Function at 0x401000
Capabilities:
Encrypt data using chaskey
Identify system language via api

Disassembly:
sub ecx, edx
xor edi, ecx
or ecx, 0x21e6be21
xchg edi, ebx
call sub.kernel32.dll_GetSystemDefaultUILanguage
not edi
xchg edi, edx
sub edx, ebx
mov ebx, ecx
cmp eax, 0xffffff2d
jne 0x40109d
call sub.user32.dll_SetLastErrorEx
call sub.user32.dll_SetLastErrorEx
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.user32.dll_SetLastErrorEx
call sub.oleaut32.dll_VarCyMul
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.oleaut32.dll_VarCyMul
call sub.oleaut32.dll_VarCyMul
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.oleaut32.dll_VarCyMul
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.kernel32.dll_ReleaseSemaphore
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.user32.dll_SetLastErrorEx
call sub.user32.dll_SetLastErrorEx
call sub.user32.dll_SetLastErrorEx
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.kernel32.dll_ReleaseSemaphore
call sub.kernel32.dll_ReleaseSemaphore
call sub.user32.dll_SetLastErrorEx
call sub.kernel32.dll_ReleaseSemaphore
call sub.user32.dll_SetLastErrorEx
ret
dec ecx
rol edi, 3
xor edx, 0x21ef2f38
dec ecx
sub ebx, edi
add edi, edx
call sub.kernel32.dll_GetThreadLocale
not ebx
sub ebx, ecx
sub edx, ebx
mov edi, ebx
bswap edx
cmp eax, 0xffffff00
jne 0x40113a
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.user32.dll_SetLastErrorEx
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.kernel32.dll_ReleaseSemaphore
call sub.user32.dll_SetLastErrorEx
call sub.kernel32.dll_ReleaseSemaphore
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.oleaut32.dll_VarCyMul
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.user32.dll_SetLastErrorEx
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.kernel32.dll_ReleaseSemaphore
call sub.kernel32.dll_ReleaseSemaphore
call sub.kernel32.dll_ReleaseSemaphore
call sub.user32.dll_SetLastErrorEx
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.user32.dll_SetLastErrorEx
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.user32.dll_SetLastErrorEx
call sub.user32.dll_SetLastErrorEx
ret
xchg edx, ebx
sub edi, 0x21f91e3b
or ecx, ebx
dec edi
xchg ecx, edx
shr ecx, 2
xor edi, 0x21fc22c8
call sub.kernel32.dll_GetSystemDefaultUILanguage
xor edi, edx
sub ebx, ecx
cmp eax, 0xffffff04
jne 0x4011e2
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.oleaut32.dll_VarCyMul
call sub.oleaut32.dll_VarCyMul
call sub.oleaut32.dll_VarCyMul
call sub.user32.dll_SetLastErrorEx
call sub.user32.dll_SetLastErrorEx
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.kernel32.dll_ReleaseSemaphore
call sub.user32.dll_SetLastErrorEx
call sub.kernel32.dll_ReleaseSemaphore
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.oleaut32.dll_VarCyMul
call sub.oleaut32.dll_VarCyMul
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.user32.dll_SetLastErrorEx
call sub.kernel32.dll_ReleaseSemaphore
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.oleaut32.dll_VarCyMul
call sub.user32.dll_SetLastErrorEx
call sub.oleaut32.dll_VarCyMul
call sub.oleaut32.dll_VarCyMul
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.oleaut32.dll_VarCyMul
call sub.oleaut32.dll_VarCyMul
ret
mov edi, edx
or edi, edx
or edi, ebx
or edi, edx
sub ebx, ecx
and ebx, edx
and ecx, edi
and edi, ebx
call sub.kernel32.dll_GetSystemDefaultUILanguage
mov edx, 0x2206e5aa
xor ebx, 0x220776f8
and edi, ebx
shl ebx, 0x1b
cmp eax, 0xffffff37
jne 0x40127c
call sub.oleaut32.dll_VarCyMul
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.kernel32.dll_ReleaseSemaphore
call sub.oleaut32.dll_VarCyMul
call sub.oleaut32.dll_VarCyMul
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.kernel32.dll_ReleaseSemaphore
call sub.kernel32.dll_ReleaseSemaphore
call sub.advapi32.dll_GetSecurityDescriptorOwner
call sub.oleaut32.dll_VarCyMul
call sub.user32.dll_SetLastErrorEx
call sub.user32.dll_SetLastErrorEx
call sub.kernel32.dll_ReleaseSemaphore
call sub.oleaut32.dll_VarCyMul
call sub.oleaut32.dll_VarCyMul
call sub.user32.dll_SetLastErrorEx
call sub.user32.dll_SetLastErrorEx
call sub.kernel32.dll_ReleaseSemaphore
call sub.user32.dll_SetLastErrorEx
call sub.oleaut32.dll_VarCyMul
call sub.user32.dll_SetLastErrorEx
ret
jmp 0x4941fa
rol ebx, 0x1c
or edx, ebx
or ebx, ecx
ror ecx, 0xd
jmp 0x4944e9
push 0x22cd5873
and ecx, esi
xor edx, edi
dec ecx
or ecx, edi
mov edi, ecx
mov ecx, edi
sub edi, esi
sub ecx, esi
add edi, esi
jmp 0x494f3d
push 0x22a72de8
rol edx, 0x1b
or ecx, edx
add esi, ecx
and edx, 0x267abec4
inc esi
mov edi, edx
add edi, 0x267c9e67
xor edi, ecx
and edi, 0x267dbdff
and ecx, edx
add edx, ecx
ror ecx, 0x16
jmp 0x4967ed
pop ebx
add edi, 0x2688ad21
and edx, 0x26895871
or edx, ecx
sub ecx, edi
shr ecx, 0x19
shr edi, 0x19
xor edi, ecx
xor ecx, esi
and ecx, 0x268df3c0
jmp 0x496cf2
call ebx
xchg edx, edi
neg esi
add esi, edx
xchg edx, edi
inc edx
add esi, 0x26bd2e3c
xchg esi, edi
jmp 0x496254
pop ebx
sub edi, 0x26c2c2f1
inc edx
and esi, 0x26c3faf7
xor edi, ecx
jmp 0x496531
call fcn.00497738
sub edi, ecx
neg edi
add ecx, esi
inc esi
sub ecx, edx
and ecx, edi
and esi, ecx
shl edx, 2
xor ecx, edx
add edi, esi
mov ecx, esi
jmp 0x496c1a
call fcn.00497738
rol edi, 0x11
xor ecx, edx
sub esi, edi
add edx, esi
xchg ecx, esi
xchg edx, edi
jmp 0x49598f
push 0x22a6a598
xor edi, esi
neg edx
mov ecx, 0x26f4bfe1
rol edx, 0x11
dec ecx
xchg edi, esi
or edi, edx
mov edx, 0x26f7a570
and esi, edx
xchg edx, ecx
xor edx, edi
mov ecx, esi
xchg edx, ecx
mov esi, ecx
jmp 0x49423f
call fcn.00497738
neg edi
or edx, esi
and esi, 0x2737d45f
sub esi, edx
dec edi
xor edx, edi
and ecx, 0x273a51ce
add ecx, esi
jmp 0x496e42
pop ebx
xor esi, edi
add esi, ecx
and ecx, edi
not esi
or edx, ecx
add esi, ecx
xor edi, ecx
rol ecx, 0x1a
jmp 0x495144
pop ebx
mov esi, 0x274a801f
or edi, ecx
or edi, edx
and edi, edx
mov esi, ecx
xor edx, esi
xchg edi, edx
mov ecx, edx
xor ecx, 0x274fcf5b
sub edi, esi
dec esi
dec esi
rol ecx, 0x1c
and edi, esi
jmp 0x49667c
mov ebx, 0x4132136a
nop
or edi, edx
xor edx, esi
xor ecx, edi
ror ecx, 0x1f
shr edi, 0x15
dec esi
ror edx, 0xc
sub ecx, edx
xor ecx, esi
shl edx, 3
jmp 0x497346
push 0x22b23b86
or edi, edx
not ecx
xchg esi, edi
sub esi, edi
add ecx, 0x27821fcb
shr edx, 0x1d
sub esi, edi
and edi, edx
or esi, ecx
jmp 0x49766e
call fcn.00497738
sub ecx, esi
shr ecx, 3
xor ecx, esi
sub esi, edx
jmp 0x4948fd
pop ebx
xchg esi, edi
dec ecx
and ecx, esi
shl edi, 0xa
xor esi, ecx
xor ecx, 0x2792415d
mov edx, 0x279326e1
jmp 0x49731b
pop ebx
dec edi
and ecx, esi
shr edi, 0x1c
add ecx, 0x27a7418a
neg edx
mov esi, ecx
shl edi, 2
inc esi
jmp 0x4953bf
call fcn.00497738
xchg edx, ecx
mov ecx, edi
add esi, 0x27abb9d8
neg edi
xor esi, ecx
bswap edx
jmp 0x4943a9
call ebx
or edx, 0x27b3d973
neg ecx
not edx
sub ecx, 0x27b5ce26
and ecx, 0x27b66256
ror edx, 0x10
mov esi, ecx
jmp 0x4949d3
pop ebx
xchg edx, edi
add ecx, 0x27dca2a4
xchg edx, ecx
mov edi, edx
sub esi, edx
jmp 0x494224
pop ebx
and edi, ecx
add edx, esi
and esi, edi
inc edi
and esi, edx
and ecx, edx
xor edi, ecx
add ecx, edx
and ecx, 0x27eabe9e
xor edi, esi
and edi, esi
ror edx, 0x1d
rol ecx, 7
xor edi, esi
mov esi, 0x27eedf56
jmp 0x497544
call ebx
xchg esi, edx
and edx, 0x2805617e
sub esi, edi
mov ecx, esi
shl edi, 0x10
sub edi, edx
xor edx, esi
add ecx, esi
xor edi, 0x280a8e05
add edx, esi
and edi, edx
not edi
add edi, edx
jmp 0x496ef8
push 0x22d8e7e3
xchg edi, edx
mov edx, esi
rol esi, 0x16
sub edi, edx
sub edx, esi
not ecx
sub ecx, 0x28272db5
add edi, esi
add ecx, edx
add esi, edx
sub esi, ecx
jmp 0x4954ea
call ebx
add edx, edi
xor esi, ecx
and edi, esi
and edi, esi
xchg ecx, esi
add esi, 0x28490d0b
jmp 0x496d42
mov ebx, 0x75624153
add edx, ecx
ror esi, 0xd
xor edx, edi
xchg edx, ecx
not esi
sub ecx, 0x28675e49
mov edi, edx
xor edi, ecx
or edi, esi
sub esi, edx
not ecx
jmp 0x4948c3
push 0x401400
and edi, 0x286b6bd2
xor edi, 0x286bf5e5
xchg ecx, edx
ror ecx, 3
xor edi, esi
mov ecx, 0x286ed382
or edx, esi
and edi, 0x28701fa3
xchg edx, ecx
mov ecx, edx
xor edx, edi
jmp 0x496e2f
pop ebx
nop
mov esi, edi
or edx, 0x28821a43
or esi, 0x2882b1b9
xor edx, esi
and esi, edi
not edx
and edi, 0x28853530
jmp 0x4946d1
push 0x22b92c68
and ecx, 0x288e9f34
mov ecx, edi
or esi, ecx
add edi, ecx
xchg edx, edi
or esi, edi
or edi, 0x289286b8
sub ecx, edx
sub ecx, edi
shl esi, 0xd
jmp 0x496923
push 0x22d17369
shr edi, 2
mov edi, esi
and edx, 0x28b231ea
inc edi
rol edi, 0x10
or ecx, esi
shr ecx, 0x16
jmp 0x495ade
push 0x22ab055c
add edi, ecx
or ecx, edx
mov esi, edx
or edx, 0x28bf175a
bswap ecx
mov esi, edi
or ecx, 0x28c161f2
add esi, 0x28c209b0
and esi, 0x28c2b513
jmp 0x497029
push 0x22cdcd85
and ecx, esi
or edx, esi
add esi, edx
not edi
jmp 0x494f9a
mov ebx, 0x75624153
and edx, 0x28e1544c
xor edi, edx
or edi, 0x28e295dc
or edi, edx
xchg esi, edi
jmp 0x496311
push 0x22ce42df
mov edx, esi
mov edx, edi
xor edi, esi
xor edx, 0x28eee278
or esi, ecx
and edx, edi
mov edi, edx
shr edi, 0x1d
rol esi, 0xb
jmp 0x496b2b
push 0x22b5da89
xor esi, edi
and esi, edi
sub edx, 0x28f4324d
mov edx, esi
or edi, edx
mov edx, 0x28f621cc
shl edi, 6
and edi, edx
inc edi
ror esi, 8
shr ecx, 0x14
shr edx, 1
jmp 0x496959
push 0x22dc1699
shl edi, 0x10
add edx, 0x2925ae84
xchg edi, ecx
jmp fcn.00495e91
mov ebx, 0x2a371b56
xor edi, edx
rol ecx, 0x1d
mov esi, edi
neg edi
rol edi, 1
jmp 0x495e3f
pop ebx
sub edi, ecx
inc esi
rol edx, 3
ror esi, 4
add edi, 0x2935cc3f
xchg edi, edx
mov edx, 0x2936fc63
jmp 0x495dc6
pop ebx
xor esi, ecx
xchg edx, edi
xor edx, 0x2938e0b3
or esi, edx
xchg ecx, edx
and edi, ecx
add esi, edx
sub edi, edx
xor edi, 0x293c6fea
add esi, edi
neg edx
or edi, esi
jmp 0x495b10
mov ebx, 0x75624153
xchg ecx, edi
inc esi
mov ecx, 0x29511b78
neg edi
sub edx, esi
or esi, 0x2952fd22
shl ecx, 0xe
sub ecx, edx
bswap edx
mov edx, esi
jmp 0x49445f
push 0x22bd4291
mov ecx, edi
or esi, edi
add edx, ecx
xchg ecx, edi
or edx, 0x296bcf43
xor ecx, 0x296c8d66
and edi, esi
and ecx, 0x296de8e1
or edx, 0x296eacb9
jmp 0x494f4f
pop ebx
bswap ecx
and esi, 0x297346d7
inc edx
xor edx, 0x2974b946
or esi, 0x29758a62
xor edi, ecx
sub esi, ecx
xchg ecx, esi
rol edx, 0x13
and edx, ecx
xor edx, 0x29797c44
or esi, ecx
jmp 0x4950d7
mov ebx, 0x2a371b56
xchg ecx, edi
mov esi, 0x298f6635
not edx
shr edx, 0xb
xor esi, edi
ror ecx, 3
mov esi, edi
jmp 0x4944d2
push 0x22c135ba
bswap ecx
xchg esi, edi
or edi, esi
xchg esi, ecx
bswap edx
jmp 0x495927
push 0x92dfa
add ecx, esi
sub edx, 0x29978521
xor edi, ecx
not edx
shl edi, 1
mov esi, edi
sub edx, edi
sub edx, edi
sub ecx, edi
jmp 0x494c91
push 0x22bfed9a
or edx, edi
ror edx, 0x1f
mov esi, edi
or ecx, edi
bswap edi
xchg ecx, edx
inc edx
neg esi
jmp 0x496f6a
mov ebx, 0x75624153
xor ecx, edi
sub edx, ecx
ror esi, 0x18
xchg esi, edx
xor esi, edi
mov edi, 0x29c7a1f4
mov ecx, esi
xchg ecx, edx
or esi, 0x29c96102
jmp 0x496c4e
mov ebx, 0x75624153
rol edi, 0x11
and edi, ecx
bswap edi
xchg ecx, esi
shl edx, 0x18
add edx, edi
not ecx
xchg edi, esi
and esi, edx
and ecx, edi
sub edi, 0x29df7ce7
sub ecx, esi
jmp 0x496175
call fcn.00497738
and esi, edi
and edx, esi
mov edx, edi
jmp 0x4976bb
push 0x22b8bdc4
mov esi, edx
sub ecx, esi
inc ecx
xor edx, esi
mov edx, 0x29f9d409
shl edi, 0xb
or ecx, edi
ror edx, 0x1d
and esi, edi
add edx, ecx
mov edx, esi
or esi, edi
and esi, edx
jmp 0x494d53
push 0x22ae9b95
ror esi, 0xf
xchg edi, ecx
sub edx, 0x2a07eea1
xchg edi, edx
or edi, edx
xor esi, ecx
mov ecx, edx
sub esi, edi
mov ecx, 0x2a0b738d
shr esi, 0x1a
jmp 0x495e55
push 0x22bcdce3
xor edx, esi
dec edi
jmp 0x49526e
call ebx
not edi
sub edi, 0x2a2f01b8
mov edx, 0x2a2fa9c5
add edi, ecx
or edx, edi
mov edi, edx
and ecx, edi
jmp 0x4942a7
call ebx
sub ecx, edi
sub esi, 0x2a51d3b4
sub edx, edi
shl edi, 0x1f
add edx, esi
and edi, ecx
or ecx, edi
add edx, esi
mov esi, 0x2a573dc3
sub esi, edi
dec edi
jmp 0x495c65
mov ebx, 0x2a371b56
add esi, ecx
xor esi, edi
xchg ecx, edx
mov ecx, esi
nop
mov edx, edi
and edx, edi
dec esi
or edx, 0x2a5ea066
sub edi, edx
xor edx, edi
or edi, ecx
mov edi, 0x2a611b01
mov ecx, edi
jmp 0x494801
push 0x22c65d93
mov edi, 0x2a8f6a13
shl edx, 0x1b
neg edx
jmp 0x495b66
push 0x22c19ed9
neg esi
mov edi, edx
xor edi, edx
or esi, ecx
xor esi, 0x2a9f4398
and edx, 0x2a9fec5f
mov esi, edi
add edx, 0x2aa13e8d
xchg ecx, edx
jmp 0x4951c4
call ebx
xor esi, edx
sub edx, 0x2ab085d0
or esi, edi
not edx
or esi, 0x2ab22d1f
mov esi, 0x2ab2be1d
sub esi, edx
nop
or esi, 0x2ab48aa0
and ecx, edi
sub edi, esi
add edx, edi
or ecx, edx
shl edi, 6
jmp 0x496767
call ebx
xchg esi, edx
sub edx, 0x2abb80a9
add edx, 0x2abc1bb9
or edi, esi
shr edx, 0xe
shl esi, 0xc
inc edx
xchg esi, ecx
neg edi
or esi, edi
add edx, edi
xor edi, esi
or esi, edx
jmp 0x497325
mov ebx, 0x75624153
xchg esi, edx
shl ecx, 1
add ecx, esi
add edx, 0x2af42fb3
and ecx, edx
or edx, esi
inc edx
neg ecx
add esi, 0x2af811e9
xor esi, edi
or edi, 0x2af97d47
not edx
add esi, edx
mov esi, edi
jmp 0x49555a
push 0x22b57645
mov edx, 0x2afc44b5
mov edx, esi
or esi, edx
xchg esi, edx
xor esi, edi
shr edx, 0x1e
xor esi, 0x2b0049bd
add edi, edx
mov edx, ecx
xor ecx, esi
jmp 0x494fbc
pop ebx
and edi, edx
xor esi, edx
add edi, 0x2b095bf3
not edx
add edi, esi
mov edi, ecx
add edx, ecx
jmp 0x494833
push 0x22c6d867
or edx, esi
and ecx, edi
and ecx, edx
or esi, edi
dec edx
and esi, edx
and esi, 0x2b0eb218
mov edi, edx
jmp 0x496976
pop ebx
sub ecx, edi
or edx, esi
sub edx, edi
add esi, edi
and esi, edx
xor edx, 0x2b365006
xor ecx, edx
or ecx, edi
rol edx, 0xc
xor esi, 0x2b390820
jmp 0x4948a9
call fcn.00497738
add esi, ecx
ror ecx, 0x1e
neg edx
rol edi, 8
or ecx, 0x2b440fce
sub edi, esi
xchg edx, ecx
or edx, esi
dec edx
xor esi, 0x2b471915
jmp 0x494bdd
push 0x22b1d8aa
nop
inc ecx
add edi, 0x2b720fdc
sub edi, 0x2b72a8a4
and esi, edi
xchg edx, ecx
xor edi, edx
add esi, edx
ror esi, 4
sub edi, 0x2b767dee
xchg edi, ecx
xor esi, edx
jmp 0x4947e0
call fcn.00497738
xchg edi, esi
and edx, esi
add edx, edi
sub edx, 0x2b8b3db9
jmp 0x497241
push 0x22aefed9
sub esi, edi
xchg edi, esi
xor edx, ecx
mov ecx, esi
sub edx, esi
add edi, esi
or ecx, 0x2b8f6d73
sub edi, edx
not esi
jmp 0x495112
push 0x22c0cee5
sub esi, 0x2ba8dd35
rol edx, 0x1b
or ecx, 0x2baa15ec
and edx, 0x2baabbb1
add ecx, esi
shl edx, 0xd
rol ecx, 9
sub edi, 0x2bad6118
mov edx, 0x2badf260
add edi, edx
or edx, edi
mov ecx, edx
bswap esi
jmp 0x495358
pop ebx
xor esi, edi
mov ecx, edx
xor esi, edi
xchg esi, edx
and esi, edx
and ecx, edi
mov edx, esi
shl esi, 0xe
and edx, 0x2bb5dc85
neg esi
inc edi
jmp 0x49468c
pop ebx
or ecx, 0x2bb7e9d1
ror edi, 0x16
and edx, ecx
xor ecx, edx
xchg edx, edi
mov edx, esi
jmp 0x494e24
call fcn.00497738
ror ecx, 9
add edx, ecx
xchg edi, ecx
not edx
add edx, edi
dec edx
mov esi, 0x2bcfd64f
xor ecx, edi
shr ecx, 0x1f
add edx, 0x2bd0cb65
add esi, edi
rol edi, 0x17
xor esi, 0x2bd1ba7f
sub edx, esi
jmp 0x497561
pop ebx
xchg ecx, esi
xchg edx, edi
or edx, esi
not ecx
sub ecx, edi
xor edi, esi
mov ecx, esi
jmp 0x494d0e
push 0x22caf031
or edx, edi
or edx, esi
dec edi
add edi, 0x2c0649f5
mov edi, edx
sub esi, ecx
xchg edi, edx
xor edi, ecx
ror edi, 0x1a
sub edx, 0x2c0a497b
sub edx, edi
jmp 0x4957a1
call fcn.00497738
and esi, edx
xor ecx, edx
or edx, edi
mov edx, esi
inc edx
bswap ecx
mov ecx, 0x2c19de12
add edx, esi
add ecx, edi
jmp 0x494a8f
pop ebx
or edi, edx
xor esi, 0x2c37b070
and edi, edx
mov esi, edx
not ecx
rol edx, 7
and ecx, edi
xor esi, ecx
or ecx, 0x2c3c12d0
jmp 0x496ae0
call fcn.00497738
sub ecx, edx
or edi, ecx
rol ecx, 0x12
add esi, ecx
xor edi, edx
mov esi, edi
or ecx, 0x2c5ccca6
ror esi, 0x1a
mov esi, edx
xor esi, ecx
neg esi
sub edx, edi
jmp 0x49577d
pop ebx
add edi, edx
shl esi, 8
shr edx, 0xc
dec esi
sub edi, 0x2c60c773
xchg edi, ecx
or ecx, 0x2c616909
add ecx, esi
sub edi, esi
jmp 0x496b6a
pop ebx
sub edx, edi
xor ecx, 0x2c62f8ee
or esi, 0x2c639f49
bswap edx
sub edx, edi
inc edi
sub edx, ecx
add esi, edi
dec esi
or edi, esi
xor esi, edx
and edx, esi
jmp 0x495128
mov ebx, 0x75624153
xor ecx, edx
dec ecx
not edi
xchg edx, ecx
add ecx, esi
add edi, edx
add edx, esi
jmp 0x49466b
pop ebx
inc esi
add edx, esi
sub edi, esi
xchg edx, ecx
mov edx, ecx
dec esi
and edi, ecx
mov ecx, esi
neg edx
nop
add edi, 0x2cb93dd0
or ecx, edi
jmp 0x4974be
call fcn.00497738
ror edi, 0x1a
and ecx, esi
xor edx, 0x2cd6fc35
neg ecx
xchg ecx, edx
jmp 0x4956c2
pop ebx
or edx, 0x2ce1507b
add edx, ecx
neg edx
shl edx, 0x17
neg ecx
mov esi, ecx
mov edx, edi
add esi, ecx
shr ecx, 0x13
or edx, 0x2ce428d1
xchg ecx, esi
inc edx
bswap edx
xor ecx, edi
jmp 0x494a02
pop ebx
or ecx, edi
xchg ecx, edx
mov ecx, esi
or esi, edx
not edx
nop
mov esi, 0x2cf3d3c2
xor ecx, edx
not edi
xor esi, edi
shl edx, 0x16
xor edx, edi
bswap ecx
shl edx, 7
jmp 0x496111
pop ebx
xor edi, edx
xor edx, 0x2d1432f8
sub ecx, esi
mov edx, esi
xor edi, ecx
or ecx, esi
xchg ecx, edi
jmp 0x496a5a
pop ebx
neg ecx
mov edx, ecx
shr esi, 5
add edi, 0x2d1a0f52
xor ecx, 0x2d1aa389
xor edx, ecx
sub edi, esi
neg edi
xor edx, edi
or edi, esi
jmp 0x4969db
push 0x22a7a2c0
xor edi, esi
bswap esi
xor esi, edi
or edi, 0x2d3256c0
and ecx, edx
xchg edx, edi
and edi, ecx
add edx, ecx
add edi, edx
jmp 0x495475
pop ebx
xor edx, 0x2d534d8d
inc esi
xor esi, ecx
ror esi, 0x16
and edx, esi
and edi, edx
xor ecx, edx
and edi, esi
and edx, esi
and edi, esi
jmp 0x4976dc
pop ebx
and ecx, 0x2d5b67c9
xchg ecx, edi
sub edx, esi
mov ecx, edx
mov edx, 0x2d5ddac4
jmp 0x49635a
push 0x22d87174
xor edi, esi
neg esi
xor esi, ecx
sub edx, ecx
or edi, edx
ror edi, 7
and edi, ecx
jmp 0x494b2d
push 0x22b99203
and edi, ecx
xchg ecx, esi
add esi, edx
not esi
rol edi, 1
sub edi, edx
or ecx, edi
add edi, 0x2d6d59a7
xchg edi, edx
jmp 0x494c6c
mov ebx, 0x2a371b56
or edx, edi
add ecx, edx
shr edi, 0x17
xchg edi, edx
sub edi, esi
jmp 0x495fbc
mov ebx, 0x2a371b56
and esi, ecx
add edx, edi
or edx, edi
xor esi, edx
mov esi, edi
sub ecx, 0x2d75e7f4
rol esi, 0xb
jmp 0x495cac
push 0x22c74274
inc esi
xor edi, ecx
or esi, ecx
bswap edx
sub edx, esi
sub esi, ecx
and edx, ecx
or edi, 0x2d7c7b99
xor edx, ecx
xor ecx, 0x2d7dc947
and ecx, 0x2d7e65d3
jmp 0x496944
pop ebx
and edx, esi
and esi, edi
or ecx, edi
add edi, esi
mov ecx, edi
xor esi, edx
dec edi
shl edi, 0x11
jmp 0x4968aa
push 0x22b85356
inc edx
mov edx, edi
add edi, esi
mov ecx, 0x2da27319
sub edi, edx
and ecx, edi
and ecx, esi
and edx, edi
xor edi, 0x2da58c78
jmp 0x495595
pop ebx
sub esi, ecx
add esi, 0x2db9d5a7
and ecx, edx
jmp 0x496339
mov ebx, 0x2a371b56
rol edi, 0x19
xor edx, esi
sub ecx, 0x2dc302d5
rol esi, 0x1c
jmp 0x4965cb
pop ebx
mov ecx, edi
sub edi, edx
mov edx, ecx
sub esi, edx
add ecx, edx
sub edx, edi
xor ecx, esi
mov edx, 0x2dc9e83c
xchg esi, edx
or edx, ecx
or esi, edx
sub edx, esi
neg ecx
jmp 0x49560b
call ebx
sub ecx, esi
add edx, ecx
mov edx, edi
ror ecx, 0xa
sub edx, esi
xor ecx, esi
and edx, ecx
or edi, edx
jmp 0x495b4e
call fcn.00497738
add edx, edi
sub ecx, 0x2def1eba
or edx, 0x2defd700
sub edx, 0x2df06d43
jmp 0x4959c1
pop ebx
mov esi, edi
neg ecx
mov edx, esi
sub ecx, edi
ror edi, 0x11
nop
or edi, 0x2e0dd0ca
xchg edx, esi
not edx
sub ecx, esi
jmp 0x495f4a
pop ebx
sub esi, ecx
mov edx, 0x2e1a9a08
jmp 0x49674f
call ebx
or ecx, edx
sub ecx, 0x2e446fe5
xchg edx, esi
add edi, edx
jmp 0x49729c
call ebx
sub edi, edx
mov edi, 0x2e46f3fc
add ecx, 0x2e47a996
mov edi, 0x2e485d97
xor ecx, esi
jmp 0x495f2a
pop ebx
or ecx, edx
add edi, esi
xor esi, ecx
inc edx
mov esi, ecx
sub edx, edi
add esi, ecx
rol esi, 0x19
or edi, ecx
shl edi, 0x10
or ecx, edi
xchg esi, ecx
jmp 0x497199
push 0x40
neg edi
rol ecx, 2
and edx, 0x2e6bf680
neg ecx
sub edi, 0x2e6d44c0
and edi, esi
mov esi, edx
mov edi, ecx
and esi, edx
jmp 0x49536c
push 0x22c05b45
or ecx, edx
rol ecx, 0x12
neg ecx
xor esi, 0x2e7b8de6
inc edx
shr ecx, 0x10
add edi, 0x2e7da846
sub esi, edi
or edx, edi
mov ecx, 0x2e7fb55c
bswap edx
jmp 0x495ef0
push 0x22ab6925
xor ecx, esi
add edx, 0x2e995f43
sub edx, 0x2e99f7f7
dec ecx
or edx, edi
sub edx, edi
sub esi, ecx
neg edx
or edx, edi
shr ecx, 7
or ecx, 0x2e9f0f11
jmp 0x49533b
push esp
xor esi, ecx
or esi, edi
and ecx, esi
xchg esi, edi
mov edx, esi
neg edx
sub esi, edx
bswap esi
dec esi
ror ecx, 0x1e
xchg edi, edx
jmp 0x497631
pop ebx
mov ecx, esi
dec edi
neg edi
inc ecx
and esi, 0x2ed69df6
mov esi, edx
neg esi
inc edi
jmp 0x4947be
pop ebx
add ecx, esi
xchg edx, ecx
xor ecx, edx
sub edx, edi
xchg ecx, edx
xor edi, 0x2ee2098c
mov edi, edx
not edx
rol edx, 0x14
jmp 0x4952a9
call ebx
and edi, esi
mov ecx, esi
sub esi, edx
xchg esi, edx
xchg ecx, edx
mov ecx, esi
and esi, ecx
xor ecx, esi
jmp 0x4968d6
pop ebx
xchg ecx, edi
sub edx, esi
ror edx, 0x18
xor edx, ecx
and esi, edx
or edx, esi
sub esi, ecx
bswap ecx
rol ecx, 7
ror edi, 0xb
not edx
sub edx, 0x2f169c22
jmp 0x4975a7
pop ebx
and edx, edi
add edi, esi
jmp 0x4943d9
pop ebx
add ecx, 0x2f282586
xchg edx, ecx
mov edi, ecx
and edx, 0x2f29f87a
and ecx, esi
or edi, esi
xchg edi, esi
xchg ecx, edx
add esi, edi
inc esi
jmp 0x49661b
call fcn.00497738
neg edi
xchg edi, esi
ror edx, 0x12
mov edi, esi
xchg edx, esi
shl esi, 0xc
xor ecx, 0x2f331f85
and ecx, esi
shl edx, 2
sub esi, edx
jmp 0x49711f
push 0x22c5e02a
dec edi
or edi, ecx
sub esi, edx
xchg ecx, esi
jmp 0x4958db
push 0x22aa9507
neg edx
sub edx, ecx
sub edi, ecx
or esi, edi
xchg edx, ecx
mov esi, 0x2fe81a43
xchg edi, esi
and edi, edx
jmp 0x494e6e
call ebx
mov esi, ecx
or ecx, 0x2feab50f
mov esi, 0x2feb47c0
shl edx, 0x14
or edi, esi
and edi, edx
jmp 0x496013
push 0x22d80741
mov esi, 0x2ff51de8
add edx, 0x2ff5b781
xchg edx, esi
xor edx, ecx
shl edi, 0x1d
shl esi, 0x18
sub edx, edi
rol edi, 0x1e
add edi, 0x2ffa26dd
neg edi
jmp 0x49690a
push esp
or ecx, edi
xor esi, edi
rol edx, 0xe
sub edx, ecx
neg edx
jmp 0x496f17
push 0x22b29c4c
sub edi, 0x30cd4d08
xchg ecx, edi
inc esi
shr edi, 0x18
jmp 0x49646f
call ebx
and edi, esi
shr edi, 0xc
or ecx, edx
or edi, ecx
mov esi, ecx
shr edi, 0x1a
and ecx, 0x30dbed12
or esi, edi
neg esi
add edi, ecx
jmp 0x497162
push 0x22ae335d
sub edx, ecx
xor edx, ecx
mov edi, 0x30de9b9e
xchg edx, esi
dec edx
bswap ecx
dec edi
xchg esi, ecx
ror edx, 0x10
mov edi, edx
neg edx
add edx, ecx
bswap edx
add ecx, esi
add esi, edx
jmp 0x4955e4