Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetFocus
cmp eax, 0xffffff06
jne 0x40106b
call sub.user32.dll_FreeDDElParam
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.shell32.dll_ShellHookProc
call sub.advapi32.dll_CredReadW
call sub.user32.dll_FreeDDElParam
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
call sub.shell32.dll_ShellHookProc
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.user32.dll_FreeDDElParam
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
call sub.user32.dll_FreeDDElParam
call sub.shell32.dll_ShellHookProc
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xffffff0c
jne 0x40110d
call sub.advapi32.dll_CredReadW
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.advapi32.dll_CredReadW
call sub.advapi32.dll_CredReadW
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
call sub.shell32.dll_ShellHookProc
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.advapi32.dll_CredReadW
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.user32.dll_FreeDDElParam
call sub.shell32.dll_ShellHookProc
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.user32.dll_FreeDDElParam
call sub.shell32.dll_ShellHookProc
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.shell32.dll_ShellHookProc
call sub.advapi32.dll_CredReadW
call sub.advapi32.dll_CredReadW
call sub.advapi32.dll_CredReadW
call sub.advapi32.dll_CredReadW
call sub.user32.dll_FreeDDElParam
call sub.shell32.dll_ShellHookProc
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.shell32.dll_ShellHookProc
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
ret
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xfffffee6
jne 0x401178
call sub.user32.dll_FreeDDElParam
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
call sub.advapi32.dll_CredReadW
call sub.advapi32.dll_CredReadW
call sub.user32.dll_FreeDDElParam
call sub.user32.dll_FreeDDElParam
call sub.shell32.dll_ShellHookProc
call sub.shell32.dll_ShellHookProc
call sub.advapi32.dll_CredReadW
call sub.shell32.dll_ShellHookProc
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.advapi32.dll_CredReadW
call sub.user32.dll_FreeDDElParam
call sub.user32.dll_FreeDDElParam
ret
call sub.user32.dll_GetFocus
cmp eax, 0xffffff0f
jne 0x4011de
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
call sub.shell32.dll_ShellHookProc
call sub.shell32.dll_ShellHookProc
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.shell32.dll_ShellHookProc
call sub.advapi32.dll_CredReadW
call sub.shell32.dll_ShellHookProc
call sub.shell32.dll_ShellHookProc
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.user32.dll_FreeDDElParam
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.user32.dll_FreeDDElParam
ret
call sub.user32.dll_GetFocus
cmp eax, 0xffffff30
jne 0x401262
call sub.user32.dll_FreeDDElParam
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
call sub.advapi32.dll_CredReadW
call sub.shell32.dll_ShellHookProc
call sub.shell32.dll_ShellHookProc
call sub.advapi32.dll_CredReadW
call sub.shell32.dll_ShellHookProc
call sub.advapi32.dll_CredReadW
call sub.user32.dll_FreeDDElParam
call sub.user32.dll_FreeDDElParam
call sub.advapi32.dll_CredReadW
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.shell32.dll_ShellHookProc
call sub.ntdll.dll_LdrDisableThreadCalloutsForDll
call sub.advapi32.dll_CredReadW
call sub.user32.dll_FreeDDElParam
ret
jmp 0x4751a1
or ebx, esi
jmp 0x4787fa
pop ebx
shr edi, 0x18
and ecx, esi
add edx, 0xd336834f
xchg esi, edx
and edi, 0xd337612c
xor ecx, edi
sub esi, edx
sub edi, 0xd3389c0c
jmp 0x4780c2
call ebx
xchg edi, ecx
neg edi
xor ecx, edx
xor edi, 0xd33b8d65
xor ecx, edi
add ecx, edi
or edx, 0xd33c27bf
sub esi, edi
or ecx, edx
sub esi, edx
bswap edi
shl edi, 3
dec ecx
xor ecx, edx
shl esi, 0x14
and edi, 0xd33fd66f
jmp 0x4783ab
push 0xd0a0c3b8
sub edi, 0xd3405e43
and ecx, edi
add esi, 0xd3411e4b
shr ecx, 0x12
xchg ecx, esi
add ecx, edx
dec ecx
xor esi, edx
xchg edx, esi
or ecx, edx
mov ecx, edi
jmp 0x47563c
pop ebx
and esi, edx
nop
or ecx, esi
or edi, ecx
rol edx, 5
sub ecx, edx
dec edi
jmp 0x478677
push 0xd0985981
sub edi, 0xd354cad9
or edx, edi
xor esi, 0xd3558c80
sub ecx, esi
xor ecx, edx
mov edi, edx
xor edx, edi
sub ecx, 0xd3579a62
jmp 0x477508
call fcn.00477ac0
mov edi, ecx
or edx, ecx
add esi, 0xd3592175
or edx, esi
add edi, esi
xchg edx, ecx
xchg ecx, edi
nop
add edi, 0xd35b1142
jmp 0x476b6a
pop ebx
xchg edx, esi
and edi, esi
and edi, esi
xor edx, edi
or edi, 0xd3777319
jmp 0x4787d9
mov ebx, 0x2774562b
rol esi, 0x18
xor ecx, esi
not edi
sub edx, ecx
mov edi, esi
xor edx, esi
jmp 0x476aaf
call fcn.00477ac0
add edi, 0xd390c065
and ecx, edx
not esi
add edi, ecx
mov esi, ecx
sub edi, edx
inc ecx
rol edx, 0x1c
jmp 0x477128
call ebx
xor edx, esi
add edx, esi
and edi, edx
shl esi, 0xa
and ecx, esi
or edi, esi
not ecx
and ecx, esi
sub edi, esi
mov edx, esi
mov edx, edi
jmp 0x476cf5
push 0xd09c6b04
or esi, edi
shr edx, 0x15
xchg esi, ecx
xor esi, edx
xor edi, 0xd3b8752a
mov esi, edi
or edi, edx
or esi, 0xd3b90d22
add edi, edx
jmp 0x47727b
pop ebx
and ecx, esi
sub esi, edx
and edi, edx
mov ecx, edx
or esi, ecx
xor edi, edx
sub esi, 0xd3bab5dc
xor edx, esi
or edi, esi
sub ecx, 0xd3bb5b60
jmp 0x47607c
call ebx
and esi, edx
xchg edi, ecx
sub edx, 0xd3cc6e73
and esi, edx
xor ecx, edx
add edx, ecx
not edi
and esi, ecx
jmp 0x477234
push 0xd09e6867
or edx, esi
xor edx, edi
inc edi
add edx, 0xd3d7f958
or edx, edi
bswap edx
add edi, ecx
mov edx, edi
jmp 0x47842b
mov ebx, 0x123b2f04
or esi, edi
and edi, esi
inc edi
neg ecx
sub ecx, edx
or ecx, esi
add esi, edx
and edx, esi
jmp 0x475e33
pop ebx
bswap edi
add esi, ecx
or edi, edx
and esi, 0xd3fc2ea4
add edi, ecx
mov ecx, edx
jmp 0x475a08
call fcn.00477ac0
xor ecx, 0xd41308c3
or edi, edx
and edi, esi
xor ecx, esi
xor edx, ecx
and esi, 0xd4164292
shr edi, 0xc
sub ecx, edi
mov edx, 0xd417cbc2
add edi, esi
jmp 0x477ebc
pop ebx
shr edx, 0x14
or esi, 0xd4429641
xor edi, edx
not esi
add ecx, edi
dec esi
neg ecx
shl esi, 0x1f
xchg ecx, edi
rol edx, 0x16
or edi, esi
ror ecx, 0x19
ror ecx, 0xd
ror edx, 0x19
jmp 0x477c4f
push 0xd09ceb9e
xchg esi, edi
and edx, esi
and edx, 0xd45608ed
or edi, ecx
inc edx
xor edx, 0xd458f3ff
or esi, ecx
xchg esi, edx
jmp 0x4764bc
pop ebx
or edx, esi
add edi, ecx
xchg ecx, esi
mov edx, edi
and esi, 0xd45c3dd8
shr esi, 0xa
sub esi, edi
sub edx, edi
mov edi, 0xd45d2cce
xchg ecx, edi
and esi, edi
sub edi, esi
xor edi, ecx
mov ecx, edi
jmp 0x4777ee
call fcn.00477ac0
xchg edx, ecx
xor edi, 0xd4616acd
inc ecx
add edi, esi
dec esi
sub ecx, edi
sub edx, edi
bswap ecx
or esi, edi
neg edi
jmp 0x4751e4
call fcn.00477ac0
and edi, ecx
mov ecx, esi
xor edi, ecx
dec esi
sub edx, esi
shl edx, 0x17
and edi, edx
mov ecx, edi
sub ecx, esi
jmp 0x477feb
pop ebx
and esi, edi
sub ecx, edi
and edx, 0xd468cbb8
inc esi
mov esi, 0xd4698573
sub edi, esi
jmp 0x4766d2
push 0xd0a23444
xor esi, ecx
add edx, edi
sub edx, ecx
and esi, edx
xor edx, edi
sub esi, edx
not ecx
sub ecx, esi
rol ecx, 2
add ecx, edi
sub ecx, esi
xchg edi, edx
sub esi, edi
jmp 0x47886f
push 0xd09c4196
and edi, ecx
rol ecx, 0x13
ror esi, 0x1f
add ecx, edx
xchg ecx, esi
sub ecx, edx
add esi, edi
xor esi, ecx
or esi, 0xd485c7cd
not edi
jmp 0x47588a
push 0xd0a71a49
sub edi, 0xd48646b5
add edi, ecx
shr edi, 4
xor edx, 0xd486e252
and edi, 0xd487166e
rol edx, 8
sub edi, esi
bswap edi
mov edx, edi
xchg ecx, esi
dec edx
mov ecx, esi
sub edx, ecx
jmp 0x4773d2
push 0xd0ab07b3
and ecx, edx
sub edi, 0xd4893e6a
xchg ecx, esi
sub edx, 0xd489e3a7
and edx, esi
dec edx
xchg edx, edi
bswap ecx
jmp 0x4771e5
push 0xd0a040cb
ror ecx, 0x16
mov edi, ecx
mov edi, ecx
ror edx, 0x1a
and esi, edi
xor esi, edi
dec ecx
jmp 0x47663d
pop ebx
dec edi
xor ecx, edi
xor esi, 0xd49270af
or esi, edx
xchg ecx, edx
xor ecx, esi
xchg edx, ecx
bswap esi
add esi, ecx
mov edi, ecx
mov edx, edi
add edi, esi
bswap ecx
jmp 0x475e92
push 0xd0a2f9cd
shl ecx, 4
and ecx, edx
sub esi, edi
xor edx, ecx
not ecx
rol ecx, 0xb
add edx, esi
and ecx, 0xd49a4641
dec edx
sub esi, ecx
sub edx, 0xd49b3ae7
and edi, edx
and edi, 0xd49be393
jmp 0x475ac5
push 0xd09eeba5
neg edi
shl edx, 0x12
sub edi, ecx
sub edx, edi
and ecx, 0xd4b411dc
dec ecx
or ecx, edi
sub edi, 0xd4b5298e
and esi, edx
neg edx
add edi, esi
mov esi, edi
jmp 0x4770b9
push 0xd0a59448
xchg edx, esi
or edi, ecx
or esi, ecx
mov ecx, 0xd4c18d3a
and edx, ecx
mov edi, ecx
not edi
or esi, 0xd4c2c856
add esi, ecx
inc esi
xor ecx, edi
sub edx, esi
jmp 0x477257
call fcn.00477ac0
sub edx, edi
xor edx, esi
mov ecx, esi
sub ecx, edx
ror esi, 0x1f
sub edi, esi
xor edx, 0xd4c66767
xchg edx, esi
rol edx, 0xc
mov ecx, edx
jmp 0x477450
pop ebx
xchg edi, esi
or esi, 0xd4e72738
xor edi, ecx
shr edx, 8
or edx, edi
inc ecx
or edx, esi
sub edi, ecx
shl ecx, 9
jmp 0x47860e
mov ebx, 0x123b2f04
xor esi, ecx
and ecx, 0xd4ecc706
jmp 0x475dfb
push 0xd0a2a079
neg edi
shl edi, 0x19
sub ecx, edi
ror edx, 0xc
sub edi, esi
rol ecx, 0x17
jmp 0x477bac
push 0xd0a56b6f
add edi, esi
xchg esi, edx
or esi, edi
bswap edi
sub edx, 0xd506bd4c
or edi, 0xd506f13c
or ecx, edx
sub edx, 0xd5075611
sub edi, esi
jmp 0x4762c0
push 0xd0a8cc4d
and ecx, esi
and edi, edx
xor ecx, edi
mov edx, edi
add edi, ecx
and edi, edx
xchg edi, esi
jmp 0x476d92
push 0xd0a06dc1
sub edi, edx
not edx
mov ecx, 0xd509cd1c
xchg ecx, esi
neg esi
dec edx
or edx, esi
or esi, edx
sub edx, edi
xor esi, 0xd50b42cf
or esi, edi
mov esi, edi
and edx, ecx
jmp 0x47862f
mov ebx, 0x2774562b
inc esi
add edi, ecx
xchg esi, edx
xor edi, esi
or esi, ecx
sub edx, edi
or esi, edi
jmp 0x476be7
mov ebx, 0x4132136a
add esi, 0xd512cf8a
shr edi, 1
neg ecx
or esi, edx
add edx, esi
and edi, edx
and edi, esi
ror esi, 0xb
ror edx, 0x1a
mov edi, edx
xchg edx, esi
and ecx, edx
not edi
xor ecx, edi
xor edx, esi
jmp 0x476bfa
push 0xd0adeb24
xchg esi, edi
nop
xchg edx, edi
xchg ecx, esi
mov edx, esi
neg edi
mov esi, edi
not ecx
or edx, ecx
jmp 0x477297
push 0x73da1
dec edx
bswap ecx
and esi, 0xd55f596f
ror edx, 6
or ecx, esi
not edx
jmp 0x47865a
call fcn.00477ac0
and ecx, 0xd56938c9
add esi, 0xd5696ca2
and ecx, esi
rol edx, 5
and edx, esi
mov esi, edx
bswap ecx
rol ecx, 8
xchg edx, ecx
jmp 0x4759c2
pop ebx
neg edi
sub edi, esi
xor esi, ecx
and esi, edx
jmp 0x4751a8
call ebx
xor edi, edx
nop
sub esi, edx
bswap edx
sub esi, ecx
and esi, edx
xor ecx, edi
add ecx, esi
jmp 0x477720
call fcn.00477ac0
sub edi, 0xd586e9da
add edx, esi
nop
jmp 0x4776db
call fcn.00477ac0
add edi, 0xd5884dec
mov ecx, edi
bswap esi
or ecx, 0xd589733c
sub esi, edx
and edx, esi
and ecx, esi
xchg esi, ecx
xchg edx, edi
rol edi, 0xb
sub edx, 0xd58b84a7
jmp 0x477084
push 0xd0aadb1e
xchg edi, ecx
xor edx, ecx
add ecx, edi
xor esi, edx
mov ecx, edx
sub edi, edx
sub edi, esi
mov ecx, 0xd591589e
or esi, 0xd591d61f
dec edi
sub esi, edx
xchg edi, esi
mov edi, ecx
shr edx, 0x15
rol ecx, 2
jmp 0x476021
pop ebx
xor edx, 0xd5937054
neg esi
rol esi, 0x17
or ecx, edx
and edi, ecx
xor esi, ecx
sub edx, esi
xchg edx, ecx
mov esi, 0xd5951bbd
dec edx
or esi, edi
shr edx, 1
mov esi, edx
jmp 0x478129
pop ebx
xchg ecx, esi
shl edi, 0x1d
xor esi, edi
or ecx, edi
sub esi, 0xd59f66ea
inc edx
dec edi
and esi, edx
inc esi
mov edi, 0xd5a1672d
jmp 0x476811
push 0xd0a925b6
sub ecx, esi
add ecx, esi
and esi, edx
not edi
or edx, 0xd5ad026e
xchg esi, edi
and edx, 0xd5ad6dff
or esi, edi
neg ecx
xchg esi, edi
sub edi, edx
add ecx, esi
rol edi, 0x1f
jmp 0x477048
push 0xd0a8f8d6
xor edi, esi
xchg edi, ecx
mov esi, 0xd5af6125
mov esi, 0xd5afa173
and edx, esi
and edx, 0xd5b00998
or edx, esi
neg edx
mov edx, esi
jmp 0x476d65
pop ebx
or ecx, esi
or esi, ecx
sub edx, esi
or ecx, esi
xor edi, edx
inc edi
xor edi, ecx
sub esi, edx
xor esi, edx
sub edx, esi
jmp 0x4782b9
pop ebx
mov esi, ecx
xor esi, 0xd5c4f6e6
rol edx, 0x1f
xchg ecx, edi
add ecx, edx
nop
jmp 0x475dba
push 0xd09ebe25
ror edi, 0x10
add ecx, edx
mov ecx, edx
add edx, esi
or ecx, 0xd5cef9d6
inc esi
rol edx, 0x1f
inc edx
add edi, ecx
dec edi
and esi, edi
jmp 0x476223
push 0xd0a6c452
sub edx, edi
dec esi
and edx, ecx
and ecx, 0xd5e0784f
sub edi, esi
sub edi, ecx
jmp 0x477e67
mov ebx, 0x123b2f04
add edi, 0xd5e158cf
xchg edx, edi
add esi, edi
neg edx
mov edi, esi
or edx, ecx
mov edx, esi
xchg ecx, esi
not edx
or ecx, esi
not esi
mov ecx, 0xd5e39b82
jmp 0x478550
push esp
or ecx, 0xd5e4f0a4
or edi, 0xd5e5242f
and ecx, edi
or edx, edi
or esi, ecx
sub edx, edi
and edx, edi
mov edi, ecx
or edx, 0xd5e6c166
inc edi
xchg ecx, edi
or edx, 0xd5e75f90
or esi, edx
and edi, 0xd5e7c4fc
jmp 0x4780e7
mov ebx, 0x123b2f04
xchg edi, edx
sub ecx, esi
sub edi, edx
and edi, 0xd5e91376
add edi, ecx
bswap esi
add edx, edi
mov edx, ecx
mov edi, esi
or edx, 0xd5eb1ef2
xor esi, 0xd5eb7c26
jmp 0x4762e8
pop ebx
neg edi
add edx, edi
add edi, 0xd5eca7db
xchg ecx, esi
add ecx, edi
add edi, 0xd5ed9be8
xor esi, ecx
mov edx, esi
and edi, 0xd5ee7f19
xor esi, edx
mov ecx, 0xd5ef2bd1
jmp 0x4785f7
call ebx
rol ecx, 0x15
rol ecx, 0x13
xchg esi, ecx
add esi, ecx
add ecx, 0xd5f2c94c
mov esi, 0xd5f2fd7e
jmp 0x4770e5
push 0xd0a69bb8
or esi, edi
not edi
not esi
inc ecx
bswap esi
mov ecx, edi
dec ecx
xchg edx, esi
shl edx, 3
and ecx, esi
or esi, ecx
and ecx, 0xd5f88865
xchg ecx, edx
jmp 0x47702f
pop ebx
xchg esi, edi
add edx, esi
or esi, edi
sub edx, ecx
sub edx, esi
mov esi, edx
or edi, esi
shl edi, 1
neg edi
add edx, 0xd5fdd672
xor esi, 0xd5fe4030
jmp 0x4758af
mov ebx, 0x123b2f04
xchg edi, ecx
add ecx, 0xd601f4bc
jmp 0x477e13
pop ebx
and edx, edi
xchg edi, esi
ror esi, 5
or esi, ecx
nop
rol ecx, 0x17
xchg esi, ecx
mov edx, ecx
or ecx, 0xd607cd1c
or ecx, 0xd60800f9
jmp 0x477e82
mov ebx, 0x123b2f04
xor esi, 0xd60865bc
xchg esi, edi
sub ecx, edi
or edi, esi
xor ecx, esi
and ecx, esi
neg edi
add edx, 0xd60aa2fb
or edx, ecx
jmp 0x475660
push 0xd09c94aa
or edx, ecx
xor edx, edi
sub esi, 0xd60c3940
and esi, ecx
or edx, 0xd60cc9b2
jmp 0x477e38
push 0xd0ae1681
not ecx
bswap edi
xor ecx, edi
and esi, edi
not edx
add edi, edx
inc edi
and ecx, 0xd60f898f
mov edi, ecx
shr edi, 0x1e
add ecx, edi
and ecx, edx
jmp 0x477c19
pop ebx
xchg edi, ecx
and esi, edi
xor edi, esi
jmp 0x47790e
pop ebx
not esi
mov ecx, esi
ror edx, 0xd
shr ecx, 0x12
sub edx, esi
add ecx, edi
jmp 0x475d20
pop ebx
mov edi, ecx
shr edi, 7
or edx, edi
xchg ecx, esi
sub edx, esi
and edi, edx
dec ecx
sub edx, ecx
mov esi, ecx
jmp 0x47719e
pop ebx
and edi, esi
not ecx
inc esi
and edx, edi
neg edx
shl edx, 0x1a
not edx
xchg edx, edi
add esi, edx
and ecx, esi
jmp 0x476095
push 0xd0976ce6
and edi, esi
xchg edx, esi
and edx, edi
ror esi, 0x11
and ecx, edi
shr ecx, 8
sub ecx, esi
xchg esi, edi
sub esi, edi
shr edi, 0xe
xor edx, ecx
xchg edi, esi
or esi, 0xd6325dfb
and edx, esi
jmp 0x477a92
mov ebx, 0x2774562b
xor esi, edx
sub esi, edx
mov edi, 0xd634293b
ror ecx, 5
xor edi, esi
add edx, esi
or ecx, edi
xchg edx, esi
jmp 0x475313
call ebx
xchg ecx, edx
shr ecx, 9
add edi, edx
and esi, edi
xor edi, esi
and edx, ecx
rol esi, 0x1b
sub esi, edx
jmp 0x478443
mov ebx, 0x2774562b
xor edi, 0xd65335b9
or ecx, edx
xor ecx, edx
add ecx, 0xd65459bd
or edx, edi
xchg ecx, edi
inc edi
xchg ecx, edi
not edi
or edi, edx
jmp 0x4775b9
pop ebx
shl edi, 1
and ecx, 0xd65872b4
neg ecx
shl edx, 0x19
or edi, ecx
xor ecx, 0xd6594e31
add ecx, esi
bswap edi
add edi, 0xd659ebed
jmp 0x4765fd
pop ebx
xchg edx, esi
xor edi, edx
sub ecx, 0xd65aa394
add ecx, edi
and esi, ecx
or ecx, edx
xchg ecx, esi
add ecx, edi
and ecx, edx
xor edx, ecx
sub edi, esi
jmp 0x47838d
call fcn.00477ac0
mov edi, 0xd66358bf
xchg edx, esi
shr edi, 7
xor edx, esi
mov esi, 0xd6655bcc
shl edx, 0xc
rol edx, 3
xchg ecx, edi
dec ecx
xor edx, 0xd6676000
sub edi, 0xd667979b
jmp 0x477c6e
pop ebx
sub edi, edx
xchg ecx, esi
add edx, ecx
sub esi, ecx
or esi, edx
mov ecx, 0xd66ba6b0
add edi, 0xd66bda0c
mov esi, 0xd66c0e0e
sub edi, 0xd66c4588
xor ecx, 0xd66c792e
mov esi, 0xd66cad21
jmp 0x4772c9
call ebx
and edi, edx
xchg edi, esi
sub ecx, edx
mov edi, esi
xchg ecx, edx
shr edx, 0x18
shr ecx, 0x11
not edi
mov esi, edx
sub edx, edi
and ecx, 0xd67d8609
jmp 0x477542
pop ebx
add edi, edx
mov edx, ecx
or edx, 0xd6806aa6
bswap edx
sub edi, 0xd680d7ea
mov esi, 0xd6810b94
mov edi, 0xd6813f56
jmp 0x476479
pop ebx
rol edi, 0x1a
ror edx, 3
sub edi, 0xd692bad8
mov edx, 0xd692ee68
bswap edi
and edx, ecx
neg ecx
mov ecx, 0xd693f120
shl edi, 6
add edi, ecx
sub edx, 0xd6948d88
jmp 0x475500
pop ebx
xor esi, edx
or edx, edi
shr esi, 0x1d
or esi, ecx
and edi, esi
and edx, esi
xor edx, 0xd6a1f256
sub edi, ecx
xchg edx, esi
sub esi, edx
sub ecx, edx
shr edx, 9
xchg edi, edx
xchg edx, ecx
ror edi, 1
jmp 0x4772bd
pop ebx
and esi, 0xd6a62619
and edi, ecx
and edi, 0xd6a68ff4
xor edi, edx
sub esi, 0xd6a7008f
or ecx, edi
jmp 0x475af0
push 0xd097c092
bswap esi
add edx, esi
xchg edx, edi
xor edi, edx
inc edi
add edx, ecx
xchg edi, ecx
or ecx, edi
xor ecx, 0xd6c758a5
and edx, 0xd6c7a511
or ecx, edi
bswap edi
neg edx
rol ecx, 8
jmp 0x478309
push 0xd0a2cd37
or esi, ecx
or edx, ecx
xor esi, edi
neg ecx
and edx, ecx
sub edx, esi
and esi, edi
mov edi, 0xd6e02dad
sub esi, 0xd6e08d28
jmp 0x4760d8
mov ebx, 0x2774562b
xchg esi, edi
sub esi, ecx
add ecx, edi
and edi, edx
or edi, 0xd6e67033
and ecx, 0xd6e6a7ed
and esi, 0xd6e6dbb5
sub ecx, esi
or edi, edx
or edx, 0xd6e77276
and ecx, 0xd6e7a620
and edx, ecx
jmp 0x475b92
pop ebx
xchg edi, ecx
xor ecx, edx
mov edi, 0xd6e88cc9
mov esi, edx
add edi, edx
dec edi
xchg edx, edi
mov esi, 0xd6e999a4
dec esi
rol edx, 3
jmp 0x4782f5
call ebx
ror edi, 0x14
inc ecx
xor ecx, edx
shl edi, 0x16
xor esi, edi
mov esi, edi
mov edi, ecx
mov edi, 0xd6ec0641
sub edx, esi
shl ecx, 4
sub edi, ecx
and ecx, 0xd6eced5c
nop
add edx, 0xd6ed56fc
jmp 0x476e96
push 0xd0a49046
add esi, ecx
and edx, esi
xor edx, edi
add ecx, edi
shr edi, 0x15
add esi, edx
mov ecx, edi
and esi, ecx
and esi, edi
jmp 0x476667
call fcn.00477ac0
xor edx, edi
sub esi, ecx
xor edi, edx
and edx, 0xd70b0b99
ror esi, 0x11
sub esi, edi
and edi, esi
mov esi, 0xd70c436d
ror esi, 0x12
jmp 0x478755
push 0xd09cc1c0
xchg edi, ecx
and esi, edx
or esi, 0xd70d6676
and edx, edi
and esi, edi
mov ecx, edi
mov ecx, edx
sub edx, 0xd70ef1ba
sub ecx, edi
mov ecx, edi
mov edx, 0xd70fc73e
xchg edi, ecx
or esi, edi
jmp 0x475d99
push 0xd0a6f153
mov ecx, esi
and edx, ecx
sub esi, edx
rol esi, 0x14
shl esi, 0xd
neg ecx
inc edx
xchg edx, esi
jmp 0x475ff0
pop ebx
sub edx, 0xd712bb52
nop
add edx, 0xd7134e66
sub edi, esi
xor ecx, esi
xchg edi, esi
add esi, edx
ror edi, 0x1b
or edi, 0xd7165133
or edi, 0xd7168427
or edx, esi
or esi, 0xd716eca5
xor ecx, edx
xchg edx, esi
and edi, esi
add edi, esi
jmp 0x47738b
call ebx
mov edi, ecx
or edi, esi
inc esi
dec edi
add edi, ecx
add ecx, edx
or esi, ecx
dec esi
and edx, esi
add ecx, esi
jmp 0x4752da
push 0xd0a8a390
sub edi, ecx
xchg edi, edx
xor edx, esi
add edx, ecx
mov edx, 0xd72714da
sub edi, 0xd7275ee1
or edi, edx
xor edi, esi
mov edx, ecx
jmp 0x476625
call ebx
add edi, 0xd73163a4
xor esi, edx
xor ecx, edi
sub esi, edx
shr edx, 0xc
or ecx, esi
jmp 0x476db8
call ebx
bswap edi
and edi, esi
sub esi, edi
sub ecx, esi
add esi, edi
rol edi, 0xf
mov edx, ecx
xor edx, ecx
add edx, ecx
neg esi
neg edx
xor edx, esi
jmp 0x477606
push 0xd0aaaece
xor edi, 0xd7428d80
and edx, edi
add esi, ecx
sub esi, ecx
or esi, edx
ror edi, 3
and edx, ecx
shr esi, 0x1a
and edi, esi
mov edi, ecx
and ecx, edi
or esi, edx
sub edx, ecx
jmp 0x476c46
pop ebx
or edx, ecx
not esi
or edx, ecx
add esi, edx
and ecx, edx
neg esi
sub edx, 0xd74786dc
xchg edi, esi
ror edx, 0x1b
add edi, edx
mov ecx, edi
bswap ecx
xor edx, edi
jmp 0x47808a
push esp
add edi, edx
and ecx, 0xd749ddda
and esi, edi
xor ecx, esi
not edx
xchg edi, ecx
shl edi, 0xd
xchg edx, ecx
bswap edx
mov esi, edx
dec edi
mov edx, 0xd74d2839
not esi
xor ecx, esi
jmp 0x478110
push 0x40
xchg edi, ecx
shl edi, 0x10
xor edi, esi
add esi, edi
sub esi, edx
xor ecx, edi
mov esi, edi
jmp 0x476a21
pop ebx
or esi, edi
and ecx, 0xd7506c63
shl esi, 0xe
shl esi, 0x13
xor edx, 0xd75119c6
nop
shr ecx, 1
mov esi, 0xd751b9b6
xor edx, ecx
or ecx, edx
or edi, ecx
dec esi
jmp 0x475e4f
pop ebx
and esi, edx
and edx, esi
xchg edi, esi
inc edi
not edi
ror esi, 6
jmp 0x476b2c
pop ebx
neg esi
sub edi, esi
and edi, 0xd7735174
or ecx, edi
and esi, edx
jmp 0x477d12
push 0xd0981405
mov edi, edx
sub esi, edi
xor edx, edi
xchg ecx, edx
shr edx, 0xd
sub edx, ecx
sub esi, edi
and ecx, edi
or esi, ecx
mov esi, ecx
add esi, ecx
dec edx
jmp 0x4752ed
push 0xd0a87715
xor esi, edi
rol edi, 6
ror edx, 0xa
or esi, edx
bswap edx
rol edx, 0x15
and ecx, esi
ror edx, 0x19
jmp 0x477f19
pop ebx
mov edi, esi
xor ecx, edx
shr ecx, 8
mov esi, edx
mov edi, 0xd7806149
and edx, 0xd780ab2f
shl edx, 0x1d
xor ecx, edx
or ecx, 0xd7819a33
xchg esi, edi
jmp 0x4778c4
push 0xd09e95b5
or edx, edi
and edi, edx
xor edx, 0xd7893e8a
sub edi, esi
add edi, ecx
jmp 0x476f36
pop ebx
and esi, ecx
sub ecx, edi
rol edi, 0x1e
bswap edx
xor edi, esi
bswap ecx
xor ecx, 0xd78b49dd
add esi, edi
ror edx, 0x19
sub ecx, edx
mov edx, 0xd78c16c4
inc esi
jmp 0x477323
call fcn.00477ac0
or ecx, edx
ror esi, 0x16
or edi, edx
ror ecx, 0xf
bswap edi
and esi, edi
xchg ecx, edx
and ecx, edi
sub edi, 0xd79e3590
not edi
and edx, edi
jmp 0x477f8e
pop ebx
ror edi, 5
or ecx, edi
or esi, 0xd7aa9c0c
sub ecx, edx
xchg edi, esi
add esi, ecx
jmp 0x477177
pop ebx
mov ecx, 0xd7ab8a8a
xor edx, esi
xor edi, ecx
add ecx, esi
neg edi
xor esi, ecx
rol ecx, 0xc
xor edx, 0xd7ad21ed
add ecx, esi
inc esi
jmp 0x477568
push 0xd0a09695
add edi, esi
inc esi
add edi, ecx
ror ecx, 0xe
or ecx, esi
mov ecx, edi
inc edx
jmp 0x475218
push 0x401400
not edx
add esi, ecx
mov edx, 0xd7b1180c
xor edx, edi
mov ecx, esi
xchg edi, esi
mov edx, edi
xchg ecx, edi
jmp 0x475707
pop ebx
bswap edx
and ecx, edx
xchg esi, ecx
sub edi, ecx
add ecx, 0xd7b344f1
shl esi, 3
shr ecx, 0x13
xchg edx, ecx
jmp loc.0047768d
call ebx
add edx, esi
add edx, 0xd7c32652
xor edx, ecx
and ecx, edi
dec edx
xchg ecx, edi
and esi, 0xd7c43747
add edx, edi
sub ecx, 0xd7c49d69
jmp 0x476c76
pop ebx
and esi, 0xd7cc184a
xor edi, esi
sub esi, edx
and esi, edi
neg esi
xor edi, ecx
sub ecx, esi
xchg esi, edi
xchg edi, esi
shr esi, 0x1e
sub esi, edx
jmp 0x475fcc
push 0xd09724c7
dec edi
ror esi, 0xe
add ecx, esi
add esi, 0xd7d02ac4
xchg ecx, edi
ror esi, 0xd
rol edi, 0x1e
rol ecx, 0x15
and esi, edi
sub edi, ecx
jmp 0x4773a5
push 0xd0a26168
nop
inc ecx
xchg esi, edi
mov edi, 0xd7da46ef
xor edi, esi
neg edi
or edx, esi
and edx, esi
sub esi, ecx
neg edx
add esi, ecx
and esi, ecx
jmp 0x476517