Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xffffff04
jne 0x40107f
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff16
jne 0x401103
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
ret
call sub.user32.dll_GetCapture
cmp eax, 0xfffffef0
jne 0x401182
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xfffffee6
jne 0x4011f7
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
ret
call sub.user32.dll_GetCapture
cmp eax, 0xfffffeee
jne 0x401294
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.advapi32.dll_SetEntriesInAccessListW
call sub.ntdll.dll_NtSetInformationKey
call sub.ntdll.dll_NtSetInformationKey
call sub.advapi32.dll_SetEntriesInAccessListW
ret
jmp 0x4753a7
dec edi
jmp 0x4785e1
pop ecx
add esi, 0x57f56168
or edx, edi
sub edx, 0x57f5a068
xor ebx, 0x57f5c612
jmp 0x4783d4
pop ecx
sub esi, ebx
xor edx, edi
xor edx, edi
neg edx
and esi, 0x57f67f22
add edi, ebx
jmp 0x477e35
pop ecx
or edx, esi
and esi, ebx
or ebx, esi
mov edx, ebx
or ebx, edx
sub edi, edx
jmp 0x4768a3
push 0x57745f66
and edi, ebx
mov esi, ebx
xor ebx, esi
and esi, ebx
rol ebx, 6
inc esi
or edi, ebx
xchg edx, esi
xor edx, esi
xor edi, esi
jmp 0x476042
push 0x5773e43e
or edx, esi
ror esi, 0xa
sub esi, edi
xor edx, ebx
or edi, 0x58040e60
nop
or edx, edi
mov esi, ebx
mov esi, edi
neg esi
sub ebx, 0x5804d1ae
neg esi
add edi, edx
or edx, edi
jmp 0x477bf3
push 0x576b0dac
xor esi, edx
and edi, esi
xchg edi, ebx
or ebx, esi
sub ebx, esi
mov esi, edx
xor esi, 0x580614d4
not edi
sub esi, ebx
and esi, edi
dec edi
shr edx, 0x1b
jmp 0x47777d
push 0x5775d01a
bswap edx
or esi, 0x58081c66
inc ebx
or edi, 0x580864c4
jmp 0x476d03
pop ecx
neg ebx
and edx, ebx
xor edx, edi
xchg edx, ebx
and edi, esi
add esi, ebx
jmp 0x4767a3
pop ecx
or edi, 0x580f7f48
dec esi
mov edi, esi
xor ebx, edi
or edx, esi
mov edx, ebx
xor edx, edi
sub ebx, edi
jmp 0x4763eb
pop ecx
neg ebx
xchg esi, ebx
dec edi
not ebx
ror ebx, 8
xor edx, esi
jmp 0x4763a0
call fcn.00475669
sub edi, esi
xchg esi, ebx
mov edx, 0x5817902a
sub edx, ebx
sub edx, ebx
rol ebx, 0x19
jmp 0x477938
pop ecx
and edx, 0x5820dd50
add ebx, edi
or ebx, edx
shr ebx, 3
shr edi, 4
or ebx, esi
mov edx, 0x5821ac6c
bswap ebx
xchg edx, ebx
neg edi
xor edi, esi
or ebx, edx
or esi, 0x5822524a
sub esi, 0x58226d5c
jmp 0x4762f1
mov ecx, 0x246e6c30
mov edx, edi
not ebx
or ebx, edi
bswap edi
rol esi, 7
and edi, esi
mov edi, esi
mov esi, edi
not edi
xchg edi, ebx
jmp 0x478593
pop ecx
xchg edi, ebx
shr ebx, 0x19
and edx, edi
sub edi, esi
sub ebx, 0x582d483e
dec edx
jmp 0x475aa8
call ecx
or edi, ebx
add edi, edx
sub edx, ebx
sub edi, 0x582f67f8
xor edi, 0x582f8208
and esi, edi
jmp 0x4770d6
pop ecx
or esi, ebx
or esi, edi
inc ebx
dec edi
xchg ebx, esi
or edx, edi
xor ebx, edi
or ebx, esi
xchg edi, ebx
bswap edx
jmp 0x476f7e
push 0x5776c8ac
not edi
or esi, ebx
xor ebx, 0x583ea87a
and esi, edx
add esi, ebx
add edx, ebx
xchg edx, ebx
mov esi, 0x583f2c52
add ebx, esi
xor edi, edx
jmp 0x477269
call fcn.00475669
mov esi, edx
or edx, esi
or esi, ebx
mov ebx, edi
xor ebx, edx
shr ebx, 5
or edi, edx
and esi, edx
mov esi, 0x584057c0
shl ebx, 7
jmp 0x475fe6
push 0x576d6054
nop
and esi, edi
or esi, edx
sub edx, edi
neg edi
dec ebx
jmp 0x477c59
pop ecx
mov edi, edx
sub edi, edx
xor esi, ebx
not edx
xchg edx, ebx
and edx, esi
jmp 0x4775f8
push 0x576dba92
dec esi
xor ebx, edi
xor edi, edx
xchg edi, edx
mov ebx, 0x5848f90e
and edx, esi
sub edi, edx
or edi, 0x584948fa
jmp 0x4758d7
pop ecx
or esi, edx
add edx, esi
xor edx, ebx
or ebx, edx
add ebx, edx
sub esi, ebx
xor esi, 0x585db4a8
shl ebx, 9
jmp 0x4784fb
pop ecx
inc esi
and ebx, 0x585f3302
add ebx, edi
shl edx, 0x11
mov ebx, edx
xor esi, 0x585fc31e
dec esi
or esi, edx
or edi, ebx
inc ebx
inc esi
shl ebx, 0x13
jmp 0x477b71
mov ecx, 0x246e6c30
add edx, edi
and ebx, 0x58631414
shl edi, 7
bswap ebx
mov edi, 0x586385a0
xchg edi, edx
jmp 0x476fd6
push 0x576f9a58
xor esi, 0x5863cb84
xchg edx, edi
ror esi, 0xc
mov edi, 0x58641de2
or edx, edi
xchg esi, edx
add edx, ebx
bswap ebx
mov ebx, edi
sub edi, 0x5864bd00
jmp 0x478140
pop ecx
neg ebx
xor esi, edx
not esi
xor esi, ebx
not edx
shr edi, 0x1b
or edx, esi
xor edx, edi
jmp 0x478332
push 0x577126d6
xor edi, 0x586f98e6
and edi, edx
shl ebx, 0x14
and edi, 0x586fe60c
xor esi, ebx
inc esi
sub edx, esi
mov edx, ebx
jmp 0x47638a
call ecx
nop
sub esi, 0x58709aa2
or edx, ebx
add esi, ebx
jmp 0x477227
mov ecx, 0x246e6c30
xor edi, edx
neg edx
neg edi
xor ebx, 0x5872fcda
not edx
add edi, 0x58733630
sub esi, ebx
xor esi, 0x58736ce8
shl edx, 7
and ebx, edi
jmp 0x4773e1
push 0x577422b4
and edx, 0x5873c74a
mov edx, edi
add edx, 0x5873fa96
sub edi, 0x58741552
or edi, edx
not edx
xchg edx, edi
mov edi, ebx
jmp 0x476d65
call fcn.00475669
add ebx, 0x5874a756
sub esi, 0x5874c278
or edi, edx
or edi, esi
and ebx, 0x587515c4
or ebx, edx
or edx, esi
xor ebx, esi
mov edx, 0x58757cdc
mov esi, ebx
jmp 0x47837a
push 0x57770426
or esi, ebx
mov edi, 0x5879d55a
dec edi
and ebx, edi
sub edx, 0x587a3c0c
not edx
xor ebx, edi
nop
inc edx
rol edx, 4
jmp 0x477acd
mov ecx, 0x246e6c30
xor edx, 0x587f17fe
dec edx
xor edx, 0x587f62f8
sub esi, 0x587f7d8a
or esi, edi
or edi, ebx
jmp 0x477133
mov ecx, 0x246e6c30
and edi, edx
sub edx, edi
xor ebx, esi
shl edi, 0x13
mov edi, 0x588397a4
rol edx, 0x18
sub ebx, esi
or edx, edi
mov ebx, esi
sub edi, esi
jmp 0x476a62
pop ecx
and edx, 0x58844074
add edx, 0x588460f4
rol esi, 0xe
shl esi, 0x18
dec edx
and ebx, 0x5884cf6a
xor ebx, edi
dec edx
jmp 0x476378
push 0x5770e988
xor esi, 0x5886e216
xor edx, edi
xor edx, esi
and edx, edi
not edi
xor edi, ebx
and ebx, esi
shr edx, 0x1e
xchg edx, esi
or edi, ebx
jmp 0x4783ba
push 0x57757553
or edi, edx
sub ebx, edi
mov edi, edx
xchg esi, edx
jmp 0x476dea
push 0x57714486
not edx
add edi, edx
mov edx, esi
add esi, edi
xor ebx, edx
add esi, edx
jmp 0x477fef
pop ecx
add edi, esi
xor edx, ebx
add edx, 0x588c1130
shl edi, 8
jmp 0x475f13
pop ecx
rol esi, 4
shl esi, 0x14
neg edi
xchg esi, ebx
xchg edi, ebx
or ebx, edi
jmp 0x475c3a
call fcn.00475669
xor edi, ebx
mov ebx, edi
mov ebx, edi
neg edi
mov edi, 0x58931752
and edi, edx
jmp 0x4768d0
call ecx
bswap esi
mov edx, esi
rol ebx, 0x1c
mov ebx, edx
mov esi, 0x589dddb6
sub ebx, esi
shl edi, 0x13
shr edi, 4
jmp 0x475881
push 0x576ec720
xor edx, ebx
add ebx, edi
and edx, esi
inc esi
mov esi, 0x58a25e94
add ebx, esi
jmp 0x476a3d
pop ecx
sub edx, edi
mov edx, esi
add ebx, esi
dec esi
shr edi, 0x11
and esi, edi
xor esi, 0x58a47a56
add ebx, edi
or edi, esi
neg ebx
ror edx, 8
or ebx, edi
dec ebx
shr edx, 0xb
jmp 0x476db3
pop ecx
or edi, 0x58aadfec
or esi, edx
rol edx, 4
mov esi, edi
mov ebx, edx
xor ebx, esi
xor edi, esi
or ebx, esi
rol edi, 2
mov ebx, edx
and edi, esi
xor esi, ebx
jmp 0x4785c6
call fcn.00475669
xchg ebx, edi
xor ebx, 0x58ae2ba0
sub edi, edx
not edi
mov edx, ebx
mov ebx, edi
add ebx, 0x58aeaaf2
xor edi, ebx
jmp 0x475a47
pop ecx
and edx, edi
dec ebx
not ebx
sub edi, edx
mov edi, ebx
xchg esi, edx
or esi, ebx
and edx, ebx
jmp 0x477745
pop ecx
and esi, 0x58b37cec
shl ebx, 5
xchg ebx, esi
or esi, edi
xor edi, edx
shr edx, 0x10
jmp 0x475577
call ecx
shr edi, 4
add edx, ebx
or edi, 0x58b45f14
ror edx, 0xb
jmp 0x475753
push 0x576b49d4
sub ebx, edi
mov edi, edx
and edi, ebx
sub edi, 0x58b82e46
add ebx, esi
xor edi, edx
nop
rol edx, 0x1c
sub esi, 0x58b8b9ce
xor esi, 0x58b8d4a4
sub ebx, edx
or esi, ebx
mov ebx, edi
mov esi, 0x58b93a86
jmp 0x476fec
mov ecx, 0x246e6c30
and edx, 0x58bbbe20
and esi, ebx
or edi, ebx
add edi, ebx
mov edx, ebx
dec esi
neg edx
and edi, 0x58bc79d6
dec edi
xor edx, ebx
jmp 0x476093
push 0x576d9c60
sub ebx, 0x58bdf284
or esi, edi
xchg ebx, edi
neg ebx
dec ebx
inc ebx
dec edi
xor edx, edi
xor esi, ebx
or edx, ebx
jmp 0x475d6b
mov ecx, 0x246e6c30
dec edi
xor edx, ebx
xor ebx, edx
mov esi, edi
not edi
or edx, 0x58c55fbc
sub edx, ebx
sub edi, 0x58c59454
xor ebx, edi
xor edi, edx
jmp 0x47798a
call fcn.00475669
bswap edi
rol esi, 0xe
mov esi, edi
add ebx, esi
or ebx, 0x58c6581c
xchg ebx, edi
ror edx, 0x19
add esi, edi
shl esi, 0x14
and edx, ebx
mov edx, edi
or edi, ebx
jmp 0x477e88
push 0x576cac04
xchg esi, ebx
xor ebx, esi
neg edi
mov ebx, esi
and edx, ebx
and esi, edx
add esi, ebx
and esi, ebx
jmp 0x47627c
mov ecx, 0x246e6c30
and edi, esi
or edx, 0x58d14400
inc esi
mov esi, 0x58d17ba2
and esi, ebx
and ebx, esi
or edi, 0x58d1ccbe
or esi, edx
jmp 0x475c5f
push 0x5775b132
xchg esi, edx
not esi
sub ebx, edi
rol esi, 1
xor ebx, esi
sub edx, edi
xor edx, 0x58d76d08
xchg edi, ebx
jmp 0x4755ea
mov ecx, 0x246e6c30
sub edx, ebx
and edx, esi
and esi, edi
or ebx, edx
or esi, 0x58da41a6
not edi
jmp 0x476f3b
push 0x577441e2
dec esi
or esi, ebx
or ebx, 0x58dd0d2c
shl ebx, 0x1c
add esi, ebx
sub edx, 0x58dd6cd8
neg edx
xor edi, ebx
neg ebx
xor esi, edx
jmp 0x475559
pop ecx
bswap esi
mov edx, esi
xor edx, ebx
and edi, 0x58dff356
xor edx, edi
sub edi, ebx
jmp 0x47760b
push 0x57759302
add edx, 0x58e165de
xor esi, edx
jmp 0x476ca4
push 0x5777fc1c
xchg edx, esi
xor esi, edx
not esi
mov esi, edx
not esi
or edx, esi
sub edi, esi
sub esi, 0x58e3cce0
jmp 0x47819a
push 0x57730d28
neg esi
shl edi, 7
jmp 0x477df9
call fcn.00475669
shr edx, 0xb
xor edx, esi
jmp 0x47711d
push 0x576f7ca8
add ebx, esi
add esi, ebx
shl ebx, 0x1e
shl esi, 0x15
mov esi, 0x58ecedac
inc esi
not edx
not esi
xor esi, ebx
xor edx, ebx
sub esi, edx
or ebx, esi
jmp 0x475e5d
call fcn.00475669
neg edi
or esi, ebx
add edx, edi
add edi, 0x58eff256
jmp 0x4765dd
push 0x576b66ee
sub edi, ebx
or esi, 0x58f03100
xor esi, edi
sub edx, 0x58f06b14
xor ebx, edx
shr ebx, 0x1c
jmp 0x47861c
pop ecx
inc edi
and edi, ebx
xor edi, edx
sub edx, ebx
sub edi, esi
inc esi
sub esi, 0x58f7baca
shr edx, 3
or edi, esi
and ebx, 0x58f80e48
xor ebx, edi
dec edx
jmp 0x4755a5
call fcn.00475669
add ebx, 0x58f86c64
and esi, edi
ror edx, 0xa
shr edx, 6
sub esi, edi
or edx, 0x58f8f2aa
inc esi
xchg edi, edx
jmp 0x47828a
call ecx
xor edx, ebx
mov edi, esi
sub edx, ebx
mov edi, 0x58f9a694
and esi, edx
neg ebx
jmp 0x475da2
call fcn.00475669
or edi, esi
or edi, 0x58fa1cb4
dec ebx
and edi, esi
or edi, edx
mov edx, edi
or ebx, 0x58faa3e6
xor esi, ebx
jmp 0x4785b1
mov ecx, 0x246e6c30
neg edi
and edi, edx
ror edi, 5
xchg edx, esi
and edx, 0x58fcb524
xchg edi, esi
and edi, edx
xor edi, esi
jmp 0x477635
pop ecx
sub edx, edi
and ebx, edi
sub esi, edi
and edx, edi
jmp fcn.00476f4a
push 0x57783ace
mov edi, ebx
add ebx, edi
bswap edx
sub edx, ebx
sub edi, 0x5901a47e
add ebx, esi
xchg edi, edx
and ebx, edx
jmp 0x477dc7
push 0x5776e65c
shl edi, 0xd
sub edx, esi
add esi, ebx
xchg esi, ebx
or edi, ebx
xchg ebx, edi
sub edx, ebx
dec ebx
jmp 0x47614b
call fcn.00475669
xor esi, edi
or edx, esi
or esi, ebx
sub esi, 0x590e60ec
xor edx, ebx
and ebx, 0x590ea35a
jmp 0x477892
pop ecx
or esi, edx
add esi, edx
mov esi, edi
xor edx, edi
sub edx, 0x591a542c
mov ebx, esi
shr edx, 0x1a
bswap ebx
jmp 0x477a6b
pop ecx
rol ebx, 5
or edx, 0x591e4544
xchg ebx, esi
and edx, edi
jmp 0x475cd8
pop ecx
or edx, edi
xor ebx, 0x591ecec4
sub ebx, 0x591ee9d6
mov edi, 0x591f0314
sub edx, 0x591f1e26
xor edi, esi
and edi, 0x591f530a
rol edx, 0x15
jmp 0x478203
call fcn.00475669
or edx, ebx
rol esi, 0xc
mov ebx, edi
xor edx, 0x591feb92
jmp 0x477832
pop ecx
add edx, ebx
sub esi, edx
xchg ebx, edi
add edi, ebx
sub edi, ebx
add edi, 0x5929a4e6
mov edx, 0x5929be24
or edi, 0x5929d936
jmp 0x475ddb
push 0x576b2b88
add esi, edx
shl ebx, 0xd
xor esi, edx
rol edx, 0xb
and edx, esi
mov edx, edi
jmp 0x47691e
pop ecx
xchg esi, ebx
bswap ebx
add ebx, esi
inc edi
jmp 0x476eaf
call ecx
mov ebx, esi
mov edx, 0x593090f0
and edx, edi
and ebx, edi
and esi, ebx
rol esi, 7
add edx, edi
and esi, edi
and ebx, esi
or edx, esi
add edx, esi
mov edx, edi
jmp 0x4786d0
call ecx
or edx, ebx
mov ebx, 0x593398ae
or esi, 0x5933b36a
and ebx, edx
jmp 0x4766c5
call ecx
sub edx, esi
xor ebx, 0x59387140
and esi, edx
add esi, ebx
xor esi, ebx
sub esi, ebx
jmp 0x477c7c
call fcn.00475669
dec esi
or ebx, edx
bswap edx
xchg esi, ebx
bswap ebx
shr edx, 0x12
jmp 0x477c2e
call ecx
xor esi, ebx
xchg esi, ebx
jmp 0x475415
pop ecx
nop
inc esi
jmp 0x477eed
pop ecx
xor ebx, esi
xor ebx, edx
inc edi
xchg esi, edi
bswap ebx
xchg edx, esi
mov esi, 0x59422870
and esi, ebx
and edi, edx
xor edx, esi
jmp 0x4753fb
mov ecx, 0x246e6c30
sub edx, ebx
xchg ebx, edx
shr edi, 0x15
xor esi, ebx
or edx, ebx
nop
sub esi, 0x594591c2
or ebx, edx
jmp 0x476486
pop ecx
not ebx
mov edx, edi
not ebx
xor edx, esi
dec edi
mov edx, ebx
jmp 0x477eae
push 0x57740398
xchg esi, edx
xor edx, esi
dec edi
mov edx, esi
or edi, ebx
or edx, 0x594e222a
xor esi, edx
xchg edi, ebx
xor edi, esi
xor edi, edx
jmp 0x47606d
call ecx
mov edx, ebx
dec esi
add esi, edx
sub edx, ebx
or esi, ebx
xor edx, 0x594fb768
xor edx, esi
bswap edx
jmp 0x475a03
push 0x576d7e6a
or edx, esi
and edi, ebx
add esi, edi
sub edx, esi
dec edx
mov edi, 0x59511e8c
nop
xor edx, edi
not ebx
sub ebx, edx
bswap esi
mov edx, esi
jmp 0x4769e9
pop ecx
xor esi, edx
shl edx, 0xf
sub edx, ebx
sub edx, esi
add ebx, 0x59525394
rol esi, 0x19
ror ebx, 0x15
or ebx, esi
xchg esi, edi
xchg ebx, edi
jmp 0x477a2a
push 0x57785816
xchg edx, edi
or edx, edi
jmp 0x476bd7
push 0x57732cf2
sub edi, ebx
shl edx, 0xc
shr edx, 0x10
bswap esi
mov edx, esi
add ebx, edx
xor edi, ebx
and edi, ebx
or esi, edi
xor edx, ebx
xor edi, esi
neg esi
jmp 0x477190
pop ecx
xchg edx, ebx
and edi, 0x595f70f6
jmp 0x475603
call ecx
or edi, ebx
add edi, esi
add ebx, esi
neg esi
mov edx, 0x59623dfa
xor edx, ebx
or ebx, edx
xor esi, ebx
xor edx, ebx
sub esi, edx
xchg ebx, edi
add ebx, 0x5962f72e
jmp 0x475d16
push 0x577274ef
add esi, edi
mov ebx, 0x596337d8
add edi, 0x59635130
ror ebx, 8
jmp 0x478053
push 0x577051e2
ror esi, 2
and edx, esi
or esi, edx
xor ebx, edi
shr esi, 8
xchg esi, ebx
xchg edx, ebx
mov ebx, edi
shr esi, 0xf
sub esi, edi
jmp 0x475e3f
push 0x57716260
or esi, ebx
shr edx, 0x1e
or esi, 0x596d6ffc
add edx, edi
rol ebx, 8
shl ebx, 0x1a
jmp 0x4761f2
mov ecx, 0x246e6c30
and ebx, esi
or edi, 0x59700052
or esi, edx
or edi, edx
sub esi, edx
and edx, edi
jmp 0x4770fa
mov ecx, 0x246e6c30
xchg edx, ebx
mov ebx, esi
and edx, ebx
or ebx, edi
inc edi
rol edi, 0xe
or edi, edx
sub esi, edx
xor edi, 0x5977cc5e
neg ebx
jmp 0x475780
push 0x57781b90
bswap esi
mov edx, esi
and esi, ebx
and ebx, 0x597a220a
xchg edx, esi
add esi, ebx
inc ebx
mov edx, edi
not ebx
add edi, edx
jmp 0x477235
pop ecx
or edi, edx
inc ebx
ror edx, 0xc
not edi
mov edi, 0x597d716e
bswap edi
mov ebx, edx
mov edx, 0x597dde8a
inc esi
sub ebx, edx
or esi, edx
mov edx, ebx
jmp 0x47629f
call ecx
xor ebx, edx
add esi, edx
mov esi, edi
and edi, ebx
mov edi, esi
and edi, 0x598231f8
and esi, edi
xor ebx, edi
or ebx, esi
or edx, edi
and edx, esi
sub esi, 0x5982cd7c
jmp 0x477795
push 0x5777dd35
dec edx
xchg edx, ebx
xor edi, ebx
mov ebx, esi
mov edi, 0x59873726
and ebx, edx
jmp 0x476e30
pop ecx
add edi, esi
xor edi, esi
xor edx, ebx
or ebx, edi
sub ebx, 0x5987dbe4
add ebx, edx
sub edi, 0x59880e4e
xchg ebx, edi
ror edi, 0x11
shl ebx, 0x1f
and esi, 0x59887e76
and ebx, 0x598899b4
jmp 0x477573
call ecx
rol edx, 6
dec ebx
shr edx, 8
or edi, esi
sub ebx, esi
mov ebx, edx
jmp 0x47834a
mov ecx, 0x246e6c30
xor ebx, edi
or ebx, esi
sub ebx, edx
dec ebx
add esi, ebx
mov esi, edx
jmp 0x47680e
push 0x5771070c
add esi, edi
add edx, edi
sub edi, ebx
or edx, ebx
jmp 0x475fc4
pop ecx
xor esi, edi
mov edi, ebx
and edx, 0x598b74f0
and esi, ebx
or edx, edi
xor edi, esi
and edi, 0x598bdbde
sub edx, 0x598bfa5e
mov edi, 0x598c15e2
sub edi, esi
xchg esi, edx
xchg ebx, edx
bswap esi
or edi, esi
jmp 0x478522
pop ecx
or edi, 0x599426f0
ror esi, 2
xor esi, ebx
sub edx, ebx
and edx, ebx
mov esi, 0x5994abd4
mov esi, edi
and ebx, edx
shl ebx, 2
xor esi, 0x59951062
jmp 0x4756be
push 0x576c8e38
add edx, edi
sub edx, 0x59954d14
shr edi, 0x14
mov edx, 0x599583e6
mov esi, edx
and edx, 0x5995b5aa
or edx, edi
dec esi
add edx, 0x599608ae
or ebx, esi
mov edx, 0x59963ba4
mov esi, edx
jmp 0x476ab3
call fcn.00475669
or ebx, edx
not esi
sub edx, ebx
dec esi
add ebx, edi
or esi, 0x59985836
xor edi, edx
ror esi, 0xa
jmp 0x4779f4
call ecx
or ebx, edi
neg ebx
dec ebx
or ebx, edi
mov esi, 0x59992034
xchg esi, edi
jmp 0x47543e
push 0x576eaaa8
mov edx, edi
xchg edi, ebx
xchg esi, edi
mov edx, edi
mov edx, esi
not ebx
rol edx, 0x16
and edx, ebx
jmp 0x47668b
push 0x576a7210
xchg edi, esi
add ebx, esi
or esi, edi
shl edx, 1
jmp 0x4783a5
push 0x576b8392
and ebx, esi
add edi, edx
xor esi, 0x599c281e
xchg edi, ebx
or edi, esi
and esi, edi
xor edi, ebx
not edx
jmp 0x4769aa
pop ecx
mov edi, edx
neg edx
shr edx, 0x1e
xchg esi, edi
xor esi, 0x59a2e0a8
or edx, edi
xor edi, esi
mov edi, 0x59a33274
jmp 0x4768b8