Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Write file on windows

Disassembly:
call sub.user32.dll_GetInputState
cmp eax, 0xffffff06
jne 0x401070
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
ret
call sub.user32.dll_GetFocus
cmp eax, 0xffffff2e
jne 0x40111c
call sub.kernel32.dll_WriteFile
call sub.kernel32.dll_WriteFile
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
ret
call sub.user32.dll_GetFocus
cmp eax, 0xfffffef8
jne 0x40119b
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
ret
call sub.user32.dll_GetFocus
cmp eax, 0xffffff12
jne 0x401210
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.advapi32.dll_LsaGetRemoteUserName
call sub.kernel32.dll_WriteFile
call sub.kernel32.dll_WriteFile
ret
jmp 0x475428
mov esi, ecx
sub edi, 0xd9258026
add ebx, ecx
mov edi, ebx
and esi, 0xd925cd44
ror esi, 0x18
mov ebx, edi
jmp 0x476272
mov ecx, 0x123b2f04
xor ebx, esi
and ebx, esi
shr edi, 5
sub esi, edi
add ebx, esi
mov edi, edx
sub edi, esi
xchg ebx, edx
or ebx, esi
or edi, esi
sub edi, ebx
add ebx, edi
jmp 0x475996
call ecx
xor esi, edx
not edx
jmp 0x47791a
call fcn.004776c2
sub edi, 0xd9764bdc
or edi, edx
or esi, 0xd97680d2
xor esi, ebx
not edx
xor edi, 0xd976d28c
not edi
add ebx, edi
jmp 0x475ba5
call fcn.004776c2
and ebx, 0xd97a344c
shr edx, 6
sub edx, edi
shr edx, 0xc
or edi, ebx
or ebx, edi
not edi
and ebx, 0xd97af43e
and edi, 0xd97b104e
xor edx, edi
jmp 0x47607c
mov ecx, 0x4132136a
shl edi, 0xa
ror edx, 0xd
add esi, edx
sub edx, 0xd97c6d6e
mov esi, 0xd97c8856
or edi, 0xd97ca854
neg ebx
and ebx, edx
mov edx, edi
or edx, 0xd97d10ae
xchg esi, edx
or esi, 0xd97d46fe
jmp 0x47679c
push 0xd93593fb
bswap edx
xor edx, esi
add edi, edx
xchg edi, edx
bswap edi
xor esi, edx
or edi, esi
sub ebx, esi
shl edx, 9
neg ebx
jmp 0x4777b9
call fcn.004776c2
inc esi
and esi, 0xd9830ae6
xchg esi, ebx
sub edx, edi
or edi, edx
sub edi, ebx
xor edx, edi
dec edi
xor edi, esi
neg esi
mov edx, ebx
mov ebx, edx
and edx, 0xd9842e90
mov edx, esi
jmp 0x4778ae
pop ecx
dec edx
sub edx, esi
shr edx, 0x17
bswap ebx
dec esi
or edi, ebx
jmp 0x476160
pop ecx
mov esi, edx
not edx
and esi, edi
or ebx, edx
add esi, 0xd98a0d32
xor ebx, edx
xor ebx, 0xd98a438c
or ebx, esi
not edx
inc ebx
sub ebx, 0xd98ab4b8
or esi, edx
or ebx, edx
or edi, esi
jmp 0x4766db
call fcn.004776c2
sub ebx, 0xd98c0508
sub edx, esi
dec esi
xor ebx, edi
jmp 0x476c6a
pop ecx
and edi, edx
mov ebx, edi
or ebx, edx
xchg edx, edi
mov edi, edx
sub edi, edx
sub edi, ebx
rol edx, 0x1a
and edx, 0xd98d529e
shr esi, 7
or edi, 0xd98d8994
rol edi, 0xe
jmp 0x477f09
call ecx
mov edi, edx
and edi, ebx
sub edx, esi
xor ebx, 0xd994fd74
and esi, ebx
or edx, esi
sub edx, 0xd9954cd8
xor edi, edx
neg edx
xor ebx, edx
jmp 0x476d6b
call ecx
mov edx, 0xd996b47c
or edi, esi
mov esi, ebx
xor edi, 0xd997016e
and ebx, esi
xchg ebx, edi
neg edx
neg ebx
sub edi, esi
and edi, edx
xchg edx, ebx
sub edx, esi
jmp 0x476b7e
call fcn.004776c2
or edx, 0xd99950b0
rol esi, 0xa
sub esi, 0xd99987ae
add esi, edi
mov edx, 0xd999ba00
add ebx, esi
dec esi
add esi, edi
jmp 0x477ad2
call fcn.004776c2
xor ebx, 0xd99a3172
bswap edx
add esi, 0xd99a6812
xchg ebx, esi
xor esi, edx
xor esi, edx
jmp 0x477d0b
pop ecx
sub edi, ebx
xor esi, edx
sub esi, edi
add esi, 0xd99beeec
add esi, ebx
sub ebx, edi
xor ebx, edx
and ebx, edx
shr esi, 7
xor edx, edi
jmp 0x47762f
push 0xd927e0ac
xchg edx, edi
xor ebx, edx
xchg edi, edx
add esi, 0xd99ed104
xor edi, ebx
mov edx, 0xd99f067a
add ebx, esi
or ebx, edx
add esi, 0xd99f5342
xchg edi, edx
jmp 0x4754b3
pop ecx
sub esi, ebx
xor edx, esi
dec edi
or edx, 0xd99fe9e2
xor esi, edx
not esi
xor esi, ebx
and ebx, edx
jmp 0x475acd
push 0xd92e7f6e
rol edi, 7
mov ebx, esi
sub edx, ebx
or esi, edi
xor edx, ebx
xor edx, ebx
dec edx
xor ebx, esi
jmp 0x476a9b
pop ecx
add esi, edx
xchg edx, edi
mov esi, 0xd9a41326
add ebx, edi
add esi, ebx
sub esi, edi
xor edx, edi
add edi, edx
not edi
xor edx, edi
not ebx
xor esi, 0xd9a50524
jmp 0x47619b
push 0xd9318b0c
shl edi, 0x16
mov ebx, edi
or esi, edx
bswap ebx
xchg ebx, esi
shl edx, 0x1a
and edx, ebx
and esi, ebx
add edx, edi
xchg esi, ebx
jmp 0x4779b4
push 0xd9299804
xor edx, 0xd9a7529a
shl ebx, 0x1d
shl esi, 0x14
ror ebx, 0x16
add esi, ebx
shr edi, 0x1c
or ebx, edi
or edi, esi
shl ebx, 6
dec edx
xor ebx, esi
xor ebx, edx
and edi, edx
xchg edi, esi
jmp 0x475bbc
call ecx
mov ebx, esi
sub ebx, edi
sub esi, 0xd9aab8fe
xor esi, 0xd9aad30e
jmp 0x476f12
mov ecx, 0x123b2f04
and edx, 0xd9aaf998
xor edi, esi
jmp 0x4754ff
push 0xd92e6289
dec edx
neg edi
or ebx, esi
not esi
add edx, ebx
bswap edx
or edx, esi
mov esi, edx
and ebx, edx
xchg edi, esi
or ebx, edx
or edx, esi
mov esi, edi
xchg esi, edi
jmp 0x475aa5
pop ecx
shl ebx, 9
dec edx
xor ebx, esi
xor edi, esi
neg esi
add esi, edi
xchg esi, edx
inc edx
xor esi, edi
xor esi, edi
or esi, ebx
xor edi, esi
xchg edx, esi
inc edi
jmp 0x477787
push 0xd93481dc
bswap edi
rol edx, 0x18
sub esi, 0xd9b37810
xchg edx, ebx
neg esi
dec edx
neg edi
mov ebx, esi
ror edx, 0x16
or ebx, edi
xor edx, edi
not ebx
xor esi, 0xd9b48ab8
bswap edi
jmp 0x477b0e
call fcn.004776c2
neg esi
not edi
sub edi, esi
xor esi, edx
not esi
add ebx, edi
or ebx, 0xd9be48a2
add edi, 0xd9be638a
xor ebx, esi
mov ebx, edi
jmp 0x47590f
push 0xd93333fe
and edx, esi
inc ebx
shr edi, 0x1f
and esi, edi
jmp 0x477155
push 0xd92b38b8
sub esi, edi
bswap esi
not edx
or ebx, esi
not esi
xchg edi, ebx
add edx, 0xd9c98130
sub edx, ebx
jmp 0x477939
push 0x401400
xchg edi, esi
add edx, edi
add edi, ebx
sub edi, 0xd9ca130a
add ebx, edi
ror edx, 0xc
xor esi, 0xd9ca63a4
sub edi, edx
inc edx
add edi, esi
jmp 0x4773b2
call ecx
sub esi, ebx
shr edi, 0x14
and esi, edi
xchg edi, edx
add ebx, edi
xor edi, edx
jmp 0x4759c8
call ecx
xchg esi, ebx
add ebx, 0xd9cf851c
shl esi, 0xf
or esi, edi
add ebx, 0xd9cfd52c
sub edx, ebx
sub edi, esi
and edi, ebx
jmp 0x477e74
push 0xd927c39a
xor ebx, esi
shr ebx, 0x13
mov edx, esi
or ebx, edx
jmp 0x475a1e
call fcn.004776c2
xor edi, esi
and edx, edi
rol edi, 4
or ebx, edx
or edx, esi
xor esi, edx
not esi
sub ebx, edx
mov ebx, edx
sub ebx, edi
xor ebx, edx
mov ebx, esi
jmp fcn.0047695b
pop ecx
dec edx
or ebx, edx
xchg edx, edi
and edx, esi
or edx, edi
mov edi, 0xd9d6770e
jmp 0x47653e
push 0xd92f6f74
and edx, 0xd9d7b6a2
add edi, ebx
xor ebx, esi
xor edx, 0xd9d80368
and ebx, 0xd9d81e7a
mov edi, esi
jmp 0x47775f
mov ecx, 0x123b2f04
mov esi, edi
or esi, ebx
xor ebx, esi
sub esi, ebx
shr edi, 0x15
bswap edi
not esi
mov esi, edx
jmp 0x4757b6
push 0x74028
sub edi, esi
sub edx, esi
and edx, ebx
and esi, edx
and edi, esi
xor esi, ebx
xor edx, edi
add esi, 0xd9db1518
jmp 0x475fc0
push 0xd92787ec
neg edx
and edi, esi
or edx, ebx
xchg edi, edx
and edx, 0xd9ddabcc
or edx, ebx
shl esi, 4
and edx, esi
jmp 0x477ff9
call ecx
or edx, edi
mov ebx, edx
bswap edi
xchg edi, ebx
add edx, 0xd9e1cd7e
add edx, edi
add edi, ebx
xor ebx, edx
jmp 0x476613
push 0xd92d5673
mov ebx, edi
add edx, edi
xor edi, esi
ror ebx, 4
or ebx, 0xd9e8ca6e
xchg ebx, edx
or edx, 0xd9e90094
mov esi, edi
jmp 0x477037
call fcn.004776c2
and ebx, edi
ror esi, 3
xor edi, esi
mov edi, esi
inc esi
sub ebx, 0xd9eb7d18
jmp 0x4754d6
call fcn.004776c2
mov edi, 0xd9eba35c
add edi, edx
sub edx, 0xd9ebd852
neg esi
and ebx, esi
ror esi, 9
jmp 0x47604f
push 0xd92c693c
xchg edx, esi
sub ebx, esi
sub edi, ebx
xchg edi, ebx
add ebx, 0xd9ecbeb4
sub edx, 0xd9ecdd02
add ebx, 0xd9ecf86a
sub esi, 0xd9ed1304
xchg edx, ebx
ror esi, 7
jmp 0x477953
pop ecx
neg esi
and ebx, edi
or edx, 0xd9eda722
mov edx, 0xd9edc62c
not edx
xor edi, 0xd9edfe98
jmp 0x476919
mov ecx, 0x123b2f04
or esi, 0xd9ef947a
and ebx, edi
and esi, ebx
shr ebx, 8
add esi, 0xd9effcaa
add esi, ebx
sub ebx, 0xd9f03082
dec ebx
xor edi, ebx
and ebx, edi
rol ebx, 0x12
and ebx, 0xd9f0ba84
jmp 0x475e2a
pop ecx
sub esi, edi
bswap esi
add edi, 0xd9f1175e
mov ebx, edi
dec esi
or ebx, esi
or edx, edi
and edx, ebx
shl edx, 8
mov ebx, esi
sub esi, 0xd9f1e85a
add ebx, esi
and edi, 0xd9f21c88
add edi, esi
jmp 0x4768db
pop ecx
add edi, 0xd9f2596c
and edi, 0xd9f279ec
sub edi, ebx
add esi, 0xd9f2aee2
xor edx, 0xd9f2c9fc
xchg edi, ebx
add edx, 0xd9f2fe4e
sub edi, 0xd9f31902
jmp 0x476585
pop ecx
add edx, esi
or edx, ebx
sub edi, edx
and esi, edi
xchg ebx, esi
mov ebx, edx
inc esi
or edi, 0xd9f3f94a
jmp 0x477516
pop ecx
or edi, edx
xor edi, 0xd9f438a0
sub esi, 0xd9f453b2
and esi, ebx
add edi, 0xd9f48708
xor ebx, 0xd9f4a7b2
jmp 0x47800f
call fcn.004776c2
or edi, edx
sub esi, edx
add ebx, esi
and ebx, edi
add edi, ebx
and edi, edx
ror edx, 0x12
ror edi, 0x1f
jmp 0x476e2f
pop ecx
xchg esi, edx
add esi, 0xd9f84eb0
or ebx, 0xd9f86942
mov esi, edx
xchg edx, ebx
add esi, edx
not esi
xor edx, esi
jmp 0x4776de
push 0xd9329bbc
xchg edx, esi
sub edi, esi
mov ebx, edx
sub edi, edx
sub edx, ebx
dec edx
xor edx, 0xd9fb8d28
inc esi
jmp 0x477b3b
pop ecx
xor ebx, edx
add esi, ebx
xchg esi, edi
xchg edx, ebx
neg edi
or esi, edx
bswap ebx
add esi, edi
sub edx, esi
xchg edx, esi
and ebx, edi
and esi, ebx
ror ebx, 0x14
xor edi, esi
jmp 0x4769a4
mov ecx, 0x123b2f04
not esi
inc edx
sub edi, ebx
sub ebx, esi
jmp 0x47642f
call fcn.004776c2
and edi, esi
mov edx, ebx
dec edx
xchg edi, edx
mov edx, edi
xchg ebx, edi
sub edi, esi
mov esi, edi
mov esi, ebx
xor edi, esi
jmp 0x477f23
mov ecx, 0x123b2f04
neg edi
ror edx, 0x12
xor edx, esi
xor edx, esi
xchg edx, ebx
mov edi, 0xda08b9ac
jmp 0x476fe9
pop ecx
xor edx, esi
add edx, 0xda0ba7e8
mov ebx, edx
and edi, edx
xchg edi, esi
dec ebx
neg esi
add esi, ebx
inc esi
shl esi, 0x19
and edx, esi
rol esi, 3
and esi, 0xda0cceb8
add edi, edx
jmp 0x475769
pop ecx
neg edx
and ebx, esi
neg esi
add edx, edi
jmp 0x4755cd
pop ecx
ror ebx, 4
mov ebx, esi
inc edi
not esi
jmp 0x476d52
pop ecx
or esi, 0xda114568
xchg esi, edx
jmp 0x4757cb
pop ecx
xchg esi, edi
or edx, 0xda13acd2
xor esi, ebx
not edx
bswap edi
sub esi, edi
jmp 0x47562d
push 0xd92e9d74
sub edx, ebx
sub edx, ebx
and ebx, esi
sub ebx, edx
add edi, edx
rol edi, 0x11
sub edi, 0xda1ab8b6
ror edi, 0x18
sub edi, ebx
inc ebx
not esi
or edi, esi
or edx, esi
sub ebx, edi
jmp 0x476756
pop ecx
sub edx, edi
shr edx, 0x14
sub ebx, edx
or edx, edi
rol edi, 0x1b
neg esi
jmp 0x477572
push 0xd9316d5c
and edi, edx
xchg edi, esi
or esi, edi
or edi, edx
mov edx, edi
mov edi, esi
mov esi, 0xda2070f2
add ebx, edi
xor edi, esi
xchg edx, esi
jmp 0x475af2
push 0xd92d918c
or edx, edi
shr ebx, 4
and esi, ebx
bswap esi
add esi, edx
and esi, edi
neg ebx
add edx, esi
mov edx, edi
mov edx, ebx
jmp 0x4764dd
pop ecx
add edx, ebx
add esi, edx
add edi, esi
xchg ebx, esi
mov esi, ebx
and edx, edi
bswap esi
add edi, ebx
mov ebx, 0xda22c776
or edi, esi
jmp 0x47656c
pop ecx
xor edx, esi
and edx, ebx
not esi
dec edi
jmp 0x4771c4
call ecx
bswap edx
dec edi
jmp 0x47694d
mov ecx, 0x123b2f04
sub esi, edi
add ebx, edi
xor edi, esi
xor edi, edx
xchg ebx, esi
add edx, esi
jmp 0x476449
push 0xd92a8468
mov edx, edi
xchg ebx, edi
add esi, ebx
and edx, 0xda2b9586
xchg edi, esi
dec edx
and edx, ebx
xchg edx, edi
or ebx, 0xda2c1e2c
rol edx, 0x14
jmp 0x47704f
push 0xd92c4c01
mov esi, edx
or edi, edx
bswap esi
or edx, 0xda2cb372
jmp 0x476467
call fcn.004776c2
or ebx, esi
xchg ebx, edx
not edx
and esi, edx
ror edx, 0x18
xor esi, 0xda3015e0
and ebx, edx
add edi, ebx
shl edi, 0x1a
mov edx, ebx
neg edx
dec ebx
jmp 0x4762fc
push 0xd93408ea
inc edi
xor ebx, edx
xor edi, ebx
xor esi, edi
not edi
and edi, ebx
or ebx, esi
and ebx, edx
jmp 0x477971
pop ecx
and esi, edx
mov edx, 0xda31d7ee
sub ebx, esi
sub edi, edx
and ebx, esi
bswap esi
not edx
inc ebx
sub esi, edi
and esi, ebx
jmp 0x477bf7
push 0xd934622c
rol ebx, 8
sub ebx, esi
inc edi
mov ebx, 0xda3654dc
and edx, edi
and edi, ebx
dec edx
xor edx, 0xda36bda8
jmp 0x475cbc
mov ecx, 0x123b2f04
and edx, 0xda36e210
mov edx, esi
xor ebx, edx
mov ebx, esi
nop
not esi
add edx, ebx
ror edi, 9
jmp 0x47557a
call ecx
xor edi, esi
sub esi, 0xda37e136
ror edi, 0x17
sub ebx, edx
sub ebx, 0xda383600
and edx, esi
jmp 0x476fd2
pop ecx
dec ebx
xor esi, edi
add edx, ebx
xor ebx, edi
add esi, edi
and ebx, edx
or edi, ebx
dec edi
jmp 0x4775a3
pop ecx
and ebx, edx
shr edi, 0x1d
bswap edi
xchg edx, edi
or edi, ebx
xor edx, esi
xor edx, esi
xor edi, esi
jmp 0x476896
call fcn.004776c2
mov esi, edx
mov edx, edi
or edx, ebx
or esi, edx
xor edi, edx
sub edi, 0xda451aa0
xchg esi, ebx
neg edi
xor edi, esi
neg esi
xchg ebx, esi
or esi, ebx
jmp 0x477ccd
push 0xd92d7456
shl edx, 3
mov ebx, esi
ror edx, 0x15
xor edx, 0xda478672
jmp 0x476b5f
mov ecx, 0x123b2f04
dec ebx
xor ebx, esi
add esi, edx
xchg ebx, edx
and esi, edx
and edi, esi
xchg ebx, edi
xor ebx, esi
jmp 0x4777d6
push 0xd935cf0c
xor edi, 0xda488ecc
nop
xchg esi, edx
or edx, ebx
or esi, edx
or ebx, edx
or edx, esi
neg edx
xor edi, ebx
neg ebx
jmp 0x477653
push 0xd9335028
and edx, edi
and edi, ebx
or ebx, esi
xchg ebx, edx
or ebx, edi
sub edx, 0xda50f228
ror esi, 0xa
or edi, esi
jmp 0x4777f5
pop ecx
shl edi, 8
not ebx
shl ebx, 0xf
and edx, 0xda53e1c0
add edi, ebx
xor esi, edi
xor esi, edi
xor esi, edx
and ebx, 0xda5467a6
mov edx, ebx
jmp 0x476669
call ecx
or edx, esi
rol edi, 0x1a
sub edx, edi
or ebx, edx
jmp 0x476ae4
push esp
xchg edi, ebx
inc ebx
add edi, esi
xor ebx, edi
mov edi, 0xda6ae7b0
and edi, edx
xchg edi, esi
xor esi, edi
xor esi, edi
not edi
xor esi, edx
not esi
jmp 0x477ed7
pop ecx
or edx, 0xda6db54a
mov esi, edi
shl edx, 0xc
xchg edx, esi
sub edi, esi
mov esi, edi
jmp 0x475c09
push 0xd93150fe
xor edi, edx
neg edx
add esi, ebx
xor esi, edx
sub ebx, 0xda70793e
or edx, 0xda709838
and ebx, esi
add edi, edx
xor ebx, edi
add esi, edi
jmp 0x476b3e
pop ecx
mov edx, 0xda71699c
xor edx, edi
xchg edi, ebx
add edx, 0xda71bc42
jmp 0x475c2e
push 0xd9295d74
and esi, 0xda75a0a6
shl ebx, 0x17
sub edi, esi
neg esi
sub edx, ebx
xchg edi, esi
shl edi, 4
or esi, 0xda7660c6
jmp 0x477ebf
mov ecx, 0x123b2f04
xchg esi, edx
bswap edi
or edx, edi
xchg edx, esi
mov ebx, esi
dec ebx
shr edx, 0xf
mov edx, edi
jmp 0x476116
pop ecx
xor ebx, edi
neg edi
xor edx, ebx
add esi, edi
mov ebx, esi
sub edx, ebx
add esi, edx
mov ebx, edx
jmp 0x476c37
push 0xd92f8dfc
shr edi, 0x1d
mov ebx, 0xda7ee5ca
sub edi, ebx
shl edx, 0xd
mov ebx, esi
xchg ebx, esi
neg ebx
and edx, ebx
xor esi, ebx
and ebx, edx
ror esi, 0x1a
sub ebx, edx
jmp 0x47681e
push 0xd92a67e1
or edx, 0xda801032
and ebx, esi
add edi, edx
xor ebx, esi
add esi, edx
mov ebx, 0xda8093a0
sub ebx, edx
nop
xor esi, edi
xchg esi, edx
jmp 0x476c99
pop ecx
or esi, ebx
and edx, ebx
xor esi, edx
sub edi, esi
jmp 0x476cbf
push 0xd935b1aa
shr edi, 0x1d
rol edi, 0xa
xor edi, edx
shr esi, 0x1d
xor edx, edi
add edi, 0xda8224f6
jmp 0x477068
call fcn.004776c2
add edi, ebx
xchg ebx, esi
dec ebx
and edx, ebx
rol edx, 0x1e
xor edi, ebx
and esi, 0xda82eaa6
rol ebx, 1
jmp 0x4758cc
mov ecx, 0x123b2f04
and esi, edi
and edx, ebx
xchg ebx, edx
xchg esi, edi
xor edx, ebx
mov edx, esi
jmp 0x475971
call ecx
add edx, esi
or edx, ebx
or esi, edx
xor esi, 0xda88e0ba
add edx, edi
xchg edx, edi
and edx, edi
not edi
add edx, edi
add edx, ebx
mov edx, esi
xor edx, 0xda89b0f6
add edx, esi
shl ebx, 0x14
jmp 0x477ce8
pop ecx
xchg esi, ebx
or ebx, edx
or edx, esi
and esi, 0xda8c577a
xchg ebx, edi
shr esi, 0x1e
xor edx, edi
not ebx
xor edx, esi
xor edx, ebx
jmp 0x475a47
push 0xd92b6a98
xchg edx, edi
xor ebx, edx
mov edi, esi
xor esi, edi
xor esi, edx
xchg ebx, edx
bswap esi
not edx
jmp 0x476e11
push 0xd92c8792
xor edx, edi
not ebx
xchg ebx, edi
xor edi, edx
and edi, 0xda8e6b66
sub edi, edx
add edx, esi
xor edx, esi
jmp 0x4761bd
push 0xd934269a
sub esi, ebx
shr esi, 5
not edi
xor esi, edx
xchg esi, edi
mov edi, esi
and edi, edx
or ebx, edi
jmp 0x477e4e
push 0xd931a960
xchg esi, ebx
sub edx, edi
neg edi
mov edi, 0xda913048
and edx, 0xda914bb0
xor edi, 0xda916674
nop
sub ebx, esi
and edx, 0xda91b756
mov edx, esi
jmp 0x477afc
call ecx
or ebx, esi
sub ebx, edx
sub esi, 0xda9a10ec
and esi, ebx
sub edi, esi
xchg ebx, edx
xor edi, 0xda9a79b8
xor esi, edx
mov ebx, 0xda9ab2ae
or edi, esi
add ebx, edi
sub edx, edi
jmp 0x476496
mov ecx, 0x123b2f04
and esi, edi
or ebx, edx
or ebx, edi
or edx, edi
jmp 0x476d2b
mov ecx, 0x123b2f04
and edi, edx
or edx, 0xda9bb58a
sub edx, 0xda9bd0a4
and edx, edi
and esi, edi
mov esi, 0xda9c21a8
and edi, ebx
xchg edx, esi
mov esi, edx
mov edx, edi
mov edx, ebx
mov ebx, esi
jmp 0x4765f7
mov ecx, 0x123b2f04
xor edx, esi
or ebx, edi
xor esi, edx
or edx, ebx
jmp 0x4756a6
pop ecx
bswap edi
or edx, ebx
inc edi
sub edi, esi
and ebx, 0xdaa30f5c
mov edi, esi
mov ebx, edx
mov ebx, 0xdaa35fba
add esi, 0xdaa37ad6
neg esi
jmp 0x475fa2
call ecx
mov esi, 0xdaa8eb0c
sub ebx, esi
xor ebx, edx
rol edi, 0x16
ror edi, 0x12
xchg edi, ebx
inc ebx
sub edi, edx
jmp 0x476510
pop ecx
dec edx
shr esi, 6
mov esi, ebx
inc edx
jmp 0x475e81
call ecx
sub esi, ebx
mov esi, ebx
xchg ebx, edi
xor ebx, edi
add esi, edx
xor esi, edx
jmp 0x4756e9
push 0xd934444a
mov edx, edi
add edx, 0xdab4c780
and edi, 0xdab4e2e8
and esi, edi
or ebx, edx
xchg edx, edi
or edi, ebx
xchg edx, edi
and edx, ebx
xor esi, edx
jmp 0x476df1
pop ecx
xchg esi, edi
or edi, esi
sub edi, ebx
add edx, ebx
xchg edi, esi
or esi, edx
or edi, esi
inc esi
and ebx, esi
mov esi, ebx
not esi
xor esi, ebx
jmp 0x4777ab
push 0xd9297bfc
not esi
rol esi, 0xf
or ebx, edx
or edx, ebx
and ebx, edi
rol ebx, 0x18
jmp 0x475b37
push 0x40
or esi, edi
xchg esi, ebx
xor esi, 0xdab93068
xor esi, edi
mov ebx, 0xdab96592
or edx, ebx
mov esi, edx
sub ebx, 0xdab9b6ca
jmp 0x476201
pop ecx
add edx, ebx
add ebx, esi
and edx, esi
rol esi, 0xe
or ebx, edx
or edx, ebx
mov edx, 0xdabaf218
or edx, esi
jmp 0x4763d1
push esp
shr edi, 0x19
rol edx, 0x15
shr ebx, 0x16
mov edx, esi
or ebx, edi
or esi, ebx
mov edi, edx
and edi, esi
not edx
xchg edx, edi
jmp 0x4774be
push 0xd927a6ee
sub edi, esi
and edx, 0xdac1d8e8
and esi, ebx
xor edi, ebx
jmp 0x4760d1
push 0xd928ca1e
inc ebx
shl edx, 0x15
xchg ebx, esi
sub edx, ebx
or esi, edi
or esi, 0xdac2b70e
jmp 0x476c83