Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetCapture
cmp eax, 0xffffff24
jne 0x40107a
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_DuplicateTokenEx
call sub.ntdll.dll_ZwModifyBootEntry
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_DuplicateTokenEx
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_ZwModifyBootEntry
call sub.advapi32.dll_DuplicateTokenEx
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_DuplicateTokenEx
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xfffffed6
jne 0x401121
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_DuplicateTokenEx
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_ZwModifyBootEntry
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_NtOpenEventPair
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff2c
jne 0x401196
call sub.advapi32.dll_DuplicateTokenEx
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_DuplicateTokenEx
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_ZwModifyBootEntry
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_ZwModifyBootEntry
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_DuplicateTokenEx
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xffffff0c
jne 0x40122e
call sub.ntdll.dll_ZwModifyBootEntry
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_NtOpenEventPair
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_NtOpenEventPair
call sub.ntdll.dll_ZwModifyBootEntry
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_DuplicateTokenEx
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.advapi32.dll_GetAclInformation
call sub.ntdll.dll_ZwModifyBootEntry
call sub.ntdll.dll_ZwModifyBootEntry
call sub.advapi32.dll_DuplicateTokenEx
call sub.ntdll.dll_NtOpenEventPair
ret
jmp 0x507997
sub edx, ebx
bswap esi
or edx, 0x52d02670
add edx, esi
ror edi, 8
or edx, 0x52d125b5
and ebx, edx
jmp 0x5085e5
call fcn.00508eb6
sub edi, 0x54124473
sub edx, ecx
ror ebx, 0xc
inc ecx
add edi, edx
xchg ebx, edx
add ebx, edi
sub ebx, edx
sub edx, ecx
and edx, 0x54147d58
jmp 0x508b39
pop esi
inc ecx
neg ebx
add edi, ebx
and edi, edx
add ecx, edi
shr ecx, 7
neg ecx
sub ebx, ecx
mov ebx, edx
jmp 0x50877a
mov esi, 0x2d734e3d
or ebx, edi
xchg ecx, edi
and edx, 0x5419f888
add edx, ecx
shr edi, 0xd
mov edx, ebx
add ebx, edi
sub ecx, edi
and ebx, ecx
not ebx
mov ebx, 0x541bf0d5
jmp 0x50a1d0
call esi
shl ebx, 2
xor edi, ecx
mov edi, 0x5423cc95
mov edi, ecx
mov ecx, 0x5424469a
sub ebx, edx
dec edx
ror edi, 7
xchg edx, edi
jmp 0x509e80
push 0x52f5c3ca
sub ebx, edi
xor ebx, 0x543642cc
and ebx, edx
xor ecx, ebx
mov edi, ecx
add edi, ecx
jmp 0x509d06
call fcn.00508eb6
xor edx, 0x54415130
and edx, edi
xor ebx, edx
and ecx, edi
jmp 0x5081f6
push 0x52d930ca
and ebx, edi
xor ecx, edx
ror edi, 4
add edi, 0x54432667
mov edx, edi
sub edi, ecx
xchg edi, ecx
xor ecx, edx
or ecx, edx
xor edx, edi
xchg ecx, ebx
jmp 0x50874d
mov esi, 0x123b2f04
add edi, ecx
sub edi, edx
inc edi
sub edx, ebx
mov edx, 0x54463ec4
xor edx, ecx
mov edx, ecx
jmp 0x5080e2
push 0x52eec72e
mov ebx, ecx
and ebx, edx
and edx, ebx
mov edi, 0x5447c146
and edi, edx
add edi, ecx
add ecx, 0x5448805f
or ecx, 0x54491e3c
add edi, ecx
xor ecx, 0x544a937e
xor ebx, edx
or edi, ebx
jmp 0x50a318
push 0x52f28e0f
sub edi, ecx
shl edx, 0x1e
rol ebx, 2
ror edi, 0x13
and edi, edx
sub ecx, edx
mov edx, 0x54533a7f
or edi, edx
mov edx, edi
mov edi, ecx
bswap edi
and ecx, ebx
shr edi, 0x15
neg ecx
jmp 0x509d9a
pop esi
mov edx, ebx
shl ecx, 0x15
sub ecx, edi
shr ecx, 0x11
shr edx, 2
add ebx, ecx
add ecx, 0x546b81e2
and ecx, edx
nop
or edi, edx
jmp 0x508051
call esi
bswap edx
neg ecx
xchg ebx, ecx
add ecx, edx
xchg ebx, edi
add edx, ebx
and edi, edx
xor edx, 0x546fe68c
jmp 0x50812c
push esp
xchg ebx, edx
mov ecx, edi
mov ebx, edi
bswap ebx
rol ecx, 0xf
xor edi, 0x54730888
or edi, ecx
sub ebx, ecx
ror edx, 2
add ecx, edi
xor ecx, ebx
shr edx, 4
jmp 0x50a186
push 0x52e6663d
mov ebx, ecx
add edx, ebx
and edx, ecx
not edi
shl ebx, 8
add edi, 0x54774b95
add ecx, edx
sub edx, edi
jmp 0x509a74
pop esi
and edi, 0x547e7227
add edx, 0x547eb049
and edi, 0x547eef3f
and ecx, ebx
add edi, ecx
add edx, ebx
xchg edi, edx
and edx, 0x54802f3d
mov ebx, edx
jmp 0x508f69
call fcn.00508eb6
sub edx, 0x5480c2ff
ror edx, 0x1f
and ecx, ebx
not edi
inc edi
or edx, ecx
and ecx, 0x548237c1
or edi, ebx
mov ebx, edx
or ecx, edx
jmp 0x508c6d
pop esi
xor edx, edi
and edx, ebx
not edi
ror ebx, 0x11
dec ebx
and ecx, edx
xor ebx, edi
sub ecx, ebx
sub ebx, 0x548553e3
jmp 0x50807d
call fcn.00508eb6
xor ecx, edx
bswap ecx
mov edi, 0x54892f62
mov edx, 0x54896ecc
or edi, 0x5489ad9d
and edi, ebx
dec ebx
jmp 0x50870b
pop esi
sub edi, ebx
xor ebx, ecx
inc ecx
xchg ebx, ecx
or ecx, edx
mov edi, 0x548bd74d
bswap ecx
jmp 0x507b92
push 0x52e1c45b
shr ebx, 2
shl edx, 0x1a
mov ebx, edx
add ebx, 0x548f8288
dec edi
xor edx, 0x54901008
not edx
neg ebx
xor ebx, ecx
rol ecx, 0x1b
add edi, edx
xchg ecx, ebx
jmp 0x508518
pop esi
xchg edx, ebx
xchg ecx, edx
sub edx, edi
nop
bswap ebx
xor edx, ebx
or edi, 0x5493640f
inc ebx
mov ebx, ecx
nop
bswap ebx
xor edi, ebx
jmp 0x508b06
mov esi, 0x123b2f04
mov ecx, 0x5494f5b9
or edi, ecx
or ecx, edx
xor ebx, edx
sub ebx, 0x5495fafc
mov ecx, edi
jmp 0x5081d2
call fcn.00508eb6
add edi, edx
or ebx, ecx
neg edi
xor edi, 0x549a55e3
ror ecx, 0x18
add ecx, edx
xor edx, 0x549b0fdb
add ecx, ebx
and ecx, 0x549b9ab7
not edi
jmp 0x50a07f
pop esi
or edi, edx
mov ecx, edi
mov edi, ebx
mov ecx, edx
jmp 0x50a2f7
pop esi
sub ebx, edi
xor ecx, ebx
add edi, ecx
shr ebx, 5
add ecx, edx
not ebx
add ebx, 0x54a0d02f
or edx, edi
bswap ecx
or edx, ecx
xor ebx, edx
jmp 0x509b8b
pop esi
xor ebx, ecx
xor edi, ebx
xor ebx, edx
shl edx, 4
mov edi, ecx
inc edi
xchg ebx, ecx
xor edx, ebx
jmp 0x509ebf
pop esi
shr edx, 3
or ecx, edi
or ecx, 0x54a6541a
mov edx, edi
shl edx, 0x16
add edi, ebx
mov edx, 0x54a759e1
neg ebx
jmp 0x50987c
call fcn.00508eb6
xchg edx, ecx
mov edx, ebx
xor ebx, edx
add edx, 0x54ab117a
and edi, 0x54ab5031
and edi, ecx
sub ebx, 0x54abcb3f
jmp 0x508460
call esi
xor edi, ecx
xor ebx, edx
sub ebx, edi
add edx, 0x54aceca5
jmp 0x509d25
push 0x52dd2f64
mov edx, 0x54b22abc
xchg edx, ecx
add edx, ebx
sub ecx, ebx
xor edx, ebx
shr edi, 7
shr edx, 0x1a
sub edi, edx
xchg edi, edx
sub ebx, 0x54b465f4
jmp 0x508aae
mov esi, 0x2d734e3d
sub ecx, edi
mov ebx, edi
nop
add edi, ecx
add edi, ecx
sub ebx, edi
inc edi
sub edi, ebx
or edx, edi
inc ecx
shl edx, 0x12
inc ebx
sub edi, ecx
jmp 0x509c47
push 0x52eb99b2
shl edx, 0xb
and edx, ecx
sub edx, 0x54d9b880
or edx, ecx
xchg ebx, edx
jmp 0x508c89
call esi
sub edx, ebx
or edx, ecx
add ebx, ecx
and edx, ebx
and ebx, edx
and ebx, edi
and ebx, edi
xchg edi, ebx
sub edi, ecx
jmp 0x509bc7
pop esi
xor ebx, 0x54ded851
mov ebx, edi
add edi, ebx
sub ebx, edi
xor edi, ecx
or ebx, ecx
xor ecx, ebx
shr edx, 0x19
or edi, 0x54e0c722
mov edi, 0x54e104d2
jmp 0x508974
mov esi, 0x2d734e3d
mov edx, ebx
xor edi, edx
mov edx, 0x54e1dd35
xchg ebx, ecx
xchg edx, ebx
mov edi, 0x54e293fb
or ebx, edx
sub ebx, ecx
ror ecx, 1
ror edx, 6
or edi, ebx
jmp 0x509f6f
push 0x52e20e3e
xor edi, ebx
xor ebx, edx
dec edi
bswap ebx
sub edx, edi
sub ecx, edx
or edi, 0x54ec4827
or edi, edx
shr ebx, 7
and edx, ebx
rol ecx, 0xc
add edi, edx
dec edx
jmp 0x509510
pop esi
add ebx, ecx
neg edi
add ebx, edx
shr edx, 8
xchg ecx, edi
or ecx, 0x54ef535b
xor ecx, ebx
and ebx, edi
or ecx, ebx
and ebx, edi
mov edi, 0x54f083c7
xor ecx, 0x54f0c155
jmp 0x509cc8
mov esi, 0x2d734e3d
add ebx, 0x54f7ccd6
neg ebx
or ebx, 0x54f84a0b
and ebx, edx
and edx, edi
sub ecx, 0x54f90242
sub edx, ebx
or edx, ecx
and ebx, edi
and ecx, edi
not edi
xor edi, edx
dec edi
jmp 0x50a00b
push 0x52d5b728
or edi, edx
bswap edx
and ebx, 0x54fba672
and ebx, ecx
add edx, edi
or edx, edi
jmp 0x5085b6
mov esi, 0x2d734e3d
or ebx, edx
sub edi, ebx
rol ebx, 6
xor edx, ebx
add ecx, edi
add edi, edx
sub ecx, ebx
xchg edi, ebx
inc ebx
mov edi, ebx
xchg edx, edi
nop
jmp 0x508e0f
mov esi, 0x2d734e3d
inc ecx
xor ebx, ecx
or ecx, edi
xor edx, ebx
mov edi, ecx
or ebx, edx
and ecx, 0x550275ff
add edx, edi
jmp 0x509158
pop esi
xor ecx, ebx
and ebx, edi
sub ebx, edx
and edi, edx
mov edx, ecx
sub edx, ebx
jmp 0x509744
call esi
sub ebx, ecx
mov edi, ebx
sub ebx, edx
sub ebx, 0x5512272e
mov ecx, ebx
dec edx
mov ecx, ebx
inc edx
shr edi, 0x14
jmp 0x5089c5
push 0x52d97996
sub edi, 0x5516243b
xor edi, ecx
sub ebx, 0x5516a095
and ebx, edx
or edx, ebx
or ecx, ebx
sub ecx, 0x5517a428
add edx, edi
and ecx, ebx
mov edi, ecx
ror ebx, 0xc
jmp 0x5085ff
pop esi
mov edx, edi
xchg edi, edx
sub ebx, 0x55196c29
add ecx, edi
ror ebx, 0xc
sub edx, ebx
xchg edi, ecx
add edx, edi
shr edx, 0x17
or ebx, edx
sub edx, 0x551b6926
xor edx, ecx
add edi, ebx
dec edx
jmp 0x50a26e
pop esi
and edx, edi
rol edx, 0xd
dec edi
jmp 0x509d6e
push 0x52ef5b97
and edi, ecx
sub ecx, edi
or edx, edi
mov edi, ecx
and edi, ebx
sub ecx, edx
xor edx, ecx
shr ecx, 0x11
xor edx, ecx
bswap edi
or edi, ebx
shr ebx, 0x16
add ecx, edx
jmp 0x508635
push 0x401400
sub edi, 0x56c7dfdd
bswap edi
or ecx, ebx
bswap edx
xor edi, ecx
and edi, 0x56c97635
and ebx, edi
and ebx, edx
and ecx, ebx
jmp 0x508fe9
push 0x52e05473
sub edx, ecx
mov ebx, 0x56d40299
mov edi, ebx
xor ecx, 0x56d49ad9
neg edi
add edx, ecx
xchg edx, ecx
add ebx, edx
add edi, 0x56d62c7d
jmp 0x508327
pop esi
xor ebx, edi
sub edx, 0x56db5b7f
add edi, ebx
shl ebx, 0x19
jmp 0x508f8e
call esi
or edx, edi
or edi, 0x56e6aa58
xor edi, ebx
sub ecx, 0x56e745a6
sub ecx, ebx
sub edx, 0x56e7f20b
mov ebx, 0x56e840b8
and ecx, edx
xchg ebx, edi
jmp 0x508187
push 0x52dd79a8
or edi, 0x56f0250c
or ecx, 0x56f07324
xor ecx, ebx
xchg ebx, edi
xor ebx, edi
sub edx, ebx
add ebx, 0x56f2051f
ror edi, 7
mov ebx, ecx
xor ecx, 0x56f2ebeb
or ecx, ebx
inc ecx
jmp 0x5090f8
push 0x52f1f876
mov edx, ebx
add edx, ecx
xor ecx, edi
sub edi, edx
jmp 0x509587
call esi
sub ebx, 0x56fb8593
or ecx, 0x56fbd262
xchg ecx, ebx
not ecx
ror ebx, 0x17
xchg edx, edi
bswap ebx
add ebx, 0x56fda55b
bswap ebx
and edi, edx
add ebx, edi
add edx, ecx
xchg ebx, ecx
mov edi, edx
jmp 0x509f00
pop esi
or ecx, edx
inc ebx
and edx, ebx
add edx, ecx
sub edx, edi
mov ecx, edi
or edi, ebx
add edi, ecx
jmp 0x508674
call esi
sub ebx, 0x570b2548
xchg edi, ecx
sub edx, 0x570bc29e
mov ebx, edx
sub ebx, 0x570c5a5b
and ebx, ecx
not edx
sub ebx, ecx
and ecx, edi
mov ecx, edx
mov ebx, edi
and edx, ebx
xchg edi, ebx
jmp 0x5096b5
push esp
or ebx, edx
mov ebx, edx
and edi, 0x5718d5a3
and ebx, edi
jmp 0x507ece
push 0x52ebe386
xor ebx, ecx
add edx, edi
and ebx, edx
and ebx, 0x571a8631
mov edi, ebx
bswap ebx
sub edi, ecx
and edi, edx
and ebx, ecx
mov edi, ecx
rol ecx, 0x18
jmp 0x509971
mov esi, 0x123b2f04
xchg ebx, edx
rol ebx, 0xf
xor ebx, 0x5724a103
shl ecx, 0x10
or ecx, edx
and ecx, 0x57258ca5
add ecx, 0x5725efbc
dec edi
add ecx, edi
dec ebx
jmp 0x5095d5
pop esi
or ebx, edi
and ebx, 0x5727951b
add ebx, 0x5727f88b
and edx, 0x57284610
xor ecx, edx
sub edx, ecx
sub edi, 0x57292f92
sub ebx, edi
sub ebx, edx
jmp 0x509428
push 0x52ee7dde
xchg edx, edi
inc ebx
add edi, ebx
ror edi, 8
add edx, ebx
add edi, edx
jmp 0x507c9f
push 0x52eb4ffd
xchg edi, ecx
xor ecx, 0x573a67f4
mov edi, ecx
xchg ebx, edx
or edi, edx
dec edi
or edi, edx
xchg edx, ebx
not edi
jmp 0x508434
call fcn.00508eb6
add edi, ebx
or edx, ebx
xchg ebx, ecx
or ebx, edi
add ebx, ecx
mov ebx, ecx
or ebx, 0x5740f0fe
add ebx, ecx
sub edi, 0x57419f1f
rol ecx, 5
jmp 0x509c35
push 0x52de0bf8
xor ebx, 0x57425b71
xor ecx, edx
ror edx, 8
add edi, 0x574347e9
dec edi
mov ecx, edx
mov edi, edx
mov edi, ebx
and edx, edi
jmp 0x507c85
push 0x52db78f2
xor ebx, 0x574878d5
add edx, ebx
add ecx, ebx
and ebx, edi
add edx, ebx
xor ebx, edx
xor edi, ebx
or edx, edi
sub ecx, edi
bswap edx
dec edx
jmp 0x507a14
pop esi
shl ebx, 0x18
xchg ecx, edi
add ecx, edx
not ebx
mov edi, 0x575bb2a4
sub edx, edi
bswap ecx
add ebx, ecx
xor ecx, ebx
or edx, 0x575d4729
mov edx, ecx
jmp 0x507ef3
pop esi
mov ebx, ecx
xor ebx, 0x575ed7d6
and ecx, edi
or edx, ebx
jmp 0x509549
push 0x52e7d83b
or ecx, ebx
sub edi, 0x5761adc9
add edx, ecx
and edx, edi
not edx
xchg ecx, edx
and ebx, ecx
and edi, edx
neg ecx
xchg edx, ebx
shr ecx, 0x1a
rol ebx, 7
or ecx, edi
xchg edx, ecx
not edi
jmp 0x50a025
call esi
xor edx, edi
xor ebx, 0x576a02b2
shr edi, 6
sub edi, ebx
and ebx, edx
jmp 0x508f45
pop esi
xchg ecx, ebx
mov ecx, ebx
jmp 0x508d20
push 0x52ee333d
sub edx, ebx
add ebx, edi
xchg edi, ecx
xor edi, ecx
rol edx, 8
xor edx, ebx
xor edx, 0x577883fd
or ebx, edi
and edx, ebx
ror edi, 0x1d
or edi, ebx
jmp 0x508dda
push 0x52ddc2b6
shr ebx, 4
mov ebx, ecx
add ecx, edx
sub edi, ecx
and edi, 0x5801c78b
or ebx, ecx
sub ebx, edi
mov ecx, 0x5863321e
jmp 0x508e36
push 0x106597
add ecx, edi
or edx, ecx
xchg edx, ebx
rol ebx, 0xe
inc edx
dec ebx
jmp 0x5088f4
call fcn.00508eb6
add edi, ecx
xchg ebx, ecx
sub ecx, edx
or ecx, 0x588046cc
neg ebx
sub ebx, 0x5880c58e
mov ecx, ebx
xor ebx, edx
jmp 0x5095f9
push 0x52d77a57
or ecx, 0x588dd2d1
or ebx, 0x588e12c8
xchg ebx, edi
or ecx, 0x588e908d
and ebx, edi
inc ecx
shr ecx, 0x10
jmp 0x509493
push 0x52e8b56c
or edi, edx
and ecx, edx
add ecx, edx
xor edi, 0x58aa33f5
sub edi, edx
rol ecx, 0xd
xor edi, ecx
dec ecx
and ecx, ebx
not ebx
jmp 0x50849f
push 0x52eb05c0
inc ebx
mov edx, edi
mov ecx, edi
neg edi
inc ebx
sub edx, edi
mov edi, edx
or ebx, edx
rol edx, 0x1e
jmp 0x508df0
mov esi, 0x2d734e3d
or ebx, edi
mov ecx, edi
and edx, ecx
add ecx, edx
neg ebx
or ecx, edi
jmp 0x509828
mov esi, 0x123b2f04
and ecx, edi
and ebx, ecx
or ecx, ebx
mov edx, 0x58c0b15b
add edx, edi
or edi, ecx
mov ecx, edx
rol ecx, 0x12
inc edx
and edx, 0x58c233c6
mov ebx, edi
add ebx, 0x58c2add4
xor edx, 0x58c2ec0c
or edi, 0x58c32bee
jmp 0x5079b3
pop esi
sub edi, ebx
sub ebx, edi
xchg ebx, edi
xchg ebx, edx
shl edi, 0x19
or edi, ebx
or ecx, edi
and edi, 0x58c544c2
xor ecx, ebx
and ebx, ecx
jmp 0x508013
push 0x52f244ba
xchg edi, ecx
sub ecx, 0x58c92965
and ebx, edi
add ecx, ebx
shl ebx, 1
mov edx, edi
jmp 0x507d21
call fcn.00508eb6
xor ebx, ecx
add ebx, ecx
rol edx, 2
xor edi, 0x58cddd12
xchg ecx, edi
not edi
ror edi, 9
xchg edi, ecx
xchg edi, edx
mov edi, edx
jmp 0x508a40
call esi
not ecx
or edx, edi
and ebx, edx
xchg edx, ecx
mov edi, ebx
neg ecx
mov edi, ecx
or ebx, edx
mov edx, 0x58d1b776
xor edi, ebx
or ecx, 0x58d234fd
dec edi
add edx, ebx
shl ecx, 7
jmp 0x5079fc
pop esi
xchg edi, edx
and edx, 0x58d38548
add ebx, edx
xchg edx, ebx
sub ebx, edx
inc edx
nop
inc ecx
or ecx, ebx
shr ebx, 0x11
and edx, ebx
jmp 0x508fff
pop esi
or edi, ecx
bswap edi
not edi
not ecx
and edx, ecx
sub edx, ecx
mov edx, ebx
shl ebx, 0x1e
add edi, ebx
or ebx, edi
and ebx, edi
inc ecx
xchg ebx, edi
xor ecx, edi
jmp 0x507c60
pop esi
xchg edx, ecx
sub edi, edx
or ebx, ecx
or edx, ecx
add edx, 0x58e11a1d
ror ebx, 0xf
xor ecx, 0x58e1a84a
xor ecx, ebx
jmp 0x50967c
push 0x52e86ceb
xchg ecx, ebx
mov edx, 0x58e27cf5
or edi, ecx
jmp 0x5093e2
pop esi
and edx, edi
ror edi, 6
and edi, 0x58e39dac
add edi, ecx
sub ebx, edi
or edi, ebx
dec ebx
sub edi, ebx
or ebx, ecx
neg ecx
or edi, edx
and ebx, 0x58e5d694
add ebx, edi
rol edi, 9
rol ecx, 9
jmp 0x508479
push 0x52db2f06
sub ebx, edi
xor ecx, ebx
xchg ebx, edi
add edi, edx
mov edi, ebx
sub ecx, edx
add ecx, ebx
inc ecx
xchg edi, ecx
xchg ecx, ebx
sub ecx, ebx
and edi, ebx
not ecx
sub ecx, ebx
sub ecx, edi
jmp 0x508e77
call fcn.00508eb6
sub ebx, ecx
sub ebx, edx
bswap ecx
xor ecx, edx
xor ebx, 0x58fcc111
mov edi, ebx
ror ecx, 0x11
sub ecx, ebx
sub edi, ecx
and edi, 0x58fe06dc
mov ecx, edi
jmp 0x508be4
pop esi
rol ebx, 2
shl ecx, 0x1a
xchg ebx, ecx
add edi, ecx
inc edx
and ebx, edx
add ecx, edx
jmp 0x50a092
push 0x52f6ed83
add edi, 0x590552f7
and ecx, edx
or ecx, edx
rol edi, 5
or edx, ecx
xor edi, ecx
xor ebx, edx
or ecx, ebx
dec ebx
add ebx, edi
xor edi, 0x5907c85f
bswap edx
and ebx, ecx
jmp 0x508cf6
mov esi, 0x2d734e3d
sub ebx, ecx
sub ecx, ebx
bswap edx
or edi, ebx
or ebx, 0x59143d9e
or edx, 0x59147b51
dec edx
or edx, 0x5914fac6
and ecx, edi
jmp 0x507c4a
mov esi, 0x2d734e3d
add ebx, ecx
mov ebx, edi
xchg edi, ecx
xor edi, ebx
xchg edx, ecx
xchg ecx, edx
ror ebx, 0xa
dec edx
and ecx, edi
jmp 0x507ff2
mov esi, 0x4132136a
add ebx, edi
xor ebx, 0x59399c6e
neg ecx
sub edx, ebx
and ebx, edx
add ebx, edx
sub edx, edi
mov edi, ebx
add ebx, ecx
xchg ebx, ecx
jmp 0x507f84
pop esi
sub ebx, 0x593dece2
xor ebx, ecx
or edi, edx
shr edi, 0x1a
or edx, ebx
shl ebx, 0x14
and edi, edx
sub edx, ecx
dec edx
xor ebx, 0x59402861
xor ebx, edi
xor ebx, edx
jmp 0x507f5c
call esi
ror ebx, 6
sub edi, ebx
xor edx, edi
and ebx, edi
mov edi, edx
jmp 0x508bad
call fcn.00508eb6
xor ebx, edi
and ecx, ebx
xor ebx, ecx
mov ecx, ebx
and ebx, 0x59496dab
xor edx, ebx
bswap edi
shl edi, 5
add edi, 0x594a7821
inc ebx
and edx, ecx
xchg edi, ebx
xchg edx, ecx
or edi, ebx
xor ebx, edi
jmp 0x50a3fb
call esi
mov edi, ecx
mov ecx, edi
mov edi, ebx
or ecx, ebx
sub ebx, edi
mov ebx, edx
and edx, 0x594db792
nop
and ebx, 0x594e35db
and edi, edx
and edi, 0x594eb0e7
jmp 0x508540
push 0x52d73294
sub ecx, edx
not ebx
rol ebx, 7
add ecx, edi
xor ebx, edi
xchg edx, ecx
ror edx, 0xc
and ecx, ebx
sub edx, ecx
and edx, edi
or edx, 0x595457e4
mov ebx, edi
add ebx, edi
xor edi, ebx
jmp 0x509233
push 0x52f60e2f
neg edx
xor edi, ecx
and edx, 0x5956fff1
or edx, ecx
and ebx, edi
sub edi, ebx
shr ebx, 9
xor ecx, ebx
jmp 0x509f49
pop esi
inc ebx
shr edx, 9
and edi, ebx
ror edi, 0xd
xchg ecx, edx
and edi, 0x5959e35d
xor ebx, edi
add edx, ecx
and ecx, 0x595a9b87
shl edx, 4
jmp 0x50882c
pop esi
add edi, 0x595e0b68
sub ebx, edx
or ecx, edx
and edi, edx
not edi
shr edx, 6
mov ebx, ecx
ror ecx, 0x1e
dec ebx
shl edi, 0xf
bswap edx
sub ebx, edi
add ecx, edi
xor ebx, edi
xor edi, edx
or edi, edx
jmp 0x50a151
push 0x52f2d818
not ebx
sub edi, edx
xchg edx, edi
add edi, 0x5962e1bc
xor edx, ecx
jmp 0x50a114
pop esi
mov ebx, ecx
xor edx, 0x5971b7d5
dec ebx
mov edi, edx
sub edx, ebx
add ebx, 0x5972ae9f
add edi, ebx
rol edi, 0xf
shr edi, 0xf
add ebx, 0x5973ba91
jmp 0x509623
pop esi
add ecx, edi
or edi, ebx
sub edx, ebx
sub ebx, edi
mov ebx, edx
jmp 0x5096e7
pop esi
xor ebx, 0x59768890
and ecx, 0x5976c676
add ebx, edi
mov ecx, edx
mov edi, edx
xor edx, ebx
jmp loc.00509653
pop esi
and ebx, edx
mov ebx, 0x597a70bc
inc ecx
inc edx
sub ebx, edx
xor edi, ebx
mov edi, edx
sub ecx, edx
jmp 0x50813a
push 0x52f65850
xchg edi, edx
mov ecx, edi
neg edi
or edi, edx
shr ebx, 0xb
mov edi, ebx
xor edi, ebx
bswap ecx
jmp 0x50a3a7
call fcn.00508eb6
shl ecx, 8
bswap edi
mov edi, ecx
neg edx
sub ebx, 0x59830dea
add edi, ebx
mov ebx, edi
mov edi, 0x5983d68f
add edi, ebx
and ecx, 0x59845041
xor ecx, 0x59848f0d
xchg ecx, ebx
jmp 0x507a9c
call fcn.00508eb6
xor ecx, ebx
xor edx, ebx
and ecx, ebx
mov ecx, edx
sub edx, 0x598eaa7c
sub ecx, ebx
jmp 0x509c77
push 0x52e82226
mov edi, ebx
xor ecx, 0x598f8beb
mov edx, edi
or ecx, edx
add ecx, 0x5990bc9a
shr edi, 3
add edi, 0x59913c8e
or edi, edx
add ebx, 0x5991b7f6
xchg ecx, ebx
jmp 0x5096d4
call esi
add edi, ecx
sub ecx, 0x59974280
xchg edx, ecx
add edx, ecx
jmp 0x50815b
pop esi
dec edi
xor ebx, edi
xor edi, ecx
and edx, 0x5998d12e
or edi, edx
add edx, edi
add edi, ebx
xchg ebx, ecx
mov edx, ebx
jmp 0x509ecf
push 0x52f3223c
xor edi, ecx
mov ecx, ebx
sub edi, 0x59a2b7e7
ror edx, 0x1f
add ebx, edi
xor ebx, ecx
mov ecx, edi
jmp 0x50809c
pop esi
add edx, ecx
not edx
xor edx, ebx
neg edx
mov edx, ecx
or ebx, edi
shr edx, 0x1d
or edi, edx
not edi
or ecx, 0x59a8afd7
mov ebx, ecx
jmp 0x509089
push 0x40
and ecx, ebx
add edi, 0x59ab1dd3
mov edx, edi
add edx, ebx
shl edx, 0x1b
not edx
xor edi, edx
jmp 0x509137
call fcn.00508eb6
xor edx, 0x59afc77b
inc edx
sub ecx, edi
sub ecx, edi
xchg edi, ebx
sub edi, ecx
sub ecx, ebx
dec ecx
xchg ecx, edx
jmp 0x507e99
pop esi
shr edi, 0x18
and edx, ecx
and edi, ebx
add edi, ecx
xchg edx, edi
and ebx, ecx
neg ebx
jmp 0x507faa
pop esi
add edi, ecx
or edx, ecx
add edx, 0x59c6e74b
xor ecx, edi
shr edi, 0x13
xchg edi, edx
and edi, ebx
xor edx, 0x59c82d60
sub ecx, edx
jmp 0x508245
push 0x52ef1104
dec edi
or ebx, edi
sub edi, edx
dec ecx
mov ecx, edx
or ebx, 0x59c9f608
mov ecx, ebx
mov ebx, 0x59ca80d2
neg edx
mov edx, ecx
and ebx, ecx
or edx, ecx
xor ecx, ebx
jmp 0x508891
push 0x52f6a3a0
mov edx, edi
not edi
sub edx, ecx
not edi
and edx, ebx
shr edx, 0xd
jmp 0x5098b3
call esi
xor ebx, ecx
inc edx
ror ebx, 0x1c
rol edi, 0x19
add edx, ecx
xchg edi, edx
shr ecx, 0x1a
xchg ebx, ecx
add ecx, edi
jmp 0x507e5f