Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api
Query service status

Disassembly:
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffef5
jne 0x40108e
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff11
jne 0x401135
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffeff
jne 0x4011e1
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff1f
jne 0x401279
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
call sub.advapi32.dll_QueryServiceStatus
ret
jmp 0x4d8829
xchg edx, esi
mov esi, edx
jmp 0x4db7bb
pop edi
rol edx, 0xf
mov ecx, 0xa9889307
or esi, edx
xchg edx, ecx
sub ebx, ecx
mov edx, ebx
shr esi, 0x1b
and edx, esi
xor ebx, 0xa9894d61
bswap esi
jmp 0x4db042
push 0xa8f17b21
xchg esi, edx
or edx, esi
xor ebx, 0xa98e75cd
mov ecx, esi
ror edx, 0x16
and edx, ebx
jmp 0x4da8f8
push esp
inc esi
neg edx
shr ebx, 9
or esi, ecx
bswap ecx
xor ecx, esi
or ecx, ebx
not esi
mov ebx, ecx
dec ebx
jmp 0x4d9f23
pop edi
xchg ecx, edx
mov esi, ecx
mov edx, esi
sub esi, ebx
and edx, ecx
ror edx, 0x18
or edx, 0xa991f1f1
and esi, edx
xchg esi, edx
xor edx, esi
or edx, ebx
xor ebx, esi
jmp 0x4d8e48
push 0xa8f5d081
add ebx, 0xa9950bdf
and ebx, edx
add ebx, edx
mov esi, edx
sub esi, edx
shl esi, 9
dec esi
sub edx, ecx
sub ebx, 0xa995dcaf
mov ebx, esi
and esi, edx
and edx, ebx
jmp 0x4d97d2
mov edi, 0x2809144b
shl edx, 0x1e
shr ebx, 0xa
xchg edx, ebx
and ecx, ebx
or esi, 0xa996bf47
neg edx
jmp 0x4da7d6
mov edi, 0x2809144b
sub ebx, ecx
xor edx, esi
sub ebx, edx
mov edx, ebx
mov ecx, edx
shr edx, 6
shl ebx, 0xd
neg ebx
jmp 0x4daa8c
push 0xa8f6c382
xor edx, ebx
bswap edx
bswap ebx
or ebx, esi
not edx
shl ebx, 1
xchg esi, ecx
and ebx, 0xa99e8201
add ebx, 0xa99e9f47
and esi, ecx
xor esi, ecx
neg ecx
neg ecx
and ebx, edx
jmp 0x4da3f8
call edi
xor ecx, 0xa99f4dd3
add ecx, ebx
or ebx, edx
shr esi, 0x1c
not esi
mov ecx, esi
mov ecx, ebx
and esi, 0xa9a007e7
jmp 0x4d916b
call edi
xor esi, ecx
xor edx, esi
xchg edx, esi
ror ecx, 0x1e
shr edx, 6
inc ecx
xor ecx, esi
not ebx
jmp 0x4da496
mov edi, 0x2809144b
ror ebx, 0xb
or ebx, edx
xchg edx, ebx
add ebx, 0xa9a27b6d
sub ebx, esi
mov edx, esi
mov edx, ebx
mov ecx, edx
xchg ebx, edx
mov edx, ecx
sub edx, ecx
add ebx, edx
jmp 0x4da72a
push 0xa8f0aa6b
and edx, esi
mov ebx, esi
mov ebx, ecx
bswap esi
sub ebx, ecx
shl ebx, 2
xor ebx, edx
add edx, ebx
add esi, ebx
or ecx, esi
and esi, ecx
shr esi, 1
xchg ecx, esi
ror edx, 0x17
jmp 0x4da7b4
call edi
mov edx, 0xa9a78b53
xchg edx, ecx
shr esi, 0x18
shl edx, 0xa
dec edx
xor esi, ecx
or edx, ecx
or ebx, ecx
xchg ecx, ebx
sub ecx, esi
jmp 0x4d98dd
push 0xa8f75bf7
shr ecx, 0x19
and edx, ebx
and ebx, ecx
add ebx, 0xa9a8f2f7
rol esi, 3
neg esi
or edx, esi
add ebx, 0xa9a9627b
and esi, ebx
or ecx, 0xa9a9962f
nop
or ecx, esi
jmp 0x4da808
call fcn.004db857
or esi, ebx
xor ecx, 0xa9aba25f
sub ebx, edx
sub ecx, 0xa9abd9ab
mov esi, edx
not esi
add ecx, ebx
xchg ebx, esi
add edx, ebx
or ecx, ebx
jmp 0x4da58d
pop edi
xchg ebx, ecx
ror esi, 0x12
inc edx
mov edx, esi
sub edx, esi
xor edx, ebx
jmp 0x4d9603
pop edi
rol edx, 0x10
dec ecx
xor ebx, edx
and esi, edx
xor esi, 0xa9b53131
xor ebx, ecx
inc esi
sub esi, edx
jmp 0x4dad5d
call edi
shl ebx, 7
ror ebx, 9
ror esi, 4
add edx, 0xa9be091f
add ebx, 0xa9be2281
sub esi, 0xa9be3f93
add esi, ecx
and esi, edx
xor ecx, ebx
add ebx, 0xa9bea88b
rol esi, 0x1f
xchg ecx, ebx
jmp 0x4db5f2
push 0xa8f4483f
xchg ecx, esi
or esi, ecx
sub edx, esi
bswap edx
add esi, 0xa9bf6e17
or ebx, ecx
shl ebx, 0x14
xor ebx, edx
dec ebx
or ebx, ecx
bswap ebx
dec esi
bswap ecx
not ebx
jmp 0x4daeeb
pop edi
or ecx, esi
and ecx, ebx
not esi
xchg ebx, ecx
xor esi, 0xa9c51c2d
xor edx, ecx
sub esi, ebx
or ecx, esi
jmp 0x4d9dc7
pop edi
and ebx, ecx
add esi, ecx
xchg ecx, edx
mov esi, ecx
and edx, 0xa9cca2eb
add esi, edx
and ecx, esi
and esi, 0xa9ccf2d1
and edx, esi
xchg ecx, ebx
jmp 0x4da0e4
push 0x401400
or esi, 0xa9d319b5
xor ebx, 0xa9d33247
bswap edx
add esi, 0xa9d36be1
xor edx, 0xa9d384f3
mov edx, esi
shl ecx, 0xb
xchg ebx, edx
dec ebx
shr ebx, 0x19
and ecx, esi
mov edx, 0xa9d4404b
sub ecx, 0xa9d45d65
and ecx, edx
jmp 0x4d8bd1
push 0xa8f86dea
and ecx, edx
and esi, ebx
bswap ebx
add esi, ecx
or ebx, 0xa9dbecfd
xchg ebx, ecx
bswap edx
xchg esi, ebx
add edx, 0xa9dc5d5b
or ebx, ecx
shl ebx, 0xb
mov esi, ecx
jmp 0x4d9b01
pop edi
add ecx, esi
xchg esi, ebx
bswap ecx
xchg edx, ebx
bswap ebx
mov ecx, esi
shr edx, 0x16
and edx, ecx
or edx, esi
add ecx, 0xa9e7023b
xor ebx, 0xa9e71f23
and edx, ecx
mov edx, 0xa9e753af
xchg edx, ecx
jmp 0x4d974b
push 0xa8f921ed
mov ecx, esi
or ecx, ebx
mov edx, esi
shl ecx, 7
mov esi, edx
shr ebx, 0xc
or esi, ebx
shr esi, 0xa
xor edx, esi
sub ecx, 0xa9e8f147
bswap ebx
rol ebx, 0xd
xchg edx, ecx
and edx, esi
jmp 0x4db199
push 0xa8edcb49
neg esi
or ebx, 0xa9ec2495
xchg ebx, ecx
bswap edx
inc edx
and edx, 0xa9ec979f
jmp 0x4dae8a
pop edi
and edx, 0xa9ecd2fd
or ebx, esi
xor esi, ecx
xor edx, 0xa9ee1871
or edx, ebx
xor edx, ecx
not ecx
xor edx, 0xa9eea60d
mov ecx, edx
inc edx
add ecx, esi
xchg ecx, ebx
jmp 0x4db5ff
call fcn.004db857
add esi, ebx
xor ebx, esi
ror ecx, 4
xor ebx, ecx
bswap esi
rol ebx, 0x11
bswap ebx
neg esi
shr esi, 0x15
mov ebx, 0xa9f09873
jmp 0x4daeb8
pop edi
xchg edx, esi
shr edx, 0x16
add edx, 0xa9f0f81f
ror ebx, 0x12
xor ebx, 0xa9f134fb
not ebx
jmp 0x4db38d
mov edi, 0x4132136a
and esi, 0xa9f17b95
sub ebx, 0xa9f194a7
neg edx
mov ecx, ebx
add ecx, 0xa9f1e2bf
ror ebx, 0xa
ror esi, 0x17
sub esi, ebx
rol ecx, 0x16
and ebx, edx
jmp 0x4db449
call fcn.004db857
dec ecx
xor ebx, edx
xor ebx, esi
sub edx, ecx
xor esi, 0xa9f2fb49
xor ebx, ecx
ror ebx, 6
and ecx, edx
add ecx, edx
sub ebx, 0xa9f381a9
sub ecx, esi
mov ecx, ebx
xchg ecx, ebx
neg esi
add esi, ebx
mov edx, 0xa9f41b61
jmp 0x4dacf5
pop edi
sub ebx, 0xa9f441a5
add ebx, 0xa9f45adb
and ebx, edx
or esi, edx
xchg edx, esi
xor ecx, edx
jmp 0x4dacc4
pop edi
shr esi, 0x14
not esi
inc edx
mov esi, ebx
and ecx, 0xa9f76503
xchg ebx, esi
mov ecx, ebx
add ecx, 0xa9f7b04b
xor edx, esi
or edx, ebx
jmp 0x4d88cb
call edi
xchg ebx, edx
mov ebx, ecx
neg ebx
mov ebx, edx
neg ecx
and edx, 0xa9f9af95
or ecx, edx
and esi, 0xa9f9e3ed
jmp 0x4d9665
push 0xa8ee9806
and ecx, ebx
mov edx, ebx
mov esi, ecx
xor ebx, ecx
shr ebx, 1
xchg esi, edx
mov ebx, esi
sub ecx, edx
shr ebx, 1
xor ecx, esi
add esi, ecx
xchg ecx, edx
mov ebx, edx
ror ecx, 0x19
jmp 0x4d9fbe
mov edi, 0x2809144b
rol esi, 0xe
neg edx
xor ecx, 0xa9ff4091
add ecx, edx
sub edx, esi
xor edx, ebx
add esi, edx
xchg ecx, ebx
xor ecx, 0xa9ffdb21
nop
jmp 0x4d982b
call fcn.004db857
or edx, esi
xchg esi, edx
neg esi
add ebx, 0xaa022aed
xor edx, ecx
or ecx, esi
jmp 0x4dae30
call fcn.004db857
add ecx, 0xaa0282a9
xor ebx, 0xaa029fbb
mov edx, ebx
mov ecx, edx
add ebx, ecx
mov esi, ecx
mov edx, 0xaa03184f
rol ecx, 0x17
neg ecx
add edx, ebx
add ecx, edx
rol ecx, 0x19
jmp 0x4da569
push 0x40
mov ecx, ebx
or ebx, edx
and ebx, edx
rol ebx, 8
xchg edx, ecx
mov ebx, 0xaa064511
inc ecx
or edx, ebx
add edx, ecx
shl esi, 0x19
jmp 0x4da4c7
pop edi
and ecx, 0xaa06d63b
add esi, ecx
or ebx, 0xaa070a9d
not edx
xor edx, esi
mov esi, ebx
mov ebx, ecx
mov edx, 0xaa078b39
rol ecx, 0x11
neg ecx
xor ebx, edx
dec esi
and ecx, esi
and esi, 0xaa082ea5
and edx, esi
or ebx, edx
jmp 0x4da9d4
push 0xa8f2a708
and ebx, edx
rol ebx, 0xb
sub ebx, esi
and ecx, edx
mov edx, ecx
inc esi
sub esi, 0xaa0a3ebb
xchg ecx, esi
add ebx, ecx
xor ebx, esi
jmp 0x4d99d5
call fcn.004db857
and esi, edx
add edx, 0xaa0ca1c5
shr ecx, 0x19
xchg ecx, esi
xor ecx, ebx
add esi, ebx
jmp 0x4db06b
push 0xa8f2c5bb
shr edx, 9
xchg esi, ebx
add ecx, ebx
xchg esi, edx
mov esi, edx
and esi, 0xaa0e6a4f
or ecx, edx
ror ecx, 5
jmp 0x4d8c18
call fcn.004db857
mov ecx, esi
sub edx, ecx
mov edx, ebx
inc ecx
mov edx, ecx
bswap esi
inc esi
or edx, esi
add esi, ecx
xor esi, edx
or esi, ebx
add ebx, esi
jmp 0x4da1a1
mov edi, 0x2809144b
shl ecx, 0x17
mov ecx, ebx
sub ecx, esi
xor ecx, ebx
bswap ebx
or ebx, esi
sub ecx, edx
add ebx, 0xaa178f2d
and esi, ecx
or esi, edx
and ebx, edx
mov ecx, edx
jmp 0x4d8d4a
mov edi, 0x2809144b
bswap ebx
add esi, ebx
or ebx, ecx
sub ebx, edx
xchg esi, ecx
sub edx, 0xaa18a34d
mov ecx, edx
inc ebx
bswap esi
mov edx, esi
mov edx, ebx
sub edx, esi
jmp 0x4da065
call fcn.004db857
xor ecx, 0xaa1c3187
mov ebx, 0xaa1c4b69
xor edx, ebx
rol edx, 0x14
dec ecx
mov esi, ecx
sub esi, 0xaa1ccf51
sub ebx, edx
xor edx, esi
dec ebx
xor ebx, esi
sub edx, ecx
jmp 0x4db770
call fcn.004db857
or ebx, 0xaa25f7a5
or edx, ebx
mov esi, edx
shr ebx, 0x1c
and ecx, esi
ror ebx, 0xc
mov ecx, ebx
or ebx, edx
xchg ebx, ecx
bswap edx
jmp 0x4db26f
pop edi
xor ecx, 0xaa27089d
and edx, esi
xchg ecx, ebx
or ecx, 0xaa27575b
mov ecx, 0xaa277465
xchg esi, ebx
bswap ecx
mov edx, ebx
jmp 0x4da277
push 0xa8f5b2d1
sub ebx, esi
xchg ecx, edx
mov ebx, edx
mov esi, 0xaa294f0d
rol edx, 0x13
xor ebx, esi
sub edx, ecx
sub ebx, 0xaa29b637
shr ecx, 0x17
add esi, ebx
mov esi, 0xaa2a0b09
or edx, ecx
and ecx, esi
mov ebx, ecx
jmp 0x4d8a62
pop edi
mov esi, edx
xor ebx, edx
ror ecx, 5
xor esi, 0xaa2acca5
and esi, ecx
shr esi, 0x1c
sub ecx, 0xaa2b1d5b
xor edx, 0xaa2b3675
jmp 0x4d95e7
pop edi
and ecx, 0xaa2d8af9
and edx, ebx
mov esi, ebx
and ebx, esi
xchg edx, esi
xchg ebx, esi
mov ecx, ebx
neg esi
xor ecx, ebx
xor esi, edx
jmp 0x4dab02
push esp
mov ebx, 0xaa3878b9
or esi, 0xaa38954b
xor edx, esi
xchg ebx, edx
xchg ebx, edx
mov edx, 0xaa38fcd5
rol ecx, 0x1f
neg ecx
dec ebx
mov esi, ebx
jmp 0x4d98bb
mov edi, 0x2809144b
xor ebx, esi
dec ecx
dec ecx
xor ebx, edx
xor ebx, 0xaa3ddefd
add ebx, esi
xor esi, edx
and ecx, esi
sub ebx, esi
xor esi, ecx
or edx, esi
and edx, ecx
mov edx, 0xaa3eaf5d
or ecx, edx
add edx, ebx
sub esi, ecx
jmp 0x4d9845
push 0xa8fb4010
sub ebx, ecx
xchg esi, ecx
mov ecx, 0xaa41020d
rol ebx, 9
dec ebx
or esi, ebx
rol ecx, 4
mov edx, 0xaa4188bb
shl ecx, 0xf
mov esi, edx
jmp 0x4da8b6
call edi
not edx
add ecx, ebx
shl ebx, 0xd
add edx, ebx
jmp 0x4d9ce7
call fcn.004db857
not ecx
and edx, ecx
mov ebx, esi
shr ecx, 0xf
xchg ecx, esi
or ecx, 0xaa43990f
sub ecx, ebx
xor ebx, edx
or esi, ebx
inc edx
jmp 0x4d8f8f
pop edi
mov ebx, esi
sub ecx, edx
sub ecx, esi
xchg ecx, esi
sub edx, ebx
add ebx, edx
and edx, ebx
or ecx, ebx
jmp 0x4d9362
call edi
mov esi, 0xaa4d1813
xor edx, esi
sub ecx, 0xaa4d5287
xchg esi, edx
jmp 0x4d959a
mov edi, 0x2809144b
sub edx, 0xaa4eb245
bswap ebx
xchg ecx, ebx
neg esi
dec edx
add ebx, ecx
add edx, ebx
rol esi, 0x14
or ebx, ecx
shl ebx, 4
mov esi, ecx
mov edx, esi
or edx, ebx
shr edx, 1
jmp 0x4da6c2
call edi
xchg ebx, esi
mov ecx, ebx
neg esi
bswap ebx
or esi, edx
xchg edx, esi
xor esi, 0xaa50d24d
mov edx, esi
jmp 0x4da9b7
pop edi
and edx, ebx
and esi, edx
sub ebx, 0xaa533a87
mov ebx, esi
ror edx, 0x14
sub edx, esi
or esi, 0xaa53a671
mov esi, ebx
jmp 0x4d8fc2
mov edi, 0x2809144b
add esi, ecx
dec ecx
mov esi, edx
mov esi, ebx
sub esi, edx
sub esi, 0xaa5f8e39
add ebx, edx
mov esi, edx
mov esi, ebx
sub ecx, 0xaa5ff9ef
jmp 0x4d9cc3
mov edi, 0x2809144b
sub ebx, ecx
sub esi, ecx
shl edx, 0x1e
shr ecx, 0x10
sub esi, ebx
shl ecx, 0x13
mov edx, 0xaa6179d7
sub ecx, 0xaa61928b
mov ecx, ebx
mov esi, edx
mov esi, 0xaa61dc0f
and ebx, ecx
jmp 0x4d9a7a
pop edi
xchg esi, ebx
mov ecx, esi
xor edx, 0xaa639e63
nop
not esi
sub ecx, edx
sub ecx, esi
add ebx, ecx
jmp 0x4da018
pop edi
ror edx, 2
or ecx, ebx
xor ebx, edx
and esi, edx
rol esi, 0xf
or ebx, ecx
sub ebx, edx
xchg ebx, edx
jmp 0x4dad99
push 0xd7429
add edx, 0xaa653fd7
and esi, 0xaa6558e1
xchg esi, ebx
bswap ecx
or esi, edx
rol edx, 0x16
mov esi, 0xaa65e2db
and ebx, ecx
not ebx
shl ebx, 9
add edx, ebx
and edx, 0xaa666449
jmp 0x4d924c
mov edi, 0x2809144b
mov edx, 0xaa66883d
rol ecx, 0x15
ror ebx, 0x1c
mov ecx, ebx
jmp 0x4d9630
call edi
add ebx, esi
add ebx, ecx
mov esi, ecx
and ebx, edx
or esi, ecx
and ebx, ecx
bswap ebx
dec esi
xor esi, 0xaa6a9a2b
rol edx, 8
shr ecx, 5
not ecx
jmp 0x4db20e
call edi
shr edx, 0xb
xor edx, ecx
and ebx, ecx
xchg edx, ebx
bswap ebx
xchg esi, edx
mov ebx, esi
or ebx, ecx
add esi, ecx
mov esi, 0xaa6c015f
xchg esi, ecx
nop
jmp 0x4da4af
push 0xa8f90389
mov ebx, 0xaa72f801
sub edx, ebx
or esi, edx
xor edx, ecx
sub ebx, 0xaa73857f
add ebx, 0xaa739ebd
and ebx, edx
xchg ecx, esi
and ecx, edx
not esi
add ecx, esi
xor ecx, esi
jmp 0x4d9506
call fcn.004db857
shl ebx, 0xa
or edx, esi
dec esi
xor esi, 0xaa755ef7
xchg edx, ecx
bswap esi
not edx
nop
rol ebx, 8
xor ebx, ecx
shr ebx, 0x14
xchg ebx, esi
sub edx, ebx
or esi, edx
jmp 0x4da213
call fcn.004db857
xor ecx, 0xaa782c0f
xor ecx, esi
add esi, edx
add ebx, 0xaa787b79
dec ebx
mov ecx, ebx
dec esi
or ecx, ebx
xor ebx, edx
add edx, ecx
add ecx, esi
shl ecx, 0x11
jmp 0x4db162
push 0xa8ecc1d9
xor edx, ecx
rol esi, 8
neg edx
mov esi, 0xaa7b7f3f
nop
and ecx, 0xaa7bb7df
xchg ecx, ebx
mov ecx, ebx
sub ecx, esi
or ebx, 0xaa7c1ce7
jmp 0x4da4fa
mov edi, 0x2809144b
or esi, 0xaa7c4243
sub esi, edx
sub ecx, edx
mov ecx, ebx
xchg ecx, ebx
add ecx, 0xaa7cc291
and ebx, edx
xchg esi, ebx
jmp 0x4d95c3
call fcn.004db857
sub esi, edx
xor esi, ebx
mov ebx, edx
sub ecx, ebx
xchg esi, edx
xor esi, ebx
mov esi, ecx
xor ebx, ecx
ror ebx, 1
not ebx
rol ebx, 0x18
shl esi, 9
ror edx, 4
or edx, 0xaa7e7dbb
xor edx, ecx
xchg ebx, ecx
jmp 0x4d8bb1
push 0xa8f779a7
dec ebx
sub ebx, ecx
add esi, ecx
ror esi, 0x10
rol edx, 0x11
dec ecx
bswap ebx
add esi, ecx
xchg esi, edx
xchg esi, edx
add ebx, 0xaa802755
xchg ebx, edx
mov ebx, ecx
neg ebx
neg esi
add edx, esi
jmp 0x4d8a8c
mov edi, 0x2809144b
sub ebx, esi
mov edx, 0xaa842f41
xor edx, ecx
and ebx, edx
add esi, edx
not ebx
sub ebx, edx
mov esi, ecx
xor ebx, ecx
xor esi, ecx
jmp fcn.004d8ecf
push 0xa8f198fb
sub esi, ebx
not edx
nop
or edx, ebx
not ecx
shl ecx, 0xe
xor ebx, esi
xor edx, 0xaa86e92b
jmp 0x4dac01
pop edi
or ebx, esi
shl edx, 0x1d
add ebx, ecx
and ecx, ebx
xchg ebx, ecx
bswap edx
not ecx
rol ecx, 0x16
shr ebx, 0xf
or ecx, ebx
jmp 0x4db7fd
push 0xa8f4e105
xchg esi, edx
mov ebx, esi
sub ecx, edx
dec esi
xor ecx, esi
sub esi, ecx
sub ecx, ebx
mov esi, 0xaa8da3d9
sub edx, 0xaa8dbceb
xor esi, 0xaa8dd985
mov edx, esi
shl edx, 0x12
jmp 0x4da439
call fcn.004db857
neg esi
shr esi, 4
shl ecx, 0x1d
mov esi, edx
dec ebx
or esi, ebx
mov edx, ebx
sub edx, esi
mov ecx, 0xaa934fd5
not ecx
bswap esi
rol esi, 0xa
jmp 0x4da055
pop edi
or ecx, esi
ror edx, 0x17
rol ebx, 0x18
dec ebx
dec esi
sub edx, esi
bswap esi
and ebx, edx
xchg edx, ebx
or esi, edx
xchg edx, ecx
mov ebx, 0xaa978c33
xor ecx, esi
inc ecx
jmp 0x4db1f6
pop edi
mov ebx, ecx
and esi, edx
xchg edx, esi
mov ecx, esi
jmp 0x4d8ce4
push 0xa8f1b681
or ebx, 0xaa9eb4a1
or ecx, esi
shr ecx, 3
xor edx, ebx
inc edx
or edx, ecx
shr esi, 3
and ebx, edx
xchg ecx, esi
or ebx, esi
jmp 0x4da1e7
push 0xa8efdd67
and esi, edx
xor ecx, esi
and edx, ecx
xchg esi, edx
shl esi, 0x11
add ebx, edx
ror ecx, 0x18
inc ebx
bswap esi
xchg ebx, ecx
jmp 0x4d9ada
push 0xa8f397ef
ror ebx, 0x1e
or esi, ebx
add edx, 0xaaa115dd
and ecx, ebx
add ecx, esi
bswap ecx
shl ecx, 9
mov ebx, esi
sub ecx, edx
xchg ebx, esi
jmp 0x4d8ae9
push 0xa8eca2d7
sub esi, 0xaaa3358f
bswap ecx
add esi, edx
or ecx, 0xaaa3824d
xchg edx, ecx
and esi, ecx
sub edx, ecx
mov ebx, 0xaaa3e82d
add ebx, esi
xor ecx, edx
mov ecx, esi
sub edx, ecx
jmp 0x4da78b
push 0xa8efbedf
and edx, esi
mov esi, ecx
or edx, esi
add esi, ebx
and ecx, edx
mov ecx, 0xaaa4f04b
sub esi, ecx
add ecx, esi
mov edx, ebx
or ecx, edx
and esi, edx
add ebx, ecx
add ebx, 0xaaa5a5a7
mov ebx, ecx
add edx, ebx
add ecx, edx
jmp 0x4dac24
call edi
add ebx, 0xaaa6116f
dec ebx
sub ecx, esi
xchg ecx, esi
ror edx, 4
and edx, ebx
xor ebx, 0xaaa6b2af
bswap edx
jmp 0x4d9064
pop edi
sub esi, edx
mov esi, ecx
and edx, 0xaaa8f52f
not edx
shl edx, 0x1b
bswap ebx
jmp 0x4d94c4
pop edi
dec edx
add ebx, ecx
xor ebx, 0xaaaab759
shl ecx, 0x1b
sub ecx, esi
mov ecx, edx
sub edx, ebx
xchg edx, esi
shr edx, 2
xchg edx, esi
or ecx, ebx
xor ebx, ecx
jmp 0x4db7e3
call edi
rol edx, 0x1c
mov ebx, edx
mov esi, 0xaaafae79
sub edx, 0xaaafcb0b
or edx, 0xaaafebe1
and edx, 0xaab00527
sub ebx, ecx
mov esi, ebx
jmp 0x4d9d5b
mov edi, 0x2809144b
add esi, ecx
shr ecx, 0xa
xchg ecx, esi
or esi, 0xaab239d9
or ebx, ecx
sub ebx, 0xaab26a31
or esi, ebx
xchg esi, ebx
sub edx, esi
sub ebx, edx
and esi, edx
sub esi, ebx
sub ebx, esi
dec ecx
jmp 0x4d9b7a
call edi
mov ebx, edx
mov esi, 0xaab37b17
xor edx, esi
shr ebx, 0x1c
xchg ecx, ebx
xchg ecx, ebx
xor ecx, 0xaab40297
sub ecx, 0xaab41fff
xchg esi, edx
mov esi, edx
shr ebx, 9
mov ecx, esi
add ecx, 0xaab49f43
dec edx
jmp 0x4d96c5
mov edi, 0x2809144b
xchg edx, esi
or esi, edx
inc esi
or edx, esi
jmp 0x4db24d
push 0xa8f15c42
xchg ecx, edx
shr ebx, 0x19
sub edx, esi
add ecx, ebx
jmp 0x4d898d
pop edi
and ebx, esi
not ecx
add ecx, ebx
xor esi, 0xaac0c343
xor edx, esi
or edx, ebx
jmp 0x4db4b5
call edi
xchg ebx, edx
mov ebx, ecx
xor esi, ebx
mov ebx, edx
mov ecx, ebx
sub ecx, esi
xchg ebx, esi
ror ecx, 1
sub edx, ecx
and ebx, ecx
jmp 0x4d89eb
push 0xa8ef2dde
bswap edx
and ebx, ecx
add esi, ecx
and ecx, esi
or edx, ebx
mov esi, 0xaac6cf37
rol esi, 8
dec edx
xor ebx, esi
add ebx, edx
xor ecx, 0xaac756b7
mov edx, ecx
jmp 0x4db3cf
call edi
sub esi, ebx
sub ebx, esi
mov ebx, edx
dec ebx
xor ebx, 0xaac97b29
bswap esi
jmp 0x4db055
mov edi, 0x2809144b
shr ebx, 0xa
sub edx, esi
not esi
shl esi, 0x1f
and ecx, esi
dec ecx
and ecx, ebx
or ecx, 0xaacb4a73
or ecx, edx
xchg ecx, edx
and esi, 0xaacb9c2d
and edx, esi
jmp 0x4d999e
push 0xa8ed8e63
neg esi
shr esi, 0x11
rol edx, 2
mov ebx, edx
and ebx, esi
mov ecx, esi
jmp 0x4db9eb
pop edi
mov edx, ebx
sub edx, esi
inc esi
or edx, esi
not ecx
sub ebx, 0xaacebccb
add ebx, 0xaaced6bd
xchg esi, ecx
jmp 0x4db112
call fcn.004db857
rol ebx, 7
inc esi
neg edx
xor esi, ecx
dec edx
add ebx, ecx
xor ebx, 0xaad0a149
shl ecx, 4
sub ecx, esi
not ebx
jmp 0x4d8cc5
call edi
nop
or esi, 0xaad13577
xor ebx, 0xaad14e01
not edx
add ecx, esi
sub ecx, 0xaad19f9f
mov esi, edx
or esi, ebx
inc ebx
sub ebx, 0xaad2187f
xchg ecx, edx
xor ebx, 0xaad24f7d
jmp 0x4dab48
push 0xa8f59473
or ebx, 0xaad89863
and ebx, edx
not ebx
sub ebx, 0xaad8e921
xor ecx, 0xaad90233
bswap esi
inc esi
shl esi, 0x18
add ebx, edx
or esi, edx
sub edx, 0xaad9a773
and ecx, esi
jmp 0x4d9d29
pop edi
xor ecx, ebx
sub edx, esi
nop
xchg edx, ecx
and ebx, 0xaada4e4d
add ebx, 0xaada6b83
xor esi, ebx
and ecx, ebx
jmp 0x4db92e
mov edi, 0x2809144b
shl edx, 0xe
xor ecx, ebx
xor ecx, edx
rol ebx, 3
and esi, ebx
xor ecx, 0xaadc5f93
jmp 0x4db895
call fcn.004db857
mov ebx, edx
xor esi, ecx
and ecx, edx
not esi
shl esi, 0x1f
xor ecx, edx
inc ebx
inc esi
and ebx, edx
rol ebx, 0x1b
jmp 0x4d89a8
pop edi
and edx, ebx
mov esi, 0xaae321f3
sub edx, 0xaae33adb
add ebx, ecx
and ecx, ebx
rol edx, 0x12
mov ebx, edx
add edx, ebx
and ebx, ecx
add edx, 0xaae3eea9
jmp 0x4db702
pop edi
rol esi, 0x15
xchg ecx, edx
mov ebx, edx
and esi, edx
xchg edx, ebx
xchg ebx, esi
mov ecx, ebx
or ebx, edx
xor edx, ecx
and ebx, edx
not ebx
sub ebx, edx
jmp 0x4db8ce
pop edi
inc ebx
inc edx
shl edx, 0x10
xor ecx, ebx
jmp 0x4da67b
push 0xa8f57675
mov ecx, 0xaaee12a7
sub ebx, 0xaaee2fb1
xor ecx, 0xaaee4875
inc ebx
or ecx, esi
ror edx, 0x10
rol ebx, 7
and esi, ebx
sub edx, ecx
mov ecx, esi
xor edx, 0xaaef1ee7
mov edx, esi
jmp 0x4db35b
push 0xa8f37967
sub esi, ebx
shl ecx, 0xe
add edx, esi
add edx, ebx
add ecx, edx
add ebx, esi
ror esi, 0x17
or ecx, edx
shr ebx, 0x15
sub edx, esi
xor edx, ebx
add esi, edx
dec esi
xor esi, 0xaaf69517
xchg edx, ecx
mov ebx, 0xaaf6c8b9
jmp 0x4dac43
call edi
sub edx, ecx
add esi, 0xaaf8c9a5
xor edx, 0xaaf8e2b7
xchg ebx, ecx
and esi, ebx
bswap ebx
mov ecx, ebx
or ebx, edx
sub esi, ecx
neg ecx
shr ecx, 0xd
sub esi, ebx
jmp 0x4d8e6a
push 0xa8ec8257
and edx, ebx
ror ecx, 0x15
mov ecx, edx
add ebx, 0xaafc61d9
ror ebx, 0x19
or ebx, edx
add esi, edx
and esi, 0xaafccd27
bswap edx
not ecx
jmp 0x4dac97
push 0xa8f08c16
and edx, esi
add edx, esi
mov ebx, edx
mov esi, ebx
and ebx, esi
mov ecx, esi
or ecx, ebx
xor esi, ebx
jmp 0x4d8c5a
pop edi
or edx, esi
and edx, ebx
xor esi, edx
or esi, ebx
add ebx, esi
and ecx, esi
and ecx, 0xaafe9245
add ecx, 0xaafeafad
and esi, edx
add edx, 0xaafee741
or ebx, ecx
sub esi, ebx
mov edx, esi
or edx, ebx
jmp 0x4db4db
call fcn.004db857
or edx, ebx
or ecx, 0xab02d385
or edx, ecx
add edx, esi
and esi, edx
not esi
or edx, ecx
add ebx, 0xab036e2f
jmp 0x4d970e
pop edi
bswap esi
and ebx, ecx
xchg edx, ebx
or esi, edx
not esi
or edx, ecx
and ecx, esi
and edx, 0xab04fd5b
and edx, esi
neg esi
jmp 0x4d9940
pop edi
xor esi, edx
xor esi, edx
or esi, ebx
shl ecx, 0x1b
sub ecx, esi
or edx, 0xab083daf
mov esi, ebx
neg ecx
mov ebx, esi
or ebx, ecx
jmp 0x4d8b82
push 0xa8edaceb
and ebx, ecx
bswap ebx
or esi, 0xab0dfee9
xor ebx, 0xab0e1bfb
add ebx, esi
xor ecx, edx
jmp 0x4d957d