Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff21
jne 0x40109d
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwSetInformationToken
call sub.ole32.dll_IIDFromString
call sub.ole32.dll_IIDFromString
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwSetInformationToken
call sub.ole32.dll_IIDFromString
call sub.user32.dll_CreateWindowExW
call sub.ntdll.dll_ZwQueryEaFile
call sub.ole32.dll_IIDFromString
call sub.user32.dll_CreateWindowExW
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwQueryEaFile
call sub.ole32.dll_IIDFromString
call sub.user32.dll_CreateWindowExW
call sub.ntdll.dll_ZwSetInformationToken
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwSetInformationToken
call sub.ole32.dll_IIDFromString
call sub.user32.dll_CreateWindowExW
call sub.user32.dll_CreateWindowExW
call sub.user32.dll_CreateWindowExW
call sub.ntdll.dll_ZwQueryEaFile
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff27
jne 0x40110d
call sub.ntdll.dll_ZwQueryEaFile
call sub.ole32.dll_IIDFromString
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwQueryEaFile
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwQueryEaFile
call sub.ole32.dll_IIDFromString
call sub.user32.dll_CreateWindowExW
call sub.ntdll.dll_ZwSetInformationToken
call sub.user32.dll_CreateWindowExW
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwQueryEaFile
call sub.ole32.dll_IIDFromString
call sub.user32.dll_CreateWindowExW
call sub.ntdll.dll_ZwSetInformationToken
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff1f
jne 0x401187
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwQueryEaFile
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwQueryEaFile
call sub.user32.dll_CreateWindowExW
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwQueryEaFile
call sub.user32.dll_CreateWindowExW
call sub.user32.dll_CreateWindowExW
call sub.ole32.dll_IIDFromString
call sub.user32.dll_CreateWindowExW
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwSetInformationToken
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwQueryEaFile
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff2b
jne 0x401201
call sub.ntdll.dll_ZwSetInformationToken
call sub.user32.dll_CreateWindowExW
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwQueryEaFile
call sub.ole32.dll_IIDFromString
call sub.ole32.dll_IIDFromString
call sub.user32.dll_CreateWindowExW
call sub.ntdll.dll_ZwSetInformationToken
call sub.user32.dll_CreateWindowExW
call sub.user32.dll_CreateWindowExW
call sub.ole32.dll_IIDFromString
call sub.ole32.dll_IIDFromString
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwSetInformationToken
call sub.user32.dll_CreateWindowExW
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwQueryEaFile
call sub.ntdll.dll_ZwSetInformationToken
call sub.ntdll.dll_ZwQueryEaFile
call sub.ole32.dll_IIDFromString
ret
jmp 0x4fa7a9
or edi, 0x43911532
jmp 0x4fc039
pop ebx
rol esi, 7
neg ecx
xor edx, ecx
mov ecx, edx
rol ecx, 0x11
inc esi
or edx, edi
bswap esi
and edi, esi
sub edi, ecx
jmp 0x4fd2dd
mov ebx, 0x2a676233
inc esi
xor esi, 0x44e34af0
xor ecx, esi
add edx, 0x44e3c67f
mov edx, 0x44e406f5
xor edi, 0x44e4440c
xor edx, esi
or edx, ecx
add ecx, esi
jmp 0x4fc5ba
call fcn.004fd777
neg edi
add esi, ecx
mov ecx, 0x44e5ea7d
inc edi
jmp 0x4fd301
pop ebx
xor edi, 0x44eb7777
not edx
dec esi
xor edx, ecx
add edi, 0x44ec745f
inc edx
and esi, edi
neg esi
not ecx
xchg ecx, edi
mov ecx, 0x44ee00d2
add edx, edi
bswap esi
and edx, edi
xchg edx, edi
jmp 0x4fd7f9
pop ebx
neg edi
xor edx, 0x450c59fe
or esi, ecx
add edi, 0x450ce454
not edi
jmp 0x4fc63c
push 0x401400
rol esi, 9
sub edx, edi
ror ecx, 0xe
inc esi
mov edi, edx
sub edi, ecx
mov esi, ecx
xor esi, edx
xor esi, edi
mov edi, 0x4521d1a3
xor esi, edx
jmp 0x4fc29f
pop ebx
xchg ecx, esi
or esi, 0x4527e107
shr esi, 0x1d
neg esi
nop
or edx, edi
and ecx, 0x452929c0
sub esi, ecx
jmp 0x4fc290
push 0x43a73d1d
add ecx, 0x45340bf2
sub esi, edx
sub edx, ecx
and edi, 0x4535adf4
sub edi, esi
sub esi, edi
jmp 0x4fd458
pop ebx
or esi, edx
xchg edx, edi
shl ecx, 3
xor edx, edi
or edx, edi
not edx
bswap edi
ror edx, 0x1f
xor esi, 0x45600d7e
jmp 0x4fcf6c
push 0x4395c645
inc edx
dec esi
not ecx
jmp 0x4fb87c
push 0x43b3f0f8
sub edx, esi
or esi, 0x462825ed
add edx, edi
or ecx, esi
mov ecx, edi
xchg esi, ecx
and esi, edx
xor ecx, esi
add edi, esi
add edi, ecx
and edi, esi
jmp 0x4fd50c
push 0x43b6d499
xor edi, edx
xchg edi, edx
or ecx, edi
shl edi, 0x1d
inc ecx
dec esi
jmp 0x4fc71a
push 0x43b07810
xchg edi, ecx
xor edx, esi
xor esi, edx
or edi, 0x4644ca89
or edx, 0x464509cf
sub esi, edi
add edi, 0x46459964
add esi, edx
jmp 0x4fb8dc
call ebx
add edi, 0x465056f7
shl ecx, 0x19
mov ecx, 0x4650d5bb
mov ecx, esi
mov ecx, edx
xchg edx, esi
xchg esi, edi
and esi, edx
add edx, edi
mov ecx, 0x465293b6
jmp 0x4fac3d
pop ebx
or edx, ecx
mov edi, edx
ror edx, 0x10
and esi, 0x4653a6ba
bswap edi
add ecx, edx
nop
or esi, 0x4654b4dd
mov edx, ecx
or edi, 0x46552f3b
or edi, esi
dec esi
jmp 0x4fc743
mov ebx, 0x6332a2e
sub edi, 0x4664278e
or edx, esi
sub edx, 0x4664a3f5
xor esi, edi
and edx, edi
add esi, edx
rol edi, 0x10
xor edi, ecx
or ecx, edx
jmp 0x4fb3b5
call ebx
bswap edx
sub ecx, edi
or edx, ecx
sub edx, 0x466999da
and edx, 0x4669d9a6
xchg edx, ecx
xor edi, 0x466a69ad
xor edi, esi
dec ecx
add edi, esi
xor edi, esi
sub edi, 0x466ba20d
xor esi, edi
jmp 0x4fd04a
pop ebx
and ecx, 0x46796b23
dec esi
shr edx, 4
shl ecx, 0xf
sub edi, ecx
sub esi, ecx
bswap edi
or edx, esi
bswap edx
bswap esi
xor ecx, edi
shl edi, 0xd
xor edi, edx
xor edx, ecx
mov edi, edx
xor edx, esi
jmp 0x4fbb91
push 0x439ea6ae
inc ecx
sub ecx, esi
xor esi, ecx
xor edx, esi
xchg edi, ecx
add esi, edx
jmp 0x4fb608
call fcn.004fd777
and edx, ecx
add edi, esi
mov edi, ecx
or edi, edx
or edi, 0x468c40c2
sub edi, ecx
jmp 0x4fe0f3
call fcn.004fd777
xchg edi, ecx
or edx, edi
ror esi, 0x16
rol edx, 0x1b
mov edi, 0x469e42a6
add edx, 0x469e82b1
mov edx, edi
jmp 0x4fc2c2
push 0x439eee4b
add esi, 0x46c83967
and ecx, esi
mov edx, edi
mov ecx, edx
mov edx, 0x46c92dba
shl edi, 2
mov edi, ecx
sub esi, ecx
sub edx, edi
xor edx, edi
jmp 0x4fe444
pop ebx
bswap ecx
shl esi, 0xc
ror esi, 0xb
ror esi, 4
xor edx, esi
rol esi, 7
or edi, esi
mov edi, esi
and edi, 0x46cf7ad6
not ecx
jmp 0x4fbdb3
pop ebx
and ecx, 0x46d014d1
add edi, ecx
sub ecx, esi
xor edx, ecx
jmp 0x4fe55b
mov ebx, 0x6332a2e
ror edx, 6
xchg edi, ecx
and ecx, esi
sub edi, ecx
and edi, edx
jmp 0x4fe3ba
pop ebx
or esi, ecx
sub edx, 0x46e3aeee
ror esi, 3
bswap edi
or ecx, edx
bswap edi
and ecx, edi
jmp 0x4fb8b3
mov ebx, 0x6332a2e
xchg edx, ecx
mov esi, edi
sub edi, 0x46f0860c
sub ecx, 0x46f0c68c
add edi, edx
ror ecx, 0xb
shl esi, 0x10
shr ecx, 0x18
ror edx, 2
and edx, esi
jmp 0x4fc355
push 0x43960fa4
dec edi
mov edi, edx
sub edx, edi
sub edi, esi
shl edx, 0x18
inc ecx
neg ecx
dec ecx
and ecx, 0x46f7119c
xor edi, esi
jmp 0x4fbea0
push 0x43a1810c
sub esi, 0x46f9906a
and edx, ecx
add esi, ecx
xchg esi, ecx
sub esi, ecx
neg edi
shr edi, 0x19
add ecx, edx
neg edi
mov ecx, edx
xor ecx, 0x46fc0321
jmp 0x4fbc17
push 0x43b0c274
and esi, edx
add edi, esi
rol esi, 5
or esi, edx
or esi, edi
and esi, 0x46fd9a2b
and edi, ecx
jmp 0x4fa888
call ebx
add esi, edi
mov edi, edx
mov edx, 0x46fea5af
and ecx, edx
add edi, edx
ror ecx, 0x16
jmp 0x4fb672
pop ebx
dec edx
neg esi
and ecx, edi
or edx, edi
mov esi, ecx
not ecx
mov ecx, edx
xchg esi, ecx
add edi, esi
bswap edi
shr edi, 4
or edx, 0x4704c929
or edx, 0x47050718
and ecx, edx
xchg esi, ecx
xor esi, edx
jmp 0x4fba4e
push 0x439e5ceb
bswap edx
xchg edx, edi
and esi, ecx
xchg esi, ecx
or esi, edi
or esi, edi
mov edx, ecx
sub edi, 0x470b15ad
xor edx, edi
mov esi, 0x470b90c4
jmp 0x4fb2ef
pop ebx
xchg edi, edx
xor esi, 0x4715f03e
and edx, edi
xor ecx, edx
sub edi, 0x4716a677
add ecx, esi
sub edx, ecx
and edi, 0x47176bd8
jmp 0x4fbedd
pop ebx
sub esi, edx
and ecx, edx
sub edx, ecx
jmp 0x4fb9a0
pop ebx
xchg ecx, edx
not edi
sub edx, esi
xchg edx, ecx
rol edx, 3
jmp 0x4fcb30
push 0x43a1cbf1
xchg edi, ecx
xchg esi, edi
bswap esi
xor edx, edi
or edi, ecx
and edx, edi
or esi, 0x473585e7
neg ecx
inc edx
jmp 0x4fe654
push esp
and edx, edi
xchg esi, edx
mov esi, 0x473cfd2e
and ecx, 0x473d3d86
dec ecx
xor edi, 0x473dcd14
jmp 0x4fcd28
push 0x43957e05
inc esi
add edi, ecx
xchg esi, ecx
xor ecx, edi
and edx, esi
shr edx, 0x1c
sub edx, esi
add edx, 0x473feb64
neg ecx
neg ecx
jmp 0x4fade9
mov ebx, 0x2a676233
add edx, esi
mov edx, ecx
xchg edx, edi
add ecx, esi
mov ecx, edi
not esi
sub ecx, edx
jmp 0x4fe313
pop ebx
inc ecx
xchg edi, ecx
sub ecx, edx
and esi, edx
not edx
jmp 0x4fe113
push 0x43a4a982
or edx, esi
or esi, 0x4755f65d
add ecx, 0x475636c5
inc ecx
xor esi, 0x4756c51f
xor esi, 0x475705f7
xor edi, edx
or ecx, 0x475782cb
jmp 0x4fd0e9
push 0x43a25ec2
and esi, edx
xchg ecx, edi
neg esi
inc edi
shl edi, 0x1b
sub edx, ecx
and edi, 0x475968ea
xchg esi, edi
jmp 0x4fb13f
push 0x4396561d
ror edx, 0x13
mov edx, 0x47652266
rol edi, 9
add edx, edi
sub esi, edi
xor edi, edx
or ecx, 0x47666bf6
jmp 0x4fd967
push 0x43af9d89
add ecx, edx
add edi, ecx
add edx, ecx
sub edi, edx
and ecx, esi
jmp 0x4fe721
pop ebx
sub ecx, edi
nop
inc edx
sub edx, 0x477b566e
xor esi, ecx
jmp 0x4fadb7
push 0x43a6abb1
mov edx, esi
and esi, 0x477e8fc5
shr edx, 0x14
or esi, 0x477f1f82
add esi, edi
mov edi, edx
jmp 0x4fcbfd
push 0x43952ce4
not edi
or esi, 0x4781942e
and edx, esi
add ecx, esi
and ecx, edx
and edi, ecx
rol edx, 0x10
add esi, edi
mov edx, ecx
jmp 0x4fbcaa
pop ebx
neg edi
inc edi
not edx
xor edi, ecx
or edx, edi
and ecx, 0x478814c8
xor edi, edx
or edx, 0x47888ed2
or ecx, 0x4788cceb
jmp 0x4fdf0f
push 0x439932cc
ror edi, 3
shl ecx, 0x14
sub esi, 0x4789a09f
xchg ecx, edi
and edx, esi
sub edx, esi
xor edi, esi
sub esi, ecx
and edi, edx
mov ecx, 0x478b599e
xor edx, esi
rol edi, 0x16
sub edx, esi
not esi
shr esi, 0xb
xor edx, 0x478ccb43
jmp 0x4fbd06
pop ebx
mov edi, ecx
add esi, edx
or edi, 0x479bc7d0
xor ecx, edi
mov esi, edx
sub esi, ecx
xchg ecx, edx
or ecx, edx
mov ecx, edi
mov ecx, 0x479d7bb3
xchg esi, ecx
jmp 0x4fcb11
call ebx
or edx, ecx
xchg edx, edi
xor esi, edx
and edx, ecx
add edx, edi
or esi, 0x479f4d87
jmp 0x4fb054
push 0x439ca000
mov edx, ecx
or edx, edi
xor edx, edi
mov edi, esi
xchg edx, edi
bswap ecx
bswap edx
neg esi
xchg ecx, edi
or edx, 0x47a1d50d
and ecx, edi
mov edi, edx
add esi, edx
jmp 0x4fdb7d
call fcn.004fd777
sub edi, esi
inc ecx
add ecx, 0x47a5b73b
sub edx, ecx
xchg edx, ecx
mov edi, edx
and edi, edx
dec ecx
mov edx, 0x47a73463
add edi, 0x47a77368
or esi, ecx
jmp 0x4fb17c
pop ebx
xchg edx, ecx
mov ecx, esi
rol edi, 0x1a
or edx, esi
jmp 0x4fcbdb
call ebx
not edx
and ecx, edx
inc edi
xchg ecx, edx
sub edx, esi
xchg esi, edx
sub edx, 0x47af09a0
rol esi, 0x16
xchg edi, edx
dec edx
ror ecx, 0x17
add ecx, edi
jmp 0x4fbbd8
call ebx
mov esi, edx
mov ecx, 0x47b0e1af
sub esi, edx
add edi, edx
dec esi
shl esi, 0x1f
sub esi, ecx
or esi, ecx
xor ecx, edx
mov esi, edi
shr edi, 0xc
or esi, ecx
jmp 0x4fc822
pop ebx
shl edi, 0x16
xchg esi, edx
xor edi, ecx
mov edi, edx
ror ecx, 0x19
neg ecx
jmp 0x4fe491
call fcn.004fd777
sub edx, 0x47bcab3b
xchg esi, edi
xor edx, ecx
inc edx
jmp 0x4fd021
push 0x43ad03d9
and esi, ecx
or edi, edx
add edx, edi
not edx
xor ecx, edi
sub edx, ecx
sub edx, 0x47cab776
and edx, edi
jmp 0x4fd839
push 0x43ac7015
xor edi, esi
sub edi, 0x47d84a5b
sub edi, 0x47d88980
dec edx
xor edx, esi
xor edi, 0x47d945a7
and esi, 0x47d994ce
bswap ecx
bswap ecx
and edi, esi
and edx, esi
and edx, ecx
xor esi, edi
jmp 0x4fcd95
call fcn.004fd777
xor esi, edx
xchg ecx, esi
dec edx
xor ecx, esi
add edi, ecx
not esi
xor ecx, edi
add edi, 0x47ea4c42
jmp 0x4fc1d0
pop ebx
ror esi, 0xe
xor edi, edx
mov edx, esi
xor edi, 0x47f3daae
or edx, edi
mov ecx, edi
and ecx, edi
ror ecx, 0x1d
add ecx, edx
mov edx, edi
sub edx, esi
shr ecx, 0x19
xor edi, esi
neg edi
jmp 0x4fd28e
pop ebx
nop
or edi, ecx
rol edi, 0x11
sub edi, edx
mov edi, 0x47f79956
xor edx, edi
xor edx, 0x47f827d9
and edx, esi
mov esi, edx
sub edx, edi
bswap edx
add esi, edi
sub edi, esi
add edi, 0x47f9d55b
jmp 0x4fe0ca
push 0x43b71dfb
xor edx, esi
mov ecx, edi
or edx, edi
mov ecx, edx
sub edi, esi
mov esi, edi
sub edi, esi
add edi, ecx
and edi, 0x4805ab95
or ecx, edi
mov esi, ecx
mov edi, esi
rol edi, 0xd
jmp 0x4fde6f
pop ebx
inc edi
and esi, edx
shl ecx, 0xf
sub ecx, 0x4807b41d
mov esi, ecx
ror edx, 2
sub edx, edi
not esi
not edi
mov ecx, edx
sub ecx, 0x480a48f8
jmp 0x4fc30e
pop ebx
sub edi, ecx
and esi, edx
xchg esi, edx
or edi, ecx
sub esi, edi
jmp 0x4fc079
pop ebx
xor edi, ecx
mov edi, edx
add edx, esi
xor ecx, edx
shl edi, 0xe
mov edx, 0x481b1b15
shl ecx, 0x1d
bswap ecx
sub esi, edx
jmp 0x4faabf
push 0x43b02f34
shl edx, 2
add edx, ecx
mov edx, esi
and esi, edx
xor edi, 0x481d3d8b
or ecx, edi
dec ecx
mov esi, 0x481e0aa6
nop
jmp 0x4faf65
call ebx
sub esi, ecx
sub esi, ecx
and ecx, esi
add ecx, 0x4842ac3d
rol ecx, 0x14
and esi, edx
or edi, ecx
or ecx, edi
bswap esi
and esi, ecx
mov edx, ecx
jmp 0x4fc665
push 0x4398e824
bswap edx
xor edx, edi
add ecx, edi
xchg esi, edi
shr edx, 0x13
ror edx, 0x1d
and edx, edi
sub ecx, edi
shr edx, 0x14
jmp 0x4fc09c
push 0x43abdda0
xor ecx, 0x485bf322
sub edx, esi
mov edi, 0x485c867c
xchg edx, edi
and edi, ecx
or edx, edi
xchg ecx, edx
rol ecx, 0x1f
add edx, ecx
jmp 0x4fd732
push 0x439ae988
xchg edi, edx
shl edi, 0x13
or edx, 0x486d62f0
and esi, 0x486da197
xchg ecx, edi
xor edx, ecx
nop
add edi, ecx
jmp 0x4fb6db
push 0x43a6f4f8
rol ecx, 0xe
xor esi, ecx
shl edi, 0x11
rol edx, 0x14
xor ecx, edi
or edi, edx
and ecx, 0x48707ca1
xchg esi, ecx
sub edi, edx
jmp 0x4faca3
push 0x43b68ab0
mov edi, ecx
xor edi, 0x487699e9
xchg esi, edi
sub esi, edi
xor esi, edx
or ecx, 0x487793c1
and edi, edx
and edi, ecx
inc edi
sub edx, esi
rol esi, 0x1c
bswap edx
neg esi
xor edi, edx
jmp 0x4fae78
push esp
bswap esi
shl ecx, 4
sub esi, edx
inc edx
rol edi, 9
add edx, edi
neg edx
sub edx, ecx
sub ecx, edi
xor esi, edi
jmp 0x4fe4fc
pop ebx
xchg ecx, edi
sub ecx, esi
add ecx, edi
inc edi
mov edx, 0x488aed1d
xor edi, esi
and ecx, edx
xchg edi, ecx
mov edx, esi
sub edi, edx
mov ecx, 0x488c76ce
mov edx, edi
mov edx, ecx
jmp 0x4fcee6
push 0x43acba81
shl esi, 0x13
mov edx, esi
xor esi, edx
add edi, edx
or ecx, edx
and edi, esi
or edx, 0x488f8708
shr ecx, 0x10
jmp 0x4fc400
call fcn.004fd777
or edx, 0x48998e03
ror edi, 3
sub edi, 0x489a0d4e
xor esi, ecx
xor esi, edx
mov esi, ecx
bswap ecx
xchg edx, edi
mov esi, 0x489b978f
xor ecx, edi
xchg ecx, edi
jmp 0x4fb8f9
call ebx
add esi, edx
bswap ecx
ror esi, 1
mov edx, edi
neg ecx
xor edi, 0x489f53b1
shr esi, 0x16
or edi, edx
xchg ecx, edi
xchg edi, esi
jmp 0x4fe398
mov ebx, 0x4132136a
mov esi, ecx
bswap edx
mov esi, edi
add edx, edi
shr ecx, 0x1b
shr ecx, 0x12
xor esi, 0x48ac3d35
mov ecx, 0x48ac7db3
jmp 0x4fd0ad
pop ebx
add ecx, esi
add ecx, edx
mov ecx, edi
not edi
and esi, edx
sub esi, edi
sub edx, esi
sub esi, ecx
xchg edi, edx
sub edi, esi
jmp 0x4fc1ad
call ebx
add ecx, esi
xor ecx, esi
mov edi, 0x4a6a14ac
add edi, ecx
and edx, 0x4a6aa106
dec edx
xor ecx, 0x4a6b25b5
and edi, edx
xchg edi, ecx
sub esi, 0x4a6c3182
jmp 0x4fa909
pop ebx
add edi, 0x4a6c92ed
sub edi, edx
and edx, 0x4a6d20b6
inc edx
ror edx, 0xb
and esi, edx
or edi, esi
or edi, ecx
jmp fcn.004fb304
call fcn.004fd777
bswap esi
shr esi, 2
add edi, ecx
mov edi, ecx
or esi, ecx
sub esi, edi
jmp 0x4fbc8e
push 0x43a4f12a
ror edi, 0xd
sub edi, ecx
xor edx, edi
inc edi
or edi, 0x4a81cdd8
or edi, 0x4a820c68
jmp 0x4fb82f
mov ebx, 0x2a676233
xor edx, ecx
or edx, esi
or ecx, edx
rol ecx, 0x1c
sub esi, ecx
add edx, ecx
and ecx, edi
add edi, esi
add esi, 0x4a91dd3c
or edx, esi
jmp 0x4fd980
call ebx
and edx, ecx
xor edi, esi
or esi, 0x4a9c5f58
or esi, 0x4a9c9e26
dec esi
dec edx
xchg esi, ecx
add edi, ecx
jmp 0x4fb650
pop ebx
xor edi, edx
xchg ecx, edx
sub ecx, esi
shl ecx, 0x19
mov esi, edi
mov edi, esi
mov ecx, edi
sub ecx, esi
sub edx, 0x4aa90e84
jmp 0x4fbdc2
pop ebx
or ecx, 0x4aa9663b
nop
or ecx, esi
sub edx, esi
xor edi, 0x4aaa6dbf
or esi, ecx
xor esi, ecx
or edx, ecx
shl ecx, 1
mov edi, edx
jmp 0x4fcd63
pop ebx
sub edx, 0x4aabf351
or esi, ecx
add esi, ecx
jmp 0x4fcc6f
push 0x43b35cb2
xor ecx, esi
xor esi, edx
mov edx, edi
xor ecx, 0x4aad8b99
dec ecx
or edi, esi
and edx, ecx
mov esi, 0x4aae91e6
xor edx, edi
xchg edx, esi
jmp 0x4fe45d
call ebx
mov edx, edi
rol ecx, 0x14
sub ecx, esi
or esi, 0x4ab018ac
bswap edi
add ecx, 0x4ab0a575
add esi, edx
shr edx, 0x13
xor esi, edx
jmp 0x4fddff
push 0xf93a9
shr edx, 7
or edi, ecx
or edi, 0x4abe5f98
or ecx, 0x4abe9e02
xor esi, ecx
and esi, 0x4abf1b76
mov esi, 0x4abf5b8a
shr esi, 0xe
shl edx, 7
jmp 0x4fabdd
mov ebx, 0x2a676233
shr edi, 0x17
xchg esi, edx
mov ecx, edx
xchg edx, esi
mov edi, ecx
sub edi, esi
not edi
xchg edx, esi
sub edi, ecx
xor esi, edi
add esi, 0x4ac2caa0
xor esi, edi
jmp 0x4fdc0f
mov ebx, 0x2a676233
add edx, edi
add edx, esi
or edx, ecx
xor edx, 0x4ac73c3e
xor edi, edx
add ecx, edx
add esi, edx
or esi, edi
add edx, esi
ror ecx, 0x17
sub edi, 0x4ac9058d
xor edx, edi
jmp 0x4fd483
call fcn.004fd777
and edi, ecx
or edx, esi
or edi, 0x4aca1b88
not edi
bswap edi
add ecx, edi
xor ecx, edx
mov edi, 0x4acb6d86
mov ecx, edi
mov ecx, edi
not esi
nop
jmp 0x4fce52
push 0x43b43a06
inc ecx
add esi, 0x4ad37016
add esi, edi
add edx, 0x4ad3ec74
not edi
xor edi, edx
sub edi, edx
mov edi, 0x4ad4fd47
xchg esi, edi
add ecx, edi
jmp 0x4fd406
push 0x43ac2633
xor esi, 0x711258d6
xchg edx, edi
neg ecx
add ecx, 0x7113423a
xchg edx, ecx
or edi, edx
mov edx, ecx
mov edi, esi
xor ecx, edi
add edi, edx
shl ecx, 0x18
inc esi
jmp 0x4fc4e0
pop ebx
and ecx, 0x716e2ce6
xchg edi, ecx
xor esi, 0x716fd744
xor esi, edi
mov edi, ecx
and edi, edx
shr edi, 0xa
jmp 0x4fc007
mov ebx, 0x2a676233
or edx, ecx
not esi
shl esi, 0x12
xor edi, edx
xor ecx, esi
xor edi, esi
dec edx
add esi, edi
not edx
jmp 0x4fce26
mov ebx, 0x6332a2e
shr ecx, 8
sub edi, ecx
mov esi, edx
sub ecx, 0x72250785
and ecx, esi
jmp 0x4fa8b2
call fcn.004fd777
add ecx, edi
xor edx, 0x7227c32f
add edi, edx
and edi, esi
and edx, esi
xor edi, esi
ror esi, 4
sub ecx, edi
sub edx, ecx
add edi, esi
jmp 0x4fe2aa
mov ebx, 0x6332a2e
and edx, edi
shr ecx, 0x11
add edi, ecx
mov ecx, edi
not edi
xor ecx, edi
ror edx, 5
mov ecx, edx
or esi, edi
jmp 0x4fb316
call fcn.004fd777
ror esi, 0xe
xchg esi, ecx
inc esi
add edx, ecx
sub ecx, edx
jmp 0x4fd1ec
pop ebx
or ecx, edi
sub edi, edx
and edx, 0x7329479d
dec ecx
or edx, 0x732a4730
mov edx, 0x732ac718
xor edi, ecx
sub edx, ecx
xor ecx, edx
or ecx, esi
add ecx, edx
jmp 0x4fbfc8
mov ebx, 0x6332a2e
sub edi, ecx
mov edx, edi
add ecx, 0x733aecc0
shl ecx, 0x1c
inc edi
add edi, edx
sub ecx, edi
rol edx, 0x1a
add ecx, esi
xor edx, ecx
add ecx, 0x733ef63a
or esi, edi
jmp 0x4fc227
pop ebx
xchg edx, esi
ror edx, 0x1d
add ecx, 0x7350c005
not edi
or edx, 0x7352bb69
neg edi
shr edi, 3
xchg edi, ecx
add edi, 0x73564515
mov edx, 0x73572405
and edi, esi
jmp 0x4fb777
push 0x439c58bc
or ecx, esi
and edx, edi
or edx, edi
add esi, ecx
add edi, esi
neg ecx
jmp 0x4fc1e7
call ebx
or esi, ecx
xor ecx, esi
sub ecx, 0x7395a225
xchg ecx, esi
mov edx, 0x73969d72
sub edx, ecx
mov edx, ecx
xchg ecx, edi
not esi
jmp 0x4fb25c
pop ebx
and edx, ecx
mov esi, 0x7399e3ed
add edi, ecx
bswap edx
or edi, esi
sub edi, edx
xor edi, ecx
or ecx, edi
xchg edx, esi
rol esi, 8
jmp 0x4fd2cd
pop ebx
and esi, 0x73d7905a
xor esi, edx
or edx, edi
add esi, 0x73d96843
add ecx, 0x73d9e7f9
jmp 0x4fb934
call ebx
and edx, 0x73daa7fd
xor edi, esi
xchg ecx, edx
and edi, edx
xor ecx, edx
not esi
neg esi
or edi, 0x73de3874
xor ecx, 0x73deb8b0
and edi, 0x73df38f1
and edx, 0x73dfb674
jmp 0x4fc768
call fcn.004fd777
or ecx, edi
xchg ecx, esi
xor edi, edx
add ecx, esi
not edi
shr esi, 4
or edi, esi
or esi, ecx
xchg esi, edi
xchg edx, edi
sub esi, 0x73f7b4d0
sub edx, esi
mov edx, edi
or edi, ecx
jmp 0x4fb02e
pop ebx
rol ecx, 0x1a
shr edx, 0x15
sub esi, edi
or ecx, edi
xor edx, 0x741cb63b
mov edx, ecx
and ecx, 0x741dad03
xchg esi, ecx
sub edi, esi
jmp 0x4fd2ab
call fcn.004fd777
xchg esi, edx
nop
mov edi, esi
sub edi, 0x7426b481
xchg esi, edx
shr edi, 0x1f
or edi, edx
neg edx
and edx, 0x742f83d6
xchg ecx, esi
jmp 0x4fca38
push 0x439f3895
mov esi, 0x7556a7bc
add esi, 0x7557172a
add edi, ecx
add edx, ecx
jmp 0x4fd155
push 0x43b3a6b4
mov ecx, edi
sub edx, edi
mov edx, edi
mov edi, esi
sub ecx, edi
sub edi, edx
or ecx, edx
not ecx
xchg edx, esi
add edx, esi
sub edi, edx
inc edx
add edi, edx
mov edi, esi
jmp 0x4fadf7
pop ebx
add ecx, 0x755f0fb1
xor esi, edx
sub esi, 0x755fbf07
and edx, ecx
shr edi, 7
mov esi, edi
bswap edi
xor edx, esi
sub ecx, 0x7561e6e2
or edi, 0x75623f88
or edi, esi
ror esi, 7
jmp 0x4fa85e
push 0x40
xor edi, edx
add ecx, edx
or edx, esi
or edi, ecx
and ecx, esi
add edi, esi
or edx, ecx
add ecx, esi
sub ecx, edx
sub ecx, edi
and edi, 0x756e2329
jmp 0x4fd3d8
pop ebx
or ecx, edi
bswap edi
neg esi
mov edx, edi
and edi, esi
mov esi, ecx
sub esi, edi
rol edx, 0x1b
and ecx, edx
inc edi
jmp 0x4fe28e
push 0x43a215a0
or edi, esi
mov ecx, esi
and edx, edi
sub esi, edx
neg edx
or edx, esi
or ecx, edx
and edx, ecx
rol edx, 8
mov edx, esi
add esi, edx
xchg edi, esi
xor edi, 0x75930aa8
jmp 0x4fbdef
push 0x43afe6c1
inc esi
xor edx, ecx
shl esi, 0x19
xor edi, ecx
ror esi, 0x10
mov esi, edx
mov ecx, esi
and edi, ecx
xor esi, edi
dec esi
jmp 0x4fc83f