Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetKBCodePage
cmp eax, 0xffffff15
jne 0x401070
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call main
call main
call main
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff08
jne 0x4010e5
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xfffffefe
jne 0x401146
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
ret
call sub.user32.dll_GetKBCodePage
cmp eax, 0xfffffee2
jne 0x4011d4
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call main
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
ret
call sub.user32.dll_GetKBCodePage
cmp eax, 0xffffff0f
jne 0x40124e
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call main
call main
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call sub.kernel32.dll_SetVolumeMountPointA
call main
ret
jmp 0x4e6ada
xor esi, 0x23ed908b
add edi, ebx
mov edi, esi
xor ebx, esi
or ebx, esi
or ebx, esi
jmp 0x4e8994
push 0x23feba21
add esi, edx
xor esi, ecx
xor edx, esi
xor esi, ecx
add edx, esi
inc ebx
or edx, ebx
sub ebx, ecx
neg edx
xchg ecx, esi
xor ebx, esi
sub ecx, edx
add ecx, ebx
jmp 0x4e723c
pop edi
mov ecx, ebx
and ebx, 0x2825138b
dec ebx
xor ebx, esi
mov ebx, esi
xchg esi, edx
mov esi, ebx
add edx, ecx
add ecx, esi
neg ebx
not ecx
add ebx, 0x2828ecc3
or esi, ebx
add ecx, ebx
or edx, esi
xchg ecx, ebx
jmp 0x4e7d4f
pop edi
or esi, ecx
xor edx, ebx
xchg edx, esi
or ebx, edx
add ecx, 0x282cb29f
or ebx, 0x282d17ec
xor ebx, 0x282d70c9
shr edx, 0x1c
jmp 0x4e8c60
push 0x23f254b6
mov ecx, edx
xor ecx, ebx
dec ecx
or ecx, esi
and edx, esi
and esi, edx
neg ebx
shr ecx, 0x13
and edx, ecx
xchg ecx, edx
inc edx
xchg edx, ecx
inc ebx
add edx, 0x2844b1f5
jmp 0x4e710f
call edi
ror esi, 0x1b
sub ecx, 0x28503ef0
xor esi, edx
xor edx, ebx
xor edx, ecx
mov ecx, ebx
mov ebx, 0x28520934
or ebx, edx
mov ecx, edx
xchg esi, ecx
mov ecx, 0x2852de51
sub ecx, esi
xchg ebx, ecx
sub ecx, ebx
add esi, 0x2853ae26
jmp 0x4e88c8
pop edi
xchg ebx, edx
sub ecx, ebx
add ecx, esi
dec ebx
neg ebx
dec ecx
sub ecx, 0x285b1eb1
jmp 0x4e923d
mov edi, 0x123b2f04
xchg ebx, edx
dec ebx
sub ebx, ecx
and esi, ebx
jmp 0x4e99bf
call fcn.004ea059
or esi, ecx
and ebx, edx
sub ecx, ebx
add ecx, 0x28a1e8c4
add ecx, 0x28a24da2
rol esi, 0x13
mov esi, ecx
and ecx, edx
jmp 0x4e7a59
push 0x23f27f0a
shr ebx, 3
and ebx, ecx
xchg edx, ecx
inc ebx
mov ebx, esi
bswap esi
bswap edx
mov esi, 0x28c251d8
jmp 0x4e7027
call edi
and esi, ecx
mov edx, ecx
sub edx, ecx
and ecx, 0x28cbcfff
or ebx, edx
xor ebx, esi
or edx, 0x28ccf621
add esi, ebx
or edx, ebx
xor esi, edx
dec edx
add ebx, esi
or ebx, 0x28cf5db1
sub esi, ecx
xchg esi, ebx
jmp 0x4e9794
pop edi
mov ebx, edx
or ebx, ecx
and ebx, esi
inc esi
and ebx, esi
neg edx
and ebx, edx
shr ecx, 0x1e
or edx, 0x28d3c62f
xor ecx, 0x28d42bdc
or ecx, ebx
sub ecx, esi
jmp 0x4e6e07
mov edi, 0x2774562b
or ecx, edx
shl esi, 1
xchg ecx, edx
sub esi, 0x28f70c3b
xor esi, ebx
rol ecx, 0x19
dec edx
and ebx, 0x28f8ba04
xor esi, edx
ror esi, 0x1d
jmp 0x4e9a67
pop edi
or edx, 0x28fa0316
ror ebx, 0x14
sub ebx, esi
bswap edx
sub esi, edx
xchg ebx, edx
xor esi, ebx
and ebx, ecx
add edx, esi
add esi, ebx
xchg ecx, esi
jmp 0x4e9016
push 0x23f43b53
xchg ecx, edx
ror ecx, 0xa
xchg esi, edx
neg edx
xor esi, ecx
xor ebx, esi
xchg ebx, edx
xchg edx, esi
jmp 0x4e91d1
pop edi
and ecx, esi
neg esi
or edx, ecx
dec esi
xor ebx, 0x2927b8f8
add esi, 0x292816a9
mov ebx, ecx
or esi, ecx
jmp 0x4e719f
mov edi, 0x2774562b
dec edx
mov ebx, edx
xor edx, esi
rol ebx, 7
not ebx
shl ebx, 3
sub edx, 0x2963421b
sub ecx, edx
xor ecx, edx
jmp 0x4e9b91
jmp loc.004ef000
push 0x23f49015
xor ecx, 0x2992eb80
and edx, ebx
shl esi, 0x13
neg esi
add ebx, edx
sub esi, edx
jmp 0x4e8ad6
mov edi, 0x123b2f04
shl esi, 0x1b
and ecx, esi
xchg ecx, ebx
or ebx, 0x29b31396
xor ebx, edx
jmp 0x4e8a75
call edi
add ebx, ecx
xchg ebx, esi
add esi, ecx
neg edx
jmp 0x4ea005
pop edi
add esi, ebx
or ebx, edx
sub ebx, ecx
dec edx
add esi, 0x29c58677
mov ecx, ebx
inc ecx
dec edx
xchg edx, ebx
jmp 0x4ea037
call edi
add ecx, edx
sub edx, ecx
add esi, ebx
or edx, ebx
ror ebx, 3
sub edx, ecx
sub edx, esi
sub edx, ecx
dec esi
sub edx, esi
jmp 0x4e7a1a
call edi
xchg edx, ecx
add esi, edx
xor esi, edx
sub esi, edx
and ecx, esi
and ecx, edx
xchg ebx, ecx
jmp 0x4e6c07
pop edi
add edx, ebx
or ebx, ecx
sub esi, ebx
dec esi
mov ecx, ebx
and esi, ebx
jmp 0x4e6c34
call edi
neg ebx
rol esi, 0x18
add edx, esi
xchg esi, ebx
mov ecx, ebx
xchg esi, ecx
xchg ecx, edx
xchg ebx, esi
or edx, ebx
add edx, ebx
shr edx, 0xb
xor ebx, edx
add edx, 0x29ea3146
add edx, esi
mov ebx, 0x29eb019c
jmp 0x4e7264
mov edi, 0x2774562b
and ecx, esi
ror edx, 0x14
or ecx, esi
xor ebx, esi
shr edx, 0x16
mov esi, ecx
jmp 0x4e93c9
push 0x23f40e78
and edx, ecx
inc edx
and edx, esi
xchg edx, ebx
shl ebx, 0x13
bswap esi
or esi, ebx
xor ebx, edx
and esi, ecx
and ebx, ecx
and ebx, 0x2a33f9f5
jmp 0x4e73a1
mov edi, 0x2774562b
add edx, 0x2a3eaa9d
add edx, 0x2a3f15f6
sub ebx, edx
dec ebx
xchg edx, ecx
and edx, ecx
add ebx, 0x2a410fef
jmp 0x4e76dc
push 0x2401c703
shl edx, 0x11
sub edx, ebx
sub ebx, ecx
not ebx
mov ecx, esi
xchg edx, esi
dec ecx
shl edx, 5
xor esi, edx
not edx
xor ebx, 0x2a4b3318
sub ebx, edx
jmp 0x4e839e
pop edi
xor esi, 0x2a5bb5db
xchg esi, edx
or ecx, esi
shl ebx, 0x16
dec edx
xor ecx, edx
add ebx, 0x2a5e4e32
sub ecx, 0x2a5eb18f
and ecx, esi
and esi, edx
bswap edx
dec ebx
sub ecx, esi
jmp 0x4e9a33
call fcn.004ea059
mov esi, edx
add esi, ecx
mov edx, esi
xor ebx, esi
xor ecx, 0x2a67553d
inc esi
and edx, ecx
neg edx
xchg edx, esi
and edx, esi
jmp 0x4e78a9
push 0x23fa5fd7
shr ecx, 4
or esi, ecx
shl edx, 0x1e
add esi, ebx
sub esi, ecx
xor esi, edx
add ecx, edx
or ebx, esi
xchg edx, esi
or edx, ecx
add esi, edx
mov esi, 0x2a6e458f
add esi, ebx
jmp 0x4e98b6
push 0x23f950be
and esi, ebx
add ebx, esi
add edx, ebx
mov ebx, esi
and ebx, esi
add ebx, edx
or ebx, esi
jmp 0x4e8826
push 0x23fe8eff
bswap ecx
or ecx, edx
shr edx, 0x1e
sub edx, ecx
or ecx, esi
mov edx, ebx
shl edx, 0x1b
add ebx, 0x2ad68ef8
add edx, esi
jmp 0x4e6aef
call edi
xor ecx, ebx
shr ebx, 3
xor edx, esi
or ecx, esi
mov esi, 0x2ad8f345
sub edx, 0x2ad95948
xor esi, ecx
mov esi, 0x2ada340a
sub ecx, edx
xor esi, 0x2adb03a9
xchg edx, ecx
jmp 0x4e8752
push 0x2401f30f
nop
xchg esi, edx
xor ebx, edx
xor ecx, ebx
and ecx, edx
bswap ebx
and ebx, 0x2b20368e
and esi, ecx
or ebx, ecx
jmp 0x4e8edc
push 0x23ffcd40
sub edx, ebx
sub edx, esi
xor ebx, edx
and esi, ecx
not esi
and edx, ecx
jmp 0x4e876b
push 0x23f819ad
or ebx, 0x2b3fb690
xchg ecx, esi
add ebx, edx
sub ecx, edx
or edx, 0x2b41507e
and ebx, esi
jmp 0x4e75c7
pop edi
xchg ecx, esi
and esi, edx
shr ecx, 0x14
ror ecx, 0x18
and edx, ecx
or ebx, ecx
rol edx, 0x13
jmp 0x4e97c2
push 0x23fc4dd1
sub esi, ecx
sub ebx, ecx
mov ecx, ebx
dec edx
inc edx
xor esi, ebx
add ebx, 0x2b592b73
rol ecx, 9
inc ebx
xchg ebx, edx
xchg edx, ecx
sub edx, ecx
and edx, 0x2b5b884b
and esi, 0x2b5be827
xchg ebx, edx
jmp 0x4e9ca2
pop edi
or ecx, edx
add ecx, ebx
and esi, ebx
sub esi, ebx
xchg ecx, edx
or edx, 0x2b6b75c8
xor edx, 0x2b6bab55
and edx, ecx
xor ebx, 0x2b6c2052
inc ebx
jmp 0x4e7fdc
call fcn.004ea059
or ecx, esi
or esi, edx
rol ecx, 0x1f
xor edx, ecx
shl ecx, 0x1b
xor esi, 0x2b806ed6
xchg esi, ebx
and edx, ebx
ror esi, 0x16
add esi, edx
or edx, ebx
not edx
jmp 0x4e9678
pop edi
bswap ebx
mov esi, edx
shr ecx, 3
or esi, ecx
mov ecx, ebx
and ebx, esi
xor ebx, 0x2b8590ea
jmp 0x4e73bc
mov edi, 0x2774562b
sub edx, ebx
mov ecx, 0x2b86156d
and esi, ebx
sub ebx, 0x2b8b9151
jmp 0x4e8df7
mov edi, 0x123b2f04
dec edx
or edx, ecx
add edx, ebx
shl esi, 3
xor ebx, edx
mov edx, ebx
xor esi, ecx
xchg esi, edx
add esi, 0x2b9b89ac
sub esi, ecx
add edx, ebx
rol esi, 0x1f
sub ebx, ecx
xchg ecx, esi
and edx, 0x2b9cbfdc
bswap ebx
jmp 0x4e86f9
pop edi
sub edx, 0x2ba2eb9f
and esi, ecx
xchg esi, ecx
sub ecx, 0x2ba390e3
jmp 0x4e9b4d
push 0x23f1cb4c
shl ecx, 7
sub esi, 0x2bc3d27e
xor ecx, ebx
add edx, 0x2bc48f6d
sub ecx, 0x2bc4f173
bswap ecx
sub edx, ebx
ror ecx, 0x1f
xchg esi, edx
ror esi, 0xe
jmp 0x4e8ca1
pop edi
add ecx, esi
or ecx, esi
rol esi, 0xd
and ebx, esi
xchg ebx, edx
xor edx, ecx
jmp 0x4e7df4
call fcn.004ea059
and ecx, esi
add esi, ebx
xchg ecx, ebx
add ebx, edx
or ebx, esi
inc ecx
mov edx, ebx
sub ebx, ecx
xchg ebx, ecx
mov ebx, edx
or esi, ecx
jmp 0x4e716f
push 0x23f4ba25
inc ecx
shr ecx, 8
dec ebx
mov ecx, esi
or edx, ecx
shl ecx, 0x1b
mov ebx, ecx
mov esi, ecx
neg esi
add esi, edx
add ebx, ecx
xor esi, edx
jmp 0x4e7bf9
push 0x23f7eda8
ror esi, 0x12
xchg edx, esi
ror ecx, 5
mov esi, 0x2c11abb8
or ebx, 0x2c120e35
and ecx, ebx
and edx, 0x2c12f39a
shl ecx, 0x1c
and ebx, esi
or esi, edx
xor esi, edx
jmp 0x4e84ca
pop edi
mov edx, esi
or ebx, esi
add edx, esi
xor esi, edx
or edx, ebx
ror edx, 0x18
and esi, ecx
xchg ecx, edx
or esi, ebx
jmp 0x4e9eaa
push 0x23f200ef
mov ecx, 0x2c1d493b
shr ecx, 6
xor ebx, esi
shr ecx, 0xa
and ecx, 0x2c1eebc5
or esi, edx
not esi
xchg ebx, ecx
mov ebx, esi
bswap ebx
jmp 0x4e9930
call fcn.004ea059
xor ecx, ebx
and ebx, 0x2c46d139
neg esi
bswap ebx
and edx, 0x2c48156a
and edx, esi
xor ebx, 0x2c48da51
jmp 0x4e7986
push 0x24021eab
or edx, ecx
dec esi
and esi, 0x2c5e3815
or esi, edx
or esi, edx
add edx, esi
xchg ecx, edx
ror ebx, 0x10
xchg edx, ebx
not edx
shl edx, 0xb
jmp 0x4e7cf0
push 0x23fcffd5
xor ecx, ebx
dec ecx
xchg edx, ebx
sub ecx, esi
ror ebx, 0x19
or esi, edx
shl edx, 5
sub esi, ebx
xchg esi, edx
neg esi
sub edx, ebx
jmp 0x4e987b
pop edi
xchg edx, esi
and edx, ecx
jmp 0x4e9353
push 0x23f46778
sub esi, edx
sub esi, edx
and ecx, esi
xor ecx, esi
or ebx, 0x2cb17774
xor ebx, esi
inc ecx
shr ecx, 6
sub ecx, 0x2cb34b63
jmp 0x4e76fe
pop edi
nop
sub ecx, 0x2cbd0815
and ebx, ecx
neg edx
and ecx, 0x2cbe45ff
bswap edx
shl ecx, 0x1e
rol esi, 2
and ecx, esi
xor ecx, ebx
bswap esi
and esi, ebx
rol ecx, 0x1b
jmp 0x4e7cb5
pop edi
dec ebx
sub edx, 0x2cee8ca3
xchg ecx, ebx
xor esi, edx
add edx, ebx
shl ebx, 0x1b
xor ebx, 0x2cf0a270
and edx, ebx
shr esi, 0xf
and edx, ebx
add edx, ebx
jmp 0x4e99e1
push 0x23fb6b0b
sub esi, edx
mov ecx, 0x2cf6d554
xchg ecx, edx
add edx, 0x2cf799e3
and esi, edx
ror esi, 0x12
ror ecx, 0x12
shl esi, 0x15
sub ecx, esi
xchg ecx, esi
xchg esi, ecx
xchg esi, edx
xor edx, ecx
xchg ecx, ebx
xchg esi, ebx
jmp 0x4e786b
call fcn.004ea059
xchg ebx, edx
shr ecx, 0xd
and ecx, edx
add ecx, esi
neg ecx
mov edx, esi
mov ecx, esi
jmp 0x4e793f
call edi
add ecx, ebx
xor ebx, ecx
ror edx, 0x1c
mov edx, ebx
add ecx, edx
mov ebx, edx
mov edx, esi
add ebx, 0x2d1a3ab4
jmp 0x4e84fe
call edi
mov edx, ebx
add edx, 0x2d5b365f
xor ebx, ecx
mov esi, 0x2d5c19b2
jmp 0x4e9311
pop edi
inc edx
dec ecx
mov ebx, esi
jmp 0x4e8554
pop edi
mov ecx, ebx
sub esi, edx
or ecx, 0x2d82a129
not ecx
add ebx, 0x2d837d8e
and esi, ebx
ror ecx, 0x1b
sub edx, 0x2d84c4da
xchg esi, edx
xor esi, edx
or edx, ebx
sub ebx, edx
xor ecx, esi
neg esi
jmp 0x4e85e0
mov edi, 0x123b2f04
sub edx, 0x2d9a6eb9
xchg esi, ebx
and edx, 0x2d9b78bd
rol edx, 0x16
add edx, ebx
rol ecx, 9
dec esi
sub edx, ebx
and esi, edx
and esi, 0x2d9e6105
mov edx, esi
sub ebx, 0x2d9f2dbb
add edx, 0x2d9f96f1
neg esi
jmp 0x4e7e3e
mov edi, 0x123b2f04
mov ebx, ecx
xor edx, ebx
mov edx, ecx
neg edx
add esi, ebx
or edx, ecx
xchg esi, edx
mov edx, 0x2da3b12a
jmp 0x4e704c
push 0x23f22abf
and ecx, 0x2dae910d
xor ebx, esi
and ecx, edx
ror ecx, 7
and edx, ecx
jmp 0x4e6ce9
push 0x23fca4b4
and edx, esi
or ecx, esi
add ebx, 0x2db72137
bswap esi
nop
mov edx, esi
or ebx, edx
or esi, 0x2db92bfc
jmp 0x4e9d60
call fcn.004ea059
add ebx, esi
add esi, edx
mov ebx, esi
shl esi, 0x10
sub esi, edx
or ebx, ecx
sub ecx, esi
or esi, ecx
xchg ebx, edx
mov edx, ebx
ror esi, 9
jmp 0x4e818b
push 0x23fa3011
shl ecx, 0xf
shl edx, 8
sub ebx, edx
mov edx, ebx
or ecx, esi
xor ecx, 0x2dc5a569
mov ecx, edx
xchg esi, ecx
xor ebx, edx
and edx, ecx
xchg ecx, ebx
jmp 0x4e7e5f
pop edi
bswap ecx
add edx, esi
rol ecx, 9
sub edx, 0x2dce2a18
shl ebx, 5
add esi, ecx
sub ebx, edx
jmp 0x4e9cc6
call fcn.004ea059
inc ebx
xchg ebx, edx
xor esi, 0x2dd3e331
xchg ecx, edx
shr esi, 0x19
dec esi
add ebx, edx
add ebx, edx
jmp 0x4e6d70
pop edi
or esi, ebx
or esi, ecx
add ecx, esi
mov ebx, esi
jmp 0x4e8475
call fcn.004ea059
and ebx, esi
xor ecx, esi
or ecx, ebx
and edx, ebx
and esi, ecx
sub edx, esi
mov edx, ebx
ror esi, 0xd
xchg ebx, esi
mov edx, esi
nop
jmp 0x4e944e
push 0x23fc7957
sub edx, 0x2e186c95
xor esi, edx
bswap ecx
sub esi, ebx
xchg ecx, ebx
neg ecx
mov esi, ecx
or ecx, 0x2e1b4fef
mov ebx, esi
jmp 0x4e9973
pop edi
or ecx, 0x2e1c8e44
add ecx, 0x2e1cf329
neg edx
xor edx, esi
add ebx, 0x2e1e29f1
and ecx, ebx
xchg ebx, ecx
jmp 0x4e8169
push 0x23fcd03d
shl ebx, 9
xor edx, ecx
xor ecx, ebx
and esi, ecx
xor esi, edx
inc ecx
xchg esi, ebx
shl esi, 0x15
or esi, ebx
mov ebx, ecx
xor ebx, esi
rol edx, 0x18
xor ecx, ebx
bswap ecx
jmp 0x4e8fc6
pop edi
inc ecx
xchg ebx, ecx
shr esi, 0x18
add ebx, esi
and edx, esi
add ebx, edx
sub ebx, edx
jmp 0x4e7926
pop edi
ror esi, 0xe
mov ecx, 0x2e91d232
add edx, esi
add esi, ebx
ror ecx, 0x11
mov edx, ebx
jmp 0x4e8a33
push 0x23f7c1ce
or ebx, ecx
mov ecx, ebx
xchg ecx, ebx
sub ebx, 0x2e98019b
sub esi, edx
and edx, ecx
sub edx, esi
and ecx, 0x2ede0547
jmp 0x4e8c32