Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetConsoleWindow
cmp eax, 0xffffff19
jne 0x401070
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_SystemFunction029
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_CreateTraceInstanceId
ret
call sub.kernel32.dll_GetConsoleWindow
cmp eax, 0xffffff10
jne 0x401117
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.kernel32.dll_IsBadReadPtr
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_SystemFunction029
call sub.kernel32.dll_IsBadReadPtr
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_LsaICLookupNamesWithCreds
ret
call sub.user32.dll_GetKBCodePage
cmp eax, 0xffffff13
jne 0x4011b9
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_SystemFunction029
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
ret
call sub.kernel32.dll_GetConsoleWindow
cmp eax, 0xffffff27
jne 0x40125b
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_SystemFunction029
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_SystemFunction029
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_SystemFunction029
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_SystemFunction029
call sub.advapi32.dll_CreateTraceInstanceId
call sub.advapi32.dll_CreateTraceInstanceId
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_LsaICLookupNamesWithCreds
call sub.advapi32.dll_SystemFunction029
call sub.kernel32.dll_IsBadReadPtr
call sub.advapi32.dll_CreateTraceInstanceId
call sub.kernel32.dll_IsBadReadPtr
ret
jmp 0x488bd8
add esi, edi
jmp 0x48919e
call fcn.00488bdf
inc ebx
mov esi, edx
add ebx, 0x2977a592
mov esi, edx
and esi, 0x29781e16
add edi, esi
xor esi, edx
add edi, edx
jmp 0x489f7f
push 0x2899b993
rol edi, 0x10
sub esi, ebx
sub edi, edx
xchg edi, ebx
shr esi, 4
jmp fcn.0048bab7
pop ecx
rol ebx, 4
add edx, edi
or edi, 0x298dc857
sub ebx, 0x298e089f
shr edx, 0x19
and ebx, edi
or edi, esi
xor ebx, esi
add ebx, edx
jmp 0x489e91
call ecx
shr ebx, 0xa
sub edx, ebx
add ebx, esi
add ebx, edx
mov esi, 0x299af880
not ebx
xchg esi, ebx
bswap edx
xor edi, 0x299c061c
or edi, edx
xchg ebx, edx
rol edi, 2
jmp 0x48ab3a
call fcn.00488bdf
xchg esi, edx
rol edi, 9
xor edi, esi
inc edx
mov edi, esi
and esi, ebx
xor esi, 0x29b4ef0a
or esi, ebx
or edx, esi
shl edx, 0xf
xchg ebx, edi
or esi, ebx
xchg ebx, edi
sub edi, edx
jmp 0x48b845
mov ecx, 0x2774562b
add ebx, 0x29b9b0ca
add edi, 0x29b9ed01
and edi, edx
xchg esi, ebx
bswap edi
add edx, esi
jmp 0x48b902
push 0x28784b51
bswap esi
xor edi, edx
xor edx, 0x29c8400f
sub ebx, edi
xchg esi, edx
and ebx, 0x29c907f4
xor esi, edx
not esi
inc edx
and ebx, edi
jmp 0x48c0b1
call fcn.00488bdf
inc edx
shr esi, 0x1d
neg ebx
xor edi, esi
xor esi, edi
or edi, ebx
add esi, ebx
or ebx, edi
neg edx
add esi, 0x29d6f4db
shl ebx, 1
jmp 0x48bc63
pop ecx
and ebx, 0x29d789ee
rol esi, 0x19
mov edi, 0x29d805d4
xor edx, 0x29d84336
not esi
and edi, edx
jmp 0x489aed
pop ecx
neg edi
and edi, esi
xchg ebx, edx
and edi, edx
and esi, 0x29da2bdd
mov edi, ebx
and edi, 0x29daa3fa
bswap esi
ror ebx, 5
or edi, ebx
or ebx, edi
jmp 0x48b736
push 0x286dc958
xor edx, edi
mov edx, ebx
shr ebx, 0xa
mov esi, 0x29dcb273
and esi, ebx
and esi, 0x29dd2dc0
mov ebx, esi
xchg edx, edi
jmp 0x48a9af
pop ecx
and ebx, edi
and edi, 0x29de36a4
mov esi, edx
or edi, esi
jmp 0x4894d6
push 0x28710ba5
xor edi, 0x29e1a900
add ebx, edi
neg edx
neg edi
xchg ebx, edi
xor ebx, esi
or ebx, edi
add ebx, esi
add edx, 0x29e39f64
jmp 0x489429
call fcn.00488bdf
sub edi, 0x29e3f835
mov edi, 0x29e436b1
or edi, edx
xor esi, edi
xor edi, 0x29e4fcce
jmp 0x48c113
push 0x288a2903
add edi, ebx
bswap edi
sub edi, 0x29e6b98f
sub esi, 0x29e7077e
mov ebx, edx
shl edi, 0x15
or edi, edx
and ebx, esi
add edi, ebx
xor ebx, 0x29e86fda
xor ebx, edx
jmp 0x48b3a9
mov ecx, 0x4132136a
rol ebx, 0x15
xor edx, ebx
shl ebx, 0xa
and esi, edi
mov edx, 0x29f37bd4
or esi, edx
xchg ebx, edx
neg ebx
xor edi, edx
jmp 0x48aa64
pop ecx
and ebx, esi
shl edx, 0x1e
xor edx, esi
neg ebx
sub edi, 0x29f61d7f
and edx, edi
sub edi, 0x29f6a864
xchg ebx, edi
sub edx, esi
add edi, esi
neg edi
or ebx, edi
jmp 0x48b000
pop ecx
and esi, ebx
mov esi, ebx
shr edi, 0x12
neg edx
mov esi, edi
and edx, 0x29f9678c
and edx, esi
mov ebx, edx
inc ebx
sub edi, edx
shr edi, 0x10
xchg esi, ebx
jmp 0x4891c0
mov ecx, 0x2774562b
add edx, ebx
xor esi, edi
sub ebx, edx
shr esi, 0x1a
xchg esi, edx
or edx, 0x29fc7967
mov esi, edi
xor esi, edx
xchg edx, esi
sub edx, esi
jmp 0x489389
call fcn.00488bdf
neg esi
xchg edx, esi
or esi, 0x29fe6b92
xchg ebx, edi
or edx, ebx
sub ebx, edx
jmp 0x488e10
call fcn.00488bdf
add esi, 0x29ff79ef
bswap ebx
dec ebx
and edx, esi
add edi, edx
xchg edx, esi
shr edi, 0x11
and edx, ebx
sub ebx, edx
and ebx, edx
xor edi, 0x2a01f99b
jmp 0x489bed
push 0x2871648f
not edx
mov esi, edx
xor edi, esi
and edx, esi
add edi, ebx
shr edi, 0x13
jmp 0x489754
push esp
or ebx, esi
and esi, ebx
bswap esi
add esi, ebx
add esi, ebx
add edi, esi
bswap edx
or ebx, edi
or ebx, edi
not esi
xor ebx, edi
jmp 0x489709
mov ecx, 0x2774562b
and esi, edi
add esi, edx
sub edi, ebx
bswap ebx
or edi, edx
sub esi, edx
xor edx, esi
add ebx, 0x2a148471
and edi, esi
jmp 0x48921a
mov ecx, 0x2809144b
xor esi, 0x2a1517c1
and edi, esi
or esi, edx
or esi, edx
sub edx, ebx
shl edx, 0xf
sub edx, esi
or esi, ebx
xor edx, esi
and esi, ebx
and edi, ebx
jmp 0x48aded
pop ecx
and ebx, 0x2a185cb8
xor edx, edi
xor edi, esi
mov ebx, edx
add esi, edi
jmp 0x48b9a8
push 0x287b7b6b
inc esi
or esi, edx
or ebx, edi
mov ebx, 0x2a20037c
bswap esi
xchg edx, edi
not esi
xchg esi, edx
or edi, esi
sub edx, ebx
or ebx, edx
mov edi, edx
sub edx, ebx
jmp 0x48a830
push 0x28955db1
or ebx, 0x2a225722
or esi, 0x2a229090
xchg edi, esi
sub ebx, edx
and edx, 0x2a2346ab
jmp 0x48ae2b
push 0x288b3d95
shl edx, 0x1f
add esi, ebx
xchg esi, ebx
mov edx, ebx
add edi, 0x2a247332
mov ebx, edi
neg ebx
mov edx, esi
mov edx, esi
xchg ebx, edi
and esi, ebx
add ebx, 0x2a260319
mov edi, esi
add edx, 0x2a267159
jmp 0x489491
pop ecx
xchg esi, edx
neg edx
ror esi, 0x10
or esi, 0x2a277b27
add edx, ebx
jmp 0x48aea0
pop ecx
or edx, edi
shl edi, 1
neg edx
add esi, edi
or edx, esi
jmp 0x48915b
push 0x289616f6
or edx, esi
mov edi, esi
or edi, 0x2a330ac9
ror edx, 0x1a
xor edi, ebx
add edx, 0x2a33d1a4
xchg edx, ebx
rol edx, 0x1f
jmp 0x48a42e
push 0x40
xor edx, ebx
add esi, edi
mov edi, esi
neg edi
xchg esi, edi
add edi, edx
bswap ebx
xchg edi, esi
jmp 0x48ada3
push 0x2871eef0
add edx, ebx
mov edi, esi
xchg edi, edx
or edi, 0x2a43f00d
or edi, esi
or esi, edi
mov ebx, edx
rol edi, 0x11
ror edi, 0x15
or edx, 0x2a456637
and edi, esi
jmp 0x4894b1
pop ecx
xor ebx, edi
sub edi, edx
add esi, edx
mov esi, edx
and ebx, esi
shl edi, 0x12
jmp 0x48bbda
mov ecx, 0x2774562b
mov edi, edx
add esi, edx
ror esi, 0x1a
ror esi, 0xc
dec edi
xchg edi, esi
sub edx, esi
sub edx, 0x2a6215be
neg edi
jmp 0x48b926
push 0x2877f18c
sub edi, esi
mov edi, ebx
or esi, 0x2a632530
shr esi, 0xa
xor esi, 0x2a63a35b
and esi, edi
ror edi, 2
add ebx, esi
add ebx, edx
add edx, ebx
mov esi, edi
add edx, esi
jmp 0x48907f
push 0x287ac662
add ebx, edx
mov esi, edx
ror edi, 0x17
xor edx, esi
inc edx
add edi, 0x2a6b05a4
or edi, edx
rol edi, 0x18
xor ebx, 0x2a6bcd25
and ebx, edi
and esi, 0x2a6c4643
and edx, edi
or edx, 0x2a6cbf05
mov ebx, 0x2a6cfd85
jmp 0x48a31c
pop ecx
or esi, edx
and edx, ebx
xchg edx, ebx
and edi, ebx
and esi, 0x2a7aeeac
neg ebx
sub ebx, esi
mov edx, esi
shr edi, 0xa
xchg ebx, edi
add esi, edi
dec edx
xor edx, 0x2a7ce5d4
xor ebx, esi
mov ebx, edx
jmp 0x4898d6
pop ecx
sub esi, edi
not edi
sub edx, esi
or edx, ebx
and edx, esi
xor edi, 0x2a81a41d
mov edi, 0x2a81e2dc
ror edx, 0xc
add edi, ebx
mov esi, edi
sub esi, edx
add edi, edx
jmp 0x48bad7
push 0x28885c6f
rol edx, 0x1d
and ebx, edx
add edx, 0x2a85fbc4
neg edx
sub edx, 0x2a8677dc
or edi, esi
xchg edi, edx
neg ebx
ror edx, 0x1a
and esi, 0x2a87bb45
or edi, esi
jmp 0x48a892
call ecx
mov esi, ebx
xor edx, ebx
mov edi, esi
mov edi, edx
xor edi, 0x2a971f4c
or ebx, edx
add edi, ebx
or edi, edx
dec ebx
jmp 0x48c050
pop ecx
and edx, esi
sub esi, 0x2a9b27f4
sub ebx, 0x2a9b652c
xor edx, ebx
dec ebx
sub edi, 0x2a9c2e33
sub esi, edi
ror edx, 7
shl edi, 0x1d
bswap esi
add esi, 0x2a9d63da
or edx, ebx
jmp 0x489302
call ecx
sub esi, ebx
add edi, ebx
xchg edx, ebx
ror esi, 0x1b
xchg edi, esi
xor edx, ebx
xchg edx, edi
sub ebx, esi
xor edi, 0x2aa0b1fe
jmp 0x489ab1
push 0x2884c7b9
add ebx, edi
xchg edi, esi
and edx, ebx
ror esi, 0xe
jmp 0x48a607
pop ecx
mov edx, ebx
ror ebx, 9
mov edx, ebx
shl edi, 0xd
xchg ebx, edx
dec edx
xor edi, 0x2abf413e
jmp 0x48aee0
call fcn.00488bdf
mov edx, edi
dec edx
sub esi, ebx
or esi, edx
add edi, esi
mov edx, edi
xor edi, 0x2ac50e06
and edx, esi
xor ebx, 0x2ac59b32
xor esi, ebx
or edx, ebx
sub ebx, edx
xchg esi, edx
mov edi, ebx
and esi, ebx
jmp 0x48a2e5
pop ecx
xchg edx, esi
rol edi, 0x1b
xchg esi, ebx
or ebx, 0x2aca48e9
or ebx, edi
xchg esi, edx
not edx
and edi, ebx
add esi, edx
add esi, 0x2acbcc82
xor edx, ebx
or edi, 0x2acc4997
jmp 0x4892e1
call ecx
shr esi, 0xe
ror esi, 0xd
mov esi, 0x2adad6c5
xor ebx, edi
sub edx, ebx
xor edi, edx
sub ebx, edi
or edx, ebx
neg edx
jmp 0x489329
push 0x287dfbea
mov edi, edx
mov edi, esi
and ebx, edi
bswap esi
and esi, 0x2ae2f2a8
and edi, edx
mov esi, edi
xchg ebx, edx
jmp 0x48a11a
call ecx
mov esi, 0x2ae3fecd
add edi, ebx
sub ebx, 0x2ae4772a
and esi, 0x2ae4b68a
add edx, ebx
mov esi, edi
add edx, ebx
jmp 0x48bf0d
push 0x287e563d
xchg esi, ebx
mov ebx, 0x2af90973
mov edx, esi
bswap edx
dec edi
jmp 0x488faf
push 0x287576ff
sub esi, ebx
not edi
shl edx, 1
ror edx, 0xa
xor edi, esi
dec ebx
mov edi, 0x2afcd984
inc edx
xor esi, 0x2afd5862
mov esi, edx
and esi, edx
mov edx, 0x2afe10af
bswap edi
mov ebx, edx
jmp 0x48934c
push 0x288e7918
and edi, esi
not edx
and esi, 0x2b032457
dec esi
and esi, edi
or ebx, 0x2b03e0cf
sub edi, esi
inc ebx
xor esi, ebx
or edx, edi
rol edi, 0xb
mov ebx, edx
xchg edx, edi
and ebx, 0x2b06aa22
mov edi, 0x2b06e917
shr edi, 0x1a
jmp 0x48b690
call ecx
and edi, ebx
xchg edx, edi
and esi, ebx
xchg ebx, edx
or edi, ebx
add edx, edi
add ebx, edx
and edx, 0x2b1e2b0f
ror edx, 8
dec edi
jmp 0x48b868
push 0x287b21eb
inc esi
or edx, 0x2b21e15f
rol edi, 7
or edx, edi
xchg esi, edx
or edx, ebx
nop
sub edi, ebx
xor edi, 0x2b239d8d
rol ebx, 4
jmp 0x48953e
push 0x2880d868
shl edi, 0x17
bswap edi
dec ebx
ror esi, 0x14
dec esi
ror edi, 0x1d
or edx, esi
and ebx, edi
sub esi, edx
bswap esi
and esi, 0x2b26acb8
jmp 0x48aa84
mov ecx, 0x2809144b
rol esi, 0x11
add esi, edx
mov esi, 0x2b3410e9
add ebx, esi
not edx
add ebx, esi
or edi, esi
ror esi, 0x11
sub edi, 0x2b358c8b
sub esi, edx
sub ebx, 0x2b3606c1
add edi, 0x2b3644bd
sub esi, ebx
jmp 0x48936f
pop ecx
dec edi
sub ebx, edi
or ebx, esi
sub esi, 0x2b39d861
sub ebx, edx
xchg ebx, esi
add ebx, esi
xor edx, 0x2b3adb11
xor edx, edi
dec esi
xchg edx, edi
and ebx, edi
jmp 0x48af4e
pop ecx
xor edx, 0x2b433f7d
dec esi
xor edx, edi
neg edi
sub edi, edx
and edx, ebx
xor ebx, 0x2b44ae26
or ebx, edi
or ebx, 0x2b4538fc
inc esi
ror ebx, 0x18
add ebx, edx
jmp 0x489fdc
push 0x28818f31
add edi, ebx
shl ebx, 0x1c
neg ebx
or ebx, esi
or edx, esi
mov edi, ebx
xor edx, edi
neg ebx
not edx
jmp 0x48bfc9
push 0x28995cc9
add edi, esi
xchg ebx, edx
mov esi, 0x2b52e25d
dec ebx
shr esi, 3
or esi, 0x2b538fd0
mov ebx, edi
sub ebx, 0x2b53fd50
add edi, esi
jmp 0x488d1f
push 0x288522d8
and esi, edx
not esi
add edi, ebx
shr ebx, 5
shr edi, 9
sub esi, 0x2b55a041
mov esi, 0x2b55dae8
xchg esi, ebx
and edx, edi
jmp 0x48b443
call fcn.00488bdf
and esi, edx
add edx, edi
xchg edi, ebx
sub edi, edx
xchg edx, ebx
add esi, 0x2b5c134a
or ebx, 0x2b5c5cce
not ebx
mov edi, esi
jmp 0x48b0c5
call fcn.00488bdf
sub ebx, edx
sub ebx, 0x2b5ff5b6
rol edi, 0xf
ror edx, 0x1d
add edx, ebx
sub edx, ebx
and edi, edx
sub ebx, edx
sub edi, ebx
dec edx
or esi, edx
mov edx, 0x2b62337d
sub edi, 0x2b626c58
jmp 0x48b8d6
mov ecx, 0x2809144b
bswap edi
or ebx, esi
bswap edx
xchg ebx, edi
xchg edx, ebx
neg esi
xchg esi, ebx
inc ebx
and edx, 0x2b713707
jmp 0x48a66a
pop ecx
xor esi, 0x2b765b36
and ebx, edi
and edi, edx
nop
mov edx, edi
add edi, esi
xchg ebx, esi
neg ebx
shl ebx, 0x12
and edi, esi
sub ebx, 0x2b796dab
jmp 0x48be6f
mov ecx, 0x2809144b
neg edx
sub edi, 0x2b7a046c
shr ebx, 0xb
xchg esi, edx
neg edi
xor edi, ebx
xchg edi, esi
not esi
xor ebx, edi
neg edi
shr ebx, 0x16
jmp 0x489e43
mov ecx, 0x2774562b
and edi, esi
nop
or ebx, esi
add ebx, edx
or edi, ebx
add edi, edx
sub edx, 0x2b82c803
add edi, esi
and edi, edx
jmp 0x488f60
push 0x288ae186
mov ebx, 0x2b86e40e
mov edx, esi
mov edi, ebx
xor ebx, esi
add ebx, 0x2b87e3f5
or edi, esi
not edi
and ebx, edx
jmp 0x489584
push 0x286e30c0
and ebx, edi
bswap edi
ror edx, 6
and edi, esi
ror edi, 0xd
mov esi, ebx
add ebx, edx
neg ebx
xor edi, edx
add ebx, edi
sub edi, 0x2d6a90c9
and edi, 0x2d6acff3
jmp 0x4898e9
push 0x401400
sub edi, esi
rol edx, 0xe
xchg ebx, edx
mov edx, ebx
sub esi, edi
or esi, 0x2d750713
or esi, 0x2d754679
xchg esi, ebx
mov edx, edi
mov edx, edi
jmp 0x48be41
call fcn.00488bdf
or edi, esi
mov esi, edi
add esi, 0x2d76d26a
and edi, edx
xchg edx, ebx
bswap esi
mov ebx, esi
sub ebx, esi
and edi, edx
jmp 0x48b33e
push 0x28813349
or esi, edi
xchg esi, edx
add ebx, 0x2d793c7f
add ebx, edx
sub edx, ebx
jmp 0x48a58a
pop ecx
ror edx, 0xb
add edx, 0x2d86e2b6
xor ebx, 0x2d872130
bswap ebx
mov edi, 0x2d87b18a
and edi, esi
or ebx, edi
xor ebx, esi
add edx, esi
jmp 0x48b28c
pop ecx
inc edx
sub edi, edx
mov esi, 0x2da15722
not edi
and ebx, edx
or edx, esi
mov edx, 0x2da24fe3
sub esi, 0x2da28eec
sub esi, ebx
mov ebx, esi
add ebx, edx
xchg edi, esi
and edx, 0x2da3d0fc
dec edx
shr ebx, 3
jmp 0x48924b
push 0x877d8
xchg edi, edx
xor edx, 0x2db2af0b
inc edi
mov edx, 0x2db33fb9
ror edi, 0x1e
shr edx, 0x1f
sub edx, 0x2db3fea2
jmp 0x48aa3d
call fcn.00488bdf
xor edx, 0x2db741e3
add edi, edx
sub esi, edx
inc esi
xor edx, edi
sub edi, 0x2db878d2
and esi, ebx
shl esi, 9
rol edi, 0x1f
jmp 0x489c54
pop ecx
neg esi
add ebx, esi
sub edx, edi
sub edi, edx
ror ebx, 0x15
jmp 0x48ba17
push 0x2895b9c2
mov edx, edi
sub ebx, edi
xchg edx, esi
or edi, esi
inc edx
shr edi, 0x1a
shl edi, 0x1d
xor edi, ebx
bswap edi
xor esi, 0x2dbd4e93
jmp 0x489660
pop ecx
bswap edx
xor esi, edx
not edx
or edi, edx
sub edx, esi
or edx, 0x2dc5d4ca
mov ebx, edx
jmp 0x48ae1a
pop ecx
not edx
and edx, esi
and edi, ebx
mov esi, edx
mov edi, ebx
add edi, edx
ror edi, 0x1c
add esi, ebx
neg esi
xor esi, 0x2dcb7afd
add ebx, edi
xor ebx, edi
shl esi, 5
xor esi, edx
and ebx, edi
jmp 0x48964f
push 0x28751cbd
add edx, 0x2dd1f217
bswap edx
mov ebx, 0x2dd283d6
add ebx, 0x2dd2c2a0
xchg ebx, edi
xchg edx, esi
xchg ebx, edx
ror edi, 0x14
jmp 0x48a142
pop ecx
xor edx, 0x2dd419ba
and esi, edi
inc edx
or edx, esi
ror ebx, 6
nop
sub ebx, 0x2dd5a20b
mov edi, ebx
jmp 0x488d5e
pop ecx
and edi, ebx
shl ebx, 0x13
mov edx, ebx
mov edx, edi
add ebx, edx
or edi, edx
sub edx, esi
dec ebx
sub edi, 0x2de0f985
add edx, edi
shr edx, 0x18
and edi, edx
sub esi, edx
add edx, 0x2de22d9e
jmp 0x48a5e0
call ecx
mov edi, esi
xchg esi, ebx
and ebx, 0x2dec43dc
jmp 0x489a53
call ecx
shr ebx, 4
xor ebx, 0x2decdeca
sub esi, edi
and edx, edi
and esi, edi
mov ebx, 0x2dedd47a
ror edi, 0x13
or ebx, edx
shl edx, 0x1a
jmp 0x489df4
push 0x28846beb
and esi, edx
and ebx, edi
and edx, 0x2dfbfadf
xor ebx, edi
mov edx, esi
and edx, 0x2dfcaf1e
shl esi, 0x17
and ebx, 0x2dfd21bf
jmp 0x489d31
pop ecx
sub esi, edx
neg esi
mov edx, esi
inc esi
bswap esi
and esi, ebx
mov ebx, edx
and edx, 0x2e012b3f
add edx, esi
jmp 0x489179
push 0x28807d02
sub edx, esi
mov edi, 0x2e076ad8
and edx, edi
or edx, edi
xor edi, ebx
mov esi, ebx
or ebx, 0x2e087eb4
bswap esi
or esi, edx
xchg edx, edi
rol ebx, 6
and edi, edx
jmp 0x48a342
pop ecx
xor edi, 0x2e0b0351
xchg esi, edx
add ebx, 0x2e0b7344
not ebx
or ebx, edi
xchg ebx, edx
and esi, edx
sub edx, edi
mov ebx, edi
add edi, edx
jmp 0x489c25
pop ecx
mov edi, esi
sub edi, 0x2e108de4
and edi, 0x2e10c562
xor edx, edi
shl edi, 0x1a
xor edx, ebx
not edx
and esi, 0x2e11eecf
shl edx, 0x15
mov edi, edx
and edi, esi
or edx, ebx
not edi
jmp 0x48a506
pop ecx
mov esi, edi
add edx, esi
add edx, 0x2e13bc74
shl edx, 0xa
mov edi, ebx
bswap edx
mov edi, edx
xchg edx, ebx
or edi, edx
mov edx, ebx
add ebx, edx
xor esi, edx
add edi, ebx
jmp 0x48a488
push esp
inc esi
xor edx, edi
not edi
ror ebx, 9
sub edx, esi
shl ebx, 0x18
and edx, edi
sub esi, edx
jmp 0x489457
push 0x288e1d1b
inc ebx
inc esi
and esi, edi
shl esi, 5
and edi, ebx
inc edi
mov esi, edi
xor ebx, edi
jmp 0x48a1a3
push 0x288a8582
mov edi, 0x2e1fbb2f
and esi, ebx
inc ebx
or ebx, edx
mov edi, esi
xor edi, esi
sub esi, 0x2e211576
xchg edi, esi
xor ebx, 0x2e218623
xchg edi, esi
jmp 0x48a8d8
pop ecx
xor ebx, edi
and ebx, edx
bswap ebx
xor esi, edx
not esi
add esi, edx
xor edi, 0x2e268453
sub edx, ebx
jmp 0x48c08f
push 0x28857e8c
neg esi
sub esi, 0x2e2a09e5
or ebx, 0x2e2a42a3
bswap ebx
bswap edx
add esi, 0x2e2aedee
sub ebx, edi
add edx, ebx
rol ebx, 0x1e
mov esi, edx
ror edi, 9
shr edi, 6
jmp 0x48a7a7
push 0x289500f7
shr edx, 0xa
bswap edi
inc edi
shr edi, 0x1f
xchg edi, edx
dec esi
sub esi, edx
sub esi, edx
jmp 0x489564
push 0x288ed612
xchg ebx, esi
or esi, edx
xchg esi, edi
jmp 0x48b9e1
pop ecx
sub ebx, esi
sub edi, esi
and edx, 0x2e5e365f
add edx, edi
add ebx, edi
neg edx
xchg esi, edi
xor ebx, esi
xor edx, esi
bswap edi
xor esi, ebx
and edi, 0x2e6068a7
inc edx
not esi
jmp 0x489965
call ecx
mov ebx, esi
and ebx, 0x2e72241c
or edx, esi
add edi, ebx
and esi, edi
shl edi, 0x1c
rol edi, 0xc
neg edx
add edi, edx
add ebx, edi
mov esi, ebx
jmp 0x48acb2
pop ecx
xor ebx, esi
or ebx, edx
inc ebx
rol ebx, 0x1a
mov esi, edx
or edx, esi
add ebx, 0x2e75bcb1
and edi, 0x2e760303
xor ebx, edi
shr esi, 2
sub esi, 0x2e76acae
jmp 0x48b2d3
pop ecx
or ebx, 0x2e76f977
xor edx, 0x2e7732ab
or ebx, 0x2e77790b
xchg edi, ebx
jmp 0x48b301
call ecx
add ebx, 0x2e7ac4ba
xor edx, ebx
neg ebx
sub edi, esi
xor edx, esi
not edx
not esi
sub ebx, 0x2e7d64e3
shr edi, 0x16
rol ebx, 0x1e
and ebx, esi
mov ebx, edi
dec edi
sub ebx, esi
jmp 0x48af74
call fcn.00488bdf
inc edi
neg edi
shl esi, 0xb
sub edi, esi
or edi, edx
xchg edx, ebx
inc edx
and ebx, edi
add edx, edi
or edx, esi
ror edx, 8
and esi, edx
and esi, edx
jmp 0x489ffa
call fcn.00488bdf
shl edx, 0x14
add esi, edx
add esi, ebx
add edi, esi
or edi, edx
shr edx, 0x19
mov edi, edx
and ebx, edx
jmp 0x48b0b4
pop ecx
add edi, esi
add edi, edx
and ebx, esi
xor edi, 0x2e8d8016
add esi, edi
shl ebx, 0x16
and esi, 0x2e8e36ca
and edx, edi
jmp 0x48b18f
mov ecx, 0x2809144b
rol edx, 0x15
add edi, edx
shr edx, 7
or esi, edi
add esi, edx
rol edi, 0x15
jmp 0x48a6b8
pop ecx
xor esi, edx
not edi
mov esi, ebx
mov edi, edx
dec esi
sub edi, esi
xor edx, esi
or edi, 0x2e962438
shl ebx, 9
add ebx, edx
jmp 0x48b355
pop ecx
and edi, ebx
inc edi
sub edx, esi
xor edx, esi
add edx, edi
xor ebx, edi
add ebx, 0x2ea588d3
jmp 0x48b891
push 0x2870566e
nop
sub esi, edx
or esi, edi
not ebx
sub esi, edx
or esi, edi
jmp 0x48bff7
call ecx
and edx, 0x2ec0ef3c
dec edi
mov esi, edx
mov edx, 0x2ec1b423
shl edx, 8
or ebx, edx
jmp 0x48b1e3
call ecx
xchg esi, edx
xor esi, 0x2ee15114
sub esi, edi
and edi, 0x2ee1c1a8
neg esi
and ebx, edx
xchg esi, ebx
add edi, esi
mov ebx, edi
shl ebx, 6
add edi, ebx
add edi, 0x2ee38c88
add edx, esi
jmp 0x48a80c
push 0x2894a470
mov edi, 0x2ee4cb14
xor ebx, edx
and edx, edi
add ebx, edx
shr edi, 0x14
add edx, 0x2ee5fa33
xchg edx, edi
shl esi, 0x11
sub esi, edx
jmp 0x48b582
pop ecx
xchg edx, ebx
rol edi, 0x13
dec ebx
or edx, ebx
and edx, 0x2ef181e8
xor ebx, 0x2ef1bfb0
xor ebx, 0x2ef20c11
inc edx
jmp 0x48bf99
pop ecx
inc esi
add edx, 0x2efab3ab
xor esi, 0x2efaf071
rol esi, 6
mov ebx, esi
add edi, ebx
shr edx, 0x10
dec edi
add esi, edx
and ebx, 0x2efca654
mov edx, edi
add esi, edi
and edi, 0x2efd59a9
jmp 0x48b24f
mov ecx, 0x2774562b
and ebx, 0x2efdaefe
sub esi, 0x2efdeb0b
not edx
add edx, ebx
mov esi, 0x2efeb288
ror edi, 0x1f
or esi, edi
xor esi, edx
xor esi, edx
and edx, 0x2effe1f9
jmp 0x488c36
push 0x2870b06e
mov edx, ebx
xor ebx, edx
inc esi
jmp 0x4891f6
pop ecx
or edi, esi
add ebx, 0x2f065b2f
and esi, edx
or esi, ebx
xchg ebx, edx
xor ebx, 0x2f074cdc
and ebx, edx
mov esi, edi
xor edx, ebx
sub edx, esi
jmp 0x48b401
push 0x28779669
xor esi, 0x2f0b6375
or esi, edx
mov edx, esi
add ebx, edi
mov esi, edi
sub esi, 0x2f0c8b61
xchg esi, edi
mov ebx, edx
jmp 0x48990a
mov ecx, 0x2774562b
bswap esi
ror edi, 0x1d
and esi, ebx
add ebx, esi
and edi, edx
not edi
add edi, ebx
jmp 0x489136
call ecx
or ebx, esi
sub edx, ebx
neg edx
rol esi, 8
dec edx
not esi
and edi, esi
sub edx, edi
and edx, 0x2f16bd32
and ebx, 0x2f16fa7d
jmp 0x4895b7