Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetCapture
cmp eax, 0xffffff17
jne 0x4010ac
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff14
jne 0x401149
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff2c
jne 0x4011aa
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff2d
jne 0x401242
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ntdll.dll_NtInitiatePowerAction
call sub.ole32.dll_GetHGlobalFromILockBytes
call sub.ole32.dll_GetHGlobalFromILockBytes
ret
jmp 0x855f57
add edi, edx
ror esi, 9
and ebx, edi
and esi, edx
jmp 0x8584c5
mov edx, 0x6332a2e
or ebx, 0xfae50c0e
or esi, ecx
add ecx, edi
shl ebx, 0x1b
or ebx, edi
not ecx
and edi, esi
jmp 0x856fc8
pop edx
add ecx, ebx
add ecx, edi
inc esi
or edi, ebx
mov ecx, esi
inc edi
jmp 0x85672f
call edx
and edi, ebx
and esi, ebx
ror ecx, 0x18
shl esi, 0xa
and ebx, 0xfb20ed58
sub ecx, ebx
sub esi, ebx
or edi, ebx
or esi, edi
jmp 0x858105
mov edx, 0x6332a2e
and ecx, edi
shl ecx, 0xa
mov ebx, 0xfb22acae
xchg ebx, ecx
mov esi, ebx
mov ecx, 0xfb23709d
mov ebx, edi
mov ecx, esi
or esi, 0xfb242135
and edi, ebx
xchg ebx, edi
jmp 0x859780
call edx
add ebx, 0xfb2c53c1
neg ebx
and ebx, esi
shl ecx, 4
sub ecx, ebx
sub edi, 0xfb2d9251
ror ebx, 0xf
not ebx
not edi
jmp 0x857fe0
mov edx, 0x6332a2e
and esi, ecx
add esi, 0xfb2edc3d
not esi
not ecx
add edi, 0xfb2fa6f8
sub esi, ebx
xor ecx, ebx
bswap ecx
and ecx, ebx
xor ebx, edi
not edi
jmp 0x8575f3
mov edx, 0x6332a2e
sub ebx, ecx
add edi, ecx
add ecx, 0xfb31dd0c
sub ecx, 0xfb321bc4
and ebx, ecx
inc edi
and ebx, 0xfb32e059
mov ebx, esi
xor esi, edi
and ecx, 0xfb33946b
sub ecx, esi
jmp 0x85995b
push 0xf729d5a3
add esi, ebx
sub ecx, ebx
and ebx, 0xfb3a1f9c
dec edi
and esi, ebx
or esi, 0xfb3ad55a
mov edi, ecx
xor esi, edi
xchg edi, ecx
or edi, ecx
mov esi, ecx
mov esi, 0xfb3c4db7
xor ecx, ebx
shr ebx, 0x1f
xchg ecx, edi
jmp 0x85797d
push 0xf7216922
neg ebx
and ecx, ebx
or esi, edi
sub edi, ecx
shl esi, 0xf
and esi, ecx
bswap ecx
xchg ecx, ebx
or edi, esi
sub ebx, ecx
bswap edi
sub esi, edi
jmp 0x856857
push 0xf73b95e7
or ebx, ecx
and ebx, ecx
ror esi, 0x10
add esi, ebx
xor ebx, edi
mov edi, esi
mov ebx, 0xfb55a3f8
xor ebx, esi
xchg ecx, ebx
sub esi, 0xfb565a9b
jmp 0x8587d7
pop edx
not edi
neg edi
xchg edi, ecx
mov esi, ebx
mov esi, ecx
xor ecx, esi
or ebx, 0xfb6650d8
add edi, ecx
sub ecx, 0xfb66da22
xchg edi, esi
jmp 0x859bd2
push 0xf744b074
or edi, 0xfb69d92f
mov ecx, esi
sub esi, ebx
xchg esi, ebx
or edi, 0xfb6acffb
mov ecx, esi
and edi, esi
sub ebx, ecx
dec esi
rol ebx, 8
or ecx, ebx
neg edi
xchg esi, edi
jmp 0x85962d
pop edx
add ecx, edi
sub esi, ebx
xchg edi, ebx
not ebx
or ebx, esi
dec edi
and ebx, edi
or edi, ecx
dec esi
add esi, ecx
jmp 0x857f1f
pop edx
add edi, esi
xor ebx, edi
xor ebx, 0xfb75a3a3
mov ecx, edi
dec ecx
xor ecx, edi
xchg esi, ecx
jmp 0x85709a
pop edx
shl ecx, 0x10
shl ecx, 0xe
ror edi, 0xc
xchg edi, esi
dec ebx
xor ebx, edi
xor edi, ebx
neg edi
not esi
jmp 0x858b88
push 0xf72ef96b
and esi, edi
add esi, ebx
or esi, 0xfb816488
add edi, 0xfb81a395
ror ecx, 0x1e
ror ebx, 0x14
mov ecx, edi
mov esi, edi
or ecx, edi
add ebx, ecx
jmp 0x856fb1
push 0xf721b126
or edi, ecx
xor edi, ebx
add ecx, esi
or ebx, 0xfb8b264b
jmp 0x859536
pop edx
xchg ebx, ecx
inc ebx
xchg edi, esi
shr esi, 2
xor ebx, ecx
xor edi, ebx
xor ebx, edi
and esi, edi
and edi, 0xfb90118a
mov edi, ecx
and edi, esi
jmp 0x858546
call edx
sub ecx, ebx
or ebx, 0xfb942570
xor ebx, esi
add ebx, 0xfb949f9a
neg ebx
and ecx, 0xfb951bfe
add edi, 0xfb956847
xchg ebx, esi
or esi, ecx
neg ebx
rol ebx, 0x11
add ebx, 0xfb970a0f
jmp 0x859193
pop edx
inc edi
sub esi, 0xfb9dba2f
sub esi, edi
or edi, 0xfb9e2ae3
xor ecx, 0xfb9e6221
dec ebx
shr ecx, 9
ror esi, 6
inc ecx
dec esi
sub edi, ebx
sub edi, esi
and edi, ecx
jmp 0x859d04
mov edx, 0x6332a2e
sub ecx, edi
mov ebx, edi
neg ebx
xor esi, 0xfba129dd
bswap ebx
or esi, edi
or esi, edi
sub ecx, ebx
xor ecx, 0xfba24f9e
jmp 0x85858f
call edx
xor ebx, esi
xor ecx, esi
sub ecx, esi
ror esi, 0x1b
mov ecx, ebx
dec ecx
add edi, 0xfba5cdd6
bswap esi
xor ecx, ebx
xor edi, esi
and esi, ecx
and esi, 0xfba6f4b7
bswap esi
jmp 0x857da3
pop edx
or ecx, ebx
xor ecx, 0xfba7b48b
shl ecx, 0x1a
shr ecx, 5
mov ecx, 0xfba85fbf
mov edi, 0xfba89712
xor ecx, ebx
xor edi, ecx
and edi, ecx
xor esi, 0xfba98362
xor esi, ebx
xchg ecx, esi
bswap edi
sub ecx, edi
jmp 0x856eba
call edx
dec ebx
or ebx, edi
ror esi, 0x19
nop
xor esi, edi
mov ecx, edi
or edi, esi
ror ecx, 2
jmp 0x858223
push 0xf73e20ac
sub edi, ebx
or ecx, edi
or ecx, esi
or edi, ecx
shl ecx, 9
add edi, 0xfbb181a7
add edi, 0xfbb1b92a
bswap ebx
jmp 0x85935b
mov edx, 0x6440607e
xor esi, 0xfbb7dac1
add ecx, esi
or esi, ecx
inc ebx
xor ebx, ecx
mov edi, ebx
xor ecx, esi
and edi, esi
mov ecx, esi
jmp 0x856b31
call fcn.008597f6
dec edi
neg esi
xor ebx, esi
jmp 0x857379
push 0xf740b6c5
not ebx
and edi, ebx
add esi, ebx
and ebx, 0xfbc2da78
sub ebx, edi
and esi, ecx
and edi, ebx
add ebx, 0xfbc3b725
add ebx, edi
mov ecx, ebx
or ebx, esi
and esi, ebx
mov esi, 0xfbc4d66c
xor ebx, edi
jmp 0x857337
push 0xf724ce0e
sub ecx, 0xfbc85726
bswap ebx
add edi, esi
xchg ebx, edi
mov esi, ebx
or ecx, edi
xor esi, 0xfbc9b38c
bswap ebx
shr ecx, 0x1d
mov ecx, edi
add esi, ebx
jmp 0x859a00
push 0xf7387e2e
not ebx
xor edi, ecx
xor ebx, ecx
sub ecx, 0xfbdc5f73
inc ebx
add ebx, ecx
or esi, ecx
add esi, ebx
bswap esi
bswap esi
xchg ecx, ebx
or ebx, ecx
jmp 0x858a94
mov edx, 0x6440607e
xor esi, ecx
and ebx, edi
and ecx, edi
dec esi
shr ebx, 0x11
shr esi, 0x19
mov ebx, edi
shl esi, 0xa
xor ecx, edi
nop
add ecx, ebx
xchg esi, edi
jmp 0x8574ab
push 0xf73dd504
shr ebx, 0xd
neg esi
rol ebx, 0xe
not esi
mov edi, ebx
xchg edi, esi
xchg edi, ecx
and esi, ebx
bswap edi
xchg edi, esi
jmp 0x856a6e
pop edx
neg edi
and esi, ecx
shr esi, 0xf
and esi, ebx
dec ebx
shl ecx, 9
dec ecx
mov edi, 0xfbf8d091
add esi, edi
or edi, 0xfbf94d3a
or ecx, esi
mov esi, edi
add esi, 0xfbf9f2d0
shl esi, 0xa
xchg ebx, esi
shr ecx, 0xa
jmp 0x857a76
pop edx
add edi, ebx
dec ebx
and esi, ebx
sub edi, ebx
sub edi, ebx
add esi, edi
sub edi, 0xfbfc3642
inc esi
sub ecx, 0xfbfcb753
add esi, edi
add esi, ebx
add ecx, ebx
mov edi, ecx
add esi, 0xfbfdc850
jmp 0x856fea
pop edx
mov edi, 0xfc0822c4
or edi, ecx
and esi, 0xfc089f5b
jmp 0x858270
push 0xf72f8054
or ecx, esi
or edi, ebx
xor esi, ecx
and edi, esi
or ebx, edi
shr ebx, 7
jmp 0x855f65
call fcn.008597f6
mov ecx, esi
sub edi, ebx
rol ebx, 1
add ecx, ebx
sub esi, edi
mov esi, edi
rol ebx, 7
mov ebx, esi
add ebx, ecx
xchg ebx, esi
bswap esi
jmp 0x857f37
pop edx
and ebx, ecx
mov ebx, esi
mov esi, ecx
inc ebx
mov ebx, edi
sub ebx, 0xfc113a51
sub ebx, esi
and ecx, ebx
mov edi, esi
neg edi
add edi, 0xfc125d79
jmp 0x8567ac
push 0xf7316e4a
xor edi, 0xfc19afc2
and ebx, edi
mov edi, ebx
bswap ebx
mov ebx, esi
or ebx, ecx
xor ecx, edi
xor ecx, edi
xor esi, ebx
and ecx, ebx
sub esi, edi
add esi, 0xfc1c5051
jmp 0x858cea
push 0xf7298d20
neg esi
or ecx, ebx
and esi, edi
xor ecx, edi
xchg ebx, esi
xor ebx, ecx
xchg ebx, esi
sub ecx, esi
and ebx, esi
jmp 0x85640e
push 0xf726c6c6
mov ecx, esi
mov edi, 0xfc1f23e0
xor ecx, edi
xor ebx, edi
jmp 0x859aaa
pop edx
mov ecx, 0xfc2db45b
xor edi, 0xfc2df292
xchg esi, ecx
bswap edi
sub ecx, 0xfc2eba43
jmp 0x8583d9
push 0xf73b03e8
xchg edi, ebx
or edi, esi
shr ecx, 0x15
xchg esi, ecx
xchg esi, ebx
mov esi, ebx
add esi, ebx
or esi, ebx
bswap edi
xchg esi, ecx
xchg esi, edi
xor ebx, esi
or esi, ecx
and ebx, edi
xchg esi, edi
sub ebx, 0xfc4c8083
jmp 0x859b5f
push 0xf740ff41
mov esi, ebx
or ebx, esi
neg edi
and esi, 0xfc4d9ce3
neg ebx
mov edi, esi
xor esi, ebx
bswap ecx
and esi, ebx
add ecx, esi
mov esi, 0xfc4fc25b
jmp 0x857ca9
call edx
dec edi
or edi, 0xfc52132f
xchg edi, esi
and ecx, 0xfc528406
jmp 0x8589c9
push 0xf7406c5e
mov ebx, edi
ror esi, 0x15
sub ebx, esi
xor edi, ebx
or edi, esi
xor edi, esi
dec ecx
rol edi, 0x10
xor esi, ecx
sub edi, ecx
inc edi
xor ebx, ecx
mov esi, ebx
xor ebx, esi
bswap edi
xor ebx, esi
jmp 0x856b83
call fcn.008597f6
or esi, edi
shl esi, 0x1e
or ecx, edi
add edi, 0xfc667de3
and esi, ecx
sub ecx, 0xfc66ecc7
dec ecx
and ecx, ebx
shl ecx, 3
sub edi, 0xfc67dc6b
bswap edi
add ebx, edi
sub edi, 0xfc68853f
mov ecx, esi
jmp 0x8597e1
push 0xf724861d
and esi, ebx
mov edi, esi
shr edi, 7
mov ecx, ebx
and ebx, ecx
nop
jmp 0x856bda
push 0xf7458052
sub ecx, edi
sub ecx, ebx
xchg ecx, esi
shl ebx, 0xf
mov ebx, edi
and edi, ebx
sub ebx, esi
sub edi, 0xfc6ed3ca
rol ecx, 8
xor edi, ebx
xchg edi, ebx
jmp 0x857e27
call fcn.008597f6
xchg edi, ecx
or ecx, edi
neg edi
mov ebx, ecx
xor ebx, ecx
ror esi, 0x12
xchg edi, esi
sub ebx, esi
and ecx, edi
sub edi, esi
jmp 0x856293
call fcn.008597f6
xor esi, ebx
shr esi, 0x1c
ror ebx, 0x11
ror ebx, 0x14
xor edi, ebx
bswap ecx
or ebx, esi
xor ecx, 0xfc7b89d6
or ecx, esi
neg ebx
rol ecx, 0x10
not esi
and ecx, ebx
shr ebx, 0xb
sub ecx, edi
jmp 0x857ecd
mov edx, 0x6440607e
sub esi, ecx
xchg ecx, edi
xchg ebx, ecx
sub ebx, edi
sub esi, ebx
jmp 0x857f8d
call edx
add edi, ecx
mov edi, 0xfc9da314
sub ecx, ebx
add ebx, ecx
xor ebx, ecx
nop
xor ecx, 0xfc9ee3a6
shr ecx, 2
jmp 0x85808b
push 0xf72a571a
ror ecx, 9
xor ebx, 0xfcb996f0
xor ecx, edi
xchg esi, ebx
sub ebx, edi
xor ecx, ebx
jmp 0x859525
push 0xf737fce7
add ecx, ebx
or esi, ebx
dec ecx
xor esi, edi
or esi, 0xfcc159e0
add ecx, edi
mov ebx, esi
mov esi, edi
or edi, ebx
or edi, ebx
add ebx, edi
xchg edi, esi
add edi, esi
jmp 0x856d12
push 0xf73248f3
and ebx, ecx
shl esi, 0x1c
sub edi, ebx
bswap esi
and ecx, 0xfcc45a05
mov edi, 0xfcc493c5
or esi, ebx
and esi, ebx
xor edi, ecx
and esi, edi
or ebx, ecx
jmp 0x858dd2
pop edx
xchg ebx, esi
sub esi, 0xfcc97526
mov esi, edi
sub edi, esi
xor ecx, ebx
dec ecx
xchg ecx, edi
neg ebx
shl esi, 6
bswap esi
shl edi, 0x16
jmp 0x857054
pop edx
dec ecx
shr ebx, 0x1a
xchg ebx, ecx
add ecx, edi
bswap ebx
neg ebx
and ecx, ebx
ror ecx, 0x19
or ecx, 0xfcebd7b9
sub esi, 0xfcec168f
mov edi, esi
inc ebx
and ecx, esi
dec edi
jmp 0x858b99
push 0xf74185c8
add ecx, edi
add ecx, 0xfcf27cb9
sub ebx, edi
add edi, ebx
sub ebx, ecx
mov ecx, 0xfcf36a7e
xor esi, 0xfcf3b8ff
mov edi, ebx
jmp 0x857e11
pop edx
and ebx, esi
xor ebx, edi
add edi, esi
add ecx, edi
add ebx, 0xfd04470d
mov ecx, ebx
or edi, 0xfd04cfe9
add edi, ebx
xchg ecx, ebx
sub ebx, ecx
sub esi, ebx
jmp 0x8584f0
push 0xf741cfbd
shl ecx, 0x11
add esi, ebx
shr ecx, 0x1c
xchg ebx, edi
xor ebx, edi
jmp 0x856983
push 0xf745ca8a
xor ebx, edi
and ebx, ecx
mov ebx, esi
not esi
add edi, esi
sub edi, ecx
sub ecx, 0xfd0e8835
xor edi, ebx
mov ebx, edi
sub edi, ecx
xchg esi, edi
bswap ecx
xor esi, ebx
neg ecx
jmp 0x8562b2
call fcn.008597f6
not ebx
xor esi, ecx
sub esi, edi
shr ebx, 0x16
xor ecx, ebx
ror esi, 4
add ebx, 0xfd156d6c
add edi, esi
ror edi, 5
jmp 0x8595d0
call edx
add ecx, edi
xchg ecx, ebx
ror ecx, 0x13
and edi, ebx
shr ebx, 6
sub ecx, ebx
bswap edi
or ebx, edi
nop
not ebx
or edi, esi
bswap edi
mov ecx, ebx
jmp 0x858158
pop edx
mov edi, 0xfd203ac4
sub ecx, edi
or ebx, 0xfd20b73c
rol ecx, 0x11
add ebx, ecx
jmp 0x858af2
call edx
mov ecx, ebx
sub ebx, esi
sub ebx, esi
shl edi, 3
neg ecx
or edi, ebx
xor esi, ecx
ror ecx, 0x19
add ecx, 0xfd23a2a1
and esi, ebx
jmp 0x856e87
call fcn.008597f6
mov esi, ecx
add ebx, esi
add edi, 0xfd28cc48
inc edi
and ebx, ecx
and edi, ecx
or edi, 0xfd29c5d1
mov ecx, esi
not esi
sub esi, edi
inc edi
add edi, ecx
or ebx, ecx
bswap esi
xor ecx, ebx
mov edi, 0xfd2c0746
jmp 0x85634b
pop edx
dec esi
shl ebx, 0x1c
xor esi, ecx
xchg ecx, esi
or ecx, ebx
add ecx, edi
mov esi, ebx
mov ebx, 0xfd3006ee
mov esi, ecx
ror ebx, 2
ror ecx, 0x13
or ebx, edi
mov ebx, 0xfd314b44
dec ecx
jmp 0x8591a2
pop edx
or ebx, edi
add edi, esi
add edi, 0xfd3b6fcc
or ebx, 0xfd3baef7
add ecx, ebx
xor ebx, esi
shr esi, 1
mov edi, 0xfd3cb7d4
sub edi, 0xfd3cf6a6
and ebx, 0xfd3d3447
inc esi
and esi, 0xfd3db3d0
jmp 0x8579e1
pop edx
and ebx, ecx
sub edi, ebx
mov ebx, esi
add esi, ecx
rol ecx, 9
rol edi, 0x1c
dec esi
add edi, 0xfd448c24
jmp 0x856657
pop edx
mov esi, 0xfd47bafd
dec ebx
and edi, esi
dec ecx
mov edi, ecx
inc esi
xchg ecx, ebx
shr ecx, 4
nop
xor ebx, esi
xchg ebx, edi
xchg ebx, ecx
xchg ecx, ebx
shr edi, 0x1e
jmp 0x8567c6
pop edx
and ebx, esi
xor edi, ecx
rol edi, 0x16
shl edi, 0x1b
or esi, edi
sub ecx, 0xfd5885cc
mov ebx, esi
mov ebx, ecx
sub ecx, esi
mov esi, 0xfd5988a3
xor ecx, ebx
jmp 0x8569ee
pop edx
or ebx, ecx
and ecx, 0xfd5d3dd4
xor edi, esi
dec edi
xchg edi, ecx
shl edi, 2
neg ecx
or ecx, edi
ror ebx, 0x19
add edi, ebx
add ecx, esi
or ecx, ebx
jmp 0x857187
pop edx
bswap ebx
neg esi
bswap esi
and edi, esi
add esi, edi
ror ecx, 0x1e
or ecx, 0xfd73f0ec
or ebx, ecx
sub edi, ecx
or ebx, edi
add ebx, ecx
xchg edi, ecx
mov ecx, 0xfd75609c
jmp 0x8566d5
pop edx
shr ebx, 0x12
and esi, 0xfd78b12b
sub edi, 0xfd78f08d
ror esi, 0x18
xor edi, ecx
mov esi, ecx
xor ebx, edi
mov ebx, ecx
jmp 0x858cbc
push 0xf72118f4
add ecx, ebx
sub edi, ecx
jmp 0x856532
pop edx
xor esi, ecx
or esi, 0xfd8c7fee
shr esi, 0x1b
or edi, ebx
or ebx, esi
or edi, 0xfd8d879e
and ebx, 0xfd8dc57f
add edi, ecx
add ecx, edi
xor edi, ecx
ror esi, 0x10
jmp 0x85838c
pop edx
xchg ecx, edi
and edi, ecx
mov ecx, ebx
mov esi, ecx
add esi, edi
neg esi
xchg ecx, ebx
add esi, 0xfd93d9a6
xchg ebx, ecx
jmp 0x859cad
call fcn.008597f6
mov edi, 0xfd9698b8
mov esi, edi
nop
sub ecx, edi
not esi
xchg edi, ecx
add ebx, ecx
add edi, esi
mov ebx, esi
xchg ecx, esi
xor esi, ecx
jmp 0x8569c5
call edx
xor ecx, 0xfd9d2d2b
shl edi, 0x1a
shl ecx, 0x1d
xchg edi, ebx
xchg esi, ebx
sub esi, ecx
mov ebx, edi
sub edi, esi
neg edi
dec ebx
jmp 0x856f6d
pop edx
shl ecx, 0x18
and edi, ecx
xchg ebx, ecx
and ecx, esi
and esi, ebx
shl edi, 7
rol ebx, 5
sub edi, 0xfdae60f2
shl ecx, 0x1f
add edi, esi
jmp 0x857308
call edx
or ecx, esi
ror ecx, 0x10
add esi, ecx
and ebx, edi
ror ebx, 0x16
mov ecx, edi
sub edi, ebx
and esi, 0xfdb640d9
and ebx, esi
add esi, ebx
inc ecx
jmp fcn.008592cf
mov edx, 0x6440607e
add edi, ebx
xor esi, ebx
mov edi, esi
xor ecx, edi
dec esi
mov edi, ecx
mov ecx, esi
or ecx, ebx
mov ebx, 0xfdc28e39
shl esi, 0xb
add ebx, ecx
jmp 0x85757a
push 0xf7368d2e
ror ecx, 0x12
sub esi, ebx
add ecx, 0xfdd5352e
mov esi, ebx
neg edi
xor ecx, 0xfdd5dc5b
not ebx
add ebx, ecx
bswap esi
and ebx, 0xfdd6cc95
xor esi, 0xfdd70451
add edi, ebx
dec edi
xchg ebx, ecx
or edi, esi
jmp 0x85970d
pop edx
and esi, edi
or edi, ecx
and ebx, esi
mov edi, esi
mov esi, 0xfde10fd3
ror edi, 6
add ebx, edi
or esi, ebx
xor edi, ebx
jmp 0x856959
call fcn.008597f6
xchg edi, ecx
xor ebx, edi
add ebx, edi
mov ebx, esi
shl edi, 7
xchg ecx, esi
sub ebx, ecx
add ecx, esi
add ecx, edi
xchg ecx, edi
jmp 0x858f81
push 0xf738c774
dec esi
not ecx
xchg ecx, ebx
mov edi, ebx
sub ecx, ebx
jmp 0x85773c
push 0xf744678d
shl ebx, 0x1e
sub esi, edi
or edi, esi
xchg edi, ecx
xchg ecx, esi
xchg edi, ecx
or ecx, ebx
rol edi, 0x13
shl ebx, 2
shr esi, 9
jmp 0x8566a9
push 0xf7294503
sub ecx, esi
or ebx, 0xfdf98f75
xor ebx, ecx
or esi, ecx
jmp 0x85707e
push 0xf7351f3b
sub edi, 0xfdfdb080
inc ebx
jmp 0x859616
pop edx
mov ecx, esi
rol edi, 0x11
add esi, edi
add edi, esi
mov esi, ebx
inc ecx
sub ecx, esi
xor edi, ebx
xor ebx, esi
xor ecx, edi
shl ecx, 0x1d
jmp 0x8599d7
push 0xf7243e52
bswap ebx
and ecx, edi
not ecx
or ecx, ebx
xor ebx, 0xfe12ec2e
sub edi, ecx
not esi
or ecx, edi
mov esi, 0xfe13dbe7
not esi
ror esi, 5
rol esi, 0xf
sub ebx, ecx
dec esi
jmp 0x8574f4
push 0xf731b720
add ebx, ecx
mov edi, ebx
not edi
or ecx, edi
sub edi, 0xfe1623ab
or edi, 0xfe166a18
xchg ecx, edi
mov esi, edi
add edi, 0xfe1711d5
xor edi, ecx
and edi, ebx
jmp 0x85998b
pop edx
add ebx, 0xfe1a5b74
and ebx, 0xfe1a94c2
add edi, ecx
rol edi, 0x15
mov esi, edi
xchg ecx, ebx
shr ebx, 2
add ebx, ecx
add esi, ecx
shr ecx, 0x16
sub ebx, ecx
shr esi, 0x17
and ebx, edi
xor esi, 0xfe1d3c03
jmp 0x859be7
push 0xf73290b4
xchg ecx, ebx
shl esi, 0xd
and edi, ebx
and ecx, 0xfe23d547
jmp 0x85967b
call edx
shl ecx, 0x10
dec ebx
or ebx, esi
bswap ebx
add ecx, 0xfe4178f2
or esi, 0xfe41c6ed
xchg ebx, ecx
or edi, esi
ror edi, 0x15
shl esi, 0xd
mov ebx, ecx
jmp 0x85917c
pop edx
sub edi, esi
neg esi
dec esi
xor ebx, esi
and esi, ebx
mov ecx, esi
sub edi, 0xfe672133
jmp 0x85617b
pop edx
xor ebx, edi
shr esi, 0xa
mov ecx, ebx
or edi, esi
jmp 0x85891d
pop edx
inc esi
not ecx
neg ebx
add edi, ecx
xor edi, ebx
rol ecx, 5
rol ecx, 1
shr edi, 0xb
jmp 0x8586b4
push 0xf73e69e4
dec esi
not ebx
bswap ebx
jmp 0x856ae1
call fcn.008597f6
sub ecx, edi
dec edi
or ebx, ecx
shr esi, 0x10
jmp 0x856a57
call fcn.008597f6
and ebx, esi
ror ecx, 0x1c
sub ecx, esi
xchg ebx, edi
inc ecx
mov ebx, ecx
and edi, 0xfea54767
or ebx, esi
shr edi, 0xb
add ecx, esi
or ecx, edi
neg edi
not edi
rol ecx, 0x1e
xor ecx, 0xfea74a08
jmp 0x8577e2
mov edx, 0x6440607e
dec ecx
and esi, ebx
sub esi, edi
or ecx, edi
jmp 0x857e7e
push 0xf721f81b
and ecx, 0xfeacc57d
inc edi
mov ebx, esi
shl esi, 0x13
jmp 0x856396
call edx
mov ebx, esi
and edi, ecx
ror edi, 0x10
xchg edi, ecx
mov ebx, ecx
xchg edi, ecx
add ecx, ebx
add edi, 0xfeb95ff5
rol esi, 0xe
and edi, esi
rol edi, 0x13
jmp 0x859650
mov edx, 0x6332a2e
mov edi, ecx
add edi, ecx
add ebx, ecx
add edi, ebx
dec ecx
xchg esi, edi
add ecx, esi
jmp 0x859a39
push 0xf74537e2
xchg ebx, esi
xor ebx, ecx
add ebx, ecx
sub edi, 0xfebf22f8
add ebx, edi
xor edi, ecx
or ebx, esi
ror edi, 8
add ebx, ecx
sub edi, ecx
jmp 0x85752d
pop edx
xor esi, ebx
sub ecx, ebx
xchg esi, ebx
sub edi, ebx
or ebx, esi
jmp 0x858d4d
mov edx, 0x6440607e
shl ebx, 0x15
and esi, ecx
mov esi, 0xfec47dbb
shl ebx, 0x1d
add ebx, 0xfec4fbb3
ror ebx, 7
shl esi, 4
mov ebx, 0xfec5c9af
jmp 0x85945a
mov edx, 0x6332a2e
shr edi, 0x15
mov esi, ebx
xor edi, ecx
rol esi, 0xc
bswap edi
or edi, esi
or edi, esi
sub edi, 0xfecfde26
jmp 0x8594ba
call fcn.008597f6
add ebx, ecx
rol esi, 0x13
ror ebx, 0x1b
neg edi
and edi, ebx
or edi, esi
xchg edi, esi
or ebx, 0x5b69e84
xor ecx, 0x5b6dbf1
xchg esi, ebx
sub esi, 0x5b75546
xchg edi, esi
jmp 0x85871c
call edx
shr edi, 0x10
mov ecx, esi
xor ebx, 0x5bbdae3
shl esi, 0x15
jmp 0x856894
call fcn.008597f6
sub edi, ebx
or ecx, 0x5d47b66
and ebx, esi
and edi, esi
mov edi, ecx
shl edi, 0x12
xchg edi, ebx
ror esi, 0x16
xchg ebx, esi
xchg edi, ecx
and ecx, esi
or esi, ebx
add edi, ebx
and ebx, 0x5d75c1a
jmp 0x8585e6
push 0xf731ff57
or ecx, ebx
and ecx, esi
add ecx, edi
not ebx
add ecx, 0x5d8a031
shl ecx, 0x10
xchg esi, ecx
ror edi, 8
dec ebx
jmp 0x857a08
push 0xf72d8d16
add ecx, esi
sub ebx, esi
or ebx, 0x5dda409
xchg edi, ebx
and esi, edi
and esi, ecx
mov ebx, ecx
sub ebx, esi
mov esi, edi
xor ebx, 0x5df56c9
shl esi, 5
jmp 0x85636e
mov edx, 0x6332a2e
mov esi, ecx
sub ebx, ecx
sub ecx, 0x5e05c62
add esi, edi
add ecx, ebx
add edi, ecx
or esi, 0x5e15947
xor esi, ebx
mov ecx, esi
jmp 0x858a14
call fcn.008597f6
or edi, ecx
add ecx, edi
sub ebx, ecx
mov ecx, esi
add esi, 0x5e4b80a
or esi, 0x5e4f545
add esi, 0x5e533fd
neg ebx
add esi, 0x5e5ae25
sub ebx, ecx
xor ecx, edi
bswap edi
jmp 0x8568d8
push 0xf7270edd
and esi, edi
sub esi, ecx
sub ebx, edi
ror edi, 0x1c
sub edi, esi
xchg ecx, edi
add esi, ecx
ror esi, 0x15
sub esi, ebx
xor ecx, ebx
bswap esi
inc ecx
jmp 0x856d4f
push 0xf73b4ce6
xchg ecx, ebx
sub edi, ebx
xor edi, ecx
xchg esi, ebx
and ebx, 0x5f91be5
shr ebx, 0x18
xor ecx, 0x5f9a7b0
shl ecx, 6
xor ecx, esi
inc ecx
and edi, ecx
and ecx, 0x5fad627
ror edi, 0x1e
xor esi, ebx
jmp 0x85656c
pop edx
xchg esi, ebx
or ebx, ecx
mov edi, 0x60081e6
xchg edi, ecx
mov edi, esi
xchg edi, ecx
jmp 0x856e09
pop edx
and ecx, esi
or ecx, edi
bswap ebx
shr ebx, 3
nop
bswap esi
mov ecx, 0x603199a
add edi, ebx
xor edi, 0x6039101
or esi, 0x603cfdd
jmp 0x857c39
push 0xf728fee7
xchg esi, edi
inc esi
add ebx, ecx
or ecx, ebx
and esi, edi
xor edi, ebx
jmp 0x858b37
pop edx
shr edi, 4
or edi, 0x615cce6
sub edi, esi
dec ecx
xor ecx, esi
or esi, 0x617c5ca
xor edi, ecx
xor edi, 0x61845a4
sub ecx, ebx
ror ebx, 0x16
add edi, ebx
jmp 0x85742c