Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Set file attributes

Disassembly:
xor esi, 0xa68f1402
xchg edi, edx
call sub.kernel32.dll_GetSystemDefaultLCID
or edx, 0xa68fa3db
and esi, edx
or edx, 0xa6900e76
neg ecx
add ecx, esi
or ecx, 0xa690adff
not ecx
mov edx, edi
cmp eax, 0xffffff35
jne 0x401094
call sub.kernel32.dll_SetFileAttributesW
call main
call sub.kernel32.dll_SetFileAttributesW
call main
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.kernel32.dll_SetFileAttributesW
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call main
call sub.ntdll.dll_RtlGetProcessHeaps
ret
mov edx, 0xa692648c
mov edi, ecx
xchg esi, edi
call sub.user32.dll_GetProcessWindowStation
and edx, ecx
xchg ecx, edi
xor esi, edi
cmp eax, 0xfffffee7
jne 0x40113b
call main
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.kernel32.dll_SetFileAttributesW
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.kernel32.dll_SetFileAttributesW
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call main
ret
and esi, 0xa6a7a8a1
ror edx, 1
call sub.user32.dll_GetProcessWindowStation
add ecx, edi
cmp eax, 0xffffff27
jne 0x4011de
call sub.kernel32.dll_SetFileAttributesW
call main
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call main
call sub.kernel32.dll_SetFileAttributesW
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.kernel32.dll_SetFileAttributesW
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.kernel32.dll_SetFileAttributesW
ret
mov esi, edi
call sub.kernel32.dll_GetSystemDefaultLCID
xchg esi, edi
add edx, esi
not ecx
add esi, edx
or edx, 0xa6d7a142
cmp eax, 0xffffff2c
jne 0x40129a
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.kernel32.dll_SetFileAttributesW
call main
call main
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call main
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.ntdll.dll_RtlGetProcessHeaps
call sub.kernel32.dll_SetFileAttributesW
call sub.kernel32.dll_SetFileAttributesW
call sub.ntdll.dll_RtlGetProcessHeaps
call main
call sub.ntdll.dll_RtlGetProcessHeaps
ret
jmp 0x4a03ac
or ecx, esi
mov esi, 0xa7ca519c
jmp 0x4a28b2
push 0xa7f86063
sub ecx, 0xafcc0408
xor ecx, edi
shl ecx, 0x1e
and edi, 0xafcd2138
add edi, 0xafcd7d34
not edx
xor edi, edx
or edi, ebx
sub edx, ecx
xor ebx, edi
sub edx, ebx
mov edx, ecx
jmp 0x4a2238
pop esi
or ecx, edx
mov ebx, ecx
xchg edx, edi
add edx, 0xafd0ac2a
dec edi
inc edx
mov edi, 0xafd14c2b
shr ecx, 0xf
xor edx, 0xafd1baa5
shl edx, 0x17
jmp 0x4a3710
push 0xa7f2cce7
sub edx, 0xafdb6261
add edi, edx
nop
sub ecx, edx
sub edx, edi
and edi, ecx
jmp 0x4a2f33
mov esi, 0x123b2f04
or ebx, edi
mov ebx, edx
sub edi, edx
mov ecx, 0xafded6e6
dec edx
or edx, edi
sub ebx, edi
neg ebx
sub edi, ecx
jmp 0x4a062d
push 0xa7dc5651
add ebx, edx
or ebx, 0xafe51f1b
add ecx, edx
sub ecx, ebx
xor ebx, ecx
bswap edi
xchg edi, edx
jmp 0x4a31cd
push 0xa830a65d
or ecx, ebx
or ecx, edx
sub ebx, edx
and ecx, ebx
add ecx, ebx
and edi, ebx
add ecx, 0xaff9c1ed
jmp 0x4a3b41
push 0xa7dc11e7
sub ecx, 0xb002a883
and ebx, edi
add edx, ebx
sub edx, edi
ror edx, 0xf
add edx, ecx
xchg edx, edi
add ecx, edi
and edi, ebx
xor ecx, 0xb0048086
shr ecx, 0x13
xchg edi, ebx
add ecx, edi
or ecx, ebx
add edi, edx
jmp 0x4a04fb
call fcn.004a2c93
shl edx, 0x14
inc edi
xor edi, 0xb0063170
rol edi, 0x19
shl ebx, 8
shr ebx, 2
not ecx
inc ebx
add ecx, edi
and edi, edx
inc edx
jmp 0x4a20ce
mov esi, 0x123b2f04
mov edx, ebx
bswap ebx
xchg edx, ebx
sub ebx, ecx
not edi
dec ecx
sub ecx, edx
xchg edi, ebx
sub ebx, ecx
or ecx, edi
sub ecx, ebx
mov edi, edx
jmp 0x4a34d6
push 0xa8307f56
xor edx, ecx
add edi, 0xb032fb25
inc ebx
xor edi, edx
xchg edx, edi
neg edx
and edi, ecx
dec edx
jmp 0x4a057a
mov esi, 0x123b2f04
or ecx, 0xb03ad366
shr edx, 0x15
sub edx, ecx
xchg ecx, ebx
add edi, edx
mov ebx, 0xb03bdc81
shl ebx, 0x14
ror edi, 0xa
and edi, ebx
mov edi, 0xb03cb088
jmp 0x4a1e7b
call esi
xchg edx, ebx
or edi, ecx
and ecx, edi
add ebx, edx
and edx, ecx
mov ebx, edi
xor ebx, edx
ror edx, 0xc
mov edi, ecx
sub ecx, edx
jmp 0x4a2b53
push 0xa82f3f56
xor edi, edx
xchg ebx, ecx
shl ebx, 0x19
sub ebx, edi
xor ebx, edx
inc edx
sub ecx, edi
or edx, 0xb0432534
jmp 0x4a1736
push 0xa82ef282
dec ecx
xchg edx, ebx
mov edi, 0xb045a6a1
xor edi, ebx
xchg edi, ebx
not edi
and edi, ebx
and edx, ecx
jmp 0x4a3649
pop esi
xchg edx, ecx
mov edx, ecx
and edx, ecx
xchg edx, ecx
inc ebx
and ecx, ebx
sub edi, 0xb05e615b
sub edx, ebx
and edx, edi
xor ebx, ecx
xchg ecx, edi
jmp 0x4a1c8c
push 0xa7ef3fb2
xor ebx, edi
bswap ecx
add ebx, edi
sub ecx, edi
sub edx, ebx
mov ebx, edx
xchg edx, ebx
add ecx, edi
add ecx, edx
sub edi, 0xb06df0c3
jmp 0x4a3660
call fcn.004a2c93
neg ebx
mov edi, 0xb083b537
rol edi, 5
not edx
xchg edx, ecx
mov ebx, 0xb085531c
or edx, ebx
bswap edx
jmp 0x4a2f63
mov esi, 0x2774562b
xor ecx, edx
rol edi, 0xd
mov edi, 0xb08746dc
and ecx, edi
not ecx
mov ecx, ebx
mov edx, 0xb088d396
shl ebx, 0x1f
rol ecx, 0x10
shl edx, 0x13
and edx, edi
jmp 0x4a3ad2
call esi
not ebx
shr edx, 0x17
add edi, ecx
add edx, edi
add ecx, 0xb08c3b3e
mov edi, edx
xchg edi, ebx
xchg ecx, edx
jmp 0x4a0e02
push 0xa7db453c
mov ecx, 0xb0a2d5c0
shr ebx, 0x10
shl edx, 0xe
sub ebx, 0xb0a3fd57
xor ecx, ebx
xchg ebx, edi
shl edx, 6
mov ecx, edx
bswap edi
mov ecx, edi
xor edx, ebx
xchg ecx, edi
not ebx
jmp 0x4a378c
call esi
xchg ecx, ebx
and edx, edi
add ecx, edi
neg ebx
xor edx, 0xb0b04bda
bswap ecx
mov edi, ebx
jmp 0x4a1f67
push 0xa7f81868
and edi, 0xb0c26793
add ecx, 0xb0c2c6fa
or edx, 0xb0c32130
mov edx, edi
or ebx, 0xb0c3db1f
xor ebx, edx
sub edx, edi
add ecx, ebx
add ecx, edx
jmp 0x4a03e2
pop esi
ror ecx, 0x1d
or ebx, edi
and edx, 0xb0cc9567
dec edx
not ecx
add edx, edi
xchg edx, ecx
jmp 0x4a2a5c
push 0xa8325f08
bswap edi
or edx, ebx
and edi, edx
mov edx, edi
sub ebx, edi
shr ecx, 8
or edi, ebx
xor edx, ebx
xchg ecx, edx
and ebx, ecx
shr edx, 0x1a
jmp 0x4a2368
mov esi, 0x123b2f04
and edi, ebx
add edi, edx
xchg edi, ecx
or ecx, ebx
rol edi, 5
mov ebx, edi
mov edx, ecx
shl ebx, 0x1d
sub ecx, edi
and edi, edx
mov edi, 0xb0f8e35a
jmp 0x4a184d
pop esi
xor edx, edi
mov ecx, edi
xor ebx, 0xb10a6e9c
mov edx, edi
sub edx, 0xb10b3885
jmp 0x4a3291
pop esi
add edx, ebx
sub edi, edx
inc ebx
xchg edi, edx
xchg edi, ecx
sub ecx, 0xb10da7bc
or ecx, 0xb10f474d
shl edx, 7
jmp 0x4a0a41
pop esi
sub edx, ebx
or edx, ebx
mov ebx, ecx
not edi
or ecx, edx
jmp 0x4a3a53
push 0xa7f56d84
and ebx, 0xb1269f5b
add ecx, 0xb127071b
bswap edx
inc edi
neg ecx
xchg ecx, ebx
or ebx, edi
mov edx, 0xb129c269
xchg ebx, edi
and edx, ecx
not edi
jmp 0x4a26aa
push 0xa82ec859
rol ebx, 0x16
or ecx, 0xb12c0835
and ecx, 0xb12c69e0
xor edi, ebx
mov edx, ecx
jmp 0x4a0966
push 0xa7fb8ea8
add ebx, edi
add edx, ecx
or edx, ecx
shl edi, 0x10
jmp 0x4a04be
call esi
add ecx, ebx
xor ecx, 0xb14c4d4d
xor ebx, edx
sub edi, edx
and ecx, edi
xor edx, ebx
bswap edi
and ecx, edx
and edx, ebx
mov ecx, edx
sub edi, 0xb14fb457
ror edx, 0xb
xchg ebx, edi
and ebx, 0xb150d616
jmp 0x4a1655
mov esi, 0x2774562b
xor ecx, 0xb1541f4f
xchg edi, ebx
and edi, 0xb154ee27
add edx, 0xb155490e
shl ebx, 9
jmp 0x4a1f0a
pop esi
sub edi, ecx
add ebx, edx
add edx, edi
add ecx, edx
mov ebx, 0xb15d95eb
and edx, edi
sub edx, ecx
inc edi
jmp 0x4a0ab2
mov esi, 0x2774562b
add edx, 0xb16f45d9
xor ecx, 0xb16fa54a
neg edi
or edx, 0xb1706b16
and edi, ecx
and ebx, ecx
sub edx, ebx
sub edi, 0xb171ef69
xchg ecx, edi
rol edx, 0xf
xchg ebx, edx
or edx, ecx
xor ecx, ebx
jmp 0x4a35d8
call fcn.004a2c93
or edi, ebx
neg ecx
and ebx, 0xb1987459
mov ecx, edx
mov ecx, edi
not ecx
bswap ebx
jmp 0x4a2399
pop esi
or edi, edx
xor ecx, ebx
or ebx, 0xb19b3b96
xchg edi, ecx
and ebx, edx
dec ecx
jmp 0x4a18a9
push 0xa82ced5a
xor ebx, 0xb19d15fc
add edx, ecx
neg edi
add edx, edi
add edi, ebx
and ebx, ecx
add ecx, ebx
sub edx, ecx
shr ebx, 5
jmp 0x4a2a7a
pop esi
and edx, ebx
shl ebx, 1
or ecx, edx
dec edi
rol edi, 0xb
xor edx, edi
jmp 0x4a1f4e
push 0xa832eb2e
not edi
inc ecx
xchg ebx, edx
add edx, edi
add ebx, edx
add edx, 0xb1c21caf
sub edi, 0xb1c28643
or ebx, edx
mov edx, ecx
jmp fcn.004a30bf
pop esi
not ecx
xor ebx, edx
add ecx, edx
mov edi, ecx
xchg edi, ebx
and ebx, edi
xor ecx, ebx
mov ecx, edi
jmp 0x4a0fa8
push 0xa7dbd3c2
add ecx, 0xb1df117b
sub edi, ecx
or ecx, edx
or edx, ebx
or ebx, edi
add edi, 0xb1e0f6a7
add ebx, ecx
jmp 0x4a05fb
mov esi, 0x123b2f04
sub ebx, edx
ror edi, 9
or ebx, ecx
jmp 0x4a1e33
call fcn.004a2c93
add edx, ebx
mov edx, ebx
xchg edx, ebx
or edx, edi
ror ebx, 0x1e
sub ecx, edx
xor ecx, 0xb2139f5b
or edi, ecx
or ecx, 0xb2146d5f
xor ecx, ebx
add edx, ecx
not edx
jmp 0x4a092c
push 0xa826942b
mov edi, ebx
xor edx, ecx
xchg edx, ebx
shl ecx, 2
mov edi, 0xb21e1070
and ebx, edx
bswap ecx
add edx, ecx
jmp 0x4a39f0
pop esi
not ebx
xchg edx, edi
add ecx, ebx
xchg edx, edi
shr edx, 5
inc edi
sub ebx, ecx
add edi, ecx
sub ecx, ebx
jmp 0x4a1241
pop esi
dec ecx
mov edi, ebx
mov ecx, edi
jmp 0x4a1078
pop esi
rol ecx, 4
or edi, ebx
sub edi, 0xb24a2597
rol ecx, 0xb
mov ebx, edx
xor ebx, edx
sub edx, edi
or ebx, edx
rol edi, 9
jmp 0x4a334d
call fcn.004a2c93
mov edx, 0xb252230b
or ebx, edi
and ebx, edi
xchg edx, ebx
add edx, ebx
bswap ebx
inc edx
jmp 0x4a1f25
call fcn.004a2c93
add ecx, ebx
inc ebx
sub ecx, edi
and edi, ebx
xchg edi, ecx
and edi, ebx
jmp 0x4a0cf3
pop esi
shl ebx, 0x19
or edi, 0xb28a169b
and edx, edi
not ecx
bswap edx
bswap edi
xor ebx, edx
mov ebx, 0xb28c51e5
shr edx, 3
shl ecx, 0x19
xor edi, ecx
mov edi, ecx
or ebx, edx
neg edi
jmp 0x4a0f3a
pop esi
or ecx, ebx
not edi
and ebx, ecx
sub ecx, 0xb29038e9
ror edi, 0x11
bswap ecx
or edi, ebx
and edx, ecx
xchg edi, ecx
xchg ebx, edi
not edx
jmp 0x4a08a0
call esi
xor ecx, edi
and edx, 0xb29d579f
neg ecx
inc ebx
xchg edx, ebx
add ebx, ecx
sub edx, 0xb29f2f26
or edi, ebx
ror edx, 0x14
and edx, edi
add edx, ebx
or edi, ebx
neg edx
jmp 0x4a33cc
push 0xa7f7cc1b
and ecx, ebx
or ebx, edi
mov ebx, ecx
mov edx, edi
xor ebx, edx
and edx, ecx
jmp 0x4a0d9d
call fcn.004a2c93
add edx, ecx
add ebx, ecx
sub edi, 0xb2bf07d5
mov edx, ecx
xchg edx, edi
add ecx, 0xb2c0181e
shr ecx, 0x12
sub edx, ecx
jmp 0x4a26f6
call esi
dec ebx
sub ecx, ebx
or edi, 0xb2c219a2
and edx, edi
xor edi, ecx
xchg edx, ebx
xchg ebx, edi
add edi, edx
bswap edi
sub edi, ecx
add ebx, edx
not ecx
shr edi, 0x14
jmp 0x4a3470
call fcn.004a2c93
or ebx, edi
sub edx, ebx
bswap ebx
mov edi, ebx
xchg ecx, edi
or edx, 0xb2c84434
xchg edx, edi
sub edx, 0xb2c8fa21
add ebx, edx
neg edi
xor ecx, ebx
jmp 0x4a27d3
pop esi
xor ecx, 0xb2d4b1d0
xor ecx, 0xb2d5113b
add edi, edx
add ecx, ebx
xchg edi, ebx
not ecx
and ecx, edi
ror edx, 0x18
neg edx
xor edx, edi
sub edi, ecx
not ecx
or ebx, 0xb2d96685
jmp 0x4a1c60
call fcn.004a2c93
and ebx, ecx
add ecx, ebx
inc edi
xor edx, ebx
add ecx, 0xb2e5112e
add ebx, edi
or ebx, edx
jmp 0x4a11a4
call esi
xor ebx, ecx
add ecx, ebx
inc ecx
jmp 0x4a3abf
pop esi
add ecx, ebx
or edx, ecx
xchg edi, ebx
sub ecx, ebx
sub ebx, edx
inc ecx
shr ecx, 0x15
xor edi, ebx
ror edx, 0x14
jmp 0x4a1a12
pop esi
mov edx, ebx
sub ebx, edi
xchg edx, edi
add ecx, ebx
xor edx, edi
xor edx, edi
or edx, edi
neg ecx
jmp 0x4a1435
push 0xa7f77fa5
shl edi, 0x12
bswap edi
xor edx, 0xb2f357aa
or edx, ebx
xor edi, ecx
mov edx, 0xb2f4769c
or edx, 0xb2f4e833
mov ebx, ecx
sub ecx, ebx
and edx, ecx
jmp 0x4a1df9
push 0xa808e644
or ebx, edx
mov edi, 0xb2f6da09
and ecx, 0xb2f738dc
add ebx, 0xb2f7a0f8
sub ebx, edi
add edx, ecx
and ebx, edx
mov ecx, edx
xor edx, ecx
or edx, ebx
bswap ebx
jmp 0x4a0901
push 0xa82d6425
xchg edi, ecx
xchg edx, edi
xor ecx, 0xb30b5381
sub ebx, edi
or edi, ecx
and ecx, edi
add ecx, ebx
xor edx, ebx
xor edx, ecx
jmp 0x4a12d5
call esi
xor edi, ecx
shl ebx, 0xa
shl edi, 6
rol ecx, 0x17
mov ecx, ebx
mov ebx, edx
jmp 0x4a32c2
pop esi
xor ecx, ebx
mov ecx, 0xb3211099
xor edx, 0xb3217a46
sub ecx, 0xb321da8f
inc edi
shr edi, 0x16
xchg edi, ebx
jmp 0x4a1f7d
pop esi
add edx, edi
mov edx, ebx
and edx, ebx
mov ebx, edi
and edi, ebx
xchg ecx, edx
bswap ecx
xchg ebx, ecx
and edi, 0xb3405cf1
and ebx, ecx
jmp 0x4a2e2c
push 0xa8258380
shr edx, 0x11
xor edi, 0xb349b05f
dec edx
xchg edi, ecx
or edi, ecx
jmp 0x4a2604
push 0xa7f8a968
add edi, edx
add ecx, ebx
rol edi, 8
or ebx, ecx
sub ecx, edi
xor ebx, 0xb350cc8e
or ecx, edi
xor edi, ecx
jmp 0x4a342b
pop esi
bswap ecx
inc ecx
mov ebx, ecx
sub edx, ebx
add edx, ecx
or edx, ebx
or ecx, ebx
add edx, edi
jmp 0x4a1a2a
push 0xa816bfa6
sub ecx, edi
mov edi, edx
mov edi, 0xb378a001
and edx, 0xb37914c8
not edi
or edi, ecx
sub edx, ecx
mov ebx, edx
xchg edx, ebx
jmp 0x4a0824
push 0xa832a659
add edi, edx
ror ebx, 0x10
or edx, ebx
sub edx, edi
rol edi, 0xe
add edx, ebx
xchg edi, edx
jmp 0x4a1586
call esi
sub edx, ecx
not edx
add edi, edx
not edi
sub ebx, 0xb386f9fa
add ebx, 0xb38763a8
or edx, ebx
add ecx, ebx
and edi, 0xb3887961
mov ebx, ecx
jmp 0x4a34bd
push 0xa82d3c62
and ebx, edx
add ecx, ebx
and ecx, ebx
dec edx
add ecx, 0xb397d2ad
mov edx, 0xb3983200
or ecx, edi
inc ebx
xchg edi, ebx
not ebx
or ebx, edi
sub ecx, edx
add ecx, edi
jmp 0x4a2039
push 0xa825ab7b
mov ecx, 0xb3cae680
sub ebx, 0xb3cb4e90
xchg edx, ebx
or ebx, edi
sub ecx, edx
xchg ecx, edx
sub edx, ebx
mov ecx, 0xb3cec913
xor edi, ecx
jmp 0x4a28da
call fcn.004a2c93
sub ebx, edi
neg ebx
sub ecx, ebx
or ecx, ebx
sub edx, ebx
shl edx, 0xd
sub ecx, edi
sub ebx, edi
add ecx, edx
xchg edx, ebx
xchg ecx, edx
jmp 0x4a2d44
push 0xa7f5b427
sub ecx, edx
xor edx, ebx
xchg edi, ecx
mov edi, 0xb3dc49cb
ror ecx, 0x1d
or edx, 0xb3dd0cb8
xchg ecx, edx
sub ebx, 0xb3dddbee
mov ebx, edi
mov edx, ecx
xchg ecx, edx
xchg edx, ecx
and ebx, 0xb3dfc4a4
jmp 0x4a0e7e
call esi
sub edi, edx
mov ebx, 0xb3e39eb7
inc ecx
xor ebx, edi
mov edx, ebx
inc ebx
shl edi, 0x14
shl ecx, 0xe
sub ebx, edi
add ebx, edx
add ebx, edi
xor ecx, edx
add edx, ecx
and ebx, 0xb3e83a60
add edi, 0xb3e89481
jmp 0x4a360b
push 0xa81629b6
and ecx, edi
dec edi
and edx, 0xb3e9dfe8
or edi, edx
and ecx, edi
or ebx, edi
rol ecx, 0x1b
add edx, 0xb3ebd63c
add edi, edx
rol edx, 0x19
add edx, ebx
bswap edi
jmp 0x4a3384
call esi
or ebx, 0xb3fa413c
and ecx, 0xb3fa9e52
dec ecx
sub edx, ecx
sub ecx, edi
neg ecx
mov ebx, ecx
jmp 0x4a30e2
push 0xa7d9c1e5
xchg ecx, edx
sub ebx, ecx
and edi, ebx
add ebx, edx
sub edx, edi
rol ecx, 6
sub edi, ecx
xchg ecx, edx
and ebx, ecx
xor ebx, edx
or edx, 0xb41fd87c
shr ecx, 3
jmp 0x4a3c11
mov esi, 0x2774562b
or edx, 0xb420b963
sub edi, ecx
sub edx, ecx
and edi, ebx
rol edi, 7
jmp 0x4a1af1
pop esi
or edx, ecx
not ebx
mov edi, 0xb4418f0d
mov ebx, edi
or ecx, edx
xchg ecx, edi
xor edx, edi
not ecx
ror ebx, 6
xchg edx, ebx
jmp 0x4a1a35
push 0xa82d149f
add ecx, edi
inc ebx
or edi, ebx
mov ecx, edx
xchg edx, ebx
mov ecx, ebx
or edi, ecx
or ebx, edi
and ebx, 0xb4457279
sub edi, ebx
jmp 0x4a2463
pop esi
or ecx, 0xb451ad02
add edx, 0xb451e6af
sub ebx, ecx
dec ecx
shl ebx, 6
mov ecx, ebx
add edi, 0xb452f715
jmp 0x4a2104
pop esi
xchg edi, ebx
or ebx, ecx
xchg edi, ebx
add ebx, 0xb4564982
rol edi, 4
inc ebx
jmp 0x4a1ec3
call esi
sub ecx, edi
mov edi, ebx
sub ecx, edx
add edi, edx
xor ebx, edx
not ecx
shl edi, 0x19
xor ecx, ebx
rol edi, 6
jmp 0x4a3043
pop esi
and edi, ebx
or edi, ecx
or edx, ecx
xor edi, ebx
not edx
sub ecx, edi
sub ebx, edx
jmp 0x4a0e1a
pop esi
xor edi, edx
xchg edx, ecx
mov edx, ecx
or edi, ecx
or edx, ebx
inc ebx
sub edx, 0xb490f729
neg ecx
and edx, ebx
or edx, ecx
ror edi, 0xb
inc edx
neg edx
or ecx, edi
jmp 0x4a155c
push 0xa7f31e9c
mov edi, edx
and ebx, 0xb49deab4
or edx, 0xb49e349b
sub edx, 0xb49e6e95
mov edx, ecx
shl ecx, 0x1f
mov edx, edi
add ecx, ebx
or edi, ecx
ror edi, 1
bswap ebx
xor edx, ebx
jmp 0x4a11f4
call esi
xor edx, ecx
and ecx, edx
mov ecx, edx
and edx, ebx
ror ebx, 0x17
xchg ecx, ebx
add edi, 0xb4a1955c
xchg ebx, ecx
and edi, ebx
inc edx
jmp 0x4a2ebf
pop esi
mov edi, ecx
not ecx
or edi, 0xb4aef698
ror edx, 0xa
sub ecx, 0xb4af62ca
ror ebx, 1
dec edi
dec ebx
jmp 0x4a0c8e
pop esi
rol edi, 9
shr edx, 0x19
inc ebx
xor edi, 0xb4bd4c6a
and ebx, edx
or ebx, edi
xchg edi, ecx
rol edx, 0x19
xor edi, 0xb4be549e
jmp 0x4a2726
mov esi, 0x123b2f04
or edx, edi
mov edi, ecx
xchg ebx, edi
neg edi
sub ecx, ebx
nop
and ebx, ecx
rol ebx, 8
jmp 0x4a0b73
call fcn.004a2c93
xor edx, edi
mov edi, 0xb4e33a1e
and edx, ebx
and ecx, 0xb4e3ae29
xchg ecx, edx
neg ebx
xchg edx, ecx
xchg edx, ebx
dec edi
and edx, ecx
jmp 0x4a1e56
pop esi
xor ebx, edx
bswap edi
sub ebx, ecx
not edx
and edi, ecx
or ebx, edx
xor edx, ecx
shl edi, 3
sub ecx, edx
bswap edi
jmp 0x4a104e
push 0xa7fb407e
sub edi, edx
shl ecx, 0x1e
xor edx, 0xb4ecc37f
rol ebx, 0xb
sub ecx, 0xb4ed99b1
xchg ecx, edi
add ecx, 0xb4ee5c8f
rol edi, 0x1e
neg edi
add ebx, ecx
or ebx, edx
or ebx, edx
jmp 0x4a1143
pop esi
xor ebx, edx
add ecx, edi
sub edi, edx
and edi, edx
or edi, ecx
jmp 0x4a39b1
push 0xa819e4af
mov ebx, edi
shr edx, 7
xchg ecx, edi
shl edi, 0x12
jmp 0x4a3543
push 0xa81676c0
rol edx, 4
add ecx, edx
sub ecx, ebx
add ecx, edx
xor ecx, edi
and ecx, edi
xchg ebx, ecx
bswap ecx
neg edx
xor edx, ecx
xor ebx, edi
jmp 0x4a230d
pop esi
or edx, edi
inc edi
nop
or edi, ecx
and ebx, edx
sub edi, ebx
jmp 0x4a21a0
mov esi, 0x123b2f04
neg ebx
neg edx
xor edi, ebx
sub edx, ecx
sub edi, ecx
mov ebx, edi
add ecx, edi
mov edx, ecx
bswap ecx
add edi, edx
xchg ebx, ecx
nop
sub ecx, ebx
jmp 0x4a1a88
pop esi
or edx, ecx
rol edi, 0x1d
shr ebx, 0x13
mov ecx, edx
dec edi
ror edx, 0xf
sub edi, 0xb517e575
and edx, 0xb51844a3
mov ecx, ebx
sub ebx, edi
and edi, ecx
jmp 0x4a2208
pop esi
sub ecx, ebx
add edx, ebx
and edx, 0xb52a5d4e
rol ecx, 0xd
xchg ebx, ecx
mov edx, ebx
add ebx, edx
jmp 0x4a38db
call fcn.004a2c93
inc edi
bswap edi
xor edx, ebx
not edi
add edx, edi
sub ecx, 0xb52e3ecd
jmp 0x4a0bbe
mov esi, 0x123b2f04
rol edx, 0x1f
xchg ebx, edi
add edx, 0xb53800e6
add edi, 0xb5386c6c
xor edi, edx
jmp 0x4a3229
call fcn.004a2c93
xchg ecx, edx
xchg edi, ecx
and edi, edx
add ecx, ebx
or edi, 0xb54a6e54
xor ecx, edx
xor ebx, ecx
add edi, 0xb54b9cac
shl ecx, 0xc
or ecx, edx
or ebx, 0xb54cc26f
sub edi, 0xb54d2202
jmp 0x4a3955
pop esi
shl edx, 0x16
shl edx, 0x15
dec edi
add edi, ecx
xor edx, edi
sub edi, ebx
xchg edi, ecx
and edx, ecx
or ecx, ebx
jmp 0x4a0f52
push 0xa82f14ed
or ebx, ecx
neg edi
add edi, edx
sub edx, ebx
ror ebx, 1
and ebx, edi
jmp 0x4a0948
push 0xa7ef93da
xchg ecx, edi
add ecx, edi
mov ebx, edi
add edi, ecx
or ecx, 0xb5748e58
add ecx, edx
add ebx, ecx
add edx, ebx
inc edx
jmp 0x4a04a5
pop esi
and ecx, edi
mov edi, edx
add ebx, edi
and edi, ecx
sub ebx, ecx
xor ecx, edi
add edi, edx
add ecx, 0xb58f85fd
or edx, ebx
sub edi, edx
mov ebx, edi
jmp 0x4a22f8
push 0xa7db926c
rol ecx, 0x14
add edx, ecx
xchg ecx, edi
shl edi, 0x13
sub ebx, 0xb59aa43a
add ebx, ecx
jmp 0x4a16a4
pop esi
xor edi, ecx
shr ebx, 2
neg edx
jmp 0x4a0411
push 0xa82cc543
shr edx, 5
add edx, edi
or ecx, edx
add ebx, edi
not ecx
not edi
xchg ebx, ecx
dec edi
jmp 0x4a144a
call esi
inc edi
sub ebx, 0xb5f912f3
jmp 0x4a37bc
pop esi
dec ecx
xchg ebx, edi
xor edx, ecx
xchg edi, edx
dec edx
nop
mov edx, edi
xor ebx, ecx
mov edx, ebx
xchg edx, edi
shl ebx, 0xc
and edx, edi
jmp 0x4a1fa7
mov esi, 0x2774562b
nop
add edi, edx
xchg ebx, edi
add ebx, ecx
inc edx
xor ecx, edi
not ebx
neg edi
jmp 0x4a1419
pop esi
rol ecx, 3
or ecx, edx
shl ebx, 0x1e
xor ebx, 0xb61ca04d
sub ecx, 0xb61d001f
sub edx, ecx
add edi, edx
dec ecx
add edi, ecx
mov edi, 0xb61ef2c3
dec ecx
jmp 0x4a324d
pop esi
or edi, ecx
mov ecx, ebx
xor edi, ecx
bswap edi
shr ecx, 4
sub edi, ecx
jmp 0x4a2ba3
call fcn.004a2c93
xor edx, ecx
and edx, edi
add ebx, ecx
xor edx, ecx
add edx, ebx
or edi, ebx
sub edi, ecx
sub ecx, edi
jmp 0x4a1d00
push 0xa830c907
mov ebx, 0xb63682c1
xchg ebx, edx
ror edi, 0xc
and edx, edi
jmp 0x4a0b94
mov esi, 0x123b2f04
or ebx, edx
sub edx, 0xb64eab5e
add ecx, ebx
inc ecx
and edi, ebx
mov edi, ecx
add edx, ecx
and edi, ebx
jmp 0x4a2654