Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xfffffeee
jne 0x40109d
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff2c
jne 0x401108
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff1a
jne 0x40117d
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff0a
jne 0x4011de
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff20
jne 0x401271
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_LdrGetDllHandle
call sub.ntdll.dll_NtTraceEvent
call sub.ntdll.dll_NtTraceEvent
ret
jmp 0x5009c1
mov ecx, 0x14143cb4
sub edi, esi
not ecx
add esi, edi
or edx, edi
jmp 0x5021fe
push 0x141a9cac
shr edx, 9
mov esi, edx
and edx, 0x14893da2
and edi, 0x1489588a
xchg esi, ecx
add esi, edi
add edx, 0x1489ba9c
shl edi, 0xa
jmp 0x5024b9
call fcn.00503184
and ecx, edx
shr edx, 0x1f
not edx
xchg esi, ecx
bswap edx
rol edx, 0xa
sub ecx, edx
and edi, 0x1492ac98
sub esi, edx
or esi, ecx
jmp 0x5031f6
pop ebx
add esi, edx
xchg edx, ecx
mov edi, edx
and ecx, 0x149376c4
jmp 0x501f72
push 0x14184e8a
sub ecx, edx
inc esi
mov edi, esi
and edi, 0x1493ee04
mov edi, edx
xor esi, edx
mov esi, edi
and edi, 0x149472b8
shl edi, 0xe
mov edx, esi
jmp 0x503091
call ebx
xchg esi, edi
xchg edi, edx
and esi, 0x14951fae
xchg ecx, esi
or esi, 0x1495601a
mov ecx, esi
inc edi
dec ecx
shr edx, 0x1d
add edx, ecx
mov edi, edx
inc edx
sub ecx, edi
or edx, esi
jmp 0x503440
push 0x401400
bswap esi
or edx, 0x14a547d4
inc ecx
rol esi, 0xa
jmp 0x502ab6
pop ebx
sub esi, edx
xor ecx, edx
shr esi, 0xd
shl edx, 0x13
dec edi
xor edi, esi
add esi, edx
shr esi, 0x1b
shr ecx, 5
xor esi, 0x14a912be
dec ecx
and esi, edx
jmp 0x5012e6
push 0x14169782
sub edi, edx
or esi, ecx
or ecx, esi
xchg esi, edx
add edx, 0x14b5268a
or edx, 0x14b54b94
jmp 0x502091
pop ebx
and ecx, edx
neg edi
xor esi, edi
xchg esi, edi
shl edx, 0x1b
add esi, edx
jmp 0x502a04
push 0x141f2ca2
add esi, 0x14ba64b2
xor edi, ecx
mov edi, esi
xchg ecx, edx
jmp 0x501f3d
mov ebx, 0x3f4d7907
xchg edi, ecx
add edi, 0x14bb0e08
shr edx, 0xf
sub edx, 0x14bb4efc
sub ecx, esi
not edx
sub ecx, 0x14bbb112
add edx, ecx
shr edx, 0x1f
xchg edi, esi
dec edi
inc edx
jmp 0x5011b4
pop ebx
xchg ecx, edx
and esi, 0x14bc9ff8
mov edx, esi
mov ecx, esi
jmp 0x50314f
push 0x14212e18
mov ecx, 0x14be8fce
or edi, esi
or ecx, 0x14becd70
and edx, ecx
or esi, 0x14bf0afa
xor ecx, edi
jmp 0x5014ab
push 0xff5c1
not ecx
mov esi, edx
shl edi, 0x13
rol edi, 5
jmp 0x500d42
pop ebx
add edx, esi
xor ecx, 0x14c41e56
shr ecx, 2
sub edx, ecx
xchg edx, esi
or edx, esi
jmp 0x5030b0
push 0x141e391c
or ecx, esi
and ecx, edx
not ecx
add edi, esi
jmp 0x501532
push 0x141992b0
and edx, esi
sub ecx, esi
rol edi, 0x1a
sub edi, edx
xchg edi, edx
mov edi, ecx
mov esi, 0x14c63a22
xchg esi, edx
jmp 0x50239d
pop ebx
not esi
xor esi, ecx
xor edx, esi
and edi, ecx
xor edi, ecx
and edi, esi
jmp 0x502da1
pop ebx
shr esi, 5
xchg ecx, edx
bswap esi
ror ecx, 0x19
mov edx, edi
xchg edx, esi
or esi, edx
mov ecx, edi
bswap ecx
ror edx, 0xa
jmp 0x501fa7
call fcn.00503184
xor ecx, edx
neg esi
sub edx, 0x14cc2b74
add ecx, edx
ror edi, 1
sub ecx, edx
jmp 0x502b58
call fcn.00503184
mov ecx, edi
xchg esi, edx
not esi
add edx, ecx
jmp 0x502702
push 0x14225f16
not esi
inc esi
sub edx, esi
sub edi, 0x14cf4bce
and esi, edx
add edx, 0x14cf7e72
xchg esi, edx
or edx, ecx
and ecx, edi
sub edi, ecx
add edi, edx
xor edi, 0x14d01c70
jmp 0x50151b
pop ebx
nop
sub edi, 0x14d6fefa
mov edi, edx
add esi, ecx
shl ecx, 0xd
xchg esi, edi
mov edi, esi
and esi, 0x14d79da8
jmp 0x5023eb
mov ebx, 0x3f4d7907
sub esi, 0x14da1e70
dec edi
mov edx, esi
xchg ecx, esi
and edx, ecx
add ecx, edx
jmp 0x500b2d
pop ebx
and ecx, 0x14dbb47e
dec ecx
or edx, 0x14dbf896
sub esi, ecx
mov esi, ecx
mov ecx, esi
or ecx, edx
nop
and edi, 0x14dcbfce
add edx, 0x14dcdf3e
jmp 0x502a44
call fcn.00503184
and ecx, esi
inc edi
add ecx, edi
add edi, ecx
sub edi, esi
mov ecx, edx
xor edi, esi
add edx, ecx
jmp 0x500b89
call fcn.00503184
or edi, edx
shr ecx, 5
xchg ecx, esi
or ecx, 0x14de7d8e
and ecx, edx
xchg edx, ecx
and edx, edi
or esi, ecx
xchg edx, esi
sub esi, 0x14df1b0a
or edx, esi
mov ecx, edx
jmp 0x50355c
push 0x14214d70
add esi, edx
xor esi, ecx
add edx, ecx
add edi, edx
jmp 0x50134b
push 0x14227e4e
and edx, ecx
add ecx, edx
or ecx, esi
add ecx, edi
shr edi, 0xc
mov ecx, edx
jmp 0x501892
push 0x141e572c
and edi, 0x14e8eca8
inc edi
jmp 0x5028c1
pop ebx
sub edi, edx
sub esi, edi
xor esi, ecx
rol esi, 0xc
or esi, edi
xor edi, 0x14ecf1a8
shl esi, 0x1e
add ecx, 0x14ed2b66
sub esi, 0x14ed4618
or edx, esi
jmp 0x501d17
call fcn.00503184
and edx, ecx
rol edx, 0xb
and edx, 0x14eefe9e
xchg edx, ecx
or esi, edi
xor edi, ecx
mov edx, ecx
inc edi
add edx, edi
and ecx, esi
jmp 0x50164a
call ebx
add esi, edi
or edi, ecx
and edx, esi
or edx, edi
mov edi, 0x14f16022
add edx, ecx
or edi, 0x14f194f2
mov edi, ecx
add esi, edx
sub ecx, esi
jmp 0x5035cf
push 0x40
xor edi, edx
add esi, edx
mov esi, edi
sub edi, esi
xor edi, ecx
sub edi, edx
shl esi, 0x10
bswap ecx
xchg edi, edx
nop
jmp 0x501035
push 0x14195728
xor ecx, 0x14f95286
xchg ecx, edx
sub esi, edi
shl ecx, 0xf
neg edx
mov esi, edi
mov ecx, esi
dec edx
jmp 0x5036a0
push 0x1418302c
sub edx, esi
sub esi, ecx
xor edx, esi
add edi, ecx
jmp 0x500b63
push 0x142110be
inc esi
or ecx, esi
inc edi
xchg esi, edx
and ecx, esi
mov edx, edi
xchg edx, esi
xor edi, edx
xor esi, edi
or esi, edi
jmp 0x500fea
mov ebx, 0x3f4d7907
xor ecx, edx
shr ecx, 0x11
bswap edx
xchg ecx, edi
mov edx, esi
xchg ecx, esi
xor edi, ecx
xor esi, edx
jmp 0x502c7b
pop ebx
shl edi, 0xf
or ecx, esi
and esi, edx
and esi, ecx
dec edx
xor edx, 0x1503c706
inc ecx
or esi, edi
xor edx, ecx
xor ecx, esi
jmp 0x502fb7
call fcn.00503184
mov esi, edx
nop
not edi
mov esi, edx
or edx, esi
mov ecx, edx
jmp 0x502a9f
push 0x141f0ebd
and edi, esi
shr edi, 4
nop
mov ecx, 0x15094778
inc edx
and ecx, edx
xchg edx, ecx
neg edi
jmp 0x500f71
push 0x141bfd5c
add esi, ecx
or esi, edx
and ecx, edi
inc ecx
bswap esi
xor esi, edx
jmp 0x5030f7
pop ebx
add edi, ecx
mov edi, ecx
add edx, ecx
xor ecx, 0x150dc33e
or esi, 0x150de24c
sub ecx, edi
and ecx, edx
sub edx, 0x150e3eac
jmp 0x500b51
call ebx
sub ecx, 0x15136b18
ror edi, 0x16
bswap ecx
bswap ecx
jmp 0x500d93
call fcn.00503184
or edx, 0x15204fc4
add edi, 0x15206f34
xor edi, ecx
sub edx, 0x1520b08e
shr ecx, 0x1f
add edi, ecx
xchg edx, ecx
neg edi
or ecx, edx
sub edx, esi
and esi, 0x1521a2e2
inc edx
jmp 0x50330d
call ebx
bswap ecx
sub ecx, esi
mov edx, 0x1523ae5a
shl esi, 7
xor ecx, edx
inc ecx
mov edi, 0x15243540
shr edi, 8
add esi, 0x1524827c
shr edx, 6
and edi, ecx
dec esi
jmp 0x502d80
pop ebx
or ecx, esi
add edi, 0x15265a54
bswap ecx
add ecx, edx
rol ecx, 0x1c
add edi, 0x1526da76
or edi, ecx
sub esi, edx
xchg ecx, edx
add edi, 0x152753ec
mov ecx, esi
or edi, ecx
jmp 0x502cde
mov ebx, 0x4132136a
and esi, ecx
xor edi, 0x1527d682
and ecx, edi
xor ecx, esi
mov edx, ecx
and esi, edi
shl edx, 0xd
add ecx, edi
or ecx, esi
and edi, edx
jmp 0x501180
call fcn.00503184
dec edx
mov ecx, 0x1529198c
xchg edi, ecx
and edi, ecx
rol edi, 0x1f
xchg esi, edi
or edi, ecx
or esi, edx
jmp 0x50213e
mov ebx, 0x3f4d7907
not esi
add ecx, 0x152a20d6
and edx, 0x152a3f0a
or edi, ecx
rol esi, 0x1d
sub edi, edx
jmp 0x502784
pop ebx
add edx, ecx
mov edi, ecx
sub edx, 0x15348516
mov edi, edx
or edi, ecx
xchg ecx, edx
sub edx, edi
xor edi, esi
jmp 0x50110c
push 0x141ad6b6
or esi, ecx
or edi, 0x1537c632
mov edx, 0x1537e56a
and ecx, esi
xchg ecx, edi
xor edi, esi
sub edi, ecx
sub edi, ecx
jmp 0x5024ec
push 0x141f4a72
xor ecx, esi
inc edi
sub edx, esi
xchg edi, ecx
mov esi, ecx
or esi, edi
xchg esi, edi
mov ecx, edi
jmp 0x502660
pop ebx
add edx, esi
mov ecx, 0x153d727c
add ecx, edi
neg edi
sub ecx, esi
or edi, edx
ror esi, 1
bswap edx
mov ecx, esi
or edi, 0x153e6a6c
jmp 0x501764
pop ebx
shr ecx, 0x19
add edi, edx
ror ecx, 0xe
inc edx
and edi, esi
sub edi, 0x153fc534
jmp 0x5020a6
pop ebx
add edx, ecx
xchg esi, edi
shl edx, 0x14
add esi, edx
add edx, ecx
and edi, 0x15439446
xor esi, edi
sub edi, 0x1543d19a
jmp 0x502829
push 0x1416b456
and ecx, edi
add edx, 0x1547c9fa
or esi, ecx
dec edx
jmp 0x5035b2
pop ebx
or edx, ecx
mov ecx, esi
mov edx, ecx
dec esi
xor edi, esi
xor edi, esi
and edx, edi
sub esi, 0x15490ac2
jmp 0x502347
call ebx
not edi
xor ecx, edx
sub edx, ecx
or edi, ecx
not ecx
shl edi, 0xc
jmp 0x501cec
push 0x141c3816
or ecx, edi
add edi, esi
xchg edx, ecx
or edi, edx
rol esi, 0xe
add ecx, esi
or ecx, 0x15503ae2
sub edi, esi
jmp 0x502894
pop ebx
shr esi, 0x1f
and ecx, edx
mov ecx, 0x155296cc
add ecx, 0x1552bada
xor esi, ecx
xor esi, edx
jmp 0x5010b9
push 0x14165882
xchg edi, ecx
and esi, edx
and edx, esi
xor ecx, edx
mov edi, 0x15539a74
bswap esi
and esi, 0x1553da70
or esi, ecx
and edx, ecx
add edi, edx
jmp 0x502b08
mov ebx, 0x3f4d7907
inc esi
sub edx, ecx
xor edx, 0x155a5dd2
and esi, ecx
xchg ecx, edx
shl edx, 1
mov edi, 0x155ad6ba
or esi, edx
jmp 0x501d3a
push 0x142355e6
xor edx, ecx
rol edx, 6
bswap edi
add edx, 0x155e3b9a
sub edx, esi
or edi, esi
jmp 0x502b26
pop ebx
sub esi, edi
xor edi, ecx
sub esi, 0x155fe688
mov edx, ecx
mov edi, esi
xor edi, esi
sub edi, ecx
add ecx, edi
dec edx
xchg ecx, edi
jmp 0x50199b
mov ebx, 0x3f4d7907
or ecx, edi
or ecx, edi
sub esi, 0x1561263c
sub ecx, edi
or edi, esi
xchg edi, esi
mov edx, edi
inc esi
jmp 0x5015fc
pop ebx
nop
mov edx, 0x1563e5cc
mov esi, 0x1564039c
bswap edx
sub esi, ecx
sub edx, ecx
sub edi, edx
or edi, edx
and edi, 0x1564bd88
sub edi, edx
jmp 0x5015ad
push 0x1417f644
not edx
sub edi, edx
xchg ecx, esi
mov esi, ecx
and edi, esi
and esi, ecx
mov edi, esi
and edx, edi
jmp 0x5034b8
pop ebx
xor ecx, edx
mov edi, edx
jmp 0x502c36
push 0x141ab9e2
add ecx, edx
shr esi, 0x13
shr edi, 0xb
mov ecx, esi
jmp 0x501ec5
mov ebx, 0x3f4d7907
xor edx, edi
add ecx, esi
sub edi, edx
shr edi, 0xf
and ecx, esi
sub edi, edx
sub edi, 0x156d57ea
xor edx, esi
jmp 0x5028d6
push 0x141f68fa
rol edx, 0x16
or esi, 0x157ab34a
or edi, edx
sub esi, edi
not edx
shr ecx, 0x15
xchg ecx, edx
sub ecx, esi
jmp 0x501d57
call ebx
mov edx, 0x15806156
xchg esi, ecx
mov esi, 0x1580a2ae
bswap edx
add ecx, edx
and esi, ecx
jmp 0x502eed
push esp
sub edx, ecx
neg esi
xor edx, ecx
xor edx, esi
add edi, esi
sub edi, esi
jmp 0x501694
call fcn.00503184
and edx, ecx
xchg ecx, esi
not ecx
sub edi, ecx
or ecx, esi
add esi, edx
and ecx, edi
add esi, 0x15859c3e
xchg ecx, esi
and ecx, edi
add edi, edx
and edx, edi
jmp 0x503019
push 0x141a61c8
mov edx, edi
and ecx, 0x1589e03e
xor edi, edx
xor edx, 0x158a1ea4
inc esi
xor esi, ecx
rol ecx, 0x1d
xor esi, edx
jmp 0x5034d5
push 0x141be0fe
shr esi, 0x15
add esi, ecx
add edx, ecx
xor ecx, edx
xchg esi, edx
or ecx, edx
add edi, edx
add ecx, esi
add esi, 0x158bbd8e
mov edi, esi
or edx, esi
and edi, esi
jmp 0x5019b7
mov ebx, 0x3f4d7907
or ecx, 0x158ea3bc
ror edx, 4
shr edi, 9
inc esi
jmp 0x5032b3
mov ebx, 0x3f4d7907
xchg edx, ecx
dec edx
mov ecx, esi
bswap edx
sub edx, ecx
sub ecx, edx
jmp 0x501912
call fcn.00503184
mov edi, esi
sub edi, 0x1590d822
add ecx, esi
mov esi, edx
and ecx, edi
mov esi, 0x15915158
jmp 0x501ca1
pop ebx
or esi, edx
xchg esi, ecx
and ecx, edi
xchg ecx, edx
or ecx, edi
xor esi, 0x15959ec0
and esi, edx
shr esi, 0x17
jmp 0x502b41
pop ebx
add edi, esi
sub edi, esi
jmp fcn.00501233
push 0x1422413b
mov edi, esi
ror ecx, 0xe
or edi, 0x159b85c4
sub esi, 0x159ba87e
and ecx, 0x159bc760
sub esi, edx
jmp 0x5011e4
pop ebx
add edx, ecx
inc esi
add ecx, esi
not edx
or edi, esi
and esi, 0x159da610
sub edi, ecx
xor edi, edx
xor edx, edi
mov edi, ecx
and edx, ecx
xor ecx, edi
jmp 0x50243c
call ebx
not ecx
xor esi, ecx
xchg esi, ecx
or esi, 0x15a0f164
sub ecx, edi
bswap esi
jmp 0x503367
call ebx
sub esi, edi
xchg ecx, edi
xchg edx, edi
and esi, ecx
and ecx, esi
neg esi
xor edx, ecx
sub edi, esi
jmp 0x5021e4
push 0x14240d18
ror edx, 5
sub edi, edx
not edi
xchg ecx, esi
ror edi, 0xc
and edx, ecx
mov edi, 0x15a3229e
neg ecx
jmp 0x502ebc
push 0x14167aa2
or ecx, edx
or esi, ecx
xor esi, ecx
xchg edx, esi
mov ecx, edx
and esi, ecx
sub ecx, edx
or edi, ecx
sub esi, edx
or edx, edi
jmp 0x500ed5
mov ebx, 0x3f4d7907
neg esi
and esi, edx
shr esi, 0xf
add edi, esi
mov edx, edi
mov ecx, edx
xor esi, edi
add edx, ecx
jmp 0x5013a4
pop ebx
or esi, edx
xor edi, 0x15a68022
ror ecx, 0xa
bswap ecx
mov edi, esi
and edx, esi
jmp 0x500f10
push esp
xor edi, esi
xchg edx, ecx
ror edx, 0xf
mov ecx, 0x15a78624
xor ecx, edi
add edi, ecx
and edx, 0x15a7e058
sub esi, edx
mov ecx, edi
sub ecx, 0x15a83d32
sub ecx, edx
and edx, ecx
xchg edx, ecx
or ecx, 0x15a8b20c
jmp 0x502753
pop ebx
sub edi, ecx
and ecx, 0x15a8fbb0
sub esi, edx
xor esi, ecx
xor esi, edx
xor esi, edi
add ecx, edx
or esi, edi
or edx, ecx
or ecx, edx
xchg ecx, edx
xor edi, edx
and edi, ecx
xor esi, edi
jmp 0x5010a2
pop ebx
add ecx, edi
or edx, 0x15aaab54
bswap ecx
neg edx
shr edi, 0x11
add edx, ecx
jmp 0x502e2d
push 0x1420592e
rol edi, 0x10
xchg edx, edi
sub esi, edx
xchg ecx, edi
or edx, esi
xchg edx, esi
mov edi, edx
and edx, esi
add ecx, esi
xor edx, esi
jmp 0x5022d3
call fcn.00503184
ror edx, 0x17
and ecx, 0x15b158ea
shl edx, 0x15
mov edi, 0x15b19642
jmp 0x50360a
push 0x1420f147
sub ecx, edx
not edi
xor ecx, edx
bswap ecx
inc ecx
mov edx, edi
add ecx, 0x15b54742
bswap edi
jmp 0x501832
pop ebx
sub edx, esi
add edx, ecx
or ecx, edi
or edi, ecx
sub edi, ecx
and edx, 0x15bb1e7c
or edi, edx
xchg esi, edx
mov edi, 0x15bb7838
or edx, esi
jmp 0x502b8a
pop ebx
sub esi, edi
add esi, ecx
bswap edi
shl edi, 0x1d
add edx, ecx
rol edi, 0xd
ror ecx, 0x1a
or edi, ecx
jmp 0x500fb5
pop ebx
mov edx, edi
xchg edx, ecx
add edx, 0x15c1003e
mov ecx, esi
inc edi
nop
or edi, edx
ror edi, 0xb
jmp 0x502807
mov ebx, 0x3f4d7907
add ecx, esi
mov ecx, 0x15c594d2
sub ecx, 0x15c5b3d4
mov esi, 0x15c5d162
dec edx
add ecx, edx
sub edi, ecx
xor ecx, edx
shl edi, 0x1d
mov ecx, edi
ror edi, 0xc
xor edx, ecx
add edi, edx
and esi, ecx
jmp 0x501c50
pop ebx
sub ecx, 0x15c72d7c
add ecx, edx
xor edx, esi
dec esi
shl ecx, 0xd
and esi, 0x15c7c734
and edi, edx
xor esi, 0x15c804be
jmp 0x501e68
pop ebx
shl ecx, 4
and edi, ecx
sub edi, ecx
add esi, edx
mov edi, edx
not edi
mov esi, ecx
and edi, 0x15cef4c4
nop
mov ecx, 0x15cf33b8
jmp 0x501a28
call ebx
and edi, esi
shr esi, 0xd
jmp 0x5035fd
pop ebx
add ecx, esi
or ecx, 0x15d29cde
bswap edi
not edx
and edi, esi
add esi, 0x15d31c08
jmp 0x502959
mov ebx, 0x3f4d7907
ror ecx, 0x17
sub edx, esi
mov edi, 0x15d5c82c
shr edx, 1
and edx, edi
mov esi, edi
mov ecx, edx
add edi, esi
jmp 0x5013bd
pop ebx
add esi, ecx
dec edi
add esi, ecx
xor esi, 0x15d6e64e
jmp 0x502001
push 0x141c1bee
or edx, ecx
add edx, 0x15d90bb8
neg esi
rol ecx, 0x1c
and ecx, edi
xchg edx, esi
jmp 0x502185
push 0x1417d9dc
shr esi, 0xe
bswap edi
sub edx, edi
sub ecx, edi
add esi, edi
xor esi, edi
jmp 0x50240e
call ebx
xchg edx, ecx
add esi, edx
mov edi, edx
sub esi, edx
xchg edx, esi
or esi, ecx
add edi, 0x15e1da20
add esi, ecx
xchg esi, edx
xor ecx, edx
or edi, 0x15e25674
mov esi, edi
jmp 0x503037
call fcn.00503184
sub esi, edx
add edx, ecx
inc ecx
rol esi, 0x1d
or ecx, 0x15e7fb0e
mov ecx, edi
add esi, edx
and edi, 0x15e856be
sub edx, esi
sub ecx, esi
or edx, edi
xchg edi, esi
jmp 0x501ada
call ebx
and ecx, 0x15eac4c0
shl ecx, 3
add ecx, edx
sub ecx, 0x15eb1c2c
and ecx, esi
xor ecx, esi
mov edi, ecx
or esi, edi
add edx, 0x15ebb666
and edx, edi
jmp 0x5029fa
pop ebx
rol edx, 0xa
and esi, ecx
xchg ecx, edx
or edi, 0x15edd1fa
shr edi, 7
or edi, 0x15ee10d0
xchg edx, ecx
add edi, edx
sub edi, edx
and ecx, edi
sub ecx, edi
or edi, ecx
jmp 0x502380
pop ebx
mov esi, edi
mov edi, esi
xchg edx, edi
neg ecx
xor esi, edx
mov edi, ecx
xor edi, ecx
or esi, ecx
sub ecx, esi
and edx, 0x15f54cbe
and ecx, edx
or esi, ecx
jmp 0x503542
push 0x141814cc
mov ecx, esi
neg edx
or edi, esi
and edi, esi
mov esi, 0x15f90e02
and edi, ecx
sub esi, edx
or edx, edi
jmp 0x501820
push 0x141a7e1a
xor edx, ecx
or ecx, 0x15f9b092
xor edx, edi
xchg ecx, esi
or edx, edi
and edi, ecx
or edi, ecx
xor edi, ecx
jmp 0x500a00
push 0x1423efcb
or edx, 0x15fd79dc
dec edi
or edi, 0x15fdbe98
shl edi, 0x1f
jmp 0x502acd
call ebx
mov esi, edx
or ecx, 0x15fe2478
xchg esi, edx
sub edx, edi
inc ecx
mov edi, esi
and esi, edx
mov edi, edx
sub esi, edx
xchg edx, esi
jmp 0x5018bf
push 0x1416d1c2
xchg edx, edi
xor ecx, 0x160172b6
add ecx, esi
or edi, esi
sub edx, edi
dec esi
sub esi, edx
sub esi, edx
jmp 0x500f87
pop ebx
xchg edi, edx
not esi
sub ecx, edx
mov ecx, esi
xor edx, 0x1602d21e
sub edx, edi
neg edi
xor edi, edx
jmp 0x502bb0
pop ebx
inc edx
mov esi, edi
rol esi, 4
inc edi
jmp 0x50137c
call ebx
sub esi, ecx
and edx, 0x16049672
sub edx, edi
add ecx, 0x1604d64e
add edx, 0x1604f474
sub esi, 0x1605149e
xchg ecx, edx
mov esi, edx
sub edi, ecx
or ecx, 0x16058abe
jmp 0x50113a
push 0x141975d2
xchg esi, ecx
mov edi, ecx
or esi, edi
xor edi, 0x16099de6
and esi, edi
not ecx
bswap edx
add ecx, esi
mov ecx, 0x160a3620
sub edi, esi
jmp 0x5010cb