Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3
Suspend thread

Disassembly:
sub edi, esi
add esi, 0xe1691c95
xchg esi, ecx
mov esi, 0xe169beb1
call sub.kernel32.dll_GetCommandLineW
sub ecx, 0xe16a3c1b
rol edi, 0xb
rol edi, 0x16
and esi, edi
shl esi, 0x11
and ebx, ecx
cmp eax, 0xfffffefc
jne 0x4010a6
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call main
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.ntdll.dll_NtSuspendThread
call main
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call main
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.ntdll.dll_NtSuspendThread
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_NtSuspendThread
call main
ret
xor ebx, ecx
or edi, 0xe16e52e2
call sub.kernel32.dll_GetCommandLineW
or ecx, edi
add edi, ecx
sub ebx, esi
or ebx, esi
and esi, edi
mov ebx, ecx
mov esi, edi
or ecx, edi
cmp eax, 0xfffffed8
jne 0x401138
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call main
call sub.ntdll.dll_NtSuspendThread
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call main
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call main
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call main
ret
xchg esi, edi
or ebx, 0xe17330a0
mov ebx, esi
call sub.user32.dll_GetCaretBlinkTime
add ebx, esi
xchg edi, esi
and ebx, edi
sub ecx, 0xe174d6b4
add edi, esi
cmp eax, 0xfffffef7
jne 0x4011c5
call sub.user32.dll_DdeNameService
call main
call main
call main
call main
call main
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.user32.dll_DdeNameService
call main
call main
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.ntdll.dll_NtSuspendThread
call main
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call main
ret
or esi, 0xe177215d
shr ebx, 0xa
xchg esi, edi
or edi, 0xe178127b
call sub.user32.dll_GetCaretBlinkTime
xchg ebx, esi
or edi, 0xe178d571
or esi, ebx
add ebx, esi
and esi, ebx
mov ecx, esi
ror edi, 7
mov ebx, edi
cmp eax, 0xffffff25
jne 0x401297
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.user32.dll_DdeNameService
call main
call sub.ntdll.dll_NtSuspendThread
call main
call main
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call main
call main
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_NtSuspendThread
call main
call main
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call sub.ntdll.dll_NtSuspendThread
call main
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_RtlAddAccessDeniedObjectAce
call sub.user32.dll_DdeNameService
call sub.user32.dll_DdeNameService
call sub.ntdll.dll_NtSuspendThread
call main
ret
jmp 0x494588
xor ebx, edi
and ecx, ebx
xor ecx, 0xe1fee4a6
and ecx, edi
dec ebx
jmp 0x494619
push 0xe204183e
shr edx, 8
mov esi, ebx
and edx, esi
sub esi, ebx
or edx, 0xef88330d
mov esi, 0xef888293
inc edx
add ebx, 0xef892915
jmp 0x49567e
pop ecx
and edi, edx
or esi, ebx
xor ebx, edi
mov edi, 0xef8c3b08
xor edi, esi
xor ebx, esi
add ebx, esi
mov esi, edx
or edi, edx
xor ebx, esi
add ebx, esi
jmp 0x495ff5
call ecx
not esi
mov esi, edi
neg edx
xchg edi, esi
jmp 0x4946aa
pop ecx
sub ebx, esi
bswap edx
sub edx, ebx
xchg edi, ebx
bswap edi
xor ebx, edi
jmp 0x4963af
push 0xe20d837e
inc edx
xchg ebx, esi
mov edx, ebx
and ebx, edx
add ebx, edi
and esi, 0xef98f919
mov ebx, edx
and ebx, 0xef9997d0
and esi, edx
sub edx, 0xef9a3663
jmp 0x495053
push 0xe2177dfc
inc edx
xor esi, edx
mov edx, ebx
sub edi, esi
add esi, 0xef9be2f5
xor ebx, esi
and edi, ebx
add esi, edx
xor edi, edx
mov edi, esi
mov esi, edi
jmp 0x49478f
pop ecx
rol edi, 0xa
dec esi
mov ebx, esi
sub edi, esi
sub edi, ebx
ror esi, 0x1a
and esi, edi
and esi, edx
sub esi, 0xefab61e3
shl ebx, 0x10
sub ebx, edi
jmp 0x496deb
push 0xe217b4bf
and ebx, esi
nop
jmp 0x494ffc
push 0xe2062029
sub edx, 0xefaf43d1
sub edx, edi
add esi, 0xefafe5f6
or edx, 0xefb04c6e
and ebx, edx
mov edx, 0xefb16e95
sub edi, ebx
sub edi, ebx
add esi, edi
and esi, ebx
mov edx, ebx
or esi, edx
xor edi, ebx
xor edx, esi
or esi, ebx
jmp 0x494946
call ecx
ror esi, 0x1f
and ebx, esi
sub edx, edi
mov edi, esi
mov edi, 0xefb619fb
rol ebx, 0x1b
jmp 0x495922
mov ecx, 0x2d734e3d
or esi, ebx
dec esi
add ebx, esi
dec esi
add edi, esi
xor edx, 0xefbf73bd
sub edi, edx
mov esi, 0xefc012f7
mov edx, edi
add edx, edi
mov ebx, esi
and ebx, esi
ror edi, 0x10
jmp 0x494b55
pop ecx
ror ebx, 6
xor edi, esi
mov edx, esi
shr edi, 0x1c
rol edx, 0xf
and edi, 0xefc87861
xor edi, 0xefc8ca97
and esi, 0xefc91c9d
jmp 0x49651d
mov ecx, 0x2d734e3d
xor edx, ebx
dec edi
dec esi
and ebx, edi
shr edx, 0x18
xor edi, ebx
or esi, ebx
shl ebx, 0xf
jmp 0x495894
push 0xe208b6b7
rol ebx, 0x12
sub esi, ebx
or ebx, esi
and esi, ebx
or esi, ebx
shl edx, 0x11
add esi, edx
mov edx, ebx
mov ebx, edx
jmp 0x496154
call fcn.00495653
bswap edi
sub edi, ebx
and esi, edi
ror ebx, 0xc
mov edi, edx
not esi
xor edx, 0xefeed9a3
and ebx, edx
rol ebx, 2
rol edx, 0x1d
and edi, edx
add esi, edx
and ebx, edx
jmp 0x49687d
push 0xe219f2ff
sub edi, edx
bswap edx
and ebx, edi
xor edi, esi
add edx, edi
jmp 0x4952b5
push 0xe2088083
xor ebx, esi
xor edx, 0xeffd0d85
and edx, esi
jmp 0x494982
push 0xe208173c
or esi, ebx
or esi, 0xf0060270
sub edx, ebx
sub esi, edx
xchg esi, edi
xor edi, ebx
jmp 0x494ed0
pop ecx
mov esi, edx
sub esi, ebx
neg edi
and esi, 0xf00da89e
and edi, 0xf00dfa5b
add edi, ebx
not esi
or edx, ebx
jmp 0x4964d9
call fcn.00495653
or esi, ebx
bswap ebx
sub edi, esi
mov ebx, edi
xchg esi, edx
mov esi, ebx
xor edi, edx
sub edi, esi
jmp 0x4947ed
pop ecx
inc edx
xor edi, esi
and esi, edi
add esi, edi
sub ebx, 0xf02366b1
add esi, edx
mov ebx, edx
jmp 0x4962e4
pop ecx
xor ebx, edx
mov esi, ebx
add ebx, 0xf041845d
mov edi, ebx
bswap esi
mov edi, edx
shl edx, 0x1d
or edi, ebx
xor esi, edx
jmp 0x495665
pop ecx
dec ebx
sub edi, 0xf0449893
xchg edi, esi
sub edx, 0xf0453de3
neg edi
and esi, edi
or esi, edx
sub edx, esi
jmp 0x494ace
call fcn.00495653
and edx, edi
mov edx, 0xf04aab8e
add edx, edi
add edx, edi
and esi, 0xf04c1369
xor edx, edi
xor edx, esi
add esi, edi
xor edi, esi
and edx, 0xf04f2aba
inc edi
bswap edi
or esi, 0xf0507b26
jmp 0x494dae
push esp
xchg edx, edi
mov ebx, edx
inc edi
add edi, edx
rol esi, 6
sub esi, edx
xor esi, edx
xor esi, ebx
and ebx, 0xf059b95f
or ebx, edi
add edx, esi
jmp 0x495906
call fcn.00495653
mov esi, ebx
add esi, edx
add edx, 0xf05b617c
sub edx, esi
or edx, ebx
xor esi, edi
xchg edi, ebx
mov esi, ebx
jmp 0x496d40
push 0xe21624a1
and edi, edx
xor edi, 0xf05db7c7
xor ebx, edi
add ebx, edx
rol edi, 0x10
and edi, esi
shl edx, 0x1a
mov edx, edi
ror edi, 0x1b
jmp 0x495033
push 0xe2125e56
xchg ebx, edi
add edi, 0xf06a1dec
shr esi, 0x1f
rol edi, 2
sub esi, 0xf06b86cd
neg edx
xchg esi, edi
inc ebx
add edx, 0xf06ce1e9
mov edx, 0xf06d323b
add ebx, 0xf06d8459
add edx, ebx
jmp 0x4955d1
pop ecx
and esi, ebx
mov esi, edi
and ebx, 0xf0742107
mov ebx, 0xf074c7af
xor ebx, edi
xchg edi, edx
mov edx, edi
jmp 0x4957c1
push 0xe2084ad2
bswap edi
add esi, edx
sub edi, edx
sub edx, ebx
sub edi, ebx
xor edx, 0xf079a515
or ebx, esi
add ebx, edi
xor esi, edx
add edx, ebx
xchg edx, edi
jmp 0x494a6f
push 0xe20aad28
add edx, esi
xor edx, esi
or ebx, 0xf07c475e
not esi
shr edx, 6
mov ebx, edx
rol edx, 0x1e
or ebx, edx
inc ebx
bswap edi
jmp 0x495f4f
push 0xe217efdf
xor ebx, esi
shr ebx, 0x1b
ror ebx, 0x14
jmp 0x4952e3
pop ecx
xor esi, edx
and esi, edi
neg ebx
sub esi, 0xf0a1dc6f
neg edx
and esi, ebx
jmp 0x49663f
mov ecx, 0x123b2f04
or ebx, edx
not edi
and ebx, 0xf0a5ad90
sub esi, edx
sub ebx, edi
sub edi, esi
sub esi, edi
and esi, ebx
or edi, esi
jmp 0x494dce
push 0xe20dbb26
dec esi
mov ebx, esi
xor edi, ebx
mov ebx, 0xf0a9c698
shl esi, 0xa
bswap ebx
or edi, ebx
jmp 0x495522
call ecx
or ebx, esi
sub esi, ebx
xchg edx, edi
ror esi, 5
sub edx, edi
rol ebx, 0x1a
add esi, ebx
or esi, ebx
and edi, ebx
jmp 0x4965ce
push 0x93188
xchg ebx, edx
mov edx, ebx
add edi, esi
mov ebx, 0xf0d79042
neg edi
sub esi, edx
nop
and ebx, edi
xchg ebx, edi
and edx, 0xf0da19d0
and edx, esi
jmp 0x495fc9
pop ecx
or ebx, edi
or esi, 0xf0dba823
or ebx, edi
shl ebx, 9
xchg ebx, esi
xor esi, edx
mov edi, 0xf0dd70bf
xchg edx, edi
ror esi, 0x10
or ebx, 0xf0de849f
jmp 0x495ba5
mov ecx, 0x2d734e3d
xor ebx, esi
and edx, esi
inc esi
sub edx, 0xf0e7db14
jmp 0x496695
pop ecx
mov ebx, edi
add edx, edi
not esi
or edi, esi
xor ebx, esi
sub ebx, edi
and edi, esi
add esi, edx
jmp 0x496575
call fcn.00495653
mov edx, edi
not edx
or edx, 0xf0ec2a12
and esi, edx
sub esi, ebx
xor ebx, edx
xor edi, ebx
xchg edx, esi
shl edi, 0x1f
sub ebx, edi
sub edx, ebx
add edi, 0xf0ef0f0c
jmp 0x49607c
push 0xe21a2a03
mov edx, ebx
xchg edi, edx
xchg ebx, edx
mov edx, esi
ror ebx, 3
xor ebx, edi
shr esi, 0x15
dec edx
sub esi, edi
and esi, edx
sub edi, ebx
shr ebx, 5
neg esi
add esi, 0xf0f45f49
xchg edx, esi
jmp 0x4954be
mov ecx, 0x123b2f04
ror esi, 0x14
ror edx, 0x16
sub esi, ebx
neg esi
or esi, edi
and esi, edi
and ebx, esi
xchg esi, edx
add edi, ebx
inc ebx
or edx, edi
and esi, 0xf0f94cde
ror edi, 0x15
bswap edx
or edi, edx
jmp 0x49632d
pop ecx
dec edi
nop
inc edx
neg ebx
add edx, edi
ror esi, 1
xor edx, edi
xchg edi, ebx
add esi, edi
jmp 0x49661d
push 0xe205ed39
and ebx, edx
mov esi, edx
shl esi, 0x1d
xor ebx, edx
mov edi, 0xf1058a98
xchg edx, esi
shr ebx, 0x11
or esi, edi
shl edx, 1
and edx, esi
xor ebx, 0xf10781c5
jmp 0x4947b6
mov ecx, 0x2d734e3d
and edx, 0xf109d0bc
and esi, edi
or edi, 0xf10b13ab
mov esi, ebx
xor esi, 0xf10bb22e
xchg edi, ebx
add esi, ebx
jmp 0x4956ab
push 0xe214cb81
not edx
not ebx
rol edx, 0x12
and edi, edx
or ebx, edi
mov edx, ebx
or ebx, edi
or esi, edx
add edi, 0xf11f1cfa
xor edx, 0xf11f7317
mov esi, edi
xchg ebx, edx
jmp 0x49525f
pop ecx
shr edx, 0x1b
add edi, 0xf12147f2
shr edx, 0xd
not edx
xor esi, 0xf1231308
or esi, 0xf1236406
and edi, ebx
shr edi, 9
ror edi, 0x1a
mov edi, esi
and esi, edi
jmp 0x4946e5
push 0xe20549c1
neg esi
xchg ebx, esi
or esi, edi
rol edx, 0x1a
xchg ebx, esi
jmp 0x496d77
mov ecx, 0x2d734e3d
rol esi, 6
sub edx, edi
and esi, edi
neg edi
add esi, edx
sub ebx, edi
shr edx, 0x1a
mov esi, 0xf12a8092
not ebx
and edi, ebx
mov edi, edx
xor ebx, 0xf12bc4c0
add edi, 0xf12c16d6
mov edx, 0xf12c6b01
shr edx, 0x16
jmp 0x4949f0
call ecx
bswap edi
mov edx, ebx
and edi, esi
xchg edi, ebx
mov edx, edi
xchg ebx, edx
sub edi, ebx
mov esi, edi
mov edi, edx
sub edi, edx
or edi, esi
and edx, edi
jmp 0x496781
push 0xe20df161
not edi
xchg edi, ebx
and esi, edx
sub edi, edx
xor edi, esi
bswap ebx
xor esi, edi
xor esi, edx
jmp 0x495722
call ecx
and esi, edx
and ebx, esi
xor esi, 0xf13985f3
shr esi, 0x11
mov edx, edi
shl ebx, 0xb
mov ebx, 0xf13b1b77
bswap ebx
mov esi, edi
ror esi, 0x15
shr esi, 0x16
add edx, 0xf13cb2a3
and edx, 0xf13d04ce
jmp 0x49500e
push 0xe21296ab
xchg edi, edx
xchg esi, edx
mov esi, 0xf143e748
or esi, edi
mov edx, ebx
mov ebx, edi
xchg edx, esi
xchg ebx, esi
neg esi
add edi, ebx
xor edi, edx
add ebx, edi
jmp 0x496e07
pop ecx
shl edx, 0x11
shl edi, 1
or edx, 0xf156f93f
mov edi, esi
bswap edi
rol esi, 0x1a
jmp 0x495e87
mov ecx, 0x2d734e3d
add esi, edi
inc ebx
and edx, ebx
xor edi, edx
mov esi, 0xf15a0c11
xor ebx, 0xf15aa945
shl ebx, 6
mov ebx, edx
xor edi, ebx
or esi, edx
add esi, ebx
or edx, 0xf15c969e
jmp 0x49659a
call fcn.00495653
or edi, esi
xor ebx, edx
add edi, edx
shl edx, 0x1b
jmp 0x495db1
push 0xe20e2646
xchg edx, edi
xor esi, edi
xchg edx, esi
jmp 0x4964cc
pop ecx
xchg ebx, edi
sub edx, edi
xor edi, ebx
xor ebx, esi
and edx, esi
or edx, esi
add edi, esi
xor edi, esi
mov edx, 0xf16e2779
shl edx, 0x1b
jmp 0x49667d
pop ecx
shr edx, 0x1f
shl esi, 0x1d
add edi, ebx
mov edx, ebx
sub esi, edx
neg esi
sub esi, edi
mov edi, edx
add ebx, edx
jmp 0x494bbc
pop ecx
mov esi, edi
rol ebx, 0x1a
or esi, 0xf17c984a
add ebx, 0xf17cfb25
shl edi, 0x16
jmp 0x494897
call ecx
xchg edi, esi
and edi, edx
dec edx
xor ebx, 0xf18df07d
rol edx, 0x15
and esi, edx
sub edi, esi
jmp 0x495732
call fcn.00495653
and ebx, esi
add edi, 0xf18f9c65
add edx, esi
and edi, esi
xchg edi, edx
bswap ebx
or esi, ebx
sub esi, 0xf1918e42
xor ebx, esi
neg edx
mov ebx, edx
xor esi, ebx
jmp 0x494674
push 0xe205b79b
and esi, 0xf19457b9
xor edi, esi
and ebx, edi
jmp 0x495369
call fcn.00495653
or esi, edi
dec edi
or ebx, 0xf1961c57
or esi, ebx
jmp 0x496be2
push esp
rol esi, 0x13
or edi, esi
or esi, ebx
sub edx, edi
add ebx, edi
sub edi, ebx
mov ebx, edi
or edx, edi
not ebx
shl ebx, 6
jmp 0x496adf
pop ecx
or esi, 0xf19d8d83
xchg ebx, edx
sub edi, ebx
or edi, ebx
xor edx, 0xf19edd3f
sub edx, esi
xchg ebx, esi
add edi, esi
or edx, ebx
nop
add ebx, edx
and edx, esi
jmp 0x4961b5
push 0xe213041c
rol ebx, 0xd
ror edi, 0x1c
or ebx, esi
mov ebx, 0xf1b8ef71
inc esi
and edi, edx
or edx, 0xf1ba2dcf
or edx, 0xf1ba8125
jmp 0x49683b
pop ecx
and edx, esi
or esi, edx
shl edi, 0x1c
and esi, ebx
or edx, 0xf1c6172b
sub esi, edx
sub edx, esi
and edi, 0xf1c713b1
xor ebx, edx
and ebx, esi
sub edi, edx
jmp loc.00495a8b
pop ecx
xchg ebx, esi
add esi, ebx
add edi, ebx
inc edi
jmp 0x4964fe
pop ecx
rol edx, 0x12
xor esi, edx
xchg edi, esi
sub ebx, esi
sub edi, 0xf1e8ab8e
ror esi, 0xc
and edi, edx
sub ebx, esi
and esi, edx
mov edx, ebx
add ebx, esi
xchg edi, edx
sub edx, edi
jmp 0x494d23
pop ecx
xor edx, edi
neg edx
shr edi, 0x18
mov edi, edx
and ebx, esi
add esi, ebx
and esi, ebx
ror ebx, 0x1c
add edx, edi
inc ebx
jmp 0x495a66
pop ecx
mov edi, 0xf20fc2d5
neg edi
dec edi
xor ebx, esi
sub edi, 0xf2111840
mov edx, ebx
jmp 0x495f21
call ecx
mov esi, edx
sub esi, edi
xor esi, ebx
sub edx, edi
nop
or edi, edx
xchg edx, ebx
xor esi, edi
xor edx, esi
and esi, ebx
or edx, edi
jmp 0x495b0f
pop ecx
xchg ebx, esi
and edx, 0xf237d87c
or edi, 0xf2382a84
xchg edx, esi
shr edi, 0x14
sub edi, edx
mov edi, 0xf239718c
and esi, 0xf239ce84
add esi, edi
or ebx, edi
dec edi
jmp 0x496c87
pop ecx
and edi, ebx
or edi, edx
add esi, ebx
xor esi, ebx
sub edi, ebx
inc esi
add edi, ebx
neg edx
add ebx, esi
dec edx
mov ebx, 0xf24a8e4b
sub esi, edx
jmp 0x4963bd
push 0xe20ae0e0
sub ebx, 0xf24da4b7
mov edx, ebx
not edi
ror esi, 3
xchg edx, edi
mov esi, ebx
neg edi
jmp 0x496422
push 0x401400
xchg edx, edi
add edi, edx
and ebx, 0xf25a3016
or esi, ebx
shr ebx, 5
sub ebx, edi
and ebx, 0xf25b80b2
sub edx, edi
and esi, edi
xor edx, edi
mov ebx, esi
ror edx, 0x1e
jmp 0x495194
pop ecx
or edx, edi
xor edi, edx
dec edx
sub ebx, edi
and esi, 0xf2610698
mov edx, esi
add esi, edx
bswap esi
jmp 0x495452
call ecx
and esi, edx
xchg ebx, edx
xchg esi, edx
add edx, edi
or edi, esi
or edx, edi
and edx, 0xf270b75d
and esi, ebx
inc esi
and edx, edi
jmp 0x495c14
pop ecx
xor ebx, edx
shl esi, 4
shl edx, 0x12
and esi, edx
or ebx, edx
xor ebx, esi
sub esi, edx
mov edx, esi
jmp 0x4954a9
push 0xe21dfbe2
xchg ebx, edi
mov ebx, edi
inc esi
sub esi, edx
add ebx, edx
jmp 0x4967e4
mov ecx, 0x2d734e3d
ror edi, 0x1e
ror esi, 0x18
add edx, edi
bswap esi
add esi, edx
or edi, esi
xchg edi, edx
xchg esi, edx
jmp 0x496b38
push 0xe21dc3ca
xchg edx, esi
sub edi, 0xf2897d2a
or edx, esi
sub edi, edx
and esi, 0xf28a6d40
add edx, esi
mov ebx, esi
add esi, ebx
jmp 0x496125
push 0xe21d19d7
dec esi
bswap edi
xchg edx, edi
xchg edi, edx
or edi, ebx
xchg edx, edi
jmp 0x496d9a
call ecx
shr edx, 3
inc edi
sub edi, edx
mov esi, edi
dec edx
xchg edi, esi
dec edx
sub edi, edx
mov edx, 0xf29c7878
add edi, edx
jmp 0x4957a7
pop ecx
add esi, edx
sub edx, esi
inc ebx
and edi, esi
or edi, esi
or edi, esi
shl edx, 0x1b
xor ebx, edx
mov edx, esi
mov esi, edi
jmp 0x495274
call fcn.00495653
xor esi, ebx
mov esi, 0xf2b754cb
dec edx
inc edx
or edx, 0xf2b84e3d
sub edi, esi
bswap edx
and ebx, 0xf2b9b9c9
inc ebx
xchg esi, edi
and esi, 0xf2babb72
add esi, edi
jmp 0x49637c
call ecx
or edx, 0xf2bfe156
xchg esi, edx
or ebx, edx
and edx, esi
ror ebx, 0xf
mov esi, 0xf2c1e48e
and edx, ebx
jmp 0x494eb5
pop ecx
not ebx
bswap edi
xor edx, ebx
and edi, edx
jmp 0x49520b
pop ecx
or ebx, 0xf2c5c8b9
sub edi, 0xf2c61ae0
or edx, edi
or edi, ebx
xchg edi, esi
mov esi, ebx
shr edi, 0xc
jmp 0x49476d
mov ecx, 0x2d734e3d
or esi, 0xf2cd76f3
or edi, 0xf2cdca28
add esi, 0xf2ce29d2
jmp 0x4958d2
call ecx
shl esi, 0x10
sub esi, edi
add edi, 0xf2cf3225
neg edi
xor edi, edx
add ebx, edi
mov esi, edi
or ebx, esi
shr esi, 0x13
sub edi, esi
sub edx, ebx
neg edi
mov esi, edx
xor edi, edx
shr edi, 0x10
jmp 0x4960c5
call fcn.00495653
or esi, edx
shl ebx, 2
xor ebx, edx
inc ebx
and edx, edi
dec edx
inc edi
jmp 0x495569
push 0xe20e5cab
dec esi
add esi, edx
jmp 0x4953a2
mov ecx, 0x4132136a
add edi, esi
rol edx, 0xe
and edx, esi
or edi, 0xf2dfa1bc
xor ebx, edx
or ebx, edi
xchg esi, ebx
or ebx, edi
and edx, edi
xchg ebx, edx
sub edi, edx
jmp 0x494d54
pop ecx
xchg edi, edx
or edi, edx
add esi, edx
and edx, 0xf2e40b1c
or esi, 0xf2e4867b
sub esi, edx
mov ebx, 0xf2e52b48
jmp 0x495353
push 0xe219836b
ror edi, 0xf
rol edi, 0xb
xor ebx, edx
mov edi, 0xf2e85324
rol ebx, 7
sub edi, 0xf2e8f9da
and edx, 0xf2e94bd3
sub edx, 0xf2e99dc7
and edx, 0xf2e9efe7
jmp 0x496768
push 0xe20a75f7
and esi, ebx
and ebx, edx
or esi, 0xf2eea656
and edi, esi
xchg ebx, edi
add edx, ebx
and ebx, 0xf2f027e0
ror edx, 4
or esi, edx
jmp 0x494ef4
call fcn.00495653
add edx, ebx
sub esi, 0xf2f1b62c
add edx, ebx
xchg ebx, edi
sub ebx, edx
neg edx
shr edi, 2
or esi, ebx
and esi, edi
xor edi, esi
xor edi, edx
mov edi, edx
xor ebx, edi
xor edx, 0xf2f5fd53
shl ebx, 0xe
or edi, edx
jmp 0x49643e
pop ecx
or ebx, 0xf2f70b18
and esi, edi
sub esi, edx
or esi, 0xf2f807e2
and edx, ebx
and esi, edi
jmp 0x494e5e
pop ecx
and esi, 0xf2feda52
sub esi, 0xf2ff3b19
and edx, 0xf2ff8d7a
or edi, esi
not esi
xchg edi, esi
or edx, ebx
sub edx, ebx
jmp 0x494b0e
pop ecx
or ebx, esi
mov edx, ebx
ror edx, 0x18
jmp 0x494655
call fcn.00495653
add ebx, edx
add edi, edx
rol edx, 4
jmp 0x4954f7
push 0xe215ed9e
xchg edx, ebx
add edi, esi
or edi, ebx
mov ebx, esi
xor ebx, 0xf3074366
jmp 0x494dec
call fcn.00495653
add edi, esi
shl ebx, 0xd
sub edi, ebx
bswap esi
bswap esi
sub esi, edi
or edi, edx
mov esi, ebx
xchg ebx, esi
add esi, edx
jmp 0x49587b
push 0xe21d8bd3
or edx, ebx
mov ebx, 0xf30f3d0a
mov edx, ebx
mov ebx, edi
xchg ebx, edx
or ebx, esi
or edx, edi
xchg ebx, edx
sub edi, ebx
jmp 0x496170
push 0xe219bd3d
sub esi, 0xf343515a
xchg edi, esi
xchg edi, ebx
or ebx, edi
ror edx, 6
jmp 0x494a5b
pop ecx
mov esi, edx
mov edx, esi
sub edi, edx
dec edx
not edx
mov edx, 0xf3470ef8
sub edi, 0xf34762ba
sub edi, edx
inc ebx
mov esi, ebx
sub edx, edi
jmp 0x4946bc
mov ecx, 0x2d734e3d
sub ebx, esi
not ebx
and edi, ebx
add esi, 0xf34ff8da
sub ebx, edi
xor edi, edx
xor ebx, edi
neg esi
shl edx, 0xf
jmp 0x49528a
mov ecx, 0x123b2f04
xchg edi, esi
add edi, edx
not ebx
add edi, ebx
add esi, edi
shl edi, 0xe
xor esi, 0xf35949d9
sub ebx, edx
mov edi, 0xf359ebf8
or edx, 0xf35a3c52
or edi, edx
jmp 0x49646a
call ecx
mov edi, edx
bswap ebx
and edx, edi
shr edx, 0x1e
or esi, edi
mov edx, esi
and edi, 0xf35f9f1c
or esi, 0xf35ffd5b
dec esi
xor esi, edi
and ebx, 0xf360f375
add esi, 0xf36142bb
jmp 0x495d24
push 0x40
mov edi, ebx
shl edx, 0x10
or edx, 0xf3a4b09e
xor edi, 0xf3a528c2
not esi
xor edi, 0xf3a5cec8
rol edi, 9
add edi, ebx
rol esi, 8
jmp 0x4951e5
call fcn.00495653
xchg edi, ebx
rol edx, 0x1f
xor edi, edx
xor edi, 0xf3ac2250
sub edi, esi
nop
mov edi, edx
add ebx, edx
dec edi
jmp 0x49622e
call ecx
add esi, 0xf3bd8f73
shr esi, 8
add esi, 0xf3be5935
mov ebx, 0xf3beab14
or ebx, 0xf3befd10
sub ebx, edx
add ebx, 0xf3bf9f6e
dec edi
jmp 0x494d06
pop ecx
xor edx, ebx
bswap edx
mov ebx, esi
bswap ebx
not edx
and ebx, esi
mov edx, ebx
jmp 0x49547d
mov ecx, 0x123b2f04
mov esi, edi
and esi, edi
xor ebx, 0xf3cf1942
mov ebx, 0xf3cf6d55
xchg edx, edi
add edx, esi
xor edi, 0xf3d05e27
xor edx, esi
jmp 0x49664c
push 0xe20c685c
sub edi, ebx
or edx, edi
add edi, ebx
add esi, ebx
xchg ebx, edx
mov esi, ebx
neg edi
rol edi, 2
jmp 0x496c62
call ecx
dec esi
mov esi, ebx
shl edx, 0x16
mov esi, ebx
inc edi
rol edi, 7
sub edi, edx
mov ebx, esi
shl ebx, 3
add edi, edx
xchg edi, esi
jmp 0x496c20
push 0xe2058019
bswap edx
dec ebx
add edx, edi
mov edx, esi
shr ebx, 0x13
not ebx
sub ebx, 0xf3ec1dbd
xor ebx, esi
mov ebx, 0xf3ecbf4a
jmp 0x4958be
push 0xe21d53cd
and esi, edi
ror esi, 0x14
xor edi, edx
shr edx, 0x18
sub esi, edi
and ebx, edx
or edx, edi
xchg ebx, esi
ror ebx, 0x14
and ebx, esi
jmp 0x4966dc
push 0xe21bf7d7
add edx, 0xf3f8ee5a
not edi
or edx, 0xf3f9949d
xchg ebx, edx
xor ebx, esi
jmp 0x49484c
push 0xe212cfaa
xor edx, esi
ror edx, 3
inc edi
shl edi, 0x10
mov edi, edx
sub edx, edi
add ebx, edi
or edx, 0xf3fcf47a
jmp 0x495a00