Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
rol edx, 0xe
neg esi
sub edi, ebx
call sub.user32.dll_GetCaretBlinkTime
dec esi
xor edi, edx
bswap edi
mov esi, edi
xor esi, ebx
sub edi, esi
shl edi, 6
cmp eax, 0xfffffef8
jne 0x4010b2
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
ret
or esi, edi
shr ebx, 0x1e
shl esi, 2
or ebx, esi
shl edx, 0xe
bswap ebx
call sub.user32.dll_GetProcessWindowStation
and ebx, esi
inc esi
shl edi, 0x13
add edx, esi
cmp eax, 0xffffff2d
jne 0x401157
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
ret
xor ebx, esi
xchg esi, ebx
call sub.user32.dll_GetProcessWindowStation
bswap ebx
ror edi, 6
rol esi, 6
cmp eax, 0xffffff25
jne 0x4011e2
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
ret
and esi, ebx
shl edx, 0xc
add esi, 0xd3e3e38f
or edi, ebx
add ebx, 0xd3e45e7b
call sub.user32.dll_GetCaretBlinkTime
not ebx
and esi, 0xd3e4f1d2
ror edi, 0xd
or edi, esi
cmp eax, 0xffffff2d
jne 0x401286
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.kernel32.dll_MapUserPhysicalPages
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
call sub.advapi32.dll_ElfNumberOfRecords
ret
jmp 0x4b79b0
sub esi, edx
shr esi, 0x1a
add edx, 0xd4858bfc
jmp 0x4b96c5
call edi
shl esi, 0x12
mov ebx, ecx
add ebx, ecx
xor esi, ebx
inc esi
xor esi, ebx
xchg esi, edx
mov ecx, ebx
rol esi, 0x12
and esi, edx
xor ebx, esi
sub edx, ecx
ror edx, 0x1f
bswap ebx
xor edx, ebx
jmp 0x4b9ec3
pop edi
dec edx
xor ecx, ebx
mov ecx, esi
mov ecx, esi
mov ecx, ebx
add ecx, ebx
sub ebx, 0xd84c0429
xor ebx, esi
jmp 0x4ba4d7
pop edi
nop
or ecx, 0xd84cd042
sub esi, 0xd84d1813
add esi, edx
bswap ebx
shr ebx, 0xb
jmp 0x4b876b
push 0xd4965c39
neg ecx
add esi, edx
shr edx, 9
add edx, ebx
xchg edx, esi
mov edx, esi
add ebx, 0xd85d7f51
xchg ebx, esi
jmp 0x4b8b63
push esp
mov edx, esi
shr esi, 2
or edx, ecx
xor ecx, esi
and ecx, 0xd86904f8
not ecx
jmp 0x4ba7ea
call edi
sub edx, ecx
or ebx, 0xd869d6c0
xchg esi, ebx
add edx, ecx
mov edx, esi
not ebx
jmp 0x4bb469
pop edi
xchg ebx, esi
add edx, ecx
add edx, ebx
shl ecx, 0xf
sub esi, ecx
xor ebx, edx
and ebx, esi
and esi, 0xd880ce30
jmp 0x4b9288
pop edi
add esi, edx
add edx, ebx
rol esi, 2
mov edx, esi
ror esi, 9
mov edx, ebx
inc ecx
xor ebx, ecx
xor edx, ebx
add ecx, edx
mov esi, ebx
add esi, ecx
or ecx, esi
jmp 0x4b8240
push 0xd4915400
add ebx, 0xd8940698
xor ecx, esi
xchg ecx, esi
mov ecx, ebx
shl esi, 4
mov ecx, esi
and esi, ebx
mov edx, esi
sub edx, 0xd8978769
sub ecx, esi
inc ebx
jmp 0x4b8cd0
push 0xd497c04a
or edx, esi
add ebx, edx
rol ecx, 1
rol ebx, 0x14
sub ecx, esi
or edx, esi
ror ebx, 0x1b
and ebx, 0xd8ec3822
xchg ebx, ecx
or ecx, edx
or esi, 0xd8ecff47
xor esi, edx
sub esi, ecx
jmp 0x4bb0ce
call edi
not edx
and edx, ebx
add edx, 0xd900368e
or esi, ebx
add ecx, 0xd900ad31
sub ebx, edx
sub edx, ecx
xchg ecx, ebx
xor edx, 0xd903de84
ror ebx, 0x1c
bswap edx
xchg edx, esi
add edx, esi
sub edx, 0xd9060ef2
jmp 0x4b8d37
call fcn.004bb1e6
neg esi
add edx, esi
sub esi, 0xd90d808c
shr ecx, 0xf
xor ebx, ecx
ror edx, 5
mov ecx, ebx
xor esi, 0xd911b96a
xchg ebx, esi
add edx, 0xd9129531
neg edx
jmp 0x4b8fc4
push 0xd4a0aa92
dec ebx
and ecx, edx
xor edx, 0xd93c42a1
or ebx, esi
mov ecx, ebx
xor ebx, esi
and ecx, 0xd93ff5ff
or edx, ebx
and ecx, esi
jmp 0x4ba19d
push 0xd49b5137
mov edx, ecx
add ebx, esi
xor esi, ecx
and edx, 0xd94796f9
mov ecx, 0xd9480a4c
jmp 0x4ba161
pop edi
xchg edx, ebx
sub edx, esi
xor ecx, 0xd95818c3
dec ebx
sub edx, esi
shr edx, 0x15
sub edx, ebx
jmp 0x4b7c83
call edi
sub esi, ecx
sub ecx, 0xd95ad5a8
mov edx, ebx
and ecx, esi
xor edx, esi
add ebx, ecx
ror esi, 0xe
add edx, ecx
sub edx, ecx
add ebx, esi
and ecx, edx
jmp 0x4b7a01
push 0xd498194b
mov ebx, esi
ror ecx, 3
sub ecx, esi
ror edx, 2
ror esi, 0x1d
not ebx
and esi, edx
shr ebx, 0x19
sub edx, ebx
neg ebx
and edx, ecx
jmp 0x4b853f
pop edi
xor esi, 0xd97dfcd1
xor ecx, edx
bswap esi
xchg edx, ebx
xor ecx, 0xd97fd631
or ecx, 0xd98051b6
jmp 0x4ba829
push 0xd4976bb4
or edx, 0xd980e907
sub edx, 0xd9816b7b
or ebx, edx
sub ebx, edx
ror ecx, 0x1d
xchg esi, ecx
ror ecx, 0x18
xor edx, 0xd9843078
inc ebx
add ebx, esi
bswap esi
add ecx, esi
ror edx, 0xe
rol esi, 0x13
jmp 0x4b8b05
pop edi
xor edx, esi
and ecx, edx
xor ecx, ebx
add ebx, 0xd99ab2b4
xchg ebx, edx
rol edx, 0x14
add esi, ebx
mov ebx, edx
jmp 0x4badcd
mov edi, 0x2774562b
xchg edx, ebx
mov ecx, ebx
mov ecx, 0xd9a81e4e
xor ebx, esi
neg esi
and ebx, edx
dec ecx
add ebx, 0xd9ac6fa3
or esi, 0xd9ace178
add ecx, 0xd9ad5b07
jmp 0x4b99cb
pop edi
ror ebx, 0x13
and edx, ebx
and ebx, ecx
shl esi, 2
neg ecx
dec edx
mov ecx, edx
and edx, ecx
jmp 0x4bafdb
push 0xb65b0
xchg edx, ecx
xchg ebx, ecx
bswap esi
or ebx, ecx
dec edx
ror ebx, 5
xor ecx, esi
or edx, 0xd9dae36a
or ebx, 0xd9db5093
jmp 0x4ba9ae
pop edi
or edx, 0xd9f35bbc
mov esi, 0xd9f3c14f
sub ecx, esi
neg edx
xor esi, edx
xor ebx, edx
mov esi, ecx
jmp 0x4b8443
call fcn.004bb1e6
or esi, 0xda0a17fe
ror ecx, 0x1d
mov edx, esi
or ecx, 0xda0b5a9e
mov ecx, 0xda0bcf21
and ecx, edx
mov ecx, ebx
jmp 0x4ba59d
push 0xd491a90a
xor edx, ecx
xor ecx, edx
xor ecx, esi
mov esi, edx
not ecx
or edx, 0xda22f7ae
xor ebx, edx
and ecx, 0xda23d3c8
sub ecx, ebx
bswap ebx
and edx, esi
neg esi
jmp 0x4bad7b
push 0xd48c318b
xchg ecx, edx
xor edx, 0xda269b33
rol edx, 0x1d
mov esi, ebx
add ebx, ecx
and esi, edx
add ecx, edx
rol ecx, 0x1e
mov ecx, edx
add ebx, ecx
jmp 0x4b8c07
push 0xd494ce77
xor esi, ebx
sub ecx, edx
xor ebx, edx
bswap edx
add ecx, esi
sub edx, ebx
rol ebx, 0x14
dec esi
or esi, 0xda3051c3
jmp 0x4b98be
pop edi
mov ebx, esi
mov esi, ebx
mov ecx, 0xda3efdcb
and ebx, 0xda3f6cb7
and ecx, ebx
and esi, ecx
or ebx, 0xda40b1d2
add edx, 0xda412a47
xor esi, edx
shl ecx, 0x13
and ecx, edx
dec ebx
xchg ebx, ecx
ror ebx, 0xb
mov edx, ebx
xor ebx, edx
jmp 0x4bade9
push 0xd4a3e4e7
shr edx, 0x1e
sub ebx, 0xda46b4d2
add esi, 0xda4946f6
add esi, edx
and ecx, edx
add edx, 0xda4a8dd1
xor edx, 0xda4aff06
sub esi, edx
inc ecx
inc esi
jmp 0x4b93fc
call fcn.004bb1e6
or edx, ecx
and edx, ebx
sub esi, ebx
xor edx, 0xda5c7b90
or edx, ecx
rol esi, 0x1d
sub esi, edx
or ebx, esi
or esi, 0xda5ef2bd
add ecx, edx
jmp 0x4bb325
push 0xd4979401
sub edx, 0xda75bd3d
sub ecx, 0xda762ec6
sub ebx, esi
xor ebx, edx
xor ebx, edx
rol edx, 0x1d
mov edx, ecx
add esi, ebx
xor esi, ecx
ror ecx, 1
jmp 0x4b7fc5
mov edi, 0x2774562b
mov edx, ebx
shr esi, 9
or edx, esi
xchg ecx, ebx
and edx, 0xda852ac6
sub ecx, ebx
or ebx, ecx
sub ecx, esi
jmp 0x4ba66f
pop edi
mov ecx, ebx
xchg esi, ecx
jmp 0x4bad21
mov edi, 0x2774562b
bswap ebx
sub ecx, edx
or ecx, ebx
neg ecx
and ebx, 0xda9d2480
xor ecx, esi
sub esi, ecx
sub esi, edx
sub edx, 0xda9efe98
inc esi
jmp 0x4b8a5c
push 0xd48d946c
or ecx, esi
and edx, ecx
not ebx
mov ecx, edx
xchg ebx, edx
add edx, 0xdaa99f00
shr ecx, 0x14
mov esi, ebx
rol ebx, 0x10
neg ecx
xor esi, 0xdaabe2ea
xor ebx, esi
jmp 0x4b95d5
push 0xd49183a6
and edx, ebx
mov ecx, esi
add edx, ebx
or ecx, ebx
or ecx, ebx
sub edx, ecx
add esi, 0xdabc6ea8
xchg edx, ecx
shr esi, 0xe
bswap edx
or esi, 0xdabe6e8a
jmp 0x4b88bd
push 0xd4a57958
mov edx, esi
inc esi
mov edx, ebx
jmp 0x4ba2c6
call edi
xor edx, esi
xor edx, esi
or esi, edx
and edx, ecx
shl ebx, 0x1c
sub edx, ecx
xor esi, 0xdac55ad9
sub ecx, edx
mov esi, edx
xor ecx, ebx
mov esi, ebx
rol esi, 0x19
xor edx, 0xdac8267b
add ebx, edx
mov edx, ecx
jmp 0x4baf6e
pop edi
mov ecx, 0xdac99496
sub edx, esi
or edx, esi
xor ebx, ecx
dec ecx
and esi, 0xdacbe014
add ebx, esi
xor ecx, edx
and esi, ebx
xchg edx, ecx
jmp 0x4b8982
push 0xd49aa5e1
or ecx, ebx
sub ebx, edx
mov ecx, edx
mov esi, edx
and edx, ecx
shr ecx, 0x19
mov ebx, esi
xchg edx, esi
jmp 0x4b96ab
call fcn.004bb1e6
or ebx, esi
and esi, 0xdb02febf
not ecx
sub ecx, 0xdb03bbd2
mov ebx, edx
xor ecx, esi
dec ecx
and esi, ebx
and ebx, edx
mov edx, 0xdb07bad1
jmp 0x4b8d08
pop edi
mov esi, edx
xor ecx, 0xdb0e5c5d
sub esi, edx
mov esi, 0xdb0f5631
rol esi, 0xc
jmp 0x4b7d3d
push 0xd4a10045
dec ecx
add ebx, esi
or esi, ebx
jmp 0x4b99a5
pop edi
dec ecx
xchg ecx, edx
sub edx, esi
mov ecx, esi
and ebx, edx
and ecx, esi
xor esi, ecx
xor edx, esi
and esi, edx
xchg ecx, edx
jmp 0x4b9175
push 0xd49c368e
or esi, 0xdb1ec356
not ebx
xchg esi, ebx
xor ecx, edx
mov ecx, esi
jmp 0x4bb3b0
call fcn.004bb1e6
ror ecx, 0xd
ror esi, 0xa
or ecx, edx
and ebx, esi
or ebx, esi
jmp 0x4b8315
call edi
mov ecx, ebx
not ecx
sub ebx, ecx
or ecx, 0xdb37b75f
or esi, ecx
and edx, esi
and edx, esi
and ecx, esi
add ebx, ecx
sub ebx, esi
shl ebx, 9
mov ecx, edx
jmp 0x4b84d7
push 0xd48ff5cc
add ecx, esi
mov edx, esi
or edx, ecx
add ebx, edx
and esi, 0xdb46e6f9
and ebx, ecx
add ecx, edx
jmp 0x4b9dba
mov edi, 0x123b2f04
add edx, 0xdb483b2b
and ecx, ebx
add esi, ecx
mov edx, ebx
add ebx, ecx
dec esi
bswap edx
mov edx, ecx
xchg edx, ebx
sub esi, ecx
add ebx, ecx
and ebx, edx
jmp fcn.004b9f3f
push 0xd4a442c0
ror ecx, 0x1b
shl esi, 0x16
and ecx, 0xdb5630cc
mov ecx, edx
or ebx, 0xdb572099
ror edx, 0xd
or edx, 0xdb5812f4
add esi, ebx
add esi, edx
rol edx, 0xe
and ebx, 0xdb59ef51
jmp 0x4ba483
pop edi
dec ebx
or esi, edx
ror ecx, 0x14
mov ebx, 0xdb695e21
ror edx, 0xd
xor esi, ebx
shr esi, 0x1f
and edx, esi
ror ecx, 0x15
xor edx, 0xdb6e1f19
xor edx, esi
and ebx, ecx
jmp 0x4bae88
pop edi
or edx, 0xdb7428a3
sub ebx, 0xdb746af3
sub esi, ecx
and esi, ebx
ror edx, 0x12
dec esi
and ebx, edx
xor ebx, 0xdb75e02d
add edx, ecx
jmp 0x4ba1fb
push 0xd4963336
ror ecx, 0x1e
or edx, 0xdb7862cb
bswap ebx
xchg edx, ecx
xchg ebx, ecx
sub ecx, 0xdb796335
add ebx, 0xdb799cea
mov ecx, esi
inc ecx
mov esi, ecx
xor esi, ecx
xor edx, ebx
jmp 0x4b7adb
pop edi
sub edx, ecx
and ecx, esi
xchg esi, ecx
bswap ebx
and esi, ebx
xor esi, ebx
xchg ecx, ebx
xor ecx, 0xdb8e9a39
shl ebx, 3
rol ecx, 7
mov ecx, 0xdb8ff898
and ecx, ebx
or esi, ebx
add edx, esi
xor edx, esi
xor ecx, esi
jmp 0x4bb36e
call edi
or edx, 0xdb945555
or ecx, ebx
xor ecx, esi
xchg esi, edx
and esi, ecx
not ecx
jmp 0x4bab07
pop edi
inc edx
xchg edx, ecx
ror edx, 0x1a
add ecx, edx
shr ebx, 8
sub esi, 0xdb9b11ae
xor ecx, esi
jmp 0x4b8d57
push 0xd4a411bc
and edx, ebx
ror ebx, 8
shl ebx, 6
or edx, ecx
xor edx, ecx
xchg ecx, edx
rol esi, 0xb
and edx, 0xdbe3c89c
and ecx, ebx
bswap ebx
jmp 0x4b9076
push 0xd48fcc1a
ror ebx, 0x1a
inc ebx
mov ebx, 0xdc20c60b
sub esi, ebx
xor edx, 0xdc21b0c8
jmp 0x4b9010
push 0xd48dc393
mov esi, ecx
mov edx, esi
mov ebx, esi
xor ebx, esi
add ebx, edx
add ebx, edx
or ecx, 0xdc2b3c93
xchg edx, ecx
inc ecx
jmp 0x4ba81b
push 0xd49b0227
xchg ebx, esi
ror esi, 0x17
mov edx, esi
rol esi, 0x11
or edx, ebx
and esi, edx
or ebx, edx
jmp 0x4b828b
push 0xd48a6bac
add ecx, edx
rol ebx, 0xf
mov edx, esi
jmp 0x4b9aa4
push 0xd48c0a9e
and edx, ecx
add esi, edx
add esi, ebx
mov ecx, 0xdc80bc68
or esi, ebx
sub ebx, ecx
or esi, ecx
or ecx, esi
and edx, ebx
jmp 0x4b88e7
push 0xd494fb84
or edx, ebx
and edx, ecx
and ebx, 0xdc8dc5be
sub ebx, esi
mov esi, ecx
dec ebx
or ecx, esi
or edx, 0xdc903141
sub edx, esi
mov ebx, edx
neg ebx
and edx, 0xdc949ce3
or ebx, edx
jmp 0x4b9ce0
push 0xd494a209
xchg ecx, edx
dec ebx
mov esi, ecx
add esi, 0xdc96ed59
shl edx, 8
shl ebx, 4
dec edx
or esi, ecx
ror ecx, 0x10
shl edx, 0x1b
neg ecx
jmp 0x4b890b
mov edi, 0x123b2f04
xchg ecx, ebx
add edx, esi
and esi, edx
add ecx, edx
not ecx
add edx, 0xdcab137e
rol ebx, 0x16
mov esi, ecx
xor ecx, esi
xor esi, edx
rol ecx, 6
jmp 0x4b8e60
call fcn.004bb1e6
and ecx, 0xdcade128
mov edx, ebx
sub edx, esi
xor esi, ebx
sub edx, esi
sub edx, 0xdcaf99ed
jmp 0x4b7b74
pop edi
inc esi
xchg ebx, ecx
or esi, edx
and ecx, edx
xchg edx, ecx
xchg ecx, edx
add ebx, esi
ror edx, 0x13
and ebx, edx
or ecx, 0xdcbf7b67
and ebx, ecx
jmp 0x4b9101
push 0xd48aa6d6
xor esi, ecx
bswap edx
or ecx, 0xdcc23ff1
or edx, ecx
xor ebx, 0xdcc32e54
xor edx, 0xdcc3ac45
rol edx, 9
inc ebx
xor edx, esi
xchg ecx, esi
or ebx, esi
add ebx, ecx
jmp 0x4ba700
mov edi, 0x2774562b
sub ebx, ecx
dec ebx
or ebx, 0xdcc7b6d8
ror esi, 2
sub ebx, 0xdcc89b28
shl ebx, 0x18
add edx, ecx
sub edx, ebx
and ecx, 0xdcca650c
jmp 0x4ba6c4
pop edi
mov ecx, edx
sub ebx, ecx
and ebx, 0xdccc032b
shr esi, 0x11
rol esi, 0xf
or edx, ecx
xchg ecx, edx
or edx, ecx
jmp 0x4b9a84
mov edi, 0x2774562b
neg ebx
xor esi, ebx
sub ebx, edx
xor ecx, esi
not ebx
jmp 0x4ba5da
pop edi
bswap edx
xchg ecx, edx
rol edx, 1
ror esi, 9
or edx, 0xdcf45442
mov ebx, ecx
sub ecx, edx
bswap ebx
or edx, ebx
jmp 0x4b7c24
mov edi, 0x2774562b
sub ebx, esi
xor ebx, edx
xchg ebx, ecx
not esi
and esi, 0xdcfb2892
jmp 0x4b80d6
mov edi, 0x123b2f04
rol ebx, 0x14
sub ecx, esi
mov edx, esi
mov edx, 0xdd16244e
xor esi, ecx
add esi, ebx
and ecx, esi
shl ebx, 6
xchg ebx, ecx
jmp 0x4b8f9b
pop edi
or esi, ecx
add ebx, esi
or ebx, 0xdd2a8b2b
xchg ecx, ebx
add esi, edx
and ebx, edx
sub ebx, ecx
and ecx, ebx
xor esi, edx
or esi, edx
or esi, ebx
mov ecx, esi
and esi, 0xdd2e6692
xor edx, 0xdd2ebff1
xor ebx, edx
jmp 0x4b8627
pop edi
neg ebx
and esi, edx
and edx, ecx
mov esi, ecx
xor esi, 0xdd313fe4
or ecx, ebx
mov ebx, 0xdd321c9f
and esi, ecx
or ebx, ecx
jmp 0x4bab4b
call fcn.004bb1e6
xor ebx, esi
and edx, 0xdd5121a4
rol ebx, 4
or esi, 0xdd522a40
or ecx, ebx
sub ecx, 0xdd531bb0
inc ecx
and edx, ecx
xor ecx, ebx
and ecx, ebx
jmp 0x4ba912
push 0xd49be026
mov edx, 0xdd85fab9
ror esi, 0xc
and ecx, edx
rol edx, 0x16
or edx, 0xdd86f8e8
xor esi, ecx
mov ecx, esi
or ecx, esi
xchg ebx, edx
mov ecx, 0xdd886b27
jmp 0x4b8f1a
push 0xd4a0d787
ror ebx, 0x19
xchg esi, ebx
xchg edx, esi
xor esi, 0xdd8cf0a9
inc ebx
shl esi, 5
xor edx, 0xdd8dd059
ror esi, 0x19
sub ecx, ebx
sub ebx, 0xdd8e88e6
and esi, edx
inc esi
shr ecx, 0x19
sub esi, 0xdd8fb258
jmp 0x4b8ec6
pop edi
shr ebx, 0x11
rol edx, 0xa
add edx, ebx
xor ecx, 0xdd93c899
sub ebx, ecx
and ecx, esi
and edx, 0xdd948ad3
sub ebx, edx
rol edx, 3
xchg edx, ecx
shr ecx, 0x1f
and edx, esi
bswap edx
jmp 0x4bb349
push 0xd4a5aab8
shl esi, 0x17
or esi, ecx
xchg edx, ebx
dec ebx
bswap esi
jmp 0x4b902c
pop edi
add edx, 0xddc92e5a
mov edx, ecx
sub ecx, esi
xor ecx, 0xddc9e0ce
xchg ebx, ecx
add ebx, edx
sub ebx, 0xddcaa143
and ebx, esi
jmp 0x4b8425
mov edi, 0x2774562b
shl ebx, 2
mov edx, 0xdddd4209
xchg esi, ecx
sub edx, ecx
xchg esi, edx
or ecx, esi
mov ecx, ebx
mov edx, 0xdddeb939
sub ebx, esi
or ecx, esi
jmp 0x4b9fc9
pop edi
mov ebx, 0xdde30312
mov ebx, 0xdde34261
not edx
and ecx, ebx
or ebx, ecx
xchg ebx, ecx
and esi, 0xdde47ff4
mov ebx, ecx
not edx
mov ecx, esi
jmp 0x4baa17
push esp
and ebx, esi
and ecx, 0xddfb446a
or ebx, ecx
shr edx, 0x10
sub edx, 0xddfe46da
add ebx, edx
xchg ebx, edx
add ecx, 0xddfef940
xor ebx, 0xddff38ff
jmp 0x4b7b5d
call fcn.004bb1e6
mov esi, ecx
sub ecx, edx
neg esi
sub ecx, esi
shr edx, 0xe
xchg ebx, esi
add edx, ecx
xchg ebx, ecx
xor ebx, esi
sub ecx, esi
mov ebx, esi
xchg esi, edx
mov edx, 0xde03cc0c
sub ecx, edx
or edx, esi
jmp 0x4b79da
call fcn.004bb1e6
xor edx, 0xde0495bf
and ebx, ecx
shr edx, 0x10
xchg ebx, edx
ror edx, 0x10
jmp 0x4b8074
call fcn.004bb1e6
sub ebx, ecx
xchg edx, ebx
or ebx, esi
sub edx, 0xde0e244b
shr ecx, 8
and ebx, 0xde0eaf6c
not ebx
sub ecx, 0xde0f2ef3
jmp 0x4ba9c4
call fcn.004bb1e6
xor esi, 0xde1407cc
xor ebx, ecx
and esi, edx
dec edx
xor ebx, ecx
or ebx, ecx
xor ecx, edx
mov edx, esi
sub ebx, edx
jmp 0x4baa86
push 0xd48acd72
and ecx, ebx
xor esi, 0xde1be853
xchg ecx, edx
xchg ecx, esi
add ebx, edx
sub esi, 0xde1cdddc
dec edx
add edx, 0xde1d5c19
xor esi, ebx
shr ebx, 3
and esi, ebx
mov edx, 0xde1ecb08
rol ecx, 0x18
sub ebx, esi
add esi, 0xde201085
shr esi, 1
jmp 0x4b9ad2
push 0x40
or ebx, esi
xor edx, esi
mov edx, ebx
and edx, 0xde36dc9c
mov ebx, esi
and edx, ebx
add esi, ecx
neg ebx
not ecx
mov edx, ecx
mov ecx, edx
shl ecx, 0xf
and edx, 0xde40a290
mov ebx, ecx
mov edx, esi
jmp 0x4b8690
push 0xd48def09
or ebx, ecx
sub ebx, ecx
jmp 0x4b9b88
push 0xd48d3d68
ror esi, 0x12
xchg edx, esi
xchg ecx, ebx
sub edx, ebx
xchg ebx, ecx
bswap ecx
mov ecx, 0xde44f21f
or esi, ecx
shr ecx, 0x15
add esi, edx
add ebx, edx
or ebx, ecx
rol esi, 5
jmp 0x4ba939
pop edi
mov ecx, ebx
xor ecx, 0xde5408c3
xchg ecx, ebx
add ebx, ecx
neg ebx
or ecx, esi
and ecx, 0xde56c6ed
mov esi, edx
xchg ecx, ebx
add ebx, esi
jmp 0x4b98ed
call edi
xor esi, ebx
mov esi, 0xde5a199a
inc ebx
xor edx, 0xde5a9a32
xchg edx, esi
add esi, 0xde5b164e
not esi
add ebx, esi
add esi, ebx
and ebx, esi
sub ecx, edx
jmp 0x4b9e93
push 0xd48d69dd
sub ecx, 0xde5c9dc3
and esi, ecx
dec edx
shr ebx, 0xd
xor ebx, 0xde5d9ab4
dec edx
sub ebx, 0xde5e52d0
and esi, edx
rol edx, 9
xchg ecx, edx
jmp 0x4b8c5c
call edi
mov esi, edx
ror edx, 0x1a
xor ecx, esi
and ebx, esi
sub edx, ecx
xor esi, ebx
xor ebx, esi
dec esi
shr edx, 0x1a
or ecx, ebx
xchg ecx, edx
add ebx, edx
jmp 0x4baec4
push 0x401400
xor edx, ebx
xor esi, edx
shl esi, 0x14
bswap ecx
not esi
inc ecx
jmp 0x4b9248
call edi
not esi
mov ecx, ebx
xor edx, 0xde6948ed
xchg edx, ecx
jmp 0x4b7a1a
pop edi
or esi, ecx
or esi, 0xde704c87
sub edx, ecx
neg ecx
add esi, 0xde7105c6
and edx, ebx
mov esi, edx
or ecx, 0xde71bf5e
sub ecx, edx
jmp 0x4b8eae
call edi
or edx, esi
mov edx, ecx
mov esi, ebx
xchg ecx, esi
sub esi, 0xde7965db
or edx, ecx
xor ebx, edx
jmp 0x4b9151
pop edi
and edx, esi
xchg esi, ebx
xor esi, ecx
bswap esi
bswap edx
sub edx, esi
mov edx, ecx
bswap esi
or ebx, esi
jmp 0x4b89c9
pop edi
ror esi, 2
inc esi
or esi, 0xde8f5438
and ecx, edx
and esi, edx
xchg ebx, ecx
or ebx, esi
jmp 0x4b9afb
call fcn.004bb1e6
not esi
xchg esi, ebx
xchg esi, ebx
add ebx, edx
xor ebx, 0xde98678e
add ebx, edx
rol esi, 0x12
jmp 0x4ba963
pop edi
xchg esi, edx
xchg ebx, esi
rol esi, 8
mov ecx, 0xdeb07c58
or ebx, edx
neg ebx
ror esi, 0xc
and ecx, edx
jmp 0x4b9208
pop edi
bswap ebx
and ebx, esi
add ecx, 0xdebe720b
add ecx, edx
xor ebx, esi
inc ebx
mov edx, ecx
shl ecx, 0x1e
inc edx
sub edx, ebx
jmp 0x4b82fd
push 0xd491d6d2
add esi, edx
shl ecx, 0xe
not edx
jmp 0x4bad8c
mov edi, 0x123b2f04
or ebx, esi
or edx, ebx
rol esi, 0x12
or esi, ecx
add edx, ecx
add ecx, esi
and esi, ebx
jmp 0x4ba606
pop edi
xor esi, 0xdece848e
shl ebx, 0xd
add ecx, edx
xor ecx, edx
xchg edx, ebx
inc esi
add ebx, ecx
and ebx, 0xded030c8
or edx, esi
bswap ebx
sub ebx, 0xded0f793
jmp 0x4b9c88
pop edi
inc ebx
ror ebx, 7
or ebx, 0xded1c1fc
xchg edx, ebx
mov esi, edx
xchg ebx, edx
or ecx, 0xded2c307
jmp 0x4b8ed5
pop edi
or edx, 0xded313b9
xor esi, 0xded3525f
xor edx, 0xded38d6e
sub esi, edx
bswap ebx
mov edx, 0xded45147
dec edx
and edx, ecx
jmp 0x4ba8cc
push 0xd48f77cf
rol esi, 0x15
rol edx, 0xe
shl edx, 0x17
nop
jmp 0x4baf89
pop edi
xchg ecx, esi
and ecx, 0xdeeb1449
add edx, ebx
neg esi
mov esi, 0xdeed396d
or ebx, esi
sub ebx, edx
jmp 0x4b8baf
pop edi
xor esi, 0xdef8dd76
bswap ebx
shl edx, 0x13
add ecx, ebx
add ecx, ebx
sub esi, edx
sub ebx, edx
add edx, ecx
jmp 0x4bac93
push 0xd48fa0f3
and edx, esi
sub ebx, edx
rol ebx, 0x10
xor ecx, esi
xchg edx, ecx
and ebx, 0xdefc2878
rol ebx, 0x13
add esi, 0xdefd13b8
add ecx, ebx
sub edx, 0xdefdec7c
mov ebx, edx
add edx, esi
add esi, edx
jmp 0x4b9596
pop edi
add esi, ecx
rol edx, 0x10
and ecx, 0xdf044f5a
dec ecx
dec edx
not esi
or ecx, esi
and edx, esi
shl esi, 0x11
or ebx, edx
sub esi, ebx
jmp 0x4b8cf9
push 0xd497ec14
mov ecx, ebx
ror ebx, 0x1b
sub edx, ecx
mov esi, edx
and ecx, ebx
sub ecx, edx
mov ebx, 0xdf1d660c
xchg edx, ecx
jmp 0x4b8401
call edi
add esi, 0xdf4b306a
and esi, 0xdf4b734b
mov ebx, edx
xor edx, ecx
or ecx, esi
inc ebx
dec ecx
xor ecx, edx
mov ecx, 0xdf4d2a8b
and ecx, ebx
jmp 0x4ba3e7
pop edi
mov edx, ecx
xor ebx, ecx
mov edx, 0xdf4e54ba
and ebx, 0xdf500bdf
ror esi, 0x1a
xchg esi, ebx
mov ebx, ecx
ror ecx, 0xd
shr ecx, 1
dec edx
xor esi, ecx
jmp 0x4b9864
mov edi, 0x4132136a
ror ecx, 0x1b
xchg ecx, ebx
jmp 0x4b8814
mov edi, 0x123b2f04
mov ebx, ecx
add ecx, edx
sub esi, edx
and edx, ecx
add ecx, esi
xchg ebx, ecx
rol edx, 8
not ecx
shl ebx, 0xa
jmp 0x4bab9b
pop edi
add ebx, esi
xchg esi, ecx
xchg esi, edx
xchg ecx, ebx
jmp 0x4bada5