Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
inc edx
xor ecx, edx
xchg esi, edi
and edx, esi
call sub.user32.dll_GetMenuCheckMarkDimensions
add ecx, edi
and edx, esi
or esi, edi
bswap edx
not edx
add ecx, 0x5fd40f67
mov edx, edi
cmp eax, 0xffffff24
jne 0x4010ac
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
ret
mov edx, 0x5fda39b0
sub ecx, esi
or edi, esi
add esi, edi
mov esi, edi
sub edx, esi
sub ecx, edx
xor esi, 0x5fdba594
call sub.user32.dll_GetMenuCheckMarkDimensions
sub edx, esi
cmp eax, 0xfffffeeb
jne 0x40115d
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
ret
add esi, edi
rol edx, 0x10
shr edx, 0x19
call sub.kernel32.dll_GetProcessHeap
rol edx, 0x1a
or esi, ecx
add ecx, edi
xchg esi, edi
sub edi, esi
xor ecx, esi
cmp eax, 0xffffff0c
jne 0x4011d8
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
ret
add esi, ecx
rol esi, 0x13
xchg ecx, edx
call sub.kernel32.dll_GetProcessHeap
sub edi, ecx
xor edx, ecx
neg edi
or ecx, edi
inc ecx
or ecx, esi
cmp eax, 0xffffff23
jne 0x40126e
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
call sub.ntdll.dll_RtlAddAccessDeniedAce
call sub.kernel32.dll_IsBadHugeWritePtr
ret
jmp 0x4941ae
add esi, 0x61227918
or esi, 0x6122b003
or edi, edx
and ecx, edx
rol ecx, 0x18
xor esi, edi
rol edx, 7
xor ecx, 0x61290407
jmp 0x496fb8
call esi
ror ecx, 9
inc ecx
and ebx, edx
and ecx, 0x6821c348
mov ebx, edi
xor edi, ecx
mov ecx, edi
xor ecx, ebx
shl edi, 0x11
mov edi, ebx
bswap edi
add edx, edi
or edi, ecx
jmp 0x494365
pop esi
shl ebx, 0x1a
and ecx, 0x6831b8e6
xchg edx, edi
inc edi
or ecx, ebx
sub edx, ecx
jmp 0x496996
call esi
mov edi, edx
add ebx, ecx
mov ebx, ecx
add ecx, 0x6833b73b
or edi, ecx
neg edi
or edx, 0x68374654
add edx, edi
mov edx, 0x6837cdb9
not edx
or ecx, edi
or ebx, edi
add ecx, edx
and ecx, 0x6838fda4
jmp 0x4954f3
push 0x92dae
mov edx, ebx
or edx, ebx
or ecx, 0x683fd95d
xor ecx, edx
add edi, edx
and edx, edi
jmp 0x494943
call fcn.00495a20
neg edi
xchg edi, ecx
xchg ecx, edi
xchg edx, edi
xor ebx, edx
rol edi, 7
jmp 0x495568
push 0x613c36e8
rol ebx, 0xb
not edx
mov ecx, ebx
or ebx, ecx
or ebx, edx
rol edx, 8
dec edi
shr edx, 0x1b
sub edx, ebx
jmp 0x4973ee
call esi
rol edi, 0x10
and edi, ebx
xchg edx, ecx
and ecx, 0x68591bf6
dec ebx
and edi, ebx
rol edx, 0xd
dec ecx
mov ecx, edx
neg edi
shl edx, 0xb
xchg ebx, edx
jmp fcn.00494c8b
pop esi
xor ecx, ebx
xor ecx, edi
add ebx, 0x685bfe2b
xchg ebx, edx
add ecx, edi
mov edi, edx
rol ebx, 0x14
dec ecx
nop
and ecx, 0x685dbb35
jmp 0x494afa
pop esi
xchg edi, ecx
xchg ecx, ebx
rol ecx, 0x11
and edx, edi
sub edi, ecx
xor edi, edx
xchg edx, ebx
sub ecx, edi
mov ecx, 0x68656dfa
shr edi, 7
rol edx, 0x13
mov ecx, ebx
jmp 0x496976
push 0x612ff9eb
xchg edx, edi
add edx, edi
mov ecx, 0x686d229c
sub edx, ebx
and edi, edx
dec ebx
or ecx, edx
shr edi, 0x17
xor ebx, 0x686eb4e2
xchg edi, ebx
xchg edi, edx
add edx, ecx
add ebx, 0x686fd525
add edi, ecx
jmp 0x49543d
push 0x613eea86
neg ebx
add ecx, ebx
neg edi
add ebx, 0x68770cb0
sub ebx, edi
add edi, ebx
xchg edi, edx
jmp 0x4948b0
pop esi
inc edx
not edx
mov ebx, edi
add ebx, 0x687c0f07
xchg ecx, edi
mov edx, ebx
mov ecx, edi
mov ebx, edx
or ecx, edx
jmp 0x497166
pop esi
add ebx, 0x687d8a24
xor edx, 0x687dcabb
inc ebx
mov ebx, edx
jmp 0x496381
call fcn.00495a20
shr ecx, 0x14
xchg edi, edx
xchg edi, ebx
ror ecx, 0x1a
mov edx, ecx
or ebx, 0x68850d01
or ebx, edi
add ecx, edi
bswap edx
jmp 0x494fdf
call esi
sub ebx, edi
xchg edx, ebx
or ebx, 0x6887f256
mov ebx, edx
xor edi, edx
jmp 0x494816
push 0x6143c46e
or ebx, edi
mov ebx, ecx
add ecx, ebx
or edi, 0x688df0f9
neg ebx
neg edx
neg ebx
shl edx, 0xa
jmp 0x496004
call esi
neg ecx
add edx, ebx
and edx, edi
sub edi, edx
mov ecx, ebx
jmp 0x495eb9
push 0x614e0a3d
xor ebx, edi
or edx, 0x689446b1
mov edi, edx
add edi, 0x6894d459
neg ecx
shr edx, 0xc
sub ebx, edi
or edx, ecx
sub ebx, edi
xor edi, ecx
add edx, ebx
jmp 0x495db1
pop esi
and ecx, edx
sub edi, ebx
and edi, ecx
sub edi, 0x689b9852
neg ecx
xor ecx, 0x689c196c
xchg edx, ebx
and ecx, edx
add ecx, ebx
not ebx
mov ecx, ebx
inc ecx
xor ebx, edi
dec ebx
jmp 0x4946be
push esp
mov edi, ebx
xor edi, 0x68a28ac2
shl edi, 9
rol edx, 0xa
shr edx, 0x1b
jmp 0x496d5a
pop esi
xor edx, edi
or ecx, ebx
shr edx, 0x12
bswap edi
or ebx, ecx
or edi, edx
mov edx, ebx
shr edi, 0xb
add edx, ebx
and edi, 0x68a5d4b8
or edx, edi
sub edx, ecx
jmp 0x49510c
push 0x613f1005
xor edx, 0x68a6a014
xchg ecx, ebx
xchg ecx, ebx
sub ebx, 0x68a7679c
xchg ecx, ebx
and edi, 0x68a7e30a
and edx, ebx
mov edx, edi
jmp 0x496ac8
call fcn.00495a20
xor edx, ecx
and ebx, edx
sub ebx, 0x68af068f
add ecx, ebx
xor ebx, 0x68afa8bb
sub edx, ecx
add edx, ebx
neg ebx
jmp 0x495fd6
push 0x401400
xchg ebx, ecx
xor ebx, 0x68b0f0b1
xor ebx, ecx
sub edx, 0x68b17745
and ecx, edx
xchg ecx, edi
sub edi, ecx
xor edi, 0x68b26de5
xor ebx, edx
bswap edi
xchg ebx, ecx
jmp 0x4968d4
pop esi
add ecx, ebx
sub ebx, ecx
sub ebx, edi
sub ebx, edx
or ecx, 0x68b49ba6
or ebx, ecx
or ecx, edx
xor edi, ebx
or ecx, 0x68b6345e
add edx, 0x68b673f2
rol edi, 0x19
and ecx, edi
inc ebx
jmp 0x496661
pop esi
xor ebx, ecx
sub ebx, edx
and ebx, ecx
xchg ecx, edx
sub edx, ebx
mov ecx, 0x68cd7635
mov ebx, edi
neg ecx
sub edx, 0x68ce35cc
xor ecx, edx
jmp 0x496ba2
pop esi
xchg edi, edx
inc ecx
mov edi, ebx
xchg ebx, ecx
inc ebx
and edx, 0x68d84473
jmp 0x496808
push 0x613304de
add ecx, 0x68e8fbad
add ecx, edx
sub ecx, edx
ror edi, 6
dec ecx
shl ecx, 9
xchg edx, edi
sub edx, ecx
jmp 0x4965f7
mov esi, 0x123b2f04
not edx
shr ebx, 0x15
xor edx, ebx
or ebx, edx
add ecx, ebx
xor ecx, edi
jmp 0x497108
push 0x61314655
add edi, 0x68eee00a
or edx, ebx
xchg ecx, edx
add edx, ebx
dec ebx
add edi, 0x68f0c981
sub edi, ecx
add ebx, edi
xor edi, ebx
not ebx
mov edi, edx
and edi, ebx
jmp 0x4959ee
pop esi
ror edi, 1
xor edx, ecx
mov edi, ecx
jmp 0x4965d4
mov esi, 0x2774562b
or edx, edi
xchg edi, ebx
sub edi, edx
or ebx, 0x68fd451c
add edi, ecx
and edx, ebx
xchg edi, ecx
and ecx, edx
jmp 0x496da8
call fcn.00495a20
dec edx
dec edi
or edx, ecx
inc ebx
sub edi, 0x68ffcfae
neg ecx
xor edx, ebx
xchg edi, ecx
jmp 0x49450a
call fcn.00495a20
sub edi, ecx
neg ecx
add ecx, ebx
add ebx, ecx
xchg ecx, edi
or ecx, 0x69028a2b
and ebx, 0x6902ceee
add ecx, ebx
mov edx, ebx
xchg edi, ebx
neg ebx
add ecx, edi
xchg edx, ecx
or edi, 0x69047819
jmp 0x494875
pop esi
dec edx
or ebx, 0x691b276b
and edi, ebx
shr edx, 0x14
xchg ebx, ecx
shl edi, 7
and edi, ecx
xchg ecx, edx
add ecx, ebx
and ebx, edi
jmp 0x496c8e
pop esi
mov ebx, ecx
xor ecx, edi
xor edi, 0x6928fdd7
add edx, ecx
ror edi, 0xd
inc edi
dec edi
xchg ebx, ecx
rol edi, 0x1a
bswap edi
jmp 0x494602
call fcn.00495a20
sub ecx, 0x692b7b95
rol ebx, 0x19
inc edi
sub ecx, edi
xchg edx, ebx
xor edx, ecx
bswap ecx
and edx, ecx
xor ebx, 0x692d9268
or edi, ecx
and edx, ebx
bswap ebx
jmp 0x4964ac
push 0x6130433b
not ebx
and ebx, 0x6931217e
and edx, 0x69315cf3
xor ecx, edi
and ecx, edx
sub ecx, ebx
xchg edx, edi
and edi, ecx
xor ebx, edx
and ecx, edx
jmp 0x494cd6
call esi
or edi, edx
ror ebx, 0xf
or ecx, edi
shl edi, 0x1e
bswap edi
xchg ecx, edx
rol edi, 7
sub edx, ecx
sub edi, ebx
xor edx, edi
shl ecx, 0xc
add ebx, edi
shr edx, 9
or ebx, edx
jmp 0x4946d9
pop esi
xor edi, edx
sub ecx, edi
xchg ebx, ecx
mov edi, edx
sub edx, ebx
or edx, 0x696837ed
or edx, ecx
sub ebx, ecx
or edi, edx
jmp 0x496f1b
pop esi
sub ecx, edi
shr ebx, 1
add edx, ecx
jmp 0x49488c
push 0x614590cf
neg ebx
rol ecx, 8
xor edx, ecx
inc edx
xor edi, 0x6977328a
mov edx, ecx
or ecx, edi
sub edx, ebx
sub edi, 0x69781c10
or edi, ebx
mov edx, ecx
jmp 0x494bfe
call fcn.00495a20
sub ecx, edi
inc edi
add ebx, ecx
or edi, edx
add edi, ebx
or ebx, edi
xor ecx, edx
xor edx, ebx
xor ebx, ecx
add ecx, ebx
or ebx, edx
jmp 0x49437b
push 0x61439e16
xchg edx, ecx
and ecx, ebx
or edx, ecx
shr ebx, 0x11
add ebx, edx
add ebx, edx
shl edi, 0x12
xchg edx, ecx
dec edi
xor ebx, edx
shl ecx, 0x18
jmp 0x494771
push 0x613ae24c
and edx, 0x699b3b10
bswap edi
or edi, 0x699bb9db
sub edx, ecx
or ebx, edi
and ecx, ebx
add ecx, edx
xchg ebx, edx
or ebx, 0x699d9566
shr edx, 1
jmp 0x49654f
push 0x6131904d
and edx, edi
xchg edi, ecx
xor edx, ecx
xchg ebx, ecx
and ecx, edi
xor edx, ecx
xor ebx, edx
ror ecx, 6
jmp 0x495af4
push 0x61301ce8
and edi, 0x69b05d71
and ebx, edx
and ebx, 0x69b0dec0
sub edx, ebx
inc ebx
mov edx, ebx
jmp 0x494f80
pop esi
or ecx, edi
neg edx
or ebx, edi
xor ecx, edi
neg ecx
xor edx, edi
and ebx, edi
add ecx, 0x69c01ce8
sub ecx, edi
ror ecx, 9
xchg ecx, ebx
jmp 0x496caa
call esi
add edx, edi
and ecx, 0x69c748ca
sub edi, ebx
xor edi, ecx
xor ebx, ecx
xor ebx, 0x69c87155
xor ebx, edx
xchg edx, edi
sub edi, ebx
shr ecx, 4
add ebx, edx
and ecx, ebx
jmp 0x4972ef
mov esi, 0x2774562b
mov ebx, edx
or edi, ecx
shr ebx, 0x11
xor ebx, 0x69d1ba77
and ecx, edi
xchg edx, ecx
neg edi
ror edi, 0x19
bswap ecx
neg edi
and ecx, edx
sub ebx, 0x69d3c9ee
add ebx, ecx
sub edi, edx
jmp 0x494921
mov esi, 0x123b2f04
sub edx, ebx
sub ecx, ebx
or edi, ebx
mov edx, 0x69d71801
dec edi
xchg edx, ecx
sub edi, 0x69d7f9a2
sub ebx, edi
jmp 0x494722
pop esi
or ebx, 0x69da6c9d
xchg ecx, ebx
sub ebx, edi
and edi, edx
add ecx, 0x69dc986f
xchg edi, ecx
not ecx
xchg edi, ecx
xchg ecx, edx
sub edx, ecx
jmp 0x496de5
push 0x614db091
shl ecx, 0x14
or ebx, 0x69efe622
sub ecx, edx
sub ebx, edi
sub edi, ecx
not edi
sub edx, 0x69f11759
xor ecx, edx
xor edx, ecx
xchg ebx, edx
jmp 0x4968ee
mov esi, 0x123b2f04
sub edx, edi
add ecx, ebx
sub ecx, ebx
xor ecx, ebx
add ecx, edx
and ebx, edi
add ecx, ebx
jmp 0x4951fc
mov esi, 0x123b2f04
bswap edx
or ecx, edx
and ecx, edi
bswap edi
mov edx, ebx
add ebx, ecx
not ecx
add edi, ecx
jmp 0x494f34
push 0x61316d2a
and edx, edi
neg ebx
or edi, ebx
xor ebx, edi
or edi, ecx
dec edx
add ecx, ebx
xchg edx, ebx
add ebx, edx
jmp 0x495378
push 0x61437857
sub edx, ebx
not ecx
and ebx, edi
dec edx
or edi, 0x6a222a41
jmp 0x495264
pop esi
xchg edx, ecx
xor edi, ecx
dec ebx
xor ebx, ecx
or edi, 0x6a25bfd8
add edi, ebx
xchg edi, ecx
xchg edx, ecx
sub edi, ecx
mov ebx, edx
mov edi, ecx
shr edx, 0x1c
jmp 0x49633e
push 0x61454766
add edx, edi
shl edx, 0x13
xchg edx, edi
and edi, ebx
dec ebx
or edi, ecx
add ecx, edx
ror ebx, 6
jmp 0x4975cf
push 0x6131b637
xor ebx, 0x6a300cc1
neg ecx
shr ebx, 0x13
and edx, edi
add edx, ebx
xor ebx, 0x6a313770
mov ecx, ebx
dec ecx
xor ebx, 0x6a31db03
dec edx
xchg edx, ebx
or ecx, 0x6a327943
sub edx, 0x6a32afa4
add ecx, ebx
jmp 0x4973dc
call fcn.00495a20
shl edx, 0x14
or ecx, edx
xchg ecx, ebx
xchg ebx, edx
shr ebx, 2
rol edx, 9
and edi, ecx
mov ebx, edx
sub edx, ecx
jmp 0x4942fd
mov esi, 0x123b2f04
xor edx, edi
add edi, 0x6a5a8dae
shl edi, 0x17
sub edx, ebx
and ebx, 0x6a5b33ba
sub edx, 0x6a5b69ef
jmp 0x49616b
push 0x40
xchg edi, ebx
shl edx, 2
shr ebx, 0x16
or edx, 0x6a5c5ba2
or edx, ebx
add ebx, ecx
not edx
shl ebx, 0x14
add ebx, edi
jmp 0x494403
call esi
mov edi, edx
xor edx, ebx
or edi, edx
mov ecx, edi
sub edi, 0x6a5e708d
xor ecx, edx
or ebx, 0x6a5ed812
mov ecx, ebx
or ebx, ecx
xor edx, ecx
or edx, edi
jmp 0x4961fa
push 0x614e39c7
bswap ebx
xor ecx, 0x6a6031b9
sub ebx, edx
and edx, ebx
or ebx, 0x6a60cadd
mov ecx, edi
shl ecx, 0x1c
add edx, ecx
add ebx, edx
and ebx, 0x6a61d273
jmp 0x4971d1
pop esi
or edx, ebx
and edi, ebx
mov ecx, edi
ror edi, 0xa
nop
neg edx
jmp 0x497183
mov esi, 0x123b2f04
xchg edx, ecx
inc edi
sub edx, 0x6a8681a4
add ecx, ebx
rol ebx, 9
or ecx, ebx
inc edx
xor edi, ebx
bswap edx
and edx, ebx
jmp 0x496769
call esi
dec edx
mov edx, 0x6a8b419e
xchg ebx, ecx
rol ecx, 0xd
add edi, ebx
or edx, ecx
xor ebx, edx
xor ebx, ecx
sub edi, ecx
jmp 0x494a93
push 0x6143ebc5
or ebx, ecx
and edx, ebx
xor ebx, edx
xor ecx, 0x6a8ed006
neg ecx
mov ecx, ebx
sub ebx, ecx
and edx, edi
inc ebx
xor edi, edx
dec ebx
dec edi
or ecx, edx
xor ecx, ebx
and ecx, edx
jmp 0x4955e2
call fcn.00495a20
add edx, 0x6aa888ca
sub ebx, 0x6aa92999
sub ecx, edx
or ebx, 0x6aa99985
nop
xchg edi, ecx
sub ebx, ecx
or edi, ebx
sub edi, ebx
jmp 0x4965b4
pop esi
add ebx, edx
and ebx, edi
not ebx
nop
and edi, ecx
and ecx, 0x6ab6ac20
xor ecx, ebx
xchg edx, edi
or edx, ebx
sub ebx, ecx
add edi, ebx
neg edx
jmp 0x494584
push 0x612ce5ee
mov edx, ecx
add ecx, edx
sub edx, edi
nop
mov ecx, edx
not edx
sub edi, ebx
or ecx, 0x6ac69d02
add ecx, edi
add ecx, 0x6ac70d56
xchg edx, ecx
ror edi, 3
or ecx, edx
jmp 0x495f83
pop esi
mov ecx, edx
mov ecx, edx
and edi, edx
mov ebx, 0x6accaa88
and ecx, edx
jmp 0x49578c
call fcn.00495a20
and edx, edi
add edx, edi
xchg ebx, ecx
sub edx, 0x6acde4fc
add edi, ebx
rol ebx, 3
neg ebx
and ecx, edx
neg edx
or edi, edx
mov edi, ebx
add edx, ebx
shr edi, 0x12
and edi, 0x6ad01498
jmp 0x497648
pop esi
sub edx, edi
neg ecx
add ebx, ecx
add edx, edi
xor ecx, edx
mov ebx, edx
jmp 0x4976e3
mov esi, 0x2774562b
or ecx, edx
mov ecx, edi
ror edi, 0xd
add edi, edx
xor ecx, 0x6ad3a459
neg ecx
and edx, ebx
add ebx, edi
jmp 0x494cf4
pop esi
add ecx, edx
not edx
xchg ebx, edi
add edi, edx
jmp 0x4944b9
pop esi
shr edi, 0x1d
sub ebx, edx
add ebx, edx
neg ecx
xor edx, ecx
or ecx, edx
rol ecx, 0x12
dec edi
xchg ebx, edx
and ebx, edx
add ecx, edi
and edx, ecx
and ebx, edx
xor edi, edx
jmp 0x494c32
call esi
xchg ecx, edx
sub edi, edx
xchg ebx, ecx
sub ecx, ebx
xchg edi, ebx
ror edx, 0x1c
xchg ebx, edx
xor ecx, ebx
xchg ebx, ecx
sub ecx, edi
xchg edi, ebx
jmp 0x496d36
push 0x613b068e
or ebx, ecx
shl edx, 0x1b
xor edx, ebx
xor ebx, edx
rol ebx, 0x1f
xchg edi, ebx
xchg ebx, ecx
sub ecx, edx
jmp 0x4959b8
call esi
mov ecx, 0x6b021793
bswap ecx
mov ebx, edi
or edi, 0x6b02d9c8
add edx, ebx
shl ecx, 0x1d
shl ebx, 0x12
bswap edx
jmp 0x495128
push 0x6132de16
sub ebx, 0x6b04e011
sub ecx, ebx
and edx, 0x6b0593b3
shr edi, 0x11
and ecx, 0x6b0611ca
bswap ecx
jmp 0x494bdf
mov esi, 0x2774562b
and edx, ecx
and edi, edx
shr ebx, 0x14
neg edi
neg ebx
or edx, edi
and ecx, 0x6b090dc3
inc ebx
or edi, ebx
jmp 0x4944a2
push 0x6133e650
xor edx, edi
ror edx, 0x16
or ebx, 0x6b118841
shl ecx, 2
sub edi, 0x6b123c83
or ecx, edx
jmp 0x496bf8
push 0x613abfad
sub edi, edx
xchg ecx, ebx
mov edi, edx
xor edi, ebx
mov ecx, 0x6b175c1b
add ecx, ebx
dec ebx
sub edx, ebx
or ecx, edi
xchg edx, edi
xor edx, ecx
xchg ebx, edi
and edx, ebx
nop
mov edx, edi
and ecx, 0x6b1cfa4a
jmp 0x49534d
call fcn.00495a20
add edx, edi
inc ebx
and edi, edx
shl ebx, 0x11
add edx, ecx
bswap edx
mov ebx, edx
or ebx, 0x6b2b9113
jmp 0x494744
push 0x6145217f
sub edx, edi
sub edx, edi
or edi, ebx
mov edx, edi
mov edi, ebx
rol edi, 0x12
neg edx
sub edi, edx
sub ecx, edx
mov edi, ebx
add ebx, ecx
jmp 0x495a74
call esi
xor ecx, edi
add ecx, edx
ror edi, 0x1a
sub edi, 0x6b467623
xchg ecx, edx
xor edi, edx
xchg edi, edx
jmp 0x496eee
push 0x614dde7d
or ecx, 0x6b478339
add edi, edx
sub edi, 0x6b480586
sub edi, ecx
sub ebx, ecx
rol edi, 8
mov edx, ecx
or edx, ecx
add edx, ecx
jmp 0x4947c8
pop esi
not ecx
rol ecx, 0x1b
and edx, edi
mov ecx, 0x6b545e02
shl edx, 0x1f
mov ebx, ecx
mov ecx, 0x6b5525e2
add edx, edi
not ecx
jmp 0x494c7e
pop esi
xor edx, ecx
sub ebx, edi
xor ebx, 0x6b566bb1
bswap ebx
neg edx
or ecx, edx
sub ebx, ecx
mov edi, 0x6b579509
sub edi, ecx
jmp 0x495669
push 0x613f3628
or ecx, edx
rol edi, 0x1d
or ecx, 0x6b7d28b3
add ecx, 0x6b7d6036
add edi, edx
mov edi, edx
sub edi, ebx
jmp 0x497429
pop esi
ror ebx, 0x17
sub ebx, edi
jmp 0x4974b5
pop esi
xchg edi, edx
add edi, edx
xchg edi, ebx
sub ecx, edi
and ebx, edi
and ecx, ebx
or ecx, edi
mov ebx, ecx
jmp 0x49452e
push 0x61340d0d
add ecx, edx
xchg ebx, edi
xchg edi, ebx
or edi, edx
rol edi, 8
or ebx, ecx
neg ebx
shr edi, 0x17
jmp 0x49562f
pop esi
xchg edx, ecx
xor edx, 0x6baaf8e3
xchg ebx, ecx
and ebx, 0x6bab9488
xor ecx, edi
and ebx, ecx
sub edx, ebx
jmp 0x495a52
push 0x612cbee4
xchg edi, ecx
add edx, edi
and ecx, ebx
add edi, edx
mov ecx, ebx
or ebx, 0x6bad7f83
and edi, ebx
or edi, ecx
bswap ebx
add edi, edx
jmp 0x4962d5
pop esi
sub edi, 0x6bb97697
xor ecx, ebx
mov ecx, 0x6bb9e110
xchg ecx, ebx
ror ecx, 0x19
or edi, edx
add ecx, edx
xchg edx, ecx
mov edx, edi
mov edx, ebx
sub ebx, edx
jmp 0x496b0c
push esp
and ebx, edx
mov edi, 0x6bbe901d
shr edx, 0x1e
sub ecx, ebx
add ebx, edi
add edx, 0x6bbf6168
jmp 0x495d69
call fcn.00495a20
sub ebx, 0x6bc2ac23
add edx, edi
xor edi, ecx
xor edx, ecx
and ecx, edi
mov edx, ebx
and edi, ecx
neg edx
and edi, edx
mov ecx, ebx
jmp 0x4947b7
pop esi
mov edi, 0x6be30b13
xchg ebx, edx
sub ecx, ebx
or ebx, edi
and edi, ecx
dec ecx
add edx, ebx
xchg ecx, edx
not ecx
xor edx, 0x6bf17ad6
xor ecx, 0x6bf1b1e3
shl ebx, 0x12
jmp 0x4975ea
mov esi, 0x2774562b
and ebx, 0x6bf4130c
mov edx, 0x6bf446e6
add ebx, 0x6bf47d26
sub edi, ebx
shr edi, 0x19
or ecx, ebx
sub ecx, 0x6bf556fe
sub edi, ecx
or edi, 0x6bf656c5
jmp 0x496351
push 0x613f85d5
add ecx, ebx
or edi, ecx
or edx, edi
sub ecx, 0x6bf912f9
neg edx
inc ebx
or ebx, edi
bswap ebx
and edi, ebx
add ebx, edx
shl ebx, 0x10
jmp 0x496ecb
push 0x613c814c
add edi, edx
add ecx, ebx
xchg ebx, edi
add ecx, ebx
bswap edx
jmp 0x495d46
mov esi, 0x2774562b
shr ecx, 0x1e
add edx, edi
or ebx, ecx
or ebx, edi
and edi, edx
xor ebx, edx
mov edi, ebx
xor ebx, 0x6c00bed2
xchg edx, edi
neg ebx
jmp 0x495bf1
pop esi
sub edi, 0x6c0184c6
rol edx, 3
xor edi, 0x6c01f7fc
sub ebx, ecx
and ebx, edx
rol edx, 0x18
shr ebx, 7
add ecx, edx
xor ebx, ecx
or ebx, ecx
sub edi, 0x6c03b5bb
xor ecx, ebx
jmp 0x49467a
mov esi, 0x4132136a
sub ecx, ebx
sub ebx, ecx
xor ecx, edx
shr edi, 0x10
not ecx
mov ecx, ebx
shr edi, 7
inc ecx
ror edi, 1
and ebx, edx
add edx, ecx
jmp 0x494d0f
push 0x612becd1
and ebx, ecx
xchg edx, ecx
not edi
sub ebx, ecx
inc ecx
bswap ebx
nop
sub ebx, ecx
xchg ecx, ebx
jmp 0x495960
call fcn.00495a20
mov edx, edi
xchg edx, edi
add ecx, ebx
mov ebx, ecx
xor edx, ecx
mov edi, 0x6c439242
neg edi
shr edx, 0x11
xchg edx, ecx
jmp 0x495d8c
call fcn.00495a20
neg ebx
sub ecx, ebx
mov ebx, 0x6c5c3100
sub ebx, edx
xor ecx, edi
add edi, edx
or edi, edx
sub edi, edx
xchg ebx, edi
add edx, ecx
mov edi, ebx
xchg edx, ecx
jmp 0x4971ec
push 0x612dc365
neg ecx
or ecx, edx
shl edx, 0xe
and ecx, edi
xor ecx, 0x6c64d5ac
and ebx, edx
or ebx, edi
jmp 0x496e2e
pop esi
or edi, ecx
or edi, ebx
not ebx
mov ebx, 0x6c7e4dfd
xchg ebx, ecx
inc edi
and ecx, 0x6c7efc1d
sub ebx, 0x6c859a78
add edi, ecx
sub edi, 0x6c860a1c
xor edi, ebx
xchg ecx, edi
or edi, ebx
mov edi, ebx
jmp 0x496409
push 0x614e65a0
shr edx, 2
and ebx, 0x6c8ad1c0
ror ecx, 8
xchg ecx, edx
shr ebx, 0x18
jmp 0x496393
call esi
and ecx, 0x6c8c8e41
xchg ebx, ecx
mov ebx, ecx
xchg ebx, edx
and edi, ecx
xor ebx, edx
sub ecx, ebx
shl edx, 0x19
or edx, ebx
ror ebx, 0x1a
nop
rol ecx, 0x1c
add edx, 0x6c911e34
ror edx, 0xb
jmp 0x494e55
pop esi
neg edi
or edx, edi
sub edx, ebx
not edi
sub ebx, ecx
jmp 0x49496f
mov esi, 0x123b2f04
or ebx, edi
xor ebx, edx
xchg ecx, edi
xchg ebx, ecx
jmp 0x497018
push 0x613c5ae6
shr ecx, 0x16
shl edi, 0x12
shl edx, 0xa
not ecx
and ecx, edi
jmp 0x496e9c
push 0x613f5c17
not ebx
or ebx, 0x6cbb21ac
xchg edx, ecx
add edx, ecx
and edx, 0x6cbbc521
sub ebx, ecx
add ebx, ecx
and edi, 0x6cbc5e9a
or edi, ebx
mov edi, ebx
bswap edx
jmp 0x496e78
pop esi
and ebx, edx
shl ecx, 1
rol ebx, 0xe
xor edx, 0x6cc3506c
mov ebx, edi
and edx, 0x6cc3f699
jmp 0x4963cb
push 0x61456d34
shr edx, 0x1d
rol ecx, 0xd
dec edi
mov ecx, 0x6cd499c7
and edi, ebx
rol edx, 6
jmp 0x4951c6
pop esi
add ebx, edi
add edx, ecx
not ebx
sub edi, edx
shl ebx, 4
mov ebx, edi
and ecx, edi
inc ebx
neg edi
or ecx, 0x6cd71a89
sub ecx, edx
add edi, ecx
xor edi, ebx
xor ebx, edi
xchg ecx, edx
jmp 0x495a09
call esi
mov ecx, edx
or edi, ecx
xchg edi, ebx
add ebx, ecx
inc ebx
add ebx, edx
mov edi, edx
shl ecx, 2
not edi
xor ecx, edi
add ebx, 0x6cdd017f
jmp 0x494f16
push 0x613a991e
xchg ecx, edi
or ecx, 0x6ce38546
xor edx, ecx
xchg ecx, edx
dec edx
shr edx, 0xc
or ecx, 0x6ce48b86
and ecx, ebx
jmp 0x4966a6