Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
sub edi, 0x34d1715f
add esi, edx
or esi, ecx
call sub.user32.dll_GetClipboardViewer
xor esi, edx
mov ecx, 0x34d2722b
not ecx
xor esi, 0x34d2e653
ror edx, 4
and esi, 0x34d59134
sub edi, esi
neg esi
cmp eax, 0xffffff0d
jne 0x4010cd
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
ret
xor esi, edx
call sub.user32.dll_GetClipboardViewer
xor edx, 0x34d881e8
or esi, edi
mov edx, edi
and esi, ecx
and esi, ecx
add edi, 0x34d9dfec
sub edx, ecx
cmp eax, 0xfffffee0
jne 0x401191
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
ret
and esi, edi
call sub.user32.dll_GetClipboardViewer
or esi, 0x34dca89b
cmp eax, 0xffffff35
jne 0x4011ff
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
ret
sub edi, edx
neg edx
mov edi, edx
mov edx, edi
inc esi
mov edx, edi
call sub.user32.dll_GetMessageTime
and ecx, edx
cmp eax, 0xfffffef3
jne 0x4012b3
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
ret
jmp 0x4942ad
sub ecx, 0x3553c655
jmp 0x494e2e
call ebx
and esi, 0x385b5150
xor edi, 0x385b8c76
bswap esi
neg edi
not edx
mov ecx, esi
mov esi, edi
and edx, esi
sub edi, edx
xor esi, ecx
xchg edi, ecx
mov esi, edx
sub edi, edx
shl edx, 1
jmp 0x496dd5
push 0x35648179
ror edi, 3
add esi, edx
sub edx, esi
and edx, ecx
xchg edi, ecx
add esi, 0x386012dc
not ecx
shr edx, 0xd
xchg esi, ecx
inc edx
shl edx, 5
shl esi, 0x1d
jmp 0x497159
pop ebx
sub ecx, 0x3861c840
or edx, ecx
and esi, ecx
xor edx, 0x3862778f
xor edx, ecx
xor edx, 0x3862ed0b
xchg edx, esi
xor edx, ecx
dec edx
mov esi, ecx
or ecx, 0x38645d30
jmp 0x494486
push 0x3565713c
and edx, 0x3865e838
or edx, esi
neg ecx
and esi, edi
shl ecx, 7
shr esi, 0xe
mov edx, esi
neg ecx
or esi, ecx
jmp 0x4960b0
pop ebx
add esi, edx
ror esi, 8
xor edi, edx
add esi, ecx
mov edi, 0x3869057f
and edx, ecx
xor esi, edi
mov esi, edi
sub edi, 0x3869ecdb
jmp 0x494328
mov ebx, 0x183c2e20
rol edi, 2
and edx, esi
rol edi, 0x14
inc edx
xor edx, ecx
dec edx
mov esi, edx
jmp 0x496836
push 0x355d8cac
add edx, 0x3878d160
or ecx, edx
and edx, ecx
and ecx, esi
mov ecx, 0x3879b4ba
sub esi, ecx
mov edx, edi
xor ecx, edi
and edx, esi
jmp 0x496ea6
call fcn.00495709
shl ecx, 0xf
xchg ecx, edi
inc ecx
jmp 0x496c6e
pop ebx
or edx, esi
dec ecx
mov ecx, 0x38844d86
shl edx, 0xe
nop
mov edx, edi
jmp 0x494851
call ebx
or edx, esi
shl ecx, 0x1e
or esi, 0x38880dff
not edi
xor esi, 0x38888360
sub edx, edi
and edx, ecx
xor edi, esi
add ecx, esi
jmp 0x494386
pop ebx
sub esi, ecx
rol esi, 9
and esi, edx
mov edi, ecx
jmp 0x495767
pop ebx
or ecx, edi
or ecx, 0x38bb376c
xchg esi, ecx
or esi, edx
inc esi
add ecx, edx
bswap ecx
sub edi, ecx
jmp 0x495459
push 0x356368f4
and edx, edi
bswap edi
rol esi, 0x18
and ecx, edi
sub esi, edi
mov edx, ecx
add esi, 0x38c67cb1
and ecx, 0x38c6b80a
xchg esi, ecx
sub edi, 0x38c731d8
sub edx, ecx
xor edi, 0x38c7a85b
or ecx, 0x38c7e3f6
jmp 0x496d75
push 0x35631a17
mov edi, esi
dec ecx
xor esi, 0x38cd36ab
and esi, 0x38cd7180
xor ecx, edi
and edx, esi
not edx
mov edi, 0x38ce65b9
mov edx, 0x38cea17c
or edi, ecx
xor edx, esi
xchg edx, edi
jmp 0x495ba3
call fcn.00495709
and ecx, 0x38d3b189
add edx, esi
mov edx, 0x38d42e65
inc edx
or ecx, edi
and edi, edx
ror esi, 1
and ecx, edx
xchg edi, esi
jmp 0x49686a
pop ebx
mov ecx, 0x38d5d4ca
dec edi
or edx, edi
xchg ecx, esi
and esi, ecx
xchg ecx, esi
jmp 0x49529a
call fcn.00495709
shr esi, 0xd
not edx
xor ecx, edi
add ecx, esi
add edx, edi
ror edx, 7
inc edi
ror edx, 0x19
or esi, edi
jmp 0x495949
pop ebx
inc ecx
or ecx, edx
ror edi, 0x12
not esi
xor ecx, 0x38e37356
add edi, esi
xor edi, 0x38e3e7ef
and esi, edi
and ecx, edx
neg esi
add ecx, esi
neg edi
jmp 0x495aeb
mov ebx, 0x183c2e20
and esi, edi
add edi, ecx
and ecx, edi
add esi, edi
and ecx, 0x38ea357f
and edx, esi
rol ecx, 7
jmp 0x497215
call fcn.00495709
add edx, edi
and esi, edi
dec edx
mov edx, edi
rol esi, 0x14
not esi
or ecx, esi
add edx, ecx
jmp 0x497291
call ebx
add edx, ecx
mov edx, ecx
and esi, ecx
and edi, ecx
inc ecx
shr esi, 0x17
bswap edi
xchg edx, ecx
sub edi, ecx
sub ecx, esi
jmp 0x49666f
push 0x355f90f6
and edx, 0x39001fc8
xor edx, edi
or ecx, edi
and edi, 0x3900d69a
xchg esi, edx
add edi, edx
not ecx
inc edi
mov edi, edx
shr edi, 2
jmp 0x4962de
jmp loc.0049a000
push 0x3556f3d3
xor edi, edx
add ecx, esi
dec edi
inc edx
bswap ecx
xchg edx, edi
xchg edx, edi
xchg esi, edx
and edx, edi
xor esi, ecx
and esi, ecx
jmp 0x4959c2
call ebx
ror edx, 0xc
inc edi
add edx, ecx
add ecx, edi
xchg esi, edx
xchg esi, edi
shr edx, 0x1e
shr edx, 0x1a
rol ecx, 5
jmp 0x496e72
mov ebx, 0x4132136a
neg ecx
mov esi, edi
mov esi, edi
not edi
rol edx, 0x1e
mov edx, 0x3934dd54
mov edx, edi
jmp 0x494b39
call fcn.00495709
add edx, 0x3936ee52
or edi, esi
sub esi, edi
and edx, edi
xchg esi, edx
xor ecx, esi
and ecx, edi
xchg ecx, edi
dec esi
jmp 0x496654
pop ebx
neg esi
mov edi, edx
neg edx
add edx, edi
neg esi
add esi, ecx
neg edx
and ecx, esi
and ecx, edx
sub esi, ecx
jmp 0x495314
push 0x3561b517
or edx, 0x39434569
neg edx
or edx, 0x3943bd56
add edi, 0x39440304
sub edx, esi
shl edx, 0x12
xchg ecx, edx
mov ecx, edx
ror edx, 2
inc esi
xor ecx, edx
jmp 0x4964b0
push 0x3559547b
add esi, ecx
and edx, ecx
or esi, edi
mov ecx, 0x39512650
and edi, ecx
not esi
rol ecx, 0x10
shl esi, 0x17
and esi, edx
mov esi, edx
or esi, edx
mov edx, esi
jmp 0x49442e
call ebx
or edi, esi
mov edx, 0x395fa6c2
add edx, edi
xor ecx, 0x39601870
jmp 0x49569d
pop ebx
xor edi, 0x3964a574
not edi
add edi, esi
nop
shr edi, 8
xchg esi, edi
shr edi, 0x1f
and edi, edx
shr esi, 0x1a
dec edx
ror esi, 0x17
xor esi, edi
jmp 0x4952e7
push 0x356549e4
or ecx, 0x396fa9b9
add edi, 0x396fe43c
rol esi, 0x19
sub ecx, esi
inc esi
or edx, edi
add edi, edx
add edi, esi
shl esi, 0xd
mov ecx, 0x3971ba5b
sub edi, edx
xor edx, esi
xchg ecx, edx
jmp 0x494364
pop ebx
add edi, 0x397464f7
xchg ecx, esi
add esi, edx
sub edi, ecx
xchg ecx, edi
shr edi, 0xc
or edi, edx
xor edx, 0x39760065
and edx, ecx
add esi, edi
or edx, ecx
sub edi, ecx
sub edx, ecx
and edi, edx
mov edi, esi
jmp 0x494967
pop ebx
mov esi, edx
ror edi, 0x14
xchg ecx, esi
sub edx, 0x3978c489
shr edx, 0x1e
rol ecx, 0x12
add edx, ecx
and ecx, edi
mov ecx, esi
and esi, edi
or esi, edi
jmp 0x495565
pop ebx
add esi, edx
mov edi, edx
and esi, edi
and esi, ecx
add ecx, edi
and esi, edx
sub ecx, edi
add edx, esi
xor ecx, 0x398dc538
or esi, 0x398e0022
shl ecx, 0x16
ror edx, 0x14
jmp 0x495f13
pop ebx
xor edx, esi
add ecx, edi
or ecx, esi
xchg edi, edx
xchg edi, esi
sub edx, edi
ror esi, 0x15
xchg edx, esi
sub esi, edi
or edi, 0x39a332bf
not edx
jmp 0x4942ff
mov ebx, 0x183c2e20
shl edi, 0x17
shl edx, 0xc
ror ecx, 0x1e
rol ecx, 9
or edi, edx
add edi, ecx
and edi, 0x39aaf099
sub edi, ecx
dec edx
sub edx, edi
ror esi, 0xf
shl esi, 0x14
and esi, edi
inc ecx
xchg edi, edx
jmp 0x496204
pop ebx
xor edx, edi
and edx, ecx
shr edi, 0x10
rol ecx, 0x17
add esi, edx
or edi, 0x39b8f591
add edx, esi
shr edi, 0x1f
mov esi, edx
inc edx
add ecx, edx
neg edx
or esi, 0x39babcbb
jmp 0x4964e1
pop ebx
or edi, esi
mov edx, 0x39c81965
xor edx, 0x39c853d1
mov ecx, 0x39c88edc
or esi, 0x39c8ca73
mov esi, edx
or ecx, 0x39c93bec
bswap edi
and ecx, edx
not edx
and esi, ecx
jmp 0x4963d1
push 0x40
add edi, esi
sub edx, edi
mov edi, ecx
inc ecx
bswap edi
mov edi, edx
and edx, esi
jmp 0x4965bb
push 0x3559081e
add ecx, edi
xchg ecx, esi
add edi, ecx
add edi, edx
nop
xor edx, ecx
or edi, ecx
mov edi, 0x39deb276
and esi, ecx
xor ecx, esi
xchg ecx, esi
xchg edi, edx
mov edi, ecx
jmp 0x496db4
call ebx
neg ecx
xor esi, ecx
add edx, esi
sub ecx, 0x39ead99f
jmp 0x495e47
push 0x35572a4d
shl esi, 0xd
dec ecx
mov edi, 0x39f2700d
shl edi, 0x15
xor edi, 0x39f2e413
and edx, esi
xor ecx, 0x39f357d9
sub ecx, 0x39f3919f
xor edi, edx
xchg esi, edi
jmp 0x49719d
push 0x35600388
mov ecx, edi
and esi, ecx
neg edi
neg edi
sub ecx, edi
add edx, esi
and edx, esi
shr edx, 0x19
jmp 0x495fc1
mov ebx, 0x43370267
xor edi, edx
xor edx, 0x3a01983f
shl edi, 0x1f
add edx, 0x3a020c05
or esi, ecx
xchg edx, ecx
add esi, 0x3a02b9c0
jmp 0x494c68
push 0x355e7a53
sub esi, edx
and edi, ecx
and edx, edi
or esi, 0x3a03bb01
neg edx
add esi, edx
or edi, ecx
jmp 0x494b1c
pop ebx
xor ecx, 0x3a04b252
or edi, ecx
sub edx, edi
dec edi
dec edx
sub ecx, esi
or edx, ecx
bswap edx
shr esi, 0x1f
jmp 0x4969fc
push 0x35689faa
xor edi, edx
xor edi, esi
neg esi
mov ecx, 0x3a0963f9
not ecx
xchg ecx, esi
or edi, esi
ror ecx, 0x17
jmp 0x495aaa
push 0x35634264
add edx, edi
sub esi, edi
and edx, ecx
xchg edx, ecx
bswap esi
neg ecx
add ecx, edx
jmp 0x4948e7
call fcn.00495709
sub ecx, edx
and ecx, edi
rol edx, 0x16
or esi, edi
jmp 0x494561
pop ebx
add esi, edx
mov edx, ecx
shr ecx, 0x10
not edi
not esi
xor edi, esi
xor ecx, esi
and ecx, esi
jmp 0x495205
mov ebx, 0x183c2e20
add esi, edx
add ecx, esi
sub ecx, 0x3a26920d
add esi, edx
or esi, edx
sub esi, edx
and edx, edi
and edx, esi
and esi, 0x3a27e089
jmp 0x4960f2
pop ebx
and ecx, esi
xchg ecx, esi
xor esi, edi
xor ecx, edi
and ecx, edx
and edx, ecx
jmp 0x496e18
push 0x355f693f
xor edx, esi
sub edx, ecx
inc ecx
and esi, 0x3a82d79f
or edx, esi
bswap edi
sub edx, ecx
add ecx, esi
or esi, 0x3a8401b5
sub edi, edx
and edx, 0x3a8474bd
shr edi, 0x10
add ecx, edi
xor esi, edi
jmp 0x494c42
push 0x35577814
bswap edi
sub edi, esi
neg edx
or ecx, edx
bswap esi
sub edx, 0x3a86a296
jmp 0x496cec
push 0x35616796
xor edx, edi
add edi, ecx
xor edx, esi
add esi, ecx
jmp 0x496288
pop ebx
not ecx
ror edx, 3
and esi, 0x3a8eb15c
shr ecx, 2
xor edi, 0x3a8f2c5d
or edx, ecx
and edx, edi
xor ecx, edi
add ecx, edi
jmp 0x495e59
mov ebx, 0x43370267
xchg edi, ecx
sub edx, edi
xor edx, 0x3a986aab
mov edx, esi
xor esi, edx
or edi, esi
sub edi, esi
add edi, esi
rol edi, 0x1b
jmp 0x494a9e
push 0x35659797
xor ecx, edx
mov edi, ecx
sub ecx, 0x3aa71f4e
or edi, edx
or esi, 0x3aa79654
shl edx, 0x1b
ror edi, 8
xor ecx, edi
sub edi, ecx
xchg edx, ecx
and edx, edi
mov esi, ecx
jmp 0x49706c
call fcn.00495709
sub ecx, edi
shr esi, 3
sub edx, ecx
or esi, edi
shl edi, 0x12
jmp 0x4951a4
call fcn.00495709
mov ecx, 0x3aaae5d3
or edx, 0x3aab21c3
xor ecx, 0x3aab5e7b
sub edi, esi
xchg esi, edx
sub esi, edi
sub esi, edx
mov esi, edi
and edi, esi
xor esi, edi
mov esi, edx
or ecx, esi
jmp 0x4966d3
call fcn.00495709
mov ecx, edi
shr ecx, 0x1d
xor ecx, 0x3abdc52c
xor ecx, edx
sub ecx, 0x3abe44c1
xor edx, 0x3abe7fde
xor esi, edi
not edx
add ecx, 0x3abf324b
xchg ecx, edi
not edi
sub edx, 0x3abfe77a
jmp 0x494ee4
push 0x356877e5
mov ecx, edx
ror edi, 0x17
shl edx, 0x17
shr edi, 0x1f
or edx, ecx
or edx, esi
or edx, ecx
ror edi, 0x10
mov edx, 0x3ac51e91
jmp 0x495b28
push 0x35618f3e
xchg edx, ecx
xchg edx, esi
shl edi, 0x1d
xchg esi, ecx
sub edi, esi
mov edx, 0x3ac699c5
and edi, 0x3ac6e05f
or edi, ecx
xchg edx, edi
or esi, edi
shl edi, 0xb
mov ecx, edx
dec esi
inc edi
jmp 0x495021
push 0x355fb736
sub edx, 0x3acbe85e
mov ecx, 0x3acc221b
and esi, edi
add esi, edx
and esi, edi
add ecx, esi
add edx, ecx
nop
xchg ecx, edx
and ecx, 0x3ace03b7
sub edx, 0x3ace409f
jmp 0x497263
pop ebx
rol edi, 3
add ecx, esi
not esi
sub ecx, edx
or esi, 0x3add7da9
sub edi, esi
jmp 0x494abc
push 0x355c733e
dec ecx
sub edi, 0x3ade3f83
and edi, edx
nop
mov edx, 0x3adeecc3
and ecx, esi
sub edi, 0x3adf68d9
xchg edx, esi
or edx, edi
mov ecx, esi
or ecx, esi
xor edx, ecx
jmp 0x497361
pop ebx
xor ecx, edx
add ecx, edx
add ecx, esi
xor edx, esi
sub esi, ecx
xchg ecx, edx
dec esi
mov esi, edx
jmp 0x49675c
push 0x3561db24
sub esi, ecx
neg ecx
xor ecx, edi
mov esi, edi
or edx, ecx
sub edi, 0x3aef7056
add edx, edi
sub edx, edi
and ecx, 0x3af019e7
or edi, 0x3af0544f
and ecx, edi
shl esi, 0x14
xor edi, esi
jmp 0x4970fc
push 0x355e52be
add edi, 0x3af14b33
mov edi, ecx
add edx, esi
or edx, ecx
and edx, 0x3af22e80
or ecx, 0x3af272ee
and ecx, 0x3af2d4d3
add esi, 0x3af30f37
xor ecx, 0x3af34a8c
add ecx, edi
jmp 0x495acf
push 0x92ead
or edi, esi
add esi, ecx
and esi, edi
rol ecx, 0x15
add ecx, edx
sub edx, ecx
mov esi, ecx
or edi, ecx
bswap esi
bswap ecx
jmp 0x496ef3
pop ebx
and ecx, edx
add esi, edx
add edx, esi
rol edx, 0xb
jmp 0x496265
call ebx
xor ecx, 0x3b08bfa9
or esi, ecx
shr ecx, 0x10
shr edi, 8
mov esi, edi
xchg ecx, edi
add edi, esi
jmp 0x4949f7
pop ebx
add esi, edi
and esi, 0x3b0aa61e
dec esi
neg esi
mov edi, 0x3b0b5ae8
xor esi, ecx
xchg esi, edx
xchg edx, ecx
mov edi, esi
and edx, ecx
jmp 0x495f25
call ebx
and ecx, esi
xchg edi, edx
neg esi
mov edi, ecx
mov ecx, edi
shl edx, 0x1e
dec edi
sub ecx, esi
xor esi, edi
or edx, 0x3b13a494
and edx, ecx
and esi, edx
not edi
and esi, edi
jmp 0x4963fc
pop ebx
and ecx, 0x3b1c3c2a
mov ecx, edx
sub ecx, edx
xor esi, 0x3b1ce8ce
or esi, ecx
add edx, edi
or edx, edi
and edx, 0x3b1dd516
jmp 0x4970bd
call fcn.00495709
or edx, 0x3b2a29d6
and edi, esi
xor edi, 0x3b2a9fe0
xchg esi, ecx
xor edi, ecx
xor ecx, edx
xor ecx, edi
add esi, 0x3b2bcb42
mov esi, ecx
mov edx, 0x3b2c3d25
mov esi, ecx
and edi, edx
rol ecx, 0x15
jmp 0x4942d3
call ebx
dec edi
or edi, 0x3b2d76c3
add esi, edi
xor ecx, edx
xor edi, 0x3b2e22c5
inc edi
add edi, edx
shr edx, 0x18
shr edx, 0xa
jmp 0x494fbb
push esp
shr esi, 8
or edx, esi
or edi, 0x3b3dcc8f
and edx, edi
sub edx, esi
sub edx, edi
jmp 0x495832
pop ebx
ror edx, 8
add edx, 0x3b489788
sub esi, 0x3b48d419
bswap edx
inc esi
or ecx, 0x3b49938d
sub esi, edi
and edi, esi
add ecx, edi
xor ecx, edx
mov esi, ecx
or edx, ecx
jmp 0x4958a5
pop ebx
bswap edi
or esi, 0x3b4d9bb1
xchg edx, ecx
shr edi, 5
xchg edi, esi
not esi
xchg esi, edi
sub ecx, edi
sub esi, edi
shr edx, 0xb
jmp 0x495c13
pop ebx
xchg esi, edx
xor edi, 0x3b575cfd
mov esi, edi
xchg esi, ecx
xor edx, ecx
xchg ecx, edi
and ecx, edi
inc edx
xor esi, ecx
add ecx, edi
or ecx, 0x3b596df5
jmp 0x494f3a
call ebx
shr esi, 8
sub ecx, edx
bswap edi
xor edx, esi
and ecx, edx
neg esi
and esi, ecx
mov ecx, esi
or edi, ecx
ror edi, 0x11
sub edx, 0x3b75a64e
mov edx, 0x3b75e1cd
jmp 0x496a41
push 0x35579f78
xor edi, ecx
or esi, edi
mov esi, edi
xchg edx, edi
xchg ecx, esi
xor esi, edi
rol edx, 8
xor esi, ecx
xor edx, ecx
jmp 0x4955cc
mov ebx, 0x183c2e20
xor ecx, esi
and esi, edi
mov edi, ecx
inc edi
jmp 0x4949d4
push 0x35592f4e
xor ecx, edx
add edi, esi
xor ecx, esi
xchg edx, esi
xor esi, ecx
shl esi, 0x18
add ecx, edx
and edi, 0x3b8ac1ff
not esi
jmp 0x4950dc
pop ebx
or edi, esi
rol ecx, 0x1b
xor edx, esi
or ecx, esi
and ecx, edi
or esi, edi
xor edx, esi
not edx
or ecx, edi
or edi, edx
jmp 0x4945af
pop ebx
or esi, edi
or ecx, 0x3b90d71d
inc edx
and edi, edx
sub esi, edi
sub esi, ecx
add ecx, esi
jmp 0x49452c
pop ebx
xchg esi, ecx
add esi, edi
mov esi, edx
or ecx, 0x3b98133f
neg ecx
sub edx, 0x3b988d74
xor edi, ecx
or ecx, esi
and edi, edx
xor edx, 0x3b9981cb
or esi, edx
or edi, edx
or edx, ecx
sub edx, 0x3b9a6b54
add edx, edi
jmp 0x4963ba
mov ebx, 0x43370267
and edi, 0x3b9af369
or edx, ecx
mov ecx, edi
sub edi, esi
bswap ecx
jmp 0x4960dc
push 0x401400
mov ecx, edx
shl esi, 0x18
xchg esi, edx
and edi, 0x3ba09e44
rol esi, 7
mov ecx, edx
mov edi, edx
shr edi, 8
add edx, ecx
sub ecx, edx
mov ecx, edi
jmp 0x497046
call ebx
shl ecx, 0x1d
and edi, ecx
inc ecx
sub edi, esi
ror edi, 0xa
or esi, 0x3bb9b7a6
sub esi, 0x3bb9f2cb
not edx
sub esi, edx
or esi, edx
xchg esi, ecx
jmp 0x496645
push 0x3565bed1
xchg edi, ecx
inc ecx
and edx, 0x3bbba997
or edx, edi
jmp 0x495cd2
pop ebx
xchg ecx, edi
add ecx, 0x3bc11ce3
or edi, 0x3bc15722
or ecx, edi
mov ecx, esi
add edx, ecx
jmp 0x496ad6
mov ebx, 0x183c2e20
or esi, 0x3bc5507f
xchg edx, edi
xor edi, edx
inc esi
mov edi, 0x3bc64910
sub edi, esi
and esi, edx
jmp 0x4944e2
mov ebx, 0x183c2e20
and edi, esi
inc esi
add esi, edi
xor ecx, 0x3bcbc87b
neg edi
and esi, ecx
xchg esi, edi
rol ecx, 0x12
sub esi, edx
and edx, ecx
xor ecx, esi
jmp 0x494f78
mov ebx, 0x43370267
or esi, 0x3bcdb6fd
and esi, 0x3bcdf214
or esi, 0x3bce3877
xchg edi, esi
xor esi, edi
jmp 0x495be4
push 0x3557529f
xchg edi, edx
mov ecx, 0x3bcf3119
xchg edx, esi
shr edx, 3
sub edi, 0x3bcfed9a
sub edx, 0x3bd029dc
mov edi, 0x3bd06513
sub edi, edx
jmp 0x495e8b
call fcn.00495709
or ecx, esi
or edx, ecx
mov edx, edi
mov edx, 0x3bd6e856
xchg edx, esi
neg ecx
dec edi
or ecx, edx
xchg edx, esi
sub ecx, esi
add esi, edi
jmp 0x494c03
push 0x355fdd26
dec ecx
xchg ecx, edi
neg edx
nop
and edi, edx
or edi, esi
jmp 0x495a16
push esp
xor esi, edx
and ecx, 0x3be07e69
xchg ecx, edi
xor edx, edi
shr edi, 0x17
xor esi, 0x3be1761a
shl edx, 6
mov edx, ecx
inc esi
jmp 0x49695c
push 0x355c9b69
and edi, ecx
sub edi, ecx
xor edi, ecx
xor edi, ecx
mov edx, esi
sub esi, 0x3bf92b43
sub edx, edi
sub esi, 0x3bf9b3fc
shr esi, 0x15
or esi, edx
xchg esi, ecx
jmp 0x49717d