Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetCapture
cmp eax, 0xffffff0b
jne 0x40108e
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff1f
jne 0x40113a
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
ret
call sub.kernel32.dll_GetCurrentThreadId
cmp eax, 0xfffffeeb
jne 0x4011aa
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
ret
call sub.user32.dll_GetCapture
cmp eax, 0xffffff17
jne 0x401242
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
call sub.ntdll.dll_RtlSecondsSince1980ToTime
ret
jmp 0x475695
or edi, 0x53077731
add edi, esi
xchg esi, edi
sub edi, edx
add ebx, esi
inc edi
and edi, edx
and ebx, esi
jmp 0x477d68
pop esi
mov edi, ecx
dec ebx
not ecx
shr edi, 7
xor edi, ebx
xor ecx, ebx
add edi, ecx
sub ebx, 0x54095f4b
sub edi, 0x5409af0d
shr ebx, 2
or edi, ebx
or edx, ecx
sub edi, ebx
or edi, ecx
jmp 0x477161
push 0x530e1103
sub ebx, edi
and edi, ecx
add ebx, ecx
mov edx, edi
xchg ecx, edx
and ecx, 0x54167f3b
sub ebx, edi
or edx, 0x5416f545
jmp 0x478e0a
pop esi
xor ebx, edi
and edi, ecx
sub ecx, 0x541b923b
inc ecx
add ecx, edi
add edx, 0x541c42a7
xor edx, ecx
inc edx
mov edi, ecx
and ecx, ebx
xchg ebx, ecx
ror ecx, 0x1e
jmp 0x47756c
push esp
xor ecx, 0x541e064f
nop
or edx, ecx
and ecx, edx
add ecx, edx
add edi, ecx
jmp 0x47930e
call esi
neg edx
mov edx, ebx
neg ebx
mov edi, 0x54203ebd
and edx, 0x542089d7
or edi, edx
add ebx, ecx
xor edi, edx
jmp 0x479532
mov esi, 0x4132136a
sub ecx, edx
and edx, ebx
shl edx, 0x18
or edi, ecx
bswap ebx
xchg edx, edi
sub edi, ebx
or ecx, edi
add edx, ecx
or edi, ecx
and edx, edi
or edx, edi
jmp 0x475bab
call fcn.004798b0
shl ecx, 0x12
add ebx, edx
or ecx, edx
and edi, edx
mov edi, edx
xor edx, ebx
sub ecx, edi
or edx, 0x542af005
jmp 0x4769a3
mov esi, 0x75624153
add ebx, edi
rol edx, 0xe
mov ecx, 0x5431985d
xor ebx, edi
shl ecx, 2
ror edx, 2
and ecx, 0x5432962f
and edi, edx
jmp 0x4786f2
pop esi
xor ebx, edi
and edx, edi
mov edi, 0x54361e6f
xor ecx, edx
jmp 0x4776f8
push 0x5323cbbf
or edx, ecx
xchg ecx, ebx
and ecx, edx
xor edx, edi
xor edi, edx
xor ebx, edi
xor ecx, 0x544371cf
shl edi, 0x1d
add edi, ebx
ror ecx, 5
nop
sub ebx, ecx
ror edx, 0x10
mov ecx, 0x544520f7
dec ebx
mov edx, ebx
jmp 0x4773bb
call esi
or edi, ebx
inc edi
add edi, ecx
neg edi
xor ecx, edi
and edx, ebx
sub ecx, edi
xor ebx, 0x5458ea75
mov ebx, edi
neg edi
jmp 0x4790da
call fcn.004798b0
mov ecx, 0x5459c1f1
ror ecx, 0xb
or edi, 0x545a5277
xchg ebx, ecx
jmp 0x47634b
pop esi
add ecx, edx
sub ebx, 0x545f4457
shr edi, 0xf
mov ebx, edi
or edx, edi
dec edi
add edx, ebx
shl ebx, 6
inc edi
add ebx, edi
jmp 0x475a8f
call fcn.004798b0
ror edx, 0xb
not ebx
bswap edx
sub ecx, 0x54648451
inc edx
xor edi, ebx
or edi, ebx
neg edi
or ebx, edx
mov edx, ebx
jmp 0x477bc6
pop esi
or edi, edx
xchg edi, ecx
or edx, ecx
mov edx, edi
ror ecx, 0x19
shl edi, 0x15
sub ebx, edi
xor ecx, edx
and ecx, edi
rol ebx, 7
jmp 0x478abb
push 0x531e0fc7
mov edi, edx
shl ecx, 0x10
xor edi, ecx
xor edi, ecx
xor ebx, edi
or edi, 0x54a207a3
jmp 0x47959e
push 0x531220a3
and edx, ebx
xor edx, ecx
mov ecx, edx
and edi, 0x54b78247
not ebx
xchg ebx, edx
and edx, ebx
mov ebx, ecx
not ecx
or ecx, 0x54b90a8b
sub edi, edx
or ecx, edx
xchg edx, edi
or ebx, 0x54ba053d
jmp 0x476faf
mov esi, 0x75624153
or edi, edx
add edi, ebx
or edi, 0x54badbd1
xor ecx, ebx
add ebx, 0x54bb5961
mov ecx, ebx
sub ebx, ecx
add ebx, edi
bswap ebx
xor edi, ecx
bswap ebx
add ebx, ecx
xchg ecx, edx
and ecx, 0x54bd9b77
jmp 0x477673
call esi
inc ecx
rol edi, 0x10
xor edi, ebx
or edi, ebx
or edi, ebx
and edi, edx
jmp 0x475e61
call esi
and edx, ebx
xor ecx, 0x54c51e73
add edx, ebx
and edx, 0x54c59ae7
dec ecx
neg edi
xor edx, ecx
dec ecx
xor ecx, 0x54c6ea99
bswap edx
xor ecx, 0x54c7c691
xor edi, 0x54c80281
xchg ebx, ecx
neg ecx
mov ebx, 0x54c8b5c1
add ebx, edi
jmp 0x47857d
pop esi
inc ecx
mov ecx, edi
xor ecx, edi
xchg ebx, edi
xor edx, ecx
xchg ebx, ecx
xor ebx, edx
or ecx, edi
jmp 0x47779c
pop esi
mov ecx, ebx
or edx, ecx
and ecx, edx
or edi, ecx
shr ecx, 0x1f
rol ebx, 8
and ecx, 0x54d81b07
mov edx, edi
mov edx, ecx
sub edi, ecx
mov ecx, 0x54d9124f
xor ebx, 0x54d94e11
xchg edx, ecx
nop
jmp 0x4767e9
pop esi
or edi, edx
not edx
sub ecx, 0x54e39adb
or edi, 0x54e3d61f
xchg edi, ecx
neg ebx
add ebx, 0x54e49885
or ecx, ebx
mov edi, ecx
or ecx, ebx
rol edx, 0x16
xor edi, 0x54e5bf87
jmp 0x4761e0
push esp
sub edi, 0x54effe83
xor ebx, 0x54f03e99
add ecx, edx
add ebx, 0x54f0e567
mov ebx, ecx
or ecx, edx
ror edx, 5
or edx, 0x54f1e2c3
mov edx, ebx
sub edi, ebx
and edx, 0x54f2ae0f
xor ecx, edx
and edi, ebx
or ebx, 0x54f369d7
add ebx, edi
rol ebx, 0x1f
jmp 0x47587b
pop esi
dec ecx
mov ebx, ecx
ror edi, 0x10
and ecx, 0x54f4fec7
add ecx, edi
ror ecx, 0x10
xor ecx, 0x54f5cba1
shr edx, 1
jmp 0x4761cb
push 0x5314d5eb
xor edi, edx
dec edi
or edx, edi
xor ebx, ecx
nop
or ebx, edi
jmp 0x4796c4
push 0x532ca419
xor ebx, edx
xor edx, ebx
mov edi, ecx
sub edi, edx
nop
sub ebx, edi
add ebx, ecx
xchg ebx, edi
add edx, ecx
xor ecx, edi
not ecx
shl ecx, 5
jmp 0x47608c
mov esi, 0x75624153
xchg edx, ebx
sub edx, ebx
mov edi, ecx
xor ecx, ebx
ror edx, 0x1e
neg ecx
xor edx, 0x551e86c7
add ebx, 0x551ec21f
ror ecx, 2
bswap ebx
shr edx, 0xf
mov edx, edi
shl edi, 8
xor edx, 0x55203883
jmp 0x477594
call esi
mov edx, 0x552d6c63
sub edi, 0x552da799
xor ebx, ecx
rol edi, 0x11
shr ebx, 0x18
or ebx, edi
add edx, ebx
or ebx, edx
and ebx, edx
xor edx, ecx
add ecx, ebx
xchg ecx, ebx
jmp 0x477d07
push 0x5318e5cb
dec edx
and ecx, 0x55308d71
xor ecx, edx
add edi, 0x55310355
and edx, edi
shr edi, 9
or edx, ecx
xchg edi, ebx
add edi, ebx
add edi, edx
rol ecx, 0x1c
and ecx, edi
mov edi, edx
mov ebx, ecx
add ebx, 0x55339163
bswap ebx
jmp 0x4779b6
mov esi, 0x75624153
shr ecx, 0x1b
xchg ecx, edx
sub ecx, 0x55349781
add ecx, edx
xor edi, ecx
add edi, ebx
jmp 0x476978
push 0x530dcd0d
xchg edx, edi
xor edi, 0x5550aeb5
xchg edi, edx
bswap edx
xchg ecx, edi
sub edx, edi
xor ebx, ecx
add edx, ebx
mov ecx, edi
mov ecx, edi
jmp 0x4757fa
pop esi
xchg ecx, ebx
sub ecx, ebx
xchg edx, ebx
xor edx, 0x55538f89
mov ebx, edi
xchg ebx, edx
or ebx, edi
and edx, ebx
jmp 0x4784c5
pop esi
mov edi, 0x5559cb9d
or edx, 0x555a07d7
neg edx
xor edi, 0x555a7fcf
mov edx, ecx
mov ebx, edx
jmp 0x477fdd
push 0x532836e5
sub ecx, 0x55665019
mov ebx, ecx
or ebx, edi
xor edi, ebx
xchg edx, ecx
or edx, ecx
or edx, edi
sub edx, ecx
xchg edx, ebx
xor edx, edi
sub ecx, 0x5568a5e7
sub edi, 0x5568e1e1
jmp 0x478a95
call fcn.004798b0
xor edi, 0x556acdcf
not ecx
add ebx, edx
xchg ecx, ebx
mov edi, ecx
shr ecx, 0x17
or edx, 0x556c3c83
sub edi, edx
mov edi, ebx
sub edx, 0x556d7923
jmp 0x4773f5
call esi
add edx, ecx
sub ecx, 0x556e0ef3
xor edx, 0x556e4e5d
sub ebx, ecx
or ecx, edx
xchg edx, edi
or ecx, edx
nop
jmp 0x4793ba
pop esi
inc edi
mov edx, ecx
shl ecx, 0xb
rol edi, 0x14
or edx, ebx
add edi, ebx
sub ebx, edx
and ebx, edx
xor edi, edx
or edi, ebx
jmp 0x478132
call fcn.004798b0
mov ecx, edi
mov ebx, 0x557befc9
inc ebx
xor ecx, edi
neg edi
mov edi, edx
mov edi, ecx
neg edx
add edi, ecx
and edi, ecx
add ecx, edi
add ebx, ecx
sub ecx, ebx
neg ebx
jmp 0x478566
pop esi
or edi, ecx
and edx, edi
shr edi, 0x18
add ebx, edi
mov ecx, ebx
rol edx, 9
or edi, ecx
sub ebx, edi
sub ecx, 0x55847233
add ecx, ebx
add edi, 0x5584ee07
add edi, 0x55852d81
jmp 0x476868
pop esi
sub ecx, ebx
rol ebx, 0x1e
or ebx, edi
add edx, ebx
xchg edi, edx
sub edi, 0x559ae727
neg edx
ror ebx, 1
ror edx, 5
or edx, ebx
mov ebx, ecx
bswap ecx
sub edx, 0x559cb3b3
and edi, 0x559cf28f
ror edx, 0x1e
xor ecx, 0x559d738f
jmp 0x477e26
pop esi
and ebx, edx
or edi, ebx
mov edi, ecx
and ecx, ebx
inc edx
and ebx, edi
shr ebx, 0x14
not ecx
sub edx, 0x55a01557
xchg edx, ecx
not edx
or edx, ecx
jmp 0x479093
mov esi, 0x75624153
add ebx, edi
sub edi, 0x55b2186f
mov ebx, ecx
xchg ebx, edx
xchg edi, edx
mov edi, edx
xchg ecx, edi
and edx, 0x55b384a7
jmp 0x47706b
push 0x530d86b9
not edi
rol edi, 0x19
or ebx, 0x55b44eaf
sub edi, ebx
inc edx
and ecx, 0x55b50107
or ecx, edx
xor ecx, 0x55b58635
xor ecx, 0x55b5c25f
and ecx, 0x55b5fd2b
jmp 0x4767c7
call esi
xchg edx, ebx
neg ecx
xor edi, ecx
and edi, edx
bswap edx
xchg edi, ecx
xor edi, 0x55b7b849
sub ecx, 0x55b7f469
dec edi
bswap ebx
jmp 0x4794bd
call esi
add ecx, 0x55c414ad
xchg edi, ebx
rol ebx, 0x1b
mov edx, edi
and edi, 0x55c50011
shl edi, 0x13
not edi
and ebx, 0x55c5c451
sub edx, 0x55c60065
xor edx, 0x55c63c4b
jmp 0x4786a8
push 0x401400
rol ebx, 0x1e
xor edx, 0x55cc3113
bswap ecx
and edx, edi
or edx, edi
and ebx, edx
rol ebx, 0x1c
and edx, edi
ror ebx, 0x1a
and ebx, 0x55cf54b3
sub edi, edx
sub edi, ecx
jmp 0x47610a
push 0x532e6a37
and ecx, edi
bswap edx
xor ebx, edx
ror edx, 0x12
xchg ebx, edx
or ebx, ecx
xor edi, ebx
add edx, ebx
jmp 0x4774e3
push 0x53149029
xor edi, ebx
and ebx, ecx
bswap edi
xor edx, ebx
and ecx, 0x55e161bd
mov ebx, ecx
neg ecx
xchg ebx, edx
jmp 0x476439
push 0x5312658f
inc ecx
rol ebx, 0xb
or edi, ecx
xchg edi, ebx
add ebx, edx
or edi, 0x55e39a47
shl edi, 0xf
dec edx
rol ecx, 0x12
xor ebx, ecx
xor ebx, edx
dec ebx
mov edi, edx
or edi, ecx
jmp 0x47771d
call fcn.004798b0
dec ecx
sub edx, edi
mov ebx, ecx
dec edi
xchg edi, edx
xchg ebx, ecx
xchg ebx, edx
mov edi, ecx
and ecx, edi
neg ebx
dec ecx
and edi, 0x55f1d935
jmp 0x475b8d
push 0x53219b9b
not ebx
add ecx, 0x55f4e935
xor ebx, 0x55f525a9
mov ecx, ebx
sub ecx, ebx
add ecx, 0x55f5e369
sub ebx, 0x55f61e35
sub edx, edi
jmp 0x4764fe
push 0x532e1ecd
xchg ebx, ecx
xor edx, edi
add edi, 0x55f724c1
xchg ebx, ecx
not ebx
bswap ecx
jmp 0x476f4d
pop esi
mov ebx, edi
add edi, ebx
add edx, ecx
sub ecx, ebx
and edx, ebx
xor ecx, ebx
bswap edi
inc edx
xor edx, ebx
bswap edi
ror ecx, 0xa
inc edi
jmp 0x47629a
pop esi
inc edi
or ecx, edi
and ecx, 0x561ff61d
shr edi, 0xa
add ebx, 0x5620769b
add edx, edi
sub ebx, ecx
not ecx
xor edi, ecx
shl edx, 2
jmp 0x475856
mov esi, 0x75624153
mov ecx, 0x56301bed
or edi, 0x56305b83
xchg edx, ebx
and ecx, 0x5630da03
xchg ebx, edi
xchg ecx, edi
or edi, edx
neg ebx
neg ecx
mov edx, 0x5632685d
xor edi, ecx
mov edx, 0x5632e647
and ecx, ebx
or ecx, edi
inc ecx
add edx, edi
jmp 0x477ff2
call esi
add ebx, ecx
mov ecx, ebx
xor ebx, edi
and edx, ecx
inc edx
rol edx, 1
xor edx, 0x5635bb99
xor ecx, ebx
or ecx, edx
xor edx, 0x563677d9
rol edi, 0xc
or ecx, 0x5636f877
jmp 0x479866
push 0x532eb5dd
xor ebx, ecx
or edx, 0x56459337
xor edx, 0x5645d3a3
sub ecx, 0x564613c3
sub ecx, 0x5646630d
and ebx, 0x5646a37b
mov ebx, ecx
rol edi, 9
ror ebx, 0xa
shr edi, 9
shr ecx, 2
or edi, 0x5648be5b
jmp 0x477e4f
push 0x5320ca61
and ecx, 0x564bcf11
xchg ebx, ecx
neg ebx
sub edx, 0x564c9eb3
and edi, 0x564cdee9
inc edx
xchg ecx, edx
and edi, edx
jmp 0x478ae4
pop esi
xor edi, ecx
ror edx, 0x15
shr edx, 5
mov ecx, 0x564ec1b3
sub edi, 0x564f01c9
shr edx, 0x17
xchg ecx, edx
bswap ebx
xchg edx, edi
add ebx, 0x565040fb
jmp 0x476a0b
call fcn.004798b0
add ebx, 0x56509bb5
xchg ecx, ebx
add edx, 0x56511a2f
shl ecx, 0x13
mov edx, ebx
xchg ecx, edx
or ecx, edx
sub ecx, edi
sub edi, ecx
and ecx, 0x5652df29
sub edx, ecx
and edi, edx
sub ecx, edx
xor ebx, edi
jmp 0x4765ec
call fcn.004798b0
or edx, edi
not edx
ror ebx, 0xd
or ebx, 0x566236c5
xchg edx, edi
xor ecx, edx
or edx, ecx
ror edi, 0x1f
sub edi, 0x5663e137
or ecx, ebx
and ecx, edi
or edi, edx
jmp 0x476e42
push 0x532155a9
sub edi, 0x566ad2e1
dec edi
rol edx, 0xc
xor ebx, ecx
or edi, ecx
or edx, edi
jmp 0x4770ae
push 0x531dca7f
bswap edi
add ebx, ecx
add ecx, 0x566dd359
or ecx, edx
xchg edx, ecx
add edx, 0x566ebe5d
dec edi
and edx, ecx
sub edi, ebx
or ecx, edi
jmp 0x475f2f
mov esi, 0x75624153
neg ecx
mov edx, 0x56703b07
inc edx
mov ebx, ecx
shl ecx, 0x1b
or edi, 0x56712803
add edi, ecx
sub edx, ecx
neg ebx
or ecx, edi
add edx, ebx
neg edx
and edi, ebx
or edx, ebx
or edx, ecx
mov edi, ecx
jmp 0x47591a
push 0x531e9b11
xchg ebx, ecx
sub edi, 0x5677f627
mov edi, 0x5678413f
and edx, ebx
rol ecx, 0x1d
or ecx, edx
jmp 0x478312
pop esi
and ecx, edi
add edx, ecx
mov ebx, 0x5679ba15
mov ecx, 0x5679f693
not ebx
or edx, ecx
or ecx, 0x567aba4f
shl ecx, 0x15
dec ebx
xchg ebx, edi
jmp 0x477547
push 0x531b13c7
shr edi, 0x15
xchg edi, ebx
or ebx, ecx
or edi, ecx
rol ecx, 0x19
mov ecx, edi
jmp 0x4789e3
mov esi, 0x75624153
mov edx, ecx
dec ebx
add edx, ebx
shl ebx, 4
or edi, ecx
xchg edi, edx
jmp 0x476a47
call fcn.004798b0
sub edx, ebx
mov edx, 0x5680b247
sub ecx, edi
add ecx, edi
shr ecx, 0x1f
add edi, ebx
xchg ebx, ecx
and edi, 0x56822161
jmp 0x476d77
mov esi, 0x75624153
inc edx
sub edi, ebx
and ebx, edi
add edx, edi
jmp 0x4797da
pop esi
xchg ecx, edi
sub edi, 0x56b0ab59
mov ecx, edx
xor edi, 0x56b12887
mov edi, ecx
mov edx, ebx
xchg edx, ebx
shr ecx, 0x16
mov edx, ebx
xchg ebx, ecx
add ecx, edi
xchg edx, edi
jmp 0x47605a
call fcn.004798b0
sub ebx, edi
add edx, edi
xor edx, ecx
add edx, 0x56be258f
or ecx, ebx
sub ebx, edi
xor ecx, edx
add ebx, edi
dec ebx
add ecx, edx
not ecx
xchg edx, ecx
jmp 0x478a6d
pop esi
ror ebx, 4
or ecx, edx
and ecx, edi
add edx, ecx
or edi, 0x56c7062d
xchg edx, edi
and edi, ebx
mov ebx, 0x56c7b6d3
and edx, ebx
inc edi
jmp 0x479213
call esi
mov edx, edi
shr ecx, 4
xchg edi, ecx
xchg ecx, ebx
jmp 0x4772ea
push 0x74295
sub edi, 0x56ccbfb3
xchg ecx, ebx
xchg ebx, ecx
rol ebx, 0x18
and ebx, edi
xchg edi, ecx
jmp 0x476e8e
pop esi
mov ebx, 0x56e5e03d
bswap ecx
sub ecx, 0x56e65911
sub edx, ecx
neg edx
ror edx, 3
xchg ebx, ecx
and edi, 0x56e7845f
not edi
xchg edx, ecx
xor ebx, 0x56e84695
or edx, 0x56e88293
dec edx
mov ecx, ebx
jmp 0x477b7c
push 0x530d3817
xchg edx, edi
add edi, 0x56ec6977
sub edx, ebx
sub edi, edx
add edx, 0x56ed2831
mov edx, ecx
sub ebx, 0x56ed9caf
xor ecx, edx
jmp 0x476d45
push 0x532ab07f
sub edx, 0x56f98539
add edx, 0x56f9c165
add ebx, edx
xchg edx, ecx
dec ebx
sub edi, 0x56fb3569
and ecx, 0x56fbb6e3
xchg edi, ebx
jmp 0x478bf5
push 0x532f0025
ror edx, 0x1a
mov edi, 0x56fd25a9
shl ecx, 0x16
ror edi, 0x13
jmp 0x478cb8
pop esi
and ecx, ebx
sub edx, edi
xor edi, edx
inc edi
xor ebx, ecx
sub ebx, edx
mov edi, edx
not edi
xchg ebx, edx
or edx, edi
or ecx, edi
or edi, 0x57032e9f
add ebx, edx
xchg edx, ebx
jmp 0x477a5e
push 0x531acd9b
xor edi, ebx
add ebx, edi
not edx
xchg ecx, ebx
xor edi, ecx
or edi, ecx
dec edi
xor edx, ecx
bswap ebx
sub edx, 0x570dc561
or ecx, edi
not edx
add ecx, 0x570e83bb
mov edi, edx
xchg edi, ecx
neg ebx
jmp 0x4777de
pop esi
or ebx, ecx
or edx, ebx
neg ebx
xchg edi, edx
and edi, ecx
and edi, 0x5716a927
neg edx
xor ebx, edi
xchg edi, ebx
sub edx, ebx
and edi, edx
xchg edi, ecx
shl edx, 0xb
xor edi, edx
jmp 0x47638b
pop esi
rol ecx, 0x1e
add edx, edi
bswap ecx
mov ecx, ebx
rol ebx, 0x11
shl edx, 0x18
jmp 0x476bda
call fcn.004798b0
inc ecx
bswap ecx
add ecx, ebx
xchg edx, ebx
xor ebx, 0x571e483f
or ecx, edi
dec edx
xor edx, 0x571f06e1
sub ecx, 0x571f5695
mov edi, ebx
or edi, 0x571fd443
bswap ebx
mov edx, ebx
xor edi, edx
not ebx
and ebx, edi
jmp 0x47611d
push 0x5327f08f
mov ebx, edx
or ecx, ebx
xor ebx, ecx
sub ecx, 0x5726807f
add ecx, edi
xchg ebx, edi
mov edi, ebx
and ebx, 0x5727787f
mov ecx, ebx
add ebx, edx
jmp 0x476930
push 0x53103c43
or ecx, 0x57361123
and ebx, edi
and edx, 0x573686fd
add edx, edi
xchg ebx, edx
mov edi, ebx
add ebx, edi
xchg edx, edi
and edi, ebx
and edx, 0x5b1464fb
jmp 0x4781b9
push 0x53108083
rol edx, 0x1b
and ebx, ecx
xor ebx, ecx
not ebx
sub ecx, ebx
dec edi
jmp 0x4788cf
mov esi, 0x75624153
rol ecx, 8
bswap ebx
shr edi, 0x1d
or ebx, ecx
jmp 0x477afe
call esi
and edi, 0x5b4c58c1
inc edi
xchg ebx, edx
xchg edi, edx
or edi, edx
add ebx, ecx
or edi, ebx
add ebx, edi
jmp 0x477e89
push 0x5317897d
or ebx, ecx
sub ecx, 0x5b52218d
sub ecx, 0x5b525d95
add edx, edi
inc ebx
add edx, 0x5b530e09
mov ecx, 0x5b53597f
or ebx, 0x5b5394b7
jmp 0x47664b
call esi
and ecx, edx
shl ecx, 0x19
xchg ebx, edi
nop
dec edx
shl ecx, 8
not edx
and edi, edx
jmp 0x476a95
pop esi
rol edx, 3
xor ecx, 0x5b5c2467
mov ecx, edi
shr edx, 8
add ecx, edx
add ebx, ecx
xor edx, 0x5b5de7a3
not edx
sub ebx, 0x5b5e6907
xor ecx, ebx
shl edi, 9
xchg edx, edi
xchg ecx, edi
sub edx, 0x5b60896f
jmp 0x4758f7
push 0x53144b13
xor ecx, edi
xchg edi, edx
add edi, ecx
mov ebx, 0x5b666fd3
shl ecx, 1
xor ecx, ebx
shr ebx, 0x18
mov edx, ebx
mov edx, edi
inc ecx
ror edx, 0x16
mov edx, ebx
shl ecx, 0x1b
bswap ebx
jmp 0x476f91
pop esi
and edx, ebx
shr edi, 0x19
or ecx, edi
xchg ebx, edi
xor ecx, 0x5b77e679
bswap ecx
xor ecx, edx
add edi, edx
mov ebx, ecx
or edi, ecx
not edi
xor edx, ebx
jmp 0x4770d8
push 0x531a8845
neg edi
neg edi
and ebx, ecx
sub ecx, edx
xchg edx, ecx
sub edx, 0x5b7bd451
sub ebx, 0x5b7c1049
ror ebx, 0x1a
sub ebx, edx
sub ebx, edx
jmp 0x477f16
call fcn.004798b0
sub edi, ebx
xor ecx, 0x5b7d5b8d
sub edx, ecx
xor ecx, ebx
mov ebx, edx
sub ebx, edx
jmp 0x47943d
push 0x531a42c7
xchg ecx, edi
shl ecx, 0x10
shl edi, 0x18
mov edi, ecx
rol ecx, 6
and edi, edx
neg ebx
not ebx
xchg edx, ecx
add edi, ebx
jmp 0x4786cb
mov esi, 0x75624153
xchg ecx, edi
mov ecx, 0x5b9f4843
xor ecx, edi
mov ecx, edx
sub ecx, edi
and ebx, edx
xchg edi, ebx
rol ecx, 7
jmp 0x47925a
pop esi
mov edx, ecx
mov ebx, 0x5baf9ab5
xor ebx, edi
add ecx, edi
and ecx, 0x5bb055af
not edx
shl edi, 3
sub edi, ecx
rol edi, 0x18
add edx, ecx
shl edx, 0x1f
xor ecx, edx
add edx, ebx
rol edi, 0x18
jmp 0x478b71
push 0x531b5805
and ecx, ebx
and ebx, edi
xor edi, edx
mov ecx, edi
and edx, ebx
sub edi, edx
shl ecx, 0x14
mov edi, 0x5bb4bbc9
inc ebx
sub edx, ecx
sub edx, edi
and edx, ecx
jmp 0x476d23
call esi
mov edi, ebx
and edx, edi
sub ebx, edx
bswap edx
add ebx, ecx
and edx, edi
jmp 0x477f92
push 0x53287c47
or ebx, edi
and edi, ebx
mov ebx, edi
and edx, ecx
mov ecx, 0x5bc1992d
or ecx, ebx
or ecx, ebx
xor ecx, 0x5bc25567
xor edx, ecx
shl edx, 9
jmp 0x4777f6
push 0x5327ab4d
xor ebx, ecx
not ebx
mov edi, ecx
xchg edi, edx
or ecx, 0x5bc44abb
neg edx
sub ecx, 0x5bc4cb9f
sub ebx, edi
xor ecx, ebx
mov ecx, 0x5bc5878b
jmp 0x478057
push 0x53210f85
neg edi
xor edi, edx
mov ecx, edi
and edx, 0x5bc69cd7
mov edi, ecx
and edi, ebx
mov edi, ecx
mov edx, ecx
neg ebx
add ecx, edx
and edx, edi
sub ebx, ecx
jmp 0x4776de
push 0x53140637
bswap ebx
add edx, 0x5bd0ec51
add edx, ebx
sub edx, ebx
shr edx, 0x13
not edx
or edi, ecx
bswap ecx
shr edi, 3
mov ecx, edx
jmp 0x4785fb
mov esi, 0x75624153
bswap edi
shl ebx, 0x1c
rol edi, 0x12
xor edx, edi
or ebx, 0x5bdc87ab
or ecx, 0x5bdcc79d
and edx, ebx
sub ebx, edx
jmp 0x47780c
pop esi
sub ebx, 0x5bdd9d59
and edi, 0x5bdddd4b
shr ebx, 9
mov ecx, ebx
and ecx, edx
mov edi, 0x5bdee775
jmp 0x476c14
push 0x532f4a99
xor ecx, ebx
shr edi, 6
add ecx, 0x5be9acc5
or edi, edx
inc ebx
sub edi, ebx
jmp fcn.0047708e
mov esi, 0x75624153
add ecx, edx
ror edi, 7
and ebx, edx
add edx, 0x5c045459
sub ebx, edi
inc ecx
add ebx, ecx
sub edx, ebx
bswap edx
shr edi, 0xd
rol ecx, 6
and ebx, edx
mov ecx, edx
xor ebx, edx
jmp 0x475c38
pop esi
xchg edx, ecx
add edx, ebx
or ebx, edi
shr ebx, 0xe
mov ebx, 0x5c326c0b
shr edx, 0x16
and ebx, ecx
sub edi, ebx
xor ebx, edx
or edi, 0x5c33b7ab
and edx, ecx
or ecx, edx
xor ecx, edi
mov edi, 0x5c34b157
and ecx, ebx
inc edi
jmp 0x4759ce
pop esi
or ecx, edi
and ecx, 0x5c36f771
and ecx, edi
neg ecx
mov ebx, edi
xchg ebx, ecx
or edi, ecx
xor edi, 0x5c387f2f
or edx, edi
or ebx, ecx
mov ebx, 0x5c393a7d
rol edx, 0x12
sub edi, edx
mov edx, ebx
jmp 0x478c19
pop esi
or ebx, edx
sub ebx, edx
sub ecx, edx
add edi, 0x5c4d5cc7
mov ebx, 0x5c4dace7
xchg ebx, edx
rol ecx, 1
mov edx, edi
add edx, ecx
or edx, ecx
jmp 0x475bfa
call fcn.004798b0
xor ecx, 0x5c52e0d3
not edi
mov ebx, ecx
not ecx
sub edi, edx
or edx, ebx
xchg ecx, edi
mov ebx, edx
rol ebx, 8
sub edi, 0x5c55263f
and ebx, 0x5c55667b
xor ebx, ecx
and ebx, 0x5c55e439
or ebx, edi
jmp 0x47847d
push 0x40
bswap ecx
sub ecx, edx
or ecx, 0x5c5fe8a7
xchg edx, ebx
ror ebx, 0xf
sub edx, 0x5c60a819
ror ebx, 0xc
and ebx, edi
nop
not edx
shr ebx, 0x19
shr edx, 0x15
jmp 0x477bd6
pop esi
and edx, 0x5c6bfe77
or ebx, edi
and edx, edi
add ecx, 0x5c6cb813
and edi, 0x5c6cf833
sub edx, 0x5c6d382d
and ebx, 0x5c6d88f7
and ebx, 0x5c6dc783
and ecx, edx
or edi, edx
dec ebx
or edi, ebx
and edi, edx
neg ecx
jmp 0x4789b6
call esi
and edx, 0x5c754f3f
mov ebx, ecx
shl edi, 0x1f
xor edi, ebx
xor edx, ecx
shl edi, 0xc
and ebx, ecx
and edi, ecx
dec edx
shl edx, 0x10
xor edx, 0x5c77d487
xchg ebx, edx
jmp 0x475739
pop esi
xchg ebx, edi
xchg ebx, edx
not edx
or edi, 0x5c81dd55
sub edx, ebx
xchg ebx, ecx
ror edx, 0x19
and ebx, ecx
inc edi
xchg ebx, edi
jmp 0x47644d
pop esi
and ebx, 0x5c890941
sub edx, ebx
xor ecx, 0x5c898757
xor ecx, edx
not edx
add edx, 0x5c8a4595
or edx, 0x5c8a85e3
add ecx, edx
sub ebx, 0x5c8b124b
ror ecx, 0xe
add ecx, 0x5c8b920d
xchg ebx, ecx
add edi, edx
dec ebx
sub edi, ecx
xor ebx, 0x5c8ccd0b
jmp 0x478824
push 0x531e55ff
shr edi, 3
and edx, edi
mov edi, edx
shr edi, 0xd
mov ecx, edx
shr edi, 4
xor ecx, ebx
mov edx, ebx
jmp 0x47777e
push 0x53151a75
sub ebx, edi
sub edi, ecx
rol edi, 8
xor edx, edi
add edi, ebx
sub ebx, edx
shr ecx, 8
ror edi, 3
jmp 0x475982
call fcn.004798b0
and edi, edx
inc ebx
rol ebx, 0xb
add ecx, ebx
and ecx, edx
dec edi
xchg ecx, edi
add ebx, ecx
inc ebx
sub edx, ecx
jmp 0x475890
pop esi
ror ecx, 0x19
xor edi, edx
or edi, 0x5cc6f611
shr edx, 0xb
neg ecx
xor edi, ebx
add ecx, 0x5cc8067b
or edi, edx
jmp 0x476614