Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetClipboardViewer
cmp eax, 0xffffff0f
jne 0x401089
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_GetProcessShutdownParameters
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff06
jne 0x4010ea
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xfffffeea
jne 0x401173
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_SetCriticalSectionSpinCount
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xfffffef1
jne 0x4011e3
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
ret
call sub.user32.dll_GetClipboardSequenceNumber
cmp eax, 0xffffff1c
jne 0x401244
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.ntdll.dll_RtlIsActivationContextActive
call sub.kernel32.dll_SetCriticalSectionSpinCount
call sub.kernel32.dll_GetProcessShutdownParameters
call sub.kernel32.dll_SetCriticalSectionSpinCount
ret
jmp 0x49512e
sub ecx, edx
and edi, ebx
dec edx
sub ebx, ecx
bswap ecx
jmp 0x49563a
call fcn.004960c6
add esi, ecx
bswap ecx
and edi, esi
and edi, edx
and esi, 0x93597cd3
add edx, ecx
and edx, esi
and esi, edi
inc ecx
jmp 0x4970f3
pop ebx
xor edx, esi
xchg edi, esi
add ecx, edx
add esi, 0x935e27ac
inc ecx
not esi
or esi, 0x935ec495
xor ecx, 0x935ef8fe
xor edi, ecx
xor edi, 0x935f6cf7
xor edx, edi
jmp 0x495b17
mov ebx, 0x2774562b
or esi, edi
not edi
or ecx, edi
neg ecx
shr esi, 0x17
neg edi
dec ecx
xor esi, edx
and ecx, 0x93625341
xchg edx, ecx
jmp 0x495169
pop ebx
xor edi, 0x937b62a9
add ecx, edi
or esi, edi
or esi, edx
mov ecx, esi
sub ecx, esi
xchg edi, edx
jmp 0x4951c0
pop ebx
mov ecx, 0x937f0a25
mov edx, edi
sub ecx, edi
xchg edx, edi
shr edi, 0x12
shl esi, 0x17
or ecx, esi
jmp 0x497f48
push 0x90288911
and edi, ecx
rol esi, 0x1d
mov edi, 0x9380fbb9
or esi, edi
ror ecx, 0xc
xor edi, 0x9381954c
and esi, ecx
dec edx
sub ecx, 0x93823d10
jmp 0x496e34
pop ebx
xchg edi, ecx
mov edx, edi
not edi
and edi, 0x93832122
inc esi
or esi, edx
shl edx, 0x1a
add esi, edi
add esi, edi
add edi, 0x938461ed
or edi, edx
add edi, esi
and edx, ecx
ror edx, 0x12
jmp 0x4952ef
push 0x902fff2a
xchg esi, ecx
xor edx, 0x9390d9a7
and esi, 0x93911243
sub esi, 0x9391471a
add edi, esi
add esi, edi
xchg ecx, esi
sub ecx, 0x93921ff0
sub edx, 0x939250b3
ror edi, 7
jmp 0x4964d8
call fcn.004960c6
and esi, 0x9397a0bb
ror edi, 8
add esi, edx
and ecx, 0x93983d52
mov ecx, esi
or edi, ecx
bswap edi
jmp 0x495863
push 0x9022a8ac
shr edi, 0x15
sub edx, esi
jmp 0x497fa9
call ebx
not edi
or esi, edi
bswap edi
or edi, ecx
xor edx, edi
add edx, 0x93a969e8
sub esi, 0x93a9a2c0
and esi, ecx
jmp 0x4967fb
mov ebx, 0x123b2f04
or edi, 0x93aa1e8c
add edx, 0x93aa530c
add edi, ecx
or edi, 0x93aac145
or esi, edx
xchg edi, edx
or edx, edi
add esi, ecx
jmp 0x49827f
push 0x901d35f7
xor esi, ecx
xor ecx, esi
shr edx, 0xd
mov edx, esi
and edx, edi
sub esi, ecx
and edi, esi
not edx
mov ecx, 0x93aeaf6a
add esi, ecx
add edi, 0x93af1639
not esi
jmp 0x496ff6
push 0x902ec9d2
shl ecx, 0x1a
and edi, edx
mov esi, ecx
xor esi, ecx
bswap edi
mov edx, esi
add edx, 0x93bb8af3
bswap edx
rol edx, 7
and edx, esi
sub edx, ecx
or edi, edx
and esi, edx
xor edx, ecx
add esi, ecx
sub ecx, edi
jmp 0x4959b0
mov ebx, 0x2774562b
shl ecx, 8
add edx, ecx
xor edx, edi
sub edx, ecx
jmp 0x497acb
mov ebx, 0x123b2f04
add edi, 0x93be9928
rol esi, 0x1e
shr edx, 4
xchg edx, esi
add esi, edx
xchg esi, edi
shr ecx, 5
sub edx, edi
sub edx, 0x93c20cd5
jmp 0x4962e5
call ebx
sub esi, ecx
or esi, edi
xor edi, edx
shl esi, 5
sub esi, 0x93d50dd8
sub edx, 0x93d59a64
or esi, ecx
sub edx, edi
or edi, esi
dec edx
add ecx, edi
jmp 0x496294
push 0x9032ea64
sub edi, ecx
dec ecx
mov ecx, edx
sub esi, ecx
ror edi, 0xb
add edx, esi
xchg edx, edi
xor esi, edx
jmp 0x49664e
mov ebx, 0x2774562b
mov edx, edi
shl edi, 6
mov edi, esi
mov esi, ecx
nop
and ecx, edx
xchg ecx, edx
and esi, ecx
or edi, 0x93fc0ca7
mov ecx, edx
jmp 0x495ef3
pop ebx
sub esi, 0x940e2448
dec ecx
and esi, edx
not ecx
shl esi, 0x1c
or edi, ecx
xor edi, edx
xchg edx, edi
jmp 0x497427
call fcn.004960c6
and edi, ecx
and edi, esi
xchg esi, edi
xchg edx, esi
and ecx, esi
xchg esi, edx
add ecx, 0x9412f94d
and esi, edi
or edx, edi
add ecx, esi
shr esi, 0x1a
mov edx, 0x941405ac
or edi, ecx
inc edx
jmp 0x4982e7
pop ebx
xchg ecx, edi
xor esi, edx
inc edx
dec edx
jmp 0x4978df
call fcn.004960c6
add esi, ecx
mov edi, edx
xor ecx, esi
xchg edx, ecx
bswap edx
add edx, ecx
not edx
mov edx, edi
mov ecx, edx
neg edx
jmp 0x4969f2
pop ebx
mov edx, esi
shl edx, 8
xchg esi, edx
sub ecx, edi
sub edi, 0x9424db62
jmp 0x495f62
pop ebx
add esi, 0x942957c6
bswap edx
sub esi, ecx
mov esi, edx
and esi, edi
or edx, edi
shl ecx, 7
xor ecx, edx
sub edx, ecx
shr ecx, 0x1a
or edx, esi
bswap edi
jmp 0x495aaa
push 0x9036b555
sub esi, ecx
xchg edx, ecx
rol edi, 0x14
and edi, 0x942c806e
mov edx, edi
sub ecx, edx
xor edx, ecx
sub ecx, 0x942d58ca
xor edi, esi
neg edi
jmp 0x4967a2
pop ebx
bswap edx
add esi, 0x94324dc0
and edx, edi
or ecx, edx
or esi, ecx
dec edx
and edx, 0x94335eb3
sub edx, ecx
sub ecx, edx
shl edx, 4
jmp 0x4964b6
pop ebx
xor ecx, esi
inc esi
inc ecx
or ecx, 0x9447b7e5
nop
and esi, edi
nop
neg esi
jmp 0x496718
pop ebx
or edi, 0x945aab75
bswap edi
mov esi, 0x945b74e2
mov esi, edx
inc ecx
jmp 0x495374
pop ebx
xchg ecx, edi
or edx, ecx
xor edi, 0x9462128a
shr edx, 0x1f
mov esi, edx
add ecx, edx
xor edi, esi
jmp 0x497611
mov ebx, 0x2774562b
and edx, edi
and ecx, 0x9471f1b1
add edx, esi
or ecx, edi
rol esi, 0x10
jmp 0x496f62
call fcn.004960c6
xchg esi, edx
mov esi, edi
mov edi, esi
or ecx, esi
xor edx, ecx
and edx, esi
sub esi, ecx
or ecx, edi
xor esi, ecx
rol ecx, 0xd
jmp 0x49735f
call fcn.004960c6
xor edx, esi
mov esi, edx
sub esi, 0x9480b30c
xor ecx, esi
shl edi, 7
add ecx, edi
xor ecx, edi
shl ecx, 0x1a
mov ecx, esi
add edi, edx
xor esi, edi
shl ecx, 0x1d
jmp 0x496785
push 0x9036890b
inc edi
add edi, edx
or edx, 0x9489d4c0
add edx, ecx
and esi, 0x948a9a70
and esi, edx
and edx, ecx
or edi, 0x948ba2da
neg edi
shl ecx, 4
add esi, 0x948ca7e2
jmp 0x495b89
push 0x90201998
and edx, esi
or esi, edx
and edx, ecx
mov edx, edi
dec ecx
xchg esi, ecx
add edi, esi
and edi, 0x9499506a
sub esi, 0x9499b453
sub edx, edi
and esi, ecx
dec ecx
sub edx, 0x949b37e4
or esi, edx
jmp 0x496254
mov ebx, 0x2774562b
sub edi, 0x949c1cce
neg edx
xor edi, esi
xor ecx, edx
xchg ecx, edi
mov ecx, edi
mov edi, edx
or esi, edx
sub esi, 0x949f3463
sub edx, esi
jmp 0x4969db
mov ebx, 0x4132136a
and edi, ecx
xor esi, 0x94a37173
mov esi, edx
bswap esi
inc edi
xchg ecx, edx
or edi, edx
jmp loc.004971fb
call ebx
mov edx, edi
mov edi, edx
dec edi
sub edx, 0x94bbcb3b
xor ecx, 0x94bbfc03
xchg ecx, esi
neg edx
xor edi, esi
sub edi, 0x94bcd267
jmp 0x495dad
pop ebx
inc edx
and edx, esi
sub ecx, edx
jmp 0x4978a4
push 0x90233d8b
add edx, edi
xor ecx, 0x94cf2998
mov ecx, edx
ror esi, 0x1d
mov edx, 0x94cffb3b
shl ecx, 0xb
nop
xor edx, 0x94d0a1ca
and ecx, edx
or esi, edi
shl ecx, 0xd
xor ecx, esi
add edx, esi
jmp 0x495741
push 0x90204432
neg ecx
xor edx, esi
jmp 0x496e16
pop ebx
add esi, edx
and esi, ecx
and edx, 0x94da5167
dec ecx
sub edx, ecx
jmp 0x4970b7
push 0x90283cd9
bswap edx
shr edi, 0x1b
shl edi, 0xf
and edx, ecx
and edi, ecx
or esi, 0x951498b0
neg edx
dec edi
and ecx, edi
xor edi, esi
or esi, edx
xor ecx, edx
jmp 0x49534c
call fcn.004960c6
sub edx, 0x95165abc
mov ecx, esi
and edx, 0x9516bd49
mov edx, esi
mov ecx, edi
or esi, edx
mov edi, edx
neg ecx
and ecx, esi
add edx, 0x95182fe1
jmp 0x498217
pop ebx
not esi
ror ecx, 0x12
inc edx
xor ecx, edi
add esi, edi
mov ecx, 0x9528458b
jmp 0x495fee
push 0x902b3b95
sub esi, 0x95386f87
and edi, esi
not edi
add edi, ecx
inc ecx
sub esi, edi
shr edx, 0x1e
add esi, edi
jmp 0x496d24
pop ebx
sub esi, edx
mov ecx, esi
mov edx, edi
add esi, 0x953ac1e2
and ecx, esi
and ecx, 0x953b28c7
sub esi, 0x953b5d8a
and esi, edi
jmp 0x4963ca
push 0x90302a5b
add edx, ecx
nop
xchg edi, esi
and ecx, edx
neg ecx
sub esi, 0x954216c7
or esi, ecx
add edx, 0x95427ea1
xor ecx, esi
ror esi, 0x12
xchg edi, esi
mov ecx, 0x9543594b
rol edi, 0xd
jmp 0x496b04
push 0x9033ae6b
or esi, edx
sub esi, edi
add esi, ecx
xor esi, edx
and esi, edx
add edi, edx
not edi
xor edi, 0x956e18ac
bswap edx
jmp 0x496818
mov ebx, 0x123b2f04
add esi, edx
sub esi, ecx
mov ecx, esi
neg ecx
add edi, 0x957728fc
sub esi, 0x957762e1
or esi, edx
jmp 0x4954c6
push 0x9033166c
and edi, 0x957b7f00
mov edi, ecx
bswap ecx
xor edi, edx
and esi, edi
or esi, 0x957c8be1
ror edi, 8
or edx, esi
or edi, esi
add ecx, esi
jmp 0x498150
pop ebx
sub esi, 0x957fca12
or ecx, esi
mov esi, edx
dec edx
bswap esi
nop
sub edi, ecx
neg esi
add edi, 0x95830b40
xor edi, edx
and edx, ecx
mov edi, 0x95842679
jmp 0x495bf2
call ebx
xor edi, esi
mov edi, esi
mov ecx, edi
or edi, esi
add ecx, esi
or edx, ecx
xchg ecx, edx
xchg edx, edi
and edi, ecx
or edi, ecx
jmp 0x4971cf
pop ebx
add esi, edi
xor edi, 0x9596a2a0
not ecx
jmp 0x497334
pop ebx
xchg esi, edi
rol edx, 0x1e
jmp 0x496f7d
call ebx
xor edx, edi
sub ecx, 0x959c654a
sub edx, edi
add ecx, 0x959d3459
mov edx, ecx
add ecx, edx
add ecx, esi
jmp 0x495cf3
mov ebx, 0x2774562b
mov ecx, esi
inc edi
add esi, 0x959ed3fc
mov esi, edi
sub edi, edx
xor ecx, esi
jmp 0x4979b6
pop ebx
rol esi, 0x19
or edi, 0x95a3eb20
or ecx, edi
mov edi, edx
shl ecx, 0x1b
xor esi, ecx
xchg edx, edi
inc edi
xchg edx, ecx
jmp 0x49611e
mov ebx, 0x123b2f04
not ecx
mov edi, 0x95af9d7b
sub ecx, esi
xor edi, ecx
xor esi, edx
mov ecx, 0x95b06cff
inc ecx
and esi, edx
and edx, edi
xchg esi, edx
jmp 0x497ed9
push 0x902c6a5b
mov esi, ecx
shr esi, 0x19
add edi, esi
and edx, ecx
xor edi, esi
mov edi, edx
and ecx, edi
or esi, ecx
mov edi, ecx
mov edi, ecx
sub edi, 0x95ba6963
bswap ecx
jmp 0x495e7e
pop ebx
or esi, 0x95bc3af7
bswap edx
shr edi, 0x14
xor edx, edi
jmp 0x497f82
push 0x902b0ffa
shl esi, 3
sub esi, edx
ror edi, 1
add edx, esi
or edx, edi
neg ecx
shr edi, 0xb
shl esi, 0xf
and edi, 0x95c4c8c5
xor esi, edi
shr esi, 9
and ecx, esi
add ecx, esi
jmp 0x496498
pop ebx
xor ecx, edx
mov edx, esi
and edx, ecx
xor esi, edi
mov edx, ecx
sub edi, edx
jmp 0x496063
call fcn.004960c6
inc edx
sub esi, edx
and ecx, edx
and ecx, edi
sub edi, edx
xor edi, esi
xchg ecx, edx
jmp 0x496c30
call ebx
add ecx, edx
inc ecx
or edx, esi
neg edx
jmp 0x497b0e
pop ebx
or edi, 0x95df8536
xor edx, esi
sub ecx, esi
and edi, esi
mov edi, 0x95e056b5
mov edi, esi
sub edi, esi
xchg ecx, edi
neg esi
sub ecx, esi
xor edx, edi
xchg edx, edi
jmp 0x497834
mov ebx, 0x123b2f04
xchg esi, edx
inc ecx
or esi, edx
rol edx, 7
mov ecx, 0x95e79515
neg esi
xor edi, 0x95e80019
and esi, edi
and edx, edi
jmp 0x495a7d
push 0x902ea200
and edx, ecx
xchg edi, esi
add ecx, esi
xchg edi, edx
and ecx, edi
mov edi, ecx
jmp 0x495711
push 0x903051e0
and ecx, esi
xchg esi, ecx
shr edi, 0x18
nop
xchg ecx, edi
dec ecx
and ecx, edi
jmp 0x49830b
push 0x902e7666
xor edx, edi
xchg ecx, esi
or ecx, 0x95fd2173
xor ecx, edi
xor esi, ecx
rol edx, 3
xchg edi, edx
or edx, 0x9600e7d9
jmp 0x496aee
push 0x902527ab
xor ecx, edx
and edi, edx
and ecx, edi
bswap edx
xor edi, 0x9604a655
add edx, ecx
xchg edx, esi
ror esi, 0xf
ror edx, 0x19
xchg edi, esi
shr esi, 0xc
add ecx, 0x96061ed5
jmp 0x49601e
call ebx
neg esi
and edi, ecx
shl edx, 0x1d
not edi
not esi
mov ecx, edi
jmp 0x495b65
push 0x902d43c8
xchg edi, edx
sub edx, edi
xor edx, esi
xchg esi, ecx
sub ecx, esi
mov edx, 0x960d82c1
add edx, 0x960db75d
xchg esi, edi
jmp 0x497c75
mov ebx, 0x123b2f04
and ecx, esi
add ecx, edi
xchg edi, esi
sub esi, ecx
or esi, ecx
xor edi, esi
add edx, ecx
xchg edx, esi
xchg ecx, edi
rol ecx, 1
jmp 0x495f12
pop ebx
xor edx, ecx
xor edx, edi
inc esi
add ecx, 0x962233e1
xchg esi, edi
add edi, edx
inc edx
xchg esi, edx
xor esi, edi
jmp 0x49677a
push 0x902072b0
sub edi, esi
mov esi, ecx
xor ecx, esi
xchg esi, edi
mov ecx, edi
add edx, 0x9629477e
neg edi
sub esi, edx
jmp 0x4980f3
push 0x9028d748
add esi, edi
xchg edi, edx
xor esi, edx
mov edi, esi
xor ecx, esi
sub esi, ecx
xor esi, 0x962d4638
shr ecx, 7
and edi, esi
add ecx, edi
shr edx, 4
jmp 0x495601
push 0x9024f92a
or edx, esi
ror ecx, 7
mov edi, edx
add ecx, 0x9639574d
or esi, ecx
jmp 0x496c03
call fcn.004960c6
rol edi, 7
inc edx
sub esi, edx
shr esi, 0xd
mov ecx, esi
or edi, 0x9643db57
jmp 0x4966dc
pop ebx
sub edi, ecx
shl edx, 6
or edx, ecx
xor edx, esi
mov edi, 0x9644f3f0
xchg ecx, edi
sub edx, 0x96455877
sub ecx, edi
mov esi, 0x9645cf19
and esi, 0x9646038e
jmp 0x497d21
push 0x901d9501
xor esi, edi
xor esi, ecx
or edx, esi
shl esi, 0x14
xor esi, ecx
shl edi, 0x18
rol edi, 0x1c
and edi, edx
mov edx, ecx
mov ecx, edx
add esi, 0x964d8eb9
sub ecx, edi
jmp 0x497466
pop ebx
or esi, edi
rol edx, 4
add edx, edi
shl esi, 0x10
or ecx, 0x965c2845
add edi, edx
rol ecx, 5
and ecx, esi
add esi, ecx
ror esi, 5
ror edi, 0x1d
xor ecx, edx
jmp 0x496bb8
pop ebx
sub ecx, edx
ror esi, 8
inc edi
add edi, ecx
or ecx, edx
mov edx, 0x9660fb92
jmp 0x497f30
call ebx
sub ecx, edi
xor edi, 0x9661dedf
neg edi
and edi, edx
mov edx, 0x96627bdf
rol esi, 0xa
bswap esi
or edx, esi
xchg edi, ecx
xor edx, esi
jmp 0x49668e
pop ebx
bswap ecx
and ecx, 0x966fc9ab
mov edi, ecx
xor ecx, edi
inc edx
shr edi, 0x1b
xchg esi, ecx
sub edx, edi
mov ecx, edi
jmp 0x496a28
pop ebx
xchg ecx, edi
not edx
xor edx, esi
sub esi, ecx
or ecx, edx
mov ecx, 0x9677e4be
mov ecx, edi
jmp 0x496c8b
pop ebx
shl edx, 0xf
shr ecx, 0xc
jmp 0x495446
call ebx
inc ecx
xchg edx, edi
mov ecx, edx
and ecx, edx
xchg edi, edx
and edi, esi
add ecx, edi
jmp 0x496dc6
pop ebx
shr ecx, 0x18
add edi, edx
xchg ecx, esi
and esi, edi
inc edi
add edx, ecx
inc edx
or edx, ecx
jmp 0x496858
call ebx
xor ecx, edx
not esi
mov ecx, edi
mov esi, ecx
xor edi, edx
jmp 0x495333
push 0x9027a15e
xchg ecx, edx
sub esi, ecx
not ecx
dec edi
neg edi
or ecx, edi
add esi, edi
xchg edx, edi
mov edx, edi
xor esi, edx
sub edx, esi
mov edi, esi
jmp 0x497498
push 0x901de62a
ror esi, 0x11
rol edi, 8
sub esi, 0x96dc8f1e
xor edi, edx
or esi, ecx
xor edi, 0x96ddc81d
mov edi, edx
add edx, ecx
and edi, 0x96dee806
not ecx
xchg ecx, esi
neg esi
and edx, ecx
jmp 0x4981c3
push 0x9027f021
and edi, 0x96e0f608
xor esi, ecx
bswap ecx
and edx, edi
and edi, edx
jmp 0x4962be
push 0x9031ddaf
and edi, ecx
add edi, edx
xchg esi, edi
xchg ecx, esi
xor esi, edx
add edi, 0x971d2e0e
bswap edi
and ecx, edi
xchg edi, ecx
jmp 0x496a70
pop ebx
xor edi, ecx
and ecx, esi
or edx, edi
mov ecx, esi
dec esi
neg esi
and edi, ecx
xchg edx, esi
add edi, 0x9788b76f
jmp 0x495de4
pop ebx
or ecx, 0x97890b51
neg edx
and esi, edi
or esi, 0x9789a4a9
dec edi
shl esi, 0x1c
or esi, 0x978a7b1d
xchg esi, ecx
sub esi, 0x978baae7
xchg edx, esi
add edi, esi
dec esi
jmp 0x49694e
pop ebx
xchg esi, edi
and esi, 0x9794b0c1
mov edi, edx
xor edi, 0x979577f9
shl ecx, 0xa
or edi, edx
mov edi, edx
or ecx, edi
sub esi, ecx
and ecx, 0x97996220
mov edi, edx
mov ecx, esi
jmp 0x497a86
pop ebx
or edx, edi
neg ecx
not edx
xor edx, edi
shl esi, 0x15
and ecx, edi
xchg ecx, edi
and edx, ecx
mov edx, esi
sub ecx, 0x979e6b82
xor esi, edx
xor ecx, edx
sub edi, ecx
jmp 0x495a63
pop ebx
or edi, ecx
neg esi
not edx
xor edx, ecx
jmp 0x497bb4
call fcn.004960c6
sub edx, esi
add edx, ecx
and edi, esi
mov edx, edi
or ecx, esi
and edx, 0x97ab780f
bswap edi
jmp 0x497fe7
push 0x9024a7d9
mov esi, 0x97b0179d
or esi, 0x97b04b7d
bswap edi
or ecx, edx
add edi, 0x97b0f329
or ecx, esi
jmp 0x497e08
pop ebx
ror edx, 0xa
mov ecx, edi
inc edi
neg edx
xor edi, ecx
xor edi, 0x97b987f2
and edx, esi
sub esi, edx
add edx, ecx
xor esi, edi
sub edi, edx
add ecx, esi
or ecx, esi
jmp 0x49798c
call fcn.004960c6
xor edx, edi
bswap edi
not edi
mov edi, ecx
rol edx, 2
xchg edx, edi
rol esi, 9
xor edi, ecx
sub esi, edi
jmp 0x4972d9
pop ebx
mov ecx, edx
shl edx, 9
add esi, 0x97c99a15
xchg edi, esi
xchg esi, edi
ror ecx, 0xa
mov edi, edx
or ecx, edi
sub ecx, esi
add ecx, edi
and edx, esi
jmp 0x496891
push 0x902ae10b
add edi, 0x97d8be0d
add edx, edi
and edx, ecx
mov edi, edx
and ecx, edx
and ecx, 0x97dc7ec8
not edi
and esi, 0x97dd1c84
and edi, esi
jmp 0x4968a4
push 0x902d6eea
or edx, esi
shl edx, 1
or edx, ecx
dec esi
shl edi, 0x11
and esi, 0x97e83585
not ecx
rol edx, 0x14
sub esi, edi
not ecx
jmp 0x4965f6
pop ebx
inc ecx
dec esi
not edx
bswap edi
sub ecx, 0x97f603fb
shl edi, 0x1d
xor esi, edx
neg edi
sub edi, edx
sub esi, edx
xor edi, 0x97f74fcc
sub esi, 0x97f7804a
jmp 0x4979fe
push 0x9024d237
xor edi, ecx
ror esi, 2
sub edi, esi
and edi, 0x9805ca95
rol edx, 0x15
bswap esi
xor edi, 0x9807074c
sub edi, edx
sub esi, edx
sub edi, ecx
mov ecx, 0x980895d1
jmp 0x496ee5
call fcn.004960c6
xchg edi, esi
shl ecx, 9
and ecx, edi
or ecx, esi
xchg esi, edi
and edx, edi
mov ecx, 0x98180183
or ecx, esi
and ecx, 0x981868ca
or ecx, edi
shr edx, 8
and edi, edx
nop
inc edi
jmp 0x4960fa
push 0x9032be78
and ecx, edi
sub edx, esi
or esi, ecx
add edi, esi
xor esi, edx
sub ecx, edi
and esi, edx
jmp 0x49596f
pop ebx
sub esi, 0x981feaae
shr ecx, 0xf
add ecx, esi
mov esi, 0x98208633
and edx, edi
add ecx, esi
neg edi
sub esi, edx
add esi, ecx
not edx
jmp 0x49725b
push 0x902262bd
sub edi, esi
xchg edx, esi
mov edi, ecx
sub esi, edx
xor edx, esi
add ecx, edi
xor esi, edx
jmp 0x495593
pop ebx
nop
xchg edi, edx
shr edi, 0x1d
and edi, edx
jmp 0x497f6a
push 0x9022f760
rol esi, 0x1e
shr edx, 0x19
and edx, ecx
dec esi
or esi, edx
mov esi, ecx
mov ecx, esi
jmp 0x4961f3
call ebx
xor esi, edi
shl edi, 0x17
shr ecx, 5
xchg edx, ecx
shr edi, 0x1e
or ecx, edi
xchg edx, edi
jmp 0x49784f
mov ebx, 0x2774562b
xor edx, 0x983ccd3f
xchg edx, ecx
bswap edi
and ecx, esi
or ecx, edi
xchg ecx, edi
or ecx, 0x983e07f8
add ecx, esi
and edi, ecx
xor esi, 0x983eab65
sub edi, 0x983edff1
xchg edx, ecx
or edi, ecx
add edx, edi
and edx, 0x983fd06f
jmp 0x495ab6
push 0x90335dee
or esi, edi
and ecx, 0x9842a0a6
add esi, ecx
add ecx, edx
add ecx, edi
xor edx, 0x98443991
jmp 0x4965bc
push 0x901e3443
and edi, edx
mov edx, 0x984ac747
rol ecx, 0xc
or ecx, 0x984b2d57
or edi, esi
xor esi, 0x984b9470
nop
xchg edx, ecx
sub esi, edx
and edx, edi
sub ecx, edi
mov esi, 0x984ed454
xchg esi, edi
jmp 0x4951f9
call ebx
xor ecx, edx
or esi, 0x9852bd7c
sub esi, ecx
neg esi
rol ecx, 0x1e
add esi, 0x985390ab
mov esi, edi
add edx, ecx
shl edi, 0x18
jmp 0x497198
call fcn.004960c6
xor esi, 0x9858aa73
sub edx, esi
xor esi, 0x9859123d
xor edi, esi
add ecx, esi
mov esi, edi
mov esi, 0x9859d901
sub edx, 0x985a0dc0
xor edx, ecx
and edi, 0x985a810e
and edi, edx
or esi, 0x985ae83c
rol ecx, 0x1e
dec esi
add edi, ecx
or edx, edi
jmp 0x4955e2
call ebx
xor ecx, esi
sub esi, ecx
bswap edi
dec ecx
xor ecx, edx
xor ecx, edx
or ecx, esi
xchg esi, edx
add esi, ecx
ror edi, 0x18
and edx, edi
xchg edx, ecx
mov edx, 0x9871d01d
jmp 0x4970de
push 0x90307d5e
xor edx, edi
or edx, 0x9872c603
and edi, esi
ror edi, 0x1e
dec edi
xor edx, esi
xchg esi, edx
and edx, ecx
xchg esi, edx
and edi, esi
add edx, esi
jmp 0x495754