Function at 0x401000
Capabilities:
Encrypt data using chaskey

Disassembly:
call sub.user32.dll_GetKBCodePage
cmp eax, 0xffffff34
jne 0x401084
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
ret
call sub.user32.dll_GetKBCodePage
cmp eax, 0xffffff19
jne 0x4010f4
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
ret
call sub.user32.dll_GetCaretBlinkTime
cmp eax, 0xfffffee9
jne 0x401164
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xffffff18
jne 0x4011e3
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
ret
call sub.user32.dll_GetCaretBlinkTime
cmp eax, 0xffffff2a
jne 0x40127b
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_CsrSetPriorityClass
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_ZwReplyWaitReplyPort
call sub.ntdll.dll_CsrSetPriorityClass
ret
jmp 0x526cd9
bswap ecx
dec ecx
or edi, edx
jmp 0x527894
pop ebx
or edi, ecx
mov edi, ecx
shr edi, 9
and esi, 0x70245adf
sub ecx, esi
jmp 0x5274bf
mov ebx, 0x2a676233
xchg ecx, edx
rol edx, 5
add edi, 0x70256dad
shl edx, 0x1a
add edi, ecx
and esi, edi
dec ecx
mov ecx, edx
shr esi, 0x1e
or esi, ecx
or edi, ecx
add ecx, 0x7027a678
jmp 0x52921b
pop ebx
xor edx, 0x702a9d2a
neg edx
add edx, 0x702b1cea
xor edi, ecx
xchg esi, edi
xchg esi, ecx
xchg esi, ecx
add ecx, edi
jmp 0x527fde
push 0x6eb81e48
sub ecx, edx
not ecx
add edx, edi
ror esi, 0xe
xor esi, 0x702daee7
not edi
mov edi, 0x702e3b41
ror esi, 0xa
xchg edx, edi
inc esi
or edi, esi
jmp 0x526f82
pop ebx
or edx, esi
xchg edi, edx
dec edi
or edi, edx
add ecx, 0x7031114a
ror edi, 0x1e
add esi, 0x70318dae
mov edi, esi
xor ecx, 0x703204cf
and edi, ecx
jmp 0x527227
pop ebx
mov edi, 0x703293fd
bswap ecx
not ecx
jmp 0x528611
pop ebx
mov ecx, esi
xchg edi, ecx
sub edx, esi
xor edi, esi
shr edi, 3
mov edx, ecx
sub esi, edx
jmp 0x52976a
mov ebx, 0x2809144b
mov edi, 0x7037a9c2
and edi, edx
mov ecx, 0x70382fea
mov edi, 0x70386ca1
sub esi, 0x7038a9bb
or edx, edi
add esi, edi
neg ecx
neg edi
mov edx, ecx
jmp 0x52918e
mov ebx, 0x2809144b
sub edi, edx
xchg ecx, esi
or ecx, edi
xor esi, edx
mov ecx, edx
mov ecx, 0x703f9d9f
xchg edx, esi
mov ecx, esi
add edi, edx
xor esi, ecx
jmp 0x527625
mov ebx, 0x2a676233
mov ecx, edi
sub esi, edx
or edi, 0x7042faff
mov ecx, esi
xor edi, edx
inc esi
xor edi, 0x7043ecac
mov ecx, 0x7044385d
or esi, edx
or ecx, edx
jmp 0x5292d4
pop ebx
sub ecx, edx
not edx
xchg edi, ecx
xchg edi, edx
sub edx, ecx
dec esi
and ecx, edi
shl edi, 0xf
ror edi, 5
shl ecx, 0x17
rol ecx, 0x19
rol ecx, 0x1a
not ecx
mov esi, ecx
or esi, edx
jmp 0x526d1e
pop ebx
add edi, 0x704d5a73
sub edi, edx
sub edi, ecx
inc esi
xor edi, ecx
sub edi, 0x704e980a
add ecx, edx
rol edx, 9
jmp 0x52830a
mov ebx, 0x2809144b
xor ecx, 0x7051dbe0
ror ecx, 0x17
mov ecx, edx
sub ecx, edx
not edi
sub ecx, edi
shr ecx, 0x14
xchg edi, ecx
jmp 0x529204
push 0x6eca0918
or edi, esi
not edx
and ecx, edx
bswap edi
jmp 0x528256
pop ebx
sub edi, ecx
or ecx, edx
jmp 0x526fec
push 0x6ebd9694
add ecx, esi
bswap ecx
shl esi, 0x10
mov edx, 0x705a0c3b
mov ecx, 0x705a49c5
sub esi, ecx
and ecx, edx
or ecx, esi
ror esi, 0x12
mov edx, 0x705b76d0
inc edx
jmp 0x5271b6
push 0x6eaf945b
shl edi, 0x1b
shr edx, 0x12
and edi, ecx
jmp 0x528cee
mov ebx, 0x2809144b
sub esi, edx
shr ecx, 0x1d
dec edi
inc edi
or esi, 0x70684181
mov edx, edi
xor edx, esi
xor esi, ecx
xchg edi, ecx
jmp 0x528d8c
mov ebx, 0x4132136a
xchg edi, edx
xchg edi, esi
sub ecx, edi
inc edx
sub ecx, edx
xor esi, 0x706ad311
xchg esi, edi
sub ecx, edx
jmp 0x527432
call ebx
rol edx, 0xb
bswap edi
neg edx
sub edx, ecx
xor ecx, esi
sub edx, edi
sub esi, edi
rol esi, 7
bswap ecx
sub ecx, 0x706df862
xor ecx, esi
or edi, esi
jmp 0x5297e1
push esp
or esi, ecx
xchg ecx, esi
mov esi, edx
sub esi, ecx
and edx, edi
add ecx, edx
or edi, esi
mov edi, 0x7073beb7
neg edx
mov ecx, edi
and edx, esi
shr edx, 0xf
xor ecx, 0x7074f3b2
jmp 0x528be3
pop ebx
add esi, 0x70754c04
shr edx, 0x14
or esi, ecx
dec esi
bswap edx
add edx, esi
add ecx, 0x7076d243
dec ecx
jmp 0x528ecd
push 0x6ebddfdc
sub edi, edx
xchg ecx, esi
and esi, edi
sub edx, 0x707d3917
and esi, ecx
mov edi, esi
or esi, 0x707df087
sub edx, esi
mov ecx, edi
jmp 0x52850a
push 0x6eaf0325
sub edi, ecx
add ecx, edx
mov edi, 0x707f59b6
inc esi
xor edi, esi
and ecx, edi
jmp 0x527202
push 0x6eaf4c9c
xor edi, edx
and edi, esi
mov ecx, edx
mov edx, edi
add edi, edx
add edi, 0x7082bb75
mov edx, esi
and ecx, edx
shr edi, 0x1b
add esi, ecx
and edx, esi
jmp 0x527093
pop ebx
xchg edi, edx
shr esi, 0x14
and esi, 0x7084d0a7
xor edi, 0x70850f9f
add edi, edx
inc esi
xor edi, 0x7085c8fc
sub esi, 0x70860608
shl edx, 0x1b
jmp 0x526da5
push 0x6ec6e9a8
shr edi, 0x14
xor edx, 0x7086ef4d
xchg ecx, edi
add esi, 0x70877c27
ror esi, 0x1b
ror esi, 2
jmp 0x5272a5
push 0x6ec731ea
sub edi, ecx
and ecx, esi
mov edx, esi
xchg ecx, edi
and edx, esi
and edi, esi
sub esi, ecx
neg ecx
xchg edi, esi
add edi, ecx
dec edx
jmp 0x52887f
push 0x6eaa730a
rol edx, 0xb
sub edx, edi
mov ecx, edx
and edx, 0x708f4280
xchg ecx, edi
xchg edi, ecx
xchg esi, edx
neg esi
add ecx, edx
rol edi, 6
sub esi, 0x70910692
bswap ecx
jmp 0x527806
pop ebx
or esi, edi
add esi, edi
jmp 0x527eda
pop ebx
add esi, edx
rol edx, 0xb
and edi, esi
sub edi, ecx
shr edi, 0x10
not edx
mov ecx, esi
shr esi, 0x1f
bswap ecx
jmp 0x526f3b
pop ebx
or esi, ecx
bswap ecx
rol edi, 7
dec edx
dec ecx
mov edi, esi
dec ecx
sub edx, esi
jmp 0x527c33
call fcn.0052862a
or edi, esi
mov edx, esi
add edx, ecx
xor edi, edx
inc ecx
mov esi, 0x70a98dd1
or ecx, esi
xchg edi, edx
sub edx, 0x70aa47e4
add ecx, edx
xchg edx, esi
neg edi
jmp 0x527dfa
push 0x6eb1da2a
sub edi, 0x70ab57fb
mov ecx, esi
bswap esi
mov esi, 0x70ac1075
mov edi, edx
and edx, ecx
or edi, edx
and esi, edx
mov esi, edi
add edi, esi
add ecx, edi
and edi, ecx
jmp 0x527d99
pop ebx
mov esi, edi
add edx, ecx
xor ecx, edi
xor edx, esi
add edi, esi
mov esi, ecx
rol edi, 0x1f
sub edx, edi
jmp 0x526e26
push 0x6eb2b5b0
xor edx, esi
or edi, esi
xor ecx, edx
sub esi, ecx
ror edi, 8
and esi, 0x70b64767
sub esi, ecx
jmp 0x52836d
call ebx
or edx, 0x70bb433d
bswap edi
not edi
shr edi, 3
add esi, edi
xor edi, 0x70bc8ea2
shr edi, 1
xchg esi, edx
add ecx, esi
shl esi, 1
sub ecx, edi
jmp 0x52895d
push 0x401400
and edx, ecx
add ecx, edx
add esi, 0x70be97c6
bswap esi
not ecx
shr ecx, 0x10
ror ecx, 0xf
add esi, 0x70bfe33e
inc ecx
mov edi, 0x70c061e0
jmp 0x528d66
pop ebx
xor edx, esi
sub esi, edi
xor edi, ecx
shr edx, 5
jmp 0x528f1b
call fcn.0052862a
xchg esi, edx
mov ecx, esi
add edx, edi
nop
dec edx
sub edx, 0x70ce2070
sub ecx, edi
sub ecx, edi
mov ecx, esi
mov esi, 0x70cf2414
add edx, 0x70cf6301
and ecx, 0x70cfa276
mov edi, edx
jmp 0x5270e1
call ebx
bswap edi
sub edi, ecx
xor edi, edx
neg esi
jmp 0x527750
call ebx
inc esi
xor esi, edx
bswap edi
bswap edx
xchg edi, edx
xor esi, edx
shr edx, 0x1c
jmp 0x526d87
push 0x6ebe7225
or edx, esi
xchg esi, edi
sub ecx, edx
add esi, edi
mov esi, 0x70db4deb
ror esi, 0xf
jmp 0x527c92
push 0x6ead4d57
add esi, edx
and ecx, edi
and esi, ecx
mov ecx, edx
add edi, 0x70deab45
sub edi, esi
sub edx, esi
dec esi
mov esi, 0x70dfb4b2
add ecx, 0x70dff387
mov edi, ecx
and esi, ecx
add edi, ecx
jmp 0x526d33
pop ebx
dec ecx
inc esi
shl edx, 0x17
or edi, edx
xor ecx, 0x70e3f4fb
xor edi, edx
add ecx, edi
mov edi, ecx
sub ecx, edx
mov esi, edx
jmp 0x52741e
push 0x6eaabbd2
add ecx, esi
xor edx, 0x70f01453
or edx, edi
or esi, edi
add esi, edx
sub edi, esi
and ecx, edi
dec esi
jmp 0x52871a
call ebx
sub ecx, edx
sub edx, edi
xchg esi, ecx
sub esi, edx
sub esi, edx
not edi
shl edx, 9
jmp 0x528a2b
push 0x6ea98aee
xchg edx, edi
and esi, edx
or edx, esi
mov edi, 0x70fa310b
jmp 0x528c67
call fcn.0052862a
or edx, 0x71053c9c
add edx, ecx
mov ecx, 0x7105aac3
sub esi, 0x7105e330
shr esi, 0x1f
mov edi, ecx
inc edi
jmp 0x52753b
push 0x6eb9d89e
or edx, esi
and edx, esi
or edi, esi
add esi, ecx
and edx, esi
or esi, 0x71080a2d
mov edx, 0x7108439d
bswap ecx
mov esi, 0x7108b471
bswap esi
jmp 0x527a57
push 0x6eb26b7c
mov edx, 0x711266a5
mov edx, edi
add edi, edx
add edx, esi
mov edi, edx
sub ecx, edx
xchg edx, ecx
xor esi, 0x71141451
mov edx, esi
neg ecx
dec ecx
sub edx, edi
mov esi, 0x711545ac
not edx
jmp 0x5274e3
push 0x6eba21e0
mov edi, edx
add ecx, edx
and esi, edx
xchg edx, edi
jmp 0x527a69
mov ebx, 0x2a676233
rol edi, 0x19
xchg edi, esi
shr esi, 0x10
not edx
mov esi, edx
mov edx, 0x71182103
or esi, ecx
xchg ecx, edi
mov edx, 0x7118e7d8
xchg esi, edx
xor edi, esi
xor esi, ecx
neg esi
bswap esi
or esi, edi
jmp 0x527966
pop ebx
nop
add edx, 0x7130b2bd
and edx, 0x7130efdd
sub esi, edx
xor edi, 0x7131698c
xor edx, esi
bswap ecx
and edx, edi
add edi, esi
add ecx, 0x7132a5fc
add esi, edx
jmp 0x528152
pop ebx
or esi, 0x713429b2
nop
bswap esi
ror edi, 7
jmp fcn.0052934b
mov ebx, 0x2a676233
add edi, ecx
neg edi
or ecx, edx
rol ecx, 0x1d
xchg ecx, edi
xchg edx, ecx
and edx, ecx
shr esi, 0xc
or ecx, 0x717ff059
xor ecx, edi
xchg esi, edi
and esi, ecx
xor edi, esi
jmp 0x528a7c
pop ebx
sub ecx, 0x718327bd
shl ecx, 0x13
add edi, 0x7183a49b
ror edi, 0xe
xchg edi, edx
xchg ecx, esi
not ecx
and edi, esi
xor edx, 0x71852a8c
xchg esi, edi
shr edi, 0x17
or edx, esi
sub esi, 0x71862195
xchg ecx, edx
add ecx, edx
jmp 0x52917d
push 0x6eb2238d
xor ecx, edx
and esi, 0x7190c29e
or ecx, edx
mov edi, esi
sub ecx, edx
add edx, esi
mov edi, ecx
and edi, 0x71923da2
or edi, 0x71927b32
jmp 0x527a28
pop ebx
ror ecx, 8
dec esi
sub ecx, edx
dec esi
sub esi, edi
ror edi, 0xe
neg esi
xor ecx, edx
xor edx, edi
and edx, esi
jmp 0x526dcd
push esp
sub ecx, edi
sub edx, 0x71992f97
sub edx, 0x71996ed9
add esi, edx
or edx, ecx
jmp 0x527137
push 0x6ecae3b9
shl edx, 7
sub edi, edx
mov esi, edx
add esi, 0x71a2ecca
ror edi, 0x1d
xor edi, 0x71a368ff
rol esi, 0x12
add ecx, 0x71a3e247
xchg ecx, esi
and edx, 0x71a46ccc
shr esi, 3
or esi, edi
xor esi, 0x71a5226a
mov edx, 0x71a56089
jmp 0x5294d9
pop ebx
sub edx, esi
mov esi, ecx
or esi, 0x71a712ba
or edi, ecx
xor ecx, 0x71a78a3b
xchg edi, edx
and ecx, edi
or edi, esi
and edi, 0x71a88a66
jmp 0x52745a
call ebx
sub esi, edi
mov edi, esi
sub edx, esi
or edi, 0x71a994ce
add edi, 0x71a9d16f
xor ecx, edi
jmp 0x526fd6
push 0x6ec53553
and ecx, 0x71aa736d
or edi, ecx
xor ecx, edx
jmp 0x5270a5
push 0x6eb5d5fd
mov edi, 0x71b374f9
add ecx, edi
sub edi, 0x71b3eca8
xor edx, esi
sub ecx, 0x71b466a0
or edx, ecx
sub ecx, edi
or edx, esi
shl ecx, 0xc
xor edi, 0x71b5a397
add esi, edi
and edx, 0x71b61bb3
mov esi, 0x71b6574d
and edi, ecx
sub edx, esi
jmp 0x528904
pop ebx
or ecx, edi
add edi, ecx
xor edx, esi
xor edx, edi
xor ecx, esi
ror ecx, 4
jmp 0x52758d
call fcn.0052862a
add edx, ecx
rol ecx, 1
or ecx, esi
or edi, ecx
xor edx, edi
sub edx, edi
xor edx, 0x71bfeb28
bswap edi
jmp 0x528812
call fcn.0052862a
not ecx
or edi, ecx
mov esi, edi
and edi, ecx
neg ecx
xor esi, edx
jmp 0x5282d9
call ebx
shl esi, 8
sub edx, edi
or ecx, edi
xchg edi, esi
xor ecx, 0x71cbdbb2
xor edi, 0x71cc1834
add esi, edx
or edx, 0x71cca0da
mov esi, ecx
or esi, edx
xchg esi, ecx
jmp 0x527de0
push 0x6ec9c041
or ecx, esi
and edx, edi
sub edi, 0x71d0ece9
add esi, 0x71d1398a
or edi, ecx
and esi, ecx
xor ecx, edx
or edi, esi
add esi, edi
jmp 0x526fc4
pop ebx
or edi, esi
ror esi, 0xf
or edx, edi
xor ecx, 0x71d763d2
jmp 0x52715f
call fcn.0052862a
and esi, 0x71d99200
sub edi, 0x71d9d0d6
ror edi, 3
shr esi, 0x1f
xor esi, edi
and edx, ecx
xchg esi, edi
add ecx, 0x71dbf358
shr edi, 0xb
or ecx, esi
add ecx, esi
not edx
jmp 0x527680
push 0x6eb98fba
rol edx, 0xb
and edx, 0x71e24b86
dec ecx
sub ecx, edi
add edi, edx
or edx, 0x71e34c5e
xor edx, edi
mov edi, 0x71e3c6bc
jmp 0x527989
push 0x6eca52d1
mov edi, 0x71e420b4
or esi, edi
mov edx, edi
dec esi
mov esi, 0x71e520d7
sub edx, edi
xchg edi, edx
shl ecx, 4
add ecx, edx
jmp 0x5284ad
call ebx
sub esi, 0x71ee01d4
neg edx
add esi, edi
and edi, esi
and ecx, esi
add edx, edi
and esi, 0x71ef67bd
xchg edi, ecx
add edi, esi
sub edx, 0x71f02a74
sub ecx, edx
shr esi, 5
or esi, edx
sub ecx, edx
dec edi
jmp 0x528199
push 0x6eb58ce1
neg edi
inc edi
sub ecx, edi
and edi, 0x71f26501
shr ecx, 4
neg esi
neg esi
and edi, ecx
and edi, edx
sub edx, esi
mov esi, ecx
jmp 0x527f9f
push 0x6eb2fdd6
mov edi, esi
and esi, edx
mov edx, esi
xor edx, ecx
shl edx, 0x1a
sub esi, ecx
shl edx, 0x1c
xchg edx, ecx
or edi, esi
mov edi, esi
or ecx, edx
xor edx, esi
and edi, 0x71feca2b
jmp 0x5289cd
call fcn.0052862a
and edi, edx
add edx, edi
not edx
and edi, edx
xor ecx, esi
ror esi, 3
nop
and edx, edi
mov ecx, edx
sub ecx, edi
jmp 0x529562
push 0x6eca9bb5
xchg esi, edx
neg edi
mov ecx, edi
sub edx, edi
add esi, 0x72158185
sub esi, 0x7215e752
xor esi, 0x72165178
xchg edi, ecx
not ecx
xor edi, 0x72173596
or ecx, edi
ror edi, 0xb
bswap edx
or edi, 0x72182b84
dec esi
and edx, 0x7218a696
jmp 0x527e8e
push 0x6ebe2852
shr esi, 8
and ecx, esi
rol ecx, 4
mov ecx, edx
inc esi
mov ecx, esi
add esi, edx
and esi, edx
sub esi, edx
jmp 0x5276d8
push 0x1258d9
and edx, esi
or edi, edx
shr esi, 7
shr ecx, 0x11
xchg esi, ecx
bswap edx
shr edx, 0x17
and edi, esi
dec ecx
shl esi, 0x10
jmp 0x527563
pop ebx
xor edx, edi
mov edx, esi
xor edx, edi
xchg esi, edi
add ecx, esi
dec edi
xchg edx, ecx
sub edx, ecx
sub ecx, edi
neg edx
jmp 0x5273ce
mov ebx, 0x2a676233
sub edi, 0x72413466
sub edx, ecx
add ecx, esi
or ecx, edx
shr ecx, 0x13
jmp 0x5295a3
call ebx
mov edi, 0x7250f641
or edi, ecx
or edx, ecx
nop
or ecx, edx
and ecx, 0x72522a64
add edx, esi
sub edx, edi
or edi, 0x7252f279
or esi, ecx
sub ecx, edi
shl edx, 0xa
xor ecx, esi
jmp 0x527cd5
push 0x6ec13c27
or esi, 0x7254459c
rol ecx, 0x13
xchg ecx, edi
mov esi, ecx
not edx
and edx, esi
xor edi, ecx
not edx
jmp 0x526e88
push 0x6ec77951
neg edx
mov ecx, esi
add esi, 0x7259d05e
and edi, ecx
inc ecx
rol edx, 0x13
dec esi
not ecx
not esi
or ecx, edi
jmp 0x5296b4
push 0x6eb61e82
and edx, esi
bswap ecx
add ecx, 0x72634094
sub ecx, esi
add edx, esi
sub esi, edx
add ecx, edx
jmp 0x526e3b
pop ebx
xchg ecx, edx
xchg edx, ecx
add edi, ecx
mov ecx, edx
or edx, 0x726ab554
dec edx
jmp 0x52949b
pop ebx
and esi, ecx
xor ecx, 0x7270d497
xchg esi, edi
xchg esi, ecx
jmp 0x528aba
mov ebx, 0x2809144b
neg ecx
and ecx, 0x7271e7fb
mov edx, esi
not edi
xchg edx, edi
and edx, esi
jmp 0x52842f
pop ebx
add ecx, 0x7278a8f6
or edi, ecx
ror edi, 0xd
or ecx, edx
and esi, edi
or edi, ecx
xchg ecx, edx
sub ecx, 0x727a67f1
shr ecx, 2
jmp 0x529461
call fcn.0052862a
sub ecx, 0x727fc564
sub edi, 0x728015d1
inc edi
jmp 0x52768f
pop ebx
xchg edx, edi
add ecx, esi
shr ecx, 0x12
add esi, 0x728168dc
and ecx, edi
xchg ecx, esi
and edx, ecx
add ecx, edx
sub edx, 0x7282a921
and edi, 0x7282e8c6
jmp 0x527f19
push 0x6ebc2471
shl ecx, 0xc
rol ecx, 0x16
xor esi, 0x7283be8c
xor ecx, 0x7283fc7e
rol esi, 0x1b
and esi, 0x72848bc0
dec esi
ror esi, 0xe
add edx, ecx
jmp 0x526ea9
push 0x40
shr esi, 7
not edi
not esi
sub esi, ecx
xor ecx, edx
dec edx
xor ecx, esi
mov edi, 0x72993e5e
add esi, edi
and edi, 0x7299b961
jmp 0x528589
push 0x6ea9e277
or edx, ecx
or edx, ecx
ror esi, 0xb
mov edi, esi
not edx
jmp 0x5297c9
mov ebx, 0x2a676233
rol edi, 4
xor edx, edi
neg edi
xor ecx, esi
xchg edi, ecx
or edi, ecx
or edi, esi
or ecx, esi
xor esi, ecx
sub edi, 0x72b0203c
xchg ecx, edx
xchg ecx, esi
jmp 0x528051
call ebx
and edx, ecx
xor edi, 0x72b6f95d
xchg ecx, esi
mov ecx, edi
and esi, edx
or edx, edi
and edi, 0x72b83ff1
or edx, esi
mov edi, ecx
shl edx, 0x11
mov edi, edx
jmp 0x528a93
call fcn.0052862a
mov edx, ecx
xor esi, edi
add ecx, edx
and edi, ecx
mov ecx, edi
mov ecx, 0x72bad102
sub ecx, 0x72bb1013
xchg edi, esi
jmp 0x529394
pop ebx
xchg edi, esi
xor edi, esi
add esi, edx
sub ecx, edx
or ecx, 0x72d383f2
add esi, 0x72d3c0e3
add esi, 0x72d3fe8a
bswap edx
sub ecx, 0x72d4b04c
xchg esi, ecx
and edx, esi
jmp 0x527bf2
pop ebx
shl edx, 0x11
mov esi, edx
add ecx, 0x72d952de
add esi, 0x72d991d5
mov esi, edx
sub edi, edx
or ecx, edx
sub edx, ecx
jmp 0x52883e
pop ebx
ror ecx, 0xa
sub esi, 0x72e3ffeb
sub edi, edx
xchg esi, ecx
xchg edi, esi
ror edi, 0x14
xor edx, esi
add esi, edx
mov edi, edx
jmp 0x528231
pop ebx
xor ecx, edx
nop
shl ecx, 0xc
add edx, edi
ror ecx, 4
jmp 0x52734c
call fcn.0052862a
bswap edx
add ecx, 0x730871b8
sub ecx, 0x7308af8e
mov edi, esi
dec esi
and ecx, edx
xchg edi, esi
rol edi, 0xc
add esi, 0x730a36aa
sub esi, edx
neg edi
ror edi, 0xc
jmp 0x5280fc
call fcn.0052862a
xor edi, esi
mov ecx, edi
add edi, ecx
dec ecx
bswap edi
add edi, esi
xor ecx, esi
jmp 0x529406
call fcn.0052862a
add edi, 0x7312b6c9
dec ecx
sub edx, esi
xor edi, ecx
shr edx, 0x1d
inc esi
nop
add esi, edi
not edx
xor ecx, edx
jmp 0x527869
call fcn.0052862a
sub edx, ecx
xchg edi, ecx
sub edi, ecx
sub edi, edx
ror edi, 7
add edi, 0x7321a6c9
shl esi, 0xe
dec esi
sub ecx, edi
add ecx, 0x7322abfb
add edx, edi
xchg edi, ecx
xchg ecx, esi
jmp 0x527efe
call ebx
and esi, edi
xor ecx, esi
mov ecx, edi
mov edx, 0x732dd8d2
add esi, edi
jmp 0x529627
call ebx
xchg edx, esi
xor ecx, 0x732ea169
mov edx, edi
and edi, ecx
xchg esi, ecx
shl esi, 0xb
xchg ecx, edi
jmp 0x526f13
call ebx
or ecx, edx
xchg esi, edi
and edi, 0x7335ab9e
rol edx, 0x1a
rol ecx, 6
or edi, ecx
mov edi, ecx
or esi, edi
jmp 0x528fc1
push 0x6eaeba6b
xchg ecx, esi
xor ecx, esi
add edx, edi
mov edx, esi
or edx, edi
shr esi, 0xa
jmp 0x5271da
pop ebx
mov ecx, 0x7341569e
xor esi, edx
and ecx, edi
bswap edx
mov ecx, edx
xor esi, ecx
mov esi, edx
xchg esi, edi
neg esi
or edx, 0x734382e3
and edx, esi
jmp 0x5289bb
mov ebx, 0x2809144b
shr esi, 0x1b
mov ecx, edi
not ecx
jmp 0x5281c3
call ebx
sub edi, edx
dec edi
sub edx, ecx
shl edi, 0xa
jmp 0x5295d0
call fcn.0052862a
sub esi, edx
rol edi, 3
ror edi, 0xf
dec edx
dec edx
mov ecx, edi
jmp 0x5293a8
pop ebx
sub edi, esi
xor esi, 0x735957b0
or ecx, 0x735995a9
and esi, 0x7359e3ee
or esi, ecx
jmp 0x526df3
pop ebx
neg edx
add ecx, edi
or edi, 0x735f1da7
shl edi, 0x1d
shl edx, 0x13
inc edi
ror ecx, 0x1f
xor ecx, esi
mov edx, 0x7360a521
jmp 0x529680
push 0x6ec6a000
or esi, ecx
sub ecx, edx
sub edx, 0x736541db
jmp 0x527250
mov ebx, 0x2a676233
xchg esi, edi
ror esi, 0x1b
or edi, edx
xchg ecx, esi
xor ecx, 0x7368a648
xchg edi, edx
sub edx, esi
xchg edi, ecx
jmp 0x5280d9
pop ebx
sub esi, ecx
and ecx, esi
add esi, 0x7374be43
sub edi, 0x7374fdae
sub esi, edx
ror ecx, 0x19
xchg ecx, esi
and edi, esi
add ecx, esi
mov edx, ecx
shl edx, 4
xor esi, ecx
and edi, edx
jmp 0x527709
push 0x6eaa2ca3
xchg ecx, esi
neg edx
xchg edx, esi
mov esi, 0x737b5b9e
dec ecx
add edi, ecx
jmp 0x5272c4
pop ebx
xchg ecx, esi
add edi, 0x737c7a8c
or esi, edx
xor edx, esi
dec ecx
or esi, 0x737d83ef
and esi, 0x737dc16f
jmp 0x5270c4