Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetInputDesktop
cmp eax, 0xffffff0f
jne 0x4010ac
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xfffffef5
jne 0x40114e
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xffffff24
jne 0x4011f5
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xfffffede
jne 0x401292
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_GetMenuContextHelpId
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_GetMenuContextHelpId
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.user32.dll_MapDialogRect
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.advapi32.dll_ElfOpenBackupEventLogW
call sub.user32.dll_GetMenuContextHelpId
ret
jmp 0x4752fc
and ecx, edx
not edi
and edi, ecx
jmp 0x476836
call fcn.00478c34
and ecx, edi
xor edi, 0x71ac781f
mov ecx, edi
rol ecx, 4
inc ebx
jmp 0x4777d3
mov esi, 0x2809144b
and ebx, ecx
xor edx, ebx
add ecx, 0x71b363cc
sub edx, 0x71b3e739
and edx, 0x71b47bff
add edi, ecx
xor edi, ecx
xchg ecx, ebx
jmp 0x476de7
mov esi, 0x5027095f
dec edx
mov edx, ecx
sub edx, ecx
inc ebx
xchg ebx, ecx
or edx, ebx
dec ebx
xor edi, ecx
xor ebx, edi
ror ecx, 0x13
jmp 0x47863b
pop esi
not ecx
and ebx, edi
not edi
add edx, ebx
and edi, ebx
rol edx, 0x18
ror edi, 5
and edx, ecx
jmp 0x4756c5
call fcn.00478c34
sub edx, ebx
xchg edi, ecx
add ecx, edi
shr ecx, 6
and edx, edi
jmp 0x4782a8
pop esi
xchg ecx, edi
neg edi
rol ecx, 0x11
mov edx, 0x71ffe1e6
xchg edx, ebx
sub ebx, ecx
jmp 0x477053
mov esi, 0x5027095f
shr ebx, 3
and ecx, edx
xor edx, ecx
neg ecx
or edi, ebx
sub ebx, edx
mov edi, 0x72208e00
jmp 0x478768
mov esi, 0x5027095f
or ebx, 0x722137ab
xchg ecx, edi
sub ebx, edi
jmp 0x475caa
pop esi
xchg edx, ecx
sub ecx, 0x722522b3
xchg edi, ebx
or ebx, edi
sub edi, 0x7226bf1e
dec edi
mov edi, edx
xor ebx, edi
add ebx, ecx
mov edi, edx
and ebx, edx
add edi, ecx
jmp 0x477697
pop esi
add edi, 0x722ac6b5
or ebx, edi
shr edx, 0x1a
add ebx, 0x722c4f1b
and edx, ecx
or ecx, 0x722d5e0c
dec edi
or ebx, edi
shl ecx, 0xe
or edi, ecx
xchg ebx, edi
xchg ecx, edx
jmp 0x478696
pop esi
add ecx, 0x72312f2a
sub ecx, ebx
and ecx, edx
bswap ecx
or ebx, 0x72337318
add ecx, ebx
jmp 0x47670e
push 0x6eee6f6c
nop
xchg ecx, edx
mov ecx, 0x7243b778
ror ecx, 3
or edi, ecx
or edx, ebx
and ecx, ebx
mov ecx, edx
or edx, 0x7246af53
and ecx, edx
and edi, 0x7247a667
jmp 0x477edf
mov esi, 0x5027095f
shl edx, 1
ror edi, 2
sub ecx, edx
xor edi, 0x7249c696
add edi, edx
jmp 0x4753b5
push 0x6ecfa7b4
add ecx, 0x72653d67
shr ecx, 0x1f
xor ebx, edi
add ecx, edi
shl ebx, 0x1d
add ebx, 0x7267e565
xchg ecx, ebx
xor edi, ecx
mov ecx, 0x7269764a
xchg edi, ebx
add edx, ebx
sub edx, edi
jmp 0x4773ee
call fcn.00478c34
xchg ebx, edx
or edi, 0x727376c2
or edi, 0x7273f358
mov ecx, edi
xchg edx, ecx
and ecx, edi
shl ebx, 0x11
add ecx, edi
jmp 0x47596f
call esi
and edx, ecx
mov ecx, edi
mov ebx, ecx
bswap edx
xchg edi, edx
jmp 0x477134
call fcn.00478c34
shl edi, 3
xchg ecx, ebx
rol ebx, 0xa
nop
and ebx, 0x727bc629
or edi, ebx
mov ebx, edi
and edi, ebx
and edi, 0x727dd889
jmp 0x4758e7
push 0x6ebf2f3e
or ebx, ecx
add edi, 0x7283439d
rol ecx, 0x13
add edi, ebx
shr edi, 0x12
ror ecx, 0x11
xchg ebx, edi
xchg edx, edi
and ebx, edx
mov edi, edx
xor edx, 0x72880ec6
jmp 0x478907
call esi
xor ecx, 0x7288da88
mov edi, 0x728978d0
mov ebx, edi
mov edx, ebx
add ebx, edi
neg ecx
sub ecx, edi
mov ecx, edi
mov ecx, 0x728d6cee
xchg ebx, edx
neg edi
sub ecx, edi
jmp 0x47723c
push 0x6ee38e55
and edx, edi
or ecx, 0x72906f9c
and edi, 0x729105bd
add edi, 0x7291b728
ror edx, 0x18
sub edx, 0x72930595
bswap ebx
sub ecx, ebx
mov ebx, ecx
jmp 0x475e1a
call esi
nop
sub edx, 0x72aecc8b
xor ecx, edi
add ebx, ecx
mov edi, ebx
rol edi, 0x1d
add ebx, 0x72b1b30b
sub ecx, edx
or ecx, edi
jmp 0x475715
push 0x6ee881b4
sub edi, ecx
or edi, edx
xor ebx, edi
ror ecx, 0x1d
sub ecx, 0x72c09077
and edi, ebx
jmp 0x47752b
pop esi
bswap edi
or ecx, edi
add ecx, ebx
add ecx, edi
sub edi, edx
not ebx
or edx, ebx
xchg edi, ebx
xchg ebx, edx
jmp 0x477148
call esi
xor edx, ebx
sub edi, edx
inc ebx
sub edi, ebx
inc edx
not ecx
add edi, 0x72d609ae
xor edx, ebx
and ecx, ebx
shr ebx, 0x1d
sub edi, ebx
and edx, edi
ror edx, 0x14
jmp 0x47716a
push 0x6ec26b8e
sub ecx, edi
sub ecx, edx
sub edi, edx
sub edx, 0x72f2a818
jmp 0x475ea8
call fcn.00478c34
sub ebx, edi
rol ebx, 0x1b
and ecx, edi
or edx, 0x7304b2a3
xor edi, edx
dec ebx
not edi
dec edx
shl edx, 0xc
or edi, 0x7307e2b1
jmp 0x475b5a
mov esi, 0x5027095f
mov edi, ecx
or edi, ecx
mov ebx, edx
sub ebx, 0x7314d4f9
add edi, 0x73157a82
mov ecx, edi
xor edi, ebx
jmp 0x475554
pop esi
not edi
rol edi, 9
or ebx, ecx
sub ebx, edx
or edx, ebx
jmp 0x478932
push 0x6eced6da
shr ebx, 0x1c
neg edx
sub ecx, edx
xor edx, 0x732aaded
xor ecx, 0x732b3472
xchg ecx, edx
and edx, 0x732c38a7
shl ebx, 1
add edi, ecx
jmp 0x47748f
mov esi, 0x2809144b
xor ebx, edi
or edi, ecx
bswap ebx
add edi, edx
sub edx, edi
sub edi, edx
jmp 0x4766a6
push 0x6ec2ca05
add edx, ebx
xor ebx, edx
or ebx, ecx
xor ecx, ebx
xchg edx, edi
ror ebx, 0x18
sub ecx, 0x734cb8b5
dec edx
xor ecx, ebx
jmp 0x47540e
call esi
and ebx, edx
mov edx, edi
xor ebx, 0x734fa275
shr ecx, 7
or ebx, edx
or ebx, edx
mov ecx, 0x7351a906
or edx, 0x73522b51
mov ebx, 0x7352af6d
jmp 0x477746
mov esi, 0x5027095f
mov ebx, 0x7393fdf9
add ecx, ebx
xor edi, ebx
add ebx, edi
and edx, 0x739688a9
shl edx, 4
or edx, 0x73979646
sub edi, edx
jmp 0x4758c4
push 0x6eedfb8a
neg ecx
add edi, edx
jmp 0x475781
push 0x6ece015d
xor edi, 0x7402641a
xor ecx, ebx
or ebx, edx
and ecx, ebx
sub edi, edx
xor ebx, ecx
mov ecx, edx
inc ecx
sub edx, ebx
inc edi
jmp 0x477c8b
push 0x6ee2a354
xor edi, ebx
add ebx, edx
bswap ebx
add edi, ebx
shr edi, 0x17
mov ecx, edi
or edi, 0x7418dae7
neg edi
xor edi, ebx
sub edx, ebx
sub edx, 0x741afa9a
jmp 0x47827e
pop esi
and edx, 0x742e5f31
add edi, 0x742ee06d
shr edx, 9
add edi, edx
xchg edx, edi
xor edi, edx
jmp 0x47666a
pop esi
dec ecx
neg ebx
rol ebx, 0xc
mov ecx, ebx
inc ebx
jmp 0x477c63
pop esi
and ecx, 0x7479cde4
xchg edx, ecx
and ecx, edi
xor ecx, edx
jmp 0x476cbd
pop esi
xchg edx, ecx
xor edx, 0x747cb3a9
mov edi, edx
add ebx, 0x747db5b2
sub edx, 0x747e38b6
sub edx, ebx
or ecx, edi
xor ebx, ecx
mov edi, edx
xor edx, ecx
mov edx, edi
sub ebx, edx
jmp 0x4772ed
call fcn.00478c34
add ebx, edx
and ebx, edx
xor ebx, 0x7483a85a
sub edi, ecx
inc edi
jmp 0x477a2b
push 0x6edbcec7
add ebx, edx
shl edi, 6
xchg edi, edx
sub ecx, edx
and edx, 0x748f8973
xor edx, ecx
shl ecx, 0x17
jmp 0x477ff0
pop esi
or ebx, 0x749146a4
mov edi, 0x7491cc98
bswap ecx
nop
and ecx, 0x74936b30
shl edi, 0x11
add ecx, 0x74947036
mov ebx, 0x7494f771
sub edi, 0x74959567
jmp 0x477ea4
pop esi
ror ecx, 0x1c
xchg ecx, edx
dec ecx
shr edi, 0x19
xor edx, 0x749861e8
sub edx, 0x7498e1db
or edi, ecx
bswap ecx
sub edx, 0x749a8bd3
shr edx, 0x1e
mov edi, edx
xor ecx, ebx
xchg edi, ebx
jmp 0x475b28
push 0x6ebe5921
xchg edi, edx
or edi, 0x74bbcaa6
rol edi, 0xc
and ecx, 0x74bcdc10
xchg ecx, edx
sub edi, edx
sub ebx, edi
add edi, 0x74befee1
shr ecx, 2
sub edx, edi
mov ebx, edi
jmp 0x478148
pop esi
sub edx, edi
dec edi
xchg edx, ecx
nop
shr edi, 0x1b
add ebx, 0x74caeaf4
mov edx, edi
jmp 0x476cf7
call fcn.00478c34
xchg edx, ebx
sub edx, ecx
or edx, 0x74dd11e5
xchg edx, ebx
or edx, edi
mov ecx, 0x74de9492
xor ecx, ebx
jmp 0x4786f1
pop esi
or edx, 0x74ea4912
mov edx, edi
add edi, edx
mov edi, 0x74ebc608
and edx, 0x74ec4924
inc ebx
or ebx, edi
sub ebx, edi
mov ecx, ebx
rol ecx, 0x11
sub edx, ecx
xor edi, 0x74efe3c3
or edi, 0x74f06af7
add ebx, ecx
dec edi
jmp 0x476892
pop esi
xor edx, ecx
and ebx, edx
xor ebx, ecx
mov edi, ecx
sub ebx, ecx
or ecx, edi
mov edx, ecx
xchg ecx, edi
rol ebx, 0xc
or ebx, ecx
sub edx, ecx
jmp 0x4775ec
pop esi
xchg ecx, edi
mov ebx, 0x752c0322
add ecx, ebx
and ebx, ecx
neg ecx
xor ecx, ebx
xor edi, ecx
or edx, ebx
sub ecx, edx
jmp 0x476d57
push 0x6ee727c8
xor ebx, edx
shl ecx, 0x11
xor ebx, edx
or ebx, ecx
or ecx, ebx
dec ebx
jmp 0x47730b
push 0x6ec5a018
shl edx, 0x1a
sub ebx, 0x756c4909
and ecx, edi
mov ebx, edi
sub edi, 0x756de9e0
and ebx, 0x756e6f73
or edi, edx
mov edx, edi
jmp 0x477bf9
pop esi
bswap edi
or edx, ecx
neg ecx
mov ecx, 0x7571de8c
sub ebx, edi
jmp 0x475d6e
push 0x6ec20377
not ecx
inc ebx
or edi, ecx
mov edi, edx
or edx, ecx
shr edx, 0x13
or ecx, edx
or edx, edi
xor ecx, edi
or edx, ebx
add ecx, ebx
jmp 0x475c26
pop esi
xor ecx, ebx
not edx
mov ebx, 0x7584bb94
xor edx, 0x7585458c
or ebx, edi
and ebx, edi
jmp 0x478366
call fcn.00478c34
or ecx, 0x7596f87b
and ebx, edx
xor ebx, 0x75981806
shl edx, 0x11
xor ebx, edx
xor ebx, 0x7599a597
shl edi, 4
xchg edx, ecx
jmp 0x475ec8
push 0x6ed70faf
shr ecx, 0xc
mov edx, ecx
or edi, edx
inc ecx
jmp 0x4789ef
push 0x6ecabe67
not edx
and edx, 0x75b62e9a
jmp 0x4770a4
push 0x6ee23bec
sub ecx, 0x75cc3b57
add edx, 0x75ccc08c
mov ebx, 0x75cd4782
xchg ebx, edx
xor edx, 0x75ce5309
mov edx, edi
mov ecx, ebx
dec ebx
xchg edx, ecx
mov edx, ebx
or ebx, ecx
inc ecx
add edi, 0x75d283d3
jmp 0x4763cf
pop esi
or edx, ebx
add ebx, ecx
add edi, 0x75ee45a1
and edi, 0x75eecbed
add edi, ebx
and ebx, edi
xchg edi, edx
shr ebx, 8
mov ecx, ebx
not ecx
xor edi, edx
or edx, ebx
and ecx, edx
xor ecx, 0x75f3ea39
jmp 0x478a9f
push 0x6ed6afba
xor edi, 0x75f4a5fe
dec edi
mov ebx, edi
and edx, edi
and ecx, edi
shr ebx, 0xc
bswap ecx
add edi, 0x75f8592a
jmp 0x476e0f
push 0x6ecb1fba
add ecx, ebx
add ebx, edx
xor edi, ecx
sub edi, edx
or ecx, ebx
and ebx, edx
shr ebx, 0x1d
xchg edi, ebx
jmp 0x477d65
push 0x6ec86d5f
inc ecx
and edi, ebx
mov edx, edi
nop
add edi, edx
xor ebx, ecx
and ebx, edx
xor edi, edx
sub edx, ebx
inc edx
jmp 0x4756a0
pop esi
and edi, ecx
sub ebx, edx
xchg edi, edx
bswap ebx
and edx, ebx
inc ecx
shr edi, 0x11
jmp 0x476ce4
push 0x6edb6abc
xchg edx, edi
xor edx, ebx
shl ebx, 0x18
xor edx, 0x7616c925
and edi, ecx
sub ebx, edx
or ebx, edx
shl ecx, 0x1c
xor ecx, edx
jmp 0x4766f0
pop esi
inc edx
or ebx, 0x761ac7e2
add ecx, 0x761b4601
mov ecx, 0x761bcc7f
jmp 0x477b0d
pop esi
or edi, edx
and ecx, 0x7638c17f
sub ecx, 0x76394311
and ecx, edi
or ebx, 0x763a651e
sub ecx, edi
add edi, 0x763b65cf
add edx, 0x763be8be
add edi, ebx
sub edx, ebx
jmp 0x47750d
call esi
xor ecx, ebx
shr edi, 0x1a
inc ecx
or ebx, 0x763f2cc0
xchg ebx, ecx
inc edi
xchg ebx, edx
xchg edx, ecx
and edx, ebx
bswap edx
sub edi, edx
jmp 0x477bd6
call esi
xor edi, ebx
shr edx, 7
and ebx, ecx
bswap edi
mov edi, 0x764dade2
jmp 0x4755d3
pop esi
shl edi, 6
xor edi, ebx
and ebx, ecx
neg ecx
add edx, edi
xchg ebx, edi
xor ebx, edi
mov edx, edi
shr edx, 5
and edx, edi
and ebx, edi
jmp 0x47673c
push 0x6ee7a11e
bswap edx
bswap edi
and ebx, edi
jmp 0x47840e
mov esi, 0x2809144b
add edi, ecx
neg edi
and ebx, edi
xchg edi, ecx
or ebx, 0x767cf16d
shl ebx, 0xa
shl edi, 0x16
jmp 0x4758f8
pop esi
xor edi, ebx
sub ebx, edi
bswap edi
or edx, ebx
or edx, edi
xor edi, ecx
sub ebx, ecx
xchg ebx, edi
and ecx, edi
or ecx, edi
mov ebx, edi
dec edx
jmp 0x476495
push 0x6ecf3e4a
sub ebx, edi
or edi, edx
mov ebx, edi
mov ebx, edi
xor ebx, edi
mov edx, edi
xchg ecx, ebx
shl ebx, 0x11
add edx, 0x7696d050
shl edi, 0xc
or edx, edi
add edx, 0x76985fe9
add edx, ebx
jmp 0x475869
pop esi
and edx, 0x76a27178
mov ebx, ecx
jmp 0x478b6b
pop esi
and edx, 0x76a7391e
add edx, ebx
neg ebx
or ebx, edx
mov ebx, ecx
or ecx, ebx
sub ebx, 0x76aa515d
bswap ebx
jmp 0x4770fc
push 0x6ee8f0de
rol edi, 3
add edi, 0x76ac16cf
mov edx, edi
neg edi
add edx, edi
and ebx, ecx
or ecx, edx
add ecx, edx
dec edi
inc ecx
xor ecx, edx
jmp 0x4788e0
push 0x6ee1d8a4
rol edx, 0x12
and edx, 0x76c9d8c6
or edx, edi
jmp 0x476f61
pop esi
xchg edx, ebx
nop
or ebx, ecx
sub edx, ebx
sub edi, ecx
xor edi, ecx
shr ebx, 0xf
add ecx, 0x76e99007
rol ebx, 0xa
mov ebx, ecx
sub ebx, 0x76eb216e
mov edx, ecx
or ebx, edi
jmp 0x4785f4
push 0x6ed7cc5d
mov ebx, 0x76ecd0bd
sub ecx, edx
add ebx, ecx
dec edx
rol edx, 3
mov edi, edx
shr ecx, 4
xchg edi, ebx
or ebx, edi
sub edx, edi
jmp 0x475d20
pop esi
shr ebx, 0x1e
dec ebx
mov ebx, edi
sub ecx, edx
sub edx, 0x770218a5
sub edx, 0x7702b872
mov edx, ecx
and ebx, edx
jmp fcn.0047575a
call esi
mov edx, ecx
add edi, 0x7708f192
mov edx, ebx
sub edi, ebx
and ecx, 0x770a7144
add ebx, edi
mov edx, ebx
inc ebx
jmp 0x476b0f
call esi
shr ecx, 3
sub ecx, edx
and edx, edi
mov ecx, edi
jmp 0x477e41
pop esi
sub ecx, 0x776c8aad
xor ecx, edx
dec edi
or edx, edi
add ecx, edi
or edx, edi
add ebx, edi
neg edx
shl edi, 0x16
jmp 0x47667c
call esi
sub ecx, ebx
and edx, 0x7771f89d
xor ecx, ebx
rol edi, 7
or ebx, edi
or edi, 0x7774111b
mov edi, ebx
dec edx
xor ecx, 0x7775b775
xchg ecx, edi
shr edi, 2
or ecx, edi
ror edi, 0x14
jmp 0x478ad3
call fcn.00478c34
ror edi, 0x17
add ebx, 0x77790ed4
rol ecx, 0x14
add ecx, edi
or edx, ebx
sub edi, ecx
xor edx, edi
or edx, 0x777c207e
jmp 0x4772ba
pop esi
and edx, edi
sub edx, 0x777ee6f8
xchg edi, ecx
add ecx, ebx
add ecx, ebx
sub edx, ecx
jmp 0x4786c3
push 0x6eca5e89
add edi, 0x778f0ec6
sub edx, edi
nop
rol edx, 0x13
neg ebx
sub edx, edi
shl ecx, 4
mov edi, 0x7792b5ff
xchg edx, edi
sub ebx, 0x7793d534
neg ecx
add ecx, edx
jmp 0x476ec4
push 0x6ed3c2d8
and edx, ecx
inc edi
or edx, 0x77a2167f
xchg edi, edx
xchg edx, ebx
add ebx, ecx
jmp 0x477fc9
pop esi
and ebx, 0x77b051c8
mov ebx, 0x77b0d583
or edi, ebx
or ebx, edi
xor ecx, edi
sub ebx, 0x77b2db01
sub edi, ecx
mov edi, ecx
or edi, edx
jmp 0x47647a
push 0x6ec60a38
mov edi, ebx
mov edx, 0x77b5ad1c
and ebx, 0x77b62c1c
sub ebx, ecx
sub edx, ebx
not ebx
and ebx, edx
add edi, 0x77b8c945
and edi, ebx
jmp 0x47607e
push 0x6eed20cc
and edx, ebx
sub ebx, edi
rol ecx, 5
dec ebx
bswap ecx
inc ebx
mov edx, edi
mov ebx, ecx
mov ecx, edi
sub ebx, 0x77c88d03
and edi, ebx
mov edi, ebx
mov ebx, edi
dec edx
jmp 0x47874e
push 0x6ece719c
sub edx, ecx
or edx, 0x77cbcbc1
and ebx, ecx
xor edi, ecx
neg ebx
mov ebx, edi
xchg ecx, ebx
sub edx, edi
jmp 0x475dc1
mov esi, 0x5027095f
xor edi, 0x77eabc56
and edx, edi
xor ebx, edx
sub ebx, ecx
shr ebx, 5
inc ebx
rol edi, 0x16
mov edx, 0x77ee7506
jmp 0x478487
pop esi
mov edx, ecx
sub edx, ecx
add ebx, edx
nop
xchg edi, edx
mov edx, ecx
add edx, 0x780db93e
xchg ebx, ecx
mov edi, ebx
sub ecx, edi
xor ebx, ecx
jmp 0x476af2
push 0x6ed649c6
and ebx, 0x781a6e5e
or ecx, 0x781b0fa0
not edi
mov ecx, edx
not edi
xor ecx, edi
xchg ebx, edx
not ebx
jmp 0x477082
push 0x6eeedd71
shr edx, 0x11
and ebx, edx
or ecx, edx
sub edi, 0x78255b5f
jmp 0x4753e8
mov esi, 0x5027095f
or edi, edx
add ebx, ecx
sub ecx, edx
xchg edx, ecx
mov edi, 0x784723e6
or edi, edx
xor edi, 0x784824ce
or edx, 0x7848adcc
not edx
jmp 0x4780df
push 0x6edc351e
rol edi, 0x10
mov ebx, edi
dec ecx
ror ebx, 0xd
add edi, ebx
sub ebx, ecx
and ebx, edi
add ebx, edx
xor ebx, edi
mov ecx, edx
add ebx, edi
xor ebx, edx
jmp 0x475684
call fcn.00478c34
sub edx, edi
mov edx, 0x786f5b0d
mov ebx, ecx
shl edi, 0x15
inc ebx
mov ecx, ebx
mov ecx, 0x78724ba4
xor ebx, edx
or edi, 0x787353db
add ebx, 0x7873d688
jmp 0x475a6d
push 0x6ebecae9
dec ebx
and ebx, edx
nop
inc edi
sub edx, ebx
jmp 0x475944
push 0x6ee32dfe
xchg edx, ebx
shl ebx, 0x1b
mov edi, ebx
and edi, 0x78aa2153
mov ebx, 0x78aaa3ec
add ecx, edi
or edx, ecx
or edx, ebx
xor ebx, 0x78acc10a
sub edx, edi
jmp 0x475998
call esi
ror edx, 0x19
neg edx
xor edx, ecx
shr edi, 5
jmp 0x477a0f
pop esi
xchg ecx, ebx
xor ebx, ecx
xor ebx, ecx
and ecx, ebx
add ecx, 0x78b2929a
xchg ecx, edi
rol edx, 0x12
sub edi, ecx
mov edi, edx
jmp 0x476977
pop esi
not edi
add edi, 0x78cb94cf
xchg ecx, edx
mov ebx, 0x78cc9e35
sub edx, 0x78cd2688
sub edx, ecx
not ecx
or edi, ebx
sub ecx, edx
xchg edi, ecx
xor ebx, 0x78d0582d
and ebx, edx
jmp 0x476359
push 0x6ee81baa
add ebx, 0x78dffebe
mov ebx, edx
or edi, 0x78e120a6
xor edx, 0x78e1a257
shr edx, 0xf
or edx, ebx
jmp 0x475ad8
call fcn.00478c34
xor edi, edx
sub edi, ebx
mov edi, 0x78f0b68f
and edx, edi
inc edi
xor edi, edx
or ecx, edi
add ebx, edi
and ecx, ebx
jmp 0x477779
push 0x6edefbbf
sub edx, ebx
and ebx, 0x7925fc81
xchg ebx, edi
neg ecx
xchg edx, edi
bswap edi
or ebx, edx
add edi, 0x79293c53
mov ecx, ebx
xchg edx, ebx
jmp 0x478c08
call fcn.00478c34
or ecx, 0x792ee940
or edx, ecx
mov ebx, edi
and edx, 0x79308a94
neg edi
xor ecx, 0x79319b49
jmp 0x47726a
push 0x6ed354e2
xor ebx, 0x793b36a0
shl edi, 0x19
xor ecx, edx
xor ecx, ebx
or ebx, 0x793d493a
shr ebx, 0xb
mov ebx, 0x793e70ca
xor ebx, edi
sub ebx, 0x793f7ba0
jmp 0x477b6e
pop esi
add edi, ebx
bswap edx
rol edi, 0xf
shr ebx, 0x13
xor edi, edx
and edx, 0x7943028e
add ecx, 0x79438694
neg edx
xchg edx, ecx
and edi, 0x79452ce4
xchg ecx, edx
add ebx, edx
xchg ecx, edi
jmp 0x476bdb
call esi
sub ecx, 0x79476c94
sub ebx, edx
sub edx, ecx
shl ebx, 0xc
and edx, ecx
xor ecx, edi
xor ebx, edx
inc ecx
jmp 0x4782b9
push 0x6eed8474
neg edx
mov ecx, 0x79578fe2
xor ecx, edx
shr ecx, 0x17
and edi, ecx
mov edi, ecx
jmp 0x476277
call fcn.00478c34
xchg ebx, ecx
inc edx
or ebx, 0x795b6c38
or ecx, 0x795bf474
bswap edx
mov edx, edi
shl ebx, 0x11
add edx, ecx
rol ecx, 3
jmp 0x478bb5
mov esi, 0x2809144b
sub edx, ecx
dec edi
or edx, edi
sub ecx, ebx
sub edi, ebx
or ebx, 0x79971738
sub ecx, 0x7997ab34
bswap ebx
mov edi, edx
not edx
and edx, ebx
jmp 0x477a5a
mov esi, 0x5027095f
xchg ecx, edi
and edx, 0x799b552d
mov ebx, 0x799be836
or ecx, ebx
mov edi, 0x799d08a9
xor edx, edi
inc ebx
mov ebx, ecx
sub edx, 0x799f5904
or edx, ebx
jmp 0x47690d
pop esi
rol edi, 0x1f
mov edx, ecx
jmp 0x4756ea
push 0x6ed76c2c
neg ecx
bswap edx
xor ebx, 0x79bff141
mov ecx, edx
or edi, edx
shl ecx, 2
shl edi, 0x11
xchg edx, edi
jmp 0x4776c0
pop esi
mov edx, edi
shr edi, 0xb
and ebx, 0x79de9ff3
rol edx, 1
sub edx, 0x79dfbd9c
xchg edi, ebx
and edi, 0x79e0fd9a
add ebx, ecx
sub edx, ebx
add ebx, edi
xor edi, 0x79e32f80
add ebx, 0x79e3c260
jmp 0x47741d
pop esi
add ebx, edi
or edi, 0x79e51aca
xchg edx, ebx
sub edi, 0x79e63959
mov edx, edi
jmp 0x4774e8
pop esi
mov edx, ecx
rol edx, 4
or edi, 0x79fd2f87
shl ebx, 0x1e
xor ebx, 0x79fe4e17
bswap ebx
shr ebx, 0x19
neg edx
or ecx, 0x7a00c585
jmp 0x477a8c
call esi
mov edx, ebx
sub edx, edi
sub edx, ecx
and edx, 0x7a0932e5
xchg ebx, ecx
bswap ecx
and ebx, edx
jmp 0x475518
push 0x6edf6092
add edi, ecx
or ebx, edi
and ebx, ecx
xor ecx, edx
and ecx, edi
sub edx, edi
sub ecx, ebx
add ebx, 0x7a174f96
add edx, 0x7a17dfda
dec edi
shr ebx, 0xe
xchg ebx, ecx
not ecx
jmp 0x4757ac