Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetVersion
cmp eax, 0xfffffef6
jne 0x4010a7
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xfffffeee
jne 0x401108
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xfffffef2
jne 0x401173
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xffffff28
jne 0x4011fc
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff32
jne 0x401271
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_ZwQuerySecurityObject
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_RtlFindMessage
call sub.ntdll.dll_ZwQuerySecurityObject
ret
jmp 0x475403
and edi, 0xadc6b1fe
add ebx, esi
nop
xor esi, ebx
dec ecx
or edi, ecx
sub edi, ecx
jmp 0x475a14
pop esi
xor ecx, edx
dec ebx
dec edx
and edx, edi
or edx, 0xaee2cc76
dec edx
and ebx, ecx
or edx, ecx
jmp 0x477c5f
call esi
neg ebx
mov edx, ebx
inc ebx
or edx, edi
rol ecx, 0x1f
or ebx, 0xaef20572
mov edx, ecx
or edi, 0xaef28040
and edi, ecx
bswap ecx
jmp 0x4758ea
call fcn.00478819
or ecx, 0xaef6ec2a
sub edx, edi
xor ebx, edi
xor ebx, edi
and edx, edi
shr edi, 5
jmp 0x476a9c
push 0xade8acc6
not edi
or ebx, ecx
mov ebx, 0xaef90976
mov ecx, edx
rol edx, 0x12
add ecx, ebx
mov edi, edx
sub edx, 0xaefa4db8
mov edi, ecx
shr ecx, 0x17
jmp 0x475982
pop esi
nop
or edi, 0xaefb73e2
not edi
bswap ecx
inc edi
sub ebx, edx
jmp 0x477229
pop esi
mov edx, edi
sub ebx, edi
bswap edx
bswap edx
not ebx
xor ecx, edi
add edi, ebx
mov ecx, edx
and edi, ecx
not edi
jmp 0x47824f
mov esi, 0x183c2e20
add edx, ebx
xchg edi, edx
shl edx, 0x12
xor edi, ecx
sub ebx, edx
and edx, 0xaf034be8
jmp 0x4782a9
call esi
xor ecx, 0xaf086d08
add ecx, edx
jmp 0x47643a
push 0xadcd93d2
sub ebx, edi
sub edi, edx
xor ecx, edi
mov edi, edx
add ecx, ebx
and ecx, edx
nop
rol edx, 0x10
sub edi, 0xaf207354
dec ecx
jmp 0x475c9c
call fcn.00478819
and ebx, edi
neg edi
mov ecx, edx
shl edx, 0x16
sub edx, 0xaf2824b0
nop
shr edx, 0x12
not ecx
jmp 0x478341
push 0xadefc0a8
inc ecx
add ecx, 0xaf30d324
ror edx, 0x1a
mov edx, ebx
ror edx, 0x1d
ror edi, 0xb
bswap edx
nop
and edx, ecx
rol ecx, 0xf
mov ecx, 0xaf331aaa
mov edx, ecx
jmp 0x476531
push 0xadd032d6
rol ecx, 6
xor edi, ebx
neg edx
rol ecx, 0xd
add edi, edx
and edx, 0xaf34e7ee
xor ecx, edi
ror edx, 0x18
jmp 0x4772dd
pop esi
mov edi, ebx
xchg ecx, edx
or ecx, ebx
and ebx, edx
and edx, 0xaf36c1ae
xor ecx, edi
xchg edx, edi
xor edi, 0xaf378d8a
nop
add edx, ecx
add edx, 0xaf3849b0
mov edi, edx
jmp 0x477f08
push 0xadd3a68c
shr ebx, 0xf
or edx, ebx
or ecx, 0xaf395ae0
xor edx, ecx
jmp 0x476373
pop esi
xchg ebx, ecx
and ebx, 0xaf3e5168
and ebx, edx
xor edi, 0xaf3ecd2e
and ecx, 0xaf3f0c00
mov ebx, ecx
sub edx, edi
dec edx
neg edi
xchg edx, ecx
dec ebx
ror edi, 0x1e
jmp 0x476944
pop esi
add ecx, 0xaf45de46
neg edx
add edx, ebx
rol ecx, 3
sub edi, edx
or edi, 0xaf47517e
jmp 0x475bc0
push 0xadddcc2c
xchg edi, ecx
add edi, ebx
xchg ebx, edx
add ecx, edi
or ecx, edx
mov ebx, ecx
jmp 0x4787cd
push 0xade8f876
sub ecx, ebx
xor edx, ebx
add ebx, ecx
xchg ecx, edx
xchg edx, edi
rol ebx, 9
jmp 0x47655a
mov esi, 0x183c2e20
sub ecx, edx
add edx, ecx
and ebx, 0xaf4b5d22
sub edi, 0xaf4b9cc8
bswap edi
or edi, 0xaf4c7664
shl ebx, 0x11
shr edx, 0x1f
sub ebx, ecx
rol ecx, 0x13
xor ebx, edx
sub ebx, edx
or ebx, ecx
sub edx, edi
jmp 0x476dee
push 0xadcd4160
add edx, ebx
add ecx, ebx
or ecx, ebx
or edi, edx
and ecx, edx
xor edi, ecx
mov edi, ecx
and edx, edi
jmp 0x475737
call fcn.00478819
xchg ebx, ecx
xor edx, edi
mov ebx, edi
and edx, edi
dec edx
add ebx, ecx
and edx, 0xaf5a348c
or ecx, edi
or ecx, ebx
xor edi, ebx
jmp 0x476ef3
pop esi
xor ebx, edi
xor ecx, edx
xor edx, edi
mov edx, ebx
not ebx
and ecx, 0xaf640478
or edi, edx
inc edx
rol ecx, 9
and ecx, edi
mov ecx, ebx
mov ecx, edx
jmp 0x476489
call esi
and edi, ecx
xchg ecx, ebx
bswap edi
xor edx, ecx
jmp 0x475b5f
pop esi
shl ecx, 5
inc ecx
and edi, edx
shr ecx, 0xc
shr ecx, 1
ror edx, 0x10
and ebx, edi
mov ecx, 0xaf6e13c8
xor edi, ebx
mov edi, edx
jmp 0x478223
push 0xadef29b2
neg ebx
xor ecx, 0xaf73ee0e
sub edx, edi
add ecx, edi
mov edx, ecx
or ecx, edi
xor ecx, edi
rol edi, 4
shl edx, 6
ror edx, 0xc
xchg edi, ecx
or edi, edx
jmp 0x4767d7
push 0xadcddd3a
xor ebx, edi
add edx, ebx
jmp 0x4780b9
push 0xade22bb0
nop
xor edi, 0xaf887eac
and ecx, edi
or ecx, ebx
mov ebx, edx
not edi
rol ebx, 0x1a
or edx, edi
jmp 0x478111
call esi
dec ecx
mov ecx, edi
and edi, ebx
add edx, ecx
bswap ebx
sub edi, edx
rol edx, 0x18
and edi, ebx
add edi, edx
xor ecx, edx
and ecx, 0xaf9344c8
not edx
jmp fcn.00476569
pop esi
xor edx, ecx
xor ebx, 0xafa47ca8
bswap ebx
dec ecx
add edx, ecx
or ebx, edi
jmp 0x477013
push 0xaded1968
mov ebx, ecx
sub edx, ecx
dec edi
sub ecx, edi
bswap edi
xor edi, 0xafaaf100
and ebx, ecx
sub ecx, edi
jmp 0x476cf0
pop esi
add edx, 0xafb1a3ec
xor edx, ecx
or ebx, ecx
sub edx, ebx
shl edi, 0x1d
not ecx
xor edx, ecx
mov ecx, edi
jmp 0x4775d5
push 0xaddb2e6a
dec edx
inc edi
jmp 0x476732
push 0xadd7b256
and ebx, edx
sub edi, ebx
rol edi, 0x1d
add ecx, edx
and edx, 0xafba46fa
sub ebx, 0xafba9634
jmp 0x4764fe
mov esi, 0x183c2e20
or edi, edx
xor ebx, ecx
ror ecx, 0xf
mov edi, edx
sub ecx, edx
mov ebx, 0xafbce996
jmp 0x4762d2
pop esi
and ebx, 0xafbd44ee
sub edi, ebx
jmp 0x4755a0
push 0xade69b34
rol edx, 0xd
add edx, edi
or ecx, edx
xor ebx, edi
jmp 0x476d98
call esi
xor ebx, ecx
bswap ecx
sub edx, ebx
xchg ebx, edx
jmp 0x475fa8
pop esi
add edi, 0xafcc9176
add edi, ecx
bswap edx
add edx, ecx
and ebx, 0xafcd89fe
add ecx, edi
nop
add edi, edx
mov ecx, edx
dec edx
add ebx, edi
add ebx, edi
jmp 0x477198
pop esi
ror edx, 2
sub ebx, edi
or edi, ebx
or ebx, edi
and edi, ecx
xor ebx, 0xafd6613c
or ecx, ebx
xor ecx, 0xafd6ddfc
jmp 0x47676b
push 0xade1e14c
or edx, ecx
or edi, ebx
mov edx, 0xafdb6b06
and edx, edi
or ebx, edx
sub edi, ebx
or ecx, 0xafdc610a
and ecx, edx
shl ebx, 0x15
xor edx, 0xafdd2d32
add edx, ecx
rol edi, 0x15
mov ecx, ebx
mov edi, ecx
jmp 0x475cdb
pop esi
mov ecx, 0xafede542
ror ecx, 8
or ecx, edi
shl ebx, 6
jmp 0x47775c
call fcn.00478819
not edx
neg edi
mov ecx, edi
neg edi
rol edx, 0x13
neg ecx
jmp 0x475b3c
pop esi
inc ecx
xor ebx, edx
rol edi, 0x1f
sub edx, edi
sub edi, edx
neg edx
dec edi
bswap edx
jmp 0x478161
push 0xadd3f0a2
shl ebx, 0x1d
shl ebx, 0x17
add edi, ecx
or ecx, 0xb00342f2
sub edi, ecx
add edi, ecx
jmp 0x476691
mov esi, 0x183c2e20
and edx, edi
sub ebx, 0xb0092a80
shr ebx, 0xe
shr ecx, 6
sub edx, ecx
and ebx, edx
xor edi, 0xb00a7492
xor ecx, ebx
jmp 0x477dad
pop esi
sub ebx, 0xb012baca
mov edi, ebx
nop
sub edi, edx
shl edi, 0xf
dec ecx
jmp 0x475e8e
pop esi
ror ecx, 3
shl ebx, 0xd
jmp 0x47859b
mov esi, 0x183c2e20
or edx, 0xb01cd624
or edx, 0xb01d2662
sub edi, ebx
sub ecx, 0xb01da288
xor ecx, edx
xor ebx, edi
jmp 0x4757a0
pop esi
neg edi
xor edi, ecx
not ecx
bswap edx
sub ecx, ebx
add ecx, 0xb01fc844
add edi, ebx
inc edx
jmp 0x475951
push 0xadd7fb0c
and edx, ebx
shr ecx, 0xc
shl edi, 8
and ebx, edx
or edx, 0xb021a58a
and ebx, edi
sub edi, edx
xchg edx, ebx
dec ebx
ror ebx, 0x11
jmp 0x477814
mov esi, 0x183c2e20
add edx, 0xb02416e6
or edi, ebx
xor edi, 0xb024fe9c
inc edi
and ebx, edi
and ebx, ecx
not ebx
not edi
xchg ecx, ebx
mov edx, edi
not ebx
or ecx, edi
jmp 0x4776df
push 0xade9434e
add edi, ecx
rol edi, 8
jmp 0x4755ba
pop esi
xchg edx, edi
and edi, edx
add ecx, ebx
rol edx, 0x16
jmp 0x478455
push 0xadd43a58
rol ebx, 1
shl edi, 0xf
ror ecx, 1
xor ecx, edi
shl edi, 0xe
inc edi
rol edi, 7
sub edx, ecx
jmp 0x475999
pop esi
add edi, ebx
rol ebx, 0x1c
jmp 0x475418
push 0xaddb7810
xchg ebx, edx
or ecx, edi
bswap edx
xor ebx, 0xb04b2aa4
sub edi, edx
add ecx, edx
jmp 0x4764c3
pop esi
mov ecx, 0xb04e4972
and edi, 0xb04e897a
inc ebx
and edi, ecx
or ebx, edi
rol edi, 0x1b
sub edx, ecx
or edi, edx
jmp 0x4770e5
push 0xadd0c534
sub edx, edi
xchg ebx, ecx
sub ebx, edi
or edx, ecx
mov edi, ecx
mov edx, ebx
jmp 0x4783aa
push 0xadef7536
add ebx, ecx
dec edi
xor ebx, ecx
xchg ebx, edx
xor edx, ecx
xor edi, ecx
shl ecx, 0xb
ror ecx, 0x1e
xchg ecx, edx
and edx, edi
sub ecx, ebx
or edi, ebx
jmp 0x47581e
push 0xaddef5aa
and ecx, 0xb05ea062
sub edx, ebx
and edi, 0xb05f1dbe
and edi, ecx
ror ebx, 1
and ecx, edx
or edx, ecx
mov ecx, edi
jmp 0x475f8e
pop esi
ror ebx, 0x14
mov ebx, ecx
shr edi, 0xe
xchg edi, ecx
ror ebx, 0xd
shl edx, 0xa
nop
xchg edx, edi
shl edi, 0xe
add edx, ebx
xor ecx, ebx
shr edi, 4
jmp 0x4778e2
push 0xade48578
add ebx, edi
bswap ecx
and edx, edi
and edi, edx
xor ecx, 0xb0859e86
mov edi, ecx
and ebx, 0xb0861bfc
add ecx, 0xb0866bf2
mov edi, edx
dec ebx
jmp 0x47777e
call esi
ror ecx, 0x11
mov edx, ecx
xor ecx, edi
mov edi, edx
shl ebx, 0x11
xor ebx, ecx
xchg edi, edx
add ecx, edx
neg edi
xor ebx, 0xb08ce79c
sub ecx, ebx
or ebx, 0xb08db2da
jmp 0x476100
push 0xadcfe836
sub ecx, edx
shr edx, 0x10
xor ebx, edx
add ecx, edi
dec edx
mov ebx, edi
not ebx
and edi, edx
jmp 0x475849
mov esi, 0x183c2e20
xor ecx, 0xb09db1e8
mov ebx, ecx
sub ebx, 0xb09e3cc4
sub ecx, edi
jmp 0x4781d1
pop esi
add ecx, 0xb0bbdba0
sub ecx, ebx
jmp 0x476266
push 0xaded644a
not ecx
xchg edi, ecx
xchg edi, edx
xor ebx, edx
jmp 0x476ba4
mov esi, 0x183c2e20
or edi, 0xb0d296cc
mov edx, ecx
or ecx, ebx
xchg edi, ecx
or edi, edx
and ebx, edx
sub edx, ebx
shl ecx, 0xd
not ecx
ror ebx, 0x11
jmp 0x475527
call fcn.00478819
mov ecx, edi
xor ecx, ebx
jmp 0x477f8c
pop esi
nop
sub edx, ecx
mov edx, edi
xchg ecx, edx
jmp 0x476090
pop esi
add ebx, 0xb0f2e762
xchg edi, ecx
add edi, ecx
mov edx, ecx
sub ecx, edi
add ecx, edi
or edx, 0xb0f583b8
mov edi, ecx
xchg edx, ebx
xor edi, edx
jmp 0x47596c
call esi
neg edx
dec edi
dec edx
xor ebx, 0xb0f95944
and ecx, edi
xchg edi, ebx
jmp 0x475e55
call fcn.00478819
add ecx, edi
add edi, edx
add ecx, edx
add ecx, ebx
sub ebx, ecx
and ebx, 0xb0fb66d2
jmp 0x477c28
pop esi
and ebx, ecx
rol edx, 0x15
xor edi, ebx
or ebx, ecx
xchg edi, ebx
shr ecx, 9
xchg ebx, edx
not ecx
and ebx, ecx
shl ebx, 0x11
jmp 0x475ef8
push 0xade861c8
xchg edi, ebx
or edi, 0xb13063e8
inc edx
mov ecx, 0xb131188e
xor edx, ebx
or edi, edx
xor edi, edx
and ebx, ecx
inc ecx
nop
jmp 0x475542
push 0xadd7689e
or edi, ebx
xchg ecx, edx
or edi, edx
dec edx
jmp 0x475f64
pop esi
sub edx, ebx
shr ecx, 7
bswap ebx
mov edx, ecx
and ebx, 0xb13bd120
xchg edx, ebx
jmp 0x476ce2
push 0xadd71f7e
mov edi, edx
not edx
not edi
rol ebx, 9
add ecx, ebx
not ecx
jmp 0x477107
pop esi
xor edi, ecx
add edi, ebx
mov ecx, edx
or edx, 0xb13ee14e
mov ecx, ebx
rol edx, 0x18
sub ebx, edi
not ebx
jmp 0x4781ee
push 0xadda9a7a
and ebx, ecx
not edx
or ecx, ebx
shr ecx, 6
xor edi, ebx
rol edi, 0x16
sub ebx, 0xb14978ba
sub ecx, edx
jmp 0x4773e5
push 0xadd07cfe
and ecx, 0xb154b9b6
shr ebx, 0x11
mov edi, ecx
inc edi
sub ebx, ecx
or ebx, ecx
and ecx, edx
mov edi, ebx
mov ecx, edi
inc edi
jmp 0x4767c1
push 0xaddae388
xchg ebx, edi
mov ecx, ebx
mov ebx, ecx
sub ecx, ebx
sub edi, edx
add ecx, ebx
add edx, ebx
xor edi, ebx
jmp 0x475f58
call esi
or ecx, edi
or ebx, edi
xchg ebx, edx
add ebx, edx
jmp 0x4764e5
push 0xaddeab8c
neg edx
rol edi, 1
sub edx, 0xb1871d56
neg edx
xor edi, 0xb1879c92
xor ecx, edi
mov ecx, 0xb1882844
add ebx, 0xb18865ba
neg edx
xor ebx, edi
bswap ecx
or edx, ecx
jmp 0x476851
push 0xade43888
xor ecx, 0xb18c5010
or ecx, 0xb18c8ea4
or ebx, 0xb18cccc2
dec ebx
add ecx, edi
or edi, ecx
and ecx, ebx
xor edx, 0xb18e0e72
mov ebx, 0xb18e4b18
and edi, edx
nop
sub edx, ebx
sub edx, edi
sub ecx, edx
jmp 0x476a45
call fcn.00478819
inc ebx
xor ebx, edi
xchg edx, ebx
bswap ecx
sub edi, ebx
xor ebx, ecx
sub edx, ecx
xor edx, edi
add ebx, ecx
sub edi, ebx
mov ecx, ebx
neg ebx
jmp 0x475d4b
push 0xadd31320
add edi, ebx
mov ebx, 0xb1a7241c
sub edi, ecx
add ecx, 0xb1a79fe2
mov edi, edx
xor edi, ebx
xor edx, edi
shl ecx, 5
jmp 0x477e89
mov esi, 0x183c2e20
add ecx, edx
rol ecx, 0x14
or edi, ebx
and edi, ecx
or edi, ecx
xchg edx, ebx
jmp 0x47789f
push 0xade196e8
xchg ebx, ecx
and edi, ecx
jmp 0x476149
mov esi, 0x183c2e20
xor ecx, ebx
mov ecx, ebx
mov ebx, ecx
xor ebx, 0xb1b48738
mov ebx, edx
mov edi, ecx
xor edx, ebx
xchg ecx, ebx
mov edx, ecx
ror edx, 0xf
jmp 0x476f08
call fcn.00478819
and edx, edi
ror ebx, 5
sub ecx, edi
xchg edi, edx
add ecx, edx
dec ebx
ror edi, 7
sub ebx, edi
sub edx, 0xb1c00386
xor ebx, ecx
jmp 0x476044
pop esi
xchg ecx, ebx
nop
neg ebx
or ecx, edi
dec edx
or ecx, edx
jmp 0x477d9e
call fcn.00478819
sub edx, 0xb1e21472
ror ebx, 0x11
jmp 0x477ba4
call esi
add ecx, ebx
mov edx, ecx
or edi, ebx
add ebx, edi
mov edx, ebx
and ebx, 0xb1f69396
neg ebx
xor edx, ebx
and ecx, edx
xor ecx, ebx
add ecx, 0xb1f7d9bc
neg ebx
xchg edi, ecx
mov edx, ebx
jmp 0x475ae4
call fcn.00478819
or ebx, edx
shl edi, 0x1c
and ebx, edx
and ebx, 0xb1fc3f32
ror edi, 5
bswap ebx
rol ecx, 0x15
rol edx, 0x11
jmp 0x4781fc
pop esi
xchg edi, ebx
or ecx, edi
or edi, ecx
mov ecx, 0xb1fe6fca
or edx, edi
mov edx, edi
jmp 0x47716a
call esi
neg ecx
or edi, ebx
add edi, ecx
xchg edi, ebx
and edx, ecx
xor ecx, 0xb20083f0
xor edx, edi
or edx, ecx
mov edi, edx
xor edx, ecx
jmp 0x478611
pop esi
or ebx, edx
not ebx
sub edi, 0xb204052e
sub edx, edi
jmp 0x475569
pop esi
rol edi, 0x1e
dec ecx
not ebx
shr edx, 9
not ebx
not edi
sub edx, ecx
xor edi, ecx
jmp 0x477795
pop esi
add edx, ecx
neg edx
or ecx, ebx
shr ecx, 0x13
jmp 0x4786a2
call fcn.00478819
and edi, ecx
sub ecx, edi
or ecx, edx
neg edi
and ebx, edi
mov edi, ebx
add ecx, ebx
mov edx, 0xb3dc863c
jmp 0x475614
pop esi
shr edi, 0x1f
and ebx, edi
neg edx
xchg ebx, edi
not edi
or edx, ebx
jmp 0x476ec7
push 0xadd35d52
not ecx
xor edx, 0xb3eb04ba
ror ebx, 0x12
mov edx, ecx
not edi
and ebx, ecx
add edx, ecx
or edx, 0xb3ec8966
jmp 0x475893
pop esi
rol ecx, 0x1c
mov ebx, edx
jmp 0x477e00
push 0xadde61dc
sub edi, edx
xor ebx, edx
mov edx, ecx
and edx, ecx
inc edi
xor ecx, edx
jmp 0x477586
call esi
xor ebx, ecx
mov edx, ebx
inc ebx
and edi, ecx
add edx, edi
xor ecx, ebx
neg edx
xchg edi, ebx
jmp 0x47630e
mov esi, 0x183c2e20
add ecx, edi
sub edx, ebx
add ecx, edi
add edx, ecx
or ecx, 0xb41484e8
not edi
sub edx, edi
xor edi, edx
jmp 0x477a91
mov esi, 0x183c2e20
or ecx, ebx
and edi, ebx
or edx, ebx
xchg ecx, edx
xor edi, 0xb41b0b7a
xchg edx, ebx
mov ebx, 0xb41b8786
xchg edx, ecx
sub ebx, edx
xchg edx, ecx
jmp 0x475a4d
pop esi
mov edx, ebx
and ecx, edx
shr ebx, 0x12
sub edi, 0xb420986e
and ebx, edi
mov edi, edx
add ecx, 0xb4214f00
sub ebx, edx
sub edi, ecx
bswap edi
add ebx, edi
or edx, edi
and edi, 0xb422d398
and edx, ebx
jmp 0x476e4b
call fcn.00478819
xor edi, edx
xor ebx, 0xb49b23bc
and ebx, 0xb49b634e
add ebx, edx
mov edx, ecx
inc ecx
jmp 0x4774a4
push 0xadd6d55c
xor ebx, ecx
xchg ecx, edx
jmp 0x477181
call esi
not edx
neg ebx
sub edx, ebx
mov ecx, 0xb49dd8ea
add ebx, edi
add ecx, ebx
shr edx, 0x1a
xchg ecx, edi
sub edx, ebx
or ebx, edx
sub edi, ecx
mov ecx, edx
sub ebx, edi
add edx, ebx
jmp 0x477c13
pop esi
rol ebx, 0x14
sub ebx, edx
add ecx, 0xb4a15680
mov edi, ecx
bswap edi
or ebx, ecx
shr ebx, 2
inc ecx
bswap edx
shl edx, 9
sub edi, 0xb4a3624c
add ebx, edx
add ecx, ebx
and ecx, edi
jmp 0x47659b
push 0xade64f6e
xchg ecx, edi
sub edx, 0xb4a57df0
mov edi, 0xb4a5ec96
ror edx, 0x15
mov ebx, edi
not ecx
xor ecx, 0xb4a7b75c
xor ebx, edi
xor ecx, edx
mov edx, 0xb4a8f90a
jmp 0x476023
call fcn.00478819
shr ecx, 0x12
add ecx, edx
bswap ebx
xchg ecx, edx
inc ecx
mov ecx, 0xb4b16002
shl edx, 0x13
sub edi, 0xb4b252c8
and edi, 0xb4b2c0e8
mov ecx, edx
xchg ecx, edx
or ecx, edx
shl ebx, 0x19
add ebx, ecx
jmp 0x4754db
call esi
xor edx, 0xb4bedd58
sub ebx, 0xb4bf4a26
add ecx, ebx
shr ebx, 0x1b
mov edx, ecx
shr ecx, 0x1e
sub edx, edi
xchg ecx, edx
xor edx, ebx
mov edx, ecx
xchg ebx, edx
ror ebx, 9
jmp 0x47586a
mov esi, 0x183c2e20
rol ebx, 0xa
xor ebx, 0xb4ca1aae
shr edi, 0x14
and edi, 0xb4caf880
rol ebx, 0xf
sub edi, 0xb4cb79e0
xchg ebx, edi
add edx, 0xb4cc07a8
jmp 0x477bf1
pop esi
or ebx, edi
add edi, edx
mov edx, edi
xchg ebx, ecx
add ebx, ecx
or ebx, edi
dec edi
rol edx, 3
jmp 0x477d5a
pop esi
add edx, ecx
ror ebx, 0xa
mov edx, edi
add edi, 0xb4ee845e
neg ecx
sub edx, 0xb4ef0512
and ebx, edx
ror ecx, 1
add edx, 0xb4efd4b4
xchg ecx, edx
add edx, ebx
xchg ecx, edx
or edi, edx
inc ecx
jmp 0x476ae1
pop esi
sub edx, ecx
xor edi, edx
add edx, edi
sub ebx, edx
sub ecx, edx
or edx, ecx
jmp 0x476727
push 0xadeb9f60
xor edx, 0xb50028c2
shr ebx, 8
add ebx, edi
mov edx, edi
inc ebx
mov edi, ecx
inc edi
or edx, ebx
xor edi, ebx
inc ebx
jmp 0x4763cc
push 0xadde16b0
or ecx, 0xb5146b94
or edx, ebx
and ecx, 0xb514e840
and edi, ecx
add edx, ebx
sub edx, ecx
dec edi
xchg ecx, ebx
mov edi, ebx
ror edx, 0xa
not edx
not edi
xor edx, edi
mov edx, ecx
jmp 0x477f13