Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xffffff04
jne 0x401089
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
call sub.advapi32.dll_CredDeleteA
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
ret
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xffffff36
jne 0x4010f4
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.advapi32.dll_CredDeleteA
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.advapi32.dll_CredDeleteA
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.advapi32.dll_CredDeleteA
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffefd
jne 0x40117d
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
ret
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff16
jne 0x401215
call sub.advapi32.dll_CredDeleteA
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.advapi32.dll_CredDeleteA
call sub.advapi32.dll_CredDeleteA
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.advapi32.dll_CredDeleteA
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlGetSecurityDescriptorRMControl
call sub.oleaut32.dll_SafeArrayUnaccessData
call sub.advapi32.dll_CredDeleteA
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.ntdll.dll_RtlUpcaseUnicodeToOemN
call sub.oleaut32.dll_SafeArrayUnaccessData
ret
jmp 0x4d1498
and edi, esi
xor ebx, edi
add esi, ebx
jmp 0x4d4e5e
push 0x4042c9cb
dec edx
mov edi, ecx
xor edx, ebx
rol edi, 0x14
or ebx, 0x4169409b
mov edi, ebx
and edx, ebx
ror ebx, 9
mov ecx, 0x416a4216
xchg edx, edi
mov edi, ecx
dec ecx
xor edi, ecx
jmp 0x4d4574
mov esi, 0x2774562b
mov ecx, 0x41808aca
shr edx, 0x18
nop
add edx, ecx
xor edx, edi
nop
jmp 0x4d1904
mov esi, 0x4132136a
xor ecx, 0x4182269d
sub ecx, edx
add ecx, edi
xor edx, edi
inc ebx
or edx, ecx
bswap edi
jmp 0x4d2169
pop esi
or ecx, edx
add ebx, edi
and edi, 0x418473b3
sub edx, ebx
and ecx, edx
rol ecx, 9
ror ecx, 0xe
mov ecx, 0x4185b57a
shr ebx, 0x12
not ecx
add edx, edi
mov edi, edx
xchg edi, ebx
inc edx
jmp 0x4d364e
push 0x40253f43
xchg ecx, edi
add ebx, 0x419e907b
or edi, edx
add edi, ebx
add edi, edx
bswap ecx
add edx, edi
xchg edx, edi
jmp 0x4d1ab6
pop esi
add edi, ebx
sub ecx, edi
xor edx, ebx
mov edi, edx
sub ecx, edx
xchg ebx, edi
and edx, ebx
or edi, ebx
sub ebx, edi
dec ecx
jmp 0x4d2847
call fcn.004d4fde
not edx
xchg ecx, edi
xchg ebx, edx
xchg ebx, edi
add edi, edx
mov edx, ecx
mov ecx, 0x41b4c9db
jmp 0x4d37cb
pop esi
or edx, edi
or ecx, edi
xchg edx, ebx
add edx, edi
bswap edx
ror ebx, 0xc
and ecx, edx
and ecx, edx
nop
rol ebx, 0x1d
and ecx, edi
or edx, 0x41c2774f
xchg edi, edx
jmp 0x4d49dd
mov esi, 0x2774562b
mov ecx, edx
shr edi, 0x12
add edx, ebx
add ecx, ebx
dec ecx
xchg ebx, edi
xor ecx, edi
sub ebx, ecx
or edx, ebx
jmp 0x4d3a0b
call fcn.004d4fde
ror ecx, 0x12
sub edi, edx
and edx, ecx
ror ecx, 0x1f
neg edi
add edx, edi
or edi, ebx
xor edx, edi
add edi, edx
rol edx, 3
and ebx, 0x41d15141
jmp 0x4d22b7
push 0x4025886a
xchg edx, ebx
mov ebx, edi
or ecx, edx
sub edi, ecx
sub ebx, edx
and edi, ebx
xor edi, ebx
or ecx, 0x41d631ca
add ebx, edi
jmp 0x4d4ce6
pop esi
sub ecx, 0x41d6c280
and ecx, edi
or ebx, edx
or edi, ecx
xchg edi, ebx
xor edi, edx
xor edx, edi
add edx, ecx
xor edx, edi
jmp 0x4d3992
pop esi
shr ecx, 0x11
dec edi
add ebx, 0x41e1194d
mov edi, 0x41e1589c
and edi, ecx
xor edi, 0x41e1d2cb
xchg edi, ecx
or edx, 0x41e24d4e
dec ebx
xor ebx, 0x41e2cb27
jmp 0x4d2608
call fcn.004d4fde
and ecx, 0x41e3231e
xchg edi, ebx
xor ebx, edx
sub ebx, 0x41e3db97
xor edx, ecx
or ebx, edi
jmp 0x4d5061
push 0x402bf9a8
mov edi, 0x41e98a9f
bswap ecx
sub edx, 0x41ea18b6
mov ebx, edi
or ecx, edx
add edi, 0x41eacc6c
jmp 0x4d1636
push 0x4032dd93
and edi, edx
sub ecx, edi
sub edx, edi
mov ecx, edi
mov edi, edx
dec edx
mov edi, edx
rol ebx, 3
dec edi
mov edi, 0x4203afc9
xchg edx, ecx
ror edi, 0x17
jmp 0x4d3320
pop esi
bswap ecx
and edx, edi
bswap edi
xchg ebx, edx
mov edx, edi
mov ebx, 0x4208f42c
xor edx, ebx
or ebx, edx
ror ebx, 0xc
mov edx, ecx
mov ebx, ecx
and edi, edx
jmp 0x4d164e
push 0x4048a21f
bswap edx
add ecx, 0x4211c3c2
add ebx, 0x4211ff44
sub ecx, edx
neg ebx
xor edi, edx
xor ebx, edi
or ecx, 0x42133d98
and edx, ebx
jmp fcn.004d18cc
push 0x403c1ce3
shl ebx, 0x14
not edx
xchg edx, edi
xor ecx, 0x42149521
xor ecx, ebx
or edx, ebx
shr edi, 0x10
nop
jmp 0x4d4bfc
push 0x40435e49
mov edi, edx
add ecx, ebx
and edx, ebx
xchg edx, ebx
add edi, ebx
neg edi
shl edx, 0x14
mov edi, ecx
sub edi, edx
xchg ecx, edi
jmp 0x4d3a48
call esi
rol edx, 0x19
and edi, 0x42238fbc
and edi, ecx
xor ecx, edi
xchg edi, edx
jmp 0x4d3ecd
pop esi
dec edi
or ecx, edx
and ecx, edi
add ecx, ebx
and ebx, edx
dec edi
sub ecx, 0x422c2ac8
and edx, edi
and ecx, 0x422ca136
jmp 0x4d4ec3
pop esi
add edx, ecx
not edx
and edi, edx
mov edi, edx
and ebx, 0x4238b290
sub edi, 0x4238efe1
and ecx, edx
mov ebx, edi
or edi, ecx
xchg edi, ebx
add ebx, ecx
mov ebx, ecx
add ecx, 0x423a9820
and edi, ecx
dec ebx
jmp 0x4d3c4f
pop esi
add edx, ebx
dec edx
xchg edx, edi
add edi, ecx
shr edi, 3
dec edx
rol edi, 2
rol edx, 0xf
and ebx, edx
sub edi, edx
xor ebx, 0x424093df
or edi, 0x4240cf49
shr edx, 6
or edi, edx
jmp 0x4d2d7b
call esi
xchg ebx, ecx
sub ebx, edx
not ecx
or edi, ebx
mov ecx, edi
or ecx, ebx
sub edi, edx
and edi, 0x42472c3d
nop
shr ebx, 4
mov ecx, ebx
and edx, 0x42481fe2
jmp 0x4d33eb
call fcn.004d4fde
mov edi, ebx
bswap edx
rol ebx, 0x14
mov edx, ecx
bswap edi
add ebx, 0x424dce5d
dec edx
mov ebx, edx
dec edi
and ecx, ebx
xchg edi, edx
shr edx, 3
inc ecx
sub edx, ebx
jmp 0x4d4385
pop esi
ror ebx, 5
neg ebx
shr ebx, 0x14
add edx, ecx
or ebx, 0x42613851
shl edx, 0xf
xor edx, ecx
xchg edx, ebx
jmp 0x4d20a9
call esi
add edx, ecx
xor ebx, ecx
xor ecx, edi
mov ecx, edx
inc edi
mov edi, 0x426856b5
and ebx, 0x426894bc
inc ebx
xor ebx, 0x426911ba
jmp 0x4d1828
push 0x40427e2a
mov edi, 0x426afb98
inc edi
and ebx, edx
and ecx, 0x426c2c06
and ebx, 0x426c6a02
mov edx, ecx
mov ebx, edx
shr edi, 0x1a
mov ecx, edx
xchg ecx, edi
jmp 0x4d14f3
call fcn.004d4fde
sub edx, ecx
mov edx, 0x426e3732
shl edx, 7
sub edi, ecx
jmp 0x4d2aeb
push 0x403fe018
and ecx, 0x4276bcbc
and ecx, edi
bswap edx
inc ecx
xor ebx, edx
or edx, 0x42780073
mov ecx, ebx
mov edx, ecx
neg edi
xchg edx, edi
xchg edx, edi
shr edi, 0x1f
jmp 0x4d4524
pop esi
add edi, 0x42829505
add edx, 0x4282d370
bswap edx
sub edx, ebx
shr edi, 0x1f
mov ebx, 0x4283dc12
dec ecx
xchg edi, ebx
mov ecx, edx
or ecx, edi
jmp 0x4d2272
pop esi
or ecx, edx
shl ecx, 7
or edx, ecx
xchg edi, ebx
and edx, 0x4297c76c
mov ecx, edi
inc edx
add ebx, edx
xor edx, ecx
jmp 0x4d36ee
push 0x403cb059
or edi, 0x429e91a5
mov edx, edi
mov ebx, edi
dec edi
sub edx, ecx
and ebx, edi
xor edi, edx
add edx, edi
mov edx, 0x42a08420
or ebx, edx
jmp 0x4d46d7
pop esi
add ecx, edx
mov ecx, edx
neg ecx
mov edi, ecx
xchg edx, ebx
dec edi
jmp 0x4d204a
pop esi
rol edi, 6
add ecx, edi
sub ebx, edi
ror ecx, 0xd
xor edx, 0x42aa492d
xor edx, edi
and ecx, 0x42aad358
mov edx, ecx
ror ebx, 1
xor ebx, edx
jmp 0x4d39d8
push 0x403b89ad
and ebx, ecx
xor edi, 0x42ac1f77
and edx, ebx
add ecx, ebx
or ecx, edi
shl edx, 0x1a
xchg ebx, edx
jmp 0x4d272c
pop esi
inc ecx
xor ecx, 0x42b6f926
add ecx, edx
or edi, 0x42b7845c
and edx, edi
and ebx, 0x42b7fff0
not edi
rol edi, 5
shl edi, 0xd
jmp 0x4d462d
push 0x403bd3b7
mov edx, 0x42bef933
add edx, ebx
rol edx, 7
dec ebx
sub ecx, edi
sub edx, ebx
and ecx, edi
dec ecx
and edx, ebx
jmp 0x4d1e2c
push 0x402bb090
add ecx, edi
and ebx, ecx
or edx, edi
mov ecx, ebx
dec edx
mov edi, ebx
shl edx, 0x1c
and edi, 0x42c3b4c3
shr edx, 0x10
and edx, ecx
jmp 0x4d1be2
push 0x40324b30
shr ebx, 0xa
or ebx, 0x42c4c5d8
xchg ecx, ebx
rol ecx, 6
add ebx, 0x42c58ec7
rol ebx, 0x1a
dec ebx
add ecx, edi
or edx, edi
add ecx, ebx
jmp 0x4d4b1e
call esi
xor ebx, edx
or ebx, edx
or edx, ebx
sub ebx, ecx
xor edi, ebx
not ecx
sub edi, 0x42d3978d
mov edx, edi
xchg ecx, edx
jmp 0x4d4a80
pop esi
and edx, ebx
xor edi, ecx
add ebx, edx
add ebx, edx
xchg ebx, edx
bswap edx
xor edx, 0x42d5e78a
add edx, 0x42d62572
sub edx, edi
or ecx, ebx
sub ebx, edi
jmp 0x4d46b3
call fcn.004d4fde
xor ebx, ecx
not ecx
add ebx, ecx
add edx, 0x4309c0dd
bswap ebx
xchg edi, edx
sub ecx, ebx
shr ecx, 0x19
neg edx
mov ebx, 0x430b44fc
jmp 0x4d3428
pop esi
sub ecx, edi
neg edi
and edi, ecx
xchg ebx, edx
dec edi
ror ecx, 4
sub ebx, 0x430d22aa
xor ebx, edi
mov ecx, 0x430dac74
add edx, ecx
xchg ecx, edi
mov ebx, ecx
jmp 0x4d22e8
call esi
add ebx, ecx
and ebx, 0x430ef3cd
xor edi, ebx
xchg ebx, ecx
rol edx, 0x12
neg ecx
add edi, edx
sub edx, 0x431065a2
xor ebx, ecx
xchg edi, ebx
add edi, ebx
mov ecx, ebx
add edx, 0x4311a3ae
jmp 0x4d47d6
push 0x40
mov edi, edx
xchg edx, ecx
add edi, ebx
dec edi
xchg ecx, edx
mov edi, edx
and ecx, edx
dec ecx
or edi, ecx
and ecx, edi
xor edi, ebx
or ebx, ecx
add edi, ebx
jmp 0x4d38d4
call fcn.004d4fde
or ecx, ebx
rol edi, 0x1e
add edx, edi
not ecx
xchg ebx, ecx
or ebx, ecx
rol ebx, 0x1f
xor ecx, edi
sub edx, 0x4332dc79
add ecx, edx
shr edi, 0xb
add ebx, edi
nop
neg ebx
sub edi, 0x43344fbf
jmp 0x4d282a
pop esi
mov ebx, edi
sub ecx, ebx
xor ebx, edx
mov ebx, edi
neg edx
add edx, ecx
mov edi, edx
or edi, ebx
xchg edi, ebx
jmp 0x4d26bc
pop esi
xor edx, ebx
add ecx, edi
add ebx, ecx
and edi, 0x4337a889
mov edx, ebx
or edx, 0x43382114
rol ebx, 3
add ebx, edi
or ecx, edx
mov ecx, 0x433925c0
or edi, ebx
not edx
shl ecx, 2
mov ecx, ebx
jmp 0x4d4a0e
pop esi
or ecx, edi
neg edx
xchg edx, ecx
add ebx, edx
or ecx, edi
or edx, ecx
or edx, 0x43404b04
shl edi, 0x1f
not ecx
rol edi, 6
and ebx, ecx
xchg ecx, edx
or ebx, edx
jmp 0x4d388e
pop esi
ror ecx, 1
shl ecx, 0xd
shl ebx, 5
xor ebx, edi
mov edx, edi
dec edx
mov ecx, ebx
sub edx, ebx
or edi, ebx
rol edx, 9
neg ebx
and edi, edx
add edi, ecx
or edi, edx
jmp 0x4d2ac6
pop esi
and edx, ecx
and ebx, ecx
and edi, ebx
or ecx, edx
or edi, 0x4359e416
mov edx, ebx
neg ebx
add edx, 0x435aadce
jmp 0x4d3010
push 0x40286a9c
mov ecx, 0x435b05fc
sub edx, edi
sub edi, ebx
sub edx, edi
sub edx, edi
sub edx, ecx
or edx, ebx
or edi, 0x435cbebe
jmp 0x4d5101
push 0x4045b511
mov edi, ecx
add ebx, ecx
or ecx, edi
mov ebx, 0x437680ad
mov ebx, edx
add edi, ebx
sub ebx, edx
jmp 0x4d352e
pop esi
xchg edx, edi
and edi, 0x438a632a
xchg edx, ecx
add ecx, edi
mov ecx, edi
xor edx, ebx
ror ebx, 0x1c
and edi, ebx
jmp 0x4d17d6
push 0x404857e7
or edx, ecx
sub edi, 0x439d18bd
or ebx, 0x439d5633
shr ebx, 0x17
mov edx, 0x439dd4eb
sub edi, ebx
xor edi, edx
or edx, 0x439e9c03
jmp 0x4d1e04
mov esi, 0x2774562b
xor ecx, ebx
or ebx, edi
xor edi, edx
dec edi
mov edx, edi
sub ecx, edi
add ebx, 0x43ae2642
xchg edi, ebx
xor edx, ebx
or ebx, edi
add edi, ebx
jmp 0x4d2aa0
push 0x4027d6c2
add ecx, edx
not edi
sub edx, ebx
xchg edx, ebx
neg edi
add edx, edi
inc edx
and ebx, 0x43b7a0da
jmp 0x4d4a51
pop esi
xor ecx, edx
and ecx, edi
xor ecx, edi
shr edi, 0x1e
add edi, 0x43be0ee9
mov edi, ecx
xor ecx, 0x43be99b1
add edi, edx
mov edx, ecx
or edi, ecx
mov edx, ecx
jmp 0x4d41c8
call esi
add ebx, edx
mov edi, 0x43c10b43
xchg ecx, edx
inc ebx
and edi, edx
sub edx, edi
or edi, 0x43c23e65
neg ebx
jmp 0x4d3d60
push 0x401cba40
or ebx, 0x43cb1acf
mov edi, edx
and ecx, 0x43cb93ac
shr edx, 0x1e
mov ecx, edx
mov edi, edx
xor edi, ecx
sub ecx, edx
xor ecx, edx
bswap edx
bswap ecx
mov edi, 0x43cde00c
jmp 0x4d36b0
push 0x40460039
add ebx, 0x43d1526e
shl ebx, 0xd
mov edx, ecx
jmp 0x4d4dd4
push 0x40385b39
dec edx
sub edx, edi
and ebx, edx
neg ecx
shr ebx, 0xe
or ebx, edi
xor ecx, edi
add ecx, edx
add edx, ecx
jmp 0x4d4b47
pop esi
neg edx
add edx, ecx
and edi, ebx
mov ecx, 0x447e8530
dec edi
xor edi, edx
and ebx, edx
xor edx, ebx
xor ebx, 0x447fc891
and edx, ecx
jmp 0x4d2eaf
push 0x401d9714
xchg ecx, ebx
add edi, ebx
xchg edi, ecx
sub ebx, ecx
add edi, edx
or ebx, ecx
or edi, edx
and edx, ebx
not edx
sub edi, 0x4488f4b9
jmp 0x4d47f0
pop esi
ror edi, 4
and edx, ebx
sub ecx, ebx
and ecx, 0x448bdf09
inc edi
sub ebx, edx
rol ecx, 6
dec edi
sub edi, ecx
jmp 0x4d1d84
push 0x4038ee75
mov edi, 0x448d7e8b
and edx, edi
add ebx, edx
sub edi, edx
bswap edi
mov edi, ecx
and edi, edx
xor edi, ecx
sub edx, 0x448f7457
jmp 0x4d42cf
call esi
xor ebx, edi
neg edx
sub edx, edi
xor edx, 0x449af6f9
xor edx, 0x449b43d3
xchg edx, ebx
or edx, edi
mov edx, edi
or edx, edi
jmp 0x4d19a2
call esi
ror ecx, 0x1f
xor ebx, edi
shl edx, 0xe
or ecx, edx
add ebx, ecx
add edx, ebx
xor edi, ebx
rol ecx, 0x19
add edx, 0x44a5beaf
add ecx, edx
rol edx, 8
jmp 0x4d4466
pop esi
xchg ecx, edi
xor ecx, edx
add edi, edx
bswap edi
add edi, edx
add ecx, edx
or ecx, ebx
sub edx, edi
jmp 0x4d262d
push 0xd0098
xchg ebx, ecx
add edx, ebx
and edi, 0x44add10c
xor edx, ebx
xchg edx, ebx
not ecx
shl ebx, 0xb
sub edi, ebx
mov edi, 0x44af5497
or edx, ebx
and edi, ecx
xchg edx, ebx
bswap edi
dec edi
xor ecx, edx
or edi, ebx
jmp 0x4d4d4b
pop esi
sub ebx, edi
xor ebx, edi
xchg ecx, ebx
xchg ecx, edi
neg ebx
mov ecx, edx
or ebx, edi
bswap edx
sub edx, ecx
and edi, ecx
jmp 0x4d48fc
push 0x402ad4c5
xor edi, edx
xchg ebx, ecx
and edx, edi
xchg edi, ecx
sub edi, ecx
nop
nop
ror ebx, 0x1b
jmp 0x4d4221
call fcn.004d4fde
shr edi, 0x14
xchg edi, edx
mov edx, ecx
inc edx
jmp 0x4d384e
mov esi, 0x5027095f
sub edi, 0x44c971f6
xor ecx, 0x44c9af38
or ecx, edx
shl ebx, 0x11
xor ecx, edi
add ebx, edi
and edi, ebx
sub edx, 0x44cb2bce
and edi, edx
and ebx, edx
jmp 0x4d4e83
pop esi
and ecx, ebx
ror edi, 0x18
dec ebx
or ecx, edx
shr ebx, 8
jmp 0x4d4ca0
call fcn.004d4fde
inc ebx
sub ecx, 0x44f153fa
add edx, ebx
dec edi
inc edx
xor edi, ecx
or ebx, edx
shr ecx, 0x14
add ecx, 0x44f3117b
or edx, edi
and edi, ebx
jmp 0x4d1f1e
push 0x4038113f
shr edi, 4
or edx, edi
or edi, edx
xor edi, ecx
and edi, 0x44fdf859
sub ebx, edx
xor ecx, edx
jmp 0x4d35f9
call esi
inc ebx
inc edi
xor ebx, edx
sub ebx, 0x44ff96ad
sub edx, edi
add edi, ecx
xor edx, ebx
xor edi, ecx
not ecx
add edi, ecx
jmp 0x4d241c
pop esi
and ecx, 0x450416e5
dec edi
or edx, ecx
ror edi, 0x10
xor edi, ebx
and edi, edx
mov edx, ebx
sub edi, ebx
mov edx, 0x45068fbd
mov edx, 0x4506cc77
jmp 0x4d250e
push 0x401f4b40
sub edi, 0x45104eef
bswap ecx
mov ebx, ecx
neg edi
and edi, ecx
and edi, ecx
and ecx, 0x4511ccca
and edx, ebx
jmp 0x4d40b2
pop esi
xor ebx, edx
shr ebx, 2
dec ebx
or edi, 0x451fad65
or edx, ebx
sub edx, ebx
and edx, 0x452064fb
ror edx, 0x13
and ebx, 0x4520f034
mov edx, 0x45212e17
sub ecx, edi
xchg ecx, edx
jmp 0x4d48ea
push esp
add ebx, 0x4532af3e
or edi, edx
and ecx, edx
xor edi, 0x45336569
neg ebx
xor edx, ebx
or ecx, ebx
bswap ecx
mov edi, ebx
ror edx, 8
xor edi, ecx
shl ecx, 0x14
and ebx, edi
sub edi, edx
jmp 0x4d2b78
mov esi, 0x2774562b
and edi, ebx
add edx, 0x45424276
xor ebx, edx
xchg ebx, ecx
mov edi, ecx
mov ecx, edx
dec edi
and edx, ecx
add ecx, edx
xchg ecx, ebx
xor ebx, edi
neg edi
xchg edx, edi
shr edi, 0x1b
jmp 0x4d2cc1
push 0x4037c720
xchg ebx, edx
xchg edx, edi
mov edx, ebx
xchg ebx, ecx
xchg edi, ecx
xchg edi, ebx
mov edx, ebx
and ebx, edi
jmp 0x4d3d07
push 0x402b1d12
or ebx, ecx
mov ebx, edi
shl edx, 0x17
xchg edx, ebx
xchg edi, edx
rol ebx, 7
and edi, ebx
dec ebx
jmp 0x4d464a
mov esi, 0x2774562b
xor ecx, edi
and ecx, 0x456a0460
xor ebx, edi
xor edx, 0x456a81e1
rol ebx, 0xe
xor ebx, 0x456aff02
bswap ebx
and ebx, edi
sub edx, ebx
and edi, ebx
or ebx, edi
mov ebx, edx
add ebx, ecx
xor edx, ecx
jmp 0x4d4f2a
push esp
xchg edi, ebx
or edx, ecx
mov ebx, 0x457682db
mov edi, edx
and ebx, edx
or ebx, 0x45774653
xchg ecx, edx
sub ecx, ebx
jmp 0x4d3fde
pop esi
mov ebx, edi
xor edx, ecx
or edx, 0x4585f74e
xor ecx, edi
and ecx, edi
add ebx, 0x4586be79
mov ecx, ebx
jmp 0x4d2d0b
push 0x40402a6e
rol edx, 0xd
sub edi, ecx
xor ecx, 0x4594adb5
sub ebx, edx
add edi, ecx
neg ebx
bswap edx
and edx, 0x4595f3bf
or ecx, ebx
xchg edx, ebx
rol edx, 0x16
xor ecx, ebx
bswap ecx
ror ecx, 0x12
jmp 0x4d5128
push 0x404314d0
and edi, ebx
inc edi
rol edi, 6
or ecx, edx
or ecx, edx
xchg edi, edx
jmp 0x4d1e9d
pop esi
shl ecx, 0x17
sub ecx, 0x459f32f5
add ebx, 0x459f709e
ror edx, 0x1d
and ecx, edi
xor ecx, edx
shl edx, 6
and edi, ebx
or ebx, ecx
or edx, 0x45a12cb3
sub edi, 0x45a16a9e
jmp 0x4d1669
push 0x403202be
or ecx, edi
xchg edi, ecx
not edi
neg edi
and ebx, ecx
add edi, edx
dec ecx
or ebx, 0x45a911ec
jmp 0x4d276d
push 0x402b67c4
xor ecx, edx
or ebx, edi
xchg ecx, edx
and ebx, 0x45aa1dfd
or ecx, ebx
and edx, 0x45aaa807
neg ecx
bswap ebx
add ecx, 0x45ab65c7
jmp 0x4d274a
push 0x4047c2ad
mov edi, ebx
mov ecx, edx
xchg ecx, ebx
or ecx, 0x45b11964
sub ebx, edx
jmp 0x4d4e29
mov esi, 0x5027095f
xor ecx, edi
sub edx, 0x45b2cbc8
neg edx
mov ebx, edx
xor edx, edi
mov ebx, 0x45b3d113
or ebx, edx
shl ebx, 0xc
jmp 0x4d1b7d
pop esi
add ebx, 0x45c6740a
bswap ebx
mov ecx, 0x45c6f10a
ror ecx, 6
xor ecx, edx
add ebx, edx
jmp 0x4d1b51
push 0x401e7239
sub edi, 0x45c80d39
add edi, ecx
shr ecx, 3
xor ecx, 0x45c8c6ab
and ecx, 0x45c904c1
and ecx, 0x45c95207
mov edx, edi
xchg edx, ebx
or ebx, ecx
jmp 0x4d3dff
push 0x403f97a5
or edi, edx
mov ecx, edi
xchg edx, ecx
xor edi, 0x45cf4763
xor ebx, 0x45cf8606
xchg edx, ebx
and ecx, 0x45d0038b
rol edi, 4
add ebx, edi
ror ebx, 0xc
add edx, edi
jmp 0x4d2385
pop esi
xchg edi, ecx
xor edx, edi
ror ebx, 0x17
sub edi, edx
xchg edi, ecx
inc edi
jmp 0x4d2de6
pop esi
and edx, ebx
sub ecx, ebx
xor ecx, ebx
xchg edi, edx
sub ecx, ebx
and edi, edx
shr ebx, 0x1b
xchg edi, ebx
jmp 0x4d3118
pop esi
xor ebx, ecx
sub ecx, ebx
sub ecx, edx
and edx, 0x45eab6a6
xchg ecx, edx
and edi, ecx
not ebx
or edx, 0x45ebad2b
xchg ebx, ecx
sub ecx, edx
add edx, 0x45ec7590
inc edx
xor ebx, 0x45ecf301
or edx, ecx
jmp 0x4d511a
pop esi
sub ebx, 0x45ed859b
ror edi, 0x1f
xor ebx, edx
nop
and ebx, edx
mov edx, edi
and ebx, edi
bswap edx
rol edx, 0xf
jmp 0x4d3396
push 0x402820d1
not edi
or ebx, ecx
add edi, edx
or ecx, edi
and ecx, 0x45f40dec
or ecx, 0x45f45b02
sub edi, 0x45f49ab6
mov ebx, 0x45f4d741
sub ebx, 0x45f516a0
jmp 0x4d2ecd
pop esi
dec edx
mov edi, ebx
xchg ecx, edx
not edx
mov edx, ecx
bswap edx
or edx, 0x45f6eb5c
rol ebx, 0xe
jmp 0x4d1ad6
push 0x40329481
or edi, edx
and ecx, edx
xor ecx, edi
xchg edi, ebx
and ecx, edi
mov edx, ecx
and ebx, edx
bswap edx
dec edx
shr edx, 0x16
add ecx, edi
sub edi, ecx
inc ebx
and ecx, 0x4603ed78
jmp 0x4d1d3e
push 0x4038a513
and edx, 0x4604442f
inc ebx
neg edi
mov edx, edi
add ebx, edi
mov ecx, edi
xor ebx, edx
or edi, ecx
sub ebx, edx
and edi, ecx
add edx, ebx
shl ebx, 0x1c
mov ecx, ebx
shr ebx, 0x10
sub edi, ecx
jmp 0x4d370a
push 0x403c6671
xchg ebx, ecx
mov edx, edi
and edi, edx
xchg edx, ebx
add ebx, edx
add ecx, edx
mov edx, edi
and edi, edx
jmp 0x4d2571
pop esi
xchg edi, ebx
and ebx, edx
sub edx, ecx
ror edx, 1
sub ecx, edx
xor edx, ecx
mov edx, edi
mov ecx, ebx
and edi, 0x461fef25
or edx, 0x46202eb9
rol ecx, 0xf
add ecx, ebx
not ecx
jmp 0x4d1f92
push 0x4025d05a
xchg edx, ebx
or edi, 0x46231e4b
xchg edi, edx
add ebx, edx
xor edi, ecx
xor ebx, ecx
dec ebx
and ecx, edi
jmp 0x4d1a4d
push 0x401400
shr ecx, 0x1c
xor ecx, 0x462a1fe8
ror ebx, 0xe
sub ebx, edx
xor edi, ebx
xchg ebx, ecx
shr ecx, 0xa
dec edi
and edx, edi
shl edx, 0x11
sub ebx, 0x462c666f
mov ebx, edx
jmp 0x4d2105
call esi
bswap ecx
not edi
add ebx, 0x46325a8b
inc ebx
shl edx, 0xb
xchg ebx, edi
jmp 0x4d45b4
mov esi, 0x5027095f
add ecx, 0x46337eb3
add edx, ebx
or ecx, 0x4634064d
or edi, 0x4634458f
jmp 0x4d1a69
push 0x40480d85
add ecx, edi
bswap ebx
and edx, 0x463d0daa
and ecx, ebx
dec edi
not edi
add edx, 0x463e0537
xchg edx, ecx
or edx, edi
xor ebx, edi
xor ecx, edx
xor edx, 0x463f49c2
or ecx, 0x463f8739
add ecx, edx
jmp 0x4d322b
push 0x401bbf02
shr ebx, 3
sub edx, 0x464056e5
xchg ecx, edx
and edi, edx
xchg ebx, ecx
sub edx, edi
rol ebx, 0xb
sub ebx, edi
xchg edx, ecx
xor ebx, ecx
inc edx
jmp 0x4d34ce
call fcn.004d4fde
add edx, ebx
mov edx, ecx
sub ebx, edi
sub ecx, edi
and edx, edi
dec ecx
xchg ebx, edi
ror ecx, 0x13
jmp 0x4d4dbd
push 0x403f4c2c
xor ebx, edi
not edx
and edi, ebx
sub edi, ecx
xor ebx, edi
and ecx, edx
jmp 0x4d4859
call fcn.004d4fde
dec edx
sub ecx, edi
xchg edi, edx
xchg edi, edx
mov edi, ebx
sub ecx, ebx
inc edi
add ecx, 0x465174ed
mov ecx, ebx
inc edx
add edi, edx
and edi, 0x465267b2
inc ebx
jmp 0x4d3d24
call esi
xor ecx, edx
and edx, ecx
xor ecx, 0x466cc62e
add edx, ebx
or edi, edx
dec edi
jmp 0x4d25d4
mov esi, 0x5027095f
ror ebx, 0x1d
and ebx, edx
sub edi, ecx
xchg edi, edx
sub edx, 0x46796840
jmp 0x4d2311
pop esi
and edi, 0x4679bfc3
sub edi, edx
jmp 0x4d2cf3
mov esi, 0x2774562b
and ecx, edi
dec ecx
xor ecx, edx
xor ebx, edi
not ecx
or ebx, edi
mov ecx, ebx
xchg ecx, ebx
add ebx, edx
jmp 0x4d3c60