Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetActiveWindow
cmp eax, 0xfffffef9
jne 0x4010ac
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
ret
call sub.user32.dll_GetActiveWindow
cmp eax, 0xfffffef6
jne 0x401117
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
ret
call sub.user32.dll_GetActiveWindow
cmp eax, 0xfffffef9
jne 0x4011be
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff30
jne 0x401256
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_RtlTraceDatabaseUnlock
call sub.ntdll.dll_NtSetHighEventPair
call sub.ntdll.dll_NtSetHighEventPair
ret
jmp 0x4d8768
or ecx, edx
xchg ebx, edi
xchg ecx, edx
bswap ebx
shl edx, 0x19
jmp 0x4dba55
call edi
xor esi, ecx
inc esi
or edx, esi
sub ecx, edx
bswap esi
or ebx, 0xec5f1e1e
ror ecx, 0xd
sub ebx, 0xec5f9665
and edx, ebx
jmp 0x4d9d83
pop edi
sub ebx, esi
or edx, ecx
dec esi
or esi, ebx
and esi, edx
and ecx, esi
sub ebx, ecx
and esi, edx
xchg ecx, ebx
rol esi, 5
xor ebx, edx
mov ecx, edx
add edx, esi
mov ebx, 0xec6a8332
or edx, ecx
jmp 0x4dafd4
pop edi
xor edx, ecx
sub edx, ecx
or edx, 0xec99dc26
sub edx, ecx
ror esi, 4
and edx, 0xec9a8d04
or ebx, 0xec9ac650
xchg ecx, esi
and ecx, 0xec9b440c
jmp 0x4dc3b6
call fcn.004d8fa1
not ecx
inc ecx
bswap esi
shl ebx, 0x19
not esi
or ecx, esi
or esi, edx
add ecx, ebx
neg ecx
bswap ebx
jmp 0x4dc97e
mov edi, 0x6332a2e
xor edx, ebx
sub ecx, ebx
add ecx, ebx
and ebx, esi
and ecx, edx
sub ecx, ebx
shl ecx, 1
and ecx, edx
add edx, 0xecabf7c6
and edx, esi
jmp 0x4dc0df
push 0xeaff86e9
add edx, esi
mov ebx, edx
or ebx, ecx
bswap esi
xchg ebx, edx
sub ebx, ecx
mov edx, ecx
jmp 0x4d9cb3
pop edi
xor ebx, edx
sub esi, ecx
xor esi, ebx
xor ecx, 0xeccc4c90
xchg ecx, esi
or ebx, edx
sub esi, 0xecccfb9c
mov ebx, 0xeccd3ee9
neg ebx
mov ecx, edx
add ebx, esi
and ecx, ebx
not esi
sub ecx, esi
and esi, 0xecced14b
jmp 0x4db826
call edi
xchg esi, ebx
xor ecx, esi
add esi, ebx
mov edx, ecx
add ecx, edx
sub edx, ebx
and ecx, 0xecd07f65
jmp 0x4d9316
pop edi
or esi, ecx
add ecx, 0xecd79b1a
and ecx, 0xecd7d46b
mov esi, ecx
mov esi, edx
mov ebx, esi
bswap esi
jmp 0x4da786
call fcn.004d8fa1
dec ecx
mov edx, ecx
add ecx, ebx
mov ecx, esi
not ebx
inc ebx
and edx, ebx
jmp 0x4db4f5
mov edi, 0x6332a2e
shl esi, 0x1d
mov edx, esi
shr edx, 0x10
xchg ecx, ebx
xor esi, edx
add edx, esi
sub edx, 0xece3e956
xchg esi, ecx
and esi, 0xece46794
sub edx, esi
or edx, ebx
and ebx, esi
jmp 0x4dc6c0
pop edi
sub edx, esi
ror esi, 5
mov ebx, edx
xor ecx, 0xece60911
or ecx, esi
neg esi
add ecx, esi
sub ecx, 0xece6f8e6
xor ecx, ebx
xor edx, ebx
and ecx, ebx
xor ecx, edx
jmp 0x4db0e8
pop edi
mov ebx, edx
mov edx, ecx
shl esi, 0xd
add ebx, ecx
xor esi, ecx
and ebx, esi
xchg edx, ecx
or ebx, ecx
add ecx, esi
jmp 0x4dbd50
mov edi, 0xa3f322a
xor ecx, edx
add ecx, esi
and esi, edx
add ecx, edx
and ecx, esi
add ebx, 0xed04aa30
bswap esi
xor esi, ecx
xchg ecx, edx
xor esi, 0xed059eb6
mov ecx, ebx
sub edx, esi
xchg ebx, ecx
jmp 0x4d9355
call fcn.004d8fa1
add ecx, ebx
bswap ebx
and ecx, esi
shl edx, 0xa
xor ecx, 0xed0dcb5d
add ebx, edx
add ecx, 0xed0e3a9d
rol ebx, 8
xor ecx, ebx
bswap edx
and ebx, esi
add ecx, edx
neg ebx
jmp 0x4dc08b
call edi
add esi, edx
xor ecx, esi
or ecx, 0xed17f9a7
xchg ecx, edx
sub edx, ebx
ror ecx, 0x12
sub ebx, esi
mov ebx, edx
add esi, ebx
jmp 0x4dc6f1
pop edi
or esi, ecx
sub ebx, 0xed2a1f2a
shl edx, 0xd
and edx, ecx
not ecx
not ecx
neg ecx
and ebx, edx
ror ebx, 5
sub ebx, esi
jmp 0x4dc9dc
push 0xeaf9b428
add esi, ecx
xchg ecx, ebx
dec edx
mov edx, esi
add esi, 0xed2d3bb9
or esi, ecx
xor ecx, ebx
add edx, ecx
sub edx, ebx
jmp 0x4db1a7
call fcn.004d8fa1
add ecx, 0xed2e6b96
dec esi
shr ebx, 0x1f
ror ebx, 0x19
xor ebx, esi
and esi, edx
mov esi, edx
ror ebx, 3
sub edx, ecx
mov esi, ecx
xchg esi, ecx
xor edx, 0xed30ee9e
jmp 0x4db488
mov edi, 0xa3f322a
inc edx
neg edx
ror edx, 0x1f
add esi, ecx
xor ecx, esi
bswap ecx
jmp 0x4dc31f
push 0xeae9f644
and edx, ebx
bswap esi
or esi, ebx
dec ebx
and edx, ebx
and esi, ebx
and ebx, ecx
sub edx, esi
sub ecx, 0xed3fd12d
sub edx, ecx
jmp 0x4dbf07
mov edi, 0xa3f322a
add ebx, esi
xor ecx, ebx
xchg ebx, ecx
or esi, 0xed4c8893
shr ecx, 0x1e
not esi
or ebx, ecx
or ecx, ebx
add esi, ecx
mov edx, 0xed4dec2e
mov ebx, 0xed4e2603
dec ebx
sub ebx, ecx
mov ecx, 0xed4ed481
jmp 0x4db4db
pop edi
bswap ecx
shr ecx, 5
mov ebx, esi
add edx, ebx
shl ebx, 3
jmp 0x4db506
call fcn.004d8fa1
xor esi, ebx
nop
and ebx, 0xed666d54
or esi, 0xed66a64d
xor ebx, 0xed66ed0e
xchg ebx, esi
mov ecx, edx
add esi, 0xed6796e1
jmp 0x4dc646
mov edi, 0xa3f322a
xchg ecx, ebx
xchg edx, esi
xor ebx, 0xed6cbe35
or ecx, edx
mov esi, ebx
dec edx
or ebx, esi
sub ebx, ecx
and esi, ecx
xor ebx, esi
jmp 0x4d91b8
push 0xeaf0e83a
dec edx
or esi, edx
bswap esi
xchg ecx, esi
ror esi, 0x1e
xor ebx, ecx
add ecx, ebx
add esi, ebx
jmp 0x4da5b7
push 0xeafd068e
bswap esi
mov edx, 0xed74cc2c
sub esi, ebx
mov edx, 0xed754109
add ecx, ebx
sub edx, esi
inc esi
xor ebx, edx
jmp 0x4dc0ff
push 0xeadfb1e8
mov ecx, edx
or ebx, esi
mov edx, 0xed80bb09
mov ebx, 0xed80f5a0
xchg esi, ebx
xchg edx, esi
and esi, ecx
add edx, ebx
jmp 0x4da111
push 0xeaecb088
xor edx, 0xed9c2d78
mov ecx, 0xed9c672b
shl ecx, 0xb
add edx, ebx
sub ecx, esi
add esi, ecx
xor ecx, esi
xchg esi, edx
bswap ebx
jmp 0x4da03c
pop edi
mov ecx, ebx
xor edx, ebx
and edx, esi
jmp 0x4db450
push 0xeae3bce0
add edx, 0xeda8e5d5
or ebx, edx
not ecx
and ebx, esi
add edx, esi
rol edx, 0xd
or edx, ebx
jmp 0x4dbe68
pop edi
not ecx
bswap edx
mov ebx, esi
and edx, 0xedab42ef
shl ebx, 2
or ebx, edx
xchg edx, ecx
xor ecx, esi
or esi, ecx
or ecx, esi
xor edx, ebx
xor ebx, edx
ror esi, 2
jmp 0x4dbeae
pop edi
mov ebx, 0xedc2dc78
and ebx, 0xedc316c7
nop
xchg ebx, ecx
xor edx, 0xedc3d2cd
sub esi, ecx
jmp 0x4d880d
push 0xeaffcfa3
or ebx, esi
rol ecx, 0x1d
and esi, edx
add ebx, edx
ror ebx, 0xa
xchg edx, esi
jmp 0x4dc46a
call edi
shr edx, 0xd
xor ecx, 0xedcaac5c
sub esi, ecx
rol esi, 4
xor ebx, esi
add edx, 0xedcb9420
dec ebx
jmp 0x4dcbfd
push 0xeae6fb18
sub edx, ebx
and esi, 0xedd19f8b
or esi, ebx
sub esi, 0xedd21a74
jmp 0x4dc037
pop edi
mov ecx, edx
xor esi, ebx
or ebx, 0xedd3f075
sub ebx, edx
mov esi, ecx
neg edx
add esi, ecx
xor esi, ecx
jmp 0x4db80c
push 0xeaf8e04f
add ecx, ebx
and ecx, esi
shr ecx, 7
rol edx, 0x10
xor esi, 0xede9e887
add ebx, esi
sub esi, ecx
or ebx, ecx
ror esi, 0x1b
add ecx, esi
sub ebx, edx
xor esi, 0xedeb8385
mov esi, ecx
neg esi
neg ebx
jmp 0x4dc58c
push 0xeaf01607
ror ecx, 0x12
not ecx
xor esi, edx
mov ebx, esi
xor edx, ebx
mov ecx, edx
add esi, edx
add ebx, ecx
sub esi, 0xee0182e4
sub ebx, esi
add esi, edx
jmp 0x4db9b4
mov edi, 0x6332a2e
xchg ecx, edx
and edx, ebx
bswap ecx
xor edx, esi
jmp 0x4dadba
push 0xeadff529
mov ecx, ebx
xchg ebx, ecx
xor ebx, esi
jmp 0x4d93be
mov edi, 0x6332a2e
mov ebx, edx
and ecx, ebx
not edx
and esi, ebx
neg esi
bswap ebx
mov ebx, ecx
sub ecx, esi
jmp 0x4d9691
pop edi
add esi, ecx
shl ebx, 0x1e
xor edx, esi
xchg esi, ebx
mov esi, 0xee1dafa3
xor edx, ecx
xchg ebx, ecx
xchg ecx, ebx
xor edx, esi
shl esi, 0xc
jmp 0x4da2dd
pop edi
add ecx, edx
mov ebx, 0xee2dd099
shl ecx, 0xc
shl edx, 0xa
shl esi, 0x1a
ror esi, 0x13
and esi, 0xee2ef838
or esi, ebx
ror ebx, 0x1a
add edx, esi
and ecx, esi
and edx, ecx
jmp 0x4dae58
pop edi
shr edx, 0x10
sub ecx, esi
neg ebx
sub ebx, ecx
sub ecx, esi
neg ebx
and ebx, edx
xor edx, ecx
not esi
jmp 0x4d8dbf
push 0xeaec2760
xchg ebx, edx
sub ecx, esi
or ebx, esi
sub ebx, ecx
mov ecx, ebx
add esi, edx
ror ebx, 0xe
dec ebx
neg edx
or ebx, 0xee34af77
not ecx
xchg edx, ebx
shr esi, 0x10
jmp 0x4dacc0
mov edi, 0xa3f322a
and esi, edx
add ecx, edx
inc ecx
add ecx, edx
or ebx, ecx
dec ebx
or esi, ebx
ror ecx, 3
mov ebx, ecx
jmp 0x4d8b5c
push 0xeaf12e47
mov edx, ebx
or ecx, ebx
mov esi, 0xee661cf0
sub esi, edx
sub ebx, esi
not ebx
and edx, ecx
xchg esi, edx
sub ebx, esi
xchg esi, ecx
mov edx, esi
shl edx, 0x1a
mov ebx, edx
mov edx, esi
mov esi, 0xee68d590
or edx, 0xee690e84
jmp 0x4d9132
push 0xeb0208f4
bswap edx
xor ebx, esi
and esi, ecx
add ebx, 0xee719906
ror esi, 0xe
shr ebx, 0xb
nop
xor ecx, edx
xor esi, 0xee72cb2a
nop
rol edx, 4
sub ecx, 0xee737d9b
shr esi, 0x19
jmp 0x4dbdfb
push 0xeaf54aea
xor esi, edx
xor ecx, edx
jmp 0x4db31c
call fcn.004d8fa1
rol edx, 0x1f
mov esi, edx
xor esi, ebx
xor edx, ecx
or ecx, edx
ror ecx, 0x12
bswap edx
and ebx, ecx
xor ecx, edx
xor ebx, esi
jmp 0x4dacf0
push 0xeb017bf8
not ebx
dec ebx
bswap esi
and ecx, ebx
xor ebx, esi
or edx, ebx
xchg ecx, edx
sub esi, 0xee8e2c7e
and edx, esi
jmp 0x4dc2d3
pop edi
or ecx, ebx
add edx, 0xeeb7d9e6
not ecx
neg ebx
xchg esi, ebx
and ecx, esi
jmp 0x4dad5f
pop edi
dec ebx
sub esi, ebx
xchg esi, ecx
jmp 0x4d962a
pop edi
xor esi, ebx
or edx, 0xeecf648b
mov edx, 0xeecfa122
xchg ecx, ebx
not ebx
rol edx, 0x12
mov ebx, edx
mov ecx, edx
and edx, esi
sub ebx, edx
inc edx
jmp 0x4dbc61
push 0xeaec6a91
add ebx, ecx
mov ecx, esi
sub edx, esi
add ebx, esi
add ecx, esi
xor edx, ebx
sub edx, ebx
mov esi, ebx
jmp 0x4d99f8
call edi
or ebx, esi
shl ecx, 0x10
not esi
rol ebx, 0x1d
mov esi, edx
shr esi, 0x14
and ecx, esi
mov edx, ebx
neg esi
xor ebx, ecx
neg esi
sub ecx, 0xeef32431
neg ebx
mov esi, 0xeef39826
jmp 0x4da9de
push 0xeaf505ba
add ebx, 0xeef84081
sub esi, ecx
inc ecx
xor ecx, ebx
xor ebx, ecx
and esi, edx
or ebx, ecx
jmp 0x4da6f9
call fcn.004d8fa1
or ecx, edx
mov esi, 0xeefe7a33
or edx, esi
shr ebx, 2
sub ebx, esi
xor ebx, edx
sub esi, 0xeeff9449
or ecx, 0xeeffd818
or edx, ecx
inc ecx
jmp 0x4db4be
push 0xeaf3a416
add esi, ebx
sub ecx, ebx
shl edx, 0x14
mov edx, esi
inc edx
not ecx
add edx, ecx
rol ecx, 0x17
neg ebx
and ecx, esi
add esi, edx
add ebx, ecx
jmp 0x4dc2c4
pop edi
dec edx
and ebx, 0xf0c594a0
mov esi, edx
mov edx, ebx
sub ebx, esi
add ecx, 0xf0c68193
jmp 0x4dbfc2
pop edi
xor ebx, 0xf0cb7b3e
and ebx, edx
xor esi, edx
xchg ebx, esi
mov ebx, edx
or edx, 0xf0cca0fc
and ebx, 0xf0ccdc2b
xchg ebx, esi
bswap esi
xor edx, esi
xchg ecx, ebx
jmp 0x4d90c8
push 0xeaf77e97
xchg ebx, edx
mov ecx, ebx
add ecx, esi
shl esi, 0x17
jmp 0x4da38e
pop edi
or ebx, edx
neg ecx
add esi, 0xf0dd562c
xor ebx, edx
xchg edx, ecx
mov esi, edx
ror ecx, 9
mov ebx, edx
mov esi, ecx
xor ebx, edx
sub ecx, ebx
shl ecx, 2
or ebx, 0xf0df9cf0
jmp 0x4dc4c0
push 0xeaf9fd74
mov ecx, 0xf0ea875e
inc ecx
dec ebx
xchg esi, edx
dec ebx
neg ecx
xor esi, ebx
not ecx
jmp 0x4dc99d
push 0xeaf59081
add edx, ebx
xor ebx, 0xf104163a
xor edx, ebx
dec ecx
and ebx, esi
sub ecx, esi
sub ecx, ebx
shr ecx, 0xd
xchg ebx, edx
jmp 0x4dbed1
pop edi
mov ecx, ebx
xchg ecx, ebx
add ebx, 0xf11794d3
xor ecx, 0xf117d19a
bswap esi
xor edx, esi
rol edx, 0x14
or ecx, ebx
bswap edx
jmp 0x4dc11f
push 0xeae7841f
xchg ecx, ebx
shr ecx, 0x1e
xor ebx, esi
or esi, edx
add ecx, edx
sub edx, esi
jmp 0x4da191
call edi
dec ecx
mov edx, 0xf11afa0d
xor ecx, esi
and esi, ecx
jmp 0x4dab33
call edi
and ebx, esi
inc ecx
sub ecx, edx
ror ebx, 0x11
mov edx, ecx
shl ebx, 0x1f
add esi, ecx
sub ebx, edx
dec edx
xor ecx, esi
and ebx, esi
jmp 0x4db63e
call fcn.004d8fa1
xor edx, 0xf1205909
rol esi, 0xa
add edx, ebx
mov edx, ecx
ror esi, 0x18
jmp 0x4dc40a
call edi
sub ebx, edx
bswap ecx
mov ecx, edx
add ecx, edx
add edx, ecx
jmp 0x4dca58
pop edi
ror esi, 3
ror ecx, 8
shl edx, 7
sub ebx, edx
and esi, 0xf123c642
and ecx, edx
sub ebx, edx
neg ebx
rol ecx, 0xf
add esi, edx
mov edx, esi
jmp 0x4daffc
push 0xeae444b7
ror ebx, 0x13
and edx, 0xf12b6d84
rol ebx, 0xc
not ecx
or ebx, esi
xchg edx, esi
ror esi, 0x12
jmp 0x4d94fb
push 0xeae37952
xchg ecx, edx
sub edx, ebx
mov esi, 0xf12f20e6
xor ebx, ecx
dec edx
sub ecx, 0xf12fd37f
mov esi, ecx
bswap ecx
jmp 0x4d9ac0
push 0xeaf0a258
rol esi, 0x1b
add esi, ecx
shl ebx, 0x1c
sub esi, 0xf131510b
sub ebx, ecx
sub ecx, esi
xor ebx, 0xf131fc02
add ecx, 0xf13240fe
add esi, 0xf1327de8
sub esi, ebx
xchg ecx, edx
jmp 0x4d9756
pop edi
sub ecx, edx
shl ebx, 0xf
and esi, ebx
ror ebx, 0x14
shl ecx, 0xf
neg ebx
and edx, ebx
jmp 0x4d9add
call fcn.004d8fa1
xchg edx, esi
neg esi
mov esi, 0xf1411f2c
add esi, 0xf141587f
and ecx, ebx
or ebx, edx
and ecx, 0xf1420f48
jmp 0x4dc82a
pop edi
xor ecx, 0xf152aedd
dec ebx
xchg edx, ecx
ror ebx, 0xb
and ebx, ecx
mov ecx, esi
xchg esi, ebx
and esi, ebx
jmp 0x4d8ae9
pop edi
or ebx, esi
not edx
not edx
xchg ecx, edx
bswap ebx
add ebx, 0xf155c840
sub edx, 0xf156050b
and edx, 0xf1564925
jmp 0x4dc8be
push 0xeaf05c3c
sub ecx, ebx
xor edx, esi
and ecx, esi
sub ecx, ebx
sub ecx, 0xf172e978
jmp 0x4db5de
push 0xeadf62d2
mov esi, ebx
or edx, 0xf17e5fdf
and ebx, esi
or ebx, ecx
and esi, ecx
and edx, ebx
neg ebx
jmp 0x4d982f
push 0xeaf96f15
and ebx, 0xf186ede1
or ebx, edx
add edx, ebx
add ebx, ecx
mov ecx, 0xf187cc85
mov edx, esi
or edx, esi
and esi, ecx
add ebx, edx
jmp 0x4d9336
pop edi
add edx, 0xf1974d51
sub ecx, esi
sub ebx, 0xf197c14d
sub edx, ebx
xchg esi, ecx
sub edx, ebx
mov ebx, esi
mov esi, ecx
shr ebx, 0x1e
jmp 0x4daf82
push 0xeae33279
and ecx, edx
mov ebx, esi
mov esi, 0xf199d8cb
or esi, edx
and ecx, edx
and edx, ecx
sub ecx, ebx
xor esi, ebx
inc ebx
xchg ecx, edx
neg ecx
shl ebx, 0x1b
and esi, ecx
jmp 0x4db5be
pop edi
sub esi, 0xf1a15f2c
bswap ecx
add ebx, esi
xchg ecx, edx
and edx, esi
sub ebx, esi
jmp 0x4dc28e
push 0xeae9b0ea
neg ecx
or edx, 0xf1b24b6e
xchg esi, ebx
xor esi, 0xf1b2bf95
add esi, 0xf1b2f8c9
inc ebx
and ebx, edx
xchg ebx, edx
mov ebx, edx
mov ebx, esi
and ecx, esi
or esi, ecx
mov ecx, edx
jmp 0x4d9440
push 0xeb025060
xor ebx, ecx
mov edx, ebx
xor ecx, edx
and ecx, edx
sub ebx, esi
add ebx, esi
jmp fcn.004d9426
push 0xeae400f2
xchg edx, esi
add ebx, edx
add esi, edx
shl ecx, 0xf
sub ebx, 0xf1c54389
jmp 0x4db57e
pop edi
sub esi, ecx
sub esi, 0xf1c893d0
or esi, ecx
mov esi, edx
add ebx, 0xf1c946ab
mov esi, ebx
sub edx, 0xf1c9b8b3
dec ebx
xor ecx, esi
jmp 0x4da017
mov edi, 0xa3f322a
neg ecx
shl esi, 0xc
add edx, ecx
xor ecx, edx
or ecx, edx
xor ecx, esi
or esi, 0xf1cbdb90
xor esi, ebx
dec ebx
xor esi, ecx
and ecx, edx
not esi
jmp 0x4db6e9
push 0xeaea3d99
mov ebx, esi
sub ebx, edx
add ebx, edx
xor edx, ecx
shl edx, 0x12
and esi, edx
rol ecx, 5
mov ecx, edx
xor ecx, 0xf1cffad0
xor edx, 0xf1d0379d
not esi
sub ecx, esi
shr edx, 0x1e
jmp 0x4d8f2c
push 0xeae6b588
mov edx, ecx
xchg edx, esi
and esi, ecx
or ebx, edx
add ecx, 0xf1dc3b2e
and ecx, 0xf1dc746f
not esi
sub ebx, ecx
mov ebx, ecx
neg edx
jmp 0x4d9d56
push 0xeae73e83
mov esi, 0xf1e3ef32
xor ebx, ecx
ror esi, 0x1a
xor esi, ecx
and ebx, ecx
shr ecx, 0x17
rol edx, 0xc
ror ebx, 0x1e
xor ecx, edx
jmp 0x4db471
call edi
shr ebx, 0x1d
neg ecx
or esi, 0xf1e9a153
sub ecx, esi
sub ebx, 0xf1ea154c
sub esi, ebx
add ebx, 0xf1ea898b
sub edx, esi
and ebx, edx
add ebx, edx
jmp 0x4d8de9
call fcn.004d8fa1
add ecx, esi
add esi, ebx
sub edx, esi
shr ecx, 0x1c
not ecx
inc ebx
or esi, ecx
and ecx, esi
xor edx, esi
sub ecx, ebx
mov esi, edx
jmp 0x4d9ce6
push 0xeafd4cb3
or ecx, 0xf1f13f62
not ecx
xor esi, ebx
add edx, ecx
add edx, ebx
add edx, ebx
add ecx, esi
xor edx, ebx
bswap esi
jmp 0x4d9700
push 0xeafc78b6
xchg ebx, esi
mov ecx, ebx
mov ecx, 0xf1f3d2f8
xor esi, ecx
mov esi, 0xf1f446ce
and esi, 0xf1f48dda
add edx, esi
sub esi, 0xf1f4fe2b
sub esi, edx
xor ecx, edx
neg esi
jmp 0x4dc5ed
pop edi
dec edx
rol esi, 9
xor ecx, ebx
add ebx, edx
add esi, ecx
nop
xor edx, 0xf1fba159
not esi
xor esi, 0xf1fc16b0
sub esi, ebx
add esi, 0xf1fc8ad6
and edx, ecx
jmp 0x4d9ebc
pop edi
add edx, ecx
add edx, 0xf20b0462
shr esi, 0x1b
add edx, ecx
xchg ebx, edx
jmp 0x4dcb7b
mov edi, 0xa3f322a
shl ebx, 0x1f
xchg edx, esi
jmp 0x4da766
push 0xeb01c362
mov ebx, 0xf20edb51
xchg ebx, ecx
dec ecx
ror ecx, 8
or esi, ebx
sub ecx, ebx
ror esi, 0xd
xchg edx, ebx
jmp 0x4da662
call fcn.004d8fa1
or ebx, ecx
or esi, 0xf2141fcf
and esi, edx
not esi
dec edx
shr ebx, 0xf
mov ebx, ecx
and ebx, 0xf2157b72
dec edx
or edx, 0xf215fa2c
xchg ecx, ebx
jmp 0x4d87ae
push 0xeae1d867
shr ebx, 6
or esi, ecx
mov esi, ebx
xor ecx, edx
and ebx, esi
xor ecx, esi
shl esi, 0xe
mov ecx, edx
inc ebx
add edx, esi
add ebx, ecx
xchg ebx, edx
jmp 0x4d8bee
call edi
rol esi, 0xa
xchg ebx, ecx
add esi, ecx
xor ebx, ecx
sub edx, ecx
sub esi, ecx
add edx, esi
mov edx, 0xf225013e
sub ecx, edx
jmp 0x4d8f58
mov edi, 0xa3f322a
and esi, edx
inc edx
xor ecx, edx
mov ebx, edx
shl esi, 0xb
and esi, ebx
mov ecx, edx
xor esi, ebx
xchg ebx, edx
add ecx, edx
sub ecx, 0xf22ca862
jmp 0x4d8eaa
pop edi
add esi, ebx
sub ebx, edx
or edx, esi
mov ebx, edx
and edx, ecx
mov esi, ecx
rol edx, 7
xor esi, edx
or ecx, ebx
shr esi, 0x1f
xor ecx, esi
jmp 0x4dbbcb
pop edi
xchg esi, ecx
sub esi, edx
add ebx, edx
sub edx, ebx
add esi, 0xf233f22c
sub edx, ebx
add edx, 0xf234666f
shl esi, 0xf
bswap ecx
and esi, 0xf235182f
jmp 0x4da1ab
push 0xeaf926a6
or ebx, 0xf23d85b3
mov ebx, 0xf23dbe51
or edx, ebx
inc edx
and edx, ecx
mov esi, ecx
sub esi, ecx
xor ebx, ecx
or ecx, esi
shr ebx, 0x17
jmp 0x4dbae7
call fcn.004d8fa1
and edx, ebx
and ecx, ebx
and esi, ecx
or ecx, esi
or ebx, esi
not esi
not edx
or esi, 0xf2417d56
jmp 0x4d8e1c
push 0xeafcc18b
sub esi, ecx
add ebx, 0xf243f9e2
and ebx, ecx
and ecx, esi
sub esi, ebx
and ebx, esi
neg ecx
dec ecx
or ebx, esi
xor edx, 0xf245cf3e
add ecx, esi
add esi, ebx
mov esi, 0xf246769b
bswap edx
jmp 0x4d9770
call edi
and edx, ebx
mov esi, edx
sub ebx, 0xf249e33d
or ebx, esi
rol ebx, 0x16
bswap esi
add ebx, ecx
jmp 0x4d9c6c
pop edi
mov ecx, edx
add ecx, esi
nop
neg ebx
add esi, ecx
add esi, ecx
nop
shl esi, 0x11
xor ebx, 0xf25588ee
add edx, ebx
xchg ecx, esi
bswap ebx
and ebx, 0xf2567377
jmp 0x4d9a70
call fcn.004d8fa1
xchg ebx, esi
xor ecx, edx
jmp 0x4d9250
pop edi
add ecx, ebx
rol edx, 1
shl ecx, 0x1e
sub edx, ecx
mov edx, esi
mov ecx, esi
and esi, ecx
and ecx, ebx
dec edx
and ecx, edx
jmp 0x4dc4de
call edi
or esi, edx
mov ecx, 0xf271a892
xor esi, edx
xor esi, 0xf272298b
rol esi, 0x16
inc ebx
add esi, ecx
ror edx, 0x15
neg ecx
jmp 0x4dab28
pop edi
sub ebx, ecx
inc esi
dec ebx
jmp 0x4da2c4
call edi
mov ecx, ebx
xor edx, 0xf28a17e8
and ebx, edx
xchg esi, edx
jmp 0x4dc198
mov edi, 0x6332a2e
bswap edx
xor esi, 0xf28bee49
xor esi, ebx
sub esi, edx
and ecx, ebx
xor ebx, esi
xor edx, esi
and edx, esi
xchg ebx, edx
neg ebx
neg ecx
dec ecx
jmp 0x4dc5b1
pop edi
and esi, edx
shl ebx, 9
and esi, edx
sub ecx, esi
shl ecx, 0xb
and edx, esi
bswap esi
jmp 0x4dc680
pop edi
xchg ebx, esi
and esi, edx
or esi, ecx
inc esi
shl ebx, 4
add ebx, ecx
inc esi
sub ebx, 0xf29a31c6
jmp 0x4d8e8e
pop edi
add ebx, esi
sub ebx, ecx
bswap esi
and ecx, edx
xor esi, 0xf2ae0b61
shl ebx, 5
shr edx, 9
jmp 0x4da29a
pop edi
rol esi, 0x11
xor esi, edx
add esi, 0xf2b71156
rol ecx, 7
jmp 0x4dbbec