Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xfffffeec
jne 0x4010a2
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xfffffee2
jne 0x401149
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff1b
jne 0x4011d7
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xffffff30
jne 0x40125b
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
call sub.ntdll.dll_NtTranslateFilePath
ret
jmp 0x527ed2
xor edi, ebx
jmp 0x5298d0
pop edx
add ebx, ecx
xor esi, ecx
xor edi, 0xfd19cc2e
xchg esi, edi
or ebx, ecx
rol edi, 1
mov edi, 0xfd1ad849
xor ecx, 0xfd1b1863
mov esi, edi
sub ecx, ebx
xor ebx, esi
mov edi, ecx
xchg edi, ebx
jmp 0x528e2f
pop edx
rol esi, 6
xor ebx, 0xfd1ff266
or ecx, ebx
mov esi, 0xfd206b48
mov edi, 0xfd20a9a9
add ebx, edi
sub ecx, edi
add ebx, edi
mov ecx, ebx
jmp 0x529792
mov edx, 0x2a371b56
and esi, ecx
and edi, ecx
xchg ebx, edi
sub ecx, 0xfd254d50
xor ebx, edi
mov ecx, ebx
ror esi, 0x13
mov ebx, esi
inc ebx
xchg ecx, esi
mov ebx, edi
sub ecx, 0xfd2742ff
shr ebx, 6
and esi, ecx
rol edi, 0x1c
jmp 0x529912
push 0xfb3b9115
inc esi
xor ebx, 0xfd2e6fed
sub ecx, 0xfd2eadda
mov ebx, edi
and edi, ebx
add esi, ebx
jmp 0x528215
call fcn.00529ab4
add edi, esi
neg esi
sub ebx, ecx
add ebx, ecx
mov edi, ebx
neg ebx
shl ecx, 0x16
mov edi, esi
xor esi, edi
add esi, ecx
mov ebx, 0xfd322d8e
jmp 0x52aca4
push 0xfb2dc1b5
not ebx
add ebx, 0xfd32d058
xor esi, 0xfd330e5d
mov edi, 0xfd334cbc
xchg ecx, edi
add esi, ebx
jmp 0x52adc0
push 0xfb2f3003
or ecx, esi
add esi, ecx
mov esi, ecx
inc edi
neg ebx
xchg ebx, esi
and edi, ecx
xor esi, ebx
sub esi, ebx
jmp 0x5295cb
pop edx
xor ecx, ebx
xor esi, ebx
xor ebx, esi
shr edi, 0x1d
or ebx, esi
sub esi, ebx
or edi, ecx
xchg ebx, edi
jmp 0x5288a7
pop edx
sub esi, ecx
xor edi, 0xfd3b7b20
bswap edi
shl ecx, 8
sub edi, ecx
add edi, 0xfd3c825f
or ebx, esi
add esi, ecx
mov esi, 0xfd3d36ff
add ecx, ebx
jmp 0x5299fa
push 0xfb3bdbed
mov ecx, ebx
and esi, ebx
sub ebx, 0xfd46005d
or esi, ecx
not esi
xchg esi, ebx
sub ecx, edi
or edi, esi
or esi, edi
jmp 0x5290d3
push 0xfb285fe1
mov ebx, edi
xor edi, esi
sub esi, edi
or ebx, 0xfd53807a
xchg edi, ebx
mov ecx, edi
xor edi, ecx
jmp 0x52a121
push 0xfb249fa1
and ecx, esi
xor edi, 0xfd5bbbdb
neg ecx
shl edi, 0x17
xchg edi, ebx
xor ecx, ebx
jmp 0x52992a
call edx
xor ecx, 0xfd6da43e
sub edi, ecx
and esi, 0xfd6e3080
xor esi, ecx
sub ebx, ecx
add ebx, esi
sub edi, ecx
and edi, esi
mov ebx, 0xfd6f9b9f
jmp 0x528172
pop edx
ror ecx, 0x11
and esi, ebx
neg edi
ror edi, 0x10
xor ecx, 0xfd70e951
mov edi, ecx
inc ebx
jmp 0x529fe0
pop edx
and ebx, esi
and ecx, 0xfd7c7aca
rol edi, 5
jmp 0x52a57b
push 0xfb31c53b
bswap ebx
sub ebx, esi
inc ecx
and esi, ebx
xor esi, edi
ror edi, 9
xchg esi, ebx
mov edi, ebx
add edi, ecx
jmp 0x529f55
pop edx
add esi, 0xfd8efc4c
xor esi, ecx
inc edi
sub esi, ebx
bswap ecx
xor ecx, 0xfd903115
rol ebx, 0x1f
xchg edi, ebx
mov esi, ecx
jmp 0x52a35b
call fcn.00529ab4
or edi, ebx
sub ebx, ecx
xchg ecx, esi
xchg ecx, ebx
jmp 0x52ac0b
push 0xfb31326d
shr esi, 8
shr edi, 0xb
neg ecx
or ebx, edi
shr esi, 0x15
xchg edi, ebx
mov esi, 0xfda8a668
sub ecx, ebx
neg ebx
jmp 0x529bf1
pop edx
add ecx, ebx
shr ebx, 8
not esi
shl ecx, 0x1a
and ebx, esi
mov edi, ecx
sub esi, edi
mov ecx, esi
jmp 0x5288be
push 0x126ad2
bswap esi
add edi, esi
xchg ecx, esi
or ecx, 0xfdd64dcc
or edi, 0xfdd68cfd
xor edi, esi
and esi, 0xfdd719c6
mov esi, ecx
mov esi, edi
or esi, edi
or ebx, esi
bswap edi
jmp 0x529eb8
pop edx
mov esi, edi
mov esi, ecx
or ebx, ecx
xor esi, ecx
rol ebx, 0x11
or ecx, ebx
xchg esi, edi
mov ebx, edi
jmp 0x52a190
pop edx
and ebx, ecx
and edi, 0xfde58df5
xor edi, esi
xor esi, 0xfde61c7f
xor ecx, esi
xchg ebx, esi
mov esi, ecx
xchg esi, ecx
or esi, ebx
and ecx, edi
not edi
jmp 0x529c42
call fcn.00529ab4
add esi, edi
add ecx, 0xfdf1cde0
add esi, ecx
add esi, edi
and esi, ecx
add ebx, ecx
and ecx, edi
mov edi, esi
mov edi, ecx
xor ecx, ebx
jmp 0x529871
push 0xfb357e17
neg ecx
add ebx, esi
sub ebx, esi
shr edi, 0x18
or ecx, esi
add edi, 0xfe02dd9b
dec esi
mov edi, 0xfe035b38
and ebx, ecx
ror esi, 3
xchg esi, ebx
jmp 0x52968b
call fcn.00529ab4
or ebx, 0xfe211127
or ebx, esi
and esi, 0xfe218d1d
not edi
add esi, 0xfe220e50
neg edi
add ecx, 0xfe228f84
and esi, ecx
sub ecx, esi
xchg esi, edi
sub edi, ebx
ror ebx, 2
jmp 0x52ab57
pop edx
add ecx, edi
sub ebx, esi
mov esi, edi
or ecx, esi
and ebx, esi
and ecx, edi
xor ebx, 0xfe313717
xor ecx, esi
or ecx, esi
and edi, 0xfe31f6f4
jmp 0x52a1f1
call fcn.00529ab4
mov esi, 0xfe324cd4
bswap ebx
xor esi, ebx
or edi, ebx
and ecx, edi
dec ecx
or ecx, 0xfe33d818
and ecx, ebx
mov ecx, esi
not esi
or ecx, ebx
add edi, 0xfe350eba
jmp 0x52a6f6
push 0xfb3ab4e3
mov edi, ecx
add ecx, edi
rol esi, 0x1e
sub esi, edi
add ebx, 0xfe366c56
jmp 0x5290ba
mov edx, 0x73716341
mov ebx, edi
and ecx, edi
shr esi, 0x17
xchg ecx, ebx
xor edi, ecx
or ecx, ebx
mov edi, esi
sub esi, ebx
add esi, ecx
add edi, ecx
xchg edi, ebx
bswap esi
jmp 0x5280e8
call edx
xchg esi, ebx
sub ebx, edi
jmp 0x529f47
push 0xfb2bbd5d
ror edi, 0x10
and esi, ebx
mov esi, edi
xor edi, 0xfef56821
not edi
xchg ecx, ebx
neg esi
sub edi, ebx
sub esi, ebx
mov esi, ecx
mov esi, edi
xchg ebx, edi
jmp 0x52a65e
pop edx
xchg edi, ecx
rol edi, 0x10
add ebx, edi
dec esi
or ebx, 0xff0003b4
or edi, ecx
bswap esi
sub ebx, 0xff00d110
jmp 0x5287da
pop edx
sub esi, ecx
shl esi, 2
and edi, 0xff01ad5d
bswap edi
mov ecx, ebx
mov ecx, ebx
bswap esi
sub ecx, esi
mov ebx, esi
or edi, 0xff0623b9
or ecx, esi
add esi, 0xff06a0e6
sub ecx, ebx
xor ecx, edi
or esi, ebx
jmp 0x52a323
push esp
or edi, 0xff179fd0
mov ebx, ecx
or ecx, ebx
xor edi, esi
ror edi, 0xf
and ebx, ecx
add esi, ebx
jmp 0x529b8e
call fcn.00529ab4
xchg ecx, ebx
rol ecx, 0xf
bswap edi
xor edi, 0xff416e65
jmp 0x529e2a
pop edx
add ebx, esi
xor edi, 0xff43ec11
xor edi, ebx
jmp 0x52ab34
pop edx
mov edi, 0xff66a481
and ebx, 0xff676447
or edi, esi
or esi, edi
xchg ecx, esi
sub ecx, edi
and ecx, ebx
mov ebx, edi
and ecx, esi
xchg esi, ebx
sub edi, esi
or esi, 0xff867337
and esi, edi
xchg ebx, ecx
jmp 0x5293a7
push 0xfb3afeb9
xor edi, 0xff9c5182
add esi, ebx
dec edi
and esi, ebx
add ebx, ecx
xor ebx, ecx
jmp 0x52a0c3
mov edx, 0x73716341
xor esi, ebx
and ebx, edi
sub edi, ebx
or ebx, esi
xchg edi, esi
or edi, esi
and ebx, esi
xor ecx, esi
and esi, ecx
sub esi, edi
shr ebx, 6
or ecx, 0xffad389a
jmp 0x52890e
call edx
xor ebx, esi
shl edi, 0x14
and esi, edi
and ecx, 0xffb07271
mov ebx, esi
sub ecx, esi
xor ecx, ebx
or edi, ebx
xor ebx, edi
xor edi, ebx
bswap esi
and esi, edi
add ecx, edi
neg esi
bswap esi
rol esi, 0x13
jmp 0x528b50
push 0xfb38aa95
xchg ecx, ebx
and esi, ecx
xchg edi, esi
xchg esi, edi
sub ebx, 0xffd0ca1e
xor esi, ecx
jmp 0x52916f
mov edx, 0x2a371b56
xchg edi, ecx
sub edi, ebx
add ecx, 0xffd403cb
add esi, 0xffd4be43
add esi, ebx
xor ebx, esi
and edi, ebx
add edi, esi
add ebx, ecx
jmp 0x5292c4
call fcn.00529ab4
rol edi, 0x12
and edi, esi
inc ebx
or edi, ecx
dec ebx
xchg ebx, ecx
add ebx, esi
shl ebx, 9
xor esi, ebx
xor esi, ebx
jmp 0x528d76
call fcn.00529ab4
mov ebx, esi
ror ebx, 0xc
sub edi, esi
mov ecx, ebx
or ecx, edi
xchg ecx, ebx
mov ecx, 0xfff10cc2
or ecx, edi
ror ecx, 0xf
sub ebx, ecx
jmp 0x528449
pop edx
mov esi, 0x19f304
and ecx, esi
add edi, ecx
shl edi, 0x14
add ebx, edi
mov esi, ebx
xor ecx, 0x1efb32
dec ecx
mov ebx, ecx
and ebx, 0x212563
jmp 0x528e11
push 0xfb46f025
sub edi, 0x289385
add esi, ebx
rol ebx, 1
or esi, ebx
mov ecx, edi
mov esi, ebx
inc esi
add ebx, esi
xchg ecx, edi
mov edi, ecx
mov esi, ebx
bswap edi
and ecx, 0x32b9e4
jmp 0x529368
call fcn.00529ab4
xchg ecx, ebx
bswap edi
inc esi
add edi, 0x360451
add ebx, ecx
xor ebx, edi
shr esi, 0x19
xor ebx, edi
or edi, ebx
ror edi, 0xe
xchg ebx, esi
not ecx
shr edi, 0x15
jmp 0x52aa36
push 0xfb44e5b5
xchg ebx, esi
not ecx
rol ecx, 0x1a
xor esi, ecx
sub edi, esi
or ecx, esi
xchg ecx, edi
shr edi, 7
jmp 0x529d50
push 0xfb473b13
or edi, 0x5cec5b
and edi, ebx
or ebx, ecx
add ebx, esi
xchg edi, ecx
add esi, ebx
neg ebx
or ebx, 0x621e47
or esi, 0x663d88
jmp 0x529a39
pop edx
ror edi, 8
sub esi, 0x704898
mov esi, ecx
add esi, 0x71b4c6
mov ebx, edi
xchg ecx, edi
or edi, esi
and ecx, ebx
not ecx
bswap ecx
sub ebx, edi
and esi, 0x77a61b
sub edi, 0x786493
jmp 0x529298
mov edx, 0x2a371b56
add ecx, 0xd7475f
not esi
add edi, ecx
xchg ebx, ecx
mov ebx, esi
add esi, ebx
sub ebx, ecx
or esi, ecx
inc edi
or esi, edi
xchg esi, edi
mov ebx, esi
sub ecx, edi
jmp 0x528aee
pop edx
sub esi, 0xe74c64
mov ecx, 0xe8075d
add edi, ebx
ror ebx, 8
xchg esi, ecx
shr esi, 1
shl ebx, 0x1c
xor esi, ecx
xor ebx, 0xed5674
and ecx, ebx
jmp 0x529815
push 0xfb353544
bswap ebx
xor ebx, esi
or edi, ebx
ror esi, 9
xor ecx, ebx
mov esi, ecx
mov ecx, 0x100d194
rol ebx, 1
shr esi, 0xd
and edi, 0x103075c
bswap esi
jmp 0x5289d5
pop edx
xor ebx, ecx
mov ecx, ebx
and esi, 0x1064163
mov esi, edi
xchg ecx, ebx
and esi, 0x1086865
xchg ebx, edi
xchg ebx, ecx
sub ecx, ebx
neg edi
jmp 0x52a2d4
push 0xfb2f7ad2
and esi, 0x1171d2f
add esi, edi
dec ecx
xor esi, ecx
add ebx, 0x11a2981
not ebx
sub ebx, ecx
and esi, ecx
xchg esi, ecx
and ecx, esi
jmp 0x528042
push 0xfb28009a
xor ebx, edi
add edi, ebx
xchg esi, ebx
shr ecx, 2
neg ebx
and esi, ecx
shr edi, 0x1b
or ecx, ebx
jmp 0x5282bf
push 0xfb35c7c2
inc edi
or edi, 0x146c39d
or ecx, esi
bswap esi
neg edi
and ebx, esi
sub ebx, edi
shl ebx, 5
jmp 0x52ad98
call edx
xor esi, edi
sub ebx, ecx
and esi, edi
and ecx, ebx
add esi, edi
neg ecx
xchg esi, ecx
neg ecx
xor esi, edi
rol edi, 0x18
jmp 0x529f8a
push 0xfb3816fc
or ecx, 0x18deb31
bswap edi
xor ecx, esi
shr esi, 0xb
xchg esi, ebx
and edi, 0x191c5a5
sub esi, ecx
and esi, ebx
jmp 0x52aa1a
mov edx, 0x73716341
and ebx, ecx
or edi, ecx
and esi, ebx
jmp 0x5291d3
push 0xfb34ecd5
xor edi, ecx
add esi, 0x1bd7bc5
xchg edi, ebx
xor ecx, ebx
and ebx, ecx
rol esi, 0x14
mov esi, edi
and edi, esi
add ebx, ecx
bswap edi
mov esi, ebx
sub esi, 0x1c4dd71
xchg edi, ecx
jmp 0x52954c
push 0xfb23e0bf
and ecx, esi
xor ecx, ebx
xor edi, ecx
neg ebx
sub ebx, edi
or ecx, edi
jmp 0x52a4d8
call edx
and esi, ecx
and ebx, ecx
bswap edi
inc edi
xor ecx, 0x1d427ea
mov ecx, 0x1d4e2d0
add ecx, ebx
xor edi, ebx
xchg ecx, esi
xchg ebx, edi
sub edi, ecx
and ebx, ecx
add ecx, edi
xchg ebx, ecx
jmp 0x528189
push 0xfb23736a
shr ebx, 0xa
xchg ecx, edi
inc edi
neg edi
bswap edi
or ebx, edi
or ebx, ecx
or esi, ebx
ror ecx, 0xa
and ecx, ebx
jmp 0x52985b
pop edx
mov ebx, edi
xor esi, ebx
xor esi, edi
mov edi, 0x1f32a03
not edi
xor ecx, ebx
add edi, esi
or esi, edi
rol esi, 8
sub edi, ebx
rol ecx, 0x12
sub ebx, edi
jmp 0x52a8db
call fcn.00529ab4
sub ebx, ecx
sub edi, ebx
dec edi
sub ebx, ecx
ror ebx, 2
add ebx, esi
mov ecx, edi
jmp 0x52abbb
mov edx, 0x2a371b56
shl ebx, 5
or edi, esi
shr edi, 8
mov ebx, ecx
jmp 0x528fcf
call fcn.00529ab4
xchg esi, edi
add edi, ecx
xor esi, ecx
or esi, edi
sub ebx, esi
sub esi, edi
mov esi, edi
and ecx, esi
mov edi, esi
mov edi, ebx
xchg edi, ebx
jmp 0x5290fa
pop edx
shl ecx, 0x1e
rol edi, 0x1a
and esi, ebx
or ecx, edi
inc edi
mov esi, ecx
or edi, ecx
rol edi, 0x1d
or esi, ebx
and esi, 0x2299f32
jmp 0x52906b
pop edx
shr ebx, 0x19
mov ecx, esi
add esi, ecx
shl esi, 0xd
sub ebx, esi
xchg ebx, ecx
xchg edi, esi
or ecx, esi
add ebx, esi
add edi, ecx
xor edi, esi
jmp 0x529d7c
push 0xfb47869f
mov ecx, ebx
ror ebx, 0xc
and esi, ebx
rol ebx, 3
dec esi
or edi, 0x25b840f
and ebx, 0x2638131
or ebx, esi
and esi, 0x26478da
mov ebx, esi
or ecx, edi
not edi
jmp 0x5297b5
push 0x40
and ebx, 0xc9c6bd7
add ebx, esi
or ebx, ecx
sub ebx, esi
or ebx, edi
nop
sub ecx, esi
add ecx, esi
xor edi, ebx
bswap edi
sub ebx, edi
sub esi, 0xc9f19e3
jmp 0x528837
push 0xfb4451c0
and ecx, esi
xchg ebx, ecx
sub edi, 0xca19396
xor ebx, ecx
mov edi, esi
shr ecx, 0x11
xor ebx, edi
add edi, esi
inc edi
jmp 0x529c91
push 0xfb317cbb
sub ecx, 0xca45ec7
sub esi, ebx
add ebx, edi
xchg edi, ecx
add edi, esi
add esi, edi
dec esi
neg esi
and esi, edi
dec ebx
jmp 0x528581
push 0xfb27a016
and ecx, 0xcaa522b
neg esi
bswap ebx
xchg esi, edi
shr ecx, 2
sub ebx, esi
or edi, 0xcac473f
xor ecx, 0xcac87ec
xchg ecx, ebx
jmp 0x52960a
push 0xfb449bfc
add ebx, ecx
sub ebx, 0xcb037fd
add ecx, ebx
ror edi, 4
rol edi, 0x17
xor ecx, ebx
jmp 0x5292ff
push 0xfb499124
xchg esi, ebx
add esi, edi
bswap ecx
add ebx, edi
sub ecx, ebx
add edi, ebx
dec ebx
or edi, esi
sub esi, ecx
or ebx, 0xcbe640f
dec ebx
mov ecx, esi
and esi, 0xcbf20f8
shl edi, 0x1c
bswap esi
jmp 0x52a08b
mov edx, 0x73716341
add ebx, ecx
or esi, 0xcc035e9
not ecx
shr ecx, 0x1e
sub ecx, ebx
mov ebx, ecx
mov ebx, esi
xor esi, edi
xchg esi, ecx
dec ebx
add ecx, edi
add ecx, 0xcc2d161
xchg ecx, ebx
jmp 0x52872d
pop edx
and ebx, edi
mov ebx, edi
xchg esi, edi
and ebx, ecx
add ebx, 0xcc46aad
and esi, 0xcc4a9da
add edi, esi
sub ebx, ecx
bswap ebx
jmp 0x52a263
push 0xfb3ff2b4
xchg ebx, edi
and edi, ecx
sub esi, 0xcc6a66a
sub edi, esi
and ebx, edi
xor edi, ecx
mov ebx, edi
sub ecx, 0xcc840d8
inc esi
jmp 0x52a5f8
mov edx, 0x73716341
shr esi, 0x11
mov edi, ebx
and edi, ecx
or ebx, esi
or edi, ecx
not ebx
and edi, 0xccca5d2
sub esi, 0xcccf471
shr ebx, 0x14
bswap ebx
neg edi
jmp 0x52ad71
mov edx, 0x4132136a
xchg edi, ecx
ror ecx, 0x18
not edi
add ecx, 0xcced826
add ebx, ecx
rol ecx, 0x16
shr ecx, 8
jmp 0x528b72
call edx
mov ecx, esi
add edi, 0xcd02154
mov esi, ecx
mov esi, 0xcd09cd3
or ebx, esi
mov ecx, 0xcd1172d
or ebx, edi
and ecx, ebx
sub ecx, edi
rol ebx, 0xd
xchg ebx, esi
dec edi
and edi, ebx
jmp 0x52925a
push 0x401400
and ecx, 0xcdbe00c
or ebx, 0xcdc1e23
xchg ecx, edi
dec ecx
xchg edi, ebx
sub ecx, 0xcde6955
rol esi, 0xb
shl esi, 0x19
sub ebx, edi
xor esi, ebx
mov ecx, edi
or ebx, ecx
jmp 0x52a059
pop edx
shr ebx, 0xf
or esi, ecx
xor ebx, ecx
ror esi, 0xe
bswap ebx
xor ebx, 0xce438cc
mov ebx, 0xce476dc
and esi, ecx
jmp 0x52a459
pop edx
or esi, ecx
xor esi, edi
or ecx, edi
xchg esi, ebx
jmp 0x52810c
push 0xfb320d47
xchg ecx, edi
xor ecx, 0xce97d64
bswap ecx
add ebx, esi
and ebx, 0xcea37a9
or ecx, esi
or esi, edi
dec ebx
xchg ebx, esi
rol esi, 0x10
or esi, edi
mov ebx, 0xcecc2ba
mov esi, 0xced02c8
ror ebx, 0x10
jmp 0x52a0e0
pop edx
xor edi, ecx
or edi, ebx
sub ecx, 0xcee2058
neg edi
sub esi, 0xcee9f30
mov ecx, ebx
sub ecx, ebx
bswap esi
neg ebx
shr ebx, 1
bswap esi
jmp 0x528157
pop edx
sub ebx, esi
mov edi, ebx
dec ebx
or esi, 0xcf5157a
xor esi, ebx
xor edi, 0xcf5930d
inc edi
jmp 0x52875d
call edx
xchg edi, ecx
and ebx, edi
and edi, esi
mov ebx, ecx
mov edi, ecx
or ecx, esi
or esi, ecx
mov ebx, 0xcfef42b
and ecx, 0xcff33e9
and ecx, 0xcff72ae
and ecx, 0xcffb00a
sub ebx, ecx
mov edi, ebx
xchg ebx, esi
jmp 0x52aaa6
push 0xfb49dcc5
or ebx, ecx
not esi
and ecx, 0xd014e1b
and esi, 0xd018daa
jmp 0x529de1
push 0xfb3b488b
shr ecx, 0x17
add ebx, ecx
shr ebx, 0x1b
dec ebx
bswap esi
sub ecx, 0xd0537f7
not edi
jmp 0x5280cb
push 0xfb32569d
xor edi, ebx
sub esi, 0xd060bbf
xchg ecx, edi
or edi, 0xd068730
xchg edi, ecx
xor ecx, ebx
or esi, edi
sub esi, edi
jmp 0x5294b2
push 0xfb28bedf
dec ebx
neg ebx
shl ecx, 0x1b
inc ecx
shl ecx, 0x14
add edi, ebx
mov esi, 0xd0b9b00
or edi, ecx
xchg ecx, esi
xchg esi, ecx
and esi, ebx
shr edi, 0x1c
sub esi, edi
jmp 0x528c84
pop edx
sub ebx, 0xd105db8
or ecx, ebx
ror ecx, 0x16
xor edi, 0xd11177c
mov ebx, ecx
add ebx, esi
add ebx, edi
shr ecx, 6
add edi, ebx
not ecx
not edi
jmp 0x527ffe
pop edx
neg ecx
or esi, ebx
mov esi, 0xd13b364
or ebx, 0xd13f22b
xor edi, 0xd14317e
or ecx, 0xd1470e4
add ecx, edi
ror ecx, 0x11
xor edi, 0xd153cb4
mov ebx, edi
or ecx, 0xd15b6b5
mov edi, 0xd15f474
jmp 0x529d21
pop edx
and edi, ecx
mov ebx, edi
add ecx, esi
or ebx, 0xd1ca150
add edi, 0xd1ce00a
xor edi, ebx
rol ecx, 2
xchg esi, edi
or ebx, esi
mov esi, ecx
xchg ebx, edi
not edi
jmp 0x52a16a
pop edx
sub ebx, esi
or esi, edi
sub edi, ebx
shl edi, 0x17
or edi, esi
xor ecx, 0xd2577fe
mov esi, edi
sub ebx, esi
mov edi, ecx
dec edi
add edi, 0xd26aacc
add edi, ebx
jmp 0x5298ef
pop edx
add esi, ecx
sub ebx, 0xd2d1900
xor esi, 0xd2d5831
sub ebx, 0xd2d97c7
not ebx
and ecx, ebx
mov edi, esi
mov esi, 0xd2e9e1c
shr ebx, 0x17
jmp 0x529003
pop edx
inc edi
add ecx, esi
not ebx
sub ebx, ecx
inc edi
or esi, 0xd3392a5
mov ebx, edi
and ecx, edi
sub edi, ecx
shr esi, 9
jmp 0x528b9e
pop edx
add edi, esi
bswap ecx
xchg ebx, esi
mov ecx, edi
or ebx, 0xd37b07c
add esi, 0xd37efd8
add esi, ebx
and ebx, esi
jmp 0x528dcc
pop edx
or esi, 0xd49b7c3
mov ecx, edi
mov edi, 0xd4a3133
xor edi, ecx
xor ebx, esi
sub edi, esi
inc ebx
rol edi, 0x10
jmp 0x529e0b
push 0xfb2441a4
sub esi, 0xd555412
xchg edi, ecx
xor edi, ecx
bswap ecx
ror ebx, 0x1f
xchg ecx, edi
rol ebx, 0x12
add ecx, edi
dec esi
mov edi, 0xd57d653
and esi, edi
sub esi, ecx
or esi, ecx
and ebx, edi
jmp 0x528334
pop edx
shl ecx, 0xd
bswap edi
add ecx, edi
mov ebx, esi
add edi, ebx
mov ecx, esi
add ecx, edi
sub esi, 0xd62aaea
xor esi, edi
jmp 0x528628
mov edx, 0x2a371b56
xchg ecx, ebx
sub edi, esi
xchg esi, ebx
or ebx, 0xd6c7c09
mov edi, esi
mov edi, 0xd6cf62b
mov edi, esi
or esi, 0xd6d82a4
bswap ebx
xchg ecx, ebx
sub ecx, ebx
add edi, 0xd6e7a7e
mov ebx, 0xd6eb9d9
or esi, 0xd6ef8aa
jmp 0x52a9c4
mov edx, 0x73716341
or ebx, esi
shl ecx, 1
sub esi, ebx
and ebx, 0xd72f41e
jmp 0x529193
push esp
or edi, ecx
or ebx, edi
add ebx, 0xd7eecdf
or esi, ecx
sub esi, ecx
xchg ecx, esi
jmp 0x528ee4
push 0xfb3fa895
neg esi
and ebx, esi
add esi, 0xda1af4f
ror edi, 0xe
and edi, ebx
jmp 0x529d9c
call fcn.00529ab4
xor esi, ebx
xor ecx, edi
and ecx, edi
mov ebx, 0xdae3308
jmp 0x52970c
call fcn.00529ab4
add esi, 0xdb4156b
inc esi
ror ebx, 0xd
mov esi, edi
ror esi, 0x1d
or esi, ebx
mov ecx, 0xdb5951b
xchg esi, ecx
xor edi, ebx
jmp 0x52ac25
push 0xfb3860a9
mov esi, ecx
or ecx, esi
not ecx
sub ebx, esi
sub edi, ebx
and ebx, esi
xchg edi, esi
ror ecx, 9
dec edi
jmp 0x529155
call edx
or ebx, edi
not esi
neg ebx
add esi, ebx
and edi, ebx
sub ebx, 0xdbf1c5e
xor esi, 0xdbf5db4
add esi, ecx
jmp 0x527fb2
pop edx
add ebx, edi
shr ecx, 0x15
xor edi, ecx
sub ecx, edi
jmp 0x529bd1
pop edx
add esi, 0xdcda3a4
and ecx, esi
rol edi, 0x1b
shl ecx, 0xe
ror edi, 5
xor ecx, ebx
xor ecx, esi
add edi, esi
and ebx, edi
and ebx, esi
xor ecx, edi
jmp 0x5294fc
call edx
and esi, edi
or esi, 0xdd0ad02
sub esi, 0xdd0ecca
shl ecx, 0x16
mov ecx, edi
neg edi
shl ecx, 0xa
sub esi, 0xdd23429
jmp 0x529576
call edx
sub ecx, ebx
or ebx, 0xdd7f417
xor ecx, edi
shl ecx, 6
dec edi
mov ebx, edi
ror esi, 0x17
or ecx, 0xdd96827
ror edi, 0x1a
xor esi, ecx
shr ecx, 0x1b
xor ecx, 0xdda74c1
add ecx, 0xddab2e9
jmp 0x52846d
call edx
add esi, 0xddd9f0b
add ecx, ebx
bswap ecx
shl ecx, 0x19
mov esi, ebx
xor ecx, ebx
xor ecx, ebx
jmp 0x5299bf
call edx
not esi
or ecx, edi
dec esi
mov ecx, 0xde044ed
and ebx, esi
not ebx
jmp 0x529f02
call edx
xor esi, edi
bswap ebx
xor ecx, edi
add esi, ebx
add ecx, 0xdef6125
xor edi, ecx
shr edi, 0x1a
bswap edi
inc ecx
jmp 0x528523
call fcn.00529ab4
xor ecx, edi
xchg ebx, esi
xor edi, esi
xor ebx, ecx
add ecx, 0xe0295ef
mov edi, 0xe02fd3a
sub esi, 0xe03506f
sub esi, ecx
sub esi, edi
jmp fcn.005286fc
mov edx, 0x73716341
or esi, edi
mov ebx, 0xe04cd83
xor edi, ebx
jmp 0x52993e
mov edx, 0x2a371b56
xor edi, esi
and edi, ebx
or ecx, esi
and ebx, edi
shl ecx, 0x15
and edi, esi
xor esi, ebx
and esi, ecx
sub ecx, edi
xor edi, ebx
mov ebx, esi
shl esi, 0xc
not esi
jmp 0x52a979