Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
mov edi, 0xbb92d259
call sub.user32.dll_GetMessageTime
neg ecx
or edi, 0xbb937ad2
inc ebx
sub edi, ecx
xor edi, ecx
neg edx
nop
cmp eax, 0xffffff28
jne 0x4010b2
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
ret
and ebx, ecx
or edi, edx
rol edx, 0x16
rol edx, 0xd
call sub.user32.dll_GetActiveWindow
add ebx, edx
cmp eax, 0xfffffeee
jne 0x401147
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
ret
or ebx, ecx
xchg ebx, ecx
call sub.user32.dll_GetMessageTime
xor edx, edi
and edx, ebx
cmp eax, 0xfffffeff
jne 0x4011c9
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
ret
add edx, ebx
dec edi
not edx
not ecx
or ebx, edi
or ecx, edx
call sub.kernel32.dll_GetCurrentProcess
xchg ecx, ebx
and edi, edx
xor ecx, ebx
mov edi, edx
shl ebx, 0x17
xor ecx, edx
xor edi, 0xbba40632
and edi, edx
cmp eax, 0xfffffed6
jne 0x40124a
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.ntdll.dll_NtDebugActiveProcess
call sub.user32.dll_SetWindowTextA
call sub.user32.dll_SetWindowTextA
call sub.ntdll.dll_NtDebugActiveProcess
ret
jmp 0x4b76bc
and ecx, 0xbc521b1f
and ebx, edi
add edi, ebx
jmp 0x4ba65e
push 0xbc7898d9
and ecx, 0xc58166f8
xchg edx, ecx
jmp 0x4b7f28
pop ebx
xchg edi, ecx
and ecx, 0xc588ac9c
xor ecx, esi
sub esi, edi
mov esi, 0xc58973da
sub ecx, esi
jmp 0x4b97ed
push 0xbc5710c5
mov edi, ecx
sub ecx, esi
sub ecx, esi
add esi, edi
dec esi
sub esi, edi
add ecx, edx
and ecx, 0xc5d32af8
xor esi, ecx
xor ecx, 0xc5d40561
and ecx, 0xc5d4755c
rol ecx, 5
jmp 0x4ba065
pop ebx
and ecx, 0xc5d5c061
add ecx, 0xc5d63035
and esi, edx
neg edx
or ecx, edi
add edx, 0xc5d82697
xor ecx, esi
add ecx, 0xc5d94f83
and ecx, 0xc5d9b807
add esi, edi
neg edi
jmp 0x4b8455
push 0xbc58b8bd
sub edx, esi
add ecx, edi
or esi, 0xc61f7638
and edx, esi
xor edx, ecx
ror edi, 0xa
or ecx, esi
xchg esi, edx
rol edx, 0x19
jmp 0x4ba615
push 0xbc5de478
sub edx, ecx
mov ecx, esi
xor esi, ecx
and esi, edx
xor edx, esi
add esi, edi
and edx, edi
add ecx, 0xc647967e
and ecx, edx
mov esi, edi
jmp 0x4b8c8b
mov ebx, 0x123b2f04
neg edx
or ecx, esi
xchg esi, edi
mov esi, edx
mov edx, 0xc6561107
or esi, 0xc65653da
add edx, ecx
mov esi, 0xc656d738
inc edx
add esi, edx
jmp 0x4b89ef
mov ebx, 0x123b2f04
dec edi
xchg edx, edi
xor ecx, edi
or edi, esi
xchg ecx, edi
xchg edx, esi
xor edi, 0xc65ae872
neg edi
xchg esi, edx
xor edi, edx
jmp 0x4b7e33
push 0xbc611b1f
mov ecx, edx
sub edi, edx
ror esi, 0xe
or esi, edi
mov edx, ecx
mov edx, esi
add ecx, 0xc6c2d7c4
sub edi, ecx
and edi, edx
xor edi, ecx
jmp 0x4b8af1
push 0xbc5f9722
xchg edx, edi
xchg edi, esi
and ecx, edx
mov esi, edi
jmp 0x4bb3b5
call ebx
xor edi, 0xc6c6e898
not edx
xchg edx, edi
mov edi, 0xc6c852a9
bswap edi
bswap ecx
mov edx, ecx
add edx, esi
mov edx, ecx
rol ecx, 9
jmp 0x4b810d
push 0xbc60987d
xor ecx, edx
inc edx
sub edi, 0xc6d104d0
sub esi, ecx
ror ecx, 0x12
xor edi, esi
shl esi, 0x19
and ecx, esi
or esi, edx
or esi, 0xc6d2c35b
sub edx, edi
mov ecx, edx
shr edi, 0xc
xor edi, esi
xchg edi, esi
jmp 0x4b9aaa
mov ebx, 0x123b2f04
inc edx
not esi
and edi, 0xc6de43b6
add esi, edi
mov edi, 0xc6df2d0d
xor edx, edi
sub edi, edx
add edi, 0xc6e09680
xor edi, edx
neg edi
sub ecx, edx
sub edi, edx
jmp 0x4b7ff2
pop ebx
mov ecx, esi
sub edi, esi
add edx, edi
xor ecx, esi
sub ecx, 0xc7332fae
and edi, ecx
add ecx, edx
jmp 0x4bb350
pop ebx
mov esi, edi
add esi, ecx
add edx, ecx
nop
add edi, esi
and ecx, 0xc740585b
not esi
mov edx, esi
shr ecx, 9
and ecx, 0xc7428ce5
or esi, ecx
sub edi, ecx
add edx, 0xc743e257
add edi, ecx
ror edi, 0x15
sub edx, ecx
jmp 0x4bb499
call fcn.004b8d36
and edx, edi
mov edi, ecx
dec edi
sub esi, edx
rol ecx, 5
ror edi, 0x10
add edx, edi
shl esi, 0x1d
mov esi, edx
and esi, edi
jmp 0x4b8c77
push 0xbc807272
add edx, 0xc78516de
neg edx
xchg esi, ecx
mov ecx, 0xc7866881
sub edx, esi
xor edi, 0xc7874d99
jmp 0x4b813e
push 0xbc78c77c
mov ecx, edx
bswap edx
sub edi, 0xc798afd0
and edx, 0xc798ee5e
xchg esi, edi
bswap esi
shr esi, 0x14
sub esi, edi
jmp 0x4b7f8e
mov ebx, 0x2774562b
or edx, esi
rol edx, 0x16
xchg esi, edx
shl ecx, 0x11
or esi, ecx
sub edi, edx
mov edx, edi
add ecx, 0xc7a69b4b
add edi, edx
jmp 0x4ba0c4
call fcn.004b8d36
mov ecx, edi
sub esi, edi
sub edi, 0xc7cd37cf
add edx, ecx
shl ecx, 0x13
add ecx, edi
and esi, edx
xchg edx, ecx
jmp 0x4b9847
call fcn.004b8d36
xchg edi, ecx
or ecx, edx
add ecx, edx
xchg edi, esi
sub esi, 0xc7d07a7d
sub ecx, esi
xor esi, edi
add ecx, edi
jmp 0x4b912c
pop ebx
or esi, 0xc7d2af68
add ecx, esi
add ecx, edx
sub esi, ecx
add ecx, edx
xor esi, edi
xor esi, ecx
sub edx, esi
shl edx, 0x11
inc ecx
neg ecx
xchg edi, ecx
jmp 0x4bb253
pop ebx
add edi, ecx
mov edi, edx
or edi, 0xc7ee5c75
mov edi, 0xc7eecd36
bswap esi
jmp 0x4b8a20
pop ebx
sub esi, 0xc7f88c07
xchg ecx, edi
neg esi
mov ecx, edi
xor ecx, esi
sub ecx, edi
xchg ecx, esi
and ecx, esi
sub esi, ecx
jmp 0x4b783f
pop ebx
xor esi, 0xc805b3da
add edi, esi
or edi, ecx
inc ecx
add edx, esi
shr esi, 0x1e
jmp 0x4b964e
push 0xbc809ed8
neg esi
and esi, edi
add edx, 0xc80d83fb
jmp 0x4bb592
pop ebx
neg edx
or edi, esi
xchg edi, ecx
shr edi, 0x14
or edi, 0xc853e197
and esi, 0xc8545324
shr ecx, 8
or esi, edi
xchg ecx, esi
xchg ecx, edi
mov edx, 0xc856e22a
jmp 0x4b7ba2
push 0xbc5a665f
or edi, 0xc8576912
and esi, 0xc857dae3
or esi, ecx
mov esi, edi
xchg edx, ecx
and edx, esi
sub edi, ecx
mov edx, edi
jmp 0x4bad93
call ebx
mov edx, 0xc85b321b
sub esi, edi
bswap edi
sub edi, edx
inc esi
mov esi, 0xc85cfa04
or edx, esi
jmp 0x4ba897
call fcn.004b8d36
add edx, edi
inc ecx
shr esi, 9
sub esi, edx
not edi
or esi, 0xc8abedaf
add edi, 0xc8b30009
and ecx, edx
sub edx, esi
sub ecx, 0xc8b45311
jmp 0x4b7bb4
push 0xbc5e3952
xor edx, ecx
bswap edi
xchg edi, esi
dec esi
and edx, esi
neg esi
shr edx, 0x11
sub edi, esi
jmp 0x4ba9de
call ebx
xor ecx, edx
and edx, ecx
xor edi, 0xc8c8fc8f
not esi
sub ecx, edx
sub esi, edx
mov edi, 0xc8c9f7f7
sub edx, esi
xor ecx, esi
neg edi
mov esi, edx
xor ecx, edx
xor ecx, esi
and ecx, edx
sub esi, ecx
jmp 0x4b80aa
push 0xbc5b8d0c
or edx, 0xc8d2f9f3
mov edx, esi
sub esi, edx
sub esi, edx
jmp 0x4ba842
push 0xbc606cbf
dec esi
and edi, edx
add edx, ecx
sub edx, 0xc8d6349e
mov ecx, esi
add edi, ecx
jmp 0x4b7bf7
call fcn.004b8d36
bswap edx
sub edx, esi
add edx, ecx
mov edx, ecx
or edi, 0xc907c3b3
add ecx, edi
xchg edi, ecx
rol edi, 4
neg ecx
or edi, 0xc90a7dd1
jmp 0x4b9e89
pop ebx
sub ecx, 0xc90d60eb
shl ecx, 1
sub esi, ecx
neg ecx
and edi, ecx
or esi, edx
jmp 0x4b7734
call ebx
or esi, ecx
sub esi, 0xc923a78b
bswap edi
ror edx, 5
sub ecx, 0xc924f3c1
bswap edi
xor ecx, esi
jmp 0x4b900a
call ebx
neg ecx
inc esi
neg edx
inc edi
dec edi
and edi, esi
or ecx, edi
sub ecx, 0xc940c11b
or edi, edx
mov ecx, edx
mov esi, 0xc9418058
add edx, esi
and ecx, esi
add esi, edi
shr ecx, 0xf
xchg esi, ecx
jmp 0x4bb049
pop ebx
and edi, 0xc94e3b81
and edx, edi
jmp 0x4b8b8d
call fcn.004b8d36
xchg esi, ecx
sub edi, edx
not ecx
inc esi
or edx, esi
mov esi, ecx
mov edi, edx
mov ecx, 0xc95278b6
and ecx, edx
xor edi, edx
xor edx, edi
bswap edi
jmp 0x4baa7c
call fcn.004b8d36
xor edi, 0xc9aef50d
add ecx, edx
shl edx, 0xe
mov edx, edi
and edi, esi
xchg esi, edx
sub ecx, edi
sub ecx, 0xc9b0a352
xchg edx, esi
and ecx, edx
xor edx, ecx
xor esi, edx
and edx, ecx
sub ecx, edx
xchg edi, esi
jmp 0x4b822a
pop ebx
bswap ecx
inc edx
add ecx, edx
xchg edi, ecx
shr edi, 0x12
add edi, 0xc9b44826
add ecx, edx
and esi, edx
xor ecx, esi
jmp 0x4ba91a
pop ebx
xor edx, 0xc9b55ecf
or edi, esi
add esi, 0xc9b5d5fe
and edx, edi
dec edi
or esi, ecx
and edx, 0xc9b6cc36
dec edi
or edx, edi
shr ecx, 0x11
inc edi
jmp 0x4b96d9
mov ebx, 0x2774562b
add edi, edx
or edi, ecx
mov ecx, 0xc9e984e1
xchg edx, ecx
mov esi, edx
add edi, esi
inc edi
or edx, edi
sub edx, edi
jmp 0x4bb471
pop ebx
mov esi, edx
and edi, ecx
and edi, 0xc9f4c8da
or edx, ecx
sub esi, edx
shr ecx, 0xc
rol esi, 1
mov esi, edx
jmp 0x4b9dae
pop ebx
inc edi
mov ecx, edx
mov esi, edx
not ecx
dec edi
or ecx, edx
sub edx, esi
xchg ecx, edx
or ecx, edi
neg ecx
jmp 0x4b9f58
call fcn.004b8d36
bswap esi
mov edi, 0xca01fa42
and ecx, edx
shl edx, 0x15
not edi
neg edx
jmp 0x4baee5
call ebx
and edi, esi
xor edx, edi
and edx, 0xca05e851
shl edi, 0xb
jmp 0x4ba8b4
push 0xbc5e136c
xor edi, esi
sub ecx, edi
mov edx, esi
sub edi, 0xca073247
mov esi, ecx
or esi, edx
xor edi, 0xca07e419
add edi, ecx
shl edx, 0xa
neg esi
xor edi, edx
and edi, ecx
dec esi
jmp 0x4b8332
push 0xbc7841d1
and ecx, edx
mov edx, ecx
neg edi
shl esi, 0x13
xor esi, ecx
sub ecx, esi
and esi, edi
sub esi, 0xca0de037
bswap esi
mov ecx, edx
jmp 0x4ba1bd
push 0xbc62cc6b
and edx, 0xca3ac65d
add ecx, 0xca3b0086
neg esi
xor edi, esi
xor ecx, esi
mov ecx, esi
or edi, esi
inc esi
xchg esi, edx
and ecx, esi
and edi, edx
mov edx, 0xca4a5ba8
or edx, esi
add edi, edx
or edi, esi
jmp 0x4ba310
pop ebx
sub esi, 0xca56d458
xor ecx, edi
rol edx, 0x17
mov ecx, 0xca579b27
sub ecx, 0xca57d5cb
jmp 0x4b846b
mov ebx, 0x123b2f04
and edx, 0xca6c2876
xor ecx, 0xca6c7609
rol edx, 0x13
not edi
not esi
bswap edi
add edi, 0xca6db398
jmp 0x4ba464
pop ebx
add edx, esi
and esi, 0xca75dc03
inc edi
sub ecx, 0xca766753
and edx, esi
sub ecx, esi
xchg edi, ecx
sub esi, edx
jmp 0x4b86c8
mov ebx, 0x123b2f04
and edx, 0xca9c968b
xchg ecx, edi
and edi, esi
or edx, 0xca9d4e6f
and edx, esi
or edx, edi
and esi, edi
or ecx, edi
and esi, edx
and edx, 0xca9ebda7
mov esi, edx
jmp 0x4b8011
call ebx
mov edi, esi
shl ecx, 0x13
dec ecx
mov edi, edx
mov edi, 0xcab64625
add ecx, edx
and edi, ecx
xor edx, ecx
jmp 0x4bb266
push 0xbc5db94b
or esi, 0xcabbf1dd
and edi, ecx
shl edi, 0x11
sub edx, 0xcabcaf2a
and edx, ecx
and esi, edi
inc ecx
xchg ecx, edx
or ecx, esi
mov ecx, 0xcabe27d3
add ecx, 0xcabe66bf
jmp 0x4b79d0
pop ebx
or esi, 0xcad7c7f4
dec ecx
or edx, 0xcad841cf
mov edi, esi
or esi, edx
xor edx, 0xcadb85ad
mov esi, edi
or edx, esi
add edi, edx
xor edx, ecx
xor edx, edi
jmp 0x4b81df
mov ebx, 0x2774562b
shl ecx, 7
xor ecx, edx
and ecx, 0xcae71ffc
not edi
ror edx, 0x12
rol esi, 0xe
mov edx, 0xcae8fa82
sub edx, 0xcae96845
jmp 0x4bab79
call ebx
and esi, edi
mov edx, esi
xchg edx, edi
add ecx, 0xcb0ccbe4
xor ecx, 0xcb0d0ae7
add ecx, edx
shr edi, 0x11
dec ecx
or edi, ecx
mov edx, edi
mov esi, 0xcb0e8393
and edx, 0xcb0ebdde
jmp 0x4bae61
push 0xbc62a068
xor esi, ecx
sub esi, ecx
add ecx, edx
add edi, 0xcb3ae6bf
mov edx, ecx
or esi, edi
xchg edi, ecx
and esi, ecx
or edx, 0xcb3c3cdf
jmp 0x4b8dad
pop ebx
or ecx, edx
mov esi, ecx
mov ecx, edi
and edi, edx
or edi, edx
xchg edi, esi
jmp 0x4bb668
pop ebx
and ecx, edx
add edi, 0xcb6cb370
xor ecx, esi
xchg edi, ecx
ror esi, 5
add edi, ecx
or esi, edi
xor edi, ecx
xor edx, 0xcb6e6571
xchg edx, esi
add ecx, edi
jmp 0x4b9582
push 0xbc762d12
ror ecx, 9
xchg ecx, esi
inc ecx
and edi, ecx
not ecx
jmp 0x4b931b
push 0xbc589368
and edi, ecx
mov edi, edx
rol edx, 0x13
not ecx
jmp 0x4b7955
pop ebx
mov edx, 0xcb8e0eaa
mov esi, edx
mov ecx, edx
xchg edi, ecx
jmp 0x4b918d
call ebx
add ecx, edx
xchg edx, ecx
ror ecx, 0xe
sub ecx, edi
inc esi
xor ecx, esi
xor esi, edi
inc edi
inc ecx
jmp 0x4b802f
mov ebx, 0x123b2f04
and edi, ecx
ror edi, 0x11
mov edx, edi
and edi, 0xcb9779b6
and edx, ecx
add esi, ecx
xchg ecx, esi
shl edi, 5
sub esi, edx
xor esi, edi
jmp 0x4ba23d
pop ebx
add ecx, edx
sub edx, ecx
add edi, esi
shr edi, 8
and edx, ecx
inc ecx
neg esi
or ecx, esi
and edx, 0xcba1e726
add ecx, edx
jmp 0x4b7e9c
pop ebx
inc edi
ror edi, 0xf
xchg edx, ecx
xor esi, 0xcbaa7575
mov edi, esi
sub edx, 0xcbaaf2e9
xchg edi, edx
jmp 0x4b8cd5
pop ebx
and edi, edx
and edi, esi
add esi, edx
mov ecx, edx
bswap edi
and edx, 0xcbd82d83
jmp 0x4b7811
push 0xbc60c6b8
and ecx, edi
bswap edx
add edi, esi
rol edi, 2
mov edi, edx
xchg edi, edx
xchg edi, ecx
jmp 0x4bab9d
pop ebx
shr esi, 0x18
xchg edx, ecx
inc edi
or esi, edx
jmp 0x4b8554
pop ebx
mov edx, edi
sub ecx, edx
mov esi, edx
mov ecx, edx
mov edx, ecx
bswap edi
or ecx, esi
jmp fcn.004b856b
push 0xbc74a6d6
shl esi, 0x1c
xchg ecx, edx
xchg edx, esi
inc esi
dec esi
not esi
and edx, ecx
not edi
xchg edi, ecx
sub edx, 0xcc31d4ec
xor ecx, esi
sub esi, ecx
or edx, esi
add edi, esi
mov edx, edi
jmp 0x4bb42b
pop ebx
or edi, edx
sub edx, edi
or ecx, esi
add edx, esi
sub edi, esi
add edx, edi
not edi
shr edi, 0x1d
sub edi, ecx
jmp 0x4b9660
call ebx
add edi, ecx
add edi, ecx
ror ecx, 0xd
or ecx, 0xcc4c23a5
xor edx, 0xcc4c62b6
shl edx, 0xd
jmp 0x4b8e2b
pop ebx
sub esi, 0xcc7d46ce
and edx, ecx
not edx
sub ecx, 0xcc7f2a9b
mov edx, edi
sub esi, edx
add ecx, edx
jmp 0x4b92bc
push 0xbc573f78
or edi, edx
neg ecx
or ecx, edi
add ecx, 0xcc911fa7
and edi, ecx
and ecx, edi
and edi, 0xcc91dec5
add ecx, 0xcc921935
jmp 0x4b7a72
call fcn.004b8d36
and esi, edi
or edi, edx
ror esi, 5
dec ecx
and edi, esi
shl edi, 0x12
or edx, ecx
rol edx, 0x14
mov ecx, 0xcc994e37
xor ecx, 0xcc9988b4
jmp 0x4bae3c
push 0xbc560f12
xchg esi, ecx
rol ecx, 0x1f
ror edi, 0x18
sub esi, edx
or ecx, edi
sub ecx, 0xcc9b4081
shl edi, 0xe
jmp 0x4bb18a
push 0xbc786de8
not ecx
sub ecx, 0xccae73ad
and edx, edi
add esi, 0xccaf5723
or edi, ecx
add edi, ecx
jmp 0x4b76eb
call fcn.004b8d36
or edi, 0xccc87cf7
or edx, ecx
mov edi, 0xccc8fb2c
not edx
or esi, edi
xor esi, edx
not edi
xor edi, esi
xor esi, edi
mov edx, edi
add esi, edi
sub esi, ecx
jmp 0x4ba941
push 0xbc62fabd
or ecx, edx
ror edx, 1
sub ecx, 0xccd820fe
or esi, edi
xor ecx, edi
sub edi, ecx
dec ecx
xor edx, ecx
jmp 0x4baa06
call fcn.004b8d36
or esi, ecx
and edi, esi
rol edx, 0x1e
shr ecx, 0x1f
add esi, edx
add ecx, edi
inc edi
sub edi, edx
shr edi, 8
jmp 0x4b83c5
call fcn.004b8d36
xor edx, 0xccf2fb19
inc edi
sub edi, edx
xor esi, edi
xchg ecx, esi
add edx, ecx
add edi, edx
add esi, ecx
or edi, esi
rol ecx, 0x1f
mov edx, edi
jmp 0x4b936e
push 0xbc5be11b
mov edx, 0xccff1737
shr esi, 0x10
or ecx, edi
bswap edx
and ecx, 0xcd000f3a
inc ecx
mov ecx, edi
xor ecx, esi
xor edi, 0xcd010935
and edi, esi
xchg edx, esi
xor ecx, 0xcd01c093
jmp 0x4baf63
pop ebx
dec esi
sub edx, 0xcd04476b
and edx, ecx
mov ecx, esi
sub ecx, edi
xor esi, ecx
jmp 0x4b8208
push 0xbc58e189
ror edx, 0x15
xor edi, ecx
xor ecx, 0xcd0f14ea
xor edx, 0xcd0f5761
dec esi
mov esi, edi
xchg edi, esi
and ecx, edi
mov edi, edx
xor esi, edi
and esi, edi
xor ecx, edi
jmp 0x4b7a4b
push 0xbc55d089
bswap esi
and esi, edi
and ecx, esi
and edi, edx
nop
sub edx, esi
add ecx, 0xcd1526f6
jmp 0x4ba0eb
push 0xbc5bbbb1
xor ecx, 0xcd460491
neg esi
xchg edi, esi
add esi, edi
xchg edi, esi
sub edx, esi
shl edx, 0x10
or edx, 0xcd47b6cf
or ecx, 0xcd47fea9
mov edi, 0xcd4838f4
and edx, 0xcd487b03
add esi, edx
sub edx, ecx
shr edx, 0x13
jmp 0x4ba548
pop ebx
xchg edi, esi
xchg edx, ecx
and edi, esi
sub esi, edi
xor edx, ecx
mov esi, edx
xor ecx, edi
shl edi, 7
and edx, ecx
add edx, esi
bswap ecx
jmp 0x4b8051
pop ebx
inc esi
add edx, 0xcd4ec634
ror edi, 3
xor edi, esi
bswap edx
sub ecx, edi
xor edi, edx
sub esi, edi
or esi, edi
and esi, ecx
inc edi
not edi
jmp 0x4b7de0
pop ebx
bswap esi
bswap edi
xchg esi, edi
xor edx, esi
nop
mov esi, edi
xor edi, 0xcd5ebd59
add ecx, edx
add ecx, edi
sub ecx, 0xcd601313
xor ecx, edx
and edi, edx
xchg edi, edx
jmp 0x4ba590
call ebx
dec edx
and ecx, esi
neg edi
xor esi, 0xcd633e91
add esi, edx
add ecx, esi
jmp 0x4bb3f6
mov ebx, 0x2774562b
or edi, 0xcd7c79d5
or ecx, 0xcd7cb8f9
and edx, esi
and edi, 0xcd7d37d5
shl ecx, 0xc
ror edx, 0x13
add edx, edi
sub esi, edi
jmp 0x4b86f4
mov ebx, 0x2774562b
mov edi, edx
add esi, edx
inc edx
and ecx, 0xcd7f403c
ror edx, 1
or esi, ecx
add ecx, 0xcd7fff50
add edi, esi
or edi, edx
dec edx
xor edi, 0xcd80ff5b
jmp 0x4b8308
call ebx
or edi, ecx
and edx, 0xcd865287
rol ecx, 8
mov ecx, edi
add esi, edi
mov ecx, edi
sub edi, edx
dec edx
xor edx, esi
rol edi, 0x1e
shl edi, 0xf
or ecx, esi
jmp 0x4b8ba9
push 0xbc770c23
xor ecx, edx
shl ecx, 8
sub ecx, edi
sub edx, esi
bswap esi
sub esi, edi
jmp 0x4baf90
call fcn.004b8d36
shr edx, 5
add edi, edx
or ecx, 0xcda0bfa1
or edx, esi
rol ecx, 0x13
mov edi, 0xcda17ae6
xor esi, ecx
inc edx
neg esi
jmp 0x4b8602
push 0xbc60ec6c
xchg edi, esi
dec edi
and edx, edi
shl edi, 5
sub esi, edx
not esi
and edx, ecx
inc esi
jmp 0x4b7b7f
push 0xbc58659d
or edi, ecx
xor ecx, esi
sub edx, ecx
and edx, esi
inc edi
xchg esi, edi
sub edi, edx
sub ecx, edx
shl esi, 0x1d
jmp 0x4b9758
push 0xbc5a8cad
add ecx, esi
sub edx, edi
sub esi, edi
and ecx, 0xcde15a82
inc esi
add ecx, esi
jmp 0x4b8f7b
call ebx
sub edx, 0xcdebc749
add ecx, esi
dec esi
shl ecx, 0xb
mov edx, esi
and edi, esi
or ecx, edx
not edx
or edi, ecx
xchg edx, esi
xor ecx, 0xcdee34fa
jmp 0x4b7d56
pop ebx
add edi, ecx
add edi, ecx
ror esi, 2
mov ecx, edi
xchg esi, edi
xor edi, 0xcdefb425
xchg ecx, edi
not esi
rol esi, 1
or ecx, edi
ror edx, 0x1f
sub edi, edx
mov edi, esi
xor edx, esi
ror edi, 2
jmp 0x4b9a66
call ebx
or esi, edi
mov edi, 0xcdf8af30
or ecx, edx
or ecx, edx
add edx, 0xcdf99695
bswap edi
sub ecx, edx
mov edx, 0xcdfa4ced
dec esi
xchg edx, ecx
or edi, edx
bswap ecx
jmp 0x4b9c67
push 0xbc5c0e8d
and edi, 0xce0596e7
sub edi, 0xce060091
mov esi, 0xce06759c
ror edi, 0x1c
dec esi
and edi, 0xce16ff21
bswap edi
or edx, esi
not edi
xor edi, ecx
jmp 0x4bb743
push 0xbc773866
or edi, ecx
xor edi, 0xce1a10c8
add edi, esi
sub edx, edi
add ecx, 0xce1ac8a2
sub ecx, 0xce1b0b8a
jmp 0x4b985e
pop ebx
inc ecx
dec edx
mov esi, 0xce2d30ce
and ecx, 0xce2d73a8
and ecx, esi
rol edx, 0x1a
add edx, edi
add ecx, 0xce2e6a59
rol ecx, 0xd
mov ecx, edx
mov esi, ecx
bswap esi
sub edi, esi
add ecx, edx
jmp 0x4bab27
mov ebx, 0x123b2f04
not ecx
inc esi
and esi, edx
not esi
and edi, esi
shl edi, 0x11
or esi, edx
sub edi, esi
neg edi
xchg edi, ecx
jmp 0x4ba4a5
pop ebx
rol edx, 0x1a
add esi, edx
xor edi, edx
sub edi, edx
mov edi, esi
sub edx, esi
jmp 0x4b8a3c
pop ebx
xchg ecx, edi
xchg esi, ecx
inc edx
mov edx, ecx
xor esi, edi
shl ecx, 0x14
inc esi
xor ecx, 0xce7a5d55
and edi, edx
rol edi, 0x13
or esi, 0xce7b25c5
or edi, edx
xor esi, 0xce7ba0e4
or ecx, edi
bswap edx
jmp 0x4b9c16
pop ebx
and edi, esi
not ecx
sub edi, ecx
shl ecx, 6
or edi, ecx
mov esi, 0xce8c9bd6
mov esi, edx
add ecx, edi
rol esi, 6
or ecx, esi
mov ecx, edx
xor edi, esi
jmp 0x4bb50f
mov ebx, 0x123b2f04
xchg esi, edi
or ecx, edx
mov edx, esi
sub edi, esi
sub esi, edx
mov esi, edi
xchg esi, ecx
xor edx, 0xce955b3d
sub ecx, 0xce9595e2
jmp 0x4b852d
pop ebx
add edi, esi
dec esi
and ecx, edx
mov edx, ecx
mov edx, ecx
add edx, ecx
rol ecx, 0xa
xchg edi, edx
shl esi, 0x15
jmp 0x4b995f
push 0xbc74d281
xor edi, 0xcea16e30
bswap edx
and edi, edx
add esi, ecx
sub ecx, esi
shl ecx, 0x17
mov edi, esi
inc ecx
mov ecx, esi
jmp 0x4bb6d4
call fcn.004b8d36
and ecx, edi
shr ecx, 0x1e
neg esi
mov edx, esi
or ecx, edx
bswap esi
sub ecx, edx
sub edx, ecx
xor esi, edx
shr edx, 0xe
mov esi, edx
and esi, 0xcebf89bb
jmp 0x4b85bd
push 0xbc583eea
xor edx, ecx
add ecx, 0xcec0203f
xor esi, ecx
mov esi, ecx
dec esi
mov ecx, esi
and ecx, edi
and ecx, edi
shl edi, 0x17
jmp 0x4bac4e
pop ebx
inc edx
dec edi
sub ecx, edx
and edi, edx
ror edi, 0x1d
and edi, esi
bswap edx
or edx, edi
jmp 0x4b98d8
mov ebx, 0x2774562b
xor edi, edx
inc edx
sub esi, edx
mov edx, 0xced358f7
or edx, esi
not edi
and edi, esi
dec esi
ror ecx, 3
xor esi, edx
neg edx
add ecx, edx
xor esi, 0xced59336
ror esi, 0xb
jmp 0x4b8c3f
pop ebx
bswap ecx
or ecx, edx
add edi, 0xcee2683d
and ecx, edi
mov ecx, esi
add edi, ecx
xchg ecx, edi
add edi, esi
mov edi, ecx
jmp 0x4b9d0e
push 0xbc74f8fb
mov esi, edi
inc edi
add edx, 0xceed69ea
xchg ecx, edx
xor edi, edx
bswap edx
mov edi, esi
mov esi, edx
jmp 0x4b7c63
push 0xbc5c3429
add esi, 0xcf10e99b
bswap esi
mov edx, ecx
xor edi, edx
add ecx, edi
add ecx, 0xcf121e11
shr edi, 4
xor edx, esi
sub ecx, 0xcf1b9a27
xor edi, ecx
xchg esi, edx
mov ecx, esi
xor edi, 0xcf1c8e7b
jmp 0x4b90e9