Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get file attributes
Terminate thread

Disassembly:
call sub.user32.dll_GetMessageTime
cmp eax, 0xffffff0e
jne 0x40109d
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffed8
jne 0x40111c
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffefa
jne 0x4011b9
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
ret
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffee8
jne 0x401260
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.advapi32.dll_GetServiceDisplayNameW
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_GetFileAttributesW
call sub.kernel32.dll_TerminateThread
call sub.kernel32.dll_GetFileAttributesW
ret
jmp 0x4fa4e2
add ebx, edi
jmp 0x4fc4ff
call edx
xor ecx, 0x1fc555ae
and esi, edi
and ecx, ebx
add ecx, esi
or edi, ecx
dec edi
jmp 0x4fc645
push 0x1eb34766
inc esi
and ebx, 0x1fc734be
sub edi, ecx
xor esi, 0x1fc781d8
ror ecx, 7
mov ebx, ecx
xor ebx, 0x1fc7e922
and esi, ecx
add edi, ebx
ror esi, 6
jmp 0x4fc718
call edx
dec esi
bswap esi
sub ecx, edi
neg edi
mov ebx, esi
xor ecx, 0x1fca1520
and ecx, 0x1fca3990
add esi, ecx
jmp 0x4fb29f
push 0xf90e2
xor ebx, 0x1fca9892
sub ebx, ecx
or esi, ecx
not edi
sub esi, ecx
xor edi, ebx
or ecx, esi
neg edi
or ecx, ebx
inc ebx
jmp 0x4fabbe
call fcn.004fd4bb
sub ebx, edi
xchg ebx, edi
xchg edi, ebx
sub ebx, esi
and edi, ebx
sub ecx, edi
jmp 0x4fbbc9
pop edx
ror ebx, 0x10
and esi, ebx
mov edi, esi
mov ebx, 0x1fde9858
jmp 0x4fd117
call fcn.004fd4bb
xor ebx, 0x1fe07b58
dec esi
bswap ebx
shl edi, 0x11
inc esi
mov ecx, ebx
xor esi, edi
sub ebx, edi
inc ebx
add ecx, esi
jmp 0x4fbc37
pop edx
xchg ecx, ebx
xchg edi, ebx
jmp 0x4fcfd7
mov edx, 0x183c2e20
mov edi, ebx
bswap esi
jmp 0x4fbfe1
call edx
xchg esi, ecx
mov ebx, esi
jmp 0x4fadf7
pop edx
neg ebx
xchg edi, esi
add edi, ebx
rol ebx, 0x16
or ebx, edi
sub ebx, edi
xchg ebx, ecx
xchg esi, edi
add esi, ebx
xor ecx, edi
jmp 0x4fd332
pop edx
add ecx, esi
and ecx, 0x1ff76822
mov esi, 0x1ff78c66
or edi, ebx
and esi, edi
add ecx, ebx
not ecx
and esi, 0x1ff83b2e
jmp 0x4faa4e
call fcn.004fd4bb
not ebx
nop
jmp 0x4fb5c8
push 0x1ea41588
sub ebx, ecx
xor edi, ebx
add edi, ebx
and esi, edi
rol ecx, 0x1e
ror ecx, 0x13
add ebx, esi
xor ebx, ecx
jmp 0x4fca8e
pop edx
xor ebx, 0x2001c41a
shl ebx, 0x10
ror edi, 0xe
xchg ebx, ecx
and ebx, edi
nop
or esi, edi
not esi
jmp 0x4fc52e
push 0x1ea14494
xor esi, edi
sub ebx, edi
shr ecx, 0x1e
add edi, 0x20076010
sub esi, ebx
or ebx, edi
xor edi, esi
sub ecx, edi
neg esi
xchg ecx, edi
jmp 0x4fb56d
push 0x401400
xchg edi, ecx
sub edi, esi
and esi, edi
shl esi, 0x1b
jmp 0x4fa591
call fcn.004fd4bb
xor esi, edi
xchg edi, ebx
inc ebx
rol edi, 9
add ecx, esi
or edi, esi
or esi, ebx
mov ebx, 0x200ce82a
jmp fcn.004fb74b
pop edx
add esi, edi
not edi
or edi, ecx
ror edi, 1
mov esi, 0x200da38a
not esi
and ebx, edi
shr ecx, 0x1d
not ecx
bswap ebx
xor esi, 0x200e8076
add edi, ebx
jmp 0x4fb6bc
pop edx
mov esi, edi
and esi, ebx
neg ecx
or esi, edi
xor ecx, 0x2014b174
neg ebx
add esi, edi
rol ebx, 0xb
jmp 0x4fcdf0
mov edx, 0x183c2e20
mov ebx, 0x201e02da
ror ecx, 7
xor edi, ecx
not ebx
or esi, ecx
inc ecx
jmp 0x4faa41
pop edx
or edi, 0x201ee928
or ecx, 0x201f0c1e
sub edi, ebx
rol edi, 0x15
xchg ecx, esi
mov ecx, esi
add esi, edi
dec ecx
jmp 0x4fae29
push 0x1eb012c6
or ebx, ecx
bswap ebx
nop
or ecx, ebx
inc ebx
not ebx
jmp 0x4fbe91
pop edx
and esi, 0x2020f5a2
mov edi, ebx
sub ecx, edi
mov ecx, esi
jmp 0x4fb23f
push 0x1ea96784
or esi, edi
add edi, ecx
xchg edi, ecx
dec ecx
ror esi, 5
or edi, esi
xchg esi, edi
sub ecx, esi
add edi, 0x2026d6fa
neg ebx
sub edi, ecx
sub ecx, edi
jmp 0x4fcd11
push 0x1eb5e8cb
sub ecx, ebx
and ebx, ecx
or ecx, edi
add edi, ebx
jmp 0x4fb45f
call fcn.004fd4bb
or esi, ecx
add ebx, ecx
add ebx, ecx
shl ebx, 0x17
and edi, ebx
sub ecx, edi
jmp 0x4fb75d
pop edx
inc ebx
xchg ebx, esi
sub ecx, esi
bswap edi
rol edi, 0x14
bswap ecx
xor edi, 0x202e1ab4
mov edi, ecx
jmp 0x4fb679
pop edx
or ecx, 0x2031138a
sub ebx, esi
sub ebx, esi
shr ecx, 0x14
xchg ecx, esi
or esi, ecx
sub esi, ecx
shr edi, 3
not edi
sub ecx, 0x20325046
xor ebx, esi
inc edi
sub esi, ebx
not esi
jmp 0x4fcc81
push 0x1ea4cbc0
mov ebx, edi
xor esi, edi
xor ebx, 0x2036f314
or esi, ecx
sub ecx, esi
or esi, 0x20376186
jmp 0x4fc56f
pop edx
inc esi
and ebx, edi
ror esi, 0x14
sub esi, ecx
add edi, 0x20382122
add edi, ebx
sub esi, ebx
xchg ecx, ebx
ror ebx, 4
inc ebx
jmp 0x4facf4
pop edx
xchg ebx, ecx
add ebx, esi
add esi, 0x20394afe
add esi, 0x2039737c
add ebx, 0x20399636
sub edi, esi
sub esi, ebx
rol esi, 8
xor ebx, esi
or edi, ecx
jmp 0x4fd1c3
call fcn.004fd4bb
add ebx, esi
and ebx, ecx
or ecx, edi
sub ebx, edi
sub edi, 0x203afc32
add edi, ecx
and edi, ebx
shr edi, 0xd
mov ecx, esi
sub edi, esi
xor esi, edi
xor edi, 0x203bf188
shr esi, 0x1c
mov ecx, 0x203c3732
jmp 0x4fc8ab
call fcn.004fd4bb
xchg ebx, esi
add ebx, esi
add esi, 0x203ddf74
ror esi, 0x15
xor ebx, esi
add ebx, esi
inc ecx
or ebx, 0x203e93da
jmp 0x4fce3c
push 0x1eb073c8
dec ebx
xor ecx, 0x2042f9fa
and ecx, ebx
rol edi, 9
jmp 0x4fbb96
call fcn.004fd4bb
xchg ecx, edi
not edi
shr edi, 0x12
rol esi, 7
add edi, ebx
xor edi, ecx
xor esi, 0x204455b4
sub edi, ecx
xor ecx, 0x2044998a
rol ecx, 0x16
jmp 0x4fcce8
pop edx
shr esi, 9
sub ebx, edi
xchg edi, esi
add ecx, edi
or esi, ebx
rol ebx, 1
xor edi, ecx
xor ebx, 0x20470488
jmp 0x4fa835
pop edx
xor esi, edi
shl esi, 9
add edi, esi
xor esi, ecx
xchg ebx, edi
sub ecx, esi
inc esi
or edi, esi
rol edi, 5
xchg esi, ebx
not ebx
sub ecx, 0x204ee4a6
inc edi
sub edi, 0x204f2be8
jmp 0x4fc663
push 0x1eb20e9a
and esi, 0x2050def0
inc esi
and edi, ecx
and edi, ecx
mov esi, ecx
bswap ecx
jmp 0x4fc5d0
pop edx
or ecx, edi
add ecx, 0x2051ebbe
or ecx, edi
xchg edi, ecx
jmp 0x4faeea
call fcn.004fd4bb
mov ecx, ebx
shr ebx, 0x12
rol ebx, 0x1e
dec edi
dec edi
or ebx, 0x205315ae
xor esi, ecx
shl ebx, 0xc
shl edi, 0x1a
or edi, 0x2053a758
dec esi
xchg edi, ebx
jmp 0x4fa919
call edx
sub ebx, ecx
or ebx, edi
xor ebx, ecx
sub ecx, esi
add edi, 0x2057cb8a
sub ebx, 0x2057ed7e
xchg ecx, esi
add ecx, esi
and edi, 0x2058581c
xchg esi, edi
add ebx, esi
mov edi, 0x2058be44
jmp 0x4fca26
mov edx, 0x183c2e20
rol esi, 0x1b
shr ecx, 3
or ebx, esi
shl ebx, 0x1d
jmp 0x4fac2d
pop edx
xor esi, ebx
xchg esi, ebx
sub esi, ebx
and ebx, ecx
xchg esi, ebx
sub ebx, edi
xor edi, ebx
xor ecx, 0x206682ea
xor edi, esi
bswap ecx
jmp 0x4fa952
pop edx
or ebx, edi
and ecx, edi
add edi, ebx
and ecx, 0x206951aa
jmp 0x4fd2f4
call fcn.004fd4bb
shr esi, 2
xor edi, ebx
not ecx
xchg ecx, ebx
sub edi, 0x206a1482
shl esi, 0xb
or esi, ebx
xor ecx, 0x206a8460
or esi, 0x206aa852
xor ecx, 0x206acc7a
xchg ebx, edi
xor ebx, esi
or ecx, 0x206b35f8
add esi, ecx
jmp 0x4fbf40
push 0x1ea161a2
and edi, ecx
or ecx, 0x206d1b6e
xchg esi, ebx
mov edi, esi
and edi, ebx
rol edi, 0x1a
jmp 0x4fce87
push 0x1eab7538
add ecx, edi
and ebx, ecx
sub edi, 0x206e1956
mov ebx, 0x206e4286
sub ebx, esi
mov esi, ebx
jmp 0x4fa863
call edx
add esi, edi
and esi, edi
neg edi
not edi
sub edi, ebx
add edi, 0x2070a3e8
neg edi
and edi, esi
xor esi, 0x20711294
bswap ebx
sub ecx, esi
shl esi, 0xb
jmp 0x4fd07c
push 0x1eab4a68
and esi, 0x2071b304
shl ecx, 8
xchg ebx, ecx
ror ebx, 6
and esi, 0x2072437a
mov edi, ebx
xchg esi, edi
neg edi
jmp 0x4fb588
mov edx, 0x183c2e20
shl ecx, 4
inc edi
add esi, ecx
add ecx, edi
add edi, 0x207371f6
nop
add ebx, 0x2073b738
or ebx, 0x2073e084
xor ecx, 0x20740374
neg ebx
jmp 0x4fb509
push 0x1eaee824
xor ecx, edi
dec ebx
xchg ebx, ecx
xor ebx, edi
or esi, 0x2076b432
xor esi, ecx
bswap ecx
shl esi, 0x11
or ecx, esi
shl edi, 0x1a
jmp 0x4fadde
pop edx
nop
xor ecx, 0x2078ece8
sub ebx, 0x20790e20
inc esi
add esi, edi
xor ebx, 0x20797a14
and edi, ecx
shl ebx, 3
nop
add edi, 0x207a02c4
jmp 0x4fab1b
call edx
add ecx, ebx
bswap edi
shr esi, 0x12
and edi, 0x207f4560
or edi, 0x207f680c
xchg edi, esi
nop
or edi, esi
add ebx, 0x207ff0be
xchg esi, ebx
jmp 0x4fb0a2
push 0x1eaacd02
sub esi, ecx
or edi, 0x20835b5a
inc ecx
or ecx, esi
neg ebx
dec ecx
and edi, 0x2084104c
xor edi, esi
jmp 0x4fb7f5
push 0x1eaaf44a
sub ecx, esi
and ecx, 0x208486e2
xchg ebx, esi
or ecx, esi
mov esi, edi
add esi, ecx
and esi, ebx
xor edi, ecx
add edi, ebx
nop
add ebx, 0x2085b5ce
or edi, ebx
and ebx, 0x2085f8d4
add esi, 0x20861bf0
jmp 0x4fcd78
pop edx
sub ebx, edi
or esi, ebx
shr esi, 0x1e
or ebx, ecx
add edi, 0x208e44ac
and ecx, ebx
xor ebx, ecx
mov edi, esi
and edi, ebx
or edi, ebx
xor edi, ecx
ror edi, 0x18
jmp 0x4fcf50
pop edx
xchg ebx, edi
ror esi, 3
or esi, 0x2097b7e6
or edi, esi
jmp 0x4faf6d
push esp
mov ebx, ecx
neg edi
mov edi, ebx
xchg esi, edi
or esi, 0x209bdcb4
and edi, esi
jmp 0x4fbadd
push 0x40
not edi
and esi, ecx
sub ecx, edi
sub ebx, ecx
xor ebx, edi
mov esi, edi
jmp 0x4fa5af
push 0x1eaddf32
shr edi, 0x19
xor edi, ebx
mov edi, ecx
or esi, edi
add ecx, 0x20a33958
sub edi, 0x20a35b78
sub ecx, esi
or ebx, 0x20a39fbe
jmp 0x4fc87f
push 0x1eafe338
add esi, ecx
or ecx, 0x20a4938a
or ecx, edi
mov edi, esi
xor ecx, edi
mov esi, ebx
sub ebx, esi
mov esi, ebx
jmp 0x4fae15
pop edx
or edi, ecx
sub edi, 0x20a5abb2
or edi, ecx
xor ecx, ebx
mov edi, ebx
not edi
jmp 0x4fb492
mov edx, 0x183c2e20
rol ebx, 1
mov esi, 0x20a68d7c
ror esi, 0x11
neg ebx
xchg ebx, esi
sub ebx, ecx
jmp 0x4fb0c9
call edx
shr ebx, 6
rol ebx, 1
bswap ecx
or ecx, edi
dec ecx
bswap ebx
and edi, 0x20a90cf4
inc esi
xchg ebx, ecx
neg edi
bswap edi
or edi, ecx
jmp 0x4fb4f7
call edx
and ecx, ebx
mov ecx, edi
add ecx, esi
and esi, 0x20aaa62e
inc ecx
sub ecx, esi
jmp 0x4fbe72
call edx
mov esi, edi
xor ebx, 0x20ac77fa
add ebx, ecx
bswap ebx
or esi, ecx
xchg ecx, ebx
and edi, ebx
shr ecx, 7
and edi, esi
and edi, esi
sub edi, ebx
bswap edi
jmp 0x4fa7a6
call fcn.004fd4bb
and ebx, ecx
add esi, 0x20bc0c42
xchg ecx, edi
mov esi, ecx
mov esi, ecx
neg ecx
and esi, ebx
xchg esi, ecx
and ecx, esi
sub edi, ecx
neg esi
or edi, 0x20bd66c6
jmp 0x4fb32a
push 0x1eb2f95e
shl ebx, 3
xor esi, 0x20c2dde6
and ecx, esi
mov ebx, 0x20c32648
xor esi, ebx
or edi, ebx
or edi, ebx
shl ecx, 0x18
ror edi, 0xd
xchg ebx, esi
jmp 0x4fc321
pop edx
nop
xchg esi, edi
bswap ecx
xor esi, ebx
ror ecx, 0x1e
sub ecx, ebx
and edi, ebx
xchg esi, ebx
or esi, 0x20c5435c
shr ecx, 0xf
jmp 0x4fd26f
push 0x1eb04282
add edi, esi
xchg ebx, ecx
or ebx, esi
add ebx, ecx
add ecx, 0x20c6251e
xor ebx, ecx
bswap ebx
xor esi, 0x20c69084
jmp 0x4fb196
push 0x1eafb9ea
and esi, 0x20c7f430
and ebx, 0x20c81822
add esi, ecx
shr edi, 0xb
and ecx, edi
sub ebx, ecx
sub ebx, 0x20c8c98c
mov ebx, edi
xor ebx, 0x20c90bda
mov ebx, esi
sub esi, 0x20c94eb4
mov ecx, edi
jmp 0x4fbb62
call edx
and edi, esi
and edi, esi
mov esi, edi
inc esi
or ecx, 0x20cbd4de
sub ebx, 0x20cbfda6
xor ebx, ecx
mov ebx, ecx
jmp 0x4faa20
pop edx
xchg ebx, esi
xor ebx, 0x20cc9228
or ebx, 0x20ccb5e6
or esi, ecx
nop
shl esi, 0x1c
add edi, 0x20cd46c0
bswap ebx
mov ebx, edi
sub edi, ebx
jmp 0x4fc91c
call fcn.004fd4bb
or esi, ecx
mov esi, 0x20d1c1ca
xor ebx, ecx
mov edi, ebx
inc edi
and ecx, 0x20d24b06
dec ecx
sub ebx, 0x20d293e0
jmp 0x4fcab5
mov edx, 0x183c2e20
neg edi
mov ecx, esi
xchg esi, ebx
xor edi, esi
and edi, ecx
and esi, ebx
mov ecx, ebx
or edi, 0x20da642e
add esi, ecx
and ecx, 0x20daa86c
and ecx, esi
sub esi, 0x20daecf4
jmp 0x4fbda0
call edx
xor ecx, ebx
and esi, ecx
or esi, 0x20df1630
sub esi, ebx
xor ecx, 0x20df662a
xchg ebx, ecx
and esi, 0x20dfb682
xchg ecx, edi
jmp 0x4fc427
push 0x1ea93c1a
sub edi, 0x20e019c6
sub edi, esi
or esi, 0x20e0612e
sub ecx, ebx
jmp 0x4faeab
push 0x1eb3238a
xor esi, ebx
xchg ebx, ecx
and ebx, ecx
and ebx, edi
jmp 0x4fa54c
pop edx
mov ebx, ecx
xor ecx, edi
sub ecx, 0x20fa9d3e
xor ebx, ecx
dec ecx
mov ecx, esi
xor ecx, esi
xchg ebx, edi
shr ebx, 0x1c
xor ecx, 0x20fb9050
jmp 0x4fb1f7
pop edx
xor ecx, 0x20fbc40c
shr esi, 6
sub edi, esi
add ebx, esi
or esi, edi
bswap ebx
and ecx, ebx
or ecx, ebx
sub edi, 0x20fcde3c
xor ecx, edi
add edi, 0x20fd2228
mov ecx, esi
shl ebx, 0x1e
xor esi, edi
jmp 0x4fd0df
push 0x1ea0e540
mov ecx, 0x2103c09c
and ecx, edi
shl edi, 0x17
sub esi, ecx
or ebx, 0x2104474c
shl esi, 1
neg ebx
neg edi
and ecx, esi
xchg esi, edi
sub esi, ebx
sub ebx, esi
add ecx, edi
or esi, edi
jmp 0x4fd1d1
pop edx
dec edi
xchg ebx, ecx
sub ecx, ebx
and ecx, edi
shr esi, 0x1b
or ebx, 0x2106648c
jmp 0x4fb7d5
mov edx, 0x183c2e20
rol esi, 2
xor esi, 0x21087472
shr ecx, 9
mov edi, 0x2108bb08
jmp 0x4fa5d0
push 0x1ea4ac4c
xchg esi, ebx
or esi, 0x21090e0c
and edi, ebx
shr edi, 0x18
add ecx, ebx
add ebx, edi
jmp 0x4fb066
mov edx, 0x183c2e20
add ebx, esi
mov ebx, esi
xchg esi, edi
and ebx, 0x210d1a34
or ecx, edi
xor ecx, ebx
mov ecx, esi
mov esi, 0x210da0fc
jmp 0x4fca48
pop edx
mov ecx, ebx
sub edi, ecx
xor esi, ecx
mov ebx, edi
add esi, ebx
add ebx, esi
or esi, ecx
and esi, edi
add ecx, ebx
add ecx, esi
mov ecx, esi
bswap ecx
jmp 0x4fc58a
mov edx, 0x4132136a
ror edi, 0x19
xor esi, ecx
mov ebx, 0x2113baa0
and edi, ebx
xor esi, ebx
xchg edi, ebx
xor esi, ebx
sub ecx, ebx
xor edi, ecx
mov edi, 0x2114ab5c
jmp 0x4fb1ac
mov edx, 0x183c2e20
neg esi
and esi, edi
shl edi, 0x1d
add edi, ecx
xor ebx, 0x211b8062
mov esi, ecx
jmp 0x4fb2b1
call fcn.004fd4bb
mov ecx, 0x21287cac
xor ebx, esi
ror esi, 0x18
or esi, edi
add ebx, 0x2129ccac
or ecx, ebx
and edi, ecx
and ecx, edi
jmp 0x4fa524
push 0x1eae05aa
or esi, edi
xor ecx, ebx
or edi, 0x212b8c02
sub esi, 0x212bb680
xor esi, 0x212bd970
ror ecx, 0x1b
nop
ror ecx, 0xb
shl ebx, 0x1a
mov esi, ebx
jmp 0x4fc0ad
call edx
add edi, 0x212cc12a
add ecx, 0x212ce4b4
add esi, ecx
shr edi, 0xe
add ecx, 0x212d4bf8
or edi, 0x212d7344
sub edi, 0x212d97b6
mov ecx, ebx
and ecx, esi
sub ebx, ecx
and ebx, 0x212e1cfc
mov edi, 0x212e3fe2
jmp 0x4fd3c6
push 0x1ea37e30
and edi, 0x21300fbe
xchg esi, ecx
add edi, 0x2130544c
mov edi, ecx
ror esi, 0x1f
and ebx, edi
or esi, 0x2130e006
shr edi, 0x1b
or edi, ebx
mov esi, edi
sub edi, 0x213169bc
and edi, ecx
jmp 0x4fb614
pop edx
xor ecx, esi
add ecx, edi
bswap ecx
or ebx, 0x213bda94
mov edi, ebx
sub esi, 0x213c1b1e
xchg esi, ebx
rol ebx, 0x13
dec edi
add ecx, ebx
jmp 0x4fb9f0
call fcn.004fd4bb
add edi, esi
neg ebx
not esi
ror esi, 0xd
xor esi, ebx
inc esi
or ecx, ebx
xchg ebx, ecx
mov ebx, 0x213dfe60
not ebx
xor ecx, edi
xchg ecx, esi
jmp 0x4fbbf7
mov edx, 0x183c2e20
shr ecx, 0x17
bswap esi
sub edi, esi
sub esi, ebx
or ebx, edi
add edi, esi
xchg ebx, esi
mov edi, 0x214100d4
xor esi, ebx
rol edi, 0x14
add esi, ecx
sub ecx, esi
jmp 0x4fc840
call edx
or esi, ecx
xchg esi, edi
and ebx, ecx
mov edi, esi
or ebx, edi
shl esi, 7
add ecx, ebx
sub esi, ebx
jmp 0x4fb8ec
call fcn.004fd4bb
and esi, edi
xchg esi, edi
jmp 0x4fc136
mov edx, 0x183c2e20
xor esi, ecx
mov ecx, edi
sub ebx, esi
xchg ecx, edi
and edi, ecx
not edi
or ecx, esi
dec esi
jmp 0x4fa7e7
push 0x1ea26f80
or esi, edi
xor esi, edi
shr ebx, 1
add ecx, 0x215661a2
xor esi, edi
sub ebx, ecx
or esi, 0x2156ca76
ror edi, 0xd
xor ecx, 0x21570f32
sub edi, 0x215733f4
jmp 0x4fd279
push esp
mov ebx, esi
sub ebx, esi
rol esi, 0xf
and esi, edi
jmp 0x4fba57
push 0x1ea98a5e
sub ecx, esi
shr esi, 0x1f
bswap ebx
rol ebx, 0xe
jmp 0x4fd055
push 0x1eab2180
and ebx, esi
xor edi, ebx
mov edi, ebx
ror ecx, 0xf
or edi, ecx
or esi, ebx
jmp 0x4fb5f0
push 0x1eb1e21d
sub edi, esi
add ebx, 0x2163f94a
or edi, esi
and edi, esi
jmp 0x4fb286
call edx
sub ecx, edi
sub edi, ecx
neg esi
xchg ebx, ecx
sub ecx, ebx
and ecx, 0x2167297c
mov esi, ecx
or edi, esi
xor ecx, esi
dec ebx
jmp 0x4fac4a
mov edx, 0x183c2e20
add ecx, ebx
and ecx, edi
or ecx, esi
and ebx, ecx
or edi, esi
or ebx, edi
add esi, 0x216a1662
xchg esi, edi
or ecx, esi
shl ecx, 0x15
jmp 0x4fcbe4
pop edx
sub edi, 0x21713918
ror ecx, 0x18
inc ecx
xchg esi, ecx
dec ecx
mov ecx, esi
xor esi, 0x217213c0
dec edi
xor edi, ecx
ror edi, 0x1c
jmp 0x4fbb80
pop edx
add esi, 0x217bb458
or edi, 0x217bd790
dec esi
or edi, esi
xor edi, ebx
mov edi, esi
jmp 0x4fafcb
mov edx, 0x183c2e20
and ebx, ecx
and ebx, ecx
sub edi, ebx
sub ecx, 0x2181e16e
mov ecx, esi
sub esi, edi
sub esi, edi
rol edi, 0x1b
add esi, 0x21828e70
xor ebx, ecx
jmp 0x4fb11b
pop edx
and edi, 0x2182e2ac
xchg ebx, edi
mov ecx, 0x21832c72
ror ecx, 1
jmp 0x4fbed3
pop edx
or ecx, ebx
xchg ecx, esi
shr edi, 0x14
xor edi, ecx
and edi, 0x21878138
mov ecx, 0x2187a3dc
jmp 0x4fb084
pop edx
shl ebx, 0x14
not edi
mov ebx, ecx
add edi, ebx
sub edi, esi
xchg esi, ecx
jmp 0x4fbf5e
push 0x1ea914ea
or edi, ebx
shr esi, 0x13
xor edi, 0x218ae662
mov ecx, ebx
xor ecx, ebx
xchg edi, ecx
and esi, 0x218b6e60
and ebx, ecx
jmp 0x4fc159
push 0x1ea2ab60
xchg edi, ebx
shl esi, 7
and edi, 0x218d26cc
and esi, edi
neg ebx
xor ecx, ebx
xor ebx, 0x218db3d4
and ecx, 0x218eaa7a
jmp 0x4fcc25
push 0x1eadb95f
and ebx, edi
add ebx, esi
jmp 0x4fbb26
push 0x1ea1081a
xor ecx, esi
not edi
add ecx, esi
sub edi, 0x21917f90
jmp 0x4fd228
push 0x1ea127ca
not ebx
sub edi, esi
add ebx, esi
or ebx, ecx
xchg edi, esi
sub ecx, edi
inc edi
or ebx, edi
xor edi, esi
add edi, esi
jmp 0x4fab9b
pop edx
not ecx
not ecx
jmp 0x4fbe4a
push 0x1ea28d6e
inc ebx
mov edi, ecx
xor esi, 0x21994afa
xor edi, ecx
shl ecx, 0x18
ror ebx, 7
jmp 0x4fd176
pop edx
sub ecx, edi
add ecx, ebx
rol ecx, 0xe
and esi, ebx
shr edi, 0x1f
or ecx, esi
xchg ebx, esi
add esi, edi
xor edi, ecx
shl edi, 3
jmp 0x4fd138
push 0x1eacec35
mov ecx, 0x21a071be
sub esi, ecx
or ecx, ebx
and esi, 0x21a0d42a
neg edi
xchg esi, ecx
jmp 0x4fd38d
mov edx, 0x183c2e20
mov ebx, esi
add ecx, edi
xor edi, ecx
mov ecx, edi
shl ecx, 0x10
or ecx, edi
mov edi, ebx
mov ecx, esi
sub esi, edi
add esi, 0x21a649fc
jmp 0x4faf2b
pop edx
xor edi, ebx
mov esi, 0x21a77c1e
neg edi
add esi, edi
not edi
sub esi, edi
and ebx, esi
add ebx, 0x21a92424
neg ebx
or edi, esi
jmp 0x4fc449