Function at 0x5a2c22
Capabilities:
Read file via mapping

Disassembly:
and eax, 0x5f9388c
or edx, 0x9b757a6d
neg esi
and dword [0x6bffcf], edi
mov edx, ecx
dec ecx
jne 0x5a2655
cmp dword [0x6b2adb], 0xfb4070a0
ja 0x5a26a5
add ebx, 0x48b40c8
or esi, ecx
neg eax
cmp dword [0x6b5727], esi
js 0x5a26b7
test esp, 0x87e091f1
ja 0x5a26bb
and esi, ebx
mov ecx, 0x70c9e263
cmp dword [0x6b3f00], 0x182e2e18
jge 0x5a26cd
inc eax
cmp esp, ebx
jb 0x5a26d3
xchg esi, eax
xor edx, 0xd6203afa
add edx, 0xa75e9d8b
call fcn.0046a78f
inc esi
xor eax, esp
xchg esi, edx
add eax, 0x9dc25ef5
and dword [0x6bff98], ecx
cmp dword [0x6b3d64], eax
jg 0x5a2703
add esi, dword [0x6b4b5a]
shl ebx, 0xd
ror edi, 0x18
dec eax
dec ecx
jne 0x5a26c0
not esi
ror eax, 0x13
shl esi, 2
inc esi
or esi, 0xbc3efb58
add ebx, esi
call fcn.00519dfd
and eax, esi
ror edx, 8
call fcn.004b92ae
add ecx, 0x6ff8796d
neg esi
mov edi, dword [0x6b22cb]
xor esi, edi
or esi, dword [0x6b37ca]
xor ecx, esi
mov esi, 0x5167e232
xor dword [0x6bffd4], eax
add ecx, esp
xor ecx, 0xa699e355
call fcn.0040bba4
and dword [0x6bff80], ebx
xor ebx, 0x7f7337e4
add dword [0x6bffe6], ebx
xchg edi, esi
rol edx, 3
inc ecx
xor dword [0x6bff79], ebx
not esi
sub dword [0x6bffa0], edx
xor edi, 0x2b8acc74
add dword [0x6bffbc], edx
rol edx, 5
not ecx
not ecx
ror edx, 5
mov dword [0x6bff88], ebx
xor edi, 0x2b8acc74
not esi
or dword [0x6bffe8], ebx
dec ecx
ror edx, 3
xchg edi, esi
xor ebx, 0x7f7337e4
mov dword [0x6bffad], esi
call fcn.005428cc
xor ecx, 0xa699e355
sub ecx, esp
and esi, 0x363f081d
xor dword [0x6bff7f], edi
add ebx, 0xb215eca2
xchg edx, esi
add esi, 0x3a33257e
xor esi, ebx
call fcn.0052c29a
sub dword [0x6bffb2], 0x54de55c8
xor eax, 0xb4c48b07
call fcn.00556278
xor eax, 0xa623be55
not ecx
or dword [0x6bffe9], eax
xchg esi, eax
neg esi
xor ecx, eax
sub dword [0x6bff8f], ecx
and dword [0x6bff94], 0x224e11ad
not edx
or dword [0x6bffc5], ebx
not ebx
call fcn.004a61bd
call fcn.00464472
not ebx
mov dword [0x6bff82], esi
not edx
and dword [0x6bff85], 0xc60da49a
mov dword [0x6bff84], ecx
xor ecx, eax
neg esi
xchg esi, eax
mov dword [0x6bff99], eax
not ecx
xor eax, 0xa623be55
call fcn.004a049b
xor eax, 0xb4c48b07
sub dword [0x6bff83], 0x3ef85626
call fcn.00446520
xor esi, ebx
sub esi, 0x3a33257e
xchg edx, esi
sub ebx, 0xb215eca2
and dword [0x6bffbb], ebx
xor esi, 0x10270010
adc byte [esi + 0x33], al
enter 0xffffffffffffc14f, 0xffffffffffffffc9
sbb eax, 0x10e8d6f7
cmp eax, esi
dec dword [edi - 0x7f]
shl dword [edi + 0x16], 0xea
or dword [ebx], esi
fsub st(0), st(0)
mov dword [0xc1fff88d], eax
enter 0xffffffffffffc11c, 0xffffffffffffffc0
sbb al, 0xe8
push edx
fpatan
push dword [ebx]
fadd qword [ecx - 0x15e99817]
or dword [edi - 0x18], eax
salc
adc esi, esp
push edi
salc
rol ecx, 0x1d
inc edi
xor ecx, eax
dec esi
push esi
call fcn.005677b2
ror edi, 5
xor eax, esp
inc eax
neg ebx
inc eax
ror ebx, 0xa
and dword [0x6bff8e], edx
or dword [0x6bff7f], eax
neg ebx
dec edx
mov dword [0x6bff84], ecx
dec ecx
xchg edi, esi
sub ebx, edx
ror ebx, 0xa
mov dword [0x6bffab], ecx
add ebx, 0xec1f8143
inc ecx
add dword [0x6bffeb], esi
sub edi, 0x3e44df80
add edi, 0x3e44df80
sub dword [0x6bffe3], edi
dec ecx
sub ebx, 0xec1f8143
xor dword [0x6bff81], edx
rol ebx, 0xa
add ebx, edx
xchg edi, esi
inc ecx
inc edx
neg ebx
and dword [0x6bffd8], edi
rol ebx, 0xa
dec eax
neg ebx
dec eax
xor eax, esp
rol edi, 5
call fcn.0050ba4f
mov ebx, 0x4fc52
call fcn.0051b9df
and dword [0x6bff89], esi
dec ebx
call fcn.0050ac7a
rol edx, 0x18
mov dword [0x6bffa2], 0xe7134b7d
adc esp, edi
xor edx, 0x3c90c848
and dword [0x6bffa4], eax
call fcn.00557250
ror esi, 0x1c
sub dword [0x6bffb0], 0x4667617
rol edx, 1
xor dword [0x6bff96], ebx
call fcn.00452c17
rol edi, 0x1c
sub ecx, edx
and dword [0x6bffae], ecx
call fcn.0049407a
xchg esi, edx
ror edi, 4
ror edx, 0x13
rol edx, 0x13
rol edi, 4
xchg esi, edx
call fcn.0056f274
add ecx, edx
ror edi, 0x1c
call fcn.005649b0
ror edx, 1
rol esi, 0x1c
call fcn.0051ef45
xor edx, 0x3c90c848
ror edx, 0x18
call fcn.00465001
inc ebx
push ebx
call fcn.00470698
neg ebx
xor edi, 0xd15f451d
dec edi
xor ebx, 0x3ee905a0
not ebx
sub dword [0x6bffc2], ebx
sub ebx, esi
call fcn.00563d6a
sub edi, ebp
xchg edi, eax
call fcn.005037c2
call fcn.00442e96
xchg edi, eax
add edi, ebp
call fcn.004a1cfd
add ebx, esi
not ebx
xor ebx, 0x3ee905a0
inc edi
xor edi, 0xd15f451d
neg ebx
call fcn.00586211
mov edi, 0x66b5e458
inc ecx
xor eax, esp
inc ebx
ror ebx, 6
xor ebx, 0x737905e9
ror edx, 2
xor edx, esp
not edx
xor dword [0x6bffbc], 0xeee191c7
not edx
xor edi, edx
rol ecx, 0x13
ror ebx, 0x12
rol ebx, 0x12
ror ecx, 0x13
xor edi, edx
not edx
or dword [0x6bffa7], 0xf841feb0
not edx
xor edx, esp
rol edx, 2
xor ebx, 0x737905e9
rol ebx, 6
dec ebx
xor eax, esp
dec ecx
add edi, 0x15dcfb98
sub dword [0x6bff98], 0x9f3d7e14
not esi
ror ebx, 0x15
sub dword [0x6bff98], 0x940936ee
and dword [0x6bff9f], 0x270959ae
xor dword [0x6bff78], ecx
add edx, ecx
inc ebx
ror edx, 0xc
inc edx
neg edi
xchg esi, eax
neg edx
ror esi, 0x12
xor ecx, esp
xor edi, edx
call fcn.004a7c02
xor edi, edx
xor ecx, esp
rol esi, 0x12
neg edx
xchg esi, eax
neg edi
dec edx
rol edx, 0xc
dec ebx
sub edx, ecx
and dword [0x6bffa1], edx
xor dword [0x6bffaf], 0x9ae49a13
or dword [0x6bffe8], 0xea7bd9d0
rol ebx, 0x15
not esi
or dword [0x6bff8d], 0xede8468a
xor edi, 0x7c92dff0
xor edx, edi
ror eax, 0xb
neg edx
ror edi, 0xb
not edx
xor dword [0x6bffd1], 0xc0f090e4
inc edi
or dword [0x6bffad], edx
neg edx
rol edi, 9
call fcn.004b0048
call fcn.004e8ac6
call fcn.00596267
ror edi, 9
neg edx
dec edi
sub dword [0x6bff8e], 0x68626ac6
not edx
rol edi, 0xb
neg edx
rol eax, 0xb
xor edx, edi
push edi
add dword [0x6bffd7], ebx
ror edi, 0x1f
not edx
xchg edx, eax
call fcn.0042e0c0
inc ebx
xor esi, 0xf9c6775c
not eax
xor dword [0x6bffa3], ecx
xor dword [0x6bff9f], ebx
xchg eax, edx
not esi
ror edx, 6
xor ebx, 0x793ca50c
dec edx
xor ecx, 0x7757a861
inc edi
mov dword [0x6bffa7], edi
xor dword [0x6bffe0], ebx
dec edi
xor ecx, 0x7757a861
inc edx
xor ebx, 0x793ca50c
rol edx, 6
not esi
xchg eax, edx
and dword [0x6bff89], edi
mov dword [0x6bffaa], edi
not eax
xor esi, 0xf9c6775c
dec ebx
call fcn.0046e17f
xchg edx, eax
not edx
rol edi, 0x1f
and dword [0x6bff7a], ebx
mov esi, 0xd63ecee5
xor edi, ecx
xor esi, 0x2656237e
add eax, edx
inc edi
neg esi
sub edx, 0xf86d0906
inc ecx
neg eax
call fcn.005156b9
mov dword [0x6bffc7], eax
add al, ch
lcall 0x4fd7, 0xf7ffed93
not esi
call fcn.0040ce11
call fcn.00482abc
not esi
inc edi
not edi
or dword [0x6bffbf], esi
call fcn.0043136d
neg eax
dec ecx
add edx, 0xf86d0906
neg esi
dec edi
sub eax, edx
xor esi, 0x2656237e
xor edi, ecx
sub esi, 0xd2999ec5
xor edi, 0x46cc662e
rol edi, 0x1c
not esi
xchg edi, esi
inc eax
call fcn.0047d3cb
rol eax, 0x19
call fcn.0040c14b
ror esi, 0x17
xchg ecx, edx
rol ebx, 0x11
dec edi
not esi
or dword [0x6bff9f], esi
neg esi
sub ecx, 0xa89661b6
mov dword [0x6bff8c], ebx
add dword [0x6bffb5], eax
xor dword [0x6bffb1], esi
add ecx, 0xa89661b6
neg esi
sub dword [0x6bffd5], edx
not esi
inc edi
ror ebx, 0x11
xchg ecx, edx
rol esi, 0x17
call fcn.0056ebd7
ror eax, 0x19
dec eax
xchg edi, esi
not esi
ror edi, 0x1c
xor edi, 0x46cc662e
xor esi, 0x3a53060
ror esi, 0x14
xchg ecx, edx
xor edi, edx
rol ecx, 0x12
xor ecx, edi
rol eax, 0x10
xor eax, 0x92f3d3ee
mov dword [0x6bff9c], esi
inc ecx
not eax
sub ebx, 0x3d45b156
add ebx, 0x3d45b156
not eax
dec ecx
xor eax, 0x92f3d3ee
ror eax, 0x10
xor ecx, edi
ror ecx, 0x12
xor edi, edx
xchg ecx, edx
rol esi, 0x14
push esi
call fcn.0054dfb1
xor ebx, eax
call fcn.004eeaf0
xchg edi, eax
inc esi
xor ebx, 0x8c2f7581
ror edi, 1
not esi
call fcn.004b1206
xchg esi, eax
call fcn.0050a8b9
xchg edi, eax
add eax, ebp
rol eax, 0x1b
dec eax
add eax, 0x98a1be17
call fcn.0045bfb3
call fcn.00520ffe
sub eax, 0x98a1be17
inc eax
ror eax, 0x1b
sub eax, ebp
xchg edi, eax
call fcn.0049b05e
xchg esi, eax
call fcn.00486fa2
not esi
rol edi, 1
xor ebx, 0x8c2f7581
dec esi
xchg edi, eax
call fcn.0046a78f
xor ebx, eax
mov edi, 0x7917d285
not esi
add edx, 0x9ed410cf
xor edx, esi
sub ebx, esi
ror ecx, 0x18
xor dword [0x6bff9b], ebx
inc esi
or dword [0x6bff84], 0x2690233
xor edx, ebx
call fcn.005358bd
neg edi
and dword [0x6bffcf], edi
call fcn.0047f39c
xor ebx, 0x9bcb3e7b
add dword [0x6bffb4], eax
call fcn.00453a54
call fcn.00594fa7
call fcn.00539919
call fcn.00501c5a
xor ebx, 0x9bcb3e7b
call fcn.0049e5c0
mov dword [0x6bff8f], edx
neg edi
xor edx, ebx
add dword [0x6bffef], 0x6395f975
dec esi
or dword [0x6bffc8], edx
rol ecx, 0x18
add ebx, esi
xor edx, esi
sub edx, 0x9ed410cf
not esi
and edi, 0x34699c
and dword [0x6bffae], edx
inc ebx
call fcn.004591de
add dword [0x6bffcd], eax
inc edx
dec edi
rol esi, 0x10
call fcn.0045f418
not esi
xor edx, 0xd557879e
inc edx
or dword [0x6bffd0], esi
neg ebx
sub edx, 0x34d92382
call fcn.004ea70d
call fcn.004e7575
add edx, 0x34d92382
neg ebx
sub dword [0x6bffe7], ebx
dec edx
xor edx, 0xd557879e
not esi
ror esi, 0x10
inc edi
dec edx
call fcn.0044ffb1
dec ebx
and dword [0x6bff8b], ecx
add edi, 0xffebbf7c
xor eax, ebx
sub dword [0x6bff88], edi
add edx, 0xa147e80d
neg ecx
xor eax, ebp
call fcn.00441762
rol eax, 0x18
xchg edx, esi
sub ebx, 0xd43fc0fb
add dword [0x6bffd8], esi
add dword [0x6bffd2], eax
rol edi, 9
xchg ebx, esi
neg ebx
call fcn.005741bf
add dword [0x6bffc5], eax
not eax
not eax
mov dword [0x6bff88], esi
call fcn.00460f1c
neg ebx
xchg ebx, esi
ror edi, 9
xor dword [0x6bff84], ecx
xor dword [0x6bffe0], eax
add ebx, 0xd43fc0fb
xchg edx, esi
ror eax, 0x18
call fcn.004b83ed
xor eax, ebp
neg ecx
sub edx, 0xa147e80d
or dword [0x6bffcb], ecx
xor eax, ebx
push edi
inc eax
call fcn.004156c2
not ecx
xor ecx, ebx
mov dword [0x6bffa3], ebx
call fcn.005234bf
and dword [0x6bffa7], eax
not esi
sub dword [0x6bffed], ebx
add eax, edi
inc ecx
neg esi
sub eax, esp
xor ebx, 0x2c45fee3
neg esi
xor dword [0x6bff8b], esi
neg edi
inc esi
ror ecx, 0x13
mov dword [0x6bffe4], 0xebc829f0
add dword [0x6bff81], 0x57e9438
rol ecx, 0x13
dec esi
neg edi
add dword [0x6bffab], esi
neg esi
xor ebx, 0x2c45fee3
add eax, esp
neg esi
dec ecx
sub eax, edi
and dword [0x6bff99], ecx
not esi
add dword [0x6bff89], ebx
call fcn.00440b3f
and dword [0x6bffb3], esi
xor ecx, ebx
not ecx
call fcn.0040de89
dec eax
mov edx, 0x2d0a07a5
xor dword [0x6bffc3], edi
not eax
xor dword [0x6bffef], edi
sub edx, 0x2edec876
xchg ebx, esi
rol edi, 0xc
neg esi
mov dword [0x6bffde], edi
or dword [0x6bff7c], ebx
not ecx
call fcn.004a7c02
inc edi
mov dword [0x6bff8d], edi
add eax, ecx
not edx
xchg edi, edx
call fcn.0055aa4d
call fcn.004fbc26
xchg edi, edx
not edx
sub eax, ecx
dec edi
call fcn.0057f902
not ecx
and dword [0x6bff88], edx
and dword [0x6bffc5], ecx
neg esi
ror edi, 0xc
xchg ebx, esi
add edx, 0x2edec876
xor dword [0x6bff8a], edi
not eax
and dword [0x6bffdb], eax
or edx, 0x89173be
dec esi
add esi, edi
xor edi, 0x7824d36f
sub dword [0x6bff99], ecx
or dword [0x6bffe7], ecx
call fcn.00580f95
neg eax
or dword [0x6bffe3], 0xc4055f1b
dec ebx
call fcn.0054d093
xor ecx, ebx
xor dword [0x6bff8a], edx
call fcn.0048e3aa
neg ebx
xor edi, esi
sub edi, 0xff301e5f
and dword [0x6bffdf], esi
or dword [0x6bffa8], ebx
add edi, 0xff301e5f
xor edi, esi
neg ebx
call fcn.00548050
and dword [0x6bffeb], eax
xor ecx, ebx
call fcn.004ee830
inc ebx
xor dword [0x6bffa3], 0xa2e38b5a
neg eax
call fcn.004efdf4
xor dword [0x6bffa7], edi
xor edi, 0x7824d36f
sub esi, edi
inc esi
sub edx, 0x2d9b77c0
add dword [0x6bffc9], edi
not ebx
xchg ebx, eax
inc edi
add esi, ebx
rol esi, 0xf
mov dword [0x6bffa3], 0xd4391a92
or dword [0x6bffe6], ecx
add dword [0x6bffe2], eax
rol edi, 0xb
add ebx, 0x4221c1ef
xor eax, ebp
rol esi, 0x16
neg ebx
or dword [0x6bffa7], esi
not eax
xor dword [0x6bffbc], eax
rol edx, 0x10
inc eax
neg edi
call fcn.00519977
call fcn.0048744a
neg edi
dec eax
ror edx, 0x10
not eax
xor dword [0x6bffc6], esi
neg ebx
ror esi, 0x16
xor eax, ebp
sub ebx, 0x4221c1ef
ror edi, 0xb
xor dword [0x6bffe6], ecx
and dword [0x6bff82], 0x744b4548
ror esi, 0xf
sub esi, ebx
dec edi
xchg ebx, eax
not ebx
and dword [0x6bff83], ecx
push edx
xor dword [0x6bffe8], eax
add esi, 0x9513ff16
xor edi, ebx
call fcn.0046efcb
xor ecx, edx
call fcn.00453635
inc eax
dec edi
call fcn.0043c32f
dec edi
add eax, esp
neg ecx
rol esi, 0xa
call fcn.0056e4f3
xchg ebx, eax
sub dword [0x6bffc3], ebx
rol edi, 9
call fcn.004d3c11
ror edi, 9
or dword [0x6bffd5], ebx
xchg ebx, eax
call fcn.0047aa41
ror esi, 0xa
neg ecx
sub eax, esp
inc edi
call fcn.0045c339
inc edi
dec eax
call fcn.004da631
xor ecx, edx
call fcn.005716e8
xor edi, ebx
sub esi, 0x9513ff16
mov dword [0x6bff7b], edx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
inc ecx
and dword [0x6bffb3], edi
rol esi, 0x1a
xor dword [0x6bff9d], edi
neg esi
or dword [0x6bffc1], edx
neg esi
xor edi, 0x735c75a4
inc edx
rol ebx, 2
not esi
call fcn.00539919
call fcn.004d31ef
not esi
ror ebx, 2
dec edx
xor edi, 0x735c75a4
neg esi
and dword [0x6bff83], eax
neg esi
ror esi, 0x1a
dec ecx
push ebx
sub edx, 0x7831561e
dec edi
or dword [0x6bffac], ecx
add ecx, 0x776253ae
not edi
call fcn.005759d9
sub dword [0x6bffd1], edi
xor eax, 0x417306a4
call fcn.0049cde7
mov dword [0x6bffe4], ebx
sub edx, ebx
not esi
xor dword [0x6bffd5], ebx
xor dword [0x6bffbc], esi
dec ecx
add dword [0x6bffbf], eax
add eax, esi
dec edi
xor ebx, esi
call fcn.004cd51e
xor ebx, esi
inc edi
sub eax, esi
mov dword [0x6bffe7], eax
inc ecx
and dword [0x6bff8a], eax
xor dword [0x6bffbf], ebx
not esi
add edx, ebx
add dword [0x6bffa1], ecx
call fcn.00567136
xor eax, 0x417306a4
mov dword [0x6bffd2], eax
call fcn.004f4c27
not edi
sub ecx, 0x776253ae
add dword [0x6bffb9], ecx
inc edi
add edx, 0x7831561e
mov edx, 0x3b3372d6
neg ebx
or dword [0x6bffb8], ebx
not esi
inc ebx
ror esi, 0x10
add dword [0x6bff79], 0x37636825
or dword [0x6bff8d], 0x16fa3b27
xor ecx, 0xc28bff37
ror ebx, 0x13
xor dword [0x6bff85], esi
inc eax
call fcn.004e1802
xchg ebx, esi
call fcn.004f4442
call fcn.0057932f
xchg ebx, esi
dec eax
sub dword [0x6bff96], esi
rol ebx, 0x13
xor ecx, 0xc28bff37
or dword [0x6bff9e], 0xc0f699c6
and dword [0x6bff9f], 0x3582d100
rol esi, 0x10
dec ebx
not esi
neg ebx
or edx, 0xdd5139e4
xchg edi, esi
add esi, esp
xchg ebx, edx
xor dword [0x6bffe1], ecx
call fcn.0056e550
and dword [0x6bffc9], edi
sub esi, 0xaaed1c84
mov dword [0x6bffee], edx
add ecx, eax
xor edi, 0x146608b1
call fcn.00404621
call fcn.004ed089
xor edi, 0x146608b1
sub ecx, eax
mov dword [0x6bffd4], ecx
add esi, 0xaaed1c84
or dword [0x6bffbd], edi
xchg ebx, edx
sub esi, esp
xchg edi, esi
xor edx, 0xff737bf6
xor ebx, esi
add esi, ebp
xor eax, 0x314c3905
call fcn.0059a6f7
rol esi, 5
xor edi, 0xf46a5d5b
ror edi, 0xe
call fcn.00451d0e
xchg edi, edx
call fcn.005759d9
sub ecx, 0xc5596301
xor ebx, ebp
sub ebx, 0xa16370ce
xor dword [0x6bff7b], 0x8d4baa9e
add edi, 0xc10962c4
sub ebx, 0x8e6bbf4c
xchg esi, edx
xchg esi, edx
add ebx, 0x8e6bbf4c
sub edi, 0xc10962c4
add dword [0x6bff9e], 0xb096080f
add ebx, 0xa16370ce
xor ebx, ebp
add ecx, 0xc5596301
call fcn.0040a4b0
xchg edi, edx
call fcn.004d865a
rol edi, 0xe
xor edi, 0xf46a5d5b
ror esi, 5
call fcn.00471253
xor eax, 0x314c3905
sub esi, ebp
xor ebx, esi
push edx
add dword [0x6bff7a], 0xbddf1461
xor ecx, 0x9dab86ce
xor ecx, edx
inc ecx
mov dword [0x6bffd5], 0xcc4a8350
ror eax, 0x12
and dword [0x6bffc9], eax
add edx, eax
not esi
xor ecx, 0xab7c7041
call fcn.00546d59
add edi, 0xd9160639
sub ebx, 0xb8cb8723
add ebx, 0xb8cb8723
sub edi, 0xd9160639
call fcn.0043db0d
xor ecx, 0xab7c7041
not esi
sub edx, eax
add dword [0x6bff7d], esi
rol eax, 0x12
mov dword [0x6bffe0], 0xff840156
dec ecx
xor ecx, edx
xor ecx, 0x9dab86ce
xor dword [0x6bffc4], 0xd28bb3e2
mov edx, 0xbbfc6f1c
rol edx, 0x1c
mov dword [0x6bffcf], ebx
and dword [0x6bff95], esi
inc ecx
inc eax
mov dword [0x6bffe9], eax
xchg edx, esi
add edx, 0x2f8aecce
ror edi, 0x13
sub ecx, ebp
and dword [0x6bffd3], 0xa619063e
xor eax, edx
sub eax, edi
call fcn.00413629
xor dword [0x6bffad], ecx
xor edx, eax
inc edi
ror eax, 0x1a
dec ecx
call fcn.00520173
sub edx, 0x687c85f1
add edx, 0x687c85f1
call fcn.0053a443
inc ecx
rol eax, 0x1a
dec edi
xor edx, eax
add eax, edi
xor eax, edx
mov dword [0x6bffc4], 0x247f9544
add ecx, ebp
rol edi, 0x13
sub edx, 0x2f8aecce
xchg edx, esi
and dword [0x6bffab], esi
dec eax
dec ecx
xor dword [0x6bffab], ebx
or dword [0x6bffaa], eax
ror edx, 0x1c
add edx, 0xab9e2e64
not esi
xor edi, eax
neg ecx
add ebx, 0x1b23ce4
rol ecx, 7
and dword [0x6bffd9], eax
call fcn.0044ae52
dec edx
neg edi
call fcn.00566977
not ebx
rol edx, 0x19
add ecx, 0x5ea1e87f
or dword [0x6bffd1], edx
call fcn.00454cd4
xor dword [0x6bff8d], edx
dec eax
and dword [0x6bffe2], edx
sub ecx, 0x49d1ea2e
add ecx, 0x49d1ea2e
xor dword [0x6bff9f], ebx
inc eax
call fcn.00403aaa
and dword [0x6bff8f], edx
sub ecx, 0x5ea1e87f
ror edx, 0x19
not ebx
call fcn.00442bc5
neg edi
inc edx
call fcn.0047cbe3
ror ecx, 7
sub ebx, 0x1b23ce4
neg ecx
xor edi, eax
not esi
xor edx, 0x679a9d80
xchg esi, edx
xor edi, 0x8244a5f5
xchg ecx, edx
call fcn.00403aaa
xor ecx, 0x462872b4
ror edx, 0x13
not esi
call fcn.00533839
sub dword [0x6bffe0], esi
call fcn.00581dd1
call fcn.00533839
not esi
rol edx, 0x13
xor ecx, 0x462872b4
call fcn.00410591
xchg ecx, edx
xor edi, 0x8244a5f5
xchg esi, edx
push edx
xor eax, esp
call fcn.004b5fed
dec esi
call fcn.0052d436
add eax, edx
ror esi, 1
and dword [0x6bffdf], edx
xchg eax, edx
call fcn.004e3d02
xor edi, eax
inc esi
inc edi
call fcn.0058886a
xor edi, 0xaed9b604
and dword [0x6bffb8], ebx
call fcn.004c2946
call fcn.00460492
call fcn.005192a0
call fcn.004dee15
add dword [0x6bff88], edi
xor edi, 0xaed9b604
call fcn.004323f2
dec edi
dec esi
xor edi, eax
xchg eax, edx
sub dword [0x6bffde], ebx
rol esi, 1
sub eax, edx
call fcn.0057a52a
inc esi
call fcn.004c0321
xor eax, esp
mov ecx, 0x8599b78e
xor eax, 0xc2c2cd1d
sub esi, 0x272f312b
neg eax
xor eax, edx
add edi, edx
not esi
call fcn.00426e49
add esi, ebx
xor ebx, ebp
mov dword [0x6bffe9], 0x46839bfb
xor ebx, 0x53d4b043
xchg ebx, eax
dec ebx
rol ebx, 7
call fcn.00533839
ror ebx, 7
inc ebx
xchg ebx, eax
xor ebx, 0x53d4b043
xor ebx, ebp
sub esi, ebx
call fcn.00536228
not esi
sub edi, edx
xor eax, edx
neg eax
add esi, 0x272f312b
xor eax, 0xc2c2cd1d
sub ecx, 0xa888b8c3
add esi, ebp
rol eax, 6
inc eax
call fcn.005663af
sub dword [0x6bff96], ebx
xchg edi, esi
sub ecx, edi
rol eax, 0x15
not ecx
dec edx
call fcn.0058ce55
inc edx
not ecx
ror eax, 0x15
add ecx, edi
xchg edi, esi
sub dword [0x6bff9b], esi
call fcn.00431a50
dec eax
ror eax, 6
sub esi, ebp
add ecx, 0x22ef0157
sub dword [0x6bffc0], 0x7e163988
dec ecx
call fcn.0046486d
rol edi, 0x1f
add edi, 0xbd5770a5
xchg edx, eax
or dword [0x6bffcd], 0x9b4666de
call fcn.0058f3a2
xchg ebx, esi
rol ecx, 0xe
add dword [0x6bffe3], ecx
inc esi
sub eax, esp
sub dword [0x6bffab], eax
xor ecx, ebp
add dword [0x6bffc4], ecx
xor edi, 0xa118a338
inc esi
inc ebx
call fcn.00404acd
dec ebx
dec esi
xor edi, 0xa118a338
mov dword [0x6bff91], eax
xor ecx, ebp
add dword [0x6bffde], edi
add eax, esp
dec esi
and dword [0x6bffb9], esi
ror ecx, 0xe
xchg ebx, esi
call fcn.0048e82f
mov dword [0x6bffbc], 0xef487925
xchg edx, eax
sub edi, 0xbd5770a5
ror edi, 0x1f
call fcn.004323f2
inc ecx
or dword [0x6bffbe], 0x551b12b1
push ecx
ror ebx, 0x13
xor edx, 0xeecd1c8b
call fcn.0049d52a
inc edi
ror ebx, 0x12
call fcn.004db476
rol ebx, 0x17
dec edi
add ecx, ebp
not ecx
call fcn.0047934b
sub edi, esi
call fcn.0045318e
call fcn.00496fe6
add edi, esi
not ecx
sub ecx, ebp
inc edi
ror ebx, 0x17
rol ebx, 0x12
dec edi
xor edx, 0xeecd1c8b
rol ebx, 0x13
push eax
ror ebx, 7
xor ecx, 0x49f5de81
call fcn.00558b29
ror esi, 1
not ecx
call fcn.0057ad4f
rol ebx, 0xe
xor esi, ebp
xor edi, 0xda3ff2c4
call fcn.0056223e
sub dword [0x6bffa3], esi
call fcn.0049f5a8
call fcn.004b3c27
or dword [0x6bffca], eax
call fcn.004b440d
xor edi, 0xda3ff2c4
xor esi, ebp
ror ebx, 0xe
call fcn.0042932b
not ecx
rol esi, 1
call fcn.00491ed1
xor ecx, 0x49f5de81
rol ebx, 7
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
add edx, 0x5c328b5d
sub dword [0x6bffb5], esi
ror ecx, 3
sub ebx, 0x5e20c67b
not eax
ror edi, 0x11
add ecx, esi
sub ecx, 0x94f66834
rol esi, 7
mov dword [0x6bffe0], 0x24f5c9ab
xchg ebx, esi
call fcn.00405554
dec eax
rol esi, 0x13
call fcn.0043bf2d
ror esi, 0x13
inc eax
xchg ebx, esi
or dword [0x6bffe1], 0x4a0db2a6
ror esi, 7
add ecx, 0x94f66834
sub ecx, esi
rol edi, 0x11
not eax
add ebx, 0x5e20c67b
rol ecx, 3
xor dword [0x6bff78], ebx
sub edx, 0x5c328b5d
lea esi, [0x2e7921b2]
neg esi
mov dword [0x6bff7c], eax
dec ebx
call fcn.00539d82
add edi, 0xc146d706
ror edi, 0x19
sub esi, edx
and dword [0x6bffe2], edx
add dword [0x6bff8e], ecx
xor ebx, ecx
neg edi
rol edx, 1
call fcn.004d2580
xor ecx, 0x989b4cc9
call fcn.00533839
xor ecx, 0x989b4cc9
call fcn.0046eade
ror edx, 1
neg edi
xor ebx, ecx
xor dword [0x6bffcf], edi
add esi, edx
rol edi, 0x19
sub edi, 0xc146d706
call fcn.0058fd51
inc ebx
sub dword [0x6bffd6], eax
neg esi
and esi, 0xc038287d
sub edx, 0x9f2bf59e
not esi
add ebx, 0xe8ebcfe2
call fcn.004b1868
rol ecx, 0xa
xor eax, 0xc98a18c7
inc edi
add dword [0x6bffb4], edi
neg edx
call fcn.00440b3f
call fcn.0044392b
neg edx
mov dword [0x6bffcc], ecx
dec edi
xor eax, 0xc98a18c7
ror ecx, 0xa
call fcn.00593327
sub ebx, 0xe8ebcfe2
not esi
add edx, 0x9f2bf59e
add esi, 0x35efd0
xchg eax, edx
dec ebx
xor edi, ebp
inc esi
neg esi
rol eax, 5
call fcn.004df4bc
dec eax
sub ebx, ebp
xor esi, 0x7c973e34
ror ebx, 0x1d
neg ecx
xor ebx, 0x82d77e3c
ror eax, 9
dec ecx
sub dword [0x6bff8b], edx
sub dword [0x6bffa3], esi
mov dword [0x6bffdc], ebx
ror edi, 0x14
call fcn.0046b7b6
neg ecx
call fcn.004bf10c
call fcn.0056ce2e
neg ecx
call fcn.00564517
rol edi, 0x14
sub dword [0x6bffdb], eax
or dword [0x6bffdb], edx
inc ecx
rol eax, 9
xor ebx, 0x82d77e3c
neg ecx
rol ebx, 0x1d
xor esi, 0x7c973e34
add ebx, ebp
inc eax
ror eax, 5
neg esi
dec esi
xor edi, ebp
inc ebx
xchg eax, edx
mov edi, eax
xor ebx, eax
sub ecx, edi
neg edi
rol edi, 0x1d
sub ebx, 0xf93ab232
ror ebx, 0xa
xor esi, edi
inc ecx
rol ecx, 6
dec edi
not edx
call fcn.0057de99
inc ebx
call fcn.004cee0f
call fcn.0040905d
dec ebx
call fcn.00558c43
not edx
inc edi
ror ecx, 6
dec ecx
xor esi, edi
rol ebx, 0xa
add ebx, 0xf93ab232
ror edi, 0x1d
neg edi
add ecx, edi
xor ebx, eax
mov ecx, 0x4fc52
inc edx
rol esi, 4
not esi
xchg ecx, esi
inc eax
xor ecx, 0x9c244fa7
inc esi
not ebx
add ecx, 0xdcd899ac
rol edi, 0x16
dec eax
call fcn.004dc338
and dword [0x6bff9e], 0x69ece1bd
xchg edx, eax
add edx, 0xa1f345b
xchg ecx, edx
neg edi
xor esi, eax
xchg edx, esi
xchg edx, esi
xor esi, eax
neg edi
xchg ecx, edx
sub edx, 0xa1f345b
xchg edx, eax
sub dword [0x6bffc1], 0x3f1b5a11
call fcn.00421d6a
inc eax
ror edi, 0x16
sub ecx, 0xdcd899ac
not ebx
dec esi
xor ecx, 0x9c244fa7
dec eax
xchg ecx, esi
not esi
ror esi, 4
dec edx
rep movsb byte es:[edi], byte [esi]
add esi, 0x931e3e00
push ds
xchg ebx, eax
xchg edi, esi
inc ecx
xor ecx, esi
rol esi, 0xb
xor eax, 0xdf58d2a1
ror ebx, 0x15
call fcn.004cd5c4
ror eax, 0x17
add dword [0x6bffea], edx
add dword [0x6bff9c], edi
invalid
loope 0x5a3bd8
invalid