Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMessagePos
cmp eax, 0xfffffef2
jne 0x40107a
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
ret
call sub.user32.dll_GetKBCodePage
cmp eax, 0xfffffedc
jne 0x4010db
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.user32.dll_ReleaseCapture
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xfffffeda
jne 0x401164
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.user32.dll_ReleaseCapture
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.user32.dll_ReleaseCapture
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.advapi32.dll_CloseCodeAuthzLevel
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xfffffed9
jne 0x4011fc
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.user32.dll_ReleaseCapture
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.user32.dll_ReleaseCapture
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xfffffed8
jne 0x4012a3
call sub.user32.dll_ReleaseCapture
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.user32.dll_ReleaseCapture
call sub.user32.dll_ReleaseCapture
call sub.user32.dll_ReleaseCapture
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.ntdll.dll_RtlCreateUserSecurityObject
call sub.user32.dll_ReleaseCapture
call sub.user32.dll_ReleaseCapture
call sub.advapi32.dll_CloseCodeAuthzLevel
call sub.user32.dll_ReleaseCapture
call sub.user32.dll_ReleaseCapture
ret
jmp 0x507e4b
sub ecx, 0xa2d5e0bf
bswap edx
sub edi, esi
xor edx, 0xa2d68be4
jmp 0x5090ca
push 0xa2ea8d4b
add edx, 0xa42f3f51
inc edi
inc ecx
mov ecx, edi
mov ecx, 0xa4302d3a
or edx, esi
mov edx, ecx
neg esi
rol ecx, 0xd
ror ecx, 0x1c
xor ecx, edi
jmp 0x509e60
call fcn.00508b10
or esi, 0xa431c74c
xchg esi, edx
sub edi, ecx
xor edx, esi
bswap edx
or edi, 0xa432ec44
mov ecx, edi
jmp 0x50a5f4
mov ebx, 0x6e447c44
and edi, edx
add edx, ecx
xchg edi, edx
rol esi, 0x16
xor esi, 0xa43edeee
xor edx, ecx
add edx, edi
shl edx, 2
jmp 0x509814
push 0xa2dbe3a9
ror edi, 0xd
mov ecx, edx
xchg esi, ecx
shr edx, 0x1c
and esi, edx
xor edx, esi
mov ecx, esi
or ecx, edx
jmp 0x50a254
pop ebx
add esi, ecx
and esi, ecx
or edi, ecx
mov ecx, edi
and esi, 0xa450805e
xchg esi, edi
dec edx
add ecx, 0xa451344e
and ecx, edi
mov edx, ecx
xor ecx, edx
sub ecx, edi
jmp 0x50a0d3
push 0xa2deb6b6
mov edx, 0xa45859cf
neg edi
and edi, 0xa458c9da
shr edx, 0xd
and ecx, edi
jmp 0x50948c
pop ebx
add esi, 0xa45c6615
or esi, 0xa45c9e6e
sub esi, 0xa45cd667
sub edx, ecx
mov ecx, edx
jmp 0x508cc4
push 0xa2e8bd83
xchg edi, edx
ror ecx, 0x11
sub edi, edx
inc ecx
jmp 0x508265
push 0xa2eb1205
shr ecx, 0x17
dec esi
neg ecx
xor edx, esi
rol edx, 3
ror esi, 0x1c
sub edx, edi
rol edx, 0xf
mov edi, edx
mov edi, ecx
and ecx, edx
jmp 0x50824d
push 0xa2f5a0c4
sub edi, 0xa46388da
sub edi, ecx
sub edi, ecx
add edi, edx
bswap esi
shl ecx, 0x1e
and ecx, esi
bswap edx
sub edx, 0xa465518e
shl edx, 0x11
jmp 0x508213
push 0xa2f7b93c
not edx
and edi, 0xa466117e
sub edi, 0xa4664977
sub edi, 0xa46682ef
neg edx
or edx, edi
mov edx, 0xa467e7fe
shl ecx, 0x19
sub edx, esi
jmp 0x509cc5
mov ebx, 0x6e447c44
shr ecx, 0x14
shr ecx, 0x1d
xor edi, ecx
sub esi, edi
xchg ecx, edx
mov ecx, esi
neg esi
bswap esi
jmp 0x50a76a
push 0xa2eb55f3
mov edi, esi
xor edi, edx
mov edx, edi
and esi, ecx
mov edx, ecx
mov edi, esi
not esi
jmp 0x50899a
mov ebx, 0x2d734e3d
xchg edi, ecx
nop
not edx
xor ecx, edi
or edx, edi
xor esi, 0xa4710a8e
dec esi
jmp 0x50a39b
call fcn.00508b10
inc edx
ror esi, 0x14
mov edx, ecx
xchg edi, esi
sub edx, edi
jmp 0x50a68b
call fcn.00508b10
mov esi, 0xa4730227
xor edx, 0xa4733f18
dec edi
add ecx, esi
mov edx, 0xa47404d5
rol edi, 6
xchg esi, edx
dec edx
jmp 0x509f41
push 0xa2e31004
add esi, edi
dec edx
add esi, 0xa4758652
and ecx, edi
or ecx, esi
or ecx, edi
sub edi, edx
sub edx, 0xa476c021
jmp 0x5082d7
push 0xa2e352e3
or edx, 0xa4771465
bswap edi
or edi, edx
mov ecx, edi
add ecx, edi
jmp 0x508d52
call ebx
not ecx
xchg edi, esi
mov esi, 0xa47dc1d9
xchg ecx, esi
and ecx, esi
add esi, ecx
xor ecx, esi
jmp 0x508ca1
pop ebx
mov edx, 0xa483a3d1
ror edi, 0x1b
inc ecx
not edi
and ecx, edx
xor edx, esi
or edi, esi
add ecx, 0xa4859eff
or edx, edi
jmp 0x508cec
push 0xa2db61de
add edi, edx
xor ecx, esi
xchg edx, ecx
and edi, ecx
xor edi, 0xa4872924
and edi, ecx
or ecx, esi
xor ecx, edx
and esi, edx
not ecx
jmp 0x508eda
call ebx
add esi, 0xa492f63b
mov esi, 0xa4933d80
and edi, ecx
and edi, edx
add esi, 0xa493e06d
mov edi, esi
jmp 0x509739
pop ebx
xor edx, 0xa4946401
rol edi, 2
not edx
add edi, 0xa4950d65
sub edx, esi
nop
nop
add esi, edx
xchg edx, edi
mov edi, 0xa4973ede
jmp 0x508d0c
pop ebx
inc esi
sub edx, 0xa498137f
xchg edx, esi
shl ecx, 0xe
inc edi
add ecx, edx
xor edi, 0xa499518b
mov esi, 0xa4998e92
or edi, ecx
jmp 0x509aef
push 0xa2f73314
mov edx, 0xa4a35345
shr ecx, 0x11
xor esi, 0xa4a3dd5e
add edi, edx
or edi, 0xa4a454d3
or esi, ecx
and edx, esi
jmp 0x50a53c
pop ebx
xor esi, 0xa4a51e77
neg esi
mov ecx, edi
shl edx, 7
shl ecx, 0x11
or esi, edx
xchg edx, edi
mov esi, 0xa4a71a6d
and edx, 0xa4a7573e
sub esi, 0xa4a79431
sub edx, ecx
add ecx, edi
xchg edi, ecx
jmp 0x509745
push 0xa2e10358
rol edx, 0x1f
or ecx, edx
jmp 0x5086d2
pop ebx
and ecx, edx
xor edx, ecx
xor esi, edi
bswap ecx
jmp 0x508e3e
push 0xa2e14524
xor ecx, esi
xor ecx, edx
inc esi
or ecx, esi
not ecx
add edx, edi
add edi, ecx
or esi, 0xa4c2c375
jmp 0x508a18
push 0xa2e87b21
add edi, esi
xor ecx, 0xa4c4eaaa
and edx, 0xa4c527a9
xchg edi, esi
and esi, ecx
or edi, ecx
shr esi, 0x12
xor edi, 0xa4c66264
jmp 0x50816b
push 0xa2fa587d
add edi, ecx
mov edi, ecx
rol ecx, 0x15
bswap ecx
xchg edi, esi
mov edx, edi
add esi, 0xa4c82f7e
jmp fcn.00509c59
pop ebx
xor edi, 0xa4ca8b90
xor ecx, edx
and ecx, edi
nop
and edi, 0xa4cb7c99
sub ecx, 0xa4cbc806
and ecx, esi
bswap esi
xchg esi, edi
add edx, ecx
xchg edi, ecx
xor edi, ecx
or esi, ecx
jmp 0x509211
call fcn.00508b10
add edi, ecx
not edx
bswap esi
sub esi, 0xa4d067ec
sub edx, esi
jmp 0x50832c
push 0x40
or ecx, 0xa4e8b803
and ecx, esi
sub ecx, esi
xor edx, 0xa4ea9e43
inc esi
mov esi, ecx
xor edi, ecx
xor edi, esi
or edi, edx
jmp 0x508982
push 0xa2f9d3c2
xchg ecx, esi
not ecx
and edi, esi
xor ecx, 0xa4f57f9c
or ecx, 0xa4f61627
jmp 0x5099f3
pop ebx
sub ecx, 0xa5026ba6
or esi, 0xa5032965
sub edi, 0xa503c23a
sub esi, ecx
or edi, 0xa504edd2
xchg edi, ecx
xor ecx, esi
xor edi, 0xa507a8c7
jmp 0x508952
push 0xa2edaa82
dec esi
sub edx, edi
sub ecx, 0xa5133b0a
and ecx, edi
and esi, edi
inc ecx
xchg esi, edx
jmp 0x50a4ef
pop ebx
add edx, ecx
bswap ecx
inc edx
or ecx, edi
xor edi, 0xa5247372
bswap ecx
or esi, ecx
jmp 0x5080b2
mov ebx, 0x2d734e3d
rol ecx, 2
add esi, ecx
xor esi, ecx
shl edi, 3
or esi, ecx
add edi, edx
sub edx, ecx
jmp 0x50a4a6
call fcn.00508b10
xor edx, esi
and ecx, edi
sub esi, edx
and edi, ecx
inc edx
xchg ecx, esi
neg esi
jmp 0x50a134
pop ebx
xchg ecx, edi
ror edx, 0x1c
mov edx, 0xa53657d1
and edi, ecx
ror edi, 3
xchg edx, ecx
and esi, edx
or ecx, edx
and esi, edx
jmp 0x509b75
call ebx
shl edx, 8
neg edi
xor ecx, esi
add edx, esi
nop
or ecx, esi
jmp 0x508fff
push 0x106a4b
or edx, esi
sub edx, 0xa53f3f9a
or edi, edx
or edi, ecx
and ecx, edi
jmp 0x50950f
mov ebx, 0x6e447c44
mov edx, esi
sub edx, 0xa54258d4
xor edx, 0xa54317c7
or edi, esi
rol edx, 0xb
inc edi
mov edx, edi
xor ecx, 0xa5460025
add ecx, 0xa5469790
mov edi, edx
jmp 0x50a30f
mov ebx, 0x6e447c44
mov edi, esi
mov ecx, edx
or ecx, 0xa5572ff8
or edx, edi
rol edx, 0x13
or ecx, edx
or esi, edx
inc edi
ror ecx, 0xa
mov edi, edx
jmp 0x50a21e
pop ebx
bswap edi
mov edx, edi
jmp 0x50814f
pop ebx
add edi, esi
sub edx, esi
or esi, 0xa5c095bb
mov edx, esi
xor esi, edx
shl ecx, 0xa
or ecx, edi
not edi
add edi, edx
add edx, esi
sub ecx, esi
mov esi, edi
nop
and ecx, edi
add edi, ecx
jmp 0x508381
pop ebx
mov edi, esi
xchg ecx, esi
mov edi, esi
sub ecx, 0xa5c705b6
ror ecx, 0xe
inc edi
sub esi, edx
mov ecx, 0xa5c894dc
rol edi, 0xc
jmp 0x5095a7
pop ebx
xor esi, edx
shr edi, 2
bswap ecx
and edi, ecx
add edx, esi
sub edx, 0xa5cb8da7
sub esi, 0xa5cbf1dd
or esi, 0xa5cc55fe
jmp 0x508708
mov ebx, 0x2d734e3d
nop
add ecx, esi
or edi, edx
dec ecx
xchg ecx, edx
nop
add edi, edx
or edx, edi
or esi, ecx
neg edx
jmp 0x507ec2
push 0xa2f3ca53
rol edi, 0x1d
sub ecx, 0xa5e3965d
rol ecx, 0xe
mov edi, edx
ror ecx, 6
dec ecx
sub edi, 0xa5e58908
xchg edx, ecx
sub esi, 0xa5e66ad2
sub edi, edx
xor edx, ecx
sub esi, edx
jmp 0x509dff
push 0xa2de3392
add esi, 0xa5f30d0a
and edi, edx
mov edi, ecx
mov ecx, edi
mov edx, edi
xor esi, 0xa5fa5e8d
sub esi, 0xa5fac21b
xor edi, ecx
jmp 0x50a5c9
push 0xa2dba140
and edx, ecx
xchg edx, edi
bswap edx
not edx
jmp 0x508006
push 0xa2e2cfe4
add edi, ecx
mov ecx, 0xa61734fe
and esi, edi
inc edi
or edx, esi
xchg esi, edx
and edx, edi
sub edi, 0xa619ecd5
or edx, ecx
or edi, edx
sub ecx, esi
jmp 0x5082b6
pop ebx
mov edi, 0xa628c068
mov esi, edi
sub edi, 0xa6299d59
neg ecx
xor esi, edx
add esi, 0xa62ac8f2
jmp 0x509bc6
pop ebx
inc esi
xor edx, edi
or ecx, edi
and edx, esi
neg edx
neg esi
mov esi, ecx
jmp 0x509012
pop ebx
or esi, ecx
and esi, edi
xchg edi, edx
bswap edi
or edx, 0xa63fd993
jmp 0x50989f
pop ebx
neg edi
add esi, edi
and edx, edi
or edx, 0xa6437b41
not ecx
sub edi, esi
sub edx, edi
not edi
mov edx, edi
jmp 0x5097a4
push 0xa2dad578
not ecx
xor edx, esi
add edi, edx
sub edx, esi
sub ecx, edi
and edi, edx
add esi, 0xa656fa9f
jmp 0x50976a
pop ebx
not esi
mov esi, edi
and edi, 0xa671315f
and edi, edx
xchg ecx, edi
and ecx, edi
and ecx, 0xa672b7c8
or ecx, edx
jmp 0x508876
pop ebx
and esi, edx
xor esi, ecx
mov esi, edx
mov edx, esi
not ecx
ror ecx, 0x13
shl ecx, 0x1b
mov esi, 0xa68bdb0c
jmp 0x5096c1
call ebx
xchg esi, ecx
add ecx, 0xa68cd393
neg edx
xor edx, edi
add edx, ecx
inc ecx
xor edi, ecx
jmp 0x509fef
call ebx
dec edi
or edx, ecx
not edi
or ecx, edi
jmp 0x509c75
push 0xa2def747
and esi, 0xa6fc9511
xor ecx, edi
add edx, esi
mov edx, edi
or edx, esi
sub edx, 0xa6fe75c7
and edi, edx
add ecx, 0xa6ff5043
mov edx, 0xa6ffb2ec
and edi, esi
or esi, 0xa700742c
xor ecx, 0xa700d99e
jmp 0x508904
pop ebx
mov edi, ecx
sub ecx, esi
add esi, ecx
mov esi, edx
mov esi, 0xa70c7a3e
jmp 0x50968b
push 0x401400
and edi, 0xa70d0cb4
add edx, 0xa70d6f2c
ror edx, 0x14
mov edx, edi
xor ecx, edi
xor edx, ecx
and ecx, esi
or esi, ecx
dec esi
mov edi, ecx
ror edi, 4
or edi, esi
shl ecx, 0xe
bswap esi
dec esi
jmp 0x508458
push 0xa2ee7071
or edi, 0xa7325d87
bswap edi
jmp 0x509860
mov ebx, 0x4132136a
xor edi, 0xa7336b11
sub esi, ecx
sub edx, 0xa73431b9
and edx, edi
mov edi, edx
and esi, edi
and ecx, esi
jmp 0x50827f
pop ebx
xor edx, esi
rol edx, 0x1e
xor edx, edi
xchg edi, ecx
mov esi, edx
and edx, edi
mov esi, 0xa75db510
jmp 0x50a3ea
pop ebx
xor ecx, esi
add ecx, 0xa7686aaf
xchg ecx, edx
or edx, 0xa768f4fa
mov esi, 0xa7694b37
sub ecx, esi
bswap esi
xchg esi, ecx
neg edx
not esi
shl edi, 0x1e
jmp 0x509e41
pop ebx
xor edi, esi
neg ecx
neg esi
jmp 0x50aacc
pop ebx
add edi, edx
xchg edi, esi
add ecx, edx
add esi, edx
xor ecx, edx
or edx, esi
sub esi, edx
mov esi, ecx
xchg edx, edi
add ecx, 0xa7783f28
or esi, ecx
ror esi, 8
add ecx, edx
jmp 0x508f20
push 0xa2db1fde
sub esi, 0xa7796432
shl esi, 2
xor edx, 0xa779f098
mov edx, esi
xor esi, edx
bswap esi
mov ecx, esi
sub esi, edi
jmp 0x5083a0
pop ebx
and ecx, esi
or edx, 0xa77e1587
mov esi, ecx
or edi, 0xa77e9b05
inc edx
ror edx, 0x15
or esi, edi
ror ecx, 2
mov edi, 0xa77ff52d
jmp 0x50a900
call fcn.00508b10
xchg esi, edx
nop
and esi, ecx
sub ecx, 0xa7867f23
neg ecx
xor edi, ecx
sub esi, 0xa7874fe1
jmp 0x50896f
push 0xa2eeb209
xchg edi, edx
inc edx
add ecx, esi
mov edx, 0xa78cd9cd
jmp 0x509ad2
pop ebx
mov ecx, edx
inc edi
and esi, edi
xor edi, 0xa7925c17
xchg ecx, edi
add esi, edi
rol esi, 0x14
add esi, 0xa793802b
xor edx, edi
add edx, 0xa7940726
jmp 0x508476
push 0xa2fa151f
nop
or ecx, edx
or esi, edx
and edx, ecx
xor esi, 0xa7b26a25
add edx, 0xa7b2a7fe
add edi, 0xa7b2e484
xchg ecx, edx
add esi, ecx
shl edi, 0xf
jmp 0x50872f
pop ebx
and ecx, 0xa7baca00
xchg edi, edx
dec edi
shr ecx, 0x13
shr edi, 0xd
sub esi, 0xa7bc0a7a
mov esi, edx
or ecx, 0xa7bc828a
bswap edi
jmp 0x5085f6
mov ebx, 0x6e447c44
sub esi, 0xa7bf1db4
neg edx
sub ecx, esi
rol esi, 7
and edi, esi
xor esi, edi
not edi
jmp 0x50879a
pop ebx
bswap edx
sub edx, 0xa7c129a7
sub esi, ecx
sub edi, 0xa7c1b05e
and esi, edx
or edi, 0xa7c22857
dec esi
xchg edx, esi
jmp 0x5086c4
push 0xa2f990ae
shl edx, 5
sub ecx, esi
and ecx, edi
mov edi, 0xa7cab46a
xchg esi, edx
shr edi, 0xe
xchg edx, ecx
xor edi, ecx
dec edi
xor ecx, edx
mov esi, edx
xor ecx, 0xa7cca7df
and edi, edx
shl esi, 0x16
xor edi, 0xa7cd5c26
jmp 0x508812
pop ebx
shr edx, 8
and esi, edi
and edx, 0xa7d043b3
ror ecx, 0x19
or edx, esi
and esi, edx
add edi, ecx
add ecx, edi
sub esi, edx
jmp 0x509f61
pop ebx
or esi, edi
mov ecx, esi
or esi, edi
sub edx, esi
add edx, edi
xchg ecx, esi
neg edx
jmp 0x50a655
mov ebx, 0x2d734e3d
or edx, 0xa7e1acb5
mov esi, edi
xor edi, esi
and ecx, edx
jmp 0x50893b
pop ebx
mov edx, ecx
mov edx, ecx
rol ecx, 7
mov esi, ecx
sub ecx, 0xa7ee2d64
shl edi, 0x15
add esi, 0xa7eea735
or edx, ecx
jmp 0x50a1c4
call ebx
or ecx, 0xa7f26b6a
mov ecx, 0xa7f2a83d
shr edx, 0x1a
and ecx, esi
and esi, ecx
or edi, 0xa7f3a3ab
add ecx, esi
ror edx, 0xf
and edi, esi
add edi, 0xa7f4932a
and edx, ecx
jmp 0x5094fc
mov ebx, 0x2d734e3d
sub esi, edi
sub ecx, 0xa7f82fc0
inc edi
and edi, edx
shr edx, 0x1d
or esi, ecx
jmp 0x50a010
push esp
mov edi, esi
rol ecx, 0x13
shr esi, 4
inc ecx
and ecx, edi
xchg edi, ecx
add esi, edi
and edi, edx
and edx, 0xa7fb6451
mov edi, 0xa7fba175
sub esi, 0xa7fbde40
jmp 0x5087cc
pop ebx
add esi, edi
sub edx, esi
add edx, ecx
or ecx, edi
shr edx, 0x14
xor esi, 0xa7fd5c99
or esi, edx
or ecx, 0xa7fde394
jmp 0x5088b2
push 0xa2ead0f5
mov esi, 0xa7fe38ea
and esi, edx
or esi, 0xa7feb0fe
xor ecx, esi
xchg esi, edi
xor edi, ecx
and edi, 0xa7ffa0b3
mov edx, edi
xor ecx, esi
or ecx, edi
mov ecx, edi
jmp 0x50817d
call ebx
inc ecx
sub edi, 0xa80dc16a
add esi, edi
or edx, ecx
bswap edx
or esi, 0xa80ec1b9
or edi, 0xa80efe9a
jmp 0x509d65
push 0xa2ea4cc3
xchg ecx, esi
mov edx, esi
inc edx
bswap ecx
xchg edx, edi
bswap edx
rol ecx, 1
sub edx, ecx
jmp 0x507e9b
push 0xa2ee2fae
xor esi, edx
sub edx, esi
or esi, edx
sub edx, ecx
sub edx, edi
jmp 0x509595
pop ebx
mov ecx, edi
add edx, 0xa8198787
neg ecx
mov ecx, 0xa81a03ca
and esi, edx
and edx, esi
or ecx, 0xa81ab78a
xchg edx, ecx
jmp 0x50876f
call fcn.00508b10
inc edi
dec edi
sub edx, edi
mov esi, 0xa81c238b
xchg edx, edi
xchg edx, esi
jmp 0x509db4
call ebx
ror edi, 0x10
shr edi, 4
sub esi, ecx
xor esi, edx
jmp 0x508fb8
push 0xa2e52191
add ecx, edx
and ecx, edi
ror ecx, 8
not edx
or ecx, 0xa82ad5d9
add edi, esi
ror esi, 0x12
or edi, 0xa82b8ab8
neg esi
and edx, esi
ror edx, 3
jmp 0x50a569
push 0xa2e5a499
sub edx, edi
shl edi, 0x1c
xor ecx, edi
not ecx
xchg esi, edi
add edi, 0xa82de1c6
jmp 0x50a40a
call ebx
neg edx
ror ecx, 0x15
add edx, ecx
and ecx, esi
inc edx
ror esi, 4
and edx, ecx
xor esi, 0xa8317792
xor ecx, edx
and edi, esi
xor edx, esi
jmp 0x509180
pop ebx
mov esi, 0xa83a6b02
or ecx, edx
mov esi, ecx
sub edi, ecx
xchg esi, edx
not ecx
and ecx, edi
xor edx, 0xa83c1c3f
jmp 0x50849a
call fcn.00508b10
and edi, esi
sub edi, 0xa8424217
shr ecx, 7
shr edx, 0x13
or edx, ecx
mov edx, esi
shl edx, 0xd
xor edi, esi
dec edi
mov ecx, esi
or ecx, 0xa844d0b7
add esi, 0xa8453c40
or edx, 0xa845b177
jmp 0x50a7d2
mov ebx, 0x2d734e3d
xor edi, ecx
xor edi, 0xa8464216
xor edx, edi
add edi, esi
or edx, ecx
and esi, 0xa84735a2
sub edx, ecx
and esi, edx
or ecx, 0xa847fb5e
mov esi, 0xa8483906
xor edx, edi
dec edx
shl esi, 8
or ecx, edi
not edx
sub esi, 0xa849adfb
jmp 0x508293
call fcn.00508b10
sub esi, edx
or esi, edx
shl edx, 8
mov esi, edi
xor edi, 0xa8543927
mov edx, ecx
xor ecx, edx
sub edx, ecx
jmp 0x50922c
call fcn.00508b10
mov edi, esi
mov edx, ecx
rol edi, 0xc
xor edx, esi
and ecx, edi
xchg esi, ecx
and esi, 0xa85f4c83
xchg esi, edi
sub edi, esi
sub edi, ecx
sub esi, 0xa8604ced
rol esi, 0x13
xchg ecx, edx
jmp 0x50a047
push 0xa2f55d33
add ecx, edx
xchg ecx, esi
and edi, 0xa8639859
xchg esi, edi
bswap ecx
add edx, esi
shr edx, 0xd
shl edx, 0x19
jmp 0x5081bf
push 0xa2e5e6be
rol edx, 4
dec esi
xor edi, ecx
shl edx, 0x15
shr edi, 0x1f
mov edx, ecx
sub esi, 0xa866a58f
mov esi, ecx
jmp 0x50a97e
call fcn.00508b10
or esi, edx
sub ecx, edx
sub edi, esi
not ecx
mov esi, edi
neg ecx
or esi, edx
add edi, esi
mov ecx, esi
shl esi, 0x1c
add ecx, edi
add edi, esi
jmp 0x50a8c5
push 0xa2edec0a
and edx, 0xa873e89c
sub edx, ecx
ror edi, 0xa
sub edi, edx
and esi, ecx
sub edx, edi
and esi, edx
mov edx, esi
jmp 0x509f7b
push 0xa2f7762f
xchg ecx, esi
mov esi, 0xa879dd28
sub ecx, edi
sub edx, 0xa87a552a
xchg ecx, edi
and esi, 0xa87add75
add ecx, edi
nop
and edi, 0xa87b9225
shr ecx, 0x1a
jmp 0x5081e7
push 0xa2e56245
or esi, edi
rol edi, 0xe
xor edi, ecx
xor ecx, edx
shr esi, 0x1c
sub edx, 0xa87d61c5
xchg edx, ecx
and edx, ecx
xor ecx, 0xa87e142e
jmp 0x50a0fe
push 0xa2de743a
add esi, edi
sub edi, 0xa8823d8c
shl edi, 0xa
add edx, edi
xor ecx, edx
xor esi, ecx
add esi, edi
or esi, edi
shr edi, 5
add edx, esi
shr esi, 0x18
rol ecx, 0x11
inc edi
jmp 0x508111
call ebx
and edi, 0xa8853499
shr edx, 0x14
sub ecx, 0xa885ad1f
xchg ecx, edx
sub edi, edx
and esi, ecx
or edi, esi
jmp 0x50a8a4
pop ebx
xor ecx, esi
sub edi, 0xa88b1ce1
or ecx, edi
jmp 0x50853e
push esp
or edx, 0xa88e27dd
xor esi, edi
mov ecx, esi
sub edi, esi
sub edx, esi
bswap edx
and ecx, edx
shr esi, 0x1f
shl esi, 1
or edi, ecx
jmp 0x509e19
call fcn.00508b10
add ecx, 0xa89dd20e
xor esi, 0xa89e0a07
rol ecx, 0x1d
dec ecx
xchg esi, ecx
and esi, ecx
and esi, edi
xor edi, esi
mov edx, edi
add esi, 0xa89fd0c6
ror esi, 3
mov edi, edx
or edx, edi
jmp 0x509244
call ebx
sub edx, 0xa8a56f18
sub edi, esi
sub ecx, esi
xor edi, 0xa8a614cd
and edx, 0xa8a64ce1
not edx
dec edi
rol edi, 2
shr edi, 0x18
sub edx, 0xa8a77595
and esi, ecx
shl esi, 0x15
and ecx, esi
jmp 0x508562
pop ebx
mov ecx, edi
not edx
rol edi, 0xf
or esi, 0xa8b473c7
add edi, 0xa8b4af27
or ecx, 0xa8b4eccb
xor ecx, edi
jmp 0x5088ed
call ebx
add edi, edx
add edx, edi
sub esi, 0xa8b5fe25
add edx, esi
jmp 0x509037
pop ebx
add ecx, esi
or edx, 0xa8b9bd9c
add edx, ecx
mov ecx, esi
and edx, esi
xchg esi, ecx
nop
xor ecx, esi
jmp 0x509a8e
push 0xa2e62820
xor edi, ecx
add edi, 0xa8c21eb7
xchg ecx, edi
mov ecx, edi
add ecx, edi
add esi, ecx
or edx, edi
xchg edx, esi
xchg ecx, esi
or ecx, 0xa8c40615
or edx, edi
or ecx, 0xa8c47d7e
add edx, edi
xor edi, edx
jmp 0x507f89
push 0xa2f38827
mov esi, edx
mov edi, 0xa8d97437
dec edx
or edx, esi
shr edx, 0xb
or edi, esi
and edx, esi
or edx, edi
shr edx, 0x10
jmp 0x508dd1