Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Query or enumerate registry value

Disassembly:
or esi, edi
call sub.user32.dll_GetCapture
and ecx, edx
or edi, edx
add ecx, edx
mov ecx, edx
add ecx, 0x4ef75cb2
cmp eax, 0xfffffeea
jne 0x4010ad
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
ret
xor edx, ecx
or edi, esi
and ecx, esi
mov edx, esi
mov esi, ecx
call sub.user32.dll_GetCapture
sub edi, edx
and ecx, esi
and edx, ecx
cmp eax, 0xfffffefa
jne 0x401132
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
ret
or edx, 0x4f0060a0
and ecx, edx
xor ecx, edi
shl ecx, 0xa
add esi, ecx
call sub.user32.dll_GetCapture
mov ecx, 0x4f029e68
shl edi, 3
sub edi, 0x4f0379b4
and ecx, edx
mov esi, edx
cmp eax, 0xfffffee8
jne 0x4011be
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
ret
not edi
neg ecx
inc edx
or esi, edx
shr esi, 0x1c
call sub.user32.dll_GetCapture
add esi, edi
nop
or edx, edi
dec ecx
sub esi, edi
cmp eax, 0xfffffed6
jne 0x401277
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
call sub.advapi32.dll_RegQueryMultipleValuesW
ret
jmp 0x4b7501
add ecx, esi
or edx, esi
shr ecx, 6
add edi, esi
sub esi, ecx
jmp 0x4b8e0c
push 0x4fd96a06
xchg ebx, edi
shl ecx, 7
mov ebx, ecx
xor edi, 0x55b2a586
rol ebx, 0x15
xchg edi, ecx
xor edx, ecx
xor ecx, edi
bswap ecx
bswap ebx
xor edx, ebx
mov ecx, 0x55b672ee
mov edi, ebx
xchg ebx, edi
jmp 0x4b9900
mov esi, 0x6332a2e
and edi, ebx
xchg ecx, edi
xchg edx, edi
rol ecx, 0xb
xchg ebx, edx
rol ebx, 0x13
xor edx, ebx
shl ebx, 0x17
jmp 0x4b763b
call fcn.004b80e5
and edx, 0x55d3a170
or ecx, ebx
shl edx, 4
bswap edx
mov edx, ebx
or ecx, edi
jmp 0x4b8e6a
pop esi
xor ecx, 0x55d677bc
and ebx, ecx
nop
mov ebx, edx
sub edi, edx
shl ebx, 0xe
jmp 0x4b87b2
pop esi
not edx
and ecx, 0x5607498e
shr ebx, 0x13
sub edx, ebx
inc edi
neg edx
bswap edx
ror edi, 0x16
jmp 0x4b9a95
pop esi
or edx, ecx
xchg ecx, edx
sub edi, ecx
or edi, ecx
jmp 0x4b8912
push 0x4fd0da42
add ebx, ecx
mov edx, edi
xchg ebx, edi
sub edx, ecx
add ebx, edi
mov ebx, ecx
neg edi
not edx
bswap edi
and edx, ebx
add ebx, edx
xchg ecx, edi
jmp 0x4b7c15
push 0x4fb8b5b8
sub ecx, edi
and ebx, 0x563dc320
xchg edx, edi
neg ebx
mov ecx, 0x563f1a0c
sub ebx, edx
neg ebx
dec ebx
sub ebx, 0x564142f0
dec ecx
xor edx, ebx
and edi, edx
jmp 0x4b878b
push 0x4fbb20a4
shr edx, 8
sub edx, ebx
dec edi
and edx, edi
mov ebx, edx
shr ecx, 0x1e
jmp 0x4b9d3a
pop esi
or edi, 0x5667e35e
and ecx, edi
inc ebx
sub ecx, edi
ror edx, 0x14
or ebx, ecx
inc edi
xchg edi, ebx
xchg ecx, edx
neg edi
jmp 0x4b8cb6
call fcn.004b80e5
bswap edx
add edi, ebx
or edx, edi
xor edi, edx
rol ecx, 9
shr ecx, 0x1e
xor edx, ecx
xor ebx, edi
not ebx
or edi, 0x567097f6
jmp 0x4b9748
push 0x4fd365be
mov ecx, 0x56785084
dec ecx
xor ecx, edi
sub ebx, ecx
mov edx, ebx
add edi, ecx
mov edi, edx
rol edx, 4
jmp 0x4b8548
push 0x40
mov edx, 0x56856bbe
xor edx, ecx
jmp 0x4b99b9
pop esi
mov edi, 0x568686b4
mov ebx, edi
or edx, ebx
mov edi, 0x5687c540
or edi, ecx
or edx, ebx
sub ebx, 0x568926fe
add edx, ecx
add ebx, edi
sub ecx, edx
mov edi, 0x568b1870
add ecx, 0x568b86aa
jmp 0x4b82ef
pop esi
or ebx, ecx
mov edx, 0x568c98a8
xchg edx, ebx
xchg ebx, edx
ror edx, 0x14
xor edx, ebx
ror edx, 5
rol ecx, 3
jmp 0x4b77ea
push 0x4fd12978
or ecx, ebx
xchg edi, ecx
or ecx, 0x5695a740
neg ebx
inc ebx
neg ecx
not edx
not ecx
add ebx, edi
or ebx, edi
jmp 0x4b9f9e
push 0x4fd918d6
xor ecx, edx
dec edx
add ebx, edx
mov ebx, edi
xor edi, ecx
sub ecx, edx
dec ebx
or edx, 0x56a0d354
mov edi, edx
mov ebx, edx
bswap edx
shr ebx, 3
jmp 0x4b753e
call esi
sub edx, ebx
and ebx, edi
and ecx, edi
add ebx, edi
or ebx, edx
add ebx, 0x56a56314
xor ecx, ebx
or edx, 0x56a654ee
jmp 0x4b9dbc
pop esi
sub ecx, edx
ror ecx, 0x13
and edx, edi
mov ebx, ecx
sub edx, 0x56a95d12
add ebx, ecx
sub edi, ecx
and edx, 0x56aad5d6
and edx, 0x56ab4702
add ebx, edx
jmp 0x4b84eb
pop esi
xor ebx, edi
bswap ecx
sub ebx, edi
xchg edx, ebx
jmp 0x4b8011
pop esi
bswap edx
xor ebx, edx
neg edi
add edx, ecx
jmp 0x4b8bbd
pop esi
and edx, ecx
xchg ecx, edi
ror ecx, 0xd
add ebx, edi
xchg edi, edx
neg ecx
or ecx, edi
or ebx, edi
xchg edi, ecx
add edx, edi
jmp 0x4b7805
call esi
xchg edi, ebx
mov edi, ecx
or edi, 0x56c01e24
and edx, edi
nop
sub ecx, ebx
mov ecx, edi
add edx, 0x56c27d24
jmp 0x4b9d66
call fcn.004b80e5
sub ecx, 0x56d6d184
sub ecx, ebx
and edi, ebx
ror edx, 1
ror ecx, 6
and edi, ebx
nop
nop
add edx, ebx
xor ebx, 0x56dae7ca
jmp 0x4b8568
push 0x4fc8122c
and edi, ecx
sub edx, 0x56e51c58
xor edi, 0x56e5b5f4
shl edi, 2
or ecx, edi
neg edx
neg edi
mov ebx, ecx
not edi
and edx, edi
and edi, ebx
add edx, ecx
inc ecx
xor edx, ecx
jmp 0x4b9033
push 0x4fc279d4
or edx, 0x56ec255c
or ebx, edx
xor ebx, edi
add ebx, ecx
sub edi, edx
xor ecx, edx
dec ecx
and edx, 0x56ef52cc
mov edx, 0x56efc972
xor edx, ecx
mov ebx, edi
dec ecx
jmp 0x4b807d
pop esi
or ecx, 0x56ff2120
and ebx, edi
sub ebx, edi
neg ecx
and ecx, 0x57016c06
bswap ecx
xor ebx, ecx
xor ecx, edx
jmp 0x4b7ab3
pop esi
mov ebx, edx
sub ebx, 0x570c2c48
and ecx, 0x570cad90
add ebx, 0x570d6526
neg ecx
or edx, 0x570e9a18
and ebx, edi
add ebx, edi
nop
xor ecx, edx
jmp 0x4b8284
call fcn.004b80e5
sub edx, 0x5711c06a
neg edx
add ebx, 0x5712e0c0
mov ecx, edi
mov edx, edi
add ecx, edi
and ebx, edx
sub ebx, edx
jmp 0x4b8dde
mov esi, 0x6332a2e
xor ecx, 0x5717c170
or edx, ecx
shl edi, 0x15
xor edx, ecx
jmp 0x4b85c4
push 0x4fd08930
sub edi, 0x5719abbe
mov ebx, 0x571a21c2
and ebx, ecx
shl edi, 5
and ecx, 0x571b5e84
xor ecx, edi
and edi, ebx
xor edx, 0x571c9618
jmp 0x4b7922
push 0x4fc2c3e0
not ecx
add edx, 0x57269910
shl ebx, 0x18
xor edx, 0x5727bca0
not edx
sub ecx, edi
or ecx, edx
or ecx, ebx
jmp 0x4b8b58
mov esi, 0x6332a2e
xchg edx, ebx
sub ebx, edi
neg edx
dec ecx
sub ebx, edx
shr edi, 0x1e
shr edi, 4
add edx, 0x572d6dfc
jmp 0x4b9f07
call fcn.004b80e5
mov edx, edi
add ebx, edi
ror ecx, 0xa
add edi, ebx
add ebx, 0x5730b8d0
not ebx
jmp 0x4b7d53
pop esi
mov edx, edi
add ebx, edi
xchg edx, edi
mov ebx, ecx
xor edi, ecx
bswap edi
mov ebx, edx
mov edi, edx
not edx
bswap edx
mov edx, 0x573c8c78
or edi, 0x573cfed8
jmp 0x4b7e82
pop esi
or edx, ecx
neg edi
ror ecx, 0x1d
ror edi, 0x16
sub ecx, 0x5745cd50
xor ecx, edx
mov ebx, edi
xchg ebx, edi
sub edx, ecx
sub ebx, edx
sub ebx, edx
mov edx, ebx
jmp 0x4b79a4
push 0x4fbe76ba
add ebx, edi
or ebx, edi
ror edi, 0x12
add ecx, edi
xor ecx, 0x574c04a6
add ebx, edx
or edx, 0x574d72a0
or edx, ebx
jmp 0x4b9aaf
pop esi
xor ecx, edi
and ebx, 0x575a82ce
bswap ebx
sub ebx, ecx
xor ecx, 0x575edb3e
bswap ecx
rol ecx, 6
and ecx, edx
sub ecx, edi
xor ecx, 0x576136e6
jmp 0x4b816e
push 0x4fc5e036
and edi, ebx
sub edx, 0x576c84a6
and ecx, edx
add edi, 0x576d6596
xor edx, 0x576dcfaa
or ecx, 0x576e3f44
and edi, ecx
sub ecx, edi
jmp 0x4b8963
push 0x4fc1d7b6
inc edi
and edx, ebx
jmp 0x4b9359
pop esi
rol ecx, 0xb
sub edx, ecx
mov ecx, edx
xor ecx, edx
sub ebx, edi
bswap ebx
jmp 0x4b7b30
call esi
neg ebx
sub ebx, 0x577fea84
ror ecx, 0x17
or ebx, edi
or edx, ecx
rol ecx, 4
and ecx, edi
neg ebx
or edi, edx
add ecx, edi
jmp 0x4b9ae2
call esi
or edx, ecx
ror edi, 0x12
sub ecx, ebx
add edx, ecx
xchg ecx, ebx
mov edi, ecx
jmp 0x4b8648
call esi
rol ecx, 5
and ecx, edx
or ecx, 0x579e74a6
and edi, ebx
jmp 0x4b7ce2
push 0x4fd8c708
and ebx, edi
or edx, edi
xchg ecx, ebx
xchg edx, edi
mov ecx, edx
not edi
and ecx, edi
add ebx, 0x57b11f48
jmp 0x4b7c5e
mov esi, 0x4132136a
inc edi
add ebx, edx
sub ebx, ecx
and ebx, edi
and edx, ecx
xchg edi, edx
xor edi, ebx
add ecx, edx
jmp 0x4b7e1a
mov esi, 0x6332a2e
sub ebx, ecx
xor edx, ecx
and edi, ecx
shr edi, 0x11
rol ebx, 4
or ebx, ecx
xchg edi, edx
xor edx, 0x57c1edd4
jmp 0x4b8b82
push esp
xor edi, ecx
or edi, ecx
add edi, edx
xchg edx, ecx
jmp 0x4b94ff
call fcn.004b80e5
not ecx
xchg edx, ecx
xor edx, edi
xor edi, ecx
jmp 0x4b9b48
pop esi
or ebx, edx
sub edx, edi
add edx, 0x57fa6e62
not edx
jmp 0x4b8203
mov esi, 0x6332a2e
xchg edx, edi
ror ecx, 0xa
mov ecx, ebx
and ebx, edx
jmp 0x4b8fb2
mov esi, 0x6332a2e
and edx, edi
or edi, edx
and ebx, edi
sub edi, ecx
xor edx, ecx
shr ecx, 1
not edi
ror edx, 2
or ebx, ecx
xchg ecx, edi
jmp 0x4b80ca
call fcn.004b80e5
sub edi, ecx
sub ebx, edx
xor ecx, edi
or edi, 0x581b70a4
mov edi, 0x581bac0a
and edx, edi
add ecx, edi
sub ecx, edx
jmp 0x4b7c83
push 0x4fb90052
mov ebx, edx
inc ebx
and edi, ebx
xor ecx, edx
ror edi, 5
xchg ebx, edx
xchg ebx, edx
mov edi, ebx
mov ecx, ebx
ror ebx, 0xb
add ecx, 0x581fbed0
xor edx, ebx
jmp 0x4ba0f8
pop esi
mov edi, 0x5820a662
xor ebx, 0x58212362
sub ecx, 0x58218d0a
mov edi, 0x5821f108
sub ecx, edx
and ebx, edi
add ebx, ecx
mov edi, 0x582396d2
jmp 0x4b7ca2
push 0x4fbddb16
xor ecx, edx
not edx
add edx, ebx
bswap ecx
jmp 0x4b9bde
push 0x4fc63184
or edx, ebx
mov edi, ebx
or edi, ecx
and ecx, ebx
jmp 0x4b920d
push 0x4fd8742a
rol edi, 0xf
xor ecx, edx
rol ebx, 8
xor ecx, edi
bswap ebx
add edx, ebx
sub ecx, ebx
or edi, edx
jmp 0x4b84cd
pop esi
or ebx, edx
dec ebx
jmp 0x4b91d0
push 0x4fb69b5c
add edx, edi
and ebx, 0x587f9720
neg edx
xor edx, ecx
xor ebx, 0x5880f77a
xor edx, ecx
not edi
add ebx, edx
and ecx, edi
add ebx, 0x588338a4
shr edi, 0xf
shr edi, 0x15
jmp 0x4b75d1
push 0x4fcade7a
mov ecx, edi
or ebx, edx
mov edx, ecx
sub edx, ebx
or ecx, edx
or edx, ecx
ror ecx, 0x1f
sub edi, ecx
add ecx, edi
mov edi, edx
shl ebx, 0x1e
dec edx
mov ecx, 0x5895ee26
and ecx, edx
jmp 0x4b8f13
call esi
xor edx, ecx
mov ecx, 0x58974978
add edi, ecx
xchg ecx, ebx
not ebx
mov edx, 0x58990f1a
jmp 0x4b94dd
push 0x4fc31108
not edx
xor ecx, edx
ror edi, 0x17
rol ecx, 8
add edx, 0x589b72b0
xchg ebx, edi
jmp 0x4b8fc7
call fcn.004b80e5
and edi, 0x589e7628
xchg ebx, edi
shl ecx, 0x13
inc ebx
dec ebx
sub edi, 0x58a0e312
add edi, ebx
xchg edi, ecx
jmp 0x4b8431
push 0x4fd4fc3a
add ebx, ecx
dec edx
inc edi
xchg ecx, ebx
sub edx, ecx
or edi, ecx
jmp 0x4b9ccc
call fcn.004b80e5
and ecx, 0x58a8e17a
sub ecx, 0x58a96cb6
or ecx, edx
bswap ecx
and ebx, edi
sub ebx, ecx
jmp 0x4b9ac4
push 0x4fb8625a
rol ecx, 2
mov ecx, edi
add edi, ecx
and edi, ecx
and ecx, 0x58b60e26
ror edi, 0x11
and edx, 0x58b6ff10
xor ebx, edi
xchg ecx, edi
xor ecx, edi
jmp 0x4b7963
call esi
bswap edx
xchg edx, ecx
or ecx, ebx
rol ebx, 0x12
and ecx, 0x58bd52d2
xor ebx, ecx
sub edi, ecx
sub ebx, ecx
and ecx, 0x58be50c4
shl edx, 7
jmp 0x4b972a
pop esi
mov ecx, ebx
mov edx, ebx
and edi, ebx
or ecx, edx
add edi, ebx
add ecx, ebx
xchg ecx, edi
sub ebx, edx
jmp 0x4b82e2
call esi
shl edx, 3
inc ecx
ror ebx, 0xf
and edx, ecx
add ebx, ecx
mov ebx, ecx
ror edx, 9
add edx, ecx
inc edi
or ecx, edx
xchg edx, ebx
or edi, edx
jmp 0x4b7cc9
pop esi
mov ebx, edx
inc ebx
sub edi, ebx
sub ecx, edx
jmp 0x4b97bf
call esi
xor ecx, edi
shr ebx, 0x1e
xor edx, 0x58e4d918
shl edi, 0x11
jmp 0x4b7bdd
pop esi
neg ecx
mov edx, ecx
and edi, 0x58e6d256
sub edx, edi
add ecx, edi
mov edx, 0x58e850ca
jmp 0x4b97a1
push 0x4fb4ad92
ror edx, 0x15
mov ecx, ebx
add ecx, edi
sub edi, ecx
and ecx, 0x58eabfda
shl ebx, 0xa
dec edi
rol edi, 2
jmp 0x4b9800
call esi
add edi, ebx
bswap ebx
and ecx, 0x58f5cd38
or edx, ecx
sub edx, 0x58f66888
dec ecx
and ebx, ecx
xor ecx, edi
sub edx, edi
mov edi, ebx
jmp 0x4b958e
push 0x4fcb2a28
xor ebx, ecx
xchg ebx, ecx
xchg edi, ebx
xor ebx, edx
mov edi, 0x590e8e6e
bswap edi
xchg ebx, edx
xor ebx, edi
sub edi, ebx
sub edx, 0x5910df54
jmp 0x4b866d
call fcn.004b80e5
xchg ebx, edx
mov ebx, edx
or ebx, edi
rol ebx, 0x1a
dec edx
dec edx
jmp 0x4b8b3f
mov esi, 0x6332a2e
dec edx
and ebx, 0x592417e4
neg edx
xchg edx, edi
xchg ecx, edi
and ecx, 0x5925f9fe
mov edx, ebx
xor ebx, ecx
mov ebx, 0x592746d4
xor edi, ecx
jmp 0x4b7fc1
pop esi
xchg ebx, ecx
xor ecx, 0x5928dfd8
or edx, edi
neg edi
jmp 0x4b9fd6
push 0x4fc860ae
xchg ebx, edx
dec ecx
xchg ebx, edx
mov ecx, edi
dec ebx
or edx, ecx
sub ecx, ebx
xchg edi, ebx
add ecx, edi
sub edx, ecx
jmp 0x4b865a
push 0x4fbbbb94
xor ecx, edx
mov edx, ecx
bswap edi
not edi
add ecx, ebx
and edi, ebx
inc edi
xchg edx, ecx
jmp 0x4b7ffa
pop esi
xchg edi, ecx
add edx, ecx
mov ecx, edx
and edx, ecx
jmp 0x4b8fef
call fcn.004b80e5
rol edx, 0x1a
sub edx, ecx
add edx, ecx
mov edi, edx
mov edx, ecx
add ebx, edi
shr edi, 0xb
shl edx, 0x12
jmp 0x4b83d5
push 0x401400
xor ecx, edi
add edx, ecx
xchg ebx, ecx
xor ecx, edi
jmp 0x4b8d30
mov esi, 0x6332a2e
and ecx, edx
add ebx, 0x596de046
xor edx, 0x596e4d72
mov ecx, edi
or edi, 0x596f232c
or edi, edx
and ecx, edi
mov ebx, edx
xchg ebx, edi
or ebx, edi
xor ebx, 0x5971cb1e
dec edx
jmp 0x4b876a
call fcn.004b80e5
or edi, edx
mov edi, edx
sub edx, ebx
shr ebx, 0xd
shr ecx, 0x16
or ebx, 0x59754fac
jmp 0x4b8c72
push 0x4fc22768
add edx, edi
rol edx, 0x10
sub ebx, 0x598ceef6
or edx, ebx
mov ecx, edx
mov edx, ecx
sub edi, edx
add edi, edx
jmp 0x4b7eb0
call esi
sub ebx, ecx
shr edx, 0x19
xchg ebx, edx
rol edx, 3
xor ebx, edi
not ecx
jmp 0x4b8df3
push 0x4fd5efe2
sub edi, 0x59b6669c
xor edi, edx
xor ecx, ebx
add edx, ebx
xchg edx, ebx
xchg edx, edi
sub edi, 0x59b921ac
mov edx, edi
or edi, ecx
dec edx
and edx, ebx
or edx, edi
jmp 0x4b9d09
pop esi
add edx, ecx
ror ecx, 0xe
or edx, ebx
mov ecx, edi
sub edx, edi
mov edi, 0x59be3066
sub edi, edx
xor ecx, ebx
and edi, ecx
xor ecx, ebx
and ebx, edx
and ecx, edx
jmp 0x4b8db8
push esp
ror ecx, 9
xchg ebx, edi
sub ecx, ebx
and ecx, ebx
or edx, ebx
xchg edi, ecx
add edi, ebx
rol edx, 0x1c
add edi, ecx
neg ecx
mov ebx, 0x59c56f28
xor ebx, edx
jmp 0x4b7b9d
pop esi
rol edi, 0xf
xor ebx, ecx
neg ecx
neg edx
xchg edx, edi
xchg ebx, edi
jmp 0x4b7f98
pop esi
xor ecx, 0x59d6c340
dec edx
mov ebx, edx
mov edx, 0x59d82858
rol ecx, 0xc
or edi, ebx
sub ebx, edi
and ecx, edx
xor edi, 0x59da885a
sub edx, ebx
xchg ecx, ebx
add ebx, edx
jmp 0x4b9eb1
pop esi
ror edi, 0x10
inc edx
rol edx, 0x1d
add ecx, 0x59ede8b0
add ecx, 0x59ee62a0
xchg ebx, edx
shr edi, 2
not ebx
or ebx, edi
or edi, ecx
jmp 0x4b7d20
pop esi
and edx, ecx
add ebx, edi
xchg ebx, edi
xor edi, 0x5a0c4188
add ebx, edx
xor edi, 0x5a0d384a
add ecx, edi
xor ebx, edi
jmp 0x4ba09d
call esi
rol ebx, 9
add ecx, edx
add edi, 0x5a0fb08e
add edx, ebx
and ecx, edi
neg ecx
ror edx, 0x1b
or ebx, 0x5a121a80
mov ecx, edx
sub ebx, ecx
xchg edx, edi
neg ecx
xchg edx, edi
or ebx, edi
jmp 0x4b8a60
pop esi
or edx, ecx
add ecx, 0x5a1b2b86
and ecx, edi
not ecx
ror ebx, 0x1a
add ecx, ebx
mov ebx, 0x5a1d03e2
not ebx
jmp 0x4b7f43
push 0x4fca3e14
inc ecx
add ebx, edx
add ecx, edx
mov edx, ecx
mov ebx, edi
xchg ecx, edx
jmp 0x4ba0bb
mov esi, 0x6332a2e
xchg ebx, ecx
or ebx, edx
not ebx
sub edi, ebx
jmp 0x4b923e
call fcn.004b80e5
sub edx, edi
xchg ecx, ebx
mov edi, edx
or ecx, edi
shr ebx, 0x1f
mov edi, ebx
add edx, ecx
not ecx
xor edi, ebx
mov edx, 0x5a3a413e
inc ecx
or ecx, 0x5a43d1de
xor ebx, ecx
sub ebx, edi
jmp 0x4b8334
mov esi, 0x6332a2e
xor edx, 0x5a4f3a0c
rol edi, 2
xchg ecx, edi
sub edx, edi
rol ecx, 2
add ebx, 0x5a50d680
jmp 0x4b8bd1
push 0xb6101
inc ecx
not ecx
mov ecx, ebx
mov ebx, edx
add ecx, edi
add ebx, edx
shl edx, 0x16
add ecx, 0x5a696f36
or edx, ebx
shr ecx, 0x13
and edx, ebx
shr ebx, 0x13
bswap ecx
neg ecx
jmp 0x4b91fb
pop esi
add edi, ecx
xor ebx, edx
or edx, ecx
or edx, edi
and edi, ebx
neg edi
sub ecx, edx
sub ebx, edx
sub edx, edi
or ecx, edx
jmp 0x4b9522
push 0x4fbebf60
add edx, edi
and edx, edi
mov ebx, 0x5a898fd0
or edi, ebx
jmp 0x4ba111
call esi
bswap edi
add ebx, edi
xor ecx, edi
xchg edx, ecx
and edi, ebx
or edx, ebx
or edx, ebx
add edi, 0x5a8e1f76
dec ebx
sub ecx, edi
jmp 0x4b9c43
pop esi
xor ecx, edi
sub ecx, edi
shl edx, 7
xor edx, 0x5a913ee8
add ecx, ebx
sub ebx, ecx
sub ecx, edx
and ecx, edx
shr edi, 4
or edi, ecx
or edx, 0x5a948ab8
xchg edi, ecx
or ebx, ecx
dec ebx
jmp 0x4b7bae
call esi
shr edi, 1
sub edx, ebx
shl ecx, 0x13
shr edx, 9
add edx, ecx
inc edx
jmp 0x4b963e
push 0x4fbe2776
inc ecx
sub ebx, edx
and edx, edi
ror ecx, 0x19
add edx, ebx
or edi, edx
sub ecx, edi
add ecx, 0x5ab0ba4e
jmp 0x4b8192
pop esi
dec edx
xor edx, edi
or edi, 0x5abaa61a
xchg ecx, edi
add edi, 0x5abb9c9e
xor edx, edi
add ecx, 0x5abc884c
dec ebx
xchg edi, edx
sub edi, ecx
xor edi, ecx
add ebx, 0x5abf062c
xchg edx, ebx
mov ecx, ebx
jmp fcn.004b9468
push 0x4fd54da4
add ebx, 0x5acdbc40
dec edx
jmp 0x4ba153
mov esi, 0x6332a2e
add edi, 0x5ad6521e
bswap edi
add ebx, edi
neg edx
xchg edx, ebx
xchg ebx, edi
jmp 0x4b7ad0
push 0x4fbb6c62
shr ebx, 8
and ebx, 0x5adcd75a
shl ebx, 0x11
neg ecx
add ebx, 0x5ade1c30
sub ecx, ebx
add edi, ecx
xor ecx, 0x5adf81be
xchg ecx, edi
xchg edx, edi
jmp 0x4b91b7
pop esi
or edi, 0x5ae0e31c
inc edx
shl edi, 7
sub ecx, edi
add ebx, edx
add ecx, edx
dec edx
add ecx, ebx
jmp 0x4b7656
pop esi
or ecx, 0x5aed06ec
sub ebx, ecx
mov edi, edx
and edx, 0x5aee74b4
or edx, edi
mov edi, ecx
and edx, ecx
add edi, edx
add ebx, 0x5af0f1d8
mov edx, 0x5af16672
and ecx, 0x5af1ddae
add edx, ebx
jmp 0x4b8121
pop esi
xor ecx, edi
shr ecx, 0x1a
add ecx, edi
shr ebx, 9
jmp 0x4b8c2b
call fcn.004b80e5
not ecx
or edx, ecx
inc edi
mov edi, edx
add edi, 0x5b18c972
and edx, edi
or ecx, 0x5b199c18
rol edx, 6
jmp 0x4b9453
mov esi, 0x6332a2e
add edi, edx
mov edx, ebx
add ebx, 0x5b28197e
sub edx, edi
dec edi
sub ebx, ecx
and ecx, edx
neg ecx
jmp 0x4b987e
pop esi
dec edi
mov ebx, 0x5b2ee3c2
and ecx, ebx
xchg edx, ebx
mov edx, edi
neg edi
jmp 0x4b89d8
push 0x4fb64bc4
and ecx, ebx
mov ecx, edi
or ebx, edx
sub edx, ebx
and ecx, 0x5b4c2486
sub edx, 0x5b4cb07e
jmp 0x4b8a98
push 0x4fca8f8c
xchg edx, ebx
neg ecx
xchg ebx, ecx
add edi, ecx
rol ecx, 8
sub ebx, 0x5b4f977a
jmp 0x4b8b15
mov esi, 0x6332a2e
add edi, edx
and edi, 0x5b547d48
and edi, 0x5b550198
dec ebx
jmp 0x4b91de
push 0x4fbf09a4
xor edi, edx
shr edi, 0x11
and edi, ecx
bswap edi
shl ebx, 0x1d
shr ebx, 0xc
mov edx, ecx
add edi, ecx
xchg ebx, edx
dec ecx
jmp 0x4b80a0
push 0x4fd5a04e
add edx, edi
add ebx, ecx
or edi, ecx
add ebx, edx
sub edx, edi
add edi, edx
mov ecx, edx
or edx, ebx
jmp 0x4b94b4