Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xfffffed5
jne 0x401093
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.kernel32.dll_OpenProcess
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.kernel32.dll_OpenProcess
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xffffff13
jne 0x401130
call sub.kernel32.dll_OpenProcess
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xffffff27
jne 0x4011a0
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xfffffef3
jne 0x40124c
call sub.kernel32.dll_OpenProcess
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.kernel32.dll_OpenProcess
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.kernel32.dll_OpenProcess
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
call sub.kernel32.dll_OpenProcess
call sub.kernel32.dll_OpenProcess
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.shell32.dll_SHPathPrepareForWriteA
call sub.ntdll.dll_RtlLengthSecurityDescriptor
call sub.kernel32.dll_OpenProcess
ret
jmp 0x488fd9
and edi, edx
xchg edx, edi
and ebx, 0x55910e75
sub edi, esi
mov esi, ebx
dec esi
jmp 0x48bde1
call edi
mov ebx, 0x568f2e5b
add ebx, esi
and edx, esi
add ecx, esi
jmp 0x48bac4
push 0x5599168f
rol ecx, 0x14
not ecx
and ecx, edx
and ebx, edx
xor ebx, edx
sub ecx, ebx
add esi, ebx
or esi, ecx
jmp 0x48c8dc
pop edi
xchg ecx, esi
mov ecx, ebx
sub ecx, edx
add ebx, 0x56aec9e7
nop
shr edx, 8
or ecx, 0x56af30c5
shl esi, 0x19
xor ecx, 0x56af7b19
xor edx, 0x56af9e0b
sub esi, edx
and ecx, ebx
mov ecx, edx
sub ebx, edx
sub ecx, edx
mov ebx, ecx
jmp 0x489aea
pop edi
xchg ebx, ecx
or esi, ebx
mov ebx, esi
neg ecx
xor edx, esi
add esi, edx
jmp 0x489ca2
call fcn.00489985
or ebx, ecx
or edx, 0x56bdf6cd
and ecx, 0x56be11ab
dec edx
neg ecx
shr ebx, 0x17
xor ebx, esi
or ebx, ecx
not ecx
xchg edx, ebx
add ecx, esi
xor edx, ebx
add esi, 0x56bf22ab
dec ebx
jmp 0x48a682
push 0x55932d23
shl edx, 0xf
neg ecx
nop
or esi, 0x56c4d8c5
and edx, 0x56c4f3a3
add esi, ebx
and ebx, ecx
and ecx, edx
inc ebx
not edx
add esi, 0x56c5964f
dec ebx
jmp 0x48c358
pop edi
sub esi, ebx
xchg ebx, esi
xchg edx, esi
mov ebx, ecx
and esi, ebx
xor ebx, 0x56d40591
xor ecx, edx
add ebx, 0x56d43a63
jmp 0x48a494
mov edi, 0x5027095f
xchg ecx, edx
add esi, edx
or ecx, 0x56d5daa7
add ecx, ebx
ror ecx, 3
mov ecx, ebx
and esi, 0x56d64255
add esi, ecx
and ebx, edx
and ecx, esi
and esi, edx
xor ecx, edx
xor ebx, edx
add edx, ebx
xor edx, ecx
shl ecx, 0x1a
jmp 0x48b8e7
pop edi
or ecx, ebx
add esi, edx
or edx, 0x56df84eb
or ecx, esi
add ebx, ecx
and ecx, 0x56dfd5ff
xor ecx, ebx
sub edx, ecx
jmp 0x48923f
push 0x55976c15
rol esi, 0x16
shl esi, 0x17
or ebx, esi
not esi
add ecx, ebx
and ecx, esi
or ebx, ecx
shr esi, 0xd
or esi, 0x56e22651
xor ebx, 0x56e24115
jmp 0x48bc8e
pop edi
xor ebx, esi
and esi, edx
or ecx, ebx
neg ebx
shl edx, 0xb
mov ebx, edx
and esi, edx
or ecx, 0x56e54f57
jmp 0x48c3b2
call edi
sub edx, esi
not ecx
or ecx, edx
or edx, esi
xor ebx, esi
shr edx, 0x1f
or edx, 0x56ea421f
sub esi, 0x56ea5ec3
xchg edx, ebx
neg esi
xchg ecx, edx
add ecx, edx
jmp 0x48c5e3
call fcn.00489985
rol ecx, 0x1e
shl ecx, 0xe
and esi, edx
or ecx, ebx
or edx, ecx
ror edx, 0x1c
or ebx, edx
mov edx, esi
sub ebx, 0x56ebc341
xor ebx, esi
jmp 0x48c33f
pop edi
or edx, ecx
xchg ecx, ebx
sub ecx, edx
xor esi, edx
or esi, ebx
sub ebx, 0x56eda1bb
xchg ebx, edx
rol esi, 4
jmp 0x48b75b
mov edi, 0x5027095f
xchg edx, esi
xchg ecx, edx
and edx, 0x56ef2501
not edx
sub ebx, ecx
mov ebx, ecx
shr ebx, 0x1f
xor esi, edx
mov esi, edx
sub esi, 0x56efe0cf
and edx, ebx
and esi, ecx
or ebx, 0x56f02dd3
sub esi, ecx
jmp 0x48a9d3
call edi
sub ecx, ebx
or ebx, 0x56f1d1d3
xchg ebx, esi
xor esi, ecx
jmp 0x48a31e
pop edi
xor esi, ebx
neg ebx
xchg ebx, ecx
bswap edx
shr esi, 0x18
add esi, ecx
jmp 0x48b1d5
push 0x55a112b7
and edx, ecx
xor ecx, 0x56fac3a3
rol ecx, 0xf
and ebx, ecx
add ebx, edx
or esi, ebx
xor esi, edx
neg edx
shl esi, 0x12
or esi, ecx
inc ecx
or ecx, edx
xor esi, ebx
neg ebx
mov ecx, 0x56fc1f5f
and edx, esi
jmp 0x48be24
pop edi
or edx, ecx
and ecx, ebx
rol ecx, 6
and esi, ecx
jmp 0x48c466
mov edi, 0x5027095f
xchg ebx, edx
ror ebx, 0x11
and ebx, edx
sub ebx, 0x5701ab93
add edx, ecx
sub ebx, 0x5701dfc1
xor esi, ecx
xor ebx, esi
jmp 0x48938b
pop edi
mov esi, edx
and esi, 0x5702522d
or ecx, ebx
neg ebx
xchg edx, ecx
xchg ebx, ecx
mov ecx, esi
or ecx, ebx
and ebx, esi
add ecx, ebx
jmp 0x48c8f6
push 0x559477c7
sub ecx, esi
or esi, edx
nop
shl ecx, 0xd
xor edx, esi
or edx, ebx
xor esi, ecx
add ebx, ecx
and ecx, 0x57095153
not ecx
bswap ebx
shr esi, 8
jmp 0x48ca2e
push 0x559ec495
add ebx, esi
add esi, ebx
xchg esi, ecx
add ebx, esi
dec esi
sub esi, 0x570ea4b1
add edx, esi
and edx, 0x570ed899
sub ecx, edx
xor ebx, 0x570f12d9
sub edx, esi
and edx, ebx
jmp 0x48bc01
call fcn.00489985
shl esi, 8
or edx, esi
or ebx, edx
shr esi, 5
or esi, edx
or esi, 0x570ff6b9
jmp 0x48a45b
push 0x5596d5a6
xchg ecx, edx
sub ecx, 0x5712a10b
mov edx, esi
xor edx, ecx
xor ecx, edx
dec esi
xor ecx, 0x57132619
shr esi, 0x16
xor ecx, ebx
xor ecx, ebx
dec edx
xor esi, ebx
jmp 0x48a0d5
mov edi, 0x5027095f
xor ecx, edx
shl esi, 9
mov edx, 0x571944eb
sub ebx, ecx
add esi, ecx
mov esi, ebx
sub ecx, 0x5719abe3
add edx, ebx
jmp 0x489d59
pop edi
or ebx, edx
or esi, ecx
add ebx, edx
xor esi, ebx
inc ecx
mov edx, ecx
or esi, ecx
add edx, 0x571aa4f7
inc esi
xor edx, ecx
jmp 0x48bcfa
call fcn.00489985
not ebx
xor esi, edx
dec ecx
not esi
add esi, edx
xor ebx, esi
and esi, ecx
add ebx, ecx
not esi
and ecx, 0x571d0b39
neg ecx
and esi, ecx
jmp 0x48be42
pop edi
or edx, 0x57200a53
mov ecx, 0x57202591
or edx, 0x57204411
xchg esi, ecx
sub esi, ebx
and edx, ecx
xor ecx, 0x5720adf9
bswap edx
and edx, ecx
add edx, ebx
jmp 0x48b59a
mov edi, 0x5027095f
add ecx, esi
xor edx, ebx
xor edx, ebx
xor esi, 0x572610b7
or ecx, edx
xor ebx, esi
and edx, 0x572663e7
mov edx, ebx
add edx, 0x572696cb
and esi, ecx
jmp 0x48a3fe
pop edi
sub ebx, ecx
xchg esi, ebx
bswap ecx
or edx, 0x572a1147
mov edx, ebx
or ecx, edx
and ecx, ebx
sub ecx, 0x572a7a13
neg edx
add edx, esi
jmp 0x489276
pop edi
or ecx, ebx
sub ebx, 0x572aef63
xor ecx, 0x572b0a27
or esi, 0x572b2531
sub ecx, edx
dec ecx
xchg ebx, esi
mov ecx, ebx
mov ebx, esi
add ebx, 0x572bc483
jmp 0x489e90
mov edi, 0x5027095f
shl edx, 6
sub esi, ecx
bswap ebx
or edx, 0x572c7391
xor edx, ecx
xchg edx, ecx
bswap esi
and edx, ecx
and esi, edx
or ecx, ebx
jmp 0x48a363
mov edi, 0x5027095f
not esi
xor edx, ecx
xor edx, ecx
shl ebx, 0x1e
mov ebx, ecx
shr ebx, 0x11
shr esi, 8
sub ebx, 0x572f7bad
or edx, ecx
bswap ebx
jmp 0x48be69
pop edi
xor edx, esi
sub ebx, 0x57310623
xor ecx, 0x573122e7
bswap edx
and ecx, esi
sub esi, 0x57317275
bswap ebx
xchg esi, edx
dec edx
and ecx, ebx
and ebx, ecx
xor edx, 0x573216ed
jmp 0x48a598
push 0x559b4a3b
sub ebx, ecx
mov ebx, ecx
neg ecx
add edx, ecx
sub esi, 0x5733bab9
shr esi, 8
or esi, 0x5733f1a7
xor esi, ebx
and esi, ecx
rol ebx, 0x11
jmp 0x489650
call edi
add ebx, ecx
and edx, 0x573a7d9d
add edx, ecx
or ecx, esi
add esi, ecx
mov ebx, ecx
sub esi, edx
or ebx, edx
add ebx, esi
mov ecx, ebx
or ebx, ecx
shr edx, 0x13
bswap esi
and esi, 0x573c1d13
add edx, esi
dec esi
jmp 0x489be5
pop edi
or ebx, 0x573ee0e5
and esi, ebx
or ebx, edx
xor ecx, edx
mov esi, ecx
neg ecx
xor esi, ebx
bswap esi
xor edx, ebx
not ecx
jmp 0x48af7d
push 0x559dcd89
and ebx, 0x57403d3d
and esi, ecx
add ebx, edx
ror ebx, 0x11
xor edx, ecx
not edx
not edx
bswap ecx
and ecx, esi
sub ebx, 0x574134ff
jmp 0x48cb60
call fcn.00489985
xor ebx, 0x57415aa1
or esi, ecx
or ecx, esi
neg ecx
nop
sub edx, 0x5741e185
mov ebx, edx
xchg edx, ecx
xor ecx, 0x57423407
not ecx
jmp 0x48bec3
call fcn.00489985
shl ebx, 0x1e
shl edx, 0x1f
sub edx, 0x57466729
add ebx, ecx
mov ebx, edx
add ecx, ebx
and edx, ebx
add ebx, esi
jmp 0x48b02c
call edi
dec ecx
xor esi, ebx
not esi
add ecx, esi
inc ebx
and edx, esi
ror ecx, 1
shr ecx, 0x1e
jmp 0x48b0b1
pop edi
sub esi, ecx
and edx, esi
dec ecx
xor ebx, edx
xor ebx, edx
sub edx, 0x574c45dd
add edx, esi
xchg edx, ecx
inc ebx
xor ecx, edx
xor ecx, ebx
dec edx
xor ebx, esi
dec ecx
mov edx, 0x574d3a67
inc edx
jmp 0x48b169
push 0x5595c473
xor ecx, ebx
dec edx
xor ebx, esi
or esi, edx
or esi, 0x575166af
neg ebx
xor edx, esi
and esi, ebx
sub edx, 0x5751d53f
add edx, esi
xchg edx, ecx
add esi, edx
and ecx, ebx
and edx, ecx
jmp 0x48a002
call fcn.00489985
add ebx, 0x57533593
sub esi, ecx
sub ebx, esi
sub edx, 0x57538451
xor ebx, edx
mov edx, esi
mov ecx, esi
not ebx
neg esi
xchg ecx, edx
and ecx, 0x5754420f
or edx, 0x57545d33
not esi
xchg esi, ebx
jmp 0x48bbc3
push 0x559d90df
add esi, ebx
sub esi, 0x5754d5a3
and edx, ebx
nop
not ebx
shr edx, 0x1c
not edx
xchg edx, ebx
add ebx, 0x5755996b
sub esi, ecx
jmp 0x48a6d6
push 0x559f7e43
xor ebx, 0x5758d44b
or ebx, esi
not esi
xor edx, ecx
xor edx, ebx
xor ecx, ebx
dec edx
xor ebx, esi
xchg esi, ecx
add esi, 0x5759c983
xor ebx, edx
sub ecx, esi
and ecx, ebx
sub esi, ebx
jmp 0x48c6a8
mov edi, 0x5027095f
xor esi, edx
mov ebx, ecx
sub ecx, 0x575a8cc1
add edx, ebx
shl ebx, 3
add edx, ebx
add esi, ebx
sub edx, ebx
and ecx, edx
and edx, esi
or ebx, ecx
add esi, edx
jmp 0x489ec8
call edi
and edx, ebx
sub esi, edx
and esi, ecx
add ebx, 0x575d2823
sub esi, ecx
mov ebx, ecx
mov edx, ebx
or esi, ecx
add edx, 0x575dac4f
xchg esi, ecx
add esi, 0x575de2e5
xor ebx, edx
jmp 0x48b519
pop edi
xor ecx, 0x575e9d15
sub edx, ecx
bswap ebx
shr esi, 0xf
jmp 0x489dbe
push 0x559dae5b
mov edx, ebx
not ecx
xchg ecx, ebx
mov esi, 0x575f6a0f
bswap edx
or esi, edx
or ecx, ebx
add esi, edx
xor ecx, 0x575ff3d5
shl ecx, 0x17
and ebx, ecx
or edx, 0x57604219
jmp 0x48a33c
call fcn.00489985
sub esi, ebx
shl ecx, 0x12
add ebx, esi
add ecx, 0x5760bec7
and esi, ebx
xor ebx, esi
jmp 0x48a2a7
call fcn.00489985
or ebx, 0x5776b9af
not ecx
shl ebx, 0x15
and ebx, edx
and ecx, esi
inc edx
xor edx, ebx
not ebx
and ecx, edx
sub esi, ecx
jmp 0x4899b4
pop edi
mov ecx, 0x57851a3f
xchg esi, edx
and edx, 0x57855021
dec esi
inc ebx
shl ecx, 0x1e
sub ecx, 0x5785c4d5
xor ecx, 0x5785dfb3
xchg ecx, ebx
add edx, ecx
xor edx, esi
sub ebx, ecx
jmp 0x489f3d
push 0x55930fa7
or ebx, 0x57866b57
sub ecx, 0x5786861b
neg edx
and esi, 0x5786be53
xor ebx, esi
dec ecx
or ebx, ecx
or ecx, edx
sub esi, ebx
sub esi, ebx
and ebx, ecx
and ecx, edx
add edx, 0x5787adcd
mov ebx, esi
jmp 0x489456
pop edi
xchg ebx, ecx
or ecx, 0x578bb5bf
not edx
xchg edx, esi
ror esi, 0x11
xor ecx, ebx
xor ebx, 0x578c3ed1
add esi, ebx
neg ecx
xor edx, ebx
jmp 0x48c4d5
push 0x5598d9a9
and esi, 0x578cb833
and edx, esi
or ebx, ecx
xor ecx, edx
xchg ecx, ebx
xor edx, esi
jmp 0x48c0cd
pop edi
and ebx, esi
xchg esi, edx
sub edx, 0x5792b059
and ecx, esi
and esi, ebx
add edx, esi
xchg esi, ecx
add esi, 0x5793307b
mov ebx, edx
add ecx, ebx
or ecx, ebx
sub ebx, edx
xor edx, esi
bswap edx
jmp 0x48b57b
call edi
xchg esi, ebx
add esi, ecx
mov edx, ebx
or ebx, 0x579a9393
and ebx, 0x579abb77
xor edx, 0x579ae3d7
mov ebx, esi
dec ecx
jmp 0x489914
pop edi
or ecx, ebx
or ecx, ebx
mov esi, ecx
bswap ecx
xor edx, 0x579d5707
bswap esi
xor ecx, 0x579da84f
sub edx, esi
jmp 0x48abd4
push 0x559fdb8d
dec esi
xor esi, ecx
sub esi, edx
sub esi, edx
sub ecx, ebx
and ebx, edx
shr esi, 0x17
xor esi, 0x57a10b25
add ecx, esi
dec esi
xchg esi, edx
sub ecx, esi
and ecx, ebx
or edx, 0x57a1a971
jmp 0x48c2e3
pop edi
mov edx, esi
add esi, ebx
and ebx, edx
and ecx, esi
mov ebx, ecx
sub ecx, 0x57a24f23
sub ecx, ebx
and esi, 0x57a2840f
jmp 0x48ad9f
push 0x559cb899
mov edx, esi
not edx
xchg esi, ebx
xor ecx, ebx
xor ecx, ebx
xor ebx, esi
sub esi, 0x57a46b11
add ebx, 0x57a48609
xchg edx, ecx
add ebx, edx
xor esi, ebx
xor esi, ebx
jmp 0x48c23d
push 0x5597c72b
or edx, esi
sub edx, ebx
bswap ebx
mov ebx, esi
add edx, ecx
add esi, edx
and ecx, edx
and edx, ecx
and esi, ecx
dec esi
add ebx, edx
and ecx, ebx
and edx, ecx
xor ebx, ecx
sub ecx, edx
and ecx, ebx
jmp 0x48c931
call edi
shl ebx, 0xc
and ebx, 0x57a9c7a1
dec ecx
or ebx, edx
or ecx, esi
xor ebx, ecx
sub esi, edx
and esi, ecx
or ebx, ecx
xchg ebx, esi
xchg esi, ecx
add esi, 0x57aad193
jmp 0x48c382
pop edi
add edx, esi
inc edx
xor edx, ebx
add esi, edx
sub esi, 0x57ae6c41
xor ebx, esi
xor ebx, esi
dec ecx
mov esi, edx
ror ebx, 3
jmp 0x48a176
pop edi
xor edx, ecx
bswap ecx
or ebx, ecx
xor edx, ebx
not ecx
bswap ebx
shr esi, 3
or esi, 0x57b0bd3b
jmp 0x489810
push 0x559ea519
inc edx
sub esi, edx
and edx, esi
mov esi, 0x57b4ab19
and ebx, 0x57b4cbb3
dec ecx
neg esi
neg ebx
jmp 0x489d2c
pop edi
and ecx, 0x57b82935
xchg ebx, esi
sub esi, 0x57b8608b
or ebx, edx
xor esi, 0x57b89993
and ebx, ecx
and ecx, edx
sub ebx, esi
sub edx, 0x57b900ab
xor ebx, edx
and esi, edx
xor ecx, esi
jmp 0x48c6dc
call fcn.00489985
mov ebx, edx
sub ebx, esi
sub esi, edx
sub esi, edx
xor edx, ecx
not ecx
or ebx, esi
xor edx, ecx
or ecx, ebx
neg ebx
or ecx, edx
sub ebx, esi
jmp 0x48c9ff
push 0x559fbca5
mov ecx, esi
mov ecx, esi
nop
shr esi, 7
jmp 0x48af11
pop edi
xor esi, ecx
mov edx, ebx
neg ebx
xchg esi, edx
xor edx, ebx
xchg esi, edx
jmp 0x48bf61
pop edi
and ecx, 0x57d8182d
xchg edx, ecx
xchg esi, ecx
or edx, 0x57d87e0f
mov esi, ecx
rol ecx, 0x17
or ebx, esi
or edx, ebx
jmp 0x48c833
push 0x559c20d8
and edx, 0x57d936c9
not edx
bswap edx
inc ecx
or ebx, 0x57d9bf33
or ecx, ebx
xor esi, 0x57da0153
add ebx, edx
xchg esi, ebx
sub esi, ebx
rol edx, 0xd
ror esi, 0x19
jmp 0x489952
pop edi
xchg ecx, edx
neg ebx
xor edx, esi
xchg edx, esi
and ecx, ebx
sub esi, ebx
sub edx, esi
and edx, ebx
and ebx, edx
xor esi, 0x57e9a16d
shl ecx, 0x13
and ebx, esi
xchg esi, edx
and ebx, ecx
jmp 0x48a0ac
push 0x5597a9af
xor ebx, ecx
inc esi
or edx, ebx
sub ecx, edx
jmp 0x48afe1
push 0x559b2b39
and ebx, edx
xor ebx, 0x57efb9f9
add esi, 0x57efd48b
dec ebx
xchg edx, ecx
xchg ebx, ecx
xor esi, 0x57f0459d
sub ebx, esi
bswap esi
and edx, ecx
jmp 0x48a1d1
push 0x55936819
or ebx, 0x57f393f5
not ecx
shl ebx, 0xe
and ebx, edx
or ebx, 0x57f3ff4d
not ecx
xchg edx, ebx
add edx, esi
and edx, esi
dec ecx
neg esi
ror ecx, 0xb
sub ecx, esi
mov ecx, 0x57f4f6db
bswap edx
add esi, ecx
jmp 0x48a126
call fcn.00489985
shr ebx, 0x1e
ror ebx, 8
dec esi
add ebx, edx
or ecx, ebx
bswap edx
add edx, esi
sub esi, edx
nop
and ebx, 0x57f7950f
sub esi, edx
and ebx, edx
jmp 0x48c917
call fcn.00489985
neg edx
mov ebx, ecx
sub ebx, esi
and ebx, ecx
jmp 0x488fed
mov edi, 0x5027095f
mov esi, ecx
xor edx, ecx
add ebx, esi
bswap ecx
shl esi, 0xb
and ecx, edx
sub ebx, esi
and ebx, ecx
and ecx, esi
not esi
jmp 0x48a704
pop edi
or ebx, 0x580922bf
sub edx, ecx
bswap edx
mov ecx, edx
ror ecx, 0xf
mov ecx, ebx
sub esi, 0x5809c5ff
add edx, esi
nop
nop
jmp 0x489610
call edi
xchg ecx, edx
rol ecx, 1
sub ecx, ebx
or edx, esi
and ecx, ebx
and ecx, edx
and esi, edx
not ebx
xchg ebx, edx
mov ecx, edx
jmp 0x48b0ed
push 0x55a1ed67
xchg ecx, esi
xor ecx, ebx
xchg esi, ecx
sub edx, esi
neg ecx
or ecx, edx
and ecx, edx
ror ecx, 0x11
dec esi
mov esi, ebx
and ebx, ecx
or esi, ebx
jmp 0x489bc2
mov edi, 0x5027095f
dec esi
sub edx, 0x5814e077
xchg ebx, ecx
bswap ecx
add esi, ecx
sub ebx, 0x58156b7d
or edx, ecx
or ecx, ebx
xor ebx, edx
dec ecx
jmp 0x4898d0
pop edi
rol edx, 0xe
or ebx, ecx
xor ecx, esi
xchg ecx, edx
jmp 0x48bbdf
push 0x55978bff
rol esi, 8
mov ebx, edx
inc edx
sub esi, ecx
jmp 0x48b797
push 0x559b0d57
and ebx, 0x581d8b1b
mov esi, ecx
sub edx, ebx
xchg edx, ebx
and esi, 0x581e29e1
sub edx, ebx
or ecx, esi
shr ebx, 0x1f
xor esi, ecx
add ecx, edx
jmp 0x48b823
push 0x5592ef26
add edx, 0x582603a3
xor ebx, ecx
inc esi
xchg edx, ecx
sub esi, ebx
and edx, ecx
jmp 0x48ac00
push 0x55a132e9
xor esi, ebx
neg ebx
sub ebx, ecx
or edx, ebx
and esi, edx
add ecx, 0x5828cbbb
sub esi, edx
and esi, ebx
jmp 0x48a640
call edi
and ecx, ebx
add ebx, esi
xor esi, ecx
sub esi, edx
sub esi, edx
sub ecx, ebx
xchg esi, ecx
and ebx, ecx
and edx, 0x5829f815
or esi, 0x582a14a5
add ecx, edx
xchg ecx, ebx
jmp 0x48c534
call fcn.00489985
bswap ecx
rol ebx, 5
shl ebx, 0x10
and ebx, 0x582ac0e3
or ecx, 0x582adba7
xor edx, ecx
not edx
xor edx, ebx
mov ecx, ebx
or ebx, edx
or esi, edx
add esi, 0x582b960b
and esi, edx
xor ecx, esi
not ebx
add ebx, edx
jmp 0x4898a8
call edi
and edx, esi
shl esi, 0x1e
or ebx, 0x582d3bd7
and esi, ebx
and ebx, edx
and ecx, esi
sub esi, edx
xchg edx, esi
bswap ebx
and ecx, ebx
jmp 0x48bf8a
push 0x5598bbf8
xchg ecx, esi
and ecx, esi
xchg esi, ebx
bswap ecx
mov ecx, ebx
mov esi, 0x58316b59
nop
and edx, esi
jmp 0x48acec
mov edi, 0x4132136a
rol edx, 0x19
and edx, esi
xor ebx, edx
dec ebx
mov edx, 0x583235ad
xchg edx, ebx
sub ecx, edx
add edx, ecx
or edx, ebx
neg edx
xchg ebx, edx
and ebx, 0x5832f2fb
jmp fcn.00489a8a
pop edi
xor esi, edx
rol edx, 0xe
neg ebx
rol edx, 0x17
jmp 0x489796
push 0x5598f8df
sub edx, esi
sub ebx, 0x583d171d
neg ecx
xchg esi, ecx
shl edx, 0x10
mov ebx, esi
or ebx, ecx
or ecx, ebx
neg ebx
dec ebx
dec esi
add ebx, 0x583e2663
jmp 0x48909b
push 0x559cd7e1
add esi, ecx
or esi, ecx
sub edx, esi
sub ebx, 0x584856b9
neg ecx
nop
not edx
nop
xchg esi, ebx
bswap ecx
jmp 0x489e6e
push 0x559ffaa1
xchg esi, ecx
inc ecx
xchg ecx, ebx
add ecx, esi
shr ebx, 0x1a
sub ebx, esi
jmp 0x48ba60
call edi
sub edx, esi
add esi, edx
mov esi, ecx
nop
xor ebx, esi
sub edx, ebx
and ecx, edx
and edx, esi
xor ebx, esi
dec ecx
jmp 0x489bb3
push 0x55934b6d
xor ecx, esi
not ebx
xor ecx, edx
xor ecx, ebx
dec edx
neg ecx
shr ebx, 0xd
inc ebx
and ecx, esi
and esi, ebx
shr esi, 2
or esi, 0x5852e1d3
xor esi, ebx
and ebx, esi
jmp 0x48b89d
pop edi
xor esi, 0x58533a93
and ebx, ecx
or esi, 0x58536ead
xor edx, esi
not esi
add ecx, esi
ror esi, 4
mov edx, ebx
or ebx, esi
shl ecx, 0x1a
and ecx, ebx
and edx, ecx
and esi, edx
bswap ecx
and ecx, esi
sub ecx, esi
jmp 0x4899f1
push 0x55954b18
or ebx, 0x5854e813
xor edx, ebx
xor ecx, esi
not ebx
add ebx, esi
ror ecx, 0x11
xor esi, edx
or ebx, ecx
add edx, esi
and edx, 0x5855d97b
or ebx, esi
add ecx, edx
and ecx, esi
and esi, ebx
jmp 0x48cad5
pop edi
sub ecx, edx
and ecx, ebx
xchg ebx, esi
sub esi, 0x5856b327
shl ebx, 0xa
nop
add ecx, ebx
ror ecx, 0xd
sub edx, ebx
and ecx, edx
jmp 0x489756
pop edi
xor esi, ebx
sub ecx, edx
xor ebx, edx
inc edx
xor ecx, edx
inc esi
or ebx, 0x585cb08f
mov edx, 0x585cd025
xchg ebx, esi
add ecx, esi
jmp 0x48a613
pop edi
xchg esi, ebx
xor ecx, ebx
xor ecx, ebx
xor ebx, esi
xor esi, ecx
neg ebx
xchg edx, ecx
add esi, 0x58613209
xor esi, ecx
inc esi
sub edx, 0x5861846f
xor ebx, edx
jmp 0x48a08a
pop edi
xor edx, ecx
not edx
add ebx, esi
bswap ecx
mov ecx, ebx
or ebx, edx
xor edx, ebx
not ecx
jmp 0x48bc4f
pop edi
add esi, ebx
shr ecx, 0x12
xchg ecx, esi
sub edx, ebx
xor edx, 0x586ac155
bswap esi
and ebx, 0x586af875
xor ecx, esi
or esi, edx
mov edx, ebx
add esi, 0x586b63ff
and esi, edx
shl ecx, 0xb
mov ebx, edx
jmp 0x48acc9
push 0x55958893
xor edx, ebx
or ecx, edx
neg ecx
add edx, ecx
shl edx, 0xf
mov ebx, esi
neg esi
add esi, 0x586d6377
sub edx, ebx
xchg esi, edx
mov ebx, esi
add edx, ecx
jmp 0x48c737
push 0x559f9dab
xchg ebx, esi
ror ecx, 3
and esi, edx
sub esi, ebx
rol ecx, 0xd
shl ecx, 0x1c
jmp 0x48b495
pop edi
and ebx, esi
shl ebx, 0x10
xor edx, ecx
not edx
and ebx, 0x58729011
mov esi, edx
and ebx, edx
or esi, 0x5872ddb7
mov edx, ecx
xor edx, ebx
not ecx
bswap esi
xchg ecx, ebx
add edx, ecx
xchg edx, ecx
add esi, edx
jmp 0x48a6c3
push 0x5595a643
mov ebx, 0x5874f63f
bswap ecx
rol ecx, 5
sub ecx, ebx
and edx, ecx
or ecx, esi
jmp 0x48a51c
pop edi
shl ebx, 9
or edx, ebx
neg edx
or edx, ebx
or edx, esi
or ebx, 0x587df967
jmp 0x48bf45
mov edi, 0x5027095f
ror ebx, 0xd
dec edx
neg ecx
or edx, esi
neg edx
and ebx, edx
shr esi, 0x16
or esi, 0x587ee283
jmp 0x48a562
call fcn.00489985
bswap ebx
xor ebx, esi
dec ecx
xor esi, ebx
not edx
shl ecx, 0xc
and ebx, esi
and edx, ebx
sub ecx, 0x5881ea6b
add edx, ecx
inc ecx
mov edx, ecx
jmp 0x48ae7d
mov edi, 0x5027095f
mov ecx, edx
and esi, 0x58827655
add esi, ecx
neg ebx
add edx, ebx
or edx, esi
jmp 0x48c8b7
pop edi
mov esi, 0x5883273f
and esi, edx
and ecx, 0x58836e31
and edx, 0x588391bd
rol edx, 0x1e
nop
and ebx, esi
mov esi, edx
jmp 0x48c3e1
call edi
xor edx, ebx
xchg edx, ebx
add esi, ebx
and ebx, edx
or esi, edx
inc ebx
sub esi, ecx
sub edx, 0x588556a7
jmp 0x48aec1
mov edi, 0x5027095f
xchg ecx, edx
xchg ebx, ecx
and ebx, ecx
mov ecx, 0x5885dfd9
add ecx, 0x588604e5
dec edx
xchg ebx, edx
sub ebx, ecx
add ecx, ebx
add esi, ecx
jmp 0x48b203
call edi
sub edx, ecx
or esi, edx
or esi, 0x588cbf01
sub esi, ecx
sub esi, ecx
sub ebx, esi
sub edx, 0x588d283b
neg edx
mov esi, ebx
add edx, 0x588d7d53
and esi, 0x588d9817
xor ecx, edx
jmp 0x48af3e
push 0x559495a9
xchg edx, esi
or esi, ebx
xchg ecx, ebx
mov edx, 0x588e275b
ror esi, 0x1f
xor ecx, ebx
xor ebx, esi
dec ecx
and esi, 0x588eb4fd
xor esi, 0x588ecf27
and ebx, 0x588eea31
xor ebx, edx
dec ebx
and ebx, edx
jmp 0x48c84a
push 0x55956ae3
or esi, 0x5898cccf
dec ebx
add ecx, esi
add edx, esi
sub esi, ecx
sub ecx, 0x589979a1
neg ecx
not ecx
mov ecx, esi
sub ebx, ecx
mov edx, esi
add esi, 0x589d27e9
xchg ecx, ebx
or edx, ebx
shl ebx, 1
add esi, edx
jmp 0x48c62e
mov edi, 0x5027095f
rol esi, 0x19
and esi, ebx
nop
shr esi, 0x17
and ebx, esi
or ecx, edx
and edx, esi
and esi, ebx
and edx, esi
xor esi, edx
jmp 0x48ba29