Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff1b
jne 0x40108e
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xfffffeeb
jne 0x401130
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
ret
call sub.kernel32.dll_GetConsoleWindow
cmp eax, 0xffffff01
jne 0x4011d2
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff0b
jne 0x40126a
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
call sub.ntdll.dll_ZwWriteRequestData
ret
jmp 0x46ce6b
mov esi, 0xeceb1aed
xor ecx, esi
mov edi, edx
or edi, ecx
sub edx, 0xecec0cad
and ecx, edi
xor edx, 0xecec82c3
xor edx, edi
jmp 0x470525
call ebx
inc esi
xchg edx, ecx
shl edx, 0x15
bswap esi
xchg ecx, esi
xchg edx, esi
or edi, edx
mov edi, esi
mov esi, edi
xchg edx, ecx
jmp 0x46dd78
call ebx
sub edx, ecx
sub edx, esi
and ecx, esi
xchg edi, ecx
and edx, ecx
shr ecx, 1
xchg ecx, edi
bswap edx
xor esi, 0xedfd8075
dec ecx
sub edi, 0xedfdf6cf
neg edi
xchg esi, edi
or esi, edi
add edx, edi
dec edi
jmp 0x46f720
mov ebx, 0x3f4d7907
neg ecx
and ecx, edx
xchg ecx, edi
add edi, edx
xchg edx, esi
xchg edx, ecx
or ecx, 0xee00d525
or edi, edx
jmp 0x46dbc6
push 0xed14cd0b
or edx, edi
not edi
or ecx, esi
or esi, edx
add esi, ecx
add edi, ecx
mov edx, edi
and ecx, esi
bswap ecx
xor edi, edx
jmp 0x46eceb
pop ebx
add edx, edi
add ecx, edx
and edx, edi
and ecx, esi
and edx, 0xee1fb411
or edi, ecx
xor ecx, edx
and ecx, 0xee2060fb
shr ecx, 0x1a
shr edi, 0x15
jmp 0x46e615
pop ebx
not ecx
mov edi, edx
shr esi, 0xd
shl edi, 0x1d
inc esi
mov ecx, edx
or edx, edi
mov ecx, edx
xor ecx, edx
shr edi, 0x12
xor edi, edx
ror ecx, 0x16
jmp 0x46f94b
pop ebx
sub esi, ecx
xor edi, ecx
or ecx, 0xee2a460f
xor esi, edi
mov esi, 0xee2aba7b
and ecx, edi
bswap edi
sub edi, 0xee2b69ef
bswap esi
xor edx, 0xee2bf0b7
jmp 0x46e160
push 0xed0ed91d
xchg esi, ecx
mov edx, esi
or edx, 0xee35bca5
ror edi, 0x18
add edx, ecx
and esi, ecx
and esi, ecx
ror esi, 0x15
jmp 0x46d481
mov ebx, 0x3f4d7907
mov ecx, 0xee43f35f
and ecx, 0xee442e65
and esi, ecx
xor ecx, edx
not edi
xor esi, edx
sub ecx, esi
sub esi, ecx
and edx, ecx
and edi, esi
mov edi, esi
rol edi, 0x1a
jmp 0x46ed2f
push 0xed0e4ae9
add ecx, 0xee493b05
mov ecx, edx
sub esi, ecx
and edx, ecx
inc esi
dec edi
sub esi, edi
xor edi, 0xee4adf15
bswap edi
sub edi, 0xee4b55f7
jmp 0x46faca
call fcn.00470730
add edi, 0xee547a21
neg edx
add edi, 0xee54f0f1
add ecx, edx
and edx, esi
or ecx, edx
rol ecx, 0x14
neg edi
and edx, 0xee565ca3
rol edx, 0x15
inc esi
sub esi, edi
jmp 0x4702ab
mov ebx, 0x3f4d7907
mov edi, esi
and ecx, 0xee5bf631
mov esi, edx
or esi, edx
ror edx, 0x1a
neg edx
sub ecx, 0xee5d2a99
bswap esi
not edi
ror edi, 0x14
or ecx, esi
sub esi, edi
jmp 0x4701d9
push 0xed0f1fa1
shl esi, 0x1a
sub edx, ecx
and ecx, edx
ror edi, 9
shr edx, 0x14
mov esi, edx
and edi, edx
and edi, esi
mov edx, 0xee608205
add edx, esi
jmp 0x46fef9
pop ebx
xor edi, ecx
xor ecx, edx
and ecx, 0xee6183d7
dec edx
mov esi, edx
xor esi, edx
shl edi, 0x18
and edx, esi
and ecx, edx
inc edi
add edx, edi
or esi, ecx
jmp 0x46da9d
pop ebx
sub edx, ecx
and edx, ecx
not ecx
sub edx, esi
add ecx, esi
xchg edi, esi
and edi, 0xee67bf9f
mov ecx, edx
add ecx, edx
add edx, esi
jmp 0x46e477
call ebx
dec esi
sub edx, edi
add ecx, edi
and esi, edx
dec esi
mov edx, esi
shl ecx, 0x16
xor ecx, esi
sub edi, edx
dec edi
add edi, esi
and esi, 0xee6b481d
xchg ecx, esi
mov esi, edx
jmp 0x46e033
pop ebx
xchg edi, ecx
ror ecx, 3
dec edx
inc esi
mov esi, edx
or edx, edi
xor esi, edx
ror edx, 0x19
add edx, ecx
and ecx, edx
ror edi, 8
and edi, esi
jmp 0x46f5a3
mov ebx, 0x3f4d7907
mov esi, edi
sub edx, esi
rol ecx, 4
xor edi, 0xeea0c771
mov edi, edx
sub edi, esi
xor ecx, 0xeea1854b
sub ecx, edi
jmp 0x46e538
call fcn.00470730
and ecx, 0xeea5aed3
and ecx, 0xeea5e9d7
xor ecx, edx
shr edi, 0x1c
and esi, 0xeea6eafb
xchg ecx, edx
add esi, edi
sub esi, ecx
mov esi, ecx
not edx
jmp 0x46d504
push 0xed025735
shl ecx, 0x1f
mov edx, ecx
sub edi, ecx
add edx, ecx
or edx, edi
xchg ecx, esi
add edx, edi
and edx, esi
and ecx, edi
mov edx, edi
or ecx, edx
xor esi, edi
jmp 0x46e6e8
push 0xed13e52b
dec ecx
xor edi, ecx
or edi, ecx
dec edi
mov edx, esi
sub edi, edx
rol edx, 0x1e
and edi, 0xeeb53093
sub edi, 0xeeb59eef
ror esi, 0x1f
mov esi, 0xeeb64557
mov esi, edx
jmp 0x46f8fd
push 0xed17d937
bswap edi
xchg edi, esi
xchg edx, ecx
or edi, 0xeebe6741
bswap edx
and edx, 0xeebf2117
or ecx, 0xeebf8b3d
and edx, edi
add esi, edx
sub esi, edi
or ecx, edx
not esi
xchg ecx, edi
xchg edi, esi
jmp 0x46e1ec
pop ebx
xor ecx, esi
xchg ecx, esi
xor edi, edx
mov edi, edx
xchg esi, edx
xchg edx, ecx
jmp 0x46ea96
pop ebx
xchg edi, esi
xor edx, esi
and edx, 0xeed9dc7f
sub esi, ecx
and edi, 0xeedab2b1
rol ecx, 0x11
add edi, ecx
sub edi, edx
sub ecx, edi
neg esi
mov esi, edi
dec esi
neg edx
ror ecx, 0x1d
add edi, ecx
bswap edx
jmp 0x46e8a6
pop ebx
nop
xchg edi, edx
sub esi, ecx
add edi, 0xeef86cd3
mov esi, ecx
nop
or edx, 0xeef951db
rol edi, 0x1a
or ecx, esi
xor edi, esi
sub edx, 0xeefb1c11
xor ecx, edi
xchg edx, ecx
or edx, 0xeefcc6ab
xchg edx, esi
add edx, ecx
jmp 0x46ebc8
push 0xed0c109d
or ecx, edi
mov edx, ecx
xchg ecx, edx
inc ecx
jmp 0x46cf43
call fcn.00470730
xchg ecx, esi
sub ecx, edi
add ecx, 0xef17395d
and ecx, edx
sub esi, edx
or edi, edx
xchg edx, edi
mov ecx, edi
xor ecx, esi
add ecx, edx
sub ecx, edx
dec ecx
and esi, ecx
ror esi, 0xf
jmp 0x46ffd6
push 0xed050b29
rol esi, 0x13
xchg edx, edi
xchg edi, esi
xor edi, ecx
jmp 0x46d75b
pop ebx
dec edi
or edx, edi
rol edi, 0x11
sub edi, edx
or esi, edi
or edx, ecx
mov esi, edi
xchg edi, ecx
mov esi, edx
dec edi
jmp 0x46d82e
pop ebx
or edx, 0xef49ebd9
ror edi, 0x1b
and edx, edi
add edi, ecx
neg ecx
mov edx, ecx
sub edi, edx
add ecx, edx
jmp 0x46fd4a
call fcn.00470730
add ecx, edi
xchg ecx, edi
or esi, edx
or ecx, edi
xor ecx, edx
add ecx, edi
sub esi, 0xef7050fd
xor edi, ecx
not edi
xchg ecx, esi
xor ecx, edx
sub ecx, 0xef71a135
jmp 0x46eabf
pop ebx
mov edi, ecx
shr edi, 0x14
sub ecx, edx
ror ecx, 5
ror esi, 4
and esi, 0xef73bb13
xchg ecx, esi
ror edi, 0x1f
inc ecx
or edi, 0xef74a79f
add esi, edi
add edi, esi
jmp 0x46fe49
pop ebx
and edx, ecx
shl edi, 0x1e
sub edi, esi
rol ecx, 0x14
dec esi
mov edx, ecx
add ecx, 0xef831393
and esi, 0xef834ea3
mov ecx, edx
or edx, esi
inc ecx
add esi, 0xef84459f
jmp 0x46fa22
push 0xecf3a209
neg edx
or ecx, edx
dec esi
shl ecx, 0xe
rol ecx, 0x1f
add esi, edi
jmp 0x46d326
pop ebx
ror edx, 0x1c
shr edi, 0x18
or edi, ecx
mov ecx, esi
sub esi, 0xef8eeb8b
sub edx, 0xef8f26e3
sub ecx, edi
xor ecx, edx
jmp 0x46efe1
mov ebx, 0x3f4d7907
dec edi
add edi, 0xef902d8f
add ecx, edx
xor edx, ecx
shr edi, 6
neg ecx
add edx, edi
mov ecx, 0xef919ac5
jmp 0x46df55
pop ebx
add esi, 0xef954cc9
inc edi
and ecx, edi
xor edx, esi
dec edi
mov ecx, edx
add edx, edi
not esi
not ecx
add ecx, esi
xor esi, edx
ror ecx, 6
jmp 0x46e4d6
push 0xed1820ef
xor edx, esi
and edx, ecx
xor edx, esi
xor ecx, edx
sub edx, esi
xor edi, edx
inc edi
and ecx, edx
jmp 0x46fe57
push 0x6ba6b
mov edi, edx
shl ecx, 0x1b
rol edx, 0x14
ror ecx, 3
and esi, edi
xchg esi, edi
add esi, edx
xor edx, edi
sub edi, esi
shl edi, 9
jmp 0x46e296
push 0x401400
add edx, edi
dec esi
xchg edi, edx
xor ecx, edi
xor ecx, edi
xchg edx, ecx
shr ecx, 0xa
mov edi, 0xefaf2a6b
jmp 0x46fb43
push 0xed174a27
and edi, edx
mov ecx, edx
inc edx
sub ecx, esi
xor ecx, edx
dec esi
sub esi, ecx
bswap edi
jmp 0x4706a5
pop ebx
xchg esi, edi
add esi, edx
or esi, edx
sub esi, edi
or ecx, esi
ror edx, 0x1e
xor edi, 0xefdf790b
and ecx, 0xefdfe4cd
xchg esi, edi
shr edi, 0xe
jmp 0x46df7f
pop ebx
mov edi, ecx
xor edx, esi
xchg edx, ecx
add esi, edx
xchg edi, esi
xor ecx, edi
add edx, ecx
rol edi, 0x1d
sub edx, 0xefeb55ad
mov ecx, 0xefeb909b
ror edx, 2
not ecx
xor ecx, edi
xor ecx, edx
jmp 0x46d7da
call fcn.00470730
and ecx, edx
xchg ecx, esi
or edi, 0xeff1b38d
mov edi, ecx
add esi, 0xeff28d0b
or ecx, edi
shl edx, 0x1b
add ecx, edx
mov edi, ecx
mov edi, 0xeff42025
xor edi, esi
inc edi
mov esi, ecx
rol ecx, 5
jmp 0x46f04f
call ebx
or esi, ecx
sub edx, ecx
xor esi, 0xeff69625
shr edx, 8
xchg edi, esi
mov edx, esi
sub ecx, 0xeff7ed3b
add edi, 0xeff8286b
jmp 0x46ed61
push 0xed1b5239
xor esi, 0xf0002737
xchg edx, esi
dec esi
add ecx, edx
xor ecx, esi
or esi, edx
shl esi, 0x18
and esi, edx
bswap ecx
mov esi, 0xf00241dd
xchg esi, edx
and esi, edi
rol edi, 9
dec esi
jmp 0x46e106
pop ebx
or edi, 0xf003839f
bswap esi
and ecx, 0xf003fa97
sub esi, 0xf00435bd
add edi, ecx
mov ecx, esi
sub edx, ecx
not esi
mov edx, ecx
or edx, ecx
jmp 0x46ecc3
push 0xed029d2d
inc edx
and ecx, edx
xchg ecx, edx
mov edi, esi
xchg ecx, esi
bswap ecx
sub ecx, 0xf017c389
inc esi
dec edi
xor edx, 0xf0187639
jmp 0x46e949
push 0xed14753b
xor edx, edi
xchg esi, ecx
ror edx, 0xa
or edx, edi
xchg ecx, edi
xor esi, 0xf01a0221
and ecx, edi
bswap ecx
mov edi, 0xf01b046d
neg ecx
and esi, edi
mov ecx, edi
jmp 0x46d0a4
mov ebx, 0x4132136a
rol edi, 0x1d
add esi, edx
and edi, edx
xchg edx, ecx
mov edx, ecx
rol edx, 4
xor edx, esi
and edx, esi
mov edi, edx
sub esi, ecx
xor esi, edx
and ecx, esi
mov esi, 0xf02d4143
mov esi, edi
jmp 0x46d3e5
call ebx
add esi, edx
sub edi, edx
dec edi
or edx, ecx
bswap edx
xchg esi, ecx
mov edi, esi
shl esi, 0xa
jmp 0x470348
pop ebx
xor edi, ecx
not edi
mov edi, ecx
ror esi, 9
shr edi, 7
and edi, edx
jmp 0x46ed9a
pop ebx
not ecx
and ecx, 0xf042a201
and ecx, edx
mov edx, esi
shr esi, 0x13
xor edx, esi
jmp 0x46ef83
push 0xed1afe93
mov ecx, edx
shr ecx, 0xd
add esi, ecx
rol edi, 0x14
sub edi, ecx
or esi, ecx
shl edi, 0x16
add edi, ecx
xor ecx, esi
and edi, ecx
sub ecx, esi
inc esi
mov ecx, edi
add edi, esi
add esi, edx
dec esi
jmp 0x46e5e8
mov ebx, 0x3f4d7907
xor edi, 0xf047b43d
xor ecx, 0xf047ef7f
sub edx, edi
or ecx, edx
mov edx, ecx
add edi, 0xf048e33b
jmp 0x46f112
push 0xecf9816b
and esi, ecx
mov edi, 0xf050a64d
inc edx
neg esi
add esi, edi
sub ecx, edx
and esi, ecx
sub edx, esi
mov ecx, 0xf0524d37
xchg edx, edi
add edx, 0xf052c277
or edx, edi
jmp 0x4703b6
pop ebx
xor edi, edx
mov esi, edx
xchg ecx, edx
sub esi, ecx
xchg edi, edx
or ecx, edx
neg edi
xor edi, esi
mov edx, 0xf06418b1
and ecx, 0xf0647d45
add esi, 0xf064b7f1
add ecx, edx
jmp 0x46d1ad
call ebx
bswap edi
add ecx, 0xf065d06f
mov esi, 0xf066519f
mov ecx, edi
or edi, esi
sub ecx, edx
or edi, ecx
sub esi, edi
jmp 0x46f33b
pop ebx
or ecx, edi
rol edi, 0x1d
mov edx, esi
neg esi
xchg edx, edi
xor esi, edi
jmp 0x46fae0
call ebx
ror edi, 0x1c
mov edx, 0xf088efb5
xchg esi, edx
ror esi, 0x18
sub edi, esi
shl edi, 0x10
or edi, edx
and edi, esi
xchg esi, edi
shl ecx, 0x12
neg edi
sub edi, 0xf08bab6b
jmp 0x46fce2
pop ebx
neg ecx
neg edi
mov esi, ecx
and ecx, edx
and esi, edi
sub esi, edi
and ecx, edi
xor edx, ecx
jmp 0x46d4e6
push 0xecfe8d11
add edx, esi
sub edi, 0xf09638cf
not ecx
xchg edi, ecx
sub esi, edx
ror esi, 3
add edx, ecx
and ecx, edi
bswap edi
add edi, edx
jmp 0x47060e
pop ebx
add esi, edi
and ecx, esi
xchg ecx, edx
sub edx, 0xf09b6ce3
jmp 0x46fa77
mov ebx, 0x3f4d7907
inc esi
sub edi, ecx
sub esi, edx
xor edx, esi
bswap ecx
sub ecx, 0xf09fb73f
mov ecx, esi
and edx, esi
or edi, ecx
and edx, edi
jmp 0x46f06e
call fcn.00470730
xor ecx, 0xf0a65909
sub edx, 0xf0a6c37d
xor esi, edi
xchg edx, edi
and esi, ecx
shl ecx, 0xe
and ecx, esi
and esi, ecx
sub edi, esi
mov edi, 0xf0aa3c39
xchg esi, edx
sub edi, edx
add edi, edx
sub ecx, esi
jmp 0x47048c
pop ebx
xor ecx, edi
mov edx, ecx
xor edi, esi
xor ecx, edi
xor ecx, edi
dec ecx
mov edx, edi
dec esi
jmp 0x46e9ad
pop ebx
xor ecx, edi
shl esi, 9
xchg ecx, edi
mov ecx, esi
mov ecx, edi
and edi, ecx
mov esi, 0xf0b338bb
neg edx
and edx, ecx
add ecx, edi
jmp 0x47041e
push 0xecf2d281
xchg edi, esi
xor edi, edx
mov ecx, edi
sub ecx, 0xf0b73401
xchg ecx, edi
and ecx, 0xf0b7a9b9
and edi, esi
not edx
or esi, edi
xor ecx, esi
jmp 0x46f1a6
push 0xecfa5357
shr edx, 0x10
xchg edi, ecx
and edi, ecx
dec edi
shl edi, 0x12
mov ecx, esi
dec ecx
ror esi, 0x15
xor ecx, edi
mov edx, 0xf0bb04cd
jmp 0x47024e
push 0x40
or edi, 0xf0bf2a99
xchg ecx, esi
xor esi, edx
bswap ecx
or esi, 0xf0c027a9
dec esi
sub edx, edi
add edx, edi
add ecx, esi
or ecx, edi
jmp 0x46e25e
call fcn.00470730
xor esi, 0xf0cd7df9
dec esi
add esi, ecx
sub edi, ecx
jmp 0x46ebfd
push 0xecfe01a3
or edx, ecx
neg edx
xchg edi, edx
xchg ecx, edx
xor esi, 0xf0d79f11
neg esi
jmp 0x46f46f
pop ebx
bswap edi
and ecx, edi
add esi, edi
sub edx, ecx
sub esi, edi
not edi
dec edx
or edx, ecx
neg ecx
shl esi, 5
not edi
or edi, esi
or edi, esi
add esi, edi
and edx, edi
add edi, 0xf0e233c9
jmp 0x46e7f0
push 0xed0b830f
shr edi, 0x1b
mov esi, 0xf0e5de49
sub esi, ecx
xchg edi, edx
sub ecx, edi
mov edi, 0xf0e6c5e1
or ecx, esi
not edx
and ecx, 0xf0e7850b
and ecx, 0xf0e7bfc7
ror esi, 3
sub esi, edi
or ecx, edi
shl ecx, 0x19
sub edi, ecx
and ecx, 0xf0e91df9
jmp 0x470630
call ebx
or ecx, edx
rol edx, 8
neg edi
or edx, 0xf0ef1d37
and edi, ecx
nop
or edx, edi
and edx, edi
xor esi, edi
or edx, edi
jmp 0x46e907
call fcn.00470730
add ecx, edx
inc ecx
shr ecx, 0x13
neg esi
not ecx
add esi, edx
ror esi, 5
dec edi
shr ecx, 4
inc ecx
and edi, ecx
ror ecx, 0x14
jmp 0x46f979
call fcn.00470730
shl ecx, 0x1a
or esi, 0xf102f7ff
xor esi, 0xf1033315
xor edi, 0xf10386d7
ror edi, 0xb
mov edx, esi
sub esi, ecx
xor edi, ecx
dec esi
xor ecx, edx
sub esi, ecx
rol edx, 9
neg ecx
mov ecx, esi
jmp 0x46e88f
push 0xecf31857
xor edx, 0xf10e7683
mov edi, edx
mov edx, 0xf10ef879
sub edx, esi
sub edx, ecx
add esi, edi
sub edx, edi
and esi, edx
xchg edx, esi
or edi, ecx
jmp 0x4706d1
pop ebx
rol esi, 0x1d
or edi, 0xf136ce59
mov edi, ecx
add ecx, edx
xor edi, esi
xor ecx, esi
sub edx, ecx
mov ecx, 0xf138a399
sub edi, ecx
neg esi
neg edx
or esi, edx
and ecx, 0xf13a3acd
mov esi, 0xf13aa451
jmp fcn.0046d77e
push 0xecfa0d3f
mov edi, esi
xchg esi, ecx
add ecx, edi
or esi, ecx
shr edx, 0xa
shl ecx, 3
not ecx
or edx, ecx
mov ecx, 0xf14d0a53
add edi, 0xf14d7037
and ecx, esi
add edx, esi
jmp 0x46edf4
mov ebx, 0x3f4d7907
rol ecx, 2
neg ecx
neg esi
mov edx, 0xf14f8be9
and esi, edx
and edi, edx
add esi, 0xf150474b
mov edx, esi
mov edx, 0xf15118a7
sub esi, 0xf15182d3
xor edx, esi
bswap edi
ror edx, 0x13
xchg esi, ecx
jmp 0x46eec8
push 0xecfe4731
xor edi, ecx
xor ecx, edx
dec edi
add edx, esi
or edx, edi
ror edi, 0xb
sub edx, ecx
xchg ecx, esi
jmp 0x46ec85
push 0xed127f33
or edi, 0xf155f8d1
mov edx, esi
or edi, ecx
sub ecx, 0xf156fdef
mov esi, edi
shr edx, 2
xchg ecx, esi
add edx, ecx
and ecx, edi
add ecx, edx
add edx, ecx
sub ecx, edx
and edx, esi
xor edx, esi
jmp 0x46d455
push 0xecf78dbd
or esi, ecx
shr esi, 0x1e
neg edx
neg edx
xchg edi, esi
xor edx, 0xf1701485
jmp 0x46f609
mov ebx, 0x3f4d7907
and ecx, edx
ror esi, 0x1e
shl esi, 0x1c
mov ecx, 0xf17872af
add edi, esi
add esi, 0xf178f53b
xor ecx, edi
mov esi, 0xf1796917
add edx, 0xf179a39d
sub ecx, esi
jmp 0x46fdb1
pop ebx
or ecx, 0xf191d9d5
xor esi, 0xf19233c5
xor ecx, edi
or esi, edi
shr edi, 0x13
or esi, 0xf19367b5
jmp 0x46d135
call ebx
or edi, edx
or ecx, esi
and edi, 0xf194d649
mov ecx, edx
xor edi, esi
or ecx, esi
rol edi, 0x16
add esi, edi
and esi, edi
add edx, esi
jmp 0x46ec27
push 0xed142d41
mov edx, esi
and ecx, 0xf1bb3ffb
shl edi, 0xb
xchg ecx, edx
add esi, edx
add ecx, esi
jmp 0x46e70b
mov ebx, 0x3f4d7907
add edi, edx
mov ecx, esi
xor ecx, edi
sub ecx, esi
or edx, 0xf1be0027
sub ecx, esi
add edi, 0xf1be8d81
or edi, 0xf1bec885
ror edi, 0x13
add ecx, esi
or ecx, edx
xor esi, 0xf1bfb05b
jmp 0x46d7af
push 0xecfd98cd
mov esi, edi
and edx, edi
mov ecx, esi
sub edi, ecx
xor esi, edx
add esi, ecx
mov edi, ecx
sub esi, edi
xchg ecx, esi
xor edi, ecx
add esi, ecx
mov edi, esi
and edx, 0xf1c32315
rol edx, 4
inc ecx
sub ecx, edi
jmp 0x46ef1c
call ebx
mov esi, edx
and edi, 0xf1c4b1d3
add edi, edx
bswap esi
or edx, ecx
and esi, edi
xchg edx, edi
or ecx, edi
mov edi, 0xf1c666ff
xchg edi, edx
xchg edx, esi
or edx, esi
mov edi, edx
mov esi, 0xf1c8255b
shr edi, 0xc
xor edx, ecx
jmp 0x46d983
call fcn.00470730
add edi, ecx
and edi, esi
bswap ecx
sub ecx, esi
or ecx, edi
and edi, 0xf1ce8945
xor ecx, esi
shl edx, 0x17
xor edi, edx
xchg edi, ecx
sub edx, edi
or edi, esi
mov ecx, 0xf1d16d95
inc ecx
jmp 0x46f73f
pop ebx
or ecx, edx
sub ecx, edx
shl edx, 0x19
and ecx, 0xf1d599db
shr ecx, 4
mov esi, edi
and edx, edi
rol edx, 7
jmp 0x46d1ce
push 0xed1a8e07
add edi, esi
mov edx, ecx
inc edi
sub edx, edi
mov edx, 0xf1dd4af5
mov edi, 0xf1ddaf4f
jmp 0x46e91e
push 0xed0e9249
mov edx, edi
rol edi, 2
neg edi
nop
sub edx, esi
add ecx, edx
jmp 0x46d261
pop ebx
not esi
add edx, 0xf1e62c45
mov edx, 0xf1e6a445
mov ecx, edx
and ecx, edx
rol edi, 0x18
and edx, edi
sub edx, 0xf1e8a173
jmp 0x46d73c
push 0xed0e0361
not esi
neg ecx
add ecx, edx
xor ecx, edi
mov ecx, 0xf1ef29ef
mov edx, edi
ror edi, 7
mov edx, 0xf1f01a7f
jmp 0x46d36e
call ebx
or edx, 0xf1f07aad
neg edi
or edi, ecx
mov edx, esi
bswap edi
xchg edx, edi
or ecx, esi
xor esi, edx
mov esi, ecx
xor esi, ecx
jmp 0x46e0e6
pop ebx
sub edx, edi
inc esi
rol ecx, 0x1c
shl edi, 0x10
mov esi, 0xf21683d1
xor esi, ecx
mov edi, ecx
xchg esi, edi
and esi, edx
xchg esi, ecx
xor edx, 0xf21860b3
mov esi, edi
jmp 0x46ff45
pop ebx
xor edx, esi
sub esi, edi
inc esi
mov ecx, edx
sub edi, 0xf221df95
sub ecx, edi
xchg edi, edx
or esi, edx
jmp 0x46fb22
call fcn.00470730
xor esi, edx
add ecx, esi
and esi, 0xf22a40e5
or ecx, edx
shl edx, 0xd
sub edi, ecx
and esi, ecx
xor edi, 0xf22bd131
sub esi, 0xf22c0c9b
xor edi, esi
xchg ecx, esi
dec edi
inc esi
or esi, edi
jmp 0x46e56a
pop ebx
xor ecx, esi
sub esi, edi
and edi, ecx
mov ecx, edx
jmp 0x46f489
mov ebx, 0x3f4d7907
or edi, esi
or esi, ecx
or edi, esi
inc edi
add ecx, edi
mov edx, 0xf23de1ef
jmp 0x470269
mov ebx, 0x3f4d7907
ror ecx, 9
xchg edx, ecx
or edx, 0xf2483d15
xchg edi, ecx
rol edi, 0xd
sub esi, edx
xor edx, edi
sub edi, esi
and ecx, 0xf24a19dd
and ecx, edx
xor ecx, edi
and ecx, edx
jmp 0x46f9d0
pop ebx
dec esi
add esi, ecx
inc edi
and edi, esi
add ecx, esi
neg edx
sub edx, ecx
inc edi
sub esi, edx
shr ecx, 0xf
jmp 0x46d945
call ebx
ror ecx, 0xb
mov edx, ecx
add ecx, esi
and ecx, edx
or ecx, edi
and edx, esi
rol edx, 7
not esi
mov edx, ecx
or edi, esi
xor esi, 0xf26086b7
add edi, 0xf260c1ef
jmp 0x47012a
pop ebx
and edi, esi
shr edx, 0x1b
and ecx, 0xf261a2d9
and edx, 0xf2621341
mov ecx, 0xf262965b
sub esi, edx
jmp 0x4706f4
pop ebx
ror edx, 0xd
add esi, 0xf28050eb
sub edi, 0xf2808c27
add esi, edx
and edi, ecx
inc esi
xor ecx, 0xf2821f3d
mov ecx, edx
xor ecx, edx
mov ecx, edi
inc ecx
xchg edi, esi
jmp 0x46dd91
call fcn.00470730
xchg esi, ecx
mov edx, esi
and ecx, esi
dec edx
and ecx, esi
or edx, edi
or ecx, edi
or ecx, esi
not ecx
sub esi, 0xf2933b75
mov esi, edx
sub esi, edx
jmp 0x46ce9d
push 0xecfa993f
xor edi, edx
xchg esi, edx
add esi, edi
mov esi, ecx
ror edx, 0x19
bswap esi
neg ecx
sub ecx, edi
jmp 0x46f439
call fcn.00470730
xchg edx, edi
mov edi, ecx
xor edx, edi
or edx, edi
xchg edx, edi
add edi, esi
xchg edi, edx
ror edx, 7
jmp 0x46cf15
push esp
and edx, edi
dec edx
dec edx
sub edi, 0xf2a6c17d
jmp 0x4705a0
pop ebx
or ecx, 0xf2b8c58d
add esi, ecx
add esi, 0xf2b99047
sub ecx, edi
dec edx
mov edx, 0xf2bac99b
add ecx, edx
inc edi
add edi, esi
sub esi, edx
nop
shl esi, 6
jmp 0x46ffff
push 0xecf9c721
ror ecx, 8
or esi, edx
add edx, 0xf2c4b961
xchg edi, ecx
mov esi, 0xf2c52f65
or edi, ecx
shr edx, 0xf
xchg ecx, edi
shl ecx, 0x1f
xchg esi, ecx
jmp 0x46f40e
pop ebx
sub edx, esi
sub edx, ecx
ror edi, 0xc
shl edi, 0xb
inc ecx
and ecx, edi
mov edi, edx
neg ecx
jmp 0x46e355
call ebx
mov ecx, 0xf2d7bf8f
xchg edi, ecx
xor edi, 0xf2d83543
mov edi, edx
mov edx, 0xf2d8f4cf
xchg edi, esi
or edx, 0xf2d98239
sub esi, ecx
or edx, edi
xchg edx, ecx
xchg ecx, edi
and edx, esi
jmp 0x46d4a5
push 0xecf28403
sub ecx, edx
inc edx
mov edx, ecx
xchg ecx, esi
add ecx, 0xf2e6f2c3
shl esi, 0x14
xchg edi, edx
and ecx, esi
mov esi, edx
add edx, 0xf2e82309
jmp 0x46edce
push esp
mov edi, 0xf2ee16a3
and ecx, edx
not edi
add edi, edx
neg edx
and ecx, edi
add ecx, edi
xor ecx, esi
inc esi
or ecx, esi
jmp 0x46ee36
push 0xecfed33d
xor esi, edi
bswap edx
sub esi, 0xf2faead7
mov esi, edi
add ecx, edx
sub esi, edx
and edx, edi
dec ecx
and ecx, edi
rol esi, 0x1d
jmp 0x46f918
push 0xed0bc937
add ecx, edx
xchg edi, ecx
rol ecx, 0xc
add edi, edx
and edx, 0xf2fe7be5
or ecx, edx
sub esi, ecx
neg edx
rol edx, 0xe
shr esi, 0x18
shl edi, 3
mov ecx, esi
jmp 0x46db67
push 0xed1791ef
mov edi, edx
shl esi, 0x1b
add esi, 0xf30686f3
or ecx, edi
xor esi, 0xf3073d27
shl edx, 0x17
add edi, 0xf307c9ff
add edi, ecx
neg edi
or edx, edi
jmp 0x46d88f
push 0xecf35cff
add esi, ecx
rol esi, 0x11
add esi, edi
mov esi, edx
or ecx, edi
inc edi
and edx, edi
or edx, esi
and ecx, 0xf30c1def
shl edx, 0x16
jmp 0x46e0aa
push 0xed04c461
not edi
dec esi
ror esi, 0xc
xor ecx, esi
or edx, 0xf30e0d09
or edi, 0xf30e481b
mov ecx, edi
and ecx, 0xf30ebae7
or edi, ecx
and esi, 0xf30f8d21
shl ecx, 0xa
rol edi, 0xe
sub edi, esi
or edi, 0xf311165f
jmp 0x46dc83