Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get common file path

Disassembly:
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xfffffee6
jne 0x40109d
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
ret
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xfffffeec
jne 0x401108
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff30
jne 0x40116e
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
ret
call sub.user32.dll_GetProcessWindowStation
cmp eax, 0xfffffefa
jne 0x4011cf
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff1a
jne 0x401267
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
call sub.shell32.dll_SHGetFolderLocation
ret
jmp 0x526b87
sub edi, ebx
jmp 0x528f07
push 0xdd56bde
sub esi, ebx
nop
mov ebx, 0xe393fa6
sub edi, ecx
or edi, ebx
rol edi, 8
jmp 0x528b04
pop edx
xor esi, edi
sub ecx, esi
inc esi
or ebx, 0xe39ff44
add esi, ebx
and ebx, edi
or esi, ecx
not ecx
sub edi, 0xe3a813a
or edi, 0xe3a9cfa
add edi, ebx
sub esi, ecx
jmp 0x527590
pop edx
add ecx, 0xe3e1b32
xor ecx, ebx
add ecx, ebx
sub edi, ecx
mov edi, ecx
sub esi, ebx
mov ebx, 0xe3eb082
nop
xor ebx, esi
xor ebx, edi
add edi, 0xe3f1c0c
xchg esi, edi
shr edi, 0x12
mov ebx, edi
jmp 0x527654
push 0xdce2fee
xor esi, edi
and edi, esi
and esi, 0xe3fc23e
rol esi, 0x1c
mov edi, ecx
or ecx, 0xe400f28
jmp 0x528e47
mov edx, 0x6332a2e
nop
mov ecx, ebx
bswap ecx
sub ecx, ebx
jmp 0x527a5c
push 0xdd326ec
add ecx, 0xe43723a
xor ecx, ebx
add esi, 0xe43a69c
xchg ecx, edi
sub esi, edi
sub edi, ecx
and ecx, 0xe442ac2
xchg ecx, edi
mov edi, ecx
mov ebx, edi
bswap ebx
inc ecx
jmp 0x528476
pop edx
dec edi
or esi, ecx
add ebx, ecx
add ecx, 0xe454716
jmp 0x5288f9
mov edx, 0x6332a2e
xchg edi, ebx
rol esi, 9
xor ecx, ebx
and ebx, 0xe466432
add ebx, edi
mov esi, ebx
sub ebx, esi
or ebx, esi
bswap edi
xor ebx, ecx
mov edi, 0xe471980
and ecx, ebx
add ecx, esi
xchg ecx, edi
jmp 0x52838f
call fcn.0052921e
sub esi, edi
rol edi, 0x14
dec esi
sub ebx, ecx
rol edi, 0x17
add ecx, 0xe49e450
jmp 0x528d71
call fcn.0052921e
shl ebx, 0x1a
sub ecx, esi
xchg edi, ebx
not esi
add ecx, esi
rol ecx, 0x1e
mov edi, 0xe4aacd0
mov edi, ebx
jmp 0x5286ef
call fcn.0052921e
not ebx
sub edi, ecx
add ecx, edi
and esi, ecx
jmp 0x528ceb
pop edx
sub ebx, ecx
sub esi, 0xe4ec6d0
inc ebx
sub ebx, esi
xchg ecx, esi
mov ebx, esi
or esi, edi
add edi, 0xe4f64a2
xor ecx, ebx
shr edi, 0x15
jmp 0x5283c5
call edx
mov ebx, ecx
xchg ecx, esi
xor ebx, ecx
xor ecx, 0xe51971e
rol edi, 0x1d
mov edi, esi
ror edi, 0x19
sub ebx, 0xe5205da
or edi, ebx
and esi, edi
add ebx, esi
or edi, esi
shl ecx, 0xa
or edi, ecx
jmp 0x526e8f
push esp
xor esi, ebx
shl esi, 7
sub esi, ecx
mov esi, ebx
bswap edi
or esi, ecx
xchg edi, esi
xchg ecx, esi
jmp 0x527776
call fcn.0052921e
sub edi, 0xe54e30e
rol ecx, 0x10
mov edi, 0xe5519d8
and edi, 0xe553720
xchg edi, ebx
xchg esi, edi
mov ecx, edi
xchg edi, ebx
xchg edi, ebx
sub ebx, ecx
jmp 0x528ae3
call edx
or esi, ebx
or edi, ecx
dec ebx
add esi, 0xe5ad9ac
mov esi, 0xe5af306
ror ebx, 0x14
xor ecx, esi
add ecx, ebx
xor edi, 0xe5b5fa6
or esi, edi
jmp 0x5288ad
push 0xdcf7e68
or ecx, esi
ror esi, 0xf
add ebx, edi
shl ebx, 3
mov ecx, ebx
sub esi, ebx
xchg esi, ebx
xchg esi, ebx
jmp 0x528033
push 0xdcfd130
or ebx, 0xe5d94be
mov esi, edi
xchg edi, ebx
shl ebx, 0x14
sub ecx, ebx
and ecx, edi
and edi, ebx
or ebx, esi
jmp 0x52928c
pop edx
xor ebx, 0xe5f813e
rol esi, 6
sub ecx, edi
ror esi, 2
inc edi
mov edi, ebx
or esi, ecx
or ecx, esi
or ebx, 0xe60555a
or esi, ecx
jmp 0x527adf
pop edx
or edi, esi
shl ecx, 0x10
add edi, ebx
shr ebx, 3
and ebx, ecx
shl ebx, 0xf
sub ecx, esi
or edi, ebx
sub ebx, esi
mov ebx, esi
or edi, ebx
or edi, 0xe61b072
jmp 0x527b46
call edx
dec esi
shr edi, 0xf
sub edi, esi
xor ebx, 0xe65ac42
rol esi, 0x13
mov edi, ecx
ror esi, 0x16
add ebx, edi
jmp 0x528833
pop edx
sub ecx, edi
or ebx, esi
or esi, edi
xor ecx, esi
jmp 0x52756e
pop edx
xor esi, ecx
rol edi, 0x1d
add ebx, edi
shr edi, 1
mov ecx, 0xe682698
mov esi, ebx
xchg esi, ecx
sub edi, ecx
add ecx, edi
and edi, ecx
add ebx, esi
or ecx, 0xe68d832
jmp 0x527ab5
pop edx
add ecx, ebx
sub ebx, esi
mov ebx, esi
neg esi
ror esi, 0x1c
inc edi
add esi, ecx
and edi, ebx
jmp 0x527a3c
push 0xdcd311e
xor ebx, esi
xor edi, ecx
or esi, edi
sub ebx, ecx
or edi, ebx
inc ecx
sub ecx, esi
or ebx, ecx
or esi, ecx
or edi, 0xe6e0fb6
jmp 0x52867a
pop edx
dec ecx
xchg ecx, ebx
xchg ecx, ebx
or edi, ecx
xor esi, edi
dec ebx
add esi, edi
and edi, ecx
jmp 0x526c42
mov edx, 0x4132136a
shr ebx, 0xc
inc esi
xchg esi, ecx
mov ecx, 0xe723c4e
bswap esi
add ecx, edi
add ecx, esi
xor ecx, edi
jmp 0x526f61
mov edx, 0x6332a2e
and esi, edi
neg edi
add edi, ebx
shr ebx, 0xe
xchg ebx, ecx
not esi
jmp 0x528c47
push 0xdd54ec4
shr ebx, 2
inc esi
and ecx, 0xe77560a
inc edi
xchg edi, ecx
xor ebx, 0xe77ab88
sub ebx, esi
xchg ebx, esi
xchg edi, ecx
xchg esi, ecx
jmp 0x526ba5
pop edx
xchg esi, ecx
add ecx, edi
sub esi, 0xe786cc6
xor ecx, edi
add edi, 0xe78a4b6
add ebx, ecx
or ecx, 0xe78d614
xor ebx, esi
xor edi, esi
or edi, ebx
jmp 0x527a9b
push 0xdcc1852
or edi, ebx
add ecx, esi
xchg ecx, edi
xchg ebx, edi
xchg esi, ebx
sub ebx, ecx
jmp 0x5282aa
push 0xdcd15bc
or ebx, 0xe79eea4
sub ecx, ebx
shr ecx, 0x12
and ebx, esi
jmp 0x527285
push 0xdd482d6
shr ecx, 0x13
shl edi, 8
not ecx
and ebx, ecx
mov ebx, 0xe7e5514
mov esi, ebx
jmp 0x527982
pop edx
or edi, ecx
sub ebx, edi
xchg edi, esi
ror ecx, 0x15
add edi, 0xe824e46
inc ebx
xchg esi, edi
xchg ecx, edi
mov ecx, esi
add edi, 0xe82d472
jmp 0x527442
push 0xdd72150
xchg edi, esi
mov ebx, edi
or edi, ebx
inc edi
xor edi, ebx
xor ebx, edi
sub esi, edi
sub edi, ecx
mov ecx, 0xe83cc68
mov ebx, 0xe83e628
inc ecx
and edi, 0xe841cfa
jmp 0x528ac0
push 0xdd0eb62
xchg edi, ecx
xchg esi, ecx
dec ebx
xor edi, 0xe861730
dec ecx
and ebx, ecx
sub edi, ecx
sub ecx, edi
sub edi, ebx
neg ebx
ror edi, 0xa
xor esi, ecx
jmp 0x528def
call edx
bswap ebx
rol esi, 0x19
jmp 0x528b48
pop edx
add esi, ecx
mov ecx, 0xe88fad6
mov ecx, 0xe8914fc
and esi, 0xe892ebc
add ecx, esi
inc esi
xor edi, ecx
add ecx, 0xe8999f2
mov edi, esi
ror edi, 0x14
jmp 0x528491
pop edx
and ebx, 0xe89f3b6
add ebx, edi
xchg esi, edi
and ebx, 0xe8a3f8a
add ebx, edi
add ebx, esi
mov ecx, esi
shl ecx, 0x1a
inc ebx
add ecx, esi
jmp 0x5287b4
mov edx, 0x6332a2e
xor ebx, 0xe8c778e
neg ebx
xor esi, 0xe8cac24
sub ecx, edi
inc ebx
and edi, ecx
jmp 0x5291c0
call fcn.0052921e
add esi, ecx
dec ebx
sub esi, ecx
and esi, 0xe8efcfc
add ecx, esi
add edi, esi
shr edi, 2
and ecx, ebx
rol esi, 0x1d
xchg ebx, edi
jmp 0x528213
push 0x40
mov ebx, 0xe9153e2
sub ecx, 0xe916d54
shr edi, 0x1f
neg ecx
or edi, esi
xor esi, ecx
shl edi, 0x1d
not ecx
jmp 0x528f1e
push 0xdd7ed12
mov ebx, ecx
ror ecx, 0xb
mov ebx, 0xe93f178
sub edi, ebx
sub esi, 0xe94257a
and esi, ecx
xchg edi, esi
ror edi, 1
shl esi, 0x1a
sub edi, ebx
xchg esi, ecx
xchg esi, ecx
jmp 0x52733c
call edx
neg edi
xchg esi, ebx
rol ecx, 0x12
shr ebx, 2
sub esi, 0xe967a70
add edi, esi
dec esi
mov ecx, edi
mov ecx, esi
or ebx, edi
and ebx, esi
inc esi
add esi, ebx
xchg ebx, esi
jmp 0x527247
pop edx
sub esi, ecx
mov ecx, 0xe995b78
sub edi, ecx
add ebx, 0xe998e28
dec ecx
and ebx, ecx
or ebx, edi
shr ecx, 0x12
sub ebx, edi
sub esi, ebx
xchg esi, edi
sub edi, ebx
mov edi, ebx
mov esi, edi
jmp 0x5271d6
mov edx, 0x6332a2e
ror edi, 0x19
and edi, ecx
xchg esi, edi
xchg esi, edi
sub esi, edi
mov esi, edi
jmp 0x526def
push 0xdcfb6d4
mov ebx, ecx
or esi, edi
sub ebx, ecx
sub ebx, edi
mov ebx, edi
add ebx, 0xea5a382
mov edi, ecx
and edi, 0xea5d90a
dec ecx
sub esi, edi
jmp 0x527080
pop edx
xor ecx, edi
bswap esi
xchg esi, ecx
ror ebx, 0x13
shr edi, 0x1a
xor ecx, 0xea6b82a
sub ecx, 0xea6d39c
add ebx, edi
jmp 0x527f81
call fcn.0052921e
shl esi, 0x11
xor ecx, edi
or ecx, esi
add edi, ebx
dec esi
add edi, ecx
jmp 0x527cf5
push 0xdce13d9
xor esi, ebx
mov ebx, esi
sub ecx, esi
xchg edi, ebx
xor esi, 0xea938a6
neg esi
jmp 0x526c6f
push 0xdd61a87
add edi, ecx
shr esi, 3
dec ebx
or esi, 0xea9c9d2
mov edi, 0xea9e392
and ecx, esi
neg ebx
ror ecx, 0x18
add ecx, esi
xchg ecx, edi
and ebx, ecx
or ebx, edi
jmp 0x52812a
pop edx
inc edi
add esi, ebx
sub ecx, esi
shr esi, 0x1c
dec ebx
shr edi, 0x1d
dec ecx
or ecx, esi
add ecx, 0xeab934e
add ebx, 0xeabad0e
add ebx, 0xeabc714
shr ebx, 0x10
and ebx, ecx
xchg ebx, edi
jmp 0x5273d5
pop edx
or esi, 0xeadc8fa
and edi, esi
add ecx, edi
mov edi, ebx
and ecx, esi
or esi, ebx
or esi, 0xeae5fea
or ebx, edi
jmp 0x5277c9
call edx
not ecx
neg ebx
sub edi, 0xeafb52c
sub ebx, edi
sub esi, ebx
mov esi, ebx
jmp 0x527c6d
push 0xdd12306
sub ebx, edi
bswap ebx
inc ebx
shl ecx, 0x14
xchg esi, ebx
and esi, ebx
xor ebx, esi
rol ebx, 0x19
jmp 0x5280c1
push 0xdd6547e
and esi, edi
neg edi
mov esi, ebx
bswap edi
xchg edi, ecx
ror ebx, 0x11
xor ecx, esi
add ecx, esi
sub ebx, edi
sub esi, ebx
jmp 0x528260
call fcn.0052921e
and esi, ebx
or esi, edi
sub ebx, ecx
neg esi
jmp fcn.00527160
pop edx
sub esi, 0xeb6302c
sub ebx, esi
ror ebx, 8
and esi, ecx
add esi, 0xeb69cce
add ebx, ecx
mov ecx, esi
or edi, esi
jmp 0x5290e0
call edx
xchg esi, ecx
sub ebx, edi
sub esi, ebx
xchg esi, ecx
sub ebx, edi
xor ecx, 0xeba8ac6
sub ecx, esi
ror edi, 0xf
jmp 0x528e09
call fcn.0052921e
mov esi, ecx
or ecx, esi
jmp 0x527812
mov edx, 0x6332a2e
mov edi, 0xebbd21e
mov ebx, edi
jmp 0x527c38
pop edx
rol ecx, 0xa
xor ebx, esi
add esi, 0xec3f82c
or esi, 0xec41774
add esi, ecx
sub esi, ebx
jmp 0x5291f2
push 0xdd881c4
and esi, ebx
or esi, edi
xchg esi, edi
and ebx, esi
add edi, 0xec78400
xchg esi, edi
sub edi, ebx
mov ebx, edi
jmp 0x526d60
push 0xdd0cf6c
add ebx, edi
add ebx, esi
or edi, 0xec995d8
xor edi, esi
xor esi, ebx
not edi
jmp 0x5275e4
pop edx
mov edi, 0xecbceac
xor ebx, esi
add ebx, esi
xchg ecx, edi
add edi, 0xecc338a
ror edi, 0x1a
and edi, esi
xor ebx, ecx
shr ebx, 0x11
inc esi
or ebx, 0xeccd4ae
add esi, ebx
jmp 0x528614
mov edx, 0x6332a2e
xchg edi, ecx
neg ecx
xor ecx, esi
not edi
xchg ecx, ebx
or ecx, 0xed033ca
and ebx, edi
xchg ebx, ecx
jmp 0x526e4c
push 0xdcf9a92
shl edi, 1
and esi, edi
shr esi, 0xe
sub ecx, ebx
xchg edi, esi
sub esi, ecx
sub edi, esi
xor ebx, esi
add ebx, esi
mov ecx, esi
jmp 0x527a17
mov edx, 0x6332a2e
and edi, esi
add edi, 0xed57786
add ebx, esi
xchg ecx, edi
and ebx, ecx
and esi, ecx
add ebx, esi
add ebx, ecx
or esi, 0xed627e6
add esi, edi
jmp 0x527d11
push 0xdce660c
xchg esi, ecx
xor edi, ebx
shr ecx, 0xe
sub edi, ebx
mov edi, ebx
xchg ecx, esi
sub ecx, edi
xchg ecx, edi
jmp 0x528f5e
push 0xdd637b2
sub esi, edi
xchg ebx, esi
dec esi
add ebx, edi
sub ebx, esi
sub ecx, edi
not ebx
and ebx, ecx
jmp 0x527c19
call edx
add ecx, edi
and ebx, ecx
jmp 0x5282d2
mov edx, 0x6332a2e
rol esi, 0x19
not ebx
and ebx, ecx
or ebx, edi
xor ebx, edi
or edi, ecx
sub ebx, edi
ror edi, 4
and edi, esi
and ebx, ecx
xor ecx, 0xee23702
dec esi
jmp 0x5283a1
push 0xdcc3316
ror ecx, 0xa
shl edi, 0x18
add esi, 0xee38e10
xchg ecx, edi
or edi, 0xee3c3fe
add edi, ebx
xor ecx, 0xee3f6f4
not edi
jmp 0x528ba4
pop edx
or esi, edi
and esi, ebx
add ebx, ecx
mov ecx, esi
or edi, esi
neg ecx
xor edi, 0xee4d4fe
add esi, ecx
mov ecx, 0xee506f0
xchg edi, ecx
jmp 0x5272a6
call fcn.0052921e
xor esi, ebx
shl edi, 0xa
sub edi, ecx
dec ecx
jmp 0x528443
call fcn.0052921e
mov ecx, esi
or edi, esi
dec ecx
add edi, ebx
sub esi, ecx
shl ecx, 7
inc ebx
mov edi, 0xeeb8d78
xor ebx, ecx
xor ecx, 0xeebc17a
jmp 0x52717f
pop edx
or esi, 0xeebe502
xor ecx, esi
not edi
and ecx, ebx
nop
mov ebx, esi
shr edi, 5
neg ecx
jmp 0x5271c8
call fcn.0052921e
sub ebx, ecx
xchg ebx, esi
sub ecx, esi
or ecx, ebx
or esi, ecx
add esi, 0xeed48e2
xor edi, 0xeed620e
ror ecx, 3
bswap edi
dec ebx
jmp 0x528e2b
call edx
and ecx, edi
xor esi, edi
mov edi, ecx
xor edi, ebx
xchg ebx, esi
dec esi
not edi
shr ebx, 3
jmp 0x52767c
mov edx, 0x6332a2e
shr esi, 3
and edi, ebx
or ecx, esi
add esi, edi
sub ecx, ebx
not ecx
and ebx, esi
mov esi, ecx
jmp 0x526dd4
push 0xdd0b370
or esi, ebx
or edi, esi
mov esi, 0xef1bfc6
xor ebx, ecx
xchg ecx, esi
sub ecx, edi
xchg ecx, edi
add edi, esi
xor edi, 0xef25c78
sub edi, 0xef277d2
sub ecx, ebx
sub esi, ecx
sub edi, esi
shr ecx, 0xf
jmp 0x527f2e
pop edx
and esi, ebx
mov edi, esi
mov ecx, ebx
xchg ecx, edi
or ecx, ebx
or ebx, 0xef86f7c
add esi, ebx
ror esi, 0x1d
jmp 0x528c8a
mov edx, 0x6332a2e
mov ecx, ebx
xor ebx, edi
shr esi, 0xb
dec ebx
rol esi, 1
sub esi, ecx
rol ecx, 0x18
xchg ecx, ebx
jmp 0x528a6e
pop edx
xchg esi, ebx
sub ebx, edi
and edi, ecx
xchg esi, edi
xchg esi, edi
sub esi, edi
mov esi, 0xefc0218
and esi, 0xefc214e
rol esi, 0x10
bswap ebx
xor esi, ecx
xchg esi, ecx
dec ebx
xor ecx, edi
jmp 0x5270b9
pop edx
inc esi
add ebx, 0xefcff9e
add ebx, 0xefd19a4
xor ebx, edi
xor esi, 0xefd4da6
and ebx, edi
mov esi, edi
xor edi, ebx
xchg ebx, esi
dec esi
jmp 0x5287a2
pop edx
inc ebx
sub edi, esi
add ebx, 0xeff0a62
mov ecx, ebx
or edi, esi
mov esi, edi
and edi, 0xeff7076
and esi, 0xeff8be8
xchg esi, edi
xchg esi, edi
jmp 0x526d33
push 0xdcd4d2c
mov ebx, esi
xor edi, esi
or ecx, 0xf00146c
add esi, ecx
sub ecx, edi
xchg esi, ebx
jmp 0x5285cf
call edx
sub edi, ecx
xchg edi, esi
not ebx
add ecx, edi
sub ecx, ebx
xor ecx, 0xf038b2c
jmp 0x5285eb
pop edx
and esi, 0xf078faa
add ecx, esi
xchg ecx, edi
xchg edi, ebx
jmp 0x52731f
push 0xdd914c5
xchg edi, ebx
rol esi, 0xa
and esi, ebx
neg ecx
or edi, esi
dec ecx
jmp 0x528af6
pop edx
mov esi, edi
xor edi, ecx
or ebx, 0xf0c2234
add esi, ebx
dec esi
add ecx, 0xf0c70f2
add ecx, 0xf0c8ab2
and ecx, edi
neg ebx
shr edi, 0x1b
neg ecx
or edi, 0xf0d124c
add edi, ebx
add esi, edi
jmp 0x529264
pop edx
mov esi, ecx
add ecx, esi
and edi, ebx
add ecx, 0xf1003c2
mov edi, esi
add edi, ebx
jmp 0x526d06
pop edx
xor esi, ecx
dec esi
inc ebx
or ebx, ecx
and ecx, 0xf12ba48
and ebx, 0xf12d408
rol ebx, 4
and ecx, esi
jmp 0x527038
push 0xdd448ca
or edi, esi
mov esi, edi
and edi, 0xf135ea6
and edi, esi
rol edi, 0xa
xor ecx, ebx
jmp 0x529182
call fcn.0052921e
xor edi, ecx
shl ebx, 0xf
jmp 0x527b81
push 0xdd73eb0
xor edi, esi
shr edi, 9
sub esi, 0xf1fc562
sub ecx, 0xf1fe0d4
add edi, esi
and esi, ebx
add ebx, ecx
sub esi, ecx
jmp 0x5276c3
push esp
sub ecx, ebx
sub esi, edi
shl esi, 0x19
bswap edi
xchg edi, ecx
mov edi, ebx
jmp 0x526f4a
push 0xdd931aa
not ecx
mov ebx, ecx
jmp 0x527d3e
mov edx, 0x6332a2e
rol edi, 0x17
xor ecx, esi
and ecx, 0xf218b34
xchg ebx, ecx
jmp 0x5283df
pop edx
add ebx, esi
add esi, edi
jmp 0x527ee6
mov edx, 0x6332a2e
shl ecx, 0xd
ror edi, 0x16
mov ebx, ecx
or esi, edi
sub ebx, ecx
ror ecx, 0x18
jmp 0x52914d
call edx
and ecx, ebx
or ecx, edi
add edi, ecx
add ecx, 0xf29a81a
and esi, ecx
shr edi, 0x14
neg ecx
or edi, esi
or ebx, 0xf2a2d5c
add esi, ebx
jmp 0x5270dc
call fcn.0052921e
or ebx, ecx
bswap edi
xchg edi, ecx
mov edi, 0xf2ab960
and ecx, esi
ror ebx, 0x12
not edi
shr ebx, 0x1d
xchg edi, ecx
mov esi, 0xf2b5aec
jmp 0x52762a
pop edx
sub ecx, ebx
not ecx
and ebx, 0xf2c6f74
rol ecx, 0x16
sub esi, ebx
xor ecx, edi
mov ebx, 0xf2cd7f2
inc edi
add esi, ecx
and ecx, esi
shl ecx, 6
sub esi, edi
jmp 0x528655
call edx
or esi, ebx
xor ecx, edi
add ecx, esi
sub ebx, edi
jmp 0x528570
call edx
xor ecx, 0xf329960
inc edi
xor esi, 0xf32cfb0
shr esi, 0x1a
jmp 0x527e74
push 0xdd10770
mov ecx, 0xf360e80
mov ebx, ecx
add ecx, 0xf364304
shr ecx, 5
jmp 0x527bce
pop edx
xor edi, 0xf36845a
xor ecx, 0xf36a388
and ecx, ebx
dec ebx
or esi, 0xf36f078
add esi, edi
mov edi, esi
ror edi, 2
jmp 0x528916
call edx
neg edi
sub ecx, 0xf377c6a
add edi, esi
sub edi, ebx
and ebx, edi
mov ebx, esi
or esi, edi
rol edi, 0xb
jmp 0x527879
push 0xdce4bfc
sub ebx, edi
xor ecx, edi
xor esi, ebx
or esi, ecx
mov ecx, edi
and ebx, ecx
jmp 0x52810f
push 0xdcbdda8
or edi, esi
neg ecx
xor esi, 0xf3e2ed2
ror ecx, 4
jmp 0x52901b
push 0x125787
or edi, esi
sub esi, 0xf3e8b3a
and ebx, ecx
dec ebx
jmp 0x529241
push 0xdce82b6
sub ebx, ecx
mov edi, ebx
mov ebx, esi
bswap ebx
sub edi, ebx
and edi, 0xf40e01e
and esi, 0xf40fbde
add ecx, esi
xchg ecx, edi
and ebx, ecx
jmp 0x528006
push 0xdcbfc5c
add esi, 0xf45c14c
xchg ecx, edi
shr esi, 0x13
dec ebx
or ecx, esi
sub esi, ebx
neg ebx
or edi, ecx
and ebx, esi
dec ecx
mov esi, ebx
rol ecx, 0x10
bswap esi
and edi, ecx
jmp 0x52742c
pop edx
and ecx, ebx
or ecx, esi
shr edi, 3
sub edi, esi
or ebx, ecx
mov ebx, 0xf4c3940
xchg esi, edi
not ebx
jmp 0x527406
call fcn.0052921e
neg edi
inc esi
shr ecx, 0x10
xor esi, edi
xchg ebx, esi
ror esi, 5
xor esi, ebx
shl edi, 8
jmp 0x526ef4
push 0xdd465dc
mov ebx, edi
add ebx, ecx
add esi, edi
not ebx
inc edi
bswap ecx
jmp 0x5274cc
call fcn.0052921e
neg edi
nop
dec ecx
xchg esi, ecx
and edi, 0xf5279b0
and edi, 0xf52935e
neg ebx
and esi, ecx
jmp 0x528c23
push 0xdd3b7e5
and edi, ecx
add ecx, esi
mov ecx, 0xf53959c
sub edi, esi
xor ecx, ebx
xor esi, ebx
neg ecx
xor edi, 0xf54192c
xor esi, 0xf5434ec
or edi, ecx
xchg edi, ecx
dec ecx
jmp 0x526cd3
push 0x401400
sub edi, 0xf55e1b6
and ebx, esi
and ebx, ecx
rol esi, 0x19
bswap ebx
sub esi, 0xf5665ae
and ebx, ecx
sub edi, ecx
jmp 0x527012
pop edx
rol ecx, 0xe
or ebx, 0xf56d7a4
dec ebx
add edi, esi
add ecx, 0xf572496
mov ecx, esi
jmp 0x526bbe
mov edx, 0x6332a2e
and esi, ebx
shr esi, 0x1f
sub edi, ecx
and ecx, edi
and edi, 0xf584450
or ebx, esi
dec ebx
bswap edi
and edi, esi
and esi, 0xf58c424
jmp 0x527714