Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Query or enumerate registry key

Disassembly:
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff17
jne 0x401084
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
ret
call sub.kernel32.dll_GetLastError
cmp eax, 0xffffff11
jne 0x401112
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xfffffedf
jne 0x4011be
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
ret
call sub.kernel32.dll_GetLastError
cmp eax, 0xffffff35
jne 0x401238
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
call sub.user32.dll_OemToCharBuffA
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
call sub.advapi32.dll_RegEnumKeyW
ret
jmp 0x4fa9a7
mov edx, esi
and edx, esi
or edx, 0x9b3731f9
dec edx
jmp 0x4fbefd
call fcn.004fd16c
xor ecx, edi
xchg ecx, edx
rol ebx, 0x1f
mov edi, ecx
sub ebx, 0x9bbe5c95
and ebx, ecx
and edi, 0x9bbe9015
add ebx, edx
sub ecx, ebx
and ebx, ecx
neg ecx
mov edx, edi
jmp 0x4fac82
push 0x9b44d805
add ecx, 0x9bce1f5d
shl edx, 0x17
or edx, ebx
add ecx, edx
or edx, edi
xor edi, ebx
add edx, 0x9bcec317
sub edi, edx
jmp 0x4fca0a
pop esi
mov ebx, ecx
xchg ecx, edi
mov edx, ecx
mov edi, edx
xchg edi, ebx
sub ecx, edx
rol edi, 0xf
or edx, ebx
jmp 0x4fcc0d
call esi
or edi, ebx
add edx, ecx
rol ebx, 0x13
xor edi, 0x9bd15159
or ecx, ebx
mov ecx, edx
or edx, ebx
add ecx, edi
xor edi, ecx
add edi, 0x9bd1f3c9
jmp 0x4fdf57
push 0x9b3f1f47
mov ebx, edi
mov edx, ebx
sub ecx, ebx
xor edx, ebx
neg edi
rol edi, 2
jmp 0x4fde56
mov esi, 0x40495727
and edi, ebx
mov edx, ecx
xor ebx, 0x9bd6c5e5
xchg edi, edx
rol ecx, 0x15
and edi, ecx
and edi, edx
mov edi, ecx
jmp 0x4fd30a
call esi
bswap edx
neg edi
add edi, 0x9bdc59e5
or edx, edi
xor ebx, ecx
and edi, ebx
jmp 0x4fb2d6
mov esi, 0x40495727
inc edi
add ebx, edi
rol edi, 0x1f
mov ebx, ecx
xchg ecx, edi
xor edx, ecx
not ecx
or ebx, edi
jmp 0x4fb527
pop esi
add edi, ebx
inc ecx
xor ecx, edx
or edx, ebx
or edx, ebx
nop
add ebx, 0x9be4f701
inc ecx
jmp 0x4fb968
pop esi
xor edi, 0x9be53a71
mov edx, ebx
mov edi, ecx
add ebx, edi
and edi, ecx
mov edx, 0x9be5bfab
ror edi, 0x10
add edx, edi
inc ebx
shr ecx, 5
or ebx, ecx
mov edi, edx
jmp 0x4fbbc4
mov esi, 0x40495727
inc edx
xor edx, 0x9be8bfd1
xor ecx, ebx
xchg edi, ecx
xchg ebx, edi
and edx, edi
dec ebx
xor edx, ecx
neg edi
mov edi, ecx
add ebx, edi
mov ecx, 0x9be9cf53
jmp 0x4fbb4a
push 0x9b4286f5
not ecx
dec edx
xor edi, ebx
or ecx, ebx
bswap ebx
and ebx, edi
sub ecx, edi
mov ebx, ecx
inc ebx
bswap ebx
jmp 0x4fae05
pop esi
not ebx
xor edi, edx
and edi, ecx
xchg ebx, edx
shr edi, 2
bswap edx
mov edx, 0x9bf0f5c9
sub edx, ecx
jmp 0x4feb03
mov esi, 0x40495727
mov ebx, ecx
or ecx, edx
add edi, edx
and edx, 0x9bf23565
add edx, ecx
or edi, ecx
shr ecx, 8
xchg ebx, edi
bswap edi
or ebx, edx
xor ebx, edi
mov ebx, 0x9bf312e5
jmp 0x4fd062
push 0x9b414c3b
add ebx, ecx
add ecx, edx
sub edx, ebx
mov ecx, 0x9bf6137b
xor ecx, 0x9bf634d5
xor ecx, edx
mov ebx, edx
sub edi, ebx
mov ecx, edx
and ebx, edx
jmp 0x4fd5db
pop esi
mov edi, ebx
add ebx, edx
sub ecx, ebx
shl ecx, 0x17
and ecx, 0x9bf837a7
xchg ebx, edx
xchg ebx, edi
xor edx, ebx
inc ebx
or ebx, edx
ror edi, 9
xor ecx, ebx
neg ebx
not ecx
jmp 0x4fdc12
push 0x9b461200
sub ebx, edi
add ebx, edi
mov ecx, 0x9bf99023
or ebx, edi
add ebx, ecx
sub edi, ecx
xchg edx, ebx
mov edi, 0x9bfa1461
add edx, edi
or ecx, ebx
add edi, 0x9bfa6739
shl edi, 0x15
neg edx
not edi
jmp 0x4feb7a
pop esi
sub ebx, ecx
sub edx, edi
mov edi, 0x9bfb193b
mov edx, ebx
xor ebx, edx
xchg ebx, ecx
or ebx, 0x9bfb848b
add ebx, edx
add ecx, edx
xor ebx, edi
nop
xchg ecx, edx
add edi, ecx
shl edx, 0x1e
sub edi, edx
shl ecx, 0x16
jmp 0x4fb03d
push 0x9b3f006f
xor ebx, ecx
add edx, edi
xchg ebx, ecx
add edx, edi
xor ecx, edi
neg edx
rol edx, 0xb
add ecx, ebx
mov edx, edi
add ebx, ecx
jmp 0x4face0
pop esi
sub edi, ebx
inc ebx
add ecx, edi
add edx, ecx
ror edx, 0x17
mov edi, ebx
jmp 0x4fe4f4
mov esi, 0x40495727
xor edx, 0x9c07a541
inc ebx
mov edi, ebx
xchg edi, edx
jmp 0x4fe69e
push 0x9b4690b5
sub edx, 0x9c0982b7
and edi, ecx
mov ecx, 0x9c09bc43
xor edi, ebx
jmp 0x4fd526
push 0x9b3e29af
and edx, 0x9c09ff65
neg ecx
add edi, edx
bswap edi
mov edi, 0x9c0a6f9f
xchg ecx, ebx
or edx, ebx
shl ebx, 0x11
xchg ecx, edi
sub edx, 0x9c0afc03
jmp 0x4fd085
push 0x9b3d5112
sub edi, 0x9c167ef5
mov ebx, edx
not ecx
xchg ebx, edx
xor edx, 0x9c16eb37
or ecx, 0x9c170769
xor edi, 0x9c17237f
or ecx, ebx
ror edx, 0x1b
neg edx
mov ecx, edi
sub ecx, ebx
jmp 0x4fe9de
call fcn.004fd16c
bswap ecx
sub edi, edx
mov edx, ebx
xor ecx, 0x9c19a8c5
or ebx, edx
and ecx, 0x9c19f62f
or ebx, ecx
and edx, edi
mov edi, 0x9c1a5f05
neg ecx
jmp 0x4fc30b
push 0x9b43221b
xor edx, 0x9c1e45d3
or ebx, edi
bswap ecx
ror ecx, 7
xchg edx, ecx
and ecx, edi
add ecx, 0x9c1eedaf
xchg edi, ebx
or edx, ecx
mov ebx, edx
shl ebx, 8
and edx, edi
or edx, ebx
sub ebx, edi
jmp 0x4fd125
pop esi
or ebx, edx
add ebx, ecx
bswap edi
and ecx, edi
sub edx, edi
add ecx, 0x9c2280ff
xchg edi, ebx
shl edi, 0x1c
jmp 0x4fb059
push 0x9b3acd55
sub edx, ecx
or edx, edi
or edx, ecx
sub ecx, ebx
jmp 0x4fbf5f
call esi
add ebx, edx
mov ebx, 0x9c2f5655
xor ebx, ecx
xchg ebx, ecx
and edi, 0x9c2fa8ab
or edx, edi
or edx, ecx
xor ebx, ecx
xchg edx, ebx
and edx, 0x9c303223
xchg ebx, edx
or edi, 0x9c306af5
bswap edx
ror edx, 0x12
jmp 0x4faf12
pop esi
xor ebx, 0x9c3b7ee9
and ecx, edx
or ebx, edi
bswap ebx
and ecx, 0x9c3befc9
xor edi, ebx
or edi, edx
mov ecx, edi
neg ecx
sub ebx, ecx
jmp 0x4fe441
pop esi
and edx, edi
and ecx, 0x9c474ec7
rol edi, 3
not edi
not ebx
mov edi, 0x9c47c4e7
mov ecx, edx
shl edi, 0x18
jmp 0x4fac41
call esi
ror ebx, 0xf
sub edx, 0x9c49276d
dec ebx
and ebx, edx
neg edx
rol edx, 0x16
mov ecx, edi
or edi, ebx
shr ebx, 0x15
mov edx, 0x9c4a0509
jmp 0x4faefb
call fcn.004fd16c
or edi, ecx
shr ecx, 0x18
mov edi, 0x9c4b560d
add edi, ebx
rol edx, 1
shl ecx, 0x16
add edi, edx
sub ebx, edi
sub ebx, edx
add edi, ecx
and edx, edi
not edi
shr edi, 0x1e
xor ecx, 0x9c4c8313
jmp 0x4fbb0b
pop esi
and edi, edx
and edi, 0x9c4f3e51
add edx, ecx
xchg edx, ebx
xor ebx, ecx
xchg ebx, ecx
xchg ebx, edx
shr edi, 1
xor ecx, 0x9c500011
and ecx, edi
jmp 0x4fd3b3
pop esi
xchg ecx, ebx
mov ebx, ecx
not edx
ror edi, 0x18
and ecx, ebx
add ebx, 0x9c56012b
mov ecx, edx
mov edi, ebx
xor ecx, ebx
neg ebx
jmp 0x4fb4d6
push 0x9b3aae27
and edi, ebx
mov ebx, ecx
sub edx, edi
mov ecx, ebx
or edx, ebx
sub ebx, edi
jmp 0x4fb762
push 0x9b3c3d27
xor ecx, ebx
mov edx, edi
bswap ebx
neg ecx
rol ecx, 0xc
shl ebx, 9
or ecx, ebx
add edi, 0x9c6056e5
jmp 0x4fb303
pop esi
mov edi, ecx
add ebx, edi
or edx, ebx
mov ebx, ecx
sub edx, edi
xor edi, edx
inc edi
and edx, ecx
jmp 0x4febe0
push 0x9b3c1ff1
and ebx, edi
dec edx
rol edi, 0x1d
sub ecx, 0x9c65ed23
and edi, ebx
mov ecx, 0x9c6623fd
xor edi, ecx
sub ebx, edx
add ebx, ecx
xor edx, ebx
neg edi
and edi, ebx
xchg edi, ecx
shr edx, 0x1e
xchg ecx, edx
add edi, ecx
jmp 0x4fbde2
push 0x9b395c2f
and ecx, 0x9c68ef41
ror ebx, 9
add ecx, edx
shr ecx, 0xf
xor ebx, 0x9c695db5
or edx, edi
dec ecx
and edi, ebx
jmp 0x4fe06a
push 0x9b3aecd1
xchg edi, ecx
xchg ebx, edi
shl ecx, 0x12
or ecx, edi
shl ebx, 0x1f
or ecx, edx
mov ecx, edi
xor ebx, ecx
xchg edi, ebx
xor ebx, edx
xchg ebx, ecx
xchg ecx, edx
jmp 0x4fb08d
push 0x9b46515f
and edi, edx
or ebx, 0x9c72ed85
ror ecx, 0x19
mov ebx, edx
rol ebx, 0xd
add edx, 0x9c735fd9
rol ecx, 0x17
xor edi, 0x9c739749
jmp 0x4fc331
pop esi
xchg edi, ecx
or edx, 0x9c76d4a1
dec edi
add edx, ebx
xchg ecx, ebx
mov ebx, ecx
add edi, edx
and edx, 0x9c77763f
add edx, ebx
add edi, ecx
jmp 0x4fde3a
call esi
or edx, edi
mov ebx, edx
shl ebx, 7
or edi, 0x9c79c687
inc edx
add ebx, edx
add ecx, edi
xor ecx, ebx
inc edi
shl ecx, 0x16
sub ebx, 0x9c7a8813
shl edx, 0x1a
jmp 0x4fbad2
pop esi
bswap edx
neg edi
xchg edi, ecx
or edx, 0x9c7cebe3
sub edi, ebx
or edi, ecx
shr ebx, 0x1c
mov edx, 0x9c7d5cc3
jmp 0x4fd259
pop esi
and edi, edx
neg edx
or ecx, edx
or ecx, edx
sub ebx, ecx
xor edx, 0x9c7e0837
or ebx, edx
xor ebx, edi
not edi
not ebx
or edi, ebx
xor edi, ecx
or ecx, edx
add ebx, edi
jmp 0x4fda18
mov esi, 0x40495727
xor edi, ebx
sub edx, edi
xor edi, ecx
or ecx, edx
sub ebx, ecx
or edi, edx
jmp 0x4fcf77
pop esi
inc edx
xchg ecx, ebx
and edi, ecx
mov edx, edi
bswap ebx
neg ecx
rol ecx, 0x1a
shl ebx, 0x10
and edx, ecx
and ebx, 0x9c8487d5
not edi
xchg edx, ebx
and edx, 0x9c84da79
sub ecx, edi
or edx, ebx
mov ebx, ecx
jmp 0x4fcdc6
call esi
neg edx
and ebx, edx
ror edx, 0xf
xor edx, edi
or edi, edx
shr edx, 0xb
or ebx, ecx
neg edi
xchg edi, ecx
shr edx, 0x10
mov ebx, edi
and ebx, 0x9c8cd4bb
jmp 0x4fdea1
push 0x9b467003
mov ecx, edi
and ebx, edi
ror edx, 0xc
xor ebx, edx
xchg edx, edi
mov ebx, ecx
add edx, 0x9c8da0a9
xchg ebx, ecx
or edx, edi
xor edi, ebx
or ecx, ebx
inc ecx
or ecx, 0x9c8e4393
xor edi, 0x9c8e5fa1
jmp 0x4fb343
push 0x9b436027
xchg edi, edx
sub ebx, edi
mov ecx, edi
sub edi, 0x9c8ffbf5
sub ecx, edx
nop
or ebx, edi
add ebx, ecx
add ecx, edx
shr ecx, 0xd
jmp 0x4fccdf
mov esi, 0x40495727
and ebx, ecx
add ecx, edi
xchg edi, edx
mov edx, ebx
mov edi, 0x9ca445d1
add ebx, edx
jmp 0x4fd548
push 0x9b451787
xor ecx, edi
neg edx
xchg ecx, edi
mov ebx, ecx
sub edx, edi
xor edi, edx
sub ebx, ecx
add ebx, ecx
nop
or ebx, edi
jmp 0x4fe841
mov esi, 0x40495727
dec edx
and ebx, ecx
ror ecx, 0x19
shl edi, 7
mov ecx, 0x9ca74031
mov ebx, edi
jmp 0x4fde1a
call esi
mov edx, edi
xor ebx, edi
xor edx, edi
xor ecx, ebx
ror ebx, 0x14
shl edx, 2
sub ecx, 0x9ca942e1
shl edi, 0x15
sub ebx, edi
sub edi, ecx
or ecx, ebx
bswap edx
ror edx, 0x1d
xchg edi, ecx
jmp 0x4fe424
call esi
xor ebx, 0x9caff0ef
or ebx, ecx
mov edi, 0x9cb02ad1
xchg ecx, ebx
jmp 0x4fdaad
push 0x9b412d39
neg ecx
xor ecx, edi
neg edx
xchg edx, ecx
and ecx, edx
or edi, edx
jmp 0x4fb109
pop esi
neg ebx
xchg edi, ebx
and edi, 0x9cc4c5c1
xor edi, edx
shl ebx, 0x16
or ecx, edx
add edi, ecx
or ecx, edi
add ecx, ebx
or edx, edi
add edx, ebx
xor ecx, edx
mov ebx, edx
xchg edx, edi
jmp 0x4fcd7d
push 0x9b44f8af
rol edi, 0x10
mov edx, ecx
mov edi, edx
add ebx, edi
shl edi, 0x19
sub edx, 0x9cc7f423
dec ebx
xor edx, ecx
add ebx, 0x9cc84c47
add ebx, edi
xchg edi, ecx
and edx, ebx
add ebx, edx
and edi, 0x9cc8ce35
jmp 0x4fc5f0
push 0x9b410e63
neg edi
xchg edi, ecx
or edx, 0x9cd08d8b
bswap ecx
ror ecx, 0x19
shr ebx, 7
mov ecx, 0x9cd10203
or ecx, 0x9cd11e45
jmp 0x4fc8c2
pop esi
bswap ecx
and edi, ecx
mov edi, ebx
or edi, 0x9cd571df
xchg ebx, ecx
or ebx, 0x9cd5a8d5
neg edi
rol edi, 7
bswap edi
bswap ebx
and edi, ecx
and edx, 0x9cd65595
neg edx
xchg edx, ecx
jmp 0x4fdf37
push 0x9b40f0e7
mov edx, edi
add ebx, ecx
add ecx, edx
xor ebx, edi
xchg edx, ecx
shr ecx, 0xb
add edx, ecx
mov ecx, edx
jmp 0x4fcb15
push 0x9b4380cb
rol ebx, 0x1a
sub edi, ebx
xor edi, ecx
inc edx
add ebx, edi
mov ecx, 0x9cdec37d
mov ebx, edi
sub edi, edx
jmp 0x4fd874
pop esi
and ecx, edi
add edi, ecx
rol edi, 3
shl edx, 0x1f
mov ecx, edi
and ecx, edx
jmp 0x4fc098
push 0x9b44b9d3
mov edi, ebx
or edi, 0x9ce56fdb
inc ebx
xchg edi, edx
sub ebx, edx
sub ebx, edx
jmp 0x4fac1e
pop esi
ror edi, 0x10
add edx, edi
and edx, ebx
or ecx, edx
inc edx
and edx, ebx
xchg edx, ebx
and edx, 0x9ce86b63
xchg ecx, edx
or edi, 0x9ce8a203
xchg ebx, ecx
shr ebx, 0x14
jmp 0x4fbca2
pop esi
sub edi, edx
add edi, ecx
sub ebx, 0x9cf1c4e9
shl edx, 3
sub ecx, 0x9cf1fc8d
and edi, ebx
or edx, ecx
shl edx, 0x1a
not edi
shr edi, 0xc
xor edx, 0x9cf2a529
and edx, ebx
jmp 0x4fb22f
call fcn.004fd16c
shl edi, 0x1e
sub edx, 0x9cf30301
and edi, ecx
mov edx, 0x9cf33985
and ecx, edi
add edi, ecx
add ecx, ebx
mov edx, 0x9cf3a54d
xor edi, edx
xchg edx, edi
mov edi, ebx
add ebx, edx
sub edi, edx
xchg edx, ebx
jmp 0x4fc0f2
call fcn.004fd16c
xchg ecx, edi
xchg edi, ecx
add edx, edi
not ecx
or edi, ebx
xor edi, ecx
or ecx, edx
add ebx, edi
sub ecx, edx
xor edx, edi
or edi, edx
shr edx, 0x1e
jmp 0x4fe165
push 0x9b3e4701
shl ecx, 0x11
not edi
dec edi
xor edi, ecx
bswap edi
ror edi, 0x16
mov edi, ecx
rol ecx, 0x11
jmp 0x4fddcf
push 0x9b434125
sub ebx, edi
rol ecx, 0xb
add edi, 0x9d017c31
xor edx, ecx
xchg ebx, edi
and edx, edi
inc edx
and edx, ebx
and ebx, ecx
xor edi, ebx
bswap edx
and ecx, edx
jmp 0x4fc383
push 0x9b47ad7a
xor ecx, edi
or edi, ebx
shr ebx, 0x12
mov edx, 0x9d0c1719
or edx, 0x9d0c3305
xchg ecx, edi
xor edx, ebx
ror edi, 0xa
jmp 0x4fd568
push 0x9b3c0099
neg ebx
not ecx
xor ecx, ebx
rol edi, 0xb
and ebx, 0x9d10beb3
nop
jmp 0x4fbe98
call fcn.004fd16c
xchg ebx, ecx
or ebx, 0x9d1121ff
neg edi
xchg edi, ecx
bswap ebx
xchg ebx, edx
or ecx, 0x9d11b15f
bswap ecx
and ecx, ebx
dec edi
jmp fcn.004febc5
pop esi
ror edi, 0x1d
and ecx, edx
and edx, ebx
or ecx, edx
add ebx, edi
xor ebx, ecx
xchg edi, ebx
or edx, edi
sub ecx, ebx
and edx, edi
xchg edx, ecx
shr ecx, 9
jmp 0x4fe7c2
pop esi
inc ecx
xor ecx, edx
mov edx, 0x9d196c75
mov ecx, ebx
add ecx, ebx
xor ebx, edx
mov edx, edi
add ebx, ecx
jmp 0x4feab6
call fcn.004fd16c
or edi, ebx
shr ebx, 0xe
sub ecx, edx
xchg edi, ecx
or edx, 0x9d1c61eb
inc ebx
xor edx, 0x9d1c995b
or ebx, edi
or edi, ecx
shr ecx, 0xb
or ebx, ecx
mov edi, ecx
add ecx, ebx
xor ebx, ecx
bswap edx
xchg ecx, ebx
jmp 0x4fc680
mov esi, 0x40495727
sub edx, ecx
shr ecx, 4
or edi, ebx
shr ebx, 0xf
sub ecx, edx
xchg edi, ecx
xchg ecx, ebx
xor edx, ecx
ror edi, 0x1e
shr ecx, 0xc
jmp 0x4fd467
call fcn.004fd16c
xor edx, ecx
xchg ebx, edi
add ebx, edi
shl edi, 0x14
sub ecx, 0x9d236709
shl edi, 4
sub ecx, ebx
and ebx, ecx
jmp 0x4fe9a3
push 0x9b47cdad
ror edx, 0x12
xor edx, edi
bswap ecx
ror ecx, 0x1f
shr ebx, 0x15
or edx, edi
or edx, edi
xor edi, ebx
add edi, ebx
and ebx, edx
neg edx
not edi
shr edi, 0x18
xor edx, 0x9d254a33
or ebx, edi
bswap ecx
jmp 0x4fdd7a
push 0x9b416b9d
shr edi, 0x1f
xor edx, 0x9d280cdf
add edx, edi
not ecx
or edx, edi
sub ecx, edx
sub ecx, edx
rol edi, 0xe
jmp 0x4faf7a
pop esi
add ecx, 0x9d2b882b
add edi, edx
and ebx, ecx
neg ecx
rol ecx, 0x1c
shl ebx, 0xa
and edx, edi
and ebx, 0x9d2c4a75
and ebx, edi
add edx, edi
jmp 0x4fbe4e
pop esi
xchg edi, edx
rol ecx, 8
xchg ecx, edi
or edx, edi
xchg edi, ecx
not ecx
xor edi, edx
sub ebx, edx
jmp 0x4fce13
push 0x9b439e23
shl edx, 0xb
neg ebx
not ebx
shr ebx, 1
xor ebx, edx
and ebx, edx
and edi, edx
ror ecx, 0x1a
jmp 0x4fc638
push 0x9b403435
sub edx, ecx
ror edx, 4
xor ebx, ecx
and ebx, ecx
and edi, ecx
xchg ebx, edx
sub edx, edi
add edx, ecx
rol ebx, 0x16
xor edi, 0x9d3efbad
or edi, edx
mov ecx, edi
and edi, 0x9d3f4911
neg edx
jmp 0x4fc1b0
pop esi
dec ecx
xor edx, ecx
or ecx, 0x9d4272ef
xchg edx, ebx
and edi, edx
mov edi, 0x9d42c2a1
jmp 0x4fe7d8
pop esi
shl edi, 0xf
mov ecx, 0x9d4a6caf
ror edx, 1
shr ecx, 0x1d
or ebx, ecx
or ecx, 0x9d4ad91d
ror edi, 6
or ecx, 0x9d4b1673
ror edi, 6
and ecx, edx
add edi, ebx
xchg edx, ecx
jmp 0x4fb35c
pop esi
bswap ecx
or edx, ecx
or edx, ebx
or edx, ebx
xor edx, ecx
ror edi, 0x1f
and ecx, edx
add edi, ebx
xchg ebx, ecx
mov ecx, ebx
jmp 0x4fcf4a
push 0x9b3be16b
xor edx, ecx
mov ecx, edx
or edx, ebx
sub ecx, ebx
sub ebx, edi
rol ecx, 0xc
jmp 0x4fd2f0
pop esi
xor ebx, ecx
add ecx, edx
dec ecx
sub edi, edx
inc ecx
xor ecx, edx
and ecx, ebx
add edx, edi
jmp 0x4fcbae
push 0x9b47ec2d
inc ecx
sub ebx, ecx
shr edi, 0x1c
xor edx, 0x9d661f99
or ecx, 0x9d663b85
xchg ebx, edi
sub ecx, ebx
rol edx, 8
bswap edx
add ebx, 0x9d66c939
sub edx, edi
mov edi, 0x9d66ff33
or edi, 0x9d671b75
xchg edx, edi
jmp 0x4fad3b
mov esi, 0x40495727
add ecx, edi
mov edi, ecx
and ebx, 0x9d687793
nop
ror edi, 0x13
mov edi, edx
jmp 0x4fe516
call fcn.004fd16c
sub edi, ebx
or edx, 0x9d6ad549
inc ecx
dec edi
sub edi, edx
add ecx, ebx
add edx, ecx
not ebx
xor ebx, edi
sub ecx, ebx
jmp 0x4fe198
push 0x9b3bc3bb
sub edi, edx
shl ecx, 6
sub ebx, edx
rol edi, 0x12
and edx, ecx
and edi, edx
sub edi, ebx
add edx, ecx
jmp 0x4fdbce
push 0x9b3f3d19
and edx, ebx
xor ebx, ecx
xchg edx, edi
and ebx, 0x9d6d4c19
or ecx, edx
sub ebx, 0x9d6d8cf5
xor edx, ecx
add edi, ebx
xor edi, ecx
shr ebx, 0x15
jmp 0x4fc5d7
pop esi
sub edi, edx
sub ecx, edi
xchg edx, edi
xor edi, ebx
add edi, ebx
or ecx, edi
add ebx, 0x9d7075cd
add ecx, ebx
add edi, ecx
ror ecx, 0x14
xchg ebx, edi
sub ecx, ebx
and ebx, ecx
xor edi, ebx
jmp 0x4fb5c0
pop esi
xor edx, ecx
ror edi, 7
xor ebx, edi
xchg edx, ecx
shr ecx, 0x1b
or ebx, ecx
mov edi, ecx
sub ebx, 0x9d761545
xchg edx, ecx
or ebx, edi
jmp 0x4fc210
pop esi
or ebx, edx
bswap ebx
mov edi, ebx
bswap ecx
ror ebx, 0x16
shl edi, 4
or edx, ecx
xor ebx, ecx
jmp 0x4fb647
push 0x9b397c2d
add edx, ecx
rol ebx, 8
xor edi, 0x9d7fc0a7
or ecx, ebx
sub edx, ebx
mov edi, ecx
inc ecx
or edi, ecx
jmp 0x4fe868
call esi
and ebx, edx
neg edx
inc edx
bswap edx
add ebx, 0x9d80e485
add edx, 0x9d80ff3f
jmp 0x4fc16b
call esi
neg edx
rol edx, 8
add edi, edx
xchg edi, ecx
add ecx, 0x9d87cd93
bswap ecx
xor ebx, edi
mov ebx, 0x9d88240d
xor ebx, 0x9d884069
and ecx, edx
xor edx, 0x9d887697
xchg edi, edx
mov edx, ecx
mov edi, edx
jmp 0x4fc9bc
call esi
or ecx, edi
add ecx, ebx
sub ecx, edx
add ecx, edx
add edx, ecx
rol ebx, 0xf
sub edx, edi
xor edi, edx
bswap edi
or ebx, edx
jmp 0x4fb148
mov esi, 0x40495727
add edx, 0x9d8b2b15
mov edx, ecx
mov edi, edx
add ecx, edx
add ecx, edi
xor ecx, ebx
xchg edi, ecx
xor ecx, 0x9d8be641
bswap ecx
and edi, edx
jmp 0x4fe59e
pop esi
or ebx, edi
add ebx, ecx
sub edi, ecx
mov ecx, edi
mov edi, ebx
add ebx, edx
add ecx, edi
xor edi, edx
sub ebx, edx
sub ebx, ecx
and ecx, edi
inc edx
jmp 0x4fd64c
pop esi
sub ebx, edx
sub ebx, ecx
sub edx, edi
ror edi, 0x1e
xor ebx, edx
and ebx, ecx
ror ecx, 5
and ebx, edi
add edx, ecx
add edx, 0x9da05b4b
jmp 0x4fe981
pop esi
nop
add ecx, 0x9da52139
sub ebx, ecx
shr edi, 1
or edi, ecx
xor ebx, edi
xchg edx, ecx
or ecx, 0x9da5c869
xchg edx, ebx
xor edx, edi
jmp 0x4fd72b
call fcn.004fd16c
mov edi, ebx
add edi, 0x9da63e33
xchg edi, ebx
and edi, 0x9da67a41
xchg edi, edx
shl ebx, 0x19
jmp 0x4fc741
call fcn.004fd16c
rol ecx, 9
shl ebx, 0xf
and edx, edi
or edx, ebx
sub ebx, 0x9daa6b45
not edx
add edx, edi
not ecx
xor ecx, ebx
mov ebx, ecx
or edx, 0x9dab0d07
xor edx, ebx
jmp 0x4fe088
push 0x9b39b959
or edx, 0x9dacaf89
inc ecx
xor ecx, ebx
mov ecx, 0x9dad0295
mov edi, edx
xchg edi, ebx
add edx, ebx
xchg ebx, edi
mov edx, ecx
xor ecx, 0x9dada4ad
not ebx
add edx, ecx
rol ebx, 0x16
xor edi, 0x9dae12ef
jmp 0x4fe94a
call fcn.004fd16c
xor ebx, ecx
shl ebx, 0x12
rol edx, 0xa
xor ecx, edx
or ebx, edx
add ecx, 0x9db2d50b
ror edi, 0x19
xor ecx, 0x9db31213
jmp 0x4fadee
pop esi
neg edi
neg ebx
add edx, 0x9dbc2f95
xchg ebx, ecx
or ebx, edx
mov edi, edx
jmp 0x4fbdb9
pop esi
add edx, ecx
rol ebx, 0x1b
bswap edx
or ebx, ecx
add edx, ecx
sub ebx, ecx
add edx, edi
add ecx, ebx
dec ebx
xor edx, ecx
bswap ebx
ror ebx, 3
shl edi, 0x18
and edi, ecx
jmp 0x4fd413
mov esi, 0x40495727
add ecx, edx
sub edx, ebx
sub ecx, edi
ror ebx, 0x1b
mov edx, ecx
mov edi, edx
bswap edi
xor ebx, 0x9dc0fc09
dec edi
and ecx, ebx
or ebx, edx
ror edi, 0x16
jmp 0x4faa1c
push 0x9b399ba9
or edi, edx
sub edx, ecx
mov ebx, edi
sub edi, edx
add edi, ebx
sub edi, edx
add edx, 0x9dc22e03
and ebx, ecx
ror ecx, 0x17
shr ebx, 0xd
jmp 0x4fe5f6
mov esi, 0x40495727
shl ecx, 0x12
or ecx, edi
nop
inc ebx
xchg ecx, edx
sub ebx, 0x9dc9458b
inc ecx
and edx, ebx
jmp 0x4fea03
pop esi
xor ecx, ebx
neg ecx
not ecx
xchg ecx, ebx
and ebx, ecx
and edi, 0x9dcae54d
xor edi, edx
mov edx, edi
bswap ebx
neg ecx
and edx, ecx
and ebx, ecx
jmp 0x4fb1a0
call esi
mov ecx, edi
or edi, ebx
add ecx, edi
add ebx, ecx
xor edx, ebx
bswap ebx
or edx, ebx
mov ebx, ecx
jmp 0x4fd913
push 0x9b3d706b
or ecx, edi
sub ebx, edx
or edx, 0x9dcde9db
xchg edi, ebx
shl edi, 0x16
neg edx
rol edx, 2
shl ecx, 0x17
or ecx, edi
xchg edi, ebx
jmp 0x4fe1ce
call fcn.004fd16c
xchg edi, edx
sub ebx, edi
rol ecx, 0x14
xor edi, 0x9dcf22bf
or ecx, edx
mov ecx, edi
or ebx, ecx
mov edi, edx
add ecx, ebx
xor edi, ebx
add edi, ecx
xor edx, edi
jmp 0x4fb7f3
push 0x9b4016a9
mov ecx, edx
mov edx, 0x9dd47cf9
mov edi, edx
add ecx, ebx
dec ebx
xor edx, ecx
bswap ebx
and edi, ecx
and edx, 0x9dd53c1d
xor edi, ecx
jmp 0x4fd891
pop esi
and ecx, ebx
xor ecx, 0x9dd70b93
shr edi, 6
xor edx, 0x9dd743b7
mov ecx, edx
neg ebx
xchg edx, ebx
sub ecx, edx
shl edx, 7
sub ecx, 0x9dd7ebdb
jmp 0x4fb16f
push 0x9b4632df
bswap ecx
mov edi, 0x9ddaa285
add ecx, 0x9ddabd3f
or ecx, edx
add ebx, edi
shl edi, 8
bswap edi
bswap ebx
xor ebx, edx
mov edx, ebx
mov edi, ecx
add ebx, edi
sub ecx, edx
shl edx, 0x19
or edx, ebx
xchg ebx, ecx
jmp 0x4fc01e
pop esi
and ebx, edx
ror ecx, 5
mov edi, ebx
xchg edi, edx
and edi, ebx
mov edx, ecx
xor ebx, edi
xor edx, edi
or ecx, ebx
sub edx, edi
xor ecx, 0x9ddeb279
and ecx, edi
jmp 0x4fc14d