Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
xchg edi, ebx
mov ecx, ebx
add ecx, 0x57f3c178
bswap edx
call sub.user32.dll_GetInputDesktop
xor edx, ecx
neg edi
mov edi, 0x57f5c79b
and edx, ebx
xor ecx, ebx
sub ecx, edx
xor edi, ebx
dec ecx
cmp eax, 0xffffff0e
jne 0x4010ac
call sub.shell32.dll_ILCloneFirst
call sub.kernel32.dll_SetUserGeoID
call sub.user32.dll_RegisterClipboardFormatW
call sub.shell32.dll_ILCloneFirst
call sub.ntdll.dll_NtCreateProfile
call sub.kernel32.dll_SetUserGeoID
call sub.user32.dll_RegisterClipboardFormatW
call sub.kernel32.dll_SetUserGeoID
call sub.ntdll.dll_NtCreateProfile
call sub.ntdll.dll_NtCreateProfile
call sub.shell32.dll_ILCloneFirst
call sub.shell32.dll_ILCloneFirst
call sub.ntdll.dll_NtCreateProfile
call sub.ntdll.dll_NtCreateProfile
call sub.shell32.dll_ILCloneFirst
call sub.shell32.dll_ILCloneFirst
call sub.ntdll.dll_NtCreateProfile
call sub.ntdll.dll_NtCreateProfile
call sub.ntdll.dll_NtCreateProfile
call sub.ntdll.dll_NtCreateProfile
call sub.user32.dll_RegisterClipboardFormatW
call sub.ntdll.dll_NtCreateProfile
call sub.kernel32.dll_SetUserGeoID
call sub.kernel32.dll_SetUserGeoID
call sub.shell32.dll_ILCloneFirst
ret
mov ecx, edx
mov ebx, edi
call sub.user32.dll_GetInputDesktop
add ebx, edi
shl ecx, 0xe
mov ebx, 0x57fd1931
sub edx, ecx
cmp eax, 0xfffffeec
jne 0x401163
call sub.user32.dll_RegisterClipboardFormatW
call sub.user32.dll_RegisterClipboardFormatW
call sub.user32.dll_RegisterClipboardFormatW
call sub.kernel32.dll_SetUserGeoID
call sub.shell32.dll_ILCloneFirst
call sub.ntdll.dll_NtCreateProfile
call sub.shell32.dll_ILCloneFirst
call sub.user32.dll_RegisterClipboardFormatW
call sub.user32.dll_RegisterClipboardFormatW
call sub.user32.dll_RegisterClipboardFormatW
call sub.shell32.dll_ILCloneFirst
call sub.ntdll.dll_NtCreateProfile
call sub.shell32.dll_ILCloneFirst
call sub.ntdll.dll_NtCreateProfile
call sub.user32.dll_RegisterClipboardFormatW
call sub.user32.dll_RegisterClipboardFormatW
call sub.kernel32.dll_SetUserGeoID
call sub.user32.dll_RegisterClipboardFormatW
call sub.shell32.dll_ILCloneFirst
call sub.shell32.dll_ILCloneFirst
call sub.user32.dll_RegisterClipboardFormatW
call sub.user32.dll_RegisterClipboardFormatW
call sub.shell32.dll_ILCloneFirst
call sub.kernel32.dll_SetUserGeoID
call sub.kernel32.dll_SetUserGeoID
call sub.shell32.dll_ILCloneFirst
call sub.kernel32.dll_SetUserGeoID
call sub.user32.dll_RegisterClipboardFormatW
call sub.user32.dll_RegisterClipboardFormatW
call sub.kernel32.dll_SetUserGeoID
ret
mov ebx, 0x580171f2
call sub.user32.dll_GetInputDesktop
or edx, ecx
add edi, ecx
inc edx
cmp eax, 0xffffff0e
jne 0x4011dd
call sub.kernel32.dll_SetUserGeoID
call sub.shell32.dll_ILCloneFirst
call sub.user32.dll_RegisterClipboardFormatW
call sub.user32.dll_RegisterClipboardFormatW
call sub.kernel32.dll_SetUserGeoID
call sub.ntdll.dll_NtCreateProfile
call sub.kernel32.dll_SetUserGeoID
call sub.ntdll.dll_NtCreateProfile
call sub.kernel32.dll_SetUserGeoID
call sub.shell32.dll_ILCloneFirst
call sub.user32.dll_RegisterClipboardFormatW
call sub.ntdll.dll_NtCreateProfile
call sub.user32.dll_RegisterClipboardFormatW
call sub.ntdll.dll_NtCreateProfile
call sub.kernel32.dll_SetUserGeoID
call sub.shell32.dll_ILCloneFirst
call sub.ntdll.dll_NtCreateProfile
call sub.ntdll.dll_NtCreateProfile
call sub.kernel32.dll_SetUserGeoID
ret
or ecx, ebx
or edi, edx
or edi, ebx
dec ecx
rol ebx, 0xf
sub edi, edx
sub ebx, edx
sub edi, 0x580894a3
call sub.user32.dll_GetInputDesktop
xchg edi, ecx
add edi, ecx
or edx, ebx
and edi, ecx
neg ecx
add edi, edx
sub ecx, ebx
cmp eax, 0xffffff16
jne 0x401283
call sub.user32.dll_RegisterClipboardFormatW
call sub.shell32.dll_ILCloneFirst
call sub.ntdll.dll_NtCreateProfile
call sub.shell32.dll_ILCloneFirst
call sub.user32.dll_RegisterClipboardFormatW
call sub.ntdll.dll_NtCreateProfile
call sub.kernel32.dll_SetUserGeoID
call sub.shell32.dll_ILCloneFirst
call sub.kernel32.dll_SetUserGeoID
call sub.ntdll.dll_NtCreateProfile
call sub.shell32.dll_ILCloneFirst
call sub.kernel32.dll_SetUserGeoID
call sub.user32.dll_RegisterClipboardFormatW
call sub.user32.dll_RegisterClipboardFormatW
call sub.ntdll.dll_NtCreateProfile
call sub.kernel32.dll_SetUserGeoID
call sub.shell32.dll_ILCloneFirst
call sub.shell32.dll_ILCloneFirst
call sub.user32.dll_RegisterClipboardFormatW
call sub.kernel32.dll_SetUserGeoID
call sub.kernel32.dll_SetUserGeoID
call sub.ntdll.dll_NtCreateProfile
call sub.user32.dll_RegisterClipboardFormatW
ret
jmp 0x4954cf
xor edx, edi
jmp 0x495bfb
call ecx
add esi, edi
add esi, edi
and edi, ebx
xor edx, ebx
jmp 0x4967f6
pop ecx
xor edx, ebx
shl edx, 0xf
sub ebx, edx
and edi, edx
or edx, ebx
xor esi, edx
and esi, 0x5e2a7f85
mov edi, 0x5e2afb1b
jmp 0x498176
pop ecx
and edi, 0x5e3a0055
sub edi, esi
or edx, esi
jmp 0x496397
pop ecx
and edx, 0x5e828e46
xor edi, edx
or esi, edi
xor ebx, edx
and edi, 0x5e837d38
add edx, esi
or ebx, esi
xor edi, ebx
mov esi, edi
bswap edi
or edx, edi
mov esi, edx
jmp 0x496bb8
mov ecx, 0x6440607e
or ebx, edi
add ebx, 0x5e89e87e
sub edi, edx
sub edx, esi
and esi, edi
jmp 0x496e74
push 0x58887f3d
mov edi, edx
add esi, edi
or edx, edi
ror ebx, 8
nop
dec ebx
ror edi, 1
jmp 0x497010
push 0x58820100
inc edx
add edi, ebx
and ebx, edx
or ebx, esi
rol esi, 0x10
ror esi, 9
inc ebx
xchg ebx, edi
or edi, esi
jmp 0x497508
call fcn.00495dc3
and edi, edx
add edi, ebx
or edi, ebx
rol esi, 0x1c
add esi, edx
xchg esi, ebx
xchg ebx, edx
jmp 0x498628
pop ecx
add edx, edi
and ebx, 0x5ec1b341
jmp 0x495800
push 0x58913760
mov ebx, edi
sub esi, 0x5ec2ae12
xor edi, esi
ror ebx, 0xd
and edx, edi
or esi, ebx
mov edx, 0x5ec4b9fa
and edi, edx
ror edi, 0xe
ror edx, 5
shr edi, 0xa
or edx, esi
sub edi, edx
dec edi
jmp 0x497dda
pop ecx
add edx, esi
bswap esi
and ebx, edx
add ebx, edx
xor edi, 0x5ecdf54c
xor edi, edx
mov esi, edx
or edx, edi
shl esi, 8
mov esi, ebx
nop
add edx, esi
xor edi, esi
jmp 0x49897f
push 0x589389c0
and edx, 0x5ef8b291
and esi, edi
inc ebx
not ebx
or edx, esi
sub ebx, edi
sub edx, esi
ror edi, 0xa
or ebx, 0x5efa9ccd
jmp 0x497cac
mov ecx, 0x6440607e
or edx, 0x5f02fd88
sub ebx, edx
xor esi, 0x5f036ad6
xor edi, esi
xchg edx, esi
add esi, 0x5f042f41
and ebx, edx
jmp 0x496950
pop ecx
add esi, ebx
or esi, edx
neg edx
mov edx, ebx
bswap edi
sub esi, edx
or ebx, esi
xor edx, 0x5f0bd6b0
xor edi, esi
rol ebx, 0x14
jmp 0x496f23
push 0x587eb4a8
shl ebx, 4
xchg edx, esi
or edx, esi
bswap ebx
xchg edx, esi
sub ebx, edi
not edi
mov edx, ebx
jmp 0x495d99
mov ecx, 0x43370267
and edx, esi
not edi
add ebx, edi
inc edx
shl edi, 0x1f
shl edx, 0x1a
nop
neg edi
xor esi, 0x5f4e0054
and edi, esi
neg edx
xor esi, edx
or esi, ebx
and edi, esi
jmp 0x497aee
push 0x58844401
sub edx, edi
xor ebx, esi
xchg edi, esi
mov edi, 0x5f71788a
sub edx, edi
and ebx, edx
and esi, ebx
xor esi, edx
jmp 0x498c07
push 0x5895b146
or ebx, 0x5f7cfa8e
inc edi
add edi, edx
sub edx, edi
add esi, edi
mov esi, edx
not edx
add esi, edx
shl ebx, 0x14
and edx, 0x5f7f1b98
add ebx, edx
and esi, 0x5f7f9645
shl edx, 0x1e
add edi, ebx
ror esi, 0xa
jmp fcn.0049609c
pop ecx
sub esi, ebx
add ebx, esi
sub esi, 0x5fb7d981
bswap edi
inc edi
xchg edx, esi
add edx, 0x5fb9bbb0
xchg edx, esi
jmp 0x497a2b
push 0x58956569
or edx, 0x5fbab532
sub edx, esi
xor edi, ebx
xor edi, 0x5fbc8871
and ebx, edx
and edx, esi
and edx, edi
xor ebx, esi
mov edx, ebx
add esi, edx
bswap ebx
xchg ebx, edi
mov esi, edx
xor ebx, edi
sub edx, edi
jmp 0x4969e7
pop ecx
mov esi, edi
add ebx, edx
ror esi, 0x11
add edi, ebx
neg ebx
mov edi, edx
dec ebx
jmp 0x4959e8
pop ecx
ror ebx, 0xa
xchg edi, esi
sub edx, 0x5fc5da8c
nop
and ebx, edi
xchg edi, esi
mov esi, edi
jmp 0x497325
push 0x588deecd
not edx
xchg esi, edx
xchg esi, ebx
inc edi
bswap ebx
inc ebx
xor esi, edx
xor edx, edi
jmp 0x497f79
pop ecx
add edi, esi
or edx, 0x602927b8
shr edx, 0x19
rol esi, 3
or ebx, 0x602a927f
and edi, edx
or esi, ebx
xor esi, 0x602c07d9
mov esi, 0x602c6a19
xchg edx, edi
not edi
jmp 0x498d01
push 0x5887e4db
xchg edi, ebx
or edx, 0x602e4054
mov ebx, edi
xor edi, edx
add edi, esi
or esi, edx
not ebx
dec edx
jmp 0x496fc0
pop ecx
xor edx, 0x60369738
and edi, ebx
sub ebx, 0x603766ed
sub ebx, edx
xchg ebx, edi
xchg esi, edx
jmp 0x4955e3
pop ecx
mov edi, esi
neg ebx
shl edi, 0x11
shr edx, 0xc
xchg ebx, edi
shl edx, 0x1c
jmp 0x4969ab
push 0x5885e582
xchg esi, edx
sub edi, esi
neg edx
mov esi, edi
xchg esi, ebx
xchg ebx, edx
or ebx, edi
inc esi
xor ebx, 0x603f0df1
mov ebx, edx
jmp 0x497d14
pop ecx
mov esi, 0x603ff37a
or esi, edi
xor edx, ebx
or edx, edi
and ebx, edx
add edi, ebx
or edi, edx
shr edi, 0x12
shl edi, 1
mov esi, 0x604428b1
jmp 0x49612e
call fcn.00495dc3
add edx, 0x6182b22f
and esi, 0x6182feca
xchg esi, edx
inc esi
mov edx, edi
and edi, ebx
and edi, edx
xchg ebx, edi
ror esi, 0x1d
or edx, esi
jmp 0x497705
push 0x588f14a4
dec edx
mov edi, esi
sub esi, 0x618f70d3
sub ebx, esi
and esi, edi
or ebx, 0x6190bc72
and edx, ebx
xor esi, 0x61919bc2
mov edi, esi
add ebx, edx
jmp 0x498b47
mov ecx, 0x6440607e
and edx, ebx
sub edx, edi
ror edx, 0x10
sub ebx, esi
and edx, ebx
jmp 0x4967af
mov ecx, 0x6440607e
mov esi, edx
or esi, edx
mov ebx, edx
xchg esi, edi
neg ebx
sub ebx, esi
jmp 0x496992
pop ecx
sub ebx, 0x61e6eb5c
and edi, 0x61e821ee
or edx, edi
xor esi, ebx
xor edx, ebx
or edx, esi
bswap esi
sub esi, ebx
xor edi, esi
shl ebx, 0x1d
jmp 0x496fac
call fcn.00495dc3
nop
bswap ebx
or edi, ebx
sub edi, ebx
ror ebx, 0x11
shr esi, 0x13
and ebx, edi
jmp 0x495504
pop ecx
xor ebx, edi
shl edx, 0x1a
sub ebx, 0x6249c93b
inc ebx
and ebx, edx
mov esi, ebx
and ebx, 0x624b76b7
xor esi, 0x624db20e
and edi, 0x624df3fc
dec edx
jmp 0x498966
pop ecx
and ebx, edi
mov edx, esi
mov esi, edx
jmp 0x4974bf
call fcn.00495dc3
and ebx, 0x62933048
or ebx, edx
and esi, ebx
mov esi, edx
add esi, edi
xor edx, 0x62954808
jmp 0x496b54
call fcn.00495dc3
add ebx, esi
not edx
inc ebx
or ebx, edx
neg edx
add ebx, esi
xchg edi, edx
or edx, ebx
jmp 0x497bd3
pop ecx
shl edx, 0x18
and edx, edi
and esi, edx
neg edx
xor edi, ebx
or edx, 0x62a03095
mov ebx, edx
xor edx, esi
mov edx, 0x62a17424
mov edx, ebx
jmp 0x495bdc
push 0x58958ec3
shr edi, 3
add edi, ebx
mov esi, edi
or esi, edx
dec edi
inc esi
shr edi, 1
dec ebx
inc ebx
not edx
xchg edi, ebx
sub ebx, 0x62aa92ce
xor edx, esi
jmp 0x495f08
pop ecx
and esi, edi
xor edx, ebx
ror esi, 2
or esi, edx
xchg edi, edx
xor esi, ebx
inc edi
mov esi, ebx
add ebx, edx
mov edi, edx
sub ebx, 0x62be20d2
jmp 0x49834b
call ecx
xor edx, ebx
xchg ebx, edi
jmp 0x498059
pop ecx
add edx, esi
sub esi, ebx
and edi, 0x62dfcd38
mov edx, ebx
add edi, edx
and esi, 0x62e119a4
jmp 0x498047
push 0x588c4cc1
xor edx, 0x62e9fb2a
and ebx, esi
or ebx, edx
and edi, edx
shr edi, 7
and edi, edx
mov esi, edx
xor edx, esi
bswap edi
jmp 0x497086
push 0x587fa789
add ebx, 0x62fc1ade
and ebx, edi
not edi
jmp 0x4978f8
mov ecx, 0x6440607e
inc edx
bswap ebx
mov edi, ebx
xor esi, edi
add edi, 0x6307d47d
sub edx, esi
xchg ebx, edi
xor edi, esi
ror ebx, 0x1d
and esi, ebx
jmp 0x4975bc
push 0x58890339
add edi, edx
xchg edi, esi
bswap edx
sub edx, 0x630bdc89
or edi, 0x630c5c2d
add esi, edx
shr edx, 8
mov edx, ebx
sub edi, 0x630e06b9
ror edx, 0x15
neg esi
jmp 0x495845
push 0x587ff7a7
mov esi, edx
or edi, esi
xor edi, 0x631059bc
neg edi
nop
sub edi, edx
shr esi, 0xc
jmp 0x4985a5
pop ecx
or edx, esi
ror edx, 0x19
and edx, ebx
xor edx, 0x631401f1
shl esi, 0xc
sub edx, edi
add ebx, esi
add ebx, edx
and edi, esi
xchg ebx, edx
xchg ebx, edx
and edi, esi
jmp 0x496183
call fcn.00495dc3
dec edi
xchg edi, edx
and esi, edi
sub ebx, edx
add ebx, esi
or esi, ebx
jmp 0x4973ce
pop ecx
add ebx, edi
dec ebx
xor edx, edi
dec ebx
add esi, edx
rol ebx, 6
bswap ebx
neg edi
shr ebx, 0xc
not ebx
and edx, ebx
rol esi, 8
jmp 0x49874a
call ecx
ror ebx, 0x1d
dec esi
sub edi, edx
xor ebx, esi
sub esi, ebx
or edx, ebx
sub esi, edx
not edx
xchg edi, ebx
rol esi, 0x16
and esi, 0x63458cd9
add edi, ebx
or esi, ebx
ror edx, 0xa
not ebx
sub edx, 0x6347e4ee
jmp 0x496402
pop ecx
or edx, 0x634d06a8
and edx, 0x634d78d0
jmp 0x49674a
pop ecx
xor edi, ebx
add ebx, esi
shr esi, 0x1c
mov edi, esi
xor edx, ebx
xchg esi, edi
and esi, 0x635c4ab8
xor esi, 0x635c9663
xor ebx, edi
add edi, 0x635d8ca5
jmp 0x49871c
push 0x5881b6f7
xchg edx, esi
and edx, edi
or edx, ebx
xor edx, edi
add edi, ebx
jmp 0x497913
push 0x58882be9
xchg edi, edx
bswap esi
sub edi, esi
sub ebx, 0x63621aef
or esi, ebx
inc ebx
or ebx, esi
add edi, 0x6363f571
add esi, edi
ror edi, 0x13
shl edx, 3
or edx, esi
add edx, ebx
jmp 0x495868
push 0x5888bae6
xchg edx, ebx
xor ebx, 0x636b2e01
neg edx
sub edx, 0x636ba008
xor edi, edx
xchg edi, esi
xchg ebx, esi
neg ebx
or edx, ebx
jmp 0x496d2b
push 0x588bc7ce
shr esi, 3
or edx, ebx
add ebx, 0x6376e998
sub esi, ebx
add ebx, edi
jmp 0x49752c
push 0x588c747a
bswap esi
sub ebx, edx
mov esi, edx
xchg ebx, esi
shl esi, 0xd
sub ebx, edx
not edi
and ebx, edi
or ebx, esi
and edi, ebx
and ebx, edi
sub esi, ebx
mov esi, ebx
shl esi, 0x18
mov esi, ebx
jmp 0x496d09
mov ecx, 0x6440607e
add esi, edx
xor edi, ebx
xchg ebx, esi
xor edi, edx
add esi, ebx
rol edx, 0xc
and edi, ebx
sub esi, ebx
xchg edx, esi
add ebx, 0x6394a15b
sub esi, 0x63951ba8
mov edx, 0x639597bc
jmp 0x4964cd
pop ecx
mov edx, edi
xor ebx, 0x63a4a59f
mov edx, 0x63a52406
sub edx, esi
mov ebx, esi
shl ebx, 0x13
ror edi, 0x16
and esi, edi
or edx, esi
xchg edi, ebx
inc edi
xor edx, edi
or ebx, edi
mov ebx, edi
or edx, esi
jmp 0x497d6e
push 0x58936478
xor esi, 0x63c631fe
xor edi, ebx
sub edx, ebx
xor esi, 0x63c79ef7
jmp 0x495b47
push 0x58856070
xor edx, ebx
sub edx, esi
sub edi, 0x63ce246e
shr edx, 0xf
shr ebx, 1
rol esi, 0xa
add esi, 0x63cfdf2e
rol ebx, 0xe
sub ebx, edx
jmp 0x49850d
pop ecx
and esi, edi
add esi, edi
shr edx, 5
mov ebx, edx
xchg esi, ebx
ror ebx, 0x13
add edi, edx
add ebx, esi
and edx, 0x63d4249a
jmp 0x497ebd
pop ecx
and ebx, edi
or ebx, edx
dec edi
add esi, 0x63d7d5ad
ror esi, 0xa
and edi, esi
or esi, edx
xor edx, edi
sub esi, 0x63d90696
jmp 0x496ea1
call ecx
shl edi, 0x13
or edx, edi
add edx, esi
and edx, esi
mov esi, edi
add esi, edx
shr edx, 0x11
shr esi, 0xc
neg edi
jmp 0x495984
mov ecx, 0x6440607e
xor edi, 0x63e2d857
xchg edi, edx
shr ebx, 0x1d
xchg edi, ebx
mov edi, 0x63e49e93
dec esi
xor ebx, 0x63e590d6
dec ebx
xor edi, ebx
jmp 0x498a8c
mov ecx, 0x6440607e
add ebx, 0x63efb3d8
and edi, ebx
shl edx, 8
add ebx, edi
and edi, 0x63f161f6
mov edi, 0x63f1c9bb
and ebx, edi
mov esi, edx
dec esi
neg edx
mov ebx, 0x63f3e6e3
mov edx, edi
or edx, 0x63f4bca1
not edx
and edi, 0x63f58a8c
jmp 0x49756e
pop ecx
sub edx, esi
xor edi, 0x63f64bc1
sub edi, esi
or edx, edi
mov esi, edx
xchg ebx, edx
add ebx, esi
xor ebx, 0x63f7b029
inc ebx
jmp 0x496f85
call ecx
or edi, esi
sub esi, edx
add edx, ebx
and edi, ebx
ror esi, 0x1d
add esi, edx
or esi, edi
shl edi, 1
and esi, edi
mov edx, edi
sub ebx, edx
mov edx, 0x63facffc
or esi, 0x63fb02a6
jmp 0x49872e
push 0x588229c2
shl esi, 0x14
sub edx, 0x63fb9786
xchg ebx, esi
rol edx, 0xc
xor edx, 0x63fc5522
xor edx, 0x63fc88bf
jmp 0x497130
push 0x588c0c55
and edx, ebx
sub edi, 0x63fd1d88
xor edx, edi
add ebx, 0x63fdf06e
sub edx, 0x63fe6733
or edi, 0x63fec87c
and edx, edi
xor ebx, edx
xchg ebx, esi
jmp 0x496c18
call ecx
and edi, esi
ror ebx, 0xb
or edi, esi
xor esi, edi
and ebx, edx
or edi, ebx
sub ebx, edx
jmp 0x498871
call fcn.00495dc3
add ebx, edi
and ebx, esi
mov edx, ebx
or edi, 0x6403724a
or edx, edi
and ebx, edi
shl ebx, 1
sub esi, 0x64046846
sub esi, 0x6404af24
or ebx, edi
shr edi, 9
and edi, ebx
jmp 0x496ec0
call fcn.00495dc3
ror esi, 0x11
or edi, esi
mov esi, edx
or ebx, esi
jmp 0x49888f
call ecx
mov edx, edi
xor esi, edx
sub esi, ebx
bswap edi
xchg edi, edx
or ebx, edi
and edx, esi
and ebx, 0x64173d02
jmp 0x497cf1
call fcn.00495dc3
add edi, edx
add esi, edx
xor ebx, edx
jmp 0x497558
call ecx
and edi, esi
dec esi
dec ebx
add esi, edx
xor edx, 0x6427eb33
add edi, 0x64286fdc
not ebx
xor esi, 0x64296144
bswap edx
and edi, ebx
or edx, edi
xchg esi, ebx
jmp 0x4979a5
call ecx
shr edx, 0x17
or edi, 0x643bee5e
add edx, ebx
xchg edi, edx
sub esi, ebx
jmp 0x496d75
push 0x587fcf5d
sub esi, 0x64589904
mov ebx, esi
dec edx
xor edi, esi
mov edi, edx
xor esi, ebx
sub esi, ebx
jmp 0x496d59
push 0x5881d9b0
dec ebx
inc edi
dec edx
mov ebx, 0x645b8189
or edx, edi
xchg ebx, edx
add esi, 0x645cd972
or esi, 0x645d4d43
jmp 0x4958fd
pop ecx
and edx, 0x646610ca
xchg edx, ebx
sub edx, 0x6466c5cf
mov ebx, edi
xor edi, esi
rol esi, 0xe
mov edx, esi
sub ebx, esi
not esi
xor edi, ebx
jmp 0x49738f
pop ecx
shl edx, 0x1b
neg esi
add edi, esi
mov ebx, edi
and edx, ebx
add edi, 0x646cf7a9
and edx, 0x646d2b91
xor ebx, edi
jmp 0x496111
pop ecx
add ebx, 0x6475a03d
sub ebx, esi
not edi
or edi, esi
mov edx, 0x64775e20
sub esi, edi
add esi, edi
mov esi, ebx
inc edi
nop
jmp 0x496a7f
call fcn.00495dc3
xchg edx, esi
or edi, edx
or ebx, edx
and ebx, esi
mov ebx, esi
shl ebx, 8
mov edi, esi
or edx, 0x648eda98
not edi
jmp 0x4974de
mov ecx, 0x6440607e
xor ebx, edi
and esi, 0x64907b1b
mov edx, edi
xor esi, edi
or edi, ebx
or esi, ebx
jmp 0x495954
call ecx
rol ebx, 4
xor ebx, 0x64a8fca3
neg esi
and esi, ebx
xchg ebx, edi
add edi, edx
and esi, 0x64aa98c6
xor ebx, 0x64aadf92
jmp 0x49691f
push 0x5893b067
xor esi, ebx
xchg edi, esi
sub edx, 0x64c60d22
mov edi, esi
and edx, 0x64c73229
mov edx, ebx
dec edi
mov ebx, edi
jmp 0x497f01
pop ecx
xor edx, edi
xchg ebx, esi
nop
neg edi
inc esi
mov edi, edx
and edi, edx
not esi
sub edx, 0x64d18736
xchg esi, edi
mov ebx, 0x64d25fcd
bswap edx
jmp 0x496197
mov ecx, 0x6440607e
sub edx, 0x64d3810f
add edi, ebx
shl esi, 0x19
and edi, ebx
shl edx, 8
xor edi, ebx
add edx, edi
jmp 0x498643
push 0x58910dda
and esi, ebx
dec esi
or edx, 0x64ddd048
ror edi, 7
xor edi, ebx
add ebx, 0x64df318e
sub edx, 0x64dfad8a
shl edx, 0xa
not ebx
mov edi, esi
not esi
jmp 0x495992
push 0x589159b1
mov ebx, 0x64e8e616
add esi, edx
mov edi, ebx
sub edx, esi
xor edx, 0x64ea7028
xchg edx, esi
or edx, ebx
add ebx, edx
neg ebx
xor edx, 0x64ecae72
mov edi, 0x64ed125d
or ebx, edx
xor edx, esi
jmp 0x4988d3
push 0x58933346
not ebx
or edx, 0x6504340d
mov edi, ebx
mov ebx, esi
xchg ebx, edi
sub esi, edi
xor edi, edx
sub ebx, edx
and edi, esi
xor ebx, esi
jmp 0x4972e2
push 0x5893da9d
not edi
and edx, ebx
sub edi, ebx
mov edi, edx
xchg ebx, esi
xor edx, edi
add edi, ebx
sub edx, edi
xor edi, edx
neg ebx
jmp 0x4966f0
mov ecx, 0x43370267
mov esi, ebx
not edi
xor edi, esi
xchg esi, edx
or ebx, edi
or edi, 0x65184fab
rol edi, 0x11
xor edi, ebx
mov edi, esi
or esi, edx
jmp 0x4976d2
pop ecx
xor edi, 0x652a4104
sub edi, edx
neg edi
and ebx, edx
jmp 0x498403
pop ecx
xchg edi, edx
not edx
or esi, ebx
xchg ebx, edi
or ebx, esi
sub esi, edx
jmp 0x495eb2
push 0x588ee2f4
xor edi, esi
ror edx, 5
sub edi, edx
not edx
dec esi
sub ebx, edi
and edi, edx
shl edx, 4
xchg edx, ebx
add esi, edx
ror edi, 0x11
shl ebx, 0x16
jmp 0x496578
push 0x588f8ef9
xor ebx, edi
sub ebx, esi
neg edi
mov edx, ebx
add ebx, edx
sub ebx, edx
xor edx, edi
xchg edi, esi
jmp 0x497481
push 0x588dc476
not edi
neg esi
jmp 0x49632a
pop ecx
mov edi, ebx
xchg esi, edx
ror esi, 0x1f
and ebx, edx
neg esi
jmp 0x49706d
push 0x588f6730
add edx, 0x657d3fd9
rol esi, 0x11
add edx, esi
xor edi, edx
rol edi, 8
sub ebx, esi
or edi, ebx
jmp 0x4982a3
push 0x58858a7e
and ebx, edx
rol esi, 0x17
add edi, edx
add edx, 0x658eee2c
shl esi, 0x10
shr edx, 0x13
and edx, esi
and edi, ebx
xor esi, edi
xor edx, ebx
and edi, edx
dec edi
sub ebx, 0x6591135c
and edx, esi
shl edx, 0x15
sub ebx, edi
jmp 0x498818
push 0x58801cfc
shr esi, 0x19
rol esi, 0x1d
or esi, ebx
add edi, esi
and ebx, edi
mov edi, ebx
inc edi
jmp 0x49876c
call ecx
sub esi, edi
add edx, 0x65a55b07
or edi, edx
and edi, 0x65a5ddd4
xchg esi, edi
and edx, ebx
jmp 0x49641c
call fcn.00495dc3
xchg edi, ebx
xchg edi, esi
inc edx
mov esi, edi
or ebx, 0x65a7a692
rol edx, 5
jmp 0x4977b6
pop ecx
xchg ebx, esi
nop
xchg esi, ebx
rol ebx, 0xe
or edx, esi
and edx, esi
jmp 0x496452
pop ecx
and esi, ebx
not edi
mov ebx, 0x65baf968
and edi, edx
add edx, edi
xchg edx, edi
inc esi
or edi, ebx
dec edx
shl edi, 8
jmp 0x496ca9
pop ecx
mov edx, edi
mov esi, edx
jmp 0x498842
push 0x5880452c
rol ebx, 9
add esi, edx
add esi, ebx
mov edi, 0x65c39ee4
mov edx, 0x65c40c80
sub edx, 0x65c47905
sub edi, 0x65c50074
and edx, 0x65c577a1
and ebx, 0x65c5d8d7
jmp 0x497b0f
push 0x5885b24c
and ebx, edx
or edi, edx
mov edi, edx
xor edi, ebx
add esi, 0x65d5a782
add ebx, 0x65d5ecf6
sub esi, ebx
xor ebx, esi
rol esi, 5
and ebx, edi
rol edx, 0x1d
jmp 0x496431
push 0x58837183
shl ebx, 0xf
or edx, esi
mov ebx, edx
jmp 0x495bb8
pop ecx
xor edx, esi
sub ebx, esi
sub esi, ebx
dec edx
or ebx, esi
or edi, 0x65dcb882
and edi, ebx
mov esi, edx
xchg esi, edx
rol esi, 0x12
jmp 0x495596
call ecx
mov esi, 0x65de5660
add ebx, edx
xchg esi, edi
and edi, ebx
ror ebx, 8
neg edx
xor esi, edi
or ebx, edi
nop
sub edx, edi
xor edi, ebx
xchg esi, edi
jmp 0x4979c8
push 0x5891dcac
add ebx, esi
xor ebx, 0x65e80b05
mov edx, esi
xor ebx, edi
or edx, edi
add ebx, esi
mov edx, esi
sub edx, ebx
xor esi, edx
jmp 0x4965d8
pop ecx
add esi, edx
and edx, ebx
inc edi
inc edx
dec edx
not edx
xor edi, edx
mov edx, esi
and edi, 0x65f357f5
jmp 0x498c31
pop ecx
and esi, edi
and esi, ebx
shr edi, 0x1e
or esi, edi
xor edx, edi
jmp 0x4963c4
call fcn.00495dc3
mov ebx, edi
add esi, edx
and edi, ebx
and ebx, 0x660699b6
add esi, ebx
ror edi, 0x1f
and esi, edx
sub esi, 0x66078c7f
jmp 0x497667
push 0x588f3c40
or esi, 0x6614c92f
sub edx, ebx
xchg edi, ebx
dec esi
not esi
add edi, 0x66170a9d
mov ebx, esi
xor esi, ebx
or ebx, edx
add edi, esi
not esi
jmp 0x49842e
push 0x58846f6c
nop
and edx, 0x66247c27
sub edi, 0x6624b300
ror edi, 5
or esi, edx
and esi, ebx
xor edi, esi
mov edi, edx
sub ebx, edx
mov edi, edx
xchg edx, esi
and edx, ebx
jmp 0x497404
pop ecx
sub edi, esi
mov ebx, 0x66275b29
and edi, 0x66279e2b
xor ebx, edi
not edx
add ebx, esi
xor ebx, edx
add edx, 0x6628c32d
mov ebx, 0x66290925
ror edi, 0x1f
dec edi
xor edi, edx
or edx, ebx
jmp 0x49734d
pop ecx
and edi, ebx
dec edx
add edi, ebx
mov esi, ebx
sub esi, edx
mov edx, esi
jmp 0x4971cf