Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffedc
jne 0x40106b
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffed8
jne 0x401112
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xffffff1c
jne 0x4011af
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xfffffef6
jne 0x401210
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.ntdll.dll_RtlDoesFileExists_U
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
call sub.kernel32.dll_LoadModule
ret
jmp 0x48c12c
mov edx, edi
rol edi, 4
and edi, 0xdecd97d2
sub ecx, ebx
xor ebx, ecx
sub edi, 0xdecfcd54
dec edx
jmp 0x48da44
mov edx, 0x6332a2e
rol ebx, 0x1b
or edi, ecx
not esi
sub edi, 0xe0178aea
jmp 0x48e746
push 0xdef7248e
mov ecx, 0xe01a2c5a
sub ebx, esi
xchg ebx, ecx
mov ecx, edi
add edi, esi
xor ecx, esi
sub ebx, edi
and ebx, edi
jmp 0x48d245
mov edx, 0x6332a2e
sub esi, 0xe0319608
and edi, ebx
and ebx, esi
sub esi, edi
or ebx, edi
ror edi, 0x1f
jmp 0x48c583
push 0xdedfe66a
add esi, ecx
ror ebx, 9
xor ebx, ecx
rol edi, 2
rol esi, 0xe
rol ebx, 3
dec ecx
sub edi, ebx
jmp 0x48dabd
push esp
sub edi, 0xe044803e
or ebx, esi
add edi, ecx
neg esi
xor edi, 0xe0457cfc
xor edi, 0xe045ce0e
xchg ecx, esi
sub ecx, edi
or esi, 0xe0468ca6
mov ebx, ecx
jmp 0x48cf75
call fcn.0048c84e
xor edi, esi
rol ebx, 0xa
and ecx, 0xe0508954
dec ecx
and ebx, ecx
sub ecx, esi
mov esi, ebx
not ebx
xchg esi, ecx
sub edi, 0xe0525216
sub ebx, edi
rol edi, 0x14
mov edi, ebx
add edi, esi
jmp 0x48e06c
call fcn.0048c84e
sub esi, 0xe05642ca
add ebx, edi
sub edi, ebx
shl esi, 0x1d
mov ecx, 0xe0573db2
not ecx
xor ebx, edi
mov ecx, esi
shr ecx, 0x1b
shl ebx, 0x13
jmp 0x48d84c
pop edx
xchg ebx, esi
xor ebx, ecx
sub ebx, edi
add edi, esi
mov edi, ebx
or edi, esi
jmp 0x48db9b
push 0xdefb4dde
xchg edi, ebx
add edi, 0xe0662378
mov esi, 0xe0666358
and esi, edi
mov edi, esi
mov esi, 0xe0671dda
xchg ebx, ecx
and ebx, ecx
nop
xchg edi, esi
and esi, ecx
shr edi, 4
sub esi, edi
rol esi, 3
jmp 0x48e959
mov edx, 0x6332a2e
shl edi, 0xf
add edi, ebx
jmp 0x48ef8c
pop edx
add esi, ebx
and ebx, ecx
dec ecx
xor ecx, 0xe0782fca
and esi, ebx
add esi, 0xe078adba
rol ecx, 0xa
xor edi, ebx
jmp 0x48eac0
push 0xdeecc53a
sub ebx, edi
xor ecx, ebx
dec ecx
nop
xchg edi, ecx
xor edi, ebx
add ebx, ecx
sub edi, 0xe07cfee2
not esi
sub esi, edi
xor ecx, esi
xchg esi, edi
jmp 0x48dbeb
push 0xded960f4
xchg edi, ebx
mov ebx, esi
jmp 0x48dd6c
push 0xdef68d80
xor esi, ebx
mov ecx, edi
jmp 0x48d66f
push 0xdee0799a
xor edi, 0xe089af5c
add esi, 0xe089efee
and edi, 0xe08a2f94
inc ecx
and esi, 0xe08ab156
or ecx, ebx
xor esi, 0xe08b2fee
shr edi, 0x18
mov ecx, ebx
and edi, ebx
and ecx, esi
xor ebx, ecx
xor esi, ecx
inc ebx
jmp 0x48cda5
pop edx
xchg edi, ebx
add ebx, esi
xchg ebx, edi
or edi, esi
inc esi
neg esi
sub ebx, ecx
nop
jmp 0x48cbb5
mov edx, 0x6332a2e
xor edi, 0xe0a40b84
inc edi
and edi, 0xe0a4f740
mov ebx, esi
or ebx, edi
sub esi, ebx
and ebx, ecx
sub esi, 0xe0a70e94
jmp 0x48e6e0
pop edx
or ebx, edi
sub ebx, ecx
xchg ebx, esi
sub ebx, ecx
jmp 0x48d90e
call edx
xor edi, ecx
nop
mov edi, ebx
or edi, 0xe0a95f52
add edi, 0xe0aa064c
xor ecx, esi
mov ebx, edi
xor edi, ecx
jmp 0x48f227
push 0xdedc92dc
or ebx, ecx
sub edi, ebx
shl edi, 0xa
or ebx, 0xe0b1d1c0
and ecx, edi
and esi, edi
ror esi, 0x14
shl edi, 0x11
xchg esi, ebx
xchg esi, ecx
jmp 0x48c405
pop edx
shr ecx, 0x1e
inc edi
and ecx, ebx
not edi
nop
or ebx, 0xe0bdb5ee
jmp 0x48f09f
pop edx
and edi, ebx
and ecx, edi
mov edi, 0xe0c72000
add esi, edi
jmp 0x48d12b
push 0xdee816ce
ror ecx, 9
xchg ecx, edi
jmp 0x48d0bd
call fcn.0048c84e
or ecx, edi
sub ecx, edi
jmp 0x48f19f
pop edx
nop
xor edi, ecx
jmp 0x48f1ba
call fcn.0048c84e
ror edi, 0x19
xchg ebx, edi
xor esi, ebx
mov esi, edi
xor edi, 0xe0db7ac0
add esi, edi
mov ebx, 0xe0dc7794
and ecx, edi
mov ebx, esi
mov edi, ecx
shl ebx, 0x15
xchg esi, edi
jmp 0x48c4f8
pop edx
mov edi, ecx
xchg edi, ebx
or edi, ecx
xchg ecx, esi
add ecx, edi
dec ecx
add esi, ebx
or ebx, 0xe0e7b760
sub ebx, ecx
xor ecx, edi
jmp 0x48cb29
push 0x40
shr edi, 0xe
rol edi, 0xe
jmp 0x48ea0c
push 0xdee0c3e6
dec edi
shl esi, 0x19
and edi, esi
and ebx, ecx
mov ebx, 0xe0eb7644
mov esi, ebx
add ebx, 0xe0ebf2a0
ror ebx, 0xd
and esi, edi
not ebx
jmp 0x48ede6
push 0xdef9cfa4
xchg edi, ecx
shl edi, 0xc
and ecx, esi
not esi
shl edi, 0x17
sub ebx, ecx
jmp 0x48c765
pop edx
add esi, ebx
xor edi, ecx
ror edi, 0xa
mov esi, ebx
or edi, 0xe0f5acee
mov esi, ecx
or ebx, esi
xor edi, ecx
neg ecx
and ebx, ecx
jmp 0x48e270
push 0xdefbe50e
xor edi, ecx
and ebx, esi
ror ecx, 5
mov ebx, 0xe0f9c5d8
xor ecx, esi
inc ebx
add edi, 0xe0fa9564
shl esi, 4
neg ecx
ror esi, 7
bswap ecx
xor ebx, ecx
jmp 0x48e705
call fcn.0048c84e
shl ebx, 0x13
add edi, 0xe1089410
xor esi, edi
xchg esi, ecx
inc esi
sub ecx, edi
nop
bswap edi
jmp 0x48ea86
push esp
xchg esi, ecx
shl esi, 0x12
rol edi, 0x16
sub edi, ecx
xchg ecx, ebx
xchg edi, ebx
and ebx, 0xe10f56b6
and ecx, esi
jmp 0x48cd95
push 0xded6bd76
neg ebx
mov ecx, edi
or ecx, 0xe1114240
sub ebx, 0xe111ccfa
jmp 0x48df55
call fcn.0048c84e
mov ebx, edi
not ebx
dec edi
sub ebx, ecx
xchg edi, esi
nop
jmp 0x48e2ae
pop edx
add ecx, 0xe11d67d2
xor edi, ecx
and esi, ecx
sub esi, ecx
add edi, esi
sub esi, ebx
jmp 0x48f205
mov edx, 0x6332a2e
shr edi, 0xc
and ecx, esi
add ecx, 0xe1297982
neg esi
xchg esi, ecx
mov edi, 0xe12ab3b4
jmp 0x48cfcd
call edx
mov ebx, edi
xchg esi, edi
inc edi
shl ecx, 7
add esi, ebx
sub esi, ebx
inc ebx
bswap edi
and ecx, ebx
mov ecx, esi
xor ebx, edi
mov ebx, edi
jmp 0x48dfb5
pop edx
sub esi, ecx
and ebx, ecx
sub esi, ecx
xchg ecx, edi
or esi, ebx
shl edi, 0x1c
or esi, ecx
sub ecx, 0xe13301b0
jmp 0x48d648
pop edx
ror edi, 0xa
mov edi, ebx
and ecx, 0xe1360d4c
bswap edi
add edi, esi
inc esi
and esi, edi
rol ebx, 0x1d
mov esi, ebx
or ecx, 0xe13804a6
mov edi, ecx
and ecx, edi
jmp 0x48e85c
pop edx
and ecx, 0xe14025e4
mov edi, ebx
xchg ebx, esi
and ecx, esi
and esi, 0xe141eabe
or ecx, 0xe1425482
mov edi, ecx
xor edi, ecx
mov ecx, esi
xor ebx, edi
xchg esi, ebx
xchg ebx, edi
bswap esi
xchg ecx, edi
jmp 0x48ecab
push 0xdef77004
xchg ecx, edi
xor ecx, ebx
nop
xor esi, ecx
add ecx, edi
neg esi
add esi, ebx
add ebx, esi
jmp 0x48e134
call fcn.0048c84e
sub ecx, ebx
xchg esi, edi
xchg ecx, ebx
shr esi, 0x1d
jmp 0x48e19f
mov edx, 0x6332a2e
mov ecx, edi
xchg ebx, ecx
rol ecx, 0xf
and esi, ebx
nop
mov esi, 0xe151ae54
not ebx
or edi, 0xe1522f44
jmp 0x48e317
push 0xdeeed428
bswap esi
or ecx, edi
xor edi, 0xe161b0fa
or ecx, edi
jmp 0x48f032
push 0xdeea2214
dec esi
xchg ebx, esi
and ecx, ebx
xor edi, ebx
shl esi, 0x18
add ebx, ecx
jmp 0x48e246
pop edx
or edi, ecx
add ebx, 0xe17d4784
or edi, ebx
sub ebx, edi
sub ecx, edi
xor ebx, 0xe17e4288
shr ebx, 3
or esi, edi
jmp 0x48d866
pop edx
inc ebx
or ebx, ecx
mov edi, ecx
ror esi, 0x10
xchg ebx, esi
xor esi, ecx
shr ecx, 0xb
or edi, ecx
bswap ecx
mov edi, ebx
xor edi, esi
not edi
jmp 0x48d04c
pop edx
add esi, edi
xchg edi, esi
or esi, 0xe18ec540
add edi, esi
and edi, 0xe18f42f6
or ebx, ecx
or ebx, edi
inc ebx
jmp 0x48e428
pop edx
dec ebx
sub ecx, esi
mov edi, ecx
or ebx, esi
or esi, 0xe1955fe2
or edi, 0xe1959fbe
jmp fcn.0048ed7b
pop edx
xor ebx, ecx
not ebx
and ebx, edi
or esi, ecx
jmp 0x48c624
pop edx
or ebx, edi
and edi, 0xe197624c
mov ecx, esi
inc esi
sub ebx, ecx
add ecx, 0xe1986e1e
jmp 0x48e612
push 0xdef6d934
rol ecx, 1
neg ebx
sub edi, ecx
or esi, 0xe1998c2c
or ecx, 0xe199cc88
and ecx, 0xe19a1e44
xchg esi, ebx
add edi, esi
mov ecx, 0xe19adb14
xor ebx, 0xe19b1c4c
sub ebx, 0xe19b5cce
xor ecx, esi
jmp 0x48c2b7
mov edx, 0x6332a2e
shl esi, 0x15
and edi, ecx
add esi, ecx
mov edi, ebx
add esi, edi
add esi, 0xe1a191dc
mov ecx, edi
rol edi, 0x17
rol ebx, 0xf
add esi, 0xe1a291d2
jmp 0x48c5df
pop edx
not ecx
neg ebx
and esi, 0xe1b4d6d0
xchg edi, ebx
xchg ecx, ebx
and edi, esi
jmp 0x48db49
call edx
xor ecx, 0xe1bdfd30
dec ebx
xchg edi, ebx
bswap ebx
rol ebx, 0x18
or ecx, esi
add ecx, edi
nop
jmp 0x48c9fa
pop edx
xor ebx, edi
shl edi, 0xd
or ecx, edi
add ecx, esi
xchg ecx, edi
or ebx, ecx
bswap esi
add esi, edi
jmp 0x48ce19
push 0x401400
inc ecx
or ebx, esi
mov esi, edi
shl esi, 6
mov ecx, edi
dec esi
and edi, esi
add edi, ecx
jmp 0x48da8f
pop edx
rol esi, 4
sub edi, ebx
sub ebx, esi
sub ebx, 0xe1ccc140
sub ebx, esi
and ebx, ecx
xchg esi, ebx
sub edi, esi
mov ebx, 0xe1cdfb56
and edi, 0xe1ce3bda
jmp 0x48dea2
pop edx
or esi, ebx
xor esi, ebx
sub edi, 0xe1d0b7ee
add ecx, 0xe1d0f7f8
xor esi, 0xe1d138bc
and esi, edi
xor ecx, edi
sub esi, 0xe1d20820
mov edi, esi
sub esi, ecx
sub esi, 0xe1d2c484
xor edi, esi
jmp 0x48c840
mov edx, 0x6332a2e
xchg esi, edi
sub esi, ecx
xchg ebx, esi
xor esi, ecx
jmp 0x48cc6b
push 0xded66976
mov ecx, edi
xchg esi, edi
mov edi, ebx
mov ebx, ecx
jmp 0x48cf91
push 0xdee78208
and ecx, esi
xchg ebx, edi
ror edi, 0x17
or ebx, esi
xor edi, esi
mov ebx, esi
xchg ebx, esi
and ecx, edi
jmp 0x48e415
call edx
xor esi, 0xe1ec4ff8
sub ebx, 0xe1ec9006
xor edi, 0xe1ecd0a6
shr edi, 7
add ecx, 0xe1ed623e
or esi, ecx
or edi, esi
ror ecx, 0x1b
shl ebx, 0x12
bswap edi
jmp 0x48defd
push 0xdee03014
xor ebx, esi
or ecx, 0xe1ef3e44
bswap ebx
add edi, ebx
mov ebx, edi
inc edi
dec edi
mov esi, ecx
or ecx, ebx
and edi, 0xe1f2d978
jmp 0x48c883
pop edx
bswap ecx
mov edi, 0xe1fa7d0e
or ebx, ecx
nop
jmp 0x48d62f
push 0xded91710
xor ecx, esi
add esi, ecx
bswap ecx
and ecx, esi
sub edi, 0xe1fc61b6
and edi, ebx
add ecx, esi
neg esi
jmp 0x48c80b
push 0xdee3665e
and ecx, esi
and edi, esi
or esi, 0xe2002896
mov edi, esi
xor edi, ebx
inc esi
sub ebx, 0xe20136b6
mov ebx, ecx
add ebx, ecx
sub edi, ecx
jmp 0x48c289
mov edx, 0x6332a2e
dec edi
xchg ebx, ecx
xor ebx, 0xe207364c
sub edi, esi
bswap ebx
neg ebx
and edi, 0xe2084728
and ebx, 0xe2088704
jmp 0x48e2fd
pop edx
add edi, 0xe208e4f4
or edi, 0xe209256e
xchg ebx, ecx
xor edi, 0xe209b6e8
not esi
dec edi
sub esi, 0xe20a789a
or esi, ebx
neg esi
inc edi
jmp 0x48eb76
push 0xded9aa62
and esi, ecx
or ebx, 0xe221a62a
or ecx, edi
or edi, 0xe22236c0
add ecx, 0xe22276d6
and ebx, 0xe222b6e6
sub ebx, edi
neg esi
jmp 0x48d29f
pop edx
shl esi, 0xa
rol esi, 9
or edi, 0xe2379e96
inc edi
or esi, 0xe238207a
or ecx, ebx
sub ebx, esi
mov esi, 0xe238ec66
mov edi, 0xe2392cba
xor ecx, ebx
add edi, ecx
mov ecx, ebx
jmp 0x48d4e9
pop edx
add ecx, edi
and esi, ebx
and ecx, esi
sub edi, ecx
jmp 0x48da56
mov edx, 0x6332a2e
or ebx, esi
or esi, 0xe245942c
and esi, ecx
add ecx, 0xe24621f2
jmp 0x48e120
push 0xdef2fa9a
and ecx, esi
or edi, ebx
mov esi, edi
sub edi, 0xe247f2da
add edi, 0xe24832aa
sub ebx, edi
rol ebx, 0x16
mov edi, ecx
shr ecx, 9
and ecx, edi
or ecx, edi
and ebx, ecx
jmp 0x48ea64
pop edx
or edi, ecx
or edi, ebx
mov esi, edi
xor ecx, esi
sub edi, ebx
add esi, edi
xchg edi, esi
add ebx, edi
jmp 0x48d5d1
call edx
xor edi, esi
and edi, ecx
or ecx, esi
xchg ebx, esi
mov ebx, esi
shr ecx, 7
xor ebx, esi
mov esi, ecx
sub esi, 0xe25e0272
sub ebx, ecx
jmp 0x48e5d2
call fcn.0048c84e
inc ecx
xchg esi, edi
sub edi, ecx
sub ebx, edi
or ecx, edi
dec ebx
jmp 0x48eea1
mov edx, 0x6332a2e
add edi, ecx
xor edi, ecx
mov ebx, esi
rol edi, 0x1c
jmp 0x48e6f3
call edx
shr ecx, 0x13
mov esi, ecx
or edi, esi
xor ebx, ecx
rol edi, 0x18
xor edi, ebx
shl edi, 0x14
or esi, edi
add ebx, esi
shl esi, 0x19
nop
xchg edi, ebx
add esi, ecx
and ecx, esi
jmp 0x48c90d
call edx
rol esi, 4
shr edi, 0x1e
and esi, ebx
or ecx, esi
and ebx, esi
xchg ebx, esi
add ecx, esi
dec esi
jmp 0x48d1ed
push 0xdeea6ca4
or ebx, 0xe284b456
xor edi, ebx
and ecx, 0xe2853412
xchg ecx, ebx
or esi, ecx
sub edi, 0xe285f34e
neg ebx
add edi, 0xe28686c8
jmp 0x48c9d5
pop edx
sub ebx, edi
or ebx, ecx
not edi
xchg edi, ecx
add ecx, 0xe287ef52
or ecx, edi
and ecx, 0xe2886e6c
add esi, 0xe288af02
jmp 0x48eee3
call edx
sub edi, ebx
or esi, ebx
and edi, esi
xor edi, esi
jmp 0x48cd66
call fcn.0048c84e
add esi, edi
mov edi, 0xe290e1c8
xchg edi, esi
shr ecx, 0x13
xor ecx, esi
or ebx, esi
jmp 0x48ca08
call fcn.0048c84e
neg ecx
sub edi, ebx
jmp 0x48e20e
push 0xdef09d3a
sub ecx, esi
mov edi, 0xe296933a
xchg edi, esi
neg ecx
add esi, edi
add edi, esi
xchg ecx, edi
xor ebx, 0xe2982064
inc edi
or ebx, 0xe298a1ca
and edi, esi
shl esi, 0x1c
shl edi, 5
and edi, esi
jmp 0x48d940
call edx
mov edi, ecx
mov ebx, esi
add ebx, edi
add esi, ecx
sub edi, ecx
not edi
sub ebx, edi
xchg esi, edi
neg esi
xchg ebx, edi
sub edi, 0xe2a55f4a
xchg ecx, edi
jmp 0x48d15e
push 0xdee7cc54
rol ebx, 3
bswap ebx
xchg ebx, ecx
and ebx, edi
jmp 0x48cc22
push 0xdeec2fa2
xchg esi, ecx
and ebx, esi
and ecx, ebx
sub ecx, ebx
or edi, ebx
xor ecx, ebx
jmp 0x48ebd7
call edx
or ecx, edi
and ecx, esi
add edi, ebx
xchg ebx, ecx
xor ecx, ebx
and esi, 0xe2ab4362
xor ecx, ebx
ror edi, 5
or ebx, esi
or edi, ecx
jmp 0x48ead6
pop edx
or ebx, edi
add ebx, esi
nop
and edi, 0xe2c8a3a6
and ecx, esi
bswap ebx
add ebx, esi
xor ebx, 0xe2c9b110
jmp 0x48c792
push 0xdef05274
or ecx, 0xe2cbef70
mov esi, ebx
xor esi, edi
mov ecx, esi
or edi, ebx
sub ebx, esi
xchg ecx, ebx
neg esi
sub esi, ecx
dec ecx
add ebx, esi
shl ecx, 0xd
xor ecx, edi
add ebx, ecx
jmp 0x48e362
call fcn.0048c84e
ror esi, 0xe
sub edi, 0xe2dda270
jmp 0x48d10d
call fcn.0048c84e
xor esi, ebx
add ebx, esi
sub esi, ecx
or ebx, edi
jmp 0x48f28b
mov edx, 0x6332a2e
or edi, esi
xor ebx, ecx
sub edi, ebx
xchg esi, edi
xor edi, 0xe2e0258c
or edi, ecx
inc edi
and edi, esi
and edi, 0xe2e135ec
or edi, esi
jmp 0x48eb3b
call fcn.0048c84e
add edi, esi
xor edi, esi
bswap esi
sub ecx, esi
or esi, 0xe2e4f528
mov ecx, 0xe2e535c0
and ecx, 0xe2e5764e
xor ebx, edi
xor edi, 0xe2e606dc
ror ebx, 7
jmp 0x48e3f2
mov edx, 0x4132136a
or esi, ebx
sub edi, ebx
jmp 0x48cce5
push 0xdefb9926
sub esi, 0xe39d614c
dec ebx
not ebx
xor ebx, esi
xchg ecx, edi
and esi, ebx
mov esi, ecx
xor ebx, ecx
add ebx, ecx
xchg esi, ecx
xchg ebx, ecx
and edi, esi
jmp 0x48ce6a
push 0x8ad2c
add edi, ecx
mov ebx, 0xe3ce7432
jmp 0x48d87d
call edx
ror edi, 0xf
xchg edi, esi
add edi, esi
shl ecx, 0x1a
and ecx, esi
shl edi, 6
jmp 0x48d7ce
push 0xdef38962
sub esi, 0xe3d94f78
xchg esi, edi
xchg edi, ebx
sub esi, 0xe3da1f74
xor esi, 0xe3da60fa
or edi, ebx
jmp 0x48d6c9
call edx
ror ebx, 0x14
or ebx, 0xe3dc1cb6
add esi, edi
shl edi, 0x11
jmp 0x48d656
push 0xdedf6048
and ebx, ecx
and edi, ecx
xchg edi, esi
sub edi, 0xe3e54480
jmp 0x48c4db
pop edx
add esi, 0xe3e5e3fc
or edi, esi
mov esi, 0xe3e6dc7a
shl esi, 0x16
xchg ebx, edi
dec ebx
jmp 0x48c6b4
call fcn.0048c84e
add ecx, esi
mov ebx, esi
xor ecx, ebx
add esi, edi
bswap esi
mov esi, ebx
and ecx, ebx
or edi, esi
jmp 0x48ea4e
pop edx
xor ebx, ecx
and ecx, esi
xor edi, esi
mov edi, 0xe47f7c74
mov ecx, edi
shl ecx, 4
dec ebx
ror edi, 0x1a
mov esi, 0xe4841a0e
and esi, 0xe485b42e
jmp 0x48d388
push 0xdeec7ad6
add ecx, esi
or esi, ecx
xor ebx, 0xe4a30576
sub edi, esi
bswap edi
xchg esi, ebx
or ecx, ebx
sub esi, 0xe4a5e78e
or edi, ecx
shr ebx, 0xb
jmp 0x48c7ca
pop edx
shl esi, 0x10
xor edi, 0xe4f66206
dec ecx
add ecx, edi
or ecx, edi
add ebx, 0xe4f9c706
add ecx, edi
sub ebx, edi
jmp 0x48ef3a
push 0xded8cd5c
add ecx, edi
or esi, ecx
jmp 0x48db59
mov edx, 0x6332a2e
bswap esi
add edi, esi
mov ecx, esi
mov ecx, ebx
or edi, esi
mov edi, ebx
jmp 0x48d25e
call edx
xchg esi, ecx
add ecx, ebx
and edi, esi
and ebx, 0xe586f6f0
sub esi, ebx
and esi, ebx
and ecx, esi
and ebx, 0xe58a4dec
jmp 0x48d559
push 0xdedc480e
mov esi, ecx
shl ecx, 0x18
not edi
not ecx
inc ecx
and esi, edi
or ebx, esi
shr ebx, 0xe
inc esi
mov ecx, esi
xchg ebx, ecx
sub esi, 0xe5a15e70
rol edi, 6
rol edi, 4
jmp 0x48ca77
pop edx
add edi, 0xe5b29466
xchg esi, edi
ror edi, 0x12
add ebx, ecx
and ecx, esi
xchg ecx, esi
and esi, 0xe5b787a6
and edi, esi
jmp 0x48ce31
call fcn.0048c84e
xchg edi, ebx
add ebx, esi
add edi, esi
or esi, 0xe5ce6010
jmp 0x48e451
mov edx, 0x6332a2e
nop
sub ebx, esi
jmp 0x48cf2e
pop edx
ror ecx, 0x14
neg esi
rol ecx, 0x15
inc ebx
xchg esi, ecx
xor esi, 0xe61f9660
jmp 0x48d3b7
call edx
mov ebx, edi
mov edi, ecx
mov ecx, esi
not ecx
add ebx, 0xe66c4e56
sub edi, 0xe66d1a44
jmp 0x48cc79
pop edx
xchg esi, edi
mov ebx, 0xe66ef58e
or edi, ebx
or esi, 0xe670f102
jmp 0x48df7a
push 0xded88362
rol esi, 0x15
xor ecx, ebx
mov ebx, ecx
xchg ecx, edi
or ebx, ecx
xchg ebx, ecx
or esi, edi
or esi, edi
sub esi, ebx
add ecx, ebx
xchg ebx, edi
inc edi
jmp 0x48ecda
pop edx
shl ecx, 0x1a
not ecx
add edi, ebx
and edi, ecx
xor ecx, edi
xor ecx, esi
mov esi, ecx
and esi, ecx
jmp 0x48dc10
call edx
sub ebx, ecx
add ebx, esi
inc edi
or ebx, ecx
add ecx, ebx
and ecx, 0xe6d3b920
xor esi, ebx
sub edi, ebx
xor ebx, ecx
rol esi, 8
jmp 0x48d8cc