Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey
Get common file path
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xffffff28
jne 0x401089
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_GetSystemDirectoryA
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtCreateEventPair
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xffffff36
jne 0x4010ef
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_GetSystemDirectoryA
call sub.kernel32.dll_GetSystemDirectoryA
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtCreateEventPair
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xffffff1b
jne 0x401164
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_GetSystemDirectoryA
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtCreateEventPair
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xffffff38
jne 0x4011ed
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_GetSystemDirectoryA
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtCreateEventPair
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xfffffeef
jne 0x40124e
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.kernel32.dll_GetSystemDirectoryA
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_GetSystemDirectoryA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtCreateEventPair
call sub.ntdll.dll_NtCreateEventPair
call sub.kernel32.dll_FindNextVolumeMountPointA
call sub.ntdll.dll_NtQueryInstallUILanguage
call sub.ntdll.dll_NtCreateEventPair
ret
jmp 0x515810
or edi, ebx
sub edx, ebx
mov esi, ebx
dec edx
jmp 0x51766f
call fcn.00518afc
mov ecx, ebx
ror edx, 0x1a
or ecx, ebx
or ebx, edx
inc edi
jmp 0x518530
pop esi
mov ecx, ebx
sub edx, ebx
xchg ebx, edx
xchg ebx, edx
bswap edx
add edi, ebx
mov ecx, 0x9f258a65
or ecx, ebx
rol edi, 0x10
xchg ebx, edx
mov ecx, edx
jmp 0x51704e
push esp
mov ecx, 0x9f3338f0
inc ebx
sub edx, ebx
xor edi, ebx
sub ebx, edi
add edi, edx
or ebx, edx
mov edx, edi
xor edx, 0x9f35190b
sub edi, ecx
inc edi
mov ebx, edi
xor ebx, edx
or edi, edx
xor edx, 0x9f3676d8
jmp 0x516b3d
push 0x9d79ff37
mov ebx, ecx
not ebx
mov ecx, 0x9f373cfb
mov ecx, 0x9f3778d9
neg edx
xor edx, ebx
sub edx, 0x9f3839b9
jmp 0x5175a0
pop esi
mov ecx, 0x9f3ea4b7
add edx, edi
bswap edi
sub edx, ecx
and edi, ebx
shl ecx, 0xc
mov edx, edi
xchg edi, edx
xchg edi, ecx
or ebx, edx
inc edx
not ebx
jmp 0x5174af
pop esi
or ebx, edx
mov edx, ebx
sub edi, ecx
dec ebx
jmp 0x5163d1
call fcn.00518afc
sub ecx, edx
xor edi, edx
bswap ecx
rol edi, 0x11
xor ebx, 0x9f49b24c
shl edx, 0xb
mov ecx, 0x9f4a2ac0
inc edi
xor edx, 0x9f4aa42c
jmp 0x516147
push 0x9d827692
and edi, 0x9f71278b
xchg edi, edx
sub ebx, edi
and edx, 0x9f71e253
mov edi, ebx
jmp 0x516c99
pop esi
mov edx, edi
or edi, ecx
add ebx, edx
or ebx, edx
xchg ebx, edi
sub ebx, edx
shl ecx, 1
jmp 0x515fa8
push 0x9d7cfe72
or edi, 0x9f79a17e
mov ecx, edx
and edi, ebx
bswap ebx
shr edi, 0xa
sub ecx, 0x9f7aec0d
sub edx, edi
mov edx, 0x9f7b92a0
dec ecx
jmp 0x5172eb
call fcn.00518afc
mov ebx, edx
mov edi, ecx
and edi, edx
ror ebx, 0x18
bswap ecx
add edx, edi
or edi, ecx
jmp 0x517983
pop esi
shr ebx, 5
xchg ebx, ecx
or ebx, ecx
add ebx, 0x9f8c4c90
xor ecx, edi
neg ecx
jmp 0x5167a9
pop esi
add edx, edi
mov edi, edx
shr ebx, 7
mov edi, edx
mov ecx, edi
rol ebx, 0x15
sub ebx, edx
neg edi
sub ecx, edi
mov ebx, edx
mov edx, ecx
mov edx, edi
shr ecx, 1
xor ebx, ecx
add ebx, edi
jmp 0x517f8f
push 0x9d6b67fe
shr ebx, 3
mov ebx, edx
or edx, edi
xor edi, ecx
and ebx, edx
rol edi, 1
mov edx, 0x9fa4971e
add ecx, edi
xor ecx, ebx
shl edx, 0x13
and edi, edx
jmp 0x518695
mov esi, 0x75624153
shl ebx, 0x1c
xor ebx, 0x9faa84b1
rol edi, 0x19
xchg edi, ecx
sub ecx, 0x9fab3743
shr ecx, 0x1b
jmp 0x51635d
push 0x9d762f0a
dec ecx
xchg ecx, ebx
mov ebx, edx
xchg edi, ebx
shr edx, 0x10
and ebx, edx
add edx, 0x9fad82c3
and ebx, ecx
shr edx, 3
or edx, 0x9fae355e
sub edx, ebx
inc ebx
sub edi, ecx
jmp 0x518a14
pop esi
and edx, ecx
not ebx
mov ecx, 0x9fafb0b9
add ebx, edi
xor ecx, 0x9fb09184
add ecx, 0x9fb0cc87
bswap ebx
ror edx, 4
add edx, 0x9fb1850d
dec edi
jmp 0x517d7a
pop esi
xchg edi, ecx
not ecx
inc ebx
neg edi
or edi, ecx
shr ebx, 0xa
and ecx, edx
jmp 0x5159ba
pop esi
add ecx, 0x9fb61e31
mov ecx, edx
add edx, edi
neg ecx
add edi, 0x9fb7086e
ror edi, 0x15
add edi, edx
xor ecx, ebx
mov edi, edx
inc ebx
sub ecx, edx
jmp 0x518807
pop esi
or ecx, 0x9fb8c72f
or edi, edx
or edx, edi
xchg ebx, ecx
xor edx, edi
mov edx, ecx
xor edi, ecx
jmp 0x515830
pop esi
shl ecx, 0x14
bswap edi
or ebx, edx
not edx
sub ecx, 0x9fbd1a48
and edx, 0x9fbd5616
xchg ecx, ebx
sub ecx, ebx
jmp 0x5176a7
call esi
mov edi, 0x9fbe1cf8
add edi, 0x9fbe58b7
shl ebx, 0x19
jmp 0x517613
mov esi, 0x4132136a
sub ebx, edx
inc ecx
mov ecx, ebx
xchg edx, ecx
shl ebx, 0x15
xchg ebx, ecx
not ecx
jmp 0x51843a
call esi
xchg edi, ecx
mov ecx, edx
and ebx, edi
add ebx, 0x9fce0fea
and edx, ecx
sub edx, edi
xor ebx, 0x9fcecbc8
jmp 0x51623a
push 0x9d6dce4e
sub ebx, edx
sub ecx, edx
add ecx, edi
xor edi, edx
xor edx, edi
or edx, edi
shr ebx, 0x1a
sub edi, ecx
sub edi, edx
jmp 0x517caa
pop esi
xor edi, edx
ror edi, 5
add edx, ecx
bswap ebx
jmp 0x516a73
push 0x9d70810e
or edi, ebx
add edi, 0x9fdb2d4a
mov ecx, edx
xor ebx, edx
ror edx, 6
ror ecx, 0x1a
sub edx, ebx
xchg ebx, ecx
jmp 0x5179b7
pop esi
xor edx, edi
or edi, edx
mov edx, ecx
bswap edi
xchg edi, edx
add ebx, 0x9fde1aec
jmp 0x515a1c
push 0x9d88e242
sub ecx, ebx
and edi, ecx
and edx, ebx
rol ebx, 0x14
or ecx, edx
shr ecx, 9
sub edi, ecx
jmp 0x518682
call fcn.00518afc
xchg edi, edx
or ebx, ecx
xchg edi, ebx
and edi, edx
add ebx, edx
xor ecx, ebx
sub ebx, edx
xor edx, ebx
jmp 0x5169c8
push 0x9d6b234c
xchg edx, edi
xchg edi, edx
ror ecx, 0x18
xchg ebx, edx
or edi, ecx
mov ecx, 0x9ffae1b1
or edx, ebx
mov ecx, edx
xchg ecx, ebx
jmp 0x515edd
push 0x9d698970
mov edx, 0x9ffe2559
sub ebx, edi
and ecx, ebx
add ebx, 0x9ffed21d
sub ebx, ecx
and ebx, edx
and edx, ebx
xor ebx, 0x9fffc957
xor edi, edx
sub ebx, edi
jmp 0x517377
pop esi
or ebx, edi
and edi, 0xa0035264
or ecx, edi
and edi, ecx
shl ecx, 0x19
shl edi, 0x13
sub edi, ebx
xor ecx, edx
shr edx, 0x12
xchg edi, ebx
jmp 0x515d95
push 0x9d6d8b3d
sub ebx, edx
rol edi, 0x16
or edx, ecx
rol ecx, 0x1c
not edx
shr edx, 8
mov ebx, ecx
add edi, 0xa009b4ed
dec ebx
jmp 0x516187
pop esi
mov ebx, 0xa00a4403
inc ebx
and ecx, edx
or edi, ecx
xchg edi, ecx
and edi, 0xa00b6ee5
xor edi, ecx
ror ecx, 0x1d
add edi, ecx
xor ebx, edi
xchg ebx, ecx
add edx, ebx
mov ebx, edx
mov edi, ecx
jmp 0x5188e6
push 0x9d7d8a26
nop
xchg ecx, edx
sub ebx, ecx
rol edi, 0x18
add ebx, edx
xor ecx, edi
sub edi, ecx
sub edx, ecx
sub edx, ebx
jmp 0x51890c
call esi
and edx, ecx
neg edi
add ebx, edx
neg ecx
xchg ebx, ecx
or edx, 0xa0283f19
and ebx, 0xa0287b95
xchg edx, ebx
xchg ecx, edi
jmp 0x51791c
mov esi, 0x75624153
mov ebx, edi
add edi, edx
rol edx, 0x14
add edx, edi
or ebx, edi
xchg edx, edi
mov edx, edi
xor ecx, edi
xor ecx, ebx
or edi, ebx
not ecx
mov edi, ecx
shr edx, 0x13
shl ecx, 2
inc edx
jmp 0x5171a8
push 0x9d6ff7d2
sub ecx, edx
add ebx, ecx
add ebx, ecx
or edx, ebx
and ecx, edi
jmp 0x51673c
call esi
mov ecx, 0xa035085e
or ecx, ebx
xchg ebx, ecx
dec edi
bswap ecx
shl ebx, 4
sub edi, 0xa03677ec
dec edx
shl edx, 3
dec ecx
xor ebx, ecx
xor ecx, 0xa037aeb3
jmp 0x5179d9
push 0x9d703a30
add ecx, edi
add ecx, ebx
and edi, ebx
add edi, 0xa038aaa0
ror edi, 0xa
or ecx, edi
jmp 0x51621a
mov esi, 0x3f4d7907
sub edi, 0xa03983da
not ebx
and edi, edx
bswap edx
shr edx, 6
mov ecx, edx
add ebx, edx
rol ecx, 2
sub ebx, edx
shr ecx, 0xc
jmp 0x51694d
pop esi
shl edi, 0x17
and edi, 0xa03c32c0
add ebx, edx
xor edi, ebx
sub ebx, edi
mov ecx, 0xa03d2694
mov edi, ecx
or ebx, ecx
inc edi
sub edx, ebx
sub edi, ecx
jmp 0x5164d4
pop esi
xchg edx, ecx
xchg edx, ebx
mov edx, 0xa03fbee2
rol edi, 0x16
and ebx, edi
inc ebx
add ecx, 0xa040b110
sub edi, 0xa040f7bc
add ebx, ecx
sub edi, edx
xchg edx, ecx
jmp 0x517069
mov esi, 0x3f4d7907
xor edi, ebx
bswap edx
mov ebx, edi
xor edi, ebx
shr ebx, 2
or ebx, 0xa0510d50
or edi, 0xa05146a7
and ecx, ebx
mov edx, 0xa051bde8
neg ebx
or ebx, ecx
xor edx, 0xa05271a6
jmp 0x51581c
push 0x114410
neg edx
add edi, edx
xor edx, edi
add edi, ebx
bswap ebx
add edi, ebx
or edx, edi
and edx, ecx
rol edx, 0x15
and ecx, edi
mov ecx, edi
sub ecx, edi
jmp 0x517877
call fcn.00518afc
add ebx, edi
xor edx, edi
and edx, ebx
add edi, ecx
shl ecx, 6
bswap ebx
jmp 0x5180ac
call esi
sub ebx, edi
inc ebx
mov edx, ecx
add edi, edx
not ebx
mov edi, 0xa0668275
ror edi, 0xd
add ecx, 0xa066fd98
or edi, ebx
jmp 0x515eb6
push 0x9d83044d
add ebx, edi
xor ebx, 0xa0697bac
or ecx, edx
bswap edx
ror ebx, 0x19
ror edi, 0x1d
xchg ebx, edx
mov edx, ecx
mov edx, 0xa06b261a
jmp 0x516895
pop esi
add edi, edx
and ecx, edi
xchg edi, ecx
jmp 0x516d0e
pop esi
xor edi, 0xa070b8f8
mov edi, ecx
add edx, ebx
shr edi, 0xa
not ecx
sub edi, 0xa07269d1
mov edi, ecx
add edx, edi
xchg edx, ecx
xchg edx, edi
sub ecx, edx
xor ecx, edi
jmp 0x5166ff
call fcn.00518afc
xchg edx, edi
or edi, edx
neg edx
xchg edi, ebx
add ecx, edi
mov edi, edx
xor edx, ebx
sub ebx, ecx
add edx, edi
bswap edx
jmp 0x5180eb
push 0x40
dec ecx
bswap ecx
xchg edi, ebx
sub ebx, edx
xor ebx, 0xa0817ceb
jmp 0x5168f9
push 0x9d694285
mov edx, ebx
add edi, edx
or edi, edx
xchg edx, edi
sub edx, edi
and edx, edi
add ebx, ecx
xor ecx, edx
jmp 0x516417
call esi
or edx, edi
or edi, edx
sub ebx, ecx
xor edx, edi
shl ecx, 0x1d
add edi, ecx
and ecx, ebx
xor edx, 0xa0976e18
add ecx, 0xa097d225
jmp 0x515f7f
push 0x9d82bf2e
xor ecx, edi
shr edi, 9
bswap edx
and edi, 0xa0a699a5
and edi, ecx
bswap edx
xor ebx, 0xa0a74a8e
add edx, 0xa0a7860e
jmp 0x516a09
push 0x9d77d146
ror edi, 0x1d
or edx, 0xa0adaa93
rol edx, 0x10
xchg ecx, edi
shr ecx, 0x1c
not ebx
xchg edi, ebx
and edx, ebx
sub ecx, 0xa0af572e
rol edi, 2
jmp 0x51780e
pop esi
and edi, edx
or edi, ebx
rol edx, 0xa
xor ecx, edx
neg ecx
xchg ecx, edx
add ebx, 0xa0bbe90b
not ecx
jmp 0x515c74
call fcn.00518afc
sub ecx, 0xa0dd9570
and edi, ecx
shr edi, 0x18
xchg ebx, edx
xor edi, 0xa0deb172
or ecx, edx
mov edi, edx
or ecx, edx
add edx, ebx
nop
jmp 0x516713
push 0x9d79b922
mov ecx, edi
or edx, 0xa1737b02
inc ebx
sub ebx, ecx
neg edi
xor ecx, edi
add edx, edi
jmp 0x515931
pop esi
xchg edi, edx
add edx, ecx
not edi
or edi, 0xa175baf1
or ebx, ecx
or edx, 0xa17630b0
or ebx, edi
mov ebx, 0xa176b0b0
mov edi, edx
jmp fcn.00515a9f
push 0x9d80467b
add edx, 0xa17d0946
or ebx, 0xa17d459e
neg ecx
or edi, edx
inc edx
add ecx, edi
xchg edx, ebx
xchg ecx, edi
not edx
inc ebx
xor edi, 0xa17f6a9a
shl ebx, 0x12
mov edi, edx
jmp 0x517775
push esp
xor ecx, edx
nop
add edi, ecx
or edi, 0xa187131e
sub edi, edx
inc edx
and ebx, ecx
or ecx, 0xa1880150
xchg ebx, edi
jmp 0x515904
call fcn.00518afc
ror ecx, 0x1c
add edx, ecx
sub edx, ebx
shr edi, 0x18
bswap ecx
inc ecx
shr edi, 0x1c
xchg ecx, ebx
or ecx, ebx
sub edi, ecx
and ebx, edx
jmp 0x516c19
call esi
mov edi, 0xa1914178
or edi, ecx
xor ebx, 0xa191c094
jmp 0x515fde
pop esi
and ecx, 0xa195e7bb
and edi, ecx
and ecx, 0xa196665a
add ecx, edi
sub edi, ecx
xor edx, ecx
or ecx, edi
sub edx, ebx
jmp 0x51773c
pop esi
or edi, edx
sub ecx, edx
sub edi, ecx
shl ebx, 0xe
and edi, ecx
mov edi, ecx
jmp 0x516a67
push 0x9d7d4417
mov edx, ecx
rol edx, 0x15
sub ebx, ecx
and ecx, edi
dec ecx
rol ebx, 0xb
add ecx, 0xa1a19dbe
ror edx, 0xb
mov ebx, edi
sub edx, ebx
or ecx, ebx
jmp 0x516559
mov esi, 0x75624153
shl edi, 0x1f
add ecx, 0xa1a99499
mov edx, edi
mov ecx, 0xa1aa1468
and edx, ecx
and edi, ecx
ror ecx, 0x1b
ror ecx, 0x13
and edx, edi
shl ebx, 0xf
jmp 0x515a29
push 0x9d8861eb
rol edx, 0xd
sub ecx, 0xa1ae8c70
inc edx
or edx, edi
add ebx, edx
add ebx, edx
bswap edi
shr edx, 4
ror edx, 9
and edi, edx
neg edx
jmp 0x5162f5
mov esi, 0x3f4d7907
add ebx, edi
dec edx
ror ebx, 0xd
and ecx, edx
inc ecx
xchg ebx, ecx
sub edx, ebx
jmp 0x516f74
push 0x9d875006
mov ebx, 0xa1c19394
add edi, ebx
mov ebx, edi
mov edi, ecx
xor ebx, edi
ror edx, 0xe
jmp 0x518033
pop esi
or ecx, edx
sub ecx, edx
dec edi
and edi, ecx
sub edx, ebx
xor ecx, edi
xor ebx, ecx
add ebx, edi
add edi, ecx
jmp 0x518488
pop esi
add ebx, edi
xchg ebx, ecx
and ebx, edx
or ebx, edx
add ebx, edi
xor edi, 0xa1ef15f5
or edi, ebx
or ebx, ecx
ror edx, 0x1e
sub ecx, edx
dec edx
jmp 0x517a47
push 0x9d7a4564
xor ecx, 0xa1f35d3c
or ecx, edx
add edx, ecx
xor edx, ecx
rol edi, 0xf
shl ecx, 3
sub edi, edx
sub ecx, edi
jmp 0x518aa8
pop esi
bswap ebx
xor ebx, edx
or ebx, ecx
add ecx, edx
or ebx, 0xa1fbecfd
sub edx, 0xa1fc52a0
xor ecx, edx
jmp 0x51620b
call esi
mov ecx, edi
xor edx, ebx
mov ecx, 0xa1ff031d
add ebx, edi
or edx, 0xa2029869
xchg ebx, ecx
xor edx, ebx
jmp 0x518ad0
push 0x9d675de5
sub ecx, edi
inc ebx
sub ecx, edi
sub edi, ecx
mov edi, ebx
not edi
xor ecx, ebx
xor edi, edx
jmp 0x5186e0
push 0x9d75e9a7
add edi, edx
mov ecx, edi
or ebx, ecx
sub edx, ecx
or ebx, edi
and ebx, edi
and ecx, edx
not ecx
xor ecx, edi
jmp 0x515f53
push 0x9d7cb84a
or edx, 0xa2239408
mov ebx, edx
sub ecx, ebx
xor edx, edi
xchg ecx, ebx
jmp 0x515c89
call fcn.00518afc
shl ebx, 7
mov edx, ecx
xor ebx, edi
xchg ebx, edx
xchg ecx, edi
shr ecx, 0x1b
or edx, edi
and ecx, ebx
rol edx, 0x1a
and ecx, 0xa226e359
or edx, ecx
jmp 0x51762f
pop esi
or edi, ecx
or edx, 0xa227a5ba
xchg edi, ebx
xor edx, 0xa2281996
or ebx, edi
add edx, 0xa228951b
rol ecx, 0x1b
jmp 0x5181a6
push 0x9d82301c
rol edx, 0x1b
xor edi, edx
xchg ecx, edx
xor ecx, ebx
sub ecx, ebx
or ebx, 0xa22a8dcf
ror edi, 0x16
xor ecx, edi
bswap edx
add edx, ecx
xor edi, 0xa22bbd47
shl edx, 0x1b
add ecx, 0xa22c30bf
or ebx, 0xa22c6dbd
jmp 0x515bff
push 0x9d808ccb
and ebx, edx
xor edi, 0xa22d0178
and ebx, 0xa22d3bad
add ecx, edx
and ecx, 0xa22dadf0
shr ecx, 7
or ecx, edi
jmp 0x517469
push 0x9d78149e
rol ecx, 0xc
bswap ecx
not edx
xchg edx, ebx
xor edx, ebx
and ecx, ebx
sub ebx, 0xa23dc9e9
jmp 0x516757
call esi
and edi, edx
not edi
sub edx, ebx
xor ebx, ecx
add ecx, 0xa2420a98
add edx, ebx
or edi, edx
jmp 0x51603c
push 0x401400
add ecx, edx
xchg edi, ebx
mov edx, ecx
or edx, ecx
inc edx
not ecx
or edi, 0xa2447e06
or ecx, edi
jmp 0x51785e
mov esi, 0x3f4d7907
sub edx, 0xa2450bb8
mov ecx, 0xa245440f
not ebx
mov ecx, edi
and edx, ecx
and edi, ecx
sub edx, ebx
and edx, ebx
jmp 0x516a9a
pop esi
add edi, 0xa24eda9c
add edx, 0xa24f1948
xchg edi, edx
dec ebx
ror ebx, 4
inc edx
shr edi, 5
mov edi, ebx
add edi, 0xa250c7ad
or edi, ecx
shl ebx, 5
dec ebx
or ecx, ebx
or ebx, ecx
jmp 0x51870c
call fcn.00518afc
or edx, ecx
xor ecx, 0xa252761f
shr edi, 6
xchg edx, ecx
ror edi, 4
rol edi, 3
inc edi
or edi, ecx
shl edi, 0x12
rol edi, 0x13
sub ebx, edi
or edx, edi
shl ecx, 0x1b
jmp 0x516656
call esi
mov ecx, ebx
mov ebx, ecx
and edi, 0xa2563f7f
sub edi, edx
xor edi, ecx
mov edx, ebx
jmp 0x517279
push 0x9d70c414
and edx, 0xa259c830
sub ecx, ebx
sub ebx, edi
sub ecx, 0xa25a7891
xor edi, edx
and edi, edx
not edx
sub ebx, edi
jmp 0x5186c5
pop esi
mov edi, ecx
mov ecx, ebx
dec ecx
neg ebx
bswap edi
rol edx, 2
and edx, edi
jmp 0x51725b
pop esi
ror ecx, 0x1f
and ebx, ecx
rol edi, 0x1d
add edi, 0xa265c906
sub edi, ecx
add edi, ebx
shl ecx, 6
or ebx, 0xa266b48e
jmp 0x5170e7
mov esi, 0x3f4d7907
xor edi, edx
mov edi, ebx
or edx, 0xa26779d1
or ebx, edx
and ecx, ebx
xor ecx, 0xa26830c2
sub edi, ecx
xchg edi, ecx
mov edx, 0xa268e297
sub ecx, ebx
shl edx, 7
jmp 0x51794a
push 0x9d6e128f
xor edi, ebx
neg ecx
xchg edi, ecx
sub ebx, 0xa2920ac6
add edi, edx
and edx, 0xa2928034
or ecx, ebx
ror edx, 0x1c
sub ebx, 0xa29334fd
jmp 0x518922
pop esi
add edi, 0xa29f284b
xor edi, edx
sub edi, ebx
sub ecx, edi
shr ebx, 0xe
sub ebx, ecx
jmp 0x51771b
pop esi
xchg edx, ecx
neg edi
xor edx, 0xa2c991ec
xor ecx, edx
ror ecx, 1
and edx, ebx
mov ebx, edx
sub edi, ecx
mov ecx, 0xa2cae8b0
sub edx, ecx
xchg edi, ecx
mov edx, 0xa2cb92fc
sub ecx, 0xa2cbccee
add edi, ebx
jmp 0x516b54
push 0x9d87de1f
add ecx, edi
or ecx, 0xa2d4f9a5
mov edi, ecx
shl ecx, 9
mov edx, ebx
and edi, 0xa2d5e0b8
not edx
rol edx, 0xa
not ecx
jmp 0x5173bf
call esi
sub ebx, 0xa2dbffe7
sub ebx, ecx
xor edx, 0xa2dc78c3
rol edi, 0x1c
jmp 0x516002
call esi
xchg ebx, ecx
add edx, ebx
and edi, edx
or edx, edi
ror ecx, 0xd
or edi, ecx
jmp 0x51646a
pop esi
mov ebx, edi
shl edi, 7
mov ecx, ebx
xchg edx, ebx
xchg ebx, edi
dec ebx
mov edi, ebx
shr edi, 0x13
ror edi, 0x1b
xchg ebx, edi
add ebx, edx
inc ebx
and ebx, edi
xor edi, 0xa2ee7bcd
add edx, ebx
jmp 0x5176dc
pop esi
add ebx, edi
xor edx, edi
sub ebx, 0xa2f0976d
or ecx, edx
xor ebx, edi
neg ebx
add ebx, ecx
or edx, 0xa2f1bb39
dec ecx
and ecx, ebx
jmp 0x5164b2
call fcn.00518afc
shr ebx, 0x18
dec ecx
mov edi, 0xa30ef211
xor edi, ecx
or edi, 0xa30f64ee
shl edx, 0x18
or ebx, ecx
jmp 0x517210
mov esi, 0x3f4d7907
add ebx, ecx
shr edx, 0x1e
sub edi, ecx
xchg edi, ebx
xor ebx, ecx
and ebx, edx
sub ebx, 0xa312eb1e
dec edx
add edi, ebx
xor edi, ecx
dec edx
xchg edi, edx
xchg ecx, ebx
add ecx, edi
jmp 0x51837c
mov esi, 0x3f4d7907
add edi, edx
xor ecx, ebx
sub edx, ebx
sub edi, edx
bswap ecx
xor ecx, 0xa31824bd
neg ebx
and edx, 0xa3189bee
jmp 0x5176f4
call fcn.00518afc
or ecx, edi
mov ecx, edx
add ecx, edx
or ebx, 0xa31bba02
add ebx, edx
jmp 0x517172
call fcn.00518afc
xor ecx, edi
mov ecx, edx
or ecx, 0xa31ede89
sub ebx, 0xa31f4872
xchg edx, ecx
shl ecx, 4
jmp 0x51605b
pop esi
inc ebx
xchg edi, edx
neg ecx
not ecx
and ebx, edi
and edx, 0xa32172a5
ror ecx, 0x1c
add ebx, edx
jmp 0x517580
call esi
xchg ebx, ecx
ror ebx, 0x15
mov ecx, 0xa32d1b92
xchg ecx, edi
sub ebx, edi
or ecx, ebx
xor edx, ecx
mov ecx, 0xa32e3f68
sub ecx, ebx
mov edx, ecx
shl ecx, 0x13
xchg ecx, ebx
add ecx, edx
jmp 0x516dd2
push 0x9d896397
not edx
mov ebx, edx
ror edx, 0xa
xchg edx, edi
jmp 0x517894
push 0x9d6baa42
add edi, ebx
and edx, ebx
add ebx, ecx
xchg edx, ecx
sub edi, edx
and edi, ecx
jmp 0x517a68
push 0x9d710b3d
and edx, edi
ror edx, 0xd
and edi, 0xa34894c5
shr edx, 0x10
add edx, ecx
inc ebx
jmp 0x5183b9
push 0x9d67a9c6
add ebx, edi
and ecx, edi
xchg edx, ebx
xchg ecx, ebx
not edi
and edx, edi
add ebx, 0xa34af866
or ecx, edi
mov ebx, ecx
add edi, 0xa34baa15
xchg edx, ebx
or edx, edi
add edi, ecx
jmp 0x515f32
pop esi
xchg edx, ebx
xor ebx, edi
rol edx, 0x15
sub ebx, ecx
and edx, 0xa34d910a
add ebx, 0xa34dd758
sub ecx, 0xa34e130b
mov edi, ecx
jmp 0x5181cf
pop esi
add edi, ecx
bswap ebx
add edi, edx
sub edi, 0xa36032aa
xor ecx, edx
add edx, edi
sub edx, ecx
xchg ecx, ebx
xor edx, ecx
add edx, ecx
nop
jmp 0x51677c
pop esi
xor edi, 0xa37171b5
and ebx, 0xa371aa30
sub ebx, ecx
add ecx, edi
xchg ecx, edx
xchg edi, ecx
not ecx
and edi, ebx
sub edx, 0xa373448e
bswap edi
jmp 0x51612f
push 0x9d7dd13a
sub edi, 0xa373d35a
and edx, ecx
rol edi, 0x1a
inc edx
jmp 0x5183f7
mov esi, 0x3f4d7907
or edi, edx
xor edx, 0xa3751850
or ebx, edi
not ecx
jmp 0x518469
mov esi, 0x75624153
and ecx, ebx
bswap ecx
add edx, edi
add edi, edx
and ebx, edi
dec edx
add edx, ebx
ror ecx, 0x18
or edi, ecx
sub ecx, 0xa3852865
jmp 0x515ce8
push 0x9d7a8b77
sub ecx, edx
and ecx, 0xa38d785f
add edx, edi
and ecx, edx
xor ecx, edi
xor ebx, ecx
sub edx, 0xa38e9f12
xor ebx, ecx
or edi, edx
and edi, ecx
mov edi, edx
jmp 0x516692
pop esi
add ecx, 0xa38fcfaa
shr edi, 3
sub edi, edx
neg ebx
or edi, 0xa390b811
mov edi, 0xa390f2e4
xor edx, ecx
and edi, 0xa39170d8
and edi, edx
or ecx, ebx
mov edi, ecx
jmp 0x5174c9