Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get common file path
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff10
jne 0x40108e
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call main
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_RtlpWaitForCriticalSection
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_RtlpWaitForCriticalSection
call main
call main
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xfffffefb
jne 0x4010f9
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call main
call main
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
call main
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_RtlpWaitForCriticalSection
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
ret
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xffffff1b
jne 0x40115a
call sub.ntdll.dll_RtlpWaitForCriticalSection
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call main
call sub.ntdll.dll_RtlpWaitForCriticalSection
call main
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_RtlpWaitForCriticalSection
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_RtlpWaitForCriticalSection
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
ret
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xfffffee6
jne 0x4011de
call sub.ntdll.dll_NtImpersonateAnonymousToken
call main
call main
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_NtImpersonateAnonymousToken
call main
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_RtlpWaitForCriticalSection
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_RtlpWaitForCriticalSection
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
ret
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xffffff18
jne 0x401258
call sub.ntdll.dll_RtlpWaitForCriticalSection
call sub.ntdll.dll_RtlpWaitForCriticalSection
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_RtlpWaitForCriticalSection
call sub.ntdll.dll_NtImpersonateAnonymousToken
call main
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call main
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.ntdll.dll_NtImpersonateAnonymousToken
call sub.user32.dll_PostMessageW
call sub.user32.dll_PostMessageW
ret
jmp 0x494fd1
not edx
sub ebx, edx
and esi, edx
add ebx, 0xd9f851d3
or esi, ebx
or esi, ebx
and edx, ebx
jmp 0x4970b6
call ecx
and edi, edx
nop
or ebx, edi
add esi, edi
add edi, 0xe1a80dc9
mov ebx, edx
mov ebx, 0xe1ac2990
or edx, edi
sub edx, ebx
shr esi, 0x13
sub edi, ebx
jmp 0x495159
push 0x40
xor edx, edi
xchg edx, esi
add esi, edi
mov esi, edi
add ebx, edi
dec edi
shr ebx, 0x13
xor edi, ebx
xchg edi, edx
jmp 0x496d82
pop ecx
ror ebx, 0x14
xor edi, 0xe1d6ee93
sub ebx, esi
add edx, edi
xor edi, esi
add edx, esi
dec edx
add ebx, edi
shl ebx, 0x15
jmp 0x495227
call ecx
sub edi, esi
inc esi
xchg edx, esi
xchg edx, esi
jmp 0x495d5b
pop ecx
xchg ebx, edi
sub ebx, esi
xchg edx, edi
neg ebx
xor ebx, esi
inc edi
mov edi, ebx
jmp 0x495a41
pop ecx
sub ebx, edi
shr ebx, 0x1d
or ebx, edi
sub esi, edi
mov edx, esi
mov ebx, esi
xchg edi, edx
xor ebx, 0xe2faa0bd
sub edx, esi
jmp 0x497660
pop ecx
add edi, 0xe31daff5
mov edi, 0xe31fcf2e
and edx, edi
mov edx, ebx
rol ebx, 0xe
and ebx, edx
bswap edx
jmp 0x495cd3
push 0xda8ef4cb
xchg edx, edi
sub esi, ebx
shr esi, 7
neg esi
or edi, edx
xor esi, edi
or edi, edx
xchg ebx, edi
mov ebx, edi
dec edx
jmp 0x496f2e
push 0xda7fff79
xchg esi, edx
or ebx, edx
jmp 0x4974b4
pop ecx
sub edx, esi
sub edx, edi
add ebx, 0xe3916644
sub edx, ebx
or esi, 0xe395d034
or ebx, 0xe3980960
or esi, ebx
dec esi
xchg edx, esi
xor ebx, esi
sub edx, edi
or ebx, edx
jmp 0x497721
call ecx
inc esi
sub ebx, esi
xor edx, 0xe3acaccc
rol ebx, 0xe
and ebx, esi
xor edx, esi
rol ebx, 0x14
jmp 0x49584e
push 0xda423ef5
bswap edi
and esi, ebx
mov ebx, 0xe3d0c63c
xchg esi, ebx
dec edi
and edi, edx
mov ebx, 0xe3dd89d2
and ebx, 0xe3df7c9e
sub edx, 0xe3e19887
xor ebx, esi
bswap ebx
and esi, 0xe3eeb5b4
xor edx, 0xe3f2d390
xchg edi, edx
and edi, edx
jmp 0x4965ef
push 0xdad964fe
ror esi, 0x12
bswap edx
rol edx, 0x13
xchg esi, edx
add esi, edx
ror edx, 0x14
or ebx, esi
jmp 0x49598e
push 0xda2f8d6c
sub edx, edi
and edx, 0xe7fc652c
inc esi
rol ebx, 2
mov edi, edx
xor esi, edi
not edi
and edx, ebx
add edi, edx
bswap edx
jmp 0x4961d8
pop ecx
and ebx, 0xe86180b0
xor ebx, esi
or ebx, edi
and esi, 0xe8676031
mov edi, esi
neg ebx
add esi, 0xe86d2ae1
or edx, ebx
jmp 0x4973f3
pop ecx
and ebx, edx
xor edi, esi
ror edx, 0x1a
jmp 0x49650e
push 0xdaddee8c
neg esi
xor esi, ebx
xor esi, edi
sub esi, ebx
shr edx, 9
or ebx, edi
mov edi, ebx
add ebx, edi
xor esi, edi
xor esi, edi
jmp 0x496e68
pop ecx
neg edx
xor edi, 0xe8f3710d
or edi, edx
or edx, 0xe8f74d32
sub edx, ebx
and ebx, edi
add esi, edx
jmp 0x496b58
push 0xdac44d32
bswap edx
xchg edx, ebx
xchg edx, esi
or ebx, 0xe92489bb
sub esi, ebx
rol ebx, 2
or ebx, 0xe92ad779
xor edi, esi
xor edi, ebx
dec esi
rol ebx, 0x1b
jmp 0x4960a9
push 0xda681fd4
xchg ebx, esi
mov edx, esi
xor esi, 0xe96013bc
or edx, edi
and edi, ebx
mov esi, 0xe9e27aaa
jmp 0x497217
pop ecx
sub edi, esi
dec edx
or esi, ebx
xor ebx, esi
ror edi, 0x16
neg esi
shl edi, 0xc
and edx, 0xe9f6f0a4
jmp 0x495f3d
push 0xda58a56c
inc edi
sub ebx, edi
jmp 0x496da3
pop ecx
not edi
mov edi, ebx
add edi, esi
add ebx, 0xea1fb636
or ebx, 0xea21fd18
neg edx
sub ebx, edx
add edi, edx
jmp 0x49757d
call ecx
shl edx, 1
shr esi, 0xc
add edi, 0xea2f9af1
neg edi
dec edx
xor ebx, esi
sub esi, edi
xor esi, ebx
xor edx, ebx
xor edx, esi
sub esi, edi
add edi, 0xea46936c
or esi, edx
jmp 0x497359
pop ecx
dec ebx
or edx, ebx
and esi, ebx
or ebx, 0xea622358
mov edx, esi
rol esi, 0x1f
jmp 0x496568
push 0xda4fbe8c
and edi, edx
mov esi, edi
not edx
mov ebx, edi
xor ebx, esi
rol edi, 0xa
shl ebx, 0x18
jmp 0x496e1c
push 0x401400
not ebx
mov esi, edi
sub edx, ebx
rol ebx, 0x19
sub edi, esi
and edx, edi
or esi, edi
bswap edi
or edx, ebx
dec edx
xor esi, edi
xor ebx, 0xeab9ebd8
or edx, 0xeabbe3b2
jmp 0x49752b
pop ecx
sub esi, 0xeacc8fff
xor ebx, esi
add edx, 0xead07e0b
or ebx, 0xead278c4
xchg edx, ebx
add edx, 0xead6888a
jmp 0x495f14
mov ecx, 0x73716341
xchg edx, edi
shr ebx, 0x1f
not edx
sub esi, edi
add edi, 0xeb129645
mov ebx, edi
sub edi, edx
bswap edi
and esi, edx
or esi, ebx
jmp 0x496f94
pop ecx
sub ebx, edx
shr esi, 0x14
sub edx, ebx
mov edi, edx
xor ebx, esi
and edx, 0xeb6662d2
dec edi
add ebx, esi
inc esi
bswap esi
and edx, edi
jmp 0x495d8a
call ecx
mov esi, edi
add ebx, esi
xchg esi, ebx
mov ebx, 0xeb94def1
or edx, 0xeb96d880
mov esi, edx
xchg edx, edi
xchg edx, ebx
mov edx, esi
sub edx, ebx
inc edi
add edx, 0xeba48850
add edx, esi
and edi, edx
jmp 0x495436
push 0xdab6a7d9
xor edi, ebx
sub edi, edx
rol ebx, 0x14
jmp 0x496550
mov ecx, 0x73716341
mov ebx, edi
and edi, 0xebdb9d7d
dec ebx
add ebx, edi
mov esi, ebx
and edx, 0xebe365e2
add edi, 0xebe587a4
mov edi, esi
or edi, ebx
sub esi, edi
neg edi
jmp 0x496ce8
push 0xdadae911
xchg ebx, edx
inc edx
mov edi, edx
add ebx, esi
add ebx, 0xebffb1d9
dec edx
shl ebx, 1
dec edx
jmp 0x4966b3
push 0xda66a50c
bswap edx
dec edx
sub edx, esi
rol edx, 0x10
ror ebx, 0x1e
shr ebx, 0x11
mov esi, ebx
or edx, 0xec277cb6
not esi
and esi, 0xec2b68c7
xor edi, ebx
and edx, edi
jmp 0x4955d4
push 0xdacecd1c
add edi, esi
or edx, ebx
mov ebx, edx
or ebx, esi
or esi, edx
xchg ebx, edx
mov edi, 0xec835ac5
jmp 0x4961bc
call fcn.004975e8
bswap edi
xor ebx, 0xec87d300
sub edx, esi
or edx, edi
mov esi, edi
mov edi, esi
sub edx, 0xec916775
jmp 0x495eea
push 0xdac1317c
mov edi, ebx
inc edi
shl edx, 0x17
not esi
neg edx
xchg ebx, edx
or ebx, 0xecdd3949
sub edx, 0xecdf2607
shl edi, 0xf
xchg edx, edi
shr esi, 0x1c
dec esi
bswap edx
jmp 0x496c39
call ecx
or ebx, edx
xor edi, 0xed0c108b
not esi
ror esi, 2
shl edi, 0xe
sub esi, edi
neg edi
dec edx
ror esi, 2
sub edi, edx
sub edx, ebx
rol esi, 1
not ebx
bswap edi
jmp 0x495519
push 0xdaa3ffcc
xchg esi, ebx
and edx, ebx
and ebx, edx
or edi, 0xed846f84
or ebx, edi
dec ebx
not ebx
sub edi, 0xed8c6455
jmp 0x4968d3
pop ecx
nop
mov esi, ebx
mov edx, edi
mov ebx, edx
add edi, 0xede42e5e
jmp 0x497182
pop ecx
shl ebx, 0x1e
ror edi, 9
not esi
and edx, 0xedec8e2e
jmp 0x495253
pop ecx
xchg ebx, esi
add ebx, edx
xchg esi, ebx
xchg edx, ebx
shr ebx, 2
sub ebx, esi
or ebx, edx
xor esi, ebx
xor edi, esi
jmp 0x495f5e
mov ecx, 0x40495727
xor esi, 0xee267eae
xchg esi, edi
add esi, edi
add edx, edi
or edi, esi
mov ebx, 0xee305092
dec edx
and edx, edi
jmp 0x496252
push 0xda937110
rol esi, 4
and esi, edi
rol edi, 5
add edx, esi
add ebx, edx
xchg edi, edx
xor ebx, esi
sub esi, ebx
rol edi, 0x12
jmp 0x496828
pop ecx
mov esi, edi
mov edx, esi
or ebx, edx
xor edi, esi
rol edi, 8
or esi, ebx
ror edx, 0x1f
xchg edi, edx
jmp 0x4970d4
pop ecx
sub ebx, edi
add ebx, edx
and edi, edx
bswap edx
xor edi, ebx
sub edx, ebx
or edi, edx
jmp 0x49562a
pop ecx
sub edx, 0xee963921
mov esi, 0xee983204
not edx
add esi, ebx
shl edx, 5
xchg ebx, edi
jmp 0x4959aa
pop ecx
add edi, edx
or esi, ebx
mov esi, edx
shr ebx, 0x12
add edi, 0xeebb6136
xchg ebx, esi
xor ebx, esi
dec ebx
mov edi, 0xeec3796e
and ebx, edi
sub edi, edx
xor ebx, edx
and esi, edi
neg edx
sub edi, esi
jmp 0x495917
pop ecx
dec edx
inc edx
and ebx, edi
sub edx, ebx
mov edi, 0xeef4041a
jmp 0x495052
mov ecx, 0x40495727
and edx, edi
xchg edx, edi
not esi
add ebx, edx
bswap esi
rol edi, 0xf
jmp loc.004964ef
call ecx
mov edx, esi
or esi, edi
xor edi, ebx
rol edx, 0x11
add edi, 0xef4570d2
and edi, ebx
sub edx, edi
mov edi, edx
dec esi
xor edx, esi
mov edx, 0xef5167c9
xor ebx, 0xef5369f2
jmp 0x495690
pop ecx
sub ebx, edx
neg edi
jmp 0x49646b
pop ecx
sub edx, esi
or ebx, esi
sub edx, 0xef72e529
xchg edx, edi
xchg esi, edx
and edi, edx
neg edx
add edx, edi
nop
or ebx, 0xef80bf0d
jmp 0x495637
mov ecx, 0x4132136a
mov ebx, edi
sub edx, edi
and esi, edx
sub edi, edx
add esi, edi
xor edi, 0xef8d096b
rol ebx, 0x1b
xchg edx, esi
sub edi, 0xef931063
jmp 0x4961ad
push 0xdaa6fc05
and ebx, 0xf0162f6e
mov edi, esi
rol edi, 1
sub ebx, esi
not edx
xor ebx, 0xf022474d
and esi, edi
bswap ebx
mov esi, 0xf028454c
and esi, edi
and ebx, edi
jmp 0x497563
mov ecx, 0x73716341
xchg edi, ebx
xchg esi, ebx
shr ebx, 0xc
xor ebx, edi
sub esi, ebx
xor edi, 0xf04ade61
inc ebx
not ebx
xor esi, 0xf050e064
rol edx, 3
xor esi, 0xf054d35a
xchg ebx, esi
jmp 0x497377
call ecx
add esi, edx
shr ebx, 0x1e
xor ebx, esi
xchg edx, ebx
xchg edx, esi
inc edx
and ebx, edx
xor edx, esi
ror edi, 9
jmp 0x49573c
push 0xda7e8212
and ebx, edx
or esi, edi
mov ebx, edi
inc esi
or edi, esi
sub edi, esi
dec ebx
jmp 0x495245
call fcn.004975e8
shl edx, 0xa
xchg edi, ebx
jmp 0x4973cb
push 0xdad04f15
and ebx, 0xf0dc689b
ror edx, 0xb
inc esi
xor esi, edi
add esi, ebx
neg edi
xchg edx, esi
jmp 0x49743d
mov ecx, 0x40495727
shr edi, 0xa
or edi, ebx
mov ebx, edx
xchg edx, ebx
jmp 0x496ba4
call fcn.004975e8
add edi, edx
or esi, edi
dec edx
jmp 0x4958b3
pop ecx
sub esi, 0xf16aab7b
inc edi
add ebx, esi
sub edx, ebx
or edx, edi
sub ebx, edx
xor ebx, esi
jmp 0x495ddf
pop ecx
neg ebx
sub edx, 0xf17b059d
bswap edi
xor esi, edx
xor ebx, edx
shr esi, 8
sub esi, 0xf18544c3
jmp 0x4976d8
call fcn.004975e8
or ebx, edi
xor edi, 0xf1970f11
sub esi, edi
or ebx, 0xf19b09ea
xor ebx, esi
add ebx, edi
or ebx, edx
neg esi
mov edi, 0xf1a51558
or esi, 0xf1a71668
mov edx, esi
jmp 0x497540
call fcn.004975e8
xor esi, edx
mov edi, edx
xor edi, ebx
xor edi, esi
mov esi, ebx
xor edi, 0xf1e927ec
mov ebx, esi
xchg edi, esi
neg edx
jmp 0x496df6
push esp
sub esi, edx
bswap ebx
sub edi, ebx
and ebx, edx
or ebx, 0xf1f95694
mov edx, 0xf1fb7d36
jmp 0x495036
call fcn.004975e8
neg esi
add edx, edi
shr edi, 0x1f
rol edx, 0x1a
inc ebx
not edi
sub edx, esi
sub edx, edi
xchg esi, edx
ror edx, 0x1a
or ebx, 0xf2267ebe
jmp 0x49527c
pop ecx
dec ebx
bswap edi
and esi, 0xf2639222
mov edx, esi
rol ebx, 0x10
rol esi, 5
add esi, ebx
and ebx, esi
xor esi, edx
and ebx, 0xf27182c8
sub esi, ebx
xchg ebx, edi
mov esi, 0xf277914a
jmp 0x495458
pop ecx
bswap edx
ror edi, 0x11
sub edi, 0xf2c4b426
xchg esi, edi
rol ebx, 0x19
and edi, esi
add edx, edi
and edx, esi
not ebx
neg ebx
or edi, esi
and ebx, edx
jmp 0x496fd1
push 0xdab82990
xor edx, 0xf2e92d0c
or esi, edi
add edx, 0xf2ed46a4
jmp 0x495cec
pop ecx
rol ebx, 0x1a
xor edx, ebx
sub ebx, esi
not esi
add edi, ebx
xchg edi, ebx
add edi, ebx
or edx, edi
add ebx, edi
mov esi, 0xf302f3b1
jmp 0x495e43
mov ecx, 0x73716341
add edx, 0xf3adf6fc
neg edi
and edi, edx
rol esi, 0x16
shl edx, 0x13
sub edi, edx
sub edx, esi
sub esi, 0xf3cc44a6
mov esi, 0xf3ce463e
add edi, 0xf3d04164
mov esi, 0xf3dfd76c
and edx, ebx
jmp 0x4962fb
push 0xda40c591
shr esi, 0xd
add edi, ebx
inc ebx
bswap edi
mov ebx, esi
xchg edi, ebx
or edx, edi
and edx, edi
or edi, ebx
or edx, 0xf48bdaf8
mov esi, ebx
xor edi, esi
jmp 0x4952b6
push 0xdadc6d4e
and edx, ebx
dec edi
add esi, ebx
and ebx, 0xf4f83e19
xor edi, 0xf4fa3af4
sub edx, edi
xor esi, 0xf4fe2d26
shr edi, 0x17
jmp 0x495465
call ecx
xchg edi, ebx
xor edi, edx
xor ebx, esi
shr ebx, 7
xor ebx, 0xf61e375e
dec edi
and edi, esi
or edi, ebx
xchg ebx, edi
dec ebx
jmp 0x4962c1
push 0xda94eea2
xor esi, edx
bswap ebx
mov esi, 0xf672ed68
inc esi
xchg esi, edx
jmp 0x4957b4
push 0xdaa57ef0
add edx, edi
or edi, 0xf9bb2adb
mov esi, edi
jmp 0x496064
call fcn.004975e8
xor ebx, 0xf9c02970
xchg ebx, esi
xor edi, esi
or edx, 0xf9c61d0d
or esi, edx
or esi, edi
add ebx, edi
xchg esi, ebx
sub edx, 0xf9d04a2f
sub ebx, esi
and ebx, esi
sub edi, esi
jmp 0x495b51
push 0xda91ef09
xor esi, ebx
xor edx, edi
shl edi, 5
neg ebx
mov edi, 0xfa0854a1
or ebx, edx
add edx, 0xfa0c5988
sub edx, 0xfa0e8cfc
mov ebx, 0xfa1093c0
shl esi, 0x12
jmp 0x495d3c
pop ecx
xchg esi, ebx
add ebx, esi
jmp 0x49618d
push 0xda2e13ec
inc edi
rol edi, 0x11
mov esi, edx
and edx, 0xfa205be1
sub edx, esi
inc ebx
sub edi, esi
and edi, edx
and edi, esi
xor ebx, esi
add ebx, edi
mov esi, 0xfa309dd4
and edx, esi
and esi, ebx
rol esi, 0xe
jmp 0x495371
pop ecx
sub edx, 0xfaf13c1a
xor edx, esi
xor edi, ebx
add esi, 0xfaf762cf
xor ebx, edi
jmp 0x4955f1
pop ecx
xor ebx, edi
add ebx, edi
add esi, 0xfb315c29
shr edi, 8
xchg edx, esi
xor edx, ebx
dec edi
xchg esi, edx
and ebx, edi
xor ebx, edx
add edx, esi
rol ebx, 0x15
xchg edx, ebx
mov edi, ebx
xor edi, 0xfb49d22c
dec edx
jmp 0x495d9e
call fcn.004975e8
xor ebx, esi
not edi
xor ebx, esi
add esi, edx
mov esi, edx
jmp 0x495655
push 0xdac2cae5
sub edx, ebx
add esi, edi
xchg ebx, edi
dec edx
inc esi
not esi
xor esi, edi
and edi, esi
add esi, ebx
mov edi, edx
inc edi
jmp 0x49556a
call fcn.004975e8
and esi, edx
dec edx
xor edx, esi
or edx, esi
sub edi, 0xfc80f584
and esi, 0xfc82f3bc
add esi, 0xfc84fdfc
shr edx, 1
and ebx, edi
xor edx, ebx
jmp 0x49510e
mov ecx, 0x40495727
ror edi, 0x16
add edi, ebx
sub edx, ebx
sub ebx, edi
bswap edi
jmp 0x495a5c
call fcn.004975e8
sub edi, edx
mov edx, esi
xor ebx, 0xfc9bd581
xchg edx, edi
or edi, esi
and ebx, edx
neg ebx
add ebx, 0xfca89333
or edx, edi
inc esi
bswap edi
dec ebx
jmp 0x49678d
push 0xda5ba184
and esi, ebx
or edi, ebx
add edx, 0xfd82e07c
bswap edi
mov edx, ebx
sub esi, edx
sub edx, 0xfd8b00c3
ror esi, 0x15
neg ebx
rol edx, 0x11
jmp 0x496ec1
push 0x93bd1
or edi, 0xfdb8a403
bswap edx
rol edx, 0x1f
xchg edi, esi
or ebx, edx
add ebx, edx
add ebx, 0xfdd81c96
jmp 0x4956f5
push 0xda5a2487
add ebx, edx
add esi, edx
sub edx, esi
dec edi
xchg ebx, edi
sub edx, esi
sub esi, 0xfdecc17c
xor ebx, edx
nop
add ebx, 0xfdf3e429
dec edx
jmp 0x496d10
call ecx
rol ebx, 0x1e
shr ebx, 2
not esi
xchg ebx, edi
sub ebx, esi
add edx, edi
and ebx, edi
xchg edx, edi
and ebx, edx
and esi, ebx
xor ebx, esi
mov edi, 0xfe2de2c8
xor edx, ebx
jmp 0x4951af
mov ecx, 0x73716341
xchg edi, edx
nop
mov ebx, edi
or edi, edx
mov edi, edx
mov edi, 0xfe3f48f0
rol esi, 0xc
sub edx, 0xfe435107
xor esi, edx
and edx, edi
and ebx, edi
jmp 0x4963e3
push 0xdadf72dc
shr esi, 0x17
add esi, edi
and esi, 0xfe7b6e41
bswap ebx
and edx, esi
bswap esi
jmp 0x495ed3
mov ecx, 0x40495727
rol esi, 0x1f
and esi, 0xfecb62d2
and edx, edi
or edx, ebx
add edi, 0xfed157d2
or esi, 0xfed35a90
or ebx, edi
or ebx, edx
xor esi, edx
xchg esi, edx
shl edx, 0x12
mov ebx, esi
mov ebx, 0xff210f59
or esi, 0xff230d90
shr ebx, 4
jmp 0x4968e7
push 0xda9071c8
add esi, 0xff5fc753
xchg edi, ebx
dec edi
sub esi, edi
add edi, ebx
add esi, ebx
inc esi
jmp 0x49696b
call fcn.004975e8
neg edi
shr edx, 7
add edi, 0xffa22564
add edi, esi
jmp 0x496173
push 0xdaa26efd
dec edx
or ebx, esi
sub edx, esi
sub esi, ebx
or edx, 0xffd7e181
shl edi, 0xc
or edx, esi
shl edx, 0x1d
or ebx, 0xffdfff3c
or edi, esi
jmp 0x495c07
push 0xda82fcf4
or edx, ebx
or edi, ebx
bswap ebx
inc edi
xor ebx, edx
mov ebx, esi
mov edi, 0x132ded
jmp 0x496cd3
push 0xda2b2204
neg edi
dec edi
xor ebx, 0x19a9ed
xor esi, edi
or edx, esi
xor ebx, esi
mov ebx, 0x21bc23
not esi
rol edx, 0x1e
xor esi, ebx
not esi
mov edi, ebx
jmp 0x497163
pop ecx
and esi, edi
mov edi, esi
and edi, 0x4187c8
mov edi, edx
sub edx, edi
or ebx, 0x477b5b
and esi, 0x499a3b
not ebx
jmp 0x4962aa
push 0xda29aeb4
sub esi, 0x4e02a6
add esi, edx
xchg edx, edi
add edx, ebx
add edx, ebx
sub ebx, edi
or esi, edi
bswap ebx
jmp 0x497043
pop ecx
xor edx, ebx
xchg ebx, edi
sub edi, 0x6529c6
add ebx, edi
xchg ebx, edi
xor edx, esi
inc ebx
or ebx, esi
and edx, ebx
mov ebx, edi
xchg ebx, edx
jmp 0x495342
push 0xda2c9af0
shl edi, 6
neg edi
or edx, edi
inc edx
inc esi
or esi, edi
not esi
xor ebx, esi
xor edi, 0xce72e0
jmp 0x4969a3
pop ecx
xor edi, edx
or edi, esi
and edi, edx
mov esi, 0x1746bc4
mov ebx, esi
add edx, esi
mov esi, 0x17a4a75
or ebx, edx
rol edi, 0x13
add edi, edx
add edx, ebx
jmp 0x495c7a
mov ecx, 0x73716341
add ebx, edx
shr edx, 0xe
xor edi, 0x20a3dd1
xchg edi, ebx
add esi, edx
add edi, 0x2192005
and ebx, edx
and edx, esi
and edi, edx
xor edi, 0x2240cba
xor edi, esi
add edi, ebx
and edx, ebx
jmp 0x496382
pop ecx
add edx, edi
rol edx, 0x15
and ebx, 0x32d90b3
mov edi, 0x33423a1
xchg edi, ebx
or ebx, edx
mov ebx, edi
or edi, esi
jmp 0x495c67
call fcn.004975e8
sub edi, esi
and esi, edi
not ebx
sub ebx, edi
inc ebx
sub edx, esi
inc edx
jmp 0x494ffe
push esp
xchg edx, esi
dec edx
add esi, edx
sub esi, 0x3831d3c
jmp 0x4963a2
pop ecx
xor edx, 0x3a3bdec
neg esi
or edx, 0x3a8b22f
xchg ebx, edi
xchg edx, esi
or edx, edi
jmp 0x495af7
mov ecx, 0x73716341
or esi, ebx
sub esi, ebx
mov edi, ebx
mov edx, ebx
sub edx, ebx
add ebx, 0x3d837e6
mov edi, esi
jmp 0x496ca9
push 0xda817e54
and edx, edi
xor esi, edi
shl edx, 0x13
add ebx, edx
rol ebx, 0x1f
or edi, esi
jmp 0x497029
call ecx
mov ebx, edi
and esi, 0x4b3dda4
sub edx, 0x4b60bb8
jmp 0x496999
call ecx
xor ebx, esi
or ebx, edx
sub esi, 0x4bc4039
mov ebx, edi
mov ebx, edx
add edi, ebx
sub ebx, 0x4c42821
bswap ebx
or ebx, esi
and esi, edi
jmp 0x496ae3
push 0xdaa87e00
rol edx, 0x1e
sub edx, esi
add ebx, esi
neg edx
dec edx
and edi, 0x4d9364b
jmp 0x49594d
push 0xda4e4185
mov esi, ebx
or edi, esi
or edi, edx
add edi, edx
shl esi, 0x1a
inc ebx
mov edi, 0x4e94a51
ror ebx, 0xc
sub edx, 0x4ed4dad
rol edi, 0x14
or edx, edi
add edx, esi
jmp 0x4956bf
pop ecx
shl edi, 0x19
and ebx, edi
xchg edx, esi
jmp 0x49511c
pop ecx
and esi, edx
shr edi, 0xe
and edx, edi
or esi, edi
add esi, edx
add edx, esi
jmp 0x497094
push 0xda3dd01d
not esi
sub esi, 0x5d66270
xor ebx, edi
xor edi, 0x5da50ec
neg edx
xor esi, 0x5de4b5d
xchg edx, esi
xchg esi, edx
add edi, edx
xchg edi, edx
shl esi, 5
and esi, edi
jmp 0x49777e
push 0xda3f4bcc
and edx, ebx
and ebx, edx
xor ebx, esi
mov esi, edx
mov edx, 0x61198cd
mov esi, ebx
or edx, 0x615a6e7
or edi, edx
add edi, edx
mov edi, 0x61b83b6
add esi, edx
and edx, edi
jmp 0x49665f