Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xfffffeeb
jne 0x40107f
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
ret
call sub.user32.dll_GetOpenClipboardWindow
cmp eax, 0xfffffede
jne 0x401117
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
ret
call sub.user32.dll_GetOpenClipboardWindow
cmp eax, 0xfffffed8
jne 0x4011b4
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xffffff25
jne 0x401215
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_DbgUiWaitStateChange
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_RtlNewSecurityObjectWithMultipleInheritance
call sub.ntdll.dll_DbgUiWaitStateChange
ret
jmp 0x498186
add edi, 0x7ea9a206
shr ebx, 6
and ecx, ebx
rol edi, 0x1a
sub ebx, ecx
ror ecx, 0xd
add edx, ecx
xor ebx, edx
jmp 0x4996d0
pop ebx
rol ecx, 0x13
sub edx, edi
not edx
mov edi, esi
mov ecx, 0x860cbffc
dec esi
mov esi, ecx
and esi, edi
bswap edx
xor edx, ecx
ror edi, 0x15
jmp 0x499d41
push 0x40
mov esi, 0x861a03b3
mov ecx, 0x861a8e3b
rol edx, 0x13
or edi, esi
add ecx, edi
xchg esi, ecx
rol esi, 4
xor edi, edx
xchg edx, edi
add ecx, esi
jmp 0x4982dc
push 0x7ee4b6ac
or edx, edi
and edx, esi
inc ecx
or edx, 0x861fb264
jmp 0x498309
call ebx
shr edx, 0xa
and edx, ecx
shl esi, 0xf
inc ecx
add edi, 0x8622166d
mov edx, esi
jmp 0x499971
push 0x96d86
ror ecx, 5
or esi, 0x8624f97b
dec edx
not esi
or esi, edx
bswap ecx
inc esi
or esi, edi
mov edi, 0x8627fe17
mov edx, esi
or edx, ecx
xor edx, edi
or edx, esi
add edi, ecx
dec esi
jmp 0x498c9f
push 0x7ee51a2f
sub edi, esi
shr esi, 2
mov esi, ecx
mov edi, ecx
add ecx, edx
xchg edi, edx
and esi, 0x862d9aec
xchg edx, ecx
dec ecx
sub edi, edx
add edx, ecx
jmp 0x49a70b
cmp eax, 0x96d86
jmp 0x49a07c
call fcn.0049a397
and ecx, 0x8643c354
shl edi, 1
or ecx, esi
or ecx, edx
mov ecx, esi
xor edi, edx
xor edi, edx
and edi, ecx
sub esi, edi
and ecx, edi
add edx, edi
dec edx
or edi, 0x86491a87
jmp 0x4982b8
or esi, edi
not esi
sub edi, ecx
xor edx, 0x864ce5c3
or edx, 0x864d4912
sub esi, ecx
xor esi, edi
dec esi
xchg ecx, esi
add esi, edx
xor edx, edi
jmp 0x499358
pop ebx
mov edi, edx
xchg ecx, esi
mov esi, 0x8651577f
inc edx
sub ecx, esi
sub edx, ecx
shl edi, 0x17
rol ecx, 0x17
shr edx, 0x1f
mov esi, edx
neg ecx
mov edi, esi
mov edi, ecx
jmp 0x499c12
pop ebx
rol esi, 0x14
mov ecx, edx
mov edi, 0x8667f342
xor edx, esi
xor edx, ecx
or edx, esi
sub edi, esi
neg esi
or edx, ecx
shl edi, 7
jmp 0x4994bc
mov ebx, 0x123b2f04
and ecx, edx
sub esi, edi
neg esi
or edi, 0x868488b5
jmp 0x499a38
call ebx
mov edx, esi
nop
or ecx, edi
sub edx, edi
dec esi
or edx, esi
jmp 0x49a005
pop ebx
nop
add edx, edi
xchg esi, edi
and ecx, edx
sub ecx, edx
and ecx, esi
mov esi, ecx
bswap ecx
sub esi, edx
sub edx, 0x869c4bf6
dec edx
jmp 0x49a18e
pop ebx
and edi, 0x86bb7dec
mov ecx, edi
not edi
xchg esi, edi
or ecx, edx
xor edx, 0x86bdfd98
add edx, ecx
ror esi, 0xa
sub edi, 0x86bf80ae
bswap esi
add edi, esi
or edx, 0x86c0b749
jmp 0x499ce5
push esp
not edi
xor edx, edi
xor esi, edi
bswap esi
shr edi, 0x1e
or ecx, esi
xor edi, esi
add edx, esi
inc esi
jmp 0x49a54d
push 0x7eb71fd2
shr esi, 0x12
mov esi, ecx
and esi, 0x86cda38c
and ecx, 0x86ce3147
bswap edx
or esi, edx
bswap edi
xchg edx, ecx
shl edi, 0x1e
jmp 0x499896
push 0x7eb4cd22
xor edi, 0x86d7f48c
xor esi, 0x86d87b94
xchg ecx, edi
add ecx, esi
xor edx, esi
shl edx, 0x1c
mov esi, edx
or edi, 0x86dbb3a8
sub edi, ecx
jmp 0x499a72
push 0x7ec6c9af
xchg ecx, edi
neg edi
xchg ecx, esi
and edi, esi
sub esi, edx
xor edx, ecx
sub esi, edi
sub edx, ecx
xor ecx, esi
add ecx, 0x86e10e79
jmp 0x49a290
call ebx
and edx, 0x86e1b88d
inc edi
xor ecx, esi
xor edi, esi
shl esi, 8
rol edx, 0x1f
add edx, edi
and ecx, edx
or edi, edx
or esi, ecx
shl edi, 6
xor edx, 0x86e71ba9
jmp 0x499ee2
not edx
neg esi
sub ecx, edi
and edx, edi
neg esi
add esi, ecx
or ecx, 0x86eb617d
xchg esi, edx
ror ecx, 0x1a
dec edi
xchg edi, edx
jmp 0x499a49
call ebx
inc ecx
mov ecx, esi
mov esi, edi
neg ecx
rol esi, 6
or edx, esi
add ecx, edi
mov edi, 0x870d0bf3
jmp 0x49a6b0
pop ebx
mov edx, 0x8713743b
or edx, 0x8713d6b5
xchg esi, edi
not ecx
shr esi, 0x13
and edi, ecx
rol ecx, 2
xor edi, 0x87172fa3
add edx, edi
sub ecx, edi
add ecx, esi
xor esi, edi
add esi, edx
jmp 0x498e3e
mov ebx, 0x2774562b
and esi, edi
add edx, ecx
and ecx, edx
xor esi, 0x871bf6c2
sub ecx, esi
xor edi, 0x871cf050
jmp loc.0049a4ed
rol dword [ebx], 0xa
and edx, edi
xor esi, edx
or esi, 0x871ea3ef
shl edx, 0x1a
or edi, 0x871f97e5
ror ecx, 0x1f
or esi, edx
xchg esi, edx
neg esi
shr esi, 0x1e
jmp 0x49a3c2
pop ebx
xchg edx, edi
shl edx, 2
nop
add esi, edx
xchg esi, ecx
sub esi, edi
rol edi, 4
and edi, ecx
neg ecx
jmp 0x49a665
pop ebx
or edi, 0x87632d45
xor edi, ecx
xor ecx, 0x87645282
and edx, 0x8764b729
mov edx, ecx
or edi, edx
and esi, edx
jmp 0x499847
push 0x7ebc9f54
xor edx, edi
and edx, esi
jmp 0x4994d2
push 0x7ec7bb2a
xor edi, esi
mov esi, edx
add edi, edx
shl ecx, 0x13
dec esi
shr esi, 0x19
or ecx, esi
or edx, edi
rol esi, 0x16
add edx, 0x877909cb
xor ecx, edi
and edx, edi
mov esi, edi
jmp 0x499af1
push 0x7ee9cc97
xchg esi, ecx
xor ecx, edi
bswap ecx
mov esi, edi
sub edi, esi
sub ecx, esi
mov edx, 0x8797cc04
sub edx, esi
or edx, ecx
bswap esi
jmp 0x49a611
xchg ecx, esi
rol edx, 2
xor edi, esi
and ecx, edi
inc esi
add edx, edi
inc ecx
add esi, edx
inc edx
dec esi
jmp 0x498ef5
pop ebx
bswap ecx
shl esi, 0x14
bswap edx
rol esi, 0xa
not edx
rol esi, 0x1e
shl edi, 0x1e
dec edx
and ecx, 0x87af1cfa
jmp 0x498594
mov esi, edi
xor edx, esi
mov esi, 0x87e179bd
neg edi
add esi, edi
jmp 0x4987f6
xor dword [ebx], 0x4b3f77f4
xchg esi, edi
sub ecx, edi
shl ecx, 2
shr edi, 0xe
mov edi, 0x880e2a1e
add esi, edi
add ecx, 0x880f25d7
rol edi, 0x17
or edx, edi
add edi, edx
rol ecx, 7
inc ecx
jmp 0x498bea
pop ebx
and esi, 0x8811b0fe
or edx, 0x88122f66
or edx, esi
or edi, ecx
add edi, edx
xchg edi, ecx
or ecx, edx
sub esi, edx
sub edx, esi
bswap ecx
mov edx, 0x88160eac
sub ecx, edi
add edi, esi
jmp 0x499980
push 0x401400
inc ecx
add edi, edx
and esi, ecx
sub ecx, edi
or edx, 0x883b53fb
sub edx, edi
sub esi, ecx
jmp 0x498696
pop ebx
and ecx, edi
xor edx, 0x8843ce24
mov esi, 0x8844500c
or edi, esi
dec esi
rol ecx, 0xb
jmp 0x499dd0
call fcn.0049a397
add ecx, 0x886d4bab
mov ecx, 0x886da97f
sub esi, 0x886e1b61
and edx, 0x886e7f8b
mov edx, edi
or ecx, edx
jmp 0x49a507
push 0x7eba1985
and ecx, edx
add edx, 0x887955fd
xchg edi, esi
add ecx, esi
neg edi
xor ecx, edi
or edi, edx
dec esi
jmp 0x498454
pop ebx
xchg esi, edx
or ecx, edi
neg ecx
jmp 0x498eb9
mov ebx, 0x123b2f04
shl esi, 0x1d
xchg edi, ecx
add edx, esi
add edx, ecx
or esi, ecx
mov ecx, edx
and edi, edx
not ecx
xor esi, ecx
add esi, edi
sub edi, ecx
sub edi, ecx
mov edi, 0x88999261
jmp 0x49948a
mov ebx, 0x401400
and ecx, esi
mov edx, 0x88bcd413
or ecx, edx
sub esi, ecx
mov edi, edx
shl ecx, 0xa
and esi, edx
xor esi, 0x88bf3c07
mov edx, esi
and edx, edi
add edi, 0x88c05321
add ecx, 0x88c0af5f
mov esi, edi
sub edi, esi
xor esi, 0x88c1d22e
jmp 0x499bd7
add ebx, 4
add ecx, 0x88c286bd
bswap edi
sub edx, ecx
inc edx
and edx, 0x88c41575
or edi, 0x88c47c48
and edi, ecx
xchg esi, ecx
or edi, edx
mov edx, esi
and edx, esi
add edx, 0x88c71d88
mov esi, edi
sub ecx, edx
jmp 0x49a30a
push 0x7eb28505
and esi, ecx
xchg edx, esi
shr ecx, 6
shr edi, 6
rol esi, 0x11
add edx, ecx
not esi
rol edx, 9
xor edx, edi
add ecx, 0x88e3c909
add esi, edi
jmp 0x498e4a
rol dword [ebx], 0xb
add edi, esi
shr edx, 5
add edi, edx
shl edi, 0x10
jmp 0x498c47
mov ebx, 0x123b2f04
xor edi, 0x88ed6af3
sub ecx, edx
rol edi, 0x1b
mov esi, 0x88ee9116
sub edi, esi
xor edx, ecx
and edi, ecx
neg esi
neg edi
jmp 0x498377
add eax, 4
xchg edx, ecx
and ecx, 0x89332ab7
inc edx
mov ecx, esi
mov edi, esi
mov esi, 0x89343e15
rol esi, 2
mov ecx, edx
add ecx, edx
sub ecx, esi
jmp 0x49836d
xor dword [ebx], 0x7fbf77f3
sub esi, edx
and ecx, esi
sub esi, edi
add edi, ecx
sub ecx, edx
xchg ecx, edi
sub ecx, edi
add ecx, edi
rol esi, 0xe
jmp 0x4983b9
mov ebx, 0x2774562b
add ecx, edi
xor ecx, edx
inc edi
xchg edi, edx
xor ecx, edi
add edi, 0x897b0c08
sub ecx, edi
sub edx, edi
or ecx, 0x897c2abf
shl edx, 0x1d
mov ecx, edi
xor edx, edi
jmp 0x49a0a0
push 0x7ee648b4
add edx, edi
and esi, edi
xchg esi, ecx
and esi, ecx
shl esi, 0x16
shl edi, 0x1f
sub edx, ecx
and esi, 0x898dffee
add ecx, esi
xor edi, ecx
jmp 0x49a6e9
push 0x7ec340e2
add edi, ecx
mov ecx, edi
xor esi, 0x899092c0
or edi, 0x89911714
and edx, edi
jmp 0x499389
push 0x7ebc546d
or ecx, edx
xor edx, ecx
xchg esi, edi
and edx, esi
mov esi, edi
jmp 0x4989c3
rol dword [ebx], 0xa
dec ecx
or esi, edx
not esi
and ecx, 0x89cf817e
mov ecx, edi
xchg ecx, edi
or ecx, esi
and ecx, 0x89d12003
and esi, edx
or edi, 0x89d1de32
sub edx, ecx
or ecx, 0x89d2b868
add edx, ecx
jmp 0x49a5e7
mov ebx, 0x2774562b
add edi, esi
mov esi, edx
mov edx, esi
sub edx, esi
mov edx, 0x89d5436d
sub esi, ecx
sub edi, ecx
jmp 0x498d7f
mov ebx, 0x123b2f04
not edi
and esi, edi
inc edx
xor edi, edx
xor ecx, edi
xor edi, edx
xchg esi, ecx
sub esi, edi
jmp 0x499875
call fcn.0049a397
and edi, edx
or ecx, 0x89fe4c18
add esi, edx
neg ecx
add esi, 0x89fef47b
jmp 0x499b15
pop ebx
sub edi, esi
add edi, esi
bswap edi
sub edx, ecx
and edi, esi
sub edi, ecx
mov esi, ecx
xor esi, edi
jmp 0x49a31f
push 0x7ebce826
sub edi, edx
add edx, edi
xor edi, esi
and esi, 0x8a06d1e2
mov ecx, esi
or edi, ecx
xor edi, edx
add edi, esi
sub ecx, edx
mov esi, 0x8a080fdf
xor esi, ecx
or esi, edi
jmp 0x49a7c9
push 0x7ec76290
xchg edx, ecx
dec esi
not edx
add esi, edx
sub esi, edx
add esi, ecx
inc ecx
jmp 0x4989d1
push 0x7ee5dd70
shr ecx, 0x1f
xor ecx, edx
and edi, edx
or edi, 0x8a2cc1fc
sub edx, edi
or ecx, edi
shr esi, 1
or ecx, esi
sub edi, edx
dec ecx
add esi, edx
jmp 0x499217
call fcn.0049a397
xchg edi, esi
inc edi
xor ecx, esi
inc edx
rol edi, 0x1b
bswap edi
sub edx, ecx
xor esi, 0x8a3bac90
sub ecx, 0x8a3bef9a
shl ecx, 0x1b
sub esi, 0x8a501f0d
or edx, 0x8a508404
not edx
or esi, edx
or ecx, esi
mov edx, esi
jmp 0x4985c3
push 0x7eb23500
sub esi, 0x8a86d928
inc edi
or esi, ecx
xchg edx, ecx
sub esi, edi
xor ecx, 0x8a8f2df1
or edi, esi
xor edi, esi
sub ecx, esi
and esi, edi
or edx, ecx
nop
jmp 0x498f28
mov ebx, 0x401400
bswap edi
mov ecx, esi
and edi, edx
jmp 0x498499
call ebx
bswap ecx
and esi, edx
mov esi, ecx
shr edi, 2
sub edi, ecx
bswap esi
or esi, edx
add esi, 0x8ab8394e
or edi, ecx
or edi, esi
xchg esi, edi
jmp 0x49a748
pop ebx
xor esi, edx
mov ecx, esi
xchg edi, edx
sub edx, edi
xor ecx, esi
dec ecx
or edx, edi
xor ecx, edi
jmp 0x499901
push 0x7ebba647
dec edi
xchg esi, edi
ror ecx, 0x1d
mov esi, edi
sub ecx, esi
mov ecx, 0x8b1fa75c
mov esi, 0x8b200c4c
not ecx
add edx, esi
or ecx, 0x8b212410
add ecx, 0x8b218131
jmp 0x49a1df
call fcn.0049a397
xchg edi, esi
mov edi, edx
xchg edx, esi
shl edx, 0x15
shl edi, 0x13
xchg esi, edi
add edi, esi
inc ecx
bswap edx
neg edx
add edi, ecx
jmp 0x498764
push 0x7eb76bb5
add esi, edi
sub esi, edi
jmp 0x4993c1
pop ebx
add ecx, edx
and ecx, 0x8b39f3bb
xor edx, ecx
or ecx, esi
sub esi, ecx
sub edx, esi
xchg ecx, edx
add ecx, edi
xchg ecx, edx
bswap ecx
and edi, ecx
sub edx, esi
neg edx
jmp 0x498217
pop ebx
or edx, ecx
mov edx, edi
and edx, ecx
shl esi, 0x1b
jmp 0x4982a3
pop ebx
inc edi
bswap edx
add edi, edx
xchg esi, ecx
or edx, ecx
sub ecx, edx
add esi, 0x8b524f78
add edx, esi
add edi, edx
jmp 0x498def
pop ebx
xor ecx, edx
shr esi, 0x11
sub edi, ecx
add edi, esi
mov edi, esi
ror ecx, 0x1e
mov edi, esi
sub esi, edx
jmp 0x4987ab
call fcn.0049a397
mov ecx, esi
xor esi, edx
bswap edi
dec ecx
jmp 0x49a808
rol dword [ebx], 0xf
or esi, edi
sub edi, ecx
mov ecx, edi
or edi, 0x8cb0dd36
neg edi
sub esi, 0x8cb1a88c
sub esi, edx
xor ecx, esi
sub ecx, 0x8cb31346
ror edx, 0x1d
jmp 0x499eb7
mov ebx, 0x123b2f04
mov edi, edx
add edi, esi
sub esi, ecx
mov edx, 0x8cb5357a
dec esi
and edx, 0x8cb5ff3c
sub esi, edi
or edx, esi
bswap esi
not ecx
and edi, esi
sub edx, esi
neg esi
rol edi, 0x1f
jmp 0x499ef8
mov ebx, 0x123b2f04
add ecx, 0x8cc408c2
sub ecx, edx
ror edi, 0x1c
rol edx, 0xc
add ecx, edi
mov edx, 0x8cc5f904
add edi, ecx
ror esi, 7
jmp 0x49a14a
call ebx
and edi, edx
or edi, ecx
xchg edi, ecx
or edi, 0x8cc89d1d
xor edi, esi
xchg esi, ecx
bswap edx
jmp 0x4983db
call ebx
mov ecx, edx
and esi, 0x8ccab435
inc esi
and edi, esi
and ecx, esi
add edx, esi
shr edx, 0xa
mov edx, edi
xchg esi, ecx
not edi
jmp 0x499a03
pop ebx
xchg ecx, esi
mov edx, 0x8cdfa6c7
sub esi, edi
dec edi
xor esi, edx
sub edx, edi
or esi, edi
xchg esi, edi
jmp 0x49a0bf
xor eax, eax
xchg edx, esi
and ecx, 0x8ce9ebdb
sub edx, 0x8cea618e
mov edi, esi
xchg edi, ecx
dec edi
xor edx, ecx
add ecx, edi
and edx, ecx
or ecx, edx
sub ecx, edx
xor ecx, edx
jmp 0x4986bf
call ebx
and esi, edi
and esi, edi
not edi
neg edx
and esi, 0x8cf0ee8e
jmp 0x49a47a
pop ebx
bswap esi
sub ecx, 0x8cf1d376
mov esi, edi
or edx, edi
dec ecx
mov ecx, edx
sub edx, esi
sub ecx, edi
shl edi, 0xb
xor edx, esi
xor edi, 0x8cf57ae4
jmp 0x49a836
call fcn.0049a397
shr ecx, 2
xor esi, edx
mov edi, edx
mov edx, edi
mov edi, esi
mov edi, esi
shl ecx, 0x11
sub edi, edx
jmp 0x499e79
pop ebx
mov esi, 0x8d2a7ba0
and esi, edx
sub ecx, esi
xchg esi, edx
mov ecx, edx
add ecx, 0x8d2f232e
sub edi, esi
bswap edi
add edx, 0x8d309076
add esi, ecx
sub edi, ecx
add edx, 0x8d31d50b
shl esi, 0x1c
jmp 0x498cec
pop ebx
add esi, edi
dec edi
xor edx, 0x8d3629a4
xchg edi, esi
neg edi
or esi, 0x8d379dec
neg edx
not esi
and edx, 0x8d38ce69
mov edx, esi
bswap edx
jmp 0x499f8a
push 0x7ed69429
neg esi
dec ecx
or edi, edx
add ecx, 0x8d47c5bd
dec edx
sub ecx, edi
or ecx, 0x8d4919f1
and edx, 0x8d49ab4c
jmp 0x498f98
xor edi, edx
sub ecx, edi
mov esi, ecx
or ecx, edx
add edi, 0x8d5ce71f
sub edx, ecx
and edx, ecx
sub ecx, edx
xor edx, 0x8d5ea35f
nop
jmp 0x49a351
call ebx
add edi, edx
add edi, ecx
and esi, edx
rol ecx, 0xf
xchg edx, edi
and edx, ecx
and ecx, esi
shl edx, 0x13
jmp 0x49a7ba
call fcn.0049a397
sub ecx, esi
shr ecx, 0xe
and ecx, 0x8d688e6c
xor edi, esi
mov edi, 0x8d6963e0
sub edi, esi
inc edx
neg edi
add edi, edx
xor ecx, edx
jmp 0x499bfd
xor dword [ebx], 0x56bf77f3
add edi, ecx
add edx, esi
xor ecx, 0x8d6cfa45
or esi, edx
not ecx
xor esi, 0x8d6e39fd
neg ecx
dec edi
neg edi
rol esi, 9
mov edi, edx
or edx, edi
jmp 0x4990d4
pop ebx
sub esi, 0x8d71367b
xor esi, 0x8d719c29
sub edi, edx
mov ecx, esi
jmp 0x49923b
call fcn.0049a397
not ecx
mov edi, ecx
sub ecx, edx
mov edi, esi
jmp 0x49a5b8
mov ebx, 0x4132136a
xor edi, 0x8dd3e6f3
xchg ecx, edx
and ecx, edx
or ecx, 0x8dd563cc
xor ecx, edi
add ecx, edi
or esi, 0x8dd6cc97
shl esi, 0x17
or edi, ecx
or ecx, 0x8dd82b2a
jmp 0x4995ce
push 0x85c1ec77
mov ecx, 0x8df3c882
mov edx, 0x8df42b17
sub edi, esi
mov edi, edx
sub edx, esi
sub esi, 0x8df5c4fa
sub esi, ecx
mov esi, ecx
jmp 0x4987d8
jl 0x4986bf
add esi, edx
xor edx, ecx
shr ecx, 0x1a
rol esi, 0xf
xor edx, edi
rol ecx, 6
mov edx, esi
bswap esi
add edi, edx
mov ecx, esi
or edi, esi
jmp 0x4996f8
call fcn.0049a397
or ecx, edi
or edi, edx
shl ecx, 0x13
mov ecx, edx
neg esi
xchg esi, edx
neg ecx
or ecx, edi
and edi, edx
add edx, ecx
jmp 0x499b2e
pop ebx
sub edi, ecx
sub esi, edi
add edi, ecx
sub esi, 0x8e0bb314
or edx, 0x8e0c2e9f
xchg edi, esi
or edx, esi
xor edx, ecx
dec edi
or edx, 0x8e0e52c3
neg edi
xchg edi, ecx
jmp 0x4988c3
call fcn.0049a397
xchg ecx, esi
and esi, ecx
sub edx, ecx
mov ecx, esi
bswap edi
add ecx, 0x8e33e2f8
xchg edx, edi
add edi, ecx
and esi, edx
dec edx
jmp 0x499737
push 0x7ec50483
xor ecx, edx
ror esi, 0x12
and esi, edx
and esi, edi
xor edi, ecx
bswap edi
xor ecx, esi
xor ecx, 0x8e3cefce
or edx, ecx
mov esi, 0x8e3ddaf5
or edi, esi
jmp 0x498674
push 0x7ebc083a
mov ecx, esi
sub ecx, edi
and esi, edx
rol ecx, 4
sub esi, ecx
and ecx, edx
xor edi, esi
not edi
jmp 0x4992b5
push 0x7ec71b27
bswap edx
add ecx, edx
add ecx, edx
sub ecx, edi
dec ecx
xchg esi, ecx
xor edx, 0x8e603d06
jmp 0x49956b
xchg edi, esi
sub edi, ecx
not ecx
mov edi, esi
add edi, esi
add ecx, 0x8e6e6070
jmp 0x4990b1
push 0x7eb6ce15
and esi, ecx
xor esi, edi
and edi, esi
and esi, 0x8e704b0f
mov edx, 0x8e70c1ae
not esi
add esi, 0x8e718e86
xor edi, edx
jmp 0x498600
rol dword [ebx], 0x16
sub ecx, edx
sub esi, edx
dec edi
mov ecx, 0x8e7556e1
inc edx
dec ecx
and esi, edx
or edi, ecx
jmp 0x498a73
dec edi
dec edx
or esi, ecx
xor ecx, edi
sub esi, ecx
xchg edx, ecx
jmp 0x49a59d
pop ebx
not edi
sub edi, ecx
shl edi, 0x13
add esi, 0x8e994520
xchg ecx, edx
or edi, 0x8e9a0496
xchg ecx, edi
add edi, edx
xor esi, ecx
sub ecx, edi
neg edi
xchg edi, esi
mov edx, esi
and esi, edi
and edx, esi
jmp 0x49a683
call ebx
add esi, 0x8ebae141
xor edi, 0x8ebb46ce
neg edi
xor ecx, 0x8ebc3322
add edi, edx
xchg esi, edx
sub edi, edx
ror edi, 0x12
jmp 0x4984f4
push esp
and ecx, 0x8ec25c05
mov esi, edi
ror esi, 0x1e
xor edi, 0x8ec3b6ed
or ecx, esi
neg esi
inc edi
add edx, 0x8ec58503
add ecx, 0x8ec5ecc0
jmp 0x49827d
rol dword [ebx], 8
add edx, edi
rol esi, 0x14
and ecx, 0x8ecbf135
xor edi, esi
inc edi
sub edi, ecx
shr ecx, 0xb
jmp 0x499e39
call ebx
xor ecx, 0x8ece5939
or esi, 0x8ecebfff
xor edi, esi
sub edi, edx
neg edi
or edx, edi
xchg edi, edx
not esi
dec edx
add ecx, 0x8ed1fb9e
shl edx, 0xa
mov esi, edx
sub edx, edi
xor esi, edi
jmp 0x498435
or ecx, edx
mov esi, edi
xor esi, ecx
xor ecx, edi
xchg ecx, edi
xchg esi, edx
xor edx, esi
and esi, edi
xor edi, 0x8ed7c8e0
mov edx, esi
or ecx, edx
ror ecx, 0xb
dec ecx
add ecx, edx
rol esi, 0x17
neg edi
jmp 0x498f73
push 0x7eea20ed
shr ecx, 0x16
mov edx, esi
add ecx, esi
neg edi
add esi, edx
mov ecx, esi
or ecx, 0x8eddf3ad
shr edx, 3
sub esi, edi
sub ecx, edx
xor ecx, esi
and edi, esi
jmp 0x4991c4
push 0x7ee97be9
dec ecx
shr ecx, 0xc
and edx, ecx
and esi, edx
xor esi, 0x8ee6a999
not edi
sub edx, esi
xchg esi, edx
jmp 0x498a52
pop ebx
shr ecx, 3
inc esi
or edi, ecx
dec edx
and edi, ecx
bswap edx
mov edi, esi
xchg esi, edx
add edx, 0x8eebe0bc
xor esi, 0x8eec410c
not ecx
and edx, edi
sub edi, esi
add edx, 0x8eedf2d6
jmp 0x499b8e
pop ebx
dec esi
not ecx
neg esi
neg edx
sub esi, edx
xor edx, esi
add esi, edx
jmp 0x498c74
mov ebx, 0x123b2f04
and ecx, 0x8ef563d0
xor edi, ecx
not edi
or edi, ecx
xchg ecx, edi
not esi
mov edx, edi
or esi, edx
mov ecx, edi
or edi, edx
jmp 0x499e92
push 0x7ee58401
xchg edx, esi
xchg ecx, esi
mov ecx, edi
sub esi, edx
mov edi, edx
mov esi, edi
rol edi, 7
rol edx, 4
neg edi
jmp 0x499581
pop ebx
inc edx
and edi, edx
not esi
or esi, ecx
and ecx, edi
mov edx, ecx
xchg ecx, edx
neg edx
xchg edi, ecx
shl edi, 0xb
bswap esi
or edi, ecx
dec esi
jmp 0x498ae1
pop ebx
bswap edx
and esi, edi
shr edx, 0x15
and edi, esi
jmp 0x4997c5
mov ebx, 0x2774562b
xor edi, edx
and ecx, edi
shl esi, 0x16
sub edi, edx
or edi, esi
ror edi, 0xf
mov edi, ecx
inc ecx
jmp 0x499c53
call ebx
xor ecx, edi
sub edi, edx
and ecx, edi
and edx, edi
jmp 0x498941
push 0x7eb48342
inc ecx
ror edx, 0x15
shl edx, 0x1f
mov edx, 0x8f2a08fc
add edi, ecx
mov edi, esi
neg edi
not edi
jmp 0x49864b