Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff1a
jne 0x40106b
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffefa
jne 0x401108
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff26
jne 0x4011a5
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff0e
jne 0x401210
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
call sub.advapi32.dll_BackupEventLogA
call sub.kernel32.dll_CreateTapePartition
ret
jmp 0x4a981c
neg edx
or edx, esi
xor edx, esi
jmp 0x4ab992
push 0x9eb7c6e6
sub ecx, esi
or edx, edi
mov esi, edi
or edi, 0x9f79ed5e
or edx, edi
add edx, esi
add ecx, 0x9f7aa932
shr edx, 0xa
or esi, edi
xchg ecx, esi
mov esi, edi
add edi, 0x9f7bf69c
and edx, edi
or esi, ecx
jmp 0x4ac2f0
pop ebx
or ecx, 0x9f87a7f6
xchg ecx, esi
or ecx, edi
sub edx, 0x9f887690
add edi, ecx
and edx, 0x9f88f4aa
sub edx, 0x9f893506
sub edx, ecx
or edi, ecx
xor edi, esi
jmp 0x4aaa22
mov ebx, 0x75624153
mov edx, esi
sub edx, 0x9f9f2774
mov edi, 0x9f9f634a
shr edx, 0x17
jmp 0x4ac461
mov ebx, 0x75624153
and ecx, edi
neg ecx
xor ecx, edx
xor edx, esi
add esi, edi
xchg ecx, edi
or edi, edx
sub esi, edx
jmp 0x4abfba
pop ebx
not edx
xchg ecx, esi
and ecx, 0x9faed038
ror edi, 0x1d
not esi
xor ecx, 0x9faf81c6
xor edx, edi
add edi, ecx
or edi, edx
mov edi, 0x9fb07524
jmp 0x4ac2b1
call ebx
bswap edx
ror esi, 0x14
xchg edx, ecx
mov edi, edx
ror edi, 0x10
xor edi, esi
not ecx
or edi, 0x9fb9d702
jmp 0x4aa545
pop ebx
shl ecx, 0x11
or ecx, edi
jmp 0x4aa883
call ebx
mov edi, ecx
mov edi, esi
add esi, edx
add esi, 0x9fc4a84c
or esi, edi
xchg edi, edx
bswap edx
not edx
or edx, ecx
or ecx, 0x9fc61f22
xor edi, esi
dec ecx
jmp 0x4ab962
call fcn.004aae1c
mov esi, edx
xchg ecx, edi
rol edi, 0x17
mov ecx, edx
jmp 0x4ac3df
mov ebx, 0x75624153
xchg edx, ecx
sub edx, edi
rol edi, 0x11
mov edx, 0x9fd09dd2
and ecx, esi
inc edx
shl edi, 8
mov edi, esi
nop
xchg esi, edi
inc edx
sub ecx, esi
jmp 0x4a9d4c
pop ebx
and edx, ecx
mov edi, 0x9fd84228
shl esi, 0xc
xor edx, esi
or edi, edx
xchg edx, edi
mov ecx, esi
or edx, ecx
add edx, ecx
mov ecx, 0x9fda28c8
jmp 0x4ab736
call ebx
or edi, edx
xor edi, ecx
add ecx, esi
add edi, edx
xchg ecx, edi
xor esi, edi
inc edx
shl edi, 0x12
jmp 0x4aa0b3
push 0x9ebb668c
xchg ecx, esi
or ecx, edx
and ecx, edx
rol esi, 0x18
and ecx, 0x9fdf7ebe
or edx, edi
xor ecx, 0x9fdff66c
add edx, ecx
jmp 0x4abfd6
pop ebx
and ecx, edi
shl esi, 2
and edx, edi
and esi, edi
mov esi, 0x9fe17eee
or esi, edi
jmp 0x4aa7ae
push 0x9eb1da0a
mov esi, ecx
mov edx, esi
xor esi, edi
mov edx, ecx
shl edi, 0x14
neg edx
neg ecx
and edi, ecx
jmp 0x4ab27e
call fcn.004aae1c
sub edx, edi
neg edi
or esi, edx
not esi
mov esi, 0x9ff34d88
sub esi, ecx
rol ecx, 2
and esi, ecx
mov esi, 0x9ff44b22
and edx, esi
neg esi
inc edx
jmp 0x4aad92
call ebx
or edx, edi
add ecx, 0x9ff59148
add edx, esi
add edx, 0x9ff60682
rol esi, 0x16
shl edx, 0x1e
not esi
neg edx
mov edx, 0x9ff7f8da
add esi, edi
sub ecx, edx
xor ecx, edi
xchg esi, edi
not esi
jmp 0x4ac213
mov ebx, 0x75624153
sub edx, 0x9ffcb8f2
or esi, edi
neg esi
mov esi, edx
ror ecx, 2
dec esi
sub edi, esi
bswap ecx
jmp 0x4aa12d
pop ebx
mov edx, ecx
bswap ecx
rol edi, 0xa
sub edi, esi
sub esi, 0x9ffff5a6
add ecx, 0xa0003674
add edx, edi
and edi, edx
jmp 0x4ab890
mov ebx, 0x75624153
mov esi, edx
inc ecx
or edi, 0xa001888a
or edx, 0xa001c924
mov edi, 0xa00209e6
mov esi, edx
sub esi, 0xa00298ca
xchg esi, edx
jmp 0x4ab1bc
push 0x9eb1430e
or ecx, esi
and edx, ecx
sub ecx, esi
xchg ecx, edx
jmp 0x4ac0e5
pop ebx
and edx, ecx
mov edi, ecx
shl ecx, 0x1c
add ecx, edx
ror ecx, 0x1e
mov ecx, edx
and edx, esi
neg edi
xchg edx, esi
nop
sub edi, edx
or esi, ecx
jmp 0x4a9cc2
call fcn.004aae1c
add edx, esi
add edi, esi
sub edx, ecx
and edx, 0xa0128b32
mov ecx, edx
sub edi, ecx
mov edi, ecx
or ecx, esi
xor esi, ecx
sub edx, edi
nop
or ecx, 0xa0149374
xchg ecx, esi
or ecx, edx
jmp 0x4ac1b0
push 0x9ebe18de
xor ecx, esi
shl ecx, 5
mov ecx, edi
ror edx, 0x1a
sub edi, edx
add edx, 0xa019ce34
sub edx, 0xa01a0e86
sub esi, edi
sub esi, ecx
add ecx, edx
jmp 0x4aa299
pop ebx
sub ecx, edx
not edi
and ecx, esi
dec edi
xor edi, esi
or esi, 0xa0288f0a
jmp 0x4aa467
mov ebx, 0x75624153
sub edx, 0xa02bed20
shl ecx, 0x1b
xor edx, ecx
sub esi, edx
shl edx, 7
sub esi, edi
or edi, ecx
sub ecx, esi
xor ecx, edx
sub edi, edx
mov esi, 0xa02e4e52
or edx, esi
jmp 0x4aaab9
push 0x9ec3d06c
xchg edi, esi
inc ecx
neg edi
or ecx, edx
sub esi, edi
ror ecx, 3
xor esi, edi
dec edx
add edi, ecx
and ecx, edx
jmp 0x4ac50d
pop ebx
xor esi, edx
shr esi, 0xb
ror ecx, 7
and ecx, 0xa04b9966
add esi, ecx
or edx, edi
mov ecx, esi
and edx, 0xa04c9202
mov edx, edi
xor edx, ecx
jmp 0x4aaaed
mov ebx, 0x75624153
bswap ecx
and edx, esi
shr ecx, 0x10
add edi, ecx
add edi, edx
add edx, edi
xchg esi, edx
sub esi, 0xa055201c
xor edi, ecx
add edi, ecx
jmp 0x4ab094
pop ebx
dec edi
and edx, 0xa05b2b3e
and edx, edi
xchg ecx, edi
sub edi, edx
dec edx
mov edi, 0xa05c63ee
mov edi, ecx
jmp 0x4a9969
push 0x9ec4b546
not ecx
add esi, 0xa07d8c9c
dec edi
and esi, ecx
jmp 0x4ac08a
push 0x9ea1f666
mov esi, ecx
add esi, ecx
mov edi, 0xa0825292
xor edi, esi
add edi, esi
or edx, 0xa08314e4
nop
shl edx, 0x1a
sub ecx, edi
and edi, ecx
jmp 0x4ab00a
pop ebx
sub ecx, 0xa0845972
xor edx, edi
xor ecx, esi
or esi, ecx
jmp 0x4aa7ef
pop ebx
xchg ecx, edx
or edi, edx
shl edi, 0x16
rol edx, 0x1a
and esi, ecx
xor edi, 0xa08994d4
or esi, ecx
neg ecx
neg edi
add edx, ecx
nop
dec edi
sub edx, 0xa08b4940
neg ecx
jmp 0x4abd19
pop ebx
xchg ecx, esi
add edi, esi
and esi, 0xa08de2de
add ecx, edi
add esi, edi
inc edx
jmp 0x4ab331
pop ebx
and esi, ecx
mov esi, 0xa08f2f0c
and edx, esi
xor esi, 0xa08fa580
sub esi, edx
xor ecx, edx
or esi, 0xa090578e
dec ecx
ror esi, 0xf
xchg ecx, esi
or edi, ecx
shr ecx, 9
jmp 0x4abbd8
call ebx
xor edx, edi
mov esi, edx
xor esi, edx
and ecx, edx
or edi, ecx
neg esi
jmp 0x4a9e75
pop ebx
sub ecx, edi
xor edx, ecx
or edi, ecx
xor edi, edx
and ecx, edi
mov edx, ecx
ror edx, 0x16
and ecx, 0xa0951cd2
add ecx, edi
not edi
xchg edi, edx
xor edx, esi
xor esi, edi
mov esi, ecx
jmp 0x4abdb6
push 0x9ea530b8
mov edx, ecx
xchg esi, ecx
and esi, 0xa09745a0
shl edx, 0x1f
or esi, ecx
or edi, esi
nop
xor edx, esi
xor edi, esi
sub edx, 0xa0999ce4
xor edx, ecx
mov ecx, edx
mov edx, 0xa09a5952
sub ecx, esi
jmp 0x4a9b83
push 0x9ec20178
and ecx, edi
add ecx, 0xa09d0180
rol ecx, 0x1e
xchg edx, esi
xchg edi, edx
xor edx, ecx
jmp 0x4a9d8a
push 0x9ea1ab92
sub ecx, edi
shr ecx, 6
and edi, 0xa0a292ee
rol edx, 0xa
xor esi, ecx
xor edi, 0xa0a36446
or edi, esi
and edx, edi
and ecx, esi
and esi, edx
jmp 0x4aa789
push 0x9eae9c0c
xchg edi, esi
sub esi, edx
dec edi
neg ecx
nop
xchg edx, ecx
jmp 0x4ac5ac
pop ebx
sub ecx, edi
xchg edi, esi
xor ecx, edi
or ecx, edx
jmp 0x4aaa0d
pop ebx
mov edi, ecx
nop
sub esi, edi
xor esi, edx
or edi, esi
add edx, esi
xor edi, ecx
add edx, ecx
jmp 0x4aa2da
push 0x9eadba62
and edi, ecx
mov esi, ecx
xor ecx, edx
rol edi, 0xa
neg edx
and edi, esi
bswap ecx
shr edx, 0x13
jmp 0x4ab91f
call ebx
inc edi
xor edi, ecx
mov edx, ecx
add edi, 0xa0b73016
not ecx
add edi, 0xa0b7a938
add edi, esi
neg ecx
add ecx, edi
add ecx, edx
add edi, 0xa0b8de10
sub edi, esi
shl edi, 0x1d
ror edi, 8
jmp 0x4ac3b7
call fcn.004aae1c
add edi, edx
xor edx, ecx
sub edx, edi
or esi, 0xa0bf3f0a
and ecx, edi
ror edx, 0xd
or edx, esi
sub esi, 0xa0c04ebe
not edx
add esi, ecx
or ecx, edx
xor edi, esi
or esi, 0xa0c1e6f6
shr edi, 0x12
jmp 0x4a9ce6
push 0x9ebd7fa8
mov ecx, edx
and edi, esi
jmp 0x4ab109
pop ebx
shl edi, 0x1e
xchg edx, ecx
xor edx, ecx
ror esi, 8
sub edx, esi
mov ecx, esi
jmp 0x4ac7b7
call fcn.004aae1c
shr esi, 0x15
add ecx, 0xa0c84e92
and edi, edx
xchg edx, esi
neg edx
shr ecx, 4
neg ecx
and ecx, edx
or edx, ecx
ror ecx, 5
jmp 0x4a9fa7
call fcn.004aae1c
mov ecx, edx
add ecx, 0xa0d46684
sub edi, edx
add esi, 0xa0d4de62
add esi, ecx
sub esi, edx
xchg ecx, edi
xor ecx, edx
jmp 0x4abd09
mov ebx, 0x75624153
xchg edx, esi
mov esi, ecx
add edi, edx
sub edx, edi
not edi
sub esi, 0xa0d7650a
xor edx, ecx
sub esi, edx
jmp 0x4ab2a1
push 0x9ec032ee
add edx, esi
or edx, ecx
or ecx, 0xa0e2520e
mov edx, edi
xor edi, esi
xchg edx, edi
bswap esi
not edi
jmp 0x4aa4e5
call ebx
add esi, edi
sub ecx, esi
bswap edx
and ecx, esi
shr edx, 0x1b
add esi, ecx
add ecx, esi
rol edi, 0x17
jmp 0x4aa831
call fcn.004aae1c
sub esi, 0xa0f2d452
add edi, 0xa0f3102e
bswap esi
rol esi, 0x1d
jmp 0x4ab90f
push 0x9eae50b8
shl edx, 0xd
sub edi, edx
xchg edx, ecx
shr esi, 2
and edi, esi
and edx, ecx
neg edi
add ecx, esi
or esi, 0xa0f677b2
mov ecx, edx
jmp 0x4aa98f
push 0x9ea4e61a
mov esi, 0xa103a402
neg edx
mov edi, esi
dec edi
and ecx, 0xa104d7f2
sub esi, ecx
or edi, 0xa1055732
inc edi
or edx, esi
not ecx
jmp 0x4aa8aa
pop ebx
and edx, 0xa10da5a8
xor esi, edx
mov esi, ecx
and edx, 0xa10e62d0
or edx, 0xa10ea344
not edx
shr edi, 0x1d
mov ecx, 0xa10f7602
or edi, ecx
and edx, 0xa10ff504
jmp 0x4abcd9
push 0x9ea2402e
and edx, edi
dec esi
add edx, edi
add edx, esi
neg ecx
add ecx, 0xa11a849e
jmp 0x4ac5c9
call fcn.004aae1c
add esi, 0xa12288fe
shr ecx, 0x19
xchg edi, edx
or edi, esi
xor edi, 0xa123883e
xor edi, 0xa123d9cc
shr ecx, 9
sub ecx, esi
xor esi, 0xa1249ae2
bswap edx
mov esi, edx
xchg edi, esi
jmp 0x4ab44f
push 0x9ebdcbaa
and edi, edx
bswap esi
xor edi, edx
mov edx, edi
sub ecx, edx
inc edx
not edx
and edx, ecx
ror edi, 0x1a
sub edx, ecx
rol edi, 9
xor edx, edi
jmp 0x4aa184
call fcn.004aae1c
and esi, edi
and edx, esi
xor ecx, edi
add edi, esi
add esi, ecx
sub esi, edx
and edi, 0xa139f6ee
xor esi, ecx
jmp 0x4a9c42
pop ebx
bswap edi
mov edx, 0xa13ad21c
sub ecx, esi
add edx, esi
and esi, edx
add edx, ecx
jmp 0x4ac66b
mov ebx, 0x75624153
or edx, edi
bswap ecx
not edx
bswap ecx
add edi, 0xa147105a
add edx, ecx
or ecx, 0xa1478676
shl esi, 0x11
jmp 0x4ac635
call fcn.004aae1c
or edx, esi
xchg edx, esi
add ecx, edx
not edx
and edx, edi
sub edx, ecx
ror edx, 0x10
xor edi, ecx
and esi, 0xa14a1320
shr edi, 0x19
jmp 0x4ac8be
call fcn.004aae1c
sub edx, 0xa14aa5ac
xor edx, esi
sub esi, ecx
mov ecx, edx
mov ecx, 0xa14ba0fa
xchg edi, ecx
jmp 0x4aa870
pop ebx
sub esi, ecx
ror esi, 8
add esi, ecx
sub esi, 0xa152d140
xor edi, ecx
ror edi, 4
and esi, edx
xor edx, edi
or esi, edx
xchg esi, edx
or edi, esi
or esi, ecx
jmp 0x4aaf5c
call ebx
or ecx, esi
mov ecx, edx
jmp 0x4ac6f5
push 0x9eabf4da
and edi, ecx
mov esi, 0xa16faa4a
add esi, edx
add edi, edx
sub ecx, edx
xchg edx, ecx
sub esi, 0xa170e4b4
mov edi, ecx
and esi, ecx
ror edi, 0xe
dec edx
and edi, edx
jmp 0x4aa043
push 0x9eb4839e
or esi, edi
and esi, 0xa172cd46
bswap esi
xchg edi, esi
add ecx, edx
shr edx, 0x1d
jmp 0x4ab8aa
pop ebx
add esi, edx
add edx, edi
jmp 0x4aab20
push 0x9eb4382c
bswap ecx
inc edx
xor edi, esi
ror edi, 0x18
add ecx, esi
add ecx, edx
mov edx, 0xa186b6d2
sub esi, 0xa186f308
jmp 0x4ab4f2
pop ebx
add edx, 0xa19bd2f2
inc edx
shl edi, 0x10
mov edx, ecx
or ecx, edx
shl edi, 0x19
mov edi, ecx
xor esi, 0xa19d9f0c
shr edx, 2
xor edx, esi
jmp 0x4ab1da
push 0x9eb51bdc
sub ecx, edx
mov esi, ecx
bswap esi
xchg edi, ecx
xor edx, 0xa1a2a31c
shr esi, 4
and edi, 0xa1a324aa
or esi, edi
or ecx, 0xa1a3b4f0
mov ecx, 0xa1a3f4c0
not ecx
and edi, esi
neg edi
sub ecx, esi
jmp 0x4aac09
push 0x9ec468ec
mov ecx, edx
add edx, esi
or esi, 0xa1a7734e
mov esi, 0xa1a7b30c
not esi
sub esi, 0xa1a835fc
or esi, ecx
add edx, 0xa1a8c4a0
neg edi
neg edi
mov edx, 0xa1a98878
not edi
jmp 0x4aa740
pop ebx
or ecx, edx
shl edx, 0xd
and esi, edi
sub esi, ecx
not esi
xchg edx, edi
or ecx, esi
add esi, ecx
nop
add ecx, edx
jmp 0x4ac8d1
push 0x9eb4cffa
xchg edx, ecx
sub edi, esi
and edi, esi
neg edx
bswap ecx
mov edi, esi
jmp 0x4ab77e
pop ebx
sub edi, ecx
mov ecx, edi
xchg edx, edi
dec esi
xor esi, edi
xchg edi, edx
or ecx, esi
shr edi, 0x1d
xchg esi, edi
rol edi, 0x11
jmp 0x4abaa0
call ebx
or edx, edi
inc edx
shr edi, 0x12
rol edx, 0x10
jmp 0x4a9df5
push 0x9eae0566
and esi, edx
shl edi, 0x1d
shl edx, 0xb
or ecx, edx
and edi, 0xa1c0d73c
mov esi, 0xa1c113fc
add esi, edi
add ecx, edx
shl edi, 8
and esi, edx
jmp 0x4aadf8
pop ebx
add edx, 0xa1c3eef2
shl esi, 5
rol esi, 0xf
ror edi, 0x1d
jmp 0x4abf80
push 0x9ea10b34
shr edx, 0x1c
shr edx, 4
not edi
xor esi, edi
add ecx, edi
ror edx, 0xc
sub edi, ecx
xor edi, ecx
jmp 0x4ac3f4
push 0x9ea99924
add edi, 0xa1d15e60
sub ecx, edx
add edx, ecx
and ecx, 0xa1d21e58
mov esi, ecx
dec edx
sub edi, ecx
sub edx, 0xa1d30c7c
jmp 0x4abb2c
push 0x9ea6f456
mov ecx, edx
xor edx, 0xa1d7a8cc
xor edx, esi
xchg edx, edi
mov edi, esi
add edx, ecx
jmp 0x4abe77
mov ebx, 0x75624153
and edi, edx
sub edi, edx
rol esi, 0x10
mov edi, esi
dec esi
sub ecx, edi
mov ecx, esi
xor ecx, 0xa1e18e92
sub esi, edx
sub edi, 0xa1e206fe
or esi, ecx
ror edi, 7
jmp 0x4a9f7f
mov ebx, 0x75624153
add esi, edi
add edx, 0xa1e7af24
shl ecx, 7
mov esi, ecx
mov esi, 0xa1e8708e
xor ecx, edx
jmp 0x4aabe7
pop ebx
sub edi, esi
and ecx, edx
ror ecx, 0x14
sub edi, edx
shl esi, 6
mov edx, esi
xor esi, 0xa1ecec7a
or esi, edx
xchg edi, ecx
xor edi, esi
jmp 0x4ac690
push 0x9ec1b4da
add edx, ecx
mov esi, 0xa1ee2ecc
xor ecx, edx
add esi, ecx
and edi, 0xa1eedfdc
mov ecx, esi
or edi, 0xa1ef557a
dec edx
add edi, 0xa1efddae
shr esi, 1
jmp 0x4aa8f5
push 0x9eaba9bc
rol ecx, 0x14
mov edx, 0xa1fb16aa
jmp 0x4ab4c9
call ebx
sub edx, ecx
rol edx, 0xa
not edx
not esi
jmp 0x4aa25a
pop ebx
add ecx, edi
add edi, 0xa1ff363c
and edx, edi
add edx, 0xa1ffac36
mov edx, edi
xchg ecx, edx
xchg edx, edi
xchg edx, ecx
jmp 0x4ac060
pop ebx
not edi
xor esi, edx
mov edx, ecx
xor edx, ecx
and edx, ecx
neg edi
sub ecx, 0xa20aa374
xchg esi, edi
not edi
xor edi, esi
jmp 0x4ab606
push 0x9ea73ec0
rol edi, 0x1b
or ecx, edi
ror ecx, 0xe
add esi, edi
or ecx, edi
sub ecx, esi
sub edi, ecx
mov edi, esi
or esi, ecx
sub ecx, edi
jmp 0x4a9abd
pop ebx
rol edi, 0xb
mov ecx, 0xa22a834c
sub edx, edi
neg ecx
and esi, 0xa22b43b0
xchg ecx, esi
sub esi, ecx
not edi
jmp 0x4ac140
call fcn.004aae1c
add esi, edi
mov esi, 0xa22f4ab0
dec esi
or edi, ecx
xchg ecx, edi
sub esi, edx
ror ecx, 0x1a
inc esi
jmp 0x4aaa4e
push 0x9ebbb37e
or ecx, 0xa231285e
xchg esi, ecx
jmp 0x4abb9b
call ebx
and esi, ecx
sub ecx, edi
mov edx, edi
xor edi, esi
or edx, ecx
not ecx
sub esi, ecx
sub edi, 0xa2399062
mov esi, 0xa239cc46
sub ecx, edx
jmp 0x4aa846
push 0x9eb0f838
xor esi, edi
mov edx, esi
neg edi
add edi, 0xa23b69ae
neg ecx
or esi, edi
inc edx
add esi, edi
sub edx, ecx
and edx, esi
rol ecx, 0x1a
bswap esi
bswap edx
and esi, edx
jmp 0x4aa06b
mov ebx, 0x75624153
add ecx, edx
xchg edi, edx
or esi, 0xa23e8f98
or edx, 0xa23ecafa
inc esi
neg esi
jmp 0x4aab34
push 0x9eb18edc
shr edx, 0x15
add ecx, edx
ror edx, 0xe
or esi, ecx
mov esi, ecx
or edx, esi
bswap edx
xchg esi, edi
jmp 0x4a9f64
pop ebx
xchg edx, esi
or ecx, edx
sub edx, 0xa24a653c
shl ecx, 0xe
xchg esi, ecx
or esi, 0xa24b1458
shr edi, 8
dec edx
jmp 0x4aaccc
call ebx
or edi, esi
add ecx, 0xa25137c6
add ecx, edx
inc edx
xchg ecx, edx
xor ecx, 0xa2521f78
jmp 0x4ac798
pop ebx
dec edx
shr edi, 0x1f
mov esi, edi
or esi, ecx
jmp fcn.004aa226
pop ebx
or edx, ecx
mov ecx, esi
xor ecx, esi
add edx, ecx
sub esi, ecx
add edi, esi
mov ecx, edx
or edi, edx
jmp 0x4aa024
push 0x9eb81210
sub edi, 0xa266ad00
xor ecx, 0xa266e84a
sub esi, edx
xor ecx, edx
or ecx, edx
xor edi, 0xa267dc9e
and esi, 0xa26816a2
add edx, edi
and edi, edx
xchg edx, ecx
jmp 0x4ac8a9
pop ebx
mov ecx, 0xa272f57c
add ecx, edx
shr edx, 0x1e
add esi, edi
jmp 0x4ab8d9
call ebx
add edx, edi
rol edx, 0x13
sub ecx, esi
mov edx, edi
xchg ecx, edi
rol edx, 0xd
jmp 0x4aa9b9
push 0x9ea15eb6
sub ecx, edx
xor edi, esi
ror ecx, 0xf
xchg edx, edi
mov esi, edi
xor ecx, edi
xor esi, ecx
xor edi, ecx
or ecx, 0xa279ef02
add edi, 0xa27a2bc2
and esi, edx
sub edi, 0xa27aa25c
xchg edx, ecx
sub ecx, esi
jmp 0x4aa94e
call fcn.004aae1c
sub edx, esi
shr ecx, 0x15
mov edx, edi
and edi, 0xa27f438c
ror ecx, 7
shr edx, 0x1f
jmp 0x4ac03e
push 0x9ec41cdc
sub esi, edx
bswap ecx
jmp 0x4ab7cc
push 0x9ea94e6c
mov edx, edi
xor esi, edi
or edi, edx
and ecx, 0xa28f7d0c
shr edi, 0x18
or edx, 0xa28ff6ac
mov ecx, esi
or edi, 0xa2906c66
jmp 0x4aba34
mov ebx, 0x75624153
xchg ecx, esi
or edx, ecx
bswap esi
add edi, edx
mov edx, edi
sub edx, ecx
dec edx
rol edi, 0x1a
inc edx
add esi, edi
jmp 0x4ab2c5
mov ebx, 0x75624153
or esi, edx
xor esi, 0xa29563d6
shr esi, 0x18
add esi, edi
mov esi, edi
and ecx, esi
inc edx
or edx, ecx
shr ecx, 2
add esi, 0xa2974ec8
or ecx, edx
and edi, 0xa297c514
jmp 0x4aadcd
pop ebx
mov edi, 0xa298180c
sub ecx, esi
xchg edi, esi
xchg ecx, esi
dec ecx
xchg esi, edx
sub edi, ecx
inc edx
bswap edx
shr ecx, 4
jmp 0x4aaecc
call fcn.004aae1c
xor edx, 0xa29d1aec
xor ecx, edx
mov ecx, edx
or edi, edx
add edi, 0xa29e05c8
add edi, esi
bswap edi
or edi, 0xa29ec978
xor esi, ecx
or edi, edx
add edx, ecx
sub esi, ecx
not ecx
add edx, 0xa2a02c62
jmp 0x4a9e16
pop ebx
mov edx, ecx
xchg esi, ecx
add esi, 0xa2a1832a
rol edi, 6
jmp 0x4ac5f8
push 0x9ea90346
ror esi, 0x10
xchg esi, ecx
xchg edi, edx
xor edi, 0xa2a42cd6
jmp 0x4ac561
pop ebx
and edi, 0xa2ab0a26
add esi, edx
sub edx, 0xa2ab88ca
inc ecx
xor edi, esi
xor edi, 0xa2ac4a58
mov edi, esi
inc esi
shr ecx, 0x14
sub ecx, esi
nop
xor esi, edi
jmp 0x4abbf8
pop ebx
or ecx, esi
dec ecx
ror esi, 0xe
inc esi
add edi, ecx
and edx, 0xa2b825a0
jmp 0x4ab5e1
pop ebx
xchg edi, ecx
and ecx, edx
dec edi
inc edi
sub edi, edx
add esi, 0xa2ba7d8c
rol ecx, 0xd
sub esi, 0xa2bb007e
jmp 0x4a9e52
push 0x9eb85ed8
mov edi, ecx
or ecx, esi
or edi, edx
dec esi
mov edx, esi
xor edx, esi
jmp 0x4aa006
call ebx
add edx, edi
add edi, edx
sub ecx, esi
or ecx, edi
mov esi, ecx
or esi, edi
jmp 0x4a9bb5
push 0x9eb77b54
mov esi, edi
dec edx
sub esi, edx
xor edi, 0xa2ce48f8
xchg esi, edx
xchg esi, ecx
xchg edi, esi
mov esi, 0xa2cf46b2
jmp 0x4a988d