Function at 0x401000
Capabilities:
Encrypt data using chaskey
Identify system language via api

Disassembly:
call sub.user32.dll_GetMessageExtraInfo
cmp eax, 0xffffff23
jne 0x401075
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff0b
jne 0x401112
call sub.oleaut32.dll_VarUI1FromI2
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
ret
call sub.user32.dll_GetMessageExtraInfo
cmp eax, 0xffffff19
jne 0x40118c
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
ret
call sub.user32.dll_GetMessageExtraInfo
cmp eax, 0xffffff1d
jne 0x40122e
call sub.oleaut32.dll_VarUI1FromI2
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
call sub.oleaut32.dll_VarUI1FromI2
call sub.oleaut32.dll_VarUI1FromI2
call sub.advapi32.dll_GetKernelObjectSecurity
ret
jmp 0x4fca7a
or edi, ecx
sub esi, edi
xor ecx, esi
xchg edi, edx
and ecx, 0x4a7219d
add ecx, 0x4a73b07
and edx, 0x4a75411
and esi, ecx
jmp 0x5006bb
pop ebx
mov edi, ecx
add esi, 0x56e6e0d
xchg esi, edx
xchg edi, ecx
mov edx, ecx
mov ecx, esi
sub edx, 0x56ef46d
xor edi, ecx
neg ecx
add ecx, edi
xor edx, 0x56f610f
or edx, ecx
rol esi, 0x12
xchg ecx, edx
jmp 0x4fd822
push 0x4b0063a
mov ecx, esi
rol edx, 4
nop
shr esi, 5
bswap ecx
xor edi, ecx
neg ecx
bswap esi
xchg ecx, edi
dec ecx
jmp 0x4fd745
call ebx
or esi, ecx
sub edx, esi
xor ecx, 0x57df613
or esi, 0x57e12d7
rol esi, 2
sub edi, edx
jmp 0x4fcf14
pop ebx
and esi, 0x583ef2b
xor edx, 0x5840bbb
add edx, 0x5842b97
and esi, 0x58444a1
add ecx, 0x58461b3
not edi
bswap edx
not ecx
sub esi, edi
rol ecx, 0x1b
jmp 0x4fddad
push 0x401400
sub edx, 0x58d3d89
add esi, ecx
sub ecx, edx
not esi
xchg edi, ecx
mov edi, esi
and ecx, 0x58dd833
dec esi
xor edi, esi
xor ecx, edx
add esi, ecx
or edx, ecx
jmp 0x500948
call fcn.00500b5a
shr edi, 5
sub ecx, esi
sub edx, 0x590f7ed
xor edi, edx
neg edx
xor edi, ecx
and edi, ecx
dec edx
ror ecx, 0x12
xor ecx, 0x591b62f
jmp 0x4fcc84
pop ebx
mov edx, edi
xor ecx, edi
sub edx, ecx
neg edx
dec ecx
xor esi, edi
nop
mov edx, edi
mov edx, ecx
mov edi, 0x592d10f
mov esi, ecx
xor edi, esi
jmp 0x4ff626
mov ebx, 0x2a676233
or esi, edx
sub edx, edi
or edi, edx
xor esi, 0x59f2793
add esi, 0x59f47c5
or esi, edx
and edx, ecx
mov edx, edi
mov edx, ecx
add esi, ecx
jmp 0x4fd553
call ebx
sub edx, 0x5a0fd4f
shr edx, 0x14
and esi, ecx
mov esi, edx
xor edx, esi
dec edi
neg edi
xor edx, ecx
dec esi
ror edx, 0xb
mov ecx, edi
sub edi, 0x5a227bf
jmp 0x4fcaae
push 0x4ae1bbb
ror edx, 0x16
xchg edx, ecx
add edx, edi
or edi, esi
rol esi, 0xe
add edx, esi
xor edx, edi
not ecx
add edi, edx
dec edx
xchg ecx, esi
sub edi, ecx
jmp 0x4ffe73
pop ebx
mov edx, esi
mov ecx, edi
sub edx, esi
or ecx, 0x5ae6059
sub esi, edi
add ecx, edi
sub edx, esi
or edi, ecx
inc ecx
shl ecx, 0x1c
sub edi, 0x5af1f8d
xchg edx, ecx
jmp 0x4fdfe3
mov ebx, 0x2a676233
sub edi, esi
shl edi, 0x1e
and edx, esi
sub ecx, 0x5b41d39
ror ecx, 0x1d
dec ecx
add esi, edi
mov esi, ecx
xor edi, esi
inc esi
or esi, 0x5b53cfb
xor esi, edx
xchg edx, edi
or ecx, edx
jmp 0x4febce
pop ebx
xchg ecx, edx
add edi, ecx
and ecx, edi
sub ecx, edx
add edi, 0x5b616db
xor ecx, edx
xor esi, edi
not edi
not edi
and edi, ecx
jmp 0x4fcd4f
push 0x4ab1265
xor edx, ecx
or ecx, edx
xchg ecx, edi
mov edi, edx
inc esi
sub edx, ecx
and edi, 0x5b8ed01
xor edx, esi
xchg edx, ecx
sub edi, 0x5b94087
jmp 0x4ff98b
pop ebx
xchg edx, ecx
mov edi, ecx
mov esi, edx
xor edx, esi
or edi, ecx
bswap edx
xchg ecx, edi
add esi, ecx
jmp 0x4fe060
call fcn.00500b5a
shl edi, 0xe
and edx, esi
add edx, ecx
sub esi, edx
shr edi, 9
bswap esi
mov edi, esi
sub esi, 0x5bb00e3
add ecx, edx
mov edi, edx
mov ecx, 0x5bb50f3
ror esi, 0x17
jmp 0x50062f
call fcn.00500b5a
not esi
xor esi, ecx
and ecx, edx
xor edx, 0x5bda673
xor edi, 0x5bdc283
xor ecx, edx
mov edx, 0x5bdf635
and esi, ecx
add edx, esi
xor edx, edi
bswap edx
shr edi, 5
xchg edx, edi
mov edi, 0x5beb407
not edx
not edx
jmp 0x4ffec9
push 0x4acdc1f
add edi, ecx
sub esi, 0x5c19061
and edx, edi
shl esi, 0x15
add esi, ecx
and ecx, 0x5c1f8bb
neg esi
add esi, edi
sub ecx, edi
or esi, edx
or esi, edi
or ecx, esi
jmp 0x4ff212
call fcn.00500b5a
xchg edi, esi
shl edi, 0x12
and edx, esi
shl edx, 7
add edx, edi
or edx, ecx
jmp 0x4fd0c5
push 0x4a9f797
not ecx
xor edx, esi
add edi, ecx
sub esi, 0x5e6e3eb
jmp 0x4ff7ca
call ebx
and edx, esi
sub ecx, 0x5e8a9bd
mov ecx, edi
mov esi, 0x5e8da91
add edx, ecx
add ecx, esi
mov edi, ecx
mov edx, 0x5e94269
xchg ecx, edi
and edx, ecx
not esi
sub edi, edx
jmp 0x4fd891
mov ebx, 0x2a676233
or ecx, edx
xchg edx, ecx
xor ecx, edi
xor edi, edx
sub edi, esi
mov ecx, edx
shl edx, 0x10
xor ecx, edi
xor edi, edx
mov esi, 0x5f2025b
jmp 0x4fe789
push 0x4abbe7e
shl edx, 0x1f
xor edi, ecx
mov esi, 0x5f26335
xor edx, edi
jmp 0x4fe6e9
push 0x4a9a16b
rol esi, 0x1f
ror edx, 0x1a
or edi, edx
not edx
rol edx, 0x1c
neg edx
xor ecx, esi
xor edi, ecx
sub ecx, edi
or esi, edx
neg edi
xchg edx, esi
jmp 0x4ff6bd
pop ebx
shl ecx, 4
rol edi, 0x1e
shr ecx, 6
or esi, 0x5f853b9
and ecx, esi
and esi, ecx
jmp 0x4fda95
push 0x4af3dd5
rol esi, 0x17
shr edx, 0x10
or edi, esi
and esi, edx
shr ecx, 5
xor esi, 0x5faf0e9
xchg ecx, edx
xchg esi, ecx
or ecx, esi
sub edi, ecx
jmp 0x500471
pop ebx
xchg esi, edx
add edi, 0x5fb9e79
mov edi, ecx
mov edx, 0x5fbd35d
inc edx
mov esi, edx
add edi, 0x5fc209d
mov edi, 0x5fc3d85
sub ecx, esi
or esi, ecx
ror edx, 0x15
inc ecx
mov esi, edx
add edi, 0x5fcdc99
jmp 0x4fea8c
pop ebx
or edi, edx
or esi, 0x604009d
dec ecx
xor ecx, 0x604398b
xchg esi, ecx
and edx, edi
inc esi
mov edx, 0x604a74b
jmp 0x4fed5b
pop ebx
bswap ecx
or ecx, edx
and esi, edx
mov esi, 0x60a615b
bswap edx
add esi, 0x60a9de9
xchg ecx, edi
xor edx, 0x60ad2b3
xor edx, edi
and edx, edi
mov ecx, esi
mov edx, 0x60b389d
jmp 0x4fd9a6
pop ebx
add edi, ecx
dec edx
or edi, edx
and esi, ecx
xor ecx, edx
xor ecx, 0x60bde71
xchg esi, ecx
xor ecx, edi
dec edx
xor edx, 0x60c4e29
jmp 0x4ffa6d
push esp
or esi, edi
bswap ecx
dec edi
bswap edx
xchg ecx, edi
and edx, ecx
not edi
xchg ecx, edx
or esi, 0x60d5537
mov ecx, edx
jmp 0x4fe7a8
push 0x4b1dc4f
add edi, 0x60eb107
or ecx, 0x60eca6f
and ecx, 0x60ee757
xchg edi, esi
shl edi, 0x14
dec edi
xor edi, 0x60f5603
mov esi, edi
mov ecx, 0x60f8bbd
bswap edx
jmp 0x4feccf
push 0x4aaf72f
or edx, esi
dec ecx
or ecx, edx
add edi, edx
and edx, ecx
shl ecx, 0x1c
mov edx, 0x6106af9
ror edi, 4
or edx, esi
neg ecx
add esi, ecx
inc edx
jmp 0x4fd377
mov ebx, 0x2a676233
mov ecx, edi
or ecx, edx
xchg ecx, edi
or ecx, 0x6116407
and ecx, 0x611816f
or edx, 0x6119a57
and ecx, 0x611bb7b
or edx, 0x611d415
inc edi
sub edi, 0x6120d03
add ecx, esi
mov edi, esi
xor esi, edi
not edi
jmp 0x500382
push 0x4b1c145
and esi, edx
mov edi, ecx
shl esi, 0xd
xor edx, 0x61552b3
add edi, esi
or ecx, esi
sub ecx, 0x615a569
xor edx, 0x615be7b
jmp 0x4fdaef
call fcn.00500b5a
add edx, edi
rol edx, 0x17
dec ecx
and ecx, edi
or edx, esi
shl esi, 0x15
xchg edx, esi
mov esi, edi
add edi, esi
xchg edi, esi
jmp 0x4ff27b
call ebx
add ecx, esi
xor ecx, 0x61a9361
mov esi, ecx
add edi, ecx
and edi, edx
or esi, 0x61af671
nop
nop
jmp 0x4ffd3f
pop ebx
or esi, ecx
dec edx
xor ecx, esi
and edi, esi
bswap edx
or edx, ecx
jmp 0x500937
pop ebx
dec edx
or edx, 0x622ff87
add edx, esi
xor edx, esi
xchg ecx, edi
add esi, ecx
not esi
add edx, esi
xor edx, esi
or edx, 0x623d3d5
jmp 0x4fdb20
pop ebx
mov edi, edx
rol edx, 0x11
neg edx
mov ecx, edi
sub edx, esi
xor ecx, edi
xor edi, edx
neg edx
jmp 0x5007ea
push 0x4b1a289
not edi
add edx, esi
add esi, 0x6314b39
add esi, edx
mov ecx, 0x6317fc7
add edi, edx
add esi, edi
mov edx, 0x631c8bf
jmp 0x4fdbd5
pop ebx
not edx
and esi, edx
or ecx, edx
or edx, ecx
sub edi, edx
add edx, esi
jmp 0x4fdea1
pop ebx
dec edx
xor edx, ecx
ror edi, 2
or edx, esi
and ecx, edi
or esi, 0x634abdb
xchg edi, edx
rol esi, 0x15
ror ecx, 1
bswap ecx
xor edx, esi
xchg edx, ecx
jmp 0x4fe7f0
pop ebx
mov edi, 0x6384075
not edi
mov ecx, edx
sub ecx, edi
sub edx, ecx
sub edi, 0x638c9a7
bswap esi
not edx
and esi, edx
sub edi, 0x6393545
sub esi, edi
add ecx, esi
jmp 0x4ff19b
push 0x4b09b6e
not edi
mov ecx, edx
shl edx, 0x15
sub edx, edi
shr edx, 1
shl ecx, 0x12
mov edx, 0x63a3097
sub ecx, 0x63a4da1
mov ecx, edi
sub edx, esi
mov edi, 0x63a996b
or edx, edi
jmp 0x500a69
push 0x4b30739
bswap esi
xor esi, ecx
add edi, 0x64936b5
xor edi, edx
sub edi, 0x6496d07
sub esi, edi
sub ecx, esi
and edi, ecx
ror esi, 8
or edx, ecx
mov esi, edi
and esi, edi
jmp 0x5002d6
call ebx
sub edi, edx
add edx, ecx
xchg edx, ecx
neg edi
or esi, edi
xor edx, esi
add edx, 0x650f375
or esi, edx
shr edx, 9
xor esi, ecx
not edx
and esi, edx
jmp 0x4ff4af
push 0x4b65815
add esi, edi
and edi, edx
xor esi, 0x6566b8b
add edx, esi
add ecx, edi
add ecx, edx
xor edi, ecx
neg ecx
mov edi, ecx
sub edi, esi
jmp 0x4fed06
pop ebx
add edx, esi
sub ecx, 0x669ecf5
xor edx, 0x66a09dd
sub edx, 0x66a22c5
add edx, 0x66a3c51
ror edx, 0x13
not ecx
sub ecx, 0x66a8eb7
and edi, 0x66aaf5b
or edx, edi
and edx, ecx
mov edx, 0x66afb7b
rol ecx, 7
xor ecx, edx
sub edx, edi
add ecx, edx
jmp 0x4ff8c1
push 0x4abdd5f
and edx, esi
sub edi, edx
sub esi, 0x66bb8a7
or edi, esi
inc esi
or esi, edx
or ecx, 0x66c2763
or esi, ecx
jmp 0x500811
call fcn.00500b5a
sub edx, ecx
or esi, edi
xchg esi, ecx
bswap ecx
or ecx, edi
nop
mov ecx, 0x670b171
inc edx
sub ecx, edi
or esi, edx
jmp 0x500145
push esp
and edi, 0x6712a05
and esi, edi
sub esi, ecx
or edi, esi
jmp 0x4ff9b2
pop ebx
neg edi
add edi, ecx
add esi, edx
mov ecx, 0x673bcbf
or edi, 0x673d9a7
sub edx, edi
or ecx, esi
and ecx, edx
or ecx, edx
and esi, edx
ror esi, 0x18
bswap esi
add edi, esi
dec edi
jmp 0x4ff638
call ebx
and edi, ecx
or edi, edx
rol edx, 0x17
neg edx
and edi, esi
add esi, 0x681a211
add esi, edx
add edx, edi
add edi, 0x681f27f
and edx, esi
nop
xor esi, edi
jmp 0x5002f4
pop ebx
shl edx, 1
xchg ecx, esi
sub edx, ecx
sub edi, 0x687bd4b
add ecx, esi
ror ecx, 0x1e
sub esi, ecx
or edi, esi
jmp 0x4ffe18
push 0x4b69741
rol esi, 0x15
mov ecx, esi
mov edx, 0x68b3c15
rol ecx, 9
xor edi, ecx
xchg edi, edx
jmp 0x4ff45e
call fcn.00500b5a
xchg edi, edx
and ecx, 0x691060f
and edx, edi
sub edi, esi
sub edi, 0x69154a1
bswap edx
inc edx
sub edi, esi
sub esi, 0x691c403
or esi, 0x691e16b
sub edi, 0x691fa05
or edi, esi
or edx, esi
add esi, ecx
jmp 0x4fd638
call fcn.00500b5a
mov esi, edx
mov edx, edi
add edx, 0x6954427
xor ecx, 0x695610f
shl edx, 9
xor edi, ecx
xor edi, ecx
mov ecx, edx
sub edi, edx
shl esi, 0x16
bswap ecx
xchg edi, esi
sub edx, edi
or edi, edx
shl ecx, 3
mov ecx, esi
jmp 0x4fe9b3
mov ebx, 0x2a676233
xchg edi, edx
sub edi, edx
rol esi, 0x10
ror edx, 1
xchg ecx, edi
ror esi, 0x11
inc ecx
or edx, edi
jmp 0x4fd3b2
mov ebx, 0x2a676233
ror edx, 0x19
mov edx, esi
or ecx, edi
xchg esi, edi
xor esi, 0x699bf73
xchg ecx, edx
jmp 0x4fec69
push 0x4b67991
xor edx, esi
xchg edi, esi
sub edx, esi
or ecx, 0x69a55c7
and ecx, 0x69a6f05
or edi, edx
bswap esi
bswap edi
xchg esi, edi
inc ecx
jmp 0x4feb05
pop ebx
or edx, esi
xor ecx, edx
sub edx, edi
add ecx, edx
or esi, edi
xor esi, 0x69d1afd
mov esi, edx
xchg esi, edi
ror edi, 0x12
not esi
nop
sub edx, 0x69dc15d
jmp 0x4fcbc2
call ebx
xor edi, esi
neg esi
xor edi, edx
neg edx
and edi, esi
sub edi, ecx
shl edx, 0x12
xor edi, ecx
jmp 0x50086b
call ebx
and ecx, 0x6b11e73
add edi, ecx
mov edi, ecx
and edx, 0x6b16ac1
add edi, edx
add esi, edi
mov edx, 0x6b1b797
shl edx, 0x14
xor edi, ecx
xchg edi, edx
xor esi, edx
xchg ecx, edx
jmp 0x4fdd9c
pop ebx
and edi, edx
add edx, 0x6b6bbd9
add esi, ecx
or edx, esi
sub esi, 0x6b706cb
xchg ecx, edi
xor edi, edx
mov edi, esi
mov edi, ecx
sub edi, esi
shl edi, 0x17
xor edx, esi
jmp 0x4fdf9a
push 0x4b4302d
and ecx, esi
not edx
rol edx, 0xf
shr ecx, 1
or edx, ecx
sub edi, esi
sub edx, esi
or edi, ecx
add esi, 0x6c020d7
and edx, ecx
sub ecx, edx
nop
sub ecx, esi
dec ecx
jmp 0x4feceb
push 0x4acfba3
add esi, 0x6c335d1
add esi, edx
mov esi, edx
add edi, 0x6c37e49
add esi, edi
mov esi, edi
add edx, esi
or edx, edi
sub edx, 0x6c585eb
xor esi, 0x6c59e85
nop
not edi
mov ecx, edx
sub ecx, edi
xor ecx, edx
mov ecx, esi
jmp 0x4fd07f
call ebx
not ecx
and esi, ecx
or esi, edi
xchg edi, esi
shr ecx, 0x15
xchg ecx, edi
jmp 0x4fe6a6
push 0x4b3434f
xchg esi, edi
bswap ecx
xchg edx, ecx
or ecx, edx
xchg ecx, edi
shr edx, 0x10
jmp 0x50004f
pop ebx
or esi, ecx
xor edi, esi
neg esi
shr esi, 6
rol edx, 0x16
sub edx, ecx
and edi, esi
add ecx, esi
add esi, edx
xchg esi, edx
xchg edi, ecx
or ecx, edi
jmp 0x4fd767
push 0x4ade151
not ecx
shl ecx, 6
sub edx, esi
and ecx, edi
sub ecx, edx
and esi, edi
sub esi, ecx
xor esi, 0x6d32bcb
jmp 0x50006b
push 0x4b6b571
and edi, esi
add ecx, esi
xor ecx, edi
or ecx, edx
mov edx, edi
add ecx, edx
add esi, ecx
xchg ecx, edx
sub ecx, edx
or edx, edi
add esi, edx
and edi, edx
jmp 0x4fdb45
pop ebx
shl esi, 0x17
xchg edx, esi
or esi, edx
xor edx, ecx
or ecx, 0x6da488d
and edi, ecx
xor edx, 0x6da7ce5
shl esi, 0x14
xor edx, ecx
xchg edx, esi
and esi, 0x6dae601
add esi, 0x6db0347
jmp 0x50072a
pop ebx
inc ecx
or edx, edi
xor ecx, esi
and edi, esi
or edi, 0x6e0ae03
and edi, 0x6e0cb41
and edi, ecx
xor edx, 0x6e0ff43
add edx, ecx
xchg edi, esi
and edi, 0x6e15127
xchg esi, edi
jmp 0x4fe089
pop ebx
sub edx, edi
bswap ecx
and esi, ecx
sub edx, ecx
jmp 0x4fe43e
pop ebx
or edx, ecx
add edx, edi
xchg edx, edi
shr edx, 0x19
or edi, esi
inc esi
jmp 0x4fd39c
pop ebx
shr edi, 6
bswap edi
inc edx
sub edi, esi
mov ecx, edx
sub ecx, edi
and edi, edx
shr edi, 0xf
jmp 0x4ff883
push 0x4a9bc4b
ror edx, 0x1d
or ecx, edi
and ecx, esi
xor edx, edi
add esi, 0x6ea52b5
ror edx, 0xf
or ecx, edi
and ecx, edx
not ecx
add ecx, esi
and edx, esi
mov esi, ecx
jmp 0x4ff94d
mov ebx, 0x2a676233
and esi, edi
xor ecx, 0x6f228df
bswap edi
not esi
and esi, edi
or ecx, esi
rol esi, 0x18
ror edx, 0x13
sub esi, ecx
bswap edx
mov esi, ecx
add edi, ecx
neg edx
xor ecx, esi
and edi, esi
bswap edx
jmp 0x4fdbfc
pop ebx
mov edx, edi
xchg ecx, edi
dec edx
or edx, 0x6f86e5f
or esi, ecx
ror edx, 0x1b
bswap edx
add edi, edx
jmp 0x50040b
pop ebx
xchg ecx, edi
shr ecx, 0x1e
sub esi, edi
sub ecx, esi
sub ecx, edi
xor ecx, edx
shr ecx, 0x13
xchg ecx, edi
jmp 0x4fd32d
push 0x4a9d835
or edi, edx
or edx, ecx
add edx, edi
and ecx, edx
dec edi
xor edx, edi
xor edx, edi
or edx, ecx
sub ecx, edi
sub esi, 0x6ffbb33
jmp 0x4fd5e8
mov ebx, 0x2a676233
and edi, 0x700fd43
sub ecx, 0x70116ab
or ecx, 0x7013345
bswap edi
mov esi, edi
sub edi, edx
rol esi, 0xc
and ecx, edi
jmp 0x5001bc
push 0x40
xchg ecx, edi
or ecx, 0x701fa61
xchg esi, edi
or ecx, esi
add edx, ecx
add edi, edx
jmp 0x500214
push 0x4adc5cd
add edi, ecx
xor ecx, edx
add edx, edi
xchg edi, ecx
or edi, esi
not esi
xor esi, ecx
not edx
xchg edx, edi
or ecx, edx
jmp 0x4ff3c9
mov ebx, 0x2a676233
xor edi, edx
neg edx
and edi, esi
add esi, 0x709e319
and edx, esi
mov esi, edx
or edx, edi
mov esi, 0x70a46ab
xchg esi, ecx
xor edx, ecx
mov edx, esi
xor edx, 0x70ab249
bswap edi
xchg ecx, edx
jmp 0x4ffbec
call fcn.00500b5a
add edx, esi
sub esi, edi
add ecx, edi
add ecx, edx
xchg edi, edx
and ecx, 0x713fb1d
shr edx, 9
rol ecx, 5
dec ecx
mov ecx, edx
and edi, edx
xchg edx, esi
shl edi, 2
xchg edi, esi
jmp 0x4fef8a
pop ebx
or ecx, esi
mov edi, esi
xor ecx, esi
xor edx, 0x71e9b69
xor esi, edx
rol edi, 0x15
xor edx, ecx
sub esi, edi
xor esi, ecx
inc esi
jmp 0x4ff383
push 0x4b169a2
inc ecx
and edx, 0x725c2d3
add ecx, esi
mov edi, esi
xor ecx, esi
shr edx, 0x15
xor esi, ecx
inc esi
dec edx
or edi, edx
jmp 0x50016a
mov ebx, 0x2a676233
xor edx, ecx
add esi, edi
shr edx, 6
add ecx, edi
xor edi, 0x728da13
sub edi, 0x728f751
jmp 0x4fff22
call ebx
add edi, ecx
shr ecx, 0x1f
rol edx, 1
add esi, ecx
xchg ecx, edx
xchg esi, edi
ror edi, 0x1d
xchg esi, edx
bswap edi
not esi
and esi, edi
ror edi, 0x19
and ecx, 0x72c1abd
xor edi, 0x72c37a5
jmp 0x4fda69
call fcn.00500b5a
shl ecx, 0x1d
xor ecx, 0x72dc57d
and ecx, esi
add esi, 0x72df67b
xor edi, esi
xchg edx, esi
mov ecx, esi
and edi, esi
mov ecx, edi
dec esi
bswap ecx
sub edi, ecx
jmp 0x4fff9f
push 0x4af1f19
xchg edx, ecx
neg edi
xor edi, esi
xor edi, esi
xor ecx, edi
mov edx, ecx
shr ecx, 0x17
shl ecx, 0xe
or ecx, 0x72fc6a7
and edi, ecx
jmp 0x4fd86c
call ebx
not edi
mov edi, ecx
mov esi, 0x731ef67
add edx, edi
shl esi, 0x14
add edx, 0x7323dd7
xchg ecx, esi
or ecx, edx
jmp 0x5008a6
mov ebx, 0x2a676233
shl ecx, 0x18
shr edx, 0x1a
add ecx, edi
sub ecx, edx
xchg esi, edx
sub ecx, edi
xchg edx, esi
mov ecx, esi
jmp 0x4fceed
push 0x4adfc0d
and edi, ecx
or edi, esi
or edx, edi
bswap edx
sub ecx, esi
or esi, edi
sub edi, ecx
sub esi, 0x738378d
and esi, edx
mov edi, edx
mov esi, 0x738841f
xchg ecx, edx
jmp 0x4fd20f
call fcn.00500b5a
or edx, edi
bswap edx
rol edx, 0x11
shr edx, 8
and ecx, 0x73abac9
mov edx, esi
add ecx, 0x73af3c7
xchg edi, edx
xchg edi, edx
mov edx, 0x73b4107
bswap esi
rol esi, 0xa
jmp 0x4fe382
call ebx
xor ecx, esi
sub esi, ecx
xchg esi, edi
mov edx, edi
sub esi, edx
and ecx, edx
or edx, ecx
and ecx, esi
shl edx, 0x15
shr esi, 0x10
and edx, 0x73ec951
xchg esi, edi
jmp 0x4ff57b
push 0x4b187dd
not esi
mov edi, ecx
sub edx, 0x73f3c7d
rol ecx, 5
or esi, edx
add ecx, edx
mov esi, 0x73fa8c1
or esi, ecx
shr esi, 0xc
add edx, esi
add ecx, edi
and edx, edi
and edx, ecx
and ecx, esi
jmp 0x4fdf76
pop ebx
shl ecx, 0x17
or edi, ecx
and esi, edx
neg edi
sub esi, edi
add edx, ecx
sub ecx, esi
and ecx, edi
and ecx, 0x7414aa5
xor edi, 0x741678d
jmp 0x500b2f
call fcn.00500b5a
xchg edx, esi
mov ecx, esi
neg edx
or edi, ecx
sub edi, esi
xor edi, ecx
shr ecx, 0xd
shl ecx, 0x1b
shr edx, 0x15
and ecx, 0x7427bd7
xchg ecx, edi
mov edx, ecx
jmp 0x4fdc95
mov ebx, 0x2a676233
xchg ecx, edx
add edi, 0x742eb5b
not ecx
and ecx, 0x743215d
inc ecx
or edx, edi
jmp 0x5000c7
push 0xfb67a
add ecx, edi
shr edi, 0x1f
and esi, edi
and esi, ecx
mov edi, 0x7446209
mov edi, ecx
xchg ecx, esi
sub edi, 0x744b185
and esi, edi
mov edi, esi
mov edi, 0x744fe17
mov edi, ecx
jmp 0x4fce83
push 0x4b3251d
xor edi, edx
dec esi
add ecx, edx
mov edi, edx
mov esi, edi
sub edi, edx
neg edx
sub esi, ecx
rol ecx, 5
mov edi, ecx
jmp 0x4ff2ba
pop ebx
xchg edi, edx
sub edx, ecx
or ecx, esi
sub edx, ecx
mov edi, 0x74adb9b
xor ecx, edx
shr ecx, 0x16
rol edx, 0x17
xchg edi, edx
mov esi, edi
jmp 0x500682
call fcn.00500b5a
inc edi
dec esi
xor esi, 0x74f6201
sub esi, 0x74f7f47
sub ecx, edx
add edx, edi
xor esi, ecx
or edx, esi
xor ecx, 0x75003d3
or edx, edi
xor edi, esi
and edx, edi
jmp 0x4fefed
push 0x4b2e88f
sub edi, esi
xor edi, ecx
and ecx, edi
or edx, edi
shr edx, 2
mov esi, ecx
rol ecx, 4
mov edi, ecx
jmp 0x4fe296
mov ebx, 0x2a676233
xchg edi, edx
add esi, ecx
and ecx, edx
add edi, edx
jmp 0x4fd41a
push 0x4acc067
dec ecx
mov edi, esi
mov ecx, edi
and edx, edi
and edx, ecx
sub edi, 0x75b53db
or edx, esi
xor edi, edx
and edx, esi
not edi
jmp 0x4fd4aa
call ebx
not edx
add edx, esi
or edx, edi
xor ecx, edi
jmp 0x4fd251
mov ebx, 0x4132136a
or esi, edx
add edi, ecx
add esi, edx
xor edi, ecx
xchg edi, edx
nop
or esi, ecx
ror edi, 0xf
jmp 0x50079b
push 0x4a8ebd1
sub edi, ecx
mov esi, 0x7689ab3
mov esi, edi
and esi, 0x768cc45
xchg ecx, edx
xchg esi, edi
mov edx, edi
not edx
sub edi, edx
add edx, edi
jmp 0x5001e5
push 0x4a98261
and edx, edi
and edx, ecx
and ecx, 0x76c27f9
xchg esi, ecx
rol edx, 0x16
add esi, edx
and ecx, esi
rol edx, 0xc
jmp 0x4fd7fd
call fcn.00500b5a
and esi, 0x76ed46d
and esi, edx
or edi, ecx
add edi, edx
xchg edx, esi
mov ecx, esi
mov edi, 0x76f6dab
shl edi, 0x13
or esi, 0x76fa747
mov edi, edx
jmp 0x4fdab5
push 0x4af0039
sub esi, edi
and ecx, 0x7714501
xchg edx, edi
add esi, 0x7717881
xor ecx, edi
xchg edx, ecx
xchg edx, ecx
or edi, edx
rol esi, 0x1e
add ecx, edx
jmp 0x4fff4c
push 0x4abf895
xor edi, esi
and edx, edi
mov esi, 0x772733d
mov esi, edi
add edx, esi
and ecx, 0x772bc8f
jmp 0x4ffab5
pop ebx
rol edx, 0xe
mov edi, edx
xor esi, edi
mov edi, ecx
and edi, 0x77499af
sub ecx, esi
xor edi, ecx
or esi, edx
jmp fcn.004ff24b
pop ebx
or edx, ecx
sub edx, esi
and esi, ecx
and edi, 0x77555ab
xchg esi, edx
and edi, edx
add ecx, esi
and esi, ecx
and edx, esi
or esi, edx
jmp 0x500199
pop ebx
or esi, edi
add ecx, edi
mov edx, edi
add edi, 0x77768bd
jmp 0x4ff091
pop ebx
nop
mov ecx, edi
xor edi, esi
xor edx, esi
add edx, ecx
not esi
jmp 0x500850
call ebx
add esi, ecx
sub edx, esi
add edi, ecx
add esi, edx
xor edi, ecx
xor ecx, edi
ror esi, 1
add edx, esi
xor esi, ecx
shl edx, 0xb
shr esi, 0xd
nop
xor ecx, esi
add esi, edi
jmp 0x4ff5a8
push 0x4b0b9f7
bswap esi
sub edi, esi
or edi, edx
add edx, ecx
xor edx, edi
sub edi, edx
mov edi, 0x785fcd7
xchg esi, edx
and edi, ecx
bswap edx
sub edi, edx
sub edi, 0x78682b5
rol esi, 0x16
mov edi, 0x786b8d3
rol edi, 4
add esi, edi
jmp 0x4fd2ff
pop ebx
nop
xor ecx, esi
shr esi, 0xf
sub esi, 0x78c0427
or edx, ecx
mov edi, esi
shl edi, 4
mov edx, esi
inc ecx
and edx, 0x78ca273
xchg edi, ecx
rol esi, 7
mov edi, esi
mov ecx, edi
jmp 0x500505