Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get common file path
Hash data using murmur3

Disassembly:
xor ecx, edx
add edx, edi
add ecx, edi
shr ecx, 6
dec ecx
call sub.user32.dll_GetInputState
bswap esi
or edi, edx
xor edi, edx
xor edi, edx
xor ecx, edi
mov edi, edx
cmp eax, 0xffffff14
jne 0x4010ae
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
ret
add edx, ecx
rol edi, 0x19
xor edi, edx
or ecx, edi
add edi, edx
or esi, edi
and esi, 0x312ad4f0
call sub.user32.dll_GetInputState
sub edi, 0x312b45c6
sub ecx, edi
xchg ecx, edi
xor esi, edi
cmp eax, 0xffffff26
jne 0x401138
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
ret
xchg ecx, esi
inc edx
call sub.user32.dll_GetInputState
and ecx, 0x312eae81
or edx, 0x312effa5
sub edi, 0x312f4cf8
cmp eax, 0xfffffee8
jne 0x4011e0
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
ret
bswap edi
add esi, ecx
sub edi, ecx
add esi, 0x313291e6
mov esi, edi
add esi, edi
call sub.user32.dll_GetInputState
or ecx, edi
add edi, 0x3133e030
sub edi, esi
cmp eax, 0xfffffeea
jne 0x40129c
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.ntdll.dll_RtlNumberGenericTableElementsAvl
call sub.kernel32.dll_GetTempFileNameW
call sub.kernel32.dll_GetTempFileNameW
ret
jmp 0x494824
xor ecx, edi
mov edx, 0x31f89ee2
xchg edi, ecx
ror esi, 1
xchg ecx, edx
and edx, ecx
shl esi, 0x16
ror edx, 0x15
jmp 0x4963d6
pop esi
ror ebx, 1
not edi
shl ebx, 0x1d
xor edx, ecx
mov edi, 0x365645d1
mov edx, ebx
mov edi, edx
xchg ebx, ecx
mov ebx, 0x36586291
and edi, ecx
jmp 0x496573
push 0x3233006b
and ecx, ebx
add ecx, 0x365ded8c
and edx, edi
xor edx, ebx
add ebx, edx
or edi, 0x365f352d
xchg edx, ecx
jmp 0x4968ca
push 0x3207c81b
xor ecx, edi
and edx, 0x366a1565
or ecx, 0x366a6447
sub edx, 0x366ab77f
rol edx, 0x1f
and edi, edx
sub ebx, ecx
sub edx, ecx
neg ebx
and edi, ebx
xor ebx, edx
sub edi, ecx
jmp 0x496ab0
push 0x3200279e
and edi, ebx
or edi, 0x366df323
and edx, 0x366e4215
bswap edx
xor ecx, 0x366ee864
not ecx
sub ecx, ebx
add edi, 0x366fdbf3
sub edi, ebx
jmp 0x496a30
pop esi
add ecx, 0x3676f607
xchg ebx, edi
inc ecx
mov ebx, edi
shr ebx, 0xe
xor edx, 0x3678882e
xchg edi, edx
ror edi, 0xa
sub ebx, ecx
neg ebx
ror edi, 0x17
add ecx, ebx
jmp 0x4968a6
push 0x3209a5e8
mov ebx, ecx
and edx, 0x367b2af1
sub edi, ecx
xor edx, ecx
or edx, ecx
xor ebx, ecx
xor ebx, edx
and ecx, edi
add ecx, 0x367d61cf
add edi, ebx
mov ecx, ebx
sub ebx, 0x367e4a9c
jmp 0x49599a
call esi
mov edx, edi
ror ebx, 4
neg edx
xchg edi, ecx
add edi, edx
and edx, ecx
xor edi, ebx
not ecx
jmp 0x49637c
push 0x320323d9
and ebx, edx
xor ecx, ebx
sub edi, edx
neg ebx
xchg ebx, edx
neg edx
mov ebx, edx
jmp 0x4978e4
pop esi
and edx, ebx
or ebx, edx
add edi, ecx
and edi, edx
sub edi, ecx
xor ebx, edx
mov edi, ebx
jmp 0x496cd6
push 0x32288642
add ebx, ecx
ror ecx, 9
xchg edi, edx
xor ebx, edx
sub ecx, ebx
mov edx, edi
jmp 0x494d71
push 0x32452105
xchg edx, ecx
add ebx, 0x36b3ea66
or ebx, 0x36b43b36
mov ecx, edi
or ecx, 0x36b4d3ce
or edi, ebx
mov edx, ecx
xor edx, 0x36b5c577
mov ecx, ebx
or edx, 0x36b65c0f
rol ebx, 0x1e
xor edx, ebx
jmp 0x496d7a
push 0x32291263
add edi, edx
shl ecx, 0x11
xchg ebx, edi
xchg ecx, ebx
bswap edi
dec edx
jmp 0x495fe9
pop esi
xchg ebx, edi
xor edx, ecx
jmp 0x496017
call esi
nop
and edx, 0x36bc609f
xor edi, edx
and ebx, edx
rol edi, 0x16
xchg ecx, edi
sub edi, 0x36bde690
or ebx, edi
xchg edx, ecx
jmp 0x496dcf
push 0x3203faea
or edx, ecx
xchg ebx, ecx
sub edx, ecx
xor ecx, edx
or ebx, ecx
and edi, 0x36c689e6
xor edi, 0x36c6d91f
sub ecx, 0x36c73254
add edx, 0x36c7832a
sub edi, edx
xor ebx, ecx
jmp 0x497534
mov esi, 0x4132136a
mov ecx, ebx
sub ecx, ebx
and ecx, edx
neg ecx
dec edx
jmp 0x4976f5
call esi
xor ecx, 0x36d3788c
ror edi, 7
and ecx, 0x36d4194f
neg ebx
xor edx, 0x36d4b93d
mov ebx, 0x36d5070e
add edi, edx
dec ebx
mov edi, edx
shr ebx, 0x1c
or edi, 0x36d69764
xor edi, 0x36d6e49d
jmp 0x497f07
call fcn.0049643b
and edi, ebx
and ebx, ecx
add edx, ecx
add ecx, edx
mov edi, ebx
mov ebx, edi
mov edi, ebx
mov ebx, ecx
or ebx, edi
jmp 0x495f38
push 0x93424
add ebx, 0x36ecd898
add edx, 0x36ed298f
and ecx, edx
not ecx
mov edi, ebx
xor edi, edx
and ecx, ebx
shr edx, 0x11
add ebx, ecx
neg edi
or edi, ebx
jmp fcn.00495046
push 0x3208f140
sub edx, edi
not ebx
dec ecx
mov edi, 0x36f2565c
neg ebx
or edx, edi
shl ecx, 0x10
and edx, 0x36f39fc6
add ebx, edi
sub edi, ebx
jmp 0x494aaf
call fcn.0049643b
and edi, ebx
xor ecx, edi
rol edi, 0x10
and edx, edi
xor ecx, ebx
or edi, 0x36ff2308
and ecx, ebx
add ebx, edx
nop
add ebx, edx
not edx
dec edi
jmp 0x4953fa
call fcn.0049643b
or ebx, edx
add edx, ecx
not edx
or ecx, edi
add edx, ecx
dec edi
or ebx, edi
shr edi, 8
xchg ecx, edx
jmp 0x494eaf
mov esi, 0x183c2e20
mov edx, ebx
xor edi, 0x371145be
and ecx, ebx
add ecx, edx
or ebx, 0x37122834
mov ecx, 0x37127792
shr edi, 0xa
jmp 0x496a09
push 0x32240ba5
or ebx, ecx
xor edi, edx
add edx, edi
bswap ecx
add edi, ecx
dec ebx
mov edi, ebx
mov ebx, ecx
sub ecx, 0x371cdbaa
xor edi, ebx
or ecx, 0x371d778c
xor ecx, 0x371dc4f9
jmp 0x49770f
call fcn.0049643b
xor edx, edi
xchg edi, ebx
shr edi, 7
sub ecx, 0x372b1b5a
or edx, edi
mov ebx, edi
not edi
add edi, 0x372c656a
or ebx, ecx
neg ecx
and edx, ecx
xor edx, 0x372da2f3
or edi, ebx
jmp 0x495d90
push 0x40
ror ecx, 6
shr edx, 0x1d
add edx, ebx
xor ecx, edx
or edi, 0x37406328
rol edi, 0xe
add edx, ebx
shl ecx, 0x1d
sub ecx, edx
and ecx, edx
add ebx, 0x37423cea
xor edi, ecx
xchg edx, edi
jmp 0x494fc2
pop esi
dec edi
xor edx, edi
shl edi, 0x19
or edx, edi
or ecx, 0x3746c7ae
bswap ebx
dec ebx
shl ebx, 0xa
mov edx, edi
or edx, ebx
jmp 0x494a87
call esi
inc ecx
mov ebx, edx
or ecx, edx
dec ebx
add edx, edi
and ebx, edi
and ecx, ebx
xor edi, ebx
xor ebx, edi
sub ebx, ecx
jmp 0x494904
call fcn.0049643b
xor ecx, ebx
xor edx, edi
dec edx
xchg edx, edi
sub ebx, edx
and ebx, edi
shl ecx, 0x1c
bswap edi
xor edx, ecx
xor ebx, 0x37557e7d
jmp 0x495575
mov esi, 0x183c2e20
and ecx, edx
xor ecx, ebx
add edx, 0x3764f671
dec ebx
sub ebx, ecx
dec ecx
and ebx, edi
add ebx, edx
or edi, ebx
xor edx, ebx
shl ecx, 0xa
nop
jmp 0x497089
call esi
and edx, ebx
shr ecx, 0xe
mov ebx, 0x376d8e8b
neg ebx
or ebx, edi
or edx, ebx
and ecx, ebx
or edx, edi
sub edx, edi
shl ecx, 8
jmp 0x494c7f
push 0x3243c15c
mov edi, ebx
or ecx, ebx
jmp 0x496bb7
pop esi
xchg edx, ebx
add edx, ecx
bswap edx
ror edi, 0xc
xor edx, 0x37755e9c
sub ecx, edi
add ebx, edx
mov edx, ecx
or ebx, 0x37768e3a
jmp 0x4974d8
pop esi
xor edx, edi
xor ebx, edi
not edi
add ebx, edi
or ebx, 0x377b6797
mov edx, 0x377bb404
add ecx, ebx
inc edx
inc edi
mov ebx, ecx
mov edi, ebx
add edx, ebx
and ebx, edi
mov edi, ebx
ror ecx, 0xb
jmp 0x495746
mov esi, 0x183c2e20
shl ecx, 0x17
add edx, ebx
inc ebx
add edi, ebx
xor edx, edi
xchg edi, ebx
xchg edx, ecx
xchg edi, ecx
neg edx
xor edx, ebx
mov ecx, edx
xor edi, 0x37823609
xchg edi, ecx
jmp 0x497b6b
mov esi, 0x40495727
and ecx, edx
mov ebx, ecx
neg ecx
xchg ebx, ecx
jmp 0x495296
pop esi
and edx, ebx
shl ebx, 5
and ebx, 0x37971113
or ebx, edi
jmp 0x496df1
push 0x3203c6a9
or edx, ebx
mov edx, ecx
mov edx, ebx
sub ecx, 0x3798a3f1
and ebx, edx
or edi, 0x37994881
add ecx, edx
jmp 0x494e09
call fcn.0049643b
mov ecx, 0x37aa24ea
xor edx, ebx
or edi, ebx
add ecx, edi
ror ecx, 0x17
add edi, ebx
jmp 0x497623
push 0x321aacbd
or ebx, edi
and edi, ecx
bswap edi
dec ebx
xor edi, ebx
mov ebx, ecx
xchg edx, ecx
and edx, edi
add edi, edx
mov edi, ecx
sub ecx, ebx
xchg edi, ecx
shr edx, 7
jmp 0x495b5d
mov esi, 0x183c2e20
inc edi
xchg ecx, edi
or edi, ecx
or ebx, ecx
add edi, edx
and ecx, edi
or edx, 0x37cbd5f4
or edx, 0x37cc22b2
add edx, ecx
and ebx, 0x37ccbdd4
and ecx, edx
neg ecx
jmp 0x497c02
push 0x32202af6
mov ebx, 0x37cdc036
shr edi, 0x15
sub edx, ebx
add ecx, ebx
xchg ecx, edx
mov edi, ebx
mov edx, edi
and edx, ecx
mov ecx, edi
xchg ecx, edx
mov ecx, edi
sub ebx, edi
or edi, ecx
ror edi, 0x12
jmp 0x495640
pop esi
rol edx, 0x1f
shl edx, 0x12
xchg ecx, edi
shr ebx, 7
ror ecx, 0x15
and ecx, edx
xor ebx, 0x37e1cc36
and edx, ecx
xchg ecx, ebx
add ebx, 0x37e2c161
sub edi, 0x37e30e5c
jmp 0x496660
call esi
or edx, ebx
xor edi, ebx
mov ecx, 0x37e90c09
or edx, 0x37e95aa2
add ecx, 0x37e9ab6b
or edi, ebx
xor edi, edx
and ecx, edx
add ebx, edx
jmp 0x49755b
push 0x321b47e4
xor ecx, edx
sub edx, 0x37f161d7
or ecx, 0x37f1ae98
inc ecx
and edx, 0x37f24f1e
xor edi, ebx
xchg edx, ebx
add ecx, edx
ror edx, 0x10
inc edx
jmp 0x496b8e
push 0x320fed18
xor ebx, 0x380102c1
sub ebx, ecx
or edi, ebx
xchg edi, ebx
xchg edi, ecx
not ebx
mov ebx, edi
jmp 0x4960ae
pop esi
mov edx, ecx
mov edx, edi
xchg ecx, edx
xor edx, 0x380cecef
or ecx, 0x380d3dfb
xchg ebx, edx
add ecx, edi
bswap ecx
rol ecx, 2
jmp 0x497599
pop esi
and edi, ebx
mov ebx, edi
xchg edx, ebx
xor edx, edi
xor edi, edx
and ecx, 0x3815aebb
neg edi
bswap edi
and ecx, 0x3816aafd
xchg ebx, edi
xchg edi, ecx
xor ecx, ebx
shl ebx, 4
neg ebx
jmp 0x496005
mov esi, 0x183c2e20
mov ecx, 0x38189e3d
and edx, ecx
xchg edx, ecx
xor ecx, edx
xchg edi, edx
or edi, edx
add edx, edi
or edi, 0x381ac436
jmp 0x49513e
call esi
shl edx, 0x17
ror ebx, 0x11
and edi, edx
xor edx, 0x38241cee
xor edi, ebx
mov ecx, edx
and edx, 0x382502ab
ror ecx, 0x1a
add edx, edi
jmp 0x4971f3
pop esi
bswap ebx
mov edx, edi
shl edi, 0xe
ror ebx, 0x15
ror ecx, 0x14
xchg edx, edi
shr edi, 0x1c
sub ebx, 0x382b2b33
sub ebx, edi
jmp 0x4977c6
push esp
neg ecx
or edx, edi
or ecx, edi
xchg ebx, edi
xchg edi, edx
ror ebx, 2
add edi, ecx
xor edx, edi
jmp 0x495373
pop esi
mov edx, edi
xchg ecx, edi
xchg ebx, edi
add edx, ecx
or edx, edi
sub edx, 0x38412eea
sub ebx, 0x38418a2f
mov edi, ebx
add ecx, edx
or ecx, ebx
or ecx, 0x3842bbad
inc edi
jmp 0x4959c7
call esi
mov ecx, edi
add edi, 0x38495c7b
add ecx, edi
add ecx, edx
sub edi, ecx
add ebx, edi
jmp 0x497225
call esi
bswap ecx
rol ebx, 0xf
not edx
sub ecx, edx
dec edx
jmp 0x496d4e
push 0x322987d8
add ebx, edi
sub edi, ebx
mov ebx, 0x3859abb6
shr edi, 8
xor edi, 0x385a5494
jmp 0x495668
pop esi
not edx
or ebx, 0x385b1230
and edx, ecx
xor edx, ebx
jmp 0x496644
pop esi
or edx, 0x385c21c3
shl edi, 0x1e
xchg ecx, ebx
xchg edx, edi
or edx, 0x385d5bb1
shl edi, 3
inc edi
inc edi
xor edx, edi
mov ecx, edi
jmp 0x4955d4
mov esi, 0x40495727
inc edi
xchg ebx, ecx
neg edx
mov ebx, edx
neg edx
mov edi, ebx
xchg edi, ebx
jmp 0x494f3d
mov esi, 0x183c2e20
neg ecx
ror ebx, 0xf
and edi, ecx
add edi, 0x388a30ac
xchg edi, edx
nop
mov ebx, edi
inc edx
and ebx, edx
mov edx, ebx
xor ecx, 0x388c5da1
xchg ecx, edx
neg ebx
or edi, ecx
mov ebx, 0x388d9476
or ebx, edx
jmp 0x495832
pop esi
and edx, 0x38a88ddd
sub edx, edi
rol ebx, 0x13
add ebx, 0x38a97698
shr ebx, 0xd
or edi, 0x38aa176f
xor edi, 0x38aa64e6
or edi, 0x38aac016
bswap ebx
xor edi, edx
jmp 0x495c95
call esi
or ebx, 0x38abcfc6
ror edi, 8
and edi, ecx
or edi, edx
dec ecx
mov edx, ebx
mov edx, 0x38adaa61
xor ecx, edx
jmp 0x495616
push 0x31ff1c43
mov ebx, edx
mov ebx, edi
shl edx, 0x1a
xor ecx, 0x38af4cf8
add ecx, 0x38af9d62
mov edi, edx
sub ebx, edi
jmp 0x497b8d
pop esi
mov ecx, edi
xor ecx, 0x38bfac48
mov edx, edi
and ebx, ecx
add ebx, edx
mov edi, edx
mov edi, edx
xchg edx, edi
add ecx, edi
mov edi, edx
rol edx, 0x13
jmp 0x49799a
pop esi
shl ecx, 0x18
and edx, ebx
or ecx, ebx
not ecx
add ebx, edi
or edi, edx
or ecx, 0x38d85d01
neg edx
mov ebx, ecx
mov ebx, edx
sub edi, edx
inc edi
jmp 0x495dd1
push 0x323b6d54
mov ebx, edx
shr edi, 0x1a
xchg ebx, edx
or ebx, ecx
add ebx, ecx
xchg ecx, edi
ror ecx, 6
add ebx, edx
jmp 0x496221
pop esi
xor edx, edi
xchg edx, edi
and edi, 0x38ece1c3
mov edi, 0x38ed3f45
xchg edi, ebx
xor edx, ebx
mov edi, edx
sub edx, ecx
add ecx, ebx
add ebx, edx
jmp 0x494c67
call esi
sub ecx, edi
xor edi, ecx
and edi, edx
add ecx, edi
shr edi, 0xd
xor ebx, edx
mov ebx, 0x39042845
xchg edx, edi
jmp 0x494d87
push esp
sub ecx, edx
nop
shl ecx, 0x1b
add ecx, 0x391d2109
or edx, 0x391d6e37
add ecx, edx
xor ecx, edx
jmp 0x495e5f
pop esi
sub edi, edx
shl edx, 0xa
bswap ebx
mov ebx, 0x3925c359
xor edi, 0x39261082
and edx, ecx
or ebx, ecx
add ecx, 0x3926f612
or edx, edi
jmp 0x49716e
push 0x3234fc57
or ecx, ebx
add ebx, edx
add ebx, ecx
and edi, edx
or edx, ebx
add ecx, 0x392941b7
jmp 0x49736e
call fcn.0049643b
add edx, edi
mov edx, ebx
shl edi, 0x1d
xchg edx, ebx
xor edx, ecx
dec edx
mov edx, edi
xor ecx, edx
xor ebx, ecx
jmp 0x49671f
call fcn.0049643b
or edx, edi
inc edx
or ecx, 0x39450a70
mov edx, ecx
xchg edx, ebx
sub ebx, edx
mov edx, ebx
add edi, 0x3946866f
or edi, 0x3946d71d
jmp 0x495f9c
mov esi, 0x183c2e20
or edx, ebx
bswap edi
or edi, ecx
or edx, edi
add ebx, 0x39487100
shr ecx, 0x12
sub ecx, ebx
or ecx, ebx
or ebx, edx
bswap edx
not ebx
neg edi
jmp 0x497caf
push 0x320878c8
or edx, ebx
bswap ecx
or ebx, edi
xchg ebx, edi
sub ecx, edx
or edx, edi
shr edi, 0xe
mov edx, edi
or ecx, ebx
jmp 0x494ffe
push 0x321bc176
neg edx
inc edi
shr edx, 1
xchg edi, ecx
sub edi, edx
add ecx, edx
shl ecx, 0xe
xchg edx, edi
sub edx, 0x39694b75
and ebx, 0x396999e2
or edi, ecx
jmp 0x495513
push 0x32442ad3
bswap edi
xor edx, edi
shl edi, 0x16
inc edi
xor edi, ebx
xor ebx, ecx
add ecx, 0x396c2958
shl ebx, 0x1c
add ebx, ecx
shl ebx, 2
or edx, edi
ror edi, 4
mov edx, ebx
jmp 0x497eab
push 0x320f10a1
ror ebx, 0x11
xchg ebx, edi
not ebx
sub ecx, 0x397ecb52
sub ecx, 0x397f186e
or edx, 0x397f696e
xor ecx, edx
jmp 0x495c1d
pop esi
or ebx, edx
and edi, edx
rol ecx, 3
xor edx, edi
and edi, ecx
bswap edi
shr ebx, 0x17
xor ecx, 0x398248e4
jmp 0x497cea
pop esi
or edx, ebx
mov ecx, ebx
add ebx, 0x3989e831
xor edi, ecx
or edi, 0x398a8423
ror edx, 0x1a
and edx, ebx
and ecx, 0x398b6fc1
dec edi
xor ecx, 0x398c1b34
add edi, edx
jmp 0x495cf0
mov esi, 0x40495727
xchg ebx, edi
inc ebx
shl ebx, 6
add edi, 0x398dbf11
not edi
dec edi
shl edi, 0x14
xor ebx, edx
or ebx, 0x398f55d6
add ebx, ecx
mov edi, ebx
mov edi, ebx
and edi, ebx
xchg edx, ecx
xchg ecx, edi
jmp 0x495082
pop esi
ror edi, 0x14
dec ecx
sub edx, 0x39962946
xchg edx, edi
dec ecx
or edi, 0x39971dc2
mov ebx, edx
sub ebx, edi
xor edi, ebx
shr edi, 0x1c
jmp 0x497659
pop esi
or edi, ebx
mov edx, ecx
mov edx, ecx
and edx, ecx
mov ebx, edi
not edx
shr ecx, 5
dec ecx
mov ebx, ecx
xor edx, edi
jmp 0x495ec5
push 0x32150c1b
sub edx, ebx
mov ebx, edi
bswap edx
mov edi, 0x39b691fe
add edx, ebx
and ecx, 0x39b72fe5
mov edi, ecx
rol edx, 0x1e
jmp 0x4972eb
call fcn.0049643b
shl edx, 1
shr ecx, 0xb
and ebx, edx
not ecx
mov ecx, edx
and edx, 0x39d85f4a
xchg edx, ecx
ror ecx, 0x1c
sub ebx, 0x39d957c4
jmp 0x4963b8
pop esi
add ecx, 0x39e4f976
xor ebx, 0x39e5494e
add ebx, 0x39e597f7
xor edx, 0x39e5e4ec
and ecx, edx
or edx, edi
ror ecx, 8
xor ebx, ecx
sub edx, ecx
xor edi, edx
bswap ecx
add ebx, 0x39e85c83
mov ecx, edi
jmp 0x496497
push 0x3206e88c
or ebx, edi
and ecx, 0x39e96795
or edx, 0x39e9b456
and edx, edi
shl edx, 0x12
sub ecx, edx
sub edi, ecx
mov ecx, 0x39eb73b3
mov edx, edi
jmp 0x4949e4
push 0x32039221
xor ebx, edi
shr edx, 0x12
nop
xchg ebx, edi
and ecx, edx
bswap edi
xchg ebx, edx
and edx, ebx
add ebx, edi
xchg edx, edi
sub edi, ecx
shr edx, 0x1e
or ebx, ecx
jmp 0x495759
pop esi
and edx, ebx
sub ecx, ebx
rol ebx, 0x1c
add ecx, 0x3a00a1fd
xchg edi, edx
mov ebx, edi
and edi, 0x3a0224b5
xchg edx, edi
xchg ebx, edx
and edx, edi
or edi, ecx
rol ebx, 0x1a
not ecx
sub edi, 0x3a04ec05
xor edi, edx
jmp 0x497d85
pop esi
add ebx, ecx
and edx, 0x3a076a95
and ebx, edi
xor ebx, 0x3a080bca
sub edi, ecx
or ebx, ecx
and ecx, 0x3a09072a
xor edx, ebx
shl edx, 9
xor ecx, 0x3a0aa4ee
jmp 0x497f2c
mov esi, 0x183c2e20
ror ebx, 0x19
mov edi, 0x3a1ea020
add ecx, ebx
and edx, ebx
xchg edx, ecx
not ebx
or ecx, ebx
xor edx, ecx
or edx, ebx
and edi, 0x3a21b66a
sub edi, ebx
mov ebx, edx
mov edx, ebx
jmp 0x495440
push 0x3235b5e8
xchg edi, ebx
add ecx, edx
not ebx
xor edi, edx
bswap edx
mov edx, ecx
shr edi, 0x18
xor ebx, edx
xchg ebx, ecx
shl edx, 7
add edi, ebx
xor ebx, ecx
jmp 0x495173
push 0x321499f8
or edx, edi
add ebx, 0x3a3277c6
xor ecx, 0x3a32c453
rol ecx, 7
xchg edx, ecx
and edi, 0x3a33b1d6
mov edx, edi
shl ecx, 0x15
mov ebx, 0x3a34a5ae
mov edx, ebx
add edi, ecx
add ecx, edx
inc ecx
jmp 0x496f16
pop esi
xchg ecx, edx
and ecx, edx
bswap ebx
xor ecx, edi
xor edi, ecx
and ebx, edx
add ebx, edx
and ecx, 0x3a4a06b8
sub ebx, edx
jmp 0x494e9c
push 0x32280fd2
add edx, ebx
xchg edi, edx
xor ecx, ebx
xor edx, edi
neg ebx
or edx, edi
or edx, edi
and edi, ecx
jmp 0x494cae
mov esi, 0x40495727
mov ecx, 0x3a53a52f
shr ebx, 0x19
and ecx, edi
and edx, edi
xor ebx, 0x3a54e545
xchg edx, ebx
ror edx, 0xe
add ebx, 0x3a55ce8f
jmp 0x497ed6
pop esi
xor edx, edi
rol ecx, 8
xchg ebx, ecx
xor ecx, edi
xchg ebx, ecx
add ebx, 0x3a57b801
xor edx, ecx
or edx, ecx
and ebx, ecx
xchg edx, ecx
xchg ecx, ebx
mov ebx, 0x3a599144
xchg ecx, ebx
jmp 0x49775c
pop esi
sub ebx, ecx
or ecx, ebx
or edi, ebx
xor ecx, 0x3a5b33ca
sub edi, ebx
mov edx, ebx
jmp 0x4979df
pop esi
sub ecx, edx
neg ecx
xor edx, edi
shr ecx, 8
add ecx, edi
and ebx, 0x3a5dbf58
xor ebx, 0x3a5e0c74
sub ebx, edi
or edx, ebx
jmp 0x497583
call esi
mov ebx, 0x3a686c73
mov ebx, ecx
and edi, ecx
xchg ebx, edi
and edx, edi
sub edx, edi
add edx, 0x3a6a52c6
mov edx, 0x3a6aa5dd
jmp 0x497d52
push 0x3222fe48
sub ecx, edx
mov edi, ecx
mov edx, edi
add ebx, ecx
add edx, ebx
xchg ecx, edx
mov ebx, edi
shr ebx, 0x17
mov ebx, edi
and edx, edi
xor edi, edx
xor ebx, edx
or edx, edi
neg edi
xor ebx, edx
add ecx, 0x3a71c99d
jmp 0x49787c
call fcn.0049643b
or ebx, 0x3a7b1649
dec ecx
xor edi, ebx
mov edx, ebx
and ebx, edx
shl ecx, 0x16
jmp 0x496843
mov esi, 0x183c2e20
sub ecx, 0x3a7d1a88
mov ecx, 0x3a7d6d04
and ebx, edi
sub ebx, ecx
sub ebx, ecx
add edi, edx
mov ebx, 0x3a7efed2
shr ebx, 0x16
jmp 0x496971
pop esi
bswap ecx
and edi, ecx
mov ebx, edi
shl ecx, 0x13
jmp 0x4953c0
pop esi
and edi, ecx
sub ecx, edx
and ebx, edi
jmp 0x4974bc
push 0x322381f1
sub edx, edi
or ebx, 0x3a9e73ab
not ecx
inc edx
sub edi, ecx
jmp 0x4951e4
push 0x320358fa
xchg edx, ecx
or edi, edx
or edi, edx
xchg ebx, ecx
xchg edi, ebx
jmp 0x4971ce
push 0x32432341
mov edx, 0x3aae2114
add ebx, ecx
shl ebx, 0xf
dec edx
xor ebx, 0x3aaf5992
or ecx, edi
add ecx, ebx
shl ecx, 0x14
add edx, 0x3ab0987a
jmp 0x4955c6
push 0x322efb85
or ecx, 0x3ab76401
add ebx, edx
or ecx, edi
sub ebx, edx
jmp 0x495d1b
pop esi
or ebx, ecx
xor edi, 0x3abca18c
and edx, 0x3abcee03
mov ebx, 0x3abd3c08
or edx, ebx
sub ebx, edx
or edx, 0x3abe315d
mov edx, edi
not ebx
and edi, edx
bswap ebx
jmp 0x496cb1
call esi
add edx, 0x3adabe5a
sub ecx, edx
xor ecx, 0x3adb5a1d
sub edi, edx
xchg edx, ecx
xor edx, ebx
bswap edi
xor ecx, edi
nop
sub edx, ecx
add ecx, ebx
xchg ecx, edi
or edx, ebx
jmp 0x497e38
call fcn.0049643b
add ebx, 0x3aded346
dec edi
sub ebx, edx
sub edx, 0x3adfbccf
sub edx, ecx
xchg ecx, edx
or ecx, edi
rol edx, 0x12
jmp 0x494d91
push 0x31ffbdbc
neg ebx
not edi
sub ebx, edi
mov ebx, edi
neg ecx
or edi, edx
xchg ebx, edi
and ecx, 0x3ae38ebb
mov edx, ecx
or ebx, ecx
mov edi, edx
mov ecx, ebx
jmp 0x494a13
call fcn.0049643b
neg ebx
mov ebx, ecx
dec edi
ror ecx, 1
sub edi, ebx
or edx, 0x3aecee76
shl edi, 0x19
or edi, 0x3aed8ce5
or ebx, edx
mov ecx, ebx
rol edx, 0x18
jmp 0x494c0e
call fcn.0049643b
not ecx
mov edi, edx
dec ebx
dec edx
shr ebx, 0x1c
dec edx
jmp 0x497b43
push 0x321a309f
shr edx, 4
mov edi, edx
mov edx, 0x3afe3bc7
add edi, edx
inc ecx
or edx, ebx
or edi, 0x3aff7d6f
add edi, 0x3affcbcc
or ecx, edi
or ecx, 0x3b0064ad
xor ebx, ecx
mov edi, ebx
mov ecx, edi
jmp 0x4958d5
pop esi
or edx, edi
add edi, edx
mov ecx, edi
and ebx, edx
sub edx, ebx
sub edi, 0x3b07ffa4
xor edx, 0x3b084c87
xor edx, 0x3b08a863
bswap edx
or ebx, 0x3b0949b8
mov ecx, edi
or ebx, edi
xchg ecx, edx
shl ebx, 0x14
jmp 0x497926
pop esi
xor ebx, ecx
not edi
and ecx, ebx
ror ebx, 1
or edi, ebx
and edi, 0x3b0c6794
inc edx
rol edx, 0x19
not edi
mov edi, edx
add edi, ebx
sub ecx, edi
jmp 0x497139
pop esi
not ebx
mov edi, edx
jmp 0x495a92
push 0x32449fb2
or edx, ecx
mov ebx, edi
and edi, 0x3b27c760
add edx, ecx
shr edi, 6
add edi, ecx
sub ecx, 0x3b28fb53
bswap edx
xor edi, ebx
xor ecx, 0x3b29f3ce
jmp 0x494d1e
call fcn.0049643b
and edx, ebx
sub ebx, 0x3b2aa376
sub ebx, 0x3b2af063
mov ebx, 0x3b2b3e46
mov ebx, edx
dec edi
add ecx, ebx
xchg ecx, edi
mov edx, ecx
sub ecx, edi
inc edx
shl edx, 8
shr ebx, 0xa
not ecx
jmp 0x495aeb
pop esi
xchg ecx, edx
and edi, ebx
or ebx, edx
or ecx, ebx
sub edx, 0x3b2feb84
mov ebx, edx
and edi, ecx
mov ecx, edx
xor ecx, ebx
dec ebx
sub ebx, 0x3b320718
xor edx, ebx
jmp 0x494951
pop esi
bswap edi
xchg ebx, edi
rol edi, 5
add edx, 0x3b33a7cd
sub ebx, edi
xchg edx, edi
jmp 0x4973ad