Function at 0x401000
Capabilities:
Encrypt data using chaskey
Identify system language via api

Disassembly:
xor edi, edx
xor edi, ebx
mov edx, 0x4dcfd8a6
xchg edx, ebx
and esi, ebx
call sub.kernel32.dll_GetProcessHeap
bswap ebx
not edx
or ebx, edi
add ebx, edx
or edi, 0x4dd22d30
mov esi, ebx
cmp eax, 0xfffffef9
jne 0x40107e
call main
call main
call main
call main
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ole32.dll_CreateDataAdviseHolder
call main
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ole32.dll_CreateDataAdviseHolder
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ole32.dll_CreateDataAdviseHolder
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ole32.dll_CreateDataAdviseHolder
call sub.kernel32.dll_IsBadHugeReadPtr
ret
and esi, edi
and edx, 0x4dd4fe11
add edi, ebx
and esi, 0x4dd59aff
call sub.kernel32.dll_GetUserDefaultUILanguage
mov ebx, 0x4dd60b02
mov edi, ebx
add edx, edi
sub edx, edi
sub edx, esi
mov ebx, edx
cmp eax, 0xffffff08
jne 0x401130
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ole32.dll_CreateDataAdviseHolder
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ntdll.dll_NtQueryDirectoryObject
call main
call sub.kernel32.dll_IsBadHugeReadPtr
call main
call sub.ole32.dll_CreateDataAdviseHolder
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ntdll.dll_NtQueryDirectoryObject
call main
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ole32.dll_CreateDataAdviseHolder
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ole32.dll_CreateDataAdviseHolder
call sub.ole32.dll_CreateDataAdviseHolder
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ole32.dll_CreateDataAdviseHolder
call sub.ole32.dll_CreateDataAdviseHolder
ret
sub edi, edx
mov ebx, 0x4dda3f3c
ror edi, 0x14
mov edx, esi
add edi, edx
call sub.kernel32.dll_GetUserDefaultUILanguage
add esi, edx
mov ebx, edx
add edx, ebx
sub edi, ebx
cmp eax, 0xffffff29
jne 0x4011b6
call main
call main
call sub.ole32.dll_CreateDataAdviseHolder
call main
call sub.ntdll.dll_NtQueryDirectoryObject
call main
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ole32.dll_CreateDataAdviseHolder
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ole32.dll_CreateDataAdviseHolder
call sub.ole32.dll_CreateDataAdviseHolder
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ntdll.dll_NtQueryDirectoryObject
ret
mov edx, ebx
add esi, edi
dec esi
or esi, 0x4ddfe84a
inc edx
or edx, esi
call sub.kernel32.dll_GetUserDefaultUILanguage
xchg edi, edx
or edi, ebx
or edx, edi
cmp eax, 0xfffffee1
jne 0x401271
call sub.ole32.dll_CreateDataAdviseHolder
call sub.ole32.dll_CreateDataAdviseHolder
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.kernel32.dll_IsBadHugeReadPtr
call main
call main
call main
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ole32.dll_CreateDataAdviseHolder
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.kernel32.dll_IsBadHugeReadPtr
call main
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.kernel32.dll_IsBadHugeReadPtr
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ole32.dll_CreateDataAdviseHolder
call main
call main
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ole32.dll_CreateDataAdviseHolder
call main
call sub.ntdll.dll_NtQueryDirectoryObject
call main
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ntdll.dll_NtQueryDirectoryObject
call main
call sub.ntdll.dll_NtQueryDirectoryObject
call sub.ole32.dll_CreateDataAdviseHolder
ret
jmp 0x49407f
ror esi, 0x1f
or esi, edi
and esi, ebx
sub ebx, 0x505b3897
or edx, ebx
jmp 0x495a0d
pop ecx
dec edi
sub ebx, 0x553e311a
mov edx, esi
xor esi, ebx
jmp 0x495ffe
pop ecx
xchg edi, ebx
shr esi, 0xa
xor esi, edx
and esi, edx
sub esi, 0x554f70a6
mov edx, edi
mov ebx, edx
add edx, 0x555063f8
xchg esi, ebx
xor esi, edx
shl edi, 0xf
and edi, 0x55519fe7
xchg edx, edi
jmp 0x495614
call fcn.004961f6
mov edi, edx
xchg edx, ebx
xchg edi, esi
ror esi, 0x1a
or esi, edi
sub edi, esi
sub edi, edx
sub edx, edi
xor edi, ebx
mov ebx, edi
and edi, esi
add edx, ebx
jmp 0x49644e
pop ecx
bswap edi
add edx, esi
shl ebx, 2
jmp 0x495f65
call fcn.004961f6
and esi, ebx
neg edx
mov esi, ebx
or edi, ebx
or edx, esi
add edi, edx
and edi, ebx
xor ebx, 0x55687ee1
xchg ebx, edx
sub edx, esi
jmp 0x495f47
pop ecx
sub ebx, 0x556987be
rol esi, 0x19
shl ebx, 0x19
mov ebx, edi
xor ebx, edx
xchg ebx, esi
or edi, edx
jmp 0x495b8e
push 0x506a56f5
sub esi, edx
bswap edx
or esi, edx
xor edx, esi
add esi, 0x55746035
xchg edi, ebx
add esi, edi
mov esi, 0x5575565d
jmp 0x495871
pop ecx
sub edi, ebx
xor edi, edx
mov esi, 0x55765cef
add ebx, edx
xchg ebx, edx
rol edi, 0x1b
and edx, ebx
nop
ror edi, 6
jmp 0x4957ab
call ecx
xor edi, edx
mov ebx, esi
mov esi, 0x55a0a4e8
ror esi, 0x1b
or esi, edx
or esi, edi
add esi, ebx
xchg edi, ebx
inc ebx
sub ebx, esi
jmp 0x495946
mov ecx, 0x2d734e3d
xor esi, edx
rol edx, 7
and ebx, edx
xor edi, ebx
inc edx
not ebx
rol ebx, 6
and esi, edx
sub esi, edx
inc esi
xchg edi, esi
add esi, 0x55cd3b9f
jmp 0x496311
pop ecx
xor ebx, esi
sub ebx, edi
shr esi, 0x10
neg ebx
xchg ebx, esi
xor edx, esi
bswap esi
inc esi
bswap edi
sub esi, edx
or ebx, edx
mov esi, 0x55d4cd69
jmp 0x496873
push 0x401400
dec ebx
shl ebx, 0x1e
or edi, ebx
rol edx, 0xb
mov esi, ebx
xor esi, ebx
add ebx, 0x55f0819f
xor esi, edx
shl ebx, 0x16
xor ebx, esi
xor esi, ebx
sub esi, edx
jmp 0x494e22
push 0x5067364f
add ebx, edi
or esi, edi
or ebx, edx
sub esi, ebx
xor ebx, esi
and esi, ebx
or edx, esi
add ebx, esi
rol edi, 0x14
and ebx, edi
or edi, 0x55f57bcb
xchg esi, edi
shr edx, 0x18
and esi, ebx
rol ebx, 0x18
jmp 0x494ce0
pop ecx
sub edi, 0x560fa661
sub edi, 0x560ff69d
rol edi, 0x17
mov ebx, edx
neg edi
neg edi
sub edx, ebx
xchg esi, edx
and ebx, 0x56122d2b
rol edi, 0x16
jmp 0x495cc7
pop ecx
xchg esi, edx
ror edx, 9
mov esi, edx
ror esi, 5
xchg edi, edx
xor edi, 0x5624935d
mov edx, ebx
and ebx, edx
jmp 0x4958b8
push esp
rol ebx, 2
sub edx, edi
sub edi, 0x563f5705
dec edi
add edi, esi
xor ebx, edx
add esi, ebx
or edi, esi
sub edx, edi
add edx, edi
rol ebx, 0x13
and esi, edi
jmp 0x4959d7
push 0x506abe63
and esi, 0x564657b9
mov ebx, edi
xor edi, ebx
sub edi, edx
sub ebx, 0x5647999e
xchg esi, ebx
xchg ebx, edx
jmp 0x49690a
mov ecx, 0x2774562b
and edx, esi
and ebx, edi
xchg esi, edi
xor edi, ebx
and edi, 0x5649d353
mov esi, ebx
add ebx, edx
xor edx, esi
jmp 0x4973a1
call fcn.004961f6
sub esi, 0x564b2ab7
add esi, 0x564b87c1
jmp 0x494b2a
call fcn.004961f6
mov ebx, 0x564bead3
ror ebx, 0x1e
xor ebx, esi
xchg esi, edx
or esi, edx
mov ebx, esi
sub edi, ebx
rol ebx, 7
xor ebx, edi
shl edi, 0x14
or edi, edx
jmp 0x4963f4
pop ecx
neg edi
mov esi, ebx
and ebx, esi
or edx, 0x5652ee58
sub esi, ebx
or edi, edx
dec ebx
and esi, ebx
sub edi, esi
not edx
mov esi, ebx
xor ebx, 0x56556d13
not ebx
add edx, 0x56560d0f
shl ebx, 0x11
jmp 0x495401
push 0x507ab38d
sub edx, esi
xchg edx, esi
sub ebx, edi
xchg ebx, esi
not ebx
xchg edi, edx
shr esi, 0x15
rol esi, 0xb
mov ebx, esi
xor edx, ebx
xor esi, edi
and ebx, edx
jmp fcn.00494a56
call fcn.004961f6
sub ebx, esi
and esi, 0x5662a114
sub edx, ebx
add ebx, edx
and edi, edx
xor esi, edi
sub esi, edx
xor edi, edx
not ebx
shr edx, 0x17
or edi, ebx
mov ebx, 0x5665b614
jmp 0x496a5f
mov ecx, 0x2d734e3d
and esi, ebx
and edi, ebx
sub edx, esi
dec ebx
sub ebx, edx
xchg edi, ebx
jmp 0x4942b1
pop ecx
add edx, esi
or edi, ebx
xchg ebx, edx
xor ebx, esi
neg edi
or esi, edi
jmp 0x495031
push 0x506eefc9
sub edx, edi
not esi
mov ebx, edi
xor edi, esi
sub edx, edi
add esi, 0x56798d89
inc esi
bswap ebx
jmp 0x495cf3
call fcn.004961f6
xchg edi, esi
not esi
add edx, ebx
or edx, ebx
rol ebx, 0x1a
or edi, edx
sub ebx, 0x567e73ee
mov ebx, edx
ror edx, 0xc
jmp 0x4969ed
call ecx
not ebx
and edx, 0x56819538
xchg edi, ebx
mov ebx, edx
sub ebx, esi
and edx, 0x5682c8f9
add esi, ebx
not esi
or esi, 0x5683c380
jmp 0x496be5
push 0x5075c4a1
neg ebx
mov edx, 0x568c73f2
neg ebx
neg ebx
and edx, 0x568d652c
xor esi, ebx
dec esi
or edi, esi
mov ebx, edx
sub ebx, esi
shl esi, 0x1f
xchg edi, ebx
or esi, edx
and edx, ebx
ror esi, 0x15
jmp 0x496af0
push 0x5061e4a8
shl ebx, 0x15
dec edi
xor esi, 0x56966f63
xor ebx, edx
xor ebx, 0x5697197b
not esi
xchg edi, ebx
and esi, 0x569807d0
and edx, 0x569857b5
inc ebx
sub edx, ebx
and ebx, edi
jmp 0x495dcb
push 0x50788b55
not edx
and ebx, edx
shr edi, 0xf
inc edi
xchg ebx, edx
or edi, edx
add edx, ebx
and edi, esi
and ebx, edx
or edi, ebx
jmp 0x495b29
push 0x5066ce23
shr edi, 0x16
add edx, ebx
and ebx, 0x56ada753
add ebx, edx
and esi, edx
xor edx, ebx
sub edx, esi
mov ebx, edi
jmp 0x496a49
pop ecx
xor edx, esi
sub edx, edi
not edi
sub ebx, 0x56b08641
add esi, edx
neg esi
or ebx, 0x56b17e86
xchg esi, edi
xchg edi, esi
jmp 0x495d3b
push 0x50733d78
sub esi, 0x56b72193
add ebx, 0x56b7717d
xor esi, edi
mov ebx, esi
xor ebx, 0x56b86449
jmp 0x4961d8
push 0x5068e3b0
mov edi, esi
and edi, 0x56b91951
bswap ebx
xor ebx, edi
sub edi, 0x56ba07e0
dec ebx
or ebx, 0x56bab23a
and ebx, edx
inc esi
xchg edi, ebx
or edi, ebx
jmp 0x494620
pop ecx
and edi, ebx
or ebx, edi
mov esi, edi
add edx, edi
and edx, esi
sub edi, edx
and esi, 0x56d5f98a
mov edx, edi
mov edx, esi
jmp 0x4974b6
push 0x507591d8
or edi, 0x56d6fae5
add esi, ebx
shl esi, 5
neg esi
add ebx, edx
dec ebx
jmp 0x494ead
push 0x507a7adc
and esi, edi
xchg edi, ebx
xchg ebx, edi
sub edi, edx
xor edi, esi
inc edx
or esi, ebx
or ebx, edx
dec ebx
jmp 0x494c65
push 0x5074f1d6
xchg edx, edi
xor edx, esi
xchg esi, edx
or edx, edi
mov edi, ebx
sub esi, ebx
shl edx, 0x19
sub esi, edx
mov esi, ebx
sub edx, ebx
jmp 0x496c56
push 0x507855ca
mov esi, 0x56eccb0a
xor edi, 0x56ed1b0d
or edx, ebx
xor esi, edi
dec ebx
mov ebx, edi
xchg esi, edi
jmp 0x494ff4
call fcn.004961f6
or ebx, 0x56fa1f3e
ror esi, 0xf
or edx, esi
mov edx, 0x56fb174c
xchg edi, ebx
sub edi, ebx
jmp 0x497202
pop ecx
xchg esi, ebx
add edx, edi
xor ebx, edi
neg esi
inc esi
or esi, ebx
or edi, 0x5703b479
add edi, 0x57040594
jmp 0x495e85
push 0x50652974
sub edi, 0x5725bc19
sub edx, 0x57260dcc
add ebx, edi
neg edi
or ebx, esi
mov esi, edi
ror esi, 8
xchg esi, ebx
or edx, esi
not edx
mov ebx, esi
xchg edi, edx
jmp 0x497418
call fcn.004961f6
or esi, ebx
mov ebx, 0x5729dc8e
and ebx, edi
and ebx, 0x572a7820
or esi, 0x572ac9e2
sub esi, edx
xor edx, esi
dec ebx
xchg esi, ebx
sub edx, ebx
not edx
add edx, edi
jmp 0x49647e
pop ecx
nop
shr edx, 2
xchg esi, edi
xor esi, ebx
and edi, ebx
rol edi, 1
and edi, edx
add esi, 0x57341132
inc ebx
add edi, edx
shl edi, 8
mov esi, 0x573559e9
ror ebx, 7
sub esi, ebx
sub ebx, 0x57364696
sub edx, edi
jmp 0x4952cc
push 0x506ca294
or edx, 0x573bc5be
shr esi, 0x1a
sub esi, ebx
and edi, 0x573cbf8d
add esi, edi
xor ebx, edi
jmp 0x495b70
push 0x5077ebdc
and ebx, edi
sub edx, ebx
jmp 0x49600d
push 0x5077b2e0
neg esi
sub edi, 0x574bd0af
add ebx, esi
jmp 0x495727
pop ecx
mov ebx, edx
xor edi, 0x5754c7ee
or ebx, 0x5755174b
xchg edi, esi
xchg edi, esi
dec esi
or edx, esi
jmp 0x4967c0
push 0x506a8af4
mov edi, esi
xchg edi, esi
and ebx, esi
sub ebx, edi
not esi
and esi, edx
sub edi, esi
xchg edx, esi
shl esi, 0x12
neg ebx
xor ebx, 0x5772a34e
shr edx, 8
jmp 0x494b7a
mov ecx, 0x2774562b
not edx
or esi, edi
and ebx, 0x577516a9
xor ebx, edi
xor edx, 0x5775b4a6
shr esi, 0x1d
jmp 0x494cb6
pop ecx
or edi, 0x5776709e
sub edi, 0x5776c0c0
add esi, edi
sub ebx, esi
neg esi
add esi, edx
xor esi, edx
xor edi, 0x5778a3ae
or edx, 0x5778f37e
xor ebx, edx
jmp 0x49650b
pop ecx
xor edi, esi
not edx
and esi, edi
xchg edx, edi
neg esi
or edi, 0x57839a4a
xchg edx, ebx
or esi, ebx
and esi, 0x57848780
jmp 0x4942d3
push esp
xor edi, 0x578d8f44
mov edx, ebx
or edx, edi
rol edx, 0xe
add ebx, 0x578ed524
jmp 0x4968de
push 0x5060409a
xchg edi, esi
mov esi, edi
sub edi, 0x579273b0
sub edx, ebx
and ebx, 0x57930ed0
dec ebx
xor edx, ebx
and edx, ebx
sub edi, esi
jmp 0x496359
call ecx
or esi, edi
neg ebx
inc ebx
sub edx, ebx
inc edx
xor esi, edx
jmp 0x4972ac
mov ecx, 0x2d734e3d
rol edi, 4
xor edx, 0x585540c5
or edi, 0x585593b2
not ebx
shl edi, 0x1e
sub ebx, edx
mov esi, 0x5856d202
sub edi, 0x585722ed
add ebx, edi
bswap edx
jmp 0x496a17
push 0x5061ae81
xor edx, esi
or ebx, 0x5858903c
xor edx, 0x5858e092
jmp 0x494f22
push 0x506cd66d
xchg edx, edi
or edi, ebx
and esi, 0x5859e8d5
and ebx, edi
dec ebx
and edx, edi
add edx, esi
mov edx, esi
nop
jmp 0x494b9a
push 0x506a2300
or esi, ebx
or edx, esi
not ebx
add esi, edx
mov esi, ebx
xor ebx, 0x585dc5f8
jmp 0x494345
call ecx
or edi, 0x587284fe
inc edi
xor edx, ebx
shr ebx, 9
not esi
dec ebx
jmp 0x494646
push 0x5068ac31
and esi, 0x58777e22
add ebx, edi
bswap edx
xor edx, ebx
add edi, edx
sub ebx, 0x58791439
xor edx, 0x587964e3
xchg edi, edx
xor ebx, edi
xchg edi, esi
xchg esi, ebx
jmp 0x4950c5
push 0x506f23fd
and edi, edx
rol edx, 3
mov edi, edx
xchg edx, edi
and esi, 0x587c461d
and edx, esi
add ebx, edi
or edx, ebx
xchg ebx, esi
or esi, edi
and ebx, edx
sub edi, esi
dec ebx
jmp 0x495899
pop ecx
xor edi, ebx
or edi, esi
sub edx, ebx
xchg esi, edx
add esi, edi
mov edi, edx
sub edx, esi
and esi, ebx
mov edi, ebx
dec ebx
jmp 0x496dda
mov ecx, 0x2774562b
inc edx
xor edx, edi
sub edx, esi
add edi, esi
sub edx, edi
or esi, 0x58915bc6
shl edi, 0x13
add esi, ebx
xor edi, ebx
jmp 0x494bce
push 0x5063e865
xor edx, ebx
mov ebx, edi
sub esi, edx
mov edx, edi
sub ebx, edi
rol edi, 0x16
or edi, 0x58a1986e
add edx, edi
bswap esi
or esi, ebx
inc edi
mov esi, ebx
sub edx, ebx
xchg esi, edi
jmp 0x495f8b
mov ecx, 0x4132136a
sub ebx, edi
add edi, 0x58a99f8e
sub ebx, edi
xor edx, ebx
xchg ebx, esi
xor esi, edi
xor edi, ebx
or edi, 0x58ab8575
xor esi, edx
mov esi, ebx
mov esi, edi
not edx
dec edx
jmp 0x494bb8
call ecx
add edx, 0x58b2c605
add edi, esi
or edi, 0x58b36eec
xchg edx, ebx
add edi, edx
shl edi, 9
xor edi, ebx
jmp 0x496283
push 0x5064f204
mov edx, edi
xor esi, ebx
xchg edx, ebx
rol ebx, 0xf
add edx, esi
sub edi, ebx
shl edi, 0x1e
and ebx, edi
xchg esi, ebx
mov edi, 0x58b7e1ac
inc edx
or edx, ebx
jmp 0x49558b
mov ecx, 0x2774562b
rol esi, 0x1d
add edi, edx
xchg edx, ebx
jmp 0x4941cc
pop ecx
rol edx, 0xe
and ebx, edx
or edx, edi
mov esi, ebx
jmp 0x497385
push 0x5078212b
xor edi, 0x58c3fa4f
and esi, ebx
or edi, edx
sub ebx, esi
xor edi, ebx
jmp 0x495302
push 0x506c6f15
xor esi, ebx
and esi, ebx
add esi, edi
xchg ebx, edx
or esi, edi
jmp 0x49567a
pop ecx
xor ebx, 0x58eae5d6
ror ebx, 0x1d
not edi
or edx, esi
or esi, ebx
xor edx, esi
sub esi, edx
jmp 0x494cf5
push 0x50737003
bswap edi
xor esi, ebx
mov ebx, edx
xor ebx, esi
and esi, edx
not ebx
and edx, 0x58ef1f21
mov edi, esi
jmp 0x4967f7
call fcn.004961f6
bswap esi
or ebx, edx
xchg edi, ebx
xor ebx, 0x58f77acd
mov esi, 0x58f7cd36
neg edx
add edx, ebx
and edx, ebx
xor edx, 0x58f91222
jmp 0x495c8e
pop ecx
and edx, edi
and esi, edi
mov edx, edi
and esi, 0x58fdf022
add edi, 0x58fe4071
or edi, edx
sub esi, 0x58fedea9
add edi, 0x58ff2ee3
sub edi, esi
xchg esi, edx
add esi, ebx
add ebx, edi
and edi, esi
jmp 0x4974e1
call ecx
xchg esi, edi
mov esi, edx
xor ebx, edx
neg ebx
bswap esi
or esi, ebx
xor edx, esi
add esi, edi
jmp 0x494a00
pop ecx
or ebx, esi
shl ebx, 6
and edi, edx
add ebx, 0x5904ad9a
add edx, 0x5904fd8a
or esi, 0x59054c24
dec ebx
and edi, esi
shl esi, 0xf
jmp 0x49728a
call fcn.004961f6
inc esi
bswap esi
xchg ebx, esi
or ebx, esi
bswap edi
shl edi, 0xd
sub ebx, edx
add ebx, edi
jmp 0x494534
mov ecx, 0x2d734e3d
mov ebx, 0x59115a1b
neg edx
mov esi, 0x5911fc7e
shl edx, 0xd
shr ebx, 0x10
add edx, 0x5912eea8
or esi, ebx
xor edx, edi
jmp 0x4953a5
call ecx
and edi, 0x591de22c
not edx
not edx
and edi, esi
shr ebx, 0x1f
xor ebx, edx
mov ebx, 0x591fc319
mov edx, ebx
add esi, ebx
shr ebx, 8
sub ebx, edx
jmp 0x4965f0
call ecx
mov edi, ebx
sub ebx, esi
xchg edi, edx
bswap ebx
xchg esi, edi
xor edx, 0x59271095
rol edx, 7
add ebx, edi
mov edx, edi
ror edx, 0xe
rol esi, 0x1a
add edx, 0x5928f8b9
add edx, 0x59294891
jmp 0x494209
call ecx
mov edi, edx
not esi
sub edx, 0x592a55f1
and esi, ebx
sub edi, edx
xchg edi, ebx
jmp 0x4940e7
pop ecx
neg edi
neg ebx
mov edi, edx
jmp 0x4965ba
push 0x506e5164
neg edx
shr edi, 0x14
bswap edx
or esi, edi
xor edi, esi
xchg ebx, edi
and edi, ebx
jmp 0x497182
pop ecx
shl ebx, 0x17
xor ebx, edx
rol edx, 0x13
add ebx, edx
jmp 0x494c10
push 0x50730479
sub edx, 0x59581763
or edi, 0x59586608
or esi, edi
mov edi, ebx
inc edi
or edx, edi
or ebx, esi
xor edi, ebx
add edx, 0x595a96de
xor ebx, edx
add edi, edx
jmp 0x4950a5
pop ecx
sub edi, 0x595b9f27
or esi, ebx
shr edx, 0xc
or esi, ebx
or esi, ebx
rol ebx, 0x14
mov edx, esi
xor edx, edi
neg esi
add edi, esi
mov esi, edi
xchg edi, ebx
xchg edi, esi
mov edx, ebx
shl ebx, 0x14
jmp 0x496abf
push 0x92c7f
bswap edx
and esi, edx
mov ebx, esi
add ebx, esi
xchg esi, ebx
xor edx, ebx
xor edi, esi
and ebx, 0x596eea6c
sub esi, edx
and esi, ebx
shr edi, 0x17
dec edi
jmp 0x494798
pop ecx
mov edx, ebx
and esi, edi
add edx, 0x59776308
add edi, edx
xchg edx, edi
neg ebx
or esi, edi
mov edx, edi
rol esi, 0xe
jmp 0x495231
mov ecx, 0x2d734e3d
add edx, esi
xchg edx, ebx
sub edx, 0x597caa01
xor edx, edi
shl edx, 4
shl edx, 0x1e
sub ebx, 0x597df6d6
dec ebx
mov esi, 0x597e99d6
ror esi, 0x1d
and ebx, esi
jmp 0x494de4
pop ecx
sub esi, 0x59868179
xchg ebx, esi
dec edx
shr edi, 0x1f
add ebx, edi
sub esi, edi
bswap edi
add edx, ebx
or edx, ebx
xchg edx, ebx
and edx, 0x5989a37c
jmp 0x496d82
push 0x40
and edi, edx
or edi, 0x5990356a
add ebx, 0x599085aa
xor esi, ebx
sub esi, 0x599122b4
add esi, edi
neg edi
sub edi, 0x599210fa
sub edx, edi
jmp 0x496760
mov ecx, 0x2774562b
mov edx, edi
add edi, esi
xchg edx, edi
mov esi, edi
ror esi, 0x19
and ebx, 0x59944d85
sub edi, ebx
add ebx, 0x5994ebd0
neg ebx
xchg edx, ebx
neg edx
jmp 0x496238
pop ecx
and esi, 0x599657a3
xchg ebx, edi
or edi, edx
or esi, 0x59974525
xchg esi, ebx
xchg ebx, edi
mov ebx, edi
bswap edx
sub ebx, esi
add edx, edi
and esi, edi
shl edx, 8
and ebx, 0x599a1386
not esi
inc edx
jmp 0x494366
push 0x50755d1e
shr edx, 0xb
sub esi, ebx
and ebx, esi
mov esi, edi
xchg edx, ebx
inc ebx
or edi, edx
add esi, ebx
inc ebx
jmp 0x495217
call ecx
mov edi, ebx
xor esi, 0x59a918c8
sub edx, 0x59a96bbe
add edx, esi
and ebx, esi
and edi, 0x59aa5241
add edi, ebx
xor edx, 0x59aaf16d
shl edi, 0x12
jmp 0x496d3f
call fcn.004961f6
bswap ebx
ror esi, 0x13
add edi, ebx
xor edi, 0x59acab1b
shr ebx, 0x12
and edi, 0x59ad5653
ror edi, 4
mov edx, 0x59adf9d5
and edx, 0x59ae48ab
mov edx, edi
sub edx, edi
jmp 0x4970a2
push 0x50670555
mov ebx, 0x59af4bd2
and edi, esi
xchg edi, edx
dec edi
not edi
jmp 0x4947c0
call ecx
or edi, esi
inc edi
or edx, ebx
xor ebx, esi
sub ebx, 0x59b23c30
neg edx
and ebx, edx
shl esi, 0x1a
mov esi, ebx
inc edi
or edx, esi
xchg edx, esi
add edx, esi
xor ebx, 0x59b50ce8
xor edi, esi
xor esi, edi
jmp 0x495050
pop ecx
or edx, ebx
ror edi, 3
and edx, ebx
xchg edi, edx
or edx, 0x59bbaeac
and edi, ebx
xor ebx, 0x59bc5868
ror edi, 0x12
inc edi
xor edi, ebx
sub edx, 0x59bd9a70
xor ebx, edx
shl ebx, 0x11
shl ebx, 0xa
jmp 0x495ee1
mov ecx, 0x2774562b
add edi, 0x59bef4b0
xchg ebx, edx
or ebx, 0x59bf9413
xor ebx, 0x59bfe4b8
add esi, edx
shr esi, 0x12
or esi, ebx
sub esi, ebx
or edx, ebx
xchg edi, esi
jmp 0x4955b6
pop ecx
sub esi, ebx
and esi, edx
xor edx, esi
xor edx, esi
or esi, edx
mov edi, ebx
not edi
not esi
mov ebx, edi
or edx, ebx
add edx, ebx
not edx
jmp 0x49667f
push 0x506ebbf8
or esi, 0x59da8471
sub esi, edx
bswap ebx
or ebx, edi
shr edi, 3
dec ebx
jmp 0x494db0
push 0x50752679
add esi, 0x59dfccf3
sub edx, 0x59e01fe1
or edi, 0x59e06e03
and edx, 0x59e0be61
mov edx, 0x59e10e3c
xor esi, ebx
xor edi, esi
bswap edi
xchg edx, edi
ror edx, 0xc
jmp 0x496963
pop ecx
or ebx, esi
add edi, esi
ror esi, 0x1a
bswap esi
add ebx, edi
mov edi, edx
xchg edx, esi
sub esi, edi
sub edx, ebx
add edx, ebx
or edx, esi
mov edi, edx
xchg esi, edx
add edi, ebx
sub edi, ebx
nop
jmp 0x49419e
pop ecx
xor edx, edi
mov esi, 0x59fa60e0
xor esi, 0x59fab3b3
xor ebx, 0x59fb0257
inc edx
and edx, edi
and esi, edx
or esi, 0x59fc3f9b
add edi, esi
shr edx, 0x18
or esi, edi
sub edx, esi
and ebx, 0x59fdd281
xor edx, ebx
xor edi, edx
jmp 0x496dfe
pop ecx
or edi, edx
mov ebx, esi
sub edx, 0x5a02bae7
and ebx, 0x5a0316dc
dec edi
inc edi
and edi, ebx
shl ebx, 0x10
or edi, ebx
sub edi, edx
shr ebx, 0xa
jmp 0x4966aa
pop ecx
or esi, ebx
neg esi
add edi, ebx
mov esi, edx
or esi, 0x5a06e559
xchg edi, edx
or ebx, esi
and ebx, 0x5a07dc70
xor edi, edx
shr edi, 8
add edx, esi
ror edx, 0x14
ror ebx, 0x1e
jmp 0x4961ab
pop ecx
or esi, edi
not edx
or edi, edx
xchg edi, ebx
not ebx
xor ebx, esi
ror esi, 0xf
add edx, 0x5a378fcb
jmp 0x496933
call ecx
inc edi
and edx, 0x5a41975b
inc ebx
sub edi, esi
xor edi, edx
inc ebx
jmp 0x49701d
call fcn.004961f6
and edi, esi
and ebx, 0x5bf1f4a4
inc ebx
sub edx, esi
add esi, 0x5bf2f1a7
xchg edx, ebx
inc ebx
xor ebx, edi
add esi, ebx
jmp 0x495adf
push 0x506e87ad
shr edi, 9
neg ebx
sub ebx, 0x5bf8c46b
xor ebx, edi
and ebx, 0x5bf96ee4
xchg ebx, esi
jmp 0x496c1e
mov ecx, 0x2774562b
xchg edi, ebx
mov esi, ebx
xchg ebx, edi
mov esi, edx
and ebx, 0x5bfc721d
xchg esi, edi
neg edi
dec ebx
jmp 0x497133
call ecx
xchg edx, esi
not ebx
xchg ebx, esi
xchg edx, ebx
add edi, 0x5c036cfc
add edx, edi
nop
sub edx, edi
xor edi, esi
jmp 0x4962ca
push 0x50617860
xchg edi, edx
bswap esi
shl edi, 7
sub ebx, edi
sub esi, 0x5c0ff8ca
or esi, edi
add edx, ebx
or esi, ebx
and edx, ebx
inc edx
jmp 0x495b58
pop ecx
mov edi, esi
add ebx, edx
shr ebx, 0x1b
sub edx, edi
or esi, 0x5c131a4a
mov ebx, esi
or esi, ebx
sub edi, 0x5c1411f7
shl ebx, 0x12
rol ebx, 0xb
inc ebx
jmp 0x4961bf
pop ecx
add ebx, 0x5c253735
inc esi
neg edx
add esi, 0x5c2629ab
neg edx
xchg edi, edx
shl ebx, 0x14
jmp 0x4951fb
call fcn.004961f6
sub esi, ebx
neg edi
sub esi, edx
bswap edi
ror ebx, 8
shl ebx, 3
dec esi
bswap edx
and esi, 0x5c2a1e34
sub ebx, edx
xor ebx, 0x5c2abc29
jmp 0x4962b3
push 0x50655dc6
sub edi, edx
add edx, edi
xchg esi, edx
sub edi, esi
sub edx, ebx
add edi, 0x5c34e96c
sub edx, edi
ror ebx, 0x17
rol edx, 0x11
and edx, 0x5c362949
jmp 0x4971ae
pop ecx
or edx, 0x5c4125b1
and ebx, esi
ror esi, 0x18
add esi, ebx
add edi, edx
dec esi
and edx, edi
xor edi, edx
jmp 0x495735
pop ecx
xor esi, edi
or esi, edx
add edi, esi
not edi
add edx, 0x5c46a466
jmp 0x494921