Function at 0x401000
Capabilities:
Decompress data using ucl
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xffffff10
jne 0x40107f
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
ret
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xffffff20
jne 0x401112
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
ret
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xffffff34
jne 0x40117d
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
ret
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xfffffef0
jne 0x4011de
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xffffff32
jne 0x401253
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
call sub.ntdll.dll_RtlIsValidIndexHandle
call sub.ole32.dll_OleSetAutoConvert
call sub.ole32.dll_OleSetAutoConvert
ret
jmp 0x536210
xor edx, ecx
xor edi, edx
sub ecx, edi
shr esi, 0x1a
xor edi, ecx
neg edx
not edi
jmp 0x536318
pop esi
shr ecx, 1
xor ebx, 0xf4f05fcc
and edx, ecx
ror edi, 6
jmp 0x536c0a
call esi
nop
add edx, ebx
nop
mov edx, ebx
inc ecx
and ecx, 0xf4f6bb6e
add ecx, ebx
xor ebx, edi
xchg ebx, ecx
inc ecx
mov edi, ecx
xchg edx, ebx
jmp 0x538833
push 0xf3e2194e
and ebx, edx
xor ecx, edi
and ebx, edx
ror ebx, 0x1c
ror edi, 0xd
or edx, ebx
not edx
and ebx, edx
xor ecx, edx
sub ecx, edx
jmp 0x537271
push 0xf3d92352
sub ebx, 0xf4fd6174
xchg ebx, edx
xor edx, ecx
add edx, 0xf4fe2a8a
mov ecx, ebx
add edi, 0xf4fea3b8
and ebx, 0xf4fee186
and ebx, ecx
shr edx, 0x10
xor edx, ebx
jmp 0x536a71
push 0xf3efc0f8
and ebx, 0xf4fff2e2
mov edx, edi
shr edi, 0x19
mov ecx, edi
and edi, ecx
neg ebx
jmp 0x53933a
push 0xf3ead342
or edi, ecx
dec ebx
xor edx, ebx
sub ecx, edi
and ecx, edi
sub edi, ecx
jmp 0x53699e
mov esi, 0x2809144b
add edi, 0xf5100b7e
xor ecx, 0xf5104aa8
and ebx, edx
sub ecx, edi
neg edx
and edx, ebx
add edx, ecx
and edi, edx
jmp 0x538fd1
pop esi
ror edi, 0xb
xor edi, ebx
shr edi, 0xe
mov ecx, edx
add edi, edx
sub edi, ebx
xor ebx, edi
shr ecx, 0xb
jmp 0x538e9e
call esi
rol edx, 0x18
xor ecx, 0xf519b04e
or edx, edi
xor ebx, ecx
inc ecx
and ebx, edi
or ebx, ecx
dec edx
xchg ecx, ebx
neg edi
not ebx
or edx, 0xf51c2a40
jmp 0x53650b
pop esi
xchg ecx, ebx
ror ebx, 0xb
xor edi, ebx
not edx
xor ebx, edx
and ebx, ecx
or ebx, 0xf522e93a
add ebx, ecx
or ecx, 0xf5237388
mov edi, edx
shl edi, 0x16
xchg ecx, edi
jmp 0x538c24
push 0xf3e6b8c0
shr ecx, 5
xchg ebx, ecx
shl ecx, 0x1b
not ecx
jmp 0x538005
mov esi, 0x2809144b
xor ebx, 0xf529e8f0
ror edi, 0xc
mov ebx, edi
shr edi, 0x19
shr edi, 0x10
and ebx, edi
xor ebx, edx
xchg ecx, edx
jmp 0x53728a
pop esi
sub ecx, edi
xor ebx, 0xf54421f6
or edx, edi
mov edi, edx
dec edx
sub edi, ecx
and ebx, 0xf545af16
add edi, edx
add ebx, edx
xchg edx, edi
jmp 0x5393e1
call esi
sub ebx, 0xf546c13a
sub ebx, edi
jmp 0x536e79
pop esi
inc ecx
shr edi, 0x17
sub edx, edi
xchg edx, ebx
or edi, ebx
xor edi, ebx
mov edi, ecx
add edx, ecx
sub edx, ecx
ror ecx, 0x1c
jmp 0x5397e8
pop esi
neg edx
bswap ecx
xor ebx, 0xf54f2ca4
sub edi, edx
jmp 0x53953a
push 0x401400
dec edx
add edi, ecx
and ebx, ecx
mov ecx, ebx
mov ecx, ebx
sub edx, edi
xor edi, 0xf5531d48
rol edi, 0xd
jmp 0x53670a
push 0xf3f89768
mov ecx, edi
mov edi, ebx
neg ecx
ror edi, 2
xor edx, edi
xor edi, edx
inc edx
sub ecx, ebx
jmp 0x53842d
call esi
xchg ebx, edi
neg ebx
mov ebx, ecx
rol ecx, 1
inc edx
sub ecx, edi
mov edi, edx
and ebx, ecx
jmp 0x53995e
mov esi, 0x2809144b
add ebx, edx
xor edx, 0xf570beb4
dec ecx
add ecx, edi
xor edx, ecx
rol ebx, 0x17
jmp 0x538401
call esi
sub edi, ecx
xor edx, edi
add edx, edi
xor edi, ebx
inc edx
add edx, 0xf573e3f8
neg ecx
mov edx, ecx
jmp 0x53816a
push 0xf3eb197c
and edx, 0xf574ab56
sub ebx, 0xf574f606
sub edx, ecx
and ecx, ebx
inc ebx
add edi, ebx
jmp 0x5378e6
push 0xf3d97034
xor ebx, edi
xor edx, ecx
add edx, edi
mov edi, ebx
or ebx, 0xf58464a0
dec edi
jmp 0x537402
push 0xf3ed8f16
mov ecx, 0xf5857f72
or ebx, edx
jmp 0x539290
pop esi
mov edx, ecx
dec ebx
mov ebx, 0xf5878a7e
sub edx, edi
neg edx
and ebx, edi
or ecx, edx
and ecx, edx
jmp 0x5395ab
pop esi
or edx, ecx
or ebx, edi
neg ebx
xor edx, edi
mov edx, 0xf58eaaa2
or ebx, edi
and edx, edi
xor edi, ecx
or ebx, ecx
or edx, edi
shl ecx, 8
mov ecx, 0xf590aa0c
jmp 0x539a0f
pop esi
xor ecx, 0xf5a434f6
shl ebx, 5
shl edx, 0xf
dec ecx
sub edi, 0xf5a6110c
dec edx
jmp 0x536755
push 0xf3f92412
sub ecx, edi
add edi, ebx
inc ecx
xor edi, 0xf5acbf0e
xor ebx, ecx
or ecx, edx
jmp 0x539244
pop esi
not ecx
ror edi, 0xa
xor ecx, 0xf5ae26b6
xor edx, ecx
mov ebx, ecx
add edi, ecx
or edx, 0xf5af1d0c
and ecx, 0xf5af6d2c
ror ecx, 0x1b
mov edx, 0xf5afec90
or ecx, edx
and edx, ecx
jmp 0x537838
mov esi, 0x2809144b
shr ecx, 2
mov edi, 0xf5c9f350
dec edi
ror ecx, 5
and edi, ecx
xchg edx, ebx
neg ecx
ror ebx, 0xd
jmp 0x536e5c
call fcn.00536224
add edi, ebx
dec edx
shl edx, 7
or edi, ecx
or edx, ebx
or ebx, edx
mov edx, ebx
xor edi, ebx
inc edi
and ecx, edx
jmp 0x537a86
pop esi
and ebx, 0xf5d00ba4
mov ebx, 0xf5d04b68
or ebx, edx
or edi, ecx
mov edi, ecx
and edi, ebx
shl edx, 0x14
xchg edi, ecx
xchg ecx, edx
or edi, ebx
jmp 0x537090
push 0xf3ed4938
xchg edx, edi
ror edi, 0x13
mov edi, ebx
shr edx, 0x13
xor ebx, 0xf5d9064c
neg ebx
ror ecx, 0xe
sub ebx, 0xf5d9c922
jmp 0x536a8a
pop esi
ror ebx, 6
sub ebx, edi
bswap edx
or edx, ebx
jmp 0x538a55
pop esi
xor edi, edx
xchg edi, edx
add edi, ebx
xor edx, 0xf5dde616
or ebx, ecx
add edi, 0xf5de6ac4
shl ebx, 0x1b
add edi, ecx
jmp 0x53774d
pop esi
rol edi, 0x19
and edx, ecx
sub ecx, edi
add edx, edi
nop
mov edx, ecx
shl edx, 0xe
or edi, edx
or ecx, edx
add edi, 0xf5e14d84
sub ecx, edi
mov edx, ebx
jmp 0x537ecb
call esi
sub edx, edi
add ebx, edi
inc ecx
or edi, 0xf5e2d190
neg edi
or edx, 0xf5e34a40
or edi, ebx
shl ebx, 0x1b
jmp 0x536f63
push 0xf3f85126
and edi, 0xf5f3d2d6
mov edx, edi
shr edi, 0x1b
mov ecx, 0xf5f48220
mov ecx, edi
xor ebx, 0xf5f5067a
dec edx
xchg ecx, ebx
neg edi
shl edx, 1
jmp 0x5368c8
mov esi, 0x2809144b
shl ecx, 3
or ecx, edi
mov ebx, 0xf5f85b20
xor ebx, ecx
jmp 0x5382d3
push 0xf3e6720e
mov edx, edi
bswap edi
xor edi, ecx
neg edi
xchg edi, ebx
xor ecx, 0xf5fb30d4
xchg edx, edi
add ebx, edx
or ebx, edi
shr edi, 0x18
xchg edx, ebx
xchg edi, ebx
jmp 0x536554
push 0xf3de95ec
ror ecx, 0x14
xor ecx, edi
add ebx, edx
xor ebx, edi
shr edx, 0x19
rol ecx, 0xd
and ebx, edx
xchg ebx, edi
inc edx
xor ecx, edx
add edx, ebx
add edi, 0xf6067c54
jmp 0x537c1b
push 0xf3e25e30
and edi, ecx
xchg ecx, ebx
mov edi, edx
inc edx
inc ecx
and ecx, ebx
shr edi, 3
mov edx, ecx
jmp 0x538c83
call fcn.00536224
rol edi, 0x14
and ebx, ecx
xchg ebx, edx
mov edi, ebx
xor ecx, ebx
add ecx, edi
jmp 0x5364a2
push 0xf3d9b632
xor ebx, edi
add edi, edx
inc ecx
inc ecx
xor edx, ecx
and ecx, edi
mov ebx, 0xf62bb32c
xchg ebx, edx
jmp 0x53769f
push esp
and edx, ebx
mov ebx, 0xf62fe970
or ebx, ecx
and ecx, 0xf6305e6a
rol ebx, 1
ror edi, 0x14
and ebx, edx
xor ebx, edi
xchg edx, ebx
and ebx, ecx
sub edx, ecx
sub edx, ecx
jmp 0x5394c3
mov esi, 0x2809144b
and edx, 0xf64486f4
dec edi
or edi, edx
and ebx, 0xf64537a8
mov ecx, edx
add edi, ecx
sub ebx, ecx
xchg ebx, ecx
mov edx, edi
mov ebx, 0xf6469f1a
jmp 0x5385fb
pop esi
mov edx, ebx
sub ebx, 0xf6472c18
ror ebx, 4
or edx, edi
dec ecx
neg edx
shl ecx, 5
or edx, ecx
ror edx, 6
sub ecx, 0xf64917dc
shl edi, 0x11
add edx, edi
and ecx, edi
xchg edx, ebx
jmp 0x536a9b
mov esi, 0x2809144b
xor edi, edx
or edx, 0xf654ae98
or edi, 0xf654ea10
xchg ebx, edx
or edi, edx
dec ecx
mov edi, 0xf655e5e0
xor edi, edx
not edx
mov ebx, ecx
jmp 0x53936c
push 0xf3d9fa30
inc ebx
xor edx, ebx
mov ebx, 0xf658ea22
rol edi, 0x18
inc edx
or ebx, edi
jmp 0x53641a
mov esi, 0x2809144b
or edi, ebx
or edx, ebx
xor ebx, ecx
sub ebx, 0xf65aad6e
inc edx
mov ebx, edi
ror ebx, 1
add edx, ebx
sub ebx, ecx
and ebx, edi
add ecx, ebx
xor edi, 0xf65c8c1e
jmp 0x538aa4
pop esi
add ecx, 0xf664f05e
mov ebx, edx
shr edi, 0x17
xchg edx, ebx
or ebx, edi
xor edx, edi
bswap ecx
ror edi, 0xd
xor edx, ecx
add edi, ebx
dec ebx
shr edx, 0x1c
jmp 0x5395d8
pop esi
dec ecx
rol edi, 0xd
and edi, edx
or ecx, 0xf6709232
jmp 0x537b97
push 0xf3f3e182
add ebx, edx
sub ebx, ecx
shr ebx, 0x14
shl edi, 0x13
xchg ebx, edx
inc edi
jmp 0x53657f
pop esi
mov edx, edi
or edi, ecx
xor edi, edx
add edx, ebx
dec edx
or edx, ebx
mov ecx, edx
inc edi
jmp 0x5382a8
mov esi, 0x2809144b
sub edi, ebx
dec ecx
xchg ecx, edx
ror ecx, 0x13
sub edx, ecx
mov ebx, edi
inc ebx
add edx, edi
and ecx, edx
ror edx, 0x16
xchg ebx, edx
xchg ebx, ecx
add edi, ecx
xor edx, ecx
jmp 0x5379e9
push 0xf3df64ae
mov ecx, edi
xor ecx, edi
xor edx, ecx
not edi
jmp 0x536e1f
mov esi, 0x2809144b
or edx, 0xf6818c5e
add ecx, ebx
or edx, 0xf6820fb8
mov ecx, 0xf6824a92
jmp 0x539cba
push 0x40
or edi, 0xf689ceba
xor edx, 0xf68a0a14
xchg ecx, edx
inc edx
or ebx, 0xf68acb72
rol ebx, 0x1d
add ebx, 0xf68b421c
xor ebx, edi
jmp 0x538ee2
call fcn.00536224
or edx, 0xf68d551e
or edx, ecx
xchg ebx, edi
mov edx, ecx
sub ecx, edi
sub ecx, edi
jmp 0x536984
call fcn.00536224
add ecx, edx
xchg edi, ecx
xor edi, ecx
xchg ecx, edx
or edi, ebx
sub edx, edi
xor edx, edi
or ecx, ebx
jmp 0x538341
call esi
sub ebx, edi
or ecx, 0xf69a36f0
rol edx, 0xb
neg ebx
jmp 0x538251
push 0xf3f39a86
bswap edx
shr ebx, 0x12
xor ecx, edi
xor ebx, edi
xor edi, ebx
dec ecx
jmp 0x537821
mov esi, 0x4132136a
add ebx, edi
xchg edx, ebx
and ebx, edx
xchg ecx, edx
dec edx
add edx, ebx
add edx, edi
mov ecx, edi
sub edx, ecx
or ebx, 0xd2a6965
mov ebx, edi
add edx, 0xd2af835
not edi
mov edx, ecx
jmp 0x5385d6
call fcn.00536224
sub ecx, ebx
dec edx
add ebx, edi
mov ebx, edi
xchg ecx, edx
sub edx, 0xd31c8dd
not ecx
mov edx, ecx
xor ebx, edx
neg ecx
mov edi, 0xd33180d
mov ecx, 0xd3357a9
mov ecx, edx
xor ecx, ebx
bswap edi
ror edx, 0x15
jmp 0x539bd8
push 0xf3dedab2
sub edi, edx
bswap ebx
mov ebx, edi
or ebx, ecx
xchg ecx, edx
xor ecx, edi
bswap ebx
rol edx, 0x18
jmp 0x53848a
push 0xf3f04ca4
mov edi, ecx
mov ecx, edx
neg edi
shl ecx, 4
sub edx, ebx
or edi, ecx
jmp 0x53989c
push 0xf3ea47e8
add edi, edx
bswap edi
xchg ebx, ecx
mov ebx, ecx
add ebx, edi
inc edi
or edx, ecx
xor ebx, edx
or ecx, ebx
xor edx, edi
add edi, 0xd6c6223
shr ecx, 0x1d
jmp 0x538c3b
push 0xf3e6fe56
xor edx, ecx
dec ebx
xor ecx, ebx
and ecx, ebx
xor edi, ebx
mov edx, ecx
mov edx, ecx
rol edi, 0x11
mov ecx, edi
neg ecx
shr edx, 7
mov ebx, edx
shr ecx, 0x18
and edx, edi
sub ebx, edi
mov ecx, 0xd866693
jmp 0x5370d5
pop esi
dec ecx
rol edi, 0xf
sub edx, ecx
and ebx, ecx
neg edi
and ecx, ebx
mov edx, ebx
and ebx, 0xd965069
rol ecx, 9
add ecx, 0xd96c7f3
jmp 0x536f35
push 0xf3f0d8ba
mov ebx, edx
or edi, edx
shr edx, 0xe
and ebx, 0xd99d78d
or edx, 0xd9a1331
shl edi, 1
or edi, edx
xor ecx, edx
xchg edx, ecx
sub ecx, edi
jmp 0x537584
push 0xf3dc6cf0
xor ebx, edx
xchg ebx, ecx
inc edx
rol edx, 0xd
or ebx, edx
xor ecx, edi
shl ecx, 0x1a
mov edx, edi
jmp 0x538d3e
pop esi
neg ebx
xchg ebx, edx
ror edx, 0x11
xor ebx, 0xd9f7b8d
shr ecx, 4
inc edi
jmp 0x537103
call esi
or ebx, edx
add edi, 0xda86127
mov ebx, edx
add edi, 0xda8d493
sub ebx, ecx
or ebx, 0xda9db7b
mov edi, 0xdaa2b71
neg ecx
neg edx
ror edx, 0x16
mov edi, 0xdab2bed
add edi, ecx
jmp 0x5366e9
call esi
xor ecx, 0xdabbfbb
or ebx, edx
ror edx, 0xb
xor ecx, ebx
xor edi, ecx
xor ebx, edx
sub ecx, edi
xor ebx, edx
sub edi, ecx
or edi, ecx
xor edx, 0xdae3f25
xor ebx, edi
jmp 0x538555
pop esi
bswap ebx
mov edi, ebx
xchg ebx, edi
inc ebx
sub edi, 0xdafe1b9
bswap edx
or ebx, 0xdb0626b
add edx, 0xdb0a109
jmp 0x539605
pop esi
xchg edx, edi
and edi, edx
xchg ecx, ebx
or ebx, edx
mov ecx, edx
not edi
shr ecx, 0x19
add edi, ebx
add ecx, edx
add edx, ecx
add ebx, 0xdb6d9e3
xor edi, ebx
xor edx, ebx
and ecx, 0xdb79865
jmp 0x536347
call fcn.00536224
xor edi, 0xdb7f627
and edi, ecx
xor ecx, edi
or ebx, edi
sub edi, 0xdb8ef79
sub edi, edx
bswap edi
shr edx, 0x1b
and ecx, edi
xor ebx, edx
jmp 0x53692a
call esi
mov edx, ecx
dec ebx
xchg ecx, edx
or ecx, 0xdbf8f7f
shr ecx, 0x15
or edx, ebx
dec ecx
and edi, ecx
or ecx, ebx
shr ebx, 0x18
jmp 0x536f44
call fcn.00536224
or edi, ebx
ror edi, 0x16
xchg ecx, edx
xor edi, ebx
shr ecx, 0xd
not edx
xor ebx, 0xdcfd525
dec ecx
sub edx, ebx
xchg edi, ebx
ror edx, 0x1a
dec edx
shl ecx, 1
neg ebx
jmp 0x538229
push 0xf3f8ddb8
mov ecx, edi
shr edx, 0x1b
mov ecx, 0xdd27cf9
xchg edi, ebx
sub edx, ebx
xchg ecx, ebx
ror ebx, 0x12
or ecx, edi
sub ebx, edx
or ecx, edi
mov ebx, edi
sub edx, ebx
sub ebx, ecx
neg edi
mov ebx, ecx
xchg edx, ecx
jmp 0x536c63
push 0xf3df1fa8
add edi, edx
xor ebx, edx
rol edx, 0x13
neg edi
xchg ecx, edx
mov ecx, 0xdda7207
xor ebx, ecx
sub ecx, 0xddb001f
or edi, 0xddb4079
xor ebx, edx
jmp 0x537880
pop esi
and edi, 0xde6ade1
sub edx, 0xde6e92b
or edi, ebx
and edx, edi
sub edx, 0xde79797
or ecx, ebx
add ebx, edx
neg ebx
mov edx, 0xde8914f
ror ecx, 0x12
add ecx, 0xde908bd
xor edx, 0xde944e9
jmp 0x536ac2
call fcn.00536224
xor ecx, edx
xchg edi, ebx
or edi, edx
xor edi, edx
inc edi
mov edi, 0xdf0264d
dec edi
add edi, ebx
mov ebx, 0xdf0e58f
mov ebx, 0xdf12175
jmp 0x537449
call fcn.00536224
or edi, 0xdf1769d
and edx, 0xdf1b20b
or ecx, ebx
xor ebx, 0xdf227a1
or ecx, edi
mov ebx, edx
xchg edx, edi
mov ebx, ecx
sub ebx, edx
or edx, ebx
sub edi, ebx
add edi, 0xdf40579
jmp 0x5362bc
pop esi
xor ecx, edi
add ecx, 0xe182941
or ebx, ecx
sub edi, ecx
shl edx, 0x17
sub ecx, edi
mov edx, edi
or ecx, edx
jmp 0x536268
push 0xf3e18f14
or edi, edx
and edx, ebx
neg ecx
xchg edi, ecx
jmp 0x538faf
push 0xf3f35468
sub ecx, edx
mov edx, ecx
sub ecx, 0xe3644a5
ror ebx, 6
shr edx, 0x1f
not ebx
or edx, 0xe373441
not ecx
or ecx, edx
and ebx, edi
jmp 0x537af0
push 0xf3e8e968
xchg ebx, edi
xor edx, ecx
inc edx
ror edi, 0x1d
xor ebx, edi
shr ecx, 0x1a
sub ebx, ecx
neg ebx
inc ebx
mov edx, edi
mov ebx, ecx
bswap ecx
mov ebx, edx
or ebx, 0xe439125
jmp 0x5376b7
pop esi
and edi, edx
xchg edi, edx
mov ecx, edx
inc ecx
ror ecx, 0x1b
or edi, 0xe45325b
add edi, edx
xchg edx, edi
dec ebx
and edx, ecx
sub edx, 0xe466a99
mov ebx, edi
jmp 0x5392b9
call fcn.00536224
sub ecx, edx
rol ebx, 0x15
xchg edx, ebx
add ebx, ecx
xor ebx, 0xe480b49
sub edx, edi
xchg ecx, ebx
and edi, ebx
inc ebx
dec ecx
jmp 0x536f86
pop esi
mov ecx, 0xe4f798b
neg edx
mov edx, ecx
xor ebx, 0xe50367d
shl ebx, 1
and edx, ebx
or edx, ebx
and ecx, edi
xor ebx, edi
add ecx, 0xe51bae9
jmp 0x539c00
pop esi
and ecx, ebx
rol ecx, 0x1a
and edx, ebx
xor edx, ebx
xor ecx, edi
or edx, 0xe662ef3
jmp 0x5377f3
push 0xf3ea8d26
mov edx, ebx
or edi, ecx
mov edi, ecx
xor ecx, ebx
inc edx
mov ecx, 0xe67cc89
jmp 0x5363cf
push 0xf3e2a32e
add edx, ebx
shl ebx, 4
or edi, 0xe6bcbf9
inc ecx
and ecx, ebx
mov ebx, edx
nop
or ebx, 0xe6d1511
ror ebx, 0xc
sub edi, edx
shr edx, 0x1c
or edx, ecx
jmp 0x53784c
push 0xf3dcb1e6
add ecx, edi
or ebx, edi
or edx, ecx
or ecx, edx
and ebx, edx
and edi, 0xe79c107
sub ebx, edx
inc edi
not edi
shr edi, 3
or edx, 0xe7b0fb3
rol ebx, 0x18
or edi, 0xe7b8f2d
xor ebx, edx
jmp 0x536960
pop esi
neg edx
add edi, ebx
mov ebx, ecx
xor edx, ebx
sub edx, 0xe907039
xor edx, edi
xor edx, ecx
sub edx, ebx
jmp 0x53884e
push 0x134e10
or edx, 0xe9431f5
bswap ebx
mov ecx, ebx
add edi, ebx
mov ecx, edx
sub ecx, edx
xchg edx, ebx
add edx, edi
jmp 0x5367a4
push 0xf3e1d4d4
dec edx
xor edi, ecx
add edx, ebx
ror ecx, 1
add ecx, edx
mov ecx, 0xea4298d
or edi, 0xea465f3
shr ebx, 0x19
jmp 0x5362db
call fcn.00536224
add edx, edi
and ecx, 0xea61933
rol ebx, 0x12
add ebx, 0xea690d5
shr ecx, 9
xchg ecx, ebx
xchg edi, ebx
neg edi
or edx, ecx
sub edx, ebx
xchg ecx, edi
and ecx, ebx
jmp 0x539684
call esi
dec ebx
rol ebx, 4
dec ebx
not ebx
xchg ebx, edx
xchg ebx, edi
and edi, ecx
not edx
rol ebx, 0x17
xor edx, ecx
jmp fcn.0053819f
push 0xf3f96a3c
sub ebx, edi
xor edx, ebx
xor edi, ebx
mov ebx, edi
mov edi, ecx
or edi, 0xed16685
inc edi
and ebx, ecx
add edx, 0xed2346d
mov ebx, edx
dec ebx
xor edx, ecx
jmp 0x537661
push 0xf3edd534
sub ebx, 0xed666f3
xchg edi, edx
or ecx, edx
sub edi, edx
xchg ebx, edx
and edx, 0xed79edb
mov edi, 0xed7eed3
mov edi, ecx
xchg edx, edi
mov ecx, edi
jmp 0x539882
pop esi
add edx, ebx
nop
xor edx, 0xed97a25
and ebx, edi
sub ecx, edx
sub edx, 0xeda4405
sub edx, ebx
bswap ecx
jmp 0x53957e
push 0xf3f0060c
shl ecx, 0x16
xchg ebx, edx
mov edi, edx
add ebx, ecx
jmp 0x537c36
call fcn.00536224
add edi, edx
add edx, ecx
or edi, ecx
inc edx
xchg edi, ecx
mov edi, 0xee86df1
shr edx, 0xe
dec ecx
mov ebx, 0xee93de1
xchg edx, ebx
ror edi, 0x14
and edx, ebx
not edi
shl edi, 8
jmp 0x53901d
pop esi
add edx, ebx
shl ebx, 8
neg edi
bswap ecx
mov ecx, 0xef11193
mov edx, 0xef15149
add edi, ebx
add ecx, edi
bswap edx
sub ebx, 0xef25a1f
inc edx
add ecx, 0xef2d9bf
jmp 0x538b1b
push esp
or ebx, ecx
xchg edx, ecx
xor edx, ecx
mov ebx, 0xf0283c3
xor edi, ecx
ror ecx, 0x12
xchg edx, ebx
xor ebx, 0xf036f87
sub ebx, edi
xchg edx, edi
jmp 0x537972
push 0xf3dc274a
xor edx, 0xf09230b
xchg ebx, edi
add edx, ebx
sub ecx, 0xf09d227
add edx, 0xf0a0dd5
ror edi, 0x11
shr ecx, 0x1a
add ecx, 0xf0ad135
add ebx, 0xf0b0cc1
or ecx, edx
mov ebx, edi
and ebx, 0xf0bb9ed
xor ecx, 0xf0bf513
sub ecx, edx
jmp 0x538135
pop esi
and edi, 0xf0c80cf
dec edx
shr ebx, 0x18
mov ecx, ebx
or edx, 0xf0d7b9d
or edi, 0xf0db701
or ebx, edi
sub ecx, edx
add ecx, edi
xchg ebx, edx
add ecx, 0xf0ed937
inc ebx
jmp 0x536770
push 0xf3e51472
xor edi, ebx
mov ebx, edx
xchg edx, edi
inc ecx
and edi, 0xf10513d
inc ebx
xchg edi, ebx
and ecx, edi
and ebx, edx
ror edi, 0x1c
sub ecx, edi
mov edx, edi
and edx, 0xf12333f
neg edi
jmp 0x539798
pop esi
or edi, ebx
xor ecx, 0xf12fb8b
or edi, ebx
shl edx, 0xa
sub edi, ebx
xor ebx, edx
jmp 0x5375ac
pop esi
mov edx, 0xf163cc5
rol ebx, 8
rol ecx, 0x13
rol edi, 0xd
nop
shl edi, 2
jmp 0x53643c
call esi
add ecx, edi
xor ebx, ecx
xchg edi, ebx
shr edi, 0x1d
neg edi
neg edi
or edx, 0xf20282b
not ecx
dec edx
shl ecx, 0xf
not edi
not edx
jmp 0x538a7f
mov esi, 0x2809144b
xchg edx, edi
dec edi
and ecx, 0xf335655
dec edx
and ecx, edi
xor ecx, 0xf3416a1
mov ebx, 0xf3451a1
or edx, 0xf348d4b
sub edi, 0xf34c8ab
xchg edi, edx
or edi, edx
xor edx, ebx
jmp 0x5379ba
pop esi
not ecx
xchg ecx, edx
xor edi, ecx
or edi, 0xf38797f
rol edx, 2
or ebx, edi
mov ecx, edx
and ebx, 0xf396259
sub edx, ebx
sub ecx, ebx
jmp 0x5389cd
mov esi, 0x2809144b
or edi, ebx
and edx, 0xf4254e5
dec edx
xchg edi, edx
add edi, ebx
shl ebx, 0x17
jmp 0x537be7
push 0xf3f092ac
xor edx, ebx
dec ebx
add edx, 0xf44190b
xor ecx, edx
add edi, ecx
xchg edx, ecx
or ecx, ebx
or ecx, ebx
and ebx, edi
mov ecx, ebx
jmp 0x53810d
pop esi
shr edx, 0xa
sub ecx, edi
xchg edx, ebx
not edi
and edx, ebx
rol ecx, 2
shr edi, 0x19
sub ebx, 0xf548201
xor edi, ecx
and ebx, edx
shl edi, 0x1e
bswap ebx
neg edx
mov ecx, edi
jmp 0x5380c7
pop esi
rol edx, 0xf
or edi, 0xf6004e5
and edx, edi
dec edi
xchg edx, ecx
shl edx, 0x12
jmp 0x53719e
call esi
and edi, ebx
sub edx, ebx
xor ecx, 0xf824271
neg edx
rol ebx, 7
sub ecx, 0xf830237
xchg ebx, edi
add edx, ecx
sub ecx, 0xf83bd2b
xchg ecx, edx
jmp 0x536c7c
pop esi
mov edi, ecx
or edi, ebx
sub edi, ecx
bswap edi
or ecx, edi
xor edx, ebx
add edx, ebx
and ecx, ebx
xor ecx, ebx
ror ebx, 7
or ebx, edx
add ebx, 0xf870d31
dec edx
add ebx, edx
jmp 0x536eed
call fcn.00536224
and ecx, 0xf93802d
add ecx, edx
shl ecx, 0x1a
add edi, ebx
sub ebx, ecx
and edi, edx
xchg edi, ebx
and edi, 0xf951743
or ecx, edi
sub ecx, edx
jmp 0x5381f7