Function at 0x401000
Capabilities:
Delete registry key
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetShellWindow
cmp eax, 0xffffff17
jne 0x4010a7
call sub.user32.dll_DdeCreateStringHandleW
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.advapi32.dll_SetFileSecurityA
call sub.user32.dll_DdeCreateStringHandleW
call sub.advapi32.dll_SetFileSecurityA
call sub.user32.dll_DdeCreateStringHandleW
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.user32.dll_DdeCreateStringHandleW
call sub.user32.dll_DdeCreateStringHandleW
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.user32.dll_DdeCreateStringHandleW
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xfffffedb
jne 0x401149
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.user32.dll_DdeCreateStringHandleW
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.user32.dll_DdeCreateStringHandleW
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.user32.dll_DdeCreateStringHandleW
call sub.user32.dll_DdeCreateStringHandleW
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xffffff11
jne 0x4011cd
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.user32.dll_DdeCreateStringHandleW
call sub.user32.dll_DdeCreateStringHandleW
call sub.user32.dll_DdeCreateStringHandleW
call sub.user32.dll_DdeCreateStringHandleW
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xfffffef8
jne 0x40126a
call sub.user32.dll_DdeCreateStringHandleW
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.user32.dll_DdeCreateStringHandleW
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.user32.dll_DdeCreateStringHandleW
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
call sub.ntdll.dll_ZwDeleteKey
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.advapi32.dll_SetFileSecurityA
call sub.ntdll.dll_ZwDeleteKey
ret
jmp 0x49c73b
add edx, edi
sub edx, esi
jmp 0x49cdfc
mov edx, 0x2a371b56
mov ecx, 0xa955fa64
xor edi, esi
neg esi
inc edi
inc esi
jmp 0x49e6c8
mov edx, 0x4132136a
xchg esi, ebx
neg ecx
and ecx, ebx
add ebx, edi
add esi, ecx
and esi, 0xa96cb903
xchg esi, ecx
jmp 0x49d082
push 0xa80f2964
sub esi, 0xa98b83ef
sub ebx, ecx
sub esi, ecx
bswap edi
xor esi, ecx
and edi, 0xa98cc93d
add ebx, edi
and ecx, edi
xor ebx, ecx
or ecx, ebx
or ecx, 0xa9cf2c0c
jmp 0x49cca4
pop edx
and ecx, 0xa9d54c6a
sub ebx, edi
not esi
mov ebx, edi
shr ebx, 5
or ecx, ebx
and ebx, 0xa9d6c7df
jmp 0x49d422
push 0xa8120c39
ror esi, 0x1c
add ecx, ebx
and ebx, edi
shr edi, 0xc
or esi, 0xa9e11bce
add esi, 0xa9e16847
ror esi, 0xf
jmp 0x49e36b
pop edx
sub esi, ebx
shl esi, 0x10
xor edi, 0xa9f622b2
shl ebx, 0x15
or esi, 0xa9f6ab50
or esi, ecx
shl esi, 0x15
jmp 0x49df27
push 0xa80687a0
add esi, ecx
add esi, ebx
sub edi, 0xa9f7ef9a
not ecx
xchg edi, ecx
rol ecx, 0x16
add ecx, 0xa9f8f3f3
and esi, edi
mov ecx, edi
inc esi
jmp 0x49d194
push 0xa80f7303
add edi, 0xa9fecbcd
shr edi, 0x1f
shl ebx, 0xd
xor ecx, edi
shl edi, 0x17
add edi, ecx
sub edi, ecx
sub ebx, esi
sub ebx, ecx
jmp 0x49c815
pop edx
xor ebx, ecx
xor ecx, edi
sub edi, 0xaa01a223
and edi, 0xaa01efa9
jmp 0x49e710
pop edx
rol ebx, 0xc
xor esi, ecx
shr ecx, 0x1f
sub esi, 0xaa08a61a
xor ecx, edi
mov edi, esi
jmp 0x49d5c4
pop edx
or edi, ecx
not ebx
ror ebx, 0xa
add edi, ecx
mov ecx, esi
xchg esi, ebx
add ecx, edi
sub esi, ecx
jmp 0x49d911
mov edx, 0x40495727
bswap ebx
xchg esi, edi
jmp 0x49d654
push 0xa80633e7
and ebx, 0xaa16acf2
bswap esi
or ecx, ebx
ror edi, 1
add esi, edi
xor edi, ebx
xor edi, 0xaa182ca1
or ebx, ecx
jmp 0x49cc34
call fcn.0049cb8d
mov ecx, esi
xor ebx, 0xaa18fb19
and ecx, esi
mov edi, esi
add ecx, esi
rol ebx, 3
neg esi
xor edi, ecx
dec edi
jmp 0x49e32b
call edx
or edi, ecx
or ecx, ebx
or esi, edi
add esi, edi
sub ecx, edi
xchg esi, edi
rol edi, 0x1e
and edi, esi
jmp 0x49d60f
call edx
and ecx, edi
sub ecx, esi
and ebx, esi
and esi, ebx
rol ebx, 5
inc ebx
shl edi, 0x14
xchg esi, ebx
add ecx, ebx
ror ecx, 0x17
xor ecx, ebx
jmp 0x49dda8
push 0x9b33b
xor edi, ecx
xchg edi, ecx
and ecx, ebx
add edi, esi
or edi, esi
xor edi, esi
mov esi, edi
add ebx, esi
bswap esi
jmp 0x49e678
push 0xa80bff89
sub esi, ebx
or ebx, esi
and edi, ecx
xchg esi, ebx
mov edi, ebx
shr esi, 0xd
and esi, 0xaa392a1f
xor ecx, esi
jmp 0x49e762
pop edx
xor edi, 0xaa3f2b31
add esi, edi
mov ecx, edi
or esi, ebx
add esi, ebx
mov esi, 0xaa406dea
jmp 0x49de1d
pop edx
and edi, esi
and edi, ebx
or ecx, esi
and ebx, ecx
xor edi, 0xaa41c6a6
inc esi
mov esi, 0xaa4243e6
add ebx, 0xaa42822c
xchg edi, esi
jmp 0x49e120
call fcn.0049cb8d
xor esi, 0xaa447f0e
and ebx, 0xaa44be41
dec ebx
mov edi, ebx
rol edi, 7
dec edi
and edi, 0xaa45f92e
sub ecx, ebx
and esi, 0xaa4685e1
neg esi
xchg edi, esi
add ecx, 0xaa474273
and ecx, 0xaa47816a
and ecx, edi
xor ebx, 0xaa47fcf6
jmp 0x49e4dd
push 0xa80bb5e6
sub ebx, ecx
and esi, 0xaa488f0e
and edi, ebx
mov esi, ebx
or ebx, esi
mov esi, ebx
sub edi, ebx
add esi, ebx
not edi
sub edi, 0xaa4a8a69
xor edi, 0xaa4ac9e7
sub esi, edi
jmp 0x49cfd1
call edx
and ebx, edi
sub edi, ebx
add esi, 0xaa4bd79f
rol ebx, 0x10
sub ebx, 0xaa4c55ab
not esi
and edi, 0xaa4ce5aa
xor edi, 0xaa4d24b7
sub ecx, 0xaa4d6352
xchg edi, ebx
or esi, ebx
jmp 0x49ed71
push 0xa817fa1b
shr edi, 0x1d
xchg ebx, ecx
xchg edi, esi
and esi, edi
sub ebx, esi
add ebx, 0xaa4f6dfe
or ecx, 0xaa4fbdb9
mov edi, ecx
jmp 0x49e3c1
pop edx
sub esi, ecx
xchg esi, edi
or edi, 0xaa54ead1
or ebx, edi
shl ecx, 0x14
shr esi, 0x17
jmp 0x49d034
push 0xa806d112
or esi, edi
or ecx, 0xaa563808
xor ecx, ebx
and ecx, 0xaa56b59b
xor esi, ebx
xchg esi, ebx
neg esi
xchg edi, esi
jmp 0x49da70
push 0xa824d8c9
and ecx, 0xaa5ddf44
ror edi, 0x11
inc edi
and edi, 0xaa5eaf95
and ecx, 0xaa5eed64
or ebx, esi
not esi
jmp 0x49e91b
push 0xa807639a
bswap edi
add ecx, 0xaa5fff73
sub ecx, esi
mov ecx, ebx
mov ebx, ecx
or edi, esi
xor esi, ecx
or ecx, esi
shl esi, 9
sub ebx, 0xaa61f90c
jmp 0x49d36d
push 0xa81d1c57
mov esi, edi
add ebx, esi
shl edi, 0x12
and ecx, 0xaa6a6105
bswap esi
sub esi, ecx
mov ebx, edi
jmp 0x49d813
pop edx
xchg ebx, ecx
sub ecx, esi
bswap esi
sub ecx, 0xaa72d5e9
jmp 0x49dc43
call edx
add ebx, 0xaa732f76
sub esi, 0xaa736fa6
mov esi, ecx
xchg ebx, edi
xor edi, ecx
neg esi
xchg edi, esi
and esi, edi
add edi, esi
jmp 0x49ec52
mov edx, 0x40495727
neg edi
and ecx, 0xaa75c696
mov esi, 0xaa76156c
jmp 0x49f16a
mov edx, 0x40495727
or ecx, 0xaa76705e
ror ebx, 3
and esi, 0xaa76ff57
and esi, 0xaa773e4a
xor esi, ecx
inc edi
or ebx, esi
xchg ebx, esi
jmp 0x49d84e
pop edx
add ebx, ecx
and ecx, esi
sub ecx, ebx
bswap esi
xor esi, 0xaa798444
mov ebx, esi
xor ecx, 0xaa79ff15
mov esi, ebx
xor esi, ebx
sub edi, ebx
jmp 0x49c923
push 0xa81768a4
not ecx
or esi, ecx
and edi, 0xaa81d3a9
jmp 0x49d560
push 0xa817b106
or ecx, esi
mov ecx, esi
mov ebx, 0xaa965de6
ror ebx, 0xd
or edi, ecx
and edi, esi
and edi, ecx
ror ebx, 0x13
and ecx, edi
and ebx, 0xaa981d3a
rol edi, 0xa
xchg edi, ebx
jmp 0x49d125
push 0xa81566ed
and edi, ebx
mov ecx, 0xaa9b93a1
sub esi, ebx
and ecx, esi
and edi, ebx
jmp 0x49e146
pop edx
sub ebx, 0xaa9cb108
mov edi, ebx
add esi, 0xaa9d2daf
mov esi, ebx
xor ecx, ebx
or ecx, edi
add ebx, ecx
shr esi, 0x1a
nop
mov ecx, edi
and edi, ebx
jmp 0x49e946
pop edx
sub esi, ecx
rol ebx, 0x16
shl esi, 7
add edi, esi
dec ebx
sub edi, 0xaaa3bc67
shr edi, 0x1f
mov ecx, ebx
add ebx, 0xaaa478b2
jmp 0x49d7b4
call fcn.0049cb8d
or ebx, 0xaaa6eb76
neg ebx
rol ebx, 0x18
dec edi
shl ebx, 0xe
add ecx, esi
and ecx, esi
xchg edi, esi
mov ebx, esi
jmp 0x49d34c
pop edx
mov ebx, ecx
xor ebx, esi
xchg esi, ebx
or ecx, 0xaaaf6039
not edi
rol edi, 0x1b
jmp 0x49ee99
call fcn.0049cb8d
add ebx, 0xaab28985
sub ecx, 0xaab2c87e
xchg ebx, edi
bswap edi
xchg edi, esi
sub ecx, ebx
xor edi, esi
and edi, 0xaab43d03
mov ecx, 0xaab48c8a
and edi, ecx
jmp 0x49f253
pop edx
and esi, ebx
or esi, 0xaabfc3ba
or ecx, ebx
mov esi, 0xaac03dc2
mov ecx, esi
rol ecx, 0x1e
inc ecx
rol ecx, 1
add edi, 0xaac186d4
or ebx, ecx
xor edi, ecx
bswap esi
mov ecx, ebx
xor ecx, esi
jmp 0x49e187
mov edx, 0x40495727
add esi, ecx
xor edi, esi
add ecx, esi
sub edi, esi
sub edi, 0xaac814cc
neg edi
mov edi, ecx
mov esi, 0xaac8cd26
sub ecx, edi
rol edi, 8
xor edi, ecx
jmp 0x49f0a6
call fcn.0049cb8d
mov ecx, esi
xchg ecx, esi
mov esi, ecx
add esi, edi
jmp 0x49ce3f
pop edx
or ecx, edi
bswap ebx
mov edi, ebx
sub esi, 0xaacfbbfc
inc ebx
mov ebx, 0xaad0380d
jmp 0x49ca5e
pop edx
mov ebx, edi
mov ebx, 0xaad7f600
xor ecx, ebx
neg ebx
sub edi, 0xaad8b3d6
xchg ebx, esi
mov ebx, 0xaad94295
shr ecx, 0x11
xor edi, 0xaad9c0d3
jmp 0x49ef02
push 0xa8284922
rol edi, 5
xor ecx, edi
jmp 0x49dd7c
pop edx
and ecx, edi
xchg ebx, esi
or esi, 0xaae36329
and ebx, 0xaae3a164
jmp 0x49dded
push 0xa80b6b0b
and esi, ecx
ror edi, 0x11
sub edi, ecx
add edi, ebx
bswap ebx
jmp 0x49d0c5
pop edx
and esi, ebx
shl ecx, 2
add ecx, edi
mov ebx, 0xaaef5de3
nop
mov esi, 0xaaefdc16
mov esi, 0xaaf01cc8
or edi, ecx
or edi, esi
mov ecx, 0xaaf0e6bd
or ecx, edi
xor esi, ebx
ror ecx, 0x15
and ecx, 0xaaf1def4
jmp 0x49df12
push 0xa8071af6
and esi, ecx
sub ecx, 0xaaf2717a
add ecx, esi
mov ebx, esi
mov esi, edi
xchg esi, ebx
and ecx, esi
dec ecx
inc ecx
sub esi, edi
add edi, esi
xor esi, ecx
mov esi, 0xaaf52349
add edi, esi
mov esi, edi
jmp 0x49d230
pop edx
sub ecx, 0xaaf90da0
mov esi, edi
sub ebx, ecx
and edi, 0xaaf9d6fa
or ecx, 0xaafa15c3
jmp 0x49e6f1
pop edx
bswap ebx
inc esi
bswap esi
dec esi
sub ecx, 0xaafbfcc8
mov esi, 0xaafc39d7
xchg esi, ebx
or ecx, 0xaafcb3a3
inc ebx
xor ebx, esi
and esi, ebx
jmp 0x49f2d1
push 0x40
mov ecx, edi
and ecx, 0xab0cbed0
or esi, ecx
xchg ebx, esi
jmp 0x49ceca
pop edx
neg edi
mov ebx, 0xab158d92
or edi, 0xab15ca42
dec edi
xor esi, ebx
xchg edi, ebx
mov edi, esi
xor esi, 0xab170b76
sub ecx, edi
and esi, edi
xor ebx, esi
xchg ecx, ebx
jmp 0x49d3aa
call fcn.0049cb8d
xor esi, 0xab23b0ce
sub edi, ebx
and edi, ecx
or edi, ebx
shl ecx, 0xd
xchg ebx, ecx
shr ecx, 4
xor ecx, ebx
or esi, ecx
sub ecx, 0xab25e11f
sub esi, ebx
jmp 0x49df5e
call edx
add edi, esi
sub ecx, edi
or edi, ecx
shr ecx, 5
and ecx, 0xab27748e
bswap esi
jmp 0x49cd39
mov edx, 0x40495727
or ebx, ecx
rol edi, 0xe
sub edi, ecx
sub ebx, esi
inc ebx
xor ecx, esi
and edi, esi
xchg edi, esi
and esi, 0xab2db0cf
ror edi, 0x15
rol ebx, 0x14
not edi
sub edi, ecx
and ebx, ecx
jmp 0x49ea2b
pop edx
shr esi, 1
mov ebx, esi
xor ebx, ecx
or ecx, edi
mov edi, ebx
or ebx, ecx
xchg ebx, ecx
add ebx, edi
jmp 0x49e101
pop edx
rol ebx, 0x14
xor ebx, 0xab34cd35
or ecx, ebx
xchg edi, esi
dec ecx
or ebx, ecx
and esi, ecx
not edi
jmp 0x49d04d
push 0xa809f96a
bswap esi
xchg esi, ecx
dec edi
add ebx, ecx
sub ecx, 0xab38b8b6
bswap edi
xchg esi, edi
and edi, ecx
not edi
not ecx
sub edi, ecx
xor edi, 0xab3a763a
rol ecx, 0x11
jmp 0x49df97
push 0xa81cd32b
add ebx, esi
rol edi, 0x1b
or esi, 0xab3fc396
not esi
add edi, ebx
xchg ecx, edi
bswap ebx
or edi, esi
jmp 0x49d2c1
push 0xa8244431
xor esi, ecx
add esi, 0xabe3dfbf
mov ecx, edi
xor esi, ebx
or edi, ebx
shr edi, 0x1b
and edi, ecx
or ecx, ebx
jmp 0x49ee28
pop edx
dec ecx
xor esi, edi
or esi, ecx
sub ecx, 0xabe67c30
jmp 0x49dee2
pop edx
and edi, ecx
shl ecx, 0x12
add ebx, edi
xor ecx, edi
or ecx, edi
sub ecx, esi
and ecx, edi
jmp 0x49e23c
pop edx
xor esi, 0xabf93c77
inc ebx
shr esi, 2
shl ecx, 0x11
or ecx, edi
jmp 0x49cd95
push 0xa81c8b83
sub ecx, 0xabfa8789
xor ecx, edi
and ecx, 0xabfaf9d9
sub ebx, esi
and esi, edi
add ebx, ecx
xor ebx, ecx
sub edi, ebx
jmp 0x49de7c
call edx
sub ebx, edi
add esi, edi
mov ebx, edi
add edi, ecx
xchg ebx, edi
rol ebx, 0x1d
xor ebx, ecx
xor ebx, ecx
mov esi, ebx
jmp 0x49d33a
mov edx, 0x40495727
shl ebx, 0x10
add ebx, ecx
xchg edi, ebx
xchg ebx, esi
xor ecx, edi
xor edi, ebx
xchg ebx, esi
xor ebx, ecx
add ecx, ebx
or ebx, ecx
add ecx, esi
mov ecx, ebx
mov esi, edi
jmp 0x49f389
pop edx
add esi, 0xac0e0936
mov ebx, 0xac0e42da
and ebx, 0xac0e7bd3
rol esi, 0xc
sub esi, edi
add esi, 0xac0f24f5
or ebx, edi
rol esi, 0x16
shr ebx, 4
sub edi, ecx
jmp 0x49df3c
pop edx
add ebx, edi
neg edi
or edi, esi
sub ecx, 0xac188ffd
and esi, ebx
bswap esi
or edi, 0xac1939a1
shr edi, 0x17
jmp fcn.0049c82a
pop edx
mov ebx, esi
inc ecx
add edi, ebx
and esi, ebx
rol edi, 0x1b
mov ebx, edi
and edi, ecx
shr esi, 0x13
add ebx, esi
xchg esi, edi
add ecx, 0xac1bfe5c
shl ebx, 5
or ecx, esi
jmp 0x49e2ef
push 0xa815af52
xchg edi, ebx
xor ebx, edi
xor edi, ebx
and esi, edi
xor ebx, ecx
jmp 0x49e53b
pop edx
mov edi, 0xac21ebb8
mov ebx, edi
mov ecx, esi
sub edi, ebx
xor edi, 0xac22d944
add esi, 0xac2317cc
xchg ebx, ecx
or esi, edi
xchg ecx, edi
and ecx, edi
jmp 0x49dae3
push 0xa8216635
or ebx, 0xac24722a
rol esi, 0x12
sub esi, edi
sub esi, edi
rol ebx, 0xb
and ecx, 0xac25b564
and ebx, ecx
and esi, ecx
or esi, ebx
xor ecx, 0xac26a5c2
jmp 0x49e795
pop edx
xchg esi, edi
xchg esi, edi
xor esi, edi
or edi, ebx
xchg ecx, ebx
shr ecx, 0xc
shr ecx, 0x1c
mov esi, edi
jmp 0x49dac7
pop edx
sub edi, ebx
mov esi, ecx
ror edi, 3
xchg ecx, edi
sub ecx, edi
bswap ecx
add esi, ebx
inc esi
shr edi, 0x16
or ecx, esi
jmp 0x49ed0e
call edx
or esi, edi
mov edi, esi
or esi, 0xac322581
xor ebx, 0xac326203
inc ecx
neg ebx
sub edi, esi
mov edi, ecx
rol ecx, 3
and edi, ecx
shl ebx, 1
jmp 0x49ccc7
push 0xa80ee0cb
not ebx
or esi, ecx
xchg ebx, ecx
xchg edi, esi
xchg ecx, edi
shr ecx, 0x10
jmp 0x49c9e1
call edx
xor ebx, ecx
and ecx, edi
not ecx
shr edi, 2
mov esi, 0xac3b77a6
neg edi
xchg esi, ebx
neg ecx
mov esi, ebx
jmp 0x49cc15
push esp
inc edi
xchg ecx, edi
xor ecx, esi
add edi, ebx
jmp 0x49dbc3
push 0xa80e954a
add ecx, edi
add esi, ebx
shl ecx, 4
sub ebx, esi
add edi, ecx
rol ebx, 8
add edi, esi
not ebx
or esi, ecx
add ebx, edi
jmp 0x49e27d
call edx
sub edi, ebx
add edi, ecx
xchg edi, ecx
shl esi, 0x1f
and esi, edi
jmp 0x49ef57
push 0xa8125630
xor ebx, ecx
and ebx, 0xac46fb14
mov esi, edi
add ecx, 0xac47864f
add edi, ecx
and edi, 0xac480273
jmp 0x49ea4d
call fcn.0049cb8d
and esi, 0xac4ab84c
xor ebx, ecx
and ebx, esi
bswap ecx
jmp 0x49f022
mov edx, 0x40495727
add ebx, 0xac4bdda1
and esi, ebx
ror ecx, 0xa
add edi, esi
not esi
not esi
mov edi, 0xac4d6547
shl edi, 0x12
and ecx, edi
and edi, ecx
jmp 0x49dcf3
push esp
and ecx, ebx
mov ecx, esi
sub esi, ebx
add edi, ecx
or edi, 0xac5d4b58
jmp 0x49e2e2
mov edx, 0x40495727
add ecx, 0xac63fd18
mov ecx, esi
sub ecx, edi
xor esi, 0xac64b801
ror esi, 0x1a
inc ebx
mov esi, ebx
or ecx, 0xac65c34b
dec edi
xor ecx, edi
jmp 0x49ee5c
push 0xa8208bdc
and edi, ecx
not edi
xor ecx, esi
neg ecx
jmp 0x49f3c7
push 0x401400
add edi, ecx
and ecx, esi
or ecx, ebx
add ebx, ecx
add edi, ecx
mov edi, 0xac7c2496
sub ecx, edi
sub edi, ebx
mov esi, ecx
xchg ebx, esi
sub ecx, edi
or esi, edi
and ebx, esi
sub ecx, 0xac7e1815
jmp 0x49e97d
call fcn.0049cb8d
xchg ebx, ecx
xor esi, ecx
sub esi, 0xac81c3a6
ror esi, 0x10
add ecx, esi
shr esi, 6
xchg ebx, ecx
add ecx, ebx
xor ebx, esi
and ebx, ecx
or edi, esi
neg esi
dec ebx
jmp 0x49e2c5
pop edx
inc esi
or esi, ecx
neg ecx
bswap ecx
xchg edi, ebx
shr ecx, 0xa
xchg ebx, ecx
or ecx, 0xac865eba
dec ecx
and ecx, edi
xor ecx, ebx
jmp 0x49df01
pop edx
sub edi, ecx
xchg ebx, edi
mov ebx, 0xac87e842
xor ecx, esi
sub edi, esi
and ecx, edi
and esi, 0xac88ea16
xchg ecx, ebx
or edi, esi
mov ecx, 0xac899f64
and esi, edi
or ebx, edi
jmp 0x49d6c3
push 0xa80c4838
or esi, 0xac8ded0c
xor ecx, 0xac8e2be6
add edi, 0xac8e79a2
not edi
xchg esi, ecx
jmp 0x49e8af
push 0xa821afda
and ecx, 0xac9004f9
nop
ror ebx, 0x11
mov edi, ebx
mov esi, 0xac90faa0
mov ecx, 0xac913773
add ecx, edi
mov ebx, ecx
xchg ecx, ebx
mov ecx, 0xac9237bd
or edi, ebx
and esi, ebx
mov edi, 0xac92ec84
jmp 0x49cdcc
push 0xa8211d3e
or ebx, edi
mov ebx, esi
ror edi, 0x13
sub edi, 0xaca26fe1
sub edi, ebx
add ebx, edi
or ebx, ecx
ror ebx, 0x12
add esi, edi
jmp 0x49e1ac
mov edx, 0x40495727
mov ebx, 0xaca3e287
xor ecx, esi
rol esi, 0x12
neg esi
or edi, ecx
mov esi, 0xaca4fde5
xchg esi, ecx
xor ecx, esi
or edi, ebx
inc ecx
ror edi, 0xe
and ecx, 0xaca65e30
inc ebx
add edi, ebx
and ecx, 0xaca7078b
jmp 0x49e3ab
push 0xa8252164
and ecx, esi
sub esi, 0xacaa7735
xor esi, edi
or ebx, ecx
xor ebx, edi
mov edi, esi
mov esi, 0xacab8dd7
xor ebx, 0xacabc6e0
sub edi, 0xacac0d26
jmp 0x49f28e
pop edx
or edi, 0xacac5c2a
mov ecx, 0xacac96c6
and ecx, edi
add ecx, ebx
ror edi, 6
jmp 0x49d17c
call edx
add ebx, esi
sub edi, ebx
mov esi, 0xacb03d92
mov ebx, esi
add ecx, esi
or ebx, ecx
sub edi, esi
ror ecx, 0x18
or edi, ebx
shr ecx, 1
jmp 0x49e050
call fcn.0049cb8d
xor edi, ebx
neg ebx
neg ebx
xor esi, edi
mov ebx, 0xacbbcd56
xor ebx, 0xacbc056f
ror ebx, 0x1f
xchg ebx, esi
jmp 0x49ceab
push 0xa812a1e9
xor edi, 0xacbcd683
or ebx, 0xacbd0e29
and edi, 0xacbd48ab
add esi, ebx
add ebx, esi
add ecx, 0xacbdfc89
or edi, 0xacbe3590
jmp 0x49eac1
mov edx, 0x40495727
mov esi, 0xacc2fa9c
dec ecx
xor ecx, edi
xchg ebx, esi
and ebx, ecx
mov esi, ebx
dec edi
xor edi, ebx
jmp 0x49d6f9
pop edx
inc esi
add edi, ecx
xor ecx, 0xace08dbc
bswap ecx
xor ebx, 0xace109da
sub edi, esi
and edi, ecx
add edi, ebx
xor ecx, 0xace20bc5
xchg ecx, edi
mov edi, ebx
or esi, ecx
mov ebx, ecx
jmp 0x49e224
pop edx
and esi, edi
inc ebx
xor esi, 0xacf0335c
and edi, 0xacf07263
add ecx, esi
rol ecx, 0x1b
mov ecx, edi
ror ebx, 0x15
and edi, ecx
xchg esi, ecx
or edi, ebx
and ebx, ecx
and edi, esi
jmp 0x49d5ad
pop edx
add ebx, 0xacf747a6
add esi, ebx
mov ecx, edi
shl ebx, 0xc
or ecx, edi
not esi
shl ecx, 7
jmp 0x49da28
push 0xa8248e47
sub edi, 0xad0532c3
add edi, ecx
nop
not ebx
shl esi, 0xc
ror ebx, 0x16
rol ebx, 0xa
inc esi
and edi, ecx
and esi, 0xad07759a
ror ebx, 5
or edi, ecx
and esi, 0xad0832dd
not ebx
jmp 0x49d20c
call fcn.0049cb8d
neg ecx
rol edi, 0x10
add esi, edi
or ebx, 0xad09e49a
and esi, edi
xchg edi, ecx
and edi, 0xad0aa008
and ecx, edi
inc esi
jmp 0x49efda
push 0xa81f1c31
shr edi, 7
xor ecx, 0xad0dcc13
xor ecx, 0xad0e0b75
and ebx, ecx
dec ebx
xor ecx, esi
shl esi, 0xa
and ebx, esi
or edi, 0xad0fd70c
dec edi
inc edi
dec ecx
add edi, ebx
jmp 0x49f27b
push 0xa811c26a
add edi, ebx
mov esi, ecx
dec edi
dec esi
mov ecx, ebx
bswap edi
sub esi, edi
bswap edi
and esi, ebx
dec ebx
and esi, ecx
jmp 0x49cadf
pop edx
add ebx, 0xad1e75ad
dec ebx
neg esi
sub edi, esi
or esi, edi
or ecx, 0xad2016c3
ror ecx, 0xc
or esi, 0xad20a691
sub ebx, 0xad20e450
add ecx, 0xad212318
shr edi, 5
neg esi
jmp 0x49e564
call edx
or ebx, 0xad27b426
and ebx, 0xad27f353
mov ecx, ebx
or esi, ecx
not esi
add esi, 0xad28ec4f
ror esi, 0x10
and edi, ebx
bswap ecx
jmp 0x49d885
call edx
xor ecx, ebx
and ecx, esi
sub ebx, ecx
mov ecx, 0xad2d77f0
add ecx, 0xad2db55f
xor esi, edi
jmp 0x49d9c4
call fcn.0049cb8d
and ecx, edi
sub esi, ebx
or edi, ecx
nop
or ecx, ebx
shl ecx, 0x1d
bswap edi
mov ecx, 0xad397e1c
xchg esi, ecx
nop
jmp 0x49e257
call fcn.0049cb8d
not ecx
xor ecx, edi
and edi, 0xad4867cf
shr ebx, 0xd
sub esi, ebx
sub esi, edi
not esi
inc esi
ror esi, 0xc
sub edi, ecx
xchg ebx, edi
add ebx, edi
and edi, 0xad4b26e5
jmp 0x49dd1d
push 0xa82800e2
or esi, ebx
and ecx, esi
and edi, ebx
add ebx, ecx
or ecx, ebx
sub edi, ecx
and esi, edi
or ecx, esi
mov ebx, 0xad52a60f
xor ebx, ecx
bswap esi
xor esi, ecx
or ecx, 0xad542135
jmp 0x49d951
call edx
add esi, ebx
bswap ebx
or ebx, edi
mov edi, esi
dec ecx
xor ecx, 0xad5cd056
xor edi, ebx
mov ecx, esi
or edi, ecx
add ecx, ebx
add ecx, 0xad5e00ec
shr ebx, 1
inc ebx
jmp 0x49da3d
mov edx, 0x2a371b56
inc edi
xor ebx, 0xad5f256f
add ecx, edi
jmp 0x49ce1f
push 0xa8256bd2
dec edi
or esi, ecx
sub edi, ecx
nop
sub edi, esi
neg ecx
jmp 0x49d384
pop edx
add esi, edi
mov edi, ebx
rol ecx, 0x19
sub ecx, 0xad65dd8e
ror edi, 0x1b
not edi
xor edi, 0xad669b99
inc ecx
jmp 0x49f1d8
call fcn.0049cb8d
mov edi, esi
xor ebx, ecx
or ebx, esi
mov ebx, esi
add ecx, ebx
sub ebx, edi
or edi, ecx
neg edi
shl ecx, 1
sub edi, 0xad76764a
mov esi, ecx
jmp 0x49d0f3
push 0xa820d4d4
mov ebx, edi
mov edi, 0xad79e33b
xchg edi, ecx
rol ebx, 0x1a
or ecx, 0xad7aaf6a
inc ecx
add ecx, 0xad7b2e5b
bswap ecx
mov edi, ecx
jmp 0x49e88d