Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetInputDesktop
cmp eax, 0xffffff32
jne 0x40108e
call sub.user32.dll_PostQuitMessage
call sub.user32.dll_DrawTextExW
call sub.shell32.dll_SHShellFolderView_Message
call sub.ole32.dll_HICON_UserMarshal
call sub.ole32.dll_HICON_UserMarshal
call sub.user32.dll_PostQuitMessage
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_DrawTextExW
call sub.user32.dll_DrawTextExW
call sub.user32.dll_PostQuitMessage
call sub.shell32.dll_SHShellFolderView_Message
call sub.shell32.dll_SHShellFolderView_Message
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_DrawTextExW
call sub.ole32.dll_HICON_UserMarshal
call sub.ole32.dll_HICON_UserMarshal
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_DrawTextExW
call sub.user32.dll_PostQuitMessage
call sub.ole32.dll_HICON_UserMarshal
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_DrawTextExW
call sub.user32.dll_DrawTextExW
call sub.ole32.dll_HICON_UserMarshal
call sub.user32.dll_DrawTextExW
ret
call sub.kernel32.dll_GetCommandLineA
cmp eax, 0xffffff05
jne 0x401135
call sub.ole32.dll_HICON_UserMarshal
call sub.user32.dll_DrawTextExW
call sub.shell32.dll_SHShellFolderView_Message
call sub.ole32.dll_HICON_UserMarshal
call sub.ole32.dll_HICON_UserMarshal
call sub.user32.dll_PostQuitMessage
call sub.ole32.dll_HICON_UserMarshal
call sub.shell32.dll_SHShellFolderView_Message
call sub.ole32.dll_HICON_UserMarshal
call sub.ole32.dll_HICON_UserMarshal
call sub.ole32.dll_HICON_UserMarshal
call sub.ole32.dll_HICON_UserMarshal
call sub.user32.dll_PostQuitMessage
call sub.user32.dll_PostQuitMessage
call sub.user32.dll_DrawTextExW
call sub.user32.dll_PostQuitMessage
call sub.ole32.dll_HICON_UserMarshal
call sub.user32.dll_PostQuitMessage
call sub.user32.dll_DrawTextExW
call sub.ole32.dll_HICON_UserMarshal
call sub.user32.dll_PostQuitMessage
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_PostQuitMessage
call sub.user32.dll_PostQuitMessage
call sub.shell32.dll_SHShellFolderView_Message
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_PostQuitMessage
call sub.ole32.dll_HICON_UserMarshal
call sub.user32.dll_DrawTextExW
call sub.user32.dll_DrawTextExW
ret
call sub.user32.dll_GetInputDesktop
cmp eax, 0xfffffef8
jne 0x4011aa
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_DrawTextExW
call sub.ole32.dll_HICON_UserMarshal
call sub.user32.dll_PostQuitMessage
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_DrawTextExW
call sub.user32.dll_PostQuitMessage
call sub.user32.dll_DrawTextExW
call sub.ole32.dll_HICON_UserMarshal
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_PostQuitMessage
call sub.user32.dll_DrawTextExW
call sub.user32.dll_PostQuitMessage
call sub.user32.dll_DrawTextExW
call sub.user32.dll_PostQuitMessage
call sub.ole32.dll_HICON_UserMarshal
call sub.ole32.dll_HICON_UserMarshal
call sub.ole32.dll_HICON_UserMarshal
call sub.user32.dll_DrawTextExW
call sub.shell32.dll_SHShellFolderView_Message
ret
call sub.kernel32.dll_GetCommandLineA
cmp eax, 0xffffff0c
jne 0x40121f
call sub.shell32.dll_SHShellFolderView_Message
call sub.shell32.dll_SHShellFolderView_Message
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_DrawTextExW
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_PostQuitMessage
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_DrawTextExW
call sub.shell32.dll_SHShellFolderView_Message
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_DrawTextExW
call sub.shell32.dll_SHShellFolderView_Message
call sub.user32.dll_PostQuitMessage
call sub.user32.dll_DrawTextExW
call sub.user32.dll_PostQuitMessage
call sub.ole32.dll_HICON_UserMarshal
call sub.shell32.dll_SHShellFolderView_Message
call sub.shell32.dll_SHShellFolderView_Message
call sub.shell32.dll_SHShellFolderView_Message
call sub.shell32.dll_SHShellFolderView_Message
ret
jmp 0x501969
mov edi, edx
and edx, edi
not ecx
jmp 0x504462
push 0xfe54629c
mov esi, edi
or edx, 0x120a40
or edx, esi
add ebx, esi
and esi, edi
add edi, esi
add edi, esi
xchg edx, esi
not esi
add ebx, edi
mov edx, esi
jmp 0x503e2a
pop ecx
or edx, edi
xchg ebx, edx
sub edx, esi
xor edx, edi
mov edx, 0x1548ab
or esi, edx
sub ebx, edi
sub ebx, 0x160181
sub esi, edi
sub edi, ebx
rol ebx, 0x11
rol edi, 4
or esi, edi
jmp 0x503fcd
push 0xfe43587e
mov edx, 0x177166
add edx, esi
xchg edi, esi
add edi, edx
ror ebx, 0xf
jmp 0x502ad4
mov ecx, 0x43370267
sub edi, esi
or edi, 0x18e628
xchg edi, edx
bswap edx
and ebx, 0x1a233f
add ebx, edx
bswap ebx
jmp 0x504065
call ecx
or edx, ebx
mov edi, edx
mov ebx, edx
ror ebx, 0x18
ror edx, 0xc
mov ebx, 0x2d3767
add edx, edi
and ebx, 0x2dab8b
mov ebx, esi
add ebx, edi
jmp 0x501f8c
push 0xfe47288f
or esi, ebx
add edi, edx
inc edx
xor edi, ebx
sub edi, edx
bswap esi
xchg esi, ebx
and edx, edi
mov esi, ebx
and edx, 0x3076ee
jmp 0x502f23
push 0x100569
xchg edi, esi
dec edi
or edx, 0x31490d
dec edx
shl esi, 0xb
xor edx, esi
xchg edi, edx
xchg edx, esi
mov edi, edx
jmp 0x504b76
pop ecx
shl esi, 0x15
mov esi, edi
xor edi, 0x336afe
not edx
mov edx, ebx
or esi, edx
add edi, ebx
not edi
and edx, ebx
rol ebx, 0xa
shl edi, 0x14
xchg ebx, edx
xchg esi, edx
ror edx, 0x1d
jmp 0x504b5b
push 0xfe40600c
neg edi
shr ebx, 0x17
sub esi, 0x40d49c
or edx, edi
inc edi
xor edx, ebx
add edi, edx
and edx, esi
xor edi, ebx
shl edx, 0xf
or esi, edx
sub ebx, edi
shl edi, 0x18
or esi, ebx
jmp 0x502d35
mov ecx, 0x43370267
neg ebx
xor esi, ebx
and ebx, esi
bswap ebx
and edi, esi
add edi, esi
and edx, edi
or edx, 0x463947
xor esi, edx
jmp 0x5044ce
mov ecx, 0x4132136a
xor edi, esi
neg ebx
nop
mov ebx, edi
mov edx, esi
sub edx, ebx
or ebx, esi
jmp 0x5032e2
call ecx
and esi, ebx
neg esi
ror esi, 0x15
add edi, 0x5adc7c
xchg esi, edi
and edi, 0x5b5669
xor edi, esi
mov edi, edx
mov edx, esi
sub ebx, edi
jmp 0x504fd4
push 0xfe58005e
rol edi, 8
mov edx, edi
xor edi, esi
dec esi
xor ebx, edx
add esi, edi
or ebx, edi
jmp 0x503bc5
pop ecx
sub edx, ebx
shr esi, 0xb
xor ebx, edi
neg edx
or esi, edi
xor ebx, esi
jmp 0x502f08
pop ecx
nop
sub ebx, edx
mov edi, 0x72a51f
add edx, 0x72de61
or ebx, esi
ror ebx, 5
jmp 0x502f51
mov ecx, 0x43370267
or esi, edx
or edi, ebx
xchg edx, esi
mov ebx, esi
not edi
sub edi, edx
dec edx
xor esi, 0x7d74b3
xchg esi, edi
or edx, ebx
dec ebx
rol edx, 0x17
add edi, ebx
or edx, 0x7edc1f
jmp 0x5025ea
pop ecx
shl esi, 0x1e
shl edx, 1
neg esi
and ebx, edx
add esi, 0x8342bf
sub esi, 0x837f49
shl edi, 8
jmp 0x5034d8
pop ecx
sub edi, esi
inc edi
add edx, esi
or ebx, esi
shr edx, 0xa
bswap esi
or esi, ebx
or edx, edi
and edx, edi
or edx, 0x88c9ef
jmp 0x502080
push 0xfe52716e
xor edx, esi
mov esi, edx
or edx, 0x8b10d9
xchg esi, edx
rol edx, 0x12
xchg edx, ebx
add edx, esi
mov esi, 0x8c3c79
and esi, 0x8c78fa
sub ebx, edx
not edi
jmp 0x502028
push 0xfe3fd7d8
bswap edx
dec esi
mov edi, esi
ror edx, 0x1a
sub esi, ebx
xchg edx, esi
or ebx, 0x96d996
or edi, esi
not edi
sub edx, edi
jmp 0x504577
call fcn.00505297
not esi
sub edx, edi
mov esi, ebx
mov esi, 0xa0fa74
xor edx, esi
and esi, 0xa170d7
sub edi, edx
sub edi, esi
mov ebx, 0xa229a8
shl esi, 1
mov ebx, edx
and edx, 0xa2d7eb
sub edx, ebx
or esi, edi
sub edi, ebx
xchg ebx, edx
jmp 0x502845
call fcn.00505297
dec ebx
and ebx, 0xaa2694
shl edi, 0x10
jmp 0x5045ed
push 0xfe4ce699
shl ebx, 0xb
rol ebx, 0xb
xor edi, edx
nop
xchg edi, esi
or edi, ebx
or edi, 0xb523fe
add esi, ebx
add esi, 0xb598cc
jmp 0x503707
call ecx
sub ebx, edx
or ebx, edi
and edx, edi
mov edx, edi
xor edi, ebx
and edi, edx
add edi, 0xc0c091
add esi, edx
add esi, ebx
jmp 0x501efc
pop ecx
and edx, 0xc18521
add ebx, edi
mov edi, 0xc1faad
sub ebx, 0xc2395d
xchg esi, ebx
or ebx, edx
dec edx
or edx, ebx
mov ebx, esi
mov esi, edi
inc edi
xchg esi, edx
add ebx, edi
jmp 0x50337d
pop ecx
xchg edx, ebx
or edi, edx
shl edx, 0x12
xor edx, ebx
rol edi, 0x16
jmp 0x5036ac
call ecx
and esi, edx
xchg edi, esi
mov edi, esi
rol edi, 2
bswap ebx
or edi, esi
jmp 0x502459
pop ecx
and ebx, 0xdd71cc
xchg edi, edx
mov edi, ebx
xor edi, 0xde2206
and esi, edx
mov ebx, esi
shr edi, 0xb
xor edi, edx
inc esi
xor ebx, 0xdf950f
xchg edi, edx
jmp 0x502430
call fcn.00505297
mov edi, 0xe02539
not edx
rol edx, 2
xor edx, 0xe107e1
and edi, 0xe15060
xor edi, edx
sub ebx, esi
add ebx, edx
nop
add esi, 0xe289b4
and edx, edi
and esi, edi
add edi, edx
jmp 0x502413
call ecx
shr ebx, 0x1a
neg edx
bswap edx
bswap esi
xor edi, 0xef3ec1
not edx
mov edx, esi
add esi, edi
or esi, edx
shr edx, 9
xor esi, edx
ror edi, 0xf
jmp 0x504593
pop ecx
xor esi, edx
sub edx, 0xfa2919
mov esi, edx
jmp 0x504985
call ecx
xchg esi, edi
neg ebx
nop
inc esi
and edx, esi
xor ebx, 0x1005f3e
xor esi, edx
ror edx, 0x12
or ebx, esi
and esi, edi
mov esi, edi
shr ebx, 6
xchg edi, esi
xchg ebx, edx
mov edi, ebx
jmp 0x504ff8
call ecx
rol edx, 0xe
or ebx, esi
sub ebx, 0x10d13f4
shl edx, 0xd
shr edi, 0xb
xchg esi, edi
xchg ebx, edi
xor esi, ebx
xchg edi, edx
jmp 0x503ee1
pop ecx
add edx, 0x111a063
shr edx, 3
shl edi, 5
sub ebx, esi
sub edi, 0x1129eaf
shr edx, 0x18
inc edi
xchg ebx, edi
xor ebx, edi
and edi, edx
bswap edx
jmp 0x50275b
call ecx
xchg ebx, edi
add edx, edi
xor edx, esi
xor esi, ebx
xor edx, esi
xchg ebx, edx
mov edi, edx
ror ebx, 0x11
or edx, esi
jmp 0x502c9b
push 0xfe49129c
not edi
and edi, ebx
and esi, edi
rol ebx, 0x18
or edx, edi
xor ebx, edi
shr edx, 0x12
mov edi, 0x12c26ce
xor edi, ebx
xor ebx, edi
sub edi, 0x12cd470
jmp 0x503a1e
mov ecx, 0x40495727
and edi, ebx
xchg ebx, esi
sub ebx, edi
xor edi, edx
and ebx, esi
neg ebx
ror ebx, 0xf
add esi, 0x13a1fa1
or ebx, edi
add edx, esi
dec edi
add edi, esi
dec esi
jmp 0x502e05
push 0xfe439e70
or edx, ebx
and esi, edi
shl edx, 0x1a
shl edi, 0x12
xchg edx, ebx
xor esi, ebx
sub ebx, edi
and esi, edx
jmp 0x5031c5
pop ecx
or edx, esi
sub edx, esi
and edx, 0x14d96fc
shr esi, 6
or ebx, edx
add edi, edx
and esi, 0x14e7f30
xor ebx, 0x14ec27e
xchg edx, esi
xor esi, edi
sub edi, edx
add esi, ebx
jmp 0x504159
push 0xfe49e4a0
sub edi, edx
add esi, edi
or esi, ebx
bswap esi
xchg esi, edx
shl edx, 2
or edx, 0x151d35d
mov edx, ebx
mov ebx, esi
or ebx, edi
and esi, edx
jmp 0x504da2
push 0xfe5a3f4f
add ebx, edx
add edx, 0x1533c43
or esi, ebx
mov edi, ebx
xor esi, edi
shr edi, 4
sub edx, edi
add edi, edx
sub ebx, edx
sub ebx, esi
or edi, esi
sub edi, edx
jmp 0x503f47
pop ecx
neg ebx
add esi, ebx
or edi, esi
rol ebx, 0x1e
xchg edi, esi
mov edi, ebx
or esi, edx
jmp 0x502f70
mov ecx, 0x40495727
not edx
xor edi, 0x161514d
mov esi, edx
add esi, edi
not edx
jmp 0x502244
mov ecx, 0x43370267
add edi, edx
xor ebx, 0x1648403
xor ebx, edi
not edi
dec ebx
xchg ebx, esi
add ebx, esi
xor edi, ebx
mov edx, esi
jmp 0x503496
push 0xfe3b834f
sub edi, 0x16df19f
xchg ebx, edi
sub edi, ebx
or edi, edx
xor edx, 0x16ee016
xor edi, 0x16f1cad
jmp 0x501a87
call fcn.00505297
xor edi, esi
and edx, 0x171e880
xor edx, edi
bswap esi
or ebx, edx
ror esi, 0x1b
neg edi
mov edx, edi
rol edx, 0xc
and esi, edi
xchg edx, ebx
jmp 0x5026b8
push 0xfe50c6c2
sub esi, edx
mov esi, 0x17804df
sub edi, edx
xchg esi, edx
or edi, ebx
or ebx, 0x178f74b
xchg edi, ebx
sub edx, 0x1796dc0
shl edi, 0xb
or edi, ebx
add edx, esi
mov ebx, edi
jmp 0x502aad
pop ecx
shr ebx, 0xc
rol edi, 0x12
or edx, ebx
xor ebx, 0x18397ee
bswap ebx
shl esi, 0x19
xchg edi, edx
jmp 0x505124
mov ecx, 0x43370267
add esi, edi
and ebx, esi
inc esi
xor edi, edx
sub edx, ebx
xchg edx, edi
shl edi, 0x1c
shr edx, 0x15
mov esi, 0x1867cf9
mov ebx, edx
mov edx, edi
shl edx, 7
xchg esi, edi
bswap esi
ror edi, 0x1d
jmp 0x504abc
pop ecx
sub edx, ebx
xor esi, edx
add edi, edx
xor edx, edi
bswap ebx
not esi
mov esi, edi
mov esi, edx
and ebx, edx
and ebx, 0x18a5b91
dec ebx
jmp 0x503d6b
pop ecx
bswap edx
sub edx, 0x18b2183
xor ebx, esi
xchg esi, ebx
add edx, esi
sub ebx, 0x18c11c1
jmp 0x502be3
call fcn.00505297
add edi, esi
sub ebx, edi
or ebx, edi
and edi, esi
not ebx
sub esi, edx
sub ebx, 0x18db4c8
xchg edx, ebx
or esi, 0x18e3472
bswap edi
jmp 0x501bb0
push 0xfe46e2b1
inc ebx
or esi, 0x18efc61
or ebx, esi
and esi, edi
sub edx, ebx
or edx, 0x18fef16
jmp 0x501bd4
push 0xfe522835
sub edx, ebx
rol edx, 0x12
xor edx, 0x190b75e
ror esi, 0x15
xchg edi, ebx
and edi, esi
mov esi, ebx
inc ebx
or edi, 0x1924007
mov edi, ebx
or esi, ebx
jmp 0x5020f2
pop ecx
mov edi, 0x19e2ea0
inc ebx
or edx, edi
xor ebx, esi
add edx, 0x19f22f0
jmp 0x50344f
push 0xfe59ae2d
sub edx, 0x1a7cbda
add ebx, edi
ror ebx, 0x1f
mov ebx, 0x1a8826e
mov esi, edi
jmp 0x5033d1
push 0xfe43e44d
xor edi, esi
add edi, edx
or edx, ebx
add edi, ebx
xor esi, ebx
xchg edx, esi
and esi, edx
xchg esi, edi
jmp 0x50367a
call fcn.00505297
sub esi, 0x1c884fb
mov edi, ebx
sub esi, edx
mov ebx, edx
or ebx, esi
xchg ebx, esi
and ebx, esi
neg ebx
and esi, edi
sub edi, ebx
ror esi, 0xc
jmp 0x5048d2
pop ecx
sub esi, edx
dec edi
not esi
inc edi
neg ebx
bswap ebx
bswap edi
add edx, 0x1d12b26
add esi, edi
sub ebx, esi
jmp 0x501db4
pop ecx
or esi, edx
dec edi
mov esi, 0x1d47421
sub edi, esi
add esi, 0x1d4ebe4
add edx, ebx
dec esi
mov edx, ebx
jmp 0x5050a4
push 0xfe59f6bd
mov ebx, 0x1d9daee
mov ebx, 0x1da17ce
nop
sub ebx, 0x1da99df
add edi, 0x1dad379
rol ebx, 4
mov edi, ebx
mov edx, 0x1db8000
add edi, esi
not edi
sub edi, ebx
jmp 0x502c33
pop ecx
or esi, 0x1e1dd91
xchg ebx, edx
xor edi, 0x1e25d45
mov edx, 0x1e29647
and edx, edi
and ebx, 0x1e30acc
add edx, edi
or edx, esi
xchg edi, edx
jmp 0x50288d
pop ecx
rol edx, 0xa
and edx, ebx
add esi, ebx
mov esi, edx
inc esi
xchg ebx, edi
inc edx
mov ebx, esi
add ebx, edi
dec edx
xchg ebx, esi
or edx, esi
or edi, ebx
neg edi
jmp 0x503c05
call fcn.00505297
neg edi
dec edi
or ebx, 0x1e7c30c
add esi, edx
add esi, edi
xor edx, ebx
mov edx, edi
nop
xor edx, 0x1e92412
xor edi, ebx
and edx, edi
add ebx, edi
shl esi, 0xc
mov edi, edx
jmp 0x504445
pop ecx
inc edx
bswap esi
mov edi, esi
shl edi, 0xd
shr ebx, 0x1d
xchg edi, esi
sub edx, esi
jmp 0x504aff
pop ecx
nop
shr ebx, 0x1a
and edi, 0x1ecfae5
mov edi, 0x1ed37eb
and edx, 0x1ed702c
inc edx
shl ebx, 0xc
or ebx, edx
jmp 0x502360
mov ecx, 0x40495727
and edi, 0x1f48b74
shr esi, 0x1d
and edi, esi
mov edx, ebx
sub edx, edi
bswap edi
xor edi, esi
add esi, edi
xchg edx, ebx
dec esi
jmp 0x502f8a
mov ecx, 0x43370267
xchg edx, edi
xchg esi, ebx
neg edx
nop
or esi, edx
xchg esi, ebx
jmp 0x504e81
push 0xfe5539fe
mov edi, 0x207193d
shl esi, 9
xor edx, edi
and edx, edi
or edx, 0x20844ea
shr ebx, 3
sub esi, ebx
or esi, ebx
add esi, ebx
shr ebx, 0x15
jmp 0x501d13
push 0xfe442a0d
ror ebx, 8
ror ebx, 0x16
sub esi, 0x20a3d1e
sub edi, 0x20a7bba
or ebx, esi
and edi, 0x20af07e
and ebx, 0x20b2fb0
and edx, 0x20b756f
or edi, edx
jmp 0x5045a4
pop ecx
sub edi, edx
or edx, 0x20c3b0e
not ebx
dec edx
dec ebx
xor ebx, edi
ror edx, 2
dec edi
or ebx, esi
or edi, ebx
jmp 0x504d56
push 0xfe3daa11
or ebx, 0x20e7867
and esi, ebx
mov edi, edx
add edx, 0x20f2bb7
or edi, 0x20f6609
neg edi
xchg ebx, edx
xor esi, edi
xor esi, ebx
add edi, 0x210cd1d
rol edx, 7
not esi
and ebx, edi
xor edx, esi
and edi, 0x211fb50
or edi, edx
jmp 0x505010
mov ecx, 0x40495727
xchg esi, edx
mov ebx, 0x212c49c
xor edi, esi
not ebx
jmp 0x504fe4
push 0xfe495896
add edi, 0x253e4e6
xchg ebx, edx
inc edi
inc esi
xchg edx, edi
sub edx, esi
or edi, esi
xor edi, ebx
add edx, ebx
jmp 0x503b2f
call fcn.00505297
and esi, edx
mov ebx, edx
or ebx, esi
and esi, edx
xchg edi, edx
xor edi, ebx
shr edx, 8
xor edi, esi
sub ebx, edx
bswap edi
bswap ebx
jmp 0x504135
push 0xfe499ea7
dec esi
sub edx, 0x2692b45
add edx, 0x2696751
or esi, 0x269a2b2
and ebx, 0x269def6
add ebx, esi
xor ebx, esi
xor edi, edx
sub esi, edi
add ebx, edx
not esi
jmp 0x502c0e
mov ecx, 0x43370267
mov ebx, edx
rol edi, 0x16
xor ebx, edx
and esi, edx
xor esi, edx
and edx, 0x272a314
jmp 0x503ff9
pop ecx
dec esi
and ebx, edx
mov ebx, edi
xchg edx, esi
and esi, ebx
add ebx, 0x276539e
mov esi, edx
jmp 0x5029e8
pop ecx
not edx
bswap ebx
and edi, edx
xor edx, ebx
mov edx, ebx
and edi, esi
and ebx, esi
inc edx
xchg edi, esi
sub esi, ebx
mov edx, edi
shr esi, 0x16
sub esi, 0x292ee44
shl edx, 0x1a
and edi, edx
jmp 0x5021a1
call ecx
sub esi, ebx
xor edx, esi
mov edi, edx
add edi, edx
xor ebx, 0x296d71d
or esi, 0x2971077
or ebx, edi
sub edx, edi
inc edi
jmp 0x503343
push 0xfe54abd8
not ebx
dec esi
and edx, 0x29ecf88
mov edi, edx
or ebx, edx
mov edx, edi
shr edi, 0x1f
or edx, 0x29fea56
mov esi, ebx
mov edi, edx
or ebx, edi
add esi, edx
xchg esi, edi
bswap ebx
or edx, ebx
jmp 0x503e7b
push 0xfe54f0b1
ror esi, 2
or ebx, edi
add edx, 0x2a4a70c
and ebx, edi
jmp 0x503652
push 0xfe395b9c
mov ebx, 0x2a5356d
add esi, edx
and edx, ebx
mov esi, edi
bswap edi
xchg esi, ebx
ror edx, 0x16
xor ebx, esi
xor edi, 0x2a70d4c
not edx
jmp 0x5035e8
push 0xfe3b3f01
xor esi, ebx
neg edx
xor esi, edi
and edx, esi
and edx, edi
and edi, edx
bswap edx
add edi, 0x2a97843
xor ebx, 0x2a9b4b9
xchg edx, ebx
inc ebx
or edx, edi
jmp 0x502dba
pop ecx
mov edi, esi
or edi, ebx
mov edx, ebx
or edx, esi
xor esi, 0x2aba06e
jmp 0x504631
push 0xfe5a87fb
inc edx
mov ebx, 0x2b18a24
add edi, esi
sub ebx, 0x2b1ff72
xchg edx, ebx
or ebx, 0x2b27c66
xor esi, 0x2b2b80e
add esi, ebx
add ebx, edx
xchg esi, edx
add esi, edi
jmp 0x50427b
pop ecx
or ebx, 0x2ba3079
shr ebx, 0x1a
mov edx, edi
dec edx
mov edx, edi
add edx, 0x2bb9d56
and edx, 0x2bbd660
shl edx, 0x12
rol ebx, 5
add esi, 0x2bc8b25
jmp 0x5020c4
call fcn.00505297
mov esi, ebx
add ebx, edi
xor edi, esi
or edi, ebx
and edi, ebx
xor ebx, edi
sub esi, edi
jmp 0x504bfb
push 0x40
mov edi, ebx
mov edx, ebx
and edx, 0x2c2b704
not edx
sub ebx, edi
or ebx, esi
add edx, ebx
mov edi, edx
add esi, edi
xchg edi, edx
and edx, edi
add edi, esi
jmp 0x501bf5
call fcn.00505297
xchg ebx, esi
sub esi, ebx
xor esi, 0x2c5ba18
and edx, edi
sub ebx, edi
xor esi, ebx
and esi, edi
xor ebx, esi
jmp 0x50292f
call ecx
sub esi, ebx
add edx, 0x2c76dd7
xor esi, ebx
mov edi, edx
and edi, esi
or edi, ebx
shl ebx, 0xe
jmp 0x505055
call ecx
mov ebx, edi
xor edx, esi
and edi, 0x2d39a77
and ebx, edi
mov esi, edx
and edi, esi
dec edx
xor ebx, 0x2d4f383
and edx, edi
and edi, esi
mov ebx, esi
jmp 0x501a46
push 0xfe3d67a0
rol ebx, 0xb
and edx, esi
add ebx, esi
or edx, edi
rol edx, 6
mov edi, ebx
nop
inc ebx
shl edi, 0x11
add edx, 0x2d7fdf0
shr esi, 0xf
and esi, edx
and edx, 0x2d8aa48
shl esi, 0x10
jmp 0x5036c8
push 0xfe5acfc4
not edx
inc edi
sub esi, edi
rol esi, 0x1b
add ebx, edi
xor ebx, 0x2ed7294
dec edi
xor edx, 0x2edebf9
xchg edx, ebx
neg ebx
mov edx, esi
jmp 0x502cfe
call ecx
xchg esi, edx
mov edx, edi
mov edi, 0x30c6c8e
or edx, esi
sub esi, edi
mov esi, ebx
nop
sub edx, ebx
sub edi, edx
sub edi, ebx
jmp 0x504874
push 0xfe390b07
xchg edi, ebx
sub esi, 0x30e8e1f
add edx, 0x30ecb4c
mov ebx, esi
mov esi, edx
sub ebx, edi
sub ebx, edx
neg ebx
add ebx, esi
jmp 0x503e92
call fcn.00505297
or ebx, edx
sub edi, edx
sub esi, edi
mov ebx, esi
and esi, edi
or ebx, 0x3166422
mov ebx, 0x316aa13
sub edx, 0x316e76e
neg edx
jmp 0x5027af
push 0xfe401a62
sub edx, 0x32053e8
or esi, 0x3209650
not edi
and edx, ebx
and edx, esi
jmp 0x501ce7
pop ecx
rol edi, 0x13
or ebx, edi
or ebx, edx
neg esi
mov ebx, edi
jmp 0x502fcd
mov ecx, 0x40495727
xor esi, edx
xor ebx, edi
xor ebx, 0x3237458
or esi, ebx
sub edi, ebx
shl ebx, 6
neg edi
jmp 0x5022d1
call ecx
rol edi, 0x10
sub esi, ebx
xor esi, edx
add edi, edx
or edi, 0x3295c6b
sub edi, edx
sub esi, edx
bswap edx
add ebx, edi
shr edi, 0x1e
xor edi, ebx
mov ebx, 0x32aff43
xchg edx, edi
jmp 0x50463f
pop ecx
neg esi
and ebx, edi
or edi, ebx
add esi, ebx
jmp fcn.00504617
pop ecx
xchg esi, edi
not ebx
and ebx, esi
and esi, edx
not edx
xor ebx, edi
inc edi
xor edx, edi
or esi, ebx
mov edx, esi
xchg edi, esi
sub edx, ebx
xchg esi, ebx
or edi, esi
bswap edi
jmp 0x5025c2
mov ecx, 0x40495727
or edx, 0x355f460
add esi, edx
bswap edi
and edx, esi
shr ebx, 0x16
mov edi, 0x3571c4b
xor ebx, 0x3575909
or esi, edi
jmp 0x503aad
pop ecx
and edi, ebx
not ebx
or edx, edi
neg esi
xchg edx, ebx
or edx, edi
ror esi, 1
mov ebx, 0x3598ce4
and edi, esi
and esi, edi
xchg edx, ebx
mov ebx, edi
inc edx
sub esi, ebx
and edi, ebx
jmp 0x5034c3
push esp
mov ebx, edx
and edi, ebx
shl edx, 3
nop
add esi, ebx
add edi, 0x360d41d
jmp 0x5049a4
push 0xfe57bbc7
add ebx, 0x36b60f7
xor edx, ebx
and esi, edi
or edi, esi
shr ebx, 0x15
shr edx, 0x17
and edx, edi
inc ebx
jmp 0x501ebe
push esp
add edi, 0x36d5bcd
and edi, esi
xor ebx, esi
not edx
xor esi, 0x36e75f8
or edx, 0x36eb94b
add esi, edi
dec edx
and edx, esi
or edi, 0x36fa7c3
add esi, ebx
jmp 0x50403f
call fcn.00505297
xchg esi, edi
sub edi, edx
or esi, ebx
or edx, 0x3814d8f
rol edx, 0x16
or ebx, esi
or esi, ebx
sub esi, 0x382439f
dec edi
add edi, esi
jmp 0x501e2b
pop ecx
nop
shl ebx, 0xf
xor edi, 0x3857360
xor esi, edi
xchg edi, edx
and edx, edi
add edx, ebx
jmp 0x501a6f
pop ecx
and edx, 0x38c3478
not esi
add ebx, edi
dec edi
and edi, edx
shr edi, 0x13
inc ebx
xor esi, ebx
neg edi
jmp 0x50310d
push 0x401400
and esi, edx
mov edx, 0x38ea742
xor esi, edi
not edx
rol esi, 1
mov edx, ebx
xchg ebx, edi
mov ebx, edi
jmp 0x504083
call ecx
not ebx
neg edx
xchg ebx, edi
add ebx, esi
jmp 0x501c14
push 0xfe3af8d0
xor edi, edx
shr esi, 5
shl edx, 0x12
add esi, edi
and edi, 0x3b35c39
jmp 0x503eb8
push 0xfe4a2ac5
or edx, edi
mov ebx, edx
and edx, edi
xchg edi, ebx
add edx, esi
jmp 0x50484e
call fcn.00505297
mov edi, esi
neg edi
mov edi, esi
add esi, 0x3c956dd
inc edi
sub ebx, 0x3c9d070
rol edi, 0xb
ror edi, 4
and esi, 0x3ca93bc
and esi, edi
add edx, esi
not ebx
jmp 0x5025ae
pop ecx
not edx
and edi, edx
mov esi, edi
xchg ebx, edx
sub edi, edx
jmp 0x503476
call fcn.00505297
sub esi, ebx
add esi, edi
add edx, 0x3e29858
jmp 0x503db3
pop ecx
neg ebx
add edi, edx
jmp 0x50308d
push 0xfe3df164
mov edi, 0x3e488e0
dec edi
and esi, ebx
ror esi, 0x12
sub edi, ebx
inc esi
mov edx, edi
mov ebx, esi
rol edx, 0x15
add ebx, edi
and esi, edi
jmp 0x50355b
pop ecx
or edi, 0x3e9253a
or ebx, edx
mov edx, 0x3e99a5c
xchg edx, edi
and edi, ebx
or edi, edx
mov edx, 0x3ea88ec
not edx
add esi, edx
and esi, 0x3eb495c
mov edx, ebx
add esi, edi
jmp 0x502e5d
push 0xfe469cf8
mov ebx, 0x3eef63a
bswap edi
mov edx, edi
or ebx, esi
sub edi, 0x3eff0ed
sub ebx, 0x3f02f3b
xor esi, ebx
add edi, 0x3f0d1dc
or edx, edi
dec edx
jmp 0x502fb0
push 0xfe541a6e
and esi, edi
sub edi, edx
sub ebx, 0x3f832ae
or edi, 0x3f8712d
rol edi, 0x1e
jmp 0x501a22