Function at 0x401000
Capabilities:
Create or open mutex on windows
Create process on windows
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetCapture
cmp eax, 0xfffffeec
jne 0x40109d
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SwitchToThread
call sub.ole32.dll_PropVariantCopy
call sub.kernel32.dll_OpenMutexA
call sub.kernel32.dll_OpenMutexA
call sub.kernel32.dll_OpenMutexA
call sub.ole32.dll_PropVariantCopy
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.ole32.dll_PropVariantCopy
call sub.ole32.dll_PropVariantCopy
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_OpenMutexA
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_OpenMutexA
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_OpenMutexA
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.ole32.dll_PropVariantCopy
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.ole32.dll_PropVariantCopy
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.ole32.dll_PropVariantCopy
call sub.ole32.dll_PropVariantCopy
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff27
jne 0x40113f
call sub.kernel32.dll_OpenMutexA
call sub.ole32.dll_PropVariantCopy
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.ole32.dll_PropVariantCopy
call sub.ole32.dll_PropVariantCopy
call sub.kernel32.dll_OpenMutexA
call sub.kernel32.dll_SwitchToThread
call sub.ole32.dll_PropVariantCopy
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_OpenMutexA
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SwitchToThread
call sub.ole32.dll_PropVariantCopy
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_OpenMutexA
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_OpenMutexA
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffef7
jne 0x4011a5
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_OpenMutexA
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_OpenMutexA
call sub.kernel32.dll_OpenMutexA
call sub.ole32.dll_PropVariantCopy
call sub.ole32.dll_PropVariantCopy
call sub.kernel32.dll_OpenMutexA
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_OpenMutexA
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.ole32.dll_PropVariantCopy
call sub.ole32.dll_PropVariantCopy
ret
call sub.user32.dll_GetFocus
cmp eax, 0xfffffee5
jne 0x401215
call sub.ole32.dll_PropVariantCopy
call sub.kernel32.dll_OpenMutexA
call sub.ole32.dll_PropVariantCopy
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_OpenMutexA
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_OpenMutexA
call sub.kernel32.dll_OpenMutexA
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_OpenMutexA
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.ole32.dll_PropVariantCopy
call sub.kernel32.dll_OpenMutexA
call sub.kernel32.dll_SwitchToThread
ret
jmp 0x46976c
shl esi, 7
sub edi, 0xd4f4ade3
add ebx, ecx
add ecx, esi
inc esi
mov ebx, esi
jmp 0x46b0e1
pop edi
and edx, esi
sub edx, esi
mov edx, 0xd5ca6f07
sub ecx, ebx
jmp 0x469b92
call fcn.0046db15
xor esi, 0xd5cafc02
add ebx, esi
or edx, esi
jmp 0x46b838
call fcn.0046db15
add esi, ecx
rol esi, 4
and edx, 0xd5d4e8b3
or edx, ebx
mov ecx, esi
rol edx, 0x1f
shl ecx, 0xb
jmp 0x46999b
push 0xd5152bfe
mov ecx, 0xd5d66589
xchg edx, ecx
shr esi, 3
add esi, 0xd5d72a85
jmp 0x469b3c
mov edi, 0x2d734e3d
bswap ebx
or ecx, 0xd5d7bfed
sub esi, ecx
mov esi, ebx
mov edx, ecx
sub ebx, 0xd5d8acc7
dec ecx
xor edx, 0xd5d939d7
jmp 0x46d609
push 0xd5051fd3
not edx
rol esi, 0x1a
bswap ebx
xor ecx, edx
xor esi, edx
dec esi
jmp 0x46d34f
call edi
and esi, edx
shr esi, 4
sub ebx, edx
shr esi, 0x1e
jmp 0x46bda2
pop edi
add ebx, edx
rol edx, 0xe
sub edx, ecx
not ebx
neg ebx
and esi, ecx
add esi, ebx
xor edx, ebx
or esi, 0xd5f32e9b
shr edx, 0xd
dec ecx
or edx, 0xd5f3e625
jmp 0x46bd76
mov edi, 0x6e447c44
not ebx
inc ebx
sub ecx, esi
add ebx, esi
or ecx, ebx
xor esi, ecx
dec esi
bswap ecx
jmp 0x46b5ff
push 0xd51572c2
xchg ebx, ecx
and ebx, esi
shr edx, 9
add ecx, ebx
or esi, ecx
neg esi
and esi, edx
jmp 0x46bd41
pop edi
sub ecx, 0xd611e1d2
add esi, ebx
add esi, edx
bswap ecx
shl ebx, 9
or ecx, 0xd6130f32
xchg esi, ecx
rol ecx, 0x1a
dec edx
jmp 0x469e8f
push 0xd50c21bc
ror esi, 0xa
xchg ebx, edx
rol edx, 3
sub ebx, edx
add edx, ebx
add esi, edx
rol edx, 0x12
add ecx, edx
sub ecx, edx
xchg esi, ebx
jmp 0x46d088
call edi
or ecx, 0xd62a1790
sub esi, edx
mov esi, ecx
rol esi, 0x1a
or edx, ebx
jmp 0x46c6bb
pop edi
xor ecx, edx
sub edx, 0xd6330de5
xchg edx, ebx
shr ecx, 0x13
dec edx
mov edx, esi
sub esi, ecx
mov ebx, ecx
and esi, edx
jmp 0x46d333
pop edi
not esi
and esi, 0xd635539a
ror edx, 0xf
bswap ecx
or esi, ebx
add ecx, esi
mov ebx, edx
sub esi, ecx
jmp 0x46b367
pop edi
neg esi
add edx, ecx
add ecx, 0xd63fe227
or edx, 0xd640205f
neg esi
sub ecx, esi
jmp 0x46d890
call fcn.0046db15
or edx, ecx
rol esi, 0x16
or esi, ebx
add ecx, edx
neg esi
add ecx, 0xd644c110
or edx, ebx
xor edx, ebx
xor esi, 0xd6457750
jmp 0x46ac52
push 0xd5189238
xchg ebx, edx
sub ebx, 0xd648228b
xor ecx, edx
add esi, ebx
mov esi, 0xd648ef93
or ebx, esi
xchg ebx, ecx
jmp 0x46c73e
pop edi
add ecx, edx
neg esi
or ecx, edx
inc edx
xor edx, 0xd64ac0a5
add esi, 0xd64b1079
sub edx, ecx
jmp 0x46c12d
mov edi, 0x6e447c44
sub ebx, ecx
shr edx, 0x1b
and ebx, esi
bswap esi
inc ebx
rol ebx, 0x1f
and ecx, ebx
or ecx, esi
jmp 0x46b5eb
push 0xd4fd0da2
or edx, esi
xor ecx, esi
add edx, ecx
jmp 0x46beaa
pop edi
rol ecx, 0x1c
add ebx, ecx
xchg esi, edx
bswap edx
dec ebx
mov esi, edx
xchg ebx, edx
and ebx, esi
add ecx, ebx
sub ecx, 0xd65a6776
rol esi, 0x19
jmp 0x46d87b
call edi
neg edx
bswap esi
or esi, ebx
sub esi, ebx
mov ecx, esi
jmp 0x46b1a5
pop edi
xor edx, esi
neg ebx
add esi, 0xd6683d4e
mov edx, 0xd6687979
and edx, esi
add edx, ecx
xor ebx, edx
or edx, ebx
add ebx, edx
mov ecx, esi
add ecx, edx
xor edx, 0xd66a5f33
jmp 0x469d4e
call fcn.0046db15
mov ebx, edx
and ecx, 0xd6c109f0
and ecx, edx
and ecx, edx
shl edx, 0xf
not ebx
and ecx, esi
or esi, ecx
sub ebx, 0xd6c2c6d3
not esi
jmp 0x46b75c
call edi
or ecx, edx
sub esi, 0xd6d13749
xchg edx, ecx
add edx, esi
add ebx, esi
jmp 0x46c45a
push 0xd50b9318
mov edx, 0xd6ef91cb
ror edx, 0x12
bswap edx
xor ecx, 0xd6f04fd1
shl edx, 0x1f
add ecx, esi
sub ecx, esi
and edx, 0xd6f155e7
xor edx, esi
xchg esi, ecx
sub ebx, 0xd6f20ff7
jmp 0x46b1f4
pop edi
shl edx, 9
sub esi, ebx
mov ecx, ebx
mov edx, esi
or edx, 0xd6f36a2b
or ecx, esi
jmp 0x46a81a
pop edi
xchg esi, ebx
and ebx, 0xd6fde7ca
sub edx, ecx
not ecx
mov ecx, edx
dec ecx
sub edx, ebx
shl esi, 0x1d
add esi, 0xd6ff9f04
xchg esi, edx
or ebx, ecx
inc edx
jmp 0x46c1bf
push 0xd5145269
and edx, 0xd700ab69
rol edx, 1
or esi, 0xd7012723
not ecx
inc ebx
xor edx, 0xd701ef7c
not edx
xor ecx, esi
jmp 0x46ce94
push 0xd50e1be4
and esi, ebx
and edx, ebx
rol ebx, 0x15
add esi, 0xd70b7778
dec edx
mov edx, ecx
xchg edx, esi
dec ecx
bswap esi
or esi, ebx
jmp 0x46d9c3
push 0xd50eabf9
xor edx, ecx
or ebx, 0xd724904c
xchg ebx, edx
mov esi, ecx
add edx, ebx
neg ebx
add ecx, esi
sub ecx, 0xd7260791
ror ecx, 0x1a
and ebx, 0xd726be8a
rol ebx, 0x13
xchg ecx, ebx
jmp 0x46c52a
pop edi
xor esi, ebx
xchg esi, ebx
xor ebx, ecx
jmp 0x46a8b2
push 0xd50491bd
sub ecx, esi
sub ecx, esi
and esi, edx
mov ebx, esi
add esi, edx
not esi
xchg ebx, edx
dec ebx
ror ebx, 9
inc esi
inc esi
dec ecx
jmp 0x46adc0
call edi
and ecx, edx
xor esi, ebx
and edx, esi
neg edx
xor esi, edx
rol ecx, 3
shl ebx, 0xf
mov ebx, 0xd751080b
xor esi, ebx
or edx, 0xd751859e
or edx, 0xd751c2c8
and edx, 0xd7520354
jmp 0x46d7c4
push 0xd500a538
sub ebx, ecx
rol edx, 0x13
xchg ebx, esi
sub ebx, 0xd75a117b
and esi, 0xd75a4fe1
xchg esi, ecx
add edx, ebx
bswap edx
not edx
add esi, ebx
jmp 0x46cd6a
push 0xd504d6dc
bswap edx
neg edx
mov ebx, esi
mov edx, esi
shl esi, 9
or ebx, esi
rol ecx, 0xe
jmp 0x469871
push 0xd508c3d4
add ecx, ebx
or esi, ecx
xor edx, ecx
dec edx
neg esi
dec ecx
xchg ebx, edx
shl ecx, 5
xor ecx, esi
xchg ebx, edx
ror esi, 0x1f
not esi
jmp 0x46b85b
push 0xd51803f3
mov esi, edx
xor edx, esi
add esi, ebx
xor esi, 0xd7789d9e
or esi, 0xd778ebc3
neg ecx
add edx, 0xd77965ac
xor edx, ecx
and esi, 0xd779dee9
jmp 0x46d7d3
push 0xd511c581
or ecx, 0xd78dd01a
xor edx, esi
and esi, edx
or ebx, esi
shr ecx, 0x1e
nop
nop
mov ecx, ebx
add ecx, edx
inc ecx
rol ebx, 0x16
sub esi, ecx
and edx, esi
jmp 0x46b11b
push 0xd4fa379d
shr ebx, 0x1e
bswap esi
xchg esi, edx
mov ebx, esi
sub ebx, ecx
sub ebx, 0xd7a17127
xchg edx, ebx
or ebx, ecx
bswap edx
jmp 0x46d573
push 0xd5120de4
sub ecx, 0xd7a452e1
sub ecx, 0xd7a491b8
xor ebx, 0xd7a4cc97
neg ebx
or ecx, ebx
and ebx, ecx
mov ebx, edx
bswap edx
sub ecx, edx
xor ecx, ebx
and edx, esi
not ebx
xor esi, edx
jmp 0x46d035
pop edi
neg esi
sub ecx, 0xd7af929b
rol edx, 0x1e
not esi
jmp 0x46c373
push 0xd50bd8ac
and esi, ecx
and edx, ecx
sub edx, ecx
mov ebx, edx
add edx, esi
add ebx, edx
xor edx, ecx
or esi, 0xd7b62930
mov ecx, ebx
or edx, ecx
mov esi, edx
and esi, edx
xor esi, ecx
jmp 0x469bb3
pop edi
shr edx, 7
or ecx, 0xd7c3afbd
and ebx, ecx
jmp 0x46d35e
pop edi
xor ecx, edx
and ecx, ebx
xchg ebx, edx
mov ebx, edx
dec esi
dec ebx
or edx, 0xd7ced494
shl ecx, 1
jmp 0x46ae86
pop edi
sub esi, ecx
shl edx, 0x1e
mov ecx, esi
xchg edx, ecx
dec ebx
sub esi, 0xd7e1cef5
mov edx, esi
shl ecx, 5
jmp 0x46c0fc
mov edi, 0x6e447c44
sub ebx, esi
add ecx, edx
or esi, ebx
jmp 0x469e2f
mov edi, 0x2d734e3d
and edx, 0xd7e5a2d9
and ebx, ecx
xchg ebx, esi
xchg ebx, edx
xor ebx, edx
mov ebx, 0xd7e6de2e
sub ecx, 0xd7e71d33
and ecx, edx
jmp 0x46ceca
pop edi
sub ecx, ebx
bswap ecx
shr ebx, 8
not edx
and ebx, esi
and edx, ebx
xor edx, ebx
inc ecx
mov edx, ecx
add edx, ebx
sub ecx, esi
and edx, 0xd7ee7c93
or esi, ecx
jmp 0x46a01e
push 0xd5017fad
sub ebx, 0xd7f7fb0e
or ebx, 0xd7f84666
xor ebx, esi
inc ecx
sub ebx, esi
xchg esi, edx
and ecx, 0xd7f97731
jmp 0x46c72d
call fcn.0046db15
xchg ecx, ebx
sub edx, 0xd7fbb11e
xchg ecx, edx
jmp 0x46ca1f
call fcn.0046db15
mov ebx, esi
mov ebx, edx
and ebx, esi
or ecx, 0xd7fced96
not edx
and esi, edx
shl ebx, 0x1d
add ecx, 0xd7fdeffc
mov ecx, 0xd7fe2ac7
xor esi, ecx
mov ecx, 0xd7fea2eb
xchg ecx, esi
add ecx, edx
jmp 0x46a5ad
pop edi
or ecx, edx
mov edx, ebx
or ecx, esi
sub ebx, ecx
add ecx, esi
add esi, 0xd8148bba
shr ebx, 6
sub esi, ebx
nop
ror ecx, 0x14
inc ecx
and esi, 0xd8160a4f
xor ebx, edx
jmp 0x46b2ca
call edi
sub edx, 0xd8169e2f
sub ecx, 0xd816dd02
not ecx
bswap edx
mov esi, ebx
shr esi, 0x1a
sub ebx, 0xd8180cdf
mov edx, ebx
sub ebx, edx
mov esi, edx
jmp 0x46dad3
call edi
add edx, 0xd8259002
and ecx, edx
neg edx
inc edx
sub ecx, esi
add esi, 0xd8278016
shl esi, 0x13
or ecx, 0xd827fa64
jmp 0x46c8c4
push 0xd50908cd
xchg ecx, edx
mov esi, edx
xor edx, ecx
ror esi, 7
jmp 0x46b4a9
push 0xd4fd99ff
ror edx, 4
or edx, ebx
xchg ecx, ebx
mov esi, 0xd82bb9e5
neg esi
add ecx, ebx
and ecx, ebx
inc esi
shr esi, 8
jmp 0x46ba2b
pop edi
rol ebx, 0xa
sub ecx, 0xd84073ba
dec ebx
sub ecx, ebx
xchg ecx, edx
xor edx, esi
inc edx
and esi, ebx
xchg ecx, esi
xchg esi, ebx
shl ebx, 0xf
add edx, ecx
add edx, esi
ror edx, 0x12
jmp 0x46bdb9
pop edi
ror edx, 0x15
not edx
shr esi, 9
bswap edx
xor ecx, ebx
dec esi
inc esi
inc ecx
xchg ebx, ecx
jmp 0x46a76b
push 0xd4fddfa8
add ebx, ecx
and ecx, edx
or ebx, ecx
xchg ebx, esi
shr edx, 2
or edx, ecx
jmp 0x46ca98
call fcn.0046db15
add edx, 0xd84e7658
rol ebx, 0x1c
dec edx
xchg ebx, ecx
rol esi, 0x1c
and esi, edx
inc ecx
sub ebx, esi
add edx, ecx
dec esi
jmp 0x469cdd
push 0xd5087bd2
shr ecx, 0x1c
ror edx, 0x1a
mov esi, ecx
neg edx
and ecx, 0xd8587962
jmp 0x46ae1e
call edi
neg esi
sub esi, ecx
or ebx, edx
jmp 0x46bc2f
pop edi
inc ebx
bswap edx
or esi, ecx
and ecx, esi
sub ecx, 0xd87205f3
mov esi, ebx
mov ecx, ebx
not esi
ror edx, 0x19
neg ecx
xchg edx, esi
xchg ecx, esi
add ecx, edx
add edx, ebx
inc ecx
jmp 0x469f59
mov edi, 0x6e447c44
and ebx, edx
sub edx, esi
or ebx, ecx
mov ebx, esi
neg ecx
jmp 0x46c582
push 0xd51c941f
xor ecx, 0xd88550d4
or ecx, esi
mov esi, 0xd885c13b
neg ebx
and edx, esi
xchg ecx, esi
and ebx, esi
not esi
jmp 0x46d014
pop edi
mov ecx, 0xd8873466
or edx, ecx
or edx, ebx
inc edx
xor edx, esi
add ecx, edx
xor esi, ecx
xor esi, 0xd888c517
bswap ebx
xor ecx, 0xd889374e
ror esi, 0x18
xchg ecx, esi
shl ecx, 0xe
jmp 0x46b45f
pop edi
and esi, ebx
neg esi
dec esi
not esi
add ebx, ecx
xchg esi, ebx
and edx, esi
xchg ecx, edx
or edx, esi
jmp 0x46bf46
pop edi
and ebx, 0xd88c4cd9
sub ebx, edx
not esi
xchg esi, edx
not esi
neg ebx
or ecx, ebx
jmp 0x46cdbb
pop edi
shr ecx, 8
mov edx, ebx
xor edx, 0xd88ff1ec
xor ecx, edx
mov edx, ecx
neg esi
or edx, ecx
add ebx, esi
sub esi, ecx
bswap esi
xchg ecx, ebx
mov esi, edx
jmp 0x46a7f5
push 0xd4facfce
xor esi, ecx
xor edx, 0xd892728d
and ecx, ebx
and ebx, 0xd892e09b
mov ebx, esi
mov edx, esi
rol edx, 0x1f
jmp 0x469a15
push 0xd4fd53f3
add esi, ebx
sub edx, 0xd89db858
inc ecx
add esi, ebx
sub ecx, edx
rol ecx, 0x1c
or ecx, 0xd89ef716
mov edx, esi
xchg ebx, esi
mov ecx, esi
jmp 0x46b884
call edi
shr edx, 0xb
and edx, 0xd8a03bab
xor ecx, esi
mov esi, ecx
not esi
or ecx, ebx
inc ecx
xor ebx, edx
add edx, ebx
xor ebx, esi
xor esi, ebx
add esi, edx
xor esi, 0xd8a2dc32
and ebx, esi
jmp 0x46c922
pop edi
sub ebx, esi
or ecx, ebx
bswap ebx
add edx, ecx
sub edx, 0xd8aabd2d
or edx, 0xd8aafba3
xchg ebx, edx
or esi, 0xd8ab72c6
and edx, ecx
sub ecx, edx
inc ebx
xor edx, ecx
sub esi, 0xd8ad00df
sub edx, ecx
not edx
rol ecx, 0x1b
jmp 0x46ba14
mov edi, 0x2d734e3d
xor ebx, ecx
or edx, ebx
inc esi
add ecx, edx
and esi, ebx
or ebx, 0xd8b7a569
inc ebx
xor edx, ebx
or esi, ecx
rol edx, 0x1c
add edx, ebx
jmp 0x46a4d5
call edi
dec ebx
add edx, ecx
xor edx, 0xd8c7d618
xchg edx, ecx
inc ebx
not ecx
mov edx, ebx
xor ecx, ebx
sub ecx, esi
xchg ecx, esi
xor ebx, edx
jmp 0x46d37b
push 0xd50448f5
shl esi, 0x13
xor esi, ebx
sub esi, ebx
sub ebx, 0xd8cb43d3
and edx, esi
mov esi, ebx
and ebx, esi
or ebx, 0xd8cc2ba7
add edx, 0xd8cc6244
shl edx, 0x13
sub ecx, esi
mov edx, ecx
nop
jmp 0x46aa86
pop edi
xchg edx, ebx
nop
xchg ecx, ebx
and ebx, edx
dec edx
dec ebx
xor esi, ebx
mov ecx, edx
rol ebx, 0xf
xchg ebx, esi
bswap ecx
inc ecx
and esi, edx
jmp 0x46cd16
push 0xd5005c83
or edx, 0xd8d96d6c
bswap edx
or ecx, 0xd8d9dc6b
xchg ecx, edx
add edx, esi
xor edx, 0xd8da9348
ror ecx, 0xd
bswap ebx
xchg esi, ecx
mov esi, ecx
or ecx, ebx
jmp 0x46acd8
pop edi
xor edx, ecx
or ecx, 0xd8f5dbfb
not ebx
or edx, esi
xor ebx, esi
shr ecx, 0xa
sub edx, 0xd8f6feb3
or ebx, esi
sub ebx, esi
jmp 0x46b734
pop edi
xor esi, ecx
shl esi, 0xd
mov ecx, ebx
neg ecx
add edx, ecx
sub ecx, edx
mov ebx, 0xd9062391
sub ebx, 0xd9065be9
jmp 0x469df5
push 0xd50ef315
and edx, 0xd912a82a
mov esi, edx
add edx, 0xd91317e8
sub ebx, 0xd913517c
mov edx, 0xd9138681
mov ecx, 0xd913cf26
sub esi, ebx
mov ecx, edx
sub ebx, esi
or ebx, 0xd914a868
dec ebx
sub ebx, esi
mov ecx, 0xd915514c
jmp 0x46bfe2
call fcn.0046db15
add edx, 0xd917c028
shl esi, 0x11
inc ecx
xchg ecx, esi
add edx, ecx
sub ebx, 0xd918d900
xor edx, esi
and esi, ecx
shl ecx, 0x13
and esi, ebx
neg ecx
shl ecx, 0xd
or esi, 0xd91a6f07
jmp 0x46bb9f
pop edi
ror ebx, 0x18
add edx, 0xd92c0263
sub esi, ebx
xchg esi, edx
shl ebx, 5
not esi
mov edx, ecx
and edx, 0xd92d5f5f
sub edx, 0xd92d94a8
or ebx, ecx
ror esi, 1
or esi, edx
or ebx, edx
inc esi
jmp 0x46d153
push 0xd501c4a8
neg edx
add ecx, edx
add esi, edx
inc ecx
jmp 0x46984c
push 0xd518dad2
and ebx, ecx
and edx, esi
add edx, esi
jmp 0x469efe
pop edi
add ecx, esi
sub ebx, edx
shl esi, 0x1d
add esi, ecx
ror ecx, 8
sub edx, ecx
jmp 0x4699d3
push 0xd514e3b2
sub esi, ebx
bswap esi
and esi, 0xd94b5fd1
sub esi, ecx
bswap esi
xchg esi, edx
and esi, edx
or ebx, esi
and ecx, ebx
and ebx, ecx
sub edx, 0xd94e2756
and ecx, ebx
or esi, ecx
jmp 0x469832
pop edi
add ecx, edx
sub edx, ebx
dec esi
shl esi, 0x1b
dec esi
not esi
and esi, ecx
sub ebx, 0xd950b052
jmp 0x46d76d
pop edi
bswap ebx
xor ecx, 0xd95145c4
mov ecx, 0xd9518e7a
inc ebx
ror edx, 0x14
dec ecx
and edx, esi
bswap ebx
jmp 0x46bde7
pop edi
xor esi, ecx
add edx, esi
mov ecx, edx
xor esi, edx
or esi, edx
mov edx, esi
or edx, ecx
or ebx, esi
and edx, 0xd9587c4b
jmp 0x46c832
mov edi, 0x6e447c44
add esi, ecx
or edx, ebx
sub ebx, ecx
mov ecx, ebx
rol ecx, 0x12
xchg ebx, edx
mov ecx, edx
sub edx, 0xd9687e89
and ecx, 0xd96946ab
xor esi, ebx
jmp 0x46cd4a
call edi
xor esi, ecx
or edx, ecx
add esi, ebx
bswap edx
inc esi
and edx, ecx
add esi, ecx
sub edx, 0xd96b9bcf
mov ecx, edx
mov ecx, 0xd96c1572
or ecx, edx
bswap edx
xchg ebx, esi
jmp 0x46cada
mov edi, 0x2d734e3d
neg ebx
bswap edx
shl edx, 0xe
inc edx
shl esi, 0xf
jmp 0x469792
push 0xd5113580
and edx, ebx
ror esi, 0x19
xor esi, 0xd9757dd5
mov esi, ebx
mov ecx, edx
or ecx, ebx
ror ecx, 0x10
jmp 0x46d4b6
pop edi
sub edx, esi
xchg ecx, esi
mov ecx, edx
xor ebx, ecx
add ebx, 0xd978ea5a
sub edx, esi
xor ebx, 0xd97967f5
xor ebx, edx
sub edx, ebx
xor ebx, 0xd97a2f26
mov ecx, ebx
mov edx, esi
jmp 0x46b509
push 0xd507eaf0
xor edx, esi
ror ebx, 6
or edx, ebx
and esi, ebx
xchg esi, ebx
shl ecx, 0x1c
dec esi
jmp 0x46d5ef
call fcn.0046db15
rol edx, 0x17
and edx, ebx
shl ebx, 0x10
ror ebx, 9
neg esi
sub ecx, esi
mov ebx, edx
mov edx, 0xd9a6af50
jmp 0x46c0dd
push 0xd5013646
xor ebx, edx
xor esi, ecx
xor esi, 0xd9a779a4
ror ecx, 0x10
mov edx, ebx
xor edx, esi
and edx, ecx
xor edx, ecx
ror esi, 0x14
ror edx, 0x1d
mov ebx, 0xd9a96c48
or esi, edx
or ecx, edx
jmp 0x46b5b2
pop edi
xor ebx, esi
rol edx, 0x17
or ecx, ebx
and ecx, esi
xchg ebx, esi
mov edx, ecx
xchg edx, ecx
mov ebx, esi
shr ecx, 7
xor edx, ecx
add edx, esi
jmp 0x46caad
push 0xd5149a3f
xchg ecx, edx
and ecx, esi
ror edx, 0x10
and ecx, esi
sub ebx, 0xd9be2ade
bswap ebx
xor edx, 0xd9beb47e
or ecx, 0xd9bef39a
ror edx, 0x10
mov edx, 0xd9bf6c62
rol ecx, 0xc
add ebx, ecx
or esi, edx
jmp 0x46c898
call fcn.0046db15
xchg edx, esi
xchg esi, edx
sub ebx, edx
sub edx, esi
add esi, 0xd9c22250
and edx, ecx
inc ebx
add ebx, 0xd9c2ddbe
or ecx, esi
sub ecx, edx
neg edx
or ecx, esi
mov edx, esi
ror edx, 6
mov ebx, esi
jmp 0x469faa
push 0xd51cdfdb
and esi, edx
dec edx
xor ebx, edx
and ebx, esi
xor esi, ebx
nop
and ecx, ebx
shr edx, 0xd
mov edx, esi
or ecx, 0xd9db714c
jmp fcn.0046b0ca
mov edi, 0x6e447c44
sub esi, ebx
shr ecx, 9
sub edx, ebx
xor ecx, ebx
add ebx, esi
jmp 0x469813
mov edi, 0x6e447c44
and ecx, edx
sub ecx, esi
shl ecx, 0x1c
xchg ecx, esi
rol ebx, 8
shl ecx, 0x1a
dec ebx
dec ecx
add ecx, 0xd9e3530e
and ecx, 0xd9e3911d
mov esi, ecx
bswap ebx
jmp 0x46ba62
pop edi
and edx, ecx
inc ebx
mov ecx, 0xd9ee548a
and ecx, 0xd9ee9549
add ebx, 0xd9eed343
sub edx, 0xd9ef1149
sub ecx, ebx
or ecx, 0xd9ef8a9f
sub ebx, esi
sub ecx, edx
and ebx, edx
not edx
and ebx, esi
xchg esi, edx
not esi
jmp 0x46aa5f
push 0xd51b246f
add ecx, 0xda132438
mov esi, edx
mov ebx, edx
mov ebx, ecx
and ecx, 0xda141e82
jmp 0x46c9f8
push 0xd50564b7
add ebx, esi
sub edx, ebx
inc ebx
jmp 0x46b499
pop edi
xchg edx, ebx
xchg ecx, esi
not ebx
jmp 0x46a73a
pop edi
and esi, ecx
bswap esi
xor ecx, 0xda178ee6
add ebx, edx
jmp 0x46bd55
push 0xd5117c66
and esi, 0xda2dace6
dec ebx
and edx, ecx
mov esi, ecx
and esi, ecx
dec edx
rol edx, 0x18
or ebx, edx
sub esi, ecx
and ebx, 0xda2fdb4a
add ebx, esi
add ecx, esi
neg edx
and ecx, esi
jmp 0x46afe4
push 0xd4fa869d
xor edx, 0xda3c8950
xchg ebx, edx
and ebx, esi
not edx
shr edx, 0xd
sub ecx, esi
jmp 0x46be0a
push 0xd5083314
or esi, edx
sub edx, 0xda4572cc
xchg ebx, esi
add edx, esi
mov ebx, esi
add ecx, esi
jmp 0x46bae5
call fcn.0046db15
or ecx, 0xda46c23c
rol ebx, 0x10
or edx, 0xda473f1c
mov ebx, edx
xor ecx, edx
neg ebx
and ebx, 0xda482e7b
add edx, ebx
mov edx, ecx
sub ecx, ebx
jmp 0x46bed0
pop edi
or ebx, 0xda60c49a
inc esi
sub ecx, edx
sub ebx, 0xda618a07
or ebx, esi
sub esi, edx
or edx, 0xda624034
mov ebx, esi
rol ebx, 0x15
jmp 0x46c8dd
pop edi
xor ebx, 0xda66f41d
inc edx
sub ebx, edx
jmp 0x469781
push 0xd5184a26
add ebx, edx
sub ebx, 0xda680e2d
or esi, ecx
shr ebx, 0xc
sub ecx, 0xda68d45e
xor esi, edx
or ebx, ecx
jmp 0x469e70
pop edi
or ebx, edx
mov ecx, ebx
and ecx, esi
and esi, edx
mov edx, ebx
and esi, ecx
ror edx, 3
jmp 0x469d6a
pop edi
shl ebx, 0xa
xor ecx, 0xda74ce61
xchg esi, ecx
or esi, 0xda7549ee
mov edx, 0xda75949a
or ebx, 0xda75d32a
xor ecx, ebx
or edx, 0xda764ac0
jmp 0x46d987
push 0xd4fcc497
or esi, ebx
or ebx, esi
not esi
or ecx, 0xda85f744
mov esi, edx
sub esi, ecx
add esi, 0xda86a954
and ebx, edx
jmp 0x469f49
push 0xd50e6250
xor esi, ecx
add ebx, ecx
and ebx, edx
neg ecx
mov edx, ecx
or edx, esi
or esi, ebx
rol esi, 8
xor esi, ebx
sub esi, ecx
jmp 0x46aa01
pop edi
or edx, ebx
or edx, ebx
or edx, esi
neg esi
add esi, ecx
xchg ecx, esi
xor ecx, ebx
not esi
sub ecx, ebx
xor edx, esi
and ecx, 0xda9ea841
jmp 0x46b9a8