Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Impersonate user

Disassembly:
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xffffff32
jne 0x401089
call sub.ntdll.dll_NtExtendSection
call sub.advapi32.dll_LogonUserA
call sub.ntdll.dll_NtExtendSection
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.ntdll.dll_NtExtendSection
call sub.ntdll.dll_NtExtendSection
call sub.kernel32.dll_GetTapePosition
call sub.kernel32.dll_GetTapePosition
call sub.ntdll.dll_NtExtendSection
call sub.ntdll.dll_NtExtendSection
call sub.ntdll.dll_NtExtendSection
call sub.ntdll.dll_NtExtendSection
call sub.ntdll.dll_NtExtendSection
call sub.ntdll.dll_NtExtendSection
call sub.ntdll.dll_NtExtendSection
call sub.ntdll.dll_NtExtendSection
call sub.advapi32.dll_LogonUserA
call sub.ntdll.dll_NtExtendSection
call sub.advapi32.dll_LogonUserA
call sub.kernel32.dll_GetTapePosition
call sub.ntdll.dll_NtExtendSection
call sub.user32.dll_SendMessageCallbackW
call sub.user32.dll_SendMessageCallbackW
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xfffffef9
jne 0x401135
call sub.user32.dll_SendMessageCallbackW
call sub.ntdll.dll_NtExtendSection
call sub.ntdll.dll_NtExtendSection
call sub.kernel32.dll_GetTapePosition
call sub.kernel32.dll_GetTapePosition
call sub.kernel32.dll_GetTapePosition
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.kernel32.dll_GetTapePosition
call sub.user32.dll_SendMessageCallbackW
call sub.user32.dll_SendMessageCallbackW
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.ntdll.dll_NtExtendSection
call sub.kernel32.dll_GetTapePosition
call sub.advapi32.dll_LogonUserA
call sub.ntdll.dll_NtExtendSection
call sub.user32.dll_SendMessageCallbackW
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.advapi32.dll_LogonUserA
call sub.advapi32.dll_LogonUserA
call sub.advapi32.dll_LogonUserA
call sub.advapi32.dll_LogonUserA
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.advapi32.dll_LogonUserA
call sub.ntdll.dll_NtExtendSection
call sub.kernel32.dll_GetTapePosition
call sub.advapi32.dll_LogonUserA
call sub.kernel32.dll_GetTapePosition
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xffffff38
jne 0x401196
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.advapi32.dll_LogonUserA
call sub.kernel32.dll_GetTapePosition
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.advapi32.dll_LogonUserA
call sub.kernel32.dll_GetTapePosition
call sub.user32.dll_SendMessageCallbackW
call sub.user32.dll_SendMessageCallbackW
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.user32.dll_SendMessageCallbackW
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.user32.dll_SendMessageCallbackW
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xfffffef7
jne 0x401210
call sub.user32.dll_SendMessageCallbackW
call sub.kernel32.dll_GetTapePosition
call sub.kernel32.dll_GetTapePosition
call sub.advapi32.dll_LogonUserA
call sub.advapi32.dll_LogonUserA
call sub.ntdll.dll_NtExtendSection
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.ntdll.dll_NtExtendSection
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.user32.dll_SendMessageCallbackW
call sub.ntdll.dll_NtExtendSection
call sub.user32.dll_SendMessageCallbackW
call sub.advapi32.dll_LogonUserA
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
call sub.user32.dll_SendMessageCallbackW
call sub.advapi32.dll_LogonUserA
call sub.advapi32.dll_LogonUserA
call sub.user32.dll_SendMessageCallbackW
ret
jmp 0x47570b
and ecx, esi
add edx, 0x99d4d541
xchg esi, edi
jmp 0x4763ae
call fcn.0047802f
sub esi, edi
neg edi
sub edx, 0x9ec44cb9
xor esi, edi
and edi, esi
sub ecx, edi
xor edi, 0x9ec54b47
or ecx, edx
add edi, ecx
jmp 0x475b99
pop ebx
add esi, edx
mov edx, ecx
xor edx, esi
mov edx, ecx
neg edi
xchg edi, ecx
jmp 0x47810a
pop ebx
add edi, 0x9ed0b8ee
mov edx, ecx
add esi, 0x9ed13f5a
and ecx, edi
bswap esi
and edi, esi
and esi, edx
jmp 0x4772ac
mov ebx, 0x2a371b56
add edi, esi
and esi, 0x9ed2c02c
xchg edx, ecx
or ecx, 0x9ed34a5f
and edx, esi
dec ecx
inc ecx
and edx, edi
add ecx, 0x9ed5447d
jmp 0x476958
mov ebx, 0x2a371b56
sub ecx, edx
xor esi, 0x9ed5d9bd
and edx, ecx
not edi
or edx, 0x9ed69480
xchg esi, edi
add edi, 0x9ed72192
jmp 0x475bb5
pop ebx
shl ecx, 3
xor edx, ecx
and esi, 0x9ed7f54c
or ecx, edi
and edi, ecx
inc edx
jmp 0x477fb9
push 0x99efa618
xor edi, edx
or edx, ecx
or esi, ecx
xor edx, ecx
add edx, edi
or ecx, edx
xor edi, esi
dec edx
xor edx, esi
xchg edx, esi
mov edi, ecx
or edx, edi
jmp 0x476541
mov ebx, 0x73716341
sub ecx, 0x9ee0cbde
sub esi, edx
or ecx, edx
mov edx, ecx
rol edx, 0x1b
and esi, ecx
xor ecx, edx
jmp 0x4774fd
call ebx
mov edx, esi
xchg esi, edi
shl edi, 3
add esi, edi
or ecx, 0x9ef190c6
bswap ecx
xchg edi, esi
neg esi
add esi, 0x9ef2ceed
jmp 0x4762c2
push 0x7430b
dec edi
and edx, ecx
not esi
and esi, edi
ror edi, 0x18
jmp 0x476212
pop ebx
not ecx
or esi, 0x9f1e8f17
mov esi, edx
or ecx, edi
or edi, 0x9f2030df
add edi, edx
jmp 0x476300
call ebx
and edx, edi
xor edi, 0x9f2adc2b
sub edi, 0x9f2b2340
shl ecx, 0xc
xchg edi, esi
neg edx
jmp 0x477478
call fcn.0047802f
add esi, edi
xor ecx, edi
bswap ecx
mov esi, edi
sub edi, 0x9f2d8513
rol edx, 4
dec esi
xor esi, 0x9f2e7004
dec ecx
and ecx, edx
mov ecx, esi
xor esi, edi
mov esi, ecx
jmp 0x4767be
push 0x99e4f87a
inc esi
xor edi, edx
shl edi, 0x1e
rol edi, 0x11
sub edx, ecx
inc edx
sub esi, edi
rol esi, 0xa
sub ecx, 0x9f365892
jmp 0x4786ca
pop ebx
or edx, ecx
xor esi, ecx
xchg ecx, esi
xchg edi, ecx
not edi
add edi, ecx
xor edx, 0x9f3b3231
add ecx, 0x9f3b84d0
add edi, esi
xor edx, edi
jmp 0x477237
push 0x99ec31e3
sub edi, 0x9f482b97
and esi, ecx
xchg edi, ecx
and edi, 0x9f48f155
mov esi, edi
xchg edi, esi
shr esi, 0x12
xchg esi, edx
xchg ecx, edx
jmp 0x476e4e
mov ebx, 0x73716341
dec ecx
and ecx, 0x9f4e040a
mov ecx, esi
neg edi
or edi, 0x9f4ebee5
or ecx, 0x9f4efdb9
sub edi, edx
xchg ecx, edi
or esi, edx
xor edx, 0x9f5004a0
shl edi, 0x11
xor ecx, 0x9f5081e9
neg ecx
and ecx, esi
dec edx
jmp 0x478061
push 0x99e21c99
and esi, edx
sub ecx, 0x9f5362c6
or ecx, edi
xchg edi, edx
jmp 0x47886d
push 0x99f240cc
add edi, ecx
add ecx, edx
shl edx, 0x1f
and edx, esi
mov edx, 0x9f55307b
sub edx, esi
mov edx, ecx
and esi, 0x9f55f51a
jmp 0x47848f
push 0x99f4948c
and ecx, edi
and ecx, 0x9f64f85b
inc edx
shl edi, 0xb
dec ecx
xchg esi, edi
add esi, edi
jmp 0x47831a
pop ebx
dec edx
sub edx, esi
not edx
shl edi, 3
sub edi, edx
sub ecx, edi
neg edx
or ecx, 0x9f768073
or edx, esi
jmp 0x476b75
push 0x99f9d5b4
or edi, edx
xchg esi, ecx
ror edx, 7
and edi, ecx
or ecx, edx
xor esi, edx
and ecx, edi
sub edi, 0x9f78c95a
inc edx
and edx, esi
add edi, esi
not ecx
shr edx, 0x17
jmp 0x475831
push 0x99fc79bf
shr ecx, 0x15
sub esi, edx
bswap edx
sub esi, 0x9f7e9c32
mov edx, 0x9f7ed929
xchg ecx, edi
mov edx, esi
mov edx, edi
jmp 0x477217
push 0x99dab66a
xor edi, esi
and ecx, edx
and edx, 0x9f863921
mov ecx, 0x9f867722
shr esi, 0x1b
sub ecx, edx
mov edi, 0x9f87406c
mov esi, 0x9f877e9e
or edx, 0x9f8880be
and ecx, esi
sub edx, edi
add edi, 0x9f893502
jmp 0x4771b5
pop ebx
inc edi
sub ecx, edx
sub edi, 0x9f9f1204
dec ecx
and esi, ecx
or edx, edi
sub ecx, esi
or edx, ecx
or edi, edx
add ecx, edx
mov ecx, esi
and esi, 0x9fa17c91
jmp 0x477cf2
push 0x401400
ror ecx, 0x14
or edx, edi
dec edi
sub esi, 0x9fa781df
mov edi, 0x9fa7be59
mov esi, 0x9fa7fb69
add edx, edi
xor esi, edi
and edx, edi
and esi, 0x9fa8fb16
add edx, edi
xchg edi, esi
sub edi, esi
neg esi
jmp 0x478719
push 0x99f8aaae
or edi, 0x9faf3eb8
xchg edx, edi
add edi, ecx
dec esi
sub edx, ecx
xor ecx, edi
sub edx, edi
jmp 0x4773be
pop ebx
or ecx, 0x9fb358fb
and edx, ecx
inc esi
xor ecx, esi
dec edi
xchg ecx, esi
mov edx, edi
sub edx, esi
xchg esi, edi
mov ecx, edi
or edi, edx
add ecx, esi
rol ecx, 0x17
xchg esi, edi
jmp 0x47770e
pop ebx
shr esi, 7
shl edx, 5
dec edx
sub edi, 0x9fb7972a
xchg edx, edi
add ecx, esi
xor edi, edx
jmp 0x477951
pop ebx
inc edi
or edx, edi
dec esi
or ecx, edx
jmp 0x4769a5
push 0x99da1bb7
mov edx, esi
or edx, esi
mov ecx, 0x9fc5ee8d
mov ecx, 0x9fc63cbd
dec edi
sub edx, esi
and edi, ecx
xchg esi, edx
sub edx, 0x9fc76b9d
add edx, esi
jmp 0x476a9f
pop ebx
mov ecx, edx
or edi, esi
and esi, edx
shr ecx, 0x18
add esi, edi
mov edi, esi
add edi, edx
sub ecx, 0x9fd7e30f
sub esi, edx
and ecx, edx
ror edi, 0x15
jmp 0x476572
pop ebx
sub edx, 0x9fdd517c
add edx, 0x9fdd91dc
bswap edx
and edx, esi
xor edi, edx
rol ecx, 0x18
add esi, 0x9fdedb45
xor ecx, edx
and edx, 0x9fdf58fa
inc ecx
and ecx, esi
jmp 0x476e00
pop ebx
or esi, 0x9fe0351f
or esi, ecx
xchg ecx, edx
shl edx, 0x1c
or ecx, edx
xor ecx, edi
add edi, ecx
or ecx, 0x9fe1e524
sub ecx, edx
dec ecx
and esi, 0x9fe2b1cb
jmp 0x476ad2
mov ebx, 0x73716341
xor edx, edi
ror edx, 0x17
add edx, edi
jmp 0x478209
pop ebx
sub edx, esi
and esi, edi
mov ecx, 0x9fe76435
xchg ecx, edx
mov esi, ecx
xchg esi, edx
add edx, esi
nop
mov ecx, esi
jmp 0x475c13
call fcn.0047802f
mov ecx, 0x9ff707aa
add edi, esi
add edi, 0x9ff78103
xchg edi, esi
xchg ecx, edx
bswap edi
add ecx, edx
xor ecx, esi
ror edi, 0x12
shl edi, 0x1c
jmp 0x47767f
call ebx
xchg ecx, esi
xchg esi, edx
mov ecx, edx
xor esi, 0xa0007b44
and edx, 0xa000ba73
xchg edi, esi
xchg esi, edi
or ecx, esi
sub ecx, edi
sub edi, edx
sub edi, 0xa0023d6c
sub edi, ecx
add esi, 0xa002ba9e
sub ecx, 0xa00340f1
jmp 0x4761a2
pop ebx
mov esi, 0xa00e7203
add esi, edx
and ecx, edi
mov esi, edx
or ecx, 0xa00f658c
and ecx, edi
and ecx, edx
and esi, edi
dec edx
add edx, esi
jmp 0x47577e
call ebx
xchg esi, edx
not edx
and esi, 0xa0117e69
bswap esi
xor edi, esi
or esi, 0xa0124b67
xchg edx, ecx
add edi, 0xa012c843
jmp 0x477e26
push esp
add esi, 0xa01cc6ca
xchg ecx, edi
mov edx, 0xa01d3f72
or esi, ecx
xor esi, 0xa01db813
bswap edx
sub ecx, edi
dec edx
rol ecx, 3
xchg ecx, esi
shl edi, 0x1b
jmp 0x4784e5
push 0x99ef5d8a
rol ecx, 0x14
mov edx, esi
neg esi
xor edi, ecx
add edx, esi
or edi, esi
xchg ecx, esi
neg ecx
xchg edx, esi
or ecx, edi
xchg ecx, edx
xor ecx, 0xa026d8dc
inc ecx
jmp 0x4758d0
call fcn.0047802f
sub esi, ecx
add edi, esi
jmp 0x4776b8
call fcn.0047802f
rol esi, 1
dec edi
xchg ecx, esi
mov edi, esi
xchg ecx, esi
mov ecx, edi
or ecx, edx
jmp 0x476fe9
pop ebx
add ecx, esi
nop
add esi, edi
jmp 0x476edf
pop ebx
nop
and ecx, 0xa042b0a0
xchg esi, ecx
sub edx, 0xa0433a0c
sub edi, edx
or esi, edx
xor edx, esi
or ecx, edi
neg ecx
xor ecx, esi
xor ecx, edi
jmp 0x476f04
pop ebx
xor edx, edi
mov ecx, edi
sub esi, edx
rol ecx, 3
mov esi, ecx
rol esi, 0x17
xchg edi, edx
bswap ecx
not edi
jmp 0x47600a
push 0x99da6c7e
shr edx, 0x16
mov esi, edi
sub edx, 0xa04c4e39
xchg ecx, edx
and ecx, 0xa04cc9d2
rol ecx, 0xe
sub edx, ecx
add esi, 0xa04d8ff2
xor edi, ecx
or edx, 0xa04e0b93
dec ecx
and edx, esi
jmp 0x47607a
push 0x99f69c1e
mov edi, esi
not edx
jmp 0x4783ea
pop ebx
inc edx
and edx, 0xa04fd7c2
xor ecx, 0xa05016a5
mov esi, edi
mov esi, edi
jmp 0x476a62
push 0x99eeca91
rol edi, 3
ror edi, 0x1d
inc edx
or ecx, esi
jmp 0x477e01
mov ebx, 0x2a371b56
mov edi, esi
add edi, 0xa0617ee1
xchg edx, esi
xor edx, ecx
or esi, edi
sub ecx, edi
and edx, 0xa062bd1b
or edi, 0xa062fbc5
and esi, edi
add edx, 0xa0637358
jmp 0x476966
call ebx
shl ecx, 0x10
and ecx, edx
sub edx, edi
add edx, ecx
jmp 0x47587b
push 0x40
and edx, ecx
inc esi
not esi
inc edx
or edx, esi
sub ecx, edx
or ecx, 0xa07a1806
jmp 0x475abc
pop ebx
or esi, edx
xor esi, edi
mov ecx, edx
or edi, esi
ror edx, 7
mov edi, esi
xchg edx, ecx
sub edx, ecx
rol edx, 0x1d
and ecx, esi
inc edx
not esi
shr ecx, 0xd
inc edx
jmp 0x47628c
pop ebx
and ecx, edx
add esi, ecx
shl esi, 6
not edx
mov ecx, edx
neg edi
or esi, edi
xchg edi, ecx
mov ecx, edx
neg edi
or esi, edi
sub edi, esi
inc edx
jmp 0x476a21
push 0x99ec7bb6
mov ecx, esi
xor edi, esi
shl edi, 1
mov esi, edx
ror ecx, 0x1a
inc esi
sub edi, 0xa094fcf2
xor ecx, esi
sub edx, edi
xchg edi, edx
xor ecx, 0xa095fcf6
xchg edx, esi
or ecx, edx
xor edi, 0xa096b1e1
jmp 0x478851
pop ebx
and edx, 0xa09d903c
sub edx, edi
add ecx, 0xa09e0b6c
add ecx, esi
mov ecx, edx
sub esi, edx
and edx, 0xa09f0e28
nop
and edi, ecx
xchg ecx, esi
jmp 0x47811e
mov ebx, 0x4132136a
sub edx, edi
or ecx, 0xa0a05fce
xchg edi, ecx
rol ecx, 0xb
and esi, ecx
add edx, 0xa0a1582c
or esi, ecx
or esi, ecx
bswap ecx
and edi, esi
mov ecx, edi
and edi, esi
and esi, ecx
add edx, ecx
rol edi, 0x1f
jmp 0x476fc6
call fcn.0047802f
xor edi, esi
or esi, edx
and esi, edi
xchg ecx, edx
bswap edx
xor ecx, edi
and edx, 0xa0af4b9a
shr esi, 2
sub esi, edx
mov edi, edx
jmp 0x47683b
call ebx
ror esi, 9
xchg ecx, edx
add esi, ecx
not ecx
jmp 0x4785a8
call fcn.0047802f
shl edx, 1
bswap edi
sub edi, 0xa0b3bebd
inc edi
sub edi, esi
shr edx, 0x16
add edx, esi
shr edx, 0x15
neg edx
xor esi, edx
xor esi, edi
jmp 0x475973
push 0x99f3ff8d
sub edi, esi
and esi, edi
ror edx, 0xe
shl ecx, 3
shr esi, 3
and edi, ecx
shr edx, 9
rol esi, 2
jmp 0x4782ec
push 0x99f1f78a
mov edx, esi
add edi, ecx
xchg esi, edx
or esi, 0xa0cef775
sub edi, ecx
and ecx, edi
or esi, 0xa0d04225
jmp 0x475dd0
call ebx
and edx, esi
xor edi, ecx
xchg ecx, edx
xchg edi, esi
dec ecx
bswap edi
mov ecx, 0xa0d61fbc
and edx, 0xa0d65d90
jmp 0x4776cf
push 0x99dafe04
not esi
mov edi, esi
and edx, edi
or edi, esi
or edx, esi
shr esi, 0x1b
xchg ecx, edx
or ecx, 0xa0d86eed
ror ecx, 8
add edi, ecx
add esi, edi
jmp 0x4776f6
push 0x99f93f58
xchg esi, edx
xor ecx, esi
xchg ecx, esi
or edx, ecx
xor ecx, esi
and edx, esi
jmp 0x4787c1
push 0x99fcc36c
add edx, ecx
or edx, 0xa0ded3ef
or esi, edi
or edx, 0xa0df61e8
ror edi, 0x1b
rol edi, 0x18
jmp 0x477b00
pop ebx
add edi, ecx
xchg ecx, edi
add edi, edx
xor edx, esi
bswap edi
and edi, esi
sub ecx, edi
add ecx, edx
xor ecx, edx
xor esi, edi
sub edi, esi
add esi, ecx
jmp 0x475fa5
pop ebx
and edi, ecx
sub edx, 0xa0e53f5f
not ecx
add edx, edi
add edx, esi
add edi, esi
xchg ecx, edx
sub edi, 0xa0e6c4c1
mov edi, edx
and edi, esi
neg edi
shr edi, 0xb
ror ecx, 0xa
and edi, ecx
jmp 0x475d1f
push 0x99ea2b9a
neg esi
xor edx, edi
xchg edi, edx
dec edi
nop
add edx, edi
jmp 0x477c8c
push 0x99e1d3e8
inc ecx
xchg ecx, esi
xor edx, ecx
xchg ecx, edi
and edx, edi
jmp 0x475dba
push 0x99f8f510
add edi, 0xa0fee7e9
and ecx, edi
neg esi
xchg edx, ecx
rol esi, 0x12
not esi
or edi, edx
add ecx, esi
jmp 0x4771db
pop ebx
add edi, esi
add edi, edx
and esi, edx
neg esi
ror edx, 8
and edi, 0xa10c4461
or edx, 0xa10c8521
and edi, edx
xchg edi, ecx
sub ecx, edx
mov esi, 0xa10dce4d
mov esi, ecx
jmp 0x477140
pop ebx
and ecx, edx
sub ecx, edi
or ecx, esi
or edi, edx
xchg edx, esi
add ecx, 0xa10fb020
or edi, edx
xchg esi, edx
and edi, 0xa1106d88
sub edx, esi
jmp 0x477268
mov ebx, 0x2a371b56
or esi, edx
xor ecx, esi
shl edi, 7
or edx, esi
xchg edi, edx
jmp 0x478647
call fcn.0047802f
dec edi
or ecx, edx
or ecx, 0xa117e08c
xor edi, edx
neg edi
add edx, esi
and ecx, esi
add esi, edi
jmp 0x4766e9
push 0x99e58a32
and ecx, edx
rol ecx, 0xb
mov ecx, 0xa11fc0d9
nop
add ecx, esi
mov ecx, esi
xor edi, ecx
sub edx, esi
inc esi
jmp 0x475d6b
call ebx
and edi, 0xa134312d
shr esi, 0x1d
mov ecx, edi
or edi, ecx
xor esi, ecx
and ecx, edx
neg ecx
or esi, ecx
not edi
jmp 0x475c4f
call ebx
bswap esi
sub edx, esi
bswap ecx
rol ecx, 0x1c
add ecx, edi
xchg edx, edi
rol ecx, 0x13
jmp 0x47679e
pop ebx
nop
or esi, edi
mov edx, ecx
mov edx, esi
shl edx, 0x13
and edi, esi
mov edi, edx
add ecx, 0xa13c75f2
mov edi, esi
add esi, 0xa13cef71
mov esi, 0xa13d2eed
jmp 0x475b14
push 0x99db46c7
add ecx, edi
sub esi, ecx
xchg edx, edi
neg edi
neg esi
xchg edx, edi
and edx, esi
jmp 0x4779cf
pop ebx
shr edx, 5
sub edi, esi
bswap ecx
xchg esi, edx
and edi, ecx
xchg edi, edx
xor edi, edx
xchg ecx, edx
sub esi, ecx
xchg edi, ecx
xchg edx, edi
and ecx, esi
not edx
xchg edx, edi
jmp 0x476519
mov ebx, 0x2a371b56
add edi, ecx
add edx, 0xa14d1e64
xchg edx, esi
sub ecx, edx
mov edi, esi
mov esi, edi
xor esi, edx
xchg esi, edi
sub ecx, edi
rol esi, 5
rol edi, 8
and ecx, 0xa14f9788
dec edx
jmp fcn.004780f6
call fcn.0047802f
xor esi, edi
and ecx, edi
rol ecx, 0x1c
inc esi
rol ecx, 9
or edx, esi
xor edi, edx
inc edi
jmp 0x477198
push 0x99e1418c
inc edx
sub edi, edx
xor edx, edi
mov esi, edx
or edx, esi
shr ecx, 0xd
jmp 0x477eb7
mov ebx, 0x2a371b56
mov edx, 0xa179ab43
xor edx, esi
and ecx, esi
shr ecx, 0xd
rol edx, 0x1e
mov esi, ecx
rol edi, 0x11
neg edx
not edx
jmp 0x4777d0
pop ebx
dec edi
shr edx, 0x11
shl ecx, 0xe
add edi, ecx
add ecx, 0xa1803607
neg esi
and edi, edx
and edx, ecx
bswap edi
mov ecx, edi
sub esi, edi
or edi, esi
and edi, ecx
sub ecx, edx
jmp 0x476493
pop ebx
or edx, 0xa18a3582
or esi, ecx
add edx, ecx
sub edx, esi
shr edx, 0x1c
not edx
jmp 0x478733
push 0x99fd0fb6
or edi, esi
and ecx, edx
sub edi, edx
add esi, ecx
jmp 0x4777a3
call ebx
or edx, 0xa1951d34
mov esi, ecx
and edx, 0xa19613e9
dec esi
and esi, edx
and edi, edx
xchg esi, edx
rol ecx, 4
and edi, esi
or edx, esi
xor ecx, edi
or edi, esi
mov ecx, 0xa1987957
and esi, edx
jmp 0x4764ed
push 0x99ea7404
sub edi, 0xa1ae6b12
xchg edx, esi
add edi, esi
sub edi, edx
neg edi
add edi, ecx
add ecx, edi
mov edi, 0xa1b00dbe
or esi, edx
shl ecx, 0x1d
or edx, 0xa1b0d2e4
xor ecx, edi
jmp 0x478553
push 0x99df4396
xor edi, esi
inc esi
and edi, esi
inc esi
and esi, edi
sub esi, ecx
rol edi, 0xe
not esi
inc edx
jmp 0x478274
pop ebx
sub esi, edi
xchg edi, edx
rol edx, 0x13
or edi, edx
add esi, edx
mov edi, esi
or edx, esi
xor edx, 0xa1b892db
jmp 0x476ddd
call ebx
shl edx, 0x1a
sub edx, 0xa1c73007
sub esi, 0xa1c76db7
and edx, esi
xor edi, edx
and edx, esi
dec esi
and edi, edx
neg edx
sub edi, ecx
xchg esi, edx
jmp 0x477ab3
push 0x99ef13e3
and esi, ecx
ror edx, 0xc
xchg esi, edi
add ecx, 0xa1cfd9f9
xor ecx, 0xa1d017d2
or edx, ecx
sub ecx, 0xa1d08ff8
jmp 0x4768a2
pop ebx
or ecx, edi
neg edi
dec edi
mov ecx, 0xa1d19ced
not edx
sub edi, ecx
or ecx, edx
jmp 0x4762e7
push 0x99e18abe
add ecx, 0xa1dc4e85
and ecx, 0xa1dc9622
and edi, edx
add ecx, edx
xchg edi, edx
and esi, 0xa1ddaa4c
sub edi, 0xa1ddf34d
xchg edx, edi
shr ecx, 0xa
dec esi
dec edx
inc esi
jmp 0x4772eb
pop ebx
shr edx, 5
or esi, edi
or edi, 0xa1e1f9a5
inc edi
and edi, edx
sub edx, ecx
rol edx, 0x18
or ecx, 0xa1e3384e
xor edi, esi
and edx, esi
and edx, 0xa1e3ec75
mov edx, ecx
mov esi, ecx
mov edx, esi
jmp 0x47744e
pop ebx
add ecx, 0xa1ef0ea0
or edx, 0xa1ef5b5d
xor ecx, 0xa1ef9840
mov edx, edi
sub edx, esi
mov ecx, edi
xor ecx, esi
and ecx, edx
jmp 0x4770f9
pop ebx
add esi, 0xa1f18631
or edi, 0xa1f1c363
xor edx, esi
sub edi, ecx
mov esi, edi
and ecx, edx
and ecx, 0xa1f3afbf
sub edx, edi
ror ecx, 0x16
add ecx, 0xa1f47bb5
xchg edx, esi
mov esi, edi
xor ecx, edx
or ecx, esi
jmp 0x477a1e
call fcn.0047802f
xchg ecx, esi
xor esi, edx
ror edx, 0x1e
shl edi, 0x1b
or ecx, edi
jmp 0x477b3b
pop ebx
sub esi, ecx
inc ecx
inc edx
xor edx, edi
and edx, ecx
add esi, ecx
or edi, ecx
or esi, ecx
jmp 0x476ae0
push 0x99ddd6cd
or edi, ecx
xor edx, esi
shr edi, 0x1e
mov edi, 0xa2385ce3
xchg edx, esi
ror ecx, 0xf
and ecx, edx
mov edx, 0xa23955a3
sub ecx, edi
xchg edi, edx
jmp 0x4758f1
call fcn.0047802f
and edi, esi
xchg ecx, edx
add ecx, edx
shr esi, 0xf
add edx, ecx
xor esi, edx
xchg esi, ecx
xchg edi, ecx
rol ecx, 0x1e
or edi, 0xa23c6882
and ecx, 0xa23ca536
xchg edi, ecx
jmp 0x476c7c
call fcn.0047802f
add edx, esi
xchg edx, ecx
shr edi, 0xc
xchg edx, ecx
sub edi, esi
mov edi, esi
sub ecx, 0xa248ecc3
add edi, ecx
xor edx, 0xa249743c
xchg esi, edx
jmp 0x477dc1
push 0x99df8b57
or ecx, edx
neg esi
sub edx, edi
and edx, esi
xor edi, 0xa2503dae
ror edi, 6
and esi, 0xa250b9de
jmp 0x475857
push 0x99f44974
not edx
add esi, edx
sub edi, ecx
add edx, ecx
xor ecx, edi
or edi, esi
or ecx, edx
not edx
jmp 0x475ecc
mov ebx, 0x73716341
inc esi
sub esi, edi
ror ecx, 0xd
sub esi, 0xa25c79d5
or edi, 0xa25cb7a4
rol edx, 0xc
xor edx, 0xa25d3334
mov ecx, esi
jmp 0x477011
push 0x99f6e7f7
dec edx
xor edx, esi
neg edi
xchg ecx, edx
xor esi, ecx
xchg esi, ecx
ror edx, 0x1e
or ecx, esi
xor esi, edx
jmp 0x47749a
call ebx
neg edi
xor ecx, edi
and edi, 0xa272085f
ror edi, 0x17
xor esi, 0xa2729627
or edi, 0xa272d4db
xchg ecx, esi
rol edi, 0x1f
add edx, 0xa2738db0
and ecx, edi
xor ecx, edi
jmp 0x477d0c
mov ebx, 0x73716341
xchg ecx, esi
shl edx, 0x1c
xchg edx, esi
inc edi
xor edi, edx
xor ecx, esi
not esi
add esi, edx
ror ecx, 5
ror esi, 7
and edx, ecx
jmp 0x478144
push esp
sub esi, edx
add ecx, edi
neg ecx
mov ecx, edi
rol edx, 0x14
sub ecx, edx
neg edx
or edi, edx
xchg edi, edx
and ecx, edi
jmp 0x476ce7
mov ebx, 0x73716341
bswap edi
add esi, edi
xchg esi, ecx
dec edx
xchg esi, ecx
xchg esi, edx
sub esi, ecx
or ecx, edi
and edi, ecx
sub edx, 0xa287bfa0
jmp 0x47575a
pop ebx
inc edx
xchg edi, esi
sub ecx, 0xa28bc9d2
sub edi, 0xa28c0608
or edx, esi
xor ecx, edx
and esi, ecx
sub edx, 0xa28d06c5
add edx, esi
mov edi, 0xa28d7d6c
add ecx, 0xa28dbcfe
jmp 0x477fdb
mov ebx, 0x2a371b56
mov esi, edi
dec edi
mov edi, edx
xchg edx, ecx
ror ecx, 0x1e
sub edx, 0xa2953e0b
xor esi, edx
or esi, edx
inc esi
xor edx, edi
or edi, ecx
bswap edx
and ecx, edx
not edx
xchg edi, ecx
jmp 0x47665f
call fcn.0047802f
not edi
or edi, edx
shr edx, 0x15
or edi, 0xa2987e49
rol ecx, 0x14
and edi, esi
neg ecx
sub edx, edi
shr edx, 0xb
mov edi, ecx
sub edx, ecx
jmp 0x47843e
push 0x99e5414b
sub edx, edi
dec edx
add esi, ecx
rol edi, 0x15
xchg edi, ecx
not ecx
jmp 0x47757c
call ebx
or ecx, 0xa2c904d6
or esi, ecx
rol ecx, 0xe
add edx, edi
or edx, esi
sub edi, esi
and ecx, edi
jmp 0x475815
pop ebx
dec ecx
neg ecx
rol edx, 1
sub ecx, 0xa2cb9779
rol esi, 0x1b
sub edi, 0xa2cc151f
mov edx, 0xa2cc5408
and ecx, 0xa2cca003
add edx, ecx
inc edx
jmp 0x477efa
push 0x99f98abd
xchg edx, esi
or edx, edi
ror ecx, 9
add edx, ecx
or edx, edi
xchg edx, esi
or ecx, edi
or ecx, 0xa2d767bd
inc ecx
add ecx, edi
sub edx, esi
jmp 0x475fc1
push 0x99ecc415
sub edi, ecx
bswap edx
sub edi, ecx
add esi, ecx
xor edi, esi
xor ecx, edx
neg ecx
mov ecx, esi
or esi, edi
jmp 0x47861c
push 0x99e2644a
inc ecx
mov edx, ecx
shr esi, 7
ror esi, 6
mov ecx, esi
inc edi
neg esi
xchg esi, edi
xchg edx, edi
jmp 0x476bb0