Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api
Modify service

Disassembly:
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xfffffed8
jne 0x40109d
call sub.advapi32.dll_ChangeServiceConfigW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.user32.dll_SetClassLongW
call sub.ntdll.dll_NtSetSystemInformation
call sub.advapi32.dll_ChangeServiceConfigW
call sub.user32.dll_SetClassLongW
call sub.user32.dll_SetClassLongW
call sub.user32.dll_SetClassLongW
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.ntdll.dll_NtSetSystemInformation
call sub.advapi32.dll_ChangeServiceConfigW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.user32.dll_SetClassLongW
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.ntdll.dll_NtSetSystemInformation
call sub.ntdll.dll_NtSetSystemInformation
ret
call sub.user32.dll_GetDialogBaseUnits
cmp eax, 0xfffffef8
jne 0x4010fe
call sub.advapi32.dll_ChangeServiceConfigW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.ntdll.dll_NtSetSystemInformation
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.ntdll.dll_NtSetSystemInformation
call sub.advapi32.dll_ChangeServiceConfigW
call sub.user32.dll_SetClassLongW
call sub.user32.dll_SetClassLongW
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff30
jne 0x40119b
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.ntdll.dll_NtSetSystemInformation
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.user32.dll_SetClassLongW
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.user32.dll_SetClassLongW
call sub.ntdll.dll_NtSetSystemInformation
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xfffffef8
jne 0x401238
call sub.advapi32.dll_ChangeServiceConfigW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.ntdll.dll_NtSetSystemInformation
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.ntdll.dll_NtSetSystemInformation
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.user32.dll_SetClassLongW
call sub.user32.dll_SetClassLongW
call sub.user32.dll_SetClassLongW
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.user32.dll_SetClassLongW
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
call sub.advapi32.dll_ChangeServiceConfigW
call sub.ntdll.dll_NtSetSystemInformation
call sub.ntdll.dll_NtSetSystemInformation
call sub.user32.dll_SetClassLongW
ret
jmp 0x527aca
xor edx, 0xf8e17c2e
sub ebx, 0xf8e1c1bd
xor ebx, esi
add ecx, esi
add ecx, edx
jmp 0x52a6a4
push 0xf9057128
xor ecx, esi
rol esi, 0x16
mov ebx, ecx
add esi, edx
sub ecx, edx
xor ecx, 0xfa1f5f3d
neg ecx
sub ebx, esi
add ebx, ecx
not ebx
jmp 0x527ee0
pop edi
and edx, ecx
shr edx, 4
sub ecx, esi
or edx, ebx
and esi, ecx
and ecx, edx
mov edx, ecx
sub edx, ebx
xchg ebx, esi
or ebx, esi
sub edx, ecx
sub ebx, 0xfa23b9e0
inc ecx
and esi, 0xfa243491
jmp 0x52a181
pop edi
and ebx, esi
xor ecx, esi
and ecx, 0xfa2c1388
and ebx, esi
xchg edx, ebx
mov esi, ebx
rol esi, 8
add ebx, esi
or ebx, ecx
add edx, 0xfa2e7d26
add edx, ebx
sub edx, ecx
sub ebx, esi
xchg ecx, edx
mov edx, 0xfa30085c
jmp 0x528afc
pop edi
xor esi, 0xfa3060fb
or ecx, edx
ror esi, 0x17
and edx, ecx
bswap edx
and edx, esi
and esi, ebx
xchg ebx, esi
xor ebx, ecx
bswap ebx
jmp 0x528495
push 0xf8f28f1f
and esi, ebx
add edx, esi
add ecx, esi
or esi, edx
sub ecx, edx
add ecx, ebx
bswap edx
xchg ecx, edx
add esi, ebx
mov ecx, esi
xchg ecx, ebx
jmp 0x528159
push 0xf8fa6377
shr esi, 0x1d
mov edx, ebx
and ebx, edx
add edx, 0xfa36668d
mov ebx, ecx
shr ecx, 0x11
inc ecx
not esi
neg ecx
add ecx, ebx
and esi, ecx
mov edx, ecx
mov esi, edx
add ecx, ebx
sub ebx, 0xfa3913b2
jmp 0x529234
push 0xf8f6b73f
shr ebx, 0x19
xor edx, ecx
and edx, ecx
xchg ecx, edx
jmp 0x52ae1b
call edi
sub ecx, esi
or ebx, esi
bswap edx
jmp 0x52a3aa
push 0xf8fa2058
and edx, ebx
xchg ecx, ebx
mov ebx, ecx
shr ebx, 0x16
shl edx, 0x10
rol esi, 0x1e
dec esi
jmp 0x527c81
mov edi, 0x2809024b
shl ecx, 0x12
dec ebx
or ebx, esi
sub esi, ecx
inc edx
add esi, ecx
xor ebx, edx
add edx, ecx
xchg edx, ecx
jmp 0x5286e4
push 0xf905b4d1
mov ecx, 0xfa6340ac
bswap ecx
not esi
shl ebx, 0xe
add ebx, esi
sub edx, 0xfa646f29
sub ebx, edx
sub ebx, esi
jmp 0x5284c5
pop edi
xor esi, edx
add edx, 0xfa658594
xor ecx, edx
jmp 0x52943f
push 0x40
not ecx
sub esi, 0xfa6957f7
or ecx, esi
mov ecx, edx
sub ebx, esi
mov esi, edx
mov esi, ebx
mov edx, 0xfa6ac7bc
dec esi
or edx, esi
add ebx, 0xfa6bf36c
or edx, ecx
and ecx, edx
jmp 0x52a5ee
mov edi, 0x4132136a
or edx, ebx
ror esi, 4
add ecx, ebx
xchg edx, ecx
shr esi, 0x1d
xor edx, esi
mov esi, edx
xchg ecx, ebx
sub edx, esi
mov ebx, edx
jmp 0x529aa6
pop edi
or ecx, esi
xchg edx, ebx
mov ecx, edx
inc ecx
xor edx, ecx
and edx, esi
mov ecx, esi
and ebx, esi
jmp 0x527f6a
call fcn.00528b53
inc esi
and esi, 0xfa7a6eff
ror edx, 0x19
and esi, ecx
dec esi
and ecx, ebx
and ebx, edx
and ebx, ecx
xor ecx, edx
or ecx, 0xfa7c2e56
add ebx, ecx
jmp 0x5297e4
mov edi, 0x2809024b
or edx, ecx
sub esi, ecx
or ebx, edx
rol esi, 9
inc ecx
xor esi, 0xfa7f78cb
bswap esi
or edx, esi
xor esi, 0xfa802ed2
or ebx, ecx
add esi, 0xfa809c3e
mov ecx, ebx
and ecx, edx
jmp 0x529133
call fcn.00528b53
not ebx
add esi, edx
shr esi, 0x13
add edx, ecx
dec edx
add ecx, 0xfa8268d9
add esi, edx
mov edx, ebx
and esi, ebx
and esi, ebx
xor esi, edx
and ecx, ebx
xchg ecx, esi
shl ecx, 9
jmp 0x52add7
push 0x401400
rol esi, 0x1e
xchg esi, ebx
bswap edx
sub ebx, 0xfa874716
mov esi, edx
xor esi, 0xfa87b5fe
dec esi
bswap ecx
xor esi, ecx
jmp 0x528d11
mov edi, 0xa3f322a
mov ecx, edx
sub esi, edx
or ecx, 0xfa8e9737
mov ecx, edx
or esi, ebx
or edx, ebx
and edx, esi
or esi, ebx
and ebx, esi
and edx, ecx
add edx, ebx
jmp 0x529875
push 0xf8ffe9d0
rol ecx, 0x1a
bswap ecx
rol esi, 2
and edx, 0xfa914d17
and esi, ecx
and edx, ecx
and edx, 0xfa925b12
bswap ebx
bswap esi
jmp 0x52904a
push 0xf9028b71
dec ecx
and ecx, esi
xchg ecx, esi
add ecx, esi
xor edx, ebx
bswap ecx
or edx, ebx
and edx, ecx
jmp 0x529e85
push 0xf8e8db25
not ecx
xor edx, ebx
bswap esi
or ecx, 0xfab61e15
ror ebx, 0x17
and ecx, ebx
xor ecx, esi
rol esi, 2
sub edx, ebx
and esi, ebx
xor ebx, esi
not ecx
jmp 0x529317
push 0xf8ede4cb
inc ecx
shl edx, 0xf
mov esi, 0xfc93f98e
dec ebx
or ebx, 0xfc947431
sub esi, edx
xor edx, 0xfc94ed8c
mov edx, ecx
and edx, 0xfc957360
or ecx, 0xfc95b07d
shl ebx, 0xe
xchg ecx, esi
or edx, ebx
ror esi, 0xa
jmp 0x52852b
pop edi
mov ebx, 0xfc9ca6b7
shl ecx, 0x1a
xchg ecx, esi
and ebx, ecx
sub ecx, esi
xchg ecx, ebx
jmp 0x529b93
push 0xf905f79a
shl ecx, 0xc
shr ecx, 0x13
xor esi, edx
and ecx, ebx
or ebx, edx
add ebx, ecx
ror ecx, 0xe
mov edx, esi
mov edx, esi
jmp 0x52981e
pop edi
not edx
sub edx, 0xfca250a6
sub ecx, esi
and ecx, ebx
and ebx, ecx
and ecx, esi
rol ebx, 0x13
sub ecx, esi
shr edx, 2
jmp 0x527f8a
push 0xf8ee26b7
add edx, ebx
sub esi, edx
sub ebx, ecx
shl ecx, 0xd
sub edx, 0xfca88ad3
sub ebx, 0xfca8c74f
jmp 0x5295e1
push esp
or esi, ecx
xor edx, ecx
xor ebx, edx
xor ebx, esi
dec esi
xor esi, ecx
or edx, 0xfcaa93b6
or ebx, esi
or ecx, ebx
mov ecx, esi
not ebx
mov ecx, ebx
jmp 0x527f3c
pop edi
sub ecx, edx
xchg edx, ecx
add esi, ecx
ror ecx, 0xa
xchg ebx, ecx
xor edx, esi
xor edx, esi
shr edx, 0x15
xchg edx, ecx
jmp 0x527c42
call edi
mov esi, ecx
dec ecx
rol ecx, 0x1e
bswap ebx
mov edx, 0xfcb59422
shl ecx, 0x1a
shl esi, 8
or esi, ebx
or esi, ebx
or edx, 0xfcb6b8c0
xor ebx, ecx
or esi, 0xfcb727cb
shr esi, 0x10
xor ecx, esi
add edx, esi
jmp 0x529d94
push 0xf8f10005
sub edx, 0xfcb819f0
mov edx, 0xfcb85058
and esi, 0xfcb88999
xchg edx, ebx
sub ecx, esi
or edx, ebx
mov esi, 0xfcb9734a
add ebx, esi
jmp 0x527e9d
push 0xf8ed6007
xor edx, ebx
or ebx, 0xfcba2ed6
or ecx, edx
or esi, ebx
inc esi
neg ebx
xchg esi, edx
xor ecx, 0xfcbb8c21
xor esi, edx
jmp 0x5291b9
call fcn.00528b53
ror ebx, 0xd
shr ecx, 0x10
and ecx, esi
inc esi
sub edx, esi
mov edx, esi
or esi, 0xfcc50162
xor ecx, esi
xchg edx, esi
not ebx
rol ebx, 0x15
jmp 0x528931
call fcn.00528b53
xor ecx, 0xfcd65b9a
mov edx, ebx
or ecx, ebx
add esi, edx
add ecx, ebx
mov ecx, ebx
and esi, 0xfcd7bbe1
xor ecx, 0xfcd808d3
xor ebx, ecx
jmp 0x529121
push 0xf8f958f9
sub edx, 0xfcdd54da
or esi, ecx
or ecx, edx
or edx, ecx
and ecx, esi
xor edx, esi
jmp 0x529e3f
mov edi, 0xa3f322a
xor ecx, esi
sub ebx, esi
or ecx, ebx
neg esi
and ebx, 0xfce2ea67
xor esi, 0xfce328f7
xchg edx, ecx
mov ebx, esi
shl esi, 9
and ebx, esi
jmp 0x52aa1b
pop edi
xchg esi, edx
xchg esi, edx
dec ecx
xchg ebx, ecx
shr esi, 1
and edx, esi
xchg ebx, esi
or edx, 0xfce620d0
jmp 0x528640
call edi
xchg ebx, ecx
mov esi, edx
rol edx, 6
dec edx
xor ecx, ebx
xchg esi, edx
neg ecx
jmp 0x52a096
call edi
or ebx, edx
mov ebx, edx
xor ecx, edx
or ebx, edx
sub edx, esi
xor esi, ebx
jmp 0x52a18c
pop edi
or esi, ebx
sub ebx, esi
mov edx, esi
not ecx
rol ebx, 0x12
xchg edx, esi
bswap edx
jmp 0x52a90c
pop edi
sub ebx, esi
ror ebx, 0x14
shr ecx, 0x19
and edx, esi
neg edx
xor ebx, esi
sub ecx, esi
add ecx, edx
or edx, ecx
jmp 0x52ad89
pop edi
and ebx, ecx
or ebx, ecx
or esi, edx
mov ebx, 0xfd1030df
and esi, edx
mov ebx, edx
mov esi, ebx
xor edx, ebx
jmp 0x52a1ab
call fcn.00528b53
sub ecx, ebx
xor ebx, esi
mov esi, edx
shl ebx, 0xc
shl esi, 6
sub esi, ecx
neg edx
xor esi, ebx
dec edx
xchg ecx, edx
xchg esi, ebx
xor edx, 0xfd2254ea
jmp 0x52ac04
push 0xf8f4a2cb
sub ebx, 0xfd26c331
mov ebx, esi
sub ecx, ebx
or ebx, ecx
xchg esi, ecx
xchg ebx, edx
mov edx, esi
not esi
and esi, 0xfd28af73
jmp 0x529517
pop edi
ror ecx, 0x11
sub esi, 0xfd2f294d
or ebx, edx
bswap ebx
or ecx, ebx
mov esi, ecx
xor esi, edx
jmp 0x52aadb
push 0xf8e89472
mov edx, esi
add esi, 0xfd31ce67
mov edx, esi
dec ecx
mov esi, 0xfd3283aa
add esi, 0xfd32c969
bswap esi
xor esi, ecx
mov ebx, esi
dec edx
add esi, ebx
xor ecx, esi
shl ebx, 8
xchg ebx, esi
mov esi, ecx
shr edx, 0x17
jmp 0x528371
call edi
or edx, ecx
and esi, ecx
inc edx
shl ecx, 0xf
or ebx, esi
or edx, 0xfd384ba1
and esi, ebx
and ecx, ebx
xor edx, 0xfd38fc45
add ecx, esi
xor esi, edx
xchg ebx, ecx
or edx, ecx
jmp 0x52a547
push 0xf8ebd2f1
sub ecx, ebx
xor ecx, ebx
or edx, esi
xor esi, edx
bswap edx
add edx, ecx
or ebx, 0xfd57a80c
bswap esi
sub ebx, 0xfd58334b
bswap esi
xchg ebx, edx
dec esi
jmp 0x5288bf
push 0xf9031115
xor ecx, 0xfd60be7a
and ebx, ecx
sub ebx, ecx
xchg esi, edx
add ecx, ebx
and ecx, ebx
jmp 0x52ad10
pop edi
or ecx, esi
and esi, ecx
mov edx, ebx
add edx, esi
sub edx, ecx
sub ebx, esi
and esi, 0xfd656a13
sub esi, ecx
and ebx, edx
or edx, ecx
jmp 0x52887b
push 0xf9002c76
ror edx, 0x17
or ebx, 0xfd765392
mov ebx, ecx
or edx, esi
sub ecx, esi
and ecx, edx
shr ecx, 3
xor edx, ebx
dec edx
add esi, ecx
or esi, edx
jmp 0x5298e5
push 0xf8f41fae
xor edx, 0xfd7e14e3
bswap edx
shl esi, 0xc
mov ecx, edx
xchg edx, ecx
jmp 0x529261
call edi
xor ebx, edx
dec esi
and ebx, 0xfd85f536
xor esi, edx
jmp 0x528a31
call fcn.00528b53
sub esi, edx
xor esi, edx
sub ecx, 0xfd872621
neg ebx
add edx, ecx
and edx, 0xfd87dd95
and ecx, ebx
jmp 0x527d9c
push 0xf8eda266
dec ebx
mov esi, ebx
sub edx, esi
sub ecx, ebx
or esi, edx
add ecx, ebx
xchg edx, ebx
sub ebx, esi
xchg edx, esi
xchg ebx, ecx
add edx, 0xfd94901e
jmp 0x52840f
mov edi, 0x2809024b
add ecx, esi
xchg ebx, esi
and ebx, edx
or edx, esi
jmp 0x529ead
call fcn.00528b53
mov esi, ebx
mov esi, edx
mov esi, ecx
mov edx, ebx
add ecx, ebx
dec ecx
add ecx, edx
add edx, ecx
or edx, ecx
jmp 0x5285e5
push 0xf8f46037
add edx, ecx
sub ecx, esi
and edx, ecx
xor esi, 0xfd9f778f
neg ecx
dec ebx
mov ebx, esi
or esi, edx
sub ecx, edx
dec esi
and ebx, edx
sub edx, 0xfda1722a
and ebx, edx
jmp 0x528c4f
mov edi, 0x2809024b
and esi, ecx
bswap esi
mov ebx, esi
or ebx, edx
add edx, esi
xchg edx, esi
and esi, edx
xor ebx, 0xfdadcf5f
ror ebx, 4
mov esi, edx
jmp 0x52ac1d
push 0xf8ffa5c5
inc ebx
xchg edx, ecx
xchg ecx, ebx
sub ebx, 0xfdb2b438
xor ecx, edx
dec edx
jmp 0x52817d
push 0xf8f3dc34
xor esi, ebx
neg edx
xor edx, ecx
shl esi, 0x1e
add edx, 0xfdb52f49
sub ecx, 0xfdb5b09a
sub edx, 0xfdb61a62
dec edx
jmp 0x5290b5
pop edi
sub esi, ecx
or esi, ecx
or edx, esi
bswap ebx
xor ebx, 0xfdc3285d
bswap edx
inc ebx
jmp 0x52a31b
push 0xf8ff623c
xchg ecx, ebx
mov ebx, esi
mov edx, ecx
or edx, ebx
mov ecx, edx
add esi, edx
sub ecx, 0xfdc75a2a
sub esi, 0xfdc7a922
mov esi, edx
xchg edx, ecx
and ecx, 0xfdc860d8
xor ecx, edx
mov ecx, ebx
sub ebx, ecx
jmp 0x529362
mov edi, 0x2809024b
xchg ecx, ebx
mov ecx, 0xfdd3daed
mov esi, ecx
xor ecx, esi
or ecx, 0xfdd49001
xchg ecx, ebx
and edx, 0xfdd50c53
shl edx, 2
and ebx, edx
and ebx, 0xfdd5d60a
dec ebx
and ebx, ecx
add esi, edx
jmp 0x528090
push 0xf8ee689b
xor esi, ebx
mov edx, esi
not ecx
sub ecx, 0xfde3609a
xor edx, ecx
add ebx, ecx
rol edx, 6
and ebx, ecx
or ecx, edx
xor esi, ebx
rol ecx, 0x11
xor edx, esi
add ebx, ecx
or ecx, 0xfde5d41b
jmp 0x529f9d
pop edi
sub esi, 0xfdfc6b18
and ebx, 0xfdfca942
xchg ecx, esi
neg esi
xor ebx, 0xfdfd7598
and esi, 0xfdfdb33e
mov esi, 0xfdfdf103
rol esi, 0x10
xor ebx, ecx
rol edx, 6
jmp 0x529f67
push 0xf8e84c26
neg ebx
ror edx, 0xf
add ebx, esi
or esi, edx
xchg esi, edx
jmp 0x528cdc
call edi
xchg edx, ebx
xor ebx, ecx
add ebx, ecx
add ecx, ebx
add esi, ebx
xor ebx, ecx
mov ebx, ecx
jmp 0x529901
push 0xf9063a14
and ebx, ecx
bswap ecx
xor ecx, ebx
xchg esi, ecx
bswap ebx
or esi, 0xfe0b360a
jmp 0x5299ac
mov edi, 0xa3f322a
and esi, 0xfe0b936d
xor ecx, ebx
add esi, ecx
jmp 0x528812
call fcn.00528b53
and esi, ebx
add esi, ecx
xchg edx, esi
or edx, ecx
add ebx, 0xfe10bdd2
xor ebx, esi
or ecx, ebx
xchg ecx, ebx
jmp 0x52a24f
pop edi
add ebx, ecx
or edx, ecx
jmp 0x529939
mov edi, 0xa3f322a
shr ebx, 0xd
xor esi, ebx
mov edx, esi
mov ebx, edx
not ebx
dec esi
shr edx, 0x17
nop
neg ebx
jmp 0x52a951
pop edi
xor ebx, edx
mov esi, ecx
xchg edx, esi
xor ecx, edx
and ebx, edx
or ecx, edx
sub ecx, edx
xor edx, ebx
mov edx, 0xfe1c3894
and ecx, esi
and esi, ebx
jmp 0x52aff4
pop edi
and ebx, edx
sub esi, edx
bswap edx
xchg ecx, ebx
mov ecx, esi
xchg esi, ebx
or ecx, ebx
sub ecx, edx
shl ecx, 0x18
jmp 0x5284e4
push 0xf8f0be81
add edx, esi
xchg ebx, esi
and esi, ecx
or ecx, 0xfe200d0a
and ecx, 0xfe204cbe
or edx, 0xfe209a2f
xor ebx, ecx
add esi, ebx
jmp 0x528618
push 0xf9067d5a
and edx, ecx
mov edx, ecx
xor ecx, esi
inc ecx
and ebx, 0xfe28377d
or edx, 0xfe2874d5
sub esi, ecx
xchg esi, ebx
and ebx, esi
sub ecx, ebx
jmp 0x529838
pop edi
sub edx, 0xfe29cd93
rol ebx, 4
shr ecx, 1
and edx, ebx
xor ecx, 0xfe2abf29
xor esi, edx
and edx, ecx
mov ecx, esi
xor ebx, 0xfe2c26f0
or ebx, ecx
inc edx
dec edx
or edx, 0xfe2d0574
jmp 0x52ac52
call fcn.00528b53
and ebx, edx
xchg ebx, edx
dec edx
add edx, 0xfe38f260
shl edx, 0x11
xor edx, ecx
xor ecx, 0xfe399ab3
add ebx, edx
ror ecx, 0xd
neg ecx
shr ebx, 0xd
jmp 0x52a147
pop edi
and edx, ebx
xor edx, ecx
mov edx, esi
or ebx, esi
sub ebx, 0xfe4908db
inc ecx
mov esi, 0xfe4979ac
shr esi, 0x15
rol ecx, 0x13
add ecx, 0xfe4a31bd
sub ecx, esi
mov edx, 0xfe4a9e48
dec esi
inc edx
and edx, esi
mov esi, edx
jmp 0x527cf0
pop edi
and ecx, esi
xor esi, 0xfe4c025f
sub esi, ebx
add esi, ebx
sub esi, ecx
sub edx, ebx
add edx, ecx
sub esi, 0xfe4d585f
or edx, ecx
and ebx, esi
or esi, edx
and esi, ecx
and ecx, edx
jmp 0x52a5bd
pop edi
not ebx
and edx, 0xfe5d8070
neg ebx
sub edx, ecx
or edx, ecx
not ecx
bswap ecx
and ecx, 0xfe5edff7
xchg ebx, esi
add ebx, ecx
jmp 0x5299d1
pop edi
shr ebx, 4
and esi, ecx
and esi, edx
shl esi, 4
add esi, ebx
mov esi, 0xfe69d2f4
shl ebx, 0x1d
jmp 0x52a1dc
push 0xf8f99bdd
xor edx, esi
or esi, edx
dec ecx
xor ecx, edx
xchg esi, edx
xor ecx, esi
neg ecx
xor ecx, edx
shr ecx, 8
sub ebx, esi
mov ecx, ebx
nop
xchg edx, esi
jmp 0x52a37b
mov edi, 0xa3f322a
shr esi, 0x10
add ecx, esi
xchg esi, edx
xor edx, ecx
mov ecx, edx
rol ebx, 0x18
sub ecx, 0xfe791278
xor esi, ecx
rol edx, 0x1f
jmp 0x528bdc
push 0xf902cfb9
add edx, esi
or ecx, ebx
mov edx, ecx
and esi, edx
add edx, 0xfe7ae873
shr edx, 0x18
add ecx, edx
or ebx, 0xfe7ba1f1
and edx, ecx
and ebx, ecx
dec edx
jmp 0x528f55
call fcn.00528b53
xor ecx, ebx
mov ebx, esi
xchg ebx, ecx
and ecx, edx
sub ebx, 0xfe7da159
bswap esi
or edx, esi
sub edx, 0xfe7e6c68
sub ebx, edx
mov ebx, esi
xor ecx, esi
ror esi, 0xd
jmp 0x52ae99
pop edi
mov esi, 0xfe8a0cc6
dec ecx
xchg ecx, esi
and ebx, 0xfe8ad749
jmp 0x52937a
pop edi
and ebx, 0xfe8b2f38
not ebx
xor ecx, ebx
dec ebx
xchg ecx, ebx
jmp 0x5298b1
mov edi, 0x2809024b
mov ecx, 0xfe8f9c33
nop
mov edx, ebx
neg ecx
xor esi, ecx
mov esi, 0xfe90e288
and edx, ebx
jmp 0x52801d
pop edi
sub edx, ebx
xor ecx, ebx
xor ecx, edx
mov ebx, edx
inc esi
inc esi
neg ebx
xchg esi, edx
inc edx
add edx, 0xfea4878b
jmp 0x5288e6
push esp
neg esi
add ebx, 0xfeaf8382
mov esi, ebx
sub ecx, 0xfeafff84
bswap esi
mov edx, 0xfeb06f1a
jmp 0x52854a
pop edi
or esi, ebx
mov ecx, edx
inc ecx
jmp 0x52829f
pop edi
xchg ecx, ebx
xor edx, ecx
mov edx, ebx
sub esi, ecx
sub ecx, esi
or esi, ecx
shl ecx, 0x1e
xor edx, ebx
add ebx, edx
xchg esi, ecx
not esi
bswap ebx
jmp 0x52aa05
pop edi
sub esi, edx
sub edx, 0xfeb6627a
inc ecx
xor ecx, esi
add edx, ebx
xor ebx, 0xfeb74e07
neg edx
or esi, ecx
mov esi, ecx
jmp 0x527b67
push 0xf8f80752
sub ecx, 0xfeb94af0
mov esi, ebx
and ebx, esi
dec ebx
sub esi, edx
sub esi, ecx
jmp 0x529e62
call edi
or esi, ebx
nop
shl ebx, 0x13
add ebx, edx
mov ebx, ecx
or ecx, edx
and ecx, 0xfec16a43
not ebx
add ebx, edx
bswap ebx
shl esi, 0x11
shr ebx, 5
jmp 0x529f53
push 0xf8eb9087
rol ebx, 0x1a
mov edx, ecx
xor esi, edx
not ebx
or esi, ebx
sub ecx, esi
xor esi, ebx
xchg esi, ebx
xor ecx, ebx
jmp 0x528ec8
push 0xf8f9de9f
and edx, ebx
xchg edx, ecx
shl ebx, 0xe
xchg ebx, esi
xor esi, edx
sub edx, ebx
sub ebx, 0xfed5cf95
mov esi, ebx
and ecx, 0xfed63cd8
or ecx, 0xfed6747a
neg edx
xchg ecx, ebx
jmp 0x527e83
pop edi
or esi, ecx
xor ecx, 0xfed76b4e
not esi
inc edx
or ebx, 0xfed81535
xor esi, ecx
or edx, esi
sub ebx, edx
add ebx, ecx
add esi, ebx
add esi, ecx
xor edx, 0xfed9a1cc
jmp 0x527c12
pop edi
sub ecx, 0xfeec82c6
xchg ebx, ecx
and esi, ebx
add ebx, 0xfeed36f1
add ecx, edx
jmp 0x527b8a
pop edi
shl edx, 0xa
and ecx, ebx
sub ecx, esi
mov ecx, 0xfef1c760
mov ecx, edx
bswap ebx
shl esi, 0x19
sub esi, ebx
and ecx, edx
xchg ecx, esi
jmp 0x52a5d1
pop edi
and edx, esi
sub edx, 0xfef8f75e
sub ebx, ecx
inc ebx
and ecx, ebx
dec esi
jmp 0x52a4f5
push 0xf8ff1fda
rol edx, 0xe
add ebx, ecx
and esi, ecx
ror edx, 1
nop
bswap edx
sub ebx, edx
or ecx, esi
and ecx, edx
jmp 0x52946e
push 0x1266ca
mov esi, edx
sub esi, edx
or edx, ecx
xor ebx, ecx
or ecx, esi
bswap esi
rol esi, 0xd
add esi, 0xfefdbbeb
xchg esi, ecx
xchg ecx, ebx
bswap ecx
sub ebx, esi
or ecx, esi
mov edx, 0xfeff1526
or ecx, 0xfeff4d68
neg ecx
jmp 0x5280e4
push 0xf8e7fb75
neg ebx
xor ebx, 0xff0842ac
inc ebx
or edx, ebx
mov ebx, edx
xchg edx, ecx
jmp 0x529780
call edi
shr ecx, 4
sub ebx, ecx
add edx, 0xff1d45c1
shl esi, 0x19
xchg ecx, edx
mov esi, edx
xchg ecx, ebx
rol esi, 0x19
add esi, 0xff1ea0e0
jmp 0x529bc6
pop edi
xchg ecx, esi
not edx
or edx, ebx
and esi, ecx
jmp 0x527f02
call fcn.00528b53
inc ebx
and esi, ebx
sub esi, 0xff35715f
sub ecx, edx
xchg esi, edx
xor ecx, 0xff363653
and edx, esi
jmp 0x52a7e9
pop edi
or esi, 0xff4157b8
add esi, ebx
add ecx, ebx
add edx, 0xff421810
jmp 0x527c61
call fcn.00528b53
or edx, ebx
and ebx, esi
xchg edx, ecx
dec esi
xor ecx, edx
mov esi, ecx
jmp 0x52891c
pop edi
sub ecx, ebx
add ebx, 0xff50ff5a
sub esi, 0xff513da5
dec esi
sub edx, esi
bswap ecx
or ecx, esi
bswap edx
xor edx, ecx
xor esi, edx
sub ebx, ecx
and ecx, esi
jmp 0x529920
call edi
not edx
or edx, esi
mov esi, edx
mov ecx, 0xff65eb4d
not esi
and ecx, esi
shr esi, 6
jmp 0x528f83
call fcn.00528b53
dec esi
sub edx, ebx
add ebx, edx
dec esi
rol ebx, 0x1b
or ecx, 0xff680373
or esi, ecx
inc ebx
jmp 0x52ace7
pop edi
and ebx, ecx
bswap ebx
sub ecx, edx
inc esi
and ebx, esi
xor edx, esi
jmp fcn.0052a87f
call edi
mov esi, 0xff73efcc
and ebx, esi
add ecx, ebx
xor edx, ebx
not ebx
and ebx, edx
add ebx, ecx
add edx, 0xff757ba2
mov esi, edx
add ebx, esi
ror ebx, 0x18
bswap ecx
and edx, ecx
jmp 0x5289f1
push 0xf9035405
mov ebx, ecx
or esi, ebx
xor ebx, 0xff774533
add edx, esi
or ecx, 0xff77b231
neg esi
rol esi, 8
bswap ecx
add edx, ecx
xchg ecx, esi
mov ecx, ebx
or edx, ebx
jmp 0x528060
pop edi
not esi
or ecx, 0xff7f1bd7
rol esi, 0xc
xor edx, ecx
not edx
jmp 0x529ce2
call edi
and esi, ecx
xor esi, edx
add esi, ebx
and ecx, edx
sub ebx, esi
add ecx, ebx
mov edx, esi
jmp 0x5285a1
mov edi, 0x2809024b
inc ecx
mov edx, ecx
and esi, ecx
and ebx, edx
or esi, 0xff892582
add edx, ebx
sub ecx, ebx
xchg ebx, ecx
inc esi
add ebx, edx
jmp 0x529246
call edi
and ecx, 0xff916707
and ebx, ecx
bswap ecx
and ecx, edx
rol esi, 8
and edx, 0xff92936b
mov edx, 0xff92e0de
xor ecx, ebx
dec edx
jmp 0x528cc3
pop edi
or edx, 0xffa8d515
not esi
xor ecx, 0xffa960ac
add ebx, ecx
sub ebx, ecx
mov ebx, esi
jmp 0x529751