Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffedf
jne 0x40107f
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff12
jne 0x40110d
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff1a
jne 0x40118c
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff26
jne 0x4011fc
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffef9
jne 0x40126c
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
ret
jmp 0x49857b
shr esi, 0x16
mov esi, 0xd5dd7181
xchg ecx, edx
shr esi, 0x1e
inc ecx
jmp 0x49aab0
push 0xd5ee481f
neg ecx
sub ecx, edi
jmp 0x4999c7
push 0xd5f4b7fe
sub ebx, esi
or ebx, edi
shr ebx, 0xb
mov ecx, esi
mov ebx, esi
or edi, ecx
jmp 0x499e5c
push 0xd5f98484
mov ebx, 0xdac00e87
add edi, ecx
xor esi, ebx
shr esi, 8
neg esi
or ebx, edi
shl ebx, 9
jmp 0x499f3a
call edx
xor edi, esi
xchg ebx, ecx
or esi, 0xdac1ff6e
xor esi, 0xdac23f26
or edi, 0xdac27373
mov ecx, esi
mov edi, ecx
jmp 0x49adb3
call fcn.0049aecf
bswap ebx
or edi, ecx
xchg esi, edi
jmp 0x49981e
call edx
ror ecx, 0x15
xor ecx, ebx
sub edi, ebx
inc esi
not edi
or esi, 0xdacd8078
add ebx, edi
and esi, ebx
xor ebx, ecx
xor ebx, esi
sub ecx, ebx
rol esi, 0xd
xchg ecx, esi
jmp 0x4992a8
push 0xd5e14721
sub ecx, ebx
sub ecx, ebx
xchg ecx, ebx
not ecx
xchg edi, ecx
sub ebx, esi
add ecx, esi
xchg ecx, esi
jmp 0x4997f6
pop edx
or esi, 0xdadfe7fa
bswap edi
add edi, ebx
rol ebx, 7
sub edi, ebx
and ecx, 0xdae0ead7
ror edi, 0x13
jmp 0x4985ea
mov edx, 0x123b2f04
add esi, ecx
add edi, 0xdae49120
shr edi, 0x1e
sub ebx, ecx
or esi, 0xdae52ca5
mov ecx, edi
xor edi, ebx
or esi, 0xdae5d051
mov esi, ecx
shr ecx, 0x11
add esi, ebx
jmp 0x499986
push 0xd5eb047f
rol ebx, 0x1e
mov esi, 0xdaed5f58
sub esi, 0xdaed93ec
or edi, esi
add edi, ecx
sub ecx, ebx
or ecx, 0xdaee5fe1
xchg ecx, edi
mov ebx, ecx
jmp 0x498e32
call edx
bswap esi
xor ebx, esi
xor esi, ecx
add edi, ebx
or ecx, edi
xchg ecx, esi
or ecx, 0xdaf1097d
not esi
add ebx, edi
xchg ebx, esi
and ebx, ecx
or ecx, esi
xor ebx, esi
jmp 0x499a2c
push 0xd5eecf4c
sub esi, ecx
shl ebx, 0x10
mov esi, ecx
shr edi, 0x12
or ecx, esi
xor edi, 0xdaf8fabb
sub edi, 0xdaf92f6d
mov ebx, edi
dec esi
jmp 0x49aded
push 0xd5f7b811
sub edi, ecx
xor esi, 0xdafd5d64
not esi
sub edi, 0xdafdcbc3
sub ebx, esi
xor edi, ecx
shl esi, 0x1a
neg ebx
jmp 0x499917
pop edx
and ecx, 0xdb05492b
shr ecx, 0x1f
xchg edi, esi
and ebx, 0xdb05ea3f
nop
or ecx, edi
add edi, 0xdb068dd5
mov ebx, edi
mov edi, esi
xor esi, ecx
rol edi, 0x19
jmp 0x49a8a7
pop edx
xchg edi, ecx
and ebx, 0xdb09d1b0
shl ebx, 0xb
shl esi, 1
or esi, ecx
mov esi, ecx
and ecx, esi
mov edi, 0xdb0b04d6
xor esi, ecx
sub ebx, 0xdb0b7b5f
or ebx, esi
xchg ebx, esi
add esi, edi
xor esi, edi
jmp 0x4997c9
call fcn.0049aecf
neg esi
inc ecx
jmp 0x498664
push 0xd5ec9241
neg esi
not ebx
dec ebx
add ecx, esi
not esi
jmp 0x499552
pop edx
add edi, esi
shl ebx, 0x1b
mov edi, ecx
bswap ecx
add esi, ebx
mov edi, esi
and edi, 0xdb150931
xor edi, ecx
sub ebx, edi
sub edi, ebx
not esi
or esi, 0xdb161ae2
xchg edi, esi
jmp 0x49a242
push 0xd5f1e80f
mov ecx, edi
or esi, edi
rol esi, 9
neg esi
shl ebx, 1
xor ebx, esi
ror ecx, 0x12
jmp 0x499a43
call edx
sub edi, ebx
xchg edi, esi
mov ecx, esi
or edi, ecx
shr esi, 5
sub ecx, ebx
or ecx, esi
xor ebx, 0xdb26a561
xchg ebx, edi
jmp 0x49aaf4
push 0xd5f3797f
and ebx, esi
add edi, esi
sub edi, esi
shl ecx, 4
not esi
dec ebx
xor edi, ebx
mov edi, 0xdb2a4da5
xor esi, ebx
sub edi, esi
jmp 0x49a6bd
pop edx
xchg ebx, ecx
or edi, 0xdb3202e6
xor esi, 0xdb323798
not esi
or ebx, esi
add esi, edi
bswap esi
and edi, 0xdb3458d6
xor esi, ebx
jmp 0x4992e8
pop edx
ror edi, 0xd
inc ebx
or ecx, edi
xor ecx, 0xdb357512
xor ecx, 0xdb35a978
sub esi, edi
rol edi, 5
shr edi, 0x1d
jmp 0x49a227
pop edx
mov ebx, esi
shr ebx, 0x15
add ecx, esi
or ebx, ecx
and edi, 0xdb3b9c43
dec edi
sub edi, esi
mov ecx, ebx
add ecx, edi
jmp 0x49881d
mov edx, 0x123b2f04
mov esi, ebx
bswap edi
or esi, ecx
jmp 0x4986c2
call edx
bswap esi
inc ecx
and ecx, 0xdb3dd55f
sub edi, ebx
sub ebx, ecx
mov edi, ecx
add esi, ecx
bswap ecx
mov ecx, ebx
sub ecx, edi
add esi, edi
jmp 0x498e16
pop edx
shl ecx, 0x1c
rol esi, 0xd
xor edi, esi
not ebx
xor esi, ecx
xor esi, ebx
and ebx, edi
and edi, 0xdb46c6f8
inc edi
sub ebx, edi
sub ecx, edi
or ecx, esi
jmp 0x49aade
push 0xd5ea5be6
add esi, ebx
sub ecx, 0xdb4aecb5
xor ebx, 0xdb4b2170
xor ecx, ebx
xchg ebx, ecx
xchg esi, ebx
xchg ebx, esi
and edi, esi
rol edi, 0x14
and ecx, edi
xchg esi, ecx
jmp 0x499700
mov edx, 0x123b2f04
shr edi, 0x13
dec ecx
xor ecx, esi
or ebx, esi
ror esi, 2
or ecx, 0xdb5916ab
shr edi, 0xe
and ebx, ecx
sub edi, 0xdb5a57fe
xchg edi, ecx
sub ecx, edi
jmp 0x49ad59
mov edx, 0x2774562b
and ebx, edi
not ebx
rol ecx, 0xd
sub edi, 0xdb61c3e7
add esi, 0xdb622356
jmp 0x49ac69
call fcn.0049aecf
xor edi, ecx
xor edi, 0xdb76ed5a
shl edi, 0xa
xor edi, ebx
xor edi, esi
and edi, esi
rol ecx, 8
xchg ecx, esi
jmp 0x49a3cd
pop edx
sub esi, ecx
xor esi, edi
not esi
jmp 0x49a0f9
push 0xd5f24045
dec esi
and esi, ecx
and ecx, ebx
sub ecx, edi
or ebx, esi
and esi, ebx
add esi, 0xdb82c624
ror edi, 0x12
rol ecx, 0x19
sub ebx, esi
or ecx, esi
mov edi, ebx
xchg edi, ebx
jmp 0x499f76
pop edx
xchg ebx, edi
shr esi, 0xc
sub esi, ebx
mov ebx, ecx
inc edi
xor esi, ecx
xchg edi, ebx
mov edi, esi
bswap ecx
add ebx, 0xdb994c99
jmp 0x49950d
pop edx
and esi, edi
xor ebx, ecx
dec ecx
mov ebx, 0xdba31c2a
add esi, 0xdba38193
or ecx, edi
and ebx, ecx
xor ebx, edi
or ecx, edi
xchg ecx, ebx
jmp 0x49a519
pop edx
not edi
xchg esi, ecx
sub edi, esi
bswap ebx
or ecx, edi
inc ecx
xor esi, ecx
add edi, ebx
mov ebx, 0xdbabd756
jmp 0x49a884
call fcn.0049aecf
ror esi, 0x13
bswap edi
mov ebx, edi
rol edi, 4
jmp 0x49acce
push 0xd5e8d4ae
not ecx
mov ebx, esi
sub ebx, 0xdc3043f6
xor ecx, esi
bswap ecx
add edi, 0xdc31650f
mov esi, ebx
xchg ebx, ecx
sub edi, esi
shl ebx, 0x14
rol ebx, 0x1e
or edi, ecx
jmp 0x4998bf
push 0xd5ecbe97
neg ecx
sub ecx, 0xdc38a316
mov ecx, ebx
xchg ebx, edi
xchg ebx, edi
or esi, ebx
mov ebx, esi
xchg ebx, ecx
mov esi, edi
xchg edi, esi
jmp 0x4996d6
push 0xd5eea376
mov ecx, ebx
xor esi, ecx
shr edi, 0x11
xor edi, ebx
mov esi, ebx
or edi, ebx
xor esi, ebx
shl ebx, 9
jmp 0x4989b0
call fcn.0049aecf
sub ecx, esi
not ecx
dec esi
mov ecx, esi
jmp 0x499cc8
pop edx
add ebx, ecx
xor ebx, 0xdc5f61c1
not ebx
add edi, ecx
xor esi, ebx
mov ebx, edi
xchg ebx, ecx
xor edi, ecx
or edi, ecx
or ecx, esi
ror ebx, 0x17
xchg edi, ebx
jmp 0x49a06d
push 0xd5eab26e
add esi, 0xdc6790f3
add ebx, esi
shr edi, 0x10
xchg edi, esi
mov ecx, ebx
or edi, esi
xor edi, ecx
sub esi, edi
add edi, ecx
or esi, ebx
and ecx, esi
jmp 0x49a7d1
push 0xd5ecea09
ror edi, 0x18
and ebx, ecx
add esi, 0xdc6f2058
shl ecx, 0xf
and ebx, esi
mov ecx, 0xdc6fcab2
xchg edi, esi
neg edi
xor esi, ecx
rol ecx, 0x10
and esi, ecx
jmp 0x499008
push 0xd5ea8738
xor ecx, edi
add ecx, ebx
ror ecx, 2
inc esi
neg edi
or edi, esi
xor ecx, esi
add esi, ebx
add esi, ecx
xor ecx, edi
mov edi, 0xdc73257d
mov esi, edi
or ecx, edi
jmp 0x499674
call edx
ror edi, 9
and ecx, ebx
shr esi, 0x10
jmp 0x498b04
push 0xd5f7361f
and ebx, esi
xchg edi, esi
jmp 0x49a679
push 0xd5e173cb
dec ebx
sub ebx, 0xdc888156
xor edi, 0xdc88ba5e
mov edi, ecx
xor ebx, ecx
inc ebx
or edi, 0xdc8aab7d
not ecx
mov ecx, esi
sub esi, ebx
jmp 0x49a972
call edx
not ebx
mov ecx, ebx
mov edi, 0xdc8bf64d
and ecx, 0xdc8c31fc
jmp 0x49a497
pop edx
and ecx, ebx
ror edi, 0x18
add ecx, esi
shr esi, 0xc
jmp 0x49a59c
call fcn.0049aecf
xor ebx, 0xdc8f6d09
xchg ecx, esi
add ecx, ebx
shl esi, 0xf
inc ebx
xor esi, edi
add esi, ebx
and edi, ecx
sub edi, ecx
mov ecx, edi
mov ebx, esi
not ebx
dec edi
jmp 0x49aa64
pop edx
mov ecx, edi
mov ecx, esi
add ecx, edi
and edi, ecx
or ecx, esi
dec ebx
jmp 0x498c7b
push 0xd5e90080
add ecx, 0xdc9af7f2
sub esi, ecx
or ebx, ecx
dec edi
xor esi, edi
ror esi, 0x13
and esi, ebx
and ebx, ecx
sub edi, esi
jmp 0x49a3e7
mov edx, 0x2774562b
sub ebx, edi
nop
or edi, ebx
bswap ebx
inc esi
shr edi, 0x1a
or ecx, 0xdca312c8
jmp 0x499128
call fcn.0049aecf
xchg ecx, ebx
add ebx, esi
mov esi, ebx
xchg ebx, esi
neg edi
sub ebx, edi
sub edi, ecx
mov esi, ecx
and ebx, ecx
xchg esi, edi
not edi
add ebx, ecx
jmp 0x498cb6
push esp
xor ebx, edi
or esi, ecx
mov ebx, edi
or edi, esi
and edi, ecx
or ebx, edi
sub edi, 0xdcb18c51
dec ebx
xor ebx, 0xdcb1fac5
jmp 0x49a852
push 0xd5ee77e6
or ebx, 0xdcb247ae
xchg ebx, esi
ror edi, 0xb
sub esi, 0xdcb2e787
inc ecx
xor esi, ecx
add edi, 0xdcb38136
and ecx, ebx
or ebx, edi
xchg esi, ebx
or ebx, esi
jmp 0x4995c0
pop edx
or esi, edi
mov esi, ebx
add ecx, esi
neg edi
xor esi, ecx
xor ecx, 0xdcb8b9c8
inc esi
jmp 0x499641
push 0xd5f2141a
and edi, ecx
xor esi, 0xdcbb0778
add edi, ebx
xor edi, esi
or ebx, esi
xchg esi, ecx
jmp 0x49917f
call fcn.0049aecf
inc ecx
or ebx, 0xdcd1e4b2
xor ebx, edi
add edi, esi
shl ecx, 0x1c
mov ebx, edi
sub esi, 0xdcd3be52
and ebx, esi
sub edi, ebx
jmp 0x498e42
push 0x401400
mov edi, 0xdcdfe374
rol esi, 0x1f
xchg esi, ecx
and edi, ebx
or edi, ecx
jmp 0x499727
pop edx
xchg ecx, esi
mov esi, ebx
xchg ebx, esi
xor edi, ecx
sub ecx, esi
xchg ebx, edi
ror ecx, 0x12
not esi
not edi
xchg esi, ebx
mov esi, edi
sub edi, ebx
jmp 0x499f5a
mov edx, 0x2774562b
neg ebx
and edi, esi
mov ebx, 0xdcef967a
mov esi, edi
jmp 0x499b2e
push 0xd5f78f6c
add ebx, ecx
bswap edi
neg ecx
sub edi, 0xdcf1b92c
sub ebx, esi
inc ecx
add ebx, 0xdcf2e770
bswap ecx
jmp 0x498a1b
pop edx
add ecx, esi
shl esi, 5
rol ecx, 0x18
ror esi, 0x10
inc esi
add ecx, 0xdcfccaaf
or ecx, ebx
or edi, ecx
inc esi
not ebx
shr ebx, 0x10
jmp 0x498f27
push esp
sub esi, 0xdd15d0f6
bswap esi
xor esi, edi
and esi, edi
xchg ebx, esi
xchg edi, esi
mov esi, edi
xchg esi, ebx
jmp 0x4999a8
push 0x9717b
add ecx, esi
or ecx, edi
or ecx, 0xdd35166c
mov esi, edi
neg ecx
mov esi, 0xdd363d65
xchg ecx, ebx
sub edi, ecx
and ebx, 0xdd377163
inc ebx
not ebx
or ecx, esi
add edi, ecx
sub esi, ecx
jmp 0x499b6a
mov edx, 0x123b2f04
sub edi, esi
xchg edi, esi
bswap ecx
mov edi, ecx
not esi
mov esi, 0xdd4b25d9
ror ecx, 0x12
and ecx, ebx
xchg ebx, edi
and edi, ecx
jmp 0x498b59
mov edx, 0x123b2f04
xchg ecx, esi
xor ecx, ebx
xor edi, 0xdd59eca5
rol esi, 0x10
and esi, ebx
and ebx, esi
xor esi, edi
jmp 0x49a4b8
mov edx, 0x2774562b
dec esi
xor ebx, esi
xor ecx, esi
mov edi, ebx
xor esi, 0xdd60c6b0
and esi, edi
jmp 0x49ac36
push 0xd5f9daa0
xor esi, ebx
mov esi, ecx
xor esi, ebx
add esi, edi
neg ebx
rol ecx, 0x16
dec esi
xchg ebx, ecx
sub esi, ecx
add ebx, edi
add esi, edi
jmp 0x49ac02
pop edx
xchg ebx, ecx
xor ecx, edi
or ebx, edi
and ebx, esi
xor ebx, edi
and edi, 0xdd6ae122
and ecx, 0xdd6b449a
jmp 0x49a8b9
mov edx, 0x2774562b
neg ecx
or edi, ecx
mov edi, 0xdd6caa07
sub esi, edi
and ebx, esi
mov esi, 0xdd6dc5be
sub ebx, ecx
mov esi, ecx
jmp 0x49a83a
pop edx
add ecx, edi
bswap edi
mov esi, 0xdd7c49d5
rol esi, 0x18
xor ecx, esi
xor edi, ecx
mov ebx, edi
rol ecx, 6
jmp 0x498ecb
pop edx
sub ebx, edi
xchg edi, ebx
sub edi, ecx
add ebx, ecx
sub ecx, edi
xchg esi, ebx
xor esi, edi
dec edi
mov ebx, esi
bswap ecx
jmp 0x49a771
pop edx
sub ecx, 0xdd85b503
dec edi
ror edi, 0x16
or ebx, edi
mov ebx, 0xdd868817
nop
xor edi, 0xdd870230
add ebx, edi
shl ecx, 0x19
xchg ecx, edi
neg edi
jmp 0x498aae
pop edx
sub esi, edi
xor edi, ebx
add ecx, edi
nop
and edi, esi
jmp 0x499148
pop edx
rol ecx, 0x19
sub esi, 0xdd9747f6
xor ecx, 0xdd979e21
sub ecx, ebx
sub edi, esi
or ecx, edi
jmp 0x498bb1
push 0xd5e2a4ce
or ebx, ecx
xor edi, esi
neg edi
and ecx, edi
sub edi, esi
sub ebx, edi
or edi, esi
and ebx, edi
xchg ebx, edi
jmp 0x499053
push 0xd5f0b30c
mov esi, ecx
mov ebx, edi
xor ebx, esi
xchg ebx, esi
xchg ecx, edi
or ebx, 0xdda9e18f
jmp 0x49886a
call edx
shl ebx, 1
and esi, ecx
or ebx, edi
and esi, edi
sub esi, edi
and ecx, esi
bswap ecx
and ebx, ecx
or edi, ebx
jmp 0x49a1cc
push 0xd5e92e4b
mov ebx, esi
xor ebx, 0xddb47ff7
rol esi, 1
jmp 0x499ec2
pop edx
ror ecx, 0x19
shl edi, 6
ror ebx, 0x1a
sub ebx, ecx
sub edi, esi
mov ebx, ecx
xchg edi, ebx
xor ebx, edi
or ebx, esi
add ebx, 0xddbee740
jmp 0x49a583
call fcn.0049aecf
bswap ebx
or esi, 0xddbf666a
and esi, 0xddbf9b0a
or ecx, ebx
add edi, esi
and esi, 0xddc03eb4
add ebx, ecx
neg edi
bswap ebx
add ecx, edi
not esi
mov esi, ebx
jmp 0x498725
pop edx
add ebx, 0xddc51efc
mov esi, edi
xor ecx, ebx
not edi
bswap edi
jmp 0x499c4b
mov edx, 0x4132136a
sub esi, 0xddc73945
sub ebx, 0xddc77214
dec esi
inc esi
sub edi, ebx
inc ecx
or esi, 0xddc8863b
and esi, ebx
and ebx, ecx
xchg ecx, ebx
add edi, ecx
xchg ecx, ebx
jmp 0x4995ff
pop edx
mov ecx, edi
neg ebx
dec edi
neg ebx
or ecx, esi
xor esi, edi
bswap edi
or esi, 0xddcccdb2
jmp 0x49a052
pop edx
mov edi, 0xddcd18ce
bswap edi
xor esi, edi
add ebx, esi
shl esi, 0x18
neg esi
xor edi, esi
add edi, esi
mov edi, 0xddcec470
add ecx, ebx
shr ecx, 0xf
sub ecx, esi
mov ecx, 0xddcf9677
jmp 0x498d81
push 0xd5f762bb
add ebx, edi
bswap edi
xor esi, 0xdddd82df
or esi, ebx
or edi, ebx
add edi, ecx
xchg esi, ecx
or edi, ebx
shl esi, 0x18
and ecx, esi
not ecx
and ebx, edi
xchg ebx, edi
jmp 0x499be9
push 0xd5f3a5de
and ecx, 0xdded47f9
or esi, edi
or ebx, ecx
xor ebx, edi
xor esi, edi
mov esi, ebx
mov ebx, esi
inc edi
sub edi, 0xddeeebf9
dec esi
not ecx
bswap ecx
jmp 0x499bd4
push 0xd5ee1c9a
and ecx, edi
add edi, ebx
sub esi, ecx
not esi
sub ecx, ebx
or edi, esi
sub edi, ecx
or ecx, edi
and edi, 0xddfad81c
xchg ebx, ecx
or edi, ebx
or edi, ecx
xor edi, ecx
mov ebx, esi
bswap ecx
jmp 0x49858e
push 0xd5f08721
mov esi, edi
or esi, edi
sub edi, esi
or ebx, esi
or esi, ecx
neg edi
and esi, edi
and ebx, ecx
xchg ebx, edi
jmp 0x49a348
push 0xd5eade62
bswap edi
xchg ebx, ecx
add edi, ebx
add ecx, edi
jmp 0x4988fe
pop edx
sub esi, edi
add esi, ecx
xor ebx, ecx
xchg ebx, ecx
or ebx, esi
sub esi, ebx
shr ebx, 0x13
mov ebx, edi
bswap ecx
shl edi, 0x1a
add edi, ebx
rol ebx, 8
jmp 0x499886
call fcn.0049aecf
sub edi, ebx
sub edi, esi
add ebx, edi
inc edi
xchg edi, esi
ror edi, 0xe
add ecx, edi
jmp 0x49ab14
push 0x40
bswap ebx
sub ecx, 0xde10a07b
and esi, 0xde10d4d2
mov esi, edi
and ebx, ecx
dec ecx
sub ecx, ebx
xor edi, esi
sub ebx, ecx
sub ebx, esi
dec ebx
sub esi, edi
or esi, ebx
and ecx, ebx
and esi, 0xde134e2d
jmp 0x499db7
push 0xd5f05ac9
or ecx, ebx
not esi
dec esi
and ebx, 0xde15c89a
mov ebx, 0xde160206
bswap ecx
xor esi, ecx
add esi, ebx
ror edi, 0x1b
jmp 0x49a79d
push 0xd5f93098
sub ebx, esi
or ebx, esi
bswap esi
add ebx, edi
jmp 0x498647
pop edx
and ecx, ebx
sub ebx, edi
mov ecx, esi
xchg ebx, edi
and ecx, ebx
not ebx
xchg esi, ecx
xchg edi, ecx
jmp 0x498ced
pop edx
or ecx, ebx
dec ecx
xchg ebx, edi
or ebx, 0xde1ba50f
and ecx, edi
dec edi
neg ebx
xchg edi, ebx
xor esi, edi
mov ebx, esi
and edi, esi
jmp 0x49984f
mov edx, 0x123b2f04
xor esi, ebx
xchg ebx, ecx
xchg ecx, edi
xchg edi, ecx
dec ecx
mov ecx, ebx
xor ecx, esi
xchg edi, ebx
xchg edi, ebx
inc ecx
and ebx, ecx
xchg ebx, ecx
or edi, ecx
jmp 0x49985f
call edx
xor ebx, 0xde40c82b
add ecx, 0xde40fdd4
xchg esi, ebx
shr ebx, 0xb
neg ebx
xor edi, ebx
jmp 0x499240
call edx
add ebx, ecx
inc ecx
bswap ebx
add esi, ecx
xchg esi, ebx
or esi, ebx
add esi, ebx
not ecx
or edi, esi
xor edi, esi
xchg ebx, ecx
shl ecx, 1
and ebx, 0xde44a2c3
jmp 0x498da5
push 0xd5e1153c
or esi, ecx
mov edi, esi
or ebx, 0xde492de5
or esi, ebx
mov edi, esi
xor edi, 0xde4a5099
add esi, ecx
not edi
or esi, 0xde4b92de
shl edi, 0x1b
mov ecx, edi
dec esi
jmp 0x49874b
pop edx
mov esi, ebx
xor edi, ebx
xor edi, 0xde4d03cc
add edi, 0xde4d34a6
jmp 0x498b9e
pop edx
add esi, ebx
and ebx, edi
xor ecx, ebx
mov esi, ebx
add ebx, esi
mov esi, edi
and ecx, ebx
and ebx, esi
jmp 0x49a7e3
call edx
shr ebx, 0x19
rol ecx, 0x11
rol ecx, 0x19
and edi, ebx
xchg esi, edi
shl esi, 0xa
xchg edi, ecx
jmp 0x499b82
push 0xd5fa21d5
sub ecx, esi
add esi, ecx
xchg ecx, ebx
xchg ecx, esi
ror esi, 2
or ebx, ecx
and esi, 0xde5ee16c
and edi, esi
neg ebx
shl ebx, 0x1a
or edi, ebx
or ecx, esi
or ecx, edi
mov esi, ebx
sub ebx, ecx
add ebx, 0xde60bf67
jmp 0x499f01
jmp loc.0049f000
call fcn.0049aecf
shr ecx, 0x10
add edi, 0xde63b661
and ebx, ecx
mov ebx, esi
or esi, edi
xchg ebx, esi
neg ebx
and esi, 0xde64e944
or esi, 0xde65290d
mov ecx, 0xde655dea
add edi, ebx
and esi, ecx
neg edi
add esi, 0xde6757d2
neg edi
xchg ebx, ecx
jmp 0x49aa48
call edx
xor ecx, ebx
or edi, 0xde6b6b8a
shr ecx, 6
sub ebx, ecx
bswap ecx
shr edi, 4
jmp 0x49a8cf
call fcn.0049aecf
add ecx, edi
sub ecx, edi
xor esi, ebx
rol ebx, 9
shl ecx, 0x1f
sub ebx, 0xde784e8b
or ebx, 0xde78c658
nop
add ebx, ecx
rol esi, 0x1c
sub ecx, edi
xchg ebx, esi
inc ecx
xor ecx, ebx
jmp 0x498931
pop edx
add edi, esi
mov ecx, esi
xor esi, 0xde7e5667
and esi, ecx
nop
and ebx, esi
sub ecx, edi
sub edi, ebx
and esi, ebx
xor ecx, ebx
mov esi, ebx
mov ecx, ebx
ror ecx, 0xa
xor ebx, 0xde8094bb
xor ecx, esi
jmp 0x49a53f
mov edx, 0x123b2f04
add edi, ecx
shr ecx, 0x10
mov esi, ecx
shr ecx, 0x10
or esi, 0xde82d778
xchg ebx, edi
sub esi, ebx
and esi, 0xde837fa4
mov edi, ecx
xchg ebx, edi
add esi, ebx
xor esi, ebx
jmp 0x4994a0