Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get file attributes
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff04
jne 0x401089
call sub.user32.dll_BroadcastSystemMessageExA
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_LdrAddRefDll
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_LdrAddRefDll
call sub.user32.dll_BroadcastSystemMessageExA
call sub.user32.dll_BroadcastSystemMessageExA
call sub.ntdll.dll_LdrAddRefDll
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.ntdll.dll_LdrAddRefDll
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.user32.dll_BroadcastSystemMessageExA
call sub.ntdll.dll_LdrAddRefDll
call sub.user32.dll_BroadcastSystemMessageExA
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_LdrAddRefDll
call sub.ntdll.dll_LdrAddRefDll
call sub.ntdll.dll_LdrAddRefDll
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.ntdll.dll_LdrAddRefDll
call sub.user32.dll_BroadcastSystemMessageExA
call sub.kernel32.dll_GetFileAttributesW
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff02
jne 0x4010f9
call sub.kernel32.dll_GetFileAttributesW
call sub.user32.dll_BroadcastSystemMessageExA
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_LdrAddRefDll
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_LdrAddRefDll
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_LdrAddRefDll
call sub.ntdll.dll_LdrAddRefDll
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_LdrAddRefDll
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.ntdll.dll_LdrAddRefDll
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffef8
jne 0x4011a0
call sub.ntdll.dll_LdrAddRefDll
call sub.ntdll.dll_LdrAddRefDll
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.kernel32.dll_GetFileAttributesW
call sub.user32.dll_BroadcastSystemMessageExA
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_LdrAddRefDll
call sub.ntdll.dll_LdrAddRefDll
call sub.kernel32.dll_GetFileAttributesW
call sub.user32.dll_BroadcastSystemMessageExA
call sub.ntdll.dll_LdrAddRefDll
call sub.user32.dll_BroadcastSystemMessageExA
call sub.user32.dll_BroadcastSystemMessageExA
call sub.user32.dll_BroadcastSystemMessageExA
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.ntdll.dll_LdrAddRefDll
call sub.user32.dll_BroadcastSystemMessageExA
call sub.ntdll.dll_LdrAddRefDll
call sub.kernel32.dll_GetFileAttributesW
call sub.user32.dll_BroadcastSystemMessageExA
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.kernel32.dll_GetFileAttributesW
call sub.user32.dll_BroadcastSystemMessageExA
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.ntdll.dll_NtMapUserPhysicalPages
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff0c
jne 0x401229
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.user32.dll_BroadcastSystemMessageExA
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.user32.dll_BroadcastSystemMessageExA
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.user32.dll_BroadcastSystemMessageExA
call sub.user32.dll_BroadcastSystemMessageExA
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.user32.dll_BroadcastSystemMessageExA
call sub.ntdll.dll_NtMapUserPhysicalPages
call sub.user32.dll_BroadcastSystemMessageExA
call sub.user32.dll_BroadcastSystemMessageExA
call sub.ntdll.dll_LdrAddRefDll
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.user32.dll_BroadcastSystemMessageExA
call sub.ntdll.dll_NtMapUserPhysicalPages
ret
jmp 0x4d87a9
bswap esi
sub ecx, ebx
mov ebx, ecx
rol esi, 0x1a
add ecx, ebx
jmp 0x4d9226
call fcn.004d8c27
bswap ecx
not ebx
rol edx, 0x16
add esi, edx
xchg ecx, esi
jmp 0x4da64a
mov edi, 0x2809024b
and ebx, ecx
add ebx, 0xa5c30327
mov esi, 0xa5c33f67
and ebx, esi
and edx, esi
ror ecx, 8
mov edx, ebx
shl ecx, 0xf
jmp 0x4d8bf7
push 0xa498b57a
rol edx, 5
and esi, 0xa5c7faa7
xchg edx, ecx
inc esi
xor edx, 0xa5c8aec0
shr ecx, 0x19
and ecx, edx
and ecx, 0xa5c9615e
mov ebx, edx
dec ebx
mov ebx, edx
add esi, edx
shr ebx, 0x1e
sub ecx, esi
jmp 0x4d99a5
call edi
mov edx, esi
and ebx, ecx
or ecx, edx
inc ecx
mov ebx, 0xa5cc1dde
jmp 0x4d8db5
mov edi, 0x2809024b
xor ebx, edx
rol edx, 0x1d
ror ecx, 0xb
and edx, esi
xchg ecx, esi
or esi, edx
xchg esi, ebx
and ecx, 0xa5e80ff4
add ebx, esi
add ecx, 0xa5e88583
mov edx, ecx
add edx, ecx
rol ebx, 0x13
and edx, ecx
rol edx, 0x1d
jmp 0x4daabe
pop edi
shl edx, 0xd
add edx, 0xa5ecae51
xor esi, ecx
shl ecx, 0x1c
add ecx, edx
mov ecx, ebx
or ebx, esi
bswap edx
or esi, 0xa5ef0a0e
sub edx, 0xa5ef4239
jmp 0x4dc55c
push 0xa499486d
rol edx, 0xb
sub ebx, edx
dec esi
xor ecx, 0xa5f3cce8
xchg ebx, edx
jmp 0x4dc297
pop edi
dec edx
add ebx, ecx
xchg edx, esi
shr esi, 0xa
not ecx
mov ecx, ebx
ror edx, 0x17
sub esi, ecx
jmp 0x4d97db
push 0xa48ce991
bswap edx
or ecx, edx
sub esi, ecx
sub ebx, edx
sub ecx, 0xa5f71843
mov esi, ecx
add ebx, edx
xor ecx, edx
xchg ecx, esi
neg ebx
xor esi, edx
xor ebx, esi
mov ecx, ebx
xor edx, ecx
jmp 0x4db67f
pop edi
or edx, esi
and esi, ebx
xor esi, 0xa5f9c67a
xchg esi, edx
add edx, ebx
sub ecx, esi
shr edx, 0x15
jmp 0x4dc79f
push 0xa4a1a0eb
xchg esi, edx
not edx
xor esi, ecx
not esi
ror esi, 0x13
shr esi, 0xe
jmp 0x4d8ff6
call fcn.004d8c27
xchg ecx, ebx
and ebx, edx
mov edx, ebx
sub esi, edx
dec ecx
or ebx, ecx
shr edx, 4
jmp 0x4d95f5
pop edi
neg ebx
xor ebx, 0xa6209125
add edx, ecx
sub ecx, 0xa620fddf
add esi, ecx
not ecx
and esi, 0xa621a136
xor edx, esi
or ecx, edx
xor edx, ecx
inc edx
not ebx
jmp 0x4da7eb
pop edi
xor ebx, esi
add edx, ebx
add ecx, esi
xor ebx, ecx
and ebx, ecx
jmp 0x4db63f
call edi
xchg esi, ebx
rol ebx, 0x15
xchg ecx, edx
xor esi, ebx
add edx, ebx
or esi, 0xa62d9b5f
shr ecx, 9
jmp 0x4da2d6
push 0xa49c657d
xor edx, 0xa6411f57
xchg ecx, ebx
and ecx, ebx
and esi, ecx
ror edx, 0x16
jmp 0x4dae6b
push 0xa4a1ea16
bswap edx
or ecx, edx
add ecx, esi
and ebx, ecx
xchg ecx, esi
shr ecx, 0x12
ror esi, 9
xor edx, ecx
mov esi, ecx
jmp 0x4dbe78
call edi
add esi, ebx
xchg esi, ebx
mov edx, 0xa66b317a
xchg ecx, ebx
xor ecx, 0xa66bbac6
jmp 0x4db00b
push 0xa4826d1d
sub esi, edx
ror ebx, 0x1c
ror esi, 0x16
and edx, 0xa674e560
xor esi, 0xa6752216
xchg edx, ecx
and ecx, edx
and esi, ebx
dec ebx
add ebx, edx
bswap edx
inc esi
jmp 0x4db3a5
push 0xa483c3ad
shl ecx, 2
shr esi, 0xa
nop
or ecx, 0xa67ceeb5
or edx, esi
xor esi, 0xa67d64c1
mov ebx, edx
or esi, edx
xor ebx, esi
jmp 0x4dad27
pop edi
mov ebx, edx
sub edx, ecx
shr edx, 3
xor edx, ebx
and ebx, ecx
shl esi, 5
and edx, esi
xor ebx, ecx
jmp 0x4dae50
call fcn.004d8c27
mov esi, ecx
sub esi, edx
and esi, edx
or edx, esi
sub esi, edx
xor ecx, esi
shr edx, 0x11
xor ecx, ebx
jmp 0x4db9ef
push 0xa4a67d80
and esi, edx
inc ecx
mov esi, ecx
add edx, ebx
shr ebx, 0x19
inc ecx
add ebx, 0xa690dcb8
xchg ebx, ecx
and edx, 0xa691545e
add esi, edx
jmp 0x4dafd6
call fcn.004d8c27
sub edx, esi
shl edx, 0xf
not edx
add esi, ebx
sub esi, ebx
xchg edx, esi
xchg ebx, edx
mov edx, ebx
add ebx, ecx
xor ecx, ebx
mov edx, esi
shr ecx, 0x1f
add esi, 0xa6a062f3
jmp 0x4d9b34
call edi
mov edx, ecx
mov ebx, edx
dec ecx
neg ebx
or ebx, 0xa6b041c8
rol edx, 0xe
mov edx, ebx
jmp 0x4db9a9
push 0xa484865c
add edx, 0xa6b11467
sub ebx, esi
and ecx, esi
xor esi, 0xa6b1ce3d
or ebx, esi
and esi, ebx
xchg esi, edx
add ebx, ecx
sub ebx, 0xa6b31329
mov edx, esi
mov edx, ebx
shr edx, 7
add esi, ecx
add edx, esi
xchg esi, edx
jmp 0x4d9e7e
push 0xa486d626
inc esi
add ecx, esi
dec esi
not ecx
sub ecx, edx
mov ecx, edx
jmp 0x4dc50a
call edi
rol esi, 0xb
mov esi, 0xa6bcae92
add ebx, esi
sub ecx, esi
dec edx
or esi, edx
xor ecx, 0xa6bde50e
and ecx, ebx
add edx, ebx
and edx, 0xa6beaef9
and ecx, esi
jmp 0x4dbd50
pop edi
add ebx, esi
xor ecx, esi
xchg ecx, edx
xchg esi, ecx
xor ecx, 0xa6c9e64c
and ebx, ecx
mov ecx, esi
mov edx, ebx
shl ebx, 5
jmp 0x4dbd9b
push 0xa49f4d35
and ecx, edx
shl ebx, 0x10
mov esi, edx
not esi
sub ecx, 0xa6cf6e5a
mov esi, ebx
rol ebx, 0x1c
add edx, ebx
dec ebx
shl ecx, 0xa
mov edx, esi
or ebx, edx
jmp 0x4d8825
pop edi
sub ecx, esi
dec esi
and ecx, 0xa6df4791
and edx, ecx
mov ebx, edx
xor ecx, 0xa6dfff19
shl esi, 9
xor esi, ecx
or ecx, 0xa6e0cdc4
ror ecx, 8
inc ecx
sub ecx, esi
sub ecx, edx
xchg ebx, edx
nop
jmp 0x4dadcc
pop edi
mov ecx, ebx
xor esi, ecx
xchg edx, ebx
ror edx, 7
and esi, ecx
or ebx, edx
jmp 0x4d8f37
mov edi, 0x6332a2e
add esi, ecx
mov ebx, edx
or ebx, 0xa6ec0c41
or ebx, edx
bswap esi
jmp 0x4dac55
call fcn.004d8c27
rol ecx, 0x1d
and edx, esi
not edx
or edx, 0xa6edb496
xor ebx, ecx
or ecx, 0xa6ee31d3
inc ebx
xor edx, ebx
jmp 0x4db597
mov edi, 0x6332a2e
xor esi, edx
not esi
mov esi, ecx
shr ebx, 0xe
mov ebx, esi
mov esi, edx
jmp 0x4d9ed2
push 0xa498ff88
mov esi, 0xa703bc02
neg ecx
xor ecx, esi
mov ecx, esi
dec ebx
xor edx, esi
and ebx, 0xa705442f
xchg edx, ecx
mov edx, 0xa705c15b
jmp 0x4d8adc
call edi
or esi, ebx
sub edx, 0xa725fe84
sub esi, ecx
xor ebx, esi
and ebx, edx
or esi, ecx
and edx, 0xa727448c
bswap ecx
rol ecx, 6
or edx, 0xa72803ab
or ebx, esi
neg edx
jmp 0x4d8d5a
pop edi
mov esi, 0xa74cd499
xchg ecx, edx
rol esi, 1
and ecx, edx
xchg ecx, esi
mov esi, edx
and edx, ebx
inc ebx
or ecx, edx
or edx, esi
xor edx, ecx
jmp fcn.004db716
mov edi, 0x6332a2e
and ebx, 0xa763e076
dec ebx
sub edx, ecx
xor esi, 0xa7649d73
or ecx, ebx
add esi, ecx
nop
shr edx, 0x16
xor edx, 0xa765e706
xchg esi, ebx
or ecx, edx
jmp 0x4db936
push 0xa4898161
mov ecx, esi
mov ebx, edx
xor esi, edx
inc ebx
and edx, esi
sub esi, 0xa767fce0
xor ebx, edx
and edx, esi
sub esi, 0xa768b639
add esi, edx
xor ecx, edx
xchg esi, ebx
jmp 0x4dc03d
call fcn.004d8c27
add edx, ebx
and ebx, edx
or ecx, 0xa76a40d5
mov edx, esi
xchg edx, esi
xor ecx, ebx
and edx, esi
add ecx, edx
neg ebx
xchg ecx, edx
mov ebx, edx
mov ebx, ecx
shl ebx, 8
jmp 0x4d9544
pop edi
add ebx, esi
sub ecx, ebx
rol esi, 0x1a
or edx, ecx
or edx, esi
shr ebx, 0x1a
xchg esi, edx
add ebx, 0xa76ed5af
and ecx, edx
mov edx, ecx
and edx, ebx
xor esi, ebx
jmp 0x4dbba4
pop edi
mov edx, ebx
inc ebx
mov ecx, ebx
xor ecx, 0xa77245a2
xchg esi, ecx
bswap ecx
dec ebx
jmp 0x4da169
call edi
and esi, ecx
and ecx, ebx
mov ecx, 0xa77d3dd6
xor esi, edx
add ecx, edx
add esi, 0xa77e2130
mov ebx, esi
rol esi, 0x13
jmp 0x4da281
call edi
xchg esi, ebx
xchg esi, ecx
nop
mov ecx, ebx
sub ecx, esi
and ebx, 0xa78d66a3
sub esi, ecx
dec ecx
jmp 0x4d969f
call fcn.004d8c27
or edx, ecx
inc ebx
mov ecx, ebx
jmp 0x4dab9d
push 0xa48c659b
or ebx, 0xa8779c70
mov esi, edx
mov esi, ebx
or edx, ebx
add ecx, edx
sub ecx, 0xa878d0cc
or edx, ecx
or esi, ecx
jmp 0x4da6cd
pop edi
mov edx, ebx
mov ecx, ebx
ror edx, 0x12
add edx, ecx
shl edx, 0x18
inc edx
shr ecx, 0x1e
ror ecx, 9
jmp 0x4d8ba0
push 0xa49088cc
mov edx, ecx
xchg esi, ecx
add esi, edx
sub ecx, edx
mov ebx, esi
inc ecx
mov edx, ecx
shr ecx, 0xe
xor esi, 0xa888b742
sub ecx, edx
sub esi, 0xa8892f5c
or edx, ebx
sub ebx, esi
sub esi, edx
jmp 0x4dc581
pop edi
xchg esi, ebx
xchg ebx, esi
mov esi, ebx
inc ebx
xchg ecx, edx
dec ebx
and ecx, esi
and ebx, 0xa8946ded
and esi, ebx
or esi, ebx
mov edx, 0xa8952ea2
shr ebx, 8
sub esi, edx
add esi, 0xa895e3bf
mov edx, 0xa8961f5f
add ebx, 0xa8965cfd
jmp 0x4d933f
pop edi
xor ebx, 0xa898bd5d
xor ebx, edx
ror edx, 0x1c
sub ecx, ebx
ror edx, 0x1f
rol edx, 0xe
mov edx, 0xa89a3759
jmp 0x4d929a
push 0xa4955eb0
bswap esi
and ebx, 0xa8bb7cc3
rol ecx, 0x1e
add ecx, edx
or ecx, ebx
add edx, ecx
jmp 0x4dc9c6
pop edi
or edx, 0xa8c2b38b
xor edx, 0xa8c2eb07
rol ebx, 0x1b
sub edx, 0xa8c35b31
xor ebx, 0xa8c39333
neg ebx
xchg edx, esi
or edx, esi
and edx, ecx
or esi, 0xa8c4b3d0
jmp 0x4da6fc
call edi
sub esi, ebx
sub ecx, 0xa8d6f39c
shr edx, 5
sub edx, ebx
or ecx, ebx
and ebx, 0xa8d84d74
add esi, 0xa8d88699
mov ebx, esi
xchg ebx, ecx
sub ecx, esi
inc ecx
or esi, edx
and esi, edx
and ebx, 0xa8da1024
jmp 0x4dc762
push 0xa48ca660
xor edx, esi
add ecx, ebx
or ecx, edx
neg ebx
jmp 0x4d8b0b
push 0xa4986b76
not esi
xchg esi, edx
inc esi
shr ebx, 8
shr ebx, 0x1b
sub edx, 0xa8e3a155
jmp 0x4d886f
push 0xa488fe73
xchg ebx, esi
mov edx, 0xa8ed740e
or ecx, ebx
mov ecx, ebx
shr edx, 9
sub ebx, esi
shl ecx, 0x1c
jmp 0x4dbeca
pop edi
and esi, ecx
shl esi, 0x19
or ebx, esi
add edx, ecx
sub esi, ecx
bswap esi
sub edx, ebx
sub ebx, edx
sub edx, 0xa8f2d2e5
not ebx
jmp 0x4d9efb
pop edi
xchg esi, ebx
mov ebx, edx
xor ecx, edx
and esi, edx
or ebx, esi
and ecx, 0xa90deb9f
mov ecx, esi
sub ebx, esi
ror edx, 0x10
xchg ecx, ebx
mov ebx, ecx
xor ebx, ecx
rol ecx, 0xf
jmp 0x4db192
push 0xa4904017
shr edx, 0xd
add ebx, edx
neg esi
jmp 0x4da205
call fcn.004d8c27
ror esi, 0x1b
and esi, ebx
and edx, esi
mov ecx, 0xa921b57a
and esi, 0xa921edf4
xor esi, ecx
mov edx, ecx
bswap esi
mov esi, 0xa922d662
jmp 0x4dbf28
call edi
add edx, ecx
add ebx, 0xa92f9c11
and edx, esi
neg ecx
dec esi
mov esi, ecx
jmp 0x4d8b35
mov edi, 0x2809024b
and edx, esi
ror edx, 5
xor edx, esi
mov edx, esi
sub edx, ebx
xor ebx, edx
xchg ecx, ebx
add edx, ecx
xchg ecx, ebx
jmp 0x4d87d5
mov edi, 0x2809024b
ror edx, 0xa
ror ecx, 0x11
mov ebx, esi
mov ecx, ebx
mov ecx, edx
or ecx, ebx
not esi
sub esi, ecx
jmp 0x4d9357
push 0xa49eb988
mov ecx, edx
mov edx, 0xa939a25a
xor edx, ecx
dec edx
and edx, esi
mov ebx, edx
mov esi, ebx
sub esi, ebx
xor ebx, ecx
nop
sub ecx, esi
jmp 0x4dbf88
call fcn.004d8c27
inc ecx
or esi, ecx
xor edx, ebx
shl esi, 4
xor ecx, esi
jmp 0x4da0a4
call fcn.004d8c27
sub edx, ebx
add edx, esi
mov esi, ecx
neg ecx
mov ebx, esi
sub ebx, edx
or esi, 0xa942e9df
sub esi, edx
and ecx, esi
xchg ecx, ebx
and edx, ebx
jmp 0x4d8e13
push 0xa484059c
xor edx, 0xa94c1947
add ebx, edx
shl esi, 0x15
sub ebx, esi
xor ecx, esi
sub edx, esi
sub esi, edx
dec ebx
bswap ecx
shr esi, 0x12
jmp 0x4db035
push 0xa48eb6da
add ebx, ecx
bswap ecx
jmp 0x4db66d
push 0xa49e6faf
xor ecx, ebx
or ebx, ecx
ror edx, 0x1e
xor ecx, edx
neg esi
xor ebx, 0xa96445d9
jmp 0x4dac34
push 0xa49caf32
or ecx, edx
or esi, ebx
xor ebx, 0xa965115a
neg ecx
mov edx, esi
neg ecx
jmp 0x4dbbcb
pop edi
and ecx, edx
mov esi, edx
add esi, 0xa97a3c3c
xchg edx, esi
or edx, ebx
neg edx
not ebx
xor esi, ebx
xor ebx, esi
add ecx, esi
jmp 0x4db6cf
push 0xa4a6c7f8
sub esi, 0xa97e299b
add ebx, esi
mov ecx, esi
nop
mov ebx, edx
jmp 0x4dc235
call fcn.004d8c27
dec ebx
or esi, edx
add esi, 0xa97fdafa
mov edx, esi
shr ebx, 0x10
and ebx, edx
and edx, ebx
xor esi, ecx
jmp 0x4d9fc5
pop edi
shr ecx, 0xe
shl ecx, 0x17
sub ecx, esi
sub ebx, esi
jmp 0x4dc9a8
push 0xa4844527
and esi, ecx
add ecx, ebx
xor esi, 0xa984fdf1
rol edx, 0x1d
xchg edx, ecx
sub esi, edx
or edx, esi
xor esi, ecx
rol esi, 9
xor ecx, ebx
inc edx
jmp 0x4d955d
pop edi
or ecx, edx
mov esi, ebx
or ebx, 0xa99e01ae
xor edx, ecx
xor esi, 0xa99e7033
add ebx, ecx
shr edx, 4
and ebx, esi
sub esi, 0xa99f5a5a
not esi
or ebx, esi
jmp 0x4d93b4
pop edi
shr edx, 2
mov ecx, edx
xor esi, edx
xchg ebx, edx
jmp 0x4dc8ef
pop edi
dec ecx
add esi, edx
add esi, 0xa9b159f4
inc esi
sub ecx, edx
or edx, ebx
jmp 0x4da51a
pop edi
and ecx, ebx
and edx, esi
mov esi, ebx
xor edx, ebx
jmp 0x4d9f33
pop edi
or edx, esi
sub ebx, esi
sub ecx, ebx
or ebx, ecx
or ebx, edx
jmp 0x4db2b6
mov edi, 0x6332a2e
xor edx, esi
not ebx
xchg ebx, esi
and ecx, esi
xor ebx, 0xa9c2e187
xor edx, esi
mov ecx, esi
and esi, ebx
xor esi, ebx
xor ecx, edx
jmp 0x4dac9d
call edi
and edx, ebx
inc edx
or esi, ebx
and ebx, esi
mov ecx, ebx
rol ecx, 4
xchg ebx, esi
mov ebx, 0xa9e2eedf
and ecx, esi
mov edx, esi
xchg edx, ebx
xor ebx, edx
sub ebx, 0xa9e3fcce
jmp 0x4dc7b9
pop edi
rol ebx, 0x10
shl esi, 0xf
or esi, 0xa9ee11e9
sub ecx, esi
not esi
xor ebx, 0xa9eeb774
dec ebx
ror edx, 1
xchg esi, edx
neg ebx
and ecx, esi
add esi, ecx
and edx, ecx
sub edx, ebx
and edx, ecx
jmp 0x4daf92
push 0xa48ef8a1
and ecx, esi
or ecx, 0xa9f144c4
jmp 0x4db82d
mov edi, 0x2809024b
inc esi
mov ebx, ecx
nop
jmp 0x4dc35c
pop edi
xchg ebx, edx
or ecx, ebx
xor esi, ecx
xor ecx, esi
ror ecx, 0x10
or ecx, 0xa9f37bd1
and edx, ebx
ror edx, 2
shl esi, 0xb
jmp 0x4dc698
pop edi
add ebx, ecx
and esi, ebx
mov ebx, edx
bswap ebx
dec esi
and esi, 0xa9fa7a84
add esi, 0xa9fab6c0
xor ebx, 0xa9faf3e5
sub ecx, ebx
jmp 0x4dbd5e
push 0xa4a7a53d
add ebx, edx
xor edx, 0xaa0221f9
xor ecx, 0xaa025ee4
sub ebx, ecx
sub esi, 0xaa02d571
rol ebx, 0xd
xchg esi, ebx
or ecx, 0xaa039b0e
nop
jmp 0x4dabca
push 0xa48ff818
add edx, 0xaa11fc30
and ecx, esi
shr ecx, 0x1b
xor edx, ebx
xor esi, edx
xor esi, ecx
xchg ecx, ebx
sub ecx, ebx
xchg edx, ebx
jmp 0x4da9ac
call fcn.004d8c27
dec edx
mov edx, esi
bswap ecx
sub edx, ecx
and edx, ebx
sub ecx, ebx
and edx, ebx
xchg ecx, ebx
jmp 0x4d88a2
pop edi
bswap ebx
add ebx, edx
and ecx, edx
and ebx, 0xaa2d74b5
add ebx, ecx
rol ecx, 0xf
shr ecx, 0x1c
add esi, ebx
mov esi, 0xaa2eb6b4
mov edx, esi
mov esi, ebx
not ebx
shl edx, 0xa
jmp 0x4db1bb
call edi
add ecx, 0xaa3259e8
xor ebx, 0xaa329772
add ecx, ebx
mov ecx, edx
or ebx, esi
inc ebx
inc edx
and esi, 0xaa3404b6
xor esi, ebx
and esi, 0xaa348e0f
shr ebx, 4
jmp 0x4da986
pop edi
mov ebx, ecx
shr ecx, 0x18
mov ecx, esi
nop
mov edx, ecx
sub ebx, ecx
add esi, edx
jmp 0x4da147
pop edi
xor ebx, esi
sub esi, ecx
xchg esi, ebx
mov ecx, 0xaa506974
add ecx, 0xaa50a102
mov ecx, edx
and ecx, esi
add ebx, esi
and edx, 0xaa518668
or ecx, esi
xor ecx, esi
jmp 0x4d8a72
mov edi, 0x6332a2e
ror esi, 0x13
add esi, ecx
xchg ecx, esi
and esi, edx
xchg ecx, esi
xor ebx, 0xaa536265
sub edx, 0xaa539a18
xor ecx, ebx
jmp 0x4dafed
push 0xa4a4bd68
xchg edx, ecx
xor ebx, edx
xor ecx, esi
xor edx, ebx
xor edx, ecx
or esi, ecx
shr edx, 0xd
xchg ecx, esi
shr ecx, 0x11
xchg ebx, ecx
add esi, ecx
add ebx, edx
xchg ecx, esi
jmp 0x4dabe7
pop edi
or ecx, edx
bswap edx
or esi, ebx
xor ecx, ebx
jmp 0x4db2ca
push 0xa48695a6
not ecx
add ecx, 0xaa6d6a08
mov ebx, esi
bswap ecx
mov ebx, ecx
dec ecx
rol edx, 0xa
ror ebx, 3
mov edx, ecx
and esi, ecx
and ebx, edx
jmp 0x4d95e1
pop edi
or edx, ebx
sub esi, edx
mov edx, esi
not ebx
xor edx, ebx
mov edx, ebx
add edx, esi
or ecx, esi
and edx, esi
not esi
xor esi, 0xaa73f3b7
neg esi
inc ecx
shl ecx, 7
jmp 0x4db68d
pop edi
and ecx, 0xaa78a822
sub esi, edx
xor ebx, esi
sub edx, ecx
add ecx, esi
mov edx, esi
dec ecx
and esi, 0xaa7a33c0
xchg esi, edx
xchg edx, ecx
jmp 0x4d9d4a
mov edi, 0x6332a2e
neg esi
add edx, esi
mov esi, edx
not edx
ror edx, 0x13
and edx, 0xaa8203c2
mov ebx, 0xaa823a64
mov ebx, esi
mov edx, esi
mov ebx, ecx
xchg ecx, esi
shl ebx, 4
sub edx, 0xaa838ddd
jmp 0x4da107
push 0xa48940e3
add esi, ecx
and esi, edx
and edx, ebx
sub esi, edx
and ecx, 0xaa86c03f
sub esi, ecx
not edx
add edx, 0xaa876615
and ecx, 0xaa87ac81
xor ecx, ebx
bswap esi
inc ecx
jmp 0x4d9ea9
call edi
bswap esi
sub esi, ecx
add ebx, edx
sub edx, ebx
mov ecx, edx
or ecx, esi
xchg esi, edx
xor ebx, ecx
jmp 0x4db337
push 0xa49f036c
sub esi, edx
and ecx, edx
mov ebx, esi
and edx, ebx
and ecx, 0xaa93174f
rol esi, 2
mov ecx, 0xaa9387bf
and edx, 0xaa93bf82
or ebx, 0xaa93f613
add ebx, edx
jmp 0x4d96ea
push 0xa489c3df
add edx, esi
or ecx, 0xaa9c638e
xchg ebx, esi
add ebx, esi
add ebx, edx
sub esi, 0xaa9d4abd
shr ebx, 0x14
rol edx, 8
add esi, ecx
jmp 0x4dc3b3
pop edi
mov esi, 0xaaa41207
or edx, ecx
xor ebx, esi
sub ecx, 0xaaa4b6ff
ror esi, 3
inc ecx
jmp 0x4d8af4
push 0xa4a7118b
mov esi, ebx
sub edx, 0xaabcb445
xor esi, ebx
xchg edx, ecx
or ecx, edx
or edx, ecx
not edx
jmp 0x4dca1c
mov edi, 0x6332a2e
xchg esi, edx
xor ecx, esi
mov ecx, ebx
mov edx, ebx
and ecx, edx
and ebx, edx
bswap edx
dec esi
xor ecx, 0xaac4a69b
bswap ebx
and esi, ecx
xor esi, ebx
shr ebx, 5
shl esi, 0x10
jmp 0x4d9870
call fcn.004d8c27
bswap esi
sub esi, ebx
xchg edx, ecx
and edx, ecx
xor esi, ebx
xor ecx, edx
sub ecx, 0xaad22e12
add esi, edx
inc ecx
rol edx, 0x16
rol esi, 6
sub edx, esi
bswap esi
xchg esi, ebx
jmp 0x4d91a4
push 0xa48a04d2
mov esi, 0xaad76a53
mov edx, ebx
xor ecx, 0xaad7e069
xor ebx, ecx
mov ecx, edx
mov edx, ecx
sub esi, ebx
sub edx, esi
xchg edx, ebx
mov edx, ecx
xor edx, esi
mov edx, esi
sub ebx, edx
or esi, ebx
not ecx
jmp 0x4d9858
push 0xa4a473d5
rol edx, 0xc
xor edx, ecx
sub edx, esi
sub esi, ebx
jmp 0x4dbd03
push 0xa48718a4
and ebx, ecx
xchg ebx, esi
or edx, ecx
xor ebx, 0xaaf07b71
sub edx, ecx
add ecx, edx
or ecx, edx
neg ecx
dec ecx
inc ebx
shl esi, 0x1d
mov edx, esi
jmp 0x4d992a
push 0xa4951664
sub ebx, esi
and ecx, ebx
add ebx, edx
or esi, ecx
dec esi
or ecx, edx
ror ecx, 0xc
neg ecx
shl ebx, 4
or esi, 0xaaf7a0bd
mov ecx, ebx
jmp 0x4da4ac
mov edi, 0x6332a2e
shr esi, 0x15
rol edx, 0xc
or edx, ecx
mov edx, 0xaaf8e2e5
rol esi, 7
add ecx, edx
rol esi, 0x13
sub ebx, esi
xchg edx, ebx
xchg ecx, ebx
add edx, ecx
xor ebx, edx
jmp 0x4d9465
pop edi
or ebx, ecx
not ecx
xor edx, esi
xchg esi, ecx
and esi, edx
sub edx, ecx
and edx, ebx
sub ecx, 0xab0e2237
not ebx
xor esi, ebx
jmp 0x4dba42
pop edi
neg esi
and edx, ebx
shl ecx, 0x10
bswap esi
sub esi, 0xab1c3f87
add esi, 0xab1c7c3f
and ebx, esi
add esi, ebx
neg ecx
shr esi, 0x15
mov ebx, ecx
shl esi, 0xf
xchg edx, esi
jmp 0x4dbdfb
pop edi
add esi, 0xab1fadc2
ror edx, 0x16
sub ecx, edx
mov ebx, 0xab2076e2
mov ecx, ebx
bswap edx
jmp 0x4dc405
pop edi
and ecx, esi
rol ebx, 0x13
inc edx
xor esi, 0xab2201b0
ror esi, 0x1e
or ecx, 0xab227f9a
add ecx, 0xab22be26
nop
jmp 0x4dc0cf
pop edi
ror esi, 6
xor esi, ebx
or ebx, esi
add ebx, esi
or esi, edx
shl ebx, 0x1a
sub esi, edx
add ebx, 0xab588ce3
mov ecx, ebx
jmp 0x4da7a8
pop edi
or edx, 0xab71c1be
or ecx, esi
and edx, esi
and ebx, ecx
dec edx
or ebx, edx
mov ecx, esi
xchg esi, ebx
or edx, esi
xchg esi, edx
inc esi
jmp 0x4d97ac
push 0xa49662f4
and esi, edx
xor ebx, ecx
add ecx, esi
xor ecx, 0xab7c95d1
add edx, 0xab7d0b81
sub ecx, 0xab7da019
xor ebx, 0xab7e1a1e
and ebx, ecx
sub edx, ecx
ror ecx, 0xc
jmp 0x4d8a21
push 0xa4a75b5e
add ebx, esi
and ecx, ebx
inc edx
inc ebx
xor esi, ecx
shl ebx, 0x15
or edx, esi
jmp 0x4db742