Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Install driver

Disassembly:
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xffffff0f
jne 0x40107a
call sub.kernel32.dll_FlushFileBuffers
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwTraceEvent
call sub.kernel32.dll_FlushFileBuffers
call sub.ntdll.dll_ZwLoadDriver
call sub.kernel32.dll_FlushFileBuffers
call sub.advapi32.dll_CredRenameW
call sub.kernel32.dll_FlushFileBuffers
call sub.kernel32.dll_FlushFileBuffers
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwTraceEvent
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwTraceEvent
call sub.advapi32.dll_CredRenameW
call sub.kernel32.dll_FlushFileBuffers
call sub.kernel32.dll_FlushFileBuffers
call sub.advapi32.dll_CredRenameW
call sub.kernel32.dll_FlushFileBuffers
call sub.ntdll.dll_ZwLoadDriver
call sub.advapi32.dll_CredRenameW
call sub.kernel32.dll_FlushFileBuffers
ret
call sub.user32.dll_GetFocus
cmp eax, 0xffffff2c
jne 0x401117
call sub.kernel32.dll_FlushFileBuffers
call sub.kernel32.dll_FlushFileBuffers
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwTraceEvent
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwLoadDriver
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwLoadDriver
call sub.kernel32.dll_FlushFileBuffers
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwTraceEvent
call sub.kernel32.dll_FlushFileBuffers
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwLoadDriver
call sub.kernel32.dll_FlushFileBuffers
call sub.kernel32.dll_FlushFileBuffers
call sub.ntdll.dll_ZwLoadDriver
call sub.kernel32.dll_FlushFileBuffers
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwTraceEvent
call sub.advapi32.dll_CredRenameW
call sub.kernel32.dll_FlushFileBuffers
call sub.kernel32.dll_FlushFileBuffers
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwTraceEvent
ret
call sub.kernel32.dll_GetThreadLocale
cmp eax, 0xfffffeff
jne 0x40117d
call sub.advapi32.dll_CredRenameW
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwTraceEvent
call sub.advapi32.dll_CredRenameW
call sub.advapi32.dll_CredRenameW
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwLoadDriver
call sub.kernel32.dll_FlushFileBuffers
call sub.kernel32.dll_FlushFileBuffers
call sub.ntdll.dll_ZwTraceEvent
ret
call sub.user32.dll_GetFocus
cmp eax, 0xffffff29
jne 0x401215
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwLoadDriver
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwTraceEvent
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwTraceEvent
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwLoadDriver
call sub.kernel32.dll_FlushFileBuffers
call sub.kernel32.dll_FlushFileBuffers
call sub.kernel32.dll_FlushFileBuffers
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwLoadDriver
call sub.advapi32.dll_CredRenameW
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwTraceEvent
call sub.ntdll.dll_ZwLoadDriver
call sub.kernel32.dll_FlushFileBuffers
call sub.ntdll.dll_ZwLoadDriver
call sub.ntdll.dll_ZwLoadDriver
call sub.advapi32.dll_CredRenameW
call sub.kernel32.dll_FlushFileBuffers
ret
jmp 0x4c435a
and ebx, 0x41e1263d
inc edx
add edi, edx
or edi, edx
sub edx, ebx
or edi, ebx
add edi, 0x41e3c86c
jmp 0x4c43e3
call edi
or ecx, ebx
and edx, ecx
not ecx
xor edx, 0x436234e3
jmp 0x4c6953
push 0x41ea9072
shl ebx, 0xf
xchg esi, ebx
xchg edx, ecx
or ebx, ecx
ror edx, 0x19
and edx, 0x436b0f64
jmp 0x4c49d1
pop edi
or edx, ecx
and edx, 0x436bae42
add esi, edx
or ebx, esi
mov esi, ebx
neg esi
xchg ecx, esi
mov ebx, edx
jmp 0x4c63ba
mov edi, 0x4132136a
add ecx, ebx
mov edx, esi
and ebx, edx
shl ecx, 0x12
dec esi
or esi, edx
xor edx, esi
jmp 0x4c5f27
mov edi, 0x40495727
inc esi
or ecx, esi
xor ecx, ebx
jmp 0x4c6758
pop edi
add ecx, 0x437bd7fc
xor ecx, edx
or esi, edx
xor edx, esi
xor ebx, edx
sub ebx, edx
bswap edx
or ecx, ebx
or edx, 0x437dcf59
jmp 0x4c6cdd
push 0x41f3f208
not ecx
sub ebx, esi
or esi, 0x437fd564
xor esi, edx
and edx, esi
jmp 0x4c461b
push 0x41fcdcde
sub esi, 0x4380a334
mov ecx, 0x4380e16c
sub esi, 0x43811c89
xchg ebx, esi
xchg ebx, ecx
mov esi, 0x4381e7f8
or edx, ecx
dec ecx
neg ecx
jmp 0x4c6cb8
call fcn.004c47d2
or ebx, 0x4382f82d
and ebx, edx
and edx, ecx
ror ebx, 4
mov ecx, edx
xor esi, ecx
xor edx, esi
shr ebx, 0xa
jmp 0x4c4e83
call fcn.004c47d2
xchg ecx, ebx
and edx, ecx
or esi, ecx
rol edx, 0x11
sub ecx, esi
and ebx, esi
add esi, ecx
or edx, ebx
xchg edx, ebx
xor esi, 0x43873af2
rol esi, 4
xor esi, ecx
or edx, ecx
jmp 0x4c6692
push 0x421f670c
mov ecx, edx
and ebx, esi
and ecx, ebx
xchg esi, ebx
bswap ecx
mov esi, 0x438976a0
sub edx, ecx
mov ecx, edx
xor esi, ecx
xchg ebx, edx
add ecx, 0x438ab650
xchg edx, ebx
dec ebx
or ecx, edx
mov esi, 0x438bad9d
add edx, ebx
jmp 0x4c62cc
push 0x40
mov ecx, edx
bswap edx
mov ebx, edx
add ecx, esi
mov esi, ecx
add edx, 0x438de8e4
jmp 0x4c49a0
push 0x41f4570e
and ebx, 0x43933df3
sub ecx, 0x43937806
ror esi, 0xc
or ebx, esi
neg ecx
xchg esi, ebx
or esi, ecx
jmp 0x4c5ade
call fcn.004c47d2
xor ecx, esi
sub ecx, esi
sub ebx, esi
jmp 0x4c640d
pop edi
or ecx, esi
sub edx, 0x4399b37a
dec ebx
shl ebx, 0x1a
xchg ebx, esi
add esi, ecx
or edx, ecx
shl edx, 0xa
ror ebx, 0x16
xchg edx, esi
jmp 0x4c597a
pop edi
mov esi, ecx
ror esi, 0x18
and edx, ebx
or ebx, esi
rol ebx, 0x1a
xchg ecx, esi
and ecx, 0x43aaadaa
sub ecx, edx
xor edx, 0x43ab2503
jmp 0x4c53af
pop edi
or esi, ecx
ror ecx, 0xc
shl ebx, 9
add ebx, 0x43ac330a
bswap ecx
or ebx, 0x43acbf99
and esi, edx
and edx, ebx
jmp 0x4c4a2f
call fcn.004c47d2
add ecx, esi
sub ecx, edx
mov ebx, 0x43adff99
or ebx, ecx
sub edx, 0x43ae778e
xchg ecx, esi
add ebx, esi
shl ecx, 0x15
add ecx, ebx
jmp 0x4c5657
mov edi, 0x123b2f04
or ecx, esi
and ebx, esi
add esi, ecx
jmp 0x4c4545
push 0x41f8fa1e
add edx, ecx
xor ecx, ebx
and edx, ebx
mov esi, edx
xor ecx, edx
xor ebx, esi
sub esi, edx
neg esi
xor esi, ecx
add ecx, 0x43c5b4e9
shl esi, 5
jmp 0x4c6b82
push 0x42151aa8
rol ecx, 0x10
xor edx, ebx
sub ecx, ebx
or edx, 0x43c8c6eb
and ecx, 0x43c905ec
or ebx, edx
add ebx, edx
xchg ecx, edx
xor ecx, esi
inc esi
and ecx, edx
jmp 0x4c4d98
push 0x41ee25c9
add edx, esi
xchg edx, esi
and ecx, edx
dec edx
add esi, ebx
mov esi, edx
or edx, ecx
and esi, edx
mov ebx, esi
add ebx, 0x43d071c7
and ecx, 0x43d0ae69
jmp 0x4c57f2
pop edi
add esi, edx
add ecx, ebx
xor ebx, edx
jmp 0x4c59cc
push 0xc2f5a
neg edx
or esi, ebx
sub edx, ecx
xor edx, esi
xor edx, esi
xchg esi, ecx
mov edx, ecx
mov edx, ebx
jmp 0x4c560e
push 0x41eb074a
mov esi, 0x43d59769
mov esi, ecx
xor ebx, esi
mov ecx, 0x43d64d07
add ebx, 0x43d69a64
jmp 0x4c55c5
pop edi
sub ebx, edx
mov esi, 0x43db98c9
add ecx, edx
sub esi, edx
shl ecx, 0x15
xchg ebx, ecx
or ecx, esi
and edx, esi
xor ebx, edx
add ebx, 0x43dd90a5
mov esi, ebx
jmp 0x4c4994
pop edi
or ebx, edx
mov ebx, esi
mov ecx, esi
or ecx, 0x43e94c00
not esi
and esi, ecx
xchg ecx, ebx
or ecx, ebx
xor ebx, ecx
sub edx, 0x43eacd44
jmp 0x4c6f15
push 0x4212be5e
neg edx
and ecx, edx
shr edx, 0x1e
mov edx, ebx
jmp 0x4c5955
mov edi, 0x40495727
not ebx
and ebx, 0x43f7186b
shr ecx, 0x19
sub edx, ecx
shr edx, 0x1f
shl edx, 0x11
add ebx, ecx
rol ebx, 0xa
add esi, edx
and ebx, 0x43f9edf7
sub esi, edx
jmp 0x4c6525
push 0x42268a12
neg ebx
inc edx
dec esi
jmp fcn.004c5407
call edi
mov esi, edx
xchg esi, ebx
neg edx
xor esi, ebx
add edx, esi
sub ecx, 0x4404eb4f
or edx, 0x440529dd
sub esi, 0x440566bd
or ecx, ebx
mov ecx, edx
inc ebx
mov esi, 0x44065d51
jmp 0x4c673c
push 0x421581e8
xchg esi, edx
sub ecx, esi
xor ebx, ecx
and edx, ebx
add esi, ebx
not ecx
or ebx, esi
mov edx, ecx
xor ebx, 0x441d7ca1
rol edx, 0xe
shr edx, 0x1d
jmp 0x4c6df4
pop edi
add edx, ecx
add edx, ebx
xor ebx, ecx
inc esi
xor edx, 0x4422dbee
xchg esi, ecx
mov ebx, 0x44235639
add esi, edx
shr ecx, 7
jmp 0x4c6ca9
mov edi, 0x40495727
sub edx, ebx
xchg ebx, edx
or ecx, ebx
sub edx, ebx
shl ebx, 0x1f
xchg ecx, esi
mov edx, esi
and esi, edx
mov esi, ecx
xor edx, 0x44265c4e
or esi, edx
mov ecx, edx
shl ebx, 6
mov ecx, 0x442753fb
and esi, ecx
jmp 0x4c576a
call edi
and edx, ecx
inc ecx
mov ecx, 0x442bd450
xor edx, 0x442c2210
xor esi, edx
or edx, esi
jmp 0x4c474f
call edi
neg ebx
inc ecx
or ebx, edx
sub ecx, 0x442f5bfe
add ebx, esi
and esi, edx
xor ebx, ecx
dec edx
sub ebx, edx
shl edx, 0x10
jmp 0x4c56bc
call fcn.004c47d2
and ebx, ecx
or ebx, esi
and esi, ecx
xor ecx, 0x4435704b
and edx, ecx
add edx, esi
xor esi, ebx
and esi, 0x44366c3e
or edx, 0x4436aaca
or edx, esi
xchg esi, edx
add ecx, esi
add ecx, edx
jmp 0x4c5547
push 0x4205e272
mov esi, edx
sub edx, esi
mov edx, ebx
xor edx, 0x443dff01
xchg esi, ecx
shr esi, 9
xor ebx, 0x443eb910
jmp 0x4c5048
push 0x4206b5cd
shl edx, 1
rol ecx, 0x16
mov ecx, 0x444bf4c3
xchg esi, ebx
add edx, ecx
neg esi
rol ebx, 0x1b
jmp 0x4c6316
call edi
ror ecx, 8
inc esi
add ebx, 0x4456970d
neg edx
and ebx, edx
and esi, ecx
add ebx, ecx
xor esi, edx
rol ebx, 0xd
shr edx, 0x1a
xchg ecx, edx
xchg ebx, edx
jmp 0x4c577c
push esp
xor esi, 0x4493317b
shl edx, 0x1f
or ebx, esi
add esi, ebx
xchg ebx, edx
sub esi, ecx
rol esi, 0xf
shl ebx, 4
xchg ecx, esi
or esi, edx
xor ebx, ecx
xchg edx, ecx
sub esi, ebx
jmp 0x4c45c2
call fcn.004c47d2
xor edx, ebx
rol ebx, 0x11
neg edx
add esi, 0x449be9e7
add ebx, ecx
jmp 0x4c5323
pop edi
or ecx, 0x44a3c9ab
add ebx, ecx
shl ebx, 8
or ebx, 0x44a491ba
and ebx, esi
add esi, ecx
add edx, esi
xor esi, ebx
or ecx, ebx
jmp 0x4c526a
push 0x41f391cc
add edx, ecx
xchg ebx, ecx
xor edx, ebx
mov esi, edx
inc edx
add ebx, edx
dec edx
add edx, esi
xor ecx, 0x44acb567
or edx, esi
xchg ecx, ebx
xchg edx, ebx
jmp 0x4c4504
pop edi
add esi, edx
shr edx, 0x10
sub esi, edx
dec ecx
xchg ecx, ebx
xchg ebx, edx
or ecx, 0x466bffb1
jmp 0x4c65ad
call edi
and ecx, ebx
and edx, 0x4677a023
or edx, ebx
shr ebx, 0x10
xor ecx, 0x46786774
and ecx, edx
or edx, ecx
xor edx, 0x467916c7
shl esi, 9
sub esi, 0x46799066
jmp 0x4c54af
push 0x42235e09
add edx, 0x467b45e6
and ebx, edx
mov edx, 0x467bbbcc
sub esi, ebx
dec esi
xchg ebx, esi
bswap edx
mov ebx, edx
and ebx, edx
or esi, ecx
xchg esi, ebx
add ebx, ecx
jmp 0x4c60ea
pop edi
add ecx, 0x4680c476
inc ebx
shl ecx, 0x14
sub esi, ecx
or edx, 0x4681b662
xor ecx, edx
sub edx, 0x46822eff
xor edx, 0x46827d20
xchg ecx, esi
not esi
or ebx, ecx
jmp 0x4c6f3c
push 0x420fd746
sub edx, 0x46838696
xor ecx, ebx
sub ebx, ecx
xor ecx, edx
xor edx, 0x4684774e
add edx, ecx
mov edx, esi
bswap edx
shl edx, 5
and edx, ecx
mov ebx, 0x4685e956
jmp 0x4c447c
push 0x41f89919
mov ebx, ecx
sub esi, ebx
sub ecx, ebx
mov ecx, ebx
bswap ecx
mov esi, ebx
jmp 0x4c48d9
pop edi
xor ebx, esi
sub esi, ecx
dec edx
and ebx, 0x4692f0cf
xchg edx, esi
and esi, ecx
dec edx
xor esi, ebx
xor ecx, 0x46942cd4
jmp 0x4c4445
pop edi
add edx, ebx
xor edx, 0x469a4705
ror edx, 7
xchg ebx, esi
xor ebx, ecx
inc esi
add esi, 0x469b77d6
jmp 0x4c5d47
call edi
sub esi, ecx
xor edx, 0x469dd200
add esi, ecx
xor ecx, esi
mov edx, ecx
rol ecx, 0x1d
ror edx, 1
ror ecx, 4
inc ecx
xchg ecx, ebx
jmp 0x4c4771
call edi
or ebx, edx
mov ecx, ebx
not ebx
add ebx, 0x46a2d521
neg edx
neg esi
jmp 0x4c4687
push 0x41eb6842
or ecx, ebx
xor ebx, 0x46a66d2d
or ecx, 0x46a6a82c
not esi
dec ebx
add ebx, 0x46a76099
sub esi, ebx
and ecx, edx
neg edx
mov ecx, 0x46a86026
sub edx, ebx
dec edx
jmp 0x4c581f
push 0x401400
sub ecx, edx
bswap ebx
or ebx, ecx
mov ebx, 0x46ab7051
xchg ecx, ebx
mov ebx, edx
nop
mov ebx, 0x46ac71c0
inc ecx
jmp 0x4c5c08
call edi
rol ecx, 0x18
bswap ecx
nop
sub ecx, esi
sub ebx, esi
add ebx, edx
xchg ebx, ecx
xchg edx, esi
mov ebx, 0x46b165f5
jmp 0x4c4e01
pop edi
inc ebx
xor esi, edx
mov esi, edx
shr esi, 0x10
mov ecx, ebx
sub ebx, 0x46b7b10c
jmp 0x4c4f9d
pop edi
add edx, 0x46b8075a
mov esi, ecx
bswap esi
sub ebx, 0x46b8cb39
sub esi, ecx
mov ebx, edx
jmp 0x4c4aee
call fcn.004c47d2
xor esi, ebx
add edx, 0x46c19067
jmp 0x4c4c53
pop edi
add ecx, edx
sub esi, edx
add ebx, edx
xor edx, esi
shr ebx, 0xf
and esi, 0x46c3113a
and ebx, ecx
sub edx, ebx
rol esi, 9
xor edx, ecx
shr ebx, 0x1b
jmp 0x4c67be
mov edi, 0x40495727
sub esi, ebx
neg edx
mov ebx, edx
or ebx, 0x46cb35d0
and ecx, esi
mov edx, esi
bswap ebx
or ecx, 0x46cc3308
sub ecx, esi
add ecx, ebx
add esi, ebx
mov esi, 0x46cd1ce0
jmp 0x4c68e8
mov edi, 0x123b2f04
or ecx, edx
add ecx, ebx
mov esi, ecx
and ebx, ecx
xor ebx, edx
or esi, ecx
or ecx, 0x46cfa3c3
and ecx, 0x46cfe19a
sub esi, edx
jmp 0x4c6bab
pop edi
xchg ebx, ecx
xchg ebx, esi
shl ecx, 0x13
shl edx, 0x1d
bswap ebx
sub ebx, 0x46e232c9
and ebx, ecx
not edx
ror esi, 2
dec ecx
jmp 0x4c6478
pop edi
xor ebx, edx
xor edx, esi
and ecx, esi
sub edx, 0x46e45b01
jmp 0x4c550f
mov edi, 0x40495727
add ecx, esi
xor edx, ecx
sub edx, ecx
and ebx, ecx
or edx, 0x46e5ee32
sub ebx, 0x46e62cde
xor esi, ecx
mov esi, 0x46e6bb3a
jmp 0x4c4791
push 0x41f014af
not edx
and edx, 0x46e751cc
xor ecx, esi
shr ecx, 0x10
not ebx
xchg esi, edx
xchg esi, edx
bswap edx
rol ebx, 9
inc ebx
or esi, ebx
bswap esi
bswap ecx
add edx, 0x46ea4d57
jmp 0x4c6110
push 0x41f83430
and ebx, 0x46eaa299
or ecx, esi
and ecx, 0x46eb1f5f
rol edx, 0x13
xchg ecx, esi
add edx, esi
mov ecx, ebx
xor ecx, esi
jmp 0x4c5499
pop edi
xchg ebx, ecx
or ebx, 0x46ed0955
not edx
xor ebx, ecx
mov edx, ecx
ror edx, 2
not ecx
not ebx
jmp 0x4c68d2
mov edi, 0x123b2f04
and edx, 0x470318bd
xor edx, ebx
bswap edx
bswap ecx
sub esi, 0x4704157e
add ecx, ebx
sub edx, ecx
or esi, ebx
add ecx, ebx
not ecx
rol edx, 0x19
mov ebx, edx
jmp 0x4c6b30
push esp
xor esi, ecx
mov esi, edx
or edx, esi
add edx, 0x47190a20
and ecx, esi
not ecx
sub ebx, 0x4719c551
or ecx, 0x471a1262
mov ebx, esi
mov ebx, edx
sub ebx, esi
add edx, 0x471b025c
neg edx
jmp 0x4c50f1
call edi
sub ebx, esi
not edx
and esi, 0x471c16fe
rol edx, 0x1d
bswap esi
xchg esi, edx
bswap edx
xchg ecx, esi
jmp 0x4c43ff
push 0x4222fb49
sub ebx, edx
and ebx, esi
sub esi, edx
mov ecx, 0x47227dfd
and esi, ecx
sub edx, ecx
xchg ebx, esi
add esi, 0x472371c1
add ebx, edx
shr ecx, 0x17
jmp 0x4c5365
pop edi
add ebx, 0x47262e18
mov ecx, edx
add ecx, ebx
mov esi, ecx
add ebx, 0x47271c0b
or ecx, ebx
and ecx, edx
inc edx
or edx, esi
rol esi, 0x1f
jmp 0x4c5f93
pop edi
sub ebx, 0x472bc9bb
or edx, 0x472c0606
or ebx, edx
sub esi, edx
dec ebx
xor edx, esi
not ebx
add ebx, esi
or ecx, edx
and edx, esi
add ecx, esi
xor ecx, 0x472e760d
ror ecx, 0xb
jmp 0x4c451c
call fcn.004c47d2
xor esi, ecx
xor ecx, esi
bswap ecx
ror esi, 0x19
shr ebx, 0x1b
shr edx, 0xc
or ecx, ebx
xor esi, edx
jmp 0x4c4eb9
push 0x41f7d339
bswap ebx
xor ebx, esi
and esi, ecx
or edx, esi
mov edx, 0x4734b448
neg ebx
sub esi, ebx
mov ecx, edx
sub ecx, esi
mov esi, ecx
shr ecx, 0x1a
and ebx, 0x47367067
inc esi
jmp 0x4c59a9
mov edi, 0x123b2f04
and esi, 0x473709db
inc ebx
sub ebx, 0x473799ea
rol ebx, 1
add esi, edx
sub ecx, ebx
add edx, esi
shl ecx, 0x1e
add ebx, esi
jmp 0x4c5d2a
push 0x420f2dc5
add esi, 0x4747c4a5
or edx, esi
and esi, edx
sub esi, edx
shr esi, 0x15
or edx, ebx
sub edx, ecx
mov edx, esi
or ecx, edx
add esi, ecx
jmp 0x4c53db
push 0x421e939b
or ecx, edx
sub esi, ebx
jmp 0x4c6f61
push 0x42125a7b
shr edx, 9
sub edx, 0x474b4412
xor ebx, edx
or esi, 0x474bc33f
xor ebx, edx
and edx, ecx
not ebx
ror ebx, 0x1b
or edx, esi
and esi, 0x474df169
shl edx, 8
xchg esi, edx
inc esi
xor edx, 0x474fb4fc
add esi, ecx
add ecx, esi
jmp 0x4c4b76
call fcn.004c47d2
xor ecx, edx
and edx, esi
xchg edx, esi
xor ecx, esi
mov edx, ebx
dec ebx
not ebx
xor ebx, edx
and edx, ebx
jmp 0x4c5bd8
pop edi
shr ebx, 0x1d
mov edx, ecx
or esi, 0x47620a0b
add ecx, edx
sub ecx, esi
and edx, 0x4762d5cb
rol ebx, 0x10
sub ecx, edx
mov ecx, 0x47638c1e
mov ebx, esi
mov ecx, esi
ror edx, 3
jmp 0x4c6c2c
push 0x41f32f7a
or ebx, esi
and ebx, esi
or esi, 0x47651315
sub edx, ecx
bswap ecx
shl ebx, 0x10
and esi, ecx
neg edx
xchg edx, ecx
inc edx
neg edx
xor ebx, edx
or esi, 0x47679257
jmp 0x4c5246
mov edi, 0x123b2f04
and esi, ecx
add ebx, edx
xor esi, 0x476ac16b
not edx
sub edx, ebx
or esi, 0x476b7817
mov esi, 0x476bc625
sub esi, edx
xor edx, ebx
mov ebx, edx
shl ecx, 0x1a
sub ecx, edx
shl edx, 0xe
xor ebx, ecx
jmp 0x4c4565
push 0x42190fd6
inc edx
shr edx, 0x16
shl edx, 5
sub ecx, edx
sub ecx, ebx
bswap ecx
add ecx, esi
and edx, ecx
xchg esi, edx
jmp 0x4c5e6e
push 0x4223c21f
add esi, ebx
add esi, 0x477a8273
add edx, esi
xor ebx, 0x477afdaa
shr edx, 1
and ecx, esi
add ecx, edx
or ebx, esi
and ebx, edx
dec ecx
jmp 0x4c4811
push 0x41f07948
and ebx, esi
rol ebx, 0x13
mov ebx, edx
bswap esi
add edx, esi
or esi, edx
rol ebx, 3
jmp 0x4c6dcc
pop edi
mov edx, ecx
xchg esi, ecx
sub edx, esi
shl ecx, 0x1a
xor esi, ecx
or edx, esi
add esi, 0x47870341
and ecx, 0x4787412e
xor esi, edx
sub ecx, ebx
dec ebx
sub ecx, 0x47884796
jmp 0x4c56d2
call edi
or edx, esi
shl edx, 0x10
bswap edx
xor ebx, edx
xor ebx, 0x4799ffbc
and edx, ebx
ror esi, 0x1e
jmp 0x4c51ec
mov edi, 0x123b2f04
add ecx, 0x47a0026e
xor esi, 0x47a040cc
xor ebx, esi
rol edx, 0x1b
xor ebx, 0x47a0faed
xchg ecx, esi
and esi, ebx
xchg ebx, esi
and ebx, 0x47a201d8
jmp 0x4c4f21
push 0x42078fba
xor ecx, ebx
shl esi, 0x12
and ebx, esi
or ebx, 0x47a4d98d
mov ebx, edx
shr edx, 5
xchg ebx, esi
shr ecx, 0xe
and ebx, ecx
mov edx, ecx
jmp 0x4c6cfd
push 0x42025db0
mov ecx, ebx
xchg ebx, ecx
mov esi, ecx
rol esi, 5
xchg esi, ecx
xchg edx, ebx
sub ecx, esi
and esi, 0x47b753c8
jmp 0x4c5d72
call edi
ror ebx, 0x1b
or edx, ebx
add esi, 0x47bbfae9
or ebx, esi
xor ecx, esi
jmp 0x4c6423
pop edi
mov ebx, edx
add edx, esi
or ebx, esi
dec ebx
mov ecx, 0x47bdcb94
add edx, esi
nop
xchg ecx, esi
xchg ebx, esi
and ebx, ecx
xor ebx, 0x47bf3d7a
bswap esi
jmp 0x4c6ea9
pop edi
add ebx, 0x47c36303
and edx, ecx
and ecx, ebx
sub ebx, ecx
xor ebx, esi
jmp 0x4c5943
push 0x41f2ca2f
mov esi, ecx
mov ebx, 0x47c9e38c
and edx, ebx
add ebx, 0x47ca6f58
or ecx, ebx
ror edx, 0xf
or ebx, esi
and edx, 0x47cb65a9
inc ebx
or ebx, esi
jmp 0x4c5fbf
call fcn.004c47d2
or ecx, edx
neg ebx
add edx, 0x47ce8dd7
xchg ebx, ecx
and esi, edx
neg ecx
xor esi, 0x47cf825c
inc edx
jmp 0x4c6595
call edi
xor esi, 0x47d62506
or esi, 0x47d663eb
ror ebx, 0x1d
sub ecx, esi
jmp 0x4c6198
pop edi
mov esi, ecx
inc edx
bswap ebx
xor esi, 0x47d7fd90
or ecx, edx
or ebx, edx
add edx, ebx
add ebx, edx
sub ebx, 0x47d93bb9
ror esi, 0x12
xchg edx, ecx
jmp 0x4c496d
call edi
and ecx, edx
xchg ebx, esi
xor ebx, esi
bswap edx
xor ecx, ebx
inc ecx
bswap edx
jmp 0x4c44d5
pop edi
sub ecx, esi
sub ecx, esi
shl ebx, 0x18
xor ecx, esi
bswap esi
neg edx
jmp 0x4c5e4b
pop edi
xchg ebx, edx
not edx
shr esi, 0xd
xor ebx, edx
or ecx, esi
or esi, ecx
add edx, ecx
or ecx, esi
add ebx, ecx
dec ebx
xchg ebx, esi
jmp 0x4c5c90
call fcn.004c47d2
neg edx
add ecx, ebx
xor ebx, 0x47f807ff
not ecx
and edx, ebx
neg esi
and ebx, 0x47f91164
ror ebx, 0xe
add ecx, ebx
add esi, ecx
jmp 0x4c50cc
pop edi
add ecx, 0x47fefaec
not esi
xor esi, ebx
xor esi, edx
xchg ebx, esi
add ecx, esi
bswap esi
add ecx, 0x4800bc57
and esi, 0x4800fd8b
mov ecx, edx
jmp 0x4c5e7c
pop edi
sub edx, 0x4811fa6e
and ebx, 0x4812382c
xchg edx, ebx
and ebx, edx
jmp 0x4c5c53
call fcn.004c47d2
xchg ebx, edx
sub ecx, edx
mov edx, ebx
sub ecx, ebx
xchg esi, ebx
mov ebx, edx
and ebx, ecx
sub ecx, edx
or esi, ecx
and esi, ebx
bswap ecx
xchg ecx, esi
sub ebx, esi
jmp 0x4c5582
pop edi
xchg ebx, ecx
xor ecx, 0x481c4ea5
jmp 0x4c5923
call fcn.004c47d2
and esi, edx
xchg edx, esi
inc ecx
neg ecx
not ebx
and ecx, edx
xor ecx, edx
neg esi
or ebx, 0x483e298f
mov ecx, edx
not ebx
jmp 0x4c4392
push 0x41f95f15
mov ebx, ecx
and edx, ecx
mov ebx, esi
sub ebx, edx
xor ebx, ecx
jmp 0x4c4bad
call fcn.004c47d2
or edx, ecx
add ecx, edx
xchg esi, edx
and ebx, esi
and edx, ecx
sub ecx, edx
xchg esi, edx
xor ecx, ebx
add edx, ebx
jmp 0x4c626e
push 0x4218a8e9
shr ebx, 0xc
dec esi
or ebx, 0x484e25e7
xchg ebx, ecx
or esi, 0x484ea148
inc esi
xor edx, ecx
xchg edx, esi
and ebx, esi
sub edx, 0x484fe575
mov ecx, 0x4850236e
xor esi, ecx
bswap esi
rol edx, 0x1b
jmp 0x4c60ba
pop edi
or ebx, 0x48540a27
or edx, ecx
add ebx, ecx
shr ebx, 6
bswap esi
xor esi, ecx
or ecx, ebx
mov ebx, esi
mov edx, ecx
and esi, 0x48563ca3
add ecx, ebx
jmp 0x4c6729
pop edi
inc ebx
xchg esi, ebx
xchg ecx, esi
and ecx, edx
add ebx, ecx
jmp 0x4c4912
mov edi, 0x40495727
add ecx, edx
add edx, ecx
sub edx, esi
or esi, ecx
sub esi, 0x48591bc0
xchg ecx, esi
or edx, ecx
add edx, ecx
xor esi, ebx
mov esi, 0x485a5a2c
jmp 0x4c515d
pop edi
or ecx, 0x485ab33b
inc esi
or ecx, 0x485b2ea9
and ebx, edx
ror edx, 8
shr esi, 2
ror ebx, 0x1d
add ecx, esi
jmp 0x4c6c84
push 0x4208462d
ror esi, 0xa
or edx, ebx
sub ebx, esi
and esi, edx
and ebx, 0x485dbdf0
inc edx
bswap edx
inc esi
or ebx, edx
jmp 0x4c6013
mov edi, 0x123b2f04
and ecx, edx
shl edx, 0x17
or edx, 0x486ba492
dec edx
mov ebx, edx
sub ecx, ebx
add esi, ebx
xor edx, esi
xor ecx, ebx
inc esi
add ecx, 0x486d9cef
inc ecx
jmp 0x4c465c
push 0x4215e4ef
sub ebx, 0x486e35e5
neg edx
xor esi, ecx
and esi, ebx
neg esi
xor ebx, esi
mov edx, esi
jmp 0x4c4e20
pop edi
or ebx, 0x487f7546
add esi, edx
or edx, ecx
add edx, ebx
mov edx, ebx
xor ebx, 0x48809e23
and ebx, 0x4880dc04
or esi, ebx
bswap esi
or esi, edx
ror ecx, 9
shr ebx, 0x11
jmp 0x4c64db
pop edi
xor edx, ecx
add ecx, edx
xchg esi, ecx
xchg ebx, ecx
or ebx, 0x488843c9
dec ebx
and esi, ecx
inc ecx
add ebx, 0x488949b4
mov ecx, 0x4889870a
add ecx, esi
sub ebx, esi
jmp 0x4c5cdd
pop edi
and ebx, 0x488acf2e
mov esi, ebx
mov edx, ecx
xor edx, ecx
add ebx, esi
sub ebx, edx
add ecx, ebx
dec esi
ror ebx, 0x16
and ecx, edx
and esi, edx
xor ebx, ecx
mov edx, ebx
dec ecx
jmp 0x4c4bd9
push 0x421f00d4
add edx, ecx
add edx, 0x488e6889
mov edx, ecx
dec ecx
not edx
not esi
add ecx, 0x488fa63f
xchg ecx, ebx
ror ebx, 0x12
jmp 0x4c458f