Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Hide thread from debugger

Disassembly:
or edi, edx
or ecx, 0x3d8f2600
add ecx, esi
dec esi
xchg ecx, edi
or edi, 0x3d9342ac
call sub.user32.dll_GetClipboardOwner
xchg edx, edi
cmp eax, 0xffffff1b
jne 0x4010bc
call sub.ntdll.dll_NtSetInformationThread
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.ntdll.dll_NtSetInformationThread
call sub.shell32.dll_SHAppBarMessage
call sub.shell32.dll_SHAppBarMessage
call sub.ole32.dll_CoFreeAllLibraries
call sub.ntdll.dll_NtSetInformationThread
call sub.ole32.dll_CoFreeAllLibraries
call sub.ntdll.dll_NtSetInformationThread
call sub.shell32.dll_SHAppBarMessage
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.ole32.dll_CoFreeAllLibraries
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.ole32.dll_CoFreeAllLibraries
call sub.ole32.dll_CoFreeAllLibraries
call sub.ole32.dll_CoFreeAllLibraries
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.ole32.dll_CoFreeAllLibraries
ret
mov edx, edi
sub esi, 0x3d9bcea5
and ecx, edi
call sub.kernel32.dll_GetCurrentProcessId
add edi, ecx
add ecx, edi
inc ecx
mov esi, edx
shr ecx, 9
cmp eax, 0xffffff32
jne 0x40116d
call sub.ntdll.dll_NtSetInformationThread
call sub.ntdll.dll_NtSetInformationThread
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.shell32.dll_SHAppBarMessage
call sub.shell32.dll_SHAppBarMessage
call sub.shell32.dll_SHAppBarMessage
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.ole32.dll_CoFreeAllLibraries
call sub.ntdll.dll_NtSetInformationThread
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.ole32.dll_CoFreeAllLibraries
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.shell32.dll_SHAppBarMessage
call sub.ole32.dll_CoFreeAllLibraries
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.ntdll.dll_NtSetInformationThread
ret
sub edi, esi
add edi, edx
xchg esi, ecx
inc edi
call sub.kernel32.dll_GetCurrentProcessId
and esi, edx
xchg ecx, edi
or edi, 0x3dad35df
and esi, ecx
cmp eax, 0xffffff2d
jne 0x401209
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.ntdll.dll_NtSetInformationThread
call sub.shell32.dll_SHAppBarMessage
call sub.ole32.dll_CoFreeAllLibraries
call sub.ole32.dll_CoFreeAllLibraries
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.ole32.dll_CoFreeAllLibraries
call sub.ntdll.dll_NtSetInformationThread
call sub.shell32.dll_SHAppBarMessage
call sub.shell32.dll_SHAppBarMessage
call sub.ole32.dll_CoFreeAllLibraries
call sub.ntdll.dll_NtSetInformationThread
call sub.ntdll.dll_NtSetInformationThread
call sub.ntdll.dll_NtSetInformationThread
call sub.ntdll.dll_NtSetInformationThread
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
call sub.ole32.dll_CoFreeAllLibraries
call sub.shell32.dll_SHAppBarMessage
call sub.shell32.dll_SHAppBarMessage
call sub.ntdll.dll_NtSetInformationThread
ret
jmp 0x49464d
xchg esi, ecx
and edi, edx
jmp 0x4973fa
call esi
or edx, ecx
xor edx, 0x430aee71
ror edi, 0x13
ror ecx, 0x14
sub ebx, edx
or ebx, ecx
add edx, ebx
xchg edx, edi
neg ecx
mov edx, ebx
jmp 0x496719
call fcn.0049505d
sub edx, 0x431554dc
not edx
add edi, edx
xor ecx, edi
mov ecx, ebx
jmp 0x496abb
push 0x3f13cf80
mov edx, edi
or edi, edx
dec edi
jmp 0x496310
call esi
or ebx, 0x43404649
shr ecx, 0x19
sub ebx, ecx
add edx, 0x43428018
xor ecx, 0x434336a1
and edi, ebx
add edi, ecx
sub edx, edi
or ecx, edi
xor ecx, edx
inc ebx
add edi, 0x4348a00f
sub ecx, 0x43496f01
jmp 0x4974bb
call fcn.0049505d
shr edi, 0x17
rol ebx, 8
sub ecx, ebx
xchg ecx, edx
sub edi, 0x434d7ad0
and edx, edi
mov ebx, 0x434ec017
add ecx, 0x434fb043
jmp 0x495918
pop esi
or edi, edx
shl ecx, 0x16
sub edi, ecx
sub ebx, edx
rol ebx, 0x1d
add edx, edi
neg ecx
shr edx, 0x1c
xchg edx, ecx
mov ecx, edi
and edx, ebx
jmp 0x496b9e
push 0x3ef9c9bd
rol edi, 1
or edx, edi
mov ecx, edx
jmp 0x49485b
push 0x3efa7a6b
add ecx, edx
sub edi, edx
or edx, edi
sub edx, ecx
and ebx, edi
inc ecx
and edi, edx
or ecx, ebx
add edi, edx
sub edx, ebx
sub ebx, edx
jmp 0x4967ee
call fcn.0049505d
xchg ebx, ecx
xor ecx, 0x43806f53
xchg ebx, edi
shl edx, 8
and ecx, ebx
or ebx, edx
and edi, 0x4384739b
jmp 0x496bb3
mov esi, 0x2a371b56
neg edi
xchg edx, ecx
add edx, edi
sub ebx, ecx
jmp 0x49643e
call fcn.0049505d
or ebx, 0x438e3d70
nop
mov edi, ebx
and edx, edi
xchg ecx, edx
not ecx
xor ebx, 0x43930618
jmp 0x495010
push 0x3ef3b22e
xchg ebx, edx
dec ecx
add ebx, edi
or edx, edi
neg ebx
dec edi
mov ecx, edi
shr edi, 3
shl ecx, 0xd
jmp 0x4962be
push 0x3efbb987
xor edi, edx
nop
xchg ecx, ebx
or ecx, 0x43c260c0
and edi, ebx
add edi, ebx
or ecx, edi
mov ecx, ebx
jmp 0x49561a
push esp
mov edi, 0x43d64e44
sub ecx, edi
ror ebx, 3
and edi, edx
xor edx, edi
dec ebx
jmp 0x496e74
pop esi
add ebx, ecx
or edi, ecx
bswap ebx
or edi, edx
sub edx, ebx
xor edi, ebx
not ecx
and edi, ebx
xchg ebx, edi
xchg edx, edi
ror edx, 0x13
or ebx, 0x43f93275
or edi, edx
xchg edx, edi
jmp 0x4950cb
mov esi, 0x2a371b56
sub ecx, 0x4475c90a
bswap edi
or edi, edx
xor edi, ecx
and ecx, edi
sub edx, 0x4478d4fc
jmp 0x496293
mov esi, 0x6332a2e
shr ecx, 0x14
inc ecx
and edx, ebx
xchg ebx, edx
or ebx, 0x448daf83
jmp 0x495a49
push 0x3f293d51
and edi, ebx
dec ebx
and ecx, 0x449a259b
dec ebx
xchg ecx, edi
bswap edx
jmp 0x495ad5
pop esi
inc ebx
neg ecx
or ebx, edi
and edi, 0x44bd74d5
add edx, ebx
and ecx, edi
mov edi, 0x44bf4aeb
mov edx, 0x44bfe149
and edi, edx
or ebx, ecx
xor ebx, edx
and ecx, edx
xor ecx, edi
jmp 0x496c81
call esi
and edx, 0x44cf5d77
not ecx
sub edi, edx
add ebx, edi
or edx, ebx
inc ecx
and ecx, ebx
jmp 0x495114
pop esi
sub edx, 0x44e401c8
not edi
mov edi, edx
bswap edx
xor ecx, 0x44e6c98e
jmp 0x496306
push 0x3f007714
add edi, 0x44e79493
sub edx, edi
mov edi, edx
and edx, ecx
mov edx, ecx
and ebx, edi
add edi, 0x44eb1173
shr ecx, 0x10
mov ebx, 0x44ec54b5
xchg ecx, edi
or edx, 0x44ed89c3
or edx, edi
xor edi, edx
bswap ecx
jmp 0x49489b
mov esi, 0x2a371b56
rol ebx, 0x19
sub ebx, edi
and edi, ebx
mov ecx, edi
xor edi, ecx
sub edx, 0x44f2e6e7
xchg edx, edi
mov ecx, edi
add edx, 0x44f4bdf0
neg edx
inc edx
mov ecx, ebx
jmp 0x4948c9
push 0x3f2a84e2
neg edx
add edx, 0x450ae243
not edx
or edi, 0x450c1c8a
and ecx, 0x450cc05b
jmp 0x497379
pop esi
shr edi, 0x1f
xor edi, 0x450e29c9
and edx, 0x450ebbac
xor ecx, 0x450f507a
xor ebx, 0x450fe588
and edx, ebx
sub ebx, edi
shl edx, 0xa
and ebx, edx
add edi, ecx
inc edi
dec edx
jmp 0x494cf7
push 0x3f342d81
dec edi
or edi, 0x45203a19
and ecx, 0x4520d402
dec ebx
xor edi, edx
add ecx, edx
and ebx, 0x4523508d
shl edi, 5
xor edx, ecx
jmp 0x4960ee
push 0x3f12e303
and ecx, edi
and ebx, ecx
shl edx, 0x1a
xor edx, 0x452de18d
and edi, edx
jmp 0x496fb8
push 0x3ee03e16
add ecx, 0x453305e6
mov edi, ebx
add ecx, edx
bswap edx
and ebx, ecx
mov ecx, edi
inc ecx
xor edx, ebx
jmp 0x495770
call esi
add ebx, 0x4537e480
add ebx, edx
ror ebx, 0xb
ror ebx, 0x1f
mov edi, edx
sub edx, ecx
xor ecx, edi
add ecx, ebx
xchg edi, edx
jmp 0x495e01
mov esi, 0x6332a2e
mov ebx, edx
or edx, ebx
mov edx, 0x4550430e
mov ecx, edi
bswap ecx
xchg edx, ebx
jmp 0x496199
pop esi
add ebx, ecx
sub edx, 0x45536bf8
sub ebx, edi
and ecx, 0x4572795a
and ecx, 0x457333b3
sub ecx, ebx
xor ecx, ebx
jmp 0x497573
pop esi
rol edi, 0x16
add ebx, ecx
shl edi, 6
neg ecx
and ebx, edi
xor ebx, ecx
xchg ebx, ecx
rol edi, 8
add ecx, edi
add edi, ecx
sub edx, 0x46887aec
mov ebx, 0x46890d4e
add ebx, 0x4689a788
jmp 0x497254
pop esi
inc ecx
rol edx, 0xa
xor ebx, ecx
and edi, ebx
shl edx, 3
not ebx
jmp 0x495ca2
push 0x3f248ffc
mov edi, ebx
xor edi, ebx
and edx, 0x470e54f0
mov ecx, edi
or ebx, edi
add edx, ebx
or ecx, edi
add edi, ecx
bswap ebx
add edi, ecx
neg edx
and edx, ebx
jmp 0x4968cd
call fcn.0049505d
add ecx, 0x47273b03
or ecx, edx
shl ebx, 8
and edx, 0x472906c9
or edx, edi
or edi, edx
add ecx, edx
xor edx, edi
mov ebx, edi
xor edi, ebx
jmp 0x495d80
push 0x3ee1b847
rol edi, 0xb
or ebx, edi
or ebx, ecx
xor edx, edi
ror edx, 0x18
xor edx, ebx
jmp 0x496d5d
pop esi
or edx, ebx
add edx, ebx
jmp 0x496112
pop esi
mov ecx, 0x478c8855
add edi, 0x47904eec
mov edi, ecx
shr edx, 0x1d
or edx, 0x479214dc
dec edi
add ebx, 0x47934d29
shl edi, 0x1e
mov ecx, ebx
jmp 0x494826
mov esi, 0x2a371b56
sub edi, edx
xchg edi, edx
not ecx
mov ebx, edx
rol ebx, 0x1e
mov edx, 0x47d1b8c7
add ebx, edx
add edi, ebx
ror ebx, 0x1f
and edi, 0x47d40dc1
jmp 0x49535d
pop esi
xor ecx, ebx
inc ebx
mov ecx, edi
xor edi, ecx
sub edx, ecx
ror edi, 0x15
shl ebx, 5
jmp 0x496204
pop esi
xchg edi, ebx
neg ecx
xor edi, edx
xchg edx, ecx
shr edi, 0xc
sub ecx, ebx
inc edi
shl edi, 5
add edi, ecx
mov ecx, edi
jmp 0x496632
push 0x3ee0a82f
bswap edi
and ecx, ebx
and ecx, 0x4818fedb
mov ebx, edx
sub edx, ecx
jmp 0x4966c1
push 0x3f2f348c
and ecx, edi
or edx, ebx
rol ebx, 0x14
sub edx, edi
rol edx, 8
rol ebx, 0x1e
and edi, edx
mov ebx, edi
xor edi, ecx
ror ecx, 0x18
jmp 0x495d0f
push 0x3f09e267
sub edi, edx
xchg edi, ebx
add ecx, edi
bswap edi
sub ebx, 0x485ab25a
or ebx, 0x485b5b07
rol edi, 0xb
bswap ecx
shr edi, 0x15
jmp 0x4959d9
push 0x3f2ead9b
and edi, 0x485df183
sub ecx, 0x485e81ca
and ebx, edx
bswap ebx
or ebx, 0x486044aa
or ecx, edi
mov ecx, edx
jmp 0x495838
call esi
shr ebx, 0x1e
rol edi, 0x16
ror ebx, 0x12
shr edi, 8
add ebx, ecx
add ebx, 0x4872f8f9
xchg edx, ebx
sub edx, 0x48743bb7
xchg edx, ebx
sub edx, ebx
add ecx, 0x48760acc
xor edi, edx
mov ebx, 0x48773f52
mov edx, edi
jmp 0x4971b7
push 0x3f0a6f27
dec edx
or ecx, edi
dec ecx
shr ecx, 0xe
xchg ebx, edx
add edi, edx
rol edx, 0xb
or edi, 0x4892b3d7
or edx, 0x48934ece
not edx
mov ebx, edx
jmp 0x497305
call fcn.0049505d
or edi, 0x48a27d8d
ror edi, 0x1e
mov ebx, 0x48a3a469
sub ecx, edx
not ebx
or ebx, ecx
jmp 0x497231
push 0x3f29f113
sub ebx, ecx
xchg edi, edx
sub edx, ebx
mov ecx, edx
or edx, 0x48bcc624
or ebx, edi
shr edx, 0xe
ror edx, 0xd
jmp 0x494ee5
pop esi
and ecx, 0x48c903aa
xor edx, ecx
neg ebx
bswap ecx
jmp 0x494f6c
push 0x3edca8ba
add edi, ebx
bswap ebx
not edx
not ebx
and ecx, ebx
xor edi, edx
dec ebx
jmp 0x494b45
mov esi, 0x2a371b56
mov edx, 0x48e6d894
add edi, 0x48e80034
mov ebx, ecx
ror edi, 2
mov edi, ecx
add edx, 0x48eb5822
not ebx
or edx, ebx
jmp 0x495c66
call fcn.0049505d
or ebx, ecx
dec edi
jmp 0x49719c
pop esi
mov edi, edx
and ecx, edx
xchg edi, edx
sub ecx, ebx
and edx, edi
sub edi, 0x491963f5
or ebx, edi
or ecx, edi
or edi, edx
mov edi, edx
add edx, ecx
xchg edx, ebx
sub edx, ebx
jmp 0x494ac3
mov esi, 0x2a371b56
mov ecx, edx
nop
add ebx, edx
or edx, edi
neg ecx
sub ecx, ebx
jmp 0x4964ee
call esi
sub ecx, ebx
not ecx
xchg ebx, ecx
or ebx, edi
jmp 0x496144
pop esi
xor ebx, edi
xor ecx, 0x49545021
xor ebx, edx
add edx, 0x49558195
add edx, ebx
dec edi
add ebx, 0x49573a5b
and edi, 0x4957da53
neg ebx
xchg edi, ebx
dec edi
xor ebx, edi
ror ebx, 0x1a
jmp 0x494fbc
push 0x3f1fc7ae
sub edx, 0x495bbec5
or ebx, edi
add edi, ecx
jmp 0x495bc0
call fcn.0049505d
not ebx
shl edx, 5
not ebx
add edx, edi
mov ebx, edx
dec edi
xor ecx, edi
xor edi, ebx
mov edx, ecx
dec edx
jmp 0x49748d
push 0x9324d
mov edi, ecx
mov edx, edi
xor ebx, ecx
nop
dec ecx
xor edx, edi
and ebx, ecx
and edi, edx
jmp 0x496a78
push 0x3ef580a9
sub ecx, 0x498da43c
neg ecx
xor edx, ebx
and ecx, edi
ror edi, 0x1b
add edx, ecx
or ecx, edi
xchg edi, ebx
and edx, ebx
mov ecx, 0x499343f2
or edx, ebx
jmp 0x4968ae
call esi
and edx, 0x4994acfb
or ecx, edx
xchg ecx, ebx
and ecx, edi
shr edx, 0x13
nop
neg ecx
or ecx, edi
and ecx, edi
or ebx, 0x499b45fd
jmp 0x4963cc
pop esi
xchg ebx, edx
xor edi, 0x49b4052b
ror ecx, 0x17
inc edx
not ecx
dec ebx
add edi, ebx
or edi, ebx
xor edi, ebx
xor ebx, edx
jmp 0x49695d
call esi
add ecx, ebx
add ecx, 0x49cb63c6
or ebx, edx
mov edi, ebx
or edx, ecx
bswap edi
xor ecx, ebx
jmp 0x4973a5
call esi
add edx, ebx
and ecx, ebx
xchg ecx, edx
inc edx
xchg ebx, edi
jmp 0x496a10
push 0x3f14ddc0
sub ecx, 0x49d61aaa
and ebx, 0x49d6ac12
mov edi, ebx
add ebx, edx
xor edi, ebx
add edi, ecx
jmp 0x4950b2
mov esi, 0x2a371b56
mov edi, ebx
add edx, ebx
xchg ebx, edx
not edx
add edx, ecx
add ecx, edi
jmp 0x496d1e
mov esi, 0x6332a2e
and ebx, edi
neg edi
xor ecx, ebx
xchg edx, edi
mov ebx, edx
xor ebx, edi
or ecx, 0x49e10e0b
xchg edx, ecx
add edi, ecx
xor ecx, edi
or edx, edi
jmp fcn.00495fce
pop esi
or edi, 0x49e41544
xchg ecx, edi
xchg ecx, edi
sub edi, 0x49e5d32b
xor edi, ecx
add ebx, 0x49e6f5c2
bswap ecx
xor ecx, 0x49e84203
add edx, ebx
not ebx
or edx, ecx
and edx, edi
and ebx, edi
and edx, ebx
jmp 0x49697d
pop esi
shl ecx, 0x10
shr edi, 0xe
add edx, ecx
xor ecx, edx
or ecx, edi
mov edx, ebx
xchg edi, ebx
rol edx, 0xd
xchg edx, edi
xchg edx, edi
or ecx, edi
sub edx, 0x49f3e231
not ebx
sub edi, ebx
and ebx, edx
jmp 0x494f05
call fcn.0049505d
or edi, ebx
xchg edx, edi
mov ebx, ecx
add edx, ebx
add edi, 0x49ff0600
xor ecx, edx
shl ecx, 0x18
add ebx, ecx
dec ebx
mov ebx, edi
add edi, edx
or ecx, 0x4a02f2b0
mov edi, 0x4a0387d1
jmp 0x496076
push 0x3f0f5446
xor edx, ebx
bswap ebx
and ebx, edi
sub ecx, edi
or ecx, edi
add edi, 0x4a1312a5
jmp 0x494e2f
call fcn.0049505d
mov ebx, edi
mov edx, edi
jmp 0x49608f
call fcn.0049505d
add ebx, edi
mov edx, 0x4a284d4e
mov edi, 0x4a28df5b
add ecx, edi
nop
and edi, edx
xor edi, edx
xor edi, ebx
and edi, ebx
mov ebx, edx
xchg ecx, edi
sub ebx, edi
xchg ebx, edx
sub ecx, edi
jmp 0x494d69
push 0x3ef4642e
sub ecx, edi
sub ecx, 0x4a3072fe
shr ecx, 0x18
rol edx, 0x11
mov ebx, 0x4a323ad9
sub ebx, ecx
xor edi, ecx
xor edi, 0x4a33e754
jmp 0x496889
pop esi
add ebx, edx
add edi, edx
jmp 0x496db4
push 0x3f1460ac
xor edx, 0x4a3d91ef
sub ebx, ecx
add ecx, edx
jmp 0x4960ba
pop esi
xor edx, edi
shr edx, 2
or ebx, edi
sub edx, ebx
and ecx, 0x4a6def15
mov ebx, ecx
dec edx
shr edx, 7
mov ebx, ecx
mov edi, 0x4a8c56b6
shl ebx, 8
rol ebx, 0x16
xor edi, edx
mov edx, ecx
shl ecx, 0x18
jmp 0x495e30
call fcn.0049505d
or ecx, edx
and edi, ecx
nop
and edx, 0x4a9b8291
jmp 0x49474c
call fcn.0049505d
sub edx, 0x4ab6a0a1
and edx, edi
add edx, edi
bswap edi
nop
jmp 0x494656
push 0x3f23e46c
xor ebx, 0x4abe6b60
xchg edx, edi
or edi, ecx
xor edx, edi
shl edx, 5
neg ecx
bswap edi
and edi, 0x4ac27bbe
and ebx, ecx
jmp 0x4952d4
call esi
mov edi, ebx
shl edi, 0x12
rol edi, 0xc
xchg ebx, edx
jmp 0x495ff0
pop esi
or edi, ecx
neg edi
add edi, ecx
sub edx, edi
jmp 0x495897
push 0x3ee1343d
mov ecx, 0x4b5a2e4c
add edx, ecx
xor ecx, 0x4b5b9348
and ebx, 0x4b5c2515
mov edi, ecx
ror ecx, 7
dec edi
xor edi, edx
mov ecx, edx
jmp 0x495384
pop esi
xor edx, edi
inc ecx
shr edi, 0x1e
sub edi, 0x4b739bca
bswap ecx
xchg ecx, edx
add edi, 0x4b757dc0
sub ecx, edi
jmp 0x495b26
push 0x3efb1324
xor edi, ecx
or ebx, ecx
mov edi, ebx
mov edi, ecx
xor edx, ebx
and edi, ecx
not ecx
jmp 0x4949c8
pop esi
or edi, ecx
and edx, edi
add ecx, edx
xchg ecx, edi
add edx, ecx
rol edx, 2
add ecx, edx
xor edi, edx
xor ebx, edx
xchg edx, ebx
jmp 0x495559
mov esi, 0x4132136a
mov ebx, edi
or edi, ecx
sub ecx, edi
and edx, edi
mov edx, 0x4bb16b12
and ecx, 0x4bb202fc
sub edi, ecx
add ecx, 0x4bb331b5
shl edx, 9
and ecx, edi
jmp 0x494690
push 0x3ef4e8c5
xor edx, ecx
or ecx, ebx
add edi, edx
mov ebx, ecx
and edx, edi
shr ecx, 0x19
sub edi, edx
not ebx
bswap ecx
xchg ebx, edx
inc edi
rol edx, 0x1e
mov edx, ecx
jmp 0x495f28
mov esi, 0x2a371b56
inc edx
or edx, ecx
sub ecx, edi
rol edx, 0xa
xchg ecx, edi
sub edi, edx
inc ecx
mov ecx, edx
and ebx, 0x4bc1116d
jmp 0x49624b
push 0x3f24fe67
dec edi
add edx, 0x4bc260ae
mov edx, edi
not ecx
xchg ebx, edx
jmp 0x496a4d
push 0x3f082ba2
xor ecx, ebx
and ebx, ecx
nop
xor ecx, edi
sub edx, ecx
add ecx, 0x4bdea862
or edi, edx
mov ebx, 0x4bdfc45a
jmp 0x497470
pop esi
or edi, edx
dec ebx
ror edi, 0xb
xchg edi, edx
xor edi, ecx
ror ebx, 1
xchg edi, ecx
not edi
xor ebx, edi
jmp 0x494c2f
pop esi
dec edx
add ecx, edi
or ebx, edi
add ecx, ebx
add edx, ebx
sub ebx, ecx
bswap edi
bswap ecx
jmp 0x4975f8
mov esi, 0x2a371b56
mov ebx, 0x4c057c48
or edx, ecx
or edi, ebx
and edi, edx
xchg ebx, edi
jmp 0x495e76
push 0x401400
add edi, ecx
or ebx, edi
add ebx, edx
xor edi, ebx
mov edx, 0x4c0e76a8
or ebx, edi
neg ecx
bswap edi
shr edi, 0x1c
or ebx, 0x4c117afb
jmp 0x496573
pop esi
or edx, ecx
dec ebx
and edi, 0x4c13f4e9
add edi, edx
dec ecx
shl ebx, 0x13
and ebx, edi
neg edx
xchg edx, ecx
xchg edx, ecx
jmp 0x495641
push esp
sub ecx, edi
add edi, ecx
xor ebx, ecx
neg edx
xchg edi, ecx
jmp 0x494a26
pop esi
mov edi, ebx
dec ebx
sub ebx, edx
mov edi, 0x4c2f246a
xor edx, 0x4c2fccce
mov edx, edi
ror edx, 0x19
neg edi
rol ecx, 9
add edi, 0x4c32f4b7
sub ecx, edi
xor edx, 0x4c343d5e
jmp 0x496e0d
pop esi
nop
sub ecx, edx
sub edi, ecx
add edi, edx
xor edx, ebx
neg edi
xor ebx, ecx
mov edx, ecx
jmp 0x49714f
call esi
sub ebx, edi
sub ecx, 0x4c46e0ee
or ecx, 0x4c485f6a
xor ebx, edi
and edi, edx
or ecx, 0x4c4a60bf
sub ecx, edi
inc ebx
add ecx, edx
sub ecx, 0x4c4d6fb3
mov ebx, edi
bswap ebx
jmp 0x4947de
pop esi
or ecx, 0x4c70ecec
or ebx, ecx
not edi
xor edi, 0x4c73107c
and edi, ecx
xor ebx, edi
xchg edi, edx
inc edx
not edx
xor ecx, 0x4c7748b9
jmp 0x494df9
call fcn.0049505d
mov edx, 0x4c907d02
xchg ecx, edx
or ebx, ecx
xor edx, 0x4c9298e8
sub edi, edx
or edi, 0x4c93ebb3
jmp 0x495f50
push 0x3ee24d27
rol edx, 8
or ecx, 0x4c9c1931
or edi, ecx
mov ecx, 0x4c9d938f
mov ecx, edi
add edi, ecx
or edi, ecx
and edx, edi
xchg ecx, edi
mov ecx, edx
jmp 0x494bce
pop esi
and ebx, edx
xchg ecx, edx
dec ebx
jmp 0x4948e8
pop esi
or ecx, edi
shr ebx, 0x1d
xor edi, edx
and edx, ecx
xchg ebx, ecx
bswap edx
sub edx, ecx
jmp 0x494de1
push 0x40
xchg edx, ecx
xchg edx, edi
and edx, edi
mov ebx, 0x4cce1a53
sub ecx, edi
and ebx, edx
sub ecx, edx
sub edx, 0x4cd087a9
bswap ebx
not edx
xor ebx, edi
add ebx, edx
add edi, ebx
xor edi, ebx
and ecx, edi
sub ecx, ebx
jmp 0x495f10
push 0x3f134ac6
sub ecx, edi
mov edx, edi
shr ebx, 3
sub edi, edx
xor edx, ebx
jmp 0x4946fa
pop esi
or ecx, ebx
xor ecx, edx
and edi, edx
shl ecx, 0x11
and edi, edx
bswap ecx
inc edx
add ebx, edi
jmp 0x496521
pop esi
xor edx, 0x4f71a2c2
rol edi, 0x1c
inc ecx
neg ecx
and edx, 0x4f741323
sub edi, edx
xor edi, ebx
and edx, 0x4f75bb0f
mov ecx, edx
add ebx, ecx
or edi, ebx
jmp 0x496a9e
call esi
or edx, ecx
not ecx
add edi, 0x4f7e8f41
or ebx, ecx
rol ecx, 0xf
add edi, ebx
ror edx, 0x12
jmp 0x49706b
pop esi
and ecx, edi
add edx, ebx
or edi, ebx
xchg ecx, edx
xor ecx, ebx
xchg edi, edx
or ebx, edx
mov ecx, ebx
mov edi, 0x4f85f757
jmp 0x495727
push 0x3f097200
shr edi, 0x19
sub edx, ebx
or edi, ebx
xchg edx, ecx
or ebx, ecx
mov edi, 0x4f8984fe
add ebx, edi
jmp 0x495871
call esi
bswap edi
xor edx, 0x4f978671
mov edx, 0x4f981abc
or edx, edi
or ebx, edi
bswap edx
add edi, ecx
mov edi, 0x4f9af574
xor edi, ebx
jmp 0x496b1c
pop esi
rol edx, 0x1d
shl ebx, 2
mov ebx, edi
xchg edx, ebx
xchg ebx, ecx
jmp 0x494ff3
mov esi, 0x6332a2e
or edx, ebx
mov ecx, 0x4fb7b25d
or edx, edi
xor edx, 0x4fb8d7f3
xchg ebx, edi
sub edx, 0x4fba01e3
not edi
sub ebx, ecx
bswap edx
jmp 0x49487a
mov esi, 0x2a371b56
or ebx, edi
mov edi, ebx
and edi, 0x4fcb7857
add edi, ecx
xor ecx, 0x4fcc970b
mov edi, ebx
and ecx, edx
xor edi, 0x4fce3507
xor edi, 0x4fced9bc
jmp 0x494781
pop esi
neg ecx
dec ecx
add ebx, ecx
and edi, ecx
xchg ecx, ebx
sub edx, ecx
add ebx, edi
add ebx, ecx
xchg edx, edi
mov ebx, 0x4fd4a55f
jmp 0x495218
push 0x3edbd0df
add edi, ecx
rol ecx, 0xe
xchg ebx, ecx
mov edx, ebx
shl ecx, 2
and ecx, edx
xchg edi, edx
add edi, edx
mov ecx, ebx
and ecx, 0x4fe29ab0
jmp 0x495b58
push 0x3f08cb9c
not edi
xchg ebx, edx
not ecx
or ecx, edi
rol ecx, 0xe
sub ebx, 0x4ff4a9a4
mov edx, ebx
jmp 0x4971d2
call esi
xor ebx, ecx
sub ebx, 0x4ff68ae9
sub ecx, ebx
xor ecx, ebx
shl ebx, 0xa
or edx, 0x4ff8e48b
jmp 0x4954f2
pop esi
add ecx, ebx
xor ecx, edx
not edi
add ebx, 0x4ffdb89a
or edi, edx
and edx, ecx
xchg ecx, ebx
or ecx, ebx
add edx, edi
mov ebx, ecx
add ebx, 0x500197bf
add edx, 0x500228b5
sub edx, 0x5002b83a
mov ebx, ecx
neg ebx
jmp 0x49685f
push 0x3f1b1a69
rol ecx, 0x1f
mov ebx, edi
or ebx, 0x501bde6e
ror ebx, 0x12
sub edx, 0x501d5e2f
and ecx, ebx
add ebx, edx
jmp 0x4960d8
pop esi
shl edx, 0x11
xor ecx, edi
rol ebx, 0x19
and ecx, ebx
and edx, 0x5038c4d2
xchg edi, ebx
add edx, ebx
or edi, ecx
shr edx, 0x19
mov edi, 0x503c3e86
sub ecx, ebx
add edi, ecx
not edx
mov edi, ecx
jmp 0x49682f