Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
or ebx, 0xe50535dc
mov edi, 0xe505dbf0
inc esi
call sub.kernel32.dll_GetCurrentProcessId
sub ebx, edi
xchg esi, edi
or edx, 0xe5084d26
or esi, ebx
cmp eax, 0xffffff2e
jne 0x401083
call sub.advapi32.dll_RegConnectRegistryA
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.oleaut32.dll_VarR4FromBool
call sub.ntdll.dll_RtlPrefixString
call sub.ntdll.dll_RtlPrefixString
call sub.ntdll.dll_RtlPrefixString
call sub.ntdll.dll_RtlPrefixString
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.oleaut32.dll_VarR4FromBool
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.oleaut32.dll_VarR4FromBool
call sub.oleaut32.dll_VarR4FromBool
call sub.ntdll.dll_RtlPrefixString
ret
or ebx, 0xe50c399d
sub edi, edx
bswap esi
sub esi, edx
neg edx
or edi, ebx
shl ebx, 0x10
mov ebx, 0xe51015a9
call sub.kernel32.dll_GetCommandLineA
add edi, esi
shr ebx, 0x10
cmp eax, 0xfffffef9
jne 0x401110
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.oleaut32.dll_VarR4FromBool
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
call sub.advapi32.dll_RegConnectRegistryA
call sub.oleaut32.dll_VarR4FromBool
call sub.oleaut32.dll_VarR4FromBool
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.ntdll.dll_RtlPrefixString
call sub.advapi32.dll_RegConnectRegistryA
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
call sub.ntdll.dll_RtlPrefixString
call sub.ntdll.dll_RtlPrefixString
ret
or edx, edi
rol edi, 4
call sub.kernel32.dll_GetCurrentProcessId
bswap edx
add esi, ebx
sub edi, ebx
and ebx, 0xe517e9c3
add edi, ebx
mov esi, ebx
dec ebx
cmp eax, 0xfffffef0
jne 0x4011aa
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.oleaut32.dll_VarR4FromBool
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.oleaut32.dll_VarR4FromBool
call sub.oleaut32.dll_VarR4FromBool
call sub.ntdll.dll_RtlPrefixString
call sub.advapi32.dll_RegConnectRegistryA
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.advapi32.dll_RegConnectRegistryA
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.oleaut32.dll_VarR4FromBool
ret
sub ebx, edi
mov ebx, 0xe51dd5c3
bswap edi
sub ebx, edx
xchg ebx, esi
or esi, edi
mov esi, edi
call sub.kernel32.dll_GetCurrentProcessId
add edi, ebx
cmp eax, 0xfffffefb
jne 0x40124b
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.advapi32.dll_RegConnectRegistryA
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
call sub.ntdll.dll_RtlPrefixString
call sub.ntdll.dll_RtlPrefixString
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
call sub.ntdll.dll_RtlPrefixString
call sub.oleaut32.dll_VarR4FromBool
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
call sub.advapi32.dll_RegConnectRegistryA
call sub.advapi32.dll_RegConnectRegistryA
call sub.ntdll.dll_RtlPrefixString
ret
jmp 0x49445b
rol ebx, 0xc
bswap ebx
or edi, edx
mov ebx, esi
jmp 0x496bb3
push 0xe6e2781d
or ebx, 0xebd414fa
xchg edx, ecx
mov ebx, ecx
mov ebx, ecx
inc edx
or edx, ebx
ror edi, 0x1a
sub ecx, edi
jmp 0x494b21
push 0x9305b
shr edi, 0xe
xor edx, ecx
add edx, ebx
sub ecx, 0xebf4f349
mov ecx, ebx
and ebx, edi
or edx, edi
bswap edi
jmp 0x495987
call esi
mov ecx, edi
sub edi, edx
add ebx, ecx
not edi
sub edi, ebx
or ecx, edx
jmp 0x494c67
push 0xe734e8d2
or ebx, edi
and edi, 0xec11c8f6
sub edi, edx
xor edi, 0xec12d73f
and edi, ebx
xor edx, ebx
mov ebx, 0xec144703
shr ebx, 0x11
jmp 0x49631b
push 0xe741d6c4
xor ebx, ecx
mov edx, edi
xor ebx, 0xec23b44c
shl ebx, 0x1f
dec ebx
and edi, edx
xor ebx, edi
mov ebx, 0xec25eb6a
bswap edx
add edx, 0xec26d2a0
jmp 0x495b5a
pop esi
mov edi, ebx
add edi, ebx
sub ebx, edi
xor edx, ecx
shl edx, 0x1f
xchg edi, edx
jmp 0x494a84
push 0xe6e6cd51
bswap ebx
sub edx, ecx
shr edi, 0x1e
not ecx
sub ecx, ebx
shr edx, 0xb
and edx, edi
or edx, ebx
or edi, 0xec3ec089
mov ebx, edi
jmp 0x4967c7
pop esi
xor ebx, edx
mov edi, ebx
xchg ecx, ebx
not edi
sub ecx, edx
or ecx, edi
jmp 0x495d4d
pop esi
xchg edi, edx
and ecx, ebx
add ecx, 0xec5f7538
add edi, ecx
xchg edi, edx
shl ecx, 4
mov edx, edi
or edi, 0xec656856
add edi, ecx
sub ecx, edi
or edi, ebx
and ecx, edi
and edx, 0xec66aa1d
or ebx, 0xec66eb82
dec edx
ror ebx, 0x1b
jmp 0x49507f
push 0xe7311ab5
rol edx, 0xf
inc edi
add ecx, ebx
xor edx, 0xec6a5f9f
jmp 0x4967aa
call esi
xor ebx, 0xec6e2496
inc edi
inc edx
mov ecx, ebx
or edx, edi
ror edx, 7
rol ecx, 2
jmp 0x49619f
push 0xe73e2a8f
and ebx, edi
sub ecx, edx
and ebx, 0xec767252
or edx, edi
sub edi, edx
sub ecx, edx
mov ebx, 0xec7d08bc
dec ecx
jmp 0x496603
push 0xe702ef50
xor edi, edx
mov edi, ebx
add ecx, 0xec9d4345
add edi, ecx
shl ebx, 0x15
or edi, edx
neg ebx
jmp 0x4953c2
pop esi
and edi, ebx
xor ebx, 0xeccf4c4f
mov edi, ebx
and edi, edx
add ecx, ebx
sub ebx, ecx
or edi, edx
xor edi, edx
sub edi, 0xece2a449
shl edi, 0x1a
xor edi, ebx
and ecx, ebx
and ecx, 0xece4621e
jmp 0x494e1b
push 0xe72d9754
add ebx, ecx
sub ecx, 0xecf12065
add ebx, edi
and ecx, ebx
jmp 0x495e93
call esi
mov edx, 0xecf2adde
and ecx, 0xecf32f66
jmp 0x4956cd
push 0xe720971a
sub edx, ebx
xor edi, 0xecf74bef
add ebx, ecx
add edi, 0xecf82fce
or ebx, ecx
xchg edx, edi
sub edx, edi
not edx
jmp 0x496630
pop esi
shl edi, 0xb
mov ecx, edi
and ecx, edx
mov ebx, edi
add ecx, edx
sub edx, edi
xor ecx, edi
ror ecx, 0x18
mov edi, ebx
jmp 0x49614e
push 0xe6e2d91d
or edi, 0xed17fd1b
xchg ebx, edi
mov edi, ecx
xchg ebx, edx
xor edi, 0xed19fa24
jmp 0x49514b
pop esi
bswap edx
shr edx, 2
mov edx, ebx
and ebx, 0xed1c5bd9
xor ebx, 0xed1cd101
rol ecx, 0xe
sub edx, edi
xor edx, ebx
xor edi, ecx
xor edx, ebx
neg ebx
sub ebx, ecx
sub ecx, edi
xor ebx, edx
sub edi, edx
jmp 0x496c5c
call fcn.00496d18
mov ebx, ecx
sub edx, 0xed22d143
shr ebx, 0x12
rol edx, 0x1a
xor edi, 0xed24a6d1
sub ebx, edx
shr ecx, 5
or ecx, ebx
and ecx, edx
or edi, ebx
and edx, ebx
add edx, edi
and ebx, edi
xor edi, edx
jmp 0x496679
push 0xe730b755
or edi, 0xed29b7df
sub ecx, 0xed2a28c4
rol edi, 0x18
mov edi, ecx
or edx, ecx
bswap ebx
and edi, edx
sub edx, edi
and edx, edi
and ecx, 0xed3b4483
mov ebx, edi
neg edi
bswap edi
or ebx, edx
jmp 0x4947e6
pop esi
and ecx, ebx
or ecx, edx
xchg ebx, ecx
and ecx, edi
add edi, ecx
xor ebx, ecx
inc ebx
jmp 0x494caf
pop esi
add ebx, edx
or ebx, edi
xor edi, 0xed61a75a
and edi, ebx
or ebx, ecx
and edi, ecx
mov ebx, ecx
and ecx, ebx
or edi, ebx
sub edi, edx
jmp 0x495ad1
pop esi
xor ecx, edi
shr ecx, 0x1e
shl ebx, 0x1e
sub ebx, 0xed697276
add edi, 0xed69f29a
shl ebx, 0xc
sub ebx, 0xed6b0bdf
jmp 0x4952be
push 0xe7070cb7
shl ecx, 0x1f
dec edi
and edx, ebx
jmp 0x496549
call esi
shl edi, 0x11
add edi, 0xed992fbe
sub ebx, 0xed99c132
mov edi, ecx
add edi, ecx
mov ebx, ecx
or edx, ebx
sub edx, edi
xchg ebx, ecx
not ebx
xchg ebx, ecx
or ebx, edx
and ecx, edi
or ecx, edi
xchg edi, ebx
jmp 0x496459
call fcn.00496d18
and ebx, edi
mov edi, ecx
xchg edi, ecx
sub ecx, edi
add ebx, edx
sub ecx, edi
add edx, ebx
jmp 0x4968fb
push 0xe6e671b0
dec edi
add edx, 0xedaf0bd8
xor ebx, edi
add ebx, edx
and edx, ebx
xor edi, 0xedb0db93
or ebx, edi
add edi, ecx
xor ebx, edi
or ebx, ecx
mov ecx, edx
sub ecx, 0xedb3ddee
add edx, edi
sub ebx, 0xedb4cec2
jmp 0x4946c8
call fcn.00496d18
mov edi, ecx
mov ecx, edi
shl edx, 0x1b
mov ebx, ecx
xor ecx, edi
mov edx, ebx
rol ebx, 1
or edi, 0xedbb9593
jmp 0x496087
pop esi
mov edi, edx
sub ecx, ebx
rol ecx, 7
dec ebx
mov edi, edx
shr edi, 0xc
or ecx, 0xedbf4df4
jmp 0x494c0e
push 0xe73dd0b8
xor edx, ebx
or ecx, ebx
add edi, ecx
mov edi, edx
mov ebx, 0xedc1cc03
jmp 0x49487e
pop esi
mov edi, ecx
and edi, edx
mov edx, 0xee012529
or edi, ecx
or edi, ecx
dec edx
or ebx, 0xee035757
shl edi, 0x1f
jmp 0x49646c
call fcn.00496d18
or edi, ecx
xchg edi, ebx
add edx, 0xee118cca
mov edi, 0xee11fa77
mov edi, ecx
add edi, ebx
and edi, edx
mov edi, 0xee13ce3f
xchg ecx, edi
and ecx, edi
xchg edi, ecx
sub edi, edx
dec ebx
inc edi
jmp 0x494a72
push 0xe6ea307e
mov edx, ebx
sub ecx, edx
inc edi
mov edx, ecx
mov ebx, edx
xchg edi, ebx
sub edx, edi
xor edi, 0xee201a1f
or edx, ecx
mov edi, edx
and edx, 0xee21ac36
and ebx, edx
jmp 0x49643c
push 0xe721bce1
xor ebx, ecx
sub ebx, ecx
rol ecx, 0xa
mov ebx, edi
shr ebx, 0x14
neg edx
jmp 0x49690c
mov esi, 0x123b2f04
sub ecx, 0xee397fcd
xchg ecx, ebx
or edx, ebx
xor edx, 0xee3b15cb
neg ecx
or ebx, edx
or ebx, ecx
add ebx, ecx
xor ebx, edx
or edi, 0xee3df56a
inc edi
add edx, ebx
sub ebx, 0xee3f425f
jmp 0x4957af
push 0xe6f74c76
and ebx, ecx
xor ecx, 0xee4054cc
and edx, edi
xor ebx, ecx
and edx, ecx
or edx, edi
neg ecx
dec ebx
add ecx, 0xee4bd22e
and ebx, ecx
jmp 0x495e67
mov esi, 0x2774562b
not edi
mov ecx, edx
add ebx, ecx
neg ecx
mov ebx, ecx
or edx, edi
mov edx, 0xee70c4e7
jmp 0x494f62
pop esi
shl ecx, 0x11
dec edx
sub edi, ebx
add ebx, edi
sub ebx, edi
sub edi, ebx
jmp 0x4945ec
mov esi, 0x2774562b
add ecx, edi
mov ebx, edi
or edx, 0xee778a35
sub ebx, edi
and edx, 0xee788eb6
inc ebx
jmp 0x494b6b
push 0xe703b007
xchg edx, edi
sub ecx, edi
and ebx, edx
ror edx, 0x13
xchg edi, ecx
not ebx
xchg edx, ecx
xchg ecx, edx
jmp 0x495a39
pop esi
neg edx
sub edx, 0xeec8c93d
and ebx, edx
add edx, ebx
xchg ecx, ebx
sub edi, ecx
mov ebx, edx
add edx, ebx
bswap edx
and ebx, edx
xor edx, ebx
jmp 0x494b3d
call esi
add ecx, ebx
add edx, edi
not edx
sub edi, ecx
jmp 0x494695
push 0xe7035155
sub edx, ecx
sub edx, edi
sub ecx, 0xeefe1946
or edx, edi
or ebx, edx
add edi, 0xeeff6e70
ror ecx, 0xb
xchg edi, edx
jmp 0x495231
call fcn.00496d18
add edi, 0xef08091f
xor ecx, edi
neg edi
add ecx, 0xef0970b9
rol edx, 3
xor edi, ecx
and edi, edx
add ebx, ecx
not ecx
xchg edi, edx
dec ebx
mov edi, 0xef1d3c97
sub ecx, ebx
xor ecx, 0xef1e2371
jmp 0x495e31
mov esi, 0x123b2f04
and ecx, ebx
xor ecx, edx
xor ecx, ebx
and edi, 0xef4a5c0e
not edx
or edx, 0xef4b44cc
add ecx, edx
and ecx, 0xef4c4817
and edx, edi
mov edx, ecx
bswap ebx
mov ecx, ebx
jmp 0x496bde
pop esi
sub edi, edx
add edx, ebx
jmp 0x495166
push 0xe7028b0f
add edx, ebx
not edi
add ecx, 0xef8fc70e
or ecx, edi
jmp 0x494941
pop esi
sub ecx, ebx
or ebx, edi
or ecx, edx
and ebx, 0xef9547a8
sub ecx, 0xef95a5b9
jmp 0x4947af
push 0xe74165a0
shl ebx, 5
or edx, ebx
bswap edi
mov edi, edx
xor edx, edi
xor ebx, edi
xchg ecx, ebx
sub ebx, edi
and edx, ebx
or edx, ebx
or ecx, edi
not edx
add ecx, ebx
and edi, 0xefbe26b8
jmp 0x49463e
push 0xe72ff395
neg ebx
rol edi, 0xb
add edx, 0xefc2687a
xor ebx, ecx
xor ecx, ebx
jmp 0x49682f
pop esi
xchg edx, ecx
nop
sub ecx, edi
xchg ecx, edx
or ebx, edi
dec ebx
neg edi
sub edi, 0xefc52d62
mov edx, 0xefc56a79
xor ecx, 0xefc5a85b
mov edx, 0xefc5e633
add edi, edx
dec edx
jmp 0x495fa7
call esi
bswap edx
bswap edi
or edi, ebx
mov ecx, ebx
add ecx, edi
mov edi, ebx
add ecx, edx
mov edi, ebx
jmp 0x496b8b
call fcn.00496d18
inc ecx
or ebx, edi
mov edx, ebx
mov ecx, 0xeff50835
dec ebx
and ecx, edx
sub edi, ebx
xor edx, ecx
sub ebx, 0xeff64acb
xor edi, ecx
or ebx, edx
jmp 0x495ae9
pop esi
sub ebx, ecx
sub edi, ecx
inc ecx
or ecx, 0xefffdfc4
or ebx, edi
add edx, ecx
neg ecx
mov edx, ecx
or ebx, edi
sub ecx, edx
sub edx, edi
and edi, ecx
and ecx, ebx
or ebx, 0xf00613f3
inc ecx
jmp 0x4967ea
call esi
shl edx, 0x1c
add ecx, ebx
bswap edi
shr ecx, 0x18
or edi, ebx
jmp 0x496256
call fcn.00496d18
sub ebx, edx
sub ebx, edx
mov edi, ebx
add edi, ecx
and ebx, edi
mov ecx, 0xf010dd0f
mov edx, ebx
ror edx, 3
xchg ecx, ebx
mov edx, 0xf011d2af
shr edi, 0x19
and ebx, 0xf0125127
jmp 0x495824
call fcn.00496d18
mov ebx, 0xf017d7a1
or ecx, edi
xor ebx, ecx
xchg edx, ebx
xchg ebx, edi
add ecx, ebx
jmp 0x494828
pop esi
add edi, 0xf019b128
or ebx, ecx
or edi, ebx
xor edi, ebx
or edi, ebx
jmp 0x4962ae
push 0xe707e8e7
xchg ecx, ebx
and edi, ecx
nop
sub ecx, edi
xor edi, 0xf0334678
jmp 0x496c2c
push 0x401400
mov ecx, 0xf03c398a
shl ebx, 8
mov ecx, edi
xchg edx, edi
shr edx, 0x15
xor ecx, 0xf04241a8
shl edi, 0x12
add ebx, 0xf0434e94
or ebx, ecx
and edi, ecx
add edx, edi
sub ebx, edi
and edx, ebx
rol edx, 0xa
jmp 0x495374
call esi
bswap ebx
mov ecx, 0xf04b1674
xor edi, 0xf04ba17d
add edx, ebx
ror edx, 0xf
xchg ebx, ecx
or ebx, 0xf04d6d32
shl ebx, 2
xor ebx, edi
jmp 0x494f02
mov esi, 0x123b2f04
xor ebx, edi
xor ebx, edx
and edx, ecx
mov ecx, 0xf059eaec
add edx, ebx
sub ebx, edi
or ebx, edi
ror edi, 0x1e
mov edx, edi
add ecx, 0xf05fc616
xor ebx, edi
jmp 0x495423
push 0x40
mov edi, ebx
and ecx, ebx
sub edi, 0xf06b400c
add edi, 0xf06be6bb
mov ecx, edi
and edx, 0xf06ce512
ror edx, 3
or edi, 0xf06dcc69
jmp 0x49452b
pop esi
add ebx, edx
or ecx, 0xf06efb5a
or ebx, edx
mov ebx, ecx
add edi, 0xf07077de
jmp 0x494acc
call esi
xor edi, edx
bswap ecx
mov edi, ecx
not ebx
xor edi, ebx
sub ebx, 0xf0739a31
add edx, ecx
jmp loc.004944ad
push 0xe7425547
mov edx, ecx
or ebx, 0xf088398b
or edx, ebx
shl edi, 0xa
mov edi, 0xf089b50b
add edx, 0xf08a3d1c
sub edx, edi
sub edx, ebx
and ebx, edx
sub edi, 0xf08bf4ab
dec ebx
jmp 0x496807
push esp
xor ebx, edx
dec ebx
ror edi, 9
add ecx, edi
sub ebx, edi
mov ecx, 0xf0ca1198
or ebx, edx
jmp 0x495aa6
push 0xe6f81e6b
bswap ecx
xor edx, ebx
xchg ecx, edx
sub ecx, ebx
and edi, ebx
jmp 0x4954d3
pop esi
or edx, edi
xor edx, edi
mov ebx, ecx
rol ecx, 3
shl ebx, 0x1b
mov ebx, 0xf0f381b7
jmp 0x495572
call esi
sub ebx, ecx
xchg edx, ecx
add ebx, ecx
or ebx, edi
rol edi, 0x18
sub edi, 0xf0f699c2
jmp 0x4957fa
call esi
or ebx, edi
sub ecx, edi
neg edx
mov edx, 0xf115cd7e
add ecx, edi
xor edx, ebx
xor edx, 0xf11914ea
sub ebx, 0xf1198793
or edi, 0xf11a14f1
rol edi, 0x17
ror ebx, 0xf
xchg edx, edi
and edi, ecx
neg edx
xor edx, ecx
jmp 0x496786
push 0xe6f7b839
inc ebx
and edx, ecx
bswap ebx
neg ecx
xor edx, edi
rol ecx, 0x1b
or edx, ebx
and edx, edi
xchg ebx, edi
xchg ebx, edx
or ebx, edx
xor edx, 0xf1283599
and ebx, 0xf128c0d6
jmp 0x495cac
mov esi, 0x123b2f04
sub ebx, ecx
or ebx, edx
xor ebx, 0xf12a4bda
sub edx, ebx
xor edx, 0xf12f9d7b
mov ebx, edi
mov edx, ebx
xor edx, 0xf1315f25
mov edi, 0xf131dff3
sub ecx, edx
neg ebx
nop
jmp 0x494d95
call esi
or edx, edi
xchg ebx, edi
mov ecx, edi
sub ecx, 0xf1519634
inc edi
bswap edx
xor edx, edi
mov edx, ecx
sub edx, 0xf1542414
ror edx, 0x1d
or edi, edx
or ebx, edi
neg edx
jmp 0x495fee
pop esi
or edi, edx
or edi, ebx
and edx, ebx
xor edi, ecx
xchg ecx, edi
mov edi, 0xf16110a2
ror edi, 0x18
jmp 0x496a8d
pop esi
add ebx, ecx
nop
neg ebx
xor ebx, edi
bswap ebx
xchg edi, ecx
jmp 0x496a75
pop esi
xor edx, 0xf171e649
and edi, 0xf1726c59
and ecx, edi
and ecx, edi
add edi, edx
neg edx
and ebx, 0xf1787e0e
ror ebx, 0x12
jmp 0x494750
push 0xe6e21a84
dec edi
add edi, edx
sub edi, ebx
add ecx, 0xf17b030f
sub edi, 0xf17b7be1
and edx, edi
sub ecx, 0xf17c782a
inc edx
mov edx, 0xf17d90bc
and edx, edi
jmp 0x49448f
push esp
sub edx, ecx
xchg ecx, edx
mov ecx, 0xf1895843
sub ecx, edx
xor ecx, edi
sub ecx, 0xf18af510
sub ecx, edx
shl ebx, 0x17
mov ebx, 0xf18cb116
jmp 0x495c95
pop esi
xchg ebx, edi
and edi, edx
ror edi, 7
jmp 0x494a5c
push 0xe72b9782
mov edx, ecx
dec edx
bswap edx
sub ecx, ebx
shr ecx, 0xa
sub ebx, edx
inc ebx
sub edx, 0xf1bae5d1
xchg ecx, edi
xchg ebx, edx
and ebx, edx
sub ecx, edi
or edx, ebx
sub ebx, edx
jmp 0x495178
pop esi
neg ecx
and edi, edx
xor edx, ecx
rol edi, 0x16
neg edx
or edi, edx
and ecx, 0xf21709b9
xor ecx, ebx
rol edx, 0x1f
or ebx, 0xf226b2df
sub ebx, 0xf22739e8
mov edi, ecx
xor edi, edx
jmp 0x494c49
call fcn.00496d18
or ebx, ecx
xchg ecx, edi
add ebx, 0xf22bfaa7
add ecx, ebx
bswap edi
dec ebx
rol ebx, 8
ror edi, 2
mov ecx, edx
jmp 0x495d64
pop esi
mov edx, 0xf247c546
or ecx, 0xf2483bde
and edi, ecx
sub ecx, 0xf2492d0e
and ecx, 0xf249aeb1
not edi
add ecx, edi
bswap ebx
jmp 0x4966b3
pop esi
or ecx, edi
xor edx, ecx
and ebx, 0xf26a91ec
inc edi
shl edx, 0x1a
inc edi
shr ecx, 0x18
jmp 0x4969c7
pop esi
inc ebx
xchg ebx, ecx
or edi, ebx
add ebx, edx
shl ebx, 0x12
add ebx, edx
or edi, edx
nop
mov ebx, ecx
xchg ebx, edx
or ebx, edx
jmp 0x494dad
mov esi, 0x2774562b
mov edi, 0xf2ad67e1
add ebx, ecx
inc ecx
or edx, ecx
add ecx, ebx
sub ecx, edx
xchg ecx, edi
jmp 0x4961dd
mov esi, 0x2774562b
inc ebx
ror edi, 0x16
add edx, edi
ror edi, 0x1c
and ecx, 0xf2ea5572
and ebx, ecx
xchg ebx, ecx
jmp 0x4969a9
pop esi
xchg edx, edi
add edi, 0xf2ec2c00
mov edx, 0xf2ecca18
jmp 0x495f8f
pop esi
not edx
add ecx, 0xf2edd3ff
bswap ebx
xchg ecx, ebx
and ebx, edi
jmp 0x496cf0
push 0xe6e1bad6
and ecx, edx
dec ebx
xor ecx, edi
xor ebx, edi
and ebx, 0xf350a3e7
mov ebx, edi
or edx, ebx
mov edi, ebx
jmp 0x496011
push 0xe7077ca5
bswap ebx
mov edx, 0xf352f181
bswap edx
add edi, edx
add edi, 0xf35435c6
dec ecx
add ecx, ebx
jmp 0x495929
call fcn.00496d18
add edi, edx
xor ecx, edx
and ebx, edi
add ecx, 0xf3618417
not ecx
sub edi, 0xf36268fc
neg edx
mov ecx, ebx
neg ecx
or edx, edi
jmp 0x4945d9
mov esi, 0x2774562b
add ebx, 0xf368ee93
or edi, ecx
mov edi, 0xf369c9b7
xor edx, 0xf36a3683
neg ebx
and ecx, ebx
neg edi
ror edx, 0x1d
dec ecx
xor edx, 0xf36cf019
jmp 0x496bff
push 0xe720fa6d
add ebx, ecx
add edx, 0xf36df343
or edx, ecx
not edx
mov ebx, 0xf36f4ca6
sub ecx, ebx
xchg ecx, ebx
jmp 0x496c95
call esi
add ebx, ecx
xor edi, 0xf375c20b
mov ecx, 0xf37630fa
sub ecx, edi
rol ebx, 5
jmp 0x496115
pop esi
sub edx, edi
dec ebx
and ecx, 0xf37ddba8
shr ecx, 1
or edi, ebx
mov ebx, ecx
inc ebx
or ecx, edi
xchg edx, ebx
jmp 0x496d52
pop esi
shr edi, 0x1d
mov edx, 0xf39b73bd
shl edx, 0x1a
xor ecx, edi
mov ecx, edi
xor edx, edi
dec edx
or edx, ebx
and edx, edi
shl ebx, 0xd
ror edi, 0x11
add ebx, edi
jmp 0x494a17
mov esi, 0x123b2f04
rol ecx, 3
xor edi, ebx
xor edi, edx
xor ebx, ecx
rol edx, 0xa
xchg ecx, ebx
inc ebx
mov ecx, ebx
mov ecx, edi
jmp 0x495843
mov esi, 0x2774562b
neg ecx
bswap edi
or edi, edx
xchg edi, ebx
and edx, ecx
or edi, edx
neg edx
xchg edx, edi
or edi, ecx
or edi, ecx
and edx, edi
or ebx, edi
dec edx
jmp 0x496ab5
push 0xe73d6a79
xor edi, 0xf3ac047f
and ebx, ecx
or ecx, edi
add ecx, edi
dec edx
sub ebx, ecx
or ecx, ebx
sub edi, ecx
jmp 0x494e34
push 0xe742b797
xchg edx, ebx
xor ebx, 0xf3b0ce4d
rol ecx, 0x1a
ror ebx, 0x19
not ebx
and ebx, ecx
shr ecx, 9
xor edx, 0xf3b397a1
rol ebx, 0x1a
jmp 0x49504c
push 0xe7304fa6
mov edi, 0xf3b4cdea
not edx
not edi
xchg edx, edi
mov ebx, ecx
rol ebx, 0x1c
jmp 0x494b9c
push 0xe6e9cd6d
sub edx, 0xf3cf3404
shl ecx, 0xe
xor edi, 0xf3d039a9
shl edi, 0x12
ror ecx, 0xe
mov ebx, 0xf3d1c599
sub ebx, edi
neg ecx
xor ecx, 0xf3d34851
inc ecx
xor edx, ecx
jmp 0x494fbd
call esi
or ebx, edx
xor edi, edx
mov edx, edi
xor ebx, edx
and edx, ebx
jmp 0x496296
mov esi, 0x2774562b
or edi, 0xf3df7b48
xor ecx, edx
or edx, ebx
and ecx, edi
shr ecx, 0x11
sub ebx, edx
and ecx, edi
or edx, edi
or ebx, 0xf411df8f
bswap edi
sub edx, ebx
add ecx, edi
jmp 0x4958a5
push 0xe740faa9
sub edx, 0xf41dbb71
inc ebx
add ebx, ecx
bswap ecx
sub ecx, ebx
or ecx, ebx
or ebx, 0xf42d7ae8
xchg edi, ebx
or ecx, ebx
xchg edi, edx
sub ecx, edi
mov ebx, ecx
and ebx, edx
mov edx, 0xf4310802
jmp 0x49565d
call fcn.00496d18
and edx, ecx
sub edx, ebx
and ebx, edx
dec ebx
add ebx, edx
sub edi, ecx
and edx, edi
sub edx, edi
mov edi, 0xf446b3f7
jmp 0x49571d
push 0xe72f95da
or ecx, 0xf4475aac
or ebx, 0xf447d564
add edi, 0xf4487341
and edx, ebx
add ebx, 0xf449556a
sub edi, ecx
or ecx, edi
xchg ebx, edi
add ecx, ebx
or edx, ecx
mov edx, ecx
ror edx, 0xd
xor ebx, 0xf44d69b0
jmp 0x4956b4
pop esi
sub ecx, edi
xor edx, ebx
xor ecx, ebx
add ecx, 0xf470e85f
sub edi, 0xf4716db1
jmp 0x4958be
push 0xe6e9666f
add ecx, 0xf472017e
xor ebx, edx
shr edi, 7
rol ebx, 0x1e
or ecx, 0xf4743205
add edx, ecx
xchg ecx, edi
bswap edi
or edi, ebx
xchg ebx, edx
jmp 0x4968a1
call fcn.00496d18
mov ebx, 0xf4776177
xchg edx, ecx
or edi, 0xf4b5f12c
rol edi, 0xd
mov ecx, edx
bswap ecx
shl edx, 9
mov edi, ebx
xchg edx, edi
jmp 0x494d44
pop esi
sub ecx, edi
sub edx, ecx
add ebx, edi
bswap edx
or edx, ebx
add edx, ebx
not edx
or edi, edx
not edi
xor ecx, edi
or edi, ecx
xor ecx, 0xf54a6e6f
sub edx, 0xf54ae4b8
jmp 0x4955c5
push 0xe6e15501
xor edx, edi
or ebx, edx
sub edi, ecx
not edi
ror ecx, 3
or edi, 0xf5638981
add edx, ebx
add edx, edi
add edx, ebx
or edx, 0xf565a2df
mov ecx, edx
xor edx, edi
jmp 0x49652c
call fcn.00496d18
inc ebx
and edi, 0xf567c64a
mov edx, 0xf56858c9
dec ecx
add edi, ebx
xor edx, edi
and ebx, 0xf56a58c4
jmp 0x495f4b
call fcn.00496d18
or edx, 0xf56b03d2
shl edi, 0x14
mov ebx, 0xf56bf871
or ecx, edi
shl edx, 0x11
add edx, edi
and edi, ebx
and ebx, 0xf56e77c0
mov edi, edx
or edx, ecx
xor ecx, ebx
jmp 0x4959e2
mov esi, 0x123b2f04
and ecx, ebx
xor edx, edi
mov ebx, ecx
and ecx, edx
not edi
nop
not edi
mov ecx, 0xf573c239
mov edx, edi
xchg ecx, ebx
shr ecx, 6
mov ebx, edx
add edi, 0xf576253c
sub ecx, edx
rol ecx, 0xc
jmp 0x4965c1
mov esi, 0x4132136a
xor ecx, 0xf577c512
bswap ecx
and ebx, edx
jmp 0x494dfb
push 0xe7215cef
xchg edi, ebx
xchg ebx, edi
xor ecx, ebx
xor edi, 0xf57f901e
bswap edx
or ecx, 0xf5809677
xchg edx, ecx
mov ebx, 0xf5819e7e
sub ebx, 0xf5821659
mov edx, ebx
sub edi, ecx
jmp 0x495034
pop esi
sub ebx, ecx
shr edx, 0x1b
xor ebx, 0xf58bb581
sub ecx, edi
sub edi, ecx
add edi, ebx
add ecx, edi
sub ecx, edx
mov edx, edi
xor ecx, edx
and edi, ecx
bswap edi
sub edi, edx
shl ecx, 2
jmp 0x49695e
pop esi
or ebx, ecx
mov edi, ecx
rol edx, 0x10
xor ecx, edx
inc ecx
rol ecx, 6
xor edi, 0xf5a19fd4
or edx, edi
jmp 0x495568