Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api
Set file attributes

Disassembly:
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffed7
jne 0x4010a7
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff16
jne 0x401121
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xffffff2b
jne 0x401191
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xfffffef5
jne 0x4011f2
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff25
jne 0x401271
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.ntdll.dll_NtSetInformationFile
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
call sub.advapi32.dll_GetMultipleTrusteeA
ret
jmp 0x4813e9
and edx, ebx
or edi, 0xf88887e5
and edx, ebx
mov esi, 0xf88c69ae
bswap esi
not ebx
mov edi, esi
jmp 0x484482
mov edx, 0x40495727
bswap edi
ror ecx, 0x13
sub ebx, esi
add esi, edi
nop
not ecx
inc ebx
and ecx, 0xff94dd95
xor esi, 0xff979701
mov edi, ebx
bswap edi
xchg ecx, ebx
and ebx, esi
jmp 0x483914
call fcn.00484589
or ebx, 0xffb519ae
or ecx, esi
mov esi, edi
ror edi, 0x17
xchg ecx, esi
sub ecx, edi
mov ecx, edi
ror esi, 0x13
jmp 0x48254b
pop edx
ror edi, 0x10
bswap esi
add ebx, 0xffda0c84
xor ecx, 0xffdc060b
xchg edi, esi
neg ecx
and ebx, esi
sub ecx, ebx
shr esi, 9
jmp 0x483668
push 0x401400
and ebx, edi
mov ebx, ecx
xchg esi, edi
add ecx, ebx
mov esi, ebx
jmp 0x4831b8
pop edx
sub ebx, ecx
or edi, ebx
dec esi
not edi
xor esi, ecx
add ebx, 0x11c6c44
rol edi, 0x16
shl esi, 0x10
jmp 0x482ca8
pop edx
sub esi, edi
xor esi, ecx
or ebx, 0x168c068
neg ecx
xchg edi, ebx
dec ecx
add edi, esi
mov edi, ecx
and ebx, esi
xchg ecx, esi
mov esi, ebx
neg esi
jmp 0x48380a
call edx
or esi, 0x198ef9d
sub ebx, 0x19adf08
bswap ebx
xchg esi, edi
add esi, ebx
sub ebx, ecx
sub ecx, 0x1a4bdf3
mov ebx, esi
or ecx, edi
jmp 0x4830e4
push 0xf92437c3
rol ecx, 0xc
sub esi, ebx
sub esi, edi
sub edi, esi
rol edi, 0x14
shr edi, 0x14
sub ecx, ebx
sub ecx, edi
not esi
and esi, edi
add ebx, ecx
mov ebx, edi
jmp 0x481476
push 0xf9520ce6
dec esi
sub edi, ebx
xchg ebx, ecx
inc ecx
dec ebx
dec ecx
mov ebx, edi
xchg esi, ebx
xor ecx, ebx
jmp 0x482fb2
pop edx
sub ebx, ecx
sub esi, ebx
add ebx, esi
bswap ecx
xchg edi, esi
add edi, ecx
shr esi, 6
xchg edi, ebx
or ecx, ebx
inc esi
jmp 0x481808
call edx
xchg ebx, ecx
add edi, esi
sub esi, ebx
inc esi
dec ecx
inc edi
mov edi, esi
add ecx, 0x3686c28
sub esi, ecx
mov ecx, 0x3720c25
jmp 0x483ef1
push 0xf93d80f9
rol ebx, 3
xchg esi, ebx
and edi, 0x3aff97c
add edi, esi
xchg esi, ebx
bswap esi
jmp 0x483d11
push 0xf8db0b5d
xor edi, ebx
add ebx, 0x3bd195c
mov esi, ecx
xchg esi, ecx
or ebx, esi
and edi, ecx
jmp 0x482aed
pop edx
neg ecx
xchg edi, ebx
ror ecx, 0x1a
and ecx, esi
add esi, edi
sub edi, esi
xchg esi, ecx
sub edi, ecx
xor edi, 0x41c88ec
xchg edi, esi
jmp 0x4845be
push 0xf9021a8a
bswap ebx
xor edi, ecx
and esi, ecx
or edi, ecx
mov edi, ebx
sub edi, ebx
xchg esi, ecx
and esi, ecx
shl edi, 0x1d
jmp 0x484345
pop edx
add esi, 0x529792c
xchg edi, ebx
shl ebx, 5
or esi, edi
ror esi, 0xc
shl ecx, 0xb
xchg esi, edi
mov ebx, esi
add edi, ebx
dec ebx
jmp 0x483af3
call fcn.00484589
xor ebx, edi
add esi, ebx
bswap edi
mov esi, ebx
xor ebx, edi
xchg ecx, ebx
bswap ecx
shl ecx, 9
and ebx, ecx
xor edi, esi
xor esi, 0x57cc13d
jmp 0x4842e8
push 0x7ffe9
not esi
mov ecx, ebx
add ecx, ebx
add ebx, esi
xchg edi, ebx
and esi, 0x58910ec
jmp 0x4815f8
push 0xf92143b3
or ecx, ebx
bswap esi
rol ecx, 0xa
not ecx
ror esi, 0x13
xchg esi, ecx
jmp 0x483e36
pop edx
xor ecx, 0x62aedb4
dec edi
jmp 0x484217
push 0xf8e9cf57
xchg esi, ebx
and edi, ecx
mov ecx, ebx
xor ecx, esi
mov ecx, esi
xor ecx, ebx
mov edi, ebx
shr ebx, 8
add edi, ecx
jmp 0x4826c5
push 0xf954fc24
xchg ecx, edi
and edi, esi
mov ebx, esi
or ebx, ecx
mov ecx, edi
jmp 0x48419b
push 0xf8f3648e
sub esi, ebx
shr ecx, 0x19
add ecx, ebx
add ebx, ecx
jmp 0x483fef
pop edx
xchg esi, ecx
and ecx, esi
or ebx, edi
mov ecx, esi
ror edi, 0x18
and ebx, esi
and ebx, edi
jmp 0x4824f0
push 0xf8c4d2d1
sub ebx, ecx
xor edi, 0x7f44f3b
shl ecx, 0x15
and esi, ecx
add ecx, edi
mov ecx, ebx
ror ebx, 5
add edi, ebx
sub ebx, ecx
jmp 0x482c23
mov edx, 0x73716341
mov ebx, ecx
add esi, ebx
and ecx, edi
neg ecx
sub ebx, ecx
mov ebx, esi
jmp 0x483a23
push 0xf9332732
mov ecx, esi
sub edi, esi
and ecx, edi
dec ebx
sub ebx, edi
sub esi, ebx
not ecx
shr ecx, 0x1a
inc edi
inc ecx
mov edi, ebx
ror ecx, 0xc
add ebx, edi
shl ebx, 0x1f
jmp 0x48273e
pop edx
add edi, esi
or esi, ebx
shr ecx, 0xb
shl ecx, 0xe
xchg esi, ebx
xchg esi, edi
sub ebx, ecx
not ebx
rol ebx, 3
xor ecx, esi
add edi, 0x8e95448
and esi, 0x8eb5fa0
neg edi
nop
jmp 0x481a5a
push 0xf900a38a
bswap ebx
dec esi
sub ecx, ebx
add ebx, edi
sub esi, ebx
or esi, ecx
xor esi, ebx
xor ecx, esi
sub esi, ecx
jmp 0x481b72
push 0xf91fce0b
shl esi, 7
or edi, esi
bswap ebx
xchg esi, edi
xor ecx, esi
add edi, 0x90ee9a5
jmp 0x481cc8
pop edx
inc edi
sub edi, ebx
and ebx, ecx
mov ebx, ecx
and esi, ecx
add edi, ecx
xor ebx, 0x9532061
mov esi, ebx
or esi, ebx
and esi, edi
xor ecx, ebx
and esi, edi
sub ebx, ecx
xor ecx, ebx
and ecx, 0x963cc9e
neg esi
jmp 0x483baf
pop edx
xor edi, 0x96841b8
neg ecx
xor ebx, edi
add esi, 0x96ec43b
shl edi, 4
and ebx, 0x972cf09
or esi, ebx
sub ebx, esi
add edi, esi
ror esi, 0x1c
rol ebx, 0x10
xor edi, 0x97f2453
neg ecx
xor ebx, 0x983b766
jmp 0x48237f
pop edx
and ecx, esi
xor ecx, ebx
or edi, 0x98eb822
xor edi, esi
neg ecx
ror esi, 0x11
add ebx, ecx
not esi
rol edi, 0xb
jmp 0x483cee
call fcn.00484589
shl esi, 0x1b
sub ebx, 0xa5c56b2
and ebx, esi
sub edi, ecx
dec ecx
xor ebx, esi
xor edi, esi
bswap esi
sub esi, ecx
sub edi, 0xa6c9c30
add esi, ebx
jmp 0x484174
call edx
bswap esi
xchg ebx, ecx
and esi, edi
add ebx, 0xa85c6bf
xchg ecx, edi
sub ecx, edi
mov ebx, ecx
or ecx, edi
xor ecx, 0xa9080bc
sub ecx, 0xa926c30
ror esi, 0xc
sub ebx, edi
jmp 0x481ae1
pop edx
not ecx
sub edi, esi
and esi, ecx
shl esi, 0x1a
xchg esi, ecx
add esi, 0xab5b3cd
and ebx, edi
jmp 0x481bff
call fcn.00484589
add ecx, esi
rol ebx, 5
add ecx, ebx
neg ebx
add edi, esi
shr edi, 7
and esi, 0xad5a444
mov ecx, edi
neg esi
and ecx, ebx
shr edi, 3
or ecx, esi
add ecx, 0xae1f524
or ecx, edi
add edi, 0xae60998
add ecx, edi
jmp 0x4838fd
pop edx
shr edi, 0x17
xchg ebx, ecx
xchg edi, esi
and edi, 0xb280c28
or esi, 0xb2a149c
or ecx, esi
add edi, ecx
jmp 0x484381
call edx
inc ecx
nop
bswap edi
mov edi, ecx
xchg esi, edi
and ebx, esi
mov ebx, edi
xor esi, edi
or ebx, 0xb4da808
or ebx, esi
mov ecx, 0xb519398
add esi, ecx
mov ebx, ecx
jmp 0x483732
push esp
and edi, esi
rol edi, 0x18
or ebx, esi
xor edi, 0xb5e2d6e
inc ebx
inc esi
or ecx, esi
sub edi, 0xb6639b9
and ecx, edi
add ebx, edi
xor edi, esi
inc ecx
jmp 0x483658
mov edx, 0x40495727
sub ebx, 0xb70640f
and esi, ebx
inc esi
neg ecx
add esi, 0xb784e26
shl ecx, 3
add ecx, edi
xor esi, 0xb7f8318
sub ecx, ebx
jmp 0x4835be
push 0xf8a71e39
xor ebx, edi
mov esi, ecx
or ecx, 0xc1e2e77
xor esi, ecx
mov esi, edi
jmp 0x4843ef
mov edx, 0x73716341
sub ebx, ecx
sub esi, ecx
or ebx, 0xc28dac7
neg esi
xor ecx, esi
shr ebx, 0xc
mov esi, 0xc31d597
dec ecx
jmp 0x483b69
mov edx, 0x40495727
or esi, ecx
mov ebx, edi
and ebx, edi
xchg esi, ebx
neg ebx
ror ebx, 0x10
add ebx, ecx
or ecx, edi
xchg esi, edi
and edi, ecx
rol ebx, 0x15
xor ebx, ecx
jmp 0x484299
push 0xf8d24086
shl ecx, 9
xor esi, 0xd37f0c3
and ecx, ebx
sub ebx, esi
bswap ecx
xchg esi, edi
and edi, ecx
mov ebx, ecx
dec esi
xor ecx, ebx
add ecx, edi
jmp 0x483b89
pop edx
ror ecx, 2
shl esi, 0xf
and edi, 0xd94529a
mov edi, esi
and edi, esi
or ecx, esi
inc edi
jmp 0x482890
push 0xf9124147
bswap ebx
xchg ecx, edi
jmp 0x4835fe
push 0xf8dc8511
bswap esi
xchg ecx, esi
sub esi, ebx
sub ecx, 0xee8696a
mov esi, edi
add ecx, ebx
and ecx, 0xeee38b8
add edi, ecx
neg esi
jmp 0x482f5b
push 0x40
sub edi, ebx
inc ecx
or ecx, edi
sub ecx, edi
dec ebx
xchg ecx, ebx
bswap ebx
xchg ebx, ecx
jmp 0x481c87
mov edx, 0x73716341
add ecx, ebx
rol ecx, 1
bswap edi
bswap ecx
add ecx, ebx
or ecx, edi
or ecx, edi
xor edi, ecx
inc ecx
xor ecx, esi
sub ecx, esi
xor esi, ecx
jmp 0x482454
push 0xf930352d
sub ebx, edi
mov ecx, edi
mov esi, ecx
xor esi, ebx
and ecx, ebx
or ecx, 0x10127c16
xor edi, ebx
xor esi, ebx
mov edi, ecx
and ecx, 0x101a3f6b
sub esi, 0x101c3639
xor esi, 0x101e34c5
sub edi, ecx
jmp 0x48409f
pop edx
sub ebx, 0x108663c8
add esi, ebx
add ebx, 0x108a56c0
or esi, 0x108c43e9
sub esi, edi
jmp 0x48173d
push 0xf8f1eb26
add esi, ecx
dec ebx
xor edi, ebx
xor esi, 0x10d6c1d7
sub edi, ecx
xchg esi, edi
nop
xor ecx, ebx
add esi, ebx
rol esi, 0xd
inc edi
and ecx, edi
and edi, ebx
jmp 0x481fd1
pop edx
sub ebx, edi
add ebx, 0x10ec78cf
xchg ebx, esi
sub ecx, esi
xchg esi, ebx
or esi, ebx
sub esi, edi
sub ecx, ebx
or ebx, ecx
nop
inc esi
and ecx, edi
jmp 0x483874
mov edx, 0x73716341
or edi, 0x110e95bc
inc edi
and ebx, 0x11129bff
xchg ebx, esi
sub edi, ebx
jmp 0x481c62
call fcn.00484589
xor ebx, ecx
mov esi, ebx
shr ecx, 9
sub ecx, edi
xchg ecx, esi
xchg edi, esi
bswap ecx
xchg ecx, edi
ror ebx, 0x1d
jmp 0x48430d
push 0xf8de011c
mov ebx, 0x11a33b23
xchg edi, esi
xor ecx, 0x11a705d5
mov esi, edi
sub esi, edi
xor ecx, ebx
mov esi, ecx
xor ecx, 0x11b10526
or ebx, ecx
bswap ecx
sub esi, ecx
xor ebx, 0x11b8fea0
shl ecx, 2
jmp 0x48256f
push 0xf95382ee
add ebx, 0x11e602bd
and edi, ecx
rol ecx, 1
neg esi
xchg ebx, esi
mov esi, ebx
add esi, ecx
dec ecx
mov ebx, esi
xchg ebx, ecx
jmp 0x481f61
push 0xf90ddcc5
shl edi, 0x1c
mov ecx, edi
mov ecx, ebx
rol esi, 8
mov ecx, edi
mov esi, 0x121efeda
xchg ecx, esi
jmp 0x483edb
call edx
xor esi, 0x1227fdf7
xor esi, ecx
jmp 0x482d75
pop edx
xor ebx, edi
and edi, 0x1240ecad
xor ebx, 0x1242d7dc
mov ecx, esi
mov esi, ebx
mov edi, ebx
mov edi, 0x124a9648
dec ecx
mov ecx, 0x124ee017
or ecx, 0x1250e81b
mov esi, edi
xor ecx, esi
jmp 0x48227e
pop edx
neg ebx
sub ebx, edi
sub esi, ebx
xor edi, 0x1291fb0d
or ebx, ecx
xor ebx, ecx
bswap ecx
not ebx
inc ebx
and ecx, esi
jmp 0x48422a
pop edx
and ecx, ebx
shr ebx, 0x1e
xchg ecx, esi
or edi, 0x12f655e0
mov edi, esi
xchg ecx, esi
add esi, edi
shr ecx, 0x17
xchg esi, ecx
bswap ebx
sub edi, ebx
jmp 0x481f07
call edx
or edi, ebx
xchg esi, ebx
jmp 0x48189e
call fcn.00484589
neg ecx
mov ecx, esi
or edi, ecx
or edi, ebx
or esi, ecx
xchg ebx, edi
mov ebx, ecx
xchg edi, ebx
xor edi, esi
or edi, ebx
or ebx, 0x13def68c
sub ecx, esi
and edi, ebx
xor ecx, 0x13e4e971
jmp 0x4823da
push 0xf8c35745
or ebx, 0x14150610
not ecx
mov ebx, esi
xchg ecx, esi
mov ecx, esi
jmp 0x4820f5
call fcn.00484589
and ebx, ecx
and esi, 0x1455e0f3
add edi, 0x1457d638
shr ecx, 5
shr ecx, 0x11
xchg edi, ebx
shl edi, 9
xchg ecx, esi
shr ecx, 6
mov ecx, ebx
and edi, ecx
sub edi, ecx
add esi, 0x146c157c
jmp 0x483fa9
call edx
xchg ecx, ebx
add ecx, ebx
mov ebx, 0x1537d76a
xor ebx, 0x1539cf17
xchg ecx, esi
or ebx, esi
rol ebx, 7
and ecx, ebx
sub ecx, ebx
add ecx, edi
jmp fcn.00482d49
call fcn.00484589
and ecx, ebx
or ecx, edi
sub edi, esi
and esi, ebx
mov esi, 0x1575c0d2
jmp 0x481a08
mov edx, 0x40495727
ror edi, 7
ror ecx, 0x1b
add ecx, esi
rol esi, 0xd
xchg ebx, esi
or esi, edi
sub esi, 0x17000e7c
sub ecx, esi
xor esi, ecx
not ebx
add ebx, edi
jmp 0x4832f1
push esp
inc ecx
shr edi, 0x1b
sub ecx, edi
add esi, ecx
or ebx, esi
jmp 0x482b8a
pop edx
sub edi, ebx
or esi, edi
xor esi, edi
sub ebx, esi
jmp 0x482299
push 0xf961505d
xor edi, 0x1754238a
not edi
mov ebx, edi
or ebx, 0x175a0e83
sub edi, ecx
mov edi, 0x175e37d4
and edi, ebx
jmp 0x484084
push 0xf910ca01
rol edi, 0x12
ror esi, 1
bswap ecx
xchg ebx, edi
shr esi, 0xf
mov edi, ecx
sub ecx, ebx
or edi, esi
jmp 0x482a5d
pop edx
and ecx, edi
add ecx, esi
bswap ecx
mov esi, edi
rol ecx, 6
and ebx, edi
and edi, ebx
xchg ecx, edi
and ebx, edi
jmp 0x48450e
pop edx
neg ecx
shr ebx, 0xd
bswap edi
dec ebx
mov ebx, 0x179c6b8e
xchg esi, ebx
jmp 0x483676
pop edx
and edi, esi
rol edi, 0x1a
shl ecx, 3
mov edi, ecx
sub esi, edi
or ecx, edi
jmp 0x482307
pop edx
shl esi, 0x15
shr edi, 6
or edi, ebx
and ebx, ecx
dec edi
or edi, ebx
mov ecx, esi
shr edi, 3
jmp 0x482df7
pop edx
not ebx
and edi, ebx
or ebx, edi
bswap ecx
jmp 0x484104
pop edx
xchg esi, edi
xchg esi, edi
add ebx, 0x1863a772
or edi, ebx
or ecx, 0x18675c30
sub ecx, edi
or edi, ecx
sub ebx, edi
xor ecx, 0x186f3820
xor edi, ebx
jmp 0x483701
push 0xf8c06c61
xor edi, 0x18738328
add edi, esi
mov edi, esi
add ecx, ebx
add ebx, edi
add ecx, ebx
and esi, ebx
jmp 0x4840e8
push 0xf8d99376
or ecx, ebx
shl ebx, 0x1f
xor ecx, edi
inc ecx
add edi, esi
and ebx, 0x189d282d
neg esi
add ecx, ebx
sub ecx, esi
jmp 0x481a75
call fcn.00484589
and ebx, edi
mov esi, ecx
or esi, 0x18c0f995
add esi, 0x18c30025
or ebx, ecx
xchg ebx, ecx
add ebx, 0x18c91f6c
or ebx, 0x18cb2acf
dec ecx
shl ecx, 0xe
mov edi, esi
jmp 0x4840d8
call edx
sub ebx, edi
and ebx, ecx
or esi, ebx
or ecx, edi
and esi, 0x18dbca59
and esi, ecx
jmp 0x482035
call fcn.00484589
shl edi, 9
mov edi, ebx
or ecx, ebx
or ecx, edi
or ecx, esi
sub edi, esi
or ecx, 0x18eb454b
sub ebx, ecx
and esi, edi
rol edi, 0xd
mov esi, ebx
sub esi, 0x18f5bd7f
shl ecx, 0x13
add ebx, edi
sub ecx, esi
xchg esi, ebx
jmp 0x48399d
call edx
mov ebx, ecx
and esi, ecx
mov ecx, edi
add ecx, esi
sub ebx, 0x19639814
sub edi, ebx
xchg ebx, ecx
or ecx, esi
bswap esi
sub esi, ebx
jmp 0x482334
call fcn.00484589
ror esi, 4
xchg esi, edi
mov esi, ebx
inc ebx
and esi, ecx
shr edi, 0x1d
or ecx, edi
mov edi, 0x19bc6c1a
or esi, ebx
and edi, ecx
jmp 0x48302a
pop edx
and edi, ebx
inc esi
and esi, 0x1a4d819b
ror edi, 6
add edi, ebx
sub ebx, esi
jmp 0x483002
call fcn.00484589
sub ebx, ecx
nop
and ebx, 0x1a8b24ef
and ecx, edi
shl ecx, 0xb
neg esi
mov ecx, edi
sub ecx, edi
add edi, ecx
jmp 0x482525
mov edx, 0x40495727
add edi, ecx
add esi, 0x1a9a8dfc
not ecx
shl ecx, 0xe
not ebx
add ecx, 0x1aa27f3b
mov ebx, 0x1aa46c20
add ecx, edi
jmp 0x4833e0
push 0xf8bef22d
add esi, 0x1aa8adaf
inc edi
or esi, ecx
or edi, 0x1aae7d9b
sub edi, 0x1ab0762f
mov edi, ebx
add edi, esi
add edi, esi
add esi, edi
sub esi, ebx
xchg ebx, esi
add ebx, 0x1abf0d47
jmp 0x483830
pop edx
and ebx, edi
add esi, edi
xchg esi, edi
xchg edi, ecx
sub edi, ecx
or edi, esi
and ebx, esi
xor ebx, ecx
and esi, edi
or edi, 0x1ad23978
add ebx, 0x1ad42748
jmp 0x482939
pop edx
or ebx, ecx
xor edi, 0x1b66bb91
shl ecx, 0xd
or esi, ecx
sub ebx, 0x1b6cbbbc
and esi, ebx
xchg ecx, edi
xor ecx, 0x1c75ec00
jmp 0x4816dc
mov edx, 0x73716341
or ecx, edi
ror edi, 0xe
xor edi, ecx
add edi, esi
mov esi, 0x1c802345
xchg ebx, ecx
and ebx, ecx
xor ecx, 0x1c85f52d
xor esi, ecx
mov ebx, esi
sub esi, ebx
mov edi, esi
xchg ebx, ecx
nop
add ebx, ecx
shr esi, 3
jmp 0x4838cd
call fcn.00484589
xchg ebx, ecx
or esi, 0x1cbc2984
jmp 0x48354d
push 0xf922b99c
mov esi, edi
neg esi
add ebx, edi
mov esi, ecx
add esi, ecx
neg ecx
add ebx, edi
sub edi, ebx
neg ebx
xchg ebx, edi
add esi, ecx
xor ebx, ecx
not ebx
xchg edi, esi
add ecx, ebx
jmp 0x4817e3
push 0xf90f5395
and ecx, edi
sub edi, esi
and esi, edi
add ebx, esi
xor esi, ebx
and ebx, ecx
jmp 0x483699
pop edx
or esi, edi
shr ebx, 4
and esi, 0x1dac6eb8
mov edi, ecx
xchg edi, ebx
or edi, ebx
add ecx, ebx
mov esi, edi
inc edi
sub ecx, ebx
and ebx, 0x1dbbc618
jmp 0x481dc5
call edx
xchg edi, ecx
sub edi, ecx
xchg ecx, esi
xor esi, ebx
or edi, 0x1e5b9bdb
inc esi
mov esi, edi
nop
add ecx, ebx
xor ecx, edi
and ecx, ebx
jmp 0x482e1d
push 0xf8a43b73
xor ecx, ebx
sub edi, ebx
and ebx, ecx
mov ecx, 0x1e708100
add edi, esi
sub edi, 0x1e747474
add edi, 0x1e766707
or esi, ecx
add ebx, edi
jmp 0x48444a
mov edx, 0x73716341
rol ebx, 9
dec esi
rol edi, 5
ror ebx, 8
bswap esi
ror ecx, 0x1d
add ecx, esi
xor edi, 0x1e8acb08
add edi, ecx
or ebx, edi
shr ecx, 0x1a
add esi, ebx
jmp 0x482f3d
push 0xf962c2a1
xchg ecx, ebx
neg ebx
add ebx, 0x1ede0104
mov edi, ecx
xchg edi, esi
rol esi, 0xc
jmp 0x4840b3
push 0xf931b0ca
xchg ebx, esi
or ebx, edi
rol ecx, 5
bswap ecx
inc ebx
jmp 0x4821f5
mov edx, 0x73716341
add edi, 0x1ef22d03
neg ecx
rol ebx, 1
add edi, ecx
shr edi, 0xf
and ecx, edi
xor ebx, 0x1efe1170
xchg edi, esi
inc ebx
jmp 0x483d8a
call edx
shl esi, 0xf
and ecx, 0x1f081143
jmp 0x4836d3
push 0xf8c1dfbe
ror edi, 0x16
not esi
dec esi
rol ecx, 0xc
bswap edi
mov esi, 0x1f15047b
xchg esi, ecx
jmp 0x48336e
pop edx
mov edi, ebx
sub ebx, ecx
xchg ecx, edi
add ebx, edi
add ecx, ebx
xchg esi, ecx
shr edi, 0x1c
neg ecx
xchg esi, ecx
sub esi, edi
mov esi, edi
and esi, ebx
xchg ecx, edi
add ebx, 0x1f328af4
xor esi, 0x1f348045
jmp 0x4836ec
pop edx
and esi, 0x1f489bb1
sub esi, edi
dec edi
and ecx, 0x1f4e58d4
xchg ecx, edi
sub ecx, esi
xor edi, esi
add ecx, esi
jmp 0x48304d
call edx
mov ebx, 0x1f5868c5
shl ecx, 0x1b
shr esi, 6
xor esi, ebx
xor esi, ecx
and ecx, 0x1f624d87
mov ecx, 0x1f646c38
xchg ecx, edi
add ebx, ecx
or ebx, esi
jmp 0x483763
mov edx, 0x73716341
and ecx, 0x1f6c7bbb
rol esi, 8
xchg ecx, edi
sub edi, ecx
sub esi, ebx
mov ecx, 0x1f76960b
or ecx, edi
jmp 0x48239d
pop edx
xor ebx, esi
ror esi, 4
sub esi, 0x1fb44c89
and edi, esi
jmp 0x483177
pop edx
neg esi
xor esi, 0x1fbaa5e0
xor ecx, esi
xchg edi, esi
xor ecx, 0x1fc0a259
bswap edi
xchg esi, edi
xchg ebx, ecx
sub esi, 0x1fc8c7f0
sub edi, ecx
inc ecx
sub ebx, 0x1fce8584
shr edi, 6
xchg esi, edi
sub edi, 0x1fd4743f
jmp 0x482252
call fcn.00484589
mov ecx, 0x1ff3bdd8
xchg esi, ecx
add esi, edi
rol ebx, 0xe
sub ebx, esi
xor ecx, 0x1ffea4e7
xor esi, edi
jmp 0x481797
call edx
ror esi, 0xf
and ebx, 0x20243c2f
sub edi, 0x20267601
mov ebx, 0x2028b819
add ecx, esi
or edi, ecx
mov ebx, edi
xchg ecx, edi
add ecx, edi
jmp 0x482421
call edx
or esi, 0x203e4fd0
mov ebx, 0x20402f52
mov edi, 0x204217ac
mov esi, ebx
mov ebx, 0x2045df23
sub ecx, ebx
sub ecx, edi
xor esi, 0x204b9838
add esi, 0x204dad1f
add ecx, edi
xchg esi, edi
xor edi, ecx
xor esi, ebx
xor ebx, ecx
jmp 0x484157
push 0xf9039005
and edi, ecx
xor esi, 0x205c305c
sub ebx, 0x205e16cb
xor esi, 0x20600784
and esi, edi
add ebx, esi
not ebx
or ebx, edi
shl ebx, 0xa
or ecx, 0x206b1bc9
xor esi, ebx
shl esi, 0x1b
shl edi, 6
mov ebx, esi
inc esi
sub esi, ecx
jmp 0x482e5a
pop edx
add ecx, edi
or edi, ecx
or edi, ecx
jmp 0x483be0
push 0xf8a88d62
ror ecx, 0x15
and esi, ebx
not esi
rol ebx, 0xa
shl ebx, 0x15
add esi, ecx
rol ecx, 2
sub ecx, edi
or esi, 0x20c71bd0
mov edi, 0x20c90fc6
sub ecx, esi
or esi, 0x20cd1441
shl edi, 0x17
xor edi, ecx
not esi
add esi, ebx
jmp 0x4821df
push 0xf8a5ab64
xor esi, edi
xchg edi, ecx
sub ebx, edi
mov ecx, ebx
and esi, ecx
xchg ecx, edi
ror edi, 0x12
mov edi, ebx
jmp 0x4826ad
push 0xf8a2ca68
xor ebx, edi
add ecx, 0x21082a5f
sub ebx, edi
and esi, edi
add ebx, edi
and ecx, edi
neg esi
or ecx, ebx
shl ecx, 0x11
mov ecx, 0x2117a5ef
jmp 0x483fc8
mov edx, 0x4132136a
xor esi, ecx
and ecx, edi
add ecx, esi
or esi, ecx
xchg ecx, edi
or ecx, esi
and ecx, 0x215c38fb
jmp 0x4814b9
pop edx
add ebx, esi
add ebx, esi
sub ecx, esi
sub ecx, edi
shr edi, 0x14
or ecx, ebx
mov edi, ebx
or esi, ebx
dec ebx
mov ecx, esi
mov ecx, edi
jmp 0x4814f5