Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff35
jne 0x401084
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
ret
call sub.user32.dll_GetInputState
cmp eax, 0xffffff29
jne 0x40111c
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlSubAuthoritySid
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff23
jne 0x40118c
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlSubAuthoritySid
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffef9
jne 0x401229
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlSubAuthoritySid
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_RtlAddAccessDeniedAceEx
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.kernel32.dll_DebugSetProcessKillOnExit
call sub.ntdll.dll_ZwIsSystemResumeAutomatic
ret
jmp 0x4e9d19
xor edi, 0x4a982938
neg edx
add esi, 0x4a98ac1a
and ecx, esi
sub edi, ecx
rol edi, 0xa
jmp 0x4ec18c
push 0x4aa6d42c
mov edi, edx
or edi, esi
and edx, ecx
or ecx, edx
and edi, edx
neg ecx
mov edi, 0x4bdf9761
and edx, ecx
or esi, edx
xor edi, 0x4be04e12
jmp 0x4ebb06
push esp
inc edi
dec edx
xor edi, edx
xchg esi, edx
shr esi, 3
bswap esi
sub edi, edx
mov esi, 0x4be38b8b
jmp 0x4ec59b
call fcn.004eccd6
and esi, ecx
ror edx, 5
mov edx, ecx
shl esi, 0x15
ror edi, 0xb
xchg ecx, edi
mov ecx, edx
sub edi, ecx
add edi, ecx
jmp 0x4ea655
pop ebx
xor edx, esi
xchg edx, esi
sub ecx, edx
dec ecx
add edx, esi
and edi, ecx
xchg ecx, edx
dec edx
sub ecx, esi
add edi, ecx
jmp 0x4ec819
pop ebx
xchg edx, edi
not edi
and edi, edx
or edx, edi
jmp 0x4ea032
pop ebx
add ecx, esi
xchg edx, ecx
add esi, edx
add esi, ecx
mov edx, ecx
add edx, 0x4bf19a20
mov esi, edx
rol edi, 2
or esi, ecx
xor edi, edx
jmp 0x4ebf59
call ebx
not edx
bswap edx
xchg ecx, edx
not edx
sub edi, edx
and ecx, edx
add edx, edi
add edi, edx
shl esi, 0x15
jmp 0x4ec25a
mov ebx, 0x75624153
mov edx, esi
xchg ecx, edx
and ecx, 0x4bf5c91e
sub ecx, edx
add ecx, esi
mov edx, 0x4bf681da
not edi
and edi, esi
and esi, edi
jmp 0x4ecc5a
push 0x4abc01c7
mov esi, ecx
xchg edi, edx
add edi, edx
and ecx, 0x4bf9f54f
neg esi
and edx, esi
or ecx, 0x4bfac088
sub edi, ecx
neg edx
jmp 0x4ec452
push 0x40
ror esi, 0x17
add edi, edx
mov edi, ecx
mov edi, edx
mov edi, ecx
jmp 0x4eb913
call fcn.004eccd6
shr edi, 9
add ecx, edi
xchg ecx, edi
sub ecx, esi
and edx, esi
xor esi, edi
xor ecx, edi
xchg edi, esi
shl ecx, 0xb
jmp 0x4ea6e8
push 0x4abb6b43
and edx, esi
ror ecx, 0x1e
sub edi, edx
or esi, 0x4c05c454
sub ecx, esi
or edx, 0x4c06402e
jmp 0x4eaeec
pop ebx
sub edi, edx
dec ecx
xchg ecx, esi
or edi, ecx
and ecx, 0x4c097f1b
shl ecx, 8
sub edx, edi
mov ecx, edx
jmp 0x4ea2c6
pop ebx
shr esi, 0x1f
dec edi
xor ecx, edi
inc ecx
jmp 0x4ebf94
push 0x4a9f399c
shr esi, 0x1a
mov edi, 0x4c2c581f
add edi, esi
or esi, 0x4c2cd4a1
neg ecx
or edi, esi
neg edi
jmp 0x4eb448
call fcn.004eccd6
xor ecx, edx
add edx, esi
jmp 0x4ead2e
push 0x4aa91936
xchg ecx, esi
add edi, 0x4c407c67
rol edx, 0xe
inc ecx
shl esi, 1
shr edx, 8
xor ecx, esi
sub edi, 0x4c4200a1
and esi, ecx
mov esi, edx
not edi
xchg edx, ecx
xchg edi, esi
or edx, 0x4c436a5a
xor edx, esi
jmp 0x4ec2fa
mov ebx, 0x75624153
not esi
sub esi, 0x4c522d12
or edi, 0x4c526c19
xchg ecx, edx
sub esi, ecx
xchg esi, edx
inc ecx
xchg esi, edx
mov esi, edi
add edx, edi
sub edx, esi
xchg edx, edi
mov esi, edx
xor ecx, edx
jmp 0x4eab6e
push 0x4ac3eb29
shr esi, 6
xor edx, ecx
sub esi, edi
xor edx, 0x4c5cda4e
jmp 0x4ec8d7
push 0x4aa20a01
or edx, esi
neg esi
mov edx, ecx
xor ecx, edi
inc edi
neg edx
and edi, edx
xor edx, ecx
neg ecx
mov esi, edx
add edi, esi
mov esi, ecx
mov esi, edx
xor ecx, edx
inc esi
jmp 0x4ebcd4
pop ebx
inc edi
or edi, edx
rol edx, 3
sub ecx, esi
xor esi, edi
xor ecx, edx
or ecx, edi
jmp 0x4e9e4d
push 0x4aabee86
or esi, 0x4c7e8d94
dec esi
and edi, esi
sub ecx, edx
or edx, esi
inc ecx
sub edx, edi
and esi, 0x4c8047b1
and esi, edi
jmp 0x4eb0d5
call ebx
mov edi, edx
mov edi, esi
or esi, edi
add edi, esi
mov edi, esi
or esi, ecx
and ecx, 0x4c8718f8
add ecx, esi
and esi, ecx
sub edi, esi
jmp 0x4ebb50
push 0x4ab91446
shl esi, 1
nop
sub edx, 0x4c8e3c39
xchg esi, edx
sub edi, ecx
add edx, ecx
add ecx, edi
jmp 0x4ea3b8
call ebx
mov edx, 0x4c8f9212
xor ecx, edi
shr edi, 0xa
sub edx, edi
or esi, ecx
sub ecx, edx
and esi, edx
sub esi, ecx
not ecx
jmp 0x4ec867
pop ebx
ror edi, 0x1e
or ecx, edi
ror esi, 0x1e
sub edx, esi
xchg esi, edi
inc esi
xchg edx, ecx
and edi, ecx
or edx, edi
add edx, ecx
or edx, ecx
shl edx, 0x1b
jmp 0x4eb7f7
pop ebx
xor ecx, esi
bswap edx
sub edx, 0x4ca1786d
bswap edi
or ecx, edx
and edx, ecx
or edi, edx
mov ecx, 0x4ca2be59
sub edi, esi
and edi, 0x4ca33a57
rol ecx, 0x13
or edx, 0x4ca3baf4
add ecx, edx
jmp 0x4eaf44
mov ebx, 0x75624153
and esi, 0x4ca57a66
neg ecx
add ecx, 0x4ca5f97f
xchg edx, esi
ror ecx, 0x1c
sub edi, edx
xor ecx, 0x4ca70322
or edi, ecx
and esi, ecx
xchg esi, edx
or edx, 0x4ca7fa38
jmp 0x4ecb7b
call ebx
xchg edi, esi
or edx, edi
and esi, ecx
rol esi, 0x1d
mov edi, esi
and ecx, esi
xor edx, esi
mov ecx, 0x4cad57b7
jmp 0x4ebfd5
call fcn.004eccd6
xor ecx, esi
shl ecx, 0xb
nop
dec esi
shr edi, 0x1f
shl edx, 0x17
bswap edi
ror edi, 2
xor edx, esi
jmp 0x4ec07c
call ebx
mov edx, esi
ror ecx, 0xc
or edx, ecx
or edi, ecx
mov edx, esi
and edx, 0x4cc9fed4
rol edi, 0x19
mov edx, esi
sub edi, esi
not edx
not ecx
ror ecx, 0x13
jmp 0x4ea79f
push 0x4ab75244
xor edi, ecx
or edx, ecx
xchg edi, esi
or edi, ecx
and esi, edx
mov ecx, edi
xchg edx, esi
or edi, 0x4ccf8b58
or edx, esi
jmp 0x4eb7e2
call fcn.004eccd6
and esi, ecx
xor edi, esi
and edi, ecx
bswap esi
mov ecx, esi
neg edi
and edi, 0x4cd2190f
shl ecx, 0x10
ror ecx, 0xd
or esi, edx
jmp 0x4ecbb6
mov ebx, 0x75624153
or esi, edi
and ecx, esi
and edx, ecx
add edi, ecx
add esi, 0x4cdfd20e
bswap edi
bswap edx
inc esi
and ecx, 0x4ce0ca12
and esi, edx
mov edx, esi
xchg ecx, edx
jmp 0x4eb83a
call fcn.004eccd6
and esi, edx
add ecx, edx
inc ecx
mov esi, edx
jmp 0x4ebd2a
pop ebx
add ecx, edx
xchg edi, esi
xchg esi, ecx
add ecx, 0x4ce6d6f0
not ecx
shl edx, 0x16
xchg ecx, edx
sub edx, esi
and edi, edx
xor edi, ecx
and edi, 0x4ce88fc4
jmp 0x4ebdb2
pop ebx
mov esi, 0x4ce8e8a0
sub esi, ecx
add ecx, 0x4ce96035
ror edx, 0x1c
xor edx, 0x4ce9ddc8
and ecx, edi
sub edi, ecx
xchg ecx, edx
xchg ecx, edx
jmp 0x4eca33
pop ebx
inc edx
xor edx, esi
rol esi, 0x13
not esi
xchg esi, edi
xor edi, edx
add ecx, esi
add esi, edi
or esi, 0x4cef3e6b
dec edi
jmp 0x4ea5f0
pop ebx
bswap esi
and ecx, 0x4cf50026
or ecx, edx
sub edx, edi
jmp 0x4ec200
call ebx
neg edx
mov edx, 0x4d035768
sub edi, 0x4d039693
shr edi, 6
xchg ecx, edi
sub edx, edi
not ecx
not edx
shl esi, 0x11
and esi, 0x4d055ec0
xchg edi, esi
jmp 0x4eab7f
pop ebx
xchg ecx, edx
shl edi, 5
ror edx, 0x17
add edi, edx
and esi, edx
inc ecx
jmp 0x4ebb7b
push 0x4ab364f3
rol edi, 0x14
add edx, esi
xchg edi, esi
sub edx, esi
ror edi, 0xc
rol edi, 0x1d
or edi, edx
sub esi, edx
add ecx, 0x4d1c76d4
jmp 0x4eb7be
push 0x4abbb66e
inc edx
xor esi, ecx
xor edx, edi
sub ecx, esi
shl edi, 7
mov ecx, edx
jmp 0x4e9ec4
call fcn.004eccd6
mov esi, 0x4d2619f4
sub edx, edi
not edi
xor edi, 0x4d26d03c
mov esi, edi
bswap edx
neg edx
or esi, edi
sub edx, esi
and ecx, esi
jmp 0x4e9e6c
pop ebx
shl edi, 0xa
ror edx, 0x14
mov esi, ecx
xor edi, esi
not edi
neg ecx
shl esi, 0x1d
xchg edx, ecx
add edi, ecx
and ecx, edx
rol ecx, 0xe
jmp 0x4e9fab
push 0x4ac39d24
shl edx, 0x1b
sub ecx, edi
and edi, 0x4d2dc843
or edi, esi
xor esi, edi
and ecx, esi
inc ecx
or ecx, 0x4d2ef766
neg edx
not ecx
and esi, edx
sub esi, edi
sub edx, ecx
or edx, 0x4d3074a4
shl edx, 0xd
jmp 0x4ea44d
pop ebx
xchg esi, edi
add edx, edi
inc esi
xor edx, esi
inc ecx
rol edx, 0x1c
rol edi, 0x17
add ecx, edi
and edi, 0x4d387819
and edi, ecx
bswap edi
jmp 0x4eb3bb
push 0x4abb2038
sub edi, edx
or edi, ecx
xchg edi, edx
or edi, esi
jmp 0x4e9f67
pop ebx
or ecx, esi
bswap edx
sub ecx, edx
mov ecx, 0x4d428048
not ecx
add ecx, edi
neg edx
shr esi, 0x11
jmp 0x4eb8d6
mov ebx, 0x75624153
xchg edi, ecx
and edi, ecx
bswap esi
xchg esi, edx
not ecx
or esi, edx
xchg edi, edx
jmp 0x4ec0c7
call fcn.004eccd6
or esi, ecx
add ecx, 0x4d51129d
and edx, ecx
add edi, ecx
and edx, esi
xchg ecx, edx
xchg esi, edx
sub esi, 0x4d52937d
or esi, 0x4d52d274
and ecx, esi
neg edx
or edi, edx
ror ecx, 0x15
jmp 0x4ecc81
push 0x4aad5a28
shr edi, 0x10
mov ecx, esi
jmp 0x4ec6a4
pop ebx
rol ecx, 2
and esi, ecx
sub esi, 0x4d58a5d5
rol ecx, 0x1a
xor ecx, esi
xor edi, ecx
and edx, esi
shr ecx, 0xf
add esi, edi
jmp 0x4eb89e
push 0x4aa68c54
bswap edx
mov esi, 0x4d6f1c84
inc esi
xchg edi, edx
ror ecx, 9
mov esi, edi
sub ecx, edi
not esi
shl esi, 0xd
and esi, edi
add edi, ecx
xchg ecx, edx
or ecx, edi
xor ecx, 0x4d7214a6
jmp 0x4e9d62
push 0x4ab8c972
mov ecx, edx
ror ecx, 4
xor ecx, edi
ror edx, 0x1d
sub edx, ecx
xchg ecx, esi
add edx, esi
or esi, ecx
xor ecx, edx
sub edx, 0x4d74aa37
mov esi, edx
shl ecx, 7
sub ecx, edx
jmp 0x4ea6cc
push 0x401400
sub ecx, edi
shl edi, 0xb
or edx, edi
add edx, 0x4d7a714c
or esi, 0x4d7aafa6
mov ecx, edx
and edi, ecx
or edi, 0x4d7b70b7
or edi, edx
xchg ecx, edx
jmp 0x4eb775
push 0x4ab16267
xor edi, ecx
add edx, esi
inc ecx
rol edi, 0xd
bswap ecx
shr ecx, 9
or esi, edx
jmp 0x4ec568
mov ebx, 0x75624153
xor edx, ecx
and edi, edx
bswap edx
shl edx, 0xa
or esi, 0x4d8c7ac8
bswap edi
sub esi, 0x4d8d0668
jmp 0x4ea242
push 0x4abeed1a
and esi, edx
xchg esi, edx
rol ecx, 0x10
xor ecx, edx
and ecx, edx
mov edx, esi
add ecx, edi
sub edi, esi
inc edx
jmp 0x4eb5c0
push 0x4abea2bc
add edx, edi
shl edx, 0x15
and edx, 0x4d9fd8d4
or ecx, esi
add edi, edx
mov ecx, 0x4da09fae
xchg ecx, edi
xor edi, esi
jmp 0x4eb4fb
push 0x4abf397d
sub esi, ecx
and ecx, edi
sub ecx, esi
add ecx, edi
add ecx, 0x4da7ca77
or esi, 0x4da808a5
sub edi, 0x4da845be
xor edx, ecx
add ecx, edx
or edi, esi
mov esi, 0x4da94279
or ecx, 0x4da980dd
or ecx, esi
add ecx, 0x4da9f84e
xchg esi, edx
bswap edi
jmp 0x4ec5d6
push 0x4aa0ec7d
add edx, ecx
xor edi, ecx
bswap edi
mov edx, esi
xor ecx, edi
xor esi, edi
xchg ecx, esi
jmp 0x4ebcc1
push 0x4ab4b1c7
or edx, ecx
mov ecx, esi
inc ecx
sub esi, 0x4dc68b2f
bswap esi
ror esi, 0x19
and edi, edx
xchg ecx, edx
add edx, edi
not edx
jmp 0x4e9e86
call ebx
xchg edi, esi
dec esi
mov ecx, esi
add esi, ecx
shr edi, 0xa
jmp 0x4eafce
call ebx
or esi, edi
dec edx
mov esi, 0x4dcc75de
or ecx, esi
mov edi, edx
xor edx, esi
jmp 0x4eb85b
push 0x4ab3ad48
and edx, 0x4dcd99cc
sub ecx, edi
xor edi, edx
xor esi, 0x4dce5333
sub edi, edx
or edi, ecx
add ecx, edx
add edx, esi
bswap ecx
jmp 0x4eb753
mov ebx, 0x75624153
mov esi, edi
inc edx
xor edi, esi
mov edi, ecx
xchg esi, ecx
and esi, edx
jmp 0x4ec622
push 0x4ab2d1c8
dec esi
sub ecx, esi
shl ecx, 0x14
jmp 0x4ec4ea
call fcn.004eccd6
shl edx, 0x10
xor edi, ecx
or edi, 0x4dd64d88
rol edi, 0x12
bswap ecx
or edi, ecx
sub ecx, edx
ror esi, 0x13
jmp 0x4eb92f
pop ebx
and edx, edi
neg esi
bswap esi
sub edi, ecx
xchg ecx, esi
xor ecx, esi
shl edi, 0x15
ror esi, 0x10
and esi, ecx
mov esi, edx
dec edx
and esi, edi
ror ecx, 0xe
jmp 0x4eb943
call fcn.004eccd6
add ecx, 0x4ddb3d8a
and edx, esi
and edx, 0x4ddbb859
shr edx, 0x15
bswap ecx
shr ecx, 2
inc ecx
jmp 0x4ec54b
pop ebx
and edi, 0x4ddd2320
and esi, edi
inc esi
dec ecx
and edi, 0x4dde2db6
sub ecx, edx
add edi, esi
xchg esi, ecx
jmp 0x4eaba4
pop ebx
shr esi, 0x18
add ecx, 0x4de18fd0
add edx, ecx
xor ecx, edi
and ecx, 0x4de246b9
xor esi, ecx
mov ecx, edx
not edi
and edi, esi
add ecx, edx
xor edx, esi
jmp 0x4eba1e
push 0xe8919
or edx, edi
sub ecx, edi
mov edx, edi
mov edx, ecx
mov esi, edx
not edx
mov edi, esi
and edi, ecx
mov edi, edx
jmp 0x4eb35f
call ebx
xor edx, esi
or esi, 0x4de93a43
not esi
add ecx, edi
dec ecx
jmp 0x4ea7bf
pop ebx
xchg edi, esi
and esi, edx
sub edx, edi
and edx, esi
neg ecx
add edi, 0x4deb8f14
shl edx, 3
or edx, edi
sub edi, ecx
mov esi, ecx
rol ecx, 0x15
jmp 0x4eb2d3
pop ebx
sub edi, 0x4df07e92
mov ecx, edi
and edi, 0x4df10860
and edi, edx
inc esi
xor edx, edi
or edx, esi
or esi, 0x4df23dd1
jmp 0x4ec7c1
pop ebx
xor ecx, 0x4dfb93a5
or edi, esi
and edi, 0x4dfc0f8c
and edx, edi
ror edi, 3
sub ecx, esi
shl ecx, 0x15
xor esi, ecx
jmp 0x4ecb1d
push 0x4aa71cfa
sub esi, 0x4e0b8a1b
add edx, edi
mov esi, ecx
mov esi, edi
or edi, edx
neg esi
xchg edi, esi
not edx
or edx, ecx
inc edx
shl ecx, 2
add esi, 0x4e0e439a
jmp 0x4eab17
pop ebx
or edx, 0x4e11d93a
or edx, edi
shl esi, 0x17
mov esi, edx
mov edx, esi
bswap ecx
and edi, ecx
xor edi, edx
jmp 0x4ec47c
mov ebx, 0x75624153
xor edi, ecx
mov esi, edi
or edi, ecx
jmp 0x4eb87d
push 0x4aaa84f8
mov edi, edx
mov edi, 0x4e151eb3
mov esi, ecx
xor ecx, edi
shl edi, 0xc
xchg esi, edi
add edx, 0x4e16535d
rol edi, 0x11
jmp 0x4ebb6b
pop ebx
bswap ecx
xor edi, ecx
and ecx, edx
jmp 0x4eb301
push 0x4aa1c3b9
xchg esi, edx
xchg ecx, edx
bswap edx
mov ecx, edx
and edi, edx
shl ecx, 4
xor edi, edx
shr ecx, 0x12
xchg esi, ecx
dec edi
xor esi, edx
add esi, edi
jmp 0x4ea55b
push 0x4aa1346e
or edi, esi
mov ecx, edx
xchg ecx, edi
rol esi, 0xd
jmp 0x4ec0e5
mov ebx, 0x183c2e20
xor ecx, edx
neg edi
add edi, edx
and ecx, esi
xor edx, esi
sub ecx, edx
bswap esi
xchg edi, ecx
xor ecx, edx
and esi, 0x4e2d1670
sub edx, 0x4e2d554e
mov ecx, edx
xor esi, 0x4e2dd08d
jmp 0x4e9dcc
call ebx
neg ecx
xchg edi, esi
shr edi, 1
or edi, 0x4e3144eb
sub esi, 0x4e3183dc
dec esi
or esi, edx
xor edx, 0x4e32c980
jmp 0x4e9e23
pop ebx
inc ecx
xchg edi, ecx
xchg ecx, edi
bswap edi
mov esi, edi
and edx, ecx
mov esi, edi
sub esi, edi
xchg ecx, esi
jmp 0x4eb671
call ebx
sub ecx, edx
xor ecx, 0x4e4f716f
add edi, esi
mov ecx, edi
ror ecx, 0xe
xor edi, ecx
bswap ecx
and edx, ecx
rol edx, 0xc
mov edi, edx
jmp 0x4eac5f
pop ebx
sub edi, esi
inc ecx
xor ecx, edx
sub edx, edi
or ecx, edx
shr esi, 1
mov ecx, esi
mov esi, edi
or edx, esi
jmp 0x4eaa34
push 0x4abad6e0
sub edi, 0x4e5d8452
xor edx, ecx
shr esi, 0xb
or esi, edx
bswap edi
shl edi, 0x14
sub esi, edx
jmp 0x4eb008
pop ebx
bswap ecx
bswap ecx
add ecx, edi
and esi, ecx
and edx, ecx
mov ecx, edi
inc esi
nop
add esi, edx
jmp 0x4eb189
call ebx
and ecx, edx
shl ecx, 0xe
xor edx, edi
xchg esi, edx
shr ecx, 0x10
dec edx
sub edi, ecx
xor esi, 0x4e6fff3d
jmp 0x4e9deb
call fcn.004eccd6
add ecx, 0x4e733bef
mov ecx, esi
xor edi, esi
xor edi, ecx
ror edi, 9
not edx
add edx, esi
dec ecx
jmp 0x4ea85d
push 0x4aa17c96
sub ecx, edi
sub esi, edi
sub edx, 0x4e75cf42
xor esi, 0x4e761e19
xchg ecx, edx
neg esi
xor edx, ecx
add esi, ecx
ror edx, 6
jmp 0x4ebc62
push 0x4a9eedd4
mov ecx, 0x4e80a422
xor ecx, esi
or edx, edi
and ecx, edx
xchg edx, ecx
xchg edi, ecx
jmp 0x4ea1a7
pop ebx
mov edi, 0x4e8a60e6
rol edi, 0x16
mov ecx, 0x4e8ade61
xor ecx, 0x4e8b1d54
xor esi, 0x4e8b5df0
xchg edi, ecx
inc edx
sub edi, 0x4e8c1976
mov esi, 0x4e8c6896
xchg esi, edx
mov edx, ecx
sub edx, esi
xchg ecx, esi
mov edi, 0x4e8d9ba8
jmp 0x4ea5af
pop ebx
ror esi, 0x1e
add ecx, edi
add ecx, edi
or edx, edi
mov ecx, edx
add esi, ecx
or esi, edi
bswap edx
shr edi, 0xb
and esi, edx
xor esi, 0x4e92c62a
jmp 0x4eb198
mov ebx, 0x75624153
not ecx
bswap esi
or edx, edi
or edi, esi
and edi, ecx
add edi, 0x4e9d2297
sub ecx, edx
jmp 0x4eaa54
mov ebx, 0x75624153
or esi, ecx
add edx, edi
or edi, 0x4eb7076d
neg edx
shr edx, 0x18
ror edx, 0x14
or edi, 0x4eb81568
xor edi, ecx
sub ecx, edx
ror esi, 8
dec ecx
jmp 0x4eaf02
pop ebx
sub esi, ecx
ror esi, 0xf
inc edx
or esi, 0x4eba3e36
sub edx, edi
or edi, ecx
mov esi, edx
or esi, 0x4ebbfeb0
mov edx, ecx
or esi, edi
jmp 0x4eb069
push 0x4aa4dc6d
mov ecx, 0x4ebccaaa
add edx, edi
xor ecx, edx
xor edi, edx
sub esi, edx
xchg edi, ecx
add edi, ecx
bswap edi
add esi, edi
not esi
and esi, edx
and ecx, edx
xor esi, 0x4ebfbab8
jmp 0x4ea806
push 0x4ab31a4f
xchg esi, ecx
add edi, edx
or esi, ecx
or ecx, edi
jmp 0x4eae52
call ebx
dec ecx
add ecx, 0x4ec97170
xor edx, esi
mov esi, ecx
add edi, edx
sub esi, edx
xor edi, edx
add esi, edx
or edx, esi
inc ecx
jmp 0x4eabf1
mov ebx, 0x75624153
sub edi, edx
or esi, 0x4ecc01b3
add esi, 0x4ecc40a6
sub esi, ecx
neg edx
mov esi, 0x4ecd0ca5
xor ecx, 0x4ecd4b93
and edx, 0x4ecd8a7e
inc edx
add ecx, esi
dec esi
bswap edx
jmp 0x4ecc2a
push esp
inc edi
shl edx, 0x19
xchg ecx, esi
mov edi, 0x4ecfa927
or edx, esi
dec esi
and esi, ecx
jmp 0x4e9ee8
mov ebx, 0x75624153
xchg edi, ecx
mov edx, esi
mov edx, ecx
xor edi, 0x4ed3c759
xor edi, esi
xor ecx, edx
or ecx, edx
sub esi, 0x4ed4ce20
and ecx, edx
neg edi
jmp 0x4ea8ef
call fcn.004eccd6
xor ecx, 0x4ed82f16
shr edx, 0xe
add ecx, esi
xor esi, edi
neg ecx
xchg esi, edi
dec edx
jmp 0x4ec8b8
mov ebx, 0x4132136a
xor ecx, 0x4edeae71
xor esi, 0x4edeeebd
shl esi, 0xc
sub ecx, 0x4edf7ea4
xor ecx, edx
sub ecx, esi
jmp 0x4ecaa0
mov ebx, 0x183c2e20
shl ecx, 0x1f
xor esi, 0x4ee0909e
xor edx, ecx
mov edx, edi
sub esi, ecx
mov edi, ecx
mov edx, edi
not edi
jmp 0x4e9f49
push 0x4ac1461f
sub edi, edx
not ecx
and esi, edx
mov esi, ecx
sub edx, ecx
xchg esi, ecx
and ecx, edx
not edi
xor ecx, edi
inc ecx
mov esi, 0x4ef95429
sub edx, ecx
shl edi, 0xb
jmp 0x4eaf64
pop ebx
sub ecx, 0x4efdaf3e
and esi, 0x4efdee12
not esi
sub edx, edi
add ecx, edx
rol edx, 7
neg edx
xor edx, ecx
sub esi, edi
jmp 0x4eb994
pop ebx
xor esi, edi
mov ecx, esi
sub ecx, edx
xor esi, 0x4f04d1cb
and ecx, 0x4f050f17
and edx, edi
or esi, ecx
add edi, esi
or ecx, edx
mov esi, edi
and edi, edx
xchg edi, esi
not ecx
add edi, esi
jmp 0x4ec681
call ebx
sub edx, ecx
sub ecx, edx
mov ecx, esi
ror edi, 0x1a
not esi
shl esi, 6
mov edi, esi
xor ecx, esi
and edx, 0x4f0c2716
jmp 0x4ebc56
mov ebx, 0x183c2e20
add edi, esi
xor edx, edi
and esi, ecx
add ecx, edx
sub esi, ecx
shl edx, 0xe
xchg ecx, edx
rol edi, 1
sub edi, edx
jmp 0x4eb130
pop ebx
add esi, 0x4f276bba
shr ecx, 0xe
xor ecx, esi
add ecx, esi
neg edx
sub esi, ecx
xor edi, edx
and ecx, esi
sub ecx, edi
shr edi, 4
neg edi
jmp 0x4eb561
call fcn.004eccd6
mov esi, edx
xor ecx, esi
mov ecx, 0x4f2f812e
or edi, ecx
mov ecx, edx
add edx, edi
jmp 0x4e9d9c
push 0x4aa4947e
and ecx, edx
nop
add edx, ecx
or esi, edx
mov esi, edi
xor edi, 0x4f3a267b
xor esi, 0x4f3a6532
bswap ecx
and esi, 0x4f3ae4f7
ror ecx, 4
neg esi
not esi
add ecx, edx
jmp 0x4ec49e
call fcn.004eccd6
shr ecx, 0xe
and ecx, esi
mov edi, edx
add edi, esi
xchg edi, esi
mov edi, esi
add edi, edx
add edx, ecx
dec edi
xchg ecx, edx
sub edx, esi
jmp 0x4eb7a9
call ebx
xchg ecx, edi
and ecx, edi
dec ecx
add edi, esi
and esi, edi
shl edi, 0x1a
xchg esi, ecx
or esi, edi
sub edx, edi
rol edx, 0x17
add edx, 0x4f476561
jmp 0x4eae01
call fcn.004eccd6
or edx, 0x4f4e54b0
ror ecx, 0xe
shr edx, 0x1f
mov ecx, edi
shl edx, 0x1b
add edi, ecx
xor edx, edi
or ecx, 0x4f50176c
rol esi, 0x17
bswap esi
mov ecx, edi
mov ecx, edx
add edx, ecx
jmp 0x4ea9f0
call fcn.004eccd6
xor edx, ecx
xchg esi, ecx
xchg ecx, esi
add edi, ecx
or esi, edx
and ecx, edx
mov ecx, 0x4f5310c6
or ecx, 0x4f534fc9
add edi, edx
mov esi, edx
not edx
jmp 0x4ebece
call ebx
or ecx, 0x4f5471a7
add edi, esi
neg edx
shr edx, 0x11
xchg esi, ecx
mov esi, ecx
xchg esi, edx
or edx, ecx
jmp fcn.004ea705