Function at 0x401000
Capabilities:
Create directory
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffeeb
jne 0x4010ac
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff11
jne 0x401126
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff15
jne 0x4011cd
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff1d
jne 0x401247
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.shell32.dll_SHCreateDirectory
call sub.ole32.dll_SetDocumentBitStg
call sub.shell32.dll_SHCreateDirectory
ret
jmp 0x52f811
sub esi, ecx
shr esi, 8
jmp 0x530291
push 0xcef13e15
xor edi, ebx
or edx, 0xcfc54b15
xor ecx, 0xcfc56709
add edi, ebx
add ecx, edx
dec edi
shl ecx, 9
mov ecx, edx
or edi, ebx
sub ecx, edi
jmp 0x5320ec
pop esi
or ebx, 0xcfc856cb
xchg ecx, ebx
mov ecx, 0xcfc88c99
sub edx, ecx
or ebx, ecx
mov ecx, ebx
or edx, ebx
and edx, 0xcfc91267
ror edx, 8
sub edx, 0xcfc94b55
shl ecx, 0xb
not edi
shl ebx, 0x17
shr edi, 0x1f
jmp 0x533e5e
pop esi
inc ecx
xchg ecx, edx
neg ebx
add ebx, edx
and edx, 0xcfcb749f
and ecx, edx
and edx, ebx
inc edx
jmp 0x532f67
pop esi
sub ebx, ecx
mov ecx, edi
xor edi, ecx
shl edx, 0x13
jmp 0x530898
push 0xceed91b1
add edi, ebx
inc edx
add ecx, ebx
mov ebx, edi
nop
xchg ecx, edi
jmp 0x532a61
push 0xceeee895
neg edx
xchg edx, ecx
add edx, edi
xor edx, ebx
ror edi, 6
dec edx
neg edx
and ebx, edi
or edx, ecx
mov edi, ebx
xor edx, ebx
add edi, ebx
jmp 0x5339c3
pop esi
or ecx, ebx
add edi, 0xcfde9b65
sub edi, edx
xchg edx, edi
or ebx, 0xcfdef199
xchg ecx, ebx
jmp 0x52f8de
push 0xcee45561
add ebx, edi
add edx, ebx
add ebx, edx
xchg edi, ecx
rol ecx, 6
sub ebx, edx
and edx, ecx
ror ebx, 0xe
sub ecx, edx
and edi, ecx
jmp 0x530c43
pop esi
dec edx
not ebx
bswap ebx
mov edi, ebx
add edi, 0xcfe312c3
shr edx, 0x1a
or ecx, ebx
sub ecx, 0xcfe3689f
shr ecx, 0x12
xchg edx, edi
jmp 0x533576
call fcn.005309a5
bswap edx
or ecx, edx
sub ecx, edi
xor ebx, 0xcfe42315
shr edi, 5
inc ecx
inc edx
and ebx, 0xcfe49f2d
add ebx, ecx
xchg ecx, edx
jmp 0x531904
push 0xcee7c0b9
shr ecx, 6
mov edx, ebx
add edx, edi
and edx, 0xcfe55247
xchg ebx, edi
xor ebx, edx
or ebx, edx
xchg ecx, edi
xchg ecx, edx
shr ebx, 0x19
xchg ecx, edi
xchg ecx, edx
jmp 0x531715
pop esi
add edx, ecx
mov edx, 0xcfe68189
xor edx, ebx
xchg edx, ebx
shr edx, 9
bswap edx
xchg ecx, ebx
sub edx, ebx
add edx, edi
ror ebx, 0xa
xchg ecx, edx
shr ebx, 6
jmp 0x532314
call fcn.005309a5
shl edx, 0x1f
and edi, edx
add ecx, 0xcfeada5d
dec ebx
ror ebx, 0x1f
add ebx, 0xcfeb339f
xor edx, edi
sub ebx, edi
and edi, edx
inc ebx
jmp 0x530964
pop esi
or ebx, ecx
sub ebx, edx
xchg ebx, ecx
or edi, 0xcff033f9
and ebx, edi
or ecx, edx
mov edi, ecx
mov ebx, edi
sub edx, ebx
add ebx, edx
jmp 0x53237d
pop esi
xchg edx, ebx
and edi, 0xcff81519
inc ecx
shl edx, 0x1d
rol edi, 8
and edi, edx
mov ecx, edi
sub ebx, 0xcff8c64b
and ebx, edx
or ecx, ebx
jmp 0x5318c0
push 0xceeac0a3
xor ebx, edx
or ebx, edx
ror edi, 0x1d
sub ebx, edi
and edi, 0xd00029e3
and ebx, 0xd0004529
mov ecx, 0xd005c749
mov edx, ecx
add ecx, 0xd00603c7
shr ebx, 3
xor edi, 0xd0063d3d
shl ecx, 0x1a
mov edi, ebx
mov ebx, edx
jmp 0x5324d3
mov esi, 0xa3f322a
sub edx, edi
rol edx, 0x12
nop
sub ebx, ecx
and edi, edx
mov ecx, edi
not ebx
rol ecx, 0x10
mov ecx, 0xd010aba3
inc ebx
jmp 0x532485
pop esi
inc ecx
inc edx
inc edx
xor edx, edi
sub edi, 0xd01472af
and ecx, edx
shr ebx, 0x19
add ebx, ecx
jmp 0x53215f
push 0xceed53bd
xor ebx, edx
sub ecx, edi
not ebx
rol ecx, 0x13
add edi, edx
ror edi, 0x1a
jmp 0x531c31
push 0xceec5add
add ecx, ebx
or ecx, ebx
mov edi, ebx
add edx, ebx
mov ecx, 0xd01a7727
or ecx, ebx
mov edi, ebx
mov ebx, edx
add ecx, edi
xchg ebx, ecx
shl ebx, 0x11
inc edi
sub ecx, edi
or ebx, edi
or ecx, edi
or ebx, edx
jmp 0x533e33
call esi
mov edi, edx
add edx, ecx
mov ebx, ecx
and ebx, edi
xor edx, ebx
xchg edx, ebx
ror edi, 3
sub ebx, edx
bswap ecx
bswap ecx
mov ebx, edi
or ebx, edi
and ebx, edx
sub ebx, ecx
jmp 0x5339dc
call esi
shl ecx, 0x1e
mov ebx, edi
sub edx, ebx
rol ebx, 1
sub ebx, 0xd01f0c19
and ecx, edx
mov edx, ebx
sub ebx, 0xd01f6353
or edx, edi
add ecx, 0xd01f9b29
xor edi, ebx
or edx, edi
xchg edx, ebx
sub edx, ecx
jmp 0x5316d1
pop esi
sub ebx, ecx
mov edi, ebx
add ecx, edi
sub edi, ecx
xor ebx, ecx
ror ebx, 5
ror ebx, 0x1f
or edi, ecx
jmp 0x530efc
call esi
add ecx, edi
xor edi, 0xd02793cb
inc edx
sub edi, ecx
inc ecx
xor edi, 0xd028015f
sub ebx, ecx
add ebx, edi
or edx, edi
ror ecx, 8
or ebx, 0xd0288a89
not ebx
add edx, 0xd028c17d
sub ebx, edx
jmp 0x52fdb1
push 0xceed3481
add ecx, ebx
dec edx
sub ecx, edx
and edi, ecx
xchg ecx, edx
add edi, edx
and ecx, ebx
sub ebx, ecx
add edi, ebx
and ebx, edx
and ecx, edi
sub edi, edx
jmp 0x530037
push 0xcee2c83c
and ebx, edi
or edi, edx
and ecx, edi
sub edi, edx
not edx
dec edi
mov edi, ecx
xor edx, ecx
jmp 0x53270f
pop esi
or ebx, edx
sub edx, edi
sub ebx, ecx
and edx, ebx
sub ecx, ebx
sub edi, edx
not edx
xchg edx, ebx
or ebx, ecx
not ebx
jmp 0x52fb8d
push 0xceeba079
add ecx, 0xd03f7405
inc ecx
sub ebx, 0xd03fac77
mov ecx, 0xd03fc733
ror ecx, 0x10
sub ecx, edi
xor edi, ebx
mov edx, edi
xchg ecx, ebx
mov edi, ebx
jmp 0x532af1
pop esi
mov ecx, ebx
dec edx
shr ebx, 0xa
xor edi, ebx
and edx, edi
xor edi, ebx
jmp 0x533398
call fcn.005309a5
add ecx, 0xd0569311
shl ecx, 1
and edi, ecx
xor ebx, ecx
sub ecx, edx
and edi, ecx
mov edi, edx
or ecx, edx
add edx, edi
xor edx, ecx
or ebx, edi
sub edi, ebx
xor ecx, edi
ror edi, 0x1a
or edx, 0xd0587c23
add ecx, ebx
jmp 0x53021f
push 0xcee5bfa3
and ecx, 0xd05b0db7
xchg ebx, edx
and ebx, 0xd05b436b
sub ecx, ebx
and ebx, edx
and ecx, edi
and ebx, 0xd05baf5f
add edx, ebx
inc ebx
or edi, 0xd05c0087
jmp 0x5339a4
call esi
or ebx, ecx
inc ecx
xor ecx, edx
and ecx, edi
sub edi, ebx
or edx, 0xd05dfe43
mov edx, edi
bswap edx
jmp 0x532e03
call esi
sub ecx, ebx
add ecx, edi
xor edi, 0xd061b485
shl ecx, 0x1f
mov edx, ecx
inc ebx
xchg edx, ebx
shr ebx, 1
jmp 0x533bc2
push 0xcef0a043
rol ebx, 0x19
sub edx, ecx
xchg ecx, ebx
mov edx, 0xd067c95d
or edi, 0xd067e587
add ecx, edx
dec edx
xor ecx, 0xd0683a57
or ecx, 0xd06856cd
add ebx, edi
shr edx, 1
or edi, ecx
add ebx, ecx
sub edi, edx
jmp 0x531997
call esi
xchg ebx, edx
add edi, ecx
xchg edi, ecx
add edi, 0xd0694d09
add ecx, edx
sub ebx, ecx
sub ebx, 0xd069a0b9
mov ecx, 0xd069bb65
shr edx, 0xb
or edi, ecx
xchg ecx, ebx
sub ecx, edi
jmp 0x531d4b
pop esi
mov ebx, edi
sub ebx, edx
add ecx, ebx
or edx, 0xd0742ec7
add ecx, ebx
neg edx
xor edi, ebx
or ecx, edx
and ebx, edx
dec edx
xchg edi, ecx
xor edi, 0xd075088b
inc edx
sub edi, ecx
xor edx, ebx
xchg edi, edx
jmp 0x531b7d
push 0xcee474cb
and edi, ecx
dec edx
add edx, ebx
xor edi, 0xd078dcfd
not ecx
xchg ecx, ebx
jmp 0x532dc7
mov esi, 0xa3f322a
add edx, edi
sub ebx, edi
xchg ecx, edi
neg edi
jmp 0x52fc6f
pop esi
and ecx, 0xd07c2a53
xchg ebx, edx
not ecx
or ebx, edi
jmp 0x531c0c
call fcn.005309a5
ror ebx, 1
sub ecx, edx
and edi, ecx
and ebx, edi
dec edx
and edi, 0xd07d34ab
xchg edi, edx
and edx, 0xd07d6a13
and ecx, edx
or edi, ecx
add ebx, ecx
and edi, 0xd07dd2c5
jmp 0x5336fe
push 0xcee5fbbf
mov edi, 0xd08dfa2b
sub ebx, ecx
add edi, edx
and ecx, 0xd08e496b
xchg ebx, edx
xchg edx, ecx
mov edi, edx
mov ecx, 0xd08eb747
sub edx, ecx
or ebx, 0xd08eed41
jmp 0x533939
pop esi
rol edx, 0x14
sub ebx, edi
xor edx, edi
shl ebx, 7
jmp 0x530a1c
push 0xceeec87b
xchg ecx, edi
neg edi
or edx, ebx
add edx, ecx
inc ecx
xchg edi, ebx
jmp 0x52f9e7
pop esi
bswap ecx
xchg ebx, edx
shl ebx, 0x17
xor edx, ebx
add ebx, 0xd0931071
not ecx
jmp 0x53143d
push 0xcee94b63
xor ecx, edx
dec edi
dec edx
and edx, 0xd0a8131f
or ecx, 0xd0a82f59
xchg ecx, edi
jmp 0x533893
call fcn.005309a5
shr edx, 0x11
not ebx
xor edi, 0xd0aab531
add ebx, edx
or ebx, 0xd0aaea87
add ebx, edx
add ecx, edi
ror edi, 0x10
shr ecx, 0x18
sub edx, ebx
jmp 0x531a65
call fcn.005309a5
mov edi, ecx
xchg edi, ebx
add ebx, 0xd0acecef
sub edi, ecx
inc ecx
sub edi, ebx
inc ebx
sub edx, edi
add edi, 0xd0ad9291
neg ebx
jmp 0x530121
mov esi, 0xa3f322a
xchg ebx, edx
and edx, edi
xor edx, ecx
mov edx, ebx
xor ecx, ebx
sub ecx, ebx
and ecx, 0xd0b0b2ef
dec ecx
xchg edx, ecx
xchg edi, ebx
add edx, ebx
and ebx, 0xd0b13893
jmp 0x5327f7
push 0xcee437b1
add edx, ecx
add edi, edx
and edi, 0xd0b836b9
or ebx, edi
xor edx, 0xd0b86b25
bswap ecx
shr edx, 6
bswap ebx
dec ecx
neg ebx
jmp 0x52fb5a
pop esi
dec ecx
add ecx, edi
add edi, 0xd0ce8fbf
neg ebx
rol edx, 0x19
or edx, ecx
and ebx, edx
and ecx, edi
add ebx, edi
mov ebx, edx
not edi
sub edx, edi
jmp 0x53122b
push 0xcee7de3d
shl edx, 0x11
add ecx, edx
xor edx, 0xd0d101c1
xchg ecx, edi
xor ebx, ecx
sub edx, 0xd0d15665
mov edi, 0xd0d17121
ror edi, 1
or ecx, ebx
or ecx, edi
xor edx, ecx
add ecx, ebx
jmp 0x531340
push 0xceec3baf
mov ecx, edi
xor ebx, edi
mov edi, ecx
sub edi, ecx
xor edx, ebx
or ebx, edx
or edi, 0xd0d92ce5
add ecx, edx
shr edx, 0x1f
or edi, ecx
add ebx, ecx
sub edi, edx
and ebx, ecx
mov edi, edx
jmp 0x5300a5
call fcn.005309a5
xchg edi, ebx
xor ebx, 0xd0dbbcd1
or ebx, edi
xchg edx, edi
and ecx, ebx
sub ebx, ecx
xchg ebx, edi
or edx, ebx
and ecx, ebx
not ebx
jmp fcn.00530579
pop esi
xor edi, ebx
mov edx, ebx
or ecx, 0xd0defe93
xchg ecx, edi
and edi, edx
sub edx, ebx
sub ecx, edi
mov edx, 0xd0df8613
jmp 0x53272b
call esi
sub ecx, 0xd0e10403
mov edx, 0xd0e120cf
xor ecx, ebx
and ecx, edx
mov ecx, edx
add edx, ecx
bswap edx
shr edi, 0x12
xor ebx, edi
dec ecx
or ebx, ecx
shr ecx, 0x16
and ecx, edi
and ebx, 0xd0e263d9
and edi, 0xd0e27e69
or ecx, 0xd0e29af9
jmp 0x52fbfd
call fcn.005309a5
xchg ecx, ebx
mov edi, edx
and ebx, ecx
mov ebx, edi
sub ecx, edx
and ecx, 0xd0e56801
add edx, ecx
add edi, edx
jmp 0x5308ef
mov esi, 0xa3f322a
xor ecx, edx
sub edx, edi
xchg edi, edx
sub ecx, edx
mov edi, edx
sub ecx, 0xd0e6450f
and ebx, edi
add ebx, 0xd0e67e43
or edx, ebx
mov edi, ebx
jmp 0x530cc9
call esi
or ebx, ecx
sub edx, ecx
and ecx, edx
xor ecx, edi
or edi, ecx
or edx, 0xd0ecba17
jmp 0x531d97
push 0xcee7a2a2
and edx, ebx
xchg edi, ecx
mov ecx, edx
or edi, ebx
shr ebx, 0x1d
sub ecx, edi
or edi, ebx
xor edi, edx
jmp 0x52fbd5
call esi
add ecx, edx
add edx, edi
xchg ebx, ecx
add ecx, 0xd0eef977
rol ecx, 0xb
xor ebx, ecx
sub ecx, 0xd0ef4f7f
mov edx, 0xd0ef6a3b
jmp 0x5329d3
call fcn.005309a5
xchg edx, ecx
not ecx
sub edx, ebx
xor ebx, edi
ror ebx, 7
or ebx, ecx
or ecx, 0xd0f11df1
add edi, edx
mov edx, 0xd0f151ad
sub edx, edi
shl ebx, 2
shl edx, 0x1f
mov ebx, ecx
add ebx, edi
jmp 0x5300fd
push 0xceeeaacd
or edx, 0xd0f4f759
and edx, edi
and edi, ebx
mov edx, 0xd0f63cf7
or edi, 0xd0f65731
add ecx, edi
xchg edi, edx
ror ebx, 0x1a
add edi, edx
sub ecx, edi
and edx, 0xd0fb0bc3
mov edi, edx
jmp 0x530f58
pop esi
and edi, edx
add edi, ebx
mov ebx, 0xd0fe702f
xor ebx, edx
mov edi, ebx
xchg ecx, ebx
add ecx, edx
xor edx, 0xd0fef31b
or edi, ecx
or edx, 0xd0ff2d75
jmp 0x52ffed
push 0xceed7269
bswap edx
ror edx, 0x19
sub ecx, edi
xchg edi, ecx
or edi, edx
add ebx, edx
add ecx, edi
ror edx, 0x19
jmp 0x52f9b8
push 0xcee4af59
bswap ecx
and edi, edx
or ebx, edi
xor ebx, edi
add edx, ebx
mov ecx, edi
mov ebx, edi
sub edi, edx
jmp 0x532edf
push 0xcee336ab
inc edi
sub edx, 0xd1068a33
add edx, ecx
or edx, 0xd106bfb3
xchg edx, edi
and ecx, edx
and edx, ebx
sub ebx, edx
bswap edx
or ebx, 0xd1076495
xchg ebx, edi
neg edx
add ecx, edi
and edx, ebx
inc edx
sub edi, ecx
jmp 0x532bb9
pop esi
neg ecx
and ebx, edx
or edx, edi
neg edi
and ecx, 0xd1098e73
mov edi, ecx
and ecx, 0xd109c22f
mov edi, ecx
mov edx, ecx
or ebx, ecx
add ebx, edx
add ecx, edi
ror edi, 7
and ecx, edx
jmp 0x52fd04
pop esi
and ecx, 0xd10b5247
add edx, ecx
and ecx, 0xd10b862d
dec ecx
xor ebx, ecx
xchg edi, ebx
add edx, ebx
and ebx, 0xd10c0dd1
add ecx, edi
and edx, ebx
shl ecx, 3
sub edi, ecx
inc ecx
add ebx, edx
add ecx, edi
add edi, ebx
jmp 0x531809
mov esi, 0xa3f322a
inc ebx
xchg ecx, edi
xor edx, ecx
xchg edi, ebx
xor ebx, 0xd1111ecb
xchg edi, edx
jmp 0x533a71
mov esi, 0xa3f322a
and edi, edx
shr ebx, 6
mov ebx, edi
xor ebx, edx
sub ebx, 0xd120decb
xor ebx, ecx
sub edi, ebx
sub edx, edi
add ebx, ecx
rol edx, 1
sub ebx, edi
xchg ebx, ecx
jmp 0x53186c
push 0xcee8b35d
add edi, edx
add ebx, edi
sub edx, 0xd1231f91
xor edx, ecx
mov edi, edx
sub edi, ebx
jmp 0x53226b
pop esi
or edi, ecx
or edx, 0xd124d5f3
mov ecx, edx
xchg ebx, edx
xor ecx, ebx
mov edi, edx
jmp 0x530567
push 0xcef15efb
add edx, 0xd126acdf
add ecx, edx
xchg ecx, edx
sub ebx, edx
and edx, ecx
and edi, ebx
mov ecx, 0xd1274853
shr edx, 3
xor ebx, 0xd1278587
or edi, edx
jmp 0x532bde
push 0xcee70a61
xchg edi, ecx
and edx, edi
mov edx, ebx
sub ecx, edi
ror ebx, 0x19
sub ecx, edx
mov ebx, edi
add ecx, edx
mov edi, edx
and ebx, ecx
jmp 0x532f96
mov esi, 0xa3f322a
xor edx, edi
xor ecx, edi
xchg ecx, edx
sub ebx, edx
add ecx, ebx
or edi, ebx
sub ecx, edx
rol edi, 0x12
jmp 0x5312cd
pop esi
inc edi
sub edx, 0xd138aea1
and edx, 0xd138c907
mov ecx, edx
sub ebx, edi
xchg ebx, ecx
add ecx, 0xd13937db
nop
sub edx, ebx
xor ecx, ebx
add edx, ebx
add edi, ecx
jmp 0x533828
push 0xceed15b8
inc ebx
xor edi, edx
sub ecx, 0xd13c5811
and edi, edx
xchg edi, edx
and ebx, ecx
or ebx, ecx
mov edi, edx
jmp 0x530251
call fcn.005309a5
rol ecx, 0x10
inc ebx
sub edx, edi
sub edx, ecx
xor ecx, edx
mov edi, 0xd144db25
sub ebx, ecx
add edi, edx
and ebx, edx
and ecx, edi
xchg edi, ebx
xor ebx, edi
jmp 0x533537
mov esi, 0xa3f322a
neg edx
add ecx, edi
and edx, ebx
inc edx
and ebx, 0xd14736fb
and ebx, edi
dec edi
shr ebx, 0x1a
jmp 0x533c6c
call esi
rol ebx, 7
xchg ebx, edi
add edx, ebx
add edi, ecx
xor edx, ecx
or ebx, edi
add ebx, edx
mov edi, 0xd14bf647
not ebx
or edx, 0xd14c2e49
jmp 0x5302d8
push 0xcee2f01b
inc ebx
sub edx, edi
dec edx
xchg edi, ecx
xchg ebx, ecx
add ecx, 0xd15933d3
add ebx, edi
xor edi, ebx
jmp 0x5334e2
pop esi
inc edi
and edx, edi
and edx, 0xd159c625
or edx, 0xd159e29b
xchg edx, edi
rol edi, 0x14
and edi, edx
shr ebx, 5
xor edi, edx
and ebx, ecx
or edi, ebx
xor edi, ebx
and ebx, 0xd15ad8df
and ebx, edi
shr edi, 0xa
ror edx, 0x10
jmp 0x530f6d
call fcn.005309a5
sub edi, edx
and edx, ecx
or ecx, edi
xor edx, ecx
jmp 0x532554
pop esi
sub ecx, edi
xor ebx, edi
inc edi
shl ecx, 7
jmp 0x530bbf
pop esi
or ebx, edx
or edi, ecx
xchg ecx, edi
sub ecx, edx
and edi, ecx
xchg ecx, edx
add edi, edx
shr ebx, 0x1b
sub edi, edx
inc edx
jmp 0x531a7c
pop esi
inc edi
and edx, edi
mov edx, edi
add edi, edx
mov edx, 0xd17075a5
dec edi
dec edx
dec ebx
and edi, ebx
mov edi, ecx
inc ecx
sub ebx, 0xd17139ef
jmp 0x533743
mov esi, 0xa3f322a
or ebx, edx
add ebx, ecx
or edx, ecx
and ebx, edx
xor ecx, ebx
and edi, ecx
and ecx, edx
not ecx
xchg edi, edx
sub ebx, edi
add ecx, edx
add edx, edi
jmp 0x52fbb0
mov esi, 0xa3f322a
xor ebx, 0xd1795bd3
neg edx
not edi
xor edx, ebx
xchg edi, edx
and edx, 0xd179e55b
xor ecx, 0xd17a052d
or ebx, edx
sub edx, edi
ror edi, 0x15
xor ebx, edi
dec ecx
and edi, ecx
mov edi, edx
jmp 0x531288
push 0xceefe44f
xor ebx, edi
dec ecx
add ecx, edi
add edi, ebx
shl edx, 0xf
or edx, ebx
mov edi, 0xd17b8a71
ror edi, 0x10
or edx, 0xd17bc249
xchg edx, edi
jmp 0x531e43
mov esi, 0xa3f322a
and ebx, edi
xor ebx, edx
rol edi, 8
and edi, edx
shr ebx, 0x1e
add ebx, 0xd1805451
xchg edx, ebx
xor edi, edx
sub ebx, edi
rol ecx, 0xa
jmp 0x530819
push 0xcef17ef9
or edx, edi
or ebx, 0xd18108a1
bswap ebx
ror ebx, 4
or ebx, ecx
xor ebx, edi
mov edi, ebx
inc ebx
jmp 0x532025
push 0xcee492c1
add edi, edx
sub edx, 0xd191df99
sub ecx, edi
add edx, ecx
xor edx, ebx
xchg edi, edx
jmp 0x531ce8
pop esi
xchg edx, ecx
add edx, 0xd193a8d9
mov edx, 0xd193c385
shr edi, 0x13
add ebx, edx
rol edi, 0x19
neg ecx
and ebx, edi
xor ecx, ebx
sub edx, 0xd19484db
jmp 0x5320ae
call fcn.005309a5
or edi, ebx
add edx, edi
and ebx, ecx
sub edx, ebx
and ecx, ebx
not ebx
xchg ecx, edx
rol edi, 1
mov edx, ecx
sub ebx, ecx
and edx, ebx
inc edx
sub edi, ebx
inc ebx
sub edx, edi
sub edx, ecx
jmp 0x530a52
mov esi, 0xa3f322a
inc edx
xchg edi, ebx
not ebx
xor edi, ecx
neg ecx
shl edx, 4
neg ebx
or edi, 0xd19b3931
and ebx, ecx
and ecx, edx
rol ecx, 5
xor ecx, edi
jmp 0x531af7
push 0xceea78d8
inc edi
and edi, ecx
or ebx, ecx
xor ebx, edi
sub edx, ebx
and edi, 0xd19ecbb1
xor edx, 0xd19eeb69
not edx
shr edi, 0x16
bswap edi
or ecx, 0xd19f5ccb
rol ecx, 0xc
jmp 0x533490
mov esi, 0xa3f322a
not edx
or edx, 0xd19fbbc9
sub ecx, 0xd19fd659
mov edx, 0xd19ff16b
sub edx, ecx
xor edi, 0xd1a02b7f
bswap edx
add edx, ecx
and ecx, 0xd1a07c0b
neg edx
add ecx, edi
add edi, ebx
jmp 0x533ccf
call esi
add ecx, 0xd1b2133b
sub ebx, edi
and ebx, edx
and ecx, edi
sub ebx, 0xd1b280f3
xchg edx, ecx
add edx, edi
shl edx, 0x1e
and edi, edx
dec edi
and edx, 0xd1b321e5
sub edx, ecx
jmp 0x53298b
pop esi
and ebx, ecx
mov edx, 0xd1b54c4f
sub edx, edi
xor ecx, edi
ror edx, 2
or ecx, 0xd1b5b86d
sub edx, edi
not edx
add edi, ebx
sub ebx, 0xd1b628c3
add ecx, edi
sub ebx, 0xd1b65ca9
and edi, ecx
mov edi, ecx
mov ebx, 0xd1b6a9b5
sub edx, ebx
jmp 0x52f967
pop esi
add edx, edi
and ebx, ecx
and ecx, edx
mov ecx, edx
add edx, ecx
not edi
shl ebx, 0x1d
sub ebx, 0xd1bdc40f
mov ecx, 0xd1bde0cb
or edi, ecx
jmp 0x530cb7
push 0xceefc5f8
and edi, ecx
sub ecx, edi
and ecx, ebx
add edx, edi
mov edx, ecx
or ecx, ebx
add ecx, ebx
add ecx, 0xd1bfbfaf
add ecx, ebx
neg edx
jmp 0x532b23
push 0xceea9b63
neg ecx
add ecx, edx
add edx, edi
mov edx, ecx
neg edi
add edx, ebx
sub ecx, 0xd1c7aba9
and edi, edx
sub ecx, edx
add edx, ebx
and edi, ebx
sub ecx, edx
xor ebx, 0xd1c84a67
add ecx, 0xd1c866dd
jmp 0x52fe28
push 0xcee313b9
xor edx, ecx
and edx, edi
shl edi, 0x15
and ebx, edi
sub edx, ecx
xor edi, 0xd1c9f2e9
or edi, 0xd1ca0d4f
mov ebx, 0xd1ca2851
xor edi, edx
mov edi, ecx
rol ebx, 0xc
nop
jmp 0x531d02
call esi
mov ecx, 0xd1cbd43f
xor ebx, edi
add edx, ebx
bswap ecx
xor edx, 0xd1cc4413
not edx
jmp 0x53335a
pop esi
neg edx
and ebx, edi
xor edi, edx
mov edi, ecx
xor edx, ecx
bswap ecx
or edx, edi
add edi, ebx
mov ebx, 0xd1ce736f
dec ecx
jmp 0x532070
call esi
and edi, 0xd1d24655
add edi, ecx
mov edi, ebx
bswap edi
xor ecx, 0xd1d2b415
add edx, 0xd1d2cf27
jmp 0x530152
call esi
xor ebx, ecx
inc edi
and edi, ecx
mov edi, ecx
mov ebx, 0xd1da0e35
sub edx, ebx
xor edi, ecx
sub edi, ecx
mov edx, ebx
bswap ebx
xor ebx, edx
xor edi, ebx
inc edi
add ecx, ebx
jmp 0x533adf
pop esi
and ecx, edi
xchg ecx, edi
neg edi
sub edx, 0xd1dcd0e9
sub ecx, edi
add edx, ecx
shl ecx, 0x12
add ecx, ebx
add ecx, 0xd1dd57ef
not edx
jmp 0x533cb3
pop esi
or edi, ebx
mov edi, edx
and ebx, ecx
and ecx, edx
shr edi, 0x15
mov ecx, edi
jmp 0x53294b
push 0xcee96a91
inc edx
bswap edi
mov ebx, edi
mov edx, 0xd1e65be7
or edi, 0xd1e6765d
sub edi, ecx
sub ebx, edi
sub edi, ecx
xor ecx, edi
neg edi
mov edx, 0xd1e71b69
or edi, 0xd1e737f9
jmp 0x533d49
push 0xcee61919
not ebx
xor ecx, edx
dec edi
and edi, edx
xchg ecx, ebx
sub ecx, edi
mov edi, edx
xor edx, edi
xor edx, ecx
and edi, ebx
neg edx
xor edi, ecx
neg ecx
shr ebx, 0x1a
jmp 0x52ff74
push 0xcee5dd53
and ecx, ebx
mov ecx, edi
add ecx, 0xd1f699e7
mov ebx, edx
shl ecx, 0x1d
add edx, ecx
mov edx, edi
add edi, ecx
jmp 0x530ed0
mov esi, 0xa3f322a
and edi, 0xd1f74261
mov ebx, edi
sub ebx, edi
add ecx, edx
xor ecx, ebx
dec edx
jmp 0x531979
pop esi
xchg ecx, edx
rol edi, 3
inc edx
and ebx, 0xd1f97aef
neg ecx
mov ebx, 0xd1f9b127
and ecx, edi
add edi, 0xd1f9e6a7
dec ebx
or edx, edi
xor edi, ecx
mov edi, ebx
xor edx, ebx
or edi, ecx
add ebx, ecx
and ecx, ebx
jmp 0x52f880
call fcn.005309a5
xor edi, ecx
sub edi, ecx
xor edx, ebx
xchg edx, ebx
mov edi, 0xd1fdea39
not ebx
mov ecx, ebx
mov edx, edi
add edi, 0xd1fe58c3
inc edi
sub edx, 0xd1fe90ef
and edx, 0xd1feab45
jmp 0x533608
pop esi
bswap ebx
add edx, ecx
add edi, edx
sub ecx, edi
xor edi, ebx
or ecx, edx
sub edi, edx
mov edi, ebx
inc edx
xchg ebx, ecx
jmp 0x52f81b
pop esi
xchg ecx, ebx
mov edx, 0xd207cfdd
xchg edx, ebx
or ebx, 0xd20805c7
add edi, ebx
and ebx, edx
add ebx, ecx
mov edx, 0xd2086f7b
jmp 0x52fb11
call fcn.005309a5
sub ecx, edi
and edx, 0xd20c9ec3
mov edi, edx
mov ecx, 0xd20cd2c5
mov ecx, edx
xchg edi, ecx
xchg ebx, ecx
add edx, ecx
and ecx, 0xd20d58a3
ror edx, 0x1c
jmp 0x531ab7
pop esi
inc edi
xchg ebx, ecx
dec edx
xor ecx, 0xd20ed9ed
xchg ebx, edi
and ebx, edx
sub edx, ecx
or ebx, 0xd20f426b
jmp 0x530527
call fcn.005309a5
xchg ebx, edi
sub ecx, ebx
add ecx, edi
and edx, edi
and ebx, edx
or edi, 0xd20fe863
or ecx, edx
dec ecx
add ecx, edi
xor ecx, edi
or edi, ebx
or ecx, ebx
jmp 0x5331f5
push 0xcee989f9
bswap edx
xor ecx, edx
or edx, edi
xchg edi, edx
and ebx, ecx
and ecx, edx
xchg edx, ebx
shr ecx, 0xb
jmp 0x530ca5
mov esi, 0xa3f322a
xor ecx, 0xd21ae051
or edi, edx
bswap edx
xor ecx, ebx
or ebx, 0xd21b5033
add edi, ecx
and ebx, edi
add edi, ebx
xchg edx, ecx
add edx, edi
and ebx, ecx
shr edx, 0x11
jmp 0x532e7a
pop esi
xchg edx, edi
xor ebx, ecx
and edi, ecx
add edx, edi
and ebx, ecx
dec edx
xor ecx, 0xd21ccbb1
or ecx, 0xd21ce617
sub ecx, 0xd21d02a7
mov edx, 0xd21d1d37
jmp 0x53325d