Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff2b
jne 0x401070
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xfffffee5
jne 0x4010ea
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff11
jne 0x40118c
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
ret
call sub.kernel32.dll_GetSystemDefaultLCID
cmp eax, 0xffffff1f
jne 0x401238
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.user32.dll_SetMenuContextHelpId
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
call sub.advapi32.dll_TreeResetNamedSecurityInfoA
ret
jmp 0x475178
xchg edi, ecx
nop
nop
xchg esi, edi
neg ecx
add edi, ecx
jmp 0x476f53
push 0x4aac84d5
sub edx, 0x4b66cae1
xchg edi, edx
not ebx
and ebx, edx
mov edi, ebx
sub edx, ebx
or edi, ecx
add edi, edx
add edx, 0x4b682aa1
and ecx, edi
or ebx, 0x4b688099
add ecx, 0x4b68af39
inc edx
xchg ecx, ebx
jmp 0x4765ce
pop esi
sub edx, ecx
mov edx, 0x4b7a70e3
ror edi, 0xd
and edx, ecx
or ebx, edi
shr edx, 7
dec ecx
or ebx, ecx
add edi, ecx
xor ebx, 0x4b7bd665
jmp 0x4758d5
call fcn.00478c7c
and edx, ecx
sub ecx, edi
xor ebx, ecx
ror ebx, 0x1e
xchg ebx, edi
xchg ebx, edi
xor ebx, 0x4b7d246d
xchg ecx, edi
xor edx, ebx
not edx
xchg edi, edx
xchg edi, edx
rol ecx, 0x16
not ebx
jmp 0x475a20
pop esi
neg edi
neg edx
inc ebx
sub edx, edi
mov edi, ebx
mov ecx, edx
sub ebx, edx
sub edx, ecx
neg edi
and edx, ecx
jmp 0x477c56
mov esi, 0x33274000
add edi, ebx
shr ebx, 0x1a
add ebx, edx
sub edi, ecx
jmp 0x476dbd
call fcn.00478c7c
add ecx, ebx
sub ebx, edi
mov ebx, 0x4b943b4d
or edx, ebx
rol ebx, 0x1d
xchg edi, ebx
jmp 0x4784e1
pop esi
sub edx, ecx
neg ebx
mov edi, edx
nop
rol edx, 0x10
xchg edx, ecx
xor ebx, 0x4b9a74f1
xchg edi, ecx
xor edx, ecx
mov ebx, edi
jmp 0x476ede
call fcn.00478c7c
mov ecx, 0x4b9e1d4b
sub edi, edx
mov edx, 0x4b9e4ff9
xor ebx, ecx
and edx, 0x4b9e8303
add edx, 0x4b9e9af7
xor ecx, edx
xchg edx, ecx
mov ecx, edi
mov ebx, 0x4b9f02f3
mov ecx, edx
shl ebx, 0x18
jmp 0x476c44
push 0x40
sub ecx, 0x4ba1a965
or edx, edi
rol edx, 0xd
xchg edx, ecx
bswap edx
xor edi, ebx
or edx, ecx
or ecx, ebx
inc edi
not ebx
jmp 0x476bd6
pop esi
xor edx, 0x4ba5b1d3
bswap edx
xor edi, ebx
or ecx, 0x4ba5fe6d
and ecx, 0x4ba61887
xor edx, ecx
inc ecx
xchg edx, edi
and edi, 0x4ba6871b
add edi, 0x4ba6a10f
xor ecx, edi
or ecx, ebx
add edx, edi
ror edi, 0x16
jmp 0x477422
push 0x4ab0e905
add edi, ebx
or edi, edx
bswap edi
xor edi, ecx
nop
or edx, ebx
or edi, 0x4baa54cd
shl edi, 0x17
jmp 0x477deb
push 0x4aaa9d6b
dec edx
inc edx
ror edi, 0x1c
xchg edi, ebx
xor ecx, ebx
and ecx, edx
xchg ebx, edx
nop
add ebx, 0x4bad07b7
xchg edx, ecx
sub edi, 0x4bad3bdb
add ecx, edx
or ebx, 0x4bad6d95
and ebx, 0x4bad87af
jmp 0x478401
push 0x4aace61b
xchg edx, ecx
not ecx
xor ebx, edi
not edx
jmp 0x47540d
pop esi
mov ecx, edx
xchg edx, edi
add ebx, 0x4bae5b4b
xor ebx, edi
jmp 0x4753b6
mov esi, 0x33274000
shr ecx, 0x1d
mov ecx, edx
ror ecx, 0x11
sub ebx, edi
xor edi, 0x4baefcd9
not edx
xor ecx, ebx
xchg ecx, edi
shl ecx, 0x16
sub ecx, edx
or ecx, edi
shr edx, 3
shl edx, 3
add edi, edx
jmp 0x477f60
pop esi
rol ecx, 0x11
and edx, ebx
and edx, 0x4bb14bdd
or ebx, edi
inc edx
add ecx, edx
mov ecx, edi
mov ebx, 0x4bb1cb79
jmp 0x476c10
call esi
mov ecx, edx
sub edx, ebx
xor edx, ebx
or ecx, edx
add ecx, 0x4bb8c6eb
or edi, edx
xchg ecx, edi
mov ebx, edi
jmp 0x4763a4
push 0x4ac06243
and edx, edi
ror ebx, 0x1a
rol ecx, 3
add edi, ebx
xor edi, edx
ror ecx, 0x10
add edx, ecx
add ecx, ebx
xchg edi, edx
xchg edi, ecx
xor edx, ebx
xor edi, ebx
jmp 0x476abf
mov esi, 0x33274000
ror ebx, 4
sub ebx, edx
xor edx, 0x4bc3f6cb
not ecx
and edx, ecx
xor ecx, edi
mov ebx, 0x4bc45f05
mov ecx, edx
xor edi, ecx
sub edi, edx
and ecx, 0x4bc4c701
xor ecx, 0x4bc4e141
mov edi, ecx
shr ecx, 5
jmp 0x4774a1
mov esi, 0x33274000
or ecx, edx
or edx, 0x4bc9581d
shl edx, 0xb
sub ecx, edi
inc ecx
and ebx, 0x4bc9c019
xor ebx, 0x4bc9da8f
mov edi, ebx
or ebx, ecx
mov edx, 0x4bca284b
or edx, edi
or ecx, edx
add edi, ebx
inc ebx
add edi, ecx
sub ebx, ecx
jmp 0x4780d8
mov esi, 0x33274000
mov ebx, edi
add edx, 0x4bd06471
xor ecx, edx
and ecx, edi
shl edx, 3
dec edx
add edx, edi
xor edi, ebx
jmp 0x4785a4
pop esi
xor ebx, ecx
and edx, 0x4bd13ef9
sub ecx, edx
inc ecx
or ebx, edi
add edx, ecx
ror edx, 0xa
add ebx, ecx
mov ebx, edx
shl edi, 4
add ecx, edx
xchg ebx, edi
xchg ecx, edi
shl ecx, 5
jmp 0x478527
pop esi
xor edi, edx
or ebx, ecx
mov edx, 0x4bd64323
or edx, edi
and ebx, edx
xchg ebx, ecx
xor ecx, edx
or ebx, edi
sub ebx, edi
mov ebx, 0x4bd6f2d5
mov ecx, edx
mov ebx, edx
shl edi, 0x16
sub edx, ebx
mov ecx, edi
sub ebx, 0x4bd78753
jmp fcn.00475b07
push 0x4ab8777f
add edi, 0x4bda1697
add ebx, 0x4bda307b
or edi, ecx
mov ecx, edx
and edx, edi
xor edx, ebx
mov ecx, 0x4bdab17f
or edx, ecx
jmp 0x4777c9
push esp
xchg edi, edx
mov ebx, edx
or ecx, 0x4be1186b
and ecx, 0x4be1325f
xor edx, ecx
and edx, edi
jmp 0x47573c
pop esi
and ebx, ecx
add edx, edi
add ecx, edx
ror ebx, 0x1f
shl ecx, 8
sub ecx, edx
or ecx, edi
xchg edx, ecx
jmp 0x47562e
pop esi
not edi
xor ecx, ebx
not edi
sub edx, 0x4bea24af
shr edx, 9
add edx, ebx
sub ecx, edi
sub ebx, edx
xor edi, ebx
add ebx, 0x4beac133
or edi, ecx
and ecx, ebx
xchg edi, ecx
add ecx, 0x4beb22a7
jmp 0x4789e5
call fcn.00478c7c
ror edi, 1
add edx, 0x4bedc3a3
xchg ebx, edx
xor edx, ecx
add ebx, 0x4bee1235
mov edx, edi
bswap ecx
mov ebx, edx
jmp 0x476e70
call esi
add edx, edi
mov edx, edi
bswap edx
mov ebx, edi
jmp 0x47605b
pop esi
add edi, 0x4bf00427
and ecx, ebx
xor ebx, edx
and ecx, ebx
xor ebx, edx
not ecx
xchg ebx, edx
add ebx, edx
jmp 0x477cf8
mov esi, 0x33274000
shr ecx, 0x1c
add edx, ebx
ror ecx, 7
rol edx, 0xe
xor edi, ebx
sub ebx, edi
or ecx, ebx
inc edi
or edi, edx
and ecx, edx
xchg ebx, edx
add edx, 0x4bf79c9f
xor ecx, edx
neg ebx
jmp 0x476803
push 0x4ab17859
ror ecx, 0x1f
rol edx, 7
add edi, ecx
sub edi, ebx
mov ebx, edx
or edx, ebx
jmp 0x4758e7
push 0x4ab48fab
or ecx, edx
add edi, ebx
and edi, ebx
xor ecx, 0x4bfa3ba3
sub edi, ebx
mov ebx, 0x4bfa7041
add edx, edi
ror edi, 0x16
jmp 0x4761f6
call fcn.00478c7c
or ecx, 0x4bfff4b7
shl ecx, 0x1a
xchg ecx, edi
or ecx, edi
dec ebx
add edx, ebx
or edi, ebx
sub edi, 0x4c00abfd
mov edx, edi
xor ecx, edi
or ecx, ebx
xchg edx, ebx
jmp 0x4764fe
call fcn.00478c7c
mov edi, edx
xor ebx, ecx
and ebx, edi
add edi, ecx
bswap ecx
neg ecx
bswap edx
neg edx
bswap edi
neg edi
jmp 0x4775a7
pop esi
or edx, ecx
xor ebx, edi
xchg edx, edi
sub edx, edi
add edi, ecx
inc ecx
or edi, ebx
xor ecx, edx
jmp 0x4776b3
pop esi
add ecx, edi
ror ebx, 1
rol ecx, 0x11
dec ebx
shl ecx, 2
ror ecx, 0x11
rol edi, 0x18
dec edx
inc edi
and edx, 0x4c04e44b
sub ecx, edx
xor edi, edx
add edi, ecx
sub ebx, ecx
jmp 0x475e2b
call fcn.00478c7c
xor edx, ebx
inc ebx
xor ecx, 0x4c07cbb5
mov edi, ecx
or ebx, edx
xor edi, edx
add edi, edx
add edx, ecx
and edx, ecx
xor ecx, edi
and edx, ebx
rol edx, 5
xor ebx, edx
bswap edx
jmp 0x478314
pop esi
inc edi
and edx, 0x4c0bf661
xor edx, edi
bswap ebx
xor edi, 0x4c0c48eb
xchg edi, edx
shl ebx, 0x1b
add ebx, edx
rol ebx, 0x1e
sub edi, edx
jmp 0x476d5f
mov esi, 0x33274000
inc edx
mov ebx, 0x4c0d06b9
or edx, ecx
dec edx
or ecx, 0x4c0d5403
and ecx, 0x4c0d6ff7
xor edx, ecx
and edx, edi
mov edx, ebx
sub edx, edi
add edx, 0x4c0def11
xor ecx, edx
mov ebx, ecx
or ecx, edi
dec ecx
xchg edi, edx
jmp 0x4760cc
call esi
and edi, edx
mov ebx, ecx
not edi
and ecx, 0x4c0f7d43
sub ecx, ebx
sub edx, edi
dec ebx
add edx, ebx
ror ecx, 0xb
sub edx, 0x4c1015df
jmp 0x4775c2
push 0x4aba0b3d
sub ebx, ecx
ror ecx, 0x17
and ebx, edx
xchg ebx, ecx
mov edi, 0x4c139a01
add edi, edx
sub ebx, edi
ror edi, 0x10
rol edi, 0x17
and edx, edi
or ebx, 0x4c1437e5
or ecx, edx
dec ebx
shl ecx, 0x1c
jmp 0x4773c4
push 0x4aacb68f
neg ebx
bswap ecx
and edx, ebx
xor ecx, edx
mov ebx, ecx
sub edi, ebx
and ebx, ecx
shr ebx, 4
jmp 0x4758c3
pop esi
mov edx, 0x4c1ee9c5
or ebx, ecx
inc ecx
add ecx, ebx
xchg edi, edx
and edx, ebx
xor ecx, edx
xor edx, 0x4c1f9d13
mov edi, edx
shr edi, 0x10
jmp 0x477023
push 0x4aae9f23
add edi, ebx
add ecx, edi
xor ebx, ecx
xchg ecx, ebx
add edi, 0x4c205945
sub ebx, edx
jmp 0x475d07
push 0x4ab97349
sub edx, ebx
add ebx, 0x4c21f2e3
mov edx, edi
shr ebx, 0x19
sub edx, ecx
sub ecx, ebx
xor edi, edx
add edi, ebx
and edi, ebx
xor edx, ecx
or ecx, edi
nop
jmp 0x4789fe
call esi
ror ebx, 3
mov ecx, edx
mov ebx, ecx
add ebx, ecx
add edi, 0x4c23858f
xor ecx, edi
and edx, edi
ror ebx, 0x14
dec edi
or edx, 0x4c2409e9
shl edx, 0x15
add ecx, ebx
rol edx, 9
xor ebx, edx
jmp 0x478693
push 0x4ab36417
or ecx, 0x4c2492bd
shl ecx, 4
or edx, edi
and ebx, edx
and edx, ebx
and edi, edx
and ebx, ecx
mov ecx, edi
xor ebx, edi
bswap edi
jmp 0x4764b1
call fcn.00478c7c
rol ebx, 0x18
xchg ebx, ecx
mov edi, ecx
shr edx, 0x19
sub edi, ebx
add edi, 0x4c27693d
xchg edi, edx
mov ebx, edx
rol edi, 0x1a
xchg ebx, edx
rol edi, 0x1e
mov edi, ecx
jmp 0x477f39
call esi
nop
mov ecx, edx
or edi, 0x4c285993
sub edi, ebx
neg edx
or edx, edi
and ecx, ebx
add edi, edx
xor ebx, 0x4c290259
xor ebx, edi
jmp 0x475939
pop esi
add ecx, 0x4c2c0579
and ebx, edx
dec ebx
shl ecx, 0x1c
add edi, 0x4c2c6bd9
xor ecx, edi
mov edx, edi
or ebx, 0x4c2cb899
xor edi, ecx
mov ecx, edi
jmp 0x476043
pop esi
xchg ebx, edx
or ebx, edx
shl ecx, 0xa
xchg ecx, edi
sub ebx, edx
xor edx, 0x4c31d395
jmp 0x47675a
push 0x4aafc3f9
sub ecx, ebx
and edx, ecx
xor ebx, 0x4c3548fb
or ecx, ebx
bswap edi
sub edx, edi
jmp 0x477775
push 0x4ac094cb
mov edx, ebx
not ebx
add edx, 0x4c3e413b
mov edi, ecx
mov ebx, ecx
and ecx, ebx
xor ebx, edx
not ecx
xor ebx, edx
sub edi, 0x4c3ef0ed
shr edi, 0xb
sub edi, ecx
jmp 0x47877b
call esi
xor ebx, edi
or ebx, 0x4c430b1b
add ecx, edx
ror ebx, 6
and ebx, edx
dec ebx
xor edi, edx
bswap edi
xchg ecx, ebx
sub ecx, edi
or edx, ebx
mov edi, ebx
neg ebx
and ebx, edi
jmp 0x476127
push 0x4ab6819d
sub ebx, edx
mov ebx, 0x4c467019
sub edi, ebx
dec edx
add ebx, 0x4c46bf17
xor edi, ecx
and edx, ebx
mov edi, edx
jmp 0x477bd5
push 0x73d78
mov ebx, edi
sub edi, edx
and edi, ebx
xchg ecx, edi
xchg ecx, edx
nop
add ebx, 0x4c47dbe7
xor ebx, edi
xor ecx, edi
mov ebx, edx
or ebx, 0x4c483f71
mov ebx, edx
jmp 0x47829c
pop esi
mov ecx, edx
xor edi, ebx
not edi
and ebx, ecx
add edx, edi
xor edi, ecx
xchg ecx, edi
mov ebx, edi
ror ecx, 0x1a
mov ebx, 0x4c4a308d
add ecx, edx
add edx, 0x4c4a8589
sub edx, 0x4c4a9fc9
ror edx, 7
rol edx, 0x1d
mov edx, edi
jmp 0x478337
call esi
xor edx, ecx
not ecx
add edi, ecx
shr ebx, 0x12
mov ecx, ebx
xor edx, edi
shl ecx, 4
or ebx, edi
and edi, ecx
xor edi, ebx
or edx, ebx
xchg edi, ecx
bswap edx
or ecx, edx
jmp 0x475da9
call fcn.00478c7c
xchg ecx, ebx
and edx, ecx
xchg edi, edx
sub edx, ebx
and ecx, edx
rol ebx, 0xb
bswap edi
and edi, 0x4c4fd083
mov ebx, ecx
sub edi, ecx
xor edi, edx
sub edi, edx
and edi, ebx
neg ebx
jmp 0x476118
mov esi, 0x4132136a
xor ecx, edi
or ebx, edi
xchg edx, ebx
neg edx
sub ecx, 0x4c5531b7
shr ecx, 2
shl ecx, 0x1b
ror ecx, 0xb
jmp 0x476415
call fcn.00478c7c
ror ebx, 0xf
xor ecx, ebx
or edx, edi
bswap ebx
neg ebx
bswap ecx
and edx, ebx
xor ecx, edi
mov ecx, 0x4c5881e3
and edi, edx
jmp 0x477d35
call esi
sub ecx, 0x4c5cf863
sub edi, edx
dec edi
or edx, 0x4c5d462f
bswap ecx
neg edi
xor edx, edi
xchg edi, edx
mov ebx, ecx
mov edi, ecx
add edi, ebx
sub edx, edi
jmp 0x4766f0
pop esi
sub edi, ebx
dec ecx
inc edx
dec edi
xchg edx, ebx
neg edi
not edi
and edi, ebx
dec ecx
xchg edi, edx
and edx, ebx
rol edx, 0x13
or edi, edx
xor ebx, 0x4c61b505
jmp 0x47743c
push 0x4aa9d761
add edx, ecx
xor edi, ebx
not edi
and ebx, ecx
sub edi, ecx
neg edi
shr ecx, 0xe
or edx, ebx
or edi, 0x4c657ad7
xchg ecx, ebx
and edx, ecx
xchg edi, edx
dec edi
or ecx, 0x4c65fde9
jmp 0x478978
pop esi
ror edx, 0xb
add ebx, ecx
mov ebx, edx
xchg edi, edx
jmp 0x476262
call esi
and ebx, edi
xchg edx, ecx
sub edi, 0x4c6b8419
or edi, ecx
xchg edi, edx
mov ebx, ecx
sub ebx, edi
add ecx, edx
or edx, ecx
mov edx, 0x4c6c3bbb
add ecx, ebx
sub edi, ecx
add edi, edx
inc edx
jmp 0x47638f
push 0x4ab9d68f
or ecx, edx
mov edx, ecx
mov edx, 0x4c6f3911
xor ebx, ecx
xchg ecx, ebx
add edi, 0x4c6f858d
sub ebx, edx
and ebx, 0x4c6fb63b
and ecx, edx
rol ebx, 1
add edx, edi
and edx, edi
add ebx, edx
rol ebx, 0x16
or ecx, 0x4c706be5
xchg ecx, edx
jmp 0x476573
push 0x4abe67ab
mov ebx, 0x4c7b0be7
mov ecx, edx
or edi, 0x4c7b3d6b
and edi, 0x4c7b575f
neg edx
sub ecx, edx
inc ebx
xchg ebx, ecx
sub edx, 0x4c7bdc0d
mov edx, ecx
jmp 0x4788b3
call esi
and edx, edi
add ebx, edx
xor ebx, edi
or edx, ecx
rol ecx, 0xb
xor ebx, ecx
and ebx, edx
dec ebx
jmp 0x47887d
push 0x4aac5299
and edi, edx
xor edi, 0x4c86342b
xor edx, ebx
and edx, ecx
xor edx, ecx
and edx, edi
ror ebx, 0x19
xor ecx, ebx
bswap edi
not ecx
jmp 0x4751d8
push 0x4aba3dc5
sub ebx, ecx
xchg ecx, edi
xor edi, edx
neg ecx
and ebx, edi
xchg edx, ecx
sub edi, 0x4c87cb39
mov edx, edi
jmp 0x475b67
pop esi
not ebx
sub edx, ebx
sub ebx, 0x4c8a58d1
and ebx, edx
mov edx, ecx
mov ecx, edx
xchg edx, edi
sub edi, ebx
jmp 0x477fb5
push 0x4ab33283
xor ecx, ebx
ror ebx, 0x1c
mov edi, 0x4c8b480d
or edi, 0x4c8b6273
and edi, 0x4c8b7c8d
mov ebx, ecx
or ebx, 0x4c8bb25d
mov ebx, edx
and ecx, edx
dec edx
shr ebx, 1
sub edx, ecx
and ecx, edi
rol ecx, 0x16
jmp 0x4767ae
call fcn.00478c7c
inc edx
add ecx, ebx
mov edi, edx
mov edx, edi
inc edi
mov ecx, 0x4c8e991f
or edx, ecx
sub ebx, ecx
jmp 0x4787e5
call fcn.00478c7c
add edi, edx
and edx, ecx
or ebx, 0x4c94d17b
shl ebx, 0x16
dec ebx
add ecx, edi
jmp 0x47682d
call esi
xor edx, edi
or ecx, edi
xchg edx, ecx
bswap ecx
shr edi, 0x15
xor edx, ebx
mov ecx, 0x4c96f71f
mov ecx, edi
jmp 0x47694a
pop esi
and edi, ecx
add ecx, ebx
xor ecx, edi
xor edx, edi
and edi, 0x4c97973f
xor edi, 0x4c97b1cb
or ebx, ecx
and ecx, 0x4c97e279
or ecx, 0x4c980305
mov ebx, edi
xor edx, edi
shl ecx, 0xb
xchg edi, ecx
mov edx, ebx
jmp 0x476bb6
push 0x4aaa6c05
not edx
dec edx
xchg edi, ebx
and edi, ebx
jmp 0x47588f
push 0x4abdcf91
shl ecx, 2
dec ecx
add edx, ebx
sub ecx, edi
and edi, edx
rol ebx, 0x11
add edi, ecx
shl edx, 1
jmp 0x478112
push 0x4abe3549
xchg ecx, edx
nop
add edx, ebx
ror ecx, 0x16
inc edx
add ecx, ebx
or ebx, 0x4ca05779
mov ebx, edx
jmp 0x477230
mov esi, 0x33274000
add ebx, 0x4ca55217
or edi, ecx
xchg edi, edx
xchg edi, ecx
sub ecx, ebx
sub edx, ecx
sub ebx, 0x4ca5fc81
mov ecx, edi
jmp 0x47556f
mov esi, 0x33274000
xor edi, ecx
add edx, edi
xor edi, ecx
sub edi, edx
xor edi, edx
or edi, ebx
add ecx, 0x4ca7f6d5
mov ecx, 0x4ca8133b
or edx, edi
bswap ebx
ror ecx, 0x1f
and edi, ecx
jmp 0x476352
pop esi
add edi, ebx
or ecx, edi
or edx, 0x4ca94a9f
mov ecx, ebx
or edi, 0x4ca9806f
mov ecx, edx
xor edi, ebx
add edx, ecx
ror edx, 2
add ecx, 0x4ca9ffed
mov ecx, 0x4caa19d1
sub edi, edx
jmp 0x4788d7
mov esi, 0x33274000
add ecx, ebx
not ecx
sub ebx, 0x4caf7f6f
mov ecx, edi
xor edi, ecx
and ecx, edi
xchg ebx, edx
xchg ebx, ecx
not ecx
xchg edx, ecx
sub edi, 0x4cb04f77
or edi, ecx
add ecx, 0x4cb0804b
sub ecx, 0x4cb09ab1
shr ebx, 0x18
or ecx, edx
jmp 0x476328
push 0x4aaa3c9f
shr ebx, 0x13
and ebx, edx
add edi, ebx
and edi, ebx
add ebx, edi
mov edi, ecx
xor edx, ecx
sub edx, edi
and edx, ebx
mov edi, edx
or ebx, edi
mov ecx, edi
sub edx, ecx
add ecx, 0x4cb58b2b
jmp 0x4775f5
push 0x4ab149ff
or edi, ecx
inc edi
xor edi, ecx
sub edi, edx
xor edi, edx
add edi, ebx
shl edx, 0x10
mov ebx, ecx
and ecx, ebx
or edi, 0x4cc1da73
or ebx, 0x4cc1f4d9
xor edi, 0x4cc21175
jmp 0x47624a
mov esi, 0x33274000
xchg edi, ebx
and edx, edi
dec ebx
and edi, ebx
sub ecx, edx
and ebx, edi
add ecx, ebx
mov edi, edx
mov ebx, edx
sub edi, edx
jmp 0x476caf
pop esi
or ecx, edx
and ecx, edi
shl edx, 0xd
xor edx, edi
and ecx, ebx
xchg edx, ecx
xchg edx, ebx
neg edx
xchg ebx, edi
and ecx, 0x4ccb619d
jmp 0x475ae2
pop esi
mov edi, ebx
xchg edi, ebx
and ebx, ecx
sub edi, ecx
or ecx, edx
sub edi, edx
mov edi, 0x4cd03a67
xchg edx, edi
jmp 0x4769b5
call esi
sub edi, ecx
neg edx
sub ecx, edx
inc ebx
sub ecx, edi
inc ecx
dec edx
add edx, ecx
and edx, ecx
sub edi, 0x4cd2e343
sub ebx, 0x4cd2fddf
add ebx, edx
jmp 0x4757b1
pop esi
and edx, ebx
inc edx
and edx, ecx
add ebx, ecx
shr edi, 0xa
add ebx, edx
mov edi, ebx
and edi, edx
xor edi, edx
or edx, 0x4cd6d247
jmp 0x47893a
push 0x4ab1196f
add ebx, edi
xor ecx, edx
add edi, 0x4cd8b4c5
mov edi, 0x4cd8cedf
neg ecx
add ecx, 0x4cd90453
neg edi
bswap edi
sub edx, 0x4cd95bc9
ror edx, 0x1c
rol edx, 0x13
mov edx, edi
jmp 0x477b34
call esi
and ebx, 0x4ce2c781
shr ebx, 0x12
neg edi
sub ecx, edi
mov edi, edx
mov edi, ebx
add edx, 0x4ce373f3
and edi, ebx
sub ecx, edx
mov edx, 0x4ce3bf45
jmp 0x477d9b
call fcn.00478c7c
shl ebx, 0x12
sub ebx, edi
add ecx, edx
add ebx, ecx
shr edi, 0xd
ror ebx, 3
sub edx, edi
xor edx, edi
and edi, 0x4ce4b20d
sub edx, ebx
jmp 0x476780
pop esi
mov edx, ebx
shl ecx, 0x16
xchg edx, ecx
and ebx, edi
mov ebx, 0x4ce705cf
xchg edi, edx
add ecx, edx
sub ebx, edi
sub ebx, 0x4ce76f77
or edx, ecx
jmp 0x477803
call fcn.00478c7c
add edx, edi
xor edi, ecx
and ecx, edi
rol ecx, 0xc
nop
mov ecx, ebx
jmp 0x477348
push 0x4abe00f7
mov edi, ecx
xor ecx, 0x4cf1c76f
sub ebx, ecx
sub ecx, edi
add edx, ebx
ror ecx, 5
inc edx
sub edx, ebx
xchg edi, ebx
neg edi
jmp 0x4776cf
push 0x401400
mov ecx, 0x4cfdbf1b
sub edi, edx
xor ecx, edx
and ecx, edi
jmp 0x477032
pop esi
and ecx, ebx
shr edi, 0x1c
shr ebx, 4
and ebx, edx
add edi, ebx
shl ecx, 0x17
sub ecx, edx
inc ebx
ror edx, 3
rol edx, 2
mov ecx, 0x4d00e3ab
sub edi, edx
and ebx, ecx
or ecx, 0x4d012cd7
jmp 0x47648e
push esp
xchg ecx, ebx
or edi, 0x4d016f27
add ecx, 0x4d018d7d
mov ecx, 0x4d01a761
shr edx, 0x14
or edx, ecx
shl ebx, 0x1f
sub ecx, ebx
jmp 0x475f1c
pop esi
xchg edi, edx
xor edi, 0x4d025a81
xor ebx, 0x4d02771d
mov edx, edi
shr ebx, 0x1c
add ecx, edx
or ecx, 0x4d02df4f
mov ebx, edi
xor edx, 0x4d030ef9
mov edi, ecx
mov ebx, 0x4d0349c5
xor edx, ebx
ror edi, 0x16
dec ebx
jmp 0x478b62
push 0x4ab0b6c1
rol ecx, 0xf
sub edi, edx
bswap ebx
xchg edx, edi
add ebx, 0x4d06eb05
mov ebx, 0x4d0702e9
sub edi, ecx
neg edi
jmp 0x47583a
mov esi, 0x33274000
ror edx, 0xc
rol edx, 0x1a
shr edi, 1
mov ecx, edi
xor ecx, ebx
neg ecx
sub ecx, ebx
mov ecx, 0x4d082537
or edx, ecx
sub ebx, ecx
jmp 0x477566
mov esi, 0x33274000
shr edi, 0x12
or ebx, 0x4d0896dd
xor edi, ebx
not edi
add ecx, edi
xor edx, ecx
sub edx, edi
add edi, edx
jmp 0x4756b6
mov esi, 0x33274000
xor edx, 0x4d0b104b
rol edx, 1
xor ebx, edx
sub edi, ebx
sub ebx, 0x4d0b7629
or ebx, 0x4d0b901d
xor edi, ecx
and edi, edx
rol ebx, 2
sub edi, edx
jmp 0x475349
call esi
add ecx, edi
xchg ecx, edi
add edx, ebx
xor edi, 0x4d0de423
shr ebx, 0xb
sub edx, ecx
add ecx, 0x4d0e3311
mov edi, ebx
sub ecx, edx
xor edi, edx
jmp 0x478bce
pop esi
ror ebx, 8
rol ecx, 0x1e
neg ecx
add ebx, ecx
xor ebx, edi
add edx, 0x4d100c8d
sub ebx, ecx
or ecx, 0x4d103eef
and edi, ebx
ror ecx, 0x17
xor ecx, edx
ror edx, 6
sub edi, 0x4d10c5a5
shr edi, 0xe
jmp 0x4782e7
call fcn.00478c7c
mov ebx, edx
shl edi, 0x14
xor edi, edx
xchg edi, ebx
xor ecx, ebx
xor edx, ecx
shl ecx, 0x17
add ebx, edi
jmp 0x476b4d
pop esi
xchg ecx, edx
xor edx, edi
xchg edi, edx
neg ecx
xor edx, ebx
inc ebx
xor ecx, 0x4d1b04a5
add edx, ebx
dec edx
and ecx, edx
jmp 0x476899
push 0x4ac0c953
or ebx, 0x4d223ca5
mov ebx, edx
and ecx, edx
mov edi, ebx
add ebx, 0x4d229f9f
xor ebx, edi
sub ecx, ebx
not ebx
add edx, 0x4d230b3f
sub edx, 0x4d2325a5
or edi, ebx
add ebx, 0x4d235653
xor ebx, edi
xor ecx, edi
jmp 0x478425
call esi
sub ecx, edi
not edx
xchg edi, ecx
bswap edx
or ecx, edx
shr ecx, 0x1f
add ecx, edi
and ecx, edi
xchg ecx, edx
nop
sub edi, ebx
and edx, ecx
and ecx, edi
or ecx, edi
or edx, 0x4d2605cf
rol edx, 0x1b
jmp 0x478c58
pop esi
add ecx, ebx
and ecx, ebx
or edi, 0x4d296417
xor edx, ebx
ror edi, 0x11
or ebx, ecx
sub ecx, 0x4d29d1b7
xor edx, edi
inc ecx
add edi, edx
xchg edx, ebx
sub ebx, 0x4d2a5057
xchg ebx, edi
sub edx, ecx
jmp 0x475327
push 0x4abe99e7
sub ecx, edi
not edx
and edx, ecx
xchg ebx, edi
or ecx, ebx
shr ebx, 0xa
sub ecx, 0x4d2b4b81
mov edx, ebx
shl ecx, 0x1c
add edi, ecx
jmp 0x475c21
push 0x4aae6f15
shr ebx, 5
and ecx, 0x4d2bd2a9
and ecx, edx
neg edi
ror ecx, 0x1b
sub ebx, edx
add ecx, edi
or edx, edi
jmp 0x476711
push 0x4ab58689
inc ecx
add ebx, edi
xor ecx, edx
or ebx, edx
and edi, ecx
or ecx, ebx
add edx, ecx
and edx, ecx
sub edi, 0x4d2f712b
sub ebx, 0x4d2f8bc7
jmp 0x4778e2
push 0x4aaa0db3
xor edx, ecx
and edx, 0x4d307c3b
nop
and edi, 0x4d30b20b
mov ebx, 0x4d30d097
xchg edi, edx
sub edx, ebx
xor edx, ebx
ror edi, 0x15
dec ebx
jmp 0x477983
push 0x4ab77b49
or ebx, 0x4d341947
mov ebx, edx
or edx, edi
xor edi, edx
mov edx, ecx
inc ebx
jmp 0x478488
push 0x4ab9a5d1
and ecx, 0x4d34be69
bswap edi
xchg ecx, ebx
neg edx
xchg edi, ebx
and edx, edi
jmp 0x4770a2
pop esi
add ecx, edx
sub ebx, edi
add ecx, edx
xchg edi, ebx
inc edx
add ecx, ebx
xor ebx, 0x4d408a79
xor ebx, edi
dec ebx
add ecx, edi
xor edx, ecx
and edx, 0x4d410acd
jmp 0x478c2e
pop esi
dec edi
and ecx, edx
mov edi, ebx
xchg edi, ebx
rol ecx, 0x15
ror edx, 3
jmp 0x4783df
pop esi
or edi, 0x4d46ef31
xchg edi, edx
rol ebx, 0xf
add ecx, ebx
add ebx, ecx
shr edi, 4
shl edi, 0x1a
xchg ebx, edx
or ebx, ecx
shl ecx, 3
xor edx, ecx
and edx, 0x4d481ac5
jmp 0x4773a1
pop esi
mov ebx, edx
xor ebx, 0x4d48589b
xor ecx, ebx
add edx, 0x4d488c4d
bswap ebx
nop
sub edi, 0x4d48e21f
sub edx, ebx
and edi, edx
dec edi
jmp 0x475d25