Function at 0x401000
Capabilities:
Create directory
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetCapture
cmp eax, 0xffffff0b
jne 0x401098
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
ret
call sub.user32.dll_GetActiveWindow
cmp eax, 0xfffffedb
jne 0x401112
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff37
jne 0x401196
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff03
jne 0x401224
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.ntdll.dll_ZwCreateDirectoryObject
call sub.oleaut32.dll_VarI2FromI8
call sub.oleaut32.dll_VarI2FromI8
ret
jmp 0x48c1bf
sub esi, 0x8dd45865
or ecx, esi
and ecx, ebx
mov edi, ecx
jmp 0x48e9cd
pop ebx
mov edx, ecx
dec edi
or edi, esi
shl edx, 5
sub edi, ecx
or edx, ecx
and edi, ecx
and ecx, esi
xchg esi, edx
neg edi
sub edx, esi
ror ecx, 0x10
jmp 0x48f031
pop ebx
or edx, 0x8f29d9f5
or ecx, esi
and edi, esi
or ecx, 0x8f2a9491
sub ecx, edx
mov ecx, edi
mov edx, edi
sub edx, 0x8f2b9d9f
jmp 0x48f298
push 0x8dda42c9
sub edx, ecx
or edi, esi
xchg ecx, edx
sub ecx, 0x8f2f5fef
not edx
mov edx, edi
sub ecx, edi
sub edx, edi
xchg edx, ecx
nop
shl ecx, 2
mov edi, esi
not edx
xchg edx, edi
xchg edi, edx
add esi, ecx
jmp 0x48e05a
pop ebx
xchg ecx, edi
or edi, esi
xor ecx, esi
shl edx, 0x14
or edi, 0x8f421d0b
shl esi, 5
shl edi, 4
or edi, esi
mov esi, edi
rol edi, 0x1e
jmp 0x4900f1
call fcn.0048fd66
xchg ecx, esi
add ecx, esi
mov edi, edx
and edx, edi
or edi, esi
sub edx, 0x8f58b0b3
mov edi, esi
or edx, edi
add esi, edx
or edi, 0x8f59e90d
and edx, 0x8f5a589b
mov edx, edi
jmp 0x48e577
pop ebx
neg edx
add edi, esi
and edx, edi
add edx, 0x8f5fcd23
add ecx, 0x8f600d39
mov ecx, esi
mov esi, ecx
shr ecx, 8
jmp 0x48c359
mov ebx, 0x3f4d7907
or esi, edx
mov edi, edx
and esi, edx
inc esi
sub edi, 0x8f6a3085
or edi, edx
rol edi, 0xe
sub ecx, edi
and edx, edi
and ecx, esi
or ecx, edx
mov ecx, edi
add ecx, 0x8f6c3645
sub edi, 0x8f6c7615
xor esi, 0x8f6cb6f1
mov esi, edi
jmp 0x48f313
push 0x8dee6d83
and esi, ecx
add ecx, edi
and ecx, esi
add ecx, 0x8f7ad9d9
xor ecx, edi
add ecx, 0x8f7b5865
xor ecx, edi
or esi, 0x8f7bd74b
bswap edi
sub esi, edi
jmp 0x48d912
push 0x8df7b9d7
sub edi, edx
nop
and esi, edi
xor edx, esi
and esi, edi
neg ecx
not edi
xor edi, ecx
not ecx
neg edi
xor ecx, edi
add ecx, esi
inc ecx
sub ecx, esi
jmp 0x48da5a
push 0x8ddc9f59
rol esi, 1
sub esi, edi
bswap edi
mov esi, ecx
jmp 0x48eab7
call fcn.0048fd66
mov esi, edi
or ecx, esi
and edi, ecx
xor ecx, edx
and edx, esi
mov edi, edx
inc esi
neg ecx
jmp 0x48f3df
pop ebx
inc esi
xor edi, ecx
xchg ecx, edi
bswap edx
jmp 0x48dbdf
push 0x8dfc3ea9
shr ecx, 7
mov edi, esi
rol edx, 0x1b
and ecx, edi
xchg edx, esi
ror ecx, 0xf
xchg edx, esi
or ecx, edi
jmp 0x48e5c8
push 0x8dde1959
bswap esi
mov ecx, edx
add edi, esi
add edi, esi
and esi, 0x8fad8a0b
and edi, ecx
and edi, 0x8fae0825
xor esi, 0x8fae48d7
jmp 0x48ed2f
mov ebx, 0x3f4d7907
mov ecx, edi
shr edx, 0x1e
xchg ecx, esi
nop
shl edi, 0x13
mov edx, ecx
and esi, ecx
and edx, esi
ror edx, 0x19
sub edi, 0x8fb0e747
jmp 0x48d529
call fcn.0048fd66
add ecx, esi
xchg esi, edi
mov ecx, esi
and esi, edx
or edx, 0x8fb751e1
dec ecx
jmp 0x48ec91
push 0x8de8c051
or edx, esi
not ecx
xchg esi, ecx
add edi, edx
and edi, edx
inc edi
xor esi, 0x8fc99793
ror edi, 0xc
jmp 0x48d1d0
call fcn.0048fd66
neg ecx
nop
mov edi, esi
xor ecx, edx
or edi, 0x8fd137b1
add edi, 0x8fd177fb
neg esi
xor ecx, edi
sub esi, edi
sub ecx, edi
jmp 0x48cd5f
push 0x8de5c89d
and edi, 0x8fe6ee2b
or esi, edi
bswap edx
or ecx, esi
xchg edi, edx
or edi, 0x8fe839df
ror ecx, 0xe
sub edx, 0x8fe8bad5
jmp 0x48d205
push 0x8ddef89b
mov ecx, 0x8fe912cd
sub esi, 0x8fe95213
add edi, edx
xor esi, 0x8fe9e25b
ror edi, 0xd
and ecx, 0x8fea6369
and esi, edi
inc esi
sub edx, edi
xor edi, ecx
jmp 0x48f541
call ebx
add edx, edi
xchg esi, ecx
and ecx, edi
and ecx, edi
and esi, 0x8fef56ed
sub ecx, esi
and edx, ecx
and edx, 0x8ff0128f
inc edi
or edi, ecx
mov ecx, edx
shr edx, 9
jmp 0x48d54b
push 0x8df8eec3
mov esi, ecx
xor esi, 0x8ff8f72d
xchg edx, ecx
xor edx, 0x8ff976f9
xor ecx, edx
and esi, ecx
jmp 0x48d61b
pop ebx
add edx, 0x8fff2bfb
sub esi, edi
neg esi
add edi, esi
jmp 0x48cf67
mov ebx, 0x3f4d7907
bswap ecx
ror ecx, 0x18
rol esi, 0x18
xor edx, ecx
inc edx
and ecx, edx
sub ecx, esi
or edx, ecx
jmp 0x48cab2
pop ebx
shl esi, 0x18
ror ecx, 0xb
xor esi, 0x900f21bd
or esi, edx
inc ecx
dec edi
sub edx, edi
inc esi
xor ecx, edx
neg esi
xchg ecx, edx
mov edx, edi
add esi, edi
sub ecx, edx
jmp 0x48f2e9
call ebx
mov edi, edx
add edx, edi
inc esi
xor esi, 0x9012f9ed
xchg edi, esi
not esi
bswap esi
xchg esi, edx
mov ecx, edi
xchg edi, edx
mov ecx, esi
add ecx, 0x90150173
jmp 0x48fe17
pop ebx
bswap edx
rol ecx, 7
neg ecx
mov esi, ecx
sub edx, esi
rol ecx, 8
xor edx, ecx
sub edx, 0x90171635
and edi, 0x901766cb
or edx, edi
jmp 0x48f23a
pop ebx
or esi, edx
shl esi, 0x1f
and edx, esi
shl edx, 0x10
dec edx
sub edi, esi
mov ecx, 0x902ce463
xchg esi, edi
not edx
or ecx, edi
sub esi, ecx
shr edi, 0x1b
or edx, esi
add esi, edi
jmp 0x48de7d
call ebx
or edx, esi
xchg esi, edx
xchg ecx, edx
or edx, edi
sub ecx, 0x903accad
add edi, esi
ror edi, 0xe
or esi, 0x903b8b15
or edx, esi
mov edi, ecx
sub esi, edi
inc edi
jmp 0x48e766
push 0x8de368cd
sub edx, ecx
xor edi, 0x9042f923
sub edx, 0x904339ad
add edx, edi
and ecx, 0x9043b86d
or edi, edx
add edx, 0x904437a9
dec ecx
and edi, ecx
xor edi, 0x904508c1
jmp 0x48ca48
push 0x8de90bf3
xor esi, edi
and ecx, 0x9045a223
bswap edx
or esi, 0x90462307
and ecx, 0x9046646f
and edx, esi
or ecx, edx
inc edx
sub ecx, esi
xchg edi, ecx
sub edx, esi
not ecx
sub edi, 0x90486e21
mov ecx, edx
jmp 0x48fa17
push 0x8de61477
inc ecx
xchg esi, edx
sub edi, ecx
add edi, ecx
or edi, esi
xor edx, esi
xchg ecx, edx
dec ecx
and edx, esi
neg edi
shr edi, 0x1e
or edi, 0x904cca27
and ecx, edx
mov esi, edi
nop
or edx, esi
jmp 0x48debf
call fcn.0048fd66
mov edx, ecx
neg ecx
sub ecx, 0x905018c3
xchg edx, edi
add edx, 0x9050dfc5
mov esi, edx
mov edx, esi
xor edi, 0x90519801
jmp 0x48db4b
pop ebx
neg ecx
sub ecx, edi
neg edx
bswap ecx
shr edi, 0x1d
shl edi, 0xd
ror esi, 0x13
bswap esi
ror edx, 4
xor edx, edi
jmp 0x48f36c
pop ebx
sub edx, edi
shl edi, 6
add edx, 0x906363bb
xor esi, edx
bswap esi
xor esi, edx
xor edx, ecx
or edi, 0x9064af37
add edi, 0x9064ef1b
xchg edi, edx
jmp 0x48e597
pop ebx
not edx
and edi, edx
bswap edi
shl edi, 0x1a
add edx, esi
add esi, ecx
and edx, ecx
dec ecx
mov ecx, edx
add edi, ecx
xchg ecx, edi
ror edx, 0x12
jmp 0x48eb17
pop ebx
xor esi, edx
and esi, edx
not edx
bswap ecx
add edi, edx
mov edx, 0x9076a5bf
not edx
xor edi, ecx
sub edx, ecx
xor edx, ecx
xor edi, ecx
or edi, 0x907832fd
sub esi, edx
or edi, 0x9078b1c1
jmp 0x48e7ad
call fcn.0048fd66
xor edx, esi
sub edi, ecx
xchg edx, esi
add ecx, edx
shl esi, 0xc
and edi, 0x908bc897
mov edx, 0x908c0943
xor esi, edi
jmp 0x48e6b0
pop ebx
xchg edx, esi
rol esi, 0x10
nop
ror ecx, 0x1b
xor edx, edi
xchg edx, esi
and edx, ecx
or ecx, esi
mov edx, edi
shr edi, 0xd
and ecx, 0x908f2fad
add edi, edx
jmp 0x48fe38
call ebx
sub edx, esi
and ecx, 0x909007a3
xchg ecx, edx
or edx, ecx
and edx, 0x9090c46b
shl edi, 0x18
shl edi, 0x1e
or esi, ecx
mov esi, ecx
add esi, edx
xchg esi, ecx
bswap ecx
or ecx, 0x9092cbc1
mov edi, edx
xchg ecx, esi
sub esi, 0x90938691
jmp 0x48d40a
push 0x8debbc5d
mov ecx, esi
xchg esi, edi
neg ecx
shr edi, 0x1b
xchg ecx, esi
rol edx, 8
or ecx, edx
xor edi, ecx
or esi, edx
add esi, 0x90985557
xchg edx, edi
or ecx, edi
mov esi, edx
add esi, ecx
and esi, ecx
dec edi
jmp 0x48f956
mov ebx, 0x3f4d7907
mov esi, edi
xchg esi, ecx
shl ecx, 0x1a
add ecx, edx
xor edi, esi
add edx, edi
sub edi, 0x90a0f637
add edx, edi
jmp 0x48cbb3
push 0x8df85439
mov edx, esi
add ecx, edi
sub ecx, edx
shr edx, 0x12
mov ecx, edx
xchg edx, esi
dec edi
or edi, ecx
jmp 0x48d6f5
mov ebx, 0x3f4d7907
xchg ecx, edi
xor ecx, edi
inc ecx
xor edi, ecx
shr ecx, 0x11
and edi, edx
xchg esi, edx
xor edx, esi
mov ecx, esi
mov edi, ecx
ror edi, 5
rol ecx, 0x11
jmp 0x48c5c7
push 0x8df2a06b
xor edx, esi
add edx, 0x90af302f
sub ecx, edx
and ecx, edi
shr ecx, 0x15
add esi, 0x90b03c73
jmp 0x48e2aa
push 0x8df8a18b
xor edx, ecx
and ecx, edx
xchg esi, ecx
and edx, esi
xor edx, edi
or esi, 0x90b1de03
and edi, ecx
xor esi, edx
sub edi, edx
xchg edi, ecx
add ecx, edi
sub edi, ecx
jmp 0x48cde7
push 0x8de4e57b
xor esi, 0x90b3aee1
mov edi, edx
xchg ecx, edi
or esi, 0x90b46991
rol edx, 4
mov esi, edx
xchg edx, ecx
or edi, esi
rol esi, 0xa
and esi, 0x90b5f4f5
add edx, esi
ror edx, 3
sub ecx, 0x90b6b211
shr edx, 2
jmp 0x48fb9a
push 0x8de57d3b
shr esi, 0x1d
mov edx, 0x90ce789b
xchg ecx, edi
xor edi, 0x90cf02f9
add esi, 0x90cf5607
dec esi
bswap edi
and edi, esi
jmp 0x48ccea
push 0x8dfbf199
and esi, edx
xor esi, ecx
not ecx
nop
and edi, ecx
mov edi, esi
xchg edx, edi
sub edx, ecx
mov edi, esi
add ecx, edi
xor esi, ecx
shl edi, 0x1f
jmp 0x48c9d4
mov ebx, 0x3f4d7907
nop
shl edx, 0xa
add esi, ecx
ror edx, 0x16
bswap edx
xchg edx, esi
sub ecx, 0x90e1bbe1
add edx, ecx
jmp 0x48f3ac
call fcn.0048fd66
sub edx, edi
add esi, edi
shr edi, 9
xchg esi, ecx
or esi, 0x90ecc9af
neg edi
sub edx, edi
neg esi
mov ecx, esi
inc edx
or edx, 0x90ee56db
shr esi, 0x16
xchg edi, esi
mov ecx, edi
sub edx, edi
rol esi, 9
jmp 0x48cf41
mov ebx, 0x3f4d7907
mov edx, 0x90f8d953
or ecx, esi
xchg ecx, edi
mov ecx, edx
jmp 0x48d231
push 0x8df806ed
rol edx, 5
xchg esi, edx
inc edi
xor edi, edx
sub ecx, edx
or edx, esi
mov esi, 0x90fb89f7
xchg esi, ecx
and edi, 0x90fc07a7
and esi, ecx
jmp 0x48d654
pop ebx
mov edx, esi
add esi, ecx
mov esi, edx
or ecx, 0x90fd63eb
jmp 0x48f888
call ebx
neg esi
shl edi, 0x11
sub ecx, 0x910aefb5
rol edi, 0xb
inc ecx
xchg esi, ecx
jmp 0x48d3eb
mov ebx, 0x3f4d7907
mov esi, 0x910e3aad
or edx, esi
not edx
neg edi
add edi, 0x910f39ff
mov ecx, esi
nop
mov esi, ecx
add edi, 0x91104339
xchg esi, edx
sub edi, 0x9110c2d1
sub edi, edx
ror edi, 1
bswap esi
jmp 0x48f592
push 0x8deb6f89
neg edx
bswap edi
shr edi, 0x11
mov esi, 0x9115d84b
add ecx, esi
mov edx, edi
xchg edx, esi
shl esi, 0x1c
jmp 0x48d5c9
push 0x8df385cb
sub edi, ecx
rol edx, 0x1b
mov esi, ecx
xchg edx, edi
or edi, ecx
mov esi, edx
xor edx, 0x912979b7
xchg esi, edx
and edi, edx
mov esi, edi
add esi, edi
mov esi, 0x912ac1dd
jmp 0x48f06b
pop ebx
bswap esi
dec esi
xor edx, ecx
shl edi, 0x1b
ror ecx, 1
mov edi, ecx
jmp 0x48ea5c
mov ebx, 0x3f4d7907
xor edi, ecx
xor edi, esi
and ecx, esi
xor edi, ecx
xchg edx, esi
mov edi, ecx
and esi, edx
xor ecx, edi
jmp 0x48d99c
call ebx
rol ecx, 5
add edx, 0x9155f059
shr ecx, 7
xchg edi, ecx
xchg edx, edi
and edx, edi
xchg edi, ecx
sub ecx, edx
dec edx
xor edx, 0x9157f9cd
xor edx, esi
add ecx, edi
mov edx, ecx
and ecx, 0x9158f0cb
and edx, 0x915930c5
sub edx, esi
jmp 0x48ef5a
pop ebx
xor edi, 0x91647381
xchg edi, esi
dec ecx
xor esi, 0x916534c9
xchg esi, ecx
xchg edx, edi
add edi, ecx
and ecx, edi
rol edi, 0x16
inc esi
mov edx, ecx
xor edi, 0x91673c03
jmp 0x48f90a
call ebx
and edx, ecx
sub ecx, edx
and edi, esi
xor edi, ecx
or ecx, 0x916bb789
rol edx, 0xf
or esi, ecx
shl ecx, 0x11
sub ecx, esi
bswap esi
xor esi, edi
sub edi, 0x916e477d
and edi, edx
sub ecx, edx
jmp 0x48ed00
push 0x8dda8e9d
mov ecx, 0x91714049
or esi, ecx
ror edx, 0x15
ror esi, 0x13
mov ecx, esi
or edx, 0x91727bc9
shl esi, 0x1e
xor edi, edx
jmp 0x48c69c
call fcn.0048fd66
or edi, 0x91736a07
and esi, edi
or edx, esi
xor edx, esi
mov esi, edx
xor edi, esi
mov ecx, edx
sub esi, 0x91751bcd
and edi, ecx
shl esi, 8
add edi, esi
and edi, esi
add edx, edi
or edx, 0x9176a071
jmp 0x48e500
call fcn.0048fd66
inc edi
sub edx, edi
bswap ecx
add edi, edx
mov ecx, 0x91780a8d
sub ecx, 0x91784a9f
add edx, 0x91788a0b
and esi, edi
sub ecx, esi
bswap esi
mov edi, ecx
mov ecx, 0x9179c225
jmp 0x48e0e0
call ebx
and edi, 0x917a1f0b
add edi, ecx
add ecx, 0x917a9bb7
xor ecx, edx
or edx, esi
add ecx, edi
xchg edi, edx
xchg ecx, edx
add edx, edi
shl edi, 5
add esi, 0x917c9fed
bswap edx
and edi, esi
and ecx, edi
jmp 0x48ef6c
pop ebx
xor edi, ecx
xchg edi, esi
mov edx, esi
mov ecx, edx
or esi, 0x919abeed
xor edx, 0x919afeb9
sub esi, edi
not esi
xor ecx, edx
add esi, edx
xor ecx, 0x919c4a39
mov ecx, edx
jmp 0x48d32c
push 0x8df2ec31
mov esi, edi
and edx, edi
rol ecx, 7
shr esi, 0xc
jmp 0x48e417
pop ebx
add esi, ecx
ror edi, 0xf
xor ecx, esi
mov esi, edi
ror edi, 1
sub edx, ecx
jmp 0x48cb42
push 0x8df3390d
mov edi, edx
mov esi, ecx
xor esi, 0x91ba601d
not edi
and edx, 0x91bae017
xor edx, 0x91bb20e7
xchg edi, esi
sub edi, esi
sub edx, 0x91bbed5f
add ecx, esi
xor ecx, esi
rol ecx, 4
jmp 0x48dcb0
call ebx
add edx, esi
add esi, 0x91cb9dff
not esi
xor ecx, esi
add edi, 0x91cc5bd3
sub edi, 0x91cc9bfb
ror esi, 0x19
xor esi, 0x91cd1c5d
mov edx, 0x91cd6baf
xchg edi, esi
shr esi, 1
or edx, 0x91ce2ad1
jmp 0x48f6d2
call ebx
or esi, edx
xor esi, edi
dec edi
and esi, 0x91d3807d
rol edi, 0x19
xchg edi, edx
xor ecx, edi
not edi
rol edx, 0x11
xchg edi, edx
jmp 0x48cf1c
push 0x8dfba433
add edi, ecx
or edi, esi
xchg edi, edx
add esi, edi
shl esi, 0xf
add ecx, edx
and edx, esi
shr ecx, 0x19
add edx, 0x91d7704b
or edx, 0x91d7afbd
shl edx, 9
or ecx, 0x91d82f1b
jmp 0x48d8bd
push 0x8dfc8bb7
mov edi, 0x91d88d13
and ecx, 0x91d8cc97
mov ecx, esi
shr ecx, 1
jmp 0x48ce62
pop ebx
or edi, ecx
xchg edi, edx
dec edi
shl esi, 4
sub ecx, esi
xor esi, ecx
jmp 0x48c498
call ebx
mov ecx, edx
mov edx, 0x91e94d8b
nop
and esi, ecx
mov edx, ecx
or ecx, edi
jmp 0x48f740
pop ebx
sub esi, 0x91f5bf01
add ecx, edx
inc esi
mov esi, edx
sub esi, 0x91f6c939
sub edx, edi
shl edi, 0xe
xchg edx, esi
inc esi
add esi, ecx
dec edx
add esi, edx
jmp 0x48dfd2
pop ebx
shl edx, 0x16
xor edx, edi
or esi, edx
xchg esi, edx
or edx, 0x91fe879f
or edi, 0x91fec7cf
xor edi, ecx
ror edx, 0x1b
or esi, edi
inc edi
rol edx, 0x16
mov esi, ecx
jmp 0x48c618
push 0x8de1a15d
add edi, ecx
xor edx, edi
bswap ecx
or edx, esi
add edi, esi
add edx, ecx
dec edx
or ecx, edx
mov edx, edi
add ecx, esi
add ecx, 0x92031569
add edi, ecx
and ecx, edx
ror edi, 4
jmp 0x48da45
push 0x8dd9edb7
mov edx, ecx
mov esi, ecx
shl ecx, 0x1c
and ecx, edx
sub ecx, edx
add ecx, esi
add esi, ecx
add edx, edi
bswap edx
mov edx, esi
jmp 0x48c3a5
push 0x8dee213d
not esi
mov ecx, esi
xor esi, ecx
add edx, 0x9baa0a15
ror esi, 0x19
inc esi
add ecx, edx
mov edi, edx
xor edi, 0x9bac5acb
add edx, 0x9baccddd
sub ecx, edx
and esi, ecx
shl ecx, 8
add esi, edx
jmp 0x48c77f
mov ebx, 0x3f4d7907
and edi, esi
sub edi, ecx
xor ecx, esi
and esi, ecx
jmp 0x48c92f
pop ebx
xor edi, ecx
xor esi, edx
rol edx, 0xa
xor ecx, edi
and edi, 0x9bc2dcb3
mov ecx, edi
xor ecx, 0x9bc3c1cd
or esi, edx
or ecx, edx
inc ecx
neg edi
xchg edx, edi
and edx, esi
neg esi
sub ecx, esi
neg edx
jmp 0x48d19f
call ebx
mov esi, edi
mov ecx, 0x9bf523dd
mov esi, edx
rol esi, 0x1b
mov edx, edi
sub edi, ecx
xchg edi, edx
dec esi
xor esi, 0x9bf895b5
xchg edx, ecx
jmp 0x48e623
pop ebx
xor edx, esi
sub edx, ecx
add ecx, edx
mov edx, 0x9c06dab5
mov edi, edx
dec edx
sub edi, 0x9c083783
shl edx, 0x18
dec edi
not ecx
mov esi, 0x9c0a1211
and esi, edi
add esi, 0x9c0affb3
sub esi, edx
jmp 0x48c2a4
push 0x8dde6503
add esi, 0x9c0c1563
xchg ecx, edx
not ecx
sub esi, ecx
rol edx, 0x1a
add esi, 0x9c0e66d7
mov ecx, esi
sub ecx, edx
bswap ecx
or edx, ecx
jmp 0x48ef96
pop ebx
mov esi, ecx
sub ecx, edi
or edx, esi
sub esi, ecx
or esi, 0x9c4c9ca5
xor edi, 0x9c4d2c5b
and esi, ecx
sub edx, ecx
mov esi, edx
add edx, ecx
jmp 0x48e325
pop ebx
xor ecx, esi
sub esi, edx
and ecx, edx
bswap ecx
and edx, edi
or esi, edx
jmp 0x48d087
pop ebx
add ecx, 0x9c5e1ba7
add ecx, 0x9c5e89ab
and edi, esi
or edx, edi
or esi, 0x9c5fefc3
add edx, 0x9c606739
sub edx, 0x9c60d57b
and edx, esi
jmp 0x48f09c
push 0x8ddeae87
mov edi, esi
not edi
sub esi, 0x9c62c05f
add edx, 0x9c633363
nop
neg ecx
jmp 0x48cd11
pop ebx
rol edx, 0x15
rol ecx, 9
nop
xor edx, 0x9c71ea2d
and ecx, esi
mov ecx, edi
and ecx, edx
mov edi, esi
jmp 0x48ca22
pop ebx
mov edi, edx
xchg esi, edi
not ecx
add ecx, esi
xchg edi, ecx
and ecx, edx
shr esi, 0x1c
xor edx, ecx
and edi, esi
xor edi, 0x9c783677
xchg edx, esi
mov edx, ecx
xchg edi, esi
add esi, ecx
jmp 0x48c8f8
mov ebx, 0x3f4d7907
neg edx
xchg edi, edx
sub ecx, edi
or edx, ecx
and esi, 0x9c7fa939
sub esi, ecx
add edi, ecx
inc edx
xor esi, edi
or esi, 0x9c822c63
add esi, ecx
add edx, 0x9c832817
or esi, edi
add edi, edx
jmp 0x48fcc6
pop ebx
rol edi, 5
shl esi, 8
or esi, 0x9c85af5d
inc ecx
rol ecx, 0xf
add edi, esi
xchg esi, edx
dec edi
mov edi, ecx
sub esi, 0x9c892a21
sub ecx, 0x9c89bfcf
xor edi, 0x9c8a356d
or edi, ecx
xor ecx, edx
sub edi, ecx
add edx, 0x9c8bfc55
jmp 0x48fef5
mov ebx, 0x3f4d7907
sub ecx, esi
and edi, 0x9ca7cedb
add ecx, esi
ror edi, 5
xchg edx, edi
and ecx, 0x9ca9ab6f
add esi, 0x9caa1cb1
mov edx, ecx
or edx, ecx
xor edi, edx
ror esi, 0x16
and esi, edx
jmp 0x48e0b1
push 0x8de15629
inc esi
not edi
inc edx
or edx, esi
or ecx, esi
add edx, edi
add ecx, esi
dec ecx
shr edx, 0x1e
not edx
shl edx, 0x14
xchg ecx, esi
or ecx, edi
and esi, 0x9cc319ad
and esi, edi
or esi, 0x9cc3f83b
jmp 0x48e7d5
pop ebx
xor edi, esi
xchg ecx, edi
add ecx, esi
mov ecx, 0x9cccda1f
xchg esi, edi
xor ecx, esi
jmp 0x48f71c
pop ebx
inc esi
or edi, edx
inc ecx
bswap edx
xchg esi, ecx
sub esi, 0x9cd7ddf5
not ecx
and ecx, esi
nop
xor edi, 0x9cd9c12f
or edx, edi
mov ecx, esi
sub ecx, edi
mov ecx, 0x9cdb67f9
jmp 0x48c99b
call fcn.0048fd66
xor esi, edi
mov edi, edx
xor edx, ecx
and ecx, esi
mov edi, esi
and edx, edi
or edx, esi
mov esi, edi
jmp 0x48e012
pop ebx
xchg esi, edx
mov esi, edx
xchg edx, ecx
xchg edi, esi
mov esi, ecx
add edi, 0x9cea2095
and esi, edx
xor edi, edx
mov esi, ecx
xor edi, 0x9cebf491
jmp 0x48eeeb
call fcn.0048fd66
xor edi, esi
inc edi
or edx, esi
neg esi
or edi, edx
xchg edx, esi
dec esi
sub ecx, 0x9cf47565
jmp 0x48d134
call ebx
xchg edi, ecx
xchg ecx, edi
shl ecx, 0x18
bswap edx
shr ecx, 0x18
xchg edx, edi
mov edi, 0x9cfac8cd
shl esi, 9
sub edi, ecx
and ecx, edi
jmp 0x48f016
mov ebx, 0x3f4d7907
sub edi, 0x9d28c623
inc esi
xor edi, esi
bswap edi
mov ecx, esi
and esi, edi
shr edi, 0x1f
sub edx, esi
or esi, edx
xor ecx, 0x9d2ccf11
not ecx
and ecx, edi
not esi
mov edi, 0x9d2e94b3
jmp 0x48ff85
call fcn.0048fd66
and ecx, edi
rol ecx, 0x16
xor esi, ecx
or edi, 0x9d3532bd
sub ecx, edi
add edi, edx
or ecx, edx
add esi, edx
jmp 0x48df08
pop ebx
not esi
not edi
add edx, edi
sub edi, edx
xchg edx, esi
and edx, ecx
mov ecx, esi
ror edx, 0x1c
mov esi, edx
neg edi
jmp 0x48c7a9
push 0x8df638f7
dec edx
and esi, ecx
xor edi, esi
and edx, 0x9d6a6b59
add ecx, edi
and edi, 0x9d6b67a3
xor edx, esi
dec ecx
mov ecx, esi
not ecx
jmp 0x49000a
pop ebx
xor esi, edx
sub edi, ecx
shl edi, 2
or edi, ecx
or ecx, edx
neg edi
sub esi, 0x9d71240f
shr esi, 0x1e
nop
inc edx
jmp 0x48d71b
pop ebx
or edx, ecx
mov edi, 0x9d99d43d
rol edx, 0x15
sub esi, 0x9d9af8cb
jmp 0x48ce50
push 0x8df03be7
mov ecx, 0x9daa6d6d
add edx, 0x9daadcad
add edi, 0x9dab53e9
mov esi, edx
mov esi, edi
or esi, edx
not ecx
shr esi, 0x1c
sub edi, esi
dec ecx
jmp 0x490026
push 0x8dec06a7
and esi, 0x9dbc0347
or esi, ecx
or ecx, esi
xchg edx, ecx
or esi, 0x9dbe7ce5
inc edi
xchg esi, ecx
mov esi, ecx
jmp 0x48db7d
push 0x8de95787
mov esi, ecx
nop
bswap esi
shl ecx, 0x1f
mov edi, esi
mov edi, esi
xor edx, esi
xchg edi, esi
jmp 0x48d68b
pop ebx
dec edx
bswap edx
add esi, ecx
dec edi
or edx, edi
xor esi, ecx
shl edi, 0x1e
and edi, edx
rol edi, 0xc
and ecx, edi
xchg esi, edx
mov esi, 0x9dfa9c1f
add edi, esi
and ecx, 0x9dfb7b1f
and esi, ecx
mov edi, 0x9dfc5a4d
jmp 0x48e280
push 0x8de5312f
ror edx, 0x16
mov edi, 0x9e10b1ff
mov esi, edx
bswap ecx
mov ecx, edx
shr edi, 0x1c
add edx, edi
add esi, 0x9e141251
jmp 0x48d821
call ebx
sub ecx, esi
add edx, ecx
shl edx, 0x1d
and ecx, 0x9e24b5ff
bswap edx
shr ecx, 8
xor esi, 0x9e263941
inc esi
dec edi
mov edx, 0x9e27c067
add edx, esi
sub esi, edi
rol edi, 9
mov edx, edi
jmp 0x48da7f
call fcn.0048fd66
shr ecx, 0xc
add ecx, edi
dec edx
add edi, 0x9e3d9201
and edi, esi
and edx, ecx
dec ecx
xchg edx, ecx
sub edi, 0x9e401669
xchg esi, edx
ror edx, 0xd
or esi, ecx
ror edx, 0x1e
or edi, ecx
and esi, 0x9e42d97f
dec esi
jmp 0x48d56f
pop ebx
and edx, 0x9e6599d1
not edi
ror edi, 2
dec edx
or ecx, esi
neg edi
mov esi, ecx
mov edi, ecx
mov esi, edi
and edx, esi
add edi, esi
inc edi
jmp 0x48d257
pop ebx
rol edi, 0x13
and esi, edx
xor edx, edi
xor edx, 0x9e6c5a1f
add esi, 0x9e6cce23
xor edx, esi
add edx, edi
rol esi, 0x13
inc edi
xor ecx, edi
bswap edx
shr ecx, 6
mov edi, esi
or ecx, edx
jmp 0x48fae1
push 0x8df25319
or esi, 0x9e85d4db
xor ecx, edx
shl edx, 0x1f
not esi
sub edx, esi
and ecx, esi
xchg esi, ecx
sub ecx, esi
or edx, esi
sub edi, edx
jmp 0x48d6d6
call fcn.0048fd66
xchg ecx, edi
not edx
neg edi
or ecx, edi
not edx
bswap edx
ror edx, 0xb
ror edi, 0xc
and esi, edx
ror edx, 0xa
jmp 0x48fc1f
mov ebx, 0x3f4d7907
xchg edx, edi
mov esi, ecx
rol edi, 0xf
shl edx, 0x1f
mov ecx, edx
xor esi, 0x9eaf43b5
jmp 0x48e07e
push 0x8df087a9
add esi, ecx
mov esi, edx
add edi, 0x9eb0d92d
add ecx, edx
sub esi, 0x9eb1dcaf
add edi, 0x9eb259b1
shl edx, 3
mov esi, 0x9eb3540b
xor ecx, edx
shr esi, 5
dec edx
sub edi, esi
xor edi, 0x9eb5d439
xor ecx, 0x9eb64133
jmp 0x48f195
pop ebx
xchg edx, edi
neg esi
neg edi
shr edi, 0x19
inc esi
mov edi, esi
and edi, esi
xor ecx, 0x9ecc3705
jmp fcn.0048f8c7