Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3
Resume thread

Disassembly:
sub esi, ebx
inc edx
neg ebx
or edi, esi
add esi, edx
call sub.kernel32.dll_GetCommandLineA
xor esi, edi
or edx, esi
cmp eax, 0xfffffeff
jne 0x401082
call sub.ntdll.dll_NtResumeThread
call main
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call main
call sub.user32.dll_RealChildWindowFromPoint
call main
call sub.ntdll.dll_NtResumeThread
call sub.ntdll.dll_NtResumeThread
call sub.ntdll.dll_NtResumeThread
call main
call sub.ntdll.dll_NtResumeThread
call sub.ntdll.dll_NtResumeThread
call sub.ntdll.dll_NtResumeThread
call sub.ntdll.dll_NtResumeThread
call sub.user32.dll_RealChildWindowFromPoint
call sub.ntdll.dll_NtResumeThread
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
ret
add edi, edx
dec edx
dec ebx
add edx, edi
xor edi, ebx
or ebx, edx
mov ebx, 0x4d211384
and esi, edi
call sub.user32.dll_GetKBCodePage
xor ebx, esi
mov edi, esi
cmp eax, 0xfffffef7
jne 0x40113e
call sub.ntdll.dll_NtResumeThread
call main
call main
call main
call sub.advapi32.dll_GetAclInformation
call main
call sub.ntdll.dll_NtResumeThread
call sub.user32.dll_RealChildWindowFromPoint
call main
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.user32.dll_RealChildWindowFromPoint
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_NtResumeThread
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_NtResumeThread
call sub.ntdll.dll_NtResumeThread
call sub.ntdll.dll_NtResumeThread
call sub.user32.dll_RealChildWindowFromPoint
call main
call sub.advapi32.dll_GetAclInformation
call sub.user32.dll_RealChildWindowFromPoint
call sub.user32.dll_RealChildWindowFromPoint
call main
call sub.ntdll.dll_NtResumeThread
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_NtResumeThread
call main
call main
call sub.advapi32.dll_GetAclInformation
ret
or ebx, 0x4d23f7c4
xor edi, esi
add edx, ebx
inc edi
call sub.kernel32.dll_GetCommandLineA
sub esi, edx
cmp eax, 0xfffffee8
jne 0x4011d9
call sub.user32.dll_RealChildWindowFromPoint
call sub.user32.dll_RealChildWindowFromPoint
call sub.advapi32.dll_GetAclInformation
call main
call main
call main
call sub.ntdll.dll_NtResumeThread
call sub.user32.dll_RealChildWindowFromPoint
call sub.user32.dll_RealChildWindowFromPoint
call sub.ntdll.dll_NtResumeThread
call sub.advapi32.dll_GetAclInformation
call main
call main
call sub.ntdll.dll_NtResumeThread
call main
call sub.user32.dll_RealChildWindowFromPoint
call sub.advapi32.dll_GetAclInformation
call main
call sub.ntdll.dll_NtResumeThread
call main
call main
call sub.user32.dll_RealChildWindowFromPoint
call sub.user32.dll_RealChildWindowFromPoint
call sub.ntdll.dll_NtResumeThread
call sub.user32.dll_RealChildWindowFromPoint
ret
xchg esi, edi
sub edx, esi
and edi, ebx
add ebx, edi
xor ebx, edx
xor esi, ebx
mov edx, ebx
call sub.user32.dll_GetKBCodePage
sub edx, ebx
or edi, edx
shl edi, 0x15
add edx, ebx
mov esi, edi
and edi, esi
xor edx, esi
add ebx, 0x4d2a8e3d
cmp eax, 0xfffffeed
jne 0x401262
call main
call sub.user32.dll_RealChildWindowFromPoint
call main
call sub.user32.dll_RealChildWindowFromPoint
call main
call sub.user32.dll_RealChildWindowFromPoint
call sub.user32.dll_RealChildWindowFromPoint
call sub.ntdll.dll_NtResumeThread
call sub.ntdll.dll_NtResumeThread
call sub.user32.dll_RealChildWindowFromPoint
call main
call sub.ntdll.dll_NtResumeThread
call sub.user32.dll_RealChildWindowFromPoint
call main
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
ret
jmp 0x4b7376
xchg edi, esi
or edx, esi
add ebx, esi
jmp 0x4b7cf3
call ecx
shr ebx, 0x15
mov edi, edx
dec esi
xor esi, 0x52d8ccee
sub esi, edi
jmp 0x4b82da
push 0x4db28b0f
and esi, edx
and edx, edi
or edx, ebx
xchg edi, esi
mov esi, edi
shr esi, 0xc
add ebx, edi
shr ebx, 0xb
sub edi, 0x52e1bfff
jmp 0x4b7441
push 0x4db306db
not esi
or edi, ebx
shr ebx, 0xd
inc edi
jmp 0x4ba7d2
push 0x4db3f345
and ebx, edx
xor edx, esi
mov edx, 0x52e71381
and edi, ebx
sub edx, 0x52e78c48
xor ebx, edi
sub esi, ebx
and ebx, 0x52e84707
jmp 0x4b93ff
pop ecx
and ebx, esi
and edx, ebx
not edi
mov edi, 0x52f64ca0
shr esi, 0xa
mov ebx, edx
or edx, edi
rol edx, 5
xchg ebx, edx
and esi, 0x52f7ca11
and edx, esi
xor edi, 0x52f846c9
inc edx
jmp 0x4bb2d0
push 0x4dd1fcc9
or edi, edx
and edi, edx
mov edx, 0x5306d476
nop
neg edx
mov esi, 0x5307929a
not ebx
mov ebx, 0x530810b0
not esi
or ebx, edi
and esi, edx
mov edx, esi
ror ebx, 0xd
mov edi, edx
jmp 0x4b9b4e
push 0x4dd0ff27
or edx, edi
shr edi, 0xc
add edx, 0x5311fec6
sub ebx, edx
add ebx, edx
mov edi, ebx
or edx, edi
and ebx, 0x53133a7c
shl esi, 0x10
bswap edx
jmp 0x4b9c6b
pop ecx
and ebx, edx
and ebx, 0x531448ff
xor ebx, edx
add esi, 0x5314ced0
sub edx, 0x53150fa1
ror edx, 0x17
inc edx
mov ebx, edx
xor esi, 0x53160b0a
jmp 0x4bb227
mov ecx, 0x123b2f04
mov ebx, 0x531a5279
sub edi, esi
jmp 0x4b82b1
push 0x4daf609e
xchg edi, edx
rol edi, 0x1a
mov edx, ebx
mov edi, edx
sub edi, esi
or edx, 0x5328a4e2
shr edx, 0x1d
xor ebx, edi
jmp 0x4b88f2
push 0x4dabb4ce
neg ebx
shr edi, 0x19
neg esi
mov edi, 0x532de9f9
shr ebx, 0x1d
add edx, esi
mov edi, ebx
neg ebx
or edx, esi
not ebx
mov ebx, edi
add esi, edx
xchg edi, edx
mov ebx, edx
xchg esi, ebx
jmp 0x4ba5e1
call ecx
dec edi
and edi, 0x5339fb2c
mov esi, ebx
rol edx, 7
or esi, 0x533abf2c
neg ebx
jmp 0x4b8a1d
pop ecx
sub ebx, 0x533f1a6d
xor edi, esi
sub edi, 0x533fa035
xchg esi, edx
jmp 0x4ba99d
mov ecx, 0x123b2f04
dec edx
bswap ebx
xchg ebx, edx
dec esi
mov edi, 0x53413685
jmp 0x4bb15b
pop ecx
shl edx, 0x1d
sub edx, esi
dec esi
xchg ebx, edx
xchg ebx, edx
xchg esi, edi
jmp 0x4b8537
call fcn.004bb4a7
add edi, edx
mov esi, ebx
and edi, 0x534a19b6
mov ebx, edi
add ebx, edx
and edx, ebx
mov ebx, esi
xchg esi, edx
sub ebx, 0x534cd274
add edi, edx
xor esi, 0x534db3e5
xchg edi, edx
jmp 0x4b84fb
pop ecx
rol esi, 0x14
or edx, 0x535c0779
or esi, 0x535c4e3c
xchg edx, esi
and ebx, esi
mov ebx, edi
or edi, edx
mov edi, esi
jmp 0x4b9007
push 0x4dab8a83
xchg esi, edi
xor edi, edx
add edx, 0x5366b9b0
and edx, edi
and edi, edx
sub ebx, esi
jmp 0x4b7856
call fcn.004bb4a7
shr esi, 0xb
sub ebx, edi
or edi, 0x536e835f
xor edx, 0x536ec01a
and esi, edi
dec edi
and ebx, 0x5370f38b
xor edx, edi
ror ebx, 9
jmp 0x4b9e70
call fcn.004bb4a7
bswap edx
sub ebx, edx
add edx, ebx
dec ebx
xchg edi, esi
and esi, 0x53747959
and esi, ebx
bswap edx
and ebx, edx
jmp 0x4bb11a
push 0x4dc7bf94
xor esi, edi
add edx, edi
and esi, ebx
inc edx
sub edi, esi
rol ebx, 0xa
jmp 0x4ba62c
mov ecx, 0x123b2f04
xor ebx, edx
xchg edx, edi
add ebx, edi
not ebx
sub ebx, 0x537f7a80
xor edi, 0x537fbac7
mov edi, esi
not edi
ror edx, 8
jmp 0x4b9cfc
push 0x4dab247e
mov edi, esi
mov edi, esi
mov edx, edi
and ebx, edx
xchg esi, edi
add esi, edi
shl edi, 3
xor ebx, edi
sub ebx, 0x538e3a92
shl edi, 9
nop
mov edi, 0x538f190c
mov edi, 0x538f8c32
ror esi, 0x12
rol edx, 0x10
jmp 0x4bae8a
push 0x4dcbce6f
dec ebx
shl edx, 0x1d
or esi, 0x53a91bd7
or ebx, edi
mov edi, edx
mov ebx, 0x53a9d38e
shl edx, 5
or ebx, edi
or edi, esi
inc edi
bswap esi
and edi, esi
or esi, 0x53ab90d1
or edx, edi
jmp 0x4b91a3
mov ecx, 0x2774562b
ror ebx, 0x10
not edi
or esi, ebx
mov edx, ebx
dec ebx
add edx, 0x53b9777f
mov ebx, esi
or edi, ebx
and edi, esi
jmp 0x4b8b6b
pop ecx
xchg edi, esi
rol ebx, 0xe
and edx, 0x53bafde4
mov ebx, 0x53bb4231
and esi, ebx
add ebx, edx
and edx, esi
neg edi
add esi, 0x53bc77f5
jmp 0x4bb257
call ecx
sub edx, ebx
inc ebx
not edi
sub edi, ebx
xchg edx, esi
jmp 0x4ba60e
push 0x4dd7486f
and ebx, esi
or esi, 0x53be5a9c
sub ebx, 0x53be9b81
sub ebx, edx
mov edi, esi
xor ebx, esi
add ebx, edi
mov edx, 0x53bfd280
xchg edi, esi
sub edx, 0x53c05139
or edx, ebx
not esi
sub edx, 0x53c10d85
or esi, ebx
jmp 0x4b8894
call fcn.004bb4a7
neg edx
mov ebx, edx
and ebx, edi
xor ebx, edi
add esi, edx
xor edi, 0x53ceef85
sub ebx, edx
or ebx, edi
xor edx, ebx
or edi, esi
jmp 0x4b78fa
pop ecx
add edx, edi
shl esi, 0x1a
rol ebx, 8
sub ebx, 0x53e17015
dec edi
sub esi, edi
or edi, edx
xchg edi, ebx
bswap edx
xor edx, ebx
xchg edi, esi
dec ebx
or esi, edi
mov edi, edx
sub edx, ebx
jmp 0x4b7404
push 0x4dc1ed81
add edx, 0x53e783c4
add edi, 0x53e7c0d0
or esi, edi
xor edi, edx
add ebx, edi
sub edx, edi
inc edi
sub esi, ebx
add esi, 0x53e976fe
nop
jmp 0x4ba327
push 0x4dcc8d28
add edi, 0x53ec9ef6
xchg ebx, edx
add esi, 0x53ed1b0b
xchg ebx, edi
and edx, 0x53ed96d7
add ebx, edx
xor edi, esi
mov ebx, edx
add ebx, 0x53ee932c
sub edi, esi
shl ebx, 0x17
and ebx, edx
jmp 0x4b7c46
push 0x4dcb772a
or edi, 0x53efb83a
xchg edi, ebx
dec esi
mov esi, edx
add esi, edi
inc ebx
or esi, edx
mov esi, 0x53f30ec6
mov ebx, 0x53f3959a
jmp 0x4b7e69
call fcn.004bb4a7
bswap esi
or edi, edx
not edx
and edx, edi
shl esi, 2
add edi, 0x54084918
xor edi, edx
sub ebx, 0x540955ef
add ebx, esi
mov edx, esi
xor edx, ebx
jmp 0x4ba595
pop ecx
or esi, edi
add edx, ebx
or esi, edi
or ebx, esi
dec esi
sub esi, ebx
inc esi
mov esi, edi
or edx, ebx
mov esi, edx
or edx, edi
xor edi, esi
jmp 0x4bb55a
push 0x4dc7020d
inc esi
and ebx, edx
xor ebx, esi
jmp 0x4bb3fe
push 0x4dd0a998
neg edi
xchg edx, ebx
mov ebx, 0x544fa141
inc edi
not esi
or ebx, 0x54514387
jmp 0x4b76d1
call ecx
xor edi, ebx
or ebx, esi
mov edx, ebx
ror esi, 0x12
xor esi, ebx
or edx, ebx
and ebx, edi
sub esi, edi
or esi, edx
add edx, edi
rol edx, 8
or esi, edx
jmp 0x4b7953
pop ecx
xchg edi, edx
sub ebx, edx
mov ebx, edi
shl esi, 0x1f
add ebx, edi
dec ebx
or esi, edx
shr ebx, 0x17
xchg esi, edi
and edx, 0x546e0f75
or ebx, 0x546e776d
and edx, 0x546eeea4
sub esi, 0x546f7947
add edx, ebx
jmp 0x4baa13
pop ecx
mov edx, edi
xor ebx, esi
or ebx, 0x5477f20d
sub edx, esi
xchg esi, edi
or ebx, esi
add edi, ebx
or edx, edi
xchg edi, esi
and edi, esi
sub edi, esi
or esi, ebx
xchg ebx, esi
bswap edi
jmp 0x4baa94
pop ecx
mov edi, ebx
or edi, ebx
bswap edx
or edi, ebx
sub esi, 0x54c26b68
nop
and edx, esi
ror edi, 0xf
shl edi, 0x15
dec esi
or ebx, esi
and esi, edi
xchg esi, edx
or ebx, esi
jmp 0x4ba8b6
pop ecx
add ebx, 0x54e29bf3
sub edi, ebx
shr edx, 0x13
sub edi, ebx
and esi, edi
inc ebx
xchg ebx, edi
neg ebx
inc edi
xor edx, edi
xor edx, ebx
xchg esi, edx
rol ebx, 0xb
xchg ebx, edi
jmp 0x4b8319
mov ecx, 0x2774562b
add esi, edx
xor edx, 0x54f0d51f
inc edx
add ebx, esi
bswap ebx
jmp 0x4babc2
push 0x4dafaa80
or edx, ebx
ror edx, 0x10
or edx, esi
xchg ebx, edx
mov edi, esi
sub esi, edi
xchg ebx, edi
not esi
jmp 0x4ba69c
push 0x4dad6d14
xchg ebx, esi
not esi
not edx
shl esi, 1
jmp 0x4ba508
pop ecx
and ebx, esi
shl esi, 0x1c
and edi, esi
or edi, 0x551f2506
xchg edi, edx
or edi, 0x55203016
sub edx, esi
xor edx, 0x5521340f
shr ebx, 0x15
xor esi, ebx
xchg edi, esi
inc esi
sub esi, edi
jmp 0x4baf95
pop ecx
or esi, edi
sub edx, edi
rol ebx, 0x18
or edx, ebx
or edi, edx
inc esi
and edi, esi
xor edx, esi
or edi, 0x55325d65
jmp 0x4b7f97
pop ecx
or ebx, esi
bswap edi
mov edx, 0x553814e3
or edi, 0x5538a50e
neg esi
or ebx, esi
or esi, ebx
dec esi
shr ebx, 1
or edx, esi
ror ebx, 0x1d
jmp 0x4b939c
mov ecx, 0x123b2f04
or edi, edx
add edi, edx
inc edi
xchg ebx, edx
nop
and edi, esi
sub ebx, esi
add ebx, esi
not ebx
and edi, esi
and ebx, edi
jmp 0x4b8cb9
pop ecx
nop
and edx, ebx
xor esi, ebx
xchg esi, edi
add ebx, edx
add ebx, edx
mov edx, ebx
dec edi
add ebx, esi
mov esi, 0x5561b994
add edi, ebx
dec esi
jmp 0x4b922f
call fcn.004bb4a7
rol esi, 0x1a
and edx, 0x556409c9
mov ebx, esi
sub edx, 0x5564ec0e
and esi, ebx
jmp 0x4ba406
pop ecx
sub edx, esi
and edi, esi
mov esi, ebx
xor esi, edi
and edi, ebx
xchg ebx, edi
shl edi, 6
sub ebx, edi
add edi, edx
or edi, 0x556f7dc2
ror ebx, 9
or edx, edi
jmp 0x4b7f63
call fcn.004bb4a7
add ebx, edi
not esi
xchg edi, esi
or edi, 0x55a89717
neg esi
add esi, edx
add ebx, edi
or ebx, 0x55aa7e95
or edx, edi
jmp 0x4b9690
push esp
rol edx, 0xa
xchg ebx, esi
xor edi, edx
xor edi, 0x55c83a8f
rol edi, 0x10
xor edx, esi
and edi, edx
and edx, edi
rol esi, 0x18
xor edx, ebx
xor ebx, edi
shr edx, 0xb
and edx, esi
jmp 0x4bb4f3
pop ecx
shl edx, 4
and esi, edi
bswap edx
sub edx, esi
and esi, 0x55d72f71
jmp 0x4b797e
call ecx
or esi, edx
rol esi, 1
shl esi, 0x19
bswap edx
xchg edx, ebx
xor esi, edx
bswap ebx
inc edx
sub edx, esi
add esi, ebx
xchg edi, esi
sub edi, 0x55e3d47d
or ebx, 0x55e41594
sub edx, 0x55e4529a
jmp 0x4b89b3
pop ecx
mov esi, edi
dec ebx
add edi, esi
dec edx
jmp 0x4b997f
mov ecx, 0x123b2f04
add esi, edi
or edx, esi
dec edx
xchg ebx, edx
and edx, ebx
xchg edi, edx
inc esi
mov ebx, 0x560675b5
or esi, ebx
mov ebx, edx
xor esi, 0x5607b58d
jmp 0x4b7b80
push 0x4dcc3009
xchg ebx, edx
and edx, esi
or edx, ebx
mov edx, 0x5625f519
bswap esi
rol ebx, 6
add esi, ebx
dec edi
nop
jmp 0x4b8209
pop ecx
sub esi, ebx
add esi, ebx
jmp 0x4b97e2
pop ecx
and ebx, edi
add ebx, edi
ror ebx, 0x13
add edi, ebx
and edx, esi
xchg ebx, esi
neg esi
xor edi, 0x56690ff2
ror esi, 0xe
or edx, 0x566a0e3f
ror ebx, 0x1b
xchg ebx, esi
bswap edx
sub ebx, edi
jmp 0x4b858e
push 0x4dc13e24
or edx, edi
and edi, 0x5675c29e
neg esi
rol esi, 0x1a
xor edx, ebx
xor ebx, 0x5677cb36
and esi, ebx
xor esi, ebx
jmp 0x4bab49
push 0x4db44969
or ebx, esi
sub edi, edx
or edx, edi
or edx, edi
dec edx
sub ebx, esi
xor esi, edx
add esi, edx
or edi, 0x568605ef
xor edx, ebx
add ebx, edi
xor edx, esi
sub esi, ebx
jmp 0x4b7969
push 0x4dd52233
ror edx, 9
sub edx, ebx
or ebx, esi
rol edx, 3
bswap ebx
xchg ebx, edi
xor esi, edx
not edi
xor edx, ebx
add edx, ebx
sub esi, ebx
jmp 0x4b9a22
push 0x4ddada61
xchg ebx, esi
add esi, edi
xchg edx, edi
xor ebx, esi
mov edx, 0x56a8adde
sub edi, esi
shl esi, 0x1d
and edx, ebx
or esi, edi
jmp 0x4baf41
pop ecx
and edx, edi
inc ebx
mov edx, edi
xor edi, esi
shl esi, 9
xor esi, ebx
mov ebx, edi
jmp 0x4ba940
call ecx
inc edi
sub edi, edx
mov edx, esi
add edi, 0x56e3819c
not edx
add ebx, edx
and esi, ebx
xor edi, ebx
and ebx, edx
mov esi, edx
bswap edx
sub edx, esi
mov edi, 0x56e79fcf
jmp 0x4bb210
mov ecx, 0x2774562b
shr ebx, 0xc
sub esi, edi
or edi, edx
neg esi
xchg ebx, edi
add ebx, edx
or edi, ebx
or edx, edi
or edi, esi
or ebx, 0x57041a37
xchg ebx, edi
jmp 0x4ba838
pop ecx
add ebx, 0x5710166f
xchg edi, edx
bswap esi
and esi, ebx
add esi, 0x5711edb3
xor ebx, edx
add edx, esi
nop
or esi, edi
xor edx, 0x57142879
xchg edi, edx
xor ebx, edx
add edi, esi
jmp 0x4b9426
push 0x4dc4b282
neg edx
xchg esi, edi
add esi, 0x571d8d27
xor ebx, 0x571dfe03
and ebx, 0x571e7352
add edi, ebx
or edi, edx
xchg edi, ebx
mov edi, edx
and ebx, esi
xor esi, ebx
rol edx, 4
jmp 0x4b8b2f
pop ecx
rol ebx, 0x1c
add esi, edi
xor ebx, edi
not esi
xor esi, ebx
add edx, 0x5747dec8
jmp 0x4b8483
mov ecx, 0x2774562b
sub edi, 0x575ca0fb
mov ebx, esi
xor edx, esi
sub ebx, 0x575de6af
xor edi, ebx
nop
xchg edx, ebx
and esi, 0x575fb4e5
add edx, ebx
mov ebx, esi
or esi, edi
sub esi, edx
and edi, 0x5761f018
neg esi
or ebx, 0x5762de13
add edx, edi
jmp 0x4b8072
mov ecx, 0x2774562b
and edx, edi
not edi
mov esi, 0x57817ce5
xchg ebx, edi
xchg edx, edi
jmp 0x4baeb2
push 0x4dd155f4
xor esi, 0x57a461de
xchg esi, edi
and edx, esi
and ebx, edi
jmp 0x4ba65d
call fcn.004bb4a7
xchg edi, ebx
mov edx, edi
xchg ebx, edi
add ebx, edx
mov edi, esi
and ebx, edx
or edx, 0x57ba53d8
jmp 0x4b7398
pop ecx
sub edi, 0x57bae4b9
sub edx, edi
mov edi, ebx
dec ebx
or esi, edx
shr ebx, 9
ror edi, 0x18
add edx, edi
mov esi, edx
neg esi
nop
xor ebx, 0x57bfe073
jmp 0x4b94e5
pop ecx
xchg esi, edx
xor ebx, esi
add ebx, edx
and esi, edi
xchg ebx, edx
xor edx, 0x57e3f905
dec esi
and edi, 0x57e4f17b
xor edi, edx
shr edx, 0x1c
sub edx, 0x57e63b82
neg esi
mov ebx, 0x57e71400
sub edx, esi
jmp 0x4ba6d4
call ecx
and edi, 0x57ee0903
shl edx, 0x1e
mov edi, ebx
mov edi, esi
sub ebx, esi
mov esi, edi
add esi, ebx
add edi, ebx
jmp 0x4b9d18
pop ecx
sub edi, 0x58906686
xor esi, edx
add edi, 0x5891466f
xchg esi, edx
add esi, edi
mov ebx, edi
jmp 0x4b77fe
mov ecx, 0x2774562b
sub edi, edx
neg ebx
mov edx, 0x58942bb2
xchg esi, ebx
and esi, edx
mov esi, 0x5895943e
sub edi, edx
sub edx, 0x58967f95
neg ebx
jmp 0x4b7ba9
call ecx
xchg edx, edi
add ebx, esi
and edx, 0x58987de9
add edi, 0x5898ec0a
jmp 0x4bb47c
call ecx
add edx, esi
or edx, 0x58ade846
and ebx, edx
ror ebx, 0x12
xor edi, esi
rol edi, 0x17
add edx, esi
or edi, ebx
jmp 0x4b8ba4
push 0x4dad99bd
add edi, ebx
xor ebx, edi
sub edx, 0x58d09799
sub edi, ebx
xor edx, 0x58d17cb7
xchg edx, ebx
sub ebx, edi
jmp 0x4bb136
pop ecx
xchg ebx, esi
xor ebx, esi
add esi, edx
not ebx
not edx
and edx, ebx
xchg ebx, edi
rol esi, 5
and ebx, esi
and ebx, edi
bswap edx
inc esi
xor esi, ebx
jmp 0x4b95f5
call ecx
sub edi, edx
or edi, ebx
or esi, edi
xor edx, 0x58e33d7b
sub ebx, 0x58e3b3e6
add esi, edi
bswap ebx
or esi, ebx
jmp 0x4b9e13
push 0x4dabdf56
xchg ebx, esi
sub edi, esi
bswap edx
sub ebx, edx
sub esi, edx
rol edi, 2
rol edx, 0x17
not edi
neg edx
neg ebx
mov edi, ebx
rol edx, 0xa
or ebx, 0x58f25db1
not edx
jmp 0x4b9776
pop ecx
shl ebx, 0x17
sub esi, edi
and edx, edi
sub esi, edx
dec edx
mov esi, ebx
sub edi, 0x58f61785
xor edi, edx
mov edx, ebx
mov ebx, esi
jmp 0x4b933a
push 0x4dc81c71
rol ebx, 0x17
and edx, esi
xchg esi, ebx
rol esi, 0x1f
sub esi, ebx
not edx
sub edx, 0x58faf61a
ror edi, 8
or esi, edi
mov ebx, edx
or edi, esi
or edi, edx
sub edx, esi
mov esi, edx
mov edx, edi
and edi, edx
jmp 0x4bb291
push 0x4dd1ad7f
sub edi, 0x58ffaa8a
not esi
shl esi, 8
or ebx, esi
and edi, esi
not esi
and edx, ebx
xchg ebx, edi
xor ebx, edx
bswap edx
sub ebx, 0x59043e58
jmp 0x4b763a
push 0x4daffe37
bswap edi
and ebx, esi
ror ebx, 0x16
sub esi, 0x590888eb
xor edi, 0x5908f991
add esi, edi
xchg ebx, edi
neg esi
xor esi, ebx
xor ebx, 0x590baf3c
xor edi, esi
or edi, esi
rol edx, 7
sub edi, 0x590d83d9
jmp 0x4b7742
pop ecx
rol edx, 0x18
or edx, 0x590e9ed7
mov edi, ebx
sub edx, 0x590f7c47
add esi, 0x590ff106
mov ebx, edx
dec esi
add esi, edx
jmp 0x4b816f
mov ecx, 0x2774562b
nop
add edi, edx
rol edx, 0xb
or edi, 0x5914d8cc
and edi, esi
or edx, ebx
shr edi, 3
bswap edx
rol ebx, 0xf
dec edi
xchg esi, ebx
add ebx, edx
jmp 0x4b79c4
push 0x4dcb19c5
and edx, 0x59193609
or ebx, 0x5919a912
add edi, 0x591a1a37
mov ebx, esi
xor esi, ebx
xchg edx, edi
mov ebx, edx
and edx, ebx
not edx
and edi, ebx
jmp 0x4b823c
push 0x4db387fc
add edi, edx
and edi, edx
add edx, ebx
shr edi, 0x18
not ebx
xor edi, 0x5930d709
mov edi, edx
not esi
jmp 0x4b7453
call fcn.004bb4a7
add edi, esi
dec edi
shl esi, 2
sub edi, edx
and esi, ebx
xor edx, ebx
sub esi, 0x593e4361
xchg edi, ebx
ror ebx, 0xf
or esi, edx
neg edx
rol edi, 0xc
sub edi, esi
or edi, edx
ror ebx, 9
jmp 0x4ba924
pop ecx
or edi, 0x594c64c5
shl ebx, 0xc
neg edx
or esi, edx
add esi, 0x594e3e7f
or edx, edi
dec edi
xor edx, esi
jmp 0x4b8b4d
call ecx
or edx, 0x595c84eb
dec edx
xchg ebx, edx
mov esi, edi
xor ebx, edx
add edi, edx
xchg ebx, edi
neg edi
and esi, ebx
jmp 0x4b7535
pop ecx
mov edi, 0x5960b28f
ror ebx, 0xd
shl edx, 0x1b
add ebx, edx
sub edx, esi
or esi, 0x5962f861
sub ebx, edi
xchg edx, esi
mov esi, ebx
add edx, 0x5964c4af
add ebx, edi
xchg edx, esi
and ebx, 0x5966227d
sub ebx, 0x5966982a
add ebx, edx
jmp 0x4b8922
pop ecx
xor edi, esi
add edx, 0x596cc280
xor ebx, edx
xor edx, edi
and ebx, 0x596e199d
mov edx, esi
and edx, edi
xchg edi, edx
or edi, edx
dec esi
rol esi, 0x1a
add edx, esi
shr esi, 9
jmp 0x4ba30d
push 0x4dc459e7
and ebx, edi
or esi, 0x597df511
and esi, edi
rol ebx, 2
xor edi, esi
shl edx, 5
dec esi
rol ebx, 0x10
jmp 0x4b9848
pop ecx
shl edx, 0x1d
add edx, 0x598f2ef6
sub esi, ebx
xor edx, esi
shl edx, 0x16
or edx, 0x5990ef44
or edx, edi
or edx, edi
xchg ebx, esi
jmp 0x4ba72d
call fcn.004bb4a7
mov ebx, edi
rol esi, 2
xchg edx, ebx
mov edi, edx
mov edx, 0x5996e4ea
xchg edi, ebx
or ebx, esi
jmp 0x4b7f87
call fcn.004bb4a7
add edx, edi
sub esi, ebx
shl esi, 7
not ebx
bswap esi
or esi, edi
and ebx, 0x59a0e231
xor edi, ebx
jmp 0x4b8d90
push 0x4dc19d78
sub ebx, edi
sub esi, edx
neg edi
inc ebx
rol edi, 0x13
dec ebx
neg ebx
shr esi, 0x18
shl esi, 0x1d
xchg ebx, edi
or edx, ebx
mov edi, edx
add edx, edi
xchg esi, ebx
jmp 0x4b81be
pop ecx
or esi, edx
not edi
or ebx, esi
inc esi
ror ebx, 5
xchg edi, ebx
or esi, ebx
sub esi, edx
sub edx, edi
or edx, ebx
xor esi, edx
and esi, ebx
mov esi, 0x59b93129
rol ebx, 0x17
jmp 0x4b8a58
call fcn.004bb4a7
inc edi
and ebx, 0x59bae584
or edi, ebx
add edi, edx
add ebx, esi
and esi, edi
xor esi, ebx
add ebx, esi
jmp 0x4b8e8c
push 0x4dab6182
sub ebx, edx
xor edi, 0x5a186262
or ebx, esi
or ebx, edx
sub edi, edx
xchg esi, edi
xor ebx, edx
xor edx, edi
sub edi, 0x5a1b737b
not edx
sub edi, ebx
jmp 0x4b7b0c
call fcn.004bb4a7
or edi, 0x5a1ce098
shr edx, 0xc
sub edi, edx
nop
dec edx
or ebx, esi
add edi, esi
add ebx, esi
add esi, ebx
mov ebx, esi
jmp 0x4bb332
push 0x4ddb401e
xchg esi, ebx
add esi, 0x5a30f61f
mov edx, 0x5a3171b1
or ebx, edi
xor esi, edx
sub edx, ebx
dec esi
and edx, 0x5a33d2ae
xor ebx, esi
xor ebx, edx
and esi, edx
xchg edx, edi
sub ebx, edi
or ebx, edx
sub edi, ebx
jmp 0x4b7f43
push 0x4dd91a65
not edx
sub ebx, esi
nop
nop
or esi, ebx
add edx, edi
not edx
shl esi, 3
jmp 0x4b9035
call ecx
mov edi, esi
sub edx, ebx
and esi, 0x5a6cf35b
bswap edx
ror edi, 0x1e
xor ebx, edi
xor edx, ebx
sub edi, ebx
jmp 0x4b8e08
push 0x4dadc30b
inc ebx
and ebx, edx
sub esi, 0x5a70b0c6
or ebx, 0x5a7129b3
xor edx, esi
xor edx, esi
shl ebx, 0x18
sub edx, ebx
rol edx, 0xf
jmp 0x4ba706
call fcn.004bb4a7
add esi, 0x5a742e05
sub edx, ebx
and esi, ebx
neg esi
inc edi
or edx, 0x5a768880
jmp 0x4ba34d
pop ecx
add edi, ebx
xor edi, ebx
ror edx, 0xc
and ebx, esi
shr edx, 3
or edi, ebx
rol esi, 5
jmp 0x4b883b
pop ecx
or esi, edx
shl edi, 0x1e
not ebx
or edi, edx
and esi, 0x5a9bac15
ror esi, 0xd
mov edx, 0x5a9c9abb
or edi, ebx
mov edi, ebx
xor edx, ebx
or edi, 0x5a9e82bf
add ebx, edx
xchg esi, edx
shl ebx, 3
jmp 0x4bab9c
mov ecx, 0x4132136a
or edi, edx
sub esi, 0x5aa0dae6
and ebx, edi
or edi, 0x5aa6b6c7
add esi, edi
xchg ebx, edx
jmp 0x4bab07
mov ecx, 0x2774562b
neg ebx
shr edi, 8
add edi, ebx
or edi, 0x5aadb892
sub ebx, esi
sub esi, 0x5aaeb674
jmp 0x4baac5
pop ecx
ror edi, 4
mov edx, 0x5ab41d1c
and edi, esi
xor edi, edx
ror ebx, 8
mov ebx, edi
add ebx, 0x5ab6537d
not edi
nop
sub ebx, edx
add edx, edi
and esi, ebx
xor edx, edi
not edx
jmp 0x4ba53a
call ecx
or esi, ebx
xchg ebx, edi
mov edx, 0x5ac23935
add ebx, esi
shr esi, 0x10
and edi, esi
xor edx, esi
mov esi, edi
mov edx, ebx
ror edi, 0x11
mov ebx, 0x5ac5cf47
or esi, 0x5ac64766
jmp 0x4b8752
push 0x4dc76332
add edi, ebx
ror ebx, 0x1a
neg ebx
and edx, esi
xor esi, edi
mov ebx, edi
mov edx, ebx
add edi, edx
mov edx, ebx
bswap edx
jmp 0x4b7c12
pop ecx
xor edx, ebx
mov ebx, 0x5aeddc15
jmp 0x4b76f9
push esp
and ebx, edi
or edx, edi
sub ebx, 0x5afbafb0
xor esi, edi
xchg esi, edx
sub ebx, 0x5afcf981
shr edi, 0x1e
mov esi, ebx
add esi, edi
sub edx, esi
inc edx
jmp fcn.004b7dc0
pop ecx
add esi, edi
xor ebx, esi
xor ebx, edx
and edx, 0x5b0a9a50
and edi, edx
xor edx, 0x5b0b9cee
xchg edi, ebx
or ebx, edx
dec esi
inc esi
sub edx, esi
jmp 0x4b7a89