Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
or edx, 0x5363ee4e
call sub.kernel32.dll_GetSystemDefaultUILanguage
shl edx, 5
sub edi, ecx
shr edx, 0x19
cmp eax, 0xffffff0c
jne 0x401097
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
ret
mov ecx, edx
and edx, edi
xor ecx, 0x5369c990
call sub.kernel32.dll_GetSystemDefaultUILanguage
sub esi, 0x536a7462
and ecx, 0x536ae608
shr edx, 0xb
not edx
not esi
xor edi, esi
or edx, esi
cmp eax, 0xfffffee6
jne 0x40114b
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_CoCreateGuid
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_StgPropertyLengthAsVariant
ret
sub esi, edx
or ecx, esi
sub edx, ecx
call sub.kernel32.dll_GetSystemDefaultUILanguage
shl ecx, 0x15
sub esi, edi
add edx, 0x5372e8ca
neg edx
xor edi, edx
cmp eax, 0xffffff22
jne 0x4011f3
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_CoCreateGuid
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
ret
mov esi, ecx
and edx, ecx
mov esi, ecx
shr edx, 6
xor edx, esi
and edi, edx
and ecx, 0x5379d394
call sub.kernel32.dll_GetSystemDefaultUILanguage
or ecx, edx
xor esi, edx
sub edx, ecx
sub edx, 0x537bd12e
add ecx, esi
mov edi, 0x537cb384
add edi, 0x537d2536
cmp eax, 0xffffff34
jne 0x40128a
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.ole32.dll_StgPropertyLengthAsVariant
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.advapi32.dll_BuildTrusteeWithObjectsAndNameA
call sub.ole32.dll_CoCreateGuid
ret
jmp 0x4944fa
xchg ecx, edx
xchg ecx, edi
xchg esi, edi
shl edi, 0xb
shr esi, 0x14
jmp 0x4956a2
mov esi, 0x4132136a
xor ecx, 0x5948cd7a
and ecx, ebx
sub edx, ebx
ror ecx, 9
dec ecx
add edi, ecx
add edi, edx
ror ecx, 0xd
or edi, 0x594cd600
bswap edi
or edx, edi
or edx, edi
jmp 0x497359
pop esi
and ebx, edi
and edx, 0x596de3a4
mov edi, edx
and ecx, edx
jmp 0x4960ee
push 0x40
mov edx, ebx
add edx, ecx
xchg ecx, edx
inc ebx
xor ebx, 0x597167d4
and edx, ecx
jmp 0x496168
call fcn.00497264
add ebx, edx
add edi, edx
ror edi, 9
xor ecx, edi
or edx, ecx
shl edx, 0x1c
jmp 0x4961ae
push 0x548e461a
and edi, ebx
ror ebx, 0x16
bswap ecx
mov ebx, 0x59883298
jmp 0x496d9c
push 0x548413f4
xchg ebx, edx
or edx, 0x59913d2e
and ebx, edx
inc edx
xor edi, edx
xor ebx, 0x59932da0
jmp 0x496453
push 0x548d3fe8
mov ecx, edi
xchg ebx, edi
rol ebx, 0xe
xor edi, ebx
jmp 0x496071
pop esi
bswap edx
or edx, 0x599653d0
shl ebx, 6
inc ecx
shr ebx, 0xc
add edi, edx
mov edi, ecx
mov ebx, edi
jmp 0x495002
push 0x5470bfee
add edx, ecx
sub ebx, ecx
or edx, 0x599ab344
sub ecx, ebx
mov ecx, edx
ror ebx, 0x18
shr ebx, 0x1b
and edi, edx
xor ebx, ecx
and edx, ebx
xor edi, ebx
add ecx, edi
jmp 0x494fc9
pop esi
xchg edi, ebx
add edi, edx
or ecx, edx
shr ebx, 5
jmp 0x4970fd
pop esi
shl ecx, 0x19
add edi, ebx
xchg ecx, edi
xor edx, edi
and ecx, edx
xchg edx, edi
xor edi, edx
and edx, 0x59a85c58
mov ebx, edi
mov edi, ecx
jmp 0x49621d
push 0x5491c990
rol edx, 5
add ecx, edx
bswap edi
add ecx, 0x59ab56a4
shl edi, 0x16
xor ecx, 0x59ac5626
xor ecx, edi
sub ecx, edx
and edx, ecx
sub edi, edx
sub edx, ebx
sub edi, 0x59af386e
jmp 0x494fe3
pop esi
dec edi
or edx, 0x59b78ce0
mov ecx, edi
add ecx, edi
add edi, ebx
or edx, 0x59b97300
shl edx, 4
xchg edx, ecx
and ebx, edx
mov ecx, edx
inc ecx
shr edi, 3
jmp 0x494719
push 0x5477b4e6
add ebx, ecx
xchg ecx, ebx
shr edx, 3
xchg edi, ecx
shr edx, 0x1f
or edx, edi
shr ebx, 0x1b
or ecx, edx
jmp 0x496fda
call fcn.00497264
nop
inc ecx
mov ecx, edx
mov ebx, edi
sub ebx, ecx
sub edx, ecx
add ebx, edi
add ebx, 0x59f17f86
or ebx, ecx
xor ecx, ebx
jmp 0x494d32
push 0x548069b2
xchg ecx, ebx
dec ecx
and edx, ebx
xor ebx, 0x59f4c122
mov ecx, edx
sub edi, ecx
jmp 0x4960b9
pop esi
mov ecx, edx
mov edi, ecx
or ecx, 0x5a0cd2e8
mov ecx, edx
shr edx, 0x15
and edx, ecx
not ecx
neg edx
xchg edi, ebx
mov ecx, ebx
jmp 0x496e08
pop esi
add edx, ecx
sub ecx, edi
sub edi, ecx
nop
or edx, ebx
shr edi, 0x12
jmp 0x494835
pop esi
xchg edi, ebx
or edi, ecx
xor ecx, ebx
xchg ecx, edx
add edx, 0x5a2527ba
mov edi, edx
or edx, 0x5a262142
ror ebx, 0x1c
or edx, ebx
mov edx, 0x5a27ac66
sub edx, ebx
xor edi, ebx
jmp 0x495cf4
call esi
mov edi, edx
not edx
and edx, edi
sub ebx, 0x5a488246
and edx, ebx
dec ebx
jmp 0x495919
push 0x54866bc8
add edi, ebx
sub ebx, ecx
mov edx, ebx
rol ecx, 0xa
and edx, 0x5a5e8440
xor edi, ecx
jmp 0x495490
call esi
and edi, ebx
or ebx, ecx
bswap edx
sub ebx, ecx
and ecx, edx
xor edx, ebx
rol edi, 8
add ebx, ecx
and ebx, edi
dec ebx
or ebx, edx
sub edx, edi
jmp 0x496877
call fcn.00497264
shr edi, 0x14
mov ecx, 0x5a6c39b6
rol edx, 0x10
not ebx
mov ebx, edi
mov edi, ecx
not edx
ror edx, 0x13
jmp 0x496cb4
call esi
rol edx, 0x12
dec ecx
sub ecx, ebx
xchg edx, edi
dec ebx
bswap ebx
shr ecx, 1
bswap ecx
jmp 0x49620a
call esi
or ebx, edx
rol edx, 0x15
or edi, edx
sub ecx, edx
shl ebx, 0x1e
xor edx, ebx
jmp 0x4970b2
mov esi, 0x2809144b
ror ebx, 2
add edx, 0x5aa90618
mov edi, ecx
mov ebx, 0x5aa9fccc
dec ecx
add ecx, ebx
not edx
or edx, ecx
shl ebx, 6
bswap edx
add ebx, edx
xchg edx, ecx
jmp 0x495ab5
push 0x547859c6
xor edx, edi
xor ebx, edi
xor ecx, ebx
mov edx, ebx
sub edx, ecx
neg edi
add ebx, ecx
add edx, ecx
jmp 0x495899
push 0x5492cf54
xchg ecx, ebx
and edi, ebx
bswap ecx
xchg edx, edi
add ecx, ebx
neg ecx
sub ebx, edx
and ecx, edx
mov ecx, edx
ror ecx, 1
xchg edi, ecx
mov ecx, edx
jmp 0x4965ca
push 0x5471109c
sub edi, ebx
neg ecx
and edx, 0x5ac0feee
mov ecx, edx
or ebx, edx
and edi, edx
jmp 0x4962ac
push 0x5492206c
mov edx, ecx
and ecx, edx
mov ecx, edx
xchg edi, ecx
mov ebx, edi
not edx
ror edi, 0xe
or ecx, edx
and edx, edi
and edi, ecx
jmp 0x496692
push 0x5473bb72
xor edi, edx
or ecx, edx
jmp 0x495b91
pop esi
sub ecx, ebx
sub ebx, edi
shr edi, 0x1d
sub ebx, edi
mov ebx, edx
xor edx, ecx
mov ebx, 0x5ad10a14
mov ecx, ebx
jmp 0x4958f4
pop esi
or ebx, edx
add edi, edx
dec ecx
sub edi, ebx
xor edx, edi
or edx, ecx
mov ecx, edi
or edi, edx
and edi, ecx
and ecx, edx
or edx, edi
and ecx, edi
jmp 0x4955da
call esi
xchg edi, ebx
add edx, edi
add edi, ebx
and edi, edx
jmp 0x4971c1
call fcn.00497264
or edx, 0x5b0002c4
xor ecx, edi
add edx, ebx
and edi, ebx
bswap ecx
xor ecx, edi
jmp 0x495609
pop esi
mov ecx, edi
mov edi, ecx
mov ebx, edx
sub ebx, ecx
sub edx, ebx
xor ecx, 0x5b0de348
jmp 0x4959aa
call fcn.00497264
xchg ecx, ebx
add ebx, edi
ror edx, 0x1f
xchg edx, ebx
sub edx, edi
xor ecx, 0x5b10e67e
shr edx, 0xa
or edi, 0x5b11fbc4
and edi, ecx
xchg ecx, edx
jmp fcn.0049571c
pop esi
ror ebx, 0xf
sub ecx, edx
dec edx
xor edi, 0x5b3a0ac8
mov ecx, 0x5b3a8bbe
bswap ecx
rol edx, 0x1d
bswap ebx
not ebx
neg ebx
jmp 0x4951c0
call fcn.00497264
mov ebx, 0x5b460e50
ror edx, 0x19
and edx, ecx
add edi, 0x5b478d38
jmp 0x49626f
call fcn.00497264
add ecx, edi
or edx, ebx
rol edx, 7
sub edx, ecx
sub ecx, ebx
or edx, ebx
or edi, 0x5b522f06
xchg edi, edx
shr ebx, 4
add ecx, 0x5b53b74c
or edi, ecx
shr edx, 0x14
jmp 0x494e2c
call fcn.00497264
add edx, ebx
or ecx, edi
sub ebx, edx
add edi, 0x5b6924d6
sub ebx, 0x5b699ea0
not edi
jmp 0x496b59
push 0x5486ba42
sub ecx, ebx
and ecx, edi
not ecx
or edx, ecx
or edi, 0x5b6cd0d8
xchg ecx, edi
jmp 0x4965f6
push 0x547765f8
bswap ecx
xor edx, edi
shl ecx, 4
shl edx, 0x10
xor ecx, 0x5b7689bc
xor edx, ebx
xor ecx, edi
add edx, ebx
jmp 0x4949a7
pop esi
xor ebx, ecx
sub edi, ebx
dec edx
and ecx, edi
and edx, ebx
sub ebx, ecx
or edi, 0x5b96fc7a
ror edi, 9
or edi, edx
or ecx, 0x5b9858da
jmp 0x494b0a
pop esi
neg edx
or ebx, 0x5b997800
jmp 0x497399
call esi
or edx, ebx
dec edi
dec edi
sub edi, edx
and ecx, ebx
and ebx, edx
sub ecx, ebx
xchg ebx, edx
add ebx, 0x5ba0a6d8
xchg edi, ebx
and ecx, 0x5ba18f86
mov ebx, edx
sub edx, ebx
xor ebx, edx
jmp 0x496897
push 0x54961b76
xchg ebx, ecx
or edi, ebx
xchg edi, ecx
xchg edx, edi
xchg ebx, edi
and edx, ecx
shl edx, 1
neg ecx
or ecx, 0x5ba7172a
dec edx
jmp 0x4956ed
push 0x546e2caa
sub edi, ebx
sub edx, edi
not edx
shl edx, 0x1e
mov ebx, edi
xor edi, edx
sub edx, ebx
inc edi
jmp 0x49671a
push 0x54966efe
add edi, 0x5bbe2dee
sub ecx, 0x5bbea6b2
or ecx, 0x5bbf26a6
rol edi, 3
sub ebx, edi
add ecx, edx
sub ecx, 0x5bc114d2
bswap edi
xchg ebx, edx
and ecx, edx
jmp 0x4968d4
pop esi
and edx, ebx
xchg ebx, ecx
sub ecx, edi
or edi, ebx
xchg ebx, edi
or ecx, ebx
jmp 0x496f83
pop esi
mov ebx, edx
xor ecx, edi
add ebx, ecx
inc edi
sub ebx, ecx
or edx, ebx
xor ebx, edx
or edi, 0x5beab5b8
shr edi, 9
sub ebx, edi
jmp 0x4969f6
call fcn.00497264
neg edx
mov edx, 0x5bf2f6c6
jmp 0x494dbb
mov esi, 0x2809144b
add ecx, edi
shr ecx, 0x15
sub ebx, edi
add edi, ecx
shr ebx, 0xa
add edi, ecx
xor ecx, edx
shr edi, 0x1e
or ecx, 0x5bfbdb60
add edx, 0x5bfc5180
mov ebx, edx
or ecx, 0x5bfd4f34
jmp 0x495d4d
mov esi, 0x2809144b
sub edi, edx
xor edx, ebx
mov edi, ebx
not ebx
or edi, edx
xor edi, ecx
sub edx, 0x5c00b97c
and ecx, 0x5c014074
sub edx, 0x5c01c3a6
and ebx, ecx
jmp 0x494d51
pop esi
mov edx, ecx
add ecx, edx
add ebx, ecx
bswap edi
mov ecx, 0x5c04b1b8
mov edi, 0x5c0529d4
xor edi, edx
add edx, ebx
ror ebx, 0x17
sub ecx, edi
xchg ecx, edx
mov ecx, edi
jmp 0x4947a4
pop esi
xchg edi, edx
sub ecx, 0x5c091c0c
or ecx, edi
sub ebx, edx
sub ebx, edx
xchg edx, ebx
not edx
sub ebx, edx
xchg edx, edi
and ebx, ecx
add edx, ebx
mov ecx, ebx
jmp 0x49450b
push 0x547458c8
xchg ecx, edi
sub edi, 0x5c0f027e
xor edx, edi
dec edi
add edi, ecx
or ebx, 0x5c1114fe
and edx, 0x5c119c46
and ebx, edx
jmp 0x495b54
push 0x548aece6
or edi, ecx
or ebx, edx
xor edi, ebx
add ecx, edi
ror ecx, 0xf
dec ebx
xor edx, ecx
or ecx, edx
add ecx, edx
sub edx, ecx
jmp 0x4958ca
pop esi
mov ecx, edx
xchg edx, ecx
or ecx, edi
or edx, ecx
xor edi, edx
sub ecx, edi
jmp 0x496fb5
push 0x548deccc
xor ebx, ecx
ror edi, 0x14
xor edi, edx
mov edx, edi
and edx, ebx
sub ecx, edi
jmp 0x4946ca
call fcn.00497264
sub edx, edi
mov ebx, ecx
jmp 0x494c42
push 0x54706b76
or edx, ebx
xor edx, ebx
shl ebx, 0x16
and ebx, edi
bswap ebx
nop
and edx, edi
xchg edx, ebx
or ecx, edi
add edi, 0x5c4c70d2
xchg edi, edx
mov ebx, edi
or edi, ebx
neg ecx
jmp 0x494764
push 0x401400
or edi, ebx
xor edx, ecx
xchg ecx, edi
dec ecx
jmp 0x495160
push 0x5474aa00
or ebx, edi
or ecx, edi
jmp 0x496329
push 0x54740d38
not ecx
and ebx, ecx
add edi, edx
sub ebx, edx
add edi, edx
rol edi, 4
dec edx
sub edi, edx
jmp 0x49593b
pop esi
sub edi, 0x5c8e9b00
or edi, ebx
xchg edi, ecx
sub ebx, 0x5c900c2a
mov ecx, 0x5c9082f2
neg ebx
and edx, ecx
neg edi
inc edx
shr edi, 0xb
jmp 0x4954d6
call fcn.00497264
sub ecx, edi
inc ebx
and ecx, edx
xor ebx, edi
mov ecx, edx
shr edx, 0x1e
or edi, ebx
xor ebx, edx
shl edx, 7
xchg edx, edi
jmp 0x495ef4
pop esi
dec edi
sub ecx, 0x5ca6bc14
ror ebx, 0xd
xor edi, 0x5ca7c802
ror edx, 0xd
bswap edi
xor edi, ecx
inc edi
jmp 0x494b40
pop esi
and edi, edx
mov ebx, edi
neg edx
nop
mov edx, edi
add edi, ebx
not ebx
sub ecx, edx
mov edi, ebx
ror edi, 4
jmp 0x496e23
push 0x54810f68
xchg ebx, edi
ror ebx, 0xa
mov ebx, edx
and ecx, edi
or edx, ecx
and edx, ecx
xor edi, edx
and edi, ebx
shl ecx, 0x1e
sub edx, 0x5cd15562
jmp 0x496342
push 0x5495c57c
and edi, edx
sub ebx, ecx
or edi, ecx
xchg edx, ebx
sub edi, ecx
xor ebx, 0x5cd78a60
jmp 0x495632
call esi
mov ebx, edx
sub ecx, 0x5cd89bda
and ecx, edx
sub ecx, 0x5cd9962a
and edx, ecx
sub edi, edx
shr ecx, 0x18
or edx, ecx
xchg edi, ecx
bswap ecx
not ebx
mov edi, ebx
jmp 0x49460c
push 0x548d9588
add edi, edx
or ecx, edx
or edx, ecx
mov edx, ecx
or ebx, edx
and edi, ebx
xor ecx, edi
shr ecx, 0xb
mov ebx, ecx
or edi, ecx
sub edi, 0x5d13cb32
sub ecx, 0x5d14469c
jmp 0x495a57
push 0x5480b9f0
neg ebx
mov edx, edi
xor edi, ecx
and ebx, edi
bswap ebx
nop
or ecx, edi
mov edx, edi
and edi, edx
mov edx, ecx
jmp 0x495ea4
pop esi
and edx, 0x5d218310
or edi, ebx
dec ebx
and ebx, edi
xor ecx, edx
bswap edi
or edi, ebx
or edi, 0x5d250d74
xor edi, ecx
ror edx, 0xf
add ecx, 0x5d268298
shl ecx, 0xe
jmp 0x496bae
push esp
xor ecx, edx
shl edx, 3
sub edi, edx
add ebx, edi
jmp 0x49461e
pop esi
and edx, ecx
shl ebx, 0x17
mov ecx, edi
or edi, edx
xchg ebx, edi
add ebx, 0x5d2f7c6c
xchg edx, ebx
sub ebx, edx
xchg ebx, ecx
and edi, edx
jmp 0x494ce3
push 0x930fa
neg edx
and ecx, edx
add ebx, 0x5d330558
xor edx, ecx
sub ebx, 0x5d3427e2
dec edi
jmp 0x495b31
call esi
sub edx, edi
bswap edi
and ecx, ebx
or ebx, edx
mov ebx, 0x5d3e5342
rol ecx, 0x1e
dec edi
shl edx, 0x10
or edi, edx
not ebx
xor ecx, ebx
add edx, ecx
jmp 0x495822
pop esi
and ecx, edi
and edi, 0x5d4936e8
shr edx, 0xb
sub edx, edi
jmp 0x495313
pop esi
add edx, edi
add ebx, 0x5d4b5a78
sub ebx, edi
rol edx, 0x16
add edi, ebx
or edi, 0x5d4d8020
or edx, ecx
mov ebx, edx
jmp 0x495dc0
call esi
or edx, edi
ror edi, 0x16
add edx, ecx
neg ebx
or edx, edi
ror edi, 2
or ecx, edi
and ebx, edx
jmp 0x4947b3
mov esi, 0x2809144b
and ebx, ecx
mov edi, ebx
shl edi, 0xb
or edx, ebx
mov ecx, ebx
add edx, ebx
jmp 0x4949c4
mov esi, 0x2809144b
not ebx
xor edi, ebx
and ecx, 0x5d70bdf2
inc edi
mov edi, ecx
and edx, ecx
jmp 0x495472
mov esi, 0x2809144b
inc edx
and edi, 0x5d734bd6
mov ecx, ebx
xchg ecx, edi
sub ecx, ebx
sub ebx, edi
neg ecx
or ecx, 0x5d7643a0
jmp 0x494676
push 0x548a98bc
ror edi, 0xa
sub ecx, ebx
jmp 0x495960
push 0x548463b8
shr edx, 0x16
or ecx, edx
mov edi, 0x5d93f346
mov ebx, edi
shl ecx, 0xe
sub edi, edx
or ebx, edx
xor ebx, ecx
jmp 0x4972b9
call esi
xor edi, edx
or ecx, ebx
or ebx, ecx
add ecx, edx
jmp 0x496756
mov esi, 0x2809144b
and edi, ebx
nop
not edi
add ebx, edx
neg ecx
mov ecx, edx
jmp 0x495374
push 0x54871f48
add ecx, ebx
and ecx, ebx
xor ebx, edx
add edx, ecx
jmp 0x49715e
push 0x54927440
or edi, edx
and ecx, edx
xchg ebx, edx
inc edx
sub edi, edx
add edx, ebx
not edi
or ebx, 0x5de97db8
jmp 0x494f79
mov esi, 0x2809144b
or ecx, ebx
and edi, ecx
or ecx, edi
bswap ebx
and edi, 0x5df90e16
not ecx
xor ecx, edi
mov ebx, edi
jmp 0x4953c4
pop esi
shr edx, 0xd
xor ebx, 0x5e0071c0
add edi, edx
add ecx, edx
xor ecx, edi
xchg ebx, ecx
not ecx
shl ebx, 0x17
sub ecx, ebx
xchg edx, ebx
jmp 0x49502c
mov esi, 0x2809144b
or ecx, edx
add edi, edx
inc edx
sub ebx, 0x5e094f40
xchg edx, ecx
xor edx, 0x5e0a3a0a
xor ebx, 0x5e0abda8
sub ebx, 0x5e0b2aac
jmp 0x49586d
push 0x547fb7e0
mov edi, edx
dec edx
not edi
mov ebx, 0x5e132aee
add ecx, edx
and ebx, 0x5e1415cc
jmp 0x4971aa
push esp
sub edi, 0x5e14b0be
xchg ebx, edx
xor ecx, edi
and edx, 0x5e161734
xchg ecx, edx
not ecx
sub ecx, edi
xor edi, 0x5e181024
add ebx, ecx
or edi, edx
xor ebx, edi
add ebx, ecx
add ecx, ebx
xor edi, edx
jmp 0x49613a
pop esi
shl ebx, 0x14
and ecx, 0x5e249a64
sub edi, ecx
and ecx, 0x5e258b70
xchg edx, edi
not edi
shl edx, 7
xchg ebx, ecx
jmp 0x49574a
pop esi
or ecx, edi
add ebx, ecx
or ebx, ecx
sub ebx, 0x5e297af8
add edx, edi
or ebx, edi
jmp 0x496149
pop esi
nop
xor ebx, 0x5e2ba6f0
jmp 0x495d83
push 0x5496c704
xchg ecx, ebx
xor ecx, 0x5e30ede4
sub edx, ecx
or edi, 0x5e31d810
neg ebx
and ebx, edi
jmp 0x4970a0
pop esi
or edi, ebx
mov edi, ecx
dec edi
inc edx
or edi, ecx
add ebx, ecx
sub edx, ecx
and edx, edi
xor edi, edx
add edi, ebx
jmp 0x4955b8
call esi
sub edi, ebx
xor ebx, 0x5e84beae
or ebx, 0x5e855158
mov edi, 0x5e85d35a
or ebx, edx
xchg edi, ebx
jmp 0x4968ad
pop esi
neg edi
rol ebx, 0xa
xor ebx, edx
neg ebx
mov ecx, edi
sub edi, ecx
mov edx, ebx
and ecx, edx
jmp 0x494a9b
call esi
or ebx, 0x5eb64786
and edx, ecx
sub edi, 0x5eb73026
and ecx, ebx
or edx, ebx
and ecx, edi
jmp 0x49507c
push 0x54700aa6
mov edi, ecx
bswap ebx
sub edx, edi
add edx, ebx
xchg edi, ebx
not ebx
not ebx
ror edi, 0x1f
dec edi
and edx, ebx
jmp 0x495adc
push 0x548e9e2e
or ecx, edi
dec ecx
and edx, edi
dec ecx
xor ecx, edi
mov ebx, 0x5ed92a88
jmp 0x496789
push 0x547b099e
sub ecx, 0x5ee4ec9a
mov ebx, edi
xchg edi, edx
xchg edi, ebx
shr ebx, 0x1a
bswap ecx
jmp 0x494f1e
pop esi
and ecx, edi
dec ebx
xchg edi, ebx
inc ecx
neg edi
shr edi, 5
and ecx, edx
mov edi, 0x5eeb7e06
rol edx, 3
add ecx, edi
jmp 0x4970d3
pop esi
and edx, edi
add ecx, ebx
mov ecx, 0x5f1741aa
xor ebx, edx
or edx, 0x5f183032
shr ebx, 3
sub ecx, 0x5f193baa
xor ebx, ecx
or ebx, 0x5f1a36ac
and ebx, ecx
add edx, ecx
add ebx, 0x5f1bb33a
jmp 0x494749
pop esi
or edi, ecx
shl edx, 0xb
and edi, edx
shl ecx, 9
and ebx, edx
sub edx, edi
add ecx, ebx
mov ebx, edx
and ecx, 0x5f200a10
rol ebx, 5
and edx, edi
mov edi, ebx
jmp 0x4947d2
push 0x5478085c
mov edx, edi
not ebx
shl edi, 3
mov ebx, edx
mov edi, edx
or ecx, edx
xor edx, edi
xchg edx, edi
xchg ebx, ecx
rol edx, 2
jmp 0x494f48
call fcn.00497264
shl ecx, 0x15
neg ebx
xor ecx, 0x5f2db6e0
sub edx, edi
sub ecx, ebx
sub ecx, edx
not ecx
mov edi, 0x5f30287e
xor ebx, edx
ror edi, 0xf
jmp 0x496565
mov esi, 0x2809144b
ror edi, 0xe
xor ebx, ecx
mov ecx, ebx
mov ecx, ebx
sub ecx, ebx
shr ecx, 0xd
add edx, ecx
xor ecx, ebx
jmp 0x49701d
mov esi, 0x2809144b
xor edx, 0x5f3ec1c6
sub edi, edx
jmp 0x4951d6
pop esi
mov edi, ebx
sub edi, 0x5f405afa
and ebx, edi
sub edx, ecx
mov edx, ebx
or edx, 0x5f423dbe
dec ecx
and ebx, ecx
sub ecx, edx
sub edx, ebx
jmp 0x496d7e
push 0x54957386
add ebx, edx
xor edi, edx
dec edx
xchg edx, ebx
shr ecx, 9
inc edx
jmp 0x495eda
push 0x548a37fa
bswap edi
ror ecx, 0x1b
or ebx, edx
and ebx, edx
xor edi, ebx
sub edi, ecx
shr edx, 9
or ebx, ecx
jmp 0x49642e
push 0x548779d6
xor edi, 0x5f57fdf2
rol edi, 9
or ebx, 0x5f58f8e6
add ecx, edi
or ecx, edi
and edx, edi
or ecx, edi
shr ecx, 0x1f
jmp 0x49705a
push 0x54801274
mov ebx, edx
rol edi, 8
or edx, ebx
or edi, ebx
and ebx, ecx
bswap edi
jmp 0x4949e4
pop esi
shr ebx, 0x16
xor ecx, ebx
rol ecx, 0x19
sub ebx, ecx
xchg ecx, edi
mov edx, 0x5f6b54fc
and edi, ebx
add edx, edi
jmp 0x4967e7
mov esi, 0x2809144b
add edx, ebx
sub ebx, edi
ror ecx, 0xc
not edx
xchg edx, edi
mov ebx, edi
sub edx, ebx
add ebx, 0x5f8cb590
jmp 0x49516f
call fcn.00497264
xchg ecx, edi
bswap ecx
add edi, edx
xchg ecx, ebx
sub edi, ecx
ror edx, 3
bswap edx
add edx, edi
and ecx, edi
rol edx, 0xf
jmp 0x496803
pop esi
or edi, ebx
xchg ecx, edx
sub ebx, ecx
shl ebx, 0x18
bswap ecx
and edi, 0x5fab92fc
xchg ecx, ebx
xor edx, 0x5fac9d0c
jmp 0x494736