Function at 0x401000
Capabilities:
Accept command line arguments
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xfffffee8
jne 0x401093
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xffffff22
jne 0x401103
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xffffff30
jne 0x4011a5
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xffffff1a
jne 0x40122e
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.kernel32.dll_FlushConsoleInputBuffer
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.ntdll.dll_RtlActivateActivationContextUnsafeFast
call sub.kernel32.dll_GetSystemWindowsDirectoryW
call sub.kernel32.dll_GetSystemWindowsDirectoryW
ret
jmp 0x49c64b
add esi, 0xdbd9e648
jmp 0x49c76a
push 0xdbe7e9ba
shl ebx, 0x15
xor esi, edi
xchg esi, edi
mov edx, edi
xchg edi, ebx
sub ebx, edx
sub edi, edx
nop
jmp 0x49c79a
call ecx
sub edx, 0xdc281808
add edi, ebx
inc esi
and ebx, edx
and edx, 0xdc2885d8
sub edx, edi
jmp 0x49da69
push 0xdbe48d0b
mov edi, esi
not edi
sub edx, esi
and edx, edi
jmp 0x49d41c
push 0xdbdb86b3
mov esi, 0xdc2ceb54
inc esi
add edx, ebx
neg edi
shl ebx, 0x12
xor ebx, 0xdc2d6f96
and edx, edi
mov esi, 0xdc2da4b6
mov esi, edi
add esi, edi
or ebx, esi
sub esi, ebx
not edi
add edx, edi
jmp 0x49d792
mov ecx, 0x33274000
sub edx, ebx
or edx, edi
add edi, esi
or edx, esi
sub edi, ebx
xor edx, 0xdc2edf30
sub esi, edx
neg edi
sub esi, edi
mov edx, 0xdc2f4aae
jmp 0x49ec03
call ecx
add edx, ebx
xor ebx, esi
sub edx, ebx
xor edi, esi
xor edx, esi
inc esi
add edx, ebx
mov ebx, 0xdc30ff90
jmp 0x49eecc
pop ecx
rol esi, 0xd
and edx, esi
jmp 0x49ec6c
push 0xdbe01cba
add ebx, edx
mov edx, ebx
xchg edx, ebx
sub edx, 0xdc377f50
jmp 0x49dee0
pop ecx
xchg esi, ebx
or edi, esi
xor edx, esi
dec edi
mov ebx, esi
and esi, edi
and esi, ebx
sub ebx, esi
add ebx, edi
sub ebx, edx
xor edx, edi
shr edx, 3
jmp 0x49d57a
call ecx
shl esi, 3
sub edx, ebx
xchg edi, esi
sub ebx, edi
shr esi, 0x1b
or ebx, edx
inc edi
or ebx, 0xdc3b5df0
xchg esi, ebx
ror edx, 4
jmp 0x49de5e
pop ecx
rol ebx, 0x17
sub edx, esi
or esi, edx
shr edi, 5
and esi, 0xdc43013a
and ebx, 0xdc431e6c
add ebx, edi
or edi, esi
or ebx, edi
mov ebx, edx
add edx, ebx
xor edx, edi
jmp 0x49d00c
call ecx
and ebx, esi
add edi, esi
dec ebx
dec edi
jmp 0x49d632
push 0xdbdc1888
mov ebx, esi
xor edi, edx
rol esi, 0x18
mov esi, edx
and edx, 0xdc44b164
or ebx, edx
jmp 0x49e56d
call fcn.0049ef43
sub edx, ebx
mov edi, 0xdc450d44
add esi, ebx
and ebx, edi
bswap ebx
sub ebx, edx
or edx, ebx
mov edi, 0xdc45a94e
xchg esi, ebx
add edi, ebx
not edi
or esi, edx
add edx, ebx
neg edi
jmp 0x49df7d
call ecx
and ebx, esi
xchg edi, esi
sub esi, ebx
add esi, edx
xor edi, 0xdc474d1a
sub edi, ebx
xchg edi, edx
sub edx, ebx
jmp 0x49ead0
call fcn.0049ef43
sub esi, edi
or edx, 0xdc499f5c
neg edx
or edi, ebx
inc esi
not esi
and esi, 0xdc4a25e0
sub esi, ebx
jmp 0x49c7da
pop ecx
inc edx
and esi, edx
dec edi
add edi, 0xdc544bf8
add ebx, esi
mov edx, esi
xchg esi, ebx
ror edx, 0x16
jmp 0x49d717
call fcn.0049ef43
and ebx, esi
shr edx, 8
or edi, esi
xchg esi, edx
and edi, edx
bswap edx
jmp 0x49c6ba
push 0xdbe5d2b4
sub edi, 0xdc5fd5c0
or esi, edi
add edx, ebx
dec esi
mov edi, ebx
add esi, edx
and edi, edx
xor edi, edx
xchg edi, esi
or ebx, esi
xchg edi, esi
xchg esi, edx
jmp 0x49db26
push esp
sub edx, 0xdc632d04
sub edx, ebx
xor esi, 0xdc63615c
sub edx, esi
jmp 0x49eaf2
mov ecx, 0x33274000
xor edx, edi
sub edi, edx
add ebx, esi
neg edx
not edi
add ebx, edi
sub ebx, edx
mov esi, 0xdc645d02
or esi, 0xdc64769e
shr edx, 9
jmp 0x49e955
push 0xdbe78e22
dec ebx
bswap edi
mov edx, edi
add edi, 0xdc65b2b8
xor esi, edi
xor ebx, esi
sub esi, ebx
neg esi
add edi, 0xdc66381a
xor esi, edx
jmp 0x49e41f
push 0xdbe913aa
or esi, edx
sub ebx, edi
xchg edx, esi
mov ebx, esi
shr edx, 0x1c
mov edi, esi
or edi, ebx
shr ebx, 5
jmp 0x49e3c5
call ecx
mov esi, edi
nop
jmp 0x49d498
push 0xdbdf1d23
and esi, ebx
and edi, 0xdc6bdbec
jmp 0x49dd95
pop ecx
xchg edi, esi
add ebx, edx
or ebx, edx
inc edi
mov esi, ebx
dec esi
xor ebx, 0xdc6e656a
mov edx, ebx
jmp 0x49e333
mov ecx, 0x33274000
sub edi, 0xdc6ebc04
xor ebx, esi
or edi, ebx
or ebx, edi
sub esi, edx
or edi, edx
jmp 0x49e74d
call fcn.0049ef43
or edx, 0xdc70ebde
not edx
jmp 0x49ca4f
call fcn.0049ef43
mov esi, ebx
dec esi
add esi, 0xdc72491a
add edx, edi
ror esi, 9
dec edx
xchg esi, ebx
or edi, esi
jmp 0x49d595
pop ecx
and esi, edi
and esi, ebx
or edi, 0xdc76a31e
ror edi, 8
and edx, edi
xchg ebx, edi
and esi, 0xdc770b1a
xchg ebx, edx
sub ebx, esi
add ebx, edi
xor edx, esi
mov edx, ebx
xchg edx, ebx
or edi, edx
jmp 0x49ed3a
push 0xdbe1ccb0
and edx, ebx
inc edx
mov edx, 0xdc7893e0
and edx, 0xdc78b112
xchg ebx, esi
add edi, 0xdc78e4ec
xor esi, edx
mov esi, ebx
jmp 0x49da40
call ecx
shr edx, 0x1e
mov ebx, edi
inc ebx
inc ebx
add ebx, esi
xor edx, ebx
sub esi, edi
xchg esi, edx
add ebx, edx
and edx, edi
jmp 0x49e8c6
call fcn.0049ef43
inc ebx
xor esi, edi
add edi, esi
xor edi, 0xdc7a9b48
neg esi
add edx, edi
add edx, 0xdc7ae994
mov edi, esi
rol ebx, 0xa
xor ebx, 0xdc7b37d0
jmp 0x49e293
push 0xdbde7036
and edi, ebx
bswap ebx
xchg edi, ebx
add edx, ebx
mov ebx, esi
add edx, esi
mov edi, esi
and edx, 0xdc844dec
add edx, ebx
sub ebx, edx
dec edx
nop
not edi
xor ebx, 0xdc84e86c
jmp 0x49d802
push 0xdbdc8d96
shr edi, 0xf
ror edi, 0x1a
add edi, ebx
inc esi
jmp 0x49d024
push 0xdbe4abb8
or edx, ebx
sub edi, edx
add edi, esi
xchg esi, ebx
jmp 0x49eaac
push 0xdbe27dc1
add ebx, esi
inc edi
add edx, esi
xor esi, ebx
sub edi, esi
or edx, edi
bswap edx
xor edi, edx
jmp 0x49eda5
pop ecx
mov ebx, edx
xor edi, ebx
rol edx, 9
shr edx, 0x1e
rol esi, 0xd
and edx, esi
rol ebx, 0xa
mov edx, edi
jmp 0x49ca27
mov ecx, 0x33274000
sub esi, 0xdc951294
dec edx
mov esi, edi
add ebx, esi
or edi, esi
xchg esi, ebx
and esi, edx
and edx, edi
jmp 0x49e456
pop ecx
xor esi, ebx
sub edi, esi
add ebx, edi
xchg edx, esi
sub edx, edi
xchg esi, ebx
neg edx
shl edx, 0xd
sub edi, esi
xchg edx, esi
jmp 0x49cc7a
call ecx
xor edi, edx
mov esi, edi
and esi, 0xdc976ea0
xor esi, ebx
mov edx, edi
mov ebx, edx
mov esi, ebx
mov ebx, esi
jmp 0x49df48
pop ecx
sub edi, 0xdc9b9740
sub edx, edi
add esi, ebx
ror edi, 3
and ebx, 0xdc9bfc48
sub edx, esi
or esi, edx
sub esi, edx
or edi, edx
rol esi, 0x1d
add edx, esi
bswap ebx
jmp 0x49df5e
call ecx
and edx, edi
mov edi, edx
not esi
xchg ebx, esi
jmp 0x49e03f
push 0xdbe4e47e
and edi, edx
mov ebx, esi
shr edx, 0xf
rol esi, 8
not edx
and esi, edx
and edx, edi
and edx, ebx
jmp 0x49d549
pop ecx
neg edx
or edi, ebx
add edx, esi
sub ebx, edi
add edx, ebx
xor edx, edi
shr edx, 0xd
dec esi
xchg edi, ebx
neg esi
jmp 0x49cfc5
mov ecx, 0x33274000
add esi, ebx
xor edx, esi
add esi, edx
xor edi, ebx
shl ebx, 2
sub edi, edx
add edi, esi
shl edi, 0xf
jmp 0x49d1b0
pop ecx
xor edx, esi
mov ebx, 0xdca2a966
add edx, ebx
mov esi, ebx
xor esi, ebx
add edi, ebx
inc esi
and ebx, edx
shr ebx, 7
shl ebx, 0x16
jmp 0x49dd67
push 0xdbe1b106
add esi, edi
shl edx, 0xb
sub ebx, edi
and ebx, edx
dec edx
and esi, ebx
jmp 0x49d172
mov ecx, 0x33274000
or esi, ebx
add edi, ebx
add esi, edx
xor edi, 0xdca67f4c
shr ebx, 0xa
or ebx, esi
sub esi, ebx
dec esi
mov edi, ebx
add edx, ebx
jmp 0x49cd68
pop ecx
rol edx, 0x17
add edx, ebx
sub ebx, esi
not edx
sub esi, 0xdca7ad86
rol edx, 4
ror esi, 2
mov edi, esi
xor ebx, esi
add esi, 0xdca82c74
jmp 0x49d9b9
push 0xdbdfaa32
add ebx, 0xdca8535a
sub ebx, 0xdca86cf6
and edi, edx
or edi, 0xdca8a508
sub ebx, esi
add ebx, edi
sub ebx, 0xdca8f180
dec edi
jmp 0x49de32
mov ecx, 0x33274000
sub edx, ebx
or ebx, 0xdca94840
xchg esi, ebx
ror edx, 0xc
add esi, 0xdca99928
add ebx, edx
and edx, edi
mov ebx, esi
jmp 0x49ebba
pop ecx
or ebx, edx
shr esi, 3
shl esi, 0x16
and edi, esi
mov esi, ebx
and ebx, 0xdcad5d30
sub edx, esi
sub esi, edx
jmp 0x49e76a
push 0xdbe121ca
sub edi, edx
bswap esi
sub edi, esi
mov edx, edi
xchg edi, ebx
not esi
sub edx, ebx
not ebx
and ebx, 0xdcb5b382
xor edi, ebx
xor ebx, edi
add edi, 0xdcb5fe4c
jmp 0x49ea8a
push 0xdbdc71de
mov edx, edi
sub ebx, edx
sub ebx, esi
or edx, ebx
and ebx, 0xdcb79bc0
xor edi, ebx
jmp 0x49d33d
pop ecx
inc esi
ror esi, 6
sub edi, edx
sub edx, esi
or esi, ebx
or esi, edx
inc ebx
mov ebx, 0xdcb8954a
or ebx, 0xdcb8af30
xchg edx, edi
jmp 0x49dd16
mov ecx, 0x33274000
and edx, esi
add esi, 0xdcb906d6
add ebx, edx
sub edi, edx
or edx, ebx
mov edi, esi
or edi, 0xdcb98676
shr esi, 0x13
rol edi, 0x10
shr edi, 7
jmp 0x49de8d
pop ecx
sub edi, edx
sub ebx, esi
add edi, esi
add edi, ebx
mov ebx, edx
inc ebx
xchg edi, edx
sub edx, ebx
not ebx
xchg esi, edx
jmp 0x49ca5c
mov ecx, 0x33274000
xchg edi, edx
inc edx
xor edi, ebx
xor ebx, edi
add edx, edi
rol edx, 0xf
mov esi, ebx
or ebx, esi
rol esi, 2
mov esi, edx
jmp 0x49cb06
pop ecx
sub esi, edx
or ebx, esi
mov esi, edi
xchg esi, ebx
neg edx
neg ebx
add edx, ebx
sub ebx, edx
not ebx
and ebx, 0xdcc3c940
jmp 0x49eee7
call ecx
sub edi, esi
and ebx, edi
and edi, ebx
mov esi, 0xdcc8a28a
mov esi, edi
or edx, ebx
jmp 0x49e4cc
pop ecx
rol ebx, 1
add ebx, edi
xor edx, esi
xor edx, 0xdccb3aaa
jmp 0x49dca8
pop ecx
xor edi, edx
xchg edi, esi
dec ebx
xchg ebx, edi
and edx, 0xdccbc86c
xor edx, edi
jmp 0x49d7b4
push 0xdbe6840e
or esi, edx
or esi, edi
or edi, 0xdcccb330
mov edi, esi
not edi
xor edx, esi
mov ebx, 0xdccd1fde
mov esi, ebx
jmp 0x49e243
push 0x401400
nop
shl edx, 1
add ebx, 0xdccd97f6
rol edx, 0xf
add edx, ebx
mov edi, edx
or ebx, 0xdccdfad0
sub esi, edi
jmp 0x49c92d
pop ecx
or edi, esi
sub ebx, edx
xor edx, edi
sub edi, edx
sub ebx, esi
rol ebx, 0x14
and esi, edx
and edx, edi
or esi, 0xdccf0908
ror esi, 2
xchg edx, edi
add edi, esi
jmp 0x49ce20
push 0xdbdd8d2e
rol ebx, 0x12
add ebx, edi
add edi, 0xdcd0eb6e
add edx, edi
ror esi, 7
mov edi, esi
jmp 0x49ed0c
pop ecx
sub edi, esi
add ebx, edi
neg esi
xor esi, edx
sub edx, ebx
not ebx
jmp 0x49dc95
mov ecx, 0x33274000
sub edx, esi
or ebx, edi
jmp 0x49ef08
push 0xdbe7cb32
and ebx, 0xdcd32b68
xor ebx, esi
or edx, 0xdcd35f40
and edi, 0xdcd37c98
shl esi, 0x19
sub edx, ebx
and ebx, esi
dec esi
jmp 0x49c656
push 0xdbdfc990
add edx, ebx
neg edi
sub esi, edi
xchg esi, edx
bswap ebx
bswap edi
jmp 0x49eea3
pop ecx
shr edx, 0x19
rol esi, 8
mov esi, edx
add ebx, 0xdcd7e700
jmp 0x49c730
call fcn.0049ef43
xor edi, edx
and ebx, esi
or edx, 0xdcd9140a
add ebx, edx
neg ebx
bswap edi
and ebx, esi
shr edx, 0x19
jmp 0x49e867
mov ecx, 0x33274000
sub edx, edi
or esi, edi
inc edx
rol ebx, 0xa
add ebx, edi
xor edx, esi
jmp 0x49d09f
pop ecx
sub ebx, edi
and ebx, edx
xchg edi, ebx
xor edx, ebx
or edi, esi
xchg esi, ebx
or edi, esi
sub ebx, edx
jmp 0x49dd83
pop ecx
mov edx, ebx
xor edx, ebx
sub esi, edi
or edx, 0xdcdf81fc
mov ebx, edx
xor edi, ebx
mov esi, edi
xchg edi, edx
sub edx, ebx
ror edi, 3
jmp 0x49e502
call ecx
mov ebx, edi
rol edi, 0x13
xchg edx, esi
inc edi
xchg edi, esi
and ebx, 0xdce0c25e
add ebx, edi
sub ebx, 0xdce0f40a
jmp 0x49ec11
pop ecx
xchg ebx, edx
ror edi, 0x19
add ebx, edx
and edx, 0xdce6c104
xchg edx, esi
add edi, 0xdce6f4de
xor esi, edi
not ebx
add edi, ebx
add esi, edx
jmp 0x49e49f
mov ecx, 0x33274000
xchg edx, esi
mov edi, 0xdcecbf86
or edi, 0xdcecd912
neg edi
neg esi
sub esi, edx
neg ebx
or esi, edi
jmp 0x49e7f3
call fcn.0049ef43
not ebx
or edi, esi
xor edx, esi
sub edi, ebx
bswap edx
xor edi, edx
jmp 0x49ce8b
push 0xdbe6a262
xor esi, edi
sub edx, esi
and ebx, edi
or edx, edi
not ebx
or esi, ebx
sub edi, esi
xor ebx, 0xdcf569a6
rol edi, 0x17
and edi, edx
sub edx, ebx
and ebx, esi
jmp 0x49e126
call ecx
neg ebx
xor edx, 0xdcf6f7fc
and esi, ebx
and edx, esi
and edi, esi
add ebx, edi
xchg esi, edi
add edi, 0xdcf78e0c
mov ebx, 0xdcf7abcc
xchg edi, esi
and ebx, 0xdcf7dfa6
add ebx, edi
jmp 0x49db75
pop ecx
dec edi
or ebx, 0xdcf83c1a
xchg edx, ebx
xchg edx, edi
xchg ebx, esi
bswap esi
mov edx, edi
xor edx, edi
jmp 0x49d137
push 0xdbe7739a
inc ebx
mov edx, esi
xchg esi, edx
sub ebx, edi
ror esi, 0x1f
ror esi, 0x15
rol esi, 0xb
ror edi, 9
add ebx, edx
neg ebx
jmp 0x49cee1
push 0x40
xchg ebx, edx
xor esi, edi
add ebx, edi
neg esi
xor edi, 0xdcfde5d4
xchg edx, esi
jmp 0x49ee1b
pop ecx
xor ebx, esi
mov ebx, edx
xchg esi, edi
or ebx, edx
jmp 0x49d44f
push 0xdbe92e32
sub edx, 0xdd0010a2
not ebx
add edi, ebx
not edi
and ebx, edx
xchg edi, ebx
xor esi, edx
add esi, ebx
xor esi, 0xdd00e02c
neg esi
sub edx, esi
add edx, edi
sub edx, ebx
xchg edi, edx
jmp 0x49cea1
push 0xdbe7acaa
mov esi, ebx
xchg ebx, edx
and edi, ebx
sub edx, esi
jmp 0x49ddc4
mov ecx, 0x33274000
shl esi, 0xb
sub edx, ebx
xchg edi, edx
inc edx
and esi, edx
xchg esi, edx
mov esi, 0xdd03c184
xchg edx, edi
and esi, 0xdd03f55e
add edx, esi
jmp 0x49d06e
call fcn.0049ef43
or edx, esi
sub edi, ebx
rol edi, 0xf
or esi, 0xdd0481f0
xchg ebx, edx
add edx, esi
sub esi, 0xdd04cd90
xchg edi, ebx
neg esi
mov ebx, esi
mov ebx, 0xdd05373c
and ebx, esi
jmp 0x49d65a
pop ecx
sub edx, esi
sub ebx, edi
and ebx, edx
sub edi, edx
shr edx, 0x13
xchg ebx, edx
jmp 0x49da20
pop ecx
rol edx, 0x13
shl ebx, 0x11
not ebx
dec ebx
rol ebx, 0x17
shr ebx, 0x1a
jmp 0x49e2c1
push 0xdbde547f
add edx, esi
mov esi, edx
add edi, ebx
inc esi
ror esi, 0x1b
shl esi, 0xf
and edi, esi
xor ebx, 0xdd09e8d6
jmp 0x49d2f0
push 0xdbdc3744
add esi, edi
nop
xor ebx, esi
mov edi, ebx
add edx, ebx
mov edi, edx
jmp 0x49e80e
pop ecx
or edi, edx
add esi, ebx
not edx
sub esi, 0xdd0c9994
xchg edx, esi
and esi, edi
or edx, ebx
shl ebx, 0x14
ror edi, 0x12
add edi, ebx
jmp 0x49c8d8
push 0xdbe669d1
mov edi, esi
xchg edi, esi
add edx, esi
and edi, ebx
and esi, edx
add edi, edx
xchg edx, ebx
xchg edx, edi
add edi, esi
neg esi
add edx, edi
xor esi, edx
jmp 0x49dcd2
pop ecx
sub edx, esi
or esi, ebx
mov edx, edi
xchg edi, ebx
and edx, edi
shr edx, 0x10
sub esi, ebx
not edi
and edi, 0xdd15a158
add edx, edi
sub edx, ebx
and ebx, esi
jmp 0x49e3b7
push 0xdbe2b7dc
inc esi
xchg edx, esi
inc edi
or ebx, esi
nop
or edx, 0xdd18baea
add esi, 0xdd18d4aa
add ebx, edx
neg ebx
xchg edi, esi
jmp 0x49d6fb
call fcn.0049ef43
inc ebx
xor edx, edi
shl esi, 0x19
add edx, 0xdd1a7512
add esi, edi
not edi
sub ebx, edi
inc esi
jmp 0x49eb46
push 0xdbe8f57c
not esi
or edi, 0xdd1b2692
xchg ebx, edx
mov edx, 0xdd1b5ac4
xchg ebx, edi
and edx, 0xdd1b8e9e
ror esi, 9
sub edx, 0xdd1bc56c
jmp 0x49cf85
call fcn.0049ef43
shr edi, 7
xor ebx, esi
or edx, 0xdd1f297e
add esi, edx
bswap edi
xchg edi, edx
jmp 0x49cfa1
push 0xdbdc5270
add esi, ebx
xor esi, edi
xor ebx, esi
or esi, edx
xor edi, ebx
xchg edi, ebx
not ebx
xor edx, ebx
dec esi
sub edx, esi
jmp 0x49da06
call ecx
mov esi, edx
xchg esi, edx
mov esi, 0xdd228206
or esi, 0xdd229fec
xchg ebx, edx
and ebx, esi
jmp 0x49e6a3
pop ecx
mov edi, esi
or edx, 0xdd24fe3a
add esi, edx
add edi, 0xdd2533f6
add ebx, esi
shl edi, 0x11
xor ebx, esi
not edi
sub ebx, edi
xor edx, 0xdd25d092
sub esi, edx
inc edi
jmp 0x49d7d9
call fcn.0049ef43
and esi, edx
and edx, edi
not esi
and esi, edi
ror ebx, 0x1f
xchg esi, ebx
ror edx, 0x1e
add esi, edx
jmp fcn.0049ed9a
mov ecx, 0x33274000
or esi, edx
xor edx, edi
sub edx, 0xdd323766
xor ebx, esi
sub edx, esi
or esi, ebx
and edi, 0xdd329a76
xchg edx, ebx
jmp 0x49ca77
push 0xdbe4c9c0
mov esi, edi
shr edx, 2
sub esi, ebx
inc esi
and ebx, edx
xchg edx, ebx
ror ebx, 0x15
sub edx, ebx
sub edx, esi
rol ebx, 8
sub edi, ebx
sub ebx, edx
jmp 0x49d687
pop ecx
ror esi, 0x19
or ebx, esi
xchg esi, ebx
not edx
dec edx
or esi, 0xdd34a5de
sub edi, edx
sub ebx, esi
xor ebx, 0xdd34f14a
add edx, esi
jmp 0x49d6bd
push esp
and edx, 0xdd352f56
add edx, ebx
neg edi
add esi, ebx
bswap esi
sub edi, esi
and edi, 0xdd35c90e
or ebx, edi
mov ebx, esi
sub edx, ebx
ror edi, 0xe
or ebx, esi
jmp 0x49e373
call ecx
or edi, ebx
rol edx, 8
xor esi, edx
sub esi, edi
or ebx, esi
add esi, 0xdd38394a
sub esi, 0xdd3852e6
inc esi
ror esi, 0x19
inc edi
jmp 0x49e582
push 0xdbe00082
add ebx, esi
xor edx, ebx
mov ebx, edi
mov edx, 0xdd3a353c
xchg ebx, edi
mov ebx, edx
mov esi, ebx
and esi, edi
jmp 0x49c8c2
call fcn.0049ef43
dec esi
add esi, edx
add ebx, edi
mov edi, edx
and ebx, edx
sub edi, edx
mov edx, esi
ror edx, 7
jmp 0x49cab5
call fcn.0049ef43
add edx, ebx
mov esi, ebx
jmp 0x49dc38
pop ecx
not edi
xor ebx, 0xdd3d6a06
neg ebx
sub ebx, edi
add edx, ebx
or esi, ebx
xor esi, edi
sub edx, esi
or edx, 0xdd3e201a
xchg edi, ebx
jmp 0x49d735
mov ecx, 0x4132136a
or edi, ebx
rol edx, 0xb
ror esi, 4
shr edx, 0xa
or edi, esi
xor edx, esi
shl edx, 0x1b
inc ebx
jmp 0x49e1da
push 0xdbdda858
add esi, edi
xchg edi, esi
dec ebx
mov ebx, edx
xor edx, 0xdd454c48
or edi, edx
jmp 0x49e431
pop ecx
neg edi
and ebx, 0xdd46532e
add ebx, edi
neg esi
neg ebx
and edx, ebx
or edi, 0xdd46d90e
sub ebx, esi
ror edx, 0xd
add esi, edx
jmp 0x49d881
push 0xdbe29920
or esi, ebx
add esi, 0xdd4999d8
jmp 0x49e702
push 0x9b24b
add edx, ebx
xchg ebx, edx
and edi, ebx
sub edx, esi
jmp 0x49dcf3
push 0xdbdfe57e
xchg ebx, edx
ror edi, 6
add ebx, edx
or esi, edx
not esi
shr edi, 7
sub ebx, esi
ror edx, 0xb
sub ebx, 0xdd5160e0
sub esi, 0xdd517a56
jmp 0x49eb95
pop ecx
not esi
or edx, ebx
sub edx, 0xdd51d4be
rol ebx, 0x1b
sub edi, ebx
add ebx, edx
neg ebx
or edi, edx
jmp 0x49e63e
pop ecx
xor ebx, esi
sub edi, esi
bswap ebx
sub edi, ebx
xchg edi, edx
inc edx
or edx, ebx
and edi, ebx
sub esi, 0xdd53510e
xor ebx, edi
add edx, edi
sub edx, ebx
jmp 0x49c8b7
call fcn.0049ef43
or edi, 0xdd53be1c
add edx, esi
sub esi, 0xdd53f794
rol edx, 0x18
jmp 0x49d196