Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff31
jne 0x40107a
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
ret
call sub.user32.dll_GetFocus
cmp eax, 0xfffffef0
jne 0x401103
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
ret
call sub.user32.dll_GetFocus
cmp eax, 0xffffff1d
jne 0x401191
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
ret
call sub.user32.dll_GetFocus
cmp eax, 0xfffffee8
jne 0x40120b
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ntdll.dll_ZwAdjustPrivilegesToken
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ole32.dll_WriteOleStg
call sub.ntdll.dll_ZwAdjustPrivilegesToken
ret
jmp 0x4753d3
mov ecx, edi
sub ecx, edi
bswap edx
inc ecx
add edi, ecx
jmp 0x475baa
call fcn.00475477
dec edx
xchg edx, ecx
sub ecx, edi
bswap ebx
mov edx, ebx
jmp 0x476c24
pop esi
bswap ecx
xchg edi, ecx
inc ecx
add edi, edx
dec ecx
and ebx, edi
xor ecx, edi
jmp 0x47635f
pop esi
xor ebx, 0x9f7258ed
sub ebx, edi
and ecx, edx
mov edx, 0x9f77b9da
and edi, edx
sub ebx, edx
or edi, ebx
xor edi, 0x9f7f1dea
mov edx, 0x9f80e8de
sub edx, edi
jmp 0x477f69
mov esi, 0x73716341
or edi, edx
xchg ebx, edx
xchg ecx, edx
mov edi, edx
and ebx, ecx
add edx, 0x9f8ddd1c
or ebx, 0x9f8faf04
and ecx, edi
dec edi
or ebx, ecx
or ecx, 0x9f970da7
xor edx, edi
sub edi, ecx
and edi, 0x9f9d3310
ror edi, 9
jmp 0x478075
push 0x9affb5ef
xor ecx, edi
or ecx, ebx
xor ecx, edx
not ebx
xor edx, ecx
or ecx, ebx
not edx
shl ecx, 0x11
and edx, ebx
or edx, edi
mov edx, 0x9fb6ae61
xchg edi, ecx
ror ecx, 0x1b
or ecx, 0x9fbc20d3
jmp 0x476fb6
push 0x9ac75942
rol ebx, 0xb
neg ecx
jmp 0x476e1f
mov esi, 0x40495727
xor ebx, ecx
xor edi, 0x9ff57940
not ebx
inc ebx
neg ecx
mov edi, edx
dec edi
xor edi, ebx
or ecx, edi
xchg edx, ecx
sub ebx, ecx
rol ecx, 0x1a
jmp 0x4777de
mov esi, 0x73716341
sub edi, edx
xor edi, edx
mov ecx, edx
ror ecx, 0xd
and edi, edx
sub ecx, edx
xor ecx, 0xa0581e18
or ebx, 0xa05a0336
and ecx, 0xa05bd23e
neg ebx
xchg ecx, edx
jmp 0x47736a
push 0x9b235bff
or ebx, edi
xor edx, ecx
sub edx, 0xa07d9bd1
ror edx, 0x12
shl edx, 0xc
xchg ecx, edx
jmp 0x476075
mov esi, 0x73716341
sub ebx, ecx
or edi, 0xa09e110b
or edi, 0xa09fe168
xchg ebx, edx
and edx, ebx
sub ebx, edx
xor edi, ebx
add edx, 0xa0ab9ab0
xchg ebx, ecx
xor ebx, edx
mov ecx, ebx
sub ebx, 0xa0b3dde0
ror edx, 9
rol edx, 0x1c
add edx, ebx
xor ebx, 0xa0be4259
jmp 0x478380
push 0x9aad57dd
not edi
and ebx, 0xa102d96b
mov edx, edi
neg edx
or ecx, 0xa10acd6f
ror ecx, 7
mov ebx, 0xa1105c7f
sub edx, 0xa11232de
xor edx, 0xa11406cf
xor edx, ebx
and ecx, edx
or ebx, ecx
shl edi, 0x18
dec edx
jmp 0x476eb9
push 0x9b026052
xchg edi, edx
ror ecx, 0xd
inc ebx
sub ebx, 0xa126950b
inc edi
or edx, ebx
rol ecx, 0xb
and edi, ecx
mov edx, edi
add edi, ecx
and ebx, edi
xchg edx, ebx
or ebx, 0xa1395f1d
jmp 0x477b60
pop esi
sub edx, 0xa163e8c0
and ecx, edx
sub ecx, edi
add edi, ebx
xchg ebx, ecx
xchg ebx, edx
dec edx
and edi, ebx
not edx
xor ebx, ecx
sub ecx, edi
xchg ecx, edi
add ecx, edi
jmp 0x476b73
call esi
and edi, ecx
xor ecx, edi
bswap ecx
xor ecx, edi
mov edi, ebx
dec ebx
or edx, edi
mov ebx, edi
mov ecx, edi
and edi, edx
jmp 0x476a83
push 0x9aa1cad4
mov edx, edi
and edi, ebx
mov ebx, ecx
or ebx, 0xa34a00e7
xchg ecx, edi
mov ecx, 0xa34ddb3c
mov edx, 0xa34fa55d
rol edi, 1
sub ebx, 0xa353354b
jmp 0x4768eb
call fcn.00475477
sub edx, ecx
add edi, 0xa38b0d49
and edx, 0xa38cd9b6
xor edi, ebx
jmp 0x47594a
push 0x9b38aa1b
mov ebx, 0xa3b4c56c
shl edi, 0x13
xor edi, ebx
mov ecx, edx
sub ebx, edx
jmp 0x4779ca
call esi
sub ebx, edi
xchg ebx, ecx
mov ebx, edi
xor ebx, ecx
add ecx, ebx
shl edx, 0x1e
add ecx, ebx
and edx, ecx
neg edi
jmp 0x47835f
pop esi
add ecx, 0xa3d25c93
xor edx, edi
xor ecx, ebx
shr edx, 0x1b
or edx, edi
jmp 0x4766fd
push 0x9b0e30d4
sub ecx, 0xa3dbea86
and ebx, 0xa3ddde9c
mov ebx, ecx
xchg ecx, ebx
and ecx, edx
shr ebx, 7
jmp 0x476529
pop esi
ror ecx, 7
mov edx, 0xa585035a
or edi, ebx
add edx, 0xa588be50
xor ebx, edi
mov ebx, ecx
xor edx, ebx
xor ebx, edx
mov ecx, edx
mov edx, ebx
mov edx, ebx
rol edx, 8
xor ecx, edi
and edx, edi
mov edx, ecx
jmp 0x47627b
push 0x9ad33928
or edi, ecx
sub edx, ecx
xchg ebx, edx
xchg ebx, edx
shl ebx, 0xb
xor ecx, edi
and ecx, edi
xor edi, ecx
xor edx, edi
rol edi, 0x1a
sub edx, edi
sub edx, ecx
or ebx, ecx
jmp 0x478168
pop esi
or ecx, edx
and ecx, 0xa662c03e
xor edx, 0xa664a33c
xor ebx, edi
ror edi, 0xf
xchg ebx, ecx
rol ebx, 0x1a
xchg ebx, edx
mov ecx, 0xa6733bb6
sub ecx, edi
jmp 0x4754e9
call fcn.00475477
and ebx, edi
sub ebx, 0xa6849756
and edx, 0xa689d90c
or edi, ebx
rol edx, 0x1c
shl ebx, 0xd
ror ebx, 0xd
bswap edx
or ecx, 0xa6977c6f
or edx, ecx
nop
jmp fcn.00477ba3
push 0x9b24b15b
dec ebx
sub ebx, edi
mov ebx, edx
sub ecx, edx
xor ebx, ecx
mov edx, ebx
jmp 0x4755ea
call fcn.00475477
mov ebx, 0xa7a8aad2
bswap ebx
mov edi, ebx
sub ecx, edi
add ecx, edx
xchg edx, ecx
and ecx, ebx
sub edx, 0xa7befadb
shr ecx, 0x14
jmp 0x4764f3
push 0x9ae59157
add ebx, ecx
not ecx
xor ebx, edi
inc ebx
or edi, ecx
add ecx, edx
xchg ecx, edi
xor edi, ecx
jmp 0x475744
mov esi, 0x40495727
mov edx, edi
mov ecx, 0xa8010a34
or ecx, edi
jmp 0x476119
pop esi
mov ebx, ecx
xchg ebx, ecx
or edi, ebx
or ecx, edx
add ebx, edi
shr ecx, 0x10
jmp 0x478048
pop esi
mov ebx, 0xa8b73e87
neg ebx
sub edx, edi
xchg ecx, edx
add edx, edi
and ecx, edi
xor edx, 0xa8ca1817
add ecx, 0xa8cc1c53
inc edx
add ebx, 0xa8cfe744
neg ebx
xor edx, edi
bswap ebx
xor ecx, 0xa8e22066
jmp 0x477847
pop esi
shl ebx, 1
sub ebx, edi
mov ecx, ebx
jmp 0x476ac9
pop esi
shr ecx, 0x1d
ror ebx, 0xf
not ebx
inc ebx
add ebx, edx
inc edx
or ebx, 0xa9677738
not ebx
add edi, 0xa96ed638
mov edx, edi
xchg edx, ebx
sub edi, edx
jmp 0x47613d
mov esi, 0x40495727
and edi, ebx
mov ecx, edx
add edi, ebx
ror ebx, 0x1c
sub ebx, edi
not ebx
jmp 0x476c8a
pop esi
xor ebx, edi
xor ebx, edx
ror ebx, 5
xchg ecx, edx
or ecx, 0xa9de30cb
add edx, 0xa9e0075b
xchg ebx, edx
xor edi, edx
shl edi, 0x19
shl ebx, 0x11
xor ebx, ecx
sub ebx, 0xa9f54daf
xor edx, 0xa9f72928
jmp 0x475ec0
pop esi
rol edi, 0x1e
add edx, edi
add edi, ebx
and ecx, ebx
not ebx
add edi, ebx
or edi, ebx
xor edx, ebx
jmp 0x476918
push 0x9aeed515
xor ecx, ebx
xchg edi, ebx
or ecx, edx
and edx, 0xaa390e9b
and edx, edi
or ebx, ecx
xchg edi, ecx
rol edx, 0x14
mov edi, edx
mov edi, edx
dec ebx
add ecx, ebx
xor edx, ebx
jmp 0x47648c
mov esi, 0x73716341
xchg edx, ecx
or ecx, edx
sub ebx, 0xaaf8d080
xchg ecx, ebx
and edx, edi
add edx, ebx
nop
add ebx, ecx
mov edi, ecx
sub edi, edx
add edx, ecx
jmp 0x47765f
call esi
or edx, edi
xor ecx, edi
shl ecx, 0x19
and edi, edx
mov ecx, edi
add ecx, ebx
add ebx, 0xab5edba6
dec edx
jmp 0x4778ed
mov esi, 0x73716341
add ecx, 0xab704444
add edx, 0xab7211fe
rol edx, 6
neg ebx
and edi, edx
xchg ecx, edx
sub ecx, edi
mov ebx, edi
shl ebx, 0xa
neg ecx
jmp 0x476b97
pop esi
rol edi, 0x1b
not edx
jmp 0x4761e1
push 0x9afe6687
or edx, ecx
mov edx, 0xacaa25f8
xor ebx, ecx
inc ebx
xchg edx, edi
shl ebx, 0xf
add ebx, 0xacb358f5
and edi, ecx
mov ecx, edx
add edx, edi
add ebx, edx
bswap edi
bswap ecx
jmp 0x475549
pop esi
bswap edi
mov edx, edi
add ecx, 0xace9e7ed
ror ebx, 0x19
sub ecx, ebx
xor edx, ebx
sub ebx, 0xacf1f134
or edx, ecx
xchg ecx, edx
sub edi, ebx
and edi, edx
not ecx
and ebx, 0xacfcf1fc
jmp 0x4754b3
call esi
bswap ecx
add ebx, ecx
add ecx, edx
and edx, 0xad047d95
xchg edi, ecx
and ebx, edx
or edx, ecx
bswap ebx
mov ecx, ebx
sub edi, 0xad0f5e1f
add edx, edi
not ebx
dec edi
dec ebx
jmp 0x475cc6
push 0x9ac3797e
mov edi, ecx
mov ecx, edx
xchg ebx, edi
and ebx, 0xad2f27c2
xor ecx, ebx
dec ecx
jmp 0x476df9
pop esi
xor ecx, edi
rol ecx, 7
mov ebx, ecx
jmp 0x476dc6
call esi
sub ecx, 0xadb6e9cd
xor ecx, 0xadba85a3
xor edi, ebx
neg ecx
and edx, ecx
shl edi, 0x1d
jmp 0x47668b
push esp
sub ebx, ecx
xchg edx, ebx
or edx, 0xae15d82b
or ebx, 0xae17b24a
or ecx, 0xae198e0f
rol edi, 0xe
jmp 0x4774b1
push 0x9aa3114b
rol edi, 2
or edi, 0xae36d71e
or edi, ebx
rol edx, 5
add edx, ecx
add edi, ebx
add edi, 0xae401e60
add edx, 0xae41efef
xor ebx, ecx
rol ebx, 0x12
jmp 0x476cab
pop esi
xor edi, edx
or edx, 0xae49d4c7
and ebx, edi
add ecx, edi
neg edx
shl edi, 0x18
jmp 0x476308
pop esi
dec edx
sub edi, edx
or edx, ebx
and edi, 0xae7f4e56
shr ebx, 0xc
xor edi, ebx
and ebx, 0xae84bea0
mov ecx, 0xae868b95
sub ecx, edx
sub edx, edi
and ecx, edi
jmp 0x4774ff
call esi
xor ecx, edx
add edi, edx
sub edx, 0xae91ce7e
add ebx, edi
sub edx, ecx
dec edi
jmp 0x476869
pop esi
xchg edx, ebx
rol edx, 8
mov ebx, ecx
jmp 0x475e2d
mov esi, 0x40495727
xor edx, ebx
or ebx, 0xaec22d9b
mov edx, ecx
shl ecx, 0x19
or edx, edi
xchg ebx, edx
and edi, edx
and edx, ebx
jmp 0x475c2b
pop esi
rol ebx, 0x15
or ebx, edi
bswap edx
rol edi, 0xc
and edx, edi
bswap ebx
mov ecx, edi
shl edi, 9
xchg ecx, edx
bswap edx
bswap edx
sub edx, 0xaf07ff3c
jmp 0x478531
push 0x9b375c37
and ebx, ecx
xchg ecx, ebx
add edi, ecx
xor edx, edi
add ecx, 0xaf212731
or edi, 0xaf22fefc
neg ebx
sub ecx, edi
not edi
jmp 0x475c94
pop esi
nop
or edx, 0xaf3b0624
and edx, 0xaf3ce1cf
mov ebx, ecx
and ecx, edx
not ebx
jmp 0x47756a
pop esi
mov edi, edx
or ecx, edx
inc ebx
mov edi, ebx
or edi, ecx
or ecx, 0xaf67034e
bswap ecx
or edi, edx
inc ecx
ror edi, 0x19
inc ebx
neg ebx
jmp 0x47797c
push 0x9ac22456
add ebx, edx
mov ebx, edx
sub ebx, ecx
add ecx, ebx
xor edi, ecx
jmp 0x4767e5
push esp
add edx, ebx
xor edi, ecx
or ecx, edx
not ebx
xor ecx, edi
jmp 0x4768ad
call fcn.00475477
xchg ecx, edi
or edx, ecx
mov edx, edi
sub ebx, ecx
or edx, edi
and edx, ecx
mov edx, 0xafbeb4b5
dec ecx
xchg ecx, ebx
or ecx, edx
sub ecx, edx
add ecx, ebx
and edi, ecx
or edx, ebx
or edi, 0xafd8ad12
jmp 0x4779b0
call esi
add ecx, ebx
or ecx, edi
add edx, ebx
or edi, ebx
xor edi, edx
mov ecx, edx
xchg edi, ecx
and ebx, edi
sub edx, ebx
mov edi, 0xb06a7fb7
xchg ebx, edi
mov edi, edx
mov edi, 0xb0734c19
and ecx, edi
or ecx, edi
xor ecx, 0xb0789a6c
jmp 0x475f51
call fcn.00475477
or edx, edi
or ecx, 0xb09f645b
mov ebx, 0xb0a13f78
or ebx, edi
inc ebx
xor edi, edx
or ecx, ebx
mov edx, ecx
inc edx
jmp 0x475cac
push 0x9aa452b6
or ebx, 0xb0ae8a1d
shr ebx, 0x1e
or ebx, edx
rol ebx, 0xd
neg ecx
not ebx
jmp 0x4762f1
push 0x9b220af0
mov edi, ebx
xor edx, 0xb13532c0
xchg edi, ecx
sub edx, ebx
sub ecx, edx
mov edi, ebx
jmp 0x475700
push 0x9ac4c37d
shr edx, 0x14
not edx
or ecx, 0xb154046c
xor ebx, ecx
add ecx, ebx
rol edx, 9
xchg edx, ebx
add ecx, ebx
neg ecx
add ecx, ebx
mov ecx, ebx
jmp 0x478233
mov esi, 0x40495727
or ecx, ebx
ror ecx, 5
xchg edi, ebx
or edx, edi
and edi, edx
mov edi, 0xb16ffc78
or edx, ecx
add ebx, edi
or ebx, 0xb1752e81
xchg ebx, edi
jmp 0x4772db
push 0x9aae9be0
xchg ebx, edi
bswap ebx
add ecx, edi
shl ebx, 6
sub edx, 0xb1c49e88
mov edi, edx
xor ecx, 0xb1cca6c0
add edi, 0xb1cfe0d0
sub edi, ecx
jmp 0x4781e6
pop esi
and ecx, ebx
shl edx, 0x10
xchg ebx, edx
xchg edi, ebx
or ecx, ebx
xor ecx, edx
rol ebx, 0x1b
inc edi
bswap ebx
xchg edx, ecx
or edx, ecx
mov ebx, ecx
jmp 0x47842e
call esi
add edi, edx
ror edi, 0xa
sub edi, 0xb23d9740
add ecx, ebx
rol ebx, 0x1d
sub ebx, edx
add ecx, edi
shl ecx, 3
dec edi
sub edx, ebx
rol edi, 0xa
xor edx, edi
or edx, edi
neg edi
jmp 0x476770
push 0x9b010afa
or edx, edi
mov ecx, edx
and ebx, edx
rol ecx, 4
xor edx, ecx
dec ebx
jmp 0x475811
call fcn.00475477
and ebx, 0xb3abbb95
xor edi, 0xb3adab7c
and ebx, 0xb3af6c95
or ebx, 0xb3b131b8
add edi, ecx
mov edi, 0xb3b72fb7
and ebx, edx
sub edx, edi
add edi, 0xb3bee089
jmp 0x477238
call fcn.00475477
and edx, ebx
add ecx, 0xb44f51b0
mov ecx, ebx
add edi, ecx
and ebx, 0xb4550763
inc edx
shl edx, 3
shr ebx, 0x17
and edi, edx
jmp 0x47790a
mov esi, 0x4132136a
and edx, ebx
mov edi, ebx
shr edi, 0x1d
or ebx, ecx
xchg ecx, ebx
mov edi, edx
or ebx, edi
xchg ebx, ecx
and ecx, ebx
and ebx, 0xb49aadfe
rol edx, 0x18
and ecx, ebx
jmp 0x4784cc
push 0x73fd3
ror ecx, 0xe
mov ecx, edi
mov ecx, edx
and ebx, edi
xor edi, ebx
add edx, edi
neg ecx
and ebx, edx
sub ecx, edi
jmp 0x4781ff
mov esi, 0x40495727
mov edx, 0xb4ec0ad0
rol edi, 4
and edx, ecx
or edx, 0xb4f19ec1
or ecx, edi
xchg edx, ecx
xor ebx, 0xb4f75eb3
add edx, edi
and ebx, 0xb4fe4e96
jmp 0x475f8b
call esi
or edx, 0xb5246ff2
xor ebx, ecx
xor edx, 0xb52830c1
add ecx, 0xb52a102a
and edx, ebx
xor edi, ecx
xchg edx, ebx
or ebx, edx
xor ecx, edx
xor ebx, 0xb5356a7d
xor ecx, 0xb5374dda
xor ecx, edx
mov edi, ebx
sub ebx, edx
jmp 0x4776c5
call fcn.00475477
xor ecx, edx
add ebx, edx
add ecx, edx
add ecx, edx
or ebx, edi
add ebx, edi
xor edi, ebx
xchg ecx, ebx
bswap edi
or edi, edx
and ecx, 0xb5956cf2
sub edi, ebx
jmp 0x476f62
call esi
ror edx, 6
and edx, 0xb5c82d71
add ebx, edi
xor edi, ecx
xor ebx, edx
neg edi
shr ecx, 0xb
and ecx, ebx
add ebx, edi
mov edi, ebx
xchg edi, ebx
dec ecx
xchg edi, ecx
and ebx, ecx
xchg ebx, ecx
add edi, ecx
jmp 0x477930
call fcn.00475477
add ecx, 0xb60e5714
neg ecx
add ecx, edi
mov ebx, ecx
or ebx, edi
add ebx, edx
mov edi, edx
xor edx, ecx
xor ecx, edx
jmp 0x477c48
pop esi
and edx, edi
sub ecx, 0xb63dd52c
or ecx, 0xb63fb701
or edi, 0xb6419789
mov edi, 0xb643be68
jmp 0x4784e2
push 0x40
shl edx, 0xc
bswap ebx
or edx, ecx
shr ebx, 0x1d
rol ebx, 8
rol ebx, 0xd
jmp 0x47713b
push 0x9b2e0440
rol ebx, 0x15
mov edx, edi
rol ecx, 0x1c
xor edi, ebx
add ebx, 0xb6eab86c
add edx, ebx
dec ebx
xor ebx, ecx
mov edx, 0xb6f4bd53
add ebx, 0xb6f6a0be
xchg ebx, edx
mov edi, 0xb6fa7fa6
xchg edi, ebx
xor edi, ecx
sub edi, edx
shr edx, 7
jmp 0x47846a
push 0x9b0cddd9
xor ebx, 0xb7e6de87
or edx, ebx
xor ecx, 0xb7eac858
or ecx, edi
not ebx
jmp 0x475cdb
call esi
inc edx
sub ebx, ecx
xor ecx, edx
and ecx, ebx
mov ebx, 0xb965ca67
mov edi, 0xb967b7e4
xor ecx, edx
mov ecx, edi
jmp 0x476ee2
call fcn.00475477
and ecx, edi
neg ecx
or edx, edi
add edx, edi
xor edx, 0xb975c3f3
xchg ebx, edi
shr ebx, 0xf
xchg edx, ebx
rol ebx, 0x1d
or ecx, edi
neg edi
jmp 0x476876
push 0x9ad99840
xor edi, edx
shl ecx, 3
sub edx, ebx
or ecx, ebx
shr edx, 0x13
sub ebx, edi
ror ebx, 0x15
sub edx, edi
jmp 0x476a17
pop esi
or ebx, ecx
and ebx, edx
xor edi, edx
mov ebx, 0xbaf7acac
xor edx, 0xbaf98403
add ecx, 0xbafb62cf
and edx, 0xbb0165a5
xchg edx, ebx
and edx, ecx
or ebx, ecx
add edi, 0xbb08eab1
and edi, edx
xchg ecx, edx
ror edi, 2
jmp 0x476b47
call fcn.00475477
xor ecx, edx
xor edi, ecx
add edi, edx
mov edx, ecx
mov ebx, ecx
xor ecx, ebx
xor edi, 0xbbdb6083
and edx, ecx
sub edx, edi
shr ecx, 0x15
ror ecx, 4
xor edx, 0xbbe58c92
jmp 0x477643
push 0x9aec2fdc
add ebx, edx
sub ecx, ebx
sub edi, edx
neg ebx
add ebx, ecx
ror ecx, 0x14
add ebx, edx
mov edx, 0xbc7a3ea4
jmp 0x478258
pop esi
not ebx
mov edi, 0xbc8fa916
sub ebx, edi
mov edx, ecx
sub ecx, 0xbc956368
sub edi, edx
jmp 0x477b89
push 0x9ab7b514
xchg ecx, edi
mov ecx, edx
and ebx, ecx
inc edx
or edi, edx
sub edi, 0xbcc6c0d0
xor edx, ecx
add edi, 0xbccd7ca4
mov edx, 0xbccf5a10
or edx, edi
and edi, edx
xor edi, edx
and edx, edi
jmp 0x4780b5
pop esi
and ebx, ecx
bswap ecx
inc ebx
or edi, 0xbcf6bcf4
or edx, 0xbcf8ce37
add edx, edi
xchg ebx, edx
add edx, ecx
jmp 0x476215
call esi
neg ebx
bswap edx
sub edx, edi
and ebx, edi
bswap ecx
xor ebx, ecx
not edi
add edx, edi
and edi, ebx
xor ebx, 0xbd11c85f
mov edx, 0xbd13aa24
sub edx, ecx
jmp 0x476169
pop esi
xor ebx, ecx
bswap edx
mov edi, ebx
or ebx, ecx
xchg ecx, edi
shl ecx, 0xa
sub edi, ecx
mov ebx, 0xbd2b85a3
or edi, ecx
and ebx, 0xbd2f4497
inc ecx
jmp 0x47780a
pop esi
or ebx, ecx
add ebx, edi
shr edi, 0x1f
not ecx
or ecx, ebx
and ecx, edi
sub ebx, edi
add ecx, edi
or ebx, 0xbd5e8246
xor ecx, edi
jmp 0x476b0a
call esi
sub ebx, edi
add ebx, edx
or ebx, 0xbd70af50
add edx, 0xbd777561
ror ebx, 0xb
jmp 0x478188
mov esi, 0x40495727
dec ebx
or ebx, edi
and ebx, edx
xchg edi, edx
and ecx, edi
shl ecx, 2
add edx, ecx
or ebx, ecx
shr edx, 0x15
add edx, ebx
not edx
xor edx, ebx
jmp 0x4754a0
mov esi, 0x40495727
xchg ebx, edx
sub edi, ebx
inc ecx
or ecx, 0xbefe5ebe
mov edi, edx
mov ebx, edi
sub ebx, edi
rol edi, 5
add edi, ebx
rol ecx, 0x1b
xor edi, 0xbf0c3cc8
jmp 0x477027
push 0x9af7f8f8
inc ebx
dec edx
xchg edx, edi
or edi, 0xbf1438e7
and edi, 0xbf1648c6
jmp 0x475511
call esi
add edi, 0xbf72a8b4
and edx, ebx
or edx, ecx
xchg ebx, edi
and ecx, 0xbf7a1fa6
xor edx, 0xbf7c2e2b
and ebx, ecx
inc edx
mov ecx, 0xbf81cf64
xchg edx, edi
add edi, ebx
and edi, ecx
jmp 0x4773b3
pop esi
bswap edi
xor edx, ebx
and ebx, ecx
add edx, 0xc0020fde
and ecx, 0xc003f39b
add edi, 0xc03a1201
or edi, edx
jmp 0x477113
push 0x9ad5d836
xchg ecx, edx
or ecx, edx
and edi, ebx
xor edx, edi
xor ecx, edi
sub ecx, 0xc0b63c84
add ebx, 0xc0b84710
shl edi, 3
and ebx, ecx
sub edx, ebx
jmp 0x47831b
push 0x9b4075d6
neg ecx
sub edi, edx
add ecx, 0xc1642e3c
xchg ecx, edi
and ebx, edx
rol ecx, 1
or edi, 0xc16c6f83
mov ebx, edx
shr ecx, 0x1f
add ecx, 0xc1720477
add edx, edi
jmp 0x4771c8
pop esi
xchg ecx, ebx
dec ecx
inc edx
xchg ecx, edx
mov edi, ecx
bswap ecx
add ecx, 0xc21ecb84
sub edx, edi
xchg edi, ebx
rol edi, 9
or ecx, 0xc2267e35
or edx, 0xc2286275
neg edi
xchg edi, ecx
jmp 0x478123
call fcn.00475477
sub ecx, edx
xchg edx, ecx
and ecx, ebx
or ebx, 0xc237e658
mov edi, 0xc239c6ec
mov edx, ebx
and edi, ebx
mov edx, ebx
inc ebx
add ecx, edx
bswap ebx
xor edi, 0xc25059a7
add edi, 0xc2523da8
and edi, edx
sub ebx, 0xc255fed7
and edx, 0xc25b895e
jmp 0x47679d
push 0x9ab90713
and edx, edi
neg ebx
shl edx, 0x11
sub ebx, edx
mov ecx, ebx
inc ecx
mov ecx, 0xc26e311d
shl ebx, 3
sub ebx, 0xc271fa08
jmp 0x475699
push 0x9ab664ed
xchg edi, ecx
bswap edx
inc ecx
xchg edx, ecx
xor ebx, 0xc2a35614
not ebx
or edi, edx
or ebx, ecx
xchg edx, ebx
sub edi, edx
sub ebx, 0xc2d6739c
or edx, ebx
jmp 0x47789d
push 0x9ad48a00
shr ebx, 0x1a
xor edi, ecx
and edi, 0xc2f2a736
add edi, ecx
mov ebx, ecx
sub edi, edx
mov edi, 0xc2fafdec
jmp 0x477e18
pop esi
or ecx, edi
or ebx, edx
mov ebx, ecx
or ebx, edi
mov ebx, edx
shr edi, 0x10
jmp 0x477d31
mov esi, 0x40495727
inc ebx
and ebx, 0xc3316e4c
not edi
rol edi, 0xf
shr edi, 0x10
jmp 0x4770a5
push 0x401400
dec edx
or ecx, edx
ror edx, 0xb
dec ecx
add edi, edx
rol edx, 0x16
xchg ebx, ecx
add edx, ecx
mov ecx, edx
xor edx, 0xc34cf79b
jmp 0x4769a5
push 0x9ac60fc0
xor edi, edx
sub edi, 0xc3649000
sub ecx, ebx
mov edi, edx
mov edx, ecx
mov edi, ecx
xor edi, ebx
sub edx, ecx
xchg edi, ecx
ror edx, 0x16
sub ecx, ebx
jmp 0x475578
push 0x9aed80b7
mov ecx, 0xc37e891e
mov edi, ecx
add ebx, edi
bswap ecx
xor ebx, 0xc38a88d3
sub ecx, ebx
ror edx, 0x13
sub edx, ecx
dec ecx
add ebx, edx
jmp 0x47638e
pop esi
mov edi, ebx
xchg edx, ecx
and ecx, edx
sub edi, ecx
and ebx, edx
xor edi, edx
add edx, ecx
xor edx, edi
add edi, ebx
add ebx, edi
xchg ebx, ecx
and ebx, edx
add ebx, 0xc3bd1047
mov ebx, ecx
xchg edi, edx
jmp 0x4757d7
pop esi
mov edx, 0xc3c3638e
or ecx, 0xc3c57448
or ebx, edx
and ebx, ecx
inc edi
mov edi, ebx
or edi, 0xc3d026c4
sub edx, 0xc3d2224b
inc ecx
ror edx, 0x1d
xchg ecx, ebx
bswap ebx
add ebx, edi
jmp 0x47827d
push 0x9ad84abc
ror edx, 5
bswap edi
xor edi, ebx
and ebx, ecx
and ecx, 0xc4245fec
sub ebx, 0xc42687cb
or ebx, edi
jmp 0x477685
pop esi
shr edi, 0x1a
ror ecx, 0x1e
or edi, 0xc449d1b8
xor edi, 0xc44bd68c
mov edi, ecx
bswap ecx
and ebx, edi
ror edx, 0x1a
jmp 0x4782a5
call fcn.00475477
shr edi, 3
and edx, ecx
shr edi, 0x1d
xor ecx, 0xc45c9657
and ebx, edx
mov edx, edi
xchg ebx, edx
or edi, 0xc4646263
dec edx
jmp 0x47731f
pop esi
or ecx, edi
xor ebx, edi
neg ebx
inc edx
and ecx, 0xc4c6d3b6
sub edi, 0xc4c8e5fb
shl edi, 4
jmp 0x47697e
push 0x9b2f550d
add edx, ecx
sub ecx, 0xc727b46a
shl edi, 0x12
mov ecx, edx
and edi, edx
mov ecx, edi
bswap ebx
sub ebx, edi
bswap edx
sub ecx, 0xc7469e41
and ecx, 0xc74895cf
rol ebx, 1
mov ecx, edx
jmp 0x476156
call fcn.00475477
xchg ebx, edi
mov ecx, ebx
and edx, ecx
xor edi, ebx
and ecx, ebx
and edi, edx
jmp 0x476b87
pop esi
bswap ecx
dec ebx
bswap ebx
jmp 0x47588c
pop esi
sub ecx, 0xc7a6a697
and edi, edx
xchg ebx, edx
bswap ecx
and edi, ebx
neg ebx
xchg ecx, edx
mov ecx, edi
neg ecx
jmp 0x476a0a