mov edi, ebx
xor ebx, edi
jmp 0xa2411f
pop esi
mov ebx, ecx
add edi, 0xe18d6e2f
ror edx, 7
and edx, ebx
bswap ebx
inc ebx
shr ebx, 5
sub edi, 0xe18e367b
xor edx, 0xe18e567d
mov ecx, edx
jmp 0xa22eba
push 0xdc3ebe83
and edi, edx
not edi
shr ebx, 0x1f
sub ebx, 0xe190a995
xchg ecx, ebx
add ebx, edx
dec edx
mov ecx, 0xe191120f
bswap edi
or edi, ecx
add edx, edi
sub ecx, 0xe191826b
jmp 0xa24300
call esi
dec ebx
dec edi
xor ecx, 0xe1929667
shr edx, 0xc
sub ecx, 0xe19400ff
xchg edi, edx
xchg edx, edi
bswap ebx
and ecx, edi
sub edi, 0xe1954b3b
dec edx
mov ecx, 0xe1958303
dec ebx
rol edi, 0x13
jmp 0xa247ac
pop esi
or ecx, 0xe1a4e94f
mov ebx, edi
sub ebx, ecx
and ecx, ebx
xchg ebx, ecx
xchg edx, ebx
sub ebx, edi
xchg ebx, edi
or ebx, 0xe1a5ff0f
sub ecx, 0xe1a62795
jmp 0xa24862
pop esi
add ebx, 0xe1b011f3
and ebx, ecx
sub edx, edi
or ecx, edx
bswap ebx
sub edi, 0xe1b0c68b
and ebx, edx
and edx, 0xe1b10d75
jmp 0xa24f88
pop esi
not ebx
mov edi, 0xe1b63943
add edx, 0xe1b65a8b
sub ebx, ecx
not edx
xor edx, 0xe1b6c8c9
bswap edx
and ebx, edi
mov edx, 0xe1b73aaf
and edx, 0xe1b76117
jmp 0xa248e7
push 0xdc3b1375
xor edx, ecx
sub ecx, 0xe1bab3b9
not edi
xchg edi, ebx
or edx, 0xe1bb23ff
mov edx, ebx
xchg edx, ebx
mov ebx, edi
neg ebx
add edx, edi
jmp 0xa238da
push 0xdc3af545
mov edx, ebx
bswap ebx
dec edi
bswap ecx
not ebx
xchg ebx, edx
xchg edi, ebx
xor edx, ecx
mov ebx, 0xe1bd30c1
xor edx, 0xe1bd54d9
ror ecx, 3
mov ecx, ebx
add ecx, edi
sub ecx, ebx
sub edi, edx
mov ebx, ecx
jmp 0xa23d0e
pop esi
inc ebx
shl edx, 0x1b
or ecx, ebx
and edi, edx
add ebx, ecx
and edi, 0xe1c9c91d
sub edi, ecx
xchg edi, ecx
add ecx, 0xe1cc0fb3
xor ebx, 0xe1cc3327
xchg ebx, edi
or ebx, 0xe1cc7aa3
and edi, ecx
ror edi, 0x15
jmp 0xa24c7a
push 0xdc3cb8bb
add edx, ecx
sub ebx, 0xe1ffd9e9
add ecx, edi
add ecx, 0xe2000d43
xor ebx, edx
or ebx, edi
sub edx, 0xe2005d53
add ecx, edi
or edx, 0xe20ffadb
and edx, edi
mov edx, ebx
dec edx
or edi, ebx
and ecx, edi
jmp 0xa22937
call fcn.00a228ec
inc ebx
and ecx, ebx
mov edi, 0xe23622fd
xchg ebx, edx
jmp 0xa236c7
push 0xdc38d48b
add ebx, 0xe2366577
and ecx, 0xe23681d1
xor ecx, edi
and ebx, edx
add edi, edx
sub ecx, edx
xor ecx, edx
xchg ecx, edx
not edx
nop
add edx, ebx
add edx, 0xe2378ed9
jmp 0xa25464
call esi
rol edx, 0x16
add ecx, edx
not edi
add edx, ecx
xor ebx, ecx
add ecx, 0xe23bca21
mov edx, ebx
add edi, edx
and edi, 0xe23c1847
xor ecx, 0xe23c3425
jmp 0xa24faa
mov esi, 0x43370267
xchg edi, edx
shr edx, 0xe
sub ebx, edi
xchg ecx, edx
not edx
inc edi
and ebx, 0xe23fdafb
add edx, 0xe23ff765
mov edx, ecx
xor ebx, ecx
mov edi, ecx
xor ecx, ebx
jmp 0xa235cd
pop esi
add edx, edi
mov edi, ecx
rol edx, 0x16
nop
xor edi, ebx
mov edi, ecx
jmp 0xa23d34
push 0xdc43d501
rol edi, 0xe
mov ebx, ecx
xor ebx, edi
dec ecx
mov edx, ebx
or edx, ebx
jmp 0xa23fcb
mov esi, 0x43370267
mov edx, ecx
or edx, ecx
add ecx, edi
add ecx, 0xe248adaf
shr ecx, 0x10
and edi, ebx
xchg edx, ecx
mov edx, ecx
or edx, 0xe24937ff
xor edi, ecx
jmp 0xa24baf
pop esi
xor edx, edi
add edx, ebx
add edx, ecx
add edi, 0xe249c297
mov edx, edi
sub ecx, ebx
rol edx, 0x13
sub edx, ebx
not ecx
neg edx
jmp 0xa22856
call fcn.00a228ec
xor edx, edi
add edx, ebx
add edx, 0xe24d65a1
or ecx, 0xe24d7e31
rol edi, 7
add edx, edi
mov edi, ecx
xor ecx, ebx
mov ecx, edx
sub edi, ebx
jmp 0xa24924
call fcn.00a228ec
add edx, ecx
add edi, ecx
xchg edi, ecx
or ecx, edx
sub ecx, edx
mov edx, 0xe2912453
jmp 0xa236a7
push 0xdc44ed13
mov edi, ebx
sub edi, edx
add ebx, 0xe29973f7
bswap ecx
mov ecx, 0xe299c4f3
shl edi, 2
xor edi, 0xe29a13bd
or edx, 0xe29a39a7
add edx, ebx
and edi, edx
jmp 0xa244d9
push 0xdc3edfb7
or ebx, ecx
bswap edi
add edi, ecx
mov ecx, edx
or ecx, 0xe29b4091
xor edi, ebx
and edi, ecx
add edx, ebx
ror edi, 0x16
or ebx, edi
jmp 0xa2564c
call fcn.00a228ec
xor ecx, edi
add edx, edi
xor edi, edx
xor ecx, edx
jmp 0xa2388c
mov esi, 0x4132136a
sub edi, edx
and edi, 0xe2ab6c0f
mov ebx, 0xe2ab9399
rol edx, 0x16
or edi, 0xe2abe305
add ecx, edx
or ecx, edi
xchg ecx, ebx
mov edi, 0xe2ac70ed
not edi
or ebx, edi
mov edx, 0xe2acdf05
jmp 0xa2525a
push 0x40
and edi, ecx
add ecx, 0xe2aef1c1
xchg edi, edx
mov edx, ecx
jmp 0xa23257
push 0xdc450a45
xor edx, ecx
shl ebx, 0x17
xchg ecx, edi
rol edx, 7
neg edx
add ecx, edi
mov edx, edi
or edx, edi
xchg edx, ecx
xor edi, 0xe2b13a75
xchg ecx, ebx
xor edi, ecx
jmp 0xa23073
pop esi
rol edx, 0x1d
and ebx, edi
sub ebx, 0xe2b1f3e5
rol ecx, 0x1e
and edx, 0xe2b239f7
xchg ebx, edx
add ebx, ecx
mov ebx, edx
sub edi, ecx
add edi, edx
jmp 0xa22910
mov esi, 0x43370267
add ebx, ecx
mov ebx, edx
or ebx, edx
mov edx, ecx
add ebx, 0xe2b4703d
inc edi
jmp 0xa251af
push 0xdc39e5b9
add edx, ebx
sub edx, 0xe2b4e983
mov edx, ecx
ror edx, 0x1c
sub ecx, ebx
mov edi, edx
mov edi, edx
or ebx, edi
dec edi
mov ebx, 0xe2b5f68b
jmp 0xa249c0
pop esi
add edi, edx
xchg ebx, edx
mov ecx, edi
sub edi, 0xe2b87d49
xor edx, edi
or ebx, edi
xchg edx, ecx
mov edx, 0xe2b908bb
mov ebx, 0xe2b92b0d
and edx, ebx
rol edi, 5
bswap ecx
jmp 0xa25563
pop esi
mov edx, 0xe2c8f4e7
xor ebx, ecx
add edi, 0xe2cb3bd5
dec edx
mov ebx, ecx
xor edi, 0xe2cba101
add edx, edi
shr ecx, 0xe
jmp 0xa233aa
push 0xdc4200cf
and edi, ecx
add ebx, edx
or ebx, edx
inc edx
sub ebx, edi
xor ebx, ecx
shr ecx, 0x16
or ecx, edx
rol ebx, 3
or ebx, edi
xchg ecx, ebx
or ebx, edx
xchg edx, ebx
add ebx, ecx
sub ecx, edi
bswap ecx
jmp 0xa2287c
push 0x401400
xchg edx, ebx
sub edx, ecx
sub ecx, edi
xchg ecx, edx
add ecx, 0xe2d78bf3
sub edi, ebx
neg edx
xor ecx, edi
xchg ecx, edi
sub edx, edi
add edx, 0xe2d85dcd
sub edx, ecx
jmp 0xa24c3c
pop esi
and ecx, edx
add ebx, ecx
xchg ecx, ebx
ror edi, 0x16
mov edi, ebx
xor edx, ecx
shl edx, 0xe
shr edi, 0x17
mov ecx, edx
xchg ebx, edx
rol ecx, 0x1f
add ecx, edi
mov ebx, edx
mov ecx, edx
jmp 0xa249fa
pop esi
not edx
mov ebx, edx
mov edi, ebx
add ebx, 0xe2e3fcd9
inc ebx
xchg ecx, edi
rol edx, 0x13
dec edx
shr edx, 7
not edx
not ebx
sub edx, ebx
jmp 0xa22df7
pop esi
or edx, ecx
xor ecx, edi
xor edx, 0xe2e6ef6f
add ebx, edi
rol edi, 0x1d
and ecx, 0xe2e756b9
mov ebx, edx
and ecx, edx
jmp 0xa232c5
mov esi, 0x43370267
and ebx, edi
xchg ebx, edi
not edx
or ebx, edx
sub edx, ebx
and edi, ebx
xchg ecx, edx
dec ecx
and edx, edi
shl ecx, 0xe
jmp 0xa232a6
pop esi
or edx, ecx
sub ebx, ecx
mov edx, edi
and edi, edx
mov ebx, ecx
mov ecx, edi
sub edi, 0xe2e9e45b
sub edi, ecx
add ecx, edx
add ecx, edx
xor edi, edx
shr edi, 2
xor edi, ecx
xor edx, edi
bswap edx
xchg edi, ebx
jmp 0xa248aa
call esi
sub ecx, edi
sub edx, edi
add ecx, edx
xor ebx, edi
dec edi
add edx, edi
mov edi, edx
xchg ecx, edi
jmp 0xa2381d
push 0xdc448e63
xchg ecx, edx
shl edx, 0xc
sub edi, 0xe2ed4abf
mov edi, edx
bswap ebx
xor edi, 0xe2edc66d
shl ebx, 0x14
or ecx, 0xe2ee1d95
jmp 0xa2346a
push 0xdc3a0369
xor ebx, ecx
ror ebx, 0x14
xor ebx, 0xe2f34989
and edx, ecx
jmp 0xa2453c
push 0xdc3c9a33
xor edx, ecx
mov edi, ecx
shl ebx, 0x19
xchg ecx, edi
xor ebx, edx
xor ecx, edx
xchg ebx, edi
and ecx, ebx
xchg edx, ebx
add ecx, edx
inc edx
add edi, 0xe2f62da3
jmp 0xa23e38
push 0xdc38b681
mov edx, 0xe2f78487
add ebx, edx
ror edi, 0x1c
xor ecx, edx
xchg ecx, ebx
inc ecx
rol edx, 2
or edi, ebx
xor edi, ebx
xor edx, ecx
add ebx, edx
ror edi, 0x1e
xor ebx, edx
xchg edx, edi
or edi, ecx
shr edi, 4
jmp 0xa23eb9
pop esi
ror edi, 0xd
add ecx, edi
xchg ebx, edi
nop
xor ebx, 0xe2fa447b
or edi, ebx
xchg edx, ecx
mov ecx, ebx
nop
xor ebx, 0xe2faf50d
add ebx, edi
inc ebx
jmp 0xa24625
mov esi, 0x43370267
add ebx, ecx
ror edx, 8
xor edx, 0xe303e0f5
or edi, 0xe30405bf
xchg edi, ebx
and edi, ecx
xchg ebx, ecx
inc ecx
add edx, ecx
ror ecx, 0x16
jmp 0xa24323
pop esi
xchg ecx, ebx
or ebx, edx
and ecx, edx
or edi, edx
xor ecx, 0xe3059169
add ecx, 0xe305b363
xor ecx, ebx
xor ebx, edx
xor edx, ecx
mov edi, ecx
jmp 0xa23028
mov esi, 0x43370267
or edx, ebx
and ebx, edi
xchg ebx, edx
ror edx, 2
mov ecx, ebx
neg ecx
and edi, ebx
and ebx, edi
add ecx, edi
and edi, ecx
xchg ebx, ecx
inc ecx
jmp 0xa234e7
call fcn.00a228ec
bswap edi
and ecx, 0xe3082e4f
shl ebx, 0x1d
mov ecx, 0xe3087b9f
jmp 0xa22e97
call esi
inc ebx
rol ecx, 0x10
ror ebx, 0xd
mov ecx, 0xe30921a7
xchg edx, edi
mov edi, ecx
jmp loc.00a2415e
push 0xdc4624f3
ror edx, 0xd
xor edx, edi
or edi, edx
and edx, ecx
dec ecx
ror edx, 0x13
or edi, edx
and edi, ebx
xchg edx, ecx
add edi, ecx
jmp 0xa25581
call esi
or edx, ebx
or edi, ecx
sub ecx, ebx
and edi, 0xe31412c9
or edi, 0xe315e807
xor ecx, edx
not ecx
xchg edi, ebx
jmp 0xa230dc
pop esi
sub edi, ebx
add ecx, edi
sub ecx, edi
and edi, ecx
neg ecx
mov ecx, edx
and ebx, 0xe3194cbd
dec edi
jmp 0xa24030
push 0xdc43b4db
and edx, edi
xchg edx, ebx
xor edi, ebx
sub edx, 0xe38fc1ed
bswap ecx
shr edi, 0x16
xor ebx, edi
ror edx, 8
mov ebx, edx
mov edx, ebx
bswap ebx
sub ebx, 0xe3941d8f
jmp 0xa240b0
mov esi, 0x43370267
add edi, ebx
neg ebx
xor ecx, ebx
ror ebx, 0x1c
sub ebx, ecx
xor edi, ecx
add edi, edx
xor edx, ebx
shr ebx, 8
sub edx, ebx
and ebx, edi
and edi, ecx
jmp 0xa2379d
pop esi
xor ebx, ecx
mov edi, edx
sub edi, edx
sub edi, ebx
add edi, 0xe3beaae9
add edx, edi
not ebx
or edi, edx
mov ebx, ecx
add ecx, edi
sub edi, ecx
xchg ecx, edi
jmp 0xa2493a
pop esi
add edx, ebx
sub edx, 0xe3bfcf7f
mov edi, ecx
rol edi, 0xe
jmp 0xa22fb0
call esi
sub ecx, 0xe3c03ea9
mov ecx, 0xe3c05edf
add ebx, 0xe3c07ead
add edi, 0xe3c09e7b
mov edx, edi
and ebx, 0xe3c0e01d
sub ebx, edx
add edx, 0xe3c12315
mov ebx, ecx
or edi, ecx
jmp 0xa22c68
call fcn.00a228ec
xor ebx, 0xe3c18de1
or edx, ebx
xor ecx, edx
add edi, 0xe3c1ea65
add edx, edi
mov edx, ebx
xor edi, edx
and edi, ebx
and ecx, edi
bswap edi
and edx, edi
or edi, 0xe3c2e439
jmp 0xa24fbd
call fcn.00a228ec
add edx, 0xe3c3147b
add ecx, edi
xor ecx, edi
ror ebx, 0xa
add edi, ebx
xor edi, edx
or ecx, edi
sub ecx, 0xe3c3fb29
xchg edi, edx
not edi
xor edi, ebx
mov edx, 0xe3c47bd3
jmp 0xa23a29
call fcn.00a228ec
bswap edi
and ecx, edi
mov ebx, edx
sub ecx, 0xe3d1a969
dec ebx
and ecx, edi
xor ecx, 0xe3d20a5b
sub edx, edi
inc ecx
xchg edx, ecx
mov ecx, edi
sub ecx, edi
jmp 0xa22d58
call esi
add ebx, edi
add edx, ecx
rol ecx, 0xb
or ebx, 0xe3d40edf
mov edx, ebx
xor edi, edx
ror ecx, 0x10
xor ebx, edi
inc edi
add edx, ebx
jmp 0xa23c92
call fcn.00a228ec
neg ebx
and ecx, ebx
add edi, ecx
nop
bswap edx
sub ebx, edi
rol edi, 6
neg edi
or edi, 0xe3d8af3f
sub ecx, edx
jmp 0xa25628
pop esi
inc edx
xchg ecx, ebx
mov ebx, edx
xchg ebx, edx
ror ecx, 5
xchg edx, ecx
mov edx, edi
add ecx, 0xe3e38aeb
xchg edi, edx
xor edi, 0xe3e3ce51
jmp 0xa24d70
pop esi
rol ecx, 7
add ebx, edx
and edx, 0xe3e6e799
or ecx, 0xe3e7093b
sub ebx, 0xe3e72b8d
ror edx, 0xf
xor ecx, ebx
ror edi, 0x10
xor ecx, edx
xchg ecx, ebx
jmp 0xa24b6b
mov esi, 0x43370267
neg ebx
or edx, edi
bswap edx
rol edi, 0x17
sub ebx, 0xe3e883ed
or ebx, 0xe3e8a33d
or ebx, edx
or ecx, 0xe3e8e9cb
xchg ebx, edi
mov edi, ecx
jmp 0xa23ea5
mov esi, 0x43370267
and ebx, edx
mov ecx, 0xe3e972c5
or ecx, edx
mov edx, ecx
jmp 0xa22c95
mov esi, 0x43370267
xor edi, edx
or ecx, edx
and edi, 0xe3ebb797
xchg ecx, edi
add ecx, edx
add edi, ebx
or edi, ebx
and edi, 0xe3ec4e27
add ecx, edi
not ebx
jmp 0xa2548a
call fcn.00a228ec
sub edi, edx
and edi, 0xe3ece275
sub edi, ebx
mov ebx, 0xe3ed22c1
and edx, ebx
xchg edx, edi
xchg edx, edi
xor edx, ecx
rol ecx, 0xc
neg ecx
jmp 0xa2394a
push 0xdc3dcb61
xchg edi, edx
shl edi, 2
or ecx, 0xe3ef7b45
add ecx, 0xe3ef9843
or edi, ecx
or edx, ebx
jmp 0xa233e1
pop esi
add edi, ebx
add ecx, edi
neg ebx
xchg ecx, edi
and ecx, edx
xor ebx, 0xe3f1ef4d
rol edi, 0x1d
xor ebx, edi
add ecx, 0xe3f252db
add edx, ebx
jmp 0xa24459
pop esi
dec ecx
add edx, edi
ror edi, 0xf
xchg edx, edi
or edi, ecx
rol ecx, 6
inc ecx
or edi, 0xe3f51197
xchg edx, edi
xchg edx, edi
jmp 0xa24bf0
push 0xdc4644cf
mov edx, edi
or ebx, edx
and edi, edx
xchg ebx, edx
neg ebx
ror ebx, 0x1f
xor edx, 0xe3f644af
xor edx, ebx
or ebx, edi
and ecx, ebx
jmp 0xa25427
push esp
shl ecx, 4
dec ecx
mov edx, 0xe3fbe5d5
inc edi
add ebx, edi
add edx, ecx
dec edi
shl edx, 0xc
and ebx, edx
mov edi, ebx
xchg edx, ecx
and edi, 0xe3fd0245
jmp 0xa23000
push 0xdc3efcd9
add ecx, ebx
or ebx, 0xe3fd4f3d
shl ecx, 9
or ebx, edi
xor edi, 0xe3fdb49d
and edi, ecx
add edx, edi
xchg edi, edx
not edi
rol edi, 0x19
jmp 0xa24b44