Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xffffff00
jne 0x401089
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.advapi32.dll_ImpersonateSelf
call sub.ntdll.dll_ZwAlertThread
call sub.advapi32.dll_ImpersonateSelf
call sub.advapi32.dll_ImpersonateSelf
call sub.ntdll.dll_ZwAlertThread
call sub.user32.dll_LoadImageA
call sub.oleaut32.dll_VarUI4FromUI2
call sub.advapi32.dll_ImpersonateSelf
call sub.advapi32.dll_ImpersonateSelf
call sub.user32.dll_LoadImageA
call sub.user32.dll_LoadImageA
call sub.advapi32.dll_ImpersonateSelf
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.advapi32.dll_ImpersonateSelf
call sub.user32.dll_LoadImageA
call sub.ntdll.dll_ZwAlertThread
call sub.oleaut32.dll_VarUI4FromUI2
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.ntdll.dll_ZwAlertThread
call sub.user32.dll_LoadImageA
ret
call sub.user32.dll_GetInputDesktop
cmp eax, 0xfffffef1
jne 0x40110d
call sub.advapi32.dll_ImpersonateSelf
call sub.ntdll.dll_ZwAlertThread
call sub.user32.dll_LoadImageA
call sub.advapi32.dll_ImpersonateSelf
call sub.oleaut32.dll_VarUI4FromUI2
call sub.user32.dll_LoadImageA
call sub.oleaut32.dll_VarUI4FromUI2
call sub.advapi32.dll_ImpersonateSelf
call sub.user32.dll_LoadImageA
call sub.advapi32.dll_ImpersonateSelf
call sub.oleaut32.dll_VarUI4FromUI2
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.advapi32.dll_ImpersonateSelf
call sub.ntdll.dll_ZwAlertThread
call sub.user32.dll_LoadImageA
call sub.user32.dll_LoadImageA
call sub.advapi32.dll_ImpersonateSelf
call sub.user32.dll_LoadImageA
call sub.ntdll.dll_ZwAlertThread
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.oleaut32.dll_VarUI4FromUI2
ret
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xffffff2d
jne 0x401187
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.oleaut32.dll_VarUI4FromUI2
call sub.oleaut32.dll_VarUI4FromUI2
call sub.user32.dll_LoadImageA
call sub.ntdll.dll_ZwAlertThread
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.advapi32.dll_ImpersonateSelf
call sub.ntdll.dll_ZwAlertThread
call sub.ntdll.dll_ZwAlertThread
call sub.advapi32.dll_ImpersonateSelf
call sub.ntdll.dll_ZwAlertThread
call sub.user32.dll_LoadImageA
call sub.oleaut32.dll_VarUI4FromUI2
call sub.user32.dll_LoadImageA
call sub.ntdll.dll_ZwAlertThread
call sub.advapi32.dll_ImpersonateSelf
call sub.oleaut32.dll_VarUI4FromUI2
call sub.user32.dll_LoadImageA
call sub.oleaut32.dll_VarUI4FromUI2
ret
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xfffffed5
jne 0x40120b
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.user32.dll_LoadImageA
call sub.advapi32.dll_ImpersonateSelf
call sub.advapi32.dll_ImpersonateSelf
call sub.ntdll.dll_ZwAlertThread
call sub.ntdll.dll_ZwAlertThread
call sub.user32.dll_LoadImageA
call sub.advapi32.dll_ImpersonateSelf
call sub.advapi32.dll_ImpersonateSelf
call sub.user32.dll_LoadImageA
call sub.oleaut32.dll_VarUI4FromUI2
call sub.user32.dll_LoadImageA
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.advapi32.dll_ImpersonateSelf
call sub.advapi32.dll_ImpersonateSelf
call sub.ntdll.dll_ZwAlertThread
call sub.oleaut32.dll_VarUI4FromUI2
call sub.ntdll.dll_ZwAlertThread
call sub.oleaut32.dll_VarUI4FromUI2
ret
jmp 0x47518a
and esi, edx
or edi, 0xd6abf966
ror edi, 2
jmp 0x477b45
pop ebx
sub edi, 0xd78eb2e5
xor edi, esi
xor edi, esi
shl esi, 0x12
add edx, ecx
or ecx, edx
inc edi
xchg esi, ecx
inc edi
mov edi, edx
add edi, ecx
not ecx
jmp 0x475ba0
pop ebx
and edi, edx
mov edx, edi
or edx, 0xd79c0dc6
mov esi, ecx
xor edx, ecx
jmp 0x476da7
mov ebx, 0x2a371b56
bswap esi
sub esi, ecx
sub esi, edx
sub edi, esi
add esi, 0xd7afe0ae
or edi, edx
nop
xor esi, ecx
xchg esi, ecx
jmp 0x477919
mov ebx, 0x2a371b56
sub edx, esi
mov edx, edi
dec ecx
bswap edi
and edx, 0xd7b1eda7
mov edx, esi
mov edx, ecx
ror edx, 0xa
mov edi, 0xd7b2d8d2
jmp 0x479271
pop ebx
add edx, ecx
xchg esi, edx
sub esi, 0xd7b39581
xor ecx, edx
bswap esi
neg ecx
or esi, ecx
or ecx, edx
mov edi, ecx
sub ecx, edx
xor ecx, 0xd7b5607b
add ecx, edi
shr esi, 0x1c
jmp 0x476551
pop ebx
and esi, edi
rol ecx, 0xf
dec esi
or ecx, esi
xor edx, 0xd7b6fe99
dec edi
or esi, edx
and edx, esi
or edx, esi
mov edx, edi
sub ecx, esi
jmp 0x477a68
call ebx
xchg esi, edx
or edx, esi
and edx, edi
shl edi, 0x10
and ecx, edi
xchg edx, edi
xor ecx, 0xd7bdbfe5
xor edi, ecx
mov edx, edi
mov edi, edx
sub ecx, 0xd7beaae0
mov esi, ecx
sub edx, esi
inc edi
sub edi, 0xd7bf8925
jmp 0x476930
pop ebx
or edi, 0xd7c1f7f4
and esi, edi
not esi
mov ecx, edx
inc esi
mov edx, edi
bswap edi
inc edi
shl edx, 3
not edx
jmp 0x475a49
push 0xd6b0f99b
xor edi, esi
sub ecx, edx
add edi, 0xd7cca70a
rol edi, 0x1a
or esi, edi
or esi, edx
mov edx, edi
inc esi
mov edi, esi
mov esi, 0xd7ce5ae1
neg esi
sub ecx, esi
add ecx, edi
jmp 0x477bf1
mov ebx, 0x73716341
add ecx, edx
and esi, edi
xchg edi, esi
not edx
or esi, edi
mov esi, ecx
sub edx, edi
shl edx, 0x19
add edx, ecx
jmp 0x478d84
push 0xd6c38d4b
shr esi, 0x13
xor esi, 0xd7da1aad
xchg edi, edx
xor ecx, edx
rol esi, 0x18
jmp 0x475b8e
push 0xd6d08172
and edi, esi
and edx, 0xd7f7aece
not edi
sub esi, edi
xchg esi, ecx
sub esi, edi
mov ecx, esi
bswap edx
mov ecx, 0xd7f96cf0
mov esi, edi
mov ecx, edx
and edi, edx
mov edx, 0xd7fa587e
not edi
jmp 0x4753ea
push 0xd6c2f77a
bswap ecx
xchg edi, ecx
mov edx, 0xd7fb794c
jmp 0x4768b3
pop ebx
neg esi
add edx, esi
xor edx, 0xd800c937
xor edi, ecx
xor esi, ecx
or edi, 0xd8018f8f
jmp 0x478b12
pop ebx
sub esi, 0xd801e6ce
add ecx, edi
or edx, ecx
xor edi, ecx
sub edi, edx
or esi, edi
jmp 0x4769d0
pop ebx
and ecx, 0xd80b4d63
or edx, ecx
or esi, 0xd80bc652
not esi
neg edx
xchg edx, edi
sub edi, 0xd80cbc5c
inc edi
add esi, edi
and edx, edi
and ecx, esi
inc edx
add ecx, esi
and ecx, 0xd80e6f33
shl esi, 0x1f
jmp 0x4773b4
push 0xd6bc3d09
nop
xor esi, ecx
mov ecx, edx
mov edx, 0xd80fc6f1
jmp 0x478589
push 0xd6cd03b4
and edi, 0xd816ffc5
shr edx, 0x1c
add ecx, edx
mov edi, ecx
and ecx, 0xd8180733
sub edx, esi
neg ecx
and edi, esi
rol esi, 0x1a
xor esi, edx
mov esi, ecx
ror esi, 0x1a
jmp 0x4755a8
pop ebx
rol ecx, 0x10
xor edx, ecx
xor esi, edx
or esi, edi
xor esi, edx
xor ecx, edx
bswap ecx
dec ecx
jmp 0x475436
push 0xd6c3d9cc
xchg edi, esi
bswap edi
sub edx, edi
bswap edi
jmp 0x478e98
push 0xd6b46d11
dec edx
add edx, ecx
xor edx, 0xd8394e8e
xor ecx, edx
and edi, 0xd839c080
or edi, ecx
or ecx, edx
mov edi, ecx
bswap esi
jmp 0x4793d5
push 0xd6b500db
dec esi
add esi, edx
and esi, ecx
sub edi, esi
or edx, 0xd85ed116
or edx, 0xd85f10e9
xchg esi, edx
jmp 0x475ea8
pop ebx
not edi
shr edi, 0xf
rol edx, 0x1d
sub edx, esi
rol esi, 0x1d
sub ecx, edx
shl edx, 4
and edi, esi
xor edi, 0xd8655e1f
and esi, edi
or esi, edx
add ecx, edx
jmp 0x477e12
push 0xd6b5493f
inc edi
xor ecx, edx
xor edx, ecx
and ecx, esi
add edx, ecx
add ecx, edi
mov esi, 0xd87cfac0
add esi, ecx
add edi, edx
xchg ecx, esi
jmp 0x478ebe
push 0xd6d2d5fc
xchg esi, ecx
xor edx, edi
bswap esi
shl esi, 0x1a
add edx, ecx
not edx
shl edx, 0x1c
mov edx, edi
dec ecx
and edi, ecx
jmp 0x476e9b
pop ebx
and edi, edx
xor ecx, 0xd8a10ab7
xchg edx, esi
xor esi, edx
mov esi, 0xd8a1c4f5
xchg edi, ecx
or esi, ecx
neg esi
add edx, esi
ror esi, 0x18
jmp 0x47607f
pop ebx
rol edi, 0x13
xchg edi, ecx
or esi, ecx
neg edi
xor esi, edx
and edi, 0xd8a8bf5b
mov edx, ecx
and ecx, esi
neg edi
and edx, esi
xor ecx, edi
jmp 0x4779f2
call ebx
xchg edx, ecx
neg ecx
mov esi, edx
sub ecx, 0xd8ab01a2
or edi, edx
or ecx, edx
sub esi, edx
bswap edx
shr edx, 4
add esi, ecx
add edi, ecx
add edi, edx
mov ecx, esi
jmp 0x47602b
pop ebx
neg edi
xchg edx, ecx
xchg edx, esi
jmp 0x476cc0
call fcn.004785e0
shl ecx, 0xd
sub edx, ecx
or esi, edi
sub edi, edx
add esi, ecx
inc edi
inc esi
and edi, 0xd8be075b
rol edx, 0x17
neg edx
or edi, edx
jmp 0x477ac0
pop ebx
sub ecx, edi
sub esi, 0xd8c40fa6
xchg esi, edx
and ecx, 0xd8c48cc2
xchg esi, edi
not edi
sub ecx, edi
sub ecx, 0xd8c58471
jmp fcn.004787bd
call fcn.004785e0
xchg esi, edi
mov edi, ecx
or edx, esi
and ecx, edx
rol ecx, 6
dec edi
ror edi, 0xa
sub edi, 0xd8d40c4d
xchg edi, edx
sub ecx, edx
or ecx, edi
add edi, esi
inc esi
jmp 0x478f98
push 0xd6c052de
add ecx, edx
sub edi, 0xd8d5db2f
mov esi, ecx
sub edi, ecx
xor edi, edx
and edx, 0xd8d6cb9b
add esi, ecx
xchg edi, edx
jmp 0x476b73
push 0xd6bba8e5
add edx, ecx
and ecx, edx
add edx, edi
xor edx, esi
jmp 0x477160
push 0xd6bfbc50
and edi, edx
mov edx, edi
xor ecx, edi
ror edi, 3
rol edx, 0xd
ror edi, 0x10
not edx
or ecx, edi
sub edi, 0xd8e2eedd
shr edx, 4
not edi
and esi, ecx
or edi, edx
add edi, 0xd8e42569
sub edi, ecx
jmp 0x4777df
pop ebx
sub edx, esi
or edi, ecx
dec edx
add ecx, edx
shl esi, 0x11
sub ecx, 0xd8f21156
sub ecx, edx
not ecx
and esi, 0xd8f2c86d
sub ecx, 0xd8f302ac
shl ecx, 4
or edx, esi
xor edx, ecx
xchg esi, edi
jmp 0x478991
pop ebx
mov esi, ecx
inc edi
and esi, 0xd9033297
xor ecx, edi
sub ecx, 0xd903a048
mov edx, 0xd903eb8c
xchg edi, esi
rol edx, 0x15
mov edi, esi
mov edx, ecx
sub ecx, 0xd904fdfa
jmp 0x478da9
push 0xd6cc6c8d
xor edx, ecx
bswap edi
not ecx
mov edx, edi
shr edx, 0x12
sub ecx, edx
add ecx, 0xd9069fb3
xor edi, edx
mov esi, edi
or edi, ecx
xchg edi, ecx
not edx
or ecx, edi
sub ecx, 0xd90831e3
jmp 0x477425
pop ebx
xchg edx, ecx
shr ecx, 0x1e
neg edx
add edx, esi
xor ecx, esi
add edx, ecx
rol edx, 5
sub edx, ecx
sub ecx, 0xd919a69b
or esi, ecx
xchg ecx, esi
jmp 0x477d4e
push 0xd6c7177b
sub edx, ecx
bswap edx
mov edx, 0xd920924c
add esi, ecx
add esi, 0xd9210fda
mov ecx, 0xd9214781
or esi, edi
rol edi, 0x12
rol edi, 5
mov esi, ecx
jmp 0x476df0
pop ebx
xchg edi, esi
xchg edi, esi
xor esi, edi
xor ecx, esi
and ecx, 0xd92730ae
mov edi, ecx
or esi, ecx
not esi
xchg edx, ecx
jmp 0x476f4d
push 0xd6cfb046
bswap esi
xor edx, esi
and ecx, esi
not edi
neg esi
mov ecx, edx
xor ecx, 0xd937f911
shl edi, 0x1a
mov edi, esi
ror edx, 9
rol edi, 5
jmp 0x4757be
push 0xd6c34388
xor ecx, edx
sub ecx, 0xd93b8d88
bswap esi
bswap edx
mov edi, edx
xor ecx, esi
ror ecx, 0x14
shl esi, 0xe
jmp 0x47561f
call fcn.004785e0
xchg edx, ecx
xchg edx, edi
add ecx, esi
xor esi, edi
xor ecx, edi
sub esi, ecx
bswap esi
not ecx
mov edi, edx
nop
add edx, ecx
mov ecx, edi
bswap ecx
sub esi, 0xd944980a
jmp 0x476ecc
pop ebx
add ecx, esi
mov ecx, edx
and edi, esi
mov edi, esi
and edi, edx
xchg ecx, edx
mov ecx, edi
or ecx, edi
or ecx, 0xd946a970
neg edi
jmp 0x479323
pop ebx
and esi, edi
add edi, edx
xor edx, esi
mov esi, edx
inc edi
and edx, 0xd94be162
and ecx, edx
and esi, ecx
inc edi
xor esi, edi
and edx, 0xd94d046c
jmp 0x47912e
pop ebx
rol ecx, 0x19
dec ecx
sub edi, edx
xor edx, ecx
mov edx, esi
xchg esi, edx
add esi, edx
shl edx, 5
jmp 0x47954d
call fcn.004785e0
xchg edx, ecx
mov ecx, 0xd95623f1
and edi, 0xd95674f5
and ecx, edi
inc ecx
jmp 0x4760a0
call ebx
or ecx, edx
sub esi, ecx
mov edx, 0xd957d581
add edi, edx
xor edx, 0xd9584f36
mov esi, ecx
xchg esi, edx
or edi, ecx
shr esi, 0x15
jmp 0x477727
mov ebx, 0x2a371b56
or ecx, 0xd9614e0c
nop
ror esi, 8
add edi, esi
add esi, ecx
mov ecx, edx
sub edi, 0xd962d025
xor esi, edi
xor esi, 0xd9634d07
and edi, ecx
add edi, edx
jmp 0x477f9f
pop ebx
mov edi, ecx
ror edi, 0x1a
add ecx, 0xd9649c1b
or esi, edi
sub edx, ecx
and edx, esi
mov edx, ecx
bswap ecx
mov edx, edi
xor edi, edx
sub edx, ecx
xchg esi, edi
jmp 0x478dd4
mov ebx, 0x73716341
add esi, 0xd99b0683
or ecx, edx
not ecx
or edi, ecx
xor edi, ecx
and edx, 0xd99c4227
jmp 0x476e43
call ebx
xor edi, ecx
or edi, 0xd99cd602
xchg edx, ecx
add edx, 0xd99d4f16
sub edx, edi
jmp 0x4758f5
push 0xd6bcd25a
and esi, edx
mov edi, ecx
sub ecx, 0xd99e7700
shr ecx, 0x18
not edx
jmp 0x4786e1
push 0xd6d24037
sub edi, edx
add ecx, esi
not esi
sub edx, ecx
dec ecx
and esi, 0xd9b10aec
sub edi, 0xd9b14748
or ecx, esi
add ecx, 0xd9b1d18f
mov esi, edx
ror ecx, 0x19
mov esi, edx
xchg edx, ecx
jmp 0x477366
pop ebx
shr edi, 0x16
xor edx, edi
xchg ecx, esi
and ecx, esi
or edi, edx
and edi, 0xd9c17baf
bswap edx
or ecx, 0xd9c20786
dec ecx
neg edx
add edi, 0xd9c2c189
jmp 0x4784f6
push 0xd6c763f5
and esi, 0xd9c4eee2
and edx, esi
or ecx, esi
sub esi, ecx
jmp 0x478145
call fcn.004785e0
xchg edi, ecx
xor edx, esi
mov esi, edi
xchg edx, edi
shl esi, 0x19
shl edx, 0x12
bswap edx
mov esi, ecx
mov ecx, edi
shl esi, 8
jmp 0x476b91
push 0xd6d31f34
and edi, esi
and esi, edi
rol edi, 0xd
or esi, ecx
xor edx, ecx
inc edi
mov esi, 0xd9d0bdb5
sub edi, ecx
or esi, 0xd9d1363a
mov ecx, esi
xchg esi, edx
sub esi, 0xd9d1ec1a
add edi, esi
and ecx, edx
jmp 0x476a63
call ebx
and ecx, edi
and edi, edx
or edx, edi
or ecx, 0xd9d36c9c
xor esi, ecx
jmp 0x4766ae
pop ebx
shl edx, 0x14
xor ecx, edi
add edx, ecx
neg esi
mov ecx, esi
neg edi
shr edi, 0x16
add ecx, edx
and edx, edi
shl ecx, 1
bswap edi
jmp 0x47686b
pop ebx
xor esi, 0xd9e80ca0
inc edx
mov edi, 0xd9e8889f
xchg edx, esi
xchg ecx, esi
neg edi
xor esi, ecx
and ecx, 0xd9e9c95c
sub edx, 0xd9ea07e0
add esi, edi
xchg edi, edx
jmp 0x4781dd
push 0xd6c2ac85
xor edi, edx
rol ecx, 0x1e
sub edx, esi
dec edx
and edx, esi
mov edx, edi
jmp 0x4757ee
call ebx
xchg edi, ecx
and edi, ecx
xchg ecx, esi
or edi, edx
bswap edi
jmp 0x477cef
push 0xd6bbf3d9
shl edx, 2
and edx, ecx
mov ecx, edx
bswap ecx
neg ecx
and ecx, edi
or edi, esi
jmp 0x475928
call ebx
mov edi, edx
or edx, edi
not ecx
xchg edx, esi
mov esi, edi
mov edx, esi
mov ecx, 0xda1906b3
mov edx, ecx
sub esi, 0xda198d9d
jmp 0x477988
push 0xd6d28a25
sub edi, ecx
neg ecx
and ecx, 0xda2b4085
add edx, esi
sub edx, edi
or esi, 0xda2bf4a2
and esi, ecx
or esi, edx
not ecx
ror ecx, 0x14
or edi, ecx
and esi, 0xda2d7074
jmp 0x475f5e
pop ebx
xchg edx, ecx
not ecx
add edx, 0xda310798
add edx, 0xda31549a
shl ecx, 0x12
not ecx
xor edi, edx
and ecx, edx
add edx, edi
ror esi, 0x18
jmp 0x477da1
push 0xd6ccb894
and edx, esi
mov edx, edi
mov ecx, edx
add edi, edx
xor ecx, edx
ror ecx, 9
add esi, edx
and edi, edx
ror ecx, 3
jmp 0x4759b4
call fcn.004785e0
inc edx
xor esi, edx
bswap edi
xor edx, 0xda4acd2a
and edx, ecx
inc edx
xchg edx, edi
bswap ecx
mov esi, 0xda4c15c1
shr ecx, 0x15
not ecx
dec ecx
add edx, edi
jmp 0x476a1f
pop ebx
mov edx, esi
mov edx, edi
neg ecx
xor edx, esi
xor ecx, esi
add ecx, edi
or edx, 0xda582483
add ecx, esi
or edx, esi
dec ecx
jmp 0x475863
push 0xd6ca0ca4
add ecx, 0xda594848
and esi, 0xda5987c8
xor edx, ecx
xor ecx, esi
or esi, 0xda5a40e9
sub esi, ecx
add ecx, 0xda5acca2
mov edi, esi
shl esi, 0xb
xchg edi, esi
not ecx
jmp 0x4792ee
pop ebx
shr ecx, 0x16
xor ecx, esi
add edx, esi
rol ecx, 0x1c
or esi, 0xda72169b
not ecx
shr ecx, 0x1a
and edx, ecx
neg edi
and edx, esi
rol edx, 0x17
jmp 0x476a8f
mov ebx, 0x2a371b56
sub edi, 0xda761bd1
bswap edi
shr esi, 0x14
ror esi, 0xa
and edi, 0xda7715d9
sub edi, 0xda776222
or edi, 0xda77a0ee
sub esi, edi
shr edx, 0x1b
jmp 0x476299
push 0xd6c00720
rol edx, 0x1b
or esi, 0xda7dd65f
or edx, edi
neg edi
shl esi, 0x10
and esi, 0xda7edb20
mov ecx, edx
jmp 0x4762c1
pop ebx
rol ecx, 0x1a
xchg esi, ecx
sub edx, 0xda85a690
add edx, esi
and edx, esi
and edi, esi
or ecx, edx
xchg edi, ecx
add ecx, edi
jmp 0x476786
call fcn.004785e0
and edx, 0xda96e007
or ecx, 0xda971e9e
add edi, ecx
sub esi, 0xda97a34c
not ecx
shl edx, 0x12
not ecx
mov edi, ecx
sub esi, edi
jmp 0x4785c2
pop ebx
mov edi, esi
xchg edi, esi
and ecx, esi
shr ecx, 0x16
ror edx, 1
neg edx
xor esi, edi
sub edx, edi
jmp 0x47610d
pop ebx
neg ecx
xor edx, edi
and esi, 0xdaa67fb2
and edi, esi
mov ecx, 0xdaa6f7a5
dec esi
sub ecx, edx
and ecx, edx
xchg edx, edi
or edi, ecx
or edx, esi
and edi, esi
sub ecx, edx
mov esi, ecx
mov esi, edi
jmp 0x4752a7
push 0xd6bf7173
add edx, ecx
sub esi, 0xdaaf7935
inc edx
sub ecx, edi
not esi
add esi, edx
xor edi, esi
or ecx, edx
inc edi
mov ecx, edi
not edi
and ecx, esi
jmp 0x47635e
call fcn.004785e0
mov edi, ecx
xor edx, esi
sub esi, edx
add ecx, edi
dec edi
jmp 0x47712f
call ebx
neg esi
or edi, edx
mov edx, ecx
or ecx, edx
inc edi
mov esi, 0xdab7e45b
mov esi, 0xdab82137
mov edx, esi
xchg edx, esi
mov esi, 0xdab8d589
xchg ecx, edx
jmp 0x478918
push 0xd6b0a6ce
or esi, ecx
xor edi, 0xdac06e2f
xor edx, edi
sub ecx, edi
or esi, edi
xor ecx, esi
shl ecx, 0xf
xchg edi, esi
xchg esi, edi
jmp 0x47555d
push 0xd6b14350
neg edi
sub esi, ecx
xor esi, edi
add edx, edi
add esi, ecx
add edi, ecx
mov esi, edi
add edi, ecx
xor edi, esi
xchg edx, edi
xor edi, edx
sub ecx, esi
xchg ecx, esi
xor ecx, edx
jmp 0x4782b4
pop ebx
xor ecx, edx
sub edx, edi
or edi, 0xdaf495c2
add esi, edi
or edi, ecx
shl ecx, 9
mov esi, edi
neg ecx
jmp 0x4794e0
pop ebx
mov esi, ecx
xor edi, esi
and edi, ecx
xchg edx, ecx
and ecx, edx
mov edi, edx
sub ecx, 0xdafd87db
add ecx, esi
xor edx, esi
jmp 0x47630a
pop ebx
dec edx
xchg edx, ecx
or esi, 0xdb032a39
and edi, ecx
xchg edi, esi
not ecx
xor edx, esi
or edx, edi
xor edx, ecx
sub ecx, edx
add edi, ecx
and edx, esi
xchg ecx, edx
jmp 0x4795a9
pop ebx
and edi, ecx
neg edi
xor edx, ecx
mov esi, 0xdb0d0c90
and esi, edx
xor edx, ecx
xchg esi, ecx
and edi, edx
bswap esi
mov edi, edx
add ecx, edx
jmp 0x476987
call fcn.004785e0
add ecx, edx
and esi, ecx
or edx, ecx
and edi, ecx
xchg edx, edi
shr esi, 0x1c
sub ecx, edi
not edi
and edx, edi
add esi, edi
sub esi, 0xdef17ea6
and esi, edx
shl esi, 0xb
sub ecx, edx
jmp 0x475494
mov ebx, 0x73716341
sub edi, edx
nop
xor edx, ecx
xchg edi, ecx
add edi, ecx
and edi, esi
sub edx, edi
neg edx
add edi, edx
mov edx, edi
and edx, esi
or edi, esi
mov edi, esi
jmp 0x47617f
pop ebx
bswap ecx
sub esi, edi
ror ecx, 0x1b
jmp 0x477845
push 0xd6b18cb8
dec ecx
or ecx, 0xe3576a6b
rol edx, 0x1d
mov edx, esi
nop
mov esi, edx
xor edx, esi
jmp 0x4786c5
push 0xd6b828e2
and ecx, edx
xchg esi, ecx
xor edx, ecx
sub edx, edi
neg edi
and edx, ecx
xchg edi, esi
and ecx, edx
jmp 0x477766
push 0xd6bc8723
or ecx, edx
rol esi, 0x1c
shl edi, 2
bswap edx
jmp 0x476baa
call ebx
xor ecx, edi
xor esi, 0xe390a0fd
xchg esi, ecx
not edi
sub ecx, edx
xor edi, ecx
neg ecx
mov esi, 0xe3922068
jmp 0x475d9d
call ebx
mov edi, edx
xor edi, 0xe3971619
shr edi, 0xd
or edx, esi
inc edi
add edx, 0xe3981d94
add esi, ecx
jmp 0x47540d
mov ebx, 0x73716341
sub esi, ecx
xchg esi, edx
not edi
bswap edx
mov ecx, edi
add edi, edx
mov ecx, esi
add edx, 0xe39e2968
rol ecx, 0x1e
and ecx, esi
xchg edx, esi
and esi, 0xe39f1f8a
shl edi, 4
jmp 0x476a05
pop ebx
mov ecx, edi
mov esi, ecx
or edx, 0xe3a0294d
dec edi
bswap edi
add esi, edi
add edx, edi
rol esi, 0x1d
not esi
mov edx, ecx
sub ecx, 0xe3a22159
xor esi, edx
mov esi, 0xe3a29c85
jmp 0x475849
push 0xd6b1d4bc
and edi, edx
or ecx, 0xe3a33ca5
xor edx, 0xe3a37abe
and esi, ecx
neg edi
jmp 0x4753cb
mov ebx, 0x2a371b56
xor esi, edi
neg ecx
xchg ecx, edi
or esi, edi
and ecx, esi
mov esi, edi
not ecx
jmp 0x477a8c
call ebx
inc ecx
rol edi, 0x10
xchg esi, edi
dec edi
or esi, edi
add edx, ecx
xchg edx, ecx
and edx, ecx
mov ecx, 0xe3c83158
rol ecx, 0x15
shr edi, 0x10
rol edx, 0xf
rol edi, 1
jmp 0x477000
pop ebx
or edi, edx
or edi, edx
shl ecx, 0x1b
add esi, 0xe3ccc234
add edx, ecx
shl edi, 0x14
xor esi, edi
not esi
sub esi, ecx
xchg edx, edi
sub ecx, edx
bswap ecx
mov edi, esi
not esi
jmp 0x4775c0
push 0xd6b99fa2
or edx, esi
sub edi, esi
mov edi, edx
add edi, edx
and edx, esi
xor edx, ecx
jmp 0x4790e1
push 0xd6cc2044
add edx, esi
or ecx, esi
rol esi, 0x1a
and ecx, 0xe3da2349
bswap edi
sub esi, edx
mov edx, esi
sub esi, edx
rol edx, 7
sub esi, edi
bswap ecx
jmp 0x47657c
push 0xd6c68033
or edx, edi
or esi, edx
ror esi, 0x15
shl ecx, 0x15
xor edi, ecx
mov esi, edi
mov ecx, edi
and esi, edi
jmp 0x479261
call fcn.004785e0
bswap ecx
and edi, esi
sub ecx, edi
xchg esi, ecx
add edx, esi
and esi, ecx
or edi, 0xe42084a7
not esi
bswap ecx
ror esi, 1
neg ecx
jmp 0x4788c3
pop ebx
shr edi, 0x18
and esi, edi
neg esi
and edi, esi
xor esi, ecx
mov edx, ecx
xchg esi, ecx
inc ecx
sub edi, edx
and ecx, edx
xchg esi, edi
shr edi, 0x10
or edx, esi
and edi, 0xe4251ccb
xchg ecx, edi
and esi, ecx
jmp 0x47869a
push 0xd6cbd58f
xchg esi, ecx
dec edx
and edi, edx
add edx, edi
mov ecx, 0xe426e374
shr esi, 0x13
xor edi, edx
xchg edi, edx
add ecx, esi
xor ecx, 0xe428295e
sub ecx, 0xe428681e
jmp 0x4789db
mov ebx, 0x73716341
add ecx, edi
or edx, edi
sub edx, esi
xor ecx, edx
shr ecx, 0x1c
rol esi, 2
mov esi, 0xe4348e8f
ror esi, 0x17
bswap esi
mov edi, esi
xor esi, edx
jmp 0x4793c2
push 0xd6b59205
ror ecx, 8
xor edi, ecx
xor edi, esi
xchg esi, edx
or edx, ecx
and ecx, esi
add edx, esi
sub ecx, esi
sub ecx, esi
or esi, 0xe4381919
jmp 0x47866c
call ebx
shr edx, 0x18
xchg edx, esi
xor esi, ecx
ror ecx, 0x13
xor ecx, 0xe44803e8
add edx, 0xe4484056
xchg edi, ecx
or edi, 0xe448bb8e
xor edx, 0xe448f814
sub esi, edi
mov edx, esi
jmp 0x476447
push 0xd6b9e932
xor ecx, esi
ror edx, 0x14
neg edi
and edx, edi
mov edx, edi
not esi
sub edx, 0xe45ef7fa
or ecx, edx
jmp 0x47957c
pop ebx
and edi, 0xe462c8cb
sub esi, ecx
not ecx
shr edi, 0x11
or esi, ecx
sub edx, 0xe463f879
mov ecx, edi
or edx, ecx
neg edi
neg esi
sub ecx, edx
jmp 0x4751db
push 0xd6c6cccc
neg edx
xchg ecx, esi
add ecx, edx
jmp 0x476723
call fcn.004785e0
mov edx, 0xe479a0ca
and esi, 0xe479ebf0
jmp 0x477275
mov ebx, 0x2a371b56
xor edi, ecx
and ecx, 0xe4815ae9
add edx, 0xe481973e
or ecx, edx
xchg ecx, edx
ror esi, 2
mov edx, edi
xor esi, edi
neg esi
mov edx, 0xe4834d46
ror ecx, 6
xor edx, esi
or ecx, edi
and edx, edi
xor ecx, edx
jmp 0x477516
pop ebx
sub esi, 0xe484d18b
or edx, edi
xor ecx, edi
or edi, 0xe4858697
sub edi, ecx
or ecx, edx
neg edx
sub edi, ecx
sub edx, edi
shr esi, 2
or edi, esi
jmp 0x4761e7
call fcn.004785e0
rol ecx, 9
or edx, ecx
mov esi, edi
add ecx, edi
jmp 0x478624
push 0xd6b4b7c0
add edx, esi
neg edx
xchg esi, edx
and edx, ecx
and edx, esi
add ecx, edx
jmp 0x475d55
pop ebx
sub esi, 0xe4a49d39
and edi, esi
sub edx, esi
sub edi, 0xe4a55074
mov esi, 0xe4a58ed0
ror ecx, 0x1f
sub edx, edi
jmp 0x4754e6
push 0xd6c9c190
mov esi, edi
xor edi, ecx
and edx, 0xe4ac9d88
xor edx, esi
sub edi, ecx
jmp 0x4775dd
mov ebx, 0x2a371b56
mov esi, edx
inc edx
xchg esi, edx
xchg edx, edi
ror edx, 0x1e
ror edi, 0x15
or edx, esi
mov edx, edi
bswap ecx
jmp 0x476907
pop ebx
dec esi
or ecx, edi
and ecx, edx
xor edi, edx
or ecx, 0xe4b37fd3
xchg edi, esi
add ecx, edi
add esi, edx
xchg edi, esi
and ecx, esi
jmp 0x477106