Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get system information on windows
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xfffffeec
jne 0x40107f
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
ret
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xfffffefe
jne 0x4010e0
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
ret
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xffffff2c
jne 0x401187
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
ret
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xffffff12
jne 0x401224
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_AllocateUserPhysicalPages
call sub.kernel32.dll_GetSystemInfo
call sub.kernel32.dll_GetSystemInfo
ret
jmp 0x4da615
not ecx
or esi, edx
xor edx, ecx
xor edx, ecx
add esi, edx
jmp 0x4db07b
pop edx
and ebx, edi
mov edi, ebx
jmp 0x4dbfbe
pop edx
and ebx, edi
shl edi, 6
jmp 0x4db22e
call edx
not ebx
or ebx, edi
jmp 0x4dbb6a
push 0xbb2ba684
or esi, edi
xchg ebx, ecx
add ebx, 0xbc241486
shr edi, 0x17
xor ebx, edi
mov edi, esi
jmp 0x4dcd02
pop edx
and esi, edi
add esi, 0xbc269e18
xchg esi, ecx
bswap ecx
add esi, ebx
or esi, ecx
jmp 0x4db250
pop edx
xchg ecx, ebx
and esi, 0xbc29871a
sub ecx, edi
bswap edi
and ebx, esi
mov esi, ebx
jmp 0x4db411
call fcn.004db938
or esi, edi
xchg ebx, ecx
add ebx, 0xbc2dbec2
sub ebx, 0xbc2de672
mov ecx, 0xbc2e0fde
mov edi, esi
jmp 0x4db534
push 0xbb2d8690
bswap ebx
neg ebx
add ebx, esi
or esi, 0xbc2eec2e
sub edi, ebx
inc edi
xor ecx, esi
or esi, 0xbc2f8dce
jmp 0x4dadf6
call edx
sub ecx, edi
and ecx, edi
mov edi, ecx
xchg ecx, ebx
mov edi, ecx
xor ecx, ebx
sub esi, ebx
xchg esi, ebx
xor edi, ecx
neg ebx
jmp 0x4dcde2
push 0xbb32c54e
mov ebx, edi
or ecx, esi
and esi, 0xbc32b0d4
neg edi
rol esi, 7
or ebx, edi
shl edi, 0xd
or esi, edi
jmp 0x4db3a6
call edx
xor ecx, edi
add ecx, ebx
sub ebx, esi
mov ecx, 0xbc354ac2
or ecx, 0xbc357272
xchg ecx, edi
neg esi
or ecx, esi
jmp 0x4db347
pop edx
mov esi, ecx
dec esi
inc esi
xchg esi, ebx
and edi, 0xbc36cdd8
sub esi, ebx
jmp 0x4db5ad
push 0xbb2b7e50
or ecx, ebx
or esi, ebx
add ebx, esi
bswap edi
xor ebx, esi
and ebx, edi
and ecx, 0xbc3dab18
ror esi, 0x1d
jmp 0x4da6b2
push 0xbb29c844
xor edi, 0xbc42937e
xor ecx, esi
add ebx, 0xbc42e3d6
or esi, ecx
jmp 0x4dc4f9
pop edx
and ecx, edi
shl edi, 0xe
and ebx, 0xbc4454d0
ror esi, 0x1e
nop
add edi, ebx
jmp 0x4dc37e
push 0xbb2ce67e
ror edi, 1
mov ebx, ecx
and esi, ebx
add esi, ebx
sub ecx, esi
or esi, 0xbc486558
not ebx
shr ecx, 0xb
shr ecx, 0xc
mov esi, edi
dec ebx
xchg ebx, ecx
jmp 0x4dad8d
mov edx, 0x73716341
add esi, 0xbc51451c
and edi, ecx
or ebx, esi
xor ebx, edi
mov esi, 0xbc51e6ba
add edi, esi
xor esi, 0xbc523442
add edi, ebx
and esi, ebx
mov ebx, esi
jmp 0x4dcab4
pop edx
mov edi, 0xbc5690e2
sub edi, ecx
rol edi, 1
sub esi, edi
bswap edi
add esi, edi
jmp 0x4dc35d
pop edx
or ecx, edi
mov edi, esi
add ecx, 0xbc57e3ba
add ebx, edi
xor esi, ecx
add ecx, edi
jmp 0x4dcc84
pop edx
add ebx, 0xbc609944
shl ebx, 0x1f
jmp 0x4dcf8c
call edx
or ebx, edi
shr ecx, 0x1a
jmp 0x4db4ad
mov edx, 0x73716341
add ebx, ecx
inc ebx
or edi, ebx
sub ebx, 0xbc6b4df2
jmp 0x4db123
push 0xbb371340
or ecx, esi
mov ebx, edi
add edi, ebx
mov ebx, edi
jmp 0x4db876
push 0xbb2d0e76
mov esi, edi
and edi, ecx
and esi, ebx
or esi, edi
rol ebx, 0x1c
shr edi, 9
xor edi, esi
mov ebx, 0xbc6fa186
ror esi, 0x1e
or esi, ecx
mov ebx, edi
add edi, 0xbc703d34
jmp 0x4dc1bc
push 0xbb2a1702
xor edi, ecx
and ebx, 0xbc71eb36
xchg edi, ecx
not ecx
shr ebx, 0x1a
add ebx, 0xbc729504
jmp 0x4dc307
mov edx, 0x73716341
xor edi, ecx
not edi
mov ecx, ebx
and ebx, 0xbc73469c
rol edi, 0x1a
xchg ecx, edi
sub ecx, ebx
mov ecx, ebx
mov esi, ebx
and esi, edi
jmp 0x4dbb8e
pop edx
inc ecx
mov edi, esi
add edi, ebx
add ebx, 0xbc79e6dc
mov ebx, 0xbc7a0eb8
add ebx, ecx
jmp 0x4dac3a
pop edx
add ebx, 0xbc85ed14
bswap esi
xor esi, ecx
not edi
add ebx, ecx
sub ebx, ecx
jmp 0x4dce2f
mov edx, 0x73716341
mov esi, edi
xor ebx, esi
xor esi, edi
sub ecx, esi
shr ebx, 0x12
shr ebx, 8
and ecx, 0xbc8d89ba
and esi, 0xbc8db2ea
jmp 0x4dcb49
push 0xbb258b0c
mov ecx, 0xbc914b90
dec esi
mov esi, ecx
xor esi, edi
sub edi, ecx
bswap edi
ror ecx, 0xd
mov ebx, esi
jmp 0x4db016
pop edx
sub edi, ecx
shl edi, 0x14
and ebx, 0xbc940480
sub esi, 0xbc942dbe
mov esi, edi
mov esi, 0xbc947aa0
jmp 0x4db297
call fcn.004db938
sub ecx, edi
xor ecx, ebx
xor ebx, 0xbc996356
sub ecx, esi
jmp 0x4dbb0d
push 0xbb2f9294
xchg esi, edi
dec ebx
mov ecx, edi
mov esi, edi
dec ebx
inc ebx
and ecx, ebx
sub edi, 0xbc9ae630
and ecx, 0xbc9b0f1a
neg ecx
add ecx, 0xbc9b621e
rol esi, 0x12
sub esi, ecx
or ecx, ebx
jmp 0x4db47e
pop edx
not ebx
mov edi, ebx
mov edi, 0xbca7e12c
rol ebx, 0xb
or edi, ecx
sub edi, esi
xor esi, ebx
not ecx
mov edi, ecx
and edi, 0xbca99988
jmp 0x4db3d9
pop edx
or ecx, 0xbca9d5be
mov ecx, edi
and esi, ecx
xor ebx, 0xbcaa4804
xor ebx, 0xbcaa72ec
or ebx, esi
jmp 0x4db4e1
pop edx
add edi, 0xbcad31b2
sub ebx, edi
and ebx, ecx
xor esi, ebx
not ebx
shr ecx, 0xa
not edi
add ebx, ecx
jmp 0x4db2b2
pop edx
mov edi, esi
or esi, 0xbcaeb27a
not edi
or ecx, esi
jmp 0x4dab48
push 0xbb3be60a
add ecx, esi
neg ebx
xor ecx, 0xbcb0295c
xchg ecx, esi
and esi, ecx
ror ebx, 0x1d
bswap esi
or ebx, esi
and ebx, 0xbcb121ee
inc esi
and ecx, edi
add ecx, edi
xor esi, edi
and esi, edi
jmp 0x4db771
pop edx
add edi, 0xbcb605b8
xchg ebx, ecx
dec edi
shr ebx, 0x1f
jmp 0x4dab5e
pop edx
not ecx
mov edi, ebx
xchg edi, ecx
add ecx, 0xbcb736a6
sub ebx, ecx
and edi, 0xbcb78b76
jmp 0x4dbf2a
push 0xbb32eec4
mov edi, ecx
ror ecx, 2
xor esi, edi
neg ebx
sub esi, ecx
mov ecx, esi
jmp 0x4dbceb
mov edx, 0x4132136a
add esi, edi
mov ebx, esi
add esi, 0xbcbc521c
mov esi, edi
rol edi, 7
add edi, 0xbcbd6974
jmp 0x4dc407
pop edx
sub ebx, ecx
sub ecx, ebx
jmp 0x4da68f
mov edx, 0x73716341
sub esi, ebx
mov ecx, ebx
and ebx, 0xbcc4c5e4
xchg esi, ecx
rol ebx, 0x10
sub esi, ebx
xchg esi, ebx
xchg ecx, esi
jmp 0x4dc192
pop edx
inc edi
mov ecx, esi
xor esi, ecx
not edi
sub esi, ebx
xor ecx, 0xbcc74ff8
jmp 0x4da9a8
push 0xbb34ae8c
xor esi, 0xbcc8ddc2
xor ecx, esi
sub esi, ecx
and esi, ecx
shr ecx, 0x1b
ror ebx, 0x1c
sub ebx, edi
mov ebx, edi
ror edi, 0xe
mov ebx, ecx
jmp 0x4dc075
pop edx
and edi, ebx
add edi, esi
mov ecx, esi
and ecx, 0xbccaef00
sub ecx, esi
or ebx, 0xbccb3fce
jmp 0x4da645
call edx
or ebx, ecx
xor edi, esi
add edi, 0xbcd1289e
xchg esi, ebx
jmp 0x4db359
mov edx, 0x73716341
shr esi, 0xa
or esi, edi
rol ecx, 2
neg edi
mov esi, ecx
and ebx, edi
mov esi, ecx
mov esi, ecx
and ebx, edi
mov ebx, 0xbd5bee24
jmp 0x4dcfb5
push 0xbb3a9a14
sub edi, ebx
shl esi, 0x1c
sub ecx, 0xbd5c8276
xor ebx, ecx
jmp 0x4dcfd6
pop edx
and ecx, edi
sub ecx, edi
or edi, ebx
not ecx
add edi, ebx
xor ebx, edi
bswap ebx
ror ecx, 5
jmp 0x4db9a8
push 0xbb3c0f38
xchg edi, esi
sub ecx, esi
xchg edi, esi
and ecx, 0xbd727642
xor ecx, 0xbd729fac
mov ecx, esi
xor esi, ebx
and esi, ebx
jmp 0x4dad2f
push 0x401400
sub edi, ecx
neg ebx
add ebx, esi
inc ebx
jmp 0x4dc171
pop edx
mov ecx, 0xbd787e40
or ecx, 0xbd78a62c
or ecx, edi
ror edi, 0x17
ror edi, 9
or edi, esi
xchg esi, ecx
inc esi
mov ecx, esi
sub ecx, ebx
xchg edi, esi
mov esi, 0xbd7a3558
jmp 0x4da6ed
push 0xbb34ff6c
and esi, 0xbd7a70ea
or ecx, 0xbd7a989c
shl ecx, 0x15
sub ecx, ebx
or ecx, 0xbd7b0f8e
and ebx, 0xbd7b3786
and ecx, edi
add ebx, 0xbd7b8a9a
jmp 0x4dc8f9
push 0xbb369832
dec ebx
and edi, 0xbd7bf5e8
xor ecx, esi
xchg esi, edi
dec edi
sub ecx, esi
xchg ebx, edi
and esi, ecx
jmp 0x4dca76
mov edx, 0x73716341
shl edi, 5
and ebx, esi
or edi, 0xbd7e08fa
add edi, esi
add esi, 0xbd7e5504
ror esi, 0xe
inc edi
sub ebx, ecx
mov esi, edi
nop
mov edi, esi
mov ebx, edi
jmp 0x4db8b3
call fcn.004db938
mov ecx, 0xbd814748
and ecx, edi
mov edi, ecx
sub esi, ecx
and esi, ecx
dec esi
shl ecx, 1
or esi, ebx
add ebx, esi
xchg ebx, edi
jmp 0x4dccf0
push 0x40
add ecx, 0xbd88dde6
add ecx, ebx
inc esi
add edi, ecx
xchg esi, ebx
and edi, 0xbd89a66e
or esi, 0xbd89cf9e
mov esi, ebx
jmp 0x4dc916
push esp
sub edi, 0xbd8a2f6c
xor ebx, 0xbd8a581a
and esi, 0xbd8a8190
or edi, ecx
xchg ebx, ecx
and esi, edi
sub esi, edi
xor edi, 0xbd8b491c
jmp 0x4dc848
pop edx
add ecx, edi
dec ebx
not edi
add ebx, ecx
rol ebx, 0x14
shl edi, 6
or ecx, edi
neg edi
xor edi, ebx
or esi, edi
rol ecx, 8
or edi, esi
xchg esi, ecx
xchg edi, ebx
jmp 0x4dbcb8
push 0xbb2f6ac8
or edi, ecx
and esi, edi
bswap esi
xchg ebx, esi
and ebx, esi
neg ebx
rol ebx, 0xb
sub ebx, esi
xchg ebx, esi
sub esi, 0xbd8fc776
jmp 0x4db139
pop edx
or ecx, edi
xor edi, ecx
and esi, 0xbd940bde
inc ebx
or edi, ebx
mov ecx, esi
jmp 0x4dbd8b
call edx
mov ebx, ecx
shr esi, 3
add esi, edi
xor ebx, esi
xor ebx, esi
or esi, 0xbd9e0dde
jmp 0x4dc149
pop edx
dec esi
inc esi
xchg esi, ebx
add esi, edi
xor ebx, 0xbda1952c
or ebx, edi
and edi, 0xbda1eaf0
xchg ecx, esi
rol esi, 0x13
sub ebx, ecx
inc edi
sub ebx, ecx
jmp 0x4db637
call fcn.004db938
and edi, 0xbda2ebec
not ecx
xor edi, ebx
rol edi, 0x19
or ecx, esi
rol ebx, 0xe
neg esi
add edi, ecx
or edi, esi
and esi, edi
add esi, edi
and ecx, edi
jmp 0x4dcaf3
push 0xbb2ef1de
sub ecx, edi
or edi, 0xbdad6324
xor edi, ebx
xor edi, ebx
and edi, ecx
xchg esi, ecx
bswap esi
xor ecx, ebx
sub esi, edi
or ecx, edi
sub esi, ecx
xchg esi, ebx
xor edi, 0xbdaf174a
inc ebx
jmp 0x4dce0d
pop edx
and ecx, ebx
mov esi, edi
and ecx, ebx
shr ebx, 0x18
add esi, ebx
xchg ebx, esi
jmp 0x4dcd2a
push 0xbb331674
xor ebx, edi
bswap ebx
add ecx, edi
sub ecx, ebx
shr ecx, 0x1b
ror ecx, 7
shr ebx, 0xe
sub esi, 0xbdb5d14a
sub esi, ebx
and esi, ebx
jmp 0x4dc798
push 0xbb26c85a
mov ebx, esi
xchg edi, esi
rol edi, 0x11
inc esi
shr edi, 0xb
add edi, ebx
add ebx, 0xbdb8f40a
or esi, ecx
xchg ecx, ebx
or ebx, ecx
inc ecx
and ecx, edi
neg edi
mov ecx, edi
jmp 0x4dc271
push 0xbb265254
mov ecx, ebx
xor esi, edi
and ebx, 0xbdbccae6
add esi, ebx
jmp 0x4dc525
call fcn.004db938
sub ebx, ecx
sub esi, 0xbdbd585e
mov edi, 0xbdbd8000
or edi, 0xbdbda9b0
xchg esi, edi
ror esi, 0x12
dec ecx
sub esi, 0xbdbe4dfc
jmp 0x4da83a
mov edx, 0x73716341
xor ebx, 0xbdbe89a2
add ebx, 0xbdbeb766
and ebx, esi
add edi, ecx
xchg esi, ebx
add esi, edi
jmp 0x4dbda1
pop edx
shr ecx, 0x1e
mov esi, 0xbdcbdff2
add edi, esi
ror edi, 0x1e
mov edi, esi
add ecx, 0xbdcc7a0a
and edi, ebx
sub ebx, ecx
neg ebx
or edi, 0xbdcd1e1a
sub edi, ecx
xchg edi, ecx
jmp 0x4da974
pop edx
shr esi, 0x14
or edi, esi
jmp 0x4dc22c
push 0xbb36ea66
bswap edi
shr ecx, 0xe
ror ebx, 0x1f
ror ebx, 0x11
sub ecx, 0xbdd3c2e6
shl edi, 0x13
and ebx, edi
and esi, 0xbdd43804
jmp 0x4dad7b
call edx
and ecx, ebx
mov ecx, 0xbdd49768
or edi, esi
xchg esi, edi
not ebx
ror ebx, 0x1b
jmp 0x4daf93
pop edx
mov edi, ecx
add esi, edi
ror edi, 0xb
xchg esi, edi
ror esi, 0x13
and ebx, edi
jmp 0x4dcf58
push 0xbb34d63c
add edi, ecx
and esi, ecx
mov ebx, edi
sub edi, ecx
shl ecx, 0x1b
or esi, ebx
or edi, 0xbde13512
sub edi, ecx
add edi, esi
add esi, 0xbde1aae4
nop
xor edi, esi
jmp 0x4db82b
mov edx, 0x73716341
mov ecx, 0xbde7e1de
sub esi, ebx
xchg ecx, edi
sub edi, ecx
mov ecx, edi
and ebx, 0xbde94298
sub esi, 0xbde96be2
xor ebx, esi
shr ebx, 0x15
shr ebx, 0x13
jmp 0x4dccc7
pop edx
add esi, ebx
mov ecx, 0xbdea4610
add edi, ecx
mov ecx, ebx
inc ebx
ror esi, 4
dec ecx
xchg esi, ecx
jmp 0x4dc25d
call edx
or ecx, 0xbdec3378
xchg ecx, edi
ror ecx, 0x1d
or esi, ecx
or edi, esi
and esi, edi
xchg ecx, esi
and ebx, esi
shl ebx, 0x11
add ebx, edi
jmp 0x4da858
call fcn.004db938
or ecx, edi
or esi, edi
or edi, 0xbdee1e58
not ecx
mov edi, ecx
not edi
sub esi, 0xbdef59f4
xor ecx, 0xbdef88b4
or ebx, edi
sub ecx, esi
jmp 0x4da7d4
push 0xbb2d3654
or ecx, edi
bswap ecx
mov ecx, ebx
mov esi, ecx
mov ecx, 0xbdf0aaf0
inc ebx
jmp 0x4dc601
pop edx
sub edi, ebx
or edi, ebx
or ecx, edi
xchg ecx, ebx
or edi, esi
ror ebx, 0xf
jmp 0x4dbec1
pop edx
rol edi, 0xa
mov edi, ecx
sub esi, edi
add ecx, ebx
ror ecx, 0x1a
sub ecx, esi
jmp fcn.004dcdb7
mov edx, 0x73716341
xor esi, 0xbdf83030
xchg edi, ebx
xchg ecx, ebx
xchg edi, esi
xor edi, ecx
xor esi, 0xbdf8fcf6
xor ecx, edi
and esi, ebx
or ecx, 0xbdf97058
add edi, esi
jmp 0x4da792
push 0xbb2a3fb6
bswap edi
and edi, esi
sub ebx, esi
or ebx, 0xbdffc076
dec esi
mov esi, 0xbe001254
add ecx, 0xbe003b84
xchg esi, ebx
bswap ebx
rol esi, 9
jmp 0x4daacd
push 0xbb329de2
sub edi, esi
neg ebx
add ebx, 0xbe02b476
or edi, esi
add ecx, esi
inc edi
xor ecx, esi
and esi, ecx
or edi, ebx
not ecx
jmp 0x4da804
pop edx
mov esi, ebx
xchg ebx, ecx
xchg ebx, edi
xchg ebx, esi
add edi, 0xbe04a18a
sub ecx, 0xbe04ca8e
sub edi, 0xbe04f382
xchg ecx, esi
xor ebx, ecx
mov edi, ebx
mov ebx, ecx
mov ecx, esi
jmp 0x4da9fb
call fcn.004db938
dec ecx
xor edi, 0xbe061886
xchg ebx, edi
add esi, ebx
sub edi, esi
or ebx, esi
xor esi, ebx
not ebx
xchg ecx, esi
xchg esi, ecx
jmp 0x4dac70
call fcn.004db938
add ebx, ecx
or edi, ecx
shl ebx, 0x17
xchg ecx, edi
ror ecx, 0x19
bswap edi
add esi, edi
xor edi, 0xbe0c0890
jmp 0x4db982
push 0xbb29f088
mov edi, ebx
mov ebx, edi
xchg edi, ebx
not ecx
mov edi, ecx
sub esi, ecx
mov ecx, edi
and esi, 0xbe166098
or ebx, ecx
shl ecx, 0xf
jmp 0x4dadd7
push 0xbb267aee
mov esi, ecx
shl edi, 0xa
and ebx, 0xbe1836ce
mov edi, 0xbe185d2c
and ebx, ecx
or esi, 0xbe18b2c6
inc edi
and esi, ecx
jmp 0x4dc691
push 0xbb2d5eb2
sub ecx, edi
not ebx
ror ecx, 0x1b
or ecx, edi
add ebx, ecx
mov ecx, ebx
sub ebx, edi
shl edi, 0x11
and ebx, 0xbe225616
and ecx, edi
xor ecx, ebx
shr esi, 4
jmp 0x4da7b3
push 0xbb26a194
or ecx, esi
and ecx, esi
or ebx, esi
xchg esi, ecx
shl esi, 0x1c
mov edi, ecx
xchg esi, ebx
add edi, esi
jmp 0x4dbd34
pop edx
rol ebx, 0xe
mov ecx, edi
neg esi
xor esi, edi
mov ebx, ecx
add edi, 0xbe2dcd56
dec edi
and edi, esi
rol edi, 0x1d
xchg esi, ecx
mov ebx, 0xbe2e9484
xor ecx, esi
jmp 0x4dae95
pop edx
add esi, edi
xchg ecx, ebx
not ecx
ror edi, 0x15
or ecx, 0xbe31565e
shl ecx, 0x1b
neg esi
dec ecx
sub edi, 0xbe3200f2
not ebx
xor esi, 0xbe3252d0
xor ecx, edi
jmp 0x4da730
push 0xbb333fd0
and ebx, ecx
sub edi, ecx
and esi, 0xbe349936
shl ecx, 0xb
add esi, ebx
xchg edi, esi
rol edi, 0x1d
xor esi, ecx
jmp 0x4dc11e
pop edx
mov esi, edi
dec ecx
sub edi, 0xbe3a0822
add ebx, ecx
sub ebx, edi
add ebx, ecx
sub ecx, 0xbe3aa5a6
and ebx, edi
and edi, esi
add ecx, esi
and edi, esi
and ecx, 0xbe3b61d6
jmp 0x4dbc5c
push esp
ror esi, 0xe
or ebx, esi
add esi, ebx
bswap ebx
or esi, edi
rol ecx, 0x1b
sub esi, 0xbe3c87ba
not ebx
jmp 0x4db95d
push 0xbb3528e2
xor edi, ecx
xor ebx, esi
sub ecx, edi
dec ebx
sub esi, 0xbe44d9b0
mov edi, esi
mov ecx, esi
xchg ebx, esi
jmp 0x4db58a
push 0xd9215
mov ebx, ecx
xchg edi, ebx
bswap ebx
or edi, 0xbe45fd36
or esi, ecx
add ebx, esi
jmp 0x4db7c6
push 0xbb36c136
xor ecx, ebx
xor ecx, edi
sub edi, ecx
sub edi, esi
xchg edi, esi
xchg ebx, esi
or esi, ebx
sub esi, edi
jmp 0x4dbf5c
call fcn.004db938
xor ebx, ecx
or ebx, 0xbe5973d0
and edi, ebx
and ebx, 0xbe59c6d4
and ecx, edi
sub ecx, edi
jmp 0x4dcb23
call edx
mov esi, 0xbe5bea74
inc ecx
sub edi, ebx
or esi, ebx
or esi, 0xbe5c88f4
sub ecx, 0xbe5cb0a6
neg edi
xor ecx, ebx
jmp 0x4dc705
call edx
and ebx, esi
neg ebx
bswap edi
xchg esi, ebx
xor ecx, esi
sub esi, edi
or esi, ebx
xchg edi, ebx
xor edi, esi
mov edi, esi
not ebx
xor esi, 0xbe5f8118
nop
bswap ebx
jmp 0x4db506
call fcn.004db938
sub ecx, esi
or esi, 0xbe603264
and ecx, 0xbe605a7c
mov ecx, esi
mov esi, edi
or ecx, 0xbe60caa6
shl ecx, 0x1c
or esi, ecx
inc ecx
xchg edi, ebx
xchg ebx, edi
shr edi, 0x18
or edi, ecx
sub edi, 0xbe620d6a
jmp 0x4dcbfa
call edx
neg edi
or esi, edi
and esi, ebx
shr esi, 7
add ebx, esi
add esi, 0xbe6a7506
and ecx, 0xbe6a9ee2
not esi
sub esi, ecx
or ecx, esi
jmp 0x4dba37
push 0xbb3bbddf
add edi, esi
and esi, edi
add ebx, esi
xor ecx, edi
rol ebx, 0x15
rol ebx, 4
xor ecx, esi
or esi, ebx
shr edi, 9
and esi, ebx
jmp 0x4db2c4
call fcn.004db938
xor esi, ebx
xchg esi, ebx
xor edi, 0xbe7389a4
mov ebx, 0xbe73b794
neg edi
xor ebx, ecx
xor ebx, 0xbe74308e
xor ecx, ebx
add ebx, ecx
and esi, ecx
jmp 0x4dbf82
call edx
inc esi
or edi, esi
xchg esi, ecx
or ecx, esi
sub esi, ebx
mov esi, ebx
jmp 0x4dc74e
push 0xbb2bceb6
rol esi, 7
and ebx, ecx
rol ebx, 0x11
and ecx, 0xbe765570
or ebx, esi
or esi, edi
add esi, 0xbe76c944
add ecx, ebx
sub ecx, ebx
mov edi, ecx
jmp 0x4dce66
push 0xbb366f3f
xchg edi, ebx
or esi, 0xbe779baa
sub ebx, edi
or ebx, 0xbe77e930
add ebx, ecx
not edi
add ebx, ecx
add ecx, ebx
xor esi, ecx
and esi, edi
jmp 0x4db85a
push 0xbb2f41b2
neg ebx
sub ebx, 0xbe7b9570
add ecx, esi
ror ebx, 5
sub ecx, 0xbe7c0ce4
or esi, 0xbe7c3ab8
and ebx, ecx
sub ebx, ecx
ror ebx, 5
sub ecx, 0xbe7cd7ba
jmp 0x4db9cc
pop edx
mov ecx, ebx
or ecx, esi
mov ecx, ebx
and ebx, esi
xor esi, ebx
nop
jmp 0x4db0b3
push 0xbb2f19d6
or esi, ebx
and ecx, esi
or ebx, 0xbe813f42
add edi, ebx
not ebx
mov edi, ebx
and ecx, esi
not ebx
mov edi, ebx
xor edi, ecx
jmp 0x4dcd87
pop edx
add ecx, ebx
rol edi, 1
sub ebx, 0xbe82db9e
mov edi, ebx
and ecx, esi
not ebx
xor ebx, edi
neg edi
not edi
or ebx, edi
and esi, 0xbe841dd8
or ecx, 0xbe84458a
jmp 0x4db802
mov edx, 0x73716341
xchg ebx, esi
mov ebx, 0xbe84a796
inc ebx
mov edi, esi
add edi, ebx
mov ebx, 0xbe8547b6
jmp 0x4dc3a8
pop edx
rol edi, 0x1d
sub edi, ebx
inc ebx
xchg ecx, edi
add esi, edi
shr esi, 0xf
xchg ecx, ebx
inc edi
xchg edi, esi
rol ebx, 7
jmp 0x4da8e4
pop edx
xor ebx, edi
and ecx, ebx
xor ecx, esi
mov esi, edi
xor ebx, esi
mov ebx, 0xbebd0c16
mov ebx, esi
bswap edi
add esi, 0xbebd6112
and esi, 0xbebd7d88
mov edi, ebx
and ebx, ecx
jmp 0x4dc81f
call fcn.004db938
mov ecx, edi
neg edi
add ecx, esi
or edi, esi
or esi, 0xbebf3758
inc ebx
xor esi, 0xbebf7450
add edi, ebx
jmp 0x4da6a7
push 0xbb3ac4fc
or ecx, edi
inc edi
jmp 0x4dbdca