Function at 0x401000
Capabilities:
Encrypt data using chaskey
Write file on windows

Disassembly:
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xffffff27
jne 0x401061
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwSuspendProcess
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwSuspendProcess
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwSuspendProcess
call sub.kernel32.dll_WriteFileEx
call sub.user32.dll_CascadeWindows
ret
call sub.user32.dll_GetCaretBlinkTime
cmp eax, 0xfffffed9
jne 0x4010e5
call sub.ntdll.dll_ZwSuspendProcess
call sub.kernel32.dll_WriteFileEx
call sub.ntdll.dll_ZwSuspendProcess
call sub.kernel32.dll_WriteFileEx
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwSuspendProcess
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.kernel32.dll_WriteFileEx
call sub.ntdll.dll_ZwSuspendProcess
call sub.user32.dll_CascadeWindows
call sub.kernel32.dll_WriteFileEx
call sub.ntdll.dll_ZwSuspendProcess
call sub.kernel32.dll_WriteFileEx
call sub.user32.dll_CascadeWindows
call sub.kernel32.dll_WriteFileEx
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwSuspendProcess
call sub.user32.dll_CascadeWindows
ret
call sub.user32.dll_GetCaretBlinkTime
cmp eax, 0xffffff30
jne 0x401169
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.kernel32.dll_WriteFileEx
call sub.ntdll.dll_ZwSuspendProcess
call sub.user32.dll_CascadeWindows
call sub.kernel32.dll_WriteFileEx
call sub.ntdll.dll_ZwSuspendProcess
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.user32.dll_CascadeWindows
call sub.kernel32.dll_WriteFileEx
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.kernel32.dll_WriteFileEx
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.ntdll.dll_ZwSuspendProcess
call sub.kernel32.dll_WriteFileEx
call sub.user32.dll_CascadeWindows
ret
call sub.kernel32.dll_GetLastError
cmp eax, 0xfffffef9
jne 0x401201
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.kernel32.dll_WriteFileEx
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwSuspendProcess
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwSuspendProcess
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwSuspendProcess
call sub.kernel32.dll_WriteFileEx
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwSuspendProcess
call sub.ntdll.dll_ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
call sub.user32.dll_CascadeWindows
call sub.ntdll.dll_ZwSuspendProcess
ret
jmp 0x541caf
or edx, esi
and ebx, esi
or esi, edx
add ebx, 0xb08236d
neg esi
xchg ebx, ecx
xchg ecx, ebx
or edx, esi
jmp 0x541e65
push esp
bswap edi
xchg esi, ecx
not edi
and esi, 0x2c319917
ror edi, 0xb
and ebx, edi
add ecx, ebx
sub ebx, 0x2c3dcb83
xor ecx, edi
jmp 0x544338
call edx
ror edi, 7
xchg ebx, edi
ror ebx, 7
rol ebx, 0x17
mov edi, ebx
ror ebx, 2
xchg esi, edi
jmp 0x54356e
call fcn.0054476c
add ebx, ecx
xor ecx, esi
add esi, 0x2d3b2566
xor esi, edi
xchg edi, esi
xor esi, 0x2d41261d
and esi, edi
dec ebx
xor ecx, 0x2d474f2d
jmp 0x542154
call edx
or edi, ecx
shl ecx, 0x1b
mov edi, ecx
mov ecx, esi
mov edi, 0x2d597305
add edi, ecx
or esi, ecx
jmp 0x5430bb
push 0xb274d5e
sub ecx, esi
or edi, ebx
or esi, ebx
mov esi, 0x2d64dead
sub edi, ebx
sub edi, ebx
xor ebx, edi
and ecx, edi
and ecx, edi
sub ecx, esi
sub esi, ecx
jmp 0x54489b
call edx
or ebx, esi
sub esi, ebx
xor ecx, edi
mov ecx, ebx
inc esi
xchg esi, edi
xor edi, esi
sub esi, ebx
xchg ecx, ebx
mov edi, ebx
shl edi, 6
add esi, edi
mov edi, ecx
shl esi, 9
or edi, ecx
ror edi, 0x1a
jmp 0x5429db
push 0xb322ceb
and ebx, esi
add esi, 0x2e762f38
sub ebx, 0x2e785d23
shl ecx, 3
add ebx, ecx
sub ebx, edi
jmp 0x54201f
push 0xb33b528
mov ebx, 0x2e91c2cc
shr ecx, 0x16
add esi, 0x2e95d354
mov ecx, esi
xor ebx, 0x2e9ba754
shr edi, 0xc
inc esi
sub esi, 0x2ea39ec4
mov ecx, esi
mov ecx, 0x2ea98a4c
or esi, edi
jmp 0x54217b
pop edx
sub esi, 0x2eaded0b
add esi, edi
shl ecx, 0x17
inc edi
or edi, ecx
sub edi, esi
shl ebx, 0x18
mov edi, 0x2ebc29b6
and edi, 0x2ef2874b
bswap ebx
sub edi, esi
add ebx, edi
jmp 0x5444f8
pop edx
and ecx, esi
xchg edi, esi
xchg esi, edi
shr ecx, 2
mov ecx, 0x2f051c90
xor ebx, 0x2f07397f
jmp 0x543706
push 0xb887019
xchg ecx, edi
and edi, 0x2f25cd4f
sub edi, ecx
mov ecx, edi
add ebx, 0x2f2c181b
xor ecx, edi
sub ebx, ecx
jmp 0x542392
call edx
xchg esi, ebx
shl ecx, 6
xchg ecx, ebx
mov ecx, 0x2f5b0efd
neg esi
add edi, 0x2f5f6784
shr edi, 0x16
mov esi, ecx
jmp 0x544924
push esp
inc esi
not esi
shl edi, 0x16
inc esi
sub esi, ecx
and ebx, 0x2f83017c
xchg edi, ecx
neg ecx
xchg ebx, esi
sub esi, ebx
or esi, 0x2f8dcc2b
add esi, edi
add esi, ecx
jmp 0x541cc8
push 0xb353a5e
xchg ecx, edi
ror edi, 0x18
sub esi, ebx
neg ebx
and edi, ebx
add ebx, ecx
bswap esi
sub esi, ecx
jmp 0x542a8c
pop edx
add ecx, ebx
mov ebx, edi
or ecx, edi
xor ecx, ebx
shr esi, 3
mov ebx, 0x2fb218b3
neg ecx
xor esi, edi
jmp 0x544bcc
push 0x401400
inc esi
neg esi
or ebx, esi
shl ecx, 0xe
add ebx, ecx
add ecx, esi
xor esi, ebx
shl ebx, 0xa
jmp 0x543b96
push 0xbe38099
sub ecx, esi
and ecx, esi
or esi, ebx
add esi, ebx
or edi, ebx
xor edi, 0x3048f30a
sub esi, edi
xor ecx, edi
jmp 0x542550
push 0xb45733c
not edi
neg ecx
sub esi, ecx
shr edi, 2
rol ebx, 0x18
add esi, edi
xor esi, edi
xchg edi, esi
bswap esi
jmp 0x54259a
push 0xbe69d28
mov ecx, edi
or edi, ecx
xor esi, ecx
and ecx, 0x30a2a8f9
xor esi, ecx
rol edi, 0xe
mov edi, 0x30a902b9
mov edi, ecx
or ecx, 0x30ad3657
jmp 0x5443cc
pop edx
rol ecx, 0xd
xor ecx, ebx
rol edi, 0x17
mov ecx, ebx
jmp 0x544a5c
mov edx, 0x40495727
or esi, ebx
xor ecx, 0x3236fed3
add ecx, edi
shl ebx, 0x10
sub ebx, esi
shl edi, 0x1b
sub edi, 0x3245412c
inc edi
sub ecx, edi
and edi, 0x3250cdcb
xchg ebx, edi
or edi, ebx
neg esi
sub ecx, edi
jmp 0x544b43
push 0xb430f6b
xor edi, esi
and ecx, esi
xor edi, ebx
not ecx
sub esi, 0x32da0591
bswap ecx
mov esi, ebx
add edi, ecx
jmp 0x5422b9
mov edx, 0x40495727
or ebx, edi
neg esi
xor edi, ebx
inc esi
xchg ebx, esi
jmp 0x5429ba
pop edx
neg ecx
sub ecx, edi
dec ecx
add edi, 0x32f4a14c
neg ecx
add esi, 0x32f8d7d4
shl ecx, 0x10
dec edi
and esi, edi
rol esi, 0x1f
shr edi, 0x12
jmp 0x544540
call edx
xchg edi, ebx
or ecx, ebx
or ebx, ecx
xor ecx, esi
or esi, 0x331db682
shr esi, 0xa
dec edi
xor ecx, 0x3324564c
add edi, esi
add ecx, 0x33288212
jmp 0x544976
pop edx
neg esi
add ecx, edi
and esi, edi
mov edi, ecx
add edi, ebx
xor ecx, 0x33357149
mov edi, 0x3337918c
inc ebx
mov esi, ecx
jmp 0x542c80
push 0xbe51181
and ecx, 0x333e92dd
add esi, ebx
neg ecx
and ecx, 0x334aeac4
shr ebx, 0xe
sub esi, 0x334f2de4
or esi, 0x33514e6a
mov edi, 0x33536e5c
add ecx, edi
neg ebx
neg esi
jmp 0x5422d7
push 0xb86e6b5
shr ecx, 0x16
ror esi, 0x18
xchg edi, esi
or ebx, edi
not edi
jmp 0x5420b8
push 0xb46f38e
not esi
xor ebx, esi
ror esi, 0x13
rol ecx, 0x1b
mov esi, ebx
xor ecx, edi
jmp 0x54470b
push 0xbcf2feb
mov esi, edi
sub esi, 0x33e001c1
bswap ebx
shl esi, 0x1d
sub ebx, edi
or edi, ecx
shl ecx, 0x19
sub esi, 0x33f28bf8
neg ecx
jmp 0x543edd
push 0xbfbe78c
or edi, 0x33f7001e
shl ecx, 0x19
add ebx, esi
add ebx, ecx
or ecx, 0x33fede39
and ebx, ecx
xchg esi, ecx
inc ecx
mov esi, 0x3408dc33
and ecx, edi
rol esi, 0x1e
jmp 0x543850
call fcn.0054476c
sub edi, ebx
shl edi, 0x13
or ecx, ebx
xchg esi, ebx
and ecx, 0x341e4687
xchg ecx, ebx
mov esi, ebx
xor ecx, 0x34267aef
sub ebx, 0x3428ca9b
add ecx, edi
or ebx, esi
rol ebx, 1
jmp 0x54481e
push 0xb97da58
inc edi
rol edi, 1
or edi, 0x3437e718
add ecx, edi
shr edi, 0x17
sub edi, ebx
dec ebx
or esi, ecx
sub esi, edi
add ebx, 0x344b4df6
inc ecx
xor esi, ebx
and edi, ecx
shr ebx, 0xd
mov esi, 0x34554451
jmp 0x54451f
mov edx, 0x73716341
xchg edi, ecx
add ecx, ebx
mov ecx, edi
and ecx, edi
shr ebx, 0xd
or esi, 0x3628e1e2
and esi, ebx
add esi, 0x362ccf33
and ecx, esi
neg edi
xor ebx, 0x3632b267
jmp 0x5426a3
mov edx, 0x40495727
xchg edi, ebx
dec ebx
add esi, 0x3638fe67
inc edi
mov edi, 0x363d30ff
shr esi, 4
or esi, ebx
shr ebx, 0x17
bswap edi
or ecx, 0x36478caf
xchg ecx, edi
jmp 0x5428eb
pop edx
not edi
shr ebx, 0x1a
and ebx, ecx
xchg edi, esi
not ebx
and ebx, esi
or ebx, ecx
shr ecx, 0x16
sub ecx, esi
jmp 0x542915
call fcn.0054476c
mov ebx, ecx
not ebx
jmp 0x543f83
pop edx
add edi, ebx
and edi, 0x371d1e14
or ecx, edi
mov ecx, 0x372115bf
sub esi, ebx
and ebx, ecx
or esi, ebx
add edi, 0x37298eec
jmp 0x54393e
call fcn.0054476c
xchg edi, ecx
or esi, 0x3781ac53
rol ebx, 0x19
and ebx, 0x3785b983
or ecx, 0x3787b55c
jmp 0x543f77
pop edx
xchg edi, ecx
and esi, 0x378c0ef6
bswap edi
add esi, ecx
mov ebx, esi
xchg ecx, edi
or edi, ebx
xchg ecx, esi
neg ecx
jmp 0x542b36
push 0xb36bf8b
dec ebx
sub ecx, edi
xchg esi, edi
and edi, 0x37fee9fd
mov edi, ebx
sub ebx, edi
xchg ebx, ecx
or esi, ebx
rol ebx, 0xa
add esi, ecx
and ebx, ecx
and ecx, ebx
add ebx, ecx
jmp 0x542785
push 0xba5ef08
mov ebx, esi
dec ebx
mov esi, ecx
xchg edi, esi
shl esi, 0x1d
mov ecx, ebx
xor edi, ebx
sub ebx, esi
mov ebx, 0x385ae9b4
dec ecx
add esi, 0x385ee164
dec esi
shl esi, 0x1f
jmp 0x544942
push 0xbb24fbe
xor ecx, edi
or esi, edi
bswap ebx
sub esi, ecx
and ecx, edi
add ebx, ecx
jmp 0x5446f0
pop edx
or ebx, edi
add ebx, ecx
add edi, ecx
shl ecx, 0x13
xchg edi, ecx
mov ebx, edi
and esi, ebx
jmp 0x544061
pop edx
sub esi, 0x3891cc1c
shl ebx, 0xe
sub edi, esi
xor ecx, edi
and esi, ecx
shr ebx, 5
xor ebx, esi
or ebx, ecx
jmp 0x542be3
pop edx
neg edi
and esi, 0x38adbbc2
xor esi, edi
and edi, esi
shr edi, 0x17
not esi
inc edi
not ebx
not ecx
add ebx, 0x38bdb831
sub esi, edi
jmp 0x542584
pop edx
or esi, 0x38fce238
xor esi, ebx
mov esi, ecx
or ecx, 0x3903918a
dec ecx
and esi, ecx
and ecx, ebx
rol ebx, 3
dec edi
neg ecx
shl ecx, 0x13
jmp 0x5446bd
pop edx
shl ecx, 9
xor edi, ebx
sub ebx, ecx
bswap edi
mov esi, 0x39c60cf7
jmp 0x54411b
pop edx
or edi, ebx
rol ecx, 0x1b
xor edi, ecx
and ebx, 0x39cf1cb4
rol ecx, 0x13
xor ecx, esi
sub edi, ecx
jmp 0x54398f
push 0xb94c2a4
sub esi, edi
sub ecx, edi
mov ebx, esi
jmp 0x543aaf
pop edx
or ebx, esi
nop
mov esi, ecx
add ebx, ecx
or ebx, esi
and ecx, ebx
shr ebx, 2
jmp 0x542e22
push 0xbb0c108
add ebx, esi
or ecx, esi
mov esi, edi
and esi, ecx
xor ebx, 0x3b29bd4f
mov ecx, esi
not ecx
jmp 0x542b20
call fcn.0054476c
mov edi, 0x3ba669df
rol esi, 0x1e
or ecx, edi
and esi, 0x3bace33c
shl ecx, 0x19
mov ecx, ebx
or esi, ebx
jmp 0x543f19
mov edx, 0x73716341
sub ecx, edi
sub ecx, edi
jmp 0x543229
call edx
xchg ecx, esi
mov ebx, 0x3e8b1a14
ror edi, 5
or ebx, esi
xor ebx, edi
sub edi, ebx
sub ebx, ecx
bswap ebx
and ecx, ebx
xchg ecx, esi
and ecx, 0x3eaa5274
xchg ebx, ecx
xor edi, ebx
and ebx, edi
inc edi
jmp 0x542052
pop edx
sub edi, ebx
sub edi, ebx
xor ecx, 0x3ec56244
jmp 0x542259
mov edx, 0x73716341
or esi, ebx
ror ebx, 0x1a
mov esi, edi
mov esi, edi
shr esi, 0xe
xor ebx, ecx
xchg edi, esi
add ebx, edi
rol ecx, 0xc
rol ecx, 0x1d
xor edi, 0x3efc8663
jmp 0x543f3d
push 0xbf18a4b
inc esi
not ebx
xchg edi, ebx
or ecx, esi
add ebx, esi
xor ecx, 0x3f91d764
jmp 0x5424b9
call fcn.0054476c
sub ebx, edi
add ebx, 0x40506c62
not edi
xor edi, esi
add esi, edi
shl ecx, 0x12
mov edi, esi
xchg edi, esi
dec esi
rol esi, 0x1f
jmp 0x541d42
pop edx
mov edi, esi
mov ecx, ebx
sub edi, ebx
sub esi, ebx
xor edi, ecx
or ebx, 0x41164d42
dec ebx
sub esi, edi
mov edi, ecx
neg esi
inc ecx
jmp 0x543876
push 0x1408af
mov esi, 0x41474a16
xor edi, ecx
mov edi, ecx
or esi, ebx
and edi, ecx
xor esi, ebx
add ebx, ecx
jmp 0x5421c5
call fcn.0054476c
mov ebx, edi
add esi, edi
sub ecx, ebx
add ebx, edi
bswap ebx
xchg ebx, esi
sub ecx, edi
mov ecx, edi
jmp 0x544243
push 0xb6dd3c1
xchg edi, ebx
add edi, ebx
inc ecx
xor esi, ecx
or esi, edi
xor esi, ecx
bswap edi
and ebx, 0x41963bd7
and ebx, esi
xor ecx, ebx
xchg ecx, ebx
rol ebx, 0x12
rol ecx, 0x13
shr ebx, 0x1c
and ecx, esi
jmp 0x54351c
call fcn.0054476c
ror ecx, 0x16
nop
dec esi
and ebx, ecx
mov ebx, esi
and edi, ebx
mov ebx, edi
jmp 0x541e4c
pop edx
and edi, ecx
and esi, 0x41e67328
xchg esi, ebx
or ebx, esi
and ecx, ebx
jmp 0x542532
call fcn.0054476c
or ebx, ecx
add esi, 0x425db66c
and edi, 0x425fb24f
xor esi, edi
xchg ecx, esi
xor edi, 0x4265c92f
xor edi, 0x426807ae
ror edi, 4
sub ebx, edi
and esi, ebx
shl edi, 0x19
xor ecx, edi
sub ebx, esi
ror ebx, 0xf
jmp 0x542114
mov edx, 0x73716341
and ecx, esi
dec ebx
and ebx, 0x4294be67
bswap edi
bswap ebx
xchg edi, ebx
dec ebx
xchg ebx, ecx
jmp 0x543d70
pop edx
or ecx, esi
xor ebx, 0x42c40c67
or edi, esi
add ecx, ebx
xor esi, 0x42c9f7bf
dec ecx
jmp 0x5433ed
pop edx
add esi, 0x437ef509
xor ebx, esi
mov esi, ecx
jmp 0x542c94
push 0xb78a292
sub edi, esi
xor ebx, 0x43cae408
xor ebx, ecx
and ebx, edi
or esi, 0x43d67b41
not esi
xchg ebx, edi
not edi
inc ebx
sub esi, edi
xor ebx, ecx
mov ecx, edi
and esi, edi
ror edi, 0x13
jmp 0x543a38
pop edx
shl ebx, 0x18
xchg ebx, ecx
mov edi, 0x45347b56
sub ebx, 0x45369ec2
and ebx, edi
xor ecx, 0x453e71a0
add edi, 0x454e3c1c
neg edi
ror ebx, 0x15
mov edi, ebx
xor ebx, ecx
jmp 0x541feb
push 0xbcd8e36
sub edi, 0x45d7153b
and ecx, ebx
and edi, esi
add esi, ecx
xor ebx, 0x45e597a5
mov edi, 0x45e7bee3
or esi, edi
not ebx
jmp 0x542651
push 0xbfd7306
inc ebx
neg edi
not esi
rol ecx, 0xb
or ebx, esi
sub edi, esi
add edi, ebx
or edi, esi
xor edi, 0x467fcc8c
and ecx, ebx
add ebx, edi
neg ecx
jmp 0x543aca
pop edx
xchg edi, ecx
bswap edi
add edi, ecx
mov ebx, 0x4692957e
ror ecx, 0x10
and ecx, 0x4699c8cd
ror edi, 0x1d
dec esi
xchg edi, ecx
and ecx, edi
and ebx, esi
add esi, 0x46aa54e8
and esi, ecx
jmp 0x5431b3
push 0xb933b26
sub esi, ebx
shr ecx, 0x1a
mov esi, ecx
sub edi, ecx
sub ebx, ecx
mov ebx, esi
sub edi, ecx
xchg edi, ebx
jmp 0x542d1f
pop edx
shl ecx, 0x1b
mov edi, esi
inc ecx
mov ebx, ecx
add esi, ebx
and edi, esi
sub edi, ecx
and ebx, esi
sub ebx, edi
mov edi, 0x4765d98e
not esi
dec ecx
sub ebx, edi
and ecx, ebx
jmp 0x542315
pop edx
sub ecx, esi
xor edi, 0x4794209a
xchg ecx, ebx
xor ebx, ecx
xor edi, ebx
xor edi, ebx
ror esi, 0x17
mov esi, 0x47a41222
or edi, ebx
add ebx, edi
shl edi, 0x11
shr ebx, 0x11
jmp 0x54249b
push 0xbcc0165
and ebx, 0x47dfa8cb
or edi, esi
xor esi, ecx
or esi, ecx
not ecx
jmp 0x5437c5
push 0xb7a2e24
sub edi, ecx
xchg ecx, esi
xor esi, ecx
or ebx, esi
xor esi, ebx
shr edi, 0xb
ror esi, 0x11
xchg edi, ebx
mov esi, ecx
jmp 0x543c49
push 0xb964a70
shl ecx, 0x17
shl esi, 0x10
sub ebx, esi
shr ecx, 0x15
add ecx, edi
xor edi, ebx
and ebx, edi
jmp 0x5426d3
mov edx, 0x40495727
add esi, ecx
xchg ecx, esi
jmp fcn.00544272
call edx
sub edi, 0x4ea6906c
sub ecx, ebx
xchg edi, esi
bswap edi
xchg ecx, edi
or esi, edi
and edi, esi
xchg ebx, ecx
add edi, ebx
xchg edi, ebx
or esi, ebx
xor esi, 0x4ebcc03b
bswap ecx
and ebx, esi
mov edi, ecx
jmp 0x544853
push 0xbca7186
xchg ecx, edi
mov ecx, ebx
or ecx, 0x4ed4f95c
xor edi, ecx
inc ecx
inc edi
xchg ecx, edi
and ebx, edi
sub edi, esi
xor ebx, edi
inc esi
sub ebx, edi
add esi, ebx
jmp 0x5439f5
call edx
xor ebx, esi
shr esi, 0x12
jmp 0x5442d3
call edx
or ebx, ecx
xchg edi, esi
add ebx, ecx
mov esi, ecx
rol esi, 8
xchg edi, ebx
bswap edi
dec esi
add ecx, ebx
jmp 0x54207c
push 0xb7bbdc8
or edi, ebx
sub edi, 0x4f59d76c
bswap ecx
shr ebx, 0x1e
mov ecx, esi
xor edi, ecx
add esi, 0x5015c5dc
or ebx, esi
add ebx, edi
jmp 0x542758
call fcn.0054476c
ror edi, 0x18
and ecx, edi
add esi, ecx
xor esi, ebx
mov ecx, edi
shr edi, 0x12
mov edi, ebx
inc ecx
jmp 0x54250b
push 0xb91ae7e
or ecx, ebx
bswap esi
sub esi, ebx
xor esi, ebx
add esi, edi
xchg esi, edi
not ecx
sub esi, ebx
sub edi, 0x5111eb6c
jmp 0x5438fa
mov edx, 0x73716341
and edi, ebx
sub ebx, 0x52510aff
jmp 0x5434c1
call edx
add ecx, esi
sub edi, ebx
xor ebx, edi
and ecx, ebx
sub ecx, ebx
sub edi, ebx
mov edi, ecx
sub ebx, edi
and edi, 0x527ad135
shr esi, 0xb
add ebx, edi
xchg edi, esi
jmp 0x542822
call fcn.0054476c
inc esi
xor esi, edi
jmp 0x543b17
call edx
ror ecx, 0x1a
not edi
jmp 0x544a7d
call edx
sub ebx, 0x52a4b3a8
mov ecx, edi
or esi, 0x52acec5f
shr ecx, 0x13
add ebx, ecx
xor edi, esi
or edi, ecx
jmp 0x5446db
mov edx, 0x4132136a
add esi, edi
bswap esi
and edi, ecx
xor ecx, edi
xor ecx, 0x5333ccd3
jmp 0x541e14
call fcn.0054476c
xor ecx, ebx
sub ebx, edi
add edi, ecx
not ecx
or ebx, esi
or ecx, edi
jmp 0x543ba2
push 0xb656347
sub esi, 0x539180fc
inc esi
dec esi
inc ebx
mov ecx, esi
and ecx, ebx
dec edi
xor ebx, edi
dec ebx
mov ecx, edi
and esi, ebx
add ecx, 0x53c0e1c5
mov esi, ebx
xchg esi, ebx
and ebx, ecx
jmp 0x544836
call fcn.0054476c
mov ecx, esi
not ecx
mov ebx, ecx
xor edi, esi
inc edi
sub esi, edi
and esi, edi
jmp 0x541f0b
call edx
xchg edi, esi
and edi, esi
xor esi, ecx
and edi, ebx
or ebx, ecx
xchg edi, ebx
xor esi, 0x573b5b75
or esi, ecx
mov edi, esi
and edi, 0x57569fa7
and edi, ecx
xchg edi, ebx
nop
sub edi, ecx
ror ecx, 0x16
mov ebx, ecx
jmp 0x544b69
pop edx
add esi, ecx
mov ecx, ebx
or ecx, edi
sub ebx, esi
and edi, 0x58cf0612
and ebx, 0x58d4bcdb
xchg edi, ebx
jmp 0x543b5a
push 0x40
mov edi, esi
nop
sub edi, ecx
sub ebx, esi
sub esi, 0x5938ab5c
neg ebx
add ebx, esi
or ecx, ebx
and edi, ecx
jmp 0x54330b
mov edx, 0x40495727
sub ebx, esi
sub ecx, edi
add esi, 0x59aa1e67
sub edi, esi
shl ecx, 0x1d
xchg esi, ecx
and edi, esi
neg edi
inc ecx
jmp 0x543357
pop edx
dec ebx
or ecx, edi
mov ecx, ebx
add esi, ecx
jmp 0x543dc3
mov edx, 0x40495727
mov ecx, edi
add esi, 0x5b08b7fe
xor esi, ecx
mov ecx, edi
or esi, edi
rol ecx, 0x19
shr ebx, 3
ror ebx, 0x18
jmp 0x542ed7
pop edx
or ebx, edi
add ebx, edi
and edi, 0x5b1cb39f
xchg esi, ebx
mov ecx, edi
inc edi
xor ecx, 0x5b2a7130
jmp 0x542b67
pop edx
ror ebx, 0x19
xor ebx, edi
and edi, ebx
or esi, ebx
xchg ebx, edi
or esi, edi
xor edi, ecx
rol esi, 0x15
xchg edi, ebx
bswap esi
jmp 0x542b4b
mov edx, 0x40495727
mov esi, 0x5bf3d104
shr ebx, 7
neg ecx
not ebx
and ebx, esi
shl ebx, 0x11
add ebx, ecx
inc ebx
mov edi, ebx
jmp 0x5433ab
push 0xbdbae2b
add ecx, ebx
inc edi
not esi
or ebx, esi
xchg edi, ecx
xchg edi, ecx
add edi, ebx
and ecx, esi
nop
neg esi
add ecx, esi
jmp 0x544641
pop edx
neg esi
mov edi, 0x5cab22f7
add esi, ecx
and esi, ebx
xchg edi, esi
xor esi, ecx
jmp 0x5436a5
mov edx, 0x40495727
mov esi, 0x5cfda5bc
xor edi, ecx
sub esi, ebx
mov ecx, edi
or ebx, ecx
sub esi, ecx
xor ecx, ebx
jmp 0x54422c
push 0xb487e67
not ebx
and esi, ebx
neg edi
xor ecx, edi
add edi, ebx
rol esi, 0x12
and ebx, 0x5d18b94f
mov edi, ecx
jmp 0x542ef8
call edx
and edi, esi
neg esi
neg esi
shl esi, 0x11
and ebx, ecx
or ebx, 0x5de89d39
jmp 0x5424cc
push 0xb6a8ad4
and ebx, edi
sub ebx, edi
xor ecx, ebx
xchg ebx, edi
add ebx, esi
and esi, ebx
dec esi
neg edi
xchg edi, ebx
add ebx, ecx
jmp 0x543371
pop edx
or edi, ebx
add ebx, 0x5e069dd7
and edi, esi
mov edi, ebx
jmp 0x542dd6
push 0xb28d753
nop
inc edi
and edi, ebx
sub ebx, ecx
sub esi, 0x5e399b3e
or edi, esi
xor ebx, 0x5e3e05c8
neg esi
jmp 0x5448fa
mov edx, 0x73716341
or esi, ebx
add ecx, edi
sub ecx, 0x5e6bbad8
add edi, ebx
mov ebx, edi
or ebx, ecx
mov ecx, ebx
xor esi, 0x5e763fc5
or ecx, 0x5e789fe6
add edi, ecx
jmp 0x5440cd
pop edx
and ebx, edi
add edi, ecx
xchg edi, esi
or ebx, 0x5e83b170
mov esi, ebx
sub ebx, 0x5e87ecd9
sub esi, ebx
sub esi, ecx
jmp 0x54455b
push 0xba77a89
shr ecx, 7
sub esi, 0x5e911b03
not ecx
and ecx, esi
mov esi, edi
or ebx, esi
bswap ebx
and ecx, edi
jmp 0x5430e5
pop edx
mov ebx, ecx
add edi, ebx
mov ebx, edi
neg ebx
jmp 0x542196
pop edx
shl ecx, 0x1c
ror ecx, 0xc
xor ebx, ecx
sub ecx, edi
mov ecx, esi
add ecx, 0x5f4636ca
shr ebx, 0x17
mov esi, edi
xchg ecx, edi
xor edi, ecx
jmp 0x542ad9
pop edx
and ebx, esi
xor ecx, ebx
sub ecx, esi
sub esi, ebx
shl ebx, 0xa
sub ecx, ebx
inc esi
xor edi, ecx
and esi, 0x5f684347
jmp 0x542677
call fcn.0054476c
sub ecx, ebx
and edi, 0x5fd8b3f7
xor esi, 0x5fdada80
add ebx, edi
and ebx, 0x5fdf1a73
neg esi
add esi, edi
sub ecx, esi
jmp 0x543086
pop edx
xchg ebx, ecx
mov esi, 0x5feac066
shl ebx, 0x19
add ebx, edi
or esi, edi
add ecx, ebx
mov esi, ebx
mov ebx, 0x5ff78ab5
inc edi
jmp 0x5432b5
pop edx
xchg ecx, esi
xchg ebx, ecx
xchg ebx, ecx
and esi, edi
xchg ecx, edi
xchg edi, ecx
sub esi, ebx
add ebx, ecx
mov edi, 0x6034cfa7
xchg ebx, esi
sub esi, ecx
add ecx, 0x603b40e2
jmp 0x5436d8