Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetFocus
cmp eax, 0xfffffef5
jne 0x4010a7
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
ret
call sub.user32.dll_GetActiveWindow
cmp eax, 0xfffffef6
jne 0x401108
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xffffff1d
jne 0x4011b4
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
ret
call sub.user32.dll_GetActiveWindow
cmp eax, 0xfffffef7
jne 0x401233
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
call sub.ntdll.dll_NtSetInformationProcess
call sub.ntdll.dll_RtlConvertLongToLargeInteger
ret
jmp 0x508253
and ebx, edi
not edi
not esi
ror ebx, 5
rol ebx, 0xb
xchg ebx, edx
jmp 0x50b62c
pop ebx
or esi, ecx
and esi, ecx
xor esi, 0xe9d26433
xchg ecx, edx
and edi, edx
add edi, edx
xchg esi, edi
xchg edi, esi
or ecx, esi
mov edi, esi
jmp 0x50b3c3
mov ebx, 0x73716341
xor esi, edi
add edi, 0xe9d4a05b
xor ecx, esi
not edi
add ecx, edx
add edi, ecx
xchg edi, ecx
add esi, edx
jmp 0x508bdd
pop ebx
mov edx, esi
and ecx, esi
inc ecx
add esi, edi
add edi, esi
xor ecx, esi
or esi, 0xe9d7ccc1
and edx, edi
not edi
xchg edx, edi
jmp 0x50acd6
pop ebx
or ecx, edi
sub esi, edx
sub ecx, edx
inc edx
rol esi, 0xd
rol ecx, 0xc
mov edx, edi
or esi, 0xe9e26e51
add edx, 0xe9e2ab35
xchg edi, ecx
jmp 0x509037
call ebx
xor esi, edx
or ecx, 0xe9e9e6f1
not edi
mov edi, ecx
and edi, edx
sub edx, edi
xchg ecx, edi
and edi, edx
and ecx, edx
sub edi, edx
jmp 0x508372
mov ebx, 0x73716341
xchg edi, edx
or edi, 0xe9eee7df
sub edx, 0xe9ef248f
mov edx, 0xe9ef6042
and ecx, edi
or esi, edx
add esi, edx
or edx, esi
xor edx, 0xe9f0956a
sub esi, 0xe9f0d225
jmp 0x509595
push 0xe8a87b38
xor edx, ecx
xor edx, 0xe9f16626
sub edi, 0xe9f1a3ee
sub esi, edi
xchg edx, edi
xchg ecx, edx
shr ecx, 0x10
sub edi, 0xe9f2e13a
jmp 0x509181
push 0xe8aa58b6
sub edx, 0xe9f631d9
and edi, 0xe9f66e97
xor edi, ecx
neg ecx
xchg edx, esi
xchg edi, esi
add esi, edx
or ecx, 0xe9f7d765
mov edi, ecx
or ecx, 0xe9f85e33
sub esi, edx
sub edx, esi
xchg edi, edx
xchg ecx, edx
sub ecx, 0xe9f98995
jmp 0x50a9d1
push 0xe89d251f
xchg edi, ecx
mov ecx, edi
xor edi, ecx
neg ecx
mov esi, edx
mov edi, ecx
jmp 0x50ab65
push 0xe895c302
ror edx, 0x1f
or ecx, edi
and esi, edx
shl ecx, 0xc
nop
jmp 0x50acf2
pop ebx
add edx, 0xea023a2d
add edx, esi
add ecx, edi
sub edx, edi
xchg ecx, esi
not edi
jmp 0x50910f
pop ebx
xor edi, 0xea0a2bb1
sub edi, edx
and esi, ecx
mov ecx, edi
and edi, ecx
dec ecx
xor ecx, 0xea0b9f32
xchg esi, ecx
mov ecx, edx
shl edx, 0x1b
sub ecx, 0xea0c8e16
and edi, esi
jmp 0x50afe8
call ebx
sub esi, ecx
xor edx, edi
and esi, 0xea0d947f
and edx, edi
or edi, ecx
sub ecx, edx
mov ecx, esi
or edi, ecx
xor edi, ecx
not esi
xor edi, esi
xchg esi, edi
jmp 0x5095d0
call fcn.0050b5e8
add edi, ecx
dec ecx
bswap ecx
and ecx, edx
sub ecx, esi
dec edx
xchg esi, edi
xor edx, esi
not esi
jmp 0x509b9a
call ebx
and edx, esi
sub ecx, 0xea27408f
and edi, esi
sub edx, 0xea27ba9f
or edi, edx
inc edx
ror edx, 0x1a
mov edi, ecx
mov esi, 0xea28fdc9
sub edx, edi
sub ecx, edx
and esi, edx
xor ecx, 0xea29f3ca
jmp 0x5091ee
call fcn.0050b5e8
bswap ecx
inc ecx
ror ecx, 0x16
sub edx, 0xea31b783
and esi, 0xea31f4e8
or edx, edi
not edx
inc ecx
jmp 0x508609
push 0xe88ebea3
sub edi, edx
ror edi, 0x19
mov ecx, esi
neg edi
not esi
xchg ecx, edx
or edi, 0xea38c3dd
shr ecx, 8
xchg esi, edi
or ecx, edx
rol edx, 4
nop
jmp 0x50a2ad
push 0xe8a2af63
xchg edi, ecx
xor edx, edi
mov edx, edi
mov ecx, esi
xchg ecx, esi
not ecx
mov edi, esi
xor ecx, 0xea3dd0ac
sub ecx, edx
xchg edx, esi
jmp 0x50b25e
call fcn.0050b5e8
rol edi, 9
bswap ecx
add edx, 0xea442a77
add edi, edx
and esi, ecx
mov ecx, esi
ror esi, 0x14
sub edx, edi
sub edi, ecx
or esi, 0xea45d7b6
jmp 0x509975
pop ebx
and edi, ecx
or edi, edx
or edi, 0xea4a0d1b
add edi, ecx
and edi, edx
sub esi, edi
sub edi, ecx
xor edx, esi
add edx, ecx
jmp 0x50845e
push 0xe8a00a8e
neg ecx
and ecx, esi
sub edx, 0xea5ed055
add edi, 0xea5f18ef
xor edi, 0xea5f50dc
xor edi, edx
and ecx, 0xea5fc08d
or ecx, 0xea5ff76b
sub edx, esi
and ecx, esi
jmp 0x50ac3c
mov ebx, 0x73716341
rol esi, 0x12
add edi, ecx
xchg esi, edi
xchg edi, edx
mov edx, esi
bswap esi
and esi, ecx
or esi, edx
jmp 0x5086af
push 0xe8932b91
add edi, esi
rol esi, 4
neg ecx
or esi, ecx
shl edi, 0x19
not ecx
xor ecx, 0xea69573a
nop
or edx, ecx
add edx, ecx
mov esi, edx
sub ecx, edi
or esi, ecx
jmp 0x50951b
push 0xe8a37b8c
xchg edx, edi
bswap ecx
sub edx, 0xea70315f
or edi, ecx
rol edx, 3
or ecx, edx
and edx, ecx
sub edx, ecx
or edx, esi
or edx, esi
and ecx, esi
xor edx, esi
or esi, ecx
inc edi
jmp 0x50842d
mov ebx, 0x73716341
sub edx, 0xea72e6ac
neg edi
sub edi, 0xea73564f
or ecx, edi
mov edi, 0xea73c470
mov edi, ecx
or ecx, edi
sub edx, edi
add ecx, edi
bswap edx
or edi, ecx
xor esi, ecx
and esi, 0xea7584bc
mov esi, edx
shr edi, 0x1b
sub ecx, 0xea762872
jmp 0x5093ec
call fcn.0050b5e8
ror edx, 0x12
add esi, ecx
nop
mov esi, 0xea771ddd
sub edi, ecx
and esi, edx
xchg ecx, esi
xor edi, esi
or edx, edi
shr edi, 0x1b
jmp 0x50874d
push 0xe892642f
xor edi, edx
add ecx, esi
xor ecx, 0xea8a898b
xchg edi, esi
mov esi, 0xea8af873
sub esi, ecx
sub edi, ecx
xor esi, ecx
xchg ecx, edx
mov esi, edx
xor esi, edi
xor esi, 0xea8c8693
inc ecx
xchg esi, edx
add edi, edx
mov edi, esi
jmp 0x509ef0
pop ebx
xor ecx, edi
mov edi, ecx
rol edx, 0x1f
sub ecx, 0xea8e5477
mov edi, 0xea8e8cbc
mov ecx, edi
bswap ecx
add edx, edi
mov esi, edi
neg ecx
mov edi, esi
jmp 0x50b1b8
call fcn.0050b5e8
sub edi, ecx
add esi, 0xea935ca7
and esi, edx
add esi, edx
not ecx
neg esi
and esi, ecx
and esi, edx
mov ecx, 0xea94e8d1
neg ecx
jmp 0x50a4a4
push 0xe8a65ad8
mov esi, edi
xchg ecx, esi
and edi, ecx
sub esi, 0xea989d2d
not edi
sub ecx, edx
sub edx, esi
or edi, ecx
xchg edi, edx
or esi, edx
mov esi, edx
jmp 0x509763
pop ebx
and ecx, esi
shl edx, 0x10
and esi, ecx
sub ecx, 0xeaa1d71c
mov edi, esi
inc esi
xor edx, 0xeaa27e1c
and edi, esi
jmp 0x50a7ba
pop ebx
add ecx, esi
and edx, esi
mov esi, 0xeaa7bb51
mov edx, ecx
add edi, 0xeaa82942
xchg ecx, edx
and edi, edx
or esi, edi
rol ecx, 8
jmp 0x509cd7
pop ebx
xor edi, esi
mov esi, 0xeaac2b25
add ecx, 0xeaac6270
xchg ecx, edx
ror ecx, 0x16
sub edi, edx
sub edi, 0xeaad4f48
or edi, esi
sub edi, 0xeaadbf9b
jmp 0x50a9bc
push esp
xor esi, ecx
not ecx
and ecx, edi
xchg esi, edi
xor edx, ecx
xchg esi, edx
mov esi, edx
and esi, ecx
add edi, ecx
and edi, 0xeabec4b2
add esi, edx
bswap edi
rol esi, 5
xor ecx, 0xeabfa200
shl esi, 0xc
jmp 0x50b403
pop ebx
mov edx, esi
dec ecx
xor esi, edi
bswap esi
nop
dec esi
mov edx, ecx
xor edi, ecx
xchg edx, ecx
ror edi, 6
xchg edx, edi
jmp 0x509a4f
call fcn.0050b5e8
add esi, edi
add ecx, 0xeac717cf
add ecx, esi
mov ecx, 0xeac785fa
neg esi
or ecx, edx
xchg edi, ecx
bswap edi
rol ecx, 0xa
add esi, ecx
jmp 0x50a544
push 0xe88e7bac
xchg edx, esi
or edx, 0xeac976e6
shr edx, 0x1b
and esi, ecx
jmp 0x508837
push 0xe8958196
mov edi, edx
sub esi, edi
bswap edi
or esi, edi
add esi, ecx
rol edx, 0x17
bswap esi
ror esi, 0xb
xor edi, ecx
xor esi, edx
dec edi
rol ecx, 0x10
add ecx, edi
jmp 0x50852d
push 0xe89f84c4
mov ecx, edi
add esi, ecx
sub edi, edx
xchg ecx, edi
and edi, esi
shl edx, 0xc
jmp 0x50a66c
push 0xe8a8bff1
and edi, ecx
shl esi, 2
shl ecx, 0xe
or edx, edi
sub edx, esi
xchg edx, esi
sub esi, 0xead81bdb
ror edi, 0x10
mov edx, esi
mov ecx, esi
jmp 0x50a4b9
pop ebx
not ecx
sub esi, edx
xor ecx, edx
xchg ecx, esi
xor esi, edx
or edx, 0xeadd77ba
or edi, ecx
and ecx, edx
xor edx, ecx
jmp 0x50a9f4
pop ebx
sub ecx, esi
sub esi, edi
bswap esi
shr ecx, 0x10
neg esi
sub ecx, edi
shr edx, 8
mov edi, ecx
jmp 0x508e66
pop ebx
mov edx, ecx
xor edi, edx
or ecx, 0xeae4f4ec
jmp 0x509cad
pop ebx
bswap edx
mov edx, esi
xor edi, esi
add edi, 0xeaecd500
jmp 0x5082a7
call ebx
sub edi, esi
sub edx, ecx
xor edx, ecx
xchg edx, esi
inc edi
mov esi, edx
neg edi
or edx, 0xeaeebc27
or ecx, edx
dec edx
sub edx, ecx
add edx, edi
bswap edx
xor ecx, edx
jmp 0x50b0a1
push 0xe898a53c
mov edi, edx
sub edi, esi
mov edx, edi
add edx, esi
jmp 0x50a4dc
push 0xe8ac7890
xor edx, ecx
neg edx
shl edx, 0x1f
sub ecx, edi
rol edx, 0xc
xchg esi, edx
and ecx, 0xeaff8cc3
jmp fcn.00509235
call fcn.0050b5e8
sub edi, edx
or edx, 0xeb001da9
mov ecx, 0xeb006a95
add esi, 0xeb00a8e0
add esi, edi
neg esi
jmp 0x50b5a1
pop ebx
xor esi, edx
xchg edi, ecx
mov edx, ecx
or ecx, 0xeb097b72
shl edx, 0x1c
xor esi, edi
xor ecx, 0xeb0a224c
bswap esi
add esi, edi
xor ecx, esi
shr edi, 2
mov esi, edi
add ecx, esi
jmp 0x5085df
mov ebx, 0x73716341
and esi, edi
dec edx
bswap edi
add ecx, 0xeb11e290
add ecx, esi
mov edi, 0xeb125d22
sub esi, 0xeb1295f3
xchg edx, edi
xchg edx, edi
shl ecx, 0xb
inc esi
jmp 0x50b0bb
call fcn.0050b5e8
or edi, edx
and edi, ecx
mov edx, edi
xor esi, edi
inc ecx
xchg edi, edx
and esi, 0xeb1acfe0
xor edx, ecx
jmp 0x5083ee
pop ebx
sub edi, ecx
mov edx, esi
ror edx, 0x17
shl esi, 0x1d
mov ecx, edx
jmp 0x50a6d5
pop ebx
sub edx, esi
mov edx, esi
add edi, ecx
xor edx, edi
shl ecx, 0x1d
dec esi
bswap ecx
xor ecx, edx
add esi, 0xeb2688da
add edi, edx
dec ecx
inc esi
sub esi, edx
not edi
sub ecx, esi
jmp 0x50a5d1
call fcn.0050b5e8
dec ecx
add edx, 0xeb285973
xchg edx, edi
add edx, esi
and ecx, esi
ror esi, 6
sub edx, edi
sub edi, edx
jmp 0x509f39
push 0xe8a69f82
and edi, edx
xchg esi, edx
add edi, 0xeb399aa0
xor edx, esi
and esi, edx
rol edi, 0x17
shl ecx, 0x15
sub edx, esi
or ecx, edx
jmp 0x508ae3
pop ebx
sub edx, esi
shr esi, 0x13
add edx, ecx
add edx, 0xeb41a0b6
and esi, edi
ror ecx, 2
sub edi, esi
mov edi, edx
jmp 0x50856a
call ebx
mov edi, edx
add ecx, 0xeb5b7e3f
xor edx, edi
inc esi
sub edx, esi
neg edi
shl ecx, 0x1e
xor ecx, 0xeb5cda60
xchg esi, edx
jmp 0x50a247
mov ebx, 0x3f4d7907
xor edi, edx
rol esi, 0x1a
xchg ecx, edx
mov edi, 0xeb60cc77
sub ecx, 0xeb610470
and edi, edx
neg ecx
neg esi
add esi, ecx
add esi, ecx
xchg ecx, edx
rol ecx, 0x11
jmp 0x50965c
pop ebx
mov edx, ecx
neg edi
and esi, edi
mov edi, ecx
mov edx, 0xeb63c249
neg esi
add esi, 0xeb6443c7
ror esi, 2
add ecx, esi
sub esi, edi
jmp 0x5091d2
pop ebx
xchg ecx, edx
add edx, esi
add edx, ecx
and edi, 0xeb6a1d37
bswap edi
xchg esi, edx
or ecx, 0xeb6ac6f5
sub ecx, 0xeb6afef7
mov esi, 0xeb6b36a5
jmp 0x509f7c
pop ebx
add esi, edi
add edx, 0xeb738628
sub edi, 0xeb73be54
dec edi
shl edi, 5
mov esi, ecx
and esi, ecx
or edx, edi
sub esi, edi
xchg edi, esi
or edx, 0xeb758672
xor edi, ecx
neg edx
sub edi, ecx
jmp 0x508ec4
call ebx
or edi, edx
not edi
or ecx, edi
or esi, edx
xchg ecx, edx
xchg esi, ecx
mov edi, ecx
xor edx, 0xeb7e5529
sub edi, 0xeb7e9d3b
xor edi, ecx
inc edx
inc ecx
xor edi, edx
sub esi, edx
sub edx, esi
and ecx, esi
jmp 0x508f0a
push 0x40
or ecx, 0xeb87d6ad
add esi, 0xeb880de2
add ecx, esi
xor edx, 0xeb888b35
mov edx, esi
add esi, ecx
or ecx, edx
xchg edx, edi
add edx, ecx
jmp 0x50a006
pop ebx
xor esi, edi
xchg ecx, edi
sub esi, edx
mov ecx, edx
xor edi, ecx
shl edx, 0x11
mov edi, 0xeb90ea6e
jmp 0x50a143
push 0xe890d487
mov esi, edi
xor esi, ecx
or edi, ecx
add edx, esi
jmp 0x50ab49
pop ebx
or ecx, esi
mov ecx, edx
and edi, 0xeb92a433
or edi, esi
shr edi, 5
sub ecx, 0xeb935948
xchg edi, esi
inc ecx
xor ecx, 0xeb940136
not ecx
inc esi
not esi
or edx, edi
jmp 0x509d2a
mov ebx, 0x4132136a
and edx, esi
or edx, edi
jmp 0x50aa1e
push 0xe892a608
add ecx, esi
and edi, ecx
and esi, edx
xchg ecx, edx
shr esi, 0xf
xor esi, 0xebb7d351
mov edi, esi
jmp 0x509f54
call ebx
mov esi, ecx
ror edx, 0x14
add edx, ecx
and ecx, edx
sub esi, 0xebb940f3
xor edi, esi
xor edi, 0xebb9afba
xchg edi, esi
sub esi, edi
and edi, esi
mov ecx, edi
xor esi, 0xebbabf18
jmp 0x509636
call ebx
or esi, 0xebbb1030
not esi
mov ecx, 0xebbb81fb
inc ecx
sub edi, ecx
and esi, edi
neg esi
jmp 0x509b02
push 0xe892e873
or edi, esi
inc ecx
shr edx, 0x1f
and esi, edx
shr edi, 0x15
shl edx, 0x12
and edi, ecx
add ecx, esi
or esi, 0xebbe84fe
sub esi, 0xebbebc23
jmp 0x508afe
pop ebx
mov edx, edi
xor ecx, edx
add esi, edx
xor esi, ecx
xor ecx, 0xebbfe69a
xor esi, ecx
xor ecx, esi
jmp 0x508d3a
push 0xe8922221
sub ecx, edi
and ecx, esi
mov edx, esi
neg ecx
xor edi, esi
shl edi, 0x16
xor esi, edx
xor edi, edx
xchg edi, ecx
add edx, 0xebc786f4
jmp 0x508d06
push 0x106e53
mov ecx, edx
xor edi, ecx
or esi, edx
and ecx, esi
and edi, edx
add edx, edi
sub ecx, edx
rol edi, 5
mov ecx, esi
rol edx, 3
jmp 0x50a167
push 0xe89f41ca
xchg ecx, edx
dec edi
inc edi
xor edx, esi
and edi, edx
and edx, ecx
ror esi, 0x1e
shl edi, 7
jmp 0x509135
push 0xe88ca257
xor esi, edi
add edx, ecx
and edx, 0xebd8b659
xchg edi, esi
xchg edx, ecx
xchg edx, ecx
shl ecx, 0x16
jmp 0x5082c5
pop ebx
and ecx, edi
xor edx, esi
rol edi, 0x17
and edx, 0xebdd6493
mov esi, edi
xchg edi, ecx
add edx, 0xebde1679
bswap esi
ror edx, 0x1f
or ecx, edx
jmp 0x50a5b2
push 0x401400
inc esi
ror edx, 5
dec edi
xor edx, 0xebdfb883
add edx, 0xebdfef6d
inc edx
xor edi, 0xebe06e0d
and edx, ecx
jmp 0x5092e6
call ebx
not edx
and edx, esi
shl esi, 1
ror edi, 0xb
or edi, edx
jmp 0x5099f4
pop ebx
xchg ecx, esi
or ecx, edx
rol edi, 0xe
sub esi, edx
mov esi, ecx
or ecx, edx
not ecx
ror ecx, 0x13
mov esi, edx
jmp 0x509257
push 0xe8a337eb
and edx, ecx
mov edi, esi
neg edx
xchg ecx, edi
and ecx, edx
sub ecx, 0xebf060d8
xor edi, esi
sub edi, edx
shr edi, 0x17
or edi, 0xebf14daf
mov edx, edi
add edx, 0xebf1b9f3
and edx, ecx
and ecx, 0xebf226de
jmp 0x508b75
call fcn.0050b5e8
ror esi, 1
ror esi, 0x12
inc esi
xor edi, esi
not edi
jmp 0x50a206
push 0xe88f0031
mov ecx, edi
sub edx, edi
shr esi, 0xc
add ecx, esi
mov edx, edi
xor edi, esi
jmp 0x508b9f
push 0xe898625d
add ecx, 0xec0f7dc1
inc ecx
bswap ecx
xor esi, 0xec102805
or esi, edi
xchg ecx, edi
mov edi, edx
mov edi, ecx
neg esi
and edx, edi
shl edx, 0x13
jmp 0x5093bc
call ebx
xchg edx, esi
bswap edi
sub ecx, edi
sub edx, edi
and edi, esi
and esi, ecx
and esi, ecx
jmp 0x50adbf
mov ebx, 0x73716341
sub esi, 0xec1712ce
rol esi, 0x10
shl esi, 0xf
ror esi, 0x19
add edi, esi
add esi, edx
or ecx, edx
mov esi, edi
and edx, ecx
jmp 0x50908d
push 0xe898e88a
or ecx, edi
shl esi, 0x11
ror edx, 1
or edi, esi
xor ecx, edx
xchg edx, ecx
sub esi, 0xec1a7e30
add edi, ecx
jmp 0x5099c9
call ebx
and ecx, 0xec2082de
shr edi, 0x19
or edi, 0xec20f285
add edx, esi
or edx, 0xec216fa6
mov ecx, 0xec21a7d6
or edx, 0xec21dfa0
add edi, edx
ror ecx, 0x12
jmp 0x5082e3
pop ebx
sub edx, esi
and ecx, edi
sub ecx, esi
add ecx, edx
neg edx
sub ecx, 0xec27b4ba
add edi, edx
sub edi, ecx
shl edx, 0x14
sub ecx, edi
jmp 0x50aedb
pop ebx
and edx, ecx
dec edx
xchg ecx, edx
xor edx, edi
and edi, ecx
bswap edx
and ecx, edi
not esi
add edx, edi
jmp 0x50b205
call fcn.0050b5e8
xor esi, 0xec2ef11c
xor edi, edx
jmp 0x50b2f1
push 0xe89fc7dd
and edx, esi
or edi, 0xec3234f1
not ecx
bswap edx
or edi, ecx
mov edi, edx
sub edi, edx
or ecx, esi
jmp 0x508a65
pop ebx
and edx, 0xec3968a7
dec edi
sub ecx, edx
inc esi
sub ecx, edi
xor ecx, edx
or esi, edi
jmp 0x50a70c
push 0xe89efd42
mov ecx, edx
mov esi, 0xec3dc9dc
or edi, esi
and esi, edi
jmp 0x50a06d
pop ebx
xor edi, ecx
neg edi
add esi, edx
xor esi, 0xec48c4e4
dec ecx
xchg edx, edi
shl ecx, 9
and esi, edi
jmp 0x5090b3
mov ebx, 0x3f4d7907
mov edi, ecx
add edi, edx
add esi, edx
sub ecx, 0xec541262
xor ecx, esi
or esi, ecx
not ecx
nop
sub edi, edx
jmp 0x50a627
pop ebx
not esi
sub edi, edx
sub edx, edi
bswap edi
sub edi, ecx
inc edi
neg edi
and ecx, edx
jmp 0x508946
push 0xe8aa9b38
and edx, ecx
add ecx, 0xec692fc5
mov esi, edi
and esi, edx
neg edi
sub esi, edx
add edx, esi
or edi, ecx
or esi, edx
shr edx, 3
jmp 0x50b60f
push 0xe8ac34bd
or edx, esi
sub edx, 0xec6b9c82
add edx, esi
xor ecx, 0xec6c1c23
add ecx, 0xec6c5351
mov esi, edi
mov ecx, 0xec6cc086
rol edi, 0xd
jmp 0x5093ce
call fcn.0050b5e8
mov ecx, 0xec6d47e7
or edx, esi
xchg edi, ecx
or edi, 0xec6ded5a
sub edi, 0xec6e26fa
not ecx
or edi, ecx
xor edx, esi
sub ecx, edi
add esi, edi
sub ecx, esi
xchg ecx, esi
and esi, 0xec6fef5b
sub esi, edi
rol ecx, 0xe
jmp 0x509009
mov ebx, 0x73716341
dec edx
mov esi, edx
inc esi
sub ecx, 0xec82af84
mov edx, esi
and esi, 0xec832bdc
jmp 0x508d8b
push 0xe89d6997
and ecx, esi
sub edi, 0xec83bfc5
xchg edx, ecx
add edi, edx
mov edi, edx
inc esi
sub edx, 0xec84d188
sub edx, esi
jmp 0x50b575
mov ebx, 0x73716341
sub esi, edi
mov edi, esi
add ecx, edi
sub esi, edx
sub ecx, esi
xchg edx, edi
mov edi, 0xec926b06
sub edi, 0xec92b42d
inc edx
sub edi, 0xec932467
xor ecx, 0xec935ce1
add ecx, 0xec939461
or ecx, 0xec93ccaa
shl edi, 3
jmp 0x5088e7
pop ebx
dec edx
sub edx, esi
or edx, 0xfbed5a29
mov edi, 0xfbed98ce
mov esi, edi
mov ecx, edi
mov edx, ecx
add esi, ecx
jmp 0x5084ba
push 0xe896068c
or edi, esi
xor ecx, 0xfbef2213
add edi, esi
xchg edx, edi
or edi, 0xfbefd50c
rol esi, 0xe
neg edi
sub edi, ecx
xor esi, edx
mov edi, ecx
add ecx, esi
sub ecx, 0xfbf18a98
xor esi, 0xfbf1c708
add esi, edi
jmp 0x50b316
pop ebx
sub esi, edi
xchg ecx, edx
sub edx, edi
jmp 0x509fe3
push 0xe8a26b46
mov ecx, 0xfc144aa2
rol esi, 0x14
add edi, esi
add esi, 0xfc14fd63
shr esi, 0x16
xor edi, ecx
neg esi
or edi, edx
sub edi, ecx
rol edi, 0xc
or ecx, 0xfc16b44e
bswap ecx
jmp 0x508880
push 0xe88c5f03
bswap edx
sub edx, edi
or edx, 0xfc234e57
mov esi, 0xfc238dae
shr esi, 0xc
shl ecx, 0x12
and ecx, esi
jmp 0x50a0f6
pop ebx
add edx, esi
mov edi, esi
xor ecx, 0xfc27b8e4
jmp 0x50a452
pop ebx
and esi, ecx
sub edx, ecx
and edi, esi
or edx, esi
sub ecx, edx
sub edi, 0xfc293329
add edi, 0xfc297029
sub esi, 0xfc29ad67
neg esi
mov edx, 0xfc2a38bc
mov edx, ecx
jmp 0x509481
pop ebx
add edx, esi
mov esi, edi
sub edi, ecx
nop
and ecx, edi
mov ecx, edi
or edx, ecx
or edi, edx
rol edi, 0x13
xchg ecx, edi
jmp 0x508517
call fcn.0050b5e8
shr edi, 7
inc edi
or edi, edx
or edi, 0xfc35e32e
not esi
sub esi, 0xfc366e3f
xor edx, 0xfc36ab00
add edx, esi
sub ecx, esi
rol edi, 0x12
jmp 0x509f0d
push 0xe8a5dd28
or edx, 0xfc46dc19
xor esi, edx
shr esi, 6
add ecx, edi
xor esi, ecx
inc ecx
and edx, ecx
add edx, 0xfc488f74
xchg esi, edx
and edi, esi
jmp 0x508dd8
pop ebx
dec esi
and edi, ecx
bswap edi
mov ecx, 0xfc4d5cf0
add ecx, edx
sub edi, esi
and esi, edx
mov edi, esi
sub ecx, 0xfc4e8478
mov ecx, edi
shl esi, 0x1d
jmp 0x5097df
push 0xe8a2f312
ror esi, 0xf
xor edx, edi
bswap edx
shr ecx, 0x1b
mov ecx, esi
not edi
and esi, 0xfc5499f1
jmp 0x50a261
call ebx
bswap esi
add esi, edi
mov edi, 0xfc5dd33b
or edi, edx
and edi, ecx
and esi, 0xfc5e96c6
xor edx, edi
rol ecx, 0x1b
add ecx, esi
or edi, esi
xchg edi, ecx
jmp 0x50aff8
push 0xe896485b
and esi, edi
xor edi, 0xfc605000
mov esi, 0xfc608de4
xor edi, 0xfc60c97e
add esi, ecx
add esi, ecx
or edi, ecx
xchg ecx, edi
neg esi
mov ecx, edx
or edx, esi
and edi, 0xfc62b893
dec esi
jmp 0x50a85f
pop ebx
xchg esi, ecx
bswap ecx
sub edx, ecx
ror edx, 4
sub esi, ecx
add ecx, edx
bswap edx
ror edx, 0xd
shl ecx, 0xc
xor esi, edx
and edx, 0xfc6f504b
jmp 0x509cc5
push esp
and esi, edx
xor esi, edi
and esi, edi
or ecx, esi
sub ecx, edx
dec edx
shl edx, 5
ror esi, 0x11
jmp 0x509c33
mov ebx, 0x73716341
and ecx, edx
add ecx, edx
jmp 0x5087d1
call ebx
add edi, ecx
mov esi, ecx
shr esi, 0x15
sub ecx, edi
or ecx, edx
not esi
jmp 0x5092d4
mov ebx, 0x73716341
mov ecx, 0xfc9878c4
sub ecx, edi
add edx, 0xfc98f52c
add edi, 0xfc992ef6
jmp 0x50a298
push 0xe88c1513
mov edx, edi
ror ecx, 0x16
sub ecx, 0xfc99f606
sub esi, ecx
xchg esi, ecx
nop
dec esi
ror esi, 1
jmp 0x50afad