Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xfffffef7
jne 0x4010a2
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
ret
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xfffffed7
jne 0x401103
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.advapi32.dll_GetServiceDisplayNameA
ret
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xffffff27
jne 0x4011af
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
ret
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xffffff00
jne 0x40124c
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
call sub.ole32.dll_HENHMETAFILE_UserUnmarshal
call sub.ntdll.dll_NtSetSystemEnvironmentValueEx
call sub.advapi32.dll_GetServiceDisplayNameA
ret
jmp 0x489009
mov ecx, 0x7e70c1d4
xor esi, 0x7e70fd5c
and esi, ecx
and esi, edx
xchg edx, ecx
xor ebx, esi
sub edx, ecx
sub esi, ecx
jmp 0x48a2bc
call edi
add esi, ebx
add esi, 0x801228fb
dec esi
add edx, esi
bswap edx
and ebx, 0x8013bb09
not ecx
sub edx, 0x801438b0
dec ebx
jmp 0x48a3a6
push 0x7e851338
or edx, 0x801e23de
xchg ebx, esi
and edx, ebx
add ecx, esi
and ebx, edx
and ebx, ecx
xchg edx, ebx
add esi, edx
or ecx, esi
dec esi
sub edx, esi
bswap ebx
xor ecx, esi
sub ebx, 0x80214572
nop
jmp 0x489d30
pop edi
shl esi, 0xe
add ebx, 0x8024e82e
xchg edx, esi
jmp 0x489162
pop edi
xor ebx, 0x8029dd2b
sub esi, ebx
add ebx, esi
and ebx, edx
or esi, ecx
bswap edx
mov ecx, esi
and ecx, ebx
dec ecx
jmp 0x48bbb1
pop edi
xor edx, ebx
add ebx, 0x803a119d
sub edx, ecx
rol esi, 1
rol ecx, 6
jmp 0x48a55d
pop edi
nop
sub ebx, ecx
xor edx, ecx
and esi, ebx
and ebx, 0x803c4f42
sub ecx, ebx
shl ebx, 6
not edx
add ecx, esi
xchg ecx, esi
inc ecx
jmp 0x48b415
push 0x7e7a43e1
xor edx, ecx
xor ecx, 0x803f0978
xchg esi, ebx
nop
neg ebx
not esi
xor esi, 0x804040c4
bswap ecx
dec ebx
jmp 0x489ca2
push 0x7e89722e
xor ecx, edx
or ecx, ebx
mov ebx, edx
sub ebx, ecx
neg ecx
xor ebx, 0x804ff14d
sub ebx, edx
neg ebx
sub edx, ecx
mov ecx, ebx
or edx, 0x80512a02
mov ecx, edx
add edx, esi
jmp 0x48b888
pop edi
dec ebx
and ecx, 0x8059aa3f
add esi, ecx
and ebx, esi
or esi, ecx
dec edx
shl ebx, 0xf
sub ecx, 0x805b23f6
xor edx, ebx
jmp 0x48b1ba
mov edi, 0x3f4d7907
mov ecx, esi
and ebx, esi
shl ecx, 0xd
and ecx, esi
neg edx
add ecx, 0x80a42550
jmp 0x48a110
mov edi, 0x73716341
rol edx, 0x1e
shl edx, 0xe
add esi, 0x80a4e6ed
add ebx, ecx
xor esi, 0x80a596a3
add ecx, edx
bswap esi
rol esi, 0x14
add ebx, esi
jmp 0x48bf59
push 0x7e98912e
or esi, ecx
mov ecx, esi
xor esi, 0x80aa6a64
jmp 0x48a13c
mov edi, 0x73716341
mov esi, ebx
mov ecx, edx
add ebx, esi
xchg ecx, edx
ror edx, 0x19
or edx, 0x80b10dad
not ebx
xor ebx, 0x80b18bbf
shl ebx, 0xb
xchg ebx, esi
and ecx, edx
xchg esi, ebx
sub ecx, esi
mov esi, edx
jmp 0x48a8b6
push 0x7e7bdc9c
xor esi, 0x80b411d5
or edx, esi
add edx, ecx
xor ebx, esi
shl ecx, 0xb
shl ecx, 0x12
mov ecx, 0x80b55896
mov edx, esi
sub ebx, edx
jmp 0x48af67
pop edi
inc ecx
rol ecx, 5
or ecx, edx
add esi, ebx
sub ecx, 0x80b8db58
xchg ebx, edx
inc edx
sub edx, 0x80b9813e
bswap ebx
jmp 0x48ae9d
push 0x7e8c8ee0
and edx, ecx
shr edx, 6
mov edx, 0x80ca53ce
not ebx
and esi, edx
add ebx, esi
jmp 0x48a494
push 0x7e996fc6
mov ecx, 0x80cb4579
neg ecx
rol esi, 0xf
xchg esi, ebx
or edx, esi
inc ebx
or edx, ebx
mov ecx, ebx
sub esi, ecx
neg ebx
and edx, 0x80cd7f40
and ecx, 0x80cdb718
jmp fcn.0048a435
push 0x7e7d0720
shl ebx, 0x1c
rol edx, 0x1d
xor edx, esi
mov esi, 0x80d1d660
mov edx, 0x80d2139b
sub esi, 0x80d24f47
add edx, ebx
add ecx, edx
mov ebx, esi
sub esi, ebx
jmp 0x489502
call fcn.0048c33d
add esi, edx
shl edx, 0xd
not ecx
sub esi, ecx
shl edx, 0x12
inc edx
shr ecx, 0x1d
xor ebx, edx
sub ebx, edx
xchg ebx, edx
jmp 0x48b56e
call edi
or edx, 0x80d60e70
sub ebx, edx
add ecx, ebx
add ebx, 0x80d6bf8a
xchg ebx, esi
xchg ecx, esi
ror ecx, 0xf
mov edx, ebx
bswap ecx
xor ebx, 0x80d837ef
jmp 0x48b50c
pop edi
xor esi, ebx
and ecx, esi
mov esi, ecx
or esi, ebx
neg ebx
dec ecx
mov edx, ebx
xor edx, esi
or esi, 0x80dd6090
jmp 0x48ad57
push 0x7e8e431d
sub esi, 0x80e17709
xchg esi, ecx
dec esi
shl esi, 0x19
jmp 0x4897f3
push 0x7e8e8b7f
or esi, ebx
shr ecx, 0xe
xor ebx, esi
and ecx, 0x80e344a5
xor ebx, ecx
and esi, ebx
sub ecx, 0x80e3f5b3
xor ecx, edx
jmp 0x48ae4a
call fcn.0048c33d
sub esi, ebx
and ebx, ecx
bswap esi
bswap edx
dec esi
inc ebx
jmp 0x489963
call fcn.0048c33d
or esi, ecx
or ebx, 0x80edb10d
add ebx, esi
mov ebx, ecx
and esi, ecx
add edx, 0x80eea976
xor ecx, esi
rol ecx, 0xc
xchg esi, edx
or edx, ecx
neg edx
and esi, ebx
or edx, 0x80f04c32
jmp 0x489731
mov edi, 0x3f4d7907
ror ebx, 0x16
xchg edx, ecx
neg edx
xor ecx, 0x80f155ea
xor esi, ebx
bswap esi
and ebx, edx
mov ebx, edx
rol esi, 0x18
neg edx
xchg edx, ebx
sub edx, ebx
or edx, esi
add ecx, 0x80f3b74c
jmp 0x48c156
call edi
and ebx, edx
add ecx, esi
mov edx, ebx
xchg ecx, ebx
mov ecx, ebx
mov edx, ebx
inc esi
xchg ecx, ebx
or ecx, ebx
jmp 0x48bc4b
pop edi
sub ebx, 0x8120dd1e
add ebx, esi
sub ebx, edx
dec ebx
jmp 0x48c419
push 0x7e90d10d
or edx, ebx
add ebx, edx
xor ebx, ecx
and edx, ebx
or ecx, 0x81247aaa
xchg ecx, ebx
not ebx
sub ebx, esi
add edx, esi
jmp 0x48b163
push 0x7e81b619
shl esi, 4
sub ebx, ecx
xor ecx, edx
add esi, 0x813a7794
or ecx, edx
sub esi, ebx
rol esi, 0x19
mov ebx, edx
shr ebx, 6
rol ecx, 0x1a
or ebx, esi
add ebx, ecx
or ebx, ecx
add esi, ebx
jmp 0x48a70b
mov edi, 0x3f4d7907
sub edx, ebx
xor ebx, edx
mov ecx, ebx
mov edx, 0x813e68b0
or ecx, esi
or esi, ebx
jmp 0x48bf9e
call fcn.0048c33d
mov edx, ecx
sub ecx, ebx
xchg edx, ecx
and ebx, 0x813ff285
sub ecx, edx
sub esi, ebx
xchg esi, ebx
dec ebx
shl ecx, 0x19
and esi, ecx
jmp 0x489cf9
call edi
mov esi, edx
dec ebx
bswap edx
sub ecx, edx
mov ebx, ecx
xor esi, ebx
mov ecx, 0x814974e7
or ecx, esi
jmp 0x48c030
mov edi, 0x3f4d7907
or esi, edx
and edx, ecx
add esi, ecx
or ebx, edx
ror ecx, 0x1d
jmp 0x48c2b5
push 0x7e7f61d4
or ebx, ecx
xor edx, ecx
mov ecx, edx
sub esi, ecx
xor ecx, ebx
dec ecx
or esi, ebx
shl ebx, 0x1a
or edx, 0x815f7309
dec ecx
and edx, ecx
sub esi, edx
jmp 0x48bfc9
pop edi
bswap ecx
xchg ebx, ecx
or esi, edx
add ebx, ecx
mov ebx, ecx
xchg edx, ebx
add edx, esi
or esi, ecx
jmp 0x489572
push 0x7e76be8b
sub esi, 0x816a8792
xor edx, ebx
bswap ebx
ror ebx, 0x13
shr ebx, 0x1e
shl edx, 3
or esi, 0x816c6343
dec ebx
xchg edx, esi
jmp 0x48ad6d
push 0x7e916234
or ecx, ebx
xchg esi, edx
or edx, ecx
xor edx, 0x8189d397
and esi, 0x818a238b
mov esi, ecx
add ecx, 0x818a9e32
xchg ebx, ecx
sub edx, ebx
rol ebx, 0x15
mov ecx, ebx
jmp 0x48a321
mov edi, 0x4132136a
add ebx, ecx
or ebx, edx
add edx, esi
mov ebx, ecx
inc edx
sub ebx, edx
xchg esi, ebx
sub esi, ebx
shr ecx, 1
bswap esi
not esi
neg ecx
xor edx, esi
add edx, 0x8194becc
and esi, ecx
jmp 0x48c0c2
call fcn.0048c33d
and esi, ecx
add edx, 0x819dd048
or ebx, 0x819e0fc4
and esi, ebx
sub esi, 0x819e991b
xor edx, ebx
or esi, edx
xor ebx, 0x819f52bf
neg ebx
jmp 0x48aabd
push 0x7e98db4e
add esi, edx
xchg esi, ecx
and edx, 0x81a0640f
mov ebx, edx
sub ebx, esi
rol ecx, 5
sub ebx, esi
mov edx, ebx
xor edx, ecx
and ebx, esi
xor ebx, esi
jmp 0x48abc2
call fcn.0048c33d
sub ecx, esi
sub edx, 0x81aabd5f
neg ebx
or esi, ecx
dec esi
or ecx, 0x81abc7dd
jmp 0x48b6a4
mov edi, 0x3f4d7907
xchg ebx, edx
or esi, edx
sub esi, ecx
mov ebx, edx
and ebx, ecx
xchg ecx, edx
sub ebx, esi
rol esi, 0xf
jmp 0x489cbb
pop edi
add ebx, edx
add edx, 0x81b50103
dec ecx
nop
shr ebx, 4
shl esi, 0x12
dec ebx
jmp 0x48ab53
push 0x7e7621ee
add edx, 0x81c0e257
or esi, 0x81c1dfd6
mov edx, esi
or edx, ecx
xor ebx, edx
bswap ecx
or edx, ebx
rol ebx, 0x16
xor esi, ebx
add ebx, ecx
bswap edx
add esi, ebx
or edx, esi
sub edx, ecx
shl edx, 0x1c
or esi, ecx
jmp 0x48bb02
push 0x7e91ab33
inc edx
dec ebx
dec ebx
and edx, esi
or esi, ebx
rol edx, 0x16
and esi, 0x81d6982b
neg ebx
or ebx, edx
inc edx
jmp 0x48b928
mov edi, 0x73716341
mov esi, 0x81dc9cdf
sub esi, ecx
and edx, esi
add esi, ecx
bswap edx
rol ecx, 9
add ecx, 0x81de1c8d
jmp 0x48b4eb
pop edi
add esi, edx
sub edx, esi
not esi
nop
dec esi
shr ecx, 7
or edx, esi
xor ebx, esi
sub edx, esi
rol ecx, 0x10
inc ecx
add ecx, ebx
mov esi, ebx
mov esi, edx
jmp 0x48910c
mov edi, 0x73716341
or esi, 0x821ede46
neg esi
mov edx, ebx
sub esi, ecx
add esi, 0x821fca1b
or esi, edx
xor esi, ecx
jmp 0x489879
pop edi
xchg ebx, ecx
and esi, 0x8225d892
sub esi, 0x8226108b
sub esi, ecx
sub esi, edx
rol ebx, 0xe
jmp 0x48a24f
push 0x7e889ba3
sub ebx, ecx
or edx, ecx
add ebx, ecx
sub ebx, edx
mov esi, edx
bswap esi
sub ecx, 0x822cd631
jmp 0x48ac4e
mov edi, 0x73716341
xor ecx, ebx
inc edx
mov ecx, ebx
inc esi
sub ebx, 0x82355378
add edx, ebx
mov ecx, esi
jmp 0x48a1c2
pop edi
or esi, 0x8236200f
mov ecx, 0x82365800
xor ebx, esi
xor esi, ecx
and edx, 0x823701a9
mov edx, ebx
jmp 0x4897dd
push 0x7e776561
rol ecx, 3
shr edx, 7
and esi, ecx
and esi, 0x823ffb77
inc edx
inc esi
shl ebx, 0x1a
jmp 0x4898be
pop edi
xchg esi, edx
add ecx, 0x82412cde
shr ecx, 0x13
add esi, ecx
sub ebx, edx
xor edx, ecx
rol edx, 0x1a
and ebx, 0x82427486
or ecx, edx
or edx, ecx
sub edx, esi
sub esi, edx
or edx, esi
jmp 0x48aacc
push 0x7e81f8de
and edx, ecx
mov ebx, ecx
or ebx, ecx
xor ecx, edx
xchg ebx, edx
bswap ebx
jmp 0x48a923
call edi
and ecx, 0x824dd36d
dec edx
xor edx, 0x824e43a5
shr edx, 4
neg esi
mov ebx, edx
and edx, 0x824f1e14
or ecx, ebx
shl esi, 0xa
bswap ecx
add edx, 0x82500922
bswap edx
sub ebx, esi
or ecx, esi
jmp 0x48c085
mov edi, 0x3f4d7907
sub ebx, esi
xor ecx, ebx
and ecx, 0x8257262d
or edx, ebx
xor ecx, 0x82579338
sub ecx, ebx
jmp 0x48988d
call fcn.0048c33d
and ecx, 0x825fd576
neg ebx
ror esi, 0x14
shl esi, 9
and ecx, 0x8260b8b0
or esi, ecx
nop
shl edx, 3
sub esi, edx
sub ecx, 0x8261dbbc
or ebx, 0x82621246
shl edx, 0x1c
mov edx, 0x826282fc
jmp 0x48a789
push 0x7e7c799b
xor ecx, edx
bswap ebx
sub ecx, ebx
or edx, esi
add edx, ecx
mov edx, ebx
sub esi, edx
and edx, esi
add edx, ecx
jmp 0x48bebe
pop edi
xor ecx, esi
mov esi, ecx
sub ecx, esi
xchg esi, ebx
xchg esi, edx
not edx
xor ebx, edx
dec ecx
mov ebx, ecx
jmp 0x48a500
push 0x7e823972
and ebx, 0x8266e6a0
add ecx, ebx
add ebx, esi
bswap ecx
rol esi, 0x1c
inc ecx
inc edx
sub esi, edx
jmp 0x48b276
pop edi
and ebx, esi
mov edx, esi
inc ebx
or esi, ecx
mov edx, 0x8275b7fe
jmp 0x48ab37
push 0x40
not edx
mov ebx, 0x827a21dc
not edx
mov esi, 0x827a9c5b
mov ecx, esi
xchg ecx, edx
and esi, 0x827b632a
xor ecx, edx
or ebx, 0x827bdfda
jmp 0x48bc2b
push 0x7e971fc0
xor esi, ebx
mov esi, 0x827ea8ec
and ebx, esi
mov edx, 0x827f2118
inc esi
inc ecx
neg esi
jmp 0x48a5e8
call edi
neg ebx
xor ecx, esi
xor esi, edx
neg ecx
jmp 0x489250
pop edi
and ebx, 0x828655d8
and ecx, esi
and edx, 0x8286ce1c
xor edx, 0x82870c2a
not ebx
xor edx, ebx
add edx, esi
add edx, ecx
add edx, esi
xor ecx, edx
shr ebx, 1
jmp 0x48af09
call edi
xchg ecx, esi
add ecx, ebx
shl edx, 0x1a
shl ebx, 0x10
or ebx, esi
xchg ebx, ecx
xchg ecx, edx
mov ecx, esi
jmp 0x48c3b8
pop edi
mov esi, 0x828e813f
xor ebx, edx
xchg esi, ebx
xor ecx, ebx
xchg ecx, esi
dec edx
or edx, ecx
or esi, ecx
not edx
xor ecx, esi
jmp 0x48978d
push 0x7e8c46e3
mov edx, esi
neg edx
xchg esi, ebx
and esi, ebx
and ebx, 0x829214e1
mov ecx, edx
sub ecx, esi
sub esi, edx
jmp 0x48967e
push 0x7e992684
ror esi, 9
mov ebx, 0x8299b7e3
neg ebx
inc ebx
add esi, 0x829a73d3
bswap esi
neg edx
mov edx, ebx
ror ebx, 4
add ebx, edx
xor ecx, edx
mov esi, ecx
or ecx, edx
neg ecx
jmp 0x489698
push 0x7e7fe41b
xor edx, esi
sub ecx, edx
sub esi, ebx
xor esi, edx
bswap ebx
rol ebx, 0x1a
add ecx, ebx
jmp 0x48944b
push 0x7e88e32f
or edx, 0x82a357d5
and ecx, 0x82a395b9
or esi, ebx
add esi, ebx
mov edx, 0x82a44762
add ecx, esi
mov ebx, 0x82a4d07e
ror edx, 1
jmp 0x48afb7
pop edi
sub ecx, ebx
mov ebx, esi
mov ecx, esi
neg esi
xor ecx, edx
add ebx, edx
sub ebx, ecx
and ebx, edx
jmp 0x489dd9
push 0x7e771751
inc ecx
not ecx
mov ebx, esi
xchg ecx, edx
or ebx, ecx
sub edx, esi
mov edx, 0x82bac8bc
jmp 0x48a6a6
push 0x7e8ed4c2
xor esi, 0x82c706a9
neg ecx
bswap esi
not edx
xor edx, 0x82c7e6bb
xor edx, ebx
xchg ebx, esi
sub ecx, edx
jmp 0x48c2d9
pop edi
or esi, 0x82ca573f
or esi, 0x82ca9de0
shl edx, 0x17
sub edx, ebx
add ecx, ebx
dec ebx
xchg ecx, ebx
rol ebx, 2
jmp 0x489e3d
pop edi
or ecx, esi
and ecx, 0x82cc6920
mov edx, ebx
mov ecx, esi
or ebx, ecx
xchg edx, ebx
or edx, ebx
rol esi, 0x11
ror edx, 0x1c
ror ecx, 0xc
add ecx, edx
not ebx
ror ebx, 0xc
sub ecx, esi
jmp 0x4890c4
pop edi
mov edx, esi
and esi, edx
sub ebx, ecx
jmp 0x489b4c
push 0x7e7c2a53
add ebx, edx
or ebx, ecx
or esi, ebx
sub esi, 0x82dd5f0c
not esi
ror ecx, 1
sub edx, ebx
xor edx, esi
and edx, esi
shr ebx, 0xe
xor edx, 0x82dee1c4
jmp 0x48a8f0
push 0x7e892bb6
or edx, 0x82e1090b
mov ebx, edx
inc ebx
and esi, ecx
or ecx, esi
xchg ecx, edx
xchg edx, ecx
sub esi, ecx
shl edx, 0x17
dec edx
xor edx, 0x82e33ef6
ror ecx, 1
jmp 0x48936c
call edi
not ebx
inc ebx
sub ebx, esi
and ecx, 0x82e47b52
ror esi, 0x16
add ebx, ecx
sub esi, ebx
and edx, ecx
jmp 0x489411
pop edi
or esi, ebx
sub edx, ebx
bswap edx
jmp 0x489b27
push 0x7e911963
xchg ebx, esi
xchg edx, ebx
add esi, edx
sub esi, ecx
rol edx, 0x1d
xchg edx, esi
jmp 0x48a013
push 0x7e82bd2e
shl ebx, 0xd
and esi, 0x82fe7a53
ror esi, 0x18
and ecx, 0x82fef9eb
sub esi, edx
shl ebx, 0xa
mov edx, 0x82ff9f1f
jmp 0x48a234
push 0x7e8732e8
add edx, 0x83016478
mov edx, ecx
and edx, 0x8301cf6d
sub ebx, ecx
and ecx, 0x83023de1
inc ecx
rol ecx, 0xc
shl ecx, 9
mov edx, esi
xchg ebx, ecx
xor ebx, esi
xor ebx, ecx
not ebx
jmp 0x489430
push 0x7e827bec
or esi, ecx
and ecx, esi
xor edx, esi
add ebx, edx
add ebx, esi
jmp 0x48b17a
pop edi
shr ebx, 0x15
xchg ebx, ecx
rol edx, 4
xor esi, 0x831765ad
inc ecx
mov ecx, 0x8317d4b6
xor esi, ecx
mov ecx, esi
or ecx, 0x8318856e
inc ebx
neg edx
dec ebx
rol esi, 0xe
or ecx, esi
sub ebx, esi
jmp 0x48bf7b
pop edi
sub ecx, 0x8343ee41
and ebx, esi
or ecx, edx
shr ebx, 0xb
add edx, 0x8344dab5
mov ecx, 0x834516fc
mov edx, ecx
xchg edx, esi
add ebx, 0x8345d73a
bswap esi
xchg edx, ecx
jmp 0x48a08a
call fcn.0048c33d
ror esi, 0x1b
shl edx, 8
sub ecx, esi
add ecx, ebx
mov ebx, 0x8352adc7
mov ecx, edx
and edx, ebx
sub edx, ecx
or ecx, edx
jmp 0x48c090
pop edi
add ecx, edx
xor esi, ebx
add edx, 0x83546d94
add esi, edx
xor esi, edx
and ebx, ecx
sub edx, ebx
add ebx, ecx
shl edx, 0x15
jmp 0x48c3f4
call edi
mov ecx, edx
and esi, ebx
add esi, ebx
ror ecx, 0x10
mov esi, 0x835bb594
rol ecx, 3
xor ebx, edx
and ecx, edx
jmp 0x48a6c3
call edi
inc ecx
add ebx, edx
or ecx, ebx
and ebx, 0x835d780c
or esi, ebx
and edx, esi
xor ecx, 0x835e376a
jmp 0x48bf3c
pop edi
shl ecx, 0x16
sub esi, 0x83668aff
add ebx, ecx
mov esi, 0x8366f37d
or edx, 0x83672add
and esi, edx
sub ebx, 0x8367940d
inc ebx
sub esi, edx
add edx, 0x83684631
add esi, ebx
mov edx, esi
jmp 0x4894aa
call edi
shr edx, 9
sub ebx, 0x836e5385
shl esi, 0xe
rol esi, 0x14
sub edx, esi
add ecx, ebx
and edx, esi
shr esi, 3
rol ebx, 0x1a
jmp 0x48b60e
push esp
sub esi, 0x83787d91
add ebx, esi
bswap ecx
dec ebx
ror ebx, 7
sub edx, esi
xchg ecx, ebx
xor ecx, ebx
xor ecx, edx
xchg esi, edx
add esi, edx
not ebx
or edx, ecx
jmp 0x48bfb9
pop edi
xor edx, ebx
bswap edx
or ebx, edx
shl ebx, 8
or ebx, 0x83907457
or ecx, esi
mov esi, edx
sub ebx, edx
mov edx, 0x83914bb4
jmp 0x489266
push 0x7e89bb26
or edx, esi
and edx, 0x8391ce64
shl esi, 9
mov ecx, edx
ror esi, 0x13
add esi, 0x8392a7a7
xchg ebx, edx
add ecx, 0x839323d9
xchg ecx, edx
not esi
sub ebx, 0x8393c858
and ecx, edx
sub esi, ecx
jmp 0x48a365
push 0x7e91f36b
add ebx, edx
dec ecx
mov ebx, ecx
xchg edx, esi
and ecx, esi
shl esi, 0x15
sub ecx, esi
ror edx, 0x1e
and esi, ecx
nop
jmp 0x48a812
call edi
shl ebx, 3
or edx, 0x83a9d68e
or edx, ebx
xchg edx, esi
mov ebx, ecx
xchg esi, ecx
xchg edx, ecx
rol ebx, 0x11
shl esi, 0x14
or ebx, esi
rol ecx, 3
jmp 0x48b0f8
push 0x7e767b2b
xchg edx, esi
mov esi, ecx
xchg edx, esi
xchg ecx, ebx
dec esi
jmp 0x489e79
pop edi
inc edx
mov ecx, ebx
mov esi, ecx
and esi, ebx
add edx, ecx
and edx, 0x83c44b6f
and ebx, 0x83c48333
and edx, esi
nop
ror edx, 0x17
xor ebx, esi
add ecx, ebx
jmp 0x489290
pop edi
mov ecx, 0x83c5f6e8
or edx, ecx
and ecx, esi
sub ecx, esi
shr ecx, 0xc
jmp 0x48bb8c
push 0x87c09
or ebx, edx
add ebx, ecx
jmp 0x48bca2
pop edi
add ebx, ecx
sub esi, ebx
or ebx, ecx
mov ecx, esi
sub ecx, ebx
ror edx, 7
shl esi, 0x15
shr edx, 0x11
bswap ebx
neg ebx
jmp 0x48a602
push 0x401400
add ebx, edx
neg ebx
sub esi, edx
or esi, ecx
rol esi, 4
and ebx, ecx
xchg edx, esi
and ecx, ebx
neg esi
inc edx
xchg ecx, edx
or ecx, edx
xor ecx, esi
jmp 0x48ab1e
push 0x7e7cc6a8
sub ebx, ecx
ror esi, 0x19
and ecx, 0x8403ff73
sub ecx, edx
shr ecx, 0xb
mov esi, edx
sub esi, ecx
shl ecx, 0x1c
xor esi, 0x84057ed6
or ebx, ecx
or esi, edx
add edx, ebx
neg ecx
jmp 0x4896e7
pop edi
not ecx
ror esi, 6
bswap ecx
sub ebx, ecx
or esi, edx
xor ecx, esi
or ecx, 0x840f244c
and esi, ebx
add edx, esi
jmp 0x489532
call fcn.0048c33d
xchg ebx, edx
or edx, 0x84102f23
mov ebx, edx
xor edx, esi
or ebx, edx
xor esi, ebx
sub ecx, edx
xor ebx, edx
xor ebx, edx
neg edx
jmp 0x48ba20
pop edi
shl esi, 7
add esi, 0x8412bfdb
sub esi, 0x8412feaa
add ebx, edx
rol esi, 5
mov esi, edx
add ebx, esi
add esi, edx
dec esi
xchg ecx, ebx
jmp 0x48a90c
call fcn.0048c33d
shl ebx, 0x1e
sub ebx, ecx
and ebx, edx
xchg edx, ecx
xchg ecx, edx
and ecx, edx
add edx, ebx
dec ebx
dec ecx
jmp 0x48b58a
push esp
xor esi, 0x8417aacc
bswap edx
add ecx, esi
jmp 0x48aa22
push 0x7e7fa3b1
or ecx, edx
shl ecx, 5
add edx, ecx
mov ebx, 0x841950b4
ror edx, 0x16
and esi, ebx
jmp 0x48ac0e
pop edi
sub edx, ebx
mov edx, ecx
add edx, esi
sub edx, ebx
ror ebx, 0x1b
xchg edx, esi
xor esi, edx
xchg edx, esi
neg ebx
xor esi, ecx
jmp 0x48ae7e
pop edi
shr esi, 9
xor esi, edx
jmp 0x48a9cf
call edi
or ebx, esi
mov ecx, edx
xor edx, esi
mov ebx, ecx
xchg ecx, edx
rol esi, 0xd
xor esi, edx
or ecx, esi
xor edx, esi
inc ecx
jmp 0x48b2ef
call fcn.0048c33d
xchg ebx, esi
and edx, ecx
not ebx
and ecx, esi
mov ebx, edx
xchg esi, edx
xchg esi, ebx
add ebx, esi
sub ecx, 0x8438b1bb
shl esi, 4
shr esi, 0x16
and ecx, esi
or ebx, 0x8439e50d
rol ebx, 0x11
jmp 0x48b713
call fcn.0048c33d
ror ecx, 0x17
or ecx, edx
xor ebx, esi
neg ecx
mov esi, ebx
xor esi, ecx
shr ecx, 0xf
shr edx, 0x12
sub ecx, esi
or edx, 0x8444d81b
jmp 0x489025
call fcn.0048c33d
xchg ecx, ebx
xor ecx, 0x845d2ac8
add ebx, edx
or edx, ecx
mov ecx, 0x845dea5c
or ecx, edx
and esi, ecx
ror ecx, 0x11
mov edx, esi
jmp 0x48afe1
mov edi, 0x3f4d7907
sub ebx, edx
xor esi, edx
mov edx, 0x8460249c
sub edx, esi
xchg esi, ecx
or esi, ebx
jmp 0x489711
pop edi
and ebx, ecx
ror edx, 0x10
xor edx, 0x8475e5c0
inc edx
mov ebx, 0x84766461
ror esi, 4
inc esi
and ecx, esi
dec ebx
add ecx, ebx
sub esi, ecx
shl ebx, 7
jmp 0x48aa64
pop edi
or esi, 0x847917c3
dec ecx
and edx, ebx
xchg esi, ebx
or esi, edx
sub esi, 0x847a4389
sub ecx, 0x847a7a69
bswap ecx
xchg ecx, ebx
xchg ecx, esi
jmp 0x48b868
pop edi
xor ecx, esi
and ebx, ecx
sub ecx, 0x847bd703
xor ebx, edx
xchg esi, ecx
mov esi, ebx
or edx, esi
neg ecx
xor ebx, ecx
rol ebx, 7
add ebx, esi
jmp 0x489c74