Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
mov ecx, 0x5c566870
xchg ecx, ebx
sub edx, edi
call sub.kernel32.dll_GetUserDefaultLangID
shl edi, 0x10
shl ebx, 0x1b
bswap edi
cmp eax, 0xffffff28
jne 0x401090
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
ret
add ebx, edx
xchg ebx, edx
xor ecx, 0x5c632388
mov ecx, edi
add edi, ecx
and edx, edi
or ebx, ecx
call sub.kernel32.dll_GetUserDefaultLangID
mov ecx, edx
sub ebx, 0x5c67f0be
shl edi, 0x16
inc ebx
or edx, 0x5c69d7bd
inc ebx
and ecx, edi
xor edx, edi
cmp eax, 0xffffff13
jne 0x40114c
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
ret
add edi, ecx
shl ecx, 0xc
call sub.kernel32.dll_GetUserDefaultLangID
or edi, ecx
not edi
neg edi
or ecx, 0x5c734302
cmp eax, 0xffffff38
jne 0x4011eb
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
ret
xor edx, edi
or ecx, ebx
bswap edi
and edi, edx
call sub.kernel32.dll_GetThreadLocale
xchg ecx, ebx
neg edx
cmp eax, 0xfffffee0
jne 0x40125d
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
call sub.advapi32.dll_GetTokenInformation
ret
jmp 0x49487b
or edx, ebx
jmp 0x494be3
call fcn.00494ff9
bswap ebx
or edx, edi
add ecx, edx
sub ecx, edx
neg edi
sub ecx, ebx
inc ecx
add edi, edx
or edx, 0x683b64ca
bswap ebx
jmp 0x496a4c
pop esi
add edx, ebx
not ebx
shl ecx, 0x12
xchg ecx, ebx
mov edi, edx
or ebx, 0x683ff0c5
and edx, 0x68409990
or edi, ebx
xor edi, 0x6841f506
xor edx, ecx
sub edx, ecx
jmp 0x496f73
push 0x40
or ebx, 0x686c019d
xor edi, ecx
sub edi, ecx
mov edi, ecx
or edi, ebx
add ebx, edx
mov edx, ebx
or ecx, ebx
and edx, 0x6870dbda
shr edi, 0x1e
or ecx, 0x6872188e
sub ecx, ebx
sub ebx, edi
neg edx
jmp 0x4953d1
pop esi
xchg edx, ebx
mov ebx, edx
mov edx, ecx
jmp 0x49598f
mov esi, 0x246e6c30
and edx, ecx
or ecx, 0x68774b28
sub ebx, edi
or edx, ebx
xor edi, edx
xchg edi, ebx
mov ecx, edx
shr edi, 0x16
and edi, ecx
sub ecx, 0x687c4693
shl ebx, 1
xor edi, 0x687d8b9a
xchg ebx, ecx
jmp 0x497f84
pop esi
add ebx, edx
xor ebx, ecx
mov ebx, edi
sub ecx, ebx
add edi, 0x688bd10e
and ecx, ebx
shl edi, 3
sub edx, ecx
or edi, 0x688ff487
jmp 0x4970b5
mov esi, 0x2809024b
or ecx, edx
and edi, ecx
add ecx, ebx
shl edi, 0x1c
jmp 0x495608
push 0x5d25d70e
sub ebx, 0x6feadd23
sub edx, ebx
mov edx, 0x6febf021
bswap edi
mov ebx, edi
add edi, ebx
sub edi, edx
xor edx, ebx
jmp 0x496f82
pop esi
and edi, ebx
sub ebx, edx
inc edi
xor edi, ebx
or ebx, edx
add ecx, 0x7006d4ac
add edx, ecx
sub ecx, 0x7007ed4c
or edi, ecx
mov edx, ecx
jmp 0x4952e7
pop esi
and ebx, edx
xchg edi, edx
xor edi, ebx
mov ecx, 0x700f8320
sub edi, ecx
mov ebx, edi
jmp 0x497b3c
call esi
add edi, edx
rol ebx, 0x12
and ecx, ebx
and ecx, edx
jmp 0x4948c5
pop esi
sub edx, edi
and edx, ecx
and edx, ebx
and edx, ecx
add edx, ebx
sub edx, ecx
sub edx, 0x7040228a
or ecx, edi
mov edx, 0x70413d09
bswap ebx
jmp 0x497ae4
mov esi, 0x246e6c30
nop
and edi, ecx
neg edx
xor ecx, ebx
mov edi, 0x70474271
mov edi, ebx
or edx, ecx
xor ecx, ebx
jmp 0x495fab
push esp
ror edi, 0x10
ror ecx, 0x13
mov ecx, edx
or ecx, edx
and edi, 0x704bca3b
xchg ecx, edx
add ecx, edi
dec edx
xchg ebx, edi
xchg ecx, ebx
or edi, ecx
xchg ecx, ebx
and edi, ebx
jmp 0x4949bd
push 0x5d35b719
xchg edi, edx
xor ecx, edi
or ecx, 0x7068d733
inc edi
or ecx, edi
and ebx, edi
mov ecx, 0x706b07ee
xchg edx, ebx
add edi, ecx
jmp 0x496719
pop esi
or ebx, edi
inc ecx
sub ebx, 0x7088a81b
xchg ebx, ecx
and edi, ecx
and ebx, ecx
dec edx
inc edx
sub ebx, 0x708b0623
jmp fcn.004975d6
push 0x5d274552
neg ebx
mov edx, edi
sub ebx, edi
shl edi, 0x17
add edx, 0x7091d2da
neg ebx
and edi, edx
xor edi, edx
xor edx, edi
sub edi, 0x7093d6fd
or edx, edi
xchg ecx, ebx
jmp 0x495586
pop esi
inc edi
and ecx, 0x709d4faa
sub edx, edi
or ecx, edx
mov edi, ecx
or ecx, ebx
jmp 0x495f33
mov esi, 0x2809024b
neg ecx
or edx, 0x70a3bdcd
or edx, 0x70a40ce1
sub edi, ebx
mov ebx, edx
add ecx, ebx
sub ebx, 0x70a553f5
xor ecx, ebx
add ecx, ebx
xor ecx, edi
jmp 0x497c60
push 0x5d54c7f3
sub ebx, ecx
xchg ebx, edx
sub edx, edi
or ecx, edx
shr edx, 0x10
mov edx, ecx
or ecx, edx
or edi, ebx
mov ecx, edx
shr edx, 7
jmp 0x495e8d
pop esi
or edi, edx
xchg edi, edx
ror ebx, 1
xchg edx, ecx
bswap edi
rol ecx, 0xb
nop
nop
dec ebx
add edi, ebx
and edi, edx
dec ecx
add ecx, edx
jmp 0x495a64
push 0x5d51c963
mov ebx, 0x70bd4a62
add edx, ebx
and edi, 0x70bdf4e2
jmp 0x4962fd
push 0x5d5a3ff5
rol ebx, 1
xor ebx, edx
ror edi, 0xd
sub ecx, edi
sub ebx, 0x70d0aa5b
add edi, 0x70d0ff2d
mov edx, ebx
add ebx, 0x70d19a0a
shl edx, 9
jmp 0x495128
mov esi, 0x4132136a
xor edx, ecx
sub edi, ebx
ror ecx, 0x17
and ebx, 0x70d34813
mov edi, ecx
shr ebx, 0xf
sub ecx, edx
and edi, edx
mov edi, 0x70d50b78
sub edi, ebx
shr edx, 0xc
xor ecx, edi
sub ecx, edx
sub edx, ebx
jmp 0x496e0d
pop esi
not edx
ror ebx, 0xa
or ebx, ecx
xor ebx, edi
or edi, ebx
mov ecx, ebx
sub ebx, ecx
or ebx, ecx
dec edi
dec ecx
sub edi, 0x70e22aea
sub ebx, edi
rol edx, 0x1d
jmp 0x496848
push 0x9347b
or edi, ebx
mov edx, edi
sub ebx, edx
dec ebx
add edi, edx
xchg ebx, ecx
dec edi
and ecx, 0x70efb66d
and edx, ebx
and ecx, edx
and ebx, 0x70f0a264
and edi, ecx
and edi, edx
or edi, ecx
neg ebx
jmp 0x4954f2
push 0x5d4c7f33
xor ecx, edi
sub ebx, edi
xor edx, ebx
xor ecx, 0x70f34807
mov edx, edi
sub ebx, edi
bswap ecx
jmp 0x495bde
call fcn.00494ff9
shr ecx, 0xf
or ecx, edi
and ecx, 0x70fd608f
xchg edi, edx
ror ebx, 5
and edx, ebx
or ecx, edi
rol edi, 4
jmp 0x497053
push 0x401400
or edi, edx
add ebx, edx
or edi, edx
dec edi
or edx, ecx
and edx, ecx
shl ebx, 0x1e
sub ebx, edi
mov edi, edx
shl edi, 0x1f
jmp 0x496709
pop esi
mov edx, edi
rol ecx, 0x16
shl ecx, 7
xor edi, edx
or ecx, edi
xchg ecx, edx
sub ecx, edi
xchg ecx, ebx
shl edx, 0xe
xor ecx, edi
jmp 0x4973f8
call esi
mov ecx, 0x7116d820
xor edi, ebx
sub edx, ecx
and edi, ebx
add ecx, ebx
ror ecx, 9
dec edi
rol ecx, 0x1b
jmp 0x4963b9
push 0x5d27b840
not edi
and edx, ebx
not edx
bswap edi
add edx, ecx
dec ebx
add ecx, edx
inc edx
jmp 0x497d41
mov esi, 0x246e6c30
or edx, ebx
or edi, ecx
sub edx, 0x712086e8
sub edx, 0x71211955
xor ebx, ecx
sub edi, edx
neg edi
neg edi
inc edx
add ebx, edi
jmp 0x4948a4
call fcn.00494ff9
neg ebx
dec ecx
and edx, ebx
xor edx, edi
or edi, ebx
neg edi
sub edi, ecx
and ebx, ecx
xchg edi, ebx
jmp 0x49711b
call esi
shl edi, 0x1a
and ecx, 0x7133c79f
add edi, ebx
sub ebx, 0x7134ef49
add edi, ecx
rol edx, 9
neg edx
and edx, 0x71370659
add edx, edi
shr edi, 0x11
neg ebx
inc edx
jmp 0x49501e
push 0x5d480506
xor edx, edi
ror ebx, 0x1c
shl edi, 0x1a
not edi
xchg edx, ecx
xor ecx, ebx
rol edx, 0xd
and edi, edx
shr edx, 0x17
or ebx, 0x718b41c3
add ecx, edx
xor edx, 0x718c7020
xor ecx, ebx
xor ecx, edi
mov ecx, 0x718e4d3e
not ecx
jmp 0x497b5b
push 0x5d368ea0
or edx, 0x71b602b8
mov ebx, 0x71b65318
xor ebx, 0x71b6b100
xor ecx, 0x71b6fed5
or edx, ecx
add ebx, ecx
jmp 0x495d50
push 0x5d44f8f3
mov ebx, ecx
shr ebx, 0x1f
add edi, ecx
sub edi, edx
jmp 0x496987
push 0x5d51592a
inc edx
mov ecx, edi
sub ecx, ebx
add edx, 0x71dfd30e
sub edx, ecx
rol ecx, 6
neg edi
shl edx, 8
jmp 0x4951fb
push 0x5d309959
and edx, ecx
or edx, 0x720365f9
mov edi, ebx
or edi, 0x72049c3c
sub ebx, edi
shl edx, 0x1c
shr ecx, 0x10
jmp 0x4961e3
push 0x5d4ce489
ror edi, 0xf
shr ebx, 0x19
not edx
xor ecx, edi
jmp 0x495c56
push 0x5d4d4e1d
mov ebx, 0x72300eff
mov ebx, 0x7230c050
add ebx, 0x723159f5
add edi, ecx
xchg ebx, ecx
jmp 0x497010
pop esi
xchg ecx, edi
neg ecx
bswap edi
or edx, edi
shl ecx, 0x1c
mov edx, ebx
add edi, ecx
inc edi
xchg edx, ecx
or edx, edi
xchg ecx, edx
xor ecx, edi
sub ebx, edx
sub ebx, 0x723b41fa
jmp 0x4977ce
push 0x5d36ed9d
xor ecx, ebx
or edi, 0x725d5572
xor ecx, edi
or ecx, ebx
xchg ebx, edx
xor ebx, ecx
rol edi, 0x18
or ecx, edx
jmp 0x4978b8
call fcn.00494ff9
and ebx, edx
add ecx, ebx
sub ebx, ecx
xchg ecx, edi
xor ebx, edi
inc ebx
mov edi, edx
dec ecx
jmp 0x496ea6
push 0x5d59d279
dec edx
bswap ecx
or ecx, ebx
add edi, ecx
add ebx, edx
jmp 0x4952bc
call fcn.00494ff9
mov edi, edx
sub ebx, edi
sub edi, ebx
mov ebx, edi
xchg ebx, ecx
mov ebx, edi
not ecx
mov ecx, edx
add edi, ebx
jmp 0x497e71
push 0x5d5545a5
shl ecx, 8
xchg ecx, edi
add ecx, 0x72fab928
neg ecx
mov ebx, 0x72fbf809
jmp 0x497dc0
call fcn.00494ff9
neg ecx
rol edx, 0xc
sub ebx, edx
and ecx, ebx
sub ecx, 0x730ae783
shr ecx, 6
xor edx, ebx
add ecx, 0x730cebc5
xor edx, edi
sub edi, ecx
xor ebx, ecx
xor edx, edi
bswap ebx
sub ebx, 0x73109c8a
jmp 0x495550
pop esi
add ebx, ecx
xor ecx, 0x73198f9b
mov ebx, 0x731a27df
add ecx, ebx
neg ebx
or edx, edi
add edx, ecx
or ecx, 0x731d5ba5
and ecx, ebx
mov edi, ecx
mov ecx, ebx
jmp 0x495826
call fcn.00494ff9
add ecx, edx
inc edx
and edi, 0x732d1e4c
xor edi, ebx
xchg ebx, ecx
jmp 0x497133
pop esi
or ebx, edx
dec ecx
add edx, edi
bswap edi
sub ebx, edi
rol edx, 0x1b
xor ebx, edx
xor ebx, edx
rol ecx, 8
xor ecx, 0x733c311c
jmp 0x495172
call fcn.00494ff9
and edx, ecx
xchg edi, edx
xor ebx, edx
and ecx, edi
add ebx, edx
and ebx, ecx
and ecx, ebx
add edx, 0x7369d589
and ebx, edi
jmp 0x497624
push 0x5d3104ca
add edi, ecx
neg ebx
rol edi, 1
shr ecx, 0xb
inc edx
mov edx, ecx
and edx, ebx
inc ebx
sub edi, edx
jmp 0x494a86
pop esi
xor edi, ebx
and edx, 0x73959780
ror ecx, 4
add edi, ebx
add edi, ebx
or ebx, ecx
jmp 0x497971
pop esi
dec ebx
mov ecx, ebx
and edx, ecx
xor edx, ecx
or edi, edx
sub ecx, 0x73a669f6
and ecx, edx
mov ebx, edx
xchg edx, ebx
xor edx, edi
xor ebx, ecx
xor ebx, edx
jmp 0x495e36
mov esi, 0x246e6c30
neg edx
or edx, ecx
sub edx, edi
neg ecx
shl ebx, 0x1a
mov edx, ecx
or edx, 0x73c2cdb1
or ecx, edi
xor ebx, 0x73c40b57
mov ebx, edx
xor ecx, ebx
or ebx, edi
jmp 0x4960fc
push 0x5d4174b1
sub ecx, edi
shr ebx, 9
inc edx
add ebx, edi
or edi, ecx
add edi, ecx
and edx, 0x73d7c77b
or ebx, 0x73d86c0f
xor edi, 0x73d8fefa
xor edi, 0x73d99249
rol ebx, 3
sub edi, edx
jmp 0x497858
mov esi, 0x246e6c30
xor edi, ebx
and ecx, edi
and ecx, ebx
mov ebx, 0x73dd5fcf
shl ecx, 0x18
shl ecx, 0xf
dec edx
jmp 0x496a86
pop esi
xchg edi, edx
xor ebx, edx
inc edi
xor ebx, ecx
sub ebx, ecx
mov ebx, edi
mov ecx, 0x73e3f087
and ebx, ecx
jmp 0x495c74
pop esi
add edi, ebx
add ecx, edi
shr edx, 0x12
shr ecx, 0x13
mov ecx, edx
xor edx, 0x73ef333a
mov ebx, ecx
jmp 0x494e1e
push 0x5d48d8fe
xchg edi, edx
mov ebx, ecx
add ecx, ebx
add ecx, edx
mov ebx, 0x73ffb75a
jmp 0x497ec4
push 0x5d302869
ror edi, 0xf
xchg ebx, edx
xchg edi, ecx
mov ebx, 0x742552e9
rol edi, 0x10
shl ebx, 0x17
or edx, ecx
shl edi, 0x1e
xor ebx, 0x74282b39
jmp 0x495b4b
call esi
xor ecx, 0x744955fc
xor edi, ebx
sub ecx, 0x744a9354
and edx, 0x744b33ea
or edx, edi
sub edi, ecx
jmp 0x4950ed
pop esi
or edi, 0x744d153a
ror ebx, 0x18
or ebx, ecx
mov ebx, ecx
xor ebx, 0x744f620a
xor edx, edi
jmp 0x4953ff
pop esi
mov ebx, 0x7450ac7e
sub ecx, 0x7451410a
xor ebx, ecx
add edi, ecx
bswap ebx
add ebx, 0x7453860e
ror ecx, 0xc
or edx, 0x7454c273
xor ecx, edi
and ebx, ecx
jmp 0x497b13
call esi
or ecx, edi
or ecx, edi
mov ecx, 0x7469b34e
jmp 0x496671
push 0x5d36231f
mov ebx, 0x746a7111
and edi, edx
add edi, ecx
sub ebx, 0x746c3291
neg ecx
add edi, edx
add ebx, ecx
neg edi
and edi, edx
xor edi, edx
jmp 0x495940
push 0x5d2ba879
or ebx, 0x74705aa9
add ebx, edx
sub ebx, edi
neg ecx
xor ebx, ecx
mov ebx, ecx
ror ecx, 9
shr ecx, 0x1e
add edx, ecx
jmp 0x497669
pop esi
or edi, edx
not edx
mov ecx, ebx
or edx, ebx
or ebx, 0x749cdd8d
and edi, 0x749d8697
mov edx, 0x749e2808
add ebx, edx
inc ebx
jmp 0x495fef
pop esi
mov ebx, edx
or edx, ecx
xchg ebx, edx
mov ecx, ebx
sub ecx, edi
mov edx, ecx
shr edi, 0x1e
sub edx, ebx
mov edx, ecx
rol ecx, 0x19
or edi, ecx
xor edx, edi
jmp 0x49673e
push 0x5d456a56
mov ebx, edx
or edi, ecx
jmp 0x4949fc
push 0x5d564e0d
and edi, 0x74ddb763
or edi, edx
or ebx, edi
or ebx, edx
or edx, ebx
jmp 0x497e9d
call esi
add ebx, edi
inc ecx
add edx, ecx
and edi, ecx
inc edx
sub edx, edi
rol ebx, 3
add ebx, edi
shl edi, 0xb
jmp 0x495348
call fcn.00494ff9
and ecx, 0x750a731b
xor edi, edx
mov edi, ecx
rol edi, 0x1f
mov ebx, edi
mov edi, ebx
not edx
jmp 0x494d3f
mov esi, 0x246e6c30
or edi, 0x75228260
shl ecx, 0xa
add ebx, 0x7523cc86
mov ebx, edx
dec edx
add edi, edx
dec edi
jmp 0x497768
pop esi
shr ecx, 0x13
shl edx, 7
inc ebx
sub edi, edx
xor edx, edi
shl ebx, 8
xchg ecx, edx
xor ecx, edi
or edx, 0x7553afc3
xor edx, 0x75544d79
sub edi, edx
xor ebx, edx
or ebx, edi
jmp 0x4970a4
call esi
and edi, ebx
and edx, edi
neg ebx
jmp 0x494cd3
call fcn.00494ff9
and edi, edx
mov ecx, ebx
xor edi, edx
mov edi, ebx
xor ecx, edx
xchg edi, ecx
jmp 0x49742a
call esi
mov ebx, edi
ror edx, 0x17
and ebx, edi
mov ecx, ebx
add edx, ebx
or edi, 0x75da9aff
mov ebx, ecx
inc edi
add edx, ecx
jmp 0x4975ba
pop esi
or ebx, edi
or ecx, edi
sub ecx, edx
or edx, ebx
jmp 0x4961ff
pop esi
add edx, ebx
xor ebx, ecx
rol edi, 6
sub edi, edx
jmp 0x4949f0
push 0x5d266284
xor edx, ebx
sub ebx, ecx
and ecx, edx
xchg edi, ebx
or edi, edx
not ecx
xor ebx, 0x7601a0a7
ror edx, 3
not ebx
rol edi, 1
or ebx, edi
add ecx, edi
jmp 0x49771d
push 0x5d4dcc2d
and ecx, ebx
dec edi
xor ecx, edx
mov edx, ecx
shl edx, 0xb
ror edx, 0xe
inc ecx
xchg ebx, edx
xor ebx, ecx
sub ebx, ecx
mov edx, edi
jmp 0x49559e
call esi
xor ecx, edi
and ecx, ebx
sub ecx, 0x76205f9b
or ecx, edi
jmp 0x4976f5
push 0x5d2fbb73
bswap ecx
mov edx, 0x762c47d3
jmp 0x496544
push 0x5d3553f4
not edx
bswap edi
jmp 0x494f27
call fcn.00494ff9
xor ebx, edx
rol ecx, 0x11
mov ebx, edx
add ebx, ecx
mov ebx, edx
xor edi, ecx
add ecx, edi
xor edx, edi
jmp 0x496d33
call esi
xor ebx, ecx
or ebx, edi
ror ebx, 0x14
not ebx
sub edi, ecx
add edi, ecx
and ebx, edx
add ebx, edi
jmp 0x495533
call esi
sub ebx, edi
xchg ecx, edi
add ecx, 0x7645373e
sub edi, ebx
mov ecx, 0x76465d9a
sub ecx, ebx
jmp 0x497929
pop esi
xor ebx, ecx
mov ecx, 0x766f8dbe
xchg edx, ecx
and edi, edx
xor ebx, edi
xchg ebx, ecx
ror ebx, 0xa
jmp 0x497232
pop esi
add edx, ecx
xchg ecx, edi
dec edi
add ecx, edx
xor edx, ebx
dec ebx
sub ebx, 0x767707c2
add ecx, edi
xchg ebx, edx
sub ecx, edi
jmp 0x4968e3
pop esi
xchg edx, ebx
or edi, ecx
and ecx, 0x76c05f93
jmp 0x4974c3
push esp
mov edi, 0x76c74dd7
and edx, 0x76c7e450
xor ebx, edi
add ebx, edx
jmp 0x494e70
pop esi
or edi, ecx
not edx
xor edi, 0x76e1c6e9
or edi, edx
mov ecx, edi
add edi, edx
xor edx, edi
mov ebx, edi
sub edx, 0x76e54771
add edx, ecx
mov ecx, ebx
sub edi, ebx
ror ecx, 0xf
and edx, ebx
not edx
and edx, 0x76e9449a
jmp 0x494a65
push 0x5d410744
xor edi, ecx
sub ecx, edx
mov ebx, edi
or ecx, edi
xor ebx, edi
mov edx, ebx
mov ecx, edi
not ebx
inc edx
add ebx, edi
inc ebx
mov edi, ebx
add edx, edi
jmp 0x49636a
pop esi
xor ebx, edx
sub ebx, ecx
and edi, ebx
nop
sub ebx, edx
xchg edx, ebx
ror ebx, 2
mov ebx, edi
or edx, ebx
or edx, edi
xchg ebx, edx
jmp 0x496ef7
call esi
xor ebx, ecx
or ecx, edi
dec edx
sub ecx, 0x773405d3
add ecx, 0x773499d7
sub ebx, 0x77352cee
mov edi, edx
or edx, edi
mov ecx, edi
dec edx
xor edi, edx
and edx, ebx
xor ecx, edi
shr edx, 4
jmp 0x497d36
mov esi, 0x246e6c30
and ebx, edx
bswap edx
and edi, edx
bswap ecx
add edx, ebx
inc ecx
sub edx, edi
mov ebx, ecx
shl ebx, 0x15
and edi, 0x7742e9ce
sub ecx, edi
jmp 0x495464
pop esi
add ebx, ecx
bswap edx
xor edx, ecx
sub ecx, 0x775247c5
add ebx, 0x7752e1e9
sub edx, 0x7753846c
and edx, ecx
mov edx, ecx
xor ecx, 0x775556bb
jmp 0x497956
push 0x5d26d107
bswap edx
and edx, ecx
not edx
inc edi
shl edi, 0x1a
or edi, 0x775917d3
xor edx, edi
add ecx, ebx
xchg edi, ecx
and ebx, 0x775b84f6
xor ecx, 0x775c240b
ror edx, 0xf
jmp 0x495075
call fcn.00494ff9
xchg edx, ecx
or edx, 0x7761c956
dec ecx
mov edx, 0x77630398
xor edx, ecx
mov ebx, ecx
dec ecx
xor ebx, edx
bswap edx
bswap edi
and ecx, edi
add edi, 0x7767c267
jmp 0x49781d
pop esi
or ebx, ecx
and ecx, ebx
add ebx, edi
ror ebx, 8
inc edx
or edx, ecx
or ebx, edx
xchg ebx, edx
xchg ebx, ecx
mov edi, 0x7777183f
ror edi, 2
xor edi, ecx
mov ebx, edx
jmp 0x49625d
call esi
rol edi, 0xe
or ebx, edx
xchg edi, ecx
mov ebx, 0x7782ef6e
rol ecx, 1
shr ecx, 0x1f
mov edx, 0x7784c75f
xor edx, ebx
xchg ebx, ecx
shr ebx, 0x1d
jmp 0x4963f1
push 0x5d41f2e6
xor ebx, ecx
inc ecx
or ecx, edi
add edi, edx
ror ecx, 0x17
xchg edi, edx
mov ebx, edi
and ecx, edx
sub ebx, 0x7790ef29
and ecx, 0x779180f1
add edi, ecx
add edx, edi
add edx, edi
jmp 0x49639d
mov esi, 0x2809024b
xor ecx, edi
or ecx, ebx
sub edx, ecx
and edx, ebx
add edx, 0x77a01218
and edi, ebx
or ecx, 0x77a13705
and edi, ebx
xor edx, ebx
xchg edx, ecx
xchg ecx, edi
or edx, 0x77a4286f
jmp 0x495e1e
pop esi
not ebx
mov edi, 0x77a57bb3
xor ebx, edi
or ecx, edx
ror edi, 1
mov ecx, edi
bswap edi
and ecx, edx
ror ebx, 0xe
xchg ebx, ecx
xor ebx, edi
or ebx, ecx
jmp 0x495152
pop esi
and ecx, 0x77b29239
xchg ecx, edi
xchg ebx, edi
add ecx, edx
jmp 0x49751d
push 0x5d2db09d
inc ebx
or ecx, edx
mov ebx, edi
mov edi, ecx
or edi, ecx
add edi, ecx
xor edx, edi
xor edi, edx
xchg ecx, edi
jmp 0x497f34
pop esi
add edi, ebx
xor edx, 0x77c117a7
sub edi, 0x77c1c2e5
jmp 0x494c96
pop esi
add edx, 0x77f8e9c8
xor ecx, edi
rol edx, 0xb
and ebx, edi
ror edi, 0xb
xor ecx, edx
or ecx, edi
xor edx, 0x77fd15a0
or edx, edi
mov ebx, 0x77fe320a
and ebx, 0x77fec796
and ecx, edx
jmp 0x496656
push 0x5d3ec7df
and edx, edi
sub edx, edi
xchg ecx, edx
add ebx, edx
xchg ecx, ebx
xor ecx, ebx
not ebx
sub ecx, edx
sub ebx, 0x7804aa93
shl edx, 0xf
dec edi
and edx, ecx
shr edx, 0x1b
jmp 0x494e54
pop esi
shr edx, 1
or edx, 0x78084efe
or edi, ebx
and ebx, edi
or edx, 0x780a0280
xchg ecx, ebx
mov edi, ebx
sub ebx, edx
jmp 0x49721a
push 0x5d486fe8
mov ecx, 0x780c9e24
and edi, ecx
neg edi
xor ecx, edx
add ebx, ecx
mov ebx, edx
mov ecx, ebx
add ecx, edi
or edx, edi
jmp 0x496459
call fcn.00494ff9
sub edx, ebx
add edi, ecx
not ebx
xor edx, 0x783ca2fb
xor edx, edi
sub ebx, edi
inc edi
xor edx, ecx
and ecx, 0x783fa782
mov edx, ecx
or ecx, 0x7840c706
jmp 0x495623
pop esi
xor ecx, edx
sub ecx, edi
inc edi
jmp 0x4978e6
mov esi, 0x246e6c30
mov ebx, edx
sub edi, edx
sub ebx, 0x785daba2
ror ebx, 0xb
add edx, ecx
shl ebx, 5
or edx, edi
add edi, edx
xor ecx, 0x78613c8c
shl ebx, 0x14
mov edx, ebx
mov ebx, ecx
bswap ecx
add ebx, edx
jmp 0x4970e6
push 0x5d55be9a
sub edx, ebx
xchg ebx, ecx
or ebx, 0x7875056e
xchg edi, ecx
shl ecx, 0x1e
and ebx, edx
not ebx
add ebx, 0x7877d4f4
sub edi, ecx
ror edi, 2
jmp 0x496995
call esi
sub ebx, ecx
sub ecx, 0x788d9ed1
rol edx, 0xb
and edi, edx
neg edi
and edx, 0x78900425
rol edi, 0xf
and ebx, 0x78912cf2
sub ebx, edx
xchg edx, ecx
shr ebx, 0xd
jmp 0x496baf
mov esi, 0x246e6c30
xchg ecx, ebx
bswap edi
sub edx, edi
add ecx, ebx
mov ebx, ecx
and ebx, edi
mov edx, 0x78973efe
and ecx, 0x7897d30e
and edx, ecx
inc edx
or ecx, edi
dec edx
jmp 0x495ee4
push 0x5d494447
shl edx, 2
add ebx, edi
mov edi, 0x789c1c1e
mov ebx, 0x789cfa5a
xor edi, edx
xor ebx, edx
xor ecx, 0x789f0a05
add edx, edi
ror edx, 1
jmp 0x496b15
mov esi, 0x246e6c30
and edi, edx
shl ecx, 8
add ecx, ebx
ror ecx, 1
or edx, edi
shl edx, 0xa
xchg edi, ecx
mov ebx, ecx
dec ebx
or edx, ebx
and edx, ecx
and edx, edi
add edi, ecx
jmp 0x495e49
call fcn.00494ff9
inc edx
xor edi, edx
sub ebx, ecx
ror ebx, 0x10
not ebx
or ecx, edx
jmp 0x496637