Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetCursor
cmp eax, 0xfffffed7
jne 0x40108e
call sub.user32.dll_CharLowerBuffA
call sub.user32.dll_CharLowerBuffA
call sub.user32.dll_CharLowerBuffA
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_CharLowerBuffA
call sub.user32.dll_LoadKeyboardLayoutW
call sub.user32.dll_CharLowerBuffA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_CharLowerBuffA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_CharLowerBuffA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
ret
call sub.user32.dll_GetCursor
cmp eax, 0xfffffedb
jne 0x4010f4
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_CharLowerBuffA
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_CharLowerBuffA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_CharLowerBuffA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
ret
call sub.user32.dll_GetActiveWindow
cmp eax, 0xfffffeee
jne 0x40118c
call sub.user32.dll_CharLowerBuffA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_LoadKeyboardLayoutW
call sub.user32.dll_CharLowerBuffA
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_LoadKeyboardLayoutW
call sub.user32.dll_CharLowerBuffA
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_LoadKeyboardLayoutW
call sub.user32.dll_CharLowerBuffA
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_CharLowerBuffA
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_CharLowerBuffA
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
ret
call sub.user32.dll_GetActiveWindow
cmp eax, 0xfffffeee
jne 0x401233
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_LoadKeyboardLayoutW
call sub.user32.dll_CharLowerBuffA
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_CharLowerBuffA
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_CharLowerBuffA
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_CharLowerBuffA
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_LoadKeyboardLayoutW
call sub.user32.dll_CharLowerBuffA
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_CharLowerBuffA
call sub.user32.dll_LoadKeyboardLayoutW
call sub.user32.dll_CharLowerBuffA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_CharLowerBuffA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_LoadKeyboardLayoutW
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameW
call sub.user32.dll_CharLowerBuffA
call sub.ntdll.dll_RtlpEnsureBufferSize
call sub.user32.dll_CharLowerBuffA
ret
jmp 0x47570f
add ebx, edi
xchg edi, edx
or esi, ebx
not edi
xor esi, ebx
xor ebx, 0x24eca665
sub edi, esi
sub edx, edi
jmp 0x477182
push 0x7430f
add edi, esi
xchg ebx, edx
sub edi, 0x25b5b64e
sub edi, ebx
xor edi, 0x2e417d05
sub edi, 0x2e41ce4f
bswap edi
or esi, edi
sub esi, ebx
jmp 0x4774e9
call ecx
sub esi, 0x2e46c4b5
or edx, esi
xchg edi, edx
inc ebx
jmp 0x476061
push 0x24fb847b
xchg edx, ebx
shr edi, 0xf
sub ebx, edi
xchg esi, ebx
add edx, 0x2e52f37f
or esi, edi
mov ebx, edx
sub edx, 0x2e53a6e9
ror esi, 7
and ebx, edi
mov ebx, 0x2e544b74
xchg edi, edx
xchg esi, ebx
jmp 0x47849b
mov ecx, 0x43370267
xor edx, edi
add esi, edi
shr esi, 0x1b
inc edi
mov edx, edi
mov esi, edx
xor edi, esi
or edx, ebx
add esi, edx
rol esi, 0xf
sub ebx, edx
and edx, esi
and ebx, edi
dec edx
sub edi, 0x2e639167
or edi, esi
jmp 0x4778e5
push 0x250edda3
rol edx, 2
and esi, edx
xor ebx, esi
ror esi, 0x1b
and esi, ebx
xor ebx, edi
xor edx, edi
rol ebx, 0x1e
or esi, ebx
or esi, 0x2e686953
xor edi, 0x2e68a2bb
jmp 0x4771be
pop ecx
xor ebx, edi
add ebx, esi
add ebx, edi
shl edx, 0x14
and ebx, edi
mov edi, 0x2e6f58f7
mov edx, ebx
or esi, edi
mov edx, 0x2e700bdc
xchg ebx, edx
mov edx, edi
xor edi, esi
mov edx, 0x2e71a4dc
xor esi, 0x2e71e02e
add edx, ebx
jmp 0x475e38
push 0x2504c227
not edx
xchg ebx, esi
sub esi, ebx
rol edi, 0x1c
or ebx, esi
xchg esi, edx
or edx, ebx
or edi, 0x2e742549
jmp 0x4778fc
mov ecx, 0x183c2e20
neg esi
xchg ebx, edi
and edi, edx
xchg ebx, edi
mov edi, 0x2e777568
xchg edx, edi
or esi, edi
add esi, edx
dec esi
xor ebx, 0x2e78b181
inc edi
xchg edi, ebx
or esi, edx
jmp 0x477798
push 0x250d0bf2
shl edi, 0x13
rol esi, 0x1a
add edi, edx
xchg esi, ebx
xchg ebx, esi
rol esi, 7
xchg edi, edx
inc ebx
xor edi, 0x2e7bb268
add ebx, edi
or ebx, 0x2e7c53a5
jmp 0x4762cc
push 0x24fe1112
or edi, 0x2e82d58b
dec edi
rol esi, 0x1f
shr edi, 0x1d
sub ebx, 0x2e83db3f
xchg edx, edi
jmp 0x475c51
pop ecx
sub edx, ebx
or ebx, edi
or ebx, edx
shl esi, 0x10
mov edx, edi
add edi, edx
mov esi, 0x2e91e18c
mov edi, esi
xchg edx, esi
and edi, edx
sub esi, ebx
or edx, edi
or edi, 0x2e935cdc
jmp 0x47821f
push 0x24f6f1d0
xor ebx, 0x2e94d891
dec edx
sub esi, edi
xchg ebx, esi
xor esi, 0x2e95d0a6
or edi, esi
inc esi
xor edi, esi
sub edi, 0x2e96d516
or ebx, edi
bswap edx
mov edi, edx
add edi, ebx
jmp 0x47801d
pop ecx
rol esi, 8
dec edx
mov edi, edx
and esi, edx
xchg edx, ebx
bswap ebx
nop
xor esi, edx
or ebx, 0x2e9a1828
jmp 0x4765d2
push 0x24f93902
mov edi, 0x2e9c801a
or esi, edx
add edx, ebx
xchg esi, edx
jmp 0x4773e3
push 0x24fe53d3
or ebx, edi
and esi, ebx
or edi, ebx
sub esi, edi
ror ebx, 0x10
mov edx, edi
mov edi, 0x2ea0e432
sub esi, 0x2ea12258
add edi, edx
sub ebx, 0x2ea1ac07
mov edi, ebx
jmp 0x4765f8
pop ecx
sub edx, 0x2ea8483d
bswap edi
rol edi, 0x1e
mov ebx, 0x2ea904ac
xor edi, edx
add edi, ebx
and esi, 0x2ea9bab3
and ebx, 0x2ea9f89d
add esi, edi
or ebx, esi
or edx, esi
ror ebx, 0x1d
and edx, edi
xchg ebx, edi
sub ebx, edi
rol edi, 0x1d
jmp 0x47828a
pop ecx
mov esi, 0x2eb1213b
nop
sub esi, edx
neg edx
add esi, ebx
mov edi, 0x2eb25506
xchg esi, ebx
inc edi
bswap edx
xor edi, 0x2eb35f54
xchg edx, ebx
dec ebx
sub edi, esi
jmp 0x475a49
push esp
not edi
mov esi, edx
dec ebx
mov esi, 0x2ebd1eb8
or edi, 0x2ebd5c33
jmp 0x476355
mov ecx, 0x43370267
shr ebx, 6
sub edi, esi
sub esi, ebx
sub ebx, esi
sub ebx, edx
jmp 0x476f0f
push 0x24f44aec
xor esi, edx
add ebx, edi
ror esi, 8
or edx, edi
jmp 0x476b77
pop ecx
sub edi, edx
xchg edi, edx
add edx, 0x2edf20cf
not edx
bswap edx
sub ebx, esi
jmp 0x477954
call ecx
add esi, ebx
xchg esi, edx
or esi, edi
sub esi, edi
dec edx
add ebx, 0x2ee2b21b
shl ebx, 4
or edx, edi
xor edx, edi
jmp 0x476cb2
call fcn.00476e02
and esi, 0x2ee656a0
sub edi, ebx
mov edi, ebx
and edx, edi
xchg edx, esi
or ebx, 0x2ee78f95
and edi, ebx
add edx, esi
sub edx, 0x2ee83f39
neg edx
jmp 0x477f46
pop ecx
sub esi, 0x2eebd248
inc esi
xor esi, 0x2eec5c4f
add edi, edx
and edi, esi
not edx
jmp 0x477987
push 0x24ffddd2
xor edx, ebx
and edx, esi
ror ebx, 0x10
rol edx, 0x17
xor edi, 0x2efa178f
sub edi, edx
sub edi, edx
mov edi, ebx
xor edx, edi
ror edi, 2
sub esi, ebx
or edi, ebx
xchg edi, ebx
jmp 0x4781da
call ecx
sub esi, ebx
add edx, ebx
ror edx, 0x1c
xor esi, edi
and edx, 0x2f00f73a
bswap edi
xor ebx, 0x2f0174d9
jmp 0x476baf
push 0x250d4d9a
mov esi, 0x2f18e64c
or ebx, edx
and edx, 0x2f1971ef
add ebx, edx
xchg ebx, esi
sub edx, ebx
sub edx, edi
xor esi, ebx
jmp 0x475dfa
push 0x25113202
sub edx, ebx
or ebx, edi
and edi, ebx
xor ebx, edi
or ebx, 0x2f217fbf
and edx, ebx
and edx, esi
sub edi, esi
xchg edx, edi
jmp 0x477010
push esp
mov ebx, edx
and edx, esi
or ebx, esi
bswap esi
and ebx, edi
mov edx, ebx
xchg ebx, esi
or edi, esi
xor edi, ebx
inc edi
sub edi, edx
or edi, ebx
jmp 0x476f33
call fcn.00476e02
add esi, edx
add edx, esi
bswap ebx
neg ebx
shl edx, 0xb
xchg esi, edi
neg edi
xor edx, ebx
not edx
or esi, ebx
and esi, edx
jmp 0x476f95
push 0x250b37c3
mov esi, edx
and edx, esi
or ebx, 0x2f2ee77a
rol edx, 1
sub edi, edx
mov edx, edi
add esi, edx
xor edi, 0x2f306f16
mov ebx, edx
dec esi
jmp 0x4764c4
pop ecx
add esi, 0x2f36df92
and edx, ebx
or edx, ebx
xchg edx, ebx
xchg ebx, esi
xor edx, edi
mov esi, ebx
add esi, edx
shl ebx, 0x1f
xor edi, esi
jmp 0x47777f
push 0x250b79ad
shr edx, 0x1e
sub esi, ebx
and edx, edi
add ebx, edi
sub edx, ebx
mov ebx, edx
xchg edx, ebx
xor edx, 0x2f4229ce
sub edi, 0x2f4267af
jmp 0x4770f2
pop ecx
or ebx, esi
mov edi, edx
or edi, esi
mov ebx, edi
xchg ebx, esi
add edx, 0x2f481197
bswap edx
xor ebx, edi
mov edi, 0x2f48db3e
sub ebx, esi
mov edx, edi
neg esi
and edx, edi
jmp 0x47686d
push 0x2509ea2f
mov edi, edx
not ebx
add edi, esi
xor esi, edi
or edi, esi
not ebx
ror esi, 0xa
xor esi, edx
or edi, esi
not esi
xor esi, edi
jmp 0x476c46
push 0x24fc0606
xchg edx, edi
or ebx, esi
rol edx, 0xe
or ebx, 0x2f4fc1b7
sub ebx, 0x2f4fff47
or edx, 0x2f503d00
nop
sub edx, ebx
xor edx, ebx
xor ebx, edi
mov edx, edi
jmp 0x477e12
push 0x24f8f9f1
and edx, edi
and edi, 0x2f5210fb
or esi, edi
ror esi, 3
sub edx, ebx
sub edx, 0x2f5317b4
sub edi, ebx
jmp 0x475c21
push 0x24fb43de
xchg ebx, edi
and ebx, 0x2f53f836
shr edi, 7
add edx, 0x2f547534
mov ebx, edx
sub edx, ebx
or edi, esi
shr ebx, 0x19
and edi, ebx
jmp 0x475842
mov ecx, 0x43370267
and edx, edi
xchg edx, edi
mov ebx, esi
or edi, esi
and edx, edi
or ebx, edi
sub esi, edi
sub edx, ebx
xor edi, 0x2f57ed92
jmp 0x47670c
call ecx
shr edx, 0xb
bswap edi
add esi, 0x2f58c3a2
inc edi
mov esi, edi
and ebx, esi
mov edi, 0x2f59c657
xchg ebx, esi
or ebx, edi
xchg esi, ebx
jmp 0x475fa1
pop ecx
xchg edx, ebx
xchg ebx, edx
inc edx
and ebx, edx
sub edx, 0x2f5bd896
jmp 0x476a10
call fcn.00476e02
inc edi
xor edi, 0x2f6ab287
mov edx, edi
inc edx
xchg ebx, edx
or esi, 0x2f6baaee
xor esi, edx
xor edi, 0x2f6c3546
mov edx, esi
jmp 0x476618
call ecx
and edx, edi
xor esi, edx
add edx, esi
sub ebx, edx
and edi, esi
xchg edx, esi
jmp 0x476769
pop ecx
sub edx, edi
or edx, ebx
sub esi, 0x2f71991d
and ebx, esi
xchg edx, esi
sub ebx, 0x2f72519c
xchg esi, edx
or esi, ebx
sub ebx, esi
mov edi, esi
jmp 0x4763d8
pop ecx
and ebx, edx
sub esi, edx
sub edx, edi
xor edi, edx
xor ebx, edx
sub edx, ebx
shr esi, 0xf
shl ebx, 4
or edx, esi
shr esi, 0x1e
sub edx, edi
xor esi, edx
jmp 0x477646
push 0x24f212af
mov ebx, edx
or edi, ebx
or edi, 0x2f7724f1
mov esi, 0x2f7762d2
or edi, ebx
neg ebx
add ebx, esi
add ebx, edx
and esi, edi
xchg ebx, edx
jmp 0x477512
mov ecx, 0x43370267
bswap ebx
xor edi, 0x2f7975eb
sub edi, 0x2f79b236
xchg ebx, esi
xor ebx, 0x2f7a2ef4
mov esi, edx
or ebx, 0x2f7aa73c
add ebx, edx
jmp 0x476001
call fcn.00476e02
xor esi, edi
or edx, edi
and esi, edi
or esi, ebx
shr edi, 0xc
and edi, 0x2f7e8798
ror edi, 0xd
mov edi, edx
dec edx
add esi, ebx
nop
shl ebx, 1
mov edi, edx
and edx, esi
jmp 0x475dd0
pop ecx
sub edx, edi
shl edx, 0x1d
mov esi, ebx
and edi, esi
dec esi
jmp 0x47594c
pop ecx
mov ebx, 0x2f8b1d85
mov edi, 0x2f8b6b7d
add ebx, edx
sub ebx, 0x2f8be5a4
xor edx, edi
jmp 0x475ac5
call ecx
sub edx, 0x2f93c316
sub edi, esi
mov edi, ebx
mov edx, ebx
add edx, esi
sub esi, 0x2f94fff2
not ebx
inc edx
or esi, edx
jmp 0x478434
call fcn.00476e02
bswap edi
and esi, 0x2f964e18
add edi, esi
rol edx, 0x1e
xor edx, 0x2f9706a5
or edx, esi
mov edi, esi
and edi, esi
jmp 0x477cf1
pop ecx
mov edx, edi
mov ebx, edi
mov ebx, edx
sub ebx, 0x2f98d024
and edx, 0x2f991fcf
shr edx, 0x17
sub esi, 0x2f999b6f
add edx, ebx
rol edi, 0x19
jmp 0x4759b0
call fcn.00476e02
rol ebx, 0x15
shl edx, 2
xchg edx, ebx
and esi, edx
not esi
or edi, ebx
sub esi, edx
not ebx
jmp 0x4772a2
pop ecx
add ebx, edi
and edi, esi
xor ebx, edi
xor edi, ebx
sub ebx, edx
not esi
not edx
or edi, ebx
sub esi, 0x2fa17b33
neg esi
nop
shl edi, 8
jmp 0x475bea
push 0x250f616d
sub esi, edi
add esi, edx
mov ebx, edi
nop
mov edx, esi
xor edi, ebx
not edi
xchg edi, esi
jmp 0x47783f
call fcn.00476e02
and edi, 0x2fa4a7f8
inc edi
xchg edi, esi
or edx, esi
sub edi, 0x2fa59c07
xor ebx, edi
sub ebx, 0x2fa6175f
shr edi, 9
add edx, esi
inc esi
ror edx, 0xb
bswap edx
mov ebx, edx
xor ebx, esi
xchg edi, ebx
jmp 0x478186
push 0x250547e8
not edi
xchg ebx, edi
and edi, edx
rol edi, 0x1b
ror ebx, 0x19
inc esi
rol edi, 0x15
ror esi, 0x1b
xchg ebx, esi
jmp 0x47723b
push 0x24f4905a
mov esi, 0x2fba6a03
or esi, 0x2fbaa706
and edi, esi
sub ebx, 0x2fbb1fe0
sub ebx, esi
add ebx, edx
and ebx, esi
bswap edx
inc ebx
mov edi, esi
and ebx, 0x2fbcce42
sub edi, ebx
or edi, 0x2fbd4656
and edi, edx
jmp 0x475901
pop ecx
xor edx, esi
or edi, ebx
or esi, edi
jmp 0x4759e2
mov ecx, 0x183c2e20
xor esi, ebx
add ebx, esi
xor edx, edi
xor esi, ebx
dec ebx
jmp 0x477204
pop ecx
mov edx, ebx
and esi, edx
inc esi
xor edi, 0x2fcb319c
add ebx, edi
ror edx, 0xa
inc ebx
mov ebx, esi
add ebx, edi
neg edi
and edi, edx
or edx, ebx
not edi
jmp 0x47699f
pop ecx
and edi, 0x2fcf7623
inc edx
mov esi, edx
not edi
sub edi, edx
xor edx, ebx
add ebx, edi
inc esi
xor edx, edi
mov ebx, edi
add edi, 0x2fd1da0f
add edx, 0x2fd21756
jmp 0x475cd1
call ecx
and esi, 0x2fe26990
xchg ebx, edi
and edi, edx
xor edx, ebx
neg edx
ror ebx, 1
sub edx, 0x2fe3e660
mov ebx, edx
mov ebx, edi
jmp 0x47651f
pop ecx
xor edi, ebx
xor ebx, esi
mov esi, ebx
and edi, esi
and ebx, esi
xor esi, edi
nop
xor edx, esi
add edi, ebx
sub edx, 0x2ff159cf
dec ebx
jmp 0x475d43
call fcn.00476e02
dec esi
xchg edi, ebx
and esi, edx
not edx
and esi, ebx
xor edi, esi
mov edi, esi
xor edi, esi
sub esi, 0x2ffe7305
ror ebx, 2
add esi, edx
jmp 0x476da5
push 0x40
or edx, esi
xor edx, edi
add ebx, edi
and edx, ebx
or ebx, edi
neg esi
bswap ebx
sub esi, edx
shl esi, 0x19
xor edx, edi
bswap edx
add edi, edx
shr esi, 4
jmp 0x475728
call ecx
xchg ebx, edx
shl ebx, 9
shr edi, 0xd
bswap edx
shl edi, 0x1d
jmp 0x476e5a
push 0x2511758d
sub ebx, edi
add edx, edi
add edi, ebx
add ebx, edx
or esi, ebx
xor edi, edx
and ebx, edx
add esi, ebx
and edx, 0x30115dc8
jmp 0x477bda
push 0x24f6b0aa
shl esi, 0xf
and esi, edi
add ebx, esi
sub edi, ebx
inc edx
xchg esi, edx
dec esi
and edi, esi
xor ebx, 0x3013aeb1
or edi, esi
xor edx, ebx
add ebx, edi
mov ebx, edi
sub ebx, 0x3014db6e
jmp 0x475bbc
mov ecx, 0x183c2e20
sub ebx, esi
or ebx, edi
and esi, edi
xor esi, 0x30211e0f
and edi, edx
sub edx, edi
jmp 0x47638a
call fcn.00476e02
add ebx, edx
mov ebx, 0x3029b952
not esi
mov edi, esi
and esi, 0x302a72a0
sub esi, edx
jmp 0x47839c
push 0x24f1bd47
add edi, 0x302b15d8
and edx, 0x302b6347
xchg esi, ebx
shr edx, 9
xchg edx, ebx
mov edi, ebx
jmp 0x4767ac
push 0x250f1f9e
mov edx, edi
add ebx, edx
and edi, esi
sub ebx, esi
sub ebx, edi
or esi, ebx
jmp 0x476a32
call fcn.00476e02
not edi
not edx
xor edx, ebx
and esi, edi
and edx, ebx
sub edx, edi
nop
or edi, 0x3035c466
mov edi, 0x303603c0
jmp 0x476756
push 0x25058843
nop
xor esi, edi
inc edi
and esi, 0x30388fc6
nop
add esi, 0x30390de1
xchg ebx, edx
jmp 0x478201
pop ecx
and edx, edi
mov edi, 0x3039de9e
or ebx, edx
or edi, ebx
shl edx, 8
neg ebx
and edx, 0x303b22f5
xchg esi, edx
jmp 0x4768dc
call ecx
xor edx, 0x303f06f1
mov ebx, edi
and edx, ebx
add edi, edx
add edi, esi
not edx
bswap edi
neg edi
xor edx, ebx
not edi
xor esi, ebx
inc ebx
and edx, 0x3041f740
jmp 0x476c76
pop ecx
and ebx, edi
ror edx, 6
sub edi, esi
neg edi
mov edx, ebx
neg edx
add edx, esi
not esi
shl edx, 0x10
jmp 0x477d3c
push 0x24f97a25
not edi
add esi, edx
and edx, 0x3058ca29
or edi, esi
dec edi
or ebx, edi
mov edx, ebx
shr edi, 0xe
rol esi, 0x12
and edx, esi
or esi, edx
jmp 0x477b86
pop ecx
shl edx, 3
xchg edi, edx
sub edx, 0x3065041e
xchg edx, edi
add edx, esi
sub edi, ebx
jmp 0x477bae
push 0x401400
or ebx, esi
xchg esi, ebx
mov ebx, edx
inc edi
inc edi
xor esi, edi
sub esi, edx
or esi, 0x306baa82
jmp 0x476178
push 0x24f25877
xor edx, ebx
mov edi, 0x306d32fc
rol ebx, 0x1d
mov edi, edx
mov edx, 0x306de594
sub ebx, esi
or ebx, edx
jmp 0x47825b
push 0x25081c78
add edx, 0x306eb3df
and esi, edi
sub esi, edx
mov edx, edi
sub edx, esi
and ebx, edx
xor ebx, 0x30702491
sub edx, edi
shr ebx, 0x10
jmp 0x477d91
pop ecx
shl edi, 5
or esi, 0x30823dd5
or ebx, esi
add edx, esi
not ebx
xchg ebx, edi
mov ebx, edx
add edx, 0x3083b034
bswap edx
jmp 0x477258
pop ecx
mov esi, edi
xchg edi, edx
xchg edi, edx
mov edx, 0x308749ad
nop
shl esi, 0x1b
xor edi, esi
sub edx, esi
jmp 0x47844e
pop ecx
xor esi, edx
sub ebx, edx
sub esi, 0x309be8c0
mov esi, 0x309c24a6
xchg esi, edi
sub ebx, edx
jmp 0x477858
call fcn.00476e02
bswap edi
or esi, edi
shl esi, 0x1b
and edx, 0x309db5ad
xchg edx, edi
or ebx, esi
xor ebx, edx
and esi, edi
and edi, ebx
or esi, edi
jmp 0x475fc8
mov ecx, 0x183c2e20
sub ebx, edx
add ebx, esi
sub esi, edx
mov esi, ebx
bswap ebx
xor edi, esi
ror edi, 0x1a
jmp 0x476a4b
pop ecx
sub esi, edx
xchg esi, edi
and ebx, edx
and edi, ebx
and ebx, edx
add edx, ebx
add ebx, 0x30ac3c92
or edi, ebx
inc edx
xor esi, edx
jmp 0x476335
push 0x2511fb8b
dec edx
xchg edx, ebx
add edx, edi
or ebx, 0x30ae145f
and edx, ebx
sub edi, edx
and esi, edi
xor edi, ebx
or esi, ebx
neg edx
dec edx
xchg edi, edx
jmp fcn.00476204
push 0x250126a4
mov edi, 0x30b063fe
rol ebx, 0x14
mov esi, edi
and edx, ebx
xor ebx, 0x30b1559e
xor ebx, edx
and esi, 0x30b1e0a7
mov edi, esi
or ebx, edx
xchg esi, ebx
jmp 0x4767d1
call fcn.00476e02
mov edx, ebx
xor esi, edx
dec edi
and edx, esi
xchg edi, ebx
add esi, ebx
or ebx, edx
jmp 0x477d13
push 0x250504b6
dec esi
and esi, ebx
sub edx, edi
and edi, ebx
xchg edx, edi
add edi, edx
xchg ebx, edx
rol edx, 0x15
xor edx, esi
jmp 0x476b08
pop ecx
and edx, ebx
add ebx, esi
sub edx, esi
jmp 0x476116
pop ecx
inc edx
sub ebx, 0x30c04b9a
neg ebx
xor edi, ebx
nop
or edi, edx
shr edi, 0xa
jmp 0x478049
push 0x2507da0a
and edi, 0x30cdec72
add esi, edi
rol edi, 0x13
mov edx, esi
bswap edx
mov edi, 0x30cfe425
sub edi, ebx
or edx, ebx
or esi, ebx
jmp 0x477531
mov ecx, 0x183c2e20
neg edi
or esi, 0x30e7b867
xor edi, ebx
shr ebx, 0x1c
shr ebx, 4
add esi, ebx
sub esi, edx
xchg ebx, edx
xor ebx, edi
or edi, 0x30e9a75f
jmp 0x47697c
mov ecx, 0x4132136a
sub edx, 0x30e9fee6
shl esi, 0x13
or edx, ebx
mov edx, 0x30eab250
mov ebx, esi
and esi, edi
or edi, edx
inc edx
and edi, 0x30ebeb09
shr edx, 0xf
mov edx, ebx
jmp 0x476814
push 0x2511b71b
mov edi, esi
sub esi, edi
or edi, edx
sub edi, edx
and ebx, esi
sub edx, esi
not ebx
xor edi, ebx
neg edx
sub esi, ebx
xchg ebx, edx
sub esi, ebx
dec esi
rol edx, 0x1c
jmp 0x477875
call ecx
bswap edi
or ebx, edi
or edx, ebx
xchg esi, edx
or edx, edi
mov edx, ebx
or ebx, 0x3102788d
xor ebx, edx
dec edi
xchg edx, esi
mov ebx, esi
bswap esi
jmp 0x47663a
call ecx
sub ebx, edi
nop
rol edi, 0x14
and edx, 0x31048dca
and esi, 0x3104c42e
sub edx, edi
ror edx, 0x16
and edi, esi
shl ebx, 0x14
xor esi, 0x3105e744
jmp 0x477382
pop ecx
add esi, 0x31063358
xchg edx, ebx
inc edx
bswap ebx
xor esi, edi
neg edi
and esi, edx
jmp 0x477030
mov ecx, 0x43370267
xchg esi, edx
shr edi, 1
bswap edx
neg esi
and edx, 0x310c2abe
xchg esi, edi
jmp 0x47831d
call fcn.00476e02
or edi, edx
mov ebx, esi
and edx, esi
ror ebx, 0x14
sub esi, ebx
and ebx, esi
xchg edi, esi
and esi, edx
or ebx, esi
mov edx, esi
xor edx, ebx
or ebx, 0x31148cf3
or edi, ebx
jmp 0x4784c7
mov ecx, 0x183c2e20
xchg esi, edi
add edx, esi
xchg esi, ebx
and edi, 0x3115cd8b
or edi, ebx
inc edx
add edi, esi
xchg ebx, edi
mov esi, edi
ror ebx, 0x13
and edi, ebx
sub ebx, edx
xchg edi, ebx
or esi, edi
jmp 0x477de9
call ecx
neg esi
xor ebx, esi
bswap edi
nop
xor ebx, edx
xchg ebx, edi
or esi, ebx
xor edx, esi
and esi, ebx
sub esi, 0x312d7fc7
not esi
shr edi, 0x10
bswap edi
ror esi, 0x1b
sub edx, edi
jmp 0x477499
call fcn.00476e02
rol edx, 6
or esi, ebx
mov edi, 0x313862b6
xchg edi, ebx
and ebx, edi
xor esi, ebx
xor ebx, 0x313950d7
add edx, esi
and edx, esi
nop
xor esi, edi
jmp 0x475782
push 0x24f732e3
add ebx, edx
sub ebx, esi
ror ebx, 1
xor edi, 0x313cfb60
or edx, ebx
or edi, 0x313d7384
mov edx, esi
xchg esi, edi
sub ebx, edx
and edx, edi
mov ebx, 0x313ea677
jmp 0x475a20
pop ecx
mov ebx, esi
and edx, esi
add edi, edx
mov edi, 0x31400ce3
bswap edx
mov edx, ebx
or edx, 0x3140bf6f
or esi, 0x3140fcc3
jmp 0x475b7d
call ecx
sub ebx, 0x31589d82
xchg esi, ebx
xor esi, edi
mov edi, edx
rol esi, 0x12
or ebx, edi
xchg ebx, edx
or esi, edi
ror ebx, 0x16
sub esi, edx
shr edx, 0x14
mov edi, 0x315b4e6f
not edx
jmp 0x476446
mov ecx, 0x43370267
sub esi, edx
or esi, edx
and esi, edx
and edi, 0x315f75d8
jmp 0x477165
mov ecx, 0x183c2e20
and esi, 0x3160b37a
not esi
dec esi
mov edx, esi
sub edi, edx
inc edi
or ebx, 0x31623307
jmp 0x477fe1
push 0x250799cf
ror ebx, 0x18
xor edi, ebx
xchg edi, edx
sub esi, ebx
xor edi, edx
and edx, edi
xor esi, 0x3163f826
mov ebx, edx
xor esi, edx
and edx, esi
xor ebx, edx
mov ebx, edx
jmp 0x477a4b
mov ecx, 0x183c2e20
mov edi, 0x3167603e
mov esi, edi
mov edi, esi
and ebx, edx
add edi, 0x31685061
and ebx, edx
mov esi, ebx
add esi, 0x3169141b
dec esi
ror ebx, 0xf
xchg esi, edi
and ebx, edx
sub ebx, edx
jmp 0x4769f4
pop ecx
and esi, 0x316a9ed9
bswap edi
mov edx, 0x316b1a2e
or ebx, 0x316b59f3
xchg esi, edx
and edi, 0x316bd317
rol edx, 0xc
xchg ebx, edi
xchg esi, edx
bswap edi
xor esi, edx
shl edi, 0x1e
sub edi, 0x316d946a
jmp 0x4765b1
call fcn.00476e02
sub edi, ebx
and esi, 0x3174001c
sub esi, edx
xchg ebx, esi
shl ebx, 0x1f
jmp 0x47695c
call ecx
mov esi, 0x317dd39b
rol ebx, 0x1d
rol ebx, 3
xor ebx, esi
or esi, edi
xor esi, edi
bswap edi
sub edx, esi
xchg esi, edi
and ebx, edi
xor esi, ebx
and edi, esi
sub ebx, 0x3180c171
rol esi, 0x15
jmp 0x478590
pop ecx
or edx, edi
and ebx, edi
mov esi, edx
add ebx, 0x318976ae
mov ebx, edx
sub ebx, edx
add esi, edi
add edx, esi
jmp 0x477682
pop ecx
mov ebx, 0x318ac3c8
add edi, 0x318aff1e
bswap edi
and edi, edx
mov edx, 0x318bc3fc
jmp 0x476564
push 0x24fbc555
not esi
or edi, 0x318fbad5
rol edi, 0x1e
jmp 0x476585
call ecx
sub esi, edi
ror ebx, 0xc
sub edi, esi
mov edx, ebx
not edx
mov edi, edx
xchg esi, edi
xchg esi, ebx
xchg edi, ebx
jmp 0x47678b
pop ecx
and esi, edx
neg edx
or edx, esi
neg ebx
sub ebx, 0x31a44d25
mov edi, esi
jmp 0x477899