Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
or edx, ecx
xchg ecx, edi
inc ecx
add esi, 0xac8d8d07
and edx, esi
sub edi, esi
call sub.kernel32.dll_GetCurrentProcess
or ecx, edi
inc edi
or edi, 0xac8f4777
or ecx, esi
cmp eax, 0xffffff1b
jne 0x401080
call sub.ole32.dll_RegisterDragDrop
call sub.advapi32.dll_ElfReportEventW
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.advapi32.dll_ElfReportEventW
call sub.advapi32.dll_ElfReportEventW
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.kernel32.dll_GetOverlappedResult
call sub.advapi32.dll_ElfReportEventW
call sub.kernel32.dll_GetOverlappedResult
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ole32.dll_RegisterDragDrop
call sub.ole32.dll_RegisterDragDrop
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ole32.dll_RegisterDragDrop
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.kernel32.dll_GetOverlappedResult
ret
sub edx, 0xac9155bf
xor edx, ecx
ror edi, 0x10
call sub.kernel32.dll_GetCurrentProcess
and edi, edx
and edi, esi
sub edx, ecx
xchg edi, ecx
and ecx, esi
add ecx, edi
add edx, edi
cmp eax, 0xfffffef4
jne 0x401131
call sub.kernel32.dll_GetOverlappedResult
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.kernel32.dll_GetOverlappedResult
call sub.advapi32.dll_ElfReportEventW
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.advapi32.dll_ElfReportEventW
call sub.kernel32.dll_GetOverlappedResult
call sub.kernel32.dll_GetOverlappedResult
call sub.ole32.dll_RegisterDragDrop
call sub.advapi32.dll_ElfReportEventW
call sub.advapi32.dll_ElfReportEventW
call sub.ole32.dll_RegisterDragDrop
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.kernel32.dll_GetOverlappedResult
call sub.kernel32.dll_GetOverlappedResult
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.kernel32.dll_GetOverlappedResult
call sub.advapi32.dll_ElfReportEventW
call sub.kernel32.dll_GetOverlappedResult
call sub.kernel32.dll_GetOverlappedResult
call sub.ole32.dll_RegisterDragDrop
call sub.kernel32.dll_GetOverlappedResult
ret
sub ecx, esi
xchg edi, edx
and edx, edi
and edi, 0xac97ad4e
and edi, ecx
call sub.kernel32.dll_GetCurrentProcess
not ecx
neg esi
xor edi, edx
bswap esi
not edx
and edx, ecx
mov ecx, esi
cmp eax, 0xffffff38
jne 0x4011c2
call sub.ole32.dll_RegisterDragDrop
call sub.advapi32.dll_ElfReportEventW
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.advapi32.dll_ElfReportEventW
call sub.kernel32.dll_GetOverlappedResult
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.kernel32.dll_GetOverlappedResult
call sub.ole32.dll_RegisterDragDrop
call sub.ole32.dll_RegisterDragDrop
call sub.advapi32.dll_ElfReportEventW
call sub.kernel32.dll_GetOverlappedResult
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.kernel32.dll_GetOverlappedResult
call sub.advapi32.dll_ElfReportEventW
call sub.ole32.dll_RegisterDragDrop
call sub.advapi32.dll_ElfReportEventW
call sub.ole32.dll_RegisterDragDrop
call sub.kernel32.dll_GetOverlappedResult
call sub.ntdll.dll_RtlTraceDatabaseAdd
ret
rol edi, 0x1b
or ecx, edx
xchg edi, edx
call sub.kernel32.dll_GetCurrentThread
not edi
xchg ecx, esi
xor edi, ecx
not edi
xor edx, 0xac9e9068
mov ecx, esi
rol ecx, 9
cmp eax, 0xffffff11
jne 0x401251
call sub.advapi32.dll_ElfReportEventW
call sub.kernel32.dll_GetOverlappedResult
call sub.kernel32.dll_GetOverlappedResult
call sub.kernel32.dll_GetOverlappedResult
call sub.advapi32.dll_ElfReportEventW
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.kernel32.dll_GetOverlappedResult
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.kernel32.dll_GetOverlappedResult
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.advapi32.dll_ElfReportEventW
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.ole32.dll_RegisterDragDrop
call sub.advapi32.dll_ElfReportEventW
call sub.ole32.dll_RegisterDragDrop
call sub.ole32.dll_RegisterDragDrop
call sub.ntdll.dll_RtlTraceDatabaseAdd
call sub.kernel32.dll_GetOverlappedResult
call sub.ole32.dll_RegisterDragDrop
ret
jmp 0x49421b
shr ecx, 5
neg edi
sub edi, 0xad1f89ca
sub edx, edi
and esi, edx
mov edi, esi
jmp 0x495066
push 0xad260d55
add ecx, edx
and edx, esi
or edi, 0xb07921c5
shr edx, 5
jmp 0x49469d
pop ebx
shr ecx, 0x1d
add esi, edx
shr edx, 0x10
xor ecx, edi
or ecx, 0xb0811e01
and esi, ecx
sub edx, esi
sub edi, edx
neg esi
not esi
jmp 0x496af2
pop ebx
add edi, ecx
not esi
sub edx, 0xb0a2dc1e
rol edx, 6
xor edi, ecx
sub ecx, edx
or esi, ecx
and ecx, edi
and edi, 0xb0a4b814
jmp 0x495a08
pop ebx
bswap esi
xchg edx, ecx
ror esi, 0x16
shl esi, 0x19
not ecx
bswap ecx
and edx, 0xb0ab7ad5
add ecx, 0xb0abcc0e
add esi, edx
xchg edx, edi
jmp 0x4955c0
pop ebx
rol esi, 0x16
mov edi, 0xb0afdd26
add edi, esi
inc edi
add edx, esi
xor edx, edi
ror esi, 0x16
sub edx, edi
or esi, edx
jmp 0x495737
mov ebx, 0x3f4d7907
dec esi
or ecx, edx
and edx, 0xb0b31e93
add edi, ecx
sub esi, edx
or esi, edx
add edi, ecx
sub edx, 0xb0b4abaa
bswap ecx
jmp 0x496761
call ebx
xchg esi, edi
and edi, 0xb0bbc658
xchg edi, ecx
rol esi, 0x10
bswap ecx
jmp 0x4966f6
push 0xad27a3e9
xchg edx, esi
or edi, ecx
and edi, edx
add esi, edx
or ecx, edi
or edi, ecx
rol edx, 0x1f
add edi, esi
and ecx, esi
xor edi, edx
and edx, esi
xchg ecx, edi
mov edi, esi
neg ecx
jmp 0x494ffb
pop ebx
add esi, edi
mov edi, ecx
or edx, 0xb0ce4046
and ecx, edi
xchg esi, ecx
mov esi, ecx
jmp 0x4960b2
call fcn.00494d2c
xor ecx, edi
sub edi, 0xb0d000a3
shr edi, 0x19
shl edi, 0x1f
jmp 0x496c58
pop ebx
xchg edi, edx
not ecx
add ecx, edx
jmp 0x496a93
mov ebx, 0x6332a2e
dec esi
shr esi, 0x17
neg edx
bswap edx
add edx, ecx
sub edx, 0xb0e0e3ac
jmp 0x496a1d
call ebx
add ecx, edx
add ecx, esi
sub esi, edi
bswap esi
dec edx
xchg ecx, edx
and edx, 0xb0e967fe
or ecx, edi
neg ecx
mov esi, edx
sub ecx, edx
jmp 0x49543e
pop ebx
inc ecx
xor edx, edi
shr ecx, 0x10
not ecx
or ecx, edx
xor edi, edx
shr esi, 0x1b
or edi, ecx
jmp 0x4953a0
pop ebx
add esi, 0xb10052f5
shr edi, 0x1b
mov esi, 0xb100f675
neg esi
mov esi, edi
sub edi, esi
bswap edi
and edi, esi
sub ecx, esi
or esi, 0xb103371b
xchg ecx, edi
bswap esi
sub edx, esi
jmp 0x495a84
push 0xad32795e
and esi, edi
xchg ecx, edi
or esi, ecx
or edx, esi
mov ecx, edi
add edx, edi
or edi, 0xb10906db
xchg edx, ecx
rol edi, 0x1d
xor ecx, edx
xor edx, edi
sub edi, ecx
and esi, ecx
add edi, esi
xchg edi, edx
shl ecx, 0x1a
jmp 0x49676f
push 0xad351a91
xor edi, 0xb10c48af
rol edx, 1
sub ecx, edi
add esi, ecx
rol esi, 0x16
jmp 0x49559e
push 0xad4324c2
or esi, 0xb10e024f
add edi, 0xb10e5416
sub edx, ecx
add edi, esi
or edx, esi
xchg ecx, edx
and edx, edi
and ecx, edi
inc edx
add edx, 0xb110dbc9
and ecx, esi
and ecx, esi
or esi, edi
jmp 0x496895
pop ebx
sub edi, esi
shr edx, 3
xor edi, 0xb11ae666
xchg edi, esi
or edx, esi
or edx, esi
and ecx, 0xb11c3062
jmp 0x4952be
pop ebx
inc edx
mov edi, 0xb12488c9
inc edx
add edi, edx
dec esi
add edi, ecx
or edi, ecx
add ecx, edi
ror edi, 5
add esi, edi
and edi, edx
and esi, ecx
xchg edx, edi
dec edi
jmp 0x49509e
pop ebx
xor esi, edi
add ecx, 0xb134b58c
add edx, 0xb13504b7
sub ecx, esi
or edx, edi
add edi, 0xb135feb1
jmp 0x49580b
mov ebx, 0x3f4d7907
xor ecx, edi
xchg edi, esi
inc edx
or edx, edi
add edx, 0xb13e96c3
xchg edx, ecx
add edi, ecx
sub esi, edi
add edx, edi
or esi, edx
sub edi, ecx
xchg edi, esi
and edx, ecx
jmp 0x495a5d
pop ebx
and esi, edx
not edi
and ecx, edx
add ecx, edx
xchg ecx, edi
bswap ecx
xor ecx, edx
mov edi, esi
xor ecx, esi
jmp 0x494dc9
push 0xad2a402e
mov esi, edx
shl edx, 0x10
or esi, edi
or ecx, esi
or edi, edx
dec edx
shr edx, 0x17
add ecx, esi
jmp 0x494a87
push 0xad37bfef
or edi, edx
xchg edx, esi
nop
jmp 0x496539
push 0xad3df290
or edi, 0xb157365d
xchg edi, ecx
shr ecx, 0x16
shr esi, 3
inc edx
add esi, ecx
xchg edi, ecx
and edx, 0xb1597669
xor edx, edi
xchg ecx, edx
add edx, esi
bswap edx
jmp 0x495107
push 0xad37514a
add esi, 0xb15c0b04
not edi
add ecx, edi
and ecx, 0xb15cf840
sub edx, edi
or ecx, edx
or esi, ecx
sub esi, 0xb15e376a
bswap edx
xor ecx, esi
sub edx, esi
xchg ecx, esi
jmp 0x496f39
pop ebx
sub edi, edx
xor edi, ecx
xor ecx, 0xb1642d11
and edi, edx
mov ecx, edi
not esi
and esi, ecx
or edi, ecx
and esi, 0xb16612b5
mov edi, 0xb16662c1
jmp 0x496516
push 0xad42c88b
inc ecx
xchg edx, ecx
xor esi, edi
sub edi, 0xb177ca7d
sub ecx, edi
xor edi, edx
and esi, ecx
or ecx, edx
neg ecx
or ecx, edi
add ecx, 0xb17a037b
xchg esi, edx
xor ecx, edx
jmp 0x494895
pop ebx
add esi, edi
mov ecx, edx
and esi, edi
dec edi
and ecx, esi
sub esi, 0xb18e6518
and esi, edx
xor edi, 0xb18f0e4f
dec edx
and edi, 0xb18fb597
inc ecx
or ecx, edx
sub edx, esi
xor edi, 0xb190f593
or edx, 0xb1914487
jmp 0x494f96
pop ebx
or edx, esi
shl edx, 0x16
sub ecx, edi
sub ecx, edi
xchg esi, edi
sub edi, ecx
ror esi, 0x16
bswap edi
and esi, edi
neg esi
shl esi, 0xc
neg edx
and ecx, esi
xchg edx, edi
jmp 0x49553f
push 0xad3718f2
shr esi, 0x19
mov edi, edx
add edi, edx
or edi, 0xb1aeb464
dec edx
mov ecx, 0xb1af7bdc
add edx, 0xb1afccc2
xchg esi, edi
inc edi
mov esi, ecx
or edx, esi
mov esi, edi
or edi, ecx
add esi, ecx
xor edi, edx
jmp 0x494bbd
push 0xad28126e
or esi, edi
xchg edx, ecx
and ecx, esi
or edx, esi
and ecx, edi
sub ecx, 0xb1b44663
add edi, esi
sub edx, ecx
xor esi, ecx
jmp 0x4963ec
pop ebx
xchg ecx, edx
mov esi, edi
add edx, esi
sub ecx, edx
mov edi, 0xb1b8a9e4
jmp 0x4943fb
push 0xad27db19
sub edi, ecx
xchg esi, ecx
shl edi, 0x11
or esi, ecx
bswap edi
xchg esi, ecx
and edx, ecx
xor esi, ecx
or edi, edx
and edx, ecx
add edx, esi
or edi, edx
rol ecx, 0xf
or ecx, 0xb1c3f817
jmp 0x494f62
push 0xad2589a8
xor esi, 0xb1c9175a
add edi, 0xb1c9661f
xchg ecx, edx
and edx, ecx
xor edx, ecx
jmp 0x49663c
pop ebx
or esi, ecx
neg edx
inc esi
and edi, esi
ror edi, 6
ror edi, 0xa
or esi, edi
or esi, edi
rol ecx, 0x1b
neg ecx
xor esi, 0xb1d10d13
shl edi, 0x12
mov esi, 0xb1d1af67
jmp 0x496ca9
push 0xad3e4a8a
mov edi, edx
sub edi, edx
add edx, 0xb1d7b698
sub esi, edx
mov edi, 0xb1d8649a
mov edx, ecx
xor esi, ecx
shl edx, 6
add edx, ecx
shr esi, 0x10
jmp 0x495b4a
push 0xad32e40b
and edi, 0xb1dc6638
and edx, 0xb1dcc55a
ror edi, 0x13
add edi, ecx
sub edx, edi
and edx, esi
jmp 0x49593c
pop ebx
mov esi, ecx
or ecx, edi
inc esi
sub edi, 0xb1faa857
xor ecx, edx
jmp 0x495777
pop ebx
add edx, esi
mov edx, esi
sub ecx, esi
jmp 0x494e58
call ebx
and ecx, 0xb1fc725a
neg esi
not esi
xchg ecx, esi
mov edi, esi
mov edi, 0xb1fe063d
ror ecx, 4
shl ecx, 2
sub edi, esi
mov ecx, edi
or ecx, edi
mov edx, ecx
and ecx, edx
jmp 0x4952ab
push 0xad2a089a
or esi, ecx
neg edx
sub ecx, esi
xor esi, edi
sub ecx, edi
sub esi, edx
xor edx, 0xb203fccc
xor edi, 0xb2044eb3
jmp 0x494b1d
call ebx
and edx, ecx
xchg edx, edi
neg esi
and edx, edi
bswap edi
sub ecx, esi
mov ecx, edi
mov edi, edx
jmp 0x4945cc
pop ebx
or edx, esi
mov edx, esi
and esi, ecx
or esi, ecx
add ecx, esi
xor edx, ecx
sub edx, esi
xor edi, 0xb21089cd
or esi, ecx
jmp 0x4968c5
pop ebx
add edi, ecx
and edx, ecx
or edi, edx
ror edi, 0x1e
xor edi, 0xb212837e
sub esi, edi
not esi
mov esi, 0xb21381ec
add esi, 0xb213d0ad
or edi, 0xb2142230
neg esi
sub esi, 0xb214c62b
mov edi, esi
jmp 0x496cf4
pop ebx
rol edx, 9
mov edx, edi
xchg ecx, esi
rol ecx, 0x13
or ecx, edi
add ecx, 0xb2171412
and ecx, edx
add edx, edi
add edx, 0xb2180dd6
add esi, 0xb2185c86
and edx, esi
mov ecx, edx
shr ecx, 0x11
jmp 0x494c12
push 0xad29d316
mov esi, edi
and esi, edi
not esi
mov ecx, edx
xchg esi, ecx
neg ecx
add esi, ecx
bswap ecx
mov edx, 0xb21c4377
jmp 0x49530b
pop ebx
add edi, esi
xor esi, edx
sub edi, 0xb21d4bbb
sub esi, edx
sub esi, 0xb21dea5e
sub edi, ecx
bswap edx
add esi, edi
not ecx
or edx, edi
xor esi, ecx
jmp 0x49448d
push 0xad2eb954
ror esi, 0x1c
inc edx
dec ecx
and esi, edi
mov edi, ecx
mov edi, ecx
add edi, esi
and ecx, esi
add esi, 0xb228699f
sub ecx, 0xb228bd3f
not edx
mov edi, 0xb2295ee8
jmp 0x496ba1
call fcn.00494d2c
and edi, esi
bswap esi
not ecx
xor edi, esi
sub edx, ecx
sub edx, esi
mov esi, edi
sub edi, 0xb22dcd28
add edx, ecx
jmp 0x495b05
push 0xad2e10f0
or edx, 0xb234f9a1
add esi, edi
xor ecx, 0xb2359b49
inc edi
not edx
xchg esi, edi
add esi, 0xb236e257
sub edi, esi
dec edx
jmp 0x4963ad
call ebx
sub edx, esi
sub esi, edx
xor ecx, edi
add edi, ecx
neg edx
sub edx, edi
ror edi, 0x14
and ecx, esi
and ecx, edx
jmp 0x494a1d
push 0xad355373
xor edi, 0xb23e527e
mov edi, esi
or edi, esi
dec edi
rol edi, 0xe
and ecx, esi
sub edi, esi
nop
mov edx, 0xb240e560
jmp 0x4959e7
pop ebx
and esi, 0xb2415662
add esi, edi
and esi, 0xb24202b7
mov esi, edx
rol edx, 0x11
xor esi, ecx
add ecx, edi
nop
and edi, edx
and esi, ecx
jmp fcn.00494d55
call ebx
xor edx, 0xb2449ed9
inc ecx
sub edi, esi
mov ecx, edi
or edi, edx
or edi, 0xb2463008
and ecx, esi
neg ecx
add edx, edi
xor edx, edi
or esi, edx
jmp 0x494917
call fcn.00494d2c
and esi, ecx
mov edx, esi
or esi, edi
xor esi, edx
shl edi, 0xd
not edi
not ecx
shl ecx, 0x18
dec edi
add edx, ecx
add ecx, edi
jmp 0x494512
push 0xad2c7c23
or edi, edx
sub esi, edi
mov esi, edi
xchg ecx, edi
xor edx, ecx
inc edx
rol esi, 0x11
mov ecx, edi
shr esi, 0x14
bswap edx
mov esi, edi
sub ecx, edi
jmp 0x4944a9
pop ebx
add edi, esi
mov edi, 0xb25ce81c
mov edx, 0xb25d3bb2
mov edi, 0xb25d8d7a
and esi, ecx
or edx, esi
rol edx, 0x1b
nop
jmp 0x496b72
pop ebx
sub ecx, 0xb265303a
shr esi, 8
dec edi
neg edi
add esi, edi
and edx, esi
shl esi, 0x1a
xor edx, 0xb267790a
sub edi, 0xb267cc2a
and esi, ecx
add esi, ecx
xchg esi, edx
jmp 0x494633
push 0xad32088f
sub ecx, edi
xchg edi, esi
mov ecx, edx
add esi, ecx
dec edx
add esi, ecx
dec ecx
or edx, esi
or ecx, edi
not ecx
add edi, edx
or esi, ecx
and edx, ecx
jmp 0x495e10
push 0xad2c4497
and esi, edx
mov edx, esi
add edi, 0xb2741420
mov edx, 0xb27467be
sub ecx, edx
or edi, esi
shr esi, 0x14
sub ecx, edi
and ecx, esi
and ecx, edx
xchg ecx, edi
shl esi, 0x12
mov edi, esi
and edi, ecx
jmp 0x49567c
pop ebx
xor edi, 0xb27ed726
or ecx, 0xb27f2972
xor ecx, 0xb27f7b5c
and esi, edi
or ecx, esi
and edx, edi
and edx, ecx
xchg ecx, edi
or edx, edi
mov edx, edi
or edi, 0xb28201f1
rol ecx, 0x1b
or edx, esi
xor esi, 0xb282f796
sub ecx, 0xb28349e8
jmp 0x496c2a
push 0xad428f8d
add edx, ecx
sub esi, edi
and edx, 0xb284641e
jmp 0x494cdd
mov ebx, 0x6332a2e
and ecx, esi
sub edi, ecx
mov edx, ecx
xor edx, esi
bswap esi
and ecx, edi
inc ecx
xchg edx, esi
rol ecx, 0x12
or edx, edi
sub edx, ecx
or ecx, 0xb28e027d
and edx, edi
mov edi, edx
xor ecx, edi
ror ecx, 0x1f
jmp 0x4945e2
push 0xad30ed7c
neg ecx
add edx, esi
sub edx, 0xb292567b
rol edx, 0xb
sub ecx, 0xb292fd50
xchg ecx, edx
and edx, ecx
bswap esi
mov esi, 0xb2944adf
xchg edx, esi
dec edx
jmp 0x4969fa
mov ebx, 0x6332a2e
not edx
or ecx, 0xb299027f
or ecx, edi
inc ecx
or edx, 0xb299f75f
or edx, 0xb29a496d
and ecx, esi
or ecx, esi
and edx, ecx
xchg edx, ecx
jmp 0x4969b3
mov ebx, 0x3f4d7907
xchg ecx, edx
mov edi, 0xb2a7d449
bswap esi
inc esi
or ecx, edi
inc ecx
xchg edi, ecx
add edi, esi
sub edx, edi
add edi, edx
sub edi, ecx
jmp 0x4954cc
pop ebx
and edx, edi
and edi, edx
xchg edx, edi
mov esi, ecx
mov esi, edx
ror edi, 0x18
mov esi, ecx
shr ecx, 6
and edx, 0xb2adae80
xor edx, edi
jmp 0x495ee4
call ebx
add ecx, edi
add edx, 0xb2aebac3
xor ecx, esi
not ecx
or ecx, esi
and esi, ecx
mov edi, 0xb2b04fda
mov edx, 0xb2b0a1be
neg edi
sub edx, esi
and ecx, edx
xor edi, edx
or edi, ecx
and esi, edx
add edi, esi
and esi, 0xb2b32b14
jmp 0x494adb
call fcn.00494d2c
or ecx, edi
dec edi
sub edi, edx
shl ecx, 0x1d
shl esi, 3
ror esi, 0x12
xor edi, edx
ror edx, 2
add esi, 0xb2b62c5f
and edx, edi
sub ecx, edx
jmp 0x495b89
pop ebx
add edi, edx
xchg ecx, edi
mov esi, 0xb2b7d5ed
rol esi, 9
add ecx, edx
bswap edx
add esi, 0xb2b92751
jmp 0x4956c8
call ebx
sub esi, edx
or edx, 0xb2c31e29
mov esi, 0xb2c371af
sub edx, edi
rol edx, 0x14
add esi, edx
xchg edx, ecx
not edi
sub edx, edi
xchg esi, edx
sub ecx, edi
xor edx, esi
ror edi, 0x17
jmp 0x495f33
push 0xad3ea3f2
or esi, edi
mov ecx, edx
jmp 0x496a70
call fcn.00494d2c
shr edx, 0xa
rol esi, 0x14
shr edx, 1
sub edx, ecx
or edi, esi
jmp 0x4946fd
call ebx
xor edx, esi
and edx, ecx
or esi, 0xb2cda7a1
xchg edx, ecx
or ecx, edx
mov edi, esi
and edi, 0xb2cef509
rol edx, 9
shr edi, 0x19
sub edi, edx
jmp 0x494800
mov ebx, 0x3f4d7907
inc edx
and edi, 0xb2d0a9df
or edi, ecx
xor ecx, esi
or edi, ecx
ror edx, 0x1a
xor edi, 0xb2d249fc
sub ecx, esi
mov esi, ecx
jmp 0x495b58
pop ebx
dec edx
mov esi, ecx
xchg ecx, edx
sub edx, ecx
and edi, edx
jmp 0x494b92
push 0xad3abf9e
or edx, esi
mov edx, edi
rol edx, 0xa
ror ecx, 0xd
or esi, 0xb2f6be56
xor esi, ecx
or esi, edi
xor edi, 0xb2f7b1c0
jmp 0x495d7d
push 0xad3af830
add ecx, edx
rol ecx, 7
add esi, ecx
dec edi
or edi, esi
xor edx, esi
and edi, 0xb8ae1105
rol ecx, 0xc
jmp 0x4967c2
pop ebx
ror esi, 0x1c
shl esi, 4
xor edx, edi
xor edx, ecx
sub ecx, edx
mov edi, edx
sub ecx, esi
not ecx
jmp 0x494984
push 0xad3240fe
bswap edi
add edx, edi
add ecx, edx
shr edx, 0x18
add esi, edx
bswap edi
bswap edx
jmp 0x49484b
push 0xad3a440c
mov edi, esi
and esi, edi
and esi, 0xb8d27baf
or edi, ecx
jmp 0x495d30
pop ebx
or edi, edx
xchg edi, edx
or ecx, esi
or esi, edi
sub edx, ecx
xor edx, esi
sub edx, edi
jmp 0x49476b
call fcn.00494d2c
xor ecx, edi
bswap ecx
rol edx, 0x14
sub ecx, edx
xor esi, edx
and edx, edi
add edi, edx
add edx, 0xb8dca205
xchg edx, edi
xchg ecx, esi
dec ecx
jmp 0x495a28
call ebx
xchg edx, ecx
or edx, 0xb8f2a04e
xor ecx, edx
and edx, edi
and edi, esi
or edi, esi
mov esi, edi
or ecx, edi
dec esi
jmp 0x49444a
pop ebx
xchg edx, ecx
sub ecx, edi
xchg esi, edi
mov esi, 0xb903d81a
xor edi, ecx
xor esi, edx
jmp 0x496e4b
pop ebx
mov edx, 0xb9235648
and edx, edi
neg edx
sub edx, ecx
bswap ecx
and esi, 0xb924fa35
add edi, 0xb9254d84
xor edx, esi
jmp 0x495df8
push 0xad2e80cb
xor esi, 0xb935337f
or edx, ecx
add edx, ecx
shl esi, 0x1c
or edx, esi
and ecx, esi
shl esi, 0x1e
mov edi, ecx
jmp 0x4954a0
push 0xad2c0cb3
dec edi
sub edi, esi
sub edx, edi
xchg edi, ecx
neg ecx
add edx, edi
bswap edi
and ecx, edx
and ecx, edi
jmp 0x495799
push 0xad2e4aba
mov edi, edx
dec ecx
shr edx, 0x1a
or ecx, esi
add ecx, esi
mov ecx, esi
jmp 0x49624e
mov ebx, 0x6332a2e
xor edx, ecx
sub ecx, edi
sub ecx, edi
nop
ror edx, 6
sub edx, edi
bswap ecx
add esi, ecx
xchg esi, ecx
xor edx, ecx
sub ecx, 0xb9627b3d
xchg ecx, edi
dec edx
jmp 0x49693f
pop ebx
neg edx
sub esi, edi
rol edi, 2
mov edx, edi
and edx, 0xb98b5923
rol edi, 0x1f
ror esi, 0xc
mov ecx, edi
neg edi
and ecx, esi
sub ecx, esi
jmp 0x49428c
mov ebx, 0x6332a2e
and edx, edi
sub edi, edx
or esi, 0xb99059f9
and ecx, 0xb990ab4e
xchg esi, ecx
sub ecx, esi
sub ecx, esi
or esi, ecx
ror esi, 0x1e
inc esi
rol esi, 0x1a
mov esi, ecx
or edi, esi
neg ecx
or ecx, edx
jmp 0x495f47
call ebx
inc esi
shl ecx, 0x13
xchg esi, ecx
sub edi, 0xb99eea75
xor edx, ecx
sub esi, 0xb99f9ac7
jmp 0x4953f0
push 0xad25d538
dec ecx
xchg edi, esi
mov edx, esi
xchg edi, edx
xchg edi, edx
bswap edi
mov ecx, 0xb9a87a1f
xchg esi, edx
inc edx
sub edi, ecx
sub edx, 0xb9a9cf78
sub edx, 0xb9aa2190
jmp 0x494231
push 0xad34e218
mov ecx, esi
add edx, 0xb9b170e2
inc edx
mov ecx, edi
xor ecx, edi
add edx, esi
sub edx, 0xb9b31024
jmp 0x49487b
pop ebx
or ecx, 0xb9b6de29
dec edi
add edx, edi
bswap edx
xor ecx, 0xb9b82445
mov esi, 0xb9b87612
or ecx, esi
shl edx, 0x18
bswap ecx
or ecx, 0xb9b9c8e4
sub ecx, esi
inc edi
shr ecx, 7
jmp 0x4953bc
call fcn.00494d2c
sub edx, edi
neg edi
jmp 0x4955e2
push 0xad32af91
shl edi, 0x1e
xor edi, 0xb9c0f56e
or edi, ecx
shr edi, 0x17
and edx, ecx
xor esi, edx
add edx, esi
and edi, esi
sub esi, 0xb9c32ff3
bswap ecx
xor esi, edx
add ecx, esi
neg ecx
rol ecx, 0xc
and edi, ecx
jmp 0x495148
push 0xad3b6cf0
and ecx, esi
xchg edx, edi
or esi, edi
add esi, edi
mov ecx, 0xb9cb51a5
xor esi, edi
inc edi
and ecx, esi
neg edi
dec edx
jmp 0x496993
mov ebx, 0x6332a2e
and esi, edx
xor esi, edi
sub ecx, 0xb9e4ea64
xor esi, edi
bswap edi
xor edx, 0xb9e6bd63
shr esi, 0xa
dec edx
sub edx, 0xb9e8814c
xor edi, 0xb9e9151f
mov esi, edx
jmp 0x496ef1
push 0xad36e1cd
ror ecx, 0xc
neg edi
or ecx, edx
dec edx
jmp 0x494f30
call fcn.00494d2c
xor esi, edi
add edx, ecx
sub esi, 0xba00c8c6
or edi, ecx
or ecx, esi
jmp 0x495565
mov ebx, 0x6332a2e
xor esi, edi
or edi, 0xba05eb8d
mov esi, ecx
mov edi, ecx
add esi, edx
mov edx, ecx
xor edx, esi
not edx
and edx, esi
jmp 0x495631
call fcn.00494d2c
xchg edx, edi
not edx
not ecx
ror edx, 7
mov edx, 0xba09e33c
jmp 0x4965e5
mov ebx, 0x6332a2e
neg edx
xor ecx, edx
mov edi, edx
shr esi, 0xa
or edi, edx
not esi
shr ecx, 0xd
xor edi, esi
shr ecx, 0x1b
or esi, edx
neg ecx
jmp 0x496ece
call fcn.00494d2c
inc ecx
ror esi, 9
shr edi, 2
shl ecx, 8
or edi, ecx
or edx, edi
jmp 0x495389
push 0xad3ef90f
sub ecx, 0xba1a4503
mov edi, ecx
xor edi, 0xba1ae56f
inc esi
mov esi, edx
sub edx, esi
and esi, edi
xor ecx, edx
sub edx, edi
jmp 0x496c7f
pop ebx
neg ecx
ror edx, 0xa
mov edx, esi
neg esi
shl esi, 0x11
mov esi, edi
and ecx, edi
sub edi, ecx
jmp 0x4958eb
push 0xad299a00
not esi
xchg esi, edi
ror ecx, 8
rol esi, 0x10
and edx, esi
sub edi, 0xba24c49c
neg edi
shr edi, 0x1a
neg edi
mov edi, 0xba261362
dec edx
jmp 0x49541f
pop ebx
or esi, 0xba26d3ec
neg edi
shl edx, 0xf
inc esi
xor edi, 0xba281f06
mov edi, edx
ror edi, 6
sub ecx, esi
mov edx, esi
nop
xor ecx, 0xba2a0f3a
sub esi, 0xba2a5f07
xor esi, ecx
or ecx, edx
inc ecx
shl esi, 0x17
jmp 0x4966b5
pop ebx
not esi
xchg esi, edi
ror edx, 1
sub ecx, edi
jmp 0x496345
push 0xad2eef56
not esi
dec esi
sub edi, ecx
add ecx, edx
ror edx, 3
sub edx, ecx
or edi, ecx
mov edx, 0xba39294e
or ecx, esi
jmp 0x495bae
pop ebx
add ecx, esi
add ecx, edx
sub edx, ecx
or edx, 0xba442c44
or edx, esi
rol esi, 9
xor edx, ecx
jmp 0x496ac9
call ebx
add edx, esi
sub edx, edi
and ecx, edi
and edx, esi
and edx, ecx
add ecx, 0xba49de73
and ecx, edi
xor edi, 0xba4b04ed
or edi, esi
and edi, 0xba4c2775
jmp 0x496195
push 0xad3f4d9f
neg ecx
ror esi, 2
ror ecx, 0xf
sub edi, 0xba4eb52f
xor edx, edi
inc edx
add edx, edi
mov edx, 0xba5119b7
add esi, ecx
sub ecx, edx
mov edx, edi
mov edx, ecx
jmp 0x4958a2
pop ebx
mov edi, esi
and esi, edi
xchg ecx, edx
add ecx, edi
xor edx, esi
xor edx, 0xba56d2ba
add esi, 0xba57654f
and edx, esi
xor edx, 0xba589fe4
mov edi, esi
mov edx, ecx
ror edi, 8
jmp 0x495848
pop ebx
xor edi, edx
xchg esi, edi
add edx, edi
jmp 0x495c91
pop ebx
and esi, edx
rol edx, 0x18
not ecx
add esi, 0xba882cb6
jmp 0x49454d
call fcn.00494d2c
and edx, ecx
not esi
not ecx
shl edi, 0xa
or esi, 0xba91f3ca
bswap esi
sub esi, edi
dec ecx
mov edi, 0xba9346ca
jmp 0x4952ca
call fcn.00494d2c
add ecx, edx
xchg edx, ecx
not edi
add edi, 0xba94b359
or edx, ecx
rol edx, 0x1a
xchg esi, ecx
xor esi, edi
add edi, esi
jmp 0x496032
push 0xad37866e
sub edx, 0xba9a535e
xchg esi, edi
xor edi, ecx
dec esi
rol edx, 0x11
inc edi
mov edx, ecx
ror ecx, 6
xor edi, edx
mov edx, esi
ror esi, 0x1e
not edx
add edi, ecx
rol edi, 6
mov edi, edx
jmp 0x494b83