Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff09
jne 0x4010a7
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
ret
call sub.user32.dll_GetMessageExtraInfo
cmp eax, 0xffffff0c
jne 0x401112
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xfffffed7
jne 0x401173
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xffffff1c
jne 0x4011ed
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xfffffeed
jne 0x401253
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.advapi32.dll_ConvertSecurityDescriptorToAccessNamedW
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
call sub.kernel32.dll_GetExitCodeThread
ret
jmp 0x47519c
bswap edi
mov edx, esi
and edx, ecx
jmp 0x477a51
push 0x8ff54717
add edx, 0x94265f70
sub esi, ecx
dec ecx
xor ecx, edi
or ecx, edx
xor ecx, 0x94284295
or edx, ecx
xor ecx, 0x94292d3f
ror edi, 0x19
xor edx, ecx
jmp 0x4782e8
pop ebx
rol esi, 0x1c
inc edi
mov edi, ecx
mov esi, ecx
xor edi, edx
jmp 0x476e8f
call fcn.00477ca0
xor edx, ecx
ror edi, 0x19
rol esi, 0x1b
mov edx, ecx
or edx, edi
xor esi, 0x943420d9
xchg esi, edx
bswap esi
shr esi, 0x10
sub esi, ecx
jmp 0x4779e1
push 0x8ff0c140
mov ecx, edi
mov edx, edi
nop
ror esi, 0x11
or ecx, 0x943ba2a7
bswap ecx
bswap esi
sub ecx, edi
shl edx, 0x11
inc edx
sub edi, ecx
dec esi
jmp 0x475f7f
push 0x9006ab3b
xchg esi, ecx
mov esi, 0x943f4d74
add ecx, edx
and ecx, esi
mov ecx, 0x944068d4
not ecx
xor esi, edx
xor edx, esi
and esi, edi
jmp 0x478036
call fcn.00477ca0
mov edi, 0x945223db
xor edx, esi
not edx
ror esi, 4
inc esi
not edx
xor edx, esi
xor edi, 0x9454f1d7
dec edx
jmp 0x477f94
call ebx
shl edi, 0xa
and edi, ecx
shr edi, 0x1b
mov esi, ecx
or esi, ecx
mov edx, esi
xchg edx, esi
sub ecx, edx
shr esi, 0x16
jmp 0x475687
mov ebx, 0x123b2f04
and ecx, esi
and edx, edi
nop
shl edx, 5
not esi
or ecx, edx
sub edx, ecx
sub edx, esi
sub ecx, edi
jmp 0x476b40
call ebx
and esi, 0x949136cb
xchg edi, edx
xor edi, edx
rol ecx, 0xf
shr esi, 0xd
or edi, esi
ror ecx, 0x18
xchg edi, esi
inc esi
jmp 0x476cc3
push 0x8fff215c
ror esi, 0x1e
sub edi, ecx
and ecx, edx
xor edx, edi
jmp 0x475a74
pop ebx
mov esi, edx
sub edx, edi
add edi, ecx
and ecx, esi
add esi, ecx
or esi, 0x9498b87e
or edx, 0x9499180a
xchg ecx, esi
and edx, edi
dec esi
sub edx, ecx
jmp 0x477acd
push 0x8ff152a0
xor ecx, 0x949b3584
xor edi, ecx
rol edi, 0xc
xchg esi, ecx
and ecx, edx
jmp 0x478268
pop ebx
sub ecx, edx
inc esi
xchg edx, esi
jmp 0x475dd7
pop ebx
xor esi, 0x94a76ec8
xchg edi, ecx
or esi, edi
neg ecx
shl esi, 0x18
mov edx, esi
and edi, edx
shl edx, 0x1c
bswap esi
or edi, ecx
jmp 0x4764a1
pop ebx
xchg esi, edx
add edx, 0x94b2d075
not edx
and ecx, edx
ror ecx, 4
add edi, esi
rol edi, 0x15
jmp 0x475615
push 0x902db2fd
xchg edi, ecx
shr edx, 0xd
sub edi, edx
xchg esi, edx
xor edx, 0x94c405bb
xchg edi, esi
dec esi
mov esi, ecx
mov edi, esi
mov edi, 0x94c605a7
jmp 0x476e41
call ebx
add esi, ecx
inc ecx
xchg edi, edx
mov edx, ecx
jmp 0x476bd8
pop ebx
sub edx, esi
xor edx, edi
mov ecx, 0x94c9067e
bswap esi
ror ecx, 0x1f
inc ecx
not edi
sub esi, 0x94cb091c
sub edx, edi
neg ecx
jmp 0x47676d
call ebx
bswap edi
xor esi, edx
nop
neg edi
mov edi, ecx
mov edi, esi
add edi, edx
xchg edx, ecx
xor edx, esi
sub edx, 0x94cfc6ee
add edx, edi
mov ecx, edx
mov edx, edi
neg edx
or edx, edi
jmp 0x477ec3
push 0x8ff89d9a
xor edx, 0x94d2323a
xor esi, edi
xchg edi, esi
xor edi, 0x94d36722
xor edi, 0x94d3d0a2
sub edi, esi
inc esi
dec esi
mov edi, edx
bswap edi
add edx, esi
dec esi
or ecx, edi
sub esi, ecx
jmp 0x4772ac
call fcn.00477ca0
sub esi, ecx
neg esi
and esi, ecx
and esi, edi
jmp 0x475743
pop ebx
xchg edi, edx
xor ecx, esi
xor esi, 0x94ea2d04
xor ecx, edx
or edi, edx
mov edi, 0x94eb5d3a
mov ecx, edi
jmp 0x477044
call fcn.00477ca0
xchg esi, edx
and ecx, esi
add edi, edx
inc edx
and edx, esi
and edx, esi
mov ecx, edx
not esi
sub esi, ecx
xor edx, edi
add ecx, edx
xchg esi, edx
and esi, edi
xchg ecx, esi
shr esi, 8
jmp 0x477e5a
push 0x8ff84dbd
xchg esi, edi
shl edi, 4
mov esi, edi
jmp 0x47579a
pop ebx
not edi
sub ecx, esi
add esi, 0x952fda37
add edx, 0x9530408b
sub ecx, esi
shr esi, 4
mov edi, esi
dec esi
mov edx, esi
and edi, 0x95322c7e
or esi, 0x95326012
xchg edi, edx
jmp 0x475751
pop ebx
mov edi, ecx
xor edx, esi
xor esi, ecx
add edx, 0x95346c0e
sub edi, 0x9534a35d
inc edi
and esi, edx
add edx, ecx
and ecx, edx
xor edi, edx
jmp 0x47666c
call ebx
sub esi, edi
xchg ecx, esi
neg ecx
xor ecx, 0x953695a5
not esi
mov ecx, esi
sub edi, ecx
xor edi, esi
xor esi, ecx
not edi
jmp 0x475860
push 0x90008146
dec esi
or esi, 0x9538556a
sub ecx, 0x953888b9
and esi, ecx
shr edx, 8
add ecx, edx
and edx, esi
sub edx, edi
jmp 0x4768d4
pop ebx
mov edi, 0x9539dcab
xchg edi, esi
or edx, ecx
or edx, ecx
xchg edx, edi
mov ecx, esi
or edi, 0x953b1b17
shr edx, 0x13
mov esi, 0x953b85d8
jmp 0x477811
pop ebx
add esi, edi
mov edi, esi
or edx, edi
xchg edi, esi
neg esi
mov edx, edi
or esi, edi
not esi
xor esi, 0x954043b8
jmp 0x475ed9
pop ebx
or edi, esi
ror ecx, 0x14
or edx, edi
add edx, 0x958235b2
inc edx
jmp 0x4772cf
pop ebx
xor esi, edx
sub ecx, edx
add esi, 0x958aff0b
inc ecx
add edx, edi
or ecx, esi
jmp 0x476e2f
pop ebx
sub esi, edi
or edi, edx
xor esi, ecx
shl edi, 0x1b
shr edx, 0xf
add ecx, edi
neg edi
sub edi, ecx
xor edx, esi
xchg ecx, edx
jmp 0x477cc4
mov ebx, 0x123b2f04
sub edx, edi
mov ecx, edx
or edi, esi
xchg edi, ecx
add edx, 0x95a3011f
mov ecx, esi
ror ecx, 0xf
xchg edi, ecx
ror edi, 0x1b
ror edx, 3
or edx, esi
sub ecx, esi
shl edx, 0xf
mov edi, esi
xchg ecx, edx
jmp 0x4766b6
pop ebx
xor edi, esi
inc esi
or esi, edx
and edx, 0x95ab343b
sub edi, edx
and edx, edi
and edx, ecx
xor esi, 0x95ac904b
shl esi, 0x12
nop
sub esi, ecx
or edi, ecx
ror esi, 0x14
xor edx, edi
and edi, 0x95af0343
rol edx, 0xd
jmp 0x477d24
pop ebx
sub ecx, esi
rol edi, 0x1f
dec ecx
shl edx, 7
dec esi
xor ecx, 0x95b1f293
shr edi, 0x15
and ecx, 0x95b2b935
jmp 0x47645d
push 0x8ff10bc5
add ecx, esi
xchg ecx, edi
and esi, edx
xchg edi, ecx
mov ecx, edx
or edi, ecx
mov edi, edx
add esi, 0x95c16dbc
sub edx, 0x95c1d1e1
or ecx, edi
jmp 0x4755b7
push 0x90251928
add esi, edi
rol edi, 0xd
sub esi, edi
xor ecx, edx
and edi, ecx
and edx, esi
sub esi, edx
neg edx
sub esi, edi
mov edi, 0x95c688ef
ror edx, 8
mov ecx, edx
add edi, 0x95c7b33d
and edi, ecx
and ecx, 0x95c876b5
mov edi, ecx
jmp 0x477012
mov ebx, 0x123b2f04
not esi
rol esi, 0x1c
add esi, 0x95cec48f
mov esi, ecx
or ecx, edx
add ecx, esi
jmp 0x475911
call fcn.00477ca0
xor edi, edx
sub ecx, esi
and esi, edx
mov edi, ecx
sub esi, ecx
or edx, 0x95d183eb
add esi, ecx
sub edi, edx
jmp 0x475a55
mov ebx, 0x2774562b
add esi, ecx
sub edi, edx
and edx, esi
xor edi, esi
sub edi, ecx
xchg esi, ecx
dec esi
rol esi, 0x1a
shl edi, 0x13
jmp 0x477d01
pop ebx
or edx, esi
and esi, edi
sub edx, ecx
neg edi
or esi, 0x95e888eb
shl edi, 0x1b
or ecx, 0x95e8f365
rol edi, 0xc
xor edx, esi
add edx, esi
mov esi, edx
or edx, edi
xchg ecx, esi
add esi, edi
or esi, 0x95ea94cd
xchg ecx, edx
jmp 0x475a34
pop ebx
add ecx, esi
and edx, 0x95f54521
sub edi, edx
not edi
xchg esi, ecx
inc edx
mov esi, edx
jmp 0x4771e9
push 0x90063e24
xor esi, edx
sub edi, edx
add edi, ecx
or esi, 0x9655475a
sub edx, esi
shr edx, 3
and edx, edi
shr edx, 0x13
jmp 0x4752a5
mov ebx, 0x4132136a
xchg edx, esi
rol ecx, 0x15
xchg edi, ecx
sub edx, 0x965be1a2
sub esi, 0x965c4534
and edi, 0x965cbd55
rol edi, 0xd
add edx, 0x965d78b0
jmp 0x475357
pop ebx
shl edx, 0x12
xor esi, edx
xor esi, edx
and ecx, edi
or ecx, edx
shl edi, 0xa
mov edx, edi
mov esi, ecx
shr ecx, 0x11
jmp 0x475d4f
mov ebx, 0x123b2f04
inc edx
add edx, esi
or edx, ecx
add edx, edi
xchg ecx, esi
neg esi
dec ecx
shl edx, 9
mov edx, ecx
mov edi, 0x96677a58
jmp 0x475800
push 0x901ec008
shr edi, 0x19
and ecx, edx
xor edi, edx
mov edi, edx
bswap edi
and edi, 0x967395a6
jmp 0x476d0f
call fcn.00477ca0
shr edx, 8
xor esi, 0x96935be5
xchg esi, edi
shl ecx, 0x12
xchg esi, edi
mov esi, edx
xchg esi, ecx
neg edx
neg edi
jmp 0x476dc2
pop ebx
not ecx
neg edi
xchg edx, ecx
and esi, edi
jmp 0x4761bf
push 0x8ffc6e1d
add edi, ecx
neg esi
mov edi, esi
xor esi, edi
xor ecx, esi
shr edx, 5
shl esi, 0x1b
mov esi, edi
or esi, ecx
mov esi, edx
bswap edi
not edx
jmp 0x476083
call fcn.00477ca0
dec esi
xor edx, edi
add esi, 0x96a0ea72
or edi, 0x96a14eef
mov ecx, 0x96a1c23c
mov ecx, esi
not edi
add ecx, 0x96a2dcac
and edx, 0x96a340c1
xor esi, 0x96a3aa19
jmp 0x476b2c
pop ebx
or edi, 0x96b33ba9
shr ecx, 7
nop
mov edi, esi
sub esi, edi
xchg esi, ecx
shr esi, 0x12
not ecx
jmp 0x476c2c
pop ebx
mov ecx, edi
shr ecx, 0x17
and ecx, edx
xor ecx, esi
and esi, edi
neg edi
ror esi, 9
add esi, edi
ror edx, 0x11
jmp 0x4771b1
push 0x901fcf29
and edx, esi
shl esi, 0x11
and ecx, esi
inc edx
sub edx, edi
sub edi, ecx
neg edi
mov ecx, edx
bswap esi
jmp 0x477a0f
push 0x902d6062
add edx, esi
and edx, edi
xor edi, edx
or edx, ecx
or esi, edi
xor ecx, edi
sub ecx, edx
dec edx
or esi, edi
and edi, esi
and edi, esi
jmp 0x47571e
push 0x8ffe7cfc
or ecx, 0x96cc18fb
and edi, esi
dec edx
and ecx, edx
and edi, esi
mov edx, ecx
shl edi, 0x1a
jmp 0x477ceb
call fcn.00477ca0
neg edi
shl edx, 0x18
sub esi, ecx
xor edi, 0x96d66ed5
jmp 0x47695d
mov ebx, 0x2774562b
dec ecx
mov esi, ecx
xor ecx, 0x96d7207f
mov edi, ecx
and ecx, edi
mov edx, ecx
mov edx, esi
sub ecx, esi
jmp 0x47523f
pop ebx
sub ecx, edx
mov edx, esi
shl esi, 0x19
add edi, edx
sub edx, ecx
shr edi, 0x15
xor esi, edx
jmp 0x4773ba
call ebx
sub ecx, edx
xor esi, 0x96e0bc3b
sub edx, ecx
and ecx, edi
ror esi, 0x12
jmp 0x475620
push 0x73d9c
shr esi, 5
mov ecx, esi
sub edx, edi
or edi, 0x96e5e479
add edx, edi
mov edx, edi
shl edi, 0x16
mov edi, edx
or ecx, edx
shl edx, 0x1e
add edx, ecx
inc edx
jmp 0x477421
push 0x9007bbfe
add edi, ecx
shl ecx, 0x13
bswap edi
mov ecx, edi
xchg ecx, edx
mov edx, esi
or edx, esi
jmp 0x4778d7
call ebx
sub edx, 0x9704c6b7
xchg edx, ecx
mov esi, 0x9705a3ea
jmp 0x475f0c
call fcn.00477ca0
sub esi, ecx
xor edx, 0x970646d6
inc esi
mov esi, 0x97073a83
dec edi
neg esi
add ecx, 0x97087293
rol ecx, 0xf
or edx, 0x97095cc3
jmp 0x475562
pop ebx
and edi, 0x971669e9
and esi, ecx
xor ecx, edi
sub ecx, esi
xor edx, ecx
xor ecx, edx
jmp 0x4767cc
push 0x902a4d07
or esi, edi
or ecx, esi
shr edi, 0x10
bswap edx
add ecx, edi
or esi, edi
mov esi, edi
and edx, ecx
sub esi, 0x972d62fb
or esi, edi
mov edx, 0x972e20b4
dec edi
shl ecx, 0xb
or esi, edx
jmp 0x4781e0
pop ebx
shl esi, 9
xchg edx, ecx
xchg edi, edx
xchg edi, ecx
rol edi, 0x1f
neg esi
and ecx, esi
xor esi, edi
jmp 0x4780f2
push 0x901f12d8
neg esi
add ecx, 0x97435d37
mov edi, 0x9743bc73
add edi, 0x974421ff
or esi, ecx
ror ecx, 0x1e
xor ecx, edi
mov esi, ecx
mov edx, esi
xor esi, edi
add edx, ecx
jmp 0x476ec8
call ebx
and edi, edx
ror edi, 0x13
sub edx, esi
ror edi, 1
not edx
dec ecx
or esi, edx
rol edi, 0x1b
and esi, edx
rol esi, 0x1f
shr edx, 0x1f
add edi, ecx
shl edx, 7
mov ecx, esi
inc edi
mov edx, 0x9759fef8
jmp 0x477f6b
pop ebx
or ecx, 0x9761d20a
rol edi, 0x11
xchg edi, edx
inc edx
jmp 0x475a96
push 0x902e05e2
xor ecx, edi
rol ecx, 6
shl ecx, 0x17
add edi, esi
add ecx, esi
sub esi, 0x9765947c
sub edx, edi
xor edi, esi
or edi, ecx
inc ecx
ror edx, 0x14
xor edi, 0x97680825
mov ecx, esi
and esi, edi
jmp 0x477c56
call fcn.00477ca0
mov esi, edx
or ecx, 0x9769a259
add edx, ecx
add edx, ecx
add esi, ecx
or edx, edi
bswap ecx
xchg ecx, edx
jmp 0x47725b
pop ebx
and ecx, 0x976caf7f
shl esi, 8
or esi, 0x976d7438
mov edi, edx
or esi, edx
add edx, ecx
mov ecx, esi
inc edx
xor edx, edi
xor edi, 0x976f1cdd
jmp 0x476947
push 0x901f7ff2
ror esi, 9
and edi, esi
mov esi, 0x97713b70
not edi
add edi, 0x9771a51f
mov edi, 0x9771d8db
and esi, edx
neg edi
sub ecx, edx
xor edx, 0x9772ae79
jmp 0x476805
push 0x90256c6a
add edx, esi
xor edi, ecx
sub edx, ecx
or edx, edi
and esi, ecx
sub ecx, edx
inc edi
mov edx, edi
sub esi, ecx
or ecx, edi
add esi, edx
jmp 0x477ee0
pop ebx
rol edi, 8
add edx, ecx
shr esi, 0x1c
neg edi
and edx, edi
inc edx
inc edi
or esi, edi
mov edi, edx
add edx, 0x9797532c
jmp 0x47805e
push 0x90076c1a
sub edx, edi
inc esi
neg edx
xchg ecx, edx
xor edx, 0x97a06231
ror edx, 0xc
and edi, ecx
and ecx, edi
and edi, ecx
or edi, ecx
mov edi, ecx
and edi, 0x97a3102b
add esi, edx
bswap esi
jmp 0x476ac5
push 0x8ffc1cbd
xchg esi, edi
mov esi, edx
xchg edx, edi
xor edx, edi
shl esi, 0xf
add esi, edi
add edi, 0x97a6b546
or edi, ecx
or ecx, esi
dec edx
and esi, 0x97a852aa
shl esi, 0xe
jmp 0x47667a
pop ebx
or esi, edx
or esi, edi
or ecx, esi
xchg esi, edx
xchg edi, ecx
mov edx, 0x97bef38f
inc edx
dec esi
and edx, esi
jmp 0x476821
pop ebx
add edx, 0x97c24236
or edx, esi
rol ecx, 7
sub esi, ecx
mov ecx, edi
neg edi
and edi, esi
mov edx, 0x97c4ee7f
or edi, ecx
sub edx, esi
mov ecx, 0x97c626c7
add esi, edx
or edx, 0x97c6f1d8
jmp 0x477329
call ebx
neg ecx
and ecx, esi
or edi, ecx
shr edx, 0x11
or edi, 0x97cec2ae
inc esi
add ecx, esi
or esi, 0x97d00d5e
not edi
xor esi, ecx
mov edi, edx
and esi, 0x97d19680
jmp 0x475e75
mov ebx, 0x2774562b
xor edi, 0x97d21e6a
ror esi, 0x17
xchg esi, edi
inc ecx
and esi, edi
ror edx, 0x17
xchg ecx, edi
shl ecx, 1
and edi, edx
and edx, edi
sub esi, edx
jmp 0x4768bd
mov ebx, 0x123b2f04
xor esi, edx
xchg edx, edi
or ecx, edi
xor esi, edi
mov edi, edx
shl edi, 0x16
or ecx, 0x97d822d5
xchg ecx, edx
or edx, esi
sub edi, esi
jmp 0x476e71
pop ebx
sub ecx, 0x97d902bb
and edi, ecx
dec ecx
xor edi, 0x97d9d91a
sub edi, esi
or edi, ecx
jmp 0x4759e2
push 0x8ff48530
xchg edx, edi
xchg edi, edx
or ecx, edx
xor edx, edi
or edx, ecx
sub esi, ecx
or edx, esi
xor esi, 0x97e0674b
dec edx
and esi, 0x97e146e6
add esi, edi
sub edx, 0x97e20ea3
xchg edi, esi
add esi, edx
xchg edi, ecx
mov edi, 0x97e39510
jmp 0x47754d
pop ebx
shl edi, 0x18
neg esi
neg ecx
dec esi
add ecx, edi
or edx, 0x97f16519
bswap esi
rol ecx, 0x1f
or esi, ecx
xor edi, 0x97f3094b
or ecx, edi
add ecx, 0x97f3c91e
sub edx, ecx
sub edi, esi
jmp 0x47641e
push 0x401400
xchg ecx, edx
sub edi, edx
and esi, edi
add edi, 0x97f9fd8d
and edx, 0x97fa5f73
bswap edi
sub ecx, 0x97fb3231
jmp 0x475772
push 0x8ff07279
inc edi
xor ecx, edi
and edx, edi
sub esi, ecx
add ecx, edi
inc esi
xor esi, ecx
neg ecx
or edx, edi
and edx, edi
sub esi, ecx
ror esi, 2
xor ecx, 0x98099e1f
inc ecx
jmp 0x475280
push 0x8ff4d402
xchg edi, esi
add esi, edi
or ecx, 0x98153200
xor ecx, 0x98157273
sub edx, ecx
and esi, edi
jmp 0x4751e0
mov ebx, 0x123b2f04
xchg ecx, edi
add edi, ecx
bswap edx
add edi, edx
sub esi, ecx
shr esi, 0xe
add ecx, esi
or ecx, edx
add edi, 0x9817cc15
sub ecx, 0x9818037e
jmp fcn.00475939
push 0x40
sub ecx, edx
dec edi
xchg esi, edi
xchg esi, edi
shl edi, 1
mov ecx, edi
add edx, 0x98323431
not ecx
mov esi, ecx
xor edi, edx
inc ecx
not esi
shl edx, 0x11
bswap edx
jmp 0x4769a0
push 0x9024afd2
neg esi
not esi
mov edx, edi
xchg edi, ecx
xchg esi, edi
dec esi
inc edi
rol ecx, 0xb
jmp 0x475fa5
mov ebx, 0x123b2f04
not esi
xchg edi, ecx
sub edx, 0x9857bcfa
sub esi, edi
xchg ecx, edi
and ecx, edi
and edi, esi
xor esi, 0x9858fad1
xor edi, esi
xchg edi, edx
xor esi, edi
jmp 0x476040
push 0x902aed95
xor ecx, edi
and edi, esi
add edx, edi
jmp 0x4764bc
push 0x902ee454
or edx, 0x9869f1c5
bswap edx
mov ecx, edx
sub edx, 0x986a8b80
or edx, 0x986abf2e
dec edi
xor ecx, 0x986b2967
sub edx, esi
xor edi, 0x986b9b46
sub edx, esi
rol edi, 0x1f
rol edx, 0xc
dec ecx
sub esi, edx
jmp 0x47756b
call ebx
xor edx, esi
sub esi, edi
mov ecx, edx
sub ecx, 0x986e118d
not ecx
and edi, esi
mov edi, esi
xor ecx, 0x986fbf31
sub esi, edx
mov ecx, edi
not ecx
jmp 0x47522f
mov ebx, 0x123b2f04
rol edx, 0x13
shl esi, 0x15
or ecx, edi
mov edi, esi
sub edi, esi
shl edx, 0x1d
inc ecx
mov esi, 0x98754a34
ror edx, 0xa
mov esi, edx
jmp 0x477f03
push 0x8fedaec7
not edi
sub esi, 0x987c55db
or esi, edi
add esi, edx
add ecx, 0x987d9672
xor edi, esi
sub edx, esi
sub edx, edi
add edx, ecx
jmp 0x477d65
pop ebx
and ecx, edi
or edx, edi
or esi, 0x988f5d87
sub ecx, esi
jmp 0x476840
push 0x902e7643
xchg edx, edi
xchg esi, edx
or edi, edx
dec ecx
shl ecx, 0x1a
mov ecx, esi
and esi, ecx
or esi, edi
and esi, edi
jmp 0x4779a7
push 0x9010cc92
not ecx
sub edx, edi
bswap esi
xor edi, edx
xor edi, 0x98ba9850
rol ecx, 0x10
and edi, esi
or esi, edi
shl edi, 9
add edx, edi
bswap esi
jmp 0x476529
pop ebx
or ecx, edx
dec ecx
mov esi, ecx
or ecx, esi
or edx, edi
rol esi, 0xa
not esi
inc edx
bswap edx
bswap ecx
jmp 0x4770d2
push 0x8ffecf62
neg edi
or edx, ecx
xor edi, esi
sub esi, edx
sub edx, ecx
add esi, ecx
jmp 0x475581
call fcn.00477ca0
xchg esi, edx
xor edi, esi
sub ecx, edx
or edx, ecx
or ecx, 0x98c94b1a
xor esi, ecx
mov edi, 0x98ca1d9a
not ecx
or edx, edi
jmp 0x477f50
push 0x900b0c99
or ecx, edi
mov edi, ecx
add ecx, esi
and esi, edx
and esi, 0x98cd1f90
sub esi, edi
mov edx, ecx
or ecx, edi
bswap edx
jmp 0x475e91
mov ebx, 0x2774562b
or edx, edi
shr edx, 0x16
shl ecx, 0x15
add edx, esi
xchg edx, edi
or esi, edx
xor edi, esi
shl esi, 6
add esi, ecx
jmp 0x47664a
call ebx
dec edi
xchg edx, edi
or ecx, edx
xor edx, edi
or edi, 0x98f4286d
add edi, 0x98f48ecd
dec esi
xor ecx, esi
mov esi, edx
and ecx, 0x98f61964
jmp 0x47612c
pop ebx
xchg edx, edi
xchg edx, edi
xor ecx, edi
dec ecx
sub esi, edx
bswap edi
mov edx, edi
xchg edi, esi
add edx, ecx
and edx, 0x99019771
jmp 0x477c72
push 0x9025bf6c
add ecx, esi
or esi, 0x99043dcf
and edx, edi
mov edx, edi
xchg esi, ecx
and esi, ecx
xchg edi, esi
xor ecx, edi
xor edi, esi
shr edi, 0x1f
jmp 0x4782b9
call fcn.00477ca0
shl edi, 0x10
xor ecx, edx
or esi, 0x9908aa28
xor edi, edx
add ecx, esi
or edx, 0x9909e60b
shr edi, 0x1d
add edx, ecx
mov esi, edx
jmp 0x475479
call ebx
and ecx, esi
or edi, ecx
neg ecx
shl edi, 0x11
xor ecx, esi
mov edi, edx
inc ecx
xor esi, ecx
or edi, esi
sub edx, ecx
jmp 0x475594
pop ebx
mov esi, edx
sub esi, edi
mov edi, ecx
and ecx, edx
xor ecx, 0x992b34fe
or ecx, edx
neg edx
mov ecx, 0x992c5fca
and edx, esi
jmp 0x4774a1
push esp
xchg edi, esi
neg edx
jmp 0x4776e3
push esp
sub edi, ecx
sub edx, esi
inc edx
or edx, edi
jmp 0x477f8a
push 0x9006feed
and esi, edi
or ecx, edx
mov esi, 0x994126cd
or edi, edx
not edx
dec esi
dec edx
sub edi, ecx
xchg esi, edx
and esi, edi
sub esi, edi
or edx, 0x9944afd9
inc edx
jmp 0x4770a4
pop ebx
ror edi, 0x1b
and esi, edi
xor edi, ecx
sub edi, 0x9946b9a9
sub ecx, esi
and edx, esi
jmp 0x475ae2
pop ebx
sub edx, esi
shl edi, 0x14
rol ecx, 0x12
nop
xchg esi, edx
add ecx, edx
neg ecx
jmp 0x4759f3
push 0x902a9ce7
sub esi, edi
sub esi, edx
and edi, edx
sub ecx, 0x997058c7
and ecx, 0x9970d055
xchg edi, esi
sub edx, edi
xor edx, ecx
mov edx, edi
jmp 0x477997
push 0x8ff1a077
xor esi, 0x997ee548
sub ecx, edi
or esi, ecx
sub esi, ecx
xor ecx, edx
inc ecx
and esi, 0x998143e1
bswap edx
sub edx, ecx
jmp 0x476025
push 0x90260e78
and esi, ecx
add edx, esi
and edi, edx
xor edi, 0x99893510
sub esi, ecx
add edi, esi
or ecx, esi
xor ecx, edx
xchg ecx, edx
shr esi, 7
add ecx, edx
xchg edi, edx
xchg esi, edx
rol edx, 7
inc ecx
xchg esi, edx
jmp 0x4754b4
push 0x8ff59929
xor ecx, edi
mov edx, edi
add ecx, esi
add ecx, esi
add ecx, edx
xor edi, esi
and edx, 0x99927489
jmp 0x477286