Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get common file path
Hash data using murmur3

Disassembly:
mov esi, 0x1be62bfe
shl edx, 0x1b
sub ebx, 0x1be6d3b3
shl esi, 7
add edx, 0x1be77515
shr edx, 0x15
call sub.kernel32.dll_GetLastError
add edi, edx
mov edi, ebx
cmp eax, 0xffffff04
jne 0x401098
call sub.ntdll.dll_ZwCreateProfile
call sub.ntdll.dll_ZwCreateProfile
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ntdll.dll_ZwCreateProfile
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ntdll.dll_ZwCreateProfile
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwCreateProfile
ret
or esi, edx
shr edi, 1
and esi, edx
call sub.kernel32.dll_GetLastError
not edi
add ebx, 0x1bebe836
shr edi, 1
cmp eax, 0xfffffed7
jne 0x40111f
call sub.ntdll.dll_ZwCreateProfile
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ntdll.dll_ZwCreateProfile
call sub.ntdll.dll_ZwCreateProfile
call sub.ntdll.dll_ZwCreateProfile
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
ret
mov edi, edx
neg esi
sub edi, 0x1beed0d9
or ebx, 0x1bef2309
shr edx, 0x10
sub esi, ebx
bswap edi
call sub.user32.dll_GetInputState
or edx, edi
mov edx, 0x1bf0d108
inc edx
cmp eax, 0xffffff2e
jne 0x4011c7
call sub.ntdll.dll_ZwCreateProfile
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwCreateProfile
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ntdll.dll_ZwCreateProfile
call sub.ntdll.dll_ZwCreateProfile
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ntdll.dll_ZwCreateProfile
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwCreateProfile
call sub.ntdll.dll_ZwCreateProfile
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
ret
sub edx, edi
call sub.kernel32.dll_GetLastError
not esi
dec esi
cmp eax, 0xffffff29
jne 0x40122d
call sub.ntdll.dll_ZwCreateProfile
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwCreateProfile
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwCreateProfile
call sub.ntdll.dll_ZwCreateProfile
call sub.ws2_32.dll_WSCGetProviderPath
call sub.ws2_32.dll_WSCGetProviderPath
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ws2_32.dll_WSCGetProviderPath
ret
jmp 0x4942e8
or ebx, esi
shl edx, 0x1c
mov edx, esi
neg edi
and edx, edi
add ebx, edi
jmp 0x495f17
push 0x1c8f4b93
or edx, esi
mov ebx, esi
or edi, ebx
sub edx, esi
not edx
add edx, ebx
or esi, edx
mov edx, esi
or ebx, edi
inc edx
or ebx, esi
jmp 0x497707
push 0x1c7f826e
and edi, 0x21d65b74
xor edi, esi
xor ebx, esi
and edx, edi
inc ebx
dec edi
add edi, edx
jmp 0x4977cd
call fcn.00497495
mov esi, edi
add ebx, edi
sub edx, esi
mov edx, ebx
jmp 0x4956fd
pop ecx
xchg edx, edi
inc esi
xor ebx, esi
add edi, edx
sub esi, ebx
add esi, ebx
shr edx, 0xd
xor edx, ebx
inc esi
sub esi, ebx
sub edi, edx
and edx, 0x21f01ce1
xor esi, ebx
neg ebx
sub edi, esi
jmp 0x4974c3
push 0x1c89ebef
or edx, ebx
neg edi
or ebx, 0x21ff3545
rol edi, 0x1a
xor ebx, esi
sub edx, esi
jmp 0x496ced
push 0x1c7fee66
or esi, 0x220a9ecf
and esi, edx
sub ebx, 0x220b3c78
xor ebx, esi
and ebx, 0x220bdad3
bswap ebx
and esi, ebx
xchg edx, edi
add edi, ebx
xor edi, 0x220d72ed
sub ebx, edi
and edx, esi
jmp 0x496abf
call fcn.00497495
not ebx
xor ebx, edi
or edx, esi
mov ebx, esi
add edi, edx
neg esi
jmp 0x49534f
push 0x1c8ed64d
xor ebx, 0x22107501
mov edx, esi
add edx, edi
or edi, esi
rol esi, 9
jmp 0x494efe
push 0x1c8248db
mov ebx, edx
and esi, 0x22146894
nop
or esi, ebx
mov edi, edx
jmp 0x496208
push 0x1c843eaf
mov edi, ebx
xchg edx, edi
mov edx, ebx
dec esi
rol edi, 4
sub esi, 0x22175228
xchg ebx, edx
jmp 0x495ac1
push 0x1c781727
bswap esi
xchg esi, edi
ror ebx, 0x1b
mov ebx, 0x221d44c0
sub edx, 0x221d9746
add esi, edx
and esi, 0x221e3e73
not ebx
xchg edx, edi
inc ebx
not edi
shl edx, 6
jmp 0x4975d3
call fcn.00497495
mov esi, ebx
sub esi, edi
xor edx, 0x2220d666
and edx, 0x222126b5
or esi, edx
and ebx, 0x2221d087
or edi, ebx
inc ebx
add edi, esi
and ebx, edi
or ebx, 0x222358f9
inc esi
jmp 0x4973ea
push 0x1c8a56de
or edx, 0x222414e2
sub ebx, 0x222467b1
mov edx, esi
mov esi, ebx
jmp 0x496425
call ecx
xchg ebx, edx
mov edi, esi
xor ebx, edi
or edx, ebx
and edx, esi
not edi
mov edx, 0x223c896c
shr edi, 0x1c
add ebx, edx
xchg esi, edi
add esi, edx
xor ebx, 0x223e13b4
mov edi, esi
inc ebx
jmp 0x496f44
push 0x1c86687c
shl esi, 0x17
xor edi, 0x2253cec6
xor edi, esi
shl esi, 8
and esi, edi
xor ebx, edi
xchg ebx, edi
and esi, 0x2255f822
xchg edi, edx
jmp 0x497439
pop ecx
inc edx
xchg esi, edx
shr edi, 0xb
dec ebx
and ebx, 0x22580019
shl edx, 0xd
xor esi, edi
or edx, ebx
and ebx, 0x22593f55
jmp 0x496c62
call ecx
shl edi, 0xa
inc edx
shr ebx, 0x1d
xor edi, esi
or edi, esi
xchg ebx, edi
or edx, 0x22685d19
or edi, edx
or esi, edx
xor edx, 0x22695574
sub edi, 0x2269a5e9
ror ebx, 0x10
mov ebx, edx
add ebx, edi
jmp 0x4965ab
push 0x1c764dd9
neg ebx
or edx, ebx
not edi
sub edx, esi
and edx, esi
and ebx, esi
or esi, ebx
rol esi, 9
bswap esi
sub ebx, edi
add esi, ebx
bswap edi
jmp 0x4958c8
push 0x1c787e15
not esi
and esi, ebx
xor ebx, edi
jmp 0x4951bb
pop ecx
sub edi, esi
rol edi, 0x16
shr esi, 3
xor ebx, 0x229922af
inc ebx
mov esi, edi
add edx, 0x229a1184
jmp 0x49699f
push 0x1c7ad523
mov edi, 0x229a767c
xor ebx, edx
sub edx, edi
and edx, 0x229b65ba
and ebx, edi
or esi, ebx
rol edx, 0xc
sub edi, 0x229ca1ac
inc edx
mov esi, edx
add ebx, edx
xchg ebx, esi
jmp 0x496ed8
mov ecx, 0x2774562b
xchg esi, edi
shr edi, 0xd
mov esi, ebx
mov ebx, edi
sub edi, ebx
bswap edi
sub edi, 0x22a74d61
not edi
sub edx, esi
jmp 0x4957ec
call fcn.00497495
xor edx, esi
bswap edx
mov edx, esi
mov edi, ebx
xor esi, edi
jmp 0x496031
pop ecx
xchg esi, ebx
ror edx, 0x1e
and ebx, edx
xor edx, 0x22ac5c0a
xor ebx, 0x22acac9e
xor edi, ebx
jmp 0x494e4f
pop ecx
mov edx, edi
mov edi, esi
xchg esi, edx
or ebx, 0x22b008cc
neg esi
xor edx, ebx
jmp 0x4954de
call ecx
add ebx, 0x22bbe6fe
not esi
add ebx, edi
xor edi, ebx
xor edi, edx
add edi, 0x22bd8139
rol edi, 0x19
xor edi, ebx
shl edx, 0xd
jmp 0x495e0f
mov ecx, 0x4132136a
shr ebx, 8
rol edi, 0x1e
add edi, 0x22c22842
mov edi, edx
xor edx, ebx
and esi, ebx
jmp 0x4966bc
pop ecx
mov edx, 0x22c38496
sub ebx, edx
dec edx
or ebx, 0x22c48019
and edi, edx
add edx, 0x22c51fb3
xor edx, esi
jmp 0x497764
pop ecx
add edx, ebx
sub esi, ebx
inc edx
rol edx, 0x1a
shr ebx, 8
sub edx, 0x22cd4c55
add ebx, edi
xor edx, esi
shr edx, 0xd
xor edx, ebx
xchg edx, esi
jmp 0x495226
push 0x1c8f108c
xchg edi, edx
add esi, ebx
add esi, edx
shl ebx, 0x11
and edx, esi
jmp 0x4942fa
push 0x1c7d61c8
mov edi, 0x22ff4bc7
and edi, edx
or edx, edi
not esi
mov edi, edx
and edi, ebx
add edx, edi
mov esi, ebx
ror edx, 6
add edi, ebx
shl esi, 0x1e
add edx, 0x2302b52a
jmp 0x4951d2
pop ecx
or esi, ebx
mov ebx, esi
inc edi
xor edi, esi
mov ebx, edx
dec edx
jmp 0x495ff8
pop ecx
add ebx, 0x230b7109
and edx, esi
bswap edi
add edi, ebx
or esi, edi
add ebx, edi
and ebx, edx
and esi, edi
jmp 0x4958a0
mov ecx, 0x2774562b
xor esi, 0x23162f41
rol ebx, 0x18
add ebx, esi
or edx, edi
jmp 0x494cfb
push 0x1c7d9736
shl esi, 0xf
mov edi, ebx
bswap esi
add ebx, edx
dec edx
or esi, 0x231924e6
sub edi, esi
ror ebx, 6
xchg edi, esi
sub edx, 0x231a64b6
shr ebx, 9
jmp 0x4966fe
pop ecx
xor edx, esi
and esi, edi
jmp 0x494c3b
pop ecx
and ebx, 0x231edc1f
dec ebx
not esi
or esi, 0x231fddfa
rol edi, 0x14
xor edx, ebx
jmp fcn.00494dae
pop ecx
inc edx
sub edx, ebx
shr edi, 0x1c
xchg ebx, edx
not ebx
xchg edx, edi
mov edi, ebx
sub esi, edx
add esi, edi
xor edi, esi
and ebx, esi
bswap edx
or esi, edx
add esi, edx
sub ebx, 0x23257b29
jmp 0x4944d2
call ecx
xchg ebx, edx
or edi, 0x233a7c13
xor esi, edx
xchg edi, ebx
mov edi, 0x233b6bc4
ror edx, 7
xor edx, esi
jmp 0x495606
call fcn.00497495
and edx, 0x233c7f2b
sub edx, 0x233ccf9a
sub edx, esi
dec esi
xchg edx, ebx
xor edx, ebx
and esi, edi
neg edx
jmp 0x4965d3
mov ecx, 0x2d734e3d
shl ebx, 0x19
and edx, esi
xor edx, 0x234ec53e
add edx, 0x234f1521
bswap edx
sub edx, esi
and ebx, edx
xor edx, edi
jmp 0x49440e
pop ecx
and esi, edi
and ebx, edi
mov edx, 0x235e6b55
inc ebx
and edi, 0x235f0d22
add edx, edi
inc edi
mov edx, esi
xchg esi, edi
not edx
jmp 0x496445
mov ecx, 0x2774562b
or edx, edi
xchg edi, edx
mov esi, ebx
and edi, 0x2361f551
not ebx
xchg edx, edi
and edi, edx
jmp 0x49567c
pop ecx
mov esi, 0x23745a6d
sub ebx, esi
or edi, ebx
mov esi, edx
xor edi, 0x23759570
sub edi, ebx
and ebx, edx
jmp 0x494d59
pop ecx
mov edi, esi
xchg edx, edi
mov ebx, 0x2379a47f
xor ebx, 0x2379f4c8
add ebx, esi
add edx, ebx
jmp 0x4964c3
call fcn.00497495
add edi, esi
mov ebx, 0x2383b7a1
add ebx, 0x23841385
or edx, esi
or edx, esi
sub edi, esi
and esi, ebx
mov esi, 0x238599c6
bswap edi
jmp 0x494a18
push 0x1c8e9c16
xchg esi, ebx
sub edx, 0x2386b6e6
add edi, edx
mov esi, 0x2387555c
jmp 0x494651
call ecx
sub edx, 0x238daa85
and esi, edi
and edx, 0x238e49dd
and esi, edi
not ebx
xor ebx, 0x238f36ce
inc edi
or edx, edi
jmp 0x496781
call fcn.00497495
mov edi, ebx
and esi, edx
shr esi, 0x14
or edi, esi
not ebx
or edx, ebx
jmp 0x49649a
push 0x1c89b3e0
or esi, ebx
shr esi, 0xa
and esi, ebx
bswap esi
dec ebx
add edx, edi
or ebx, 0x23b3bde9
add esi, 0x23b40def
add edi, 0x23b469c1
jmp 0x49458a
mov ecx, 0x2d734e3d
sub ebx, edx
sub esi, 0x23b51f22
rol ebx, 5
neg edi
mov edx, ebx
and edi, 0x23b669f0
shl edx, 1
sub ebx, edi
jmp 0x49536c
pop ecx
xchg edx, ebx
inc ebx
shr edx, 2
xchg edx, ebx
mov esi, 0x23e2b2a5
mov edx, edi
not ebx
sub ebx, edi
xor edx, ebx
jmp 0x496bf5
push 0x1c847675
sub esi, ebx
or edx, edi
xchg esi, edi
rol esi, 0xa
xor esi, edi
mov ebx, edi
and edx, ebx
jmp 0x49706b
pop ecx
or esi, ebx
shl edx, 0x19
and edi, edx
bswap esi
sub edi, esi
jmp 0x497667
push 0x1c7a9e46
rol edi, 0x16
mov esi, ebx
not edx
or ebx, esi
add edx, 0x23e9a109
shr edi, 5
neg esi
or ebx, esi
sub esi, 0x23eae1a6
and edx, edi
jmp 0x494c58
push 0x401400
add edi, ebx
and edx, 0x2418f2cf
bswap ebx
xchg edx, esi
or esi, edx
xor esi, edi
inc ebx
mov ebx, edx
xor esi, ebx
mov ebx, edi
or ebx, esi
and edi, ebx
mov ebx, esi
jmp 0x497085
pop ecx
and esi, edx
mov edi, ebx
xor esi, edi
xchg ebx, edi
xor ebx, edi
sub edi, ebx
not ebx
add ebx, edi
or edx, ebx
xchg edx, ebx
jmp 0x494ead
pop ecx
xchg esi, edi
or edi, 0x2436cca2
xor edi, edx
add edx, 0x243779fb
mov ebx, 0x2437c9fc
jmp 0x49796c
push 0x1c75fe26
and edx, 0x244f70ae
add edi, ebx
not edx
add ebx, edi
jmp 0x494ab5
push 0x1c77a879
xor edx, ebx
shl ebx, 0xc
xchg ebx, esi
inc esi
add ebx, edx
jmp 0x49615a
call ecx
or edx, 0x246966a2
sub ebx, 0x2469b96b
and ebx, edi
sub edx, esi
or ebx, edi
xor esi, edi
or ebx, 0x246b4a57
add edi, esi
add edx, ebx
jmp 0x4955ca
pop ecx
sub edi, edx
or edx, esi
or edx, edi
mov edi, 0x246d3ed6
shl ebx, 0xe
or esi, edi
sub edi, ebx
or ebx, esi
jmp 0x497984
pop ecx
mov esi, edi
xchg esi, edi
xor ebx, edi
mov esi, 0x24748f6a
add esi, 0x2474eb8f
dec edx
xor esi, edi
neg edi
jmp 0x4961d6
push 0x1c77deb9
dec esi
inc ebx
add edx, edi
jmp 0x4946e2
call ecx
and edx, ebx
xor esi, edi
xchg esi, ebx
xor esi, 0x24869cf0
mov esi, edi
bswap ebx
inc esi
shl esi, 0x17
or esi, edi
jmp 0x4966ca
push 0x1c817319
and esi, ebx
xor edi, 0x248d4e9d
rol ebx, 0x1c
mov ebx, edi
mov edx, ebx
inc ebx
or edx, edi
and edi, edx
jmp 0x4961f4
push 0x1c81a8a3
xor edi, ebx
mov ebx, edi
add edi, 0x24904103
jmp 0x4972c0
mov ecx, 0x2774562b
xchg ebx, esi
not edx
xchg edx, ebx
mov esi, ebx
rol edx, 0x1b
jmp 0x494710
pop ecx
xor edi, 0x24977d53
sub edx, ebx
and ebx, edx
not edx
xchg ebx, edx
mov edi, esi
or esi, ebx
and edx, 0x2499a0ad
dec esi
sub edx, esi
bswap ebx
sub edi, ebx
or edi, edx
xchg edi, esi
jmp 0x49662d
push 0x1c8a8fae
and edi, esi
mov edx, 0x24c36952
inc esi
add esi, edi
shl ebx, 0x14
xchg edx, ebx
add edx, 0x24c502f8
dec esi
jmp 0x4968de
pop ecx
not ebx
sub edx, 0x24c60e0c
neg ebx
xchg ebx, esi
add edx, esi
sub esi, edi
add edx, ebx
xchg esi, edx
jmp 0x496056
call ecx
or edi, 0x24ce9c0b
xor ebx, edx
xor edi, esi
rol ebx, 2
add edx, 0x24cfe6d0
or edx, 0x24d0397c
ror esi, 0x1d
or esi, ebx
add edx, ebx
and edi, esi
jmp 0x495141
pop ecx
and ebx, 0x24d1db92
not esi
ror esi, 0x1c
or edx, edi
neg esi
or ebx, 0x24d36d6c
and edi, esi
add ebx, 0x24d414aa
xor edx, edi
xor esi, ebx
and edx, edi
jmp 0x4971dd
call fcn.00497495
xor ebx, 0x24dbe0cd
ror ebx, 0x19
and edx, ebx
add esi, edi
ror edx, 3
not ebx
xor ebx, esi
or esi, edi
jmp 0x494848
call ecx
or ebx, edi
or edi, 0x24dedffc
xchg esi, edx
rol edi, 0xe
sub esi, ebx
and edi, esi
sub edi, edx
jmp 0x495d64
pop ecx
bswap edx
and ebx, esi
mov edi, ebx
bswap esi
mov edi, edx
shl esi, 3
mov ebx, edx
or edx, ebx
and ebx, edx
sub esi, 0x24e8f3e7
xchg edi, edx
xchg ebx, edi
xor ebx, esi
shl edi, 4
jmp 0x4951fc
call ecx
and esi, ebx
xor ebx, 0x2503a80f
and ebx, edx
and ebx, edx
shl edx, 0x1a
bswap esi
shr edi, 7
jmp 0x496bbd
push 0x1c7d2b76
ror esi, 8
xchg edx, esi
neg esi
bswap esi
add edi, edx
mov edi, 0x250cb1d1
and ebx, 0x250d0c64
and edi, esi
shl edx, 3
rol edx, 5
rol edx, 0x18
neg ebx
and esi, edi
jmp 0x4950ba
call fcn.00497495
bswap ebx
not edx
jmp 0x4969e5
pop ecx
or edi, ebx
not ebx
neg edx
mov edi, esi
or edi, edx
sub esi, edi
sub esi, edx
xor esi, ebx
xchg ebx, edi
jmp 0x49496d
push 0x1c7dcbcc
and esi, 0x251ed54f
shr edx, 0xd
add ebx, edi
sub esi, ebx
or ebx, 0x25201b82
and ebx, esi
shl edi, 0x14
and esi, edx
add ebx, edi
shr esi, 0x1e
jmp 0x495422
pop ecx
sub ebx, edx
add ebx, edx
xor esi, edi
jmp 0x495240
pop ecx
nop
or edx, ebx
mov esi, edi
shl edi, 0x15
ror esi, 0x19
xor edx, esi
and edi, esi
mov edi, 0x2528a2f7
or edx, 0x2528f547
xor edi, 0x252943c0
xor edi, esi
sub edi, edx
jmp 0x4956a2
pop ecx
or edi, 0x252a4b0b
sub ebx, 0x252aa7d0
add esi, edi
dec esi
mov edx, ebx
add esi, ebx
xor ebx, 0x252c2a33
not esi
add ebx, esi
jmp 0x495aa6
mov ecx, 0x2d734e3d
xor edx, 0x253c353c
and ebx, esi
xor ebx, esi
or edx, 0x253d1e9d
add edi, ebx
and edx, 0x253dbd14
add esi, ebx
add ebx, 0x253e6559
mov esi, ebx
sub edi, 0x253f015f
xor edx, edi
neg ebx
jmp 0x497248
mov ecx, 0x2774562b
xchg ebx, edi
and ebx, 0x2544776a
add ebx, 0x2544c75d
xchg edi, ebx
mov edi, ebx
or esi, 0x2545b0bb
add edx, ebx
and edx, ebx
ror ebx, 0x1e
and esi, edx
not esi
jmp 0x496536
pop ecx
xor esi, edi
add edi, esi
add edx, esi
mov esi, ebx
xchg ebx, esi
or edx, ebx
not edi
sub ebx, esi
add edi, esi
xor edx, esi
xchg esi, edx
xor edi, edx
add edi, edx
rol esi, 0x1a
jmp 0x49624a
push esp
sub esi, 0x255bff0b
mov edi, ebx
and esi, edi
xchg esi, ebx
and edi, esi
add edi, esi
jmp 0x49731c
mov ecx, 0x2d734e3d
xor esi, edi
shl edx, 0x1a
mov edx, 0x25713917
add edx, edi
neg ebx
sub ebx, edx
xor esi, edx
jmp 0x496c3c
push 0x1c82155e
xor edx, esi
and edi, 0x2573385b
xor edi, esi
add edx, 0x2573d984
xor edx, 0x2574285c
shl ebx, 8
add esi, ebx
xor edx, 0x25752229
or ebx, 0x257572a0
rol esi, 0x1d
jmp 0x494687
push 0x1c85fde1
shr edx, 0x1b
bswap ebx
mov ebx, esi
neg edx
mov ebx, edx
inc edi
or ebx, edx
sub ebx, edx
xchg edx, ebx
xchg ebx, edi
mov edi, ebx
jmp 0x4970ea
pop ecx
nop
xor edi, edx
or edx, 0x258702bd
add ebx, edi
and edi, ebx
bswap edx
and edi, edx
not ebx
add edi, esi
neg esi
or edi, edx
xchg ebx, esi
jmp 0x4950e5
pop ecx
add edx, esi
and ebx, esi
not ebx
add esi, edx
xor esi, edx
mov esi, ebx
xchg edx, ebx
mov ebx, edi
sub ebx, 0x258eaa17
mov edx, edi
mov edi, 0x258f4634
mov ebx, edx
jmp 0x4979a9
call fcn.00497495
mov esi, edx
mov edx, esi
shl esi, 0x19
sub edx, ebx
nop
xor ebx, edi
or esi, edx
sub ebx, esi
xchg edx, edi
shl edi, 0x10
mov edi, ebx
shr ebx, 0x16
xchg ebx, edi
jmp 0x494df1
pop ecx
or ebx, edx
xor ebx, 0x2597e144
add ebx, edx
xor edx, ebx
jmp 0x496cc0
pop ecx
xchg ebx, edx
inc ebx
sub edi, edx
or esi, edi
mov esi, edi
shr edx, 0x16
xor edi, edx
xor edi, esi
xor ebx, esi
or edx, ebx
and esi, edx
add edx, edi
rol edi, 0x19
and esi, 0x25a39438
sub esi, 0x25a3e4a3
jmp 0x4979c0
push 0x1c8a2022
or ebx, esi
ror edx, 0x1e
mov edx, esi
bswap ebx
mov ebx, edi
mov esi, 0x25a5e472
inc ebx
add edi, esi
xchg edi, esi
and edi, esi
jmp 0x494740
push 0x92ee8
xchg edi, ebx
add edi, 0x3578111f
xchg ebx, esi
xchg edi, edx
or esi, ebx
or edx, 0x357959dd
and edx, edi
add edx, esi
jmp 0x495cd8
push 0x1c7b09f6
and edi, edx
mov edi, 0x3583a2d5
xor ebx, 0x3583f5a5
shl esi, 1
xor esi, edi
sub edi, 0x3584f183
jmp 0x497428
pop ecx
or edx, 0x358b975c
xchg ebx, edi
neg edi
and ebx, edi
ror edi, 0x10
or edx, ebx
xor edi, edx
not ebx
and edx, 0x358e1e5c
mov ebx, edx
or ebx, edi
sub edx, 0x358f09f6
sub esi, ebx
jmp 0x496727
push 0x1c88983f
xchg esi, edi
xchg edi, esi
sub edx, edi
and esi, 0x35a52f93
add edi, esi
xchg esi, edi
not edx
xchg edx, esi
and edi, 0x35a6c9a1
bswap esi
jmp 0x494cda
mov ecx, 0x2d734e3d
inc edx
sub edx, ebx
sub esi, edx
inc edx
or esi, 0x35a8c3d3
mov esi, edi
add ebx, esi
jmp 0x49463b
call ecx
and edi, 0x35a9d303
mov edi, 0x35aa23fa
sub esi, edx
xchg esi, edx
add esi, edx
xor ebx, esi
or esi, edi
jmp 0x496757
push 0x1c863221
sub esi, edx
and esi, edi
add ebx, 0x35b2bc0e
xchg edx, edi
jmp 0x494947
push 0x1c85c5c8
mov edi, edx
ror edx, 0x1d
xor edi, esi
mov ebx, edi
neg esi
dec edi
and ebx, edi
xchg edi, ebx
mov edi, 0x35c84ae5
mov edi, 0x35c89af2
sub edi, 0x35c8eda3
add ebx, 0x35c9ac12
xor edx, esi
jmp 0x496b0f
call fcn.00497495
xor edx, edi
xor esi, edi
or edi, ebx
bswap esi
xchg ebx, edx
or ebx, esi
bswap esi
jmp 0x496185
push 0x1c81de2c
shl edx, 1
mov esi, ebx
rol esi, 7
and ebx, edx
inc ebx
mov esi, edi
and ebx, esi
or esi, ebx
or ebx, edi
and edx, edi
or ebx, edi
jmp 0x496adb
push esp
sub ebx, 0x35e0d7fa
and ebx, 0x35e12663
xchg esi, ebx
sub edi, 0x35e1c794
add ebx, edx
and edi, ebx
sub ebx, esi
or edi, 0x35e30852
or edx, ebx
add edx, 0x35e3a748
jmp 0x497451
call ecx
and edx, 0x35f34774
sub esi, edx
and edx, esi
dec edx
and edx, ebx
not ebx
sub edx, edi
sub edi, ebx
or edx, 0x35f5c9b0
and edx, esi
sub esi, edx
mov esi, edi
xor esi, 0x35f6feca
add esi, ebx
jmp 0x495ada
call fcn.00497495
sub esi, edx
neg edi
xchg edx, edi
jmp 0x496556
push 0x1c7b3c5d
sub edi, esi
neg edi
inc edi
sub ebx, esi
jmp 0x4954fd
push 0x1c869e24
xor ebx, esi
shl ebx, 0xf
xor ebx, esi
dec edi
neg ebx
sub edi, esi
mov ebx, edx
jmp 0x496873
push 0x40
or esi, edx
dec esi
or ebx, esi
shr ebx, 0x18
sub ebx, edx
and edi, ebx
shr ebx, 0xd
sub edi, ebx
neg edi
and edi, ebx
and edi, edx
jmp 0x496e54
pop ecx
or esi, edx
mov edi, edx
xchg edx, edi
and edx, ebx
not esi
xor ebx, edi
shl edi, 0x17
and edx, edi
neg esi
xor edi, edx
jmp 0x494e33
push 0x1c784b97
and ebx, edi
mov edx, 0x3620cf6f
add edx, ebx
shr ebx, 5
mov ebx, edi
or esi, ebx
dec edx
xchg edx, ebx
mov esi, 0x3622fee2
not edx
add edx, ebx
jmp 0x494b94
pop ecx
not edx
or esi, edi
shl esi, 5
xor edx, ebx
xor edi, esi
mov edx, esi
mov edx, edi
mov edi, ebx
shl esi, 0x1a
mov edx, edi
ror edx, 0xb
mov esi, edi
nop
jmp 0x494d25
mov ecx, 0x2d734e3d
or ebx, edi
xchg edi, esi
and edi, esi
sub edx, 0x363c68c4
or esi, edx
mov edx, 0x363d060c
mov edi, edx
rol esi, 0xa
xor esi, 0x363e0153
xchg esi, edx
and edi, ebx
rol ebx, 0x11
jmp 0x497418
pop ecx
not edi
neg edi
add ebx, edx
inc esi
mov edx, edi
mov ebx, 0x364528ce
add edi, ebx
and edi, esi
rol edi, 0x1a
inc ebx
or edx, 0x3646c0ba
jmp 0x49469e
push 0x1c7fbb0e
inc edx
sub ebx, edi
add edi, edx
add edx, esi
add esi, edx
mov ebx, esi
and edx, 0x364fc580
sub esi, ebx
xchg edi, esi
and edx, 0x3650bf1c
mov ebx, edi
and edi, edx
bswap edx
not edi
add edx, esi
jmp 0x494609
pop ecx
add edi, edx
xor ebx, esi
mov edx, ebx
dec esi
bswap edx
xor esi, ebx
xor edi, edx
mov edi, ebx
sub edx, ebx
dec edi
jmp 0x4960ad
push 0x1c7a699b
sub edi, 0x36786ce4
ror ebx, 0x1a
nop
and esi, edx
and ebx, 0x3679bb30
not ebx
shr esi, 9
and edx, edi
sub ebx, edx
jmp 0x495aeb
pop ecx
bswap esi
ror ebx, 0xf
mov edi, edx
ror edx, 0xb
inc esi
sub edx, esi
add esi, edi
xchg esi, ebx
jmp 0x4943cd
pop ecx
sub edx, 0x367dfa32
xor ebx, edx
neg ebx
sub edi, esi
mov edi, esi
xor edi, edx
mov esi, 0x367fde80
add esi, ebx
mov esi, ebx
sub edi, edx
dec edx
ror edx, 0x1a
jmp 0x497045