Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xfffffef7
jne 0x40107a
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
ret
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xfffffef2
jne 0x40110d
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.advapi32.dll_GetNamedSecurityInfoW
ret
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xfffffef1
jne 0x401191
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffee9
jne 0x401229
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.advapi32.dll_GetNamedSecurityInfoW
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_RtlComputeImportTableHash
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetNamedSecurityInfoW
ret
jmp 0x4d8487
mov edi, esi
jmp 0x4daeef
push 0xf923942b
mov esi, ecx
add esi, 0xfa753d1a
or ecx, edx
or edx, edi
rol edi, 0xe
xchg edx, esi
jmp 0x4d89dd
push esp
sub ecx, edi
xchg edx, edi
mov ecx, esi
add ecx, 0xfa78e12f
or ecx, 0xfa792247
or ecx, 0xfa7963e2
sub esi, edi
dec edi
mov ecx, edi
and ecx, esi
jmp 0x4db189
call ebx
and edi, edx
xor ecx, edi
or edi, edx
xor esi, edx
ror edi, 0x10
xchg ecx, edi
add esi, edx
neg edi
not edi
xor esi, 0xfa87337b
xor esi, edx
ror edx, 0xb
jmp 0x4d8d41
pop ebx
or edi, 0xfa8c776f
xchg edi, esi
bswap edx
xchg edi, esi
sub edi, ecx
inc ecx
or ecx, edx
mov edx, esi
shl ecx, 0x1b
bswap esi
jmp 0x4d8c42
call ebx
xor esi, edi
mov ecx, esi
and edi, edx
xor ecx, esi
add edi, 0xfa96f172
add ecx, edx
sub edi, edx
and edx, esi
jmp 0x4db883
pop ebx
or ecx, edi
shr esi, 0x11
xchg ecx, edi
shr edx, 0xd
sub edi, esi
and ecx, edi
bswap edi
sub edi, edx
xchg ecx, esi
or edi, 0xfa9a7490
jmp 0x4d9549
mov ebx, 0x4132136a
xor edx, esi
bswap esi
xor ecx, 0xfaa3f045
and edi, esi
xor edi, ecx
add edx, ecx
jmp 0x4da6d9
call ebx
rol esi, 7
or ecx, edx
add edx, esi
mov ecx, 0xfaaa1cee
ror edi, 5
shl edx, 0xf
sub esi, ecx
and edi, edx
sub esi, edi
shl edx, 0xd
xchg edi, edx
mov edx, edi
add ecx, edi
jmp 0x4d9ee5
pop ebx
add edi, esi
xor edx, esi
and esi, edi
dec esi
neg edx
add edi, esi
jmp 0x4d9a0c
mov ebx, 0x2a371b56
sub ecx, edx
shl edx, 3
rol esi, 0x19
bswap edi
xor edx, 0xfab20ba8
xchg edx, esi
sub edx, 0xfab28c6d
add edx, 0xfab2e0bd
mov esi, ecx
jmp 0x4d8e37
call fcn.004dad3d
dec esi
mov edx, 0xfab73df2
add edx, 0xfab77d14
bswap edx
rol ecx, 0x18
or edi, 0xfab8411c
or edi, ecx
jmp 0x4d87a7
call ebx
shr esi, 0xd
bswap edi
xor esi, 0xfacd5118
dec edi
xchg ecx, edi
jmp 0x4db4b9
push 0xf923e190
dec edi
mov edx, esi
or ecx, 0xfad1a25d
add edi, ecx
jmp 0x4db3b1
pop ebx
sub esi, ecx
shr ecx, 0xf
xor esi, edx
jmp 0x4db2d6
mov ebx, 0x2a371b56
shr ecx, 2
inc ecx
sub ecx, edx
add edx, ecx
inc edi
mov esi, ecx
ror ecx, 0x13
and esi, edx
dec edx
sub ecx, esi
sub edi, esi
jmp 0x4da081
call ebx
shr ecx, 0x14
not edx
bswap ecx
or edi, edx
and edi, edx
neg ecx
sub edi, 0xfaef62e2
and edx, ecx
xchg esi, edx
xor edi, edx
jmp 0x4d999a
push 0xf9187987
and ecx, edi
or edx, esi
or ecx, edi
xor esi, ecx
and edx, 0xfb007907
dec edi
add edi, esi
jmp 0x4db8cb
mov ebx, 0x2a371b56
or ecx, edx
sub edi, edx
or edx, 0xfb01d7de
or ecx, edi
bswap edi
shl esi, 0x19
shr edx, 4
mov edi, edx
sub esi, edi
sub esi, 0xfb03aadf
jmp 0x4da14f
push 0xf93127fa
and ecx, 0xfb0bcbbd
or edx, edi
inc esi
or edi, 0xfb0c8ce0
nop
xor esi, edx
xor edi, 0xfb0d6173
xchg ecx, edi
and edx, ecx
neg edx
bswap esi
add edx, 0xfb0ea533
jmp 0x4da979
pop ebx
and ecx, edi
shr ecx, 0xf
or ecx, esi
bswap esi
ror edi, 6
jmp 0x4d9a8d
pop ebx
add esi, ecx
dec ecx
or edx, esi
mov edi, esi
jmp 0x4da53b
call ebx
neg esi
xchg ecx, esi
xor ecx, edi
and edx, ecx
xor edx, edi
xchg ecx, edi
xchg ecx, edx
or ecx, edi
not ecx
jmp 0x4d94aa
call ebx
mov esi, 0xfb1abec0
add edi, ecx
mov edx, 0xfb1b3cea
bswap esi
and edx, esi
xor esi, edx
mov ecx, 0xfb1c4d7f
jmp 0x4d985b
pop ebx
neg esi
and esi, 0xfb22e0e0
add edx, ecx
add edi, edx
add ecx, 0xfb239c58
sub esi, edx
jmp 0x4d8e7d
call fcn.004dad3d
inc esi
mov edx, edi
add edi, ecx
and edi, esi
sub edx, esi
or ecx, edx
mov ecx, edx
sub edx, 0xfb2604e1
or edi, 0xfb2645ce
add ecx, edx
neg edx
add edi, ecx
xchg edx, esi
xor edi, esi
bswap edi
jmp 0x4d86b3
pop ebx
sub edx, ecx
xor edx, edi
and ecx, esi
add edi, edx
xor edx, esi
sub edi, edx
xor esi, edx
add esi, edi
xchg edx, esi
xchg edi, edx
sub esi, edx
add edx, edi
jmp 0x4d87cf
pop ebx
xor esi, edi
mov esi, edx
or esi, 0xfb2dfee5
sub ecx, edx
xchg edi, esi
xchg edx, edi
add esi, 0xfb2efff7
xor ecx, edi
neg esi
jmp 0x4d94d4
call fcn.004dad3d
sub edx, edi
mov edx, edi
mov esi, 0xfb3c9aab
mov esi, 0xfb3cda21
neg ecx
add ecx, 0xfb3d5c46
inc edi
bswap ecx
jmp 0x4d85d2
push 0xf93a3b8a
mov esi, edx
rol edx, 0xa
add edx, ecx
neg esi
or ecx, esi
xchg ecx, edx
shl edx, 0xb
ror esi, 0x15
jmp 0x4d939e
push 0xf91c5995
and esi, edx
or ecx, edx
sub ecx, 0xfb4bfc25
mov edx, edi
ror ecx, 6
or edi, edx
xor edi, edx
mov edx, ecx
xor esi, ecx
jmp 0x4d9ec8
push 0xf91911af
not edi
and edx, edi
shr edi, 0x13
and esi, edi
jmp 0x4daaf6
mov ebx, 0x123b2f04
sub ecx, edi
or edi, edx
xchg esi, ecx
add esi, edi
mov ecx, 0xfb5c4cfa
and edx, 0xfb5c8c1a
and esi, ecx
or esi, ecx
jmp 0x4daa47
pop ebx
add esi, edi
mov edi, ecx
add ecx, edi
xchg edi, esi
inc esi
xor ecx, esi
add edi, ecx
or ecx, edi
add esi, edi
shr edx, 0xb
rol edi, 0x13
jmp 0x4db463
call ebx
and edx, esi
or esi, 0xfb6acabf
add esi, ecx
or edi, edx
bswap edi
or ecx, 0xfb6bdd11
jmp 0x4d915e
push 0xf91cf130
or edx, esi
add edi, edx
or edi, esi
bswap edi
and edx, ecx
xchg edx, ecx
or esi, edi
not edx
xor edi, edx
jmp 0x4d9320
push 0xf91bc056
shr esi, 0x15
add esi, 0xfb6ee389
dec esi
shl edi, 0xe
jmp 0x4db6ce
call fcn.004dad3d
ror ecx, 0x1c
rol ecx, 4
and edi, esi
add edx, ecx
add edi, 0xfb70d303
or edi, 0xfb711431
xor edx, edi
and ecx, 0xfb71a7dc
sub esi, 0xfb71e74e
add edi, edx
and edi, edx
or esi, 0xfb72a57a
jmp 0x4db251
mov ebx, 0x2a371b56
and edx, edi
mov ecx, esi
mov esi, edx
mov esi, edi
sub edx, 0xfb805e4a
inc edi
or esi, edx
add esi, edi
jmp 0x4d885b
call ebx
xor edi, edx
xchg esi, edx
nop
or esi, ecx
xor esi, 0xfb827c0e
sub edi, 0xfb82be1e
or ecx, esi
dec esi
sub esi, edx
jmp 0x4d86ce
mov ebx, 0x123b2f04
add esi, 0xfb8afd1d
rol ecx, 0xf
not edi
mov ecx, edx
shl edx, 0x15
add edx, edi
neg esi
not ecx
mov ecx, esi
or edi, edx
mov edi, esi
jmp 0x4da3e4
call fcn.004dad3d
add edi, edx
or ecx, edi
ror edx, 0x1b
xor edi, 0xfb8ed3ad
and edi, esi
xor edx, ecx
xor edx, ecx
bswap esi
and ecx, esi
neg edx
jmp 0x4d8db9
push 0xf920408f
shl edi, 4
add esi, edx
mov edi, ecx
jmp 0x4db15b
push esp
xor ecx, edx
mov ecx, edx
xchg ecx, esi
sub esi, ecx
xor ecx, esi
shl ecx, 5
add edi, esi
sub edi, edx
not edx
jmp 0x4d8525
pop ebx
sub edi, esi
rol esi, 4
add esi, edx
jmp 0x4db7c7
push 0xf927ce80
add edi, edx
mov edx, edi
shl edi, 0x17
sub edi, edx
rol esi, 0x1c
mov edi, 0xfba4ba1d
or edx, edi
sub edi, edx
inc esi
jmp 0x4da858
push 0xf93dd983
mov esi, ecx
sub edx, edi
not edx
mov esi, ecx
add ecx, edx
sub edx, 0xfba71fed
or edi, edx
add ecx, edi
xor ecx, esi
jmp 0x4d8c5d
pop ebx
inc edi
add ecx, 0xfba89d35
shr esi, 5
sub ecx, edx
xchg edi, ecx
bswap edi
ror edi, 0x1f
jmp 0x4daf36
push 0xf940951b
xor esi, 0xfbae4411
or edx, 0xfbaea382
xor esi, edx
shr edi, 0xd
rol ecx, 0xa
sub ecx, edi
and ecx, 0xfbb0d16e
xchg esi, edx
jmp 0x4da7fd
pop ebx
and ecx, edx
and esi, 0xfbc88c59
add esi, ecx
xor esi, edx
sub edx, edi
jmp 0x4d920f
pop ebx
and edi, esi
xchg ecx, esi
sub esi, ecx
sub esi, edi
or edi, esi
or edi, 0xfbcb070e
jmp 0x4da89c
pop ebx
and edx, ecx
and edi, edx
neg ecx
or esi, edx
or edi, esi
mov edi, edx
rol ecx, 0xf
shr esi, 0x16
rol edx, 0x1e
or esi, ecx
jmp 0x4d8a47
push 0xf915c86f
and edx, edi
mov edi, edx
add esi, edi
and ecx, edx
and esi, edx
nop
and ecx, esi
shl esi, 0x14
mov edx, ecx
and edi, edx
jmp 0x4dac68
pop ebx
or esi, edx
xchg edi, esi
jmp 0x4dad79
push 0xf92a8716
mov edi, ecx
bswap edi
mov edx, edi
ror edx, 0x12
xor edi, 0x48738a4
mov esi, edi
inc edx
xor ecx, esi
bswap edx
add ecx, 0x4888ac0
mov esi, 0x488ca2f
bswap ecx
dec esi
mov edx, esi
jmp 0x4db4de
push 0xd7087
or edx, edi
and edx, 0x48a2665
add ecx, esi
shr ecx, 0x1e
or ecx, edx
shr edi, 0xe
xor edx, ecx
or edi, edx
xchg ecx, esi
xchg edi, ecx
mov ecx, 0x48c79f9
inc edi
bswap esi
dec ecx
and edx, 0x48d7e76
sub edx, edi
jmp 0x4da178
pop ebx
xchg ecx, edi
add edx, 0x490519e
dec ecx
mov esi, 0x490d265
sub edi, 0x4911391
neg ecx
shl edx, 0xf
add edi, 0x491eaac
add edx, edi
and ecx, 0x4926eb8
shl edx, 6
xor ecx, edx
dec ecx
xor ecx, 0x4937c56
or edi, 0x493c071
jmp 0x4da8c2
mov ebx, 0x2a371b56
xor edi, 0x49d4a66
add edi, edx
mov esi, 0x49dc9b4
sub esi, 0x49e0af6
xor edi, 0x49e5784
not ecx
xor ecx, esi
xchg edx, ecx
sub ecx, edx
neg ecx
mov esi, edx
xchg esi, ecx
jmp 0x4d93c4
push 0xf935e818
add ecx, edi
xchg edi, ecx
or esi, ecx
shl edx, 9
mov edx, ecx
add edi, esi
jmp 0x4d8802
mov ebx, 0x123b2f04
add ecx, 0x4b0063f
and edi, ecx
xor edx, edi
or edx, 0x4b19768
bswap edi
inc ecx
xor ecx, edx
and edi, edx
add edx, ecx
xor ecx, esi
mov esi, 0x4b3b2b1
mov esi, edi
add edi, 0x4b43020
xchg edx, edi
jmp 0x4d8f63
pop ebx
add edi, 0x4d07e7d
xchg edi, edx
sub edx, 0x4d0ff62
not edx
and edx, 0x4d183ed
xor edi, 0x4d1d6ab
xor edi, esi
mov ecx, edx
or esi, edi
sub ecx, edx
bswap ecx
and edx, esi
jmp 0x4d8d2f
call fcn.004dad3d
mov edx, esi
neg ecx
dec edx
ror esi, 7
mov edi, edx
sub esi, 0x4d9253a
or ecx, edi
mov edi, ecx
add edx, esi
sub esi, edi
jmp 0x4d8b4a
push 0xf94259d7
add edx, 0x4de338d
shr esi, 1
and edi, 0x4deb954
xor ecx, edi
shl esi, 0x1a
and edx, 0x4df7f2a
xor edx, ecx
jmp fcn.004da5f2
push 0xf91ca50c
and edi, esi
add esi, edx
xchg edx, esi
shl ecx, 0x13
add ecx, edx
or edi, ecx
add edx, ecx
sub edx, ecx
or edx, ecx
jmp 0x4d91f3
pop ebx
neg edx
sub esi, edi
shr ecx, 0x19
dec edi
xor edi, ecx
xor edi, ecx
add ecx, edx
sub esi, ecx
inc esi
bswap edx
and edx, esi
or edx, 0x4e60f09
sub esi, 0x4e64f34
mov ecx, esi
jmp 0x4da055
push 0xf941c29f
or edi, esi
neg edi
xor edx, edi
or edi, 0x4ed6b39
or ecx, edx
and ecx, edi
xor ecx, 0x4ee40fc
xchg edi, esi
or esi, edi
not edi
mov edx, esi
jmp 0x4d9ea2
pop ebx
add ecx, 0x501c667
and ecx, edi
rol esi, 0x1e
xor edx, esi
and esi, edi
xor edx, esi
mov ecx, edi
add esi, ecx
and esi, ecx
jmp 0x4da784
call fcn.004dad3d
sub edx, esi
and ecx, edi
or ecx, 0x505a38e
sub esi, ecx
sub edi, esi
not ecx
sub ecx, edi
ror edx, 0xe
and esi, 0x5073776
sub ecx, esi
sub esi, 0x507b67a
and edi, 0x507f75b
xor edx, ecx
inc edx
shl esi, 0x15
jmp 0x4d8da0
call fcn.004dad3d
ror edi, 0xb
xor edi, 0x5153400
mov edi, ecx
and edx, 0x515b3a1
or edx, edi
neg edx
or esi, ecx
rol esi, 0xd
mov edi, esi
shr ecx, 4
jmp 0x4d933d
push 0x401400
or edx, edi
sub esi, ecx
add ecx, edx
jmp 0x4dab64
call ebx
and edi, 0x5188b1f
xchg ecx, edx
xor edx, edi
bswap edx
or edx, esi
and edx, 0x519cb0a
sub ecx, edx
add edi, 0x51a4c66
rol esi, 0x1b
xor esi, ecx
jmp 0x4d8e1d
pop ebx
sub edx, edi
and ecx, edi
or edi, edx
add edi, edx
xchg edi, esi
shl edx, 1
ror edi, 0xd
shr edx, 0xf
and ecx, 0x53af38f
add esi, edx
jmp 0x4d9514
push 0xf92b7153
add esi, edx
sub esi, ecx
neg edi
xchg esi, edi
or esi, edi
add ecx, edx
bswap edx
or edi, ecx
jmp 0x4db828
call fcn.004dad3d
xchg edx, edi
xchg edx, ecx
rol esi, 0x10
ror edx, 0x15
xor esi, edi
shl edx, 0xb
not ecx
jmp 0x4d8997
push 0xf91ff34c
sub edx, edi
xor esi, 0x559dcd2
inc edx
xchg edx, esi
inc ecx
and edx, edi
mov ecx, edi
sub edx, 0x55b6e09
add edi, ecx
jmp 0x4d93fe
pop ebx
xchg edi, edx
add esi, edi
mov ecx, 0x55c870e
neg edi
or edi, ecx
or edx, ecx
jmp 0x4da5a0
pop ebx
xchg edi, esi
add edx, 0x560daf0
add esi, edi
xor edi, 0x5616a18
add ecx, edi
not ecx
jmp 0x4da338
push 0xf935553f
xor edx, ecx
xor ecx, edi
xchg edx, edi
add ecx, 0x567c0e7
xchg esi, edx
inc esi
ror ecx, 0x10
add ecx, edi
mov edi, esi
rol ecx, 0xf
jmp 0x4d9bff
call fcn.004dad3d
sub edx, edi
xchg edi, ecx
and ecx, esi
or edx, 0x57fc461
dec edi
sub ecx, esi
add esi, 0x58086d1
bswap ecx
jmp 0x4d9491
push 0xf939872d
and esi, 0x5839e5a
not edx
xchg esi, ecx
mov ecx, edi
jmp 0x4d8fe1
pop ebx
mov edx, ecx
xor edx, 0x58c2c49
sub edx, 0x58c6d0f
mov edx, ecx
jmp 0x4dadbd
push 0xf9412944
and edi, ecx
or esi, 0x5936408
and esi, edx
rol edi, 0x14
inc edi
or edx, ecx
xor ecx, edi
and ecx, 0x594f79d
mov ecx, edi
rol esi, 5
mov ecx, edx
xor edx, 0x595f51c
jmp 0x4d9f5a
push 0xf9281bc9
nop
or esi, edi
and edx, ecx
xchg ecx, edi
sub edx, esi
mov ecx, 0x59b0f94
sub edi, esi
not esi
xor esi, edi
shr ecx, 0xd
add esi, edi
xchg ecx, esi
jmp 0x4da911
push 0xf92b23a5
add edx, edi
neg ecx
bswap ecx
mov esi, edi
and edi, ecx
xor esi, ecx
xchg esi, edi
or edx, esi
xor edi, esi
ror ecx, 6
jmp 0x4da3ca
pop ebx
xor edx, esi
xor esi, edx
ror esi, 0x1c
or ecx, 0x5a07a4d
or edx, esi
mov ecx, edx
dec edi
or esi, 0x5a17863
add ecx, 0x5a1b848
sub edx, esi
jmp 0x4d8755
push 0xf9264a66
mov edi, 0x5a2541c
inc ecx
add esi, edi
add ecx, edx
or edi, edx
sub edi, ecx
sub ecx, edi
sub esi, edx
not edi
mov esi, 0x5a4a239
add edx, esi
sub esi, 0x5a52229
jmp 0x4dafa4
push 0xf92868ba
ror edx, 0x13
sub edx, ecx
or edx, ecx
xchg edx, esi
or esi, edx
rol edx, 3
add edx, edi
inc ecx
add edi, edx
jmp 0x4dab9b
call fcn.004dad3d
and edi, ecx
shr edx, 0x1c
or edi, edx
neg edi
or esi, edi
jmp 0x4db7e1
push 0xf93175f2
mov edi, esi
xor edi, esi
or edx, 0x5b1cc44
sub edi, 0x5b20fb1
xchg ecx, edx
add esi, edi
and esi, 0x5b2e0d8
jmp 0x4d910e
call fcn.004dad3d
add edi, esi
xor edi, esi
add ecx, edi
or edi, esi
sub esi, edx
add ecx, esi
and edx, 0x5bf4be3
not ecx
dec esi
mov esi, 0x5c00f7d
ror edi, 0xc
jmp 0x4d91d8
push 0xf9195c71
or edx, 0x5ca63e5
xor edi, 0x5caa5b5
sub edi, esi
and edi, esi
not edi
add edi, 0x5cba699
xor ecx, esi
xor edx, edi
sub esi, ecx
sub esi, ecx
xor ecx, edx
and esi, edx
mov ecx, esi
shr edi, 3
or edi, 0x5cdf699
xor edx, edi
jmp 0x4d8abf
pop ebx
add edi, edx
neg ecx
sub ecx, edi
or ecx, edi
or edi, 0x5cfa4d9
or ecx, esi
shr edi, 0x11
jmp 0x4d9df1
call ebx
shr ecx, 0x10
xor ecx, esi
xor edi, 0x5d27c93
mov edi, esi
jmp 0x4daeb8
mov ebx, 0x123b2f04
neg ecx
sub edi, edx
add edx, esi
or esi, edi
jmp 0x4db197
pop ebx
or ecx, esi
bswap ecx
and esi, edx
shl esi, 0x15
sub edi, edx
or ecx, 0x5dce141
mov edx, ecx
sub edx, 0x5dd5fb9
sub edi, edx
inc esi
or ecx, 0x5de2f30
mov esi, ecx
sub ecx, 0x5deac4b
xor esi, edx
and edx, 0x5df2b16
jmp 0x4d9692
pop ebx
shl esi, 0x15
rol edi, 0x18
xchg edx, esi
and edx, edi
or ecx, esi
mov edi, edx
sub edx, 0x5e3656f
dec esi
jmp 0x4db4fe
push 0xf9161473
add edi, 0x5e5f96b
xor esi, ecx
xchg esi, edi
sub edx, edi
xor edi, edx
or edi, edx
xor edx, edi
add edi, ecx
xchg edi, ecx
rol esi, 8
jmp 0x4d9b41
pop ebx
or edi, edx
add edx, ecx
xchg ecx, esi
dec edi
or esi, edi
xor edi, esi
jmp 0x4d96a6
push 0xf9234757
xchg esi, edx
sub esi, 0x5fd0ea8
mov esi, 0x5fd4f56
shl esi, 7
xor edi, ecx
and edi, edx
xor edx, ecx
xchg edi, edx
shr edx, 0x17
xchg esi, edx
not edi
add edx, edi
mov edi, edx
dec esi
or edi, edx
ror ecx, 0x1b
jmp 0x4d84fb
pop ebx
xchg edi, esi
and edx, esi
xchg ecx, esi
sub edi, edx
xor ecx, esi
and ecx, esi
xor esi, 0x602751d
dec edx
and edi, edx
shl edi, 5
bswap edi
jmp 0x4dac34
pop ebx
and esi, 0x612c9d3
or edi, esi
or edi, esi
mov edx, 0x61389a6
and edi, 0x613c90c
and ecx, edx
jmp 0x4db3f7
push 0xf914fc28
xor ecx, edi
or edx, ecx
xchg ecx, edx
bswap edi
dec edx
or edi, esi
xor esi, edx
sub edi, edx
add esi, edi
xor edx, edi
bswap ecx
sub esi, edx
and ecx, edi
jmp 0x4db045
push 0xf922fa0b
add ecx, edi
shr edi, 0x1b
xor edi, esi
sub ecx, 0x61d76bc
add edi, esi
sub esi, ecx
mov edi, 0x61e4344
mov ecx, esi
and edx, 0x61ec22f
jmp 0x4dad8a
mov ebx, 0x123b2f04
mov ecx, edi
xor esi, 0x6251cea
sub esi, ecx
sub ecx, edi
mov ecx, edx
dec edi
and ecx, edi
mov edi, edx
not edi
xor edi, ecx
jmp 0x4d9226
push 0xf9157b1e
add esi, edx
mov esi, 0x6317786
add esi, ecx
jmp 0x4d9939
push 0xf9208c02
sub edi, edx
dec edi
mov esi, ecx
dec edi
or esi, edx
bswap edi
add edx, 0x6475d6a
sub edi, esi
sub edx, ecx
add esi, 0x648314a
xchg esi, ecx
dec edi
shr edi, 0x1a
or edi, ecx
mov esi, ecx
jmp 0x4d9c16
push 0x40
mov ecx, edi
and esi, edx
jmp 0x4d9a3c
call fcn.004dad3d
xchg edi, esi
xchg esi, edx
add esi, 0x64af043
shr ecx, 9
and edi, edx
inc esi
and esi, edx
or edx, esi
xor edi, edx
sub esi, ecx
jmp 0x4da188
pop ebx
neg edx
shl edi, 0xf
sub edi, edx
xor esi, ecx
add ecx, edi
bswap esi
sub edi, ecx
and edx, 0x652f8a6
mov ecx, edi
and edi, 0x65377d5
not ecx
sub edx, ecx
dec edx
jmp 0x4d94f4
call ebx
bswap esi
sub edx, ecx
xor edi, esi
not edi
sub edx, edi
and edx, ecx
and edx, 0x65a013f
nop
shr ecx, 0x16
jmp 0x4d8e9b
pop ebx
mov edi, ecx
or edi, ecx
sub esi, edx
dec esi
jmp 0x4da71c
pop ebx
bswap ecx
not ecx
rol edx, 0x14
shr ecx, 0xa
mov ecx, edx
bswap esi
xchg edi, ecx
and ecx, 0x665e0cf
mov ecx, 0x6662118
xchg esi, edx
neg esi
jmp 0x4d8634
mov ebx, 0x2a371b56
xchg esi, edx
ror ecx, 6
or edi, ecx
xor edx, esi
mov ecx, 0x6764e9e
mov ecx, edi
sub edx, edi
sub edx, edi
xchg esi, edi
bswap edx
jmp 0x4da92e
push 0xf930d957
xchg edx, esi
and edi, ecx
xor ecx, edi
mov ecx, 0x67b1aa1
jmp 0x4d8cff
pop ebx
inc edi
xchg edi, edx
or edi, edx
xor ecx, edx
xor esi, edi
add esi, 0x68272bb
sub ecx, 0x682b20f
xchg edi, ecx
xchg ecx, edx
xchg edx, esi
xor esi, ecx
bswap edx
add ecx, edx
add edx, 0x6848145
mov edi, edx
jmp 0x4da501
pop ebx
mov edi, edx
neg ecx
shr esi, 0x16
bswap edi
or edx, esi
ror ecx, 0x10
xor edi, 0x6899dcf
mov edi, 0x689ddd2
sub esi, 0x68a1c12
jmp 0x4db1eb
push 0xf92ad553
xchg esi, edi
sub edi, 0x68ab7f6
sub edi, esi
add ecx, edi
xor edi, 0x68b8651
mov esi, edi
add edx, esi
jmp 0x4da87d
push 0xf91fa68d
add ecx, 0x68c581a
or edi, edx
sub ecx, edi
rol edi, 0x19
and ecx, edi
jmp 0x4da4df
push 0xf91c0d8b
bswap edi
sub esi, ecx
or edi, ecx
and edx, esi
or edi, edx
xor edi, esi
add ecx, 0x6af392a
xor ecx, edx
mov edx, esi
and edx, 0x6b11ace
and edx, 0x6b17c9d
jmp 0x4d9039
pop ebx
or esi, 0x6c1815e
add edx, edi
xor edx, edi
bswap edi
sub edi, ecx
or esi, edx
and edx, edi
add edi, edx
jmp 0x4dabe0
call ebx
and ecx, esi
xor esi, 0x6c3e200
sub ecx, edx
add ecx, esi
xor edx, esi
shl esi, 4
xor ecx, edx
xchg edi, esi
xchg esi, ecx
add edx, esi
shl esi, 0xd
or edi, ecx
jmp 0x4dab31
mov ebx, 0x123b2f04
or edx, ecx
xor ecx, edi
and edx, edi
mov edi, esi
xor edx, ecx
and ecx, edi
not edx
or edx, 0x6cb2e72
jmp 0x4d9e4b
pop ebx
ror esi, 2
xor edx, 0x6d0702b
mov edi, esi
add esi, edi
bswap ecx
or ecx, edi
or esi, ecx
jmp 0x4db29f
push 0xf918c5a3
and edx, edi
or edi, esi
shl edi, 0x1d
mov edi, edx
add edx, ecx
xchg ecx, edx
xor edx, ecx
dec ecx
not ecx
sub ecx, 0x6d7b59d
sub edi, 0x6d7f601
neg edi
jmp 0x4d905a