Function at 0x401000
Capabilities:
Encrypt data using chaskey
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff1c
jne 0x401061
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xfffffefe
jne 0x4010fe
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff36
jne 0x40117d
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffeee
jne 0x401224
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.user32.dll_ReleaseDC
call sub.ntdll.dll_NtSetLowEventPair
call sub.ntdll.dll_NtSetLowEventPair
ret
jmp 0x48c853
and ecx, edi
mov ecx, ebx
or edx, ebx
xor ebx, 0xba31f24a
xchg ecx, ebx
jmp 0x48d814
push 0xbb529944
xor ebx, edx
bswap edx
jmp fcn.0048e010
mov edi, 0x6332a2e
sub edx, ecx
xchg esi, ecx
mov ebx, ecx
mov edx, ebx
mov edx, esi
mov esi, 0xbc73e59e
or ecx, edx
shr esi, 0x13
shr esi, 0xd
or ecx, ebx
jmp 0x48d773
call fcn.0048d361
ror ecx, 1
xor esi, edx
jmp 0x48e412
push 0xba534c8c
dec ebx
xchg esi, edx
rol edx, 0x16
xchg ecx, edx
and edx, ecx
shr edx, 0x17
and esi, ebx
ror edx, 1
mov edx, ebx
bswap ebx
jmp 0x48d16b
push 0xba671524
or ebx, 0xbc8bad16
add ebx, ecx
and ecx, esi
and ebx, esi
ror ebx, 0x1d
mov ebx, ecx
add ecx, esi
add esi, ebx
jmp 0x48f3f2
call edi
xor esi, edx
mov ecx, edx
sub ecx, edx
neg ebx
or ecx, ebx
mov edx, ebx
add edx, esi
and ecx, ebx
jmp 0x48caea
pop edi
inc ebx
add ecx, esi
add ebx, 0xbcaf310c
shr ecx, 0xc
mov esi, ebx
sub ebx, ecx
sub ebx, edx
xchg esi, ecx
jmp 0x48e8bc
pop edi
mov edx, 0xbcb1d00a
mov ecx, ebx
add edx, esi
and edx, 0xbcb30f7e
or esi, 0xbcb385de
mov esi, ebx
shr esi, 0xc
xchg ecx, edx
xchg esi, ecx
mov esi, edx
or esi, 0xbcb5d18c
and esi, edx
jmp 0x48dc73
call fcn.0048d361
neg edx
xchg ebx, edx
xchg ecx, esi
rol ebx, 4
dec ecx
xchg ecx, esi
jmp 0x48ca0c
push 0xbb4a98a2
add edx, ebx
add edx, ebx
or ecx, 0xbcbbfa50
mov ecx, ebx
not ecx
or edx, ecx
mov ebx, edx
neg ecx
and ebx, esi
add edx, ecx
jmp 0x48d0e5
mov edi, 0x6332a2e
ror ecx, 0x1a
shl edx, 3
and ebx, edx
neg edx
sub esi, edx
shr edx, 0xb
rol esi, 0x1e
and edx, 0xbce36de0
ror esi, 0x1c
inc esi
shl ebx, 5
add ebx, esi
jmp 0x48f23a
pop edi
shr esi, 0x10
xchg ecx, edx
inc esi
mov ecx, ebx
sub edx, ebx
and ebx, edx
and ebx, edx
add esi, ecx
jmp 0x48db92
push 0xba61ee12
xor ecx, edx
add edx, ebx
xchg esi, ebx
ror edx, 0x12
add edx, esi
add esi, ecx
jmp 0x48d754
pop edi
sub ebx, 0xbd015530
or esi, ebx
and edx, esi
and esi, 0xbd02990a
bswap ebx
sub ebx, esi
and ebx, edx
shr ecx, 0x1c
sub edx, 0xbd049d24
xor ebx, edx
add ecx, edx
xor esi, edx
jmp 0x48d8b1
push 0xbb51a810
xor esi, 0xbd0769fc
neg edx
and edx, esi
sub edx, ebx
or edx, 0xbd08f0ac
or esi, edx
jmp 0x48d2cd
pop edi
xchg ebx, ecx
or ebx, 0xbd17dcfe
sub ebx, edx
xor ecx, ebx
add edx, 0xbd191d32
shr ebx, 4
shr ebx, 0x15
add ecx, esi
xor edx, esi
mov ebx, edx
jmp 0x48df56
pop edi
nop
or ebx, esi
add ebx, 0xbd1c4ee6
and edx, esi
and edx, ebx
xor edx, ecx
mov ebx, ecx
rol ebx, 0x12
sub ecx, esi
sub ecx, edx
jmp 0x48e581
mov edi, 0x6332a2e
and esi, 0xbd200ce8
mov ecx, esi
mov esi, 0xbd20e1de
mov esi, ecx
sub edx, 0xbd21c050
shl ebx, 5
sub ecx, 0xbd229e60
xor edx, ecx
jmp 0x48f64e
pop edi
or esi, ebx
sub edx, ebx
sub esi, ecx
add ebx, edx
xchg esi, edx
xor ecx, ebx
mov ebx, edx
or edx, esi
or esi, edx
and ecx, esi
jmp 0x48f126
call edi
and ecx, 0xbd367bb0
sub esi, edx
mov ebx, ecx
rol edx, 9
and ecx, esi
and esi, 0xbd387cc0
neg ebx
xor ebx, 0xbd395af6
jmp 0x48cc92
push 0x8b453
or ebx, 0xbd39e888
xor ebx, ecx
and ebx, 0xbd3a8d04
add edx, esi
mov esi, ebx
rol ebx, 8
xor esi, ebx
inc ebx
mov edx, ebx
shl ebx, 0xc
xor ebx, edx
not esi
jmp 0x48ed0a
mov edi, 0x6332a2e
add ecx, edx
sub ecx, 0xbd3f5208
xchg ecx, ebx
and ecx, esi
xor ebx, ecx
bswap esi
ror ebx, 0xa
and ebx, ecx
jmp 0x48edea
pop edi
or ebx, edx
and ecx, esi
bswap ecx
add edx, 0xbd437abe
neg edx
and ebx, 0xbd446706
add edx, ecx
mov esi, ecx
ror ebx, 0x16
shl ecx, 0x19
neg edx
sub ebx, esi
jmp 0x48ebc7
pop edi
or ebx, 0xbd474c9e
mov ebx, esi
neg ecx
and esi, 0xbd48a276
dec esi
xor edx, ecx
jmp 0x48ce40
pop edi
xor ebx, edx
and edx, esi
xor edx, ecx
sub esi, 0xbd5bb086
sub ebx, ecx
or ecx, 0xbd5c86f6
jmp 0x48eaed
push 0xbb4af468
xor esi, ebx
or esi, ebx
shl ecx, 0x19
or edx, ebx
and edx, ebx
or ecx, ebx
xor edx, ebx
xor ecx, ebx
jmp 0x48ebf9
push 0xba5e4fba
xor esi, edx
xor ecx, 0xbd6d2f6e
shl ebx, 0xa
sub ecx, edx
shl ebx, 0x1d
bswap edx
jmp 0x48d559
push 0xba53bfe8
mov edx, ecx
or ecx, esi
mov edx, 0xbd71cfc4
not ebx
sub ebx, edx
and edx, ebx
shr edx, 6
mov ebx, edx
jmp 0x48f1f8
call edi
inc esi
and ecx, edx
mov ecx, ebx
sub edx, esi
xor esi, ebx
and esi, ebx
shl ecx, 0xf
rol esi, 0xc
jmp 0x48cee4
pop edi
shr esi, 1
xchg edx, ecx
mov esi, edx
inc esi
xchg edx, ebx
xchg edx, ebx
xchg edx, esi
xchg esi, ecx
ror edx, 0x10
xor esi, ebx
add ecx, esi
mov esi, edx
jmp 0x48ccda
call edi
and edx, 0xbd9406b0
bswap ebx
xor edx, 0xbd94fa36
sub esi, 0xbd956714
jmp 0x48e98b
push 0xbb5227f4
mov ebx, esi
xchg esi, ebx
and ebx, edx
sub edx, ecx
xor ecx, ebx
add ebx, edx
jmp 0x48c8db
push 0xba457f34
sub edx, 0xbda7a28e
add ebx, 0xbda81284
xor esi, ecx
and edx, 0xbda9098e
neg ecx
and ebx, 0xbda9b87e
jmp 0x48f18e
push 0xba4e92f4
xchg edx, ecx
mov esi, ebx
ror edx, 0x1f
nop
sub esi, ecx
xor ecx, ebx
sub edx, esi
and ebx, esi
jmp 0x48f523
call fcn.0048d361
or ebx, ecx
rol ecx, 0x1a
mov ecx, ebx
xchg edx, esi
mov edx, 0xbdcfdd28
xchg ecx, edx
jmp 0x48ee67
pop edi
add esi, 0xbdd4888e
sub ecx, 0xbdd4c96a
xchg ecx, ebx
inc ecx
sub esi, edx
rol ebx, 9
add edx, ecx
xchg edx, esi
jmp 0x48dc18
push 0xba4d805c
sub edx, ecx
xor edx, ecx
xor esi, edx
shl ebx, 0x13
xor ebx, ecx
dec ecx
and esi, 0xbddef2c6
shl ebx, 0x16
jmp 0x48e808
push 0xba5ec136
sub ebx, edx
shr ecx, 8
xor edx, ecx
and ecx, esi
jmp 0x48ce82
call fcn.0048d361
sub ebx, edx
rol ecx, 8
xchg ebx, ecx
xchg edx, ebx
and esi, ebx
mov edx, ecx
jmp 0x48d278
push 0xba62607c
xchg ebx, esi
xor edx, ebx
xor ecx, esi
xchg ebx, esi
mov ebx, esi
shl ebx, 0x15
sub edx, 0xbe296d20
xchg edx, esi
jmp 0x48cc67
call fcn.0048d361
xchg ecx, esi
or esi, ebx
bswap esi
or ecx, 0xbe2bd784
jmp 0x48e642
mov edi, 0x6332a2e
or ecx, edx
not esi
add esi, ecx
mov edx, esi
ror ebx, 0x19
sub ecx, 0xbe32bc14
rol ebx, 0x11
sub esi, ebx
ror edx, 0x10
sub edx, 0xbe34ae0e
jmp 0x48d5ce
push 0xba3a53ca
ror esi, 1
add ecx, 0xbe3cc240
jmp 0x48eb5b
pop edi
mov edx, 0xbe42cad8
and esi, 0xbe434bc0
xor edx, ecx
add ebx, esi
or esi, ebx
xchg esi, edx
shr edx, 0x1b
sub esi, 0xbe45b8ba
jmp 0x48f352
push 0xba48da06
xor edx, esi
xchg esi, ecx
ror ecx, 0xf
shl ebx, 0xb
add ecx, edx
mov ecx, ebx
and ebx, edx
or edx, ecx
add ebx, 0xbe525d0e
add ecx, esi
jmp 0x48ef0e
pop edi
add esi, ebx
mov edx, ecx
xchg edx, ecx
mov edx, ebx
add esi, ecx
shr edx, 0x11
or ebx, edx
xor ebx, 0xbe60120c
jmp 0x48cd7c
call fcn.0048d361
sub esi, ecx
and ebx, 0xbe630b48
nop
xor edx, ebx
not edx
add ebx, ecx
mov ecx, esi
not ebx
mov ecx, edx
mov esi, ebx
mov edx, 0xbe66a840
inc edx
jmp 0x48f608
call edi
ror ebx, 0x12
sub edx, ebx
sub ebx, edx
add esi, ebx
xchg esi, edx
xchg edx, ebx
xor edx, ebx
or edx, 0xbe6a977a
ror ecx, 0x18
neg edx
sub edx, esi
shl ebx, 8
jmp 0x48f58d
push 0xbb4bc274
neg ecx
shr ebx, 0x13
xor edx, ecx
add edx, ebx
xchg esi, ecx
and esi, edx
xor edx, 0xbe6f3706
xor edx, 0xbe6fae42
jmp 0x48cf90
push 0xba4d0e4c
dec ecx
xor ecx, ebx
xor ebx, ecx
xor ebx, edx
jmp 0x48d4fa
pop edi
mov edx, ebx
and ebx, 0xbe82655a
and ecx, esi
and edx, esi
dec ebx
sub ebx, 0xbe84017e
add ebx, 0xbe8477fe
shl ebx, 7
xor esi, 0xbe855442
or ecx, ebx
mov esi, ebx
inc edx
jmp 0x48ec45
push 0xba45010a
xchg ebx, esi
or esi, ebx
or edx, ecx
and ebx, ecx
sub ecx, edx
or edx, ebx
sub ebx, esi
sub ecx, ebx
and ebx, edx
or ecx, ebx
jmp 0x48d321
pop edi
or edx, esi
add esi, 0xbeaa6e82
shr ebx, 4
and ebx, 0xbeab65b8
mov edx, 0xbeaba55e
add ecx, edx
sub edx, esi
shr esi, 0x16
sub esi, 0xbead66a4
sub ecx, edx
jmp 0x48f17b
pop edi
xchg esi, ecx
shl ebx, 6
or ecx, esi
xor esi, ebx
mov ebx, esi
sub esi, ebx
jmp 0x48d21f
call edi
shl edx, 0x13
xor esi, ecx
sub ecx, 0xbebbbbce
or esi, ebx
or ecx, 0xbebca202
sub edx, ecx
xchg ebx, ecx
xchg esi, edx
xor edx, ecx
not ecx
shr ecx, 0x1c
or ebx, ecx
jmp 0x48d4be
pop edi
xchg ebx, ecx
xchg ecx, edx
and esi, edx
sub esi, ebx
and esi, edx
mov edx, 0xbec6b406
xor edx, esi
add ebx, 0xbec75f9a
jmp 0x48d9fb
push esp
xor edx, esi
add ecx, 0xbed3ab22
jmp 0x48e773
call fcn.0048d361
rol edx, 0x1a
add edx, ecx
and edx, ecx
dec ecx
xchg esi, edx
shr edx, 0x1a
and ebx, esi
xor ecx, edx
neg ebx
rol esi, 0x1c
jmp 0x48e84f
mov edi, 0x6332a2e
add esi, 0xbeeb9ce2
or esi, edx
and esi, ebx
inc edx
jmp 0x48e0fb
pop edi
xchg ebx, ecx
add esi, edx
xchg ebx, edx
mov edx, 0xbf0e00e0
add esi, edx
xchg ecx, ebx
jmp 0x48ec7e
push 0xba65a680
and edx, 0xbf0f7122
add edx, esi
sub ecx, 0xbf1035d0
ror ecx, 0x16
sub ebx, 0xbf11191e
or ebx, 0xbf118574
jmp 0x48f445
pop edi
xchg edx, ebx
and edx, 0xbf229d7e
xchg ecx, esi
sub esi, 0xbf237eb6
and ecx, edx
xor esi, ebx
jmp 0x48da4c
pop edi
and esi, edx
add ebx, edx
sub esi, ecx
xchg esi, ebx
xchg esi, ecx
ror ecx, 0x13
inc edx
or ebx, 0xbf2bda84
or ecx, esi
xchg edx, esi
mov ecx, esi
not ebx
jmp 0x48f1ad
push 0xba41a6a0
mov ebx, ecx
mov edx, 0xbf4370d2
add edx, 0xbf43e464
sub ebx, edx
bswap ebx
xchg ecx, esi
and ecx, 0xbf45770c
xchg ebx, edx
or esi, ecx
add ecx, 0xbf46c9be
neg ebx
mov ebx, 0xbf47ab08
jmp 0x48f09d
call fcn.0048d361
and ecx, 0xbf4fdd90
or ebx, edx
neg esi
and ebx, esi
not edx
xor edx, 0xbf51d5c8
dec edx
add ecx, ebx
neg ecx
or esi, ebx
xchg edx, esi
dec ecx
mov ebx, ecx
add ecx, 0xbf54fe70
jmp 0x48d207
push 0xba49ed1e
xor edx, 0xbf558052
and ecx, esi
or ebx, 0xbf566114
and esi, 0xbf56e1c6
jmp 0x48f764
mov edi, 0x6332a2e
xor ecx, esi
xor edx, 0xbf5cd2ee
dec ebx
nop
sub esi, ebx
sub esi, edx
ror esi, 0x18
sub edx, 0xbf5f3ddc
jmp 0x48dd3b
push 0xba5dd3f2
add ebx, esi
rol ecx, 0xa
bswap ebx
sub edx, ecx
mov ebx, ecx
neg ecx
xchg edx, ecx
xor esi, edx
xchg ebx, edx
or ecx, 0xbfe6a39e
jmp 0x48d141
call edi
and ebx, edx
and esi, ecx
jmp 0x48eb72
call edi
sub esi, edx
dec ecx
or edx, esi
mov esi, ebx
jmp 0x48debf
push 0xbb513096
dec esi
ror esi, 3
neg ecx
mov esi, 0xc017c1de
inc edx
sub ebx, edx
add ecx, ebx
and ecx, esi
and esi, edx
mov ecx, ebx
mov edx, ebx
inc esi
xchg edx, ecx
and edx, 0xc01bb940
jmp 0x48cdb5
mov edi, 0x6332a2e
mov edx, esi
inc ecx
and ecx, 0xc0285ca8
inc ecx
xor ecx, edx
add ebx, 0xc0292a1c
jmp 0x48c96d
call edi
and edx, esi
xor esi, 0xc029c2ea
sub ecx, 0xc02a7218
or esi, ecx
mov edx, ecx
xor esi, ebx
ror ebx, 0x1b
dec edx
ror edx, 0x1a
and ecx, esi
and esi, 0xc02e659e
inc ebx
jmp 0x48f076
push 0xba3b63ee
sub ebx, edx
shl edx, 0x12
neg esi
or ecx, 0xc03c67fe
xchg ebx, ecx
and edx, esi
or esi, ecx
inc ecx
or ecx, esi
shr esi, 0x19
jmp 0x48e177
push 0xba54ac76
and ebx, esi
xchg esi, edx
or ecx, 0xc03ff096
sub ebx, ecx
or ecx, ebx
or esi, ecx
sub ebx, esi
and ebx, ecx
ror ecx, 0xc
rol edx, 0x19
and ebx, edx
add edx, ecx
jmp 0x48ed33
push 0x40
mov ebx, esi
sub ebx, ecx
sub ecx, ebx
xor esi, edx
inc edx
xchg ebx, ecx
neg edx
mov ecx, ebx
jmp 0x48cf65
push 0xba4e1676
add esi, 0xc06e47a0
or ebx, 0xc06eb41c
or esi, 0xc06f2b54
or ecx, ebx
rol ecx, 0x1b
bswap ebx
sub ebx, esi
xchg ebx, esi
add esi, ebx
and edx, ecx
ror ebx, 4
or esi, ebx
jmp 0x48d347
call edi
sub ebx, 0xc0784d2c
dec ebx
or ebx, 0xc07934ec
mov edx, ecx
xchg ebx, ecx
xor ecx, 0xc07a8e60
and esi, edx
add esi, ecx
xor esi, edx
xor esi, ecx
inc edx
shr esi, 0x15
jmp 0x48f090
push 0xba413328
ror edx, 0x17
sub ecx, 0xc0847386
and edx, ebx
mov ebx, ecx
rol ecx, 0x18
xor edx, ecx
jmp 0x48e080
pop edi
inc ebx
or esi, 0xc09bd4ac
jmp 0x48df90
pop edi
sub ebx, edx
inc ebx
and ecx, esi
xor edx, esi
jmp 0x48cb04
push 0xba3efc32
shr esi, 5
xchg esi, ecx
or ecx, ebx
add edx, 0xc0c41476
jmp 0x48f89e
call fcn.0048d361
inc edx
or edx, esi
not edx
and ecx, ebx
xor esi, edx
xor ebx, esi
add edx, ebx
inc ecx
and ebx, edx
xchg edx, ecx
jmp 0x48cf41
push 0xba3af602
add esi, edx
sub ebx, 0xc0cfa052
not ecx
shl ebx, 0xc
jmp 0x48e6ab
pop edi
xchg esi, edx
and esi, ebx
ror esi, 0x13
xor esi, ecx
bswap ebx
shl ecx, 0x13
add ecx, ebx
add ecx, edx
neg esi
mov esi, edx
jmp 0x48ef67
pop edi
bswap edx
add ebx, esi
or edx, ecx
add edx, esi
inc ebx
sub ecx, esi
add edx, esi
inc edx
jmp 0x48f954
push 0xbb4b76dc
inc ebx
add esi, ecx
nop
ror ecx, 0x18
xor edx, ecx
and ebx, ecx
add edx, esi
rol edx, 0x18
add esi, ebx
and edx, ecx
not edx
and ecx, 0xc0e9f8c2
xor edx, esi
or ecx, esi
jmp 0x48d99c
call edi
add esi, ebx
xor edx, esi
jmp 0x48f000
mov edi, 0x4132136a
and edx, ecx
sub esi, ecx
xor ecx, ebx
shl edx, 0x17
jmp 0x48d47d
pop edi
dec ebx
or edx, ebx
mov ebx, esi
mov edx, ecx
jmp 0x48ded4
push 0x401400
mov ecx, 0xc10c93d0
or ecx, esi
nop
or edx, ecx
sub ecx, edx
add ecx, esi
xor edx, 0xc10f1336
mov ebx, esi
ror esi, 0xe
mov ecx, esi
and ecx, esi
or edx, ecx
jmp 0x48ec23
push 0xba551dcc
xchg edx, esi
add ebx, esi
sub ecx, 0xc11252b0
shl ecx, 0x1a
jmp 0x48c8e9
call fcn.0048d361
and ecx, 0xc127ab4c
xor esi, edx
or ebx, esi
rol esi, 5
and ecx, edx
xchg ecx, ebx
not ebx
add ebx, ecx
sub ecx, edx
shl ecx, 0x19
jmp 0x48f477
push esp
xchg ecx, ebx
xchg esi, ebx
xchg edx, ecx
neg ecx
add ebx, edx
xor ecx, edx
sub edx, 0xc13a07b6
add ebx, ecx
jmp 0x48dce9
call fcn.0048d361
xor ecx, 0xc13af7b8
add edx, esi
or esi, ebx
mov ebx, edx
add esi, 0xc13c7756
or ecx, 0xc13cde7e
mov ecx, esi
sub edx, esi
xor ecx, ebx
mov edx, ecx
add edx, ecx
or ecx, edx
bswap ecx
or ebx, 0xc13fe3b2
jmp 0x48d976
push 0xba494ba6
sub esi, 0xc1484448
xchg ebx, ecx
mov ecx, esi
not edx
add ecx, edx
sub ecx, edx
sub ecx, 0xc14acd0e
mov esi, edx
jmp 0x48e12b
pop edi
xchg ebx, edx
or ecx, edx
xor ecx, esi
sub esi, 0xc1541734
mov ebx, ecx
sub ecx, esi
xor ecx, esi
not ebx
ror ecx, 0xe
or edx, ebx
jmp 0x48d850
pop edi
sub edx, 0xc167da98
rol ecx, 0x1e
sub ebx, ecx
or edx, ebx
mov esi, ecx
ror edx, 0x1f
inc ecx
mov ebx, ecx
and ecx, edx
sub esi, edx
jmp 0x48e3ef
push 0xba6ba446
sub edx, ecx
sub esi, ebx
and edx, 0xc17e7350
shr esi, 0xe
jmp 0x48ddac
pop edi
xor ecx, ebx
xchg esi, edx
xor edx, ecx
xor esi, ecx
xor edx, ecx
add esi, edx
add esi, edx
add edx, esi
inc esi
shr ecx, 0x11
jmp 0x48cfd7
pop edi
mov esi, 0xc183a1ba
and edx, ecx
jmp 0x48f85c
mov edi, 0x6332a2e
sub esi, edx
xchg edx, esi
or edx, ebx
xor esi, 0xc185d538
xor ecx, 0xc18646b4
ror esi, 0x12
xchg esi, edx
sub edx, ecx
xor esi, 0xc187f7ac
and esi, ebx
rol ecx, 1
ror esi, 2
jmp 0x48eb3f
push 0xba6e2dca
ror ebx, 0x19
add edx, 0xc19a7b3a
and ecx, ebx
or ebx, 0xc19b73bc
not esi
xor edx, esi
neg esi
or esi, ecx
xor edx, esi
add ebx, 0xc19def16
add ebx, edx
or edx, ebx
jmp 0x48cb5a
push 0xba449112
add ebx, edx
shl edx, 0x19
or ebx, ecx
neg esi
jmp 0x48db56
mov edi, 0x6332a2e
dec esi
xor edx, 0xc1a6c000
jmp 0x48ee81
pop edi
add edx, 0xc1a752fa
or edx, ebx
jmp 0x48cfaf
pop edi
rol edx, 0x14
xchg edx, ebx
inc esi
shl ebx, 3
mov ebx, ecx
xor esi, ebx
mov edx, ecx
inc edx
mov ecx, 0xc1abf354
and edx, ebx
xor edx, 0xc1aca53a
inc esi
sub ebx, esi
or edx, ecx
jmp 0x48f6de
push 0xba542e6c
xchg ecx, esi
mov edx, ebx
bswap ecx
mov ebx, 0xc1b4d1ca
add edx, ebx
mov esi, ebx
xor ebx, 0xc1b5eac8
mov ecx, edx
or ecx, esi
xor edx, 0xc1b765de
rol ebx, 0xb
inc edx
jmp 0x48e6ce
call fcn.0048d361
xchg esi, ebx
neg edx
mov edx, ebx
and ecx, edx
jmp 0x48e573
pop edi
xor ecx, edx
and edx, esi
and ebx, 0xc1dbbe62
xor ebx, 0xc1dc332e
xor edx, ebx
or edx, ebx
shl edx, 0x1f
or edx, ecx
jmp 0x48f905
push 0xba6799fa
and ecx, ebx
xchg esi, ecx
add ecx, esi
add esi, ebx
dec edx
and ecx, edx
jmp 0x48d7ab
push 0xba66c802
mov esi, ecx
sub ebx, edx
add ecx, ebx
xor ebx, edx
xchg esi, edx
sub ecx, edx
jmp 0x48c9d4
call edi
shr esi, 0x18
add ebx, esi
xor ebx, 0xc1fe74f2
or ebx, ecx
jmp 0x48f19f
push 0xba4f01fc
and ecx, esi
shl ecx, 6
dec ebx
and edx, ebx
jmp 0x48e626
pop edi
sub esi, edx
xor edx, ecx
not esi
ror ebx, 0x13
not ebx
and edx, esi
ror edx, 6
xor esi, edx
shr ecx, 0x16
bswap esi
mov ecx, ebx
sub edx, ecx
jmp 0x48d922
call edi
bswap esi
or ebx, edx
inc edx
dec ecx
sub esi, 0xc234d92e
not ecx
jmp 0x48ea00
call fcn.0048d361
not edx
and ebx, ecx
xchg edx, ecx
or ecx, esi
inc ecx
bswap edx
xor ebx, esi
sub ebx, edx
add edx, ecx
and edx, esi
jmp 0x48dc2b
pop edi
dec ecx
xor ecx, 0xc24e1076
sub edx, 0xc24e8522
shl ecx, 0xf
add edx, esi
and ecx, edx
shr ecx, 0x13
rol edx, 0xe
mov edx, esi
xor edx, ecx
shr edx, 0x1e
add ebx, edx
jmp 0x48f05f
mov edi, 0x6332a2e
mov esi, 0xc25c61a8
shr ebx, 4
not edx
mov esi, ecx
sub ebx, edx
mov ebx, ecx
sub ebx, 0xc25ebd38
inc ebx
xor ebx, edx
inc ecx
xchg ecx, esi
xchg ecx, edx
jmp 0x48d94f
pop edi
mov esi, ebx
add ebx, esi
rol esi, 8
xchg esi, edx
sub edx, ecx
inc edx
bswap ecx
sub ecx, ebx
and ebx, edx
rol ebx, 0xc
ror esi, 0xc
neg ebx
or esi, 0xc27e2ae2
sub esi, edx
jmp 0x48d09c
mov edi, 0x6332a2e
dec ebx
add ebx, esi
xor ebx, esi
or ecx, esi
xor ebx, ecx
sub ecx, 0xc283c23a
jmp 0x48cb44
pop edi
add edx, 0xc28cb526
or esi, ebx
mov esi, edx
dec ecx
or esi, edx
sub edx, esi
jmp 0x48c98f
pop edi
bswap edx
and ecx, ebx
xchg edx, ebx
xor edx, esi
not ecx
not esi
xchg edx, ecx
add ebx, esi
xor edx, ecx
neg ebx
jmp 0x48ce64