Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
xor esi, ecx
xor ecx, edi
sub ecx, edx
add edx, esi
neg esi
not edi
and esi, 0xa712a6c2
call sub.user32.dll_GetClipboardSequenceNumber
xchg esi, edx
xor edx, esi
rol edi, 0x1e
sub edi, 0xa71412c0
cmp eax, 0xffffff36
jne 0x4010ad
call sub.advapi32.dll_SystemFunction025
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.ntdll.dll_ZwGetWriteWatch
call sub.advapi32.dll_SystemFunction025
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
ret
sub ecx, esi
add edx, esi
add edx, edi
or edi, edx
add edx, ecx
mov esi, ecx
and ecx, edi
call sub.user32.dll_GetClipboardSequenceNumber
xchg ecx, edi
bswap edi
cmp eax, 0xffffff2d
jne 0x40115c
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
call sub.advapi32.dll_SystemFunction025
call sub.advapi32.dll_SystemFunction025
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
ret
sub esi, edx
xor ecx, edi
call sub.user32.dll_GetShellWindow
sub esi, edx
xor edx, edi
mov ecx, edx
shl edx, 0xa
dec edi
and edi, edx
sub edi, edx
cmp eax, 0xfffffee5
jne 0x4011e3
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
ret
xchg edx, edi
bswap edi
and edi, esi
call sub.user32.dll_GetClipboardSequenceNumber
sub edi, edx
and esi, edi
sub edx, edi
xchg esi, edx
sub esi, edi
add edx, 0xa722be71
cmp eax, 0xfffffee3
jne 0x40125a
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.advapi32.dll_SystemFunction025
call sub.ntdll.dll_ZwGetWriteWatch
call sub.advapi32.dll_SystemFunction025
call sub.ntdll.dll_ZwGetWriteWatch
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.kernel32.dll_GetNumaHighestNodeNumber
call sub.ntdll.dll_ZwGetWriteWatch
call sub.ntdll.dll_ZwGetWriteWatch
call sub.advapi32.dll_SystemFunction025
ret
jmp 0x4942d2
sub esi, ecx
xchg esi, ecx
xor esi, edi
sub edx, esi
sub edx, 0xa7b2c778
and edx, 0xa7b317f6
ror edx, 0x1c
jmp 0x4947ba
pop edx
rol ecx, 0x18
and ebx, ecx
neg edi
add esi, edi
xchg ecx, esi
neg edi
and esi, edi
or edi, ecx
add ecx, 0xb2366906
shr esi, 0xd
dec ecx
xchg ecx, edi
rol esi, 0x11
jmp 0x494373
mov edx, 0x2d734e3d
mov edi, 0xb238198f
mov ecx, edi
mov esi, edi
add esi, 0xb2390fdb
shl edi, 0x11
or esi, edi
jmp 0x49450c
pop edx
mov ecx, esi
and ebx, ecx
sub ebx, edi
xor ebx, esi
ror edi, 0x16
add ebx, 0xb240e3e5
inc edi
jmp 0x496631
call edx
xchg ebx, esi
add edi, esi
bswap ebx
or esi, edi
jmp 0x49644e
call fcn.00496cdd
shl esi, 0xd
mov edi, ebx
ror ebx, 0x1a
or ecx, edi
and edi, esi
shl esi, 3
and ecx, edi
and edi, ebx
ror esi, 0xe
xchg edi, ebx
jmp 0x4965d3
call fcn.00496cdd
shl edi, 0x11
and ecx, ebx
and ebx, ecx
shl edi, 0x19
sub ecx, ebx
ror ebx, 0x1b
or edi, 0xb27041e9
add esi, edi
sub ebx, edi
xchg ebx, esi
inc ebx
mov esi, ecx
add edi, esi
inc ecx
jmp 0x496c45
pop edx
xchg edi, ecx
rol edi, 7
sub edi, ecx
mov ecx, ebx
xchg ebx, esi
xchg ecx, edi
and edi, 0xb27e7869
or ebx, ecx
rol ebx, 0x14
neg edi
jmp 0x49568a
push 0xa7c93250
or ebx, edi
or edi, ebx
jmp 0x495d80
mov edx, 0x123b2f04
and edi, esi
xchg ecx, edi
ror esi, 0x1a
jmp 0x496501
call edx
sub esi, edi
xor ecx, esi
bswap ebx
xchg ebx, edi
xor esi, 0xb2914a83
mov esi, ebx
and edi, 0xb291f682
sub edi, ecx
jmp 0x495672
push 0xa7cbab11
sub ebx, edi
add ecx, esi
sub ebx, ecx
sub ecx, ebx
ror esi, 0xa
not esi
xor ebx, edi
mov ecx, ebx
and ecx, ebx
and edi, ecx
shl edi, 0x16
xor esi, edi
sub esi, 0xb29e3a62
jmp 0x4966be
pop edx
bswap ebx
sub ebx, ecx
mov ecx, 0xb2ad01ad
neg esi
or edi, ecx
jmp 0x4968dd
push 0xa7b7939c
shr ebx, 0xa
sub ebx, edi
xor esi, 0xb2b13d93
bswap ebx
add esi, edi
mov edi, esi
add ebx, ecx
xor ebx, edi
ror edi, 4
jmp 0x4960b5
pop edx
xchg ebx, ecx
or esi, 0xb2c189cc
or ecx, esi
mov ebx, edi
inc ebx
xor ebx, esi
add edi, ebx
mov edi, ecx
or ecx, esi
mov edi, esi
shr esi, 0x12
jmp 0x494ccd
call fcn.00496cdd
mov esi, ebx
and edi, esi
ror ecx, 0x16
xor edi, esi
mov edi, esi
and esi, edi
ror edi, 0x1c
add ebx, edi
jmp 0x494670
call edx
or ecx, esi
xchg ecx, esi
xchg ebx, esi
or ebx, 0xb2d84317
neg edi
mov ecx, 0xb2d96d7d
bswap ebx
or edi, ecx
xor ebx, 0xb2db3d48
xor ecx, 0xb2dbcdea
shr ecx, 2
jmp 0x4964e8
push 0xa7c8fd0b
shr ebx, 2
sub ebx, esi
and ebx, esi
dec edi
mov edi, ecx
and ecx, esi
mov esi, ecx
xor ecx, edi
mov edi, ebx
sub edi, 0xb2e51b90
mov edi, ebx
and edi, ebx
or esi, ecx
jmp 0x4945b1
call edx
xchg ecx, esi
sub esi, ebx
not esi
not ebx
inc ecx
rol ecx, 0x17
and edi, ecx
not esi
add esi, ebx
jmp 0x4956fd
push 0xa7bf25c8
and edi, 0xb2f7c592
ror ecx, 0x1f
or esi, ebx
xor ecx, 0xb2f8b967
and esi, ebx
xor ebx, ecx
shl edi, 0x15
mov ebx, 0xb2fb1bb9
jmp 0x496baf
call edx
add esi, 0xb30e29d0
and edi, esi
inc ebx
or ecx, 0xb30f8e14
sub ecx, ebx
inc esi
jmp 0x49674e
mov edx, 0x2d734e3d
neg ecx
sub edi, ecx
add ebx, esi
mov edi, ebx
neg ebx
add ecx, edi
and edi, 0xb3128361
shl ebx, 0x1f
dec esi
and esi, edi
ror esi, 2
ror ebx, 0x16
or edi, ecx
sub edi, ecx
and ebx, esi
jmp 0x4960d0
mov edx, 0x123b2f04
xor esi, 0xb3157eae
add edi, 0xb315d046
and edi, 0xb316239e
mov edi, esi
add edi, ecx
sub esi, edi
shl ecx, 0x1c
xchg ecx, edi
rol edi, 6
xchg ebx, edi
jmp 0x4948cf
push 0xa7c15983
ror edi, 0x10
add edi, ebx
rol ebx, 0x14
add edi, ecx
neg ebx
rol ebx, 0x14
mov esi, 0xb3380846
xchg ebx, edi
and edi, ecx
or ebx, 0xb338f994
jmp 0x494ae6
pop edx
add ecx, ebx
mov ebx, esi
add edi, ebx
or ecx, edi
sub ebx, 0xb33b64fd
rol ebx, 0x18
ror ecx, 3
not ecx
jmp 0x49593c
pop edx
mov ecx, 0xb3478330
and edi, ebx
and edi, ebx
xor ecx, ebx
sub ebx, edi
jmp 0x4955e6
pop edx
mov esi, 0xb361098d
xchg edi, ebx
xor ebx, 0xb361a980
and edi, 0xb361f88a
shl ecx, 0x13
or edi, esi
add esi, 0xb362ea33
sub esi, ecx
and ecx, edi
mov ecx, esi
xchg edi, ebx
add ecx, esi
mov ecx, 0xb364ca28
shr esi, 0x1d
jmp 0x494e7a
push 0xa7d0a4bf
bswap ecx
mov esi, ebx
bswap edi
xor ebx, edi
sub ecx, ebx
not ecx
jmp 0x495c50
push 0xa7cb73df
xchg ecx, esi
sub esi, ecx
jmp 0x4946da
push 0xa7c3994e
add esi, ebx
sub ebx, edi
ror ecx, 0x17
add esi, ebx
or edi, 0xb3748fe8
xor esi, ecx
or ecx, edi
xor edi, ebx
shr esi, 0x1c
mov ebx, 0xb3761f51
sub edi, ecx
jmp 0x49607d
pop edx
sub edi, 0xb376d957
or ecx, ebx
mov ecx, 0xb377771a
shr esi, 2
and edi, 0xb3781821
ror esi, 0xa
not edi
sub ecx, ebx
and ecx, edi
sub edi, ecx
bswap ecx
xchg esi, ecx
jmp 0x4958c7
push 0xa7c8c455
add ecx, edi
xchg ecx, edi
or esi, ebx
xor ecx, edi
shr ebx, 0xd
xor edi, ebx
xchg ecx, ebx
jmp 0x494943
push 0xa7bba878
rol esi, 0xc
sub ebx, ecx
add edi, ecx
xor ebx, 0xb38c5792
dec ecx
mov esi, edi
xchg edi, esi
and ebx, edi
xor edi, ebx
jmp 0x495a2b
call fcn.00496cdd
and ebx, edi
inc esi
inc ebx
add ecx, ebx
jmp 0x494acd
pop edx
xor ecx, ebx
sub edi, ebx
add esi, 0xb3a2a2c5
or edi, ecx
xchg esi, ecx
add edi, ebx
sub edi, esi
xor edi, 0xb3a4ab1c
add ecx, esi
add esi, ecx
add esi, edi
add ebx, edi
or esi, ebx
mov edi, ecx
neg edi
and esi, ecx
jmp 0x495801
push 0xa7cdee8e
mov ecx, esi
and ecx, esi
rol ebx, 9
xor edi, ebx
mov edi, ebx
jmp 0x495499
pop edx
and ebx, ecx
inc ebx
neg ebx
xchg ebx, esi
mov ebx, edi
or edi, ebx
sub ecx, ebx
mov esi, edi
add ecx, 0xb3beb520
xor ecx, edi
sub edi, ecx
inc esi
jmp 0x49634a
mov edx, 0x123b2f04
dec ebx
add ecx, 0xb3c141fa
mov esi, edi
or esi, edi
not ebx
or ebx, 0xb3c2881b
and edi, 0xb3c2dbda
jmp 0x49666c
pop edx
or edi, ebx
xchg esi, ebx
xor edi, 0xb3c87641
and ecx, 0xb3c908d9
and ebx, ecx
not ebx
sub ebx, ecx
or ecx, esi
and ebx, ecx
add edi, esi
inc esi
jmp 0x496847
push 0xa7c4764e
sub esi, 0xb3cdeb52
add ecx, ebx
add edi, ebx
xchg esi, edi
sub ebx, 0xb3d03e04
mov ecx, ebx
jmp 0x49433b
push 0xa7cdb953
shr esi, 2
dec edi
or ecx, ebx
and ecx, ebx
mov esi, ecx
dec ecx
rol edi, 0x1b
xchg edi, ecx
not esi
or ebx, 0xb3d703ea
jmp 0x49501e
mov edx, 0x123b2f04
or esi, ecx
inc ecx
xor ebx, esi
and edi, ecx
xor esi, 0xb3e4fa3f
add edi, esi
inc esi
inc ebx
and esi, edi
or edi, 0xb3e805ba
and ebx, ecx
jmp 0x496544
pop edx
bswap esi
and edi, 0xb3f46b68
add ebx, edi
mov ebx, 0xb3f506c2
ror ecx, 0xf
and esi, ecx
sub ecx, esi
add edi, ebx
dec edi
xor esi, 0xb3f6f0f5
neg esi
jmp 0x496868
call fcn.00496cdd
add esi, 0xb4011ca6
or esi, edi
shl ecx, 4
and edi, 0xb4021abc
rol ecx, 0x10
sub ecx, ebx
or ebx, ecx
jmp 0x495afb
pop edx
mov ebx, 0xb420b004
and esi, ebx
xor esi, 0xb4215a5b
sub ebx, edi
and ebx, edi
add ebx, edi
add esi, ecx
add edi, ecx
jmp 0x496826
push 0xa7ce2694
or ecx, edi
add esi, edi
shl edi, 0x11
and esi, edi
mov esi, ebx
mov edi, esi
and ecx, esi
or ebx, ecx
xchg ecx, ebx
jmp 0x49659d
mov edx, 0x2d734e3d
shr ecx, 0x1a
mov ebx, ecx
add esi, ecx
not esi
sub esi, edi
rol ecx, 0xe
mov edi, esi
shl esi, 8
add ecx, 0xb42c53a9
or edi, 0xb42ca2a7
xor ecx, 0xb42cf701
sub ecx, esi
mov esi, 0xb42d95d8
jmp 0x495eae
pop edx
neg ecx
neg ecx
sub esi, ebx
and esi, 0xb42f0147
neg ebx
xchg esi, ecx
xor ebx, edi
shr edi, 0x15
add esi, ecx
jmp 0x495d1f
pop edx
and esi, 0xb4405113
shr ecx, 0xc
xchg edi, ebx
ror ebx, 0xf
xchg esi, ebx
jmp 0x494f09
pop edx
add esi, ecx
mov ecx, ebx
ror edi, 0x18
neg edi
sub ecx, esi
xchg edi, ebx
and ecx, edi
ror esi, 0xf
not ebx
jmp 0x494fb2
pop edx
ror esi, 0x1a
shl ebx, 0xa
shl ecx, 1
neg ecx
not esi
mov edi, esi
sub ecx, edi
inc edi
and ecx, 0xb44a3b60
or esi, ecx
jmp 0x495bfa
pop edx
shr ebx, 0x18
xor edi, ebx
xor ecx, esi
neg ebx
or ebx, esi
mov ecx, edi
ror esi, 0xf
neg esi
jmp 0x49583b
push 0xa7c88ab7
add esi, ecx
and ecx, ebx
xchg esi, edi
and esi, ecx
mov edi, 0xb4527d15
sub edi, ecx
sub ebx, edi
sub edi, ecx
xchg ebx, ecx
rol ebx, 0xe
mov ebx, 0xb454fbc9
xor ebx, edi
jmp 0x494ece
push 0xa7beedde
mov ecx, 0xb458f781
xor ebx, esi
xor ebx, esi
add esi, ebx
dec ebx
xchg ebx, esi
not esi
add esi, ebx
xor ebx, 0xb45bf221
or ecx, esi
sub ecx, ebx
jmp 0x4949ff
pop edx
sub edi, ebx
or edi, 0xb45d4a93
xor esi, ebx
sub ecx, 0xb45df6bd
mov esi, 0xb45e46d0
or ecx, esi
shr esi, 6
add edi, ebx
ror edi, 0x16
jmp 0x49635c
push 0xa7b97e9d
xchg ecx, ebx
and ebx, esi
jmp 0x495d98
pop edx
mov ebx, ecx
bswap esi
xor ebx, 0xb4735254
xchg esi, ecx
mov esi, ecx
mov edi, 0xb4744a80
jmp 0x4961b3
push 0x40
mov esi, ebx
xor esi, ebx
mov edi, 0xb4756081
or edi, 0xb475b214
xor ecx, ebx
mov edi, esi
xchg ebx, edi
and esi, ecx
jmp 0x495b9f
pop edx
or esi, ecx
and ecx, edi
xchg edi, esi
sub edi, ebx
add edi, ebx
add edi, esi
jmp 0x4963e6
mov edx, 0x4132136a
xchg ebx, esi
xor ecx, esi
xchg ecx, ebx
dec edi
add edi, ebx
mov ecx, edi
mov esi, ecx
xchg ecx, esi
jmp 0x495feb
pop edx
mov ebx, edi
xor ebx, edi
and ebx, ecx
sub edi, 0xb484915d
jmp 0x49547c
pop edx
and esi, ebx
or edi, esi
or ecx, edi
xor esi, ebx
and edi, ecx
xor ebx, ecx
add esi, 0xb492c840
sub ebx, edi
and ecx, 0xb4939633
sub ecx, 0xb493e6ec
xchg esi, ebx
rol esi, 3
jmp 0x496bc9
push 0xa7bbe062
mov esi, ecx
xchg edi, ebx
add ecx, esi
xor edi, ecx
sub edi, ecx
sub ecx, 0xb4b013b0
or ebx, 0xb4b0ba84
ror esi, 0x15
jmp 0x496427
call edx
sub esi, edi
xor ebx, esi
inc ebx
sub edi, ecx
sub ecx, edi
xchg ebx, esi
jmp 0x4955fc
push 0xa7d2b0a9
and ecx, ebx
mov ecx, esi
xchg ecx, esi
xchg ecx, edi
mov ecx, esi
jmp 0x4969f3
push 0x92ed2
not ecx
or ebx, 0xb4dd3b8b
xor ecx, ebx
ror ecx, 1
bswap edi
xor esi, 0xb4de8d7f
xor ecx, 0xb4dedf36
shr edi, 0x1a
xchg ecx, esi
neg edi
ror esi, 0xf
jmp 0x495ef7
pop edx
dec esi
or esi, 0xb4e4cd1a
xor ecx, ebx
mov edi, ebx
jmp 0x496912
push 0xa7d0dcb3
and edi, esi
mov ebx, 0xb4effbdc
add ecx, 0xb4f04a5b
shl edi, 1
ror ebx, 1
or edi, 0xb4f14f25
or edi, esi
not esi
xor ebx, edi
xor ecx, ebx
jmp 0x49460c
pop edx
xchg ebx, esi
and ebx, esi
shl ecx, 0x12
sub ebx, ecx
bswap edi
shr ebx, 0x10
dec ebx
sub ecx, ebx
mov esi, ecx
dec ebx
and edi, ebx
jmp 0x495892
mov edx, 0x2d734e3d
neg ecx
or ecx, 0xb51216df
sub edi, esi
sub esi, edi
xor ebx, esi
jmp 0x494fa2
push 0xa7b9b58c
xchg ebx, ecx
mov ecx, esi
shr ecx, 0xb
bswap ecx
jmp 0x4964c2
push 0xa7c44012
xor ebx, 0xb514de4b
mov ebx, edi
inc ecx
xor ecx, ebx
ror ecx, 0x1e
jmp 0x495108
pop edx
inc ecx
bswap edi
sub ecx, ebx
add esi, 0xb51793c0
jmp 0x494842
mov edx, 0x2d734e3d
sub ebx, edi
or esi, edi
not esi
or esi, 0xb5248714
xor ecx, edi
dec ebx
jmp 0x494428
pop edx
inc esi
shr ebx, 0x11
or edi, ecx
mov ecx, esi
dec ebx
bswap edi
neg ecx
sub esi, ecx
sub esi, ebx
not edi
add ecx, ebx
jmp 0x495081
call fcn.00496cdd
sub esi, 0xb52e0232
or ebx, 0xb52e603f
jmp 0x496973
push 0x401400
sub ebx, edi
and edi, 0xb5327fcb
xor ebx, ecx
and ebx, edi
dec ecx
xchg ebx, edi
or ecx, 0xb5341ad6
or ebx, ecx
and ebx, 0xb534baab
jmp 0x496718
call fcn.00496cdd
sub edi, ebx
and ebx, ecx
and edi, esi
mov edi, 0xb54a55c1
mov edi, ebx
mov ebx, edi
neg ecx
neg ebx
jmp 0x496965
push 0xa7c3d054
or edi, 0xb557e16a
and ecx, edi
shr ecx, 0x10
add esi, ecx
mov edi, ebx
sub edi, esi
sub esi, ebx
shr esi, 5
add esi, edi
jmp 0x4967e3
pop edx
or ecx, edi
and esi, ecx
xchg edi, ecx
and esi, ebx
shr ebx, 5
xor ebx, edi
dec ebx
add edi, esi
jmp 0x494789
push 0xa7b7e16a
xchg edi, ebx
shr ebx, 0x14
and ebx, ecx
shl edi, 0xb
and esi, edi
rol ebx, 0xa
xor ebx, esi
jmp 0x4954dd
call fcn.00496cdd
mov edi, ecx
not ecx
xor ecx, esi
xor edi, esi
shl edi, 0x17
inc esi
or edi, ebx
jmp 0x4949a0
push 0xa7cb0011
xor ebx, 0xb566cefb
add ebx, edi
rol ebx, 0x15
and edi, ecx
rol esi, 0x17
xor esi, ecx
sub ecx, edi
sub edi, ebx
xor edi, ecx
xor esi, ecx
sub edi, ecx
rol ebx, 5
mov esi, edi
bswap ebx
xchg ebx, esi
sub ebx, ecx
jmp 0x4966d6
pop edx
or esi, ebx
mov edi, ebx
xchg edi, ecx
ror esi, 0x1b
and esi, ebx
neg ecx
mov ecx, ebx
add ecx, ebx
xor edi, 0xb5790bc9
jmp 0x496d81
push 0xa7beb667
xor esi, ecx
neg ebx
and ebx, esi
xor ecx, esi
mov esi, edi
and esi, edi
xor ebx, edi
add esi, edi
or edi, ebx
or edi, 0xb57e1343
add ebx, edi
inc ebx
jmp 0x4956d7
pop edx
inc ebx
add ecx, ebx
add ecx, edi
sub edi, 0xb5879389
xchg ebx, esi
xor esi, 0xb58832d8
shr edi, 0x17
and ebx, 0xb588e332
neg ebx
jmp 0x495513
push 0xa7d2771c
xor ecx, esi
neg ecx
and ecx, ebx
xchg ecx, ebx
jmp 0x495b73
push 0xa7c276e2
mov ecx, 0xb59c52c5
add ecx, ebx
shl esi, 0xc
xor edi, ecx
xor edi, ebx
and ecx, edi
xchg ecx, edi
or esi, edi
dec ecx
or ebx, edi
shr ecx, 5
shr ecx, 0xf
mov esi, 0xb5a08d49
rol ebx, 0x1d
jmp 0x4950a1
call fcn.00496cdd
shr ecx, 0x1b
shl esi, 0x12
bswap esi
and ebx, esi
inc ecx
or ebx, esi
or edi, esi
rol ebx, 0x17
jmp 0x496bf4
push 0xa7be7fcc
shr edi, 0x10
xor ebx, esi
or esi, 0xb5a8831d
xor esi, ecx
xor ebx, edi
shr ecx, 0xa
jmp 0x4961e2
pop edx
neg esi
ror esi, 0x1b
or esi, ecx
add ebx, ecx
add ecx, ebx
sub ecx, esi
and esi, ecx
xor ecx, esi
jmp 0x495634
push 0xa7bc17ad
add ecx, ebx
bswap edi
mov ecx, 0xb5b15a1e
mov esi, 0xb5b1aaa7
sub edi, 0xb5b1fda5
xchg ecx, esi
add edi, ecx
neg edi
ror edi, 8
jmp 0x496d9d
pop edx
rol edi, 0xf
xchg edi, ecx
xor ecx, esi
or ecx, 0xb5b4b411
and esi, edi
and ecx, ebx
ror edi, 0xa
xor ebx, esi
jmp 0x495e93
push 0xa7b9eb26
and ecx, edi
xchg ecx, esi
and ebx, edi
add ebx, esi
neg esi
sub esi, ecx
not edi
jmp 0x4965f1
pop edx
xchg ebx, ecx
add ebx, ecx
and ebx, esi
mov ecx, esi
sub edi, ecx
or edi, ebx
and ecx, esi
mov ecx, 0xb5c4523c
jmp 0x494e51
call fcn.00496cdd
xor edi, ebx
and edi, 0xb5c5110c
shr ecx, 0xd
sub esi, edi
inc edi
inc edi
xchg edi, ecx
jmp 0x4943d5
call fcn.00496cdd
xchg edi, ecx
xor ecx, 0xb5cb6fd2
ror esi, 0x11
neg ebx
jmp 0x49680c
push 0xa7ce5e32
bswap edi
xor esi, edi
and edi, esi
sub esi, ebx
xor esi, edi
inc ebx
and esi, ebx
add edi, ecx
inc ecx
jmp 0x494b14
call edx
shl ebx, 2
xor ebx, edi
add ecx, edi
sub esi, edi
neg esi
and ebx, ecx
xor edi, ecx
sub edi, ebx
add ebx, esi
add edi, esi
and ebx, esi
jmp 0x49526c
mov edx, 0x123b2f04
neg esi
ror esi, 0x13
ror edi, 0x11
add edi, 0xb5dea032
neg edi
add esi, edi
not esi
and esi, ecx
and esi, ebx
mov edi, 0xb5e0ebcd
sub ebx, 0xb5e13ab2
jmp 0x4963ae
push 0xa7b946c8
xor ebx, esi
add esi, ecx
xchg esi, ecx
sub edi, esi
jmp 0x495746
call fcn.00496cdd
xchg ecx, ebx
sub ecx, ebx
xor ebx, ecx
or ecx, 0xb5ea9180
neg ebx
mov edi, 0xb5eb33ee
xchg ebx, esi
mov esi, 0xb5ebd3df
and edi, ebx
not esi
or ebx, 0xb5ecc20d
jmp 0x4948eb
mov edx, 0x2d734e3d
or ebx, edi
inc ebx
xchg edi, ecx
rol ebx, 0x13
sub edi, ecx
sub ebx, ecx
and ecx, ebx
jmp 0x4952fc
push 0xa7cb3a52
mov ebx, ecx
mov esi, edi
add ebx, 0xb5f4ea66
mov ecx, 0xb5f53ad5
xor esi, 0xb5f58c7b
xchg esi, ebx
xor ebx, esi
or edi, ebx
mov edi, 0xb5f6d65f
dec edi
add ebx, esi
dec edi
jmp 0x494e0a
call edx
sub edi, 0xb5fa5683
sub ecx, 0xb5faa905
or edi, ebx
and ecx, 0xb5fb4710
sub esi, 0xb5fb99d0
not esi
xor ecx, esi
mov ebx, 0xb5fc946e
sub esi, ebx
add ecx, ebx
and esi, edi
xor ecx, edi
not edi
xor edi, ebx
jmp 0x494591
pop edx
or edi, esi
or ecx, esi
sub ebx, esi
and esi, ebx
sub ebx, edi
add ebx, edi
jmp 0x494c47
push esp
mov ebx, 0xb603bb87
and ecx, ebx
or ebx, ecx
xor ecx, 0xb604a4d1
bswap ebx
xor ebx, esi
inc edi
and ecx, edi
inc esi
inc edi
mov ecx, 0xb6075922
and ecx, edi
add ecx, 0xb607f755
xchg edi, ecx
jmp 0x49581a
push 0xa7c40b0c
mov ecx, edi
and ebx, esi
mov ecx, esi
xchg ecx, ebx
xor esi, ebx
or ebx, edi
add esi, edi
rol ecx, 0xa
xor ebx, ecx
add ebx, esi
or edi, 0xb612bcf3
bswap ebx
or edi, ebx
jmp 0x495dab
call edx
xor ebx, 0xb613c469
shl esi, 1
or ebx, ecx
sub esi, ebx
or ecx, ebx
and edi, ecx
and esi, edi
jmp 0x494dad
pop edx
not ebx
or ebx, 0xb616bea6
add ecx, edi
not edi
neg ecx
shl edi, 7
add esi, 0xb6185f75
or esi, edi
mov ecx, ebx
jmp 0x4963ca
pop edx
mov edi, esi
xor ecx, 0xb61a12b9
or ecx, esi
xor ebx, esi
xor ecx, 0xb61b1f96
or edi, ecx
add ebx, esi
or esi, ebx
ror esi, 0xa
jmp 0x49625c
pop edx
and ebx, esi
add ebx, esi
shl esi, 0x1d
sub ebx, 0xb61db61e
xor ecx, 0xb61e097b
jmp 0x49609f
pop edx
xor edi, esi
bswap esi
shl ebx, 0x18
sub edi, ecx
dec ecx
sub esi, ecx
and ecx, edi
xchg edi, ecx
dec edi
jmp 0x494c1f
push 0xa7d06bc1
add ebx, edi
xchg esi, edi
xchg ecx, edi
mov ecx, esi
xor edi, ebx
xor ebx, edi
xor edi, esi
mov edi, 0xb631122d
add edi, ecx
xor ecx, esi
jmp 0x494df4
push 0xa7bc8017
ror ebx, 0x1f
or esi, ecx
and ebx, esi
and ecx, 0xb6337d27
shr edi, 0x14
or esi, 0xb6342bbb
xor esi, 0xb6347a95
add edi, ecx
sub edi, esi
sub esi, 0xb635681b
sub esi, ecx
jmp 0x4951e1
push esp
or ecx, esi
and edi, 0xb6367ca4
jmp 0x49677b
call edx
shr edi, 3
bswap esi
sub ecx, 0xb637ca94
xchg edi, esi
shl esi, 0xc
xchg esi, ebx
and esi, 0xb639464c
xor esi, ebx
nop
or ebx, edi
and ebx, 0xb63a845e
jmp 0x494315
push 0xa7d2ebaa
xor ebx, esi
and ecx, 0xb6438059
xchg edi, ecx
mov esi, edi
jmp fcn.00494359
push 0xa7bf5b93
mov esi, ecx
xor ecx, edi
xor edi, esi
xor ecx, 0xb670443d
xor edi, ecx
xchg esi, ebx
jmp 0x495e36
pop edx
add esi, ecx
shr esi, 0x16
add ecx, edi
mov esi, ecx
mov edi, ebx
nop
or edi, 0xb673a405
xchg esi, ecx
and ebx, ecx
jmp 0x49611f
call edx
dec edi
and ebx, esi
mov esi, 0xb67711ef
neg ebx
or ecx, ebx
xor edi, 0xb6780c68
and edi, esi
mov ebx, edi
jmp 0x495dc3
call edx
or edi, ebx
add ecx, edi
or edi, 0xb67f9397
and ebx, 0xb67fe229
bswap ecx
and edi, ebx
or edi, esi
xor ecx, 0xb6812f53
jmp 0x4950e5
push 0xa7cd7f21
sub ecx, ebx
mov ecx, ebx
inc ebx
shr esi, 0x17
or edi, ecx
or esi, edi
add esi, 0xb6a1e227
jmp 0x495137
push 0xa7bc4a8d
xchg ecx, ebx
not ecx
and edi, 0xb6a2e8ba
neg esi
sub ecx, ebx
xor edi, esi
sub ecx, edi
xchg esi, ecx
add esi, ebx
jmp 0x496933