Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xffffff1e
jne 0x401093
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
ret
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xfffffed7
jne 0x401112
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff13
jne 0x4011a0
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffefa
jne 0x401233
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.shell32.dll_DAD_DragLeave
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.ntdll.dll_ZwAreMappedFilesTheSame
call sub.shell32.dll_DAD_DragLeave
ret
jmp 0x498558
inc ecx
jmp 0x498d37
push 0x77b25945
xchg edi, ecx
dec edx
xor ebx, 0x7cb48fe5
mov edx, ebx
or ebx, edi
sub ecx, edi
bswap ecx
add edx, edi
add ebx, ecx
or edi, ebx
sub edi, ebx
and edx, edi
jmp 0x499d54
pop esi
xor ebx, edx
rol edi, 6
xor ebx, edx
xor ebx, edx
add ebx, edx
neg ebx
rol ecx, 0xa
add edi, 0x7cc956f0
sub ecx, edi
xor ebx, 0x7cca232a
jmp 0x49a534
push 0x77b1648b
and edx, 0x7cd907e0
add ecx, ebx
inc ecx
dec edi
add edi, 0x7cdaf90c
jmp 0x49959a
call fcn.0049b34b
rol edx, 0x18
add ebx, 0x7cdc07ad
mov edi, ebx
sub ecx, 0x7cdd0569
add ebx, edx
or ecx, 0x7cddc933
jmp 0x498a6f
push 0x77b5ae9c
and edx, 0x7cde6175
or edx, ebx
sub ebx, ecx
bswap ecx
sub ecx, edi
neg ebx
add edx, 0x7ce16e66
mov ecx, edi
jmp 0x49a953
push 0x77b209a2
mov ebx, ecx
xchg edx, ecx
add edx, ebx
ror edx, 0x1b
mov ebx, edx
or edx, 0x7ce4af4d
xor ebx, edi
and edi, ecx
and edi, 0x7ce602ca
and edx, edi
and edi, ecx
rol ecx, 0x18
xor ecx, edi
jmp 0x4985bf
push 0x77a29c3a
or ecx, edi
inc ebx
inc edx
mov edi, ebx
add ebx, ecx
xor edx, 0x7cee4b9d
add edi, 0x7ceec7d7
or edx, 0x7cef431b
ror ebx, 0x16
xor ebx, ecx
xor edx, ecx
jmp 0x498fbf
call fcn.0049b34b
shl edi, 0x1e
xor edi, edx
jmp 0x49abb9
push 0x77a03811
rol ebx, 0x1d
shl ecx, 0xf
xor edi, 0x7cf83d55
shl edx, 0x1f
sub ebx, 0x7cf93e83
mov edx, ebx
jmp 0x49aad6
mov esi, 0x2774562b
sub edi, ebx
xor edx, ecx
or ebx, edx
add ecx, edx
dec edi
bswap edi
bswap ecx
and ecx, edx
mov ecx, 0x7cfde52c
xor ebx, edx
jmp 0x499bb0
pop esi
and ebx, 0x7cfee6ec
mov edi, ecx
or edi, 0x7cffa4be
xchg edx, edi
or ecx, edi
xchg ecx, edx
or edi, ecx
xchg ebx, edi
or ebx, edi
dec edi
shr edi, 0x1c
jmp 0x49b002
pop esi
or edi, 0x7d06c348
mov edi, ecx
add ecx, edx
neg ebx
dec edi
or edi, ebx
sub ebx, ecx
add edx, 0x7d09c669
add edi, ebx
sub ebx, edx
ror ecx, 0x17
sub ebx, 0x7d0bb834
sub edx, ecx
ror ecx, 0x18
jmp 0x499dec
pop esi
xor ecx, edx
mov edx, 0x7d0d88c0
dec edi
bswap edi
xor ebx, ecx
xchg ecx, edi
bswap edi
xor ebx, edx
jmp 0x4987e1
pop esi
bswap ecx
or ecx, ebx
and edi, edx
sub ebx, 0x7d1733ba
not ecx
xchg edx, edi
mov edi, edx
sub ecx, ebx
sub ecx, edx
and ebx, edx
and edi, ebx
jmp 0x4996d6
push 0x779bf695
and edx, ecx
shl edi, 0xf
and edi, edx
xor edi, ebx
ror ecx, 8
xor edx, ecx
not edx
and edx, edi
shl edx, 0x12
jmp 0x49a897
push 0x77b64faa
add edi, ecx
or ecx, ebx
sub ecx, edx
xor ecx, 0x7d2ac334
shl ecx, 2
neg ebx
add edx, edi
or edi, edx
or ebx, edx
jmp 0x499f58
push esp
sub edx, edi
inc edi
add ecx, edi
neg edi
or ecx, ebx
mov edx, 0x7d5721a9
add edx, ebx
xor edx, ecx
xor ecx, edx
xchg ecx, edi
sub edx, ebx
jmp 0x499e25
push 0x779ead9a
xor edx, ecx
add ebx, 0x7d5ec27b
dec ebx
mov edx, 0x7d5fab5c
xchg edx, ebx
xchg edi, ecx
add ecx, 0x7d60d530
xor edx, edi
jmp 0x49b2c7
push 0x77a501ac
sub ecx, edx
xor ecx, ebx
and ebx, edi
xchg ebx, edx
jmp 0x4991dd
mov esi, 0x123b2f04
neg edx
xchg edi, ecx
and edi, ecx
and ecx, ebx
shl edx, 1
xor ebx, edx
rol ecx, 0x1b
xchg ecx, edi
add ebx, 0x7d6e3a33
jmp 0x499c02
pop esi
neg edi
xor ecx, edi
and edx, edi
not ecx
add edi, ecx
xchg edi, ecx
dec ebx
mov edi, ebx
xor edi, 0x7d77753f
or edi, ecx
shl edi, 9
xchg ebx, edi
xor edi, edx
jmp 0x49a00c
pop esi
inc ebx
xor ebx, edi
xor edx, ebx
sub edi, edx
and ebx, ecx
mov edi, 0x7d80165d
or ecx, ebx
add edx, edi
jmp 0x498c1e
pop esi
add edi, ebx
mov edi, 0x7d861bb4
neg ecx
or ecx, edx
xchg ecx, ebx
xchg edx, ebx
or edi, 0x7d88865c
xchg edi, ebx
sub ecx, edi
rol ecx, 9
jmp 0x49b671
pop esi
ror edi, 0x17
neg ebx
sub edx, ecx
sub ecx, edx
inc edx
add ecx, 0x7d8fd770
add edx, ebx
dec edi
jmp 0x498ee7
push 0x77a8e221
xor edi, ecx
neg ecx
mov edi, edx
xor edi, 0x7d96c4a9
bswap edi
jmp 0x499761
call esi
and edi, ecx
neg ecx
or ebx, edx
sub ebx, edx
bswap edi
add edx, ebx
or edx, ebx
or ebx, 0x7d9f3330
jmp 0x498bdf
push 0x779b9321
xchg edx, ecx
add edi, ecx
add edx, edi
bswap ebx
xor edx, edi
bswap ebx
and ebx, edx
sub edi, ecx
shl ebx, 0x11
jmp 0x49a781
call esi
add ebx, edi
xor ecx, edx
ror edx, 0x12
mov edx, ecx
xchg edi, edx
xor ecx, ebx
sub edx, edi
ror ecx, 0x12
sub edi, 0x7db83468
and edi, 0x7db89ec0
jmp 0x49b567
pop esi
sub edi, ebx
sub edi, ecx
inc ebx
jmp 0x4986d0
mov esi, 0x2774562b
xchg edi, ecx
xor ebx, edx
sub edx, 0x7dc0551b
and ecx, 0x7dc0893b
mov ebx, ecx
xor ecx, edx
ror edi, 0xb
xchg ecx, ebx
jmp 0x49b21f
push 0x77ae7849
and edx, 0x7dc34c88
rol ecx, 0xe
sub ecx, edi
or ecx, edx
shr edx, 9
xor ecx, 0x7dc5e46f
jmp 0x49af99
push 0x77ad3727
xor edi, ecx
mov edi, ebx
sub edi, ebx
add ebx, 0x7dc6d1bb
shl edi, 3
bswap edx
sub ecx, ebx
mov ecx, 0x7dc7b117
not edi
sub edi, 0x7dc81c50
dec ecx
sub ecx, ebx
neg ebx
or edx, 0x7dc8f3d4
add edx, 0x7dc92446
jmp 0x49a8b0
pop esi
or edx, ecx
dec edx
mov ebx, ecx
neg edx
bswap ecx
jmp 0x49a70b
push 0x77ae2ec9
xor edx, edi
mov ebx, edx
rol edi, 4
sub edx, ecx
ror ecx, 0x14
jmp 0x498e6d
push 0x77a2cbfe
add ebx, edx
shl edi, 0x17
add ebx, edx
mov edx, edi
sub edx, 0x7ddac953
and edi, edx
mov edx, 0x7ddb30fa
xor edx, ebx
jmp 0x498e2a
call fcn.0049b34b
xor ebx, edi
add ecx, edi
neg ebx
and ecx, edi
xor edi, ecx
jmp 0x49b2f6
mov esi, 0x123b2f04
sub ebx, ecx
add edx, 0x7e0b8801
sub edx, edi
shr ecx, 8
or edi, edx
mov edx, 0x7e0d3164
jmp 0x49a6d1
pop esi
and edi, ecx
and ebx, ecx
mov edi, ecx
xor ebx, 0x7e0ef6ff
sub ecx, ebx
add edx, ecx
xchg edx, ebx
bswap ecx
jmp 0x4988d7
pop esi
xor edx, edi
sub ebx, edx
mov edx, ebx
and edi, 0x7e256159
mov edx, 0x7e25eebe
not ecx
add edi, ebx
sub edx, ecx
and edi, 0x7e277107
jmp 0x49a308
pop esi
mov ecx, 0x7e27fe22
sub edi, 0x7e2860bf
ror ebx, 0x1c
mov edx, 0x7e29393c
xor edi, edx
and edi, ebx
and ecx, edi
add ecx, ebx
jmp 0x498860
push 0x77addc80
xor edi, 0x7e58248c
ror edx, 2
or edx, ebx
and edx, ecx
xchg edi, edx
jmp 0x498fa9
call esi
mov edx, 0x7e6b659c
or edi, 0x7e6bc868
and edx, ecx
mov ecx, edi
dec ebx
sub edi, edx
xor ebx, 0x7e6d844d
xor edi, edx
rol ebx, 9
jmp 0x49a9dd
call esi
add ebx, 0x7e6e43ff
dec edi
dec ebx
xor ebx, edi
or ecx, edx
or ecx, edi
or ebx, edx
xor ebx, edi
sub ebx, ecx
jmp 0x498822
push 0x77b1bfb7
add edx, 0x7e718d9e
mov ebx, ecx
add ebx, edi
xchg edx, ebx
jmp 0x49872f
pop esi
shr edx, 0xc
shr ecx, 0xe
add edi, ebx
mov ebx, edx
sub edi, 0x7e73e1cf
jmp 0x4992ab
push 0x779f056b
sub ecx, edx
ror edi, 2
not ecx
inc ecx
not ebx
or ebx, edx
xchg ecx, ebx
shl ebx, 0x13
xor ebx, ecx
xor edi, ebx
ror edi, 8
mov edi, edx
add edx, ecx
jmp 0x498802
push 0x77a0935d
and edi, ecx
mov edi, edx
or edx, ecx
and edx, edi
ror ecx, 0x17
and edi, edx
xchg edx, edi
or edi, 0x7e899f90
neg edx
xchg ebx, edi
or ebx, ecx
jmp 0x49ac7f
call fcn.0049b34b
add ebx, edx
not ebx
neg edi
xchg edi, ecx
not edx
xor edi, ebx
or ecx, edx
shr edx, 0x19
xor ebx, edx
sub edi, edx
jmp 0x49afe2
pop esi
mov edi, 0x7e97dd35
and ebx, edx
shl ebx, 0x1d
and edx, edi
xchg ebx, ecx
ror ecx, 0x18
ror edi, 3
rol edx, 0x1f
xchg edx, ebx
jmp 0x4998d6
push 0x77a93035
or edx, ebx
shr edx, 8
mov edi, ebx
add edx, edi
xor ebx, edi
mov edi, edx
sub ebx, edi
xor ebx, ecx
mov edi, edx
jmp 0x499ff7
call fcn.0049b34b
not edi
bswap ecx
add edi, edx
or edx, edi
mov ecx, 0x7eb9d240
add ebx, edx
xchg edi, ecx
mov ecx, edi
and edi, edx
sub edi, ecx
jmp 0x49956c
pop esi
and ebx, ecx
xor ebx, ecx
neg ebx
mov ebx, edx
xchg ecx, ebx
xchg ebx, edi
xor ecx, 0x7ec2ee84
not ebx
rol ebx, 0x18
jmp 0x49b194
pop esi
dec ecx
xor edi, ecx
sub edx, edi
shl edi, 0xd
bswap edi
sub edi, edx
rol edi, 0x19
rol ebx, 0x10
and ebx, edi
or ebx, ecx
xchg edi, ebx
mov edx, ebx
jmp 0x49996a
push 0x401400
xchg edi, ebx
xchg edx, edi
and ecx, edx
xor edi, edx
shr ecx, 0xd
xor ebx, ecx
rol edx, 0x1e
neg ecx
shl ecx, 0x12
xor ebx, edi
not edi
xchg ebx, edi
sub ebx, 0x7eed0cb6
jmp 0x49a385
pop esi
xchg ecx, ebx
sub edx, ecx
inc ecx
shr edi, 9
dec edi
mov edx, 0x7efadb79
add edi, ecx
or ebx, 0x7efbc648
or edx, edi
add edx, ecx
or ecx, 0x7efcf163
sub ecx, edx
inc ecx
xor edi, ebx
jmp 0x498e8d
call fcn.0049b34b
xchg ebx, ecx
dec ebx
mov edx, edi
xor edx, ebx
mov ebx, edi
and edx, ebx
add ecx, edi
inc ecx
add ebx, 0x7f326cd9
jmp 0x499548
call fcn.0049b34b
sub edi, edx
or edi, edx
xchg ebx, edi
add ecx, ebx
mov edi, 0x7f3a41ba
ror edi, 0x10
inc ebx
sub edx, ecx
mov edi, 0x7f3c02f6
and edx, 0x7f3c98cc
and edi, 0x7f3d1aed
jmp 0x49aaa9
pop esi
xor edi, ebx
or edi, ebx
rol edx, 0xc
add ecx, ebx
or edi, edx
mov edi, 0x7f5ea109
xchg ecx, edx
xor edx, ebx
nop
jmp 0x498ba6
mov esi, 0x2774562b
bswap ecx
mov ecx, edi
or ecx, edi
mov edx, 0x7f6198d1
or edi, 0x7f620c5b
shl edx, 5
xor ecx, edx
jmp 0x49b23e
pop esi
sub edx, 0x7f78c0fd
add ebx, 0x7f7929ff
or edx, edi
xchg edx, edi
or ecx, ebx
mov edi, ebx
or ecx, ebx
or ecx, edx
jmp 0x49a223
pop esi
or edx, ebx
add ecx, edx
xor ebx, edx
or ebx, edi
add ecx, ebx
sub edi, ebx
xor ebx, edx
rol edx, 0xe
sub ebx, edx
xchg ecx, edx
jmp 0x4992ce
push esp
xor ecx, ebx
xor ecx, 0x7f7da8e8
mov ecx, ebx
or edx, ebx
mov edi, edx
mov ebx, edi
xchg ecx, edx
add edx, edi
shr edi, 0xd
jmp 0x49b52d
push 0x77a45185
sub ebx, edx
sub ebx, edi
mov ebx, 0x7f8b5bd3
mov edx, edi
and edx, edi
sub ebx, 0x7f8bfc5d
sub ebx, ecx
mov ebx, ecx
dec ebx
jmp 0x49a7df
mov esi, 0x123b2f04
sub edi, 0x7f9899fe
neg edi
ror edi, 0xa
or ecx, edx
or edx, ecx
and ebx, 0x7f9a9777
not ecx
ror edx, 0x17
and ecx, edi
ror edi, 8
sub ebx, 0x7f9c9dc3
jmp loc.00498b80
push 0x779d7db2
shr edx, 0x15
add edx, edi
or edi, 0x7f9de655
shl edi, 0x1c
inc ecx
or edx, ecx
rol ebx, 1
mov edi, ecx
xor edi, edx
mov edx, edi
sub edi, 0x7fa045a5
not ebx
mov ecx, 0x7fa0b137
and edi, ecx
sub edi, edx
mov ecx, edi
jmp 0x499fcf
push 0x779da8e5
add ebx, 0x7fa2900f
xchg ecx, ebx
xchg ebx, ecx
and ecx, edi
neg edi
xor ecx, ebx
xchg ecx, ebx
mov ebx, edi
xchg edx, edi
add edx, 0x7fa4711d
and ebx, edx
jmp 0x49a96b
push 0x77a9925a
xor edx, edi
or ecx, 0x7fa525d3
shr edi, 0x14
jmp 0x49ae10
pop esi
neg ebx
or edi, ebx
mov ecx, ebx
xchg edx, ebx
or edx, 0x7fa6c8ef
and edi, ecx
xchg edx, edi
mov edx, ecx
xchg ecx, edx
xor edx, ebx
or ecx, edx
ror edx, 0xb
xchg ecx, edx
sub edx, 0x7fa8a8f9
jmp 0x49a696
pop esi
or ecx, ebx
add ebx, edi
or edx, ecx
jmp 0x499ebc
push 0x97158
and edx, 0x7fe027f4
xchg edx, ebx
add edx, ebx
xchg ebx, ecx
xor ebx, 0x7fe1a922
sub ecx, edx
or edx, ecx
rol ecx, 0x17
or edx, ebx
dec ebx
add edx, ecx
xchg edi, edx
xchg edx, ebx
xchg edx, ecx
jmp 0x4998f6
pop esi
neg edx
add edx, ecx
shl edx, 4
inc edx
inc ebx
xchg edx, ecx
shl ecx, 0x13
or edi, ebx
mov ecx, ebx
xor ecx, edi
not edx
jmp 0x498e04
call esi
and edi, edx
dec ebx
or edi, ebx
or edi, ecx
and edi, ecx
or ecx, 0x7fffbdda
xor edi, ebx
jmp 0x49ab56
pop esi
shl edx, 0xd
inc edx
neg edi
bswap edx
add ebx, edx
xchg ebx, ecx
and edx, 0x8007fd2b
sub ecx, edx
jmp 0x498641
push 0x77a27028
or ebx, ecx
ror ecx, 4
shr ebx, 0x19
or ebx, 0x800f31f7
and edx, 0x800f9678
rol ecx, 0x1c
shl edi, 0x19
jmp 0x49877e
push 0x77b40d4b
sub edx, ecx
inc edx
xchg edx, edi
sub ecx, ebx
rol ebx, 0x11
xor ebx, edi
mov edi, ebx
and edi, 0x8035f908
shl edx, 1
sub ebx, 0x8036bd81
xor edx, ebx
or edx, edi
jmp 0x49b577
pop esi
xchg ebx, edx
neg edi
dec edi
mov edi, ebx
shr edi, 0x19
xchg ebx, ecx
and edi, ecx
xor edx, ecx
xchg ecx, edi
xor edx, 0x80454573
neg ecx
jmp 0x49a6f2
pop esi
and ebx, 0x804643c4
sub edx, ecx
add edi, 0x80470879
dec edi
ror edx, 0x1b
mov ecx, 0x80484f13
jmp 0x49ae37
pop esi
mov edi, edx
shr ecx, 0x1b
jmp 0x49a5b4
pop esi
xchg edi, ecx
mov ebx, 0x80608c53
xchg edx, ebx
and ecx, edi
not ecx
shl ecx, 0x1d
add edi, ebx
or edi, ecx
jmp 0x49888f
call fcn.0049b34b
sub ebx, edi
mov ebx, edx
shl edx, 0x1d
xchg edi, edx
sub ebx, ecx
not ebx
xor ecx, 0x806672bd
nop
bswap edi
nop
jmp 0x498dc1
mov esi, 0x4132136a
add edi, ecx
xor ebx, edx
mov ecx, edx
shr ecx, 0x19
add ecx, edx
bswap ecx
bswap edx
jmp 0x4986ea
push 0x77a21884
sub edi, ecx
add ecx, edx
shr ebx, 0xf
xor ecx, edx
add ecx, ebx
jmp 0x49b473
push 0x779bcb8d
mov edx, 0x807964ac
sub edi, edx
add ecx, edi
mov ebx, ecx
mov edi, edx
inc ecx
mov edx, ecx
add ecx, edx
add ebx, ecx
xchg ebx, ecx
bswap edi
mov ebx, 0x807ddda9
not ecx
or edi, 0x807eac5c
not ebx
jmp 0x4988f7
push 0x77b57cda
mov edx, ebx
xchg edx, ecx
or edi, 0x808073a1
sub edx, ecx
and edi, ecx
ror edi, 8
add edi, ebx
and edi, ecx
and ebx, 0x8084fa52
nop
inc edx
and edx, ecx
bswap ebx
and ebx, edx
jmp 0x49870d
push 0x77a47de1
sub ebx, ecx
xchg edi, ecx
or ecx, edi
shr ebx, 0x1f
neg edx
jmp 0x49adcf
call esi
or edi, 0x8089aa80
mov edx, ebx
xchg ebx, edi
or ebx, 0x808ad41b
dec edi
sub edi, ecx
inc edx
xchg edx, edi
xor ecx, ebx
xor ebx, 0x808d4d08
sub ecx, edx
jmp 0x4997c8
push 0x779c1d1b
xor ebx, ecx
add ebx, edi
and ecx, 0x809d5bf9
mov ebx, edx
or edx, ebx
inc ebx
jmp 0x49b60a
push 0x77ad8ae1
sub ecx, ebx
add edx, ebx
and edx, edi
not edi
xor edi, 0x80a0f231
mov ecx, 0x80a167f6
mov edi, 0x80a1dda9
shl edx, 0x18
mov ecx, edi
jmp 0x49947f
push 0x77b5fea5
xor edx, ebx
sub ecx, ebx
xor ebx, edi
add edi, edx
mov ecx, edx
xor ecx, edx
and edi, ecx
jmp 0x498971
mov esi, 0x2774562b
sub edx, ecx
inc ecx
or edx, 0x80b429dc
jmp 0x49b10e
pop esi
and edi, ebx
mov edx, ecx
and ecx, 0x80c2bc7c
neg ebx
shl ecx, 0x17
and edx, edi
mov edi, ebx
add edi, ecx
xor ecx, edi
xor edi, edx
nop
shl ecx, 7
add ecx, 0x80d3be09
mov ecx, edi
jmp 0x49a6b7
pop esi
rol ecx, 0x19
sub edx, 0x80db27e2
shr edx, 0xd
shl edi, 8
xor ebx, ecx
or ecx, edi
xor edx, ebx
add edi, edx
jmp 0x4995b0
call esi
sub ecx, 0x80e8e2dc
xchg ebx, edx
xor ebx, 0x80e9b0f4
mov edx, ebx
mov edx, edi
sub edi, edx
xchg ecx, edx
jmp 0x4991fb
push 0x77a067a3
add edi, ecx
or edi, ebx
neg edx
rol ecx, 0xe
xor ecx, ebx
and ebx, ecx
add ecx, edi
xchg ebx, edi
mov ebx, edi
or ebx, edi
add ebx, ecx
jmp 0x499656
pop esi
shr ebx, 0xa
mov ebx, 0x80ffd12c
ror ecx, 0x17
sub ebx, edi
bswap edx
xchg ebx, ecx
and ecx, 0x81020021
and edx, ebx
mov edi, ebx
mov edi, edx
sub edi, 0x8103a446
jmp 0x49b6f7
call esi
not ebx
add ecx, edi
not ecx
xor edx, 0x810db6d1
inc ebx
sub edx, ebx
sub ecx, 0x811078d0
mov ecx, edi
add edi, ecx
jmp 0x49aa3e
push 0x77b55393
xchg edx, edi
bswap edi
xor ecx, ebx
add ebx, edx
xor edx, 0x81136d84
not ebx
rol edx, 0x13
mov edx, edi
not ecx
ror ecx, 0x19
rol edi, 0x1c
or ecx, 0x81166785
ror edi, 0x17
xchg ecx, edi
jmp 0x49a7b2
push 0x77a0becf
ror edx, 0x1c
sub edx, edi
bswap ecx
jmp 0x49b418
call esi
and edx, ecx
xchg ebx, edi
add edx, edi
xchg ecx, edi
mov edi, edx
xchg ecx, edx
xchg ecx, edi
add ecx, ebx
or ecx, edx
xor ecx, edx
jmp 0x499e0a
pop esi
ror ebx, 3
mov edx, 0x813a4a5e
and edx, 0x813aacc4
ror ecx, 0x1f
and edi, edx
sub edi, 0x813bf70d
not ecx
add ecx, edx
mov edx, edi
and ebx, 0x813d98b7
mov ebx, edi
jmp 0x49a5d4
pop esi
xchg ecx, edx
bswap ebx
xor ebx, ecx
add edi, ebx
mov ecx, 0x814a9124
jmp 0x49ad12
push 0x77a4ae25
add edx, ecx
mov ebx, 0x81506c3a
and ecx, 0x8150d4ff
xor edi, 0x8151538d
sub edi, ecx
sub edx, edi
add edi, 0x815273b9
xor edx, 0x8152df46
xor edi, ebx
jmp 0x49b32d
push 0x77a9e7ef
or ecx, 0x8155a60b
sub ecx, edi
add edi, ecx
xor edx, edi
shr edi, 0x18
sub ecx, 0x8157a55b
add edx, 0x81580a47
mov ebx, ecx
jmp 0x498b1a
pop esi
mov edx, 0x8158f53a
ror edi, 6
and ebx, edi
and edx, edi
dec edi
mov edx, edi
add ebx, 0x815b76f3
and edx, edi
jmp 0x499f87
mov esi, 0x123b2f04
dec ebx
mov ebx, 0x817db6a4
sub edx, ecx
neg edi
add ecx, edi
and ecx, edi
and edi, ebx
and ecx, ebx
sub ebx, ecx
jmp 0x4987a9
call esi
mov edx, ebx
add ebx, edi
add edx, edi
xchg ecx, edi
xchg ecx, edx
or ebx, 0x8186c5b6
dec ecx
bswap ecx
xor edi, 0x818811c6
jmp 0x499d39
pop esi
mov edx, edi
bswap ecx
and ecx, edi
xor ecx, ebx
sub edx, ecx
xor edx, 0x818b3a8e
xchg ecx, edi
or ebx, edx
shr edi, 0x13
rol edi, 0x14
xchg edx, ecx
ror ecx, 0x13
sub edi, edx
and edi, ecx
sub ecx, edx
mov ecx, edx
jmp 0x49abd9
call fcn.0049b34b
xor ebx, 0x81a4a27e
add ebx, edi
neg edi
shl edi, 0x14
neg edx
rol edi, 0x1c
xor ecx, 0x81a6f194
sub ecx, 0x81a759bb
dec ebx
and ecx, edi
sub ebx, edi
mov ecx, edx
jmp 0x49a7f4
pop esi
and edx, edi
or ebx, edx
xor ebx, edx
xor ebx, edx
xchg ebx, edi
not ecx
mov ebx, ecx
add edx, ecx
not ebx
inc edx
neg ebx
add ecx, ebx
neg ecx
jmp 0x498aad
call fcn.0049b34b
xor edi, 0x81c46122
ror ebx, 8
mov edi, ecx
add edx, ebx
add ebx, edi
xor ebx, edx
sub ebx, edi
xor edi, ecx
jmp 0x49acbf
call fcn.0049b34b
add ecx, edi
or edx, edi
rol ebx, 0x18
or ebx, 0x81c8df25
xor edi, ebx
xchg edi, edx
xor ecx, edi
jmp 0x498cc6
push 0x779ed8cf
sub ebx, edx
xor ecx, ebx
or edi, ecx
add edi, edx
and edx, ecx
xor ecx, ebx
xchg ebx, edx
bswap ecx
xchg ecx, edx
add ebx, edi
sub edi, 0x81db27dc
mov ebx, ecx
add ebx, edx
add ebx, 0x81dc522c
inc edx
jmp 0x499605
call esi
mov ebx, edx
add ecx, edi
mov ebx, edx
xchg edx, ebx
or ebx, edx
bswap ebx
mov edi, edx
xor ebx, ecx
or edi, ebx
rol edx, 7
bswap edx
add edx, ebx
jmp 0x49ad94
push 0x77a4dae4
inc edx
not edi
and edx, 0x81e52407
inc edx
inc ecx
sub ebx, ecx
inc ebx
not edi
or edx, ecx
mov ecx, ebx
jmp 0x498af2
mov esi, 0x123b2f04
and edx, 0x81fd012e
and ebx, edx
inc ecx
sub edx, 0x81fe33c1
not ecx
sub ebx, edi
sub ecx, 0x81ff8bf8
or ecx, 0x81ffed46
sub ebx, 0x8200540e
shr ecx, 0x12
mov ebx, edi
jmp 0x49969e
mov esi, 0x2774562b
bswap ebx
and edx, 0x82022cbf
not edi
and edi, ebx
xor ebx, edx
rol ecx, 0x1a
xchg edx, ebx
and ebx, edi
xchg ebx, ecx
and ecx, edx
and edx, edi
and ebx, edx
jmp 0x49977e
push 0x77a24478
or edx, ecx
mov ebx, edi
sub ebx, edx
sub ebx, edi
xchg edi, ecx
add edi, ecx
and ecx, edi
mov ecx, 0x8209a44b
sub ecx, 0x820a1d0e
xor edx, 0x820a84d7
not edx
and edx, edi
and ebx, edi
add ebx, edi
shr ecx, 0x19
jmp 0x49a403
push 0x40
mov ecx, ebx
neg edx
ror edi, 0x17
and ebx, 0x821b3380
mov edx, edi
sub edi, ebx
jmp 0x49a2a0
pop esi
mov edi, edx
neg ebx
xchg ebx, edx
sub edx, ecx
sub ebx, edi
jmp 0x498b5c
push 0x77b43e92
mov edi, ebx
neg ecx
xor ecx, ebx
xchg edi, ecx
rol edi, 0xb
xchg ecx, edi
sub edi, 0x82247e42
or edx, ebx
add edi, edx
mov ebx, ecx
add edi, edx
shl ecx, 0xa
rol ebx, 0x15
add edx, edi
or edi, ebx
shr ebx, 0xb
jmp 0x49b44c
mov esi, 0x2774562b
bswap edx
and edi, edx
xor edi, 0x8238dcc2
or ecx, ebx
xchg ebx, edi
sub edi, ecx
add ecx, edx
or ecx, edi
sub ebx, edx
shl edi, 0x14
shl edx, 0x1e
neg edi
not ebx
jmp 0x499119
pop esi
or edx, 0x8242de34
nop
add edx, ebx
not ecx
mov edx, ecx
add ecx, ebx
and ecx, 0x824545b7
xchg ebx, ecx
dec ecx
or edi, ecx
xchg edi, edx
jmp 0x49a3bd
push 0x77a88c7f
or ebx, edi
and ecx, 0x82529a22
inc ecx
ror edi, 7
add ecx, edx
mov edx, 0x825377b2
and edx, 0x8253a87f
xchg ebx, edi
jmp 0x498c5c