Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMessageTime
cmp eax, 0xffffff24
jne 0x401075
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call main
call main
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
ret
call sub.user32.dll_GetInputDesktop
cmp eax, 0xfffffee6
jne 0x4010d6
call main
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
ret
call sub.user32.dll_GetInputDesktop
cmp eax, 0xffffff0e
jne 0x40115f
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call main
call main
call main
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call main
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xffffff36
jne 0x4011fc
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
ret
call sub.user32.dll_GetInputDesktop
cmp eax, 0xffffff1a
jne 0x401271
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call main
call main
call main
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call sub.kernel32.dll_FindFirstVolumeMountPointW
call main
call sub.kernel32.dll_FindFirstVolumeMountPointW
ret
jmp 0x475668
xchg ecx, edx
mov ecx, edx
or ecx, ebx
rol ebx, 0xa
xchg edx, esi
xor ecx, 0xe98d8ec4
dec edx
jmp 0x477a4d
pop esi
sub edx, 0xead5253a
add edi, ecx
mov edx, ecx
dec ebx
xchg ecx, edi
sub edx, ecx
add ecx, ebx
mov ecx, ebx
inc edi
sub ebx, 0xead9bd5c
xchg edx, edi
ror edi, 8
or ebx, 0xeadaf7dc
shr ebx, 0x11
jmp 0x4764f5
push 0xe9a26530
or ebx, edx
inc edi
sub edi, ebx
ror edx, 0x17
jmp 0x476478
pop esi
xchg ecx, edi
add edx, ebx
jmp 0x476243
pop esi
or ebx, 0xeae4451a
add edx, edi
nop
sub edx, ebx
shr ecx, 0x18
and edi, ebx
inc ecx
or edi, 0xeae732e4
add edx, edi
shl ebx, 6
jmp 0x47770f
call esi
and ebx, ecx
xchg ecx, edi
mov edi, ecx
xor ebx, edx
xchg edx, edi
inc edx
or ecx, 0xeaeb14ea
inc ecx
jmp 0x476811
pop esi
sub edx, edi
sub edx, 0xeaee7654
add edx, edi
add edx, 0xeaef43c2
xor ecx, 0xeaefac26
sub ecx, ebx
or edi, edx
xchg ecx, ebx
jmp 0x47663b
push 0xe9b14b62
xchg ebx, ecx
sub edx, edi
shl edi, 0xa
xchg ebx, edi
or edx, ecx
bswap edi
mov edx, ebx
or ecx, ebx
or ecx, edx
add ebx, ecx
shr ebx, 1
mov ebx, 0xeaf8a180
or edi, 0xeaf909e0
shr edi, 0xa
jmp 0x476be3
push 0xe9aab41c
ror edi, 0x17
or edx, ebx
mov edi, ecx
xchg ecx, edx
add edi, ebx
or edx, edi
jmp 0x477d39
call esi
and edx, ebx
or edx, edi
xor edx, edi
shl ebx, 0xf
jmp 0x476131
pop esi
rol edi, 0x1b
xor ecx, 0xeb04c718
xor ecx, 0xeb059016
xchg edi, ebx
xchg ebx, ecx
sub ecx, ebx
rol edi, 0x12
not edi
jmp 0x4766e4
pop esi
sub edi, 0xeb3ce2ea
ror ecx, 0x1d
inc ebx
sub edx, edi
ror edi, 0x18
mov ecx, 0xeb40bb0a
bswap ecx
add ebx, edx
and ebx, edi
mov edi, ecx
xor edi, edx
or edx, ebx
not ecx
not ecx
jmp 0x477b39
mov esi, 0x73716341
rol edi, 0x1f
and ebx, 0xeb4bca4a
ror ebx, 0x1e
xchg ebx, edx
add edi, 0xeb4e1fac
xor edi, ecx
jmp fcn.00477dc2
push 0xe9e7a49c
and ebx, edi
xor ecx, 0xeb511486
and edx, ebx
and ecx, 0xeb529376
jmp 0x4758fa
call fcn.00477d63
sub ecx, 0xeb6d68ac
not ecx
dec ebx
xor edi, ecx
neg edx
neg edi
bswap ecx
shl ebx, 8
sub ecx, edx
xchg ebx, edx
jmp 0x476bfc
pop esi
sub ecx, ebx
xor edx, 0xeb88e7e6
sub edi, 0xeb89a3c0
xor ecx, ebx
add edx, edi
xor edi, ebx
bswap ebx
xor ebx, 0xeb8d84fa
ror ecx, 0xe
neg ecx
add edi, 0xeb90d6cc
xchg ecx, edi
jmp 0x475d7d
mov esi, 0x73716341
mov edx, ebx
and ecx, edi
xor edx, ebx
or edi, 0xeb9fa7dc
jmp 0x476acd
mov esi, 0x73716341
bswap ebx
add ebx, edx
xchg edx, ebx
xor edx, 0xeba5b0ae
xor ebx, 0xeba64a5a
sub ebx, edi
jmp 0x475998
mov esi, 0x4132136a
shr edi, 0x1c
shr edx, 3
or edx, ebx
shr ecx, 0x14
xor ecx, edi
shl edx, 0x17
xchg edi, ecx
xor edx, edi
and edi, 0xebcfb2b2
xchg edi, ebx
mov ecx, edi
and edi, 0xebd17092
jmp 0x477ba5
pop esi
xor edx, ebx
xor ecx, edi
jmp 0x476eac
push 0xe9983a8e
mov edi, ecx
mov ecx, edi
add edi, ecx
add ecx, ebx
add ecx, edi
xor ecx, 0xebf1c898
not ecx
or edx, 0xebf33d3a
xor edx, ecx
rol edx, 0x1a
xor ecx, 0xec292fe8
xor ebx, 0xec298d30
jmp 0x475a65
call esi
ror edx, 2
or ecx, edx
and edi, edx
and ecx, edi
xchg ebx, ecx
sub ebx, edx
or ecx, ebx
mov edx, ecx
jmp 0x477db4
push 0xe9cd412a
sub ecx, ebx
or ebx, 0xec4098c6
or ebx, ecx
add edx, ecx
jmp 0x476866
pop esi
mov ebx, 0xec468dec
xor ebx, edi
mov edx, edi
mov edx, 0xec4799b4
or ebx, ecx
add edx, ecx
sub edi, ecx
add ebx, 0xec48dfac
jmp 0x4756cc
push 0x40
mov ecx, edi
sub ebx, edi
xor ebx, 0xec53b260
rol ecx, 0x19
xchg ecx, edx
shl ecx, 3
dec ebx
inc edi
and ecx, 0xec55c264
xchg ebx, edi
mov ebx, edi
rol ebx, 0x12
jmp 0x47786c
push esp
xor ecx, 0xec5800cc
bswap edi
sub ecx, edi
xor edx, ecx
add edx, 0xec594dee
add ecx, edx
mov edi, ebx
or ebx, edx
xor ebx, ecx
mov edi, edx
and edi, ebx
mov edi, ebx
jmp 0x475dfa
push 0xe9d27846
dec edx
mov ecx, ebx
add ebx, 0xec6bdc1c
xchg ebx, edx
or edx, 0xec6c9ab8
add edi, ebx
jmp 0x477c77
push 0xe9d3f740
xchg edi, ecx
or edi, ebx
sub edx, edi
xor edx, edi
xor edi, ecx
add ecx, 0xed44b816
mov edx, edi
dec edi
mov edx, 0xed458258
xor edx, ecx
add edi, ecx
dec ecx
jmp 0x4768e8
pop esi
bswap ecx
or edx, ecx
ror edx, 7
mov ebx, 0xedb1fe28
and edi, edx
mov edi, ecx
xor edx, ecx
xor edx, 0xedb2f4a6
mov edi, edx
and edx, 0xedb36f3e
jmp 0x4758c1
push 0xe9c0186c
mov ecx, edx
rol edx, 0xb
sub edi, ecx
and edi, 0xedb8af6c
mov ecx, edx
or ecx, 0xedb92ba8
xor edx, ecx
rol edx, 1
mov ecx, ebx
xor edi, ebx
shl edx, 7
neg edx
xchg ebx, edx
xor ecx, edx
jmp 0x477e50
call fcn.00477d63
or edi, ecx
mov ebx, edi
xor edx, 0xedbc0098
add ebx, edi
xchg ecx, edx
add edx, ecx
jmp 0x4757fb
call esi
and edx, ecx
shr edx, 0x1b
xchg ebx, edx
mov ebx, ecx
jmp 0x476957
call esi
xor ecx, edi
dec edx
ror edi, 0x1f
or edx, ecx
inc edx
add ecx, 0xedbf886e
jmp 0x4756de
push 0x401400
add edi, ecx
mov ebx, ecx
shr ebx, 0xf
mov ebx, ecx
sub edi, ecx
sub edx, ecx
xor ecx, ebx
shl edx, 0x19
jmp 0x4761f8
push 0xe9cc8c5a
sub ecx, edi
and edi, 0xedc3d8f4
mov ecx, ebx
xor ebx, ecx
xor edi, 0xedc491e4
sub edi, edx
or edi, ecx
xor edx, edi
xchg edi, ecx
or edi, edx
add ecx, ebx
and ebx, ecx
xchg edi, edx
sub ecx, edi
jmp 0x475d3f
call fcn.00477d63
mov edx, 0xedc84744
mov edi, ebx
and ebx, edi
xor edx, ebx
and edi, edx
neg edx
neg edi
xchg ebx, edx
xchg ebx, edi
add ecx, edx
jmp 0x477c1e
push 0xe9bf698c
neg ebx
and edx, 0xedd6df68
shr edi, 0x19
xor ebx, ecx
neg ebx
or edx, edi
jmp 0x47619d
pop esi
mov edi, edx
neg edx
mov ebx, ecx
sub edi, ebx
or ebx, edi
add edi, 0xedddb1ae
nop
bswap edx
sub ebx, 0xedde71ea
or ebx, edx
jmp 0x47721b
push 0xe9df645e
or edi, ecx
sub edx, edi
or edi, ebx
add edi, edx
add edi, 0xeddffec4
add ecx, 0xede04de4
xor ebx, edi
and ecx, edi
jmp 0x4770d2
pop esi
not ecx
sub edx, ecx
or ecx, edx
add edx, ebx
shl ebx, 5
neg edx
and edx, 0xede66210
not edx
add edx, edi
sub ebx, ecx
dec edx
xor edx, ebx
neg edi
and edx, ecx
jmp 0x4779f3
push 0xe9a2f6ac
sub edi, ecx
xchg edi, ecx
inc ecx
add ecx, edi
dec ecx
xor ecx, edx
rol ecx, 0x1c
inc edx
jmp 0x4773cc
pop esi
shr ebx, 0xe
or ecx, edx
mov ebx, edx
add edx, 0xf004b770
or ecx, 0xf0050448
xor edi, edx
or edi, ebx
dec edi
jmp 0x47567f
pop esi
mov ecx, edi
xor ebx, edi
add edi, ebx
nop
rol ecx, 4
or edi, edx
add ecx, ebx
shr ebx, 0xf
jmp 0x4778f8
push 0xe9e64b28
or ebx, 0xf05a8efc
add ebx, 0xf05acd4e
xor ecx, 0xf05bb2a8
mov edx, 0xf071a2de
ror edi, 0x12
xor ecx, 0xf07226ca
sub ecx, ebx
dec edi
jmp 0x4775c9
call esi
or edx, ecx
rol ebx, 9
rol ecx, 7
xor ebx, 0xf075f7c8
xor edx, edi
mov ebx, 0xf07684c6
and ebx, edx
sub ebx, edx
add ecx, ebx
shl edx, 0x11
and ebx, 0xf077c846
ror ebx, 9
jmp 0x477afd
push 0xe9dd91e0
and ecx, edi
sub edi, ebx
rol ebx, 0x16
xchg edx, ebx
dec ebx
xchg ecx, edi
xchg ebx, edx
sub ebx, ecx
jmp 0x47673c
pop esi
xchg edi, edx
add edi, ecx
or ecx, edx
xchg ebx, ecx
and ebx, edx
sub ecx, ebx
and edi, ebx
add ecx, ebx
and edx, 0xf08c516c
ror edi, 0x1b
and ebx, edi
xor ebx, 0xf08d0d94
or edx, edi
neg edi
jmp 0x475c3d
pop esi
sub edx, 0xf0944998
sub ebx, edi
or edx, ebx
inc ebx
not ebx
dec edi
jmp 0x476db3
mov esi, 0x73716341
rol edx, 0xe
xchg edx, edi
or ebx, ecx
xor ecx, ebx
shl edx, 0x18
xor ecx, edi
and ebx, 0xf0977490
dec edx
dec edx
add ecx, 0xf098431e
jmp 0x47749d
push 0xe9de4426
mov ebx, 0xf09ad156
and edx, ecx
add edi, ecx
xchg edx, ebx
jmp 0x47696b
pop esi
dec edi
sub ebx, 0xf0a960b4
add edx, edi
xchg ecx, edi
or ebx, edx
rol ebx, 0x1f
jmp 0x4764b5
pop esi
ror edi, 0x1a
xor ebx, 0xf0ab02aa
and ebx, ecx
mov edi, ecx
sub edx, ecx
add ecx, 0xf0ac0656
sub ebx, ecx
and ebx, edi
sub edx, ebx
add edi, ecx
jmp 0x47767c
call fcn.00477d63
sub edi, ecx
and edi, ebx
not edi
mov edi, ecx
and ecx, edx
shr edi, 0x1d
shl ebx, 2
add ecx, ebx
jmp 0x476589
mov esi, 0x73716341
xor edx, ebx
bswap ebx
xor edx, 0xf0b00884
or edx, 0xf0b047b4
mov ebx, ecx
or edx, 0xf0b0c122
xchg ecx, ebx
rol edx, 0x1b
and ecx, 0xf0b18fa0
not edi
neg edi
sub ebx, edx
and ecx, 0xf0b28c50
or ecx, edi
jmp 0x476d0f
mov esi, 0x73716341
sub edx, 0xf0b7dfc8
xor edi, ebx
jmp 0x476fbb
pop esi
dec edi
inc ecx
mov ebx, edi
mov edi, ebx
and edx, edi
add edx, ecx
xor ebx, edi
xchg edi, edx
jmp 0x475a0e
push 0xe9dedc54
add edx, 0xf0c18c0a
and edi, 0xf0c1cb34
xor ecx, ebx
mov ecx, edx
add ecx, edi
add edx, ecx
add ecx, edi
not ecx
sub edx, edi
xor edx, ebx
add edi, 0xf0c4025e
dec ebx
xchg ecx, edx
xor edi, edx
jmp 0x4763c8
push 0xe9b0ad42
xor edi, ecx
xor ecx, ebx
or edi, ecx
sub edi, edx
xchg ebx, edi
and edi, ebx
jmp 0x475773
mov esi, 0x73716341
mov edx, ecx
mov edi, ebx
xor edx, 0xf0d6d1dc
ror edx, 3
add edx, 0xf0d75026
and edx, ecx
jmp 0x4761ce
call fcn.00477d63
rol edx, 0x1a
dec edi
or edi, 0xf0d91e10
neg ebx
shl edi, 6
shr edi, 0x14
xchg edx, ebx
sub ebx, edx
jmp 0x4775f9
push 0xe9beaae2
sub edx, ebx
sub ecx, edx
and ebx, ecx
add edx, edi
sub ecx, edx
rol ebx, 0x1b
mov edi, edx
sub ecx, 0xf0e0b06c
xor ebx, edx
or edi, 0xf0e12dfc
jmp 0x47634d
pop esi
bswap ecx
bswap ecx
or edx, ecx
and edx, 0xf0e25726
sub edi, 0xf0e29672
and edi, edx
jmp 0x476b93
pop esi
sub edx, edi
add ecx, edi
sub edx, edi
inc edx
xor edi, 0xf0e6c2bc
or ecx, 0xf0e701f6
and ecx, edi
add ebx, 0xf0e78c54
jmp 0x4763a7
push 0xe9b2021e
neg ecx
mov ebx, 0xf0eb32ce
add edi, edx
xor edi, edx
xchg ebx, edx
and ecx, edi
jmp 0x47744d
call esi
or ecx, ebx
xchg ebx, ecx
bswap ecx
sub ecx, edi
jmp 0x47797c
push 0xe9bd5094
bswap ecx
ror ecx, 0x15
and ebx, edi
mov edx, 0xf0ef31e4
sub edi, 0xf0ef704c
rol ecx, 0x14
jmp 0x476c2a
push 0xe9bddd44
xor edx, ebx
dec ebx
jmp 0x476b34
push 0xe9b89d74
or ecx, edx
add edi, ebx
sub ecx, ebx
or edx, ebx
mov edx, edi
sub ebx, edx
sub ecx, edi
xor ebx, edx
jmp 0x476a9b
call fcn.00477d63
sub ebx, ecx
and edi, ecx
or edi, ebx
dec ebx
ror ebx, 0x16
and edi, edx
dec ecx
add edx, ecx
neg ebx
and edx, 0xf101f782
jmp 0x477158
pop esi
bswap edi
xchg edx, ebx
and edx, ecx
or ecx, edx
mov edi, ecx
not edi
and ebx, edi
mov edx, edi
or ecx, 0xf10f2ffa
xor ecx, ebx
jmp 0x476de3
pop esi
ror ecx, 0xd
and edx, ecx
mov edi, ecx
mov edx, 0xf111acc4
bswap ecx
dec edi
mov ebx, edx
or ebx, edx
jmp 0x475b73
pop esi
mov edi, ecx
dec ecx
xchg ecx, edi
xchg ebx, ecx
mov edx, ecx
sub ebx, edi
add edx, 0xf11a7b0a
xor ecx, ebx
neg ecx
or ebx, 0xf11b3756
jmp 0x4756e8
call fcn.00477d63
mov ebx, ecx
mov edx, ecx
jmp 0x4761e8
pop esi
sub edx, ecx
inc ebx
or ecx, 0xf12c1c3c
mov ecx, edx
not ecx
add edx, ecx
and ecx, edx
and edi, 0xf12d613a
xor ecx, edi
rol edx, 0x10
xor edx, ecx
dec edx
jmp 0x476eed
push 0xe9b7369c
mov edi, 0xf1314454
shr ebx, 0x1a
add ecx, ebx
xor ecx, edi
xor edx, 0xf1323ed4
mov edx, 0xf1327db6
xchg ebx, ecx
xor edi, edx
and ecx, ebx
and ebx, ecx
not edi
xor ecx, 0xf134002c
xchg ecx, edx
mov ecx, ebx
jmp 0x47789a
pop esi
xor ecx, edx
shr ebx, 9
neg edx
and ebx, 0xf13a83ae
not edi
ror edx, 5
jmp 0x47793a
pop esi
bswap edi
not edx
add ebx, edi
xchg ecx, edx
jmp 0x4778d2
push 0xe997a624
or edx, ebx
ror edi, 1
and ebx, edx
and edi, ecx
sub ecx, 0xf13d7494
add ecx, edx
mov ebx, edx
shl ebx, 0xa
and ebx, ecx
or edx, ecx
jmp 0x475c47
call fcn.00477d63
dec edi
xchg ebx, edx
add edx, edi
add ebx, 0xf143fa9e
jmp 0x477c07
push 0xe9d1c120
xor edi, ecx
mov ecx, edx
xor edx, ecx
sub edi, ebx
shl ebx, 0x14
and edx, 0xf188f0fe
and ebx, edi
ror edx, 0x16
jmp 0x475ef4
push 0xe99d002e
sub edi, ebx
mov ecx, edx
add ebx, edx
mov ebx, edx
bswap ecx
dec edx
mov edx, ebx
neg ebx
jmp 0x477855
push 0xe9dff084
sub ebx, 0xf1961db0
xchg ecx, ebx
add ebx, ecx
or edx, edi
or ecx, edi
and ecx, edi
sub ecx, edx
sub ebx, edi
jmp 0x475a8f
call esi
add ecx, edx
xchg ecx, edx
jmp 0x47772d
pop esi
shr edi, 0xa
sub ebx, ecx
not ebx
mov ebx, ecx
sub ecx, edi
xor edx, ebx
or edx, 0xf1ae6b1c
and edi, edx
dec edx
xor edx, ebx
sub edi, ebx
sub edx, ebx
jmp 0x476422
pop esi
dec ebx
rol edi, 7
mov edx, ebx
xor edx, ecx
jmp 0x476531
pop esi
xchg ebx, edx
sub ebx, edx
mov edx, ecx
dec ecx
jmp 0x476f6a
call fcn.00477d63
ror edx, 0xd
sub ecx, ebx
mov edi, edx
dec edi
and edx, 0xf1c896d8
xor edi, 0xf1c8e5e2
xchg ecx, edx
add ecx, edx
xor ecx, ebx
xor edx, ebx
and edx, ebx
or edx, ecx
mov ebx, edx
shl edi, 0xe
jmp 0x47570a
push 0xe9a3a1ea
or edx, 0xf1cfc32c
xchg ecx, edx
xchg edi, ebx
add edx, edi
sub ebx, 0xf1d0d904
add edx, ebx
not ecx
shl edx, 7
sub ebx, 0xf1d1e322
bswap edi
jmp 0x477a68
mov esi, 0x73716341
xor edx, 0xf1d7b754
ror edx, 0xf
shr edi, 0x11
xor edx, ebx
dec ecx
ror edx, 0x15
add edx, edi
xchg ecx, ebx
jmp 0x47684a
call fcn.00477d63
xchg edi, ecx
add ecx, edi
mov ecx, ebx
xchg edx, edi
mov ebx, edx
mov edx, 0xf1de663e
ror edx, 8
and ebx, ecx
xor edi, ebx
mov edi, ebx
add ebx, 0xf1dfac40
inc ebx
and edx, 0xf1e02bb0
or ebx, edi
jmp 0x475cfc
pop esi
xor ebx, ecx
mov ebx, edi
jmp 0x476f52
mov esi, 0x73716341
ror ebx, 0x1f
not ecx
dec ecx
and ecx, ebx
xchg edi, ecx
shr edi, 0x1d
jmp 0x476e7c
pop esi
xchg ebx, ecx
xor edi, ecx
shr ecx, 0xf
sub ecx, edx
mov edx, edi
sub edi, ecx
add ebx, edx
dec ecx
sub edx, edi
or ebx, ecx
inc edx
or edi, edx
jmp 0x4774ce
push 0xe9e719ba
and ebx, 0xf1f3fd60
bswap ecx
mov ecx, edx
add edx, ecx
jmp 0x47591a
call esi
rol edx, 9
and edi, ebx
rol ecx, 0xf
or ecx, edx
not edx
xchg ecx, edx
or ecx, edi
neg edx
xchg ebx, edi
xor edi, ebx
mov ecx, edi
and edi, 0xf1fa1500
not ebx
neg edi
jmp 0x477504
push 0xe9d119ca
and edx, edi
not ecx
jmp 0x477048
push 0xe9da0688
shl ecx, 8
shr ebx, 0xc
dec ecx
or ebx, 0xf20e0a7a
or edi, ecx
mov ecx, 0xf20e873a
jmp 0x47787e
pop esi
add edx, 0xf20ee060
mov ebx, edx
sub ebx, ecx
sub edi, edx
or edx, ecx
mov edi, ebx
jmp 0x476827
push esp
xchg ebx, edi
and edx, ecx
sub edx, edi
add edx, ecx
and edx, edi
neg edi
and edi, ebx
bswap ecx
jmp 0x475e25
call esi
xor edx, ecx
and ecx, edx
xchg ecx, edi
and edx, ecx
or ebx, ecx
or ecx, edx
jmp 0x4778b9
push 0xe99dc384
sub edx, edi
or ebx, 0xf223d142
xor edx, edi
ror ebx, 0x12
jmp 0x4774d8
push 0x74268
mov edx, ebx
sub edi, 0xf22505b8
jmp 0x47620e
mov esi, 0x73716341
xchg ecx, edi
xor edx, edi
mov edi, ecx
mov ebx, edi
xor edi, edx
xchg edx, ebx
ror edi, 0xa
rol edi, 1
jmp 0x476280
push 0xe9b7d71e
and ecx, 0xf2278808
neg edi
and edi, edx
mov ebx, edi
mov edi, edx
bswap edx
add ecx, edx
shl edi, 3
jmp 0x476ccf
pop esi
sub edi, edx
and edx, ebx
sub edi, ecx
mov edx, edi
xchg edi, ecx
xor edx, 0xf22af45e
and edi, ecx
dec ebx
jmp 0x47580b
push 0xe9affcb0
xor edx, ebx
xchg edi, ecx
and ecx, ebx
ror edx, 0x15
and edi, 0xf22cd1b4
mov edi, ebx
not edx
and edi, 0xf22d8b6a
inc edx
mov ebx, edx
jmp 0x47699c
push 0xe9a9fcc6
xchg ebx, ecx
xchg ebx, edi
or edi, 0xf22ee85e
mov ebx, edx
or ecx, 0xf22f63d2
sub edx, ecx
neg edi
or edi, ebx
jmp 0x4757cd
push 0xe99c3e74
sub edx, edi
and ecx, ebx
and ebx, ecx
or edx, ecx
sub edi, ecx
mov edi, ebx
jmp 0x477068
pop esi
dec edi
add edx, ecx
and edi, ecx
sub edx, ebx
add ebx, ecx
dec ecx
sub edi, ecx
and edx, 0xf2daecb4
jmp 0x476b5b
pop esi
inc ebx
sub edi, ebx
xor ecx, 0xf2e2b378
add edx, ecx
neg ebx
rol edi, 0x10
and ebx, edi
xor ebx, 0xf2e3fba2
jmp 0x476e5b
push 0xe99703b4
sub ecx, ebx
xor edi, edx
xor ebx, edx
xchg edi, edx
or ebx, edx
xchg ecx, ebx
mov ebx, edi
ror ebx, 0x1f
jmp 0x476f78
push 0xe9a4486e
xchg edx, edi
or ebx, ecx
sub ebx, edx
or edi, ebx
or edi, edx
add ecx, ebx
sub edx, edi
mov ecx, ebx
jmp 0x477c33
call fcn.00477d63
not edx
add ebx, 0xf2f663ec
and edi, 0xf2f6a2e2
rol ebx, 0xf
mov edx, ebx
and ecx, ebx
jmp 0x477804
pop esi
rol ebx, 0xe
or ebx, 0xf2f7f1c2
neg ecx
bswap ebx
bswap edi
or ecx, edi
shr edx, 6
xor ecx, 0xf2f97ddc
jmp 0x47666c
pop esi
mov ebx, ecx
nop
mov edx, ebx
or ecx, ebx
inc ecx
xchg edi, edx
jmp 0x476c0b
call fcn.00477d63
mov edi, ebx
sub ecx, edi
mov ebx, edx
rol edi, 0xb
shl edx, 0x1c
neg edx
jmp 0x477761
call esi
add ebx, ecx
add ecx, edx
sub ecx, 0xf30b796a
xor edi, 0xf30bc936
jmp 0x4771f9
call esi
sub ebx, edi
add edx, ebx
shl ecx, 7
or edi, ebx
add edx, ecx
ror ecx, 0x1c
jmp 0x475735
mov esi, 0x73716341
xor ecx, ebx
or ebx, edi
sub ecx, ebx
add ebx, edx
add edx, edi
bswap ecx
add edx, ecx
or edx, edi
dec ecx
and edx, ecx
jmp 0x477363
push 0xe9d33b1c
shr ecx, 0x15
add ebx, edi
sub edi, 0xf31357a6
sub ecx, ebx
and ebx, edx
sub ecx, edi
and edi, 0xf3144c3c
mov edx, edi
jmp 0x475fbd
push 0xe9ab503e
sub edx, 0xf3200a4e
add edx, ebx
add ebx, ecx
mov ebx, ecx
shl edx, 0xb
not edi
dec edx
xchg edx, ebx
xor edi, 0xf3220b28
sub ecx, 0xf3224a50
jmp 0x4766f8
pop esi
xor ebx, edx
neg ecx
and edi, edx
and ecx, ebx
jmp 0x47734c
mov esi, 0x73716341
mov ebx, ecx
inc edx
and ecx, ebx
mov edi, ecx
jmp 0x477ade