Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetLastError
cmp eax, 0xfffffed6
jne 0x4010a7
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
ret
call sub.kernel32.dll_GetLastError
cmp eax, 0xfffffefb
jne 0x401108
call sub.ntdll.dll_ZwCreateTimer
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ntdll.dll_ZwCreateTimer
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffeec
jne 0x401169
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffefd
jne 0x401201
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ws2_32.dll_WSAGetOverlappedResult
call sub.ntdll.dll_ZwCreateTimer
call sub.ws2_32.dll_WSAGetOverlappedResult
ret
jmp 0x5272ea
add ebx, edx
inc edi
or ebx, edi
or edi, ecx
bswap ecx
rol edi, 7
jmp 0x52a496
mov ebx, 0x6332a2e
and edx, 0x536a266d
add edi, edx
mov ecx, edi
shl edi, 6
sub ecx, 0x536b23f8
or edi, ecx
add esi, 0x536b9b54
or edx, edi
xor ecx, edi
sub edx, ecx
jmp 0x527efd
mov ebx, 0x6332a2e
xor ecx, edx
dec esi
jmp 0x5281ff
call ebx
ror edx, 0x17
or edx, edi
ror ecx, 3
and ecx, edx
xchg edx, esi
jmp 0x528128
mov ebx, 0x6332a2e
mov ecx, edi
sub esi, edx
add edx, edi
sub edx, esi
mov edx, 0x53860eda
shl edi, 0x17
shr ecx, 0x1a
jmp 0x527742
call fcn.00528421
sub esi, 0x5394cf70
shl edi, 0x1e
neg edx
shl edx, 0x18
not edi
or ecx, 0x53960906
xor edx, esi
not edx
xor ecx, edi
sub edi, ecx
jmp 0x529788
pop ebx
xor ecx, edx
and esi, 0x539d0eaf
rol esi, 0x12
dec ecx
xchg esi, ecx
or ecx, edx
and esi, 0x539e542a
not ecx
add ecx, esi
and ecx, edi
add edx, ecx
mov esi, 0x539f8596
xchg ecx, edx
jmp 0x52844d
pop ebx
mov edi, esi
and edi, 0x53a05588
and ecx, edx
shr esi, 0x1a
or esi, ecx
jmp 0x527ecc
call fcn.00528421
add esi, edi
xchg edi, ecx
add edi, esi
xor edx, ecx
ror ecx, 2
sub edx, edi
xor edi, ecx
mov esi, 0x53af3a0c
jmp 0x529a7c
call ebx
and ecx, esi
xor esi, edi
xor ecx, 0x53b56446
mov edx, esi
or esi, edx
xor ecx, edi
xor esi, edx
jmp 0x5292d0
push 0x51f6f7bf
sub esi, 0x53bf148a
sub esi, ecx
mov edx, edi
sub ecx, 0x53bfcac9
sub ecx, edx
sub edx, esi
not esi
xchg ecx, esi
mov esi, 0x53c10f73
xchg esi, ecx
or edx, esi
neg esi
dec ecx
jmp 0x528861
mov ebx, 0x6332a2e
mov esi, edi
add edi, ecx
inc ecx
neg edi
and ecx, edi
and edx, 0x53c3a2a9
mov edx, ecx
jmp 0x52a7cc
push 0x51e3e218
xchg edi, esi
mov edx, edi
add esi, edi
xor ecx, esi
jmp 0x528154
pop ebx
mov ecx, 0x53ce7410
or ecx, edi
xor edi, ecx
sub edx, 0x53cf2d96
xor edx, 0x53cf7cca
jmp 0x5299a2
push 0x40
sub edi, ecx
mov esi, ecx
or edx, ecx
shr ecx, 4
sub esi, 0x53d2e853
neg esi
shl ecx, 0xa
inc ecx
ror esi, 0x1e
xor edi, edx
add esi, edi
mov ecx, esi
add ecx, edx
xchg esi, edx
dec ecx
jmp 0x528c36
pop ebx
dec edi
or esi, edi
inc esi
mov ecx, edi
inc edi
sub ecx, esi
sub ecx, 0x53e9420b
mov ecx, edi
shr ecx, 0x11
bswap edx
jmp 0x528d8b
pop ebx
neg ecx
xor edx, esi
xor ecx, esi
and edx, ecx
bswap esi
jmp 0x527ea0
call ebx
mov ecx, 0x5417513b
add edx, 0x54178fc5
and ecx, edx
xor edi, ecx
xor ecx, 0x541848a1
add edi, esi
xor ecx, edx
jmp 0x527901
push 0x51df4b27
xchg edx, ecx
dec ecx
not ecx
ror edi, 7
and edx, edi
jmp 0x528106
push 0x51deba22
nop
not ecx
or edi, esi
and ecx, 0x54248327
sub edi, esi
xor esi, ecx
dec edi
sub edi, 0x542587be
rol edi, 0x1d
and edx, esi
xor ecx, 0x54263b4b
ror esi, 0x1d
xor esi, ecx
not ecx
rol esi, 0xe
jmp 0x528f38
push esp
mov esi, 0x542ea127
xor esi, edi
sub edx, edi
mov esi, edi
rol ecx, 3
xor esi, 0x542fcfe3
xchg esi, edx
nop
inc edx
jmp 0x528a03
push 0x51ec4271
dec ecx
shr ecx, 0xb
sub esi, edx
xchg ecx, esi
bswap edx
jmp 0x528d2e
push 0x51e7d3a7
shr edx, 0x14
mov edi, edx
neg edx
ror esi, 9
or esi, ecx
shl edi, 0xf
nop
mov ecx, esi
or edx, ecx
or edi, esi
and edi, ecx
mov edi, edx
neg edi
add esi, 0x56cf29ef
jmp 0x5288e0
pop ebx
xchg edi, ecx
sub edx, 0x56d16b5e
xchg edi, edx
xor edi, ecx
xchg edi, edx
mov edi, esi
jmp 0x527a34
call fcn.00528421
mov ecx, edi
rol edx, 4
neg esi
and ecx, edx
or edx, esi
dec edi
shr esi, 0xf
xor esi, ecx
neg edi
jmp 0x528cb4
call fcn.00528421
mov esi, edx
add edx, esi
xchg edi, ecx
sub edi, esi
xor ecx, edx
add edx, esi
and ecx, 0x56f25a93
and esi, ecx
jmp 0x527ca2
push 0x51fb5ca3
or edx, edi
xchg edi, edx
bswap edx
dec ecx
add edx, 0x570054d1
jmp 0x5288c6
call fcn.00528421
not ecx
shr edx, 0x12
add esi, ecx
ror ecx, 0x19
xor edi, edx
and esi, ecx
sub ecx, edi
add edx, edi
rol ecx, 7
sub ecx, 0x570b08e4
dec edx
sub esi, ecx
jmp 0x5274cc
push 0x51e866cc
and edx, esi
add ecx, 0x57182d51
bswap ecx
jmp 0x52894b
push 0x51fdfc6e
add ecx, edi
xchg edi, ecx
not ecx
mov ecx, esi
mov edi, ecx
xchg edi, edx
neg esi
add edi, ecx
inc edi
xor edx, ecx
and ecx, 0x5746cd25
xor esi, edi
jmp 0x529bc0
mov ebx, 0x6332a2e
dec edi
ror esi, 8
not edi
xor edx, 0x575b81ef
or ecx, 0x575c70bc
and esi, ecx
xchg ecx, edi
and edi, edx
jmp 0x529d42
pop ebx
not edx
mov edi, 0x57606c30
add esi, edx
xor edi, edx
inc ecx
or esi, ecx
sub edx, esi
or edi, esi
or esi, edx
add ecx, edx
mov edx, esi
or edi, 0x5767fad5
xchg edi, ecx
xchg edi, esi
and ecx, edx
xchg esi, edi
jmp 0x52a70e
push 0x51e47d9e
add esi, ecx
ror edx, 0x17
mov esi, 0x596a1713
inc edi
mov ecx, edx
inc edi
shl edx, 1
mov esi, edi
add edx, esi
jmp 0x528de1
push 0x51f6ac57
or esi, ecx
rol edi, 0xa
shr esi, 3
add edx, ecx
or edi, edx
mov edi, edx
neg edi
and esi, 0x5a35ecff
or ecx, edx
and edx, 0x5a36ebd3
xor ecx, esi
ror ecx, 0x18
or edi, edx
and edx, ecx
jmp 0x527837
call fcn.00528421
sub edi, 0x5a46d49e
neg edx
not ecx
sub esi, ecx
sub esi, 0x5a48d366
xor esi, ecx
not ecx
shl edi, 5
or esi, ecx
neg edx
and ecx, esi
xor edx, esi
jmp 0x528a38
push 0x51de7179
and edx, ecx
ror esi, 0x16
dec edi
or edx, edi
and edi, esi
ror edx, 0xc
or edi, ecx
sub ecx, 0x5a5013b8
sub edx, esi
shr edi, 0x15
sub edi, 0x5a517aaf
mov edi, ecx
add edx, edi
jmp 0x527d5c
call fcn.00528421
sub edi, edx
add esi, edi
xchg ecx, edx
or edi, edx
add edx, 0x5a60d46f
and esi, edx
and ecx, edx
mov edi, esi
add ecx, edi
jmp 0x52850b
push 0x5200096a
neg esi
or edi, edx
sub ecx, edx
nop
and edx, esi
bswap edx
sub edi, ecx
or esi, ecx
ror ecx, 0x10
mov ecx, esi
jmp 0x528476
call fcn.00528421
and edi, esi
bswap edx
not esi
add edi, ecx
shl edx, 0x16
shl ecx, 0xd
shr esi, 0xc
xchg edi, esi
xor edi, esi
and esi, 0x5a7c18f7
add ecx, esi
jmp 0x5277a5
push 0x51eedf28
bswap edi
xor edi, 0x5a8c0c16
xchg ecx, edx
or edi, edx
sub edx, edi
xor ecx, edx
mov esi, edi
nop
not ecx
or edx, 0x5a8fe3e4
add ecx, edx
jmp 0x528f61
mov ebx, 0x4132136a
and edi, ecx
xor edx, 0x5aa1112e
dec edi
rol ecx, 0xb
dec edi
xor ecx, 0x5aa2f617
add ecx, 0x5aa36e0f
or esi, 0x5aa3e7bc
jmp 0x5299f5
push 0x520054d1
add edx, 0x5aa49aef
ror edi, 3
xor edi, ecx
sub ecx, edi
xor edi, ecx
sub ecx, edi
or ecx, 0x5aa76150
shl ecx, 0x1a
sub esi, edx
xor ecx, 0x5aaa25ed
or ecx, edx
or edx, edi
shl esi, 0x1b
and edi, esi
add ecx, edi
mov esi, ecx
jmp 0x528e30
pop ebx
xchg edi, esi
add esi, 0x5ab57059
or edi, edx
or ecx, 0x5ab67eb6
sub ecx, edx
sub edx, ecx
xchg edx, ecx
shl esi, 6
mov ecx, edx
or esi, 0x5ab943c9
jmp 0x529d64
call ebx
inc edx
add esi, ecx
ror esi, 2
mov edi, esi
xor ecx, edx
or ecx, edi
inc edi
inc esi
ror edx, 0x19
shr esi, 7
sub ecx, edx
add ecx, edx
and ecx, edi
add ecx, esi
ror esi, 0x12
bswap edx
jmp 0x52a233
call ebx
neg ecx
mov edx, ecx
xchg ecx, esi
mov edx, edi
shl esi, 0x18
rol ecx, 0x1f
mov ecx, esi
xor ecx, edi
and edx, ecx
jmp 0x528931
pop ebx
ror edi, 0x1e
mov ecx, esi
shr esi, 0x1a
sub edx, ecx
mov edi, 0x5afc50dd
xor edi, esi
xchg edi, edx
jmp 0x529e48
mov ebx, 0x6332a2e
shl edx, 3
and edi, edx
and edx, edi
or esi, edx
or ecx, esi
add edi, 0x5b039024
xor ecx, esi
bswap ecx
mov edi, edx
inc edx
add esi, edx
mov edi, edx
neg edi
add edi, ecx
mov esi, edx
jmp 0x52834d
pop ebx
add ecx, edi
xchg esi, ecx
ror esi, 0xe
shr edi, 0x1e
xchg edx, edi
or edx, 0x5b087353
jmp 0x52a01a
mov ebx, 0x6332a2e
and edx, 0x5b0b5b48
mov edi, edx
xor edi, ecx
bswap edi
xchg edi, edx
xor esi, 0x5b0cfb1c
xor edx, 0x5b0d4b14
and ecx, esi
add edx, 0x5b0de890
or edx, edi
xor edx, ecx
and ecx, esi
or edi, ecx
jmp 0x528bf4
mov ebx, 0x2a676233
sub esi, ecx
not edx
mov edx, 0x5b20770d
add edi, ecx
add edx, 0x5b211271
add edx, edi
add edi, ecx
rol edi, 0xb
or edi, 0x5b226137
xchg edi, ecx
sub edi, esi
and ecx, edx
mov edi, ecx
jmp 0x5275ea
pop ebx
xchg esi, edx
rol edx, 9
ror ecx, 0xf
inc edi
shr esi, 1
rol edi, 0x18
ror ecx, 9
mov edi, ecx
jmp 0x528994
push 0x51fba7d1
sub edx, esi
and edx, esi
shl esi, 0x19
or edi, 0x5b29f272
rol ecx, 0xf
jmp 0x52872d
push 0x51e81cd1
and esi, edx
add ecx, esi
xor esi, ecx
and esi, ecx
xchg esi, edx
xchg edx, esi
bswap edx
sub ecx, edx
mov ecx, 0x5b2d3af4
xchg edx, esi
jmp 0x527ffa
pop ebx
xor edx, ecx
xchg edi, ecx
sub edi, edx
xchg ecx, edx
or edi, esi
xchg esi, edx
xor edi, ecx
bswap ecx
mov esi, ecx
sub edi, edx
jmp 0x528759
push 0x51e8b0c6
mov esi, edx
add ecx, esi
and ecx, edx
or ecx, edi
jmp 0x52749c
call fcn.00528421
or edx, ecx
mov edx, ecx
jmp 0x52a0ca
push 0x51ee953b
rol edx, 0x15
xor esi, edi
mov esi, edi
xchg edi, ecx
rol ecx, 0x1a
inc edi
sub edi, edx
mov esi, 0x5b3b9690
or esi, edx
xor edi, ecx
shl esi, 4
jmp 0x5283af
call ebx
mov esi, ecx
mov edx, 0x5b40986a
and edi, ecx
inc edi
and esi, edx
add edi, esi
mov edx, 0x5b421f6b
sub edi, ecx
bswap edi
jmp 0x5284e4
push esp
not edi
or esi, ecx
inc esi
jmp 0x52793f
call ebx
xor ecx, 0x5b48ff9b
xor edi, esi
xchg edx, esi
dec ecx
xchg edx, ecx
xchg esi, ecx
ror edx, 6
sub ecx, 0x5b4b411d
add ecx, edi
xor ecx, edi
add edi, ecx
jmp 0x529c44
pop ebx
neg ecx
and esi, ecx
add edx, ecx
sub edi, esi
xchg ecx, edi
add ecx, esi
jmp 0x52a2e2
push 0x51f17761
xor esi, edx
mov edi, 0x5b72d154
sub esi, edx
sub edx, 0x5b7370e8
xor ecx, 0x5b73c04b
dec edx
and esi, 0x5b7476e1
mov ecx, 0x5b74c6be
mov edi, 0x5b751570
not edx
jmp 0x52a0bb
call fcn.00528421
and edx, edi
shr ecx, 0x16
xchg esi, edi
sub edx, ecx
inc edi
add edx, edi
jmp 0x5289e5
pop ebx
or edx, edi
xor ecx, edx
xor ecx, edi
xchg esi, edx
neg edx
inc esi
and edx, ecx
jmp 0x528bb0
push 0x125eea
xor edi, 0x5b7cb923
bswap esi
add ecx, 0x5b7d5ae2
add edi, 0x5b7dbfef
sub edx, ecx
or esi, edx
and esi, edx
jmp fcn.00528634
call ebx
or esi, edx
mov esi, edx
xchg ecx, edi
and ecx, 0x5b88e7c4
xchg edi, esi
shl edi, 0xb
xor edi, esi
or ecx, edi
xchg edx, edi
jmp 0x529cbe
pop ebx
sub edi, edx
mov esi, edx
shl esi, 0x1e
sub esi, ecx
and ecx, edx
xor ecx, 0x5b8c6c2e
inc edi
or edx, edi
add edi, ecx
and esi, 0x5b8dbb2c
xchg edx, esi
mov edi, ecx
dec edx
jmp 0x528173
push 0x51ec8da5
bswap edx
not ecx
or esi, ecx
or ecx, edx
ror esi, 0xe
xor edi, 0x5b951e79
xor ecx, esi
or edx, ecx
shr esi, 0x10
add edi, ecx
mov edx, edi
and edx, 0x5b97070a
jmp 0x529abd
push 0x51f12d1b
add edx, esi
dec edx
or edx, ecx
mov esi, ecx
not edx
or ecx, 0x5b9da529
xor edi, edx
or ecx, edi
xchg esi, edi
sub esi, edx
jmp 0x528bc2
push 0x51e4f945
rol ecx, 0x13
rol edi, 0xe
bswap esi
sub edx, 0x5ba4a168
nop
xchg edx, edi
xor edi, edx
xchg esi, edi
jmp 0x52987d
push 0x52009f80
add ecx, 0x5bab2572
or ecx, edx
or esi, ecx
rol ecx, 0x17
xor ecx, 0x5bac7539
sub ecx, edx
mov ecx, 0x5bad149a
xchg esi, edx
jmp 0x529938
push 0x51df0381
add edi, esi
nop
xchg edi, esi
add esi, edi
add esi, 0x5bc393c9
add edi, edx
mov esi, 0x5bc43094
and ecx, esi
rol ecx, 0x17
rol esi, 6
shr edi, 0x1d
jmp 0x527d48
push 0x51ef29bf
shr ecx, 0x15
sub ecx, 0x5bc63220
sub ecx, edx
or edi, 0x5bc6d093
not esi
shl ecx, 0x14
xor edi, edx
xchg esi, edi
mov esi, edi
rol edi, 6
mov edx, edi
not ecx
jmp 0x527520
mov ebx, 0x2a676233
xchg esi, edx
xchg esi, edi
add ecx, esi
add ecx, 0x5bed680a
dec edi
jmp 0x527f9b
push 0x51f3325e
sub esi, 0x5c07a0ed
xor ecx, 0x5c07f0cf
shr edx, 0xe
inc ecx
or ecx, edx
xchg edx, edi
xchg esi, ecx
xor edi, 0x5c09e234
sub esi, edx
jmp 0x527865
pop ebx
add edx, edi
xor edx, ecx
not edx
sub edi, 0x5c1840cc
and esi, ecx
mov ecx, edi
shl ecx, 6
xor esi, edx
neg edx
jmp 0x529521
push 0x52013418
bswap ecx
xor edx, 0x5c36706d
or edi, ecx
xor ecx, 0x5c370e6b
xor edx, esi
and ecx, edi
or esi, 0x5c37f914
sub edi, edx
shr ecx, 0xe
add edx, ecx
inc esi
jmp 0x5290fb
pop ebx
shl edx, 0x17
add edx, edi
and esi, edi
inc edx
add edx, esi
or edx, edi
neg edi
sub ecx, edx
sub ecx, 0x6bbafe24
jmp 0x52a67f
pop ebx
add ecx, edi
bswap edx
neg edi
or esi, ecx
and edi, esi
and esi, edi
sub ecx, esi
xor esi, edi
xor edi, 0x6bc8783f
add esi, edi
jmp 0x52981a
pop ebx
mov edx, ecx
and edx, ecx
sub edx, 0x6bc98896
or edx, esi
shl edi, 0x1b
mov esi, ecx
dec edi
xor edx, edi
jmp 0x52a122
pop ebx
add ecx, 0x6bcb25bf
and esi, 0x6bcb63b2
sub edx, 0x6bcba1fe
sub esi, ecx
and esi, edx
add esi, edi
not ecx
not edi
or esi, ecx
jmp 0x52996e
call ebx
add edx, 0x6bcdf48a
xor edi, 0x6bce315a
dec esi
add edx, esi
and edi, ecx
sub esi, ecx
and esi, ecx
and esi, 0x6bcf98aa
xor edi, ecx
add esi, ecx
inc edi
not edx
sub edi, edx
jmp 0x529dd8
pop ebx
xor esi, ecx
xchg edi, ecx
mov ecx, esi
dec ecx
shl esi, 1
neg esi
xor edx, esi
or ecx, edx
jmp 0x52a5bf
push 0x51f903e2
not ecx
xor edx, esi
xor edi, esi
xchg esi, ecx
sub edi, edx
rol esi, 0x16
sub esi, edx
jmp 0x529b52
push 0x51ebf92f
neg edx
and esi, edi
and edi, ecx
or edx, esi
and edi, 0x6bf6795d
not esi
jmp 0x527e8c
call ebx
or esi, 0x6bf9db91
not ecx
or edi, ecx
mov ecx, 0x6bfa9513
mov edx, ecx
or edi, ecx
add esi, edi
shr edi, 0x15
xor edx, 0x6bfbd71d
or edi, esi
and edi, edx
shl edx, 6
jmp 0x52964d
push 0x51fd68a2
add edx, edi
inc edi
xor ecx, edx
add edi, edx
and edx, 0x6c053d1e
mov ecx, edx
jmp 0x52a3a0
mov ebx, 0x6332a2e
shr ecx, 2
sub ecx, edx
and esi, edi
shr ecx, 0xb
shl esi, 1
sub esi, ecx
mov edx, edi
sub edx, esi
and ecx, esi
xor esi, edi
dec ecx
jmp 0x527f53
push 0x5200ea8d
and edi, edx
xor edi, esi
or ecx, edi
add edx, ecx
and ecx, edx
or esi, ecx
xchg edi, edx
and edx, esi
and edi, esi
or edx, esi
sub esi, ecx
shr edi, 5
mov edi, edx
jmp 0x5293ef
pop ebx
xor ecx, edi
or edx, ecx
rol esi, 0xa
add edi, esi
rol edx, 0xb
bswap edx
xor esi, edx
add esi, edi
mov ecx, edi
inc ecx
jmp 0x5282ca
pop ebx
xor ecx, edi
and ecx, 0x6c21ccf3
mov edi, ecx
and edx, esi
xor edx, esi
ror esi, 0xf
xchg ecx, edi
or edx, edi
not edi
and esi, ecx
jmp 0x529a43
call fcn.00528421
or ecx, edi
sub ecx, edi
or edx, ecx
rol edi, 3
or ecx, 0x6c27be20
dec edi
sub esi, edx
bswap edx
shl edi, 0xc
jmp 0x527e05
pop ebx
xchg ecx, edx
add edi, 0x6c2ccfb3
or edx, edi
xor edx, esi
or edi, esi
sub edi, 0x6c2dd521
jmp 0x527b20
call ebx
or ecx, edi
or edi, edx
shr edx, 0xc
mov ecx, edx
add ecx, 0x6c31b2f6
xor ecx, 0x6c31f0e1
or esi, edx
and esi, edi
add ecx, 0x6c32b750
xchg ecx, edx
neg edx
jmp 0x52767f
mov ebx, 0x6332a2e
mov ecx, edx
xor edi, esi
rol esi, 0x18
add esi, 0x6c356e7f
shl esi, 0x12
shl edi, 6
or esi, ecx
sub edx, edi
and esi, ecx
mov edx, edi
jmp 0x52a760
push 0x51f94d71
add edx, ecx
mov esi, edi
or ecx, esi
mov edx, 0x6c3f0f6f
mov ecx, esi
shr edx, 9
add esi, edx
dec ecx
neg ecx
and esi, edx
add esi, 0x6c40cdc8
shr ecx, 6
or esi, 0x6c414ba7
shl edi, 0xc
jmp 0x528787
mov ebx, 0x6332a2e
or edx, edi
not edx
sub edx, ecx
inc ecx
or esi, ecx
bswap edx
xor edx, ecx
dec ecx
jmp 0x5282aa
push 0x51f4f0b6
or edx, edi
bswap edi
xor esi, 0x6c48bdac
and ecx, 0x6c48fb1d
add edi, esi
ror edi, 0x17
jmp 0x52738b
pop ebx
shr edx, 0x14
xchg esi, edi
or esi, ecx
add edi, edx
mov esi, edx
or esi, edx
sub edx, esi
add edx, ecx
or esi, edx
and edi, 0x6c52325e
xchg esi, ecx
xor edi, esi
jmp 0x528c23
pop ebx
inc ecx
and esi, edx
and edi, 0x6c596a94
shl ecx, 9
xor esi, edx
xor edi, esi
and edx, edi
jmp 0x528cd2
pop ebx
mov edi, 0x6c5f798e
xor edx, esi
bswap edi
xor ecx, 0x6c603f9c
or esi, ecx
xchg esi, ecx
or edi, 0x6c60f4fb
and ecx, edx
jmp 0x527f84
call fcn.00528421
xchg edi, esi
or esi, edi
and esi, edx
xor edx, esi
or ecx, esi
xchg edi, ecx
shr esi, 0x14
xchg edi, edx
and ecx, edi
xchg edx, ecx
rol ecx, 0x14
jmp 0x52860c
pop ebx
and edi, 0x6c64422a
sub edi, 0x6c6490ba
bswap esi
and edi, 0x6c650a48
or edi, 0x6c654775
mov ecx, esi
jmp 0x529d21
pop ebx
neg esi
mov edx, edi
or edi, esi
or ecx, 0x6c6d700f
sub edx, edi
or ecx, edi
jmp 0x529ea5
push 0x51e31d34
xchg esi, edx
add edi, 0x6c755eed
xchg edi, esi
dec esi
sub esi, edi
mov esi, edx
rol ecx, 1
add ecx, 0x6c76e73f
rol esi, 0x13
jmp 0x5278ac
push 0x51f4a6fb
sub ecx, esi
shr ecx, 0x19
mov ecx, 0x6c7d3990
shr esi, 0x1b
sub edi, 0x6c7db769
sub edx, esi
xor esi, 0x6c7e45ef
jmp 0x529bd8
pop ebx
xor esi, edi
sub edi, esi
xor ecx, edi
or edx, ecx
shl edi, 0xa
and edx, ecx
jmp 0x52a07b
pop ebx
or esi, edi
dec ecx
sub edi, edx
mov ecx, 0x6c9d9528
nop
sub edx, ecx
mov edx, esi
xchg edx, edi
or ecx, esi
jmp 0x5286f3
mov ebx, 0x6332a2e
and edi, edx
dec edx
sub edi, esi
jmp 0x52895d
call ebx
mov esi, 0x6ca308fb
xor edx, 0x6ca3460e
sub edi, esi
dec edi
or ecx, edi
mov ecx, esi
sub edi, edx
mov esi, edx
mov esi, ecx
mov edi, ecx
xchg ecx, esi
xchg edx, ecx
not ecx
jmp 0x52945f
pop ebx
xchg esi, ecx
mov ecx, edi
add ecx, edi
bswap ecx
ror esi, 0x15
ror esi, 8
and ecx, 0x6caad552
sub edx, esi
mov edx, edi
ror ecx, 0x14
mov esi, edx
and esi, edi
jmp 0x527654
push 0x51f8b8ae
add esi, ecx
not esi
inc esi
or edi, ecx
and edx, esi
ror edi, 0x1f
mov edi, ecx
add esi, edi
jmp 0x5296f8
pop ebx
inc esi
add edi, esi
shr edx, 0x16
rol edx, 8
xor edx, esi
sub esi, edi
dec esi
xor edi, ecx
add ecx, 0x6cb94634
jmp 0x52a4f0
pop ebx
shr esi, 0x15
or ecx, edi
mov ecx, 0x6cbec1d5
shl esi, 5
add edi, edx
shr edi, 0x13
xor edx, ecx
xor ecx, edx
and ecx, esi
and edi, edx
bswap esi
xchg edi, ecx
and edi, 0x6cc13853
or esi, ecx
jmp 0x529559
pop ebx
or edx, esi
sub esi, 0x6cca8b7d
or ecx, edi
mov ecx, 0x6ccb052a
mov ecx, esi
neg edx
bswap edx
and ecx, 0x6ccc0dc7
rol esi, 0xc
xchg ecx, edi
jmp 0x52974d
push 0x51fdb2c6
bswap edx
xchg edx, esi
shr ecx, 3
xchg esi, edx
shr esi, 0x15
xor edi, ecx
or ecx, edi
rol edi, 6
xor esi, edi
shl esi, 5
jmp 0x528093
push 0x51de1e7d
inc ecx
sub edx, esi
ror edi, 2
neg ecx
and edi, esi
neg edx
jmp 0x52822a
pop ebx
xor esi, 0x6cf89841
or edi, ecx
dec ecx
ror edx, 0x19
sub ecx, edx
neg ecx
sub edi, 0x6cfa06ca
xchg esi, edx
xchg edi, esi
neg edx
shr ecx, 0x1e
xchg edx, esi
jmp 0x5288ac
call ebx
xor edi, 0x6d02a1ff
inc ecx
neg esi
mov edx, ecx
sub edx, ecx
shl edx, 7
jmp 0x52a1da
pop ebx
shl ecx, 0x1f
xor esi, 0x6d0862c4
sub esi, edx
bswap edx
add edi, ecx
and ecx, esi
dec edi
or edi, esi
xor edx, 0x6d0a1552
jmp 0x52a18a
pop ebx
add esi, edx
shl edi, 0x18
xor ecx, esi
shl esi, 0xa
xchg ecx, edi
xor ecx, esi
neg edi
and ecx, edi
xchg esi, edi
mov edx, ecx
and esi, 0x6d186f5e
or edx, ecx
sub esi, ecx
shl esi, 0x1c
jmp 0x529210
pop ebx
and ecx, 0x6d20ce39
or edx, 0x6d210b06
or edi, edx
sub edx, esi
ror edx, 0xb
or ecx, esi
xor ecx, 0x6d2247f6
bswap edx
xor edx, esi
bswap ecx
mov edx, 0x6d233a4b
jmp 0x52953f
call fcn.00528421
rol edx, 0x1b
add esi, ecx
rol edi, 9
sub ecx, 0x6d27397e
bswap edi
xor edi, 0x6d27b5a8
mov ecx, 0x6d27f2a9
xchg esi, edi
sub ecx, 0x6d287a1b
jmp 0x52a57a
call fcn.00528421
dec edi
mov edi, edx
neg edi
mov edi, 0x6d2dce4b
and esi, ecx
xor esi, edi
xchg esi, ecx
and ecx, 0x6d2ec23c
sub ecx, edi
shl ecx, 3
jmp 0x52957d