Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
xchg esi, ebx
rol ecx, 0x1f
call sub.user32.dll_GetMessageTime
not ecx
sub ebx, edi
rol ebx, 0xd
inc edi
and ebx, edi
cmp eax, 0xfffffed5
jne 0x40108e
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
ret
not esi
neg ebx
or ebx, ecx
not edi
and edi, 0xf7ce91ee
or esi, ebx
xchg ebx, esi
rol esi, 0x1c
call sub.user32.dll_GetMessageTime
sub ecx, 0xf7d0a513
mov edi, ecx
nop
and esi, ecx
rol ebx, 0x13
cmp eax, 0xfffffeed
jne 0x401153
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
ret
add esi, ebx
call sub.kernel32.dll_GetSystemDefaultUILanguage
not ebx
cmp eax, 0xfffffef9
jne 0x4011d6
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
ret
rol ebx, 0x12
xchg ebx, edi
and edi, 0xf7e2a7e7
add ecx, edi
dec esi
mov esi, edi
and esi, 0xf7e465a6
call sub.kernel32.dll_GetSystemDefaultUILanguage
add ecx, ebx
mov ecx, 0xf7e5a7c2
mov esi, ecx
add ecx, edi
or edi, 0xf7e71d01
add edi, ebx
cmp eax, 0xffffff00
jne 0x40126f
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_RtlEqualUnicodeString
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
call sub.ntdll.dll_NtOpenThreadToken
ret
jmp 0x494340
shr edi, 1
ror ecx, 0x18
mov esi, edi
add esi, ecx
sub ecx, ebx
jmp 0x49518e
pop esi
sub edx, edi
dec edx
or edi, 0xfcb0f227
xchg ecx, edi
or edi, edx
and edx, 0xfcb26a52
or edi, ebx
and ecx, edx
xchg edi, edx
jmp 0x496dd7
pop esi
sub ebx, edi
and edi, 0xfcc724f2
mov ebx, 0xfcc796ba
add edi, edx
xor ecx, edx
nop
mov edx, 0xfcc9b379
inc edi
xor edi, edx
inc ecx
jmp 0x496894
pop esi
add edx, ebx
shl ecx, 0xb
xchg ebx, ecx
not edi
sub edi, ebx
sub edi, edx
or edi, ecx
and edi, ebx
jmp 0x4959ee
push 0xf8e59cf0
and ecx, ebx
and ebx, edi
or ebx, edx
mov edx, ebx
shl ebx, 0x1c
mov ecx, edx
add edx, ebx
xor ecx, 0xfce401b0
jmp 0x495b28
mov esi, 0x4132136a
add edi, 0xfce48a29
xor ebx, edi
shr edx, 0xd
and edx, 0xfce60655
or edi, edx
ror ebx, 0x12
xor edi, edx
not ecx
or ebx, 0xfce89282
jmp 0x495de3
push 0xf8e6401d
or ebx, 0xfcebb71e
shr edi, 0x1f
xor edi, 0xfcecf3ff
jmp 0x4950b9
mov esi, 0x2774562b
sub ebx, edi
xor ebx, 0xfcff2ce0
add ecx, edx
xor edx, ecx
or ecx, edi
add ecx, edx
or edx, ecx
sub ecx, edi
xor ecx, 0xfd026074
add edx, edi
mov edi, ebx
jmp 0x4961b4
pop esi
xchg ecx, edx
inc ecx
xor ecx, ebx
xor ecx, 0xfd0957b2
rol ebx, 0x13
xor ebx, ecx
mov edi, 0xfd0adcbe
bswap edi
sub edx, edi
and ecx, ebx
sub ecx, ebx
jmp 0x496e2b
push 0xf8d723bc
mov edx, 0xfd1acf9d
sub edi, ecx
sub edx, edi
xor edx, 0xfd1c7bad
not ecx
mov ecx, ebx
sub edi, edx
jmp 0x496765
pop esi
sub edx, edi
add ebx, edi
or ebx, ecx
ror edi, 0x1c
or edi, ecx
sub edx, ebx
jmp 0x495308
mov esi, 0x2774562b
mov edi, ebx
or ecx, ebx
mov edx, edi
xor ecx, edx
and edi, 0xfd347cf0
sub edi, ebx
neg ebx
bswap ebx
add edi, ecx
jmp 0x49480c
pop esi
neg edx
ror ebx, 0x10
and edi, edx
xor ebx, ecx
and edi, ebx
add ecx, 0xfd3976cb
mov ecx, 0xfd39eb6b
mov ecx, 0xfd3a8ce7
xor edi, ecx
jmp 0x495af1
call fcn.00496fac
mov edi, edx
xchg ebx, ecx
sub edx, 0xfd44bc01
mov ecx, edi
xor ebx, edi
jmp 0x494fb6
push 0xf8f9a94b
bswap edi
neg edx
mov ecx, 0xfd581742
mov edi, ebx
dec edx
dec edi
sub ebx, edi
sub edx, 0xfd5a8477
or edx, edi
add ecx, ebx
bswap ebx
neg ecx
sub ebx, edi
jmp 0x494dbf
call esi
and edx, ebx
mov edx, edi
xor ecx, ebx
or ecx, 0xfd62df41
jmp 0x495b07
pop esi
sub edx, ecx
mov edi, 0xfd71a7c5
xor edi, ebx
add edx, edi
neg edi
bswap ecx
ror ecx, 0x12
xor edx, 0xfd7470e6
shr edx, 0x1c
or ecx, edx
jmp 0x495cfe
call esi
sub edx, ecx
xchg edi, ecx
xchg ecx, edi
jmp 0x4952c7
call fcn.00496fac
xor edx, edi
or ebx, ecx
neg edx
and ebx, edx
or ecx, 0xfdab7d04
jmp 0x496590
pop esi
add edi, ebx
ror edi, 0xa
or ebx, edi
sub ebx, edi
xchg edi, ecx
mov ebx, ecx
bswap edi
xchg edi, edx
mov edi, edx
jmp 0x494505
push 0xf8dad428
and ecx, edx
mov ebx, edi
and edi, 0xfddbd311
xchg ecx, edi
and edi, edx
add edx, edi
jmp 0x495290
push 0x40
or ebx, ecx
sub edi, ecx
and ecx, edx
or ecx, 0xfddf67bb
xchg edx, ecx
xchg edx, ebx
xor ecx, 0xfde0bd97
shl ebx, 0xd
and ebx, ecx
jmp 0x496ba3
push 0xf8fdd566
xchg ebx, edi
mov edi, edx
or edx, ecx
mov ebx, edx
neg ecx
and edi, 0xfe0ed846
sub edx, ecx
dec edx
mov ebx, 0xfe104ae4
add ebx, 0xfe10ba58
jmp 0x496c4b
push 0xf8fa1111
shl edi, 0x15
bswap edx
neg ecx
add edx, ebx
mov edx, 0xfe136ee8
bswap edi
and edx, 0xfe148bba
xchg edi, edx
ror ecx, 8
xchg ecx, edx
add ebx, edi
jmp 0x497006
pop esi
xor ebx, 0xfe2b80ab
inc edi
shr edi, 1
rol edx, 0xf
sub ebx, ecx
and ecx, edx
not ecx
add ebx, ecx
bswap ebx
sub edx, edi
xchg edx, ecx
ror edi, 6
jmp 0x494ff7
push 0xf8f3ef08
xor ecx, ebx
dec edi
not edi
jmp 0x4956c0
call esi
not ecx
sub ebx, edx
and ebx, edx
xor ebx, edx
neg edx
and edx, edi
mov edi, ebx
xchg edi, ecx
jmp 0x49520a
push 0xf902721a
mov edx, 0xfe40d0df
xor ecx, edi
and ebx, edx
mov edx, 0xfe425804
or edi, ebx
xchg edi, ebx
sub edx, edi
inc ebx
xchg ecx, edx
jmp 0x4963e8
push 0xf8f6efb8
nop
xchg ecx, ebx
xor edx, ecx
sub edx, edi
ror ecx, 0x17
sub ecx, ebx
jmp 0x4945de
push esp
xchg ebx, ecx
rol ecx, 0x13
not edx
neg ebx
xchg ecx, edi
shr edx, 0x1b
shl ecx, 0xd
jmp 0x49527e
call esi
xor edx, edi
or edi, 0xfe590b89
xor ecx, 0xfe59ab2b
mov ebx, 0xfe5a1c9a
or ebx, edx
mov edx, 0xfe5b1141
jmp 0x496a26
call fcn.00496fac
or edx, ebx
add edx, edi
xchg ecx, ebx
or ebx, edx
xor edi, ecx
mov edx, ebx
ror edi, 3
dec edi
or ecx, edx
add ebx, edi
add ecx, ebx
jmp 0x494a04
push 0xf8f640a3
mov edx, edi
add ecx, edi
inc ebx
neg edi
xor ebx, 0xfe63529c
xor edx, edi
jmp 0x495010
push 0xf8f699fd
or ebx, edi
add edi, edx
shl edx, 0xc
and ecx, ebx
dec edi
nop
mov ecx, ebx
add ebx, ecx
sub ecx, edx
jmp 0x494f7f
push 0xf8e69c36
mov ecx, edi
mov edx, edi
jmp 0x496163
push 0xf8e2f8a9
and edi, 0xfe8d8ccc
add edx, ecx
xor ebx, ecx
add edi, ecx
shr ecx, 0x15
add edi, ecx
or ebx, ecx
inc ebx
xor edi, 0xfe916818
add edi, ebx
jmp 0x49477e
push 0x401400
sub ecx, 0xfe929e81
sub edx, 0xfe932249
or ebx, ecx
sub ebx, edx
jmp 0x495b76
mov esi, 0x123b2f04
add edi, 0xfe94b6c2
sub ebx, 0xfe952adc
or ecx, edi
xor ebx, 0xfe961d25
xchg ecx, edi
shr ecx, 0x13
shl ebx, 0x10
xchg ecx, edi
mov ebx, 0xfe98b3d5
ror ebx, 0x1a
mov edx, 0xfe99dd07
jmp loc.00495702
push 0xf8d57f0e
xor edi, 0xfe9a83a5
shr edx, 0xf
or edi, edx
or ecx, edi
shl edi, 2
xor ebx, ecx
xchg ebx, edx
xchg ecx, edx
add ebx, 0xfe9e4538
xor ecx, ebx
xchg edi, edx
xor edx, ebx
xor edi, 0xfea03b59
add edi, edx
and edx, ecx
jmp 0x4966e3
mov esi, 0x2774562b
and ebx, 0xfea50417
rol edx, 8
mov edi, ecx
sub ebx, edx
and ecx, ebx
and ebx, edx
not edx
ror edx, 7
and ebx, edx
xor ebx, edi
xor ecx, 0xfeaa07f2
or ebx, ecx
jmp 0x4958fd
pop esi
add edi, 0xfeab0d0f
ror ecx, 0x1b
xchg ecx, edx
bswap edx
bswap edi
dec edi
not edi
and ebx, ecx
jmp 0x496551
push esp
xor edx, 0xfebe514d
bswap edx
add edi, ecx
mov edx, ecx
jmp 0x494c60
push 0xf8db2125
ror ebx, 0xf
mov edx, ebx
and edi, ebx
xchg edi, ecx
add edx, ecx
sub ecx, edx
mov edi, ebx
inc edi
mov edi, ebx
dec ecx
jmp 0x496712
push 0xf8ddfad8
and edx, ebx
sub edi, ebx
xchg edx, ebx
xchg edx, edi
xor ecx, 0xfec7718d
sub edx, edi
jmp 0x496931
pop esi
mov ecx, edi
add edi, ecx
and ecx, 0xfecc0a47
mov ecx, edx
xor ebx, ecx
add edi, 0xfecd75e1
or ebx, edx
xor edi, edx
mov ebx, edi
jmp 0x4943b4
pop esi
add edx, edi
and edx, ecx
xor edi, edx
or ecx, edi
jmp 0x494622
call esi
or ecx, edi
mov ebx, edi
add edi, ebx
jmp 0x495520
push 0xf8d67245
mov edi, ecx
or edx, 0xff0cc648
add ebx, edi
jmp 0x495965
mov esi, 0x123b2f04
or edx, 0xff0e174e
xor ebx, ecx
xchg edi, edx
rol edi, 0x14
jmp 0x495ad6
push 0xf9032012
sub edx, ebx
add edi, ecx
shl ecx, 0xc
xchg edi, edx
or ebx, 0xff1b9633
xor ebx, 0xff1c1a18
inc ebx
or ebx, edi
and ebx, edx
or ebx, edi
jmp 0x495159
pop esi
or edx, ebx
sub edx, ebx
ror edx, 0x1f
nop
add ecx, edi
mov ebx, edx
mov edi, ecx
bswap edx
add edi, ebx
xchg ecx, edi
add edi, ebx
jmp 0x4967ba
push 0xf8ea2f72
add ecx, edx
mov ebx, edx
sub edi, ecx
and edi, 0xff2d4a75
add ebx, ecx
mov edi, 0xff2e6643
not ebx
mov ecx, 0xff2f453a
and edi, edx
jmp 0x496c22
call esi
mov ecx, 0xff4bbc10
add ebx, edx
xchg ebx, edx
xor edx, ecx
and edi, 0xff4ddecf
add edx, 0xff4e4e91
mov ecx, ebx
and ecx, 0xff4f3d46
neg ebx
jmp 0x49476b
mov esi, 0x123b2f04
rol edi, 0x1c
dec ecx
sub edi, 0xff5c8c26
not edx
xor ebx, edx
xchg edi, ecx
add edi, ecx
xchg edi, edx
neg edi
jmp 0x4962a2
push 0xf8dea38d
and ecx, edi
xor edx, ecx
xor edi, edx
add edx, ecx
or ebx, edi
and edi, 0xff622429
add edx, ebx
add edi, 0xff62fbd3
jmp 0x495e5e
call esi
add edx, ecx
bswap ebx
add edi, ecx
and ecx, edi
add edx, ecx
nop
inc edi
mov edx, ebx
add ebx, edi
bswap edx
mov edi, ecx
xchg edi, ebx
or edx, ecx
mov ebx, 0xff70b549
bswap edx
jmp 0x496016
pop esi
sub edx, ebx
nop
xchg ecx, edi
nop
dec ebx
neg edx
mov edi, ebx
and ecx, ebx
or ecx, 0xff7b58d5
xchg edx, ecx
bswap edx
not edi
jmp 0x4944e6
pop esi
and ecx, edx
mov ebx, edi
sub edx, ebx
add edx, ecx
jmp 0x496fdf
call fcn.00496fac
mov ebx, 0xffa9aee1
xor ecx, 0xffaa30a7
xor ecx, ebx
add edx, ecx
not ecx
shr edx, 0xd
jmp 0x494eec
push 0xf8d6cf7d
and ecx, edx
sub edx, 0xffb7d7b2
xor ecx, edi
dec ebx
xor ebx, ecx
or edi, ebx
xor ecx, edi
jmp 0x4946a1
pop esi
and ecx, edx
and edi, ebx
xchg edi, ebx
add ebx, ecx
mov ebx, edx
xchg edi, edx
shr ecx, 4
and edx, edi
or ecx, edi
jmp 0x496a42
call fcn.00496fac
rol ecx, 0x10
and edx, 0xffec4ba6
bswap edi
bswap ecx
xor ebx, edx
xchg edi, edx
jmp 0x495650
push 0xf8e9bc7c
xor ecx, 0xffef7708
bswap edi
add ebx, ecx
xchg ebx, ecx
jmp 0x495577
pop esi
and ecx, ebx
and ecx, 0xfff1e4e4
xor ecx, edi
mov edi, ebx
shr edi, 0x14
sub ecx, edi
xchg edx, ebx
xchg edx, edi
mov edx, ebx
xchg edx, ebx
xor ebx, edi
jmp 0x496bea
push 0xf8e5f10e
ror ebx, 2
ror ebx, 0x16
or ebx, ecx
and edx, ebx
or ebx, ecx
shr edi, 0xe
xor ecx, 0xfffafa21
shl edx, 0x12
mov ebx, edi
or ecx, 0xfffc7df4
jmp 0x494544
call esi
ror edi, 6
sub ecx, edi
ror edi, 0xb
xor edx, edi
sub edi, ecx
dec edx
add edi, ecx
or edi, 0x7eb5
sub edi, ebx
mov edi, edx
sub ecx, ebx
sub ebx, ecx
jmp 0x496e76
call esi
and edi, edx
and edx, ecx
shl edx, 0xd
xchg ecx, edx
not ecx
mov ebx, edx
or edi, ebx
inc ecx
xor edx, ecx
xchg ecx, edi
xor ebx, edx
add edx, edi
shr ebx, 0x12
rol edx, 0x1f
and edx, ecx
jmp 0x496ed7
push 0xf8e23a67
sub ecx, ebx
ror edx, 5
and ecx, 0x129c9e
and edx, edi
xor edi, 0x13a702
xchg ebx, edx
or ebx, edx
mov edx, 0x14b740
mov ebx, ecx
xchg ebx, edi
jmp 0x496e91
call fcn.00496fac
or ebx, ecx
shr ecx, 9
add edx, edi
rol ecx, 0x19
or edi, edx
xor edi, ebx
sub ebx, edx
bswap edx
nop
ror ebx, 0x15
mov edx, edi
xor ecx, edx
and ecx, 0x21b0da
jmp 0x495b52
call fcn.00496fac
or ebx, 0x2218dc
not edx
xchg ecx, edi
not edx
add ebx, edx
xor ebx, 0x234c00
and edi, ecx
and edi, 0x23c72e
sub edi, 0x240fe5
and ebx, ecx
sub edi, ebx
mov ebx, edx
mov edi, 0x252e6f
jmp 0x496570
pop esi
and ecx, edx
mov edx, ebx
dec edx
neg edi
dec edi
sub edi, ecx
and edx, edi
or ebx, edx
jmp 0x496cb8
pop esi
add edi, 0x38eb79
ror ebx, 0x1d
and ebx, edi
shr ebx, 0x1d
or ecx, edx
neg edx
not edi
add edx, ecx
shr edx, 2
jmp 0x495bf3
call fcn.00496fac
xor ebx, ecx
xor ebx, 0x3bbc73
mov ecx, edx
add edx, 0x3c34ec
inc edi
jmp 0x494f9f
push 0xf8def1ff
ror ecx, 0x14
and ecx, edx
or edi, edx
dec ecx
add edx, edi
add edx, ecx
or edi, ebx
sub ecx, ebx
inc ecx
mov ecx, edi
ror edi, 6
jmp 0x496989
push 0xf8f1b4d2
xor ecx, edx
shr edx, 0x19
add edx, ecx
xor edi, 0x484d74
sub edi, ecx
sub edx, 0x48dd3b
shr edi, 2
or ebx, ecx
xor edi, 0x49b7ec
mov ecx, 0x49f249
jmp 0x4951de
pop esi
sub ebx, edx
mov ecx, edx
and edi, 0x68459b
mov edi, ecx
neg ecx
or ecx, ebx
mov ebx, edi
sub ebx, edx
mov edi, ebx
ror ebx, 3
mov ebx, 0x6a6aaf
mov edx, 0x6aa95a
xor ecx, 0x6afc29
shr edi, 5
jmp 0x495788
pop esi
and edi, 0x701bff
inc ebx
or ecx, edx
add ecx, ebx
add ebx, 0x710d3b
rol ecx, 0x19
mov edi, edx
shl edx, 6
sub ebx, edi
sub edx, ecx
shr ebx, 0x1f
mov edx, ecx
not edi
jmp 0x494e73
pop esi
and edi, 0x8eaa6b
mov ebx, edi
or ecx, 0x8f8590
not edi
add ecx, edi
shl ebx, 9
add ebx, ecx
mov edi, ebx
add edi, edx
jmp 0x49479e
mov esi, 0x2774562b
dec ebx
bswap edx
add ebx, ecx
xchg edx, edi
xor edx, edi
and edx, edi
and ebx, edx
sub edi, edx
mov edx, ecx
xor edi, 0x976b45
jmp 0x496636
push 0xf8fae12d
inc edi
neg edx
xor ecx, ebx
and edx, ebx
ror edi, 0x11
and edx, 0x9ab0d6
xor edi, ecx
xchg ebx, edx
shl ebx, 1
ror ecx, 0x18
xor edi, ecx
sub ebx, ecx
xor ebx, edx
xor ebx, 0x9e6a8e
jmp 0x4954a9
call fcn.00496fac
or edx, edi
add edx, 0x9f7b55
mov ebx, edi
dec edx
xor edx, ecx
shr edx, 0x14
xor ecx, edx
sub ebx, edi
xor edx, ecx
mov ecx, edi
xchg ecx, ebx
jmp 0x4948fb
pop esi
not edx
mov edx, ebx
dec edi
not ebx
and edx, ebx
add edx, edi
neg edi
jmp 0x496a83
call fcn.00496fac
add edi, ecx
mov ecx, 0xc17c32
xor edi, edx
and ebx, ecx
shr edi, 0x11
add edx, ebx
add ebx, edx
add ecx, edx
xor ecx, edi
shl ebx, 0x17
and ecx, edi
jmp 0x49573e
mov esi, 0x123b2f04
xchg ebx, ecx
xchg ecx, edi
and edx, edi
jmp 0x496ac9
push 0xf902cb35
sub edi, ebx
or edi, ebx
mov ebx, edi
ror ebx, 0x1b
jmp 0x4954fa
pop esi
xor ecx, edi
sub edi, ebx
and edi, edx
bswap edi
and edi, ebx
neg ecx
ror ebx, 0xc
and ecx, edx
and ecx, ebx
jmp 0x494c0e
call fcn.00496fac
inc ecx
sub edi, ecx
or ebx, edi
jmp 0x496b66
pop esi
and edi, ebx
sub ecx, edi
xchg ecx, edx
neg ecx
add edx, ecx
mov edx, ebx
and ebx, ecx
sub edi, 0x117ff15
add ecx, edx
jmp 0x4948b4
call esi
or edi, ecx
add ecx, edi
xchg ecx, ebx
or edx, 0x11b3d1c
xor edx, 0x11bd589
or ebx, ecx
inc edx
rol ebx, 4
or ecx, ebx
xor ecx, edx
or ecx, 0x11f1c8f
or edi, 0x11f9014
sub ecx, edi
jmp 0x494451
push 0xf8f39afa
sub ecx, 0x120a060
dec ebx
add edx, ebx
inc ebx
add edx, ebx
rol edx, 0xa
xor ebx, 0x123a61a
jmp 0x494eaf
call esi
and edx, 0x1243829
xchg edi, ecx
mov edi, 0x125167d
and ecx, 0x125c85d
or edx, ecx
mov ebx, edx
add edx, edi
jmp 0x495887
call esi
dec edi
or edi, ebx
neg ebx
xchg ebx, edi
sub ebx, 0x12a521c
add ecx, ebx
add ebx, edx
add edi, 0x12bd20d
or ebx, edx
sub edx, ebx
add ebx, edi
xor edx, ecx
xor edi, ecx
or edx, ecx
sub ebx, ecx
jmp 0x49696d
call fcn.00496fac
or ecx, ebx
sub ebx, edx
and edx, ebx
mov ecx, 0x1482632
sub ecx, ebx
dec edx
and ecx, edx
sub edx, ecx
jmp 0x496520
pop esi
add ecx, edi
xchg edx, edi
neg ebx
mov ecx, 0x15b4695
jmp 0x494f03
push 0xf8d5e306
xor ebx, edx
bswap edi
neg edx
xchg ebx, edx
mov ebx, 0x16123f5
dec ecx
rol ebx, 3
mov edi, edx
or ecx, edx
sub ecx, edi
ror ebx, 0xb
or edx, ebx
sub edi, 0x165e2c5
ror edx, 0x1c
jmp 0x495495
mov esi, 0x123b2f04
sub ebx, edi
mov edi, ecx
shr ebx, 0x1d
add edx, edi
add edx, edi
xchg ebx, edi
ror edx, 6
sub edi, edx
dec ebx
sub ebx, edx
jmp 0x495cc7
pop esi
xor ebx, edi
or edx, ebx
nop
jmp 0x4963fb
mov esi, 0x123b2f04
xor edi, 0x174c010
not ebx
neg edi
mov ebx, edi
add edx, ecx
and edx, edi
add ecx, ebx
add edx, edi
add ebx, ecx
or edx, 0x17938b2
sub ecx, ebx
jmp 0x494fd7
pop esi
neg edi
add edi, 0x1825ce3
or ecx, 0x182cf25
xchg ecx, edi
xor edx, edi
or ecx, 0x1846414
sub ebx, edi
xchg edi, ebx
xor edi, ebx
sub ecx, ebx
mov ecx, 0x1870b52
and edx, ebx
xchg edi, ebx
inc edi
neg ecx
shr ecx, 3
jmp 0x496946
pop esi
or edx, ecx
or ebx, edx
ror ebx, 0xe
add edi, ecx
sub ebx, ecx
or ebx, ecx
inc edx
or edx, edi
dec edi
shr edx, 9
or edx, ebx
shr edx, 0xb
sub ebx, ecx
jmp 0x496142
push 0xf8de5333
sub ecx, edi
or edx, ecx
sub ebx, edx
or ecx, edi
shr ebx, 0x1c
jmp 0x4956e0
push 0xf90085f2
ror edi, 0x12
and ebx, edi
neg ebx
xor ecx, 0x1c35bbf
nop
add ebx, ecx
xchg ecx, edi
or ebx, ecx
and edx, ecx
and ebx, edx
and ecx, edi
neg edi
nop
jmp 0x496f0b
pop esi
or edi, edx
sub ecx, edx
not edx
sub ecx, ebx
or ebx, 0x1cadd0c
not edx
or edi, 0x1cc1f91
jmp 0x49675a
mov esi, 0x123b2f04
sub ecx, edi
or ebx, 0x1cf51b2
xchg edx, ecx
or ecx, edx
xchg ecx, ebx
or ebx, ecx
xor ebx, edi
shr edx, 0x11
mov ebx, ecx
jmp 0x495c9d
push 0xf8ead7dd
and ecx, ebx
or ecx, edx
sub ecx, 0x1d6aab2
sub edi, 0x1d72538
inc edx
inc ebx
xchg edx, ebx
xor edi, 0x1d938ab
xchg ebx, edi
jmp 0x496bd1
pop esi
bswap ebx
and edx, ecx
xor ebx, 0x1e7385a
add edx, ebx
sub ecx, ebx
add ecx, edx
xor ecx, 0x1e974c0
jmp 0x495fb5
pop esi
add edi, 0x1ea09b2
sub ecx, edi
sub ebx, 0x1eae462
shl edi, 0xc
or ecx, ebx
and ecx, ebx
shr edi, 0x1b
add edx, ebx
jmp 0x495dc4
push 0xf8ddab89
sub ebx, edi
sub edi, edx
add edx, 0x1f36e8e
neg edx
add edi, 0x1f4863f
add edi, edx
nop
or edi, ebx
xor ebx, 0x1f69866
mov ecx, edi
jmp 0x4952ad
call fcn.00496fac
shr ebx, 0x1a
add ecx, edx
rol ecx, 0x1f
neg edi
xor edx, ecx
xor ebx, edi
sub ebx, ecx
xor ebx, ecx
shr ebx, 0x11
xchg edx, ebx
jmp 0x49532c
call esi
and edi, ecx
not edx
shr ecx, 0x15
and edi, 0x213c2ae
sub edx, ebx
or ecx, ebx
or ecx, 0x2154be6
or ebx, edi
mov edi, ecx
or edx, ebx
mov edx, 0x2172cc0
jmp 0x4966bc
push 0x92f40
add edx, ebx
sub ebx, 0x21a584e
add edi, edx
or ebx, edi
add ebx, 0x21bc298
neg edx
add ecx, edi
add edx, ecx
or edi, 0x21db68e
xchg ecx, ebx
mov edx, ecx
xchg ebx, edi
jmp 0x49513f
mov esi, 0x2774562b
or ecx, edx
bswap ebx
or edx, ecx
neg edx
shl ecx, 0x16
neg edx
xor ebx, edi
jmp 0x494af1
pop esi
or ebx, edx
add ecx, edi
and ebx, edx
bswap ecx
or edx, edi
or edx, ecx
shl ebx, 0x13
jmp 0x496504
push 0xf8ea83d3
and edi, edx
inc edx
not edi
rol edx, 0xb
sub ecx, edi
shl ebx, 0xb
or edx, ebx
ror edx, 0x19
mov ebx, 0x22fa6be
add edx, 0x2301206
sub edi, edx
jmp 0x4969c0
push 0xf8fe5a72
not ecx
add edx, ecx
shr ebx, 4
and ebx, 0x232d688
add edx, ebx
neg ecx
bswap edi
xchg ecx, edi
or ecx, 0x235f179
xor edi, ebx
xor ecx, 0x236d28e
nop
jmp 0x496347
push 0xf8da7c12
xor ebx, edx
xchg ecx, ebx
or ecx, 0x2411804
inc ebx
sub ecx, 0x242556d
xor edx, ebx
or edi, ebx
shr edx, 0x19
bswap ecx
jmp 0x494c46
pop esi
xchg ecx, ebx
or edx, edi
jmp 0x49495d
pop esi
and edx, ecx
sub edx, ecx
neg ecx
add ecx, edx
and ebx, ecx
shl ebx, 0x19
xor ebx, edx
mov edi, ecx
or ecx, ebx
jmp 0x494d97
pop esi
xor edx, 0x281a8cb
add ebx, edx
shl edx, 0x1f
not ecx
or edi, ebx
or edi, 0x28abea8
jmp 0x4944cf
push 0xf8e29182
sub edx, 0x28b5b6d
mov ecx, edi
and edi, ecx
xor edi, ebx
mov edx, 0x28d2bd8
mov edx, ecx
sub ebx, 0x28e3f5d
add edi, 0x28eacdd
mov edi, 0x28f31d9
jmp 0x495119
pop esi
shr edx, 0x17
add edx, edi
mov ebx, ecx
dec ebx
sub edi, ecx
add edi, ecx
and ebx, edi
add ecx, edi
jmp 0x495e7e
mov esi, 0x123b2f04
mov edx, ebx
sub ecx, 0x29b7dee
shr ecx, 5
mov ebx, edx
bswap edi
xor edi, ebx
xchg edx, ecx
xor edx, edi
xchg edi, ecx
mov edx, ecx
and edx, edi
jmp 0x496496
pop esi
xor edx, ecx
not ecx
xor edi, ecx
shr ecx, 0x16
or ebx, ecx
add ebx, ecx
jmp 0x49628f
push 0xf8fa8bb9
add edi, edx
sub edx, edi
or edi, edx
bswap edi
shl ebx, 0xc
jmp 0x496184