Function at 0x401000
Capabilities:
Access the windows event log
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff18
jne 0x4010a7
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff2e
jne 0x40111c
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff2a
jne 0x4011af
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
ret
call sub.user32.dll_GetCapture
cmp eax, 0xfffffee6
jne 0x401210
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.advapi32.dll_OpenBackupEventLogA
call sub.ntdll.dll_RtlCancelTimer
call sub.ntdll.dll_RtlCancelTimer
ret
jmp 0x46f47b
mov ecx, edi
xchg edx, ecx
inc edi
jmp 0x46fa55
push 0xade2c376
sub esi, ebx
and ebx, edx
xor edx, ecx
and ebx, 0xaf341d1c
sub ecx, 0xaf348be6
xchg edx, esi
mov ebx, esi
shr esi, 2
or edx, esi
mov ecx, edx
or ebx, 0xaf37217e
shr edx, 0x1d
jmp 0x471854
mov edi, 0x6332a2e
mov ebx, ecx
sub esi, edx
xor ebx, ecx
mov ecx, 0xaf395d20
and esi, edx
sub ebx, ecx
jmp 0x470afa
mov edi, 0x6332a2e
xor edx, esi
sub ecx, edx
sub ebx, ecx
xchg edx, ecx
add esi, ecx
and ecx, ebx
xchg edx, ecx
add ebx, ecx
or edx, ebx
xchg ecx, esi
jmp 0x471a5c
pop edi
and ecx, 0xaf6c7c12
shl ecx, 2
jmp 0x46f67b
pop edi
xchg ebx, ecx
xchg edx, esi
jmp 0x4718d1
call fcn.00471318
xor ecx, 0xaf6eafac
xor edx, ebx
or edx, esi
or ebx, edx
bswap esi
neg edx
jmp 0x4714cc
mov edi, 0x6332a2e
rol ebx, 0x18
sub ebx, ecx
xchg esi, ebx
and esi, ebx
or ecx, edx
add ecx, ebx
dec ebx
or edx, ebx
jmp 0x472048
push 0xadd9309c
and esi, 0xaf7efb5e
xor edx, 0xaf7f672a
mov edx, 0xaf7fd2bc
sub edx, esi
jmp 0x47195c
call fcn.00471318
or ebx, esi
xor edx, ebx
neg edx
bswap ecx
xor edx, 0xaf8632ec
sub ecx, esi
and ebx, edx
sub ecx, esi
sub edx, 0xaf87d840
not ebx
jmp 0x470c26
push 0xadd8b702
or esi, edx
and esi, ecx
dec ebx
sub esi, ebx
ror edx, 0xe
rol esi, 0x17
jmp 0x46f713
call edi
ror edx, 0xa
xchg ecx, esi
and ecx, ebx
mov esi, ebx
and esi, ecx
and edx, 0xaf90889a
sub esi, 0xaf90f578
or ecx, esi
add edx, 0xaf91c892
or ebx, 0xaf92349a
jmp 0x471b20
call fcn.00471318
add ebx, esi
or esi, edx
add ebx, esi
and esi, edx
shr edx, 0xe
bswap esi
sub edx, ecx
xchg ecx, esi
bswap ecx
xor esi, ecx
and ecx, esi
sub ecx, esi
jmp 0x470680
push 0xade249b0
xor edx, ecx
xchg ecx, ebx
add edx, ebx
xor esi, ecx
or ecx, edx
xchg ecx, ebx
and esi, edx
bswap ecx
jmp 0x46f4d1
push 0xadd376ce
not ecx
rol edx, 0xf
and ecx, ebx
or ebx, ecx
add edx, ecx
sub ecx, 0xafc7a424
or ebx, ecx
neg ecx
jmp 0x4702f5
push 0xadca6824
or edx, 0xafcccb78
neg ecx
neg ecx
sub ebx, ecx
add edx, ecx
add esi, ecx
mov esi, ebx
or ecx, ebx
sub esi, edx
not ebx
jmp 0x470c70
pop edi
or edx, 0xafd12dac
and ecx, esi
xor ebx, esi
and ecx, esi
add ecx, esi
shr esi, 0x11
neg ecx
sub ecx, edx
and edx, ebx
xor ecx, 0xafd4f9e0
jmp 0x470195
pop edi
or esi, 0xafdc3162
rol edx, 0x1a
add ebx, esi
add ebx, edx
jmp 0x472659
pop edi
add ebx, esi
sub esi, ebx
xchg ebx, edx
xchg ecx, edx
jmp 0x4701d7
call fcn.00471318
not edx
not edx
neg esi
xchg ebx, esi
not ebx
or esi, edx
jmp 0x4725c3
push 0xadae371c
inc edx
not ecx
dec esi
xchg ecx, ebx
sub ecx, 0xafe48bb6
bswap ecx
and ebx, 0xafe57ede
or ecx, edx
jmp 0x472196
push 0xadbb3362
xor esi, ecx
mov ecx, 0xafe6e82c
xor esi, edx
and ebx, 0xafe7be72
sub esi, edx
add edx, 0xafe8ac44
and edx, ecx
neg ebx
jmp 0x4700d7
push 0xadd01fc6
dec esi
or edx, ecx
or ecx, esi
or esi, 0xaff46f46
and esi, ebx
dec edx
jmp 0x471bdd
call edi
sub ecx, 0xb04bc3ac
or ecx, edx
or ecx, 0xb04c97b4
and edx, esi
xchg esi, ecx
and ebx, 0xb04df1ea
add esi, 0xb04e5d0e
nop
jmp 0x471b44
call edi
add ecx, ebx
dec ecx
shl ebx, 8
inc esi
rol edx, 0x15
not ebx
rol esi, 0x1b
or ebx, esi
jmp 0x470279
push 0xade62044
xor ebx, esi
sub ebx, edx
jmp 0x471e68
call edi
rol ebx, 0x1c
shr esi, 0xe
neg ecx
add ecx, esi
xchg edx, ecx
or ebx, 0xb06a709e
not edx
bswap ecx
mov ecx, 0xb06bd0b6
or edx, esi
mov edx, ecx
shr ecx, 0x15
xor ecx, esi
rol edx, 0xd
jmp 0x47273c
pop edi
mov esi, 0xb0759b0e
or ebx, edx
and ecx, ebx
or edx, 0xb076f1ec
sub ebx, 0xb0775da2
add ebx, esi
sub esi, ecx
and esi, edx
jmp 0x470004
mov edi, 0x6332a2e
xor esi, ebx
or esi, ebx
xchg ecx, edx
ror esi, 0xd
not ebx
shr ebx, 3
xor edx, ebx
xor ebx, edx
jmp 0x471c92
pop edi
shr edx, 5
nop
mov ebx, esi
or ecx, esi
sub edx, ebx
sub esi, edx
xor ebx, 0xb08ac9c0
mov ebx, 0xb08b505c
or esi, ebx
sub edx, esi
jmp 0x4706ca
pop edi
shl esi, 0xe
mov esi, ecx
jmp 0x47186e
pop edi
not ecx
xor esi, edx
add edx, 0xb0936a18
sub ebx, ecx
shr esi, 0x1f
rol ebx, 0x17
rol ecx, 0xd
or ecx, edx
dec esi
neg ecx
neg ebx
mov edx, 0xb097936e
jmp 0x471dfa
call edi
sub ecx, edx
dec ebx
or esi, ecx
sub edx, esi
jmp 0x46ffab
pop edi
or ebx, ecx
add ebx, 0xb09f3ae0
or edx, ebx
xchg ecx, ebx
xor ebx, edx
and ebx, edx
xor ebx, 0xb0a166a4
add esi, ecx
or edx, 0xb0a23b6c
mov ecx, esi
jmp 0x471e46
call fcn.00471318
and edx, ebx
and ecx, esi
dec ebx
xor esi, edx
xchg esi, edx
and ecx, 0xb0a95668
shr ebx, 0xb
ror edx, 0x15
shr esi, 0x12
or ecx, edx
jmp 0x472175
push 0xadbbab24
add edx, ebx
sub esi, ebx
neg ecx
and edx, ecx
shl edx, 0x1a
mov esi, ebx
xor ebx, edx
not ecx
sub edx, esi
ror ebx, 0xc
sub esi, ecx
inc edx
xor ebx, ecx
sub esi, edx
jmp 0x46f6df
call fcn.00471318
or edx, ecx
mov ebx, esi
jmp 0x472130
push 0xadb50962
xchg esi, edx
sub edx, ebx
add ecx, edx
and edx, esi
jmp 0x470a38
mov edi, 0x6332a2e
or esi, ebx
add ecx, ebx
mov ebx, esi
and ecx, edx
neg esi
or ecx, edx
sub edx, 0xb0c9b1a8
or ecx, esi
xchg esi, ebx
add ebx, edx
jmp 0x46f85f
pop edi
xchg edx, esi
xor ebx, edx
or edx, ecx
xor edx, ecx
add edx, esi
rol ebx, 0x17
add ebx, edx
add ecx, 0xb0ce89d6
jmp 0x470c9e
pop edi
add edx, 0xb0dcd2c4
xor ecx, 0xb0dd3faa
neg edx
add ebx, 0xb0de34a2
jmp 0x470f32
push 0xadd3f090
mov ecx, 0xb0eab164
xor ebx, edx
sub ecx, esi
and ebx, esi
xor ebx, ecx
xor ecx, ebx
sub ecx, ebx
sub edx, 0xb0edb1e6
mov ecx, ebx
sub edx, esi
jmp 0x47297a
pop edi
sub esi, 0xb0ef2018
sub ebx, esi
sub esi, 0xb0f0114e
xor ecx, 0xb0f07efc
inc edx
or esi, edx
sub ecx, ebx
mov edx, 0xb0f22d6c
jmp fcn.00471651
mov edi, 0x6332a2e
or ebx, esi
xchg ecx, ebx
sub ebx, esi
xor esi, edx
add ecx, edx
add ebx, esi
dec edx
bswap ecx
xor ebx, esi
add edx, ecx
mov edx, ebx
add edx, ecx
sub ebx, esi
add edx, ebx
jmp 0x471f63
push 0xadc61d2e
or ebx, 0xb1256f3e
inc ebx
or ebx, ecx
or edx, 0xb126b20e
sub esi, edx
shr edx, 0x1e
ror edx, 0x1b
add ebx, ecx
not ebx
and esi, 0xb12954bc
add ebx, edx
sub edx, ecx
jmp 0x472291
call edi
not esi
add esi, ebx
xor ecx, 0xb12b900e
xchg ecx, edx
or edx, esi
and esi, edx
mov ecx, esi
sub ebx, 0xb12e0552
xchg edx, ebx
or esi, ecx
shl ecx, 8
sub ebx, edx
jmp 0x46fa1e
push 0xaddd81dc
add ebx, edx
sub esi, ebx
xor esi, ebx
bswap esi
ror edx, 0x1b
sub esi, ebx
shl edx, 0xf
sub ecx, edx
jmp 0x471fdb
pop edi
and esi, ecx
inc ecx
add ecx, esi
add edx, ebx
neg ecx
xor esi, ecx
and ecx, edx
ror ecx, 0x1a
jmp 0x472811
call edi
mov ecx, 0xb155c326
xor esi, ecx
or edx, ecx
xor esi, edx
add edx, esi
add ecx, edx
nop
or ecx, ebx
sub esi, 0xb15930ea
sub esi, 0xb1599e1a
sub edx, esi
add ecx, edx
mov ebx, ecx
mov ebx, ecx
jmp 0x46f9c5
pop edi
xor ecx, ebx
xor esi, ebx
dec esi
add ebx, 0xb160ba22
and ecx, edx
add esi, edx
xchg edx, ecx
xchg ebx, ecx
shl ecx, 0x19
sub ebx, edx
jmp 0x47133e
pop edi
xor esi, 0xb1696bb2
dec ebx
ror edx, 0x18
xor edx, ecx
sub ebx, esi
sub ebx, ecx
and esi, edx
and ebx, ecx
jmp 0x472493
push 0xaddd073c
dec ecx
and ebx, 0xb16f61b0
xor esi, ebx
sub esi, edx
inc edx
and esi, ebx
and esi, ecx
xor edx, ebx
and edx, esi
bswap ebx
jmp 0x4705d1
call fcn.00471318
bswap edx
add esi, ecx
shl esi, 6
or esi, ebx
and ecx, esi
xchg ecx, ebx
or edx, esi
inc ebx
and esi, ebx
shr esi, 0x10
jmp 0x46fdfe
pop edi
mov ebx, esi
shl edx, 0x1b
sub ebx, ecx
xchg edx, ecx
mov ecx, 0xb1976f2c
inc edx
sub ecx, edx
and esi, ebx
add edx, 0xb1991ba2
dec edx
jmp 0x46faea
pop edi
add edx, esi
sub edx, esi
or edx, ebx
add ebx, edx
jmp 0x471d11
push 0xadc52ba6
sub edx, 0xb1a98eb4
inc ecx
mov ecx, esi
and ebx, 0xb1aacbb0
sub ecx, 0xb1ab37ea
xor edx, esi
xchg ecx, ebx
inc esi
jmp 0x470d74
push 0xadc4b192
mov ebx, esi
or esi, 0xb6d71dbc
jmp 0x470922
pop edi
add ecx, esi
bswap ecx
add ecx, ebx
or edx, ebx
mov ecx, esi
or edx, ebx
xor ebx, edx
xchg ebx, ecx
or ecx, 0xb6e6d3d0
or ebx, ecx
jmp 0x46f964
mov edi, 0x6332a2e
or edx, ebx
mov edx, esi
inc ecx
neg ecx
xchg ecx, ebx
and ecx, edx
or ecx, 0xb6eec426
xchg edx, ebx
jmp 0x4700fe
push 0xadb5830c
or ebx, edx
mov esi, edx
add esi, edx
xchg esi, ebx
shl esi, 7
or ecx, 0xb6f20a36
and ebx, esi
add ecx, 0xb6f2de9c
jmp 0x47044f
push 0xadbaba68
xor ebx, esi
neg ebx
add edx, ebx
dec ebx
or edx, 0xb7030ee2
xchg edx, esi
add esi, 0xb703e4bc
xor edx, esi
xor ecx, ebx
sub edx, esi
xor esi, edx
sub ecx, esi
and esi, 0xb7067726
add esi, ecx
jmp 0x46fa75
call fcn.00471318
neg esi
neg esi
and esi, 0xb7084fc8
mov esi, 0xb708d2d8
or edx, ecx
add edx, ecx
mov edx, esi
mov ecx, ebx
add ebx, esi
xor ecx, ebx
jmp 0x470fdb
push 0xadd7c306
mov edx, ebx
sub ecx, esi
bswap ebx
or ebx, 0xb7124e5e
inc ecx
shl ebx, 2
sub esi, edx
xchg esi, edx
add ebx, edx
mov ebx, esi
sub ebx, edx
add edx, esi
jmp 0x4720f8
pop edi
dec esi
sub ecx, edx
not ecx
mov ebx, 0xb71799ec
or ecx, ebx
xchg ebx, edx
and ebx, esi
or ecx, esi
jmp 0x470745
push 0xadcb59d2
mov edx, ecx
sub ebx, ecx
xchg ebx, edx
or esi, ebx
add esi, ebx
add esi, 0xb724bc60
add esi, 0xb72527fc
xchg ebx, edx
jmp 0x471f23
pop edi
shl esi, 0x1f
neg ecx
sub ecx, ebx
xor ebx, esi
mov ebx, esi
or ebx, esi
or edx, 0xb72c6fbe
xchg ecx, edx
mov edx, 0xb72d44b0
xor esi, 0xb72db11a
jmp 0x46ff10
call edi
and edx, 0xb72e4cbc
dec esi
inc ebx
not ecx
neg edx
or edx, 0xb7308f4a
add ebx, edx
dec ecx
bswap esi
xor ecx, 0xb732410e
jmp 0x4708fd
push 0xadcae178
and ecx, ebx
shl esi, 0x1e
mov ebx, ecx
add ecx, esi
xor ecx, edx
and esi, edx
mov esi, edx
shl esi, 1
jmp 0x470bc2
push 0xadc9f004
add ecx, esi
add ebx, edx
or esi, ebx
xchg edx, esi
add ecx, 0xb73f3f2c
xchg ecx, esi
jmp 0x46f9a3
pop edi
add esi, ecx
xor esi, edx
bswap ecx
or ebx, edx
ror edx, 9
sub edx, ebx
inc ebx
and ebx, edx
jmp 0x470719
push 0xadc5a402
sub ecx, edx
sub ebx, ecx
dec esi
sub ebx, edx
xchg edx, ecx
xchg esi, edx
bswap edx
mov esi, edx
xchg esi, edx
not edx
not esi
xchg ecx, ebx
jmp 0x470507
call edi
add ecx, 0xb78469c0
mov esi, ecx
and ecx, edx
or esi, 0xb785a5a2
or ebx, ecx
mov edx, ecx
jmp 0x47031a
pop edi
xchg ecx, ebx
add esi, 0xb7903b4e
mov edx, ecx
xchg ebx, edx
sub ecx, 0xb791a6d8
sub edx, esi
sub ebx, 0xb792a226
or ebx, ecx
jmp 0x4711ba
call edi
shl edx, 0xd
not ebx
sub ecx, edx
mov ecx, esi
or edx, ebx
mov esi, edx
add ecx, 0xb7970d76
neg esi
jmp 0x470c00
call edi
mov ebx, edx
add edx, ecx
and edx, 0xb7aab9d8
sub ecx, 0xb7ab402c
mov ebx, edx
xor esi, ecx
or esi, edx
nop
xor edx, esi
neg edx
jmp 0x46f66c
push 0xadb85ce4
mov esi, 0xb7c77216
mov edx, ecx
shr esi, 0x1a
and edx, 0xb7c99f50
jmp 0x46ff67
pop edi
or ecx, ebx
xor esi, ecx
mov ecx, esi
shl ebx, 0x1a
xor edx, ecx
and edx, esi
or esi, 0xb800ee3e
mov esi, 0xb80156d8
xor ebx, edx
xor ecx, 0xb8022770
nop
and esi, 0xb802fbe4
jmp 0x470b6a
mov edi, 0x6332a2e
xor ecx, esi
add esi, ecx
or ebx, edx
xor ecx, esi
xor ecx, 0xb8090832
and edx, ecx
and esi, edx
xchg esi, ecx
jmp 0x472479
push 0xade5a534
xor ecx, edx
or ebx, 0xb80b59b0
or ecx, 0xb80bc33a
xor esi, 0xb80c2e92
nop
mov ecx, edx
jmp 0x46fe16
push 0xadc24f80
sub ecx, 0xb82e6d82
and edx, esi
sub ebx, esi
or ebx, ecx
inc ecx
shl ebx, 0x1a
jmp 0x47226d
push 0xadbefe40
bswap edx
nop
mov esi, edx
dec edx
xor ecx, edx
sub edx, ecx
jmp 0x471787
call fcn.00471318
and edx, ecx
sub edx, 0xb8418006
and ebx, 0xb841bf60
rol ebx, 4
jmp 0x46fe9c
push 0xadaf3af8
bswap ecx
add ecx, ebx
xchg ecx, ebx
shl esi, 5
sub ebx, ecx
mov esi, ebx
mov ebx, ecx
sub edx, 0xc35325b0
shl ebx, 0xc
sub ebx, esi
jmp 0x46f501
call edi
or ecx, ebx
sub edx, ecx
and edx, esi
xor esi, ebx
mov ecx, esi
or ecx, esi
xchg edx, ebx
not ebx
and ebx, ecx
or ecx, ebx
and ebx, ecx
xchg ebx, esi
jmp 0x4719fd
push 0xadbf77d8
add ecx, esi
sub ebx, edx
xor ebx, 0xc3b1f7a0
and ebx, ecx
and edx, ecx
xor ebx, 0xc3b3347c
sub esi, ebx
dec ebx
rol edx, 0xf
add esi, ecx
or ecx, ebx
xor ecx, esi
ror edx, 0x12
and ebx, 0xc3b6a8dc
jmp 0x46f5c5
mov edi, 0x6332a2e
add ebx, esi
add edx, ebx
add ebx, esi
add esi, 0xc3d120ac
xor ebx, esi
mov edx, esi
jmp 0x46fa3f
pop edi
or esi, ebx
mov edx, esi
or esi, 0xc3d3b350
shl ecx, 0x1a
mov edx, ebx
add ebx, ecx
jmp 0x47136c
pop edi
ror edx, 3
or ebx, edx
and ebx, edx
and ecx, edx
and ecx, edx
sub esi, 0xc3e1a266
xchg ecx, ebx
dec edx
mov edx, ecx
xor edx, 0xc3e38bca
sub ebx, 0xc3e40d50
and edx, esi
jmp 0x471ba3
mov edi, 0x6332a2e
add edx, 0xc3f28a9c
xor esi, 0xc3f31554
and edx, 0xc3f38d64
or ecx, edx
add ebx, 0xc3f46dca
ror edx, 0xe
jmp 0x470825
pop edi
dec ecx
add ecx, ebx
and esi, ecx
xchg edx, ebx
jmp 0x4709d3
call fcn.00471318
ror edx, 0x16
xchg edx, ecx
and ecx, ebx
sub edx, esi
jmp 0x47002b
pop edi
xor ecx, ebx
xor ecx, edx
neg esi
ror ebx, 0x1a
nop
xor esi, ebx
shl esi, 5
and esi, 0xc430f3b8
and ecx, 0xc4316e96
rol ecx, 0x14
jmp 0x470ac9
pop edi
add esi, ecx
rol esi, 0x1b
jmp 0x46fff9
push 0xadde738e
add edx, ebx
xchg ecx, ebx
mov ebx, 0xc4398d58
add ebx, esi
and edx, esi
or edx, ecx
sub edx, ecx
xor ecx, ebx
xor ecx, edx
mov edx, esi
jmp 0x470a1b
push 0xadb2a420
shr ebx, 0x1c
mov ebx, esi
or esi, 0xc43e0b58
mov esi, 0xc43e7690
xchg ecx, ebx
add esi, edx
jmp 0x4701b5
push 0xadd09a4c
bswap esi
xor esi, ecx
or esi, ebx
xor esi, ebx
jmp 0x4721fe
call fcn.00471318
mov ebx, ecx
sub ebx, esi
or edx, ebx
mov ebx, esi
sub edx, 0xc4631222
xchg esi, ebx
jmp 0x46f7a1
pop edi
add ebx, 0xc4671b88
shr esi, 0xf
sub esi, ebx
xchg esi, ecx
or ebx, 0xc468f304
bswap ebx
ror ecx, 0x13
xor esi, 0xc46a6a3e
jmp 0x4728b6
pop edi
add ebx, 0xc47117ac
shl ebx, 0x1d
or ebx, edx
add ecx, edx
mov esi, edx
and esi, edx
mov edx, 0xc473eeb8
or esi, 0xc4748e48
jmp 0x46fa31
pop edi
shr ecx, 0x19
or edx, esi
xchg ecx, edx
ror edx, 0x1f
xor ebx, edx
neg ebx
or edx, esi
or ebx, edx
jmp 0x470882
pop edi
and ebx, edx
add ecx, ebx
dec ecx
xor ecx, 0xc499daf4
xor ecx, 0xc49a63f8
rol esi, 3
or edx, ecx
xchg ecx, esi
and edx, esi
xchg ecx, esi
jmp 0x47066a
push 0xade69928
inc ecx
xor esi, ecx
sub esi, ebx
xchg edx, ecx
shl esi, 1
xor ecx, edx
shl edx, 0xe
or edx, 0xc4a179f2
or ebx, 0xc4a1f776
sub esi, ebx
xchg ebx, esi
or ecx, ebx
and ebx, 0xc4a3d780
not ebx
jmp 0x471206
push 0xadcbd1be
bswap ebx
not edx
or ecx, 0xc4b6c5e0
or esi, 0xc4b73b2c
rol edx, 9
dec esi
sub esi, ecx
or edx, esi
jmp 0x472639
call fcn.00471318
bswap ebx
xchg ecx, edx
xor ebx, 0xc4bfbae2
sub ebx, edx
xchg ecx, esi
mov edx, esi
and esi, edx
inc ebx
xor ecx, esi
and ecx, ebx
jmp 0x470536
push 0xadddfacc
sub ebx, 0xc4cf5530
shr edx, 0x15
sub ebx, esi
add ecx, ebx
mov edx, ecx
mov edx, esi
not ebx
mov ebx, 0xc4d2d654
jmp 0x471b82
call fcn.00471318
shr edx, 4
shl esi, 0x18
add edx, ebx
xor ebx, 0xc4ddfcaa
xor edx, 0xc4de76e8
and ecx, esi
jmp 0x46fd9f
push 0xadd83df2
add ecx, edx
bswap edx
xchg esi, ecx
and esi, 0xc4f5ba6a
neg ecx
or edx, ebx
jmp 0x46f776
call edi
and edx, ebx
ror esi, 0x12
sub edx, esi
or edx, ebx
xchg ebx, ecx
mov ecx, 0xc4fc5aa4
jmp 0x470064
call edi
shl edx, 0x12
add edx, esi
not ecx
add edx, ebx
inc edx
or ebx, edx
jmp 0x470d42
push 0xadaebb30
shr edx, 0x15
rol edx, 2
or esi, ecx
not esi
mov esi, edx
and esi, edx
add ebx, edx
sub ecx, esi
jmp 0x471492
call fcn.00471318
or ecx, edx
and ebx, edx
and esi, edx
xchg edx, esi
jmp 0x470f54
mov edi, 0x6332a2e
and ebx, 0xc514ea52
xor ecx, edx
xchg ecx, edx
sub esi, edx
and ecx, esi
bswap edx
rol edx, 4
sub edx, ecx
and esi, ebx
and ecx, esi
jmp 0x46f685
mov edi, 0x6332a2e
xor edx, esi
rol ebx, 4
ror edx, 0x14
mov ebx, esi
xchg ecx, esi
and edx, ebx
xor edx, 0xc5240c52
xor esi, ebx
xor edx, ecx
add edx, ebx
jmp 0x4713d6
mov edi, 0x6332a2e
or edx, ebx
or edx, ebx
or ebx, esi
add ecx, edx
nop
inc ecx
add edx, 0xc5287110
or edx, ebx
jmp 0x46f750
mov edi, 0x6332a2e
or edx, ecx
xor edx, ebx
jmp 0x4700b3
call fcn.00471318
xor esi, ebx
add ecx, ebx
and edx, 0xc56291be
sub edx, 0xc563155e
jmp 0x470ed0
pop edi
and esi, ecx
bswap esi
and ebx, edx
sub ecx, 0xc5650406
jmp 0x470b44
call edi
sub esi, edx
ror esi, 4
jmp 0x471cc1
mov edi, 0x6332a2e
sub ebx, esi
sub ebx, esi
or ecx, edx
xchg ecx, ebx
inc ebx
add ebx, ecx
dec esi
and edx, 0xc59762cc
and edx, ebx
xor ecx, edx
jmp 0x4721d4
pop edi
xchg ebx, ecx
ror esi, 2
sub edx, esi
and ebx, esi
rol edx, 3
ror ebx, 4
jmp 0x471071
pop edi
neg ebx
add ecx, ebx
and ebx, ecx
mov esi, ebx
add esi, ecx
add esi, edx
sub ebx, edx
inc ecx
jmp 0x470946
pop edi
dec edx
dec esi
sub ecx, esi
xor esi, ebx
and ebx, esi
sub edx, ebx
or esi, 0xc5d4eeaa
add esi, ecx
jmp 0x46f8dc
pop edi
xchg ebx, edx
or edx, 0xc5e70c30
shl ecx, 0x16
nop
shr ebx, 0x1d
or edx, esi
xchg ebx, ecx
sub edx, ebx
jmp 0x471224
push 0xadd469a8
mov ebx, ecx
mov ecx, edx
xchg edx, ecx
add ecx, ebx
xor esi, edx
or ebx, ecx
mov edx, esi
shr ecx, 0x17
shl ebx, 0x14
sub edx, ecx
sub edx, ebx
or esi, ebx
jmp 0x4723ff