Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Query or enumerate registry value

Disassembly:
call sub.user32.dll_GetInputDesktop
cmp eax, 0xffffff1e
jne 0x4010a2
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
call sub.kernel32.dll_SwitchToThread
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
call sub.ntdll.dll_RtlActivateActivationContext
call sub.ntdll.dll_RtlActivateActivationContext
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_LsaClearAuditLog
call sub.kernel32.dll_SwitchToThread
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_LsaClearAuditLog
call sub.ntdll.dll_RtlActivateActivationContext
call sub.ntdll.dll_RtlActivateActivationContext
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_RegQueryMultipleValuesA
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xffffff18
jne 0x40111c
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.advapi32.dll_LsaClearAuditLog
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.advapi32.dll_LsaClearAuditLog
call sub.advapi32.dll_LsaClearAuditLog
call sub.advapi32.dll_LsaClearAuditLog
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_LsaClearAuditLog
call sub.kernel32.dll_SwitchToThread
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xfffffede
jne 0x40119b
call sub.advapi32.dll_LsaClearAuditLog
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_LsaClearAuditLog
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.ntdll.dll_RtlActivateActivationContext
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.ntdll.dll_RtlActivateActivationContext
ret
call sub.user32.dll_GetInputDesktop
cmp eax, 0xffffff2a
jne 0x40120b
call sub.ntdll.dll_RtlActivateActivationContext
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_LsaClearAuditLog
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.ntdll.dll_RtlActivateActivationContext
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.kernel32.dll_SwitchToThread
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
call sub.advapi32.dll_RegQueryMultipleValuesA
call sub.ntdll.dll_RtlActivateActivationContext
ret
jmp 0x469463
add edx, esi
dec ecx
bswap ecx
xchg edx, ecx
shr edx, 0x1a
inc edx
bswap esi
shl edi, 0x1a
jmp 0x46ab10
pop edi
or esi, ebx
add esi, 0x282b95d2
not esi
xor ecx, 0x282c1ed6
not edx
add ebx, ecx
ror edx, 0x1a
and edx, 0x282d0d28
and edx, ebx
sub edx, ecx
add ecx, ebx
sub edx, ecx
and ebx, ecx
add edx, esi
and ecx, ebx
mov ecx, esi
jmp 0x46bcf5
call fcn.0046bfcb
mov ecx, ebx
xor esi, 0x282f66da
dec ecx
mov esi, ebx
sub esi, ebx
or esi, ecx
or ecx, edx
shl ebx, 0x1c
jmp 0x46a227
mov edi, 0x2809144b
sub ebx, ecx
neg ecx
bswap edx
ror esi, 1
bswap esi
sub ecx, 0x28343261
xchg esi, edx
xor esi, ebx
add ecx, 0x28356902
jmp 0x46b7a3
pop edi
xor edx, ebx
or esi, 0x283dfb1a
not esi
add edx, esi
or esi, ebx
xor esi, ecx
rol edx, 0x1e
mov ecx, edx
shl esi, 0x10
and ecx, esi
xchg ecx, edx
and esi, ebx
jmp 0x46c2fb
push esp
neg ecx
not esi
xchg esi, edx
xchg edx, ebx
mov ecx, edx
jmp 0x46a4d1
push 0x27768e47
sub esi, edx
ror esi, 0x1a
dec ecx
xor esi, edx
or edx, 0x28441139
not edx
or ebx, edx
xchg ebx, edx
jmp 0x469c17
call edi
mov edx, ebx
or edx, ecx
xor ebx, ecx
and ecx, edx
sub edx, 0x284cc08b
xor esi, ecx
xor esi, 0x284d5b89
add ecx, ebx
shr ebx, 0x18
jmp 0x46968e
pop edi
neg edx
and edx, esi
mov ebx, 0x284f8e1d
jmp 0x46b1ed
pop edi
shl ecx, 0xa
shr ecx, 4
add ebx, edx
and edx, esi
xor ebx, 0x28516b58
neg ecx
jmp 0x46ac14
call fcn.0046bfcb
mov ecx, esi
neg esi
xchg edx, ebx
xor ebx, ecx
jmp 0x4695e5
push 0x2761a8ae
mov esi, 0x285ff38c
add ebx, edx
neg esi
add edx, ebx
add edx, ebx
mov ebx, edx
xor edx, 0x2861c9f8
xor ecx, 0x28622b4c
and ecx, edx
not ecx
mov esi, 0x2863655a
xor esi, ebx
jmp 0x46c1ab
push 0x27837bc0
mov ebx, ecx
mov edx, 0x28715a43
and edx, esi
add edx, 0x28722023
and ebx, edx
sub esi, ebx
sub esi, ebx
jmp 0x469a95
call edi
shl ebx, 5
mov edx, ecx
sub esi, 0x2874791e
and esi, ecx
xchg esi, ecx
sub ebx, 0x28752971
or esi, ebx
mov ebx, edx
xor edx, esi
or ebx, 0x28761b39
or ebx, ecx
jmp 0x46967f
pop edi
or esi, edx
and ecx, ebx
mov edx, ebx
xchg ebx, esi
add ebx, esi
jmp 0x46adc1
push 0x276f6370
shr edx, 0x15
xchg ecx, esi
sub ebx, ecx
mov ebx, esi
xchg ecx, edx
or ecx, esi
not ecx
neg ebx
jmp 0x46aee8
pop edi
xor edx, esi
mov edx, 0x2890f9f1
and edx, ebx
mov ecx, ebx
ror ecx, 0x1f
xchg esi, ebx
ror esi, 0x15
shr ebx, 0x1d
sub ecx, esi
xchg ecx, esi
mov esi, ebx
jmp 0x46a64c
push 0x2774e8ea
add ecx, esi
add ebx, 0x28a32479
xor ecx, ebx
ror edx, 0xd
neg ebx
mov ecx, ebx
add ebx, ecx
add ebx, ecx
xchg ecx, edx
mov ecx, ebx
jmp 0x46acaf
pop edi
and esi, edx
sub edx, ebx
and ecx, ebx
sub esi, 0x28ad4e39
xor ebx, 0x28ada7ce
mov ebx, edx
xor ebx, ecx
inc edx
shl esi, 4
sub edx, esi
jmp 0x46a0bf
mov edi, 0x6440607e
mov edx, ebx
mov esi, edx
dec edx
and ebx, 0x28b16a3a
or ecx, esi
xor edx, ecx
shl ebx, 0x1d
jmp 0x46b584
mov edi, 0x6440607e
add esi, 0x28b27089
add edx, ecx
dec edx
sub ebx, esi
xchg esi, edx
bswap edx
xor edx, ebx
inc ecx
add ecx, ebx
xor ebx, 0x28b4902c
bswap esi
xor ecx, edx
jmp 0x46a540
call fcn.0046bfcb
add ebx, edx
xor esi, ecx
add esi, ebx
add ebx, ecx
or edx, esi
shr esi, 0x15
mov ebx, esi
xchg ecx, edx
add ecx, ebx
add ebx, ecx
xchg esi, ebx
jmp 0x46b8f9
push 0x27678c88
and esi, edx
sub ecx, ebx
neg esi
shl ecx, 0x1c
shr edx, 6
xor edx, esi
bswap ecx
mov ecx, esi
or ecx, ebx
mov ebx, ecx
add edx, ebx
or ecx, edx
ror ecx, 0xd
add ecx, esi
not ecx
jmp 0x46a929
call edi
sub ebx, esi
or edx, ebx
and ecx, esi
and ecx, ebx
nop
add ecx, edx
and ebx, 0x28c75836
mov esi, edx
or edx, ecx
and ebx, 0x28c810c6
shr esi, 0xb
sub ebx, ecx
rol esi, 0x13
and edx, ecx
jmp 0x46a6be
push 0x277a62c9
xor ecx, edx
or ecx, edx
sub ebx, ecx
or ecx, ebx
not edx
xchg ebx, edx
add edx, 0x28cab6cb
mov ecx, esi
neg esi
neg edx
jmp 0x469539
push 0x2776d587
or ecx, 0x28d0c40a
shr esi, 0x1a
xchg edx, ebx
not ecx
add edx, 0x28d2650a
or ecx, esi
neg edx
xor edx, ebx
sub esi, ecx
xchg ecx, edx
and esi, ebx
xor ebx, edx
mov ebx, 0x28d496a9
or ebx, ecx
jmp 0x46b7dc
pop edi
sub esi, edx
or edx, 0x28d89920
add edx, ebx
xor ebx, esi
xor esi, 0x28d9504a
add edx, 0x28d98d03
bswap edx
xor ecx, esi
jmp 0x46b985
push 0x277d18b0
shl ecx, 0x16
sub ecx, esi
xchg ecx, ebx
sub ebx, edx
mov esi, ebx
xchg ebx, esi
bswap ebx
jmp 0x46af18
pop edi
xchg esi, edx
sub ecx, 0x28ee06ec
sub esi, 0x28ee4229
bswap edx
and esi, ecx
sub ebx, ecx
add ebx, 0x28ef36f3
inc ecx
jmp 0x46afd9
pop edi
or esi, 0x28efc569
sub esi, 0x28effe73
or esi, ebx
mov esi, edx
mov esi, ecx
mov ecx, ebx
add ecx, ebx
xor edx, ebx
ror ebx, 0x12
add esi, 0x28f1d30c
add esi, 0x28f20c2a
jmp 0x4695c1
push 0x2785ff55
mov ebx, 0x28f5021e
mov ebx, 0x28f53c0c
xchg esi, ebx
xor ecx, 0x28f5bc4c
shl ecx, 0x15
jmp 0x46b32c
mov edi, 0x2809144b
xor ebx, ecx
xor ecx, ebx
and ecx, ebx
jmp 0x46a780
pop edi
mov ebx, edx
and ebx, ecx
sub ecx, esi
or edx, ecx
jmp 0x46bc54
push 0x27830f6c
xchg ebx, ecx
sub edx, esi
add ebx, 0x290dabf4
and edx, 0x290de777
neg edx
and esi, ecx
or edx, ebx
jmp 0x469807
push 0x68063
xor ebx, ecx
shl edx, 0xc
and esi, 0x29132ab2
and edx, ecx
shr edx, 0xf
bswap ecx
xor ebx, 0x2914246b
xor esi, ebx
mov edx, esi
rol ecx, 0x13
and ebx, esi
sub edx, 0x291546d5
inc ecx
jmp 0x46ad0d
push 0x276817ba
or ecx, 0x291a25b2
or ecx, edx
and ecx, esi
ror esi, 0x17
xchg edx, ecx
xchg ebx, ecx
shr edx, 0x12
dec ecx
mov ecx, ebx
xor ebx, esi
not ecx
not ecx
add ecx, ebx
jmp 0x46bd9b
pop edi
sub ebx, esi
sub edx, esi
or esi, ecx
dec esi
and esi, edx
or ecx, 0x292403ee
jmp 0x46c26f
pop edi
sub esi, 0x29293c9f
bswap edx
and ecx, esi
add esi, ecx
mov ebx, 0x292a308e
and edx, ebx
sub ebx, 0x292aa77a
add ecx, ebx
dec edx
add edx, esi
shr ebx, 0xb
jmp 0x46a3b2
push 0x2774a54c
sub esi, 0x292be022
add edx, 0x292c3267
xchg ebx, esi
inc esi
shl edx, 6
and edx, esi
xchg ebx, esi
shl esi, 8
shr ecx, 6
jmp 0x469a1b
call fcn.0046bfcb
or edx, esi
or ecx, edx
and esi, ebx
xor ebx, ecx
or edx, esi
ror esi, 0x11
or esi, ecx
and esi, ecx
and esi, ecx
mov edx, 0x293b30b2
not ebx
and esi, ebx
xchg edx, ebx
bswap esi
xor esi, ecx
xchg ebx, esi
jmp 0x46ae70
call edi
neg ecx
xor edx, ecx
rol ebx, 3
inc ecx
and esi, 0x2941ce49
jmp 0x46b24b
pop edi
dec edx
or ebx, 0x29425b1d
xor edx, ebx
not ecx
add esi, ecx
add edx, ebx
inc ebx
ror edx, 0xc
sub ecx, esi
mov edx, 0x29443415
jmp 0x469a73
call fcn.0046bfcb
mov edx, ecx
mov ecx, 0x294a7808
mov ebx, edx
add esi, edx
nop
add ecx, ebx
xchg esi, ecx
sub ecx, 0x294bf0da
shl esi, 0x11
or esi, edx
or edx, 0x294ca276
jmp 0x469b7b
push 0x277c90de
mov esi, 0x295b3482
rol ebx, 0x14
xchg ecx, esi
xchg edx, ecx
mov esi, ecx
xchg esi, ecx
sub ebx, edx
not ecx
bswap ecx
add ecx, 0x295d5277
or ebx, edx
jmp 0x46a800
pop edi
sub ecx, esi
sub edx, esi
mov ebx, 0x295fc22e
or edx, 0x29602e0e
add esi, ebx
sub esi, ecx
xor edx, esi
or edx, esi
shl edx, 0xe
xchg edx, esi
jmp 0x46beff
push 0x276a822f
dec ecx
sub edx, ecx
add edx, ebx
or ebx, ecx
xchg ebx, ecx
and ebx, 0x29677e9d
or ebx, ecx
and esi, edx
add ebx, edx
neg ebx
bswap esi
jmp 0x46bca6
mov edi, 0x2809144b
xor edx, ebx
or ebx, esi
or edx, esi
or edx, 0x296e9c94
ror ebx, 5
jmp 0x46a2a3
push esp
and edx, ebx
shl ebx, 0x18
inc esi
add esi, ebx
nop
inc ecx
mov ebx, edx
xchg ebx, ecx
or edx, 0x2977f7f6
jmp 0x46b49b
call fcn.0046bfcb
xor esi, ecx
xor ecx, ebx
sub ecx, edx
xchg ecx, ebx
xor esi, 0x297ed9ee
sub ebx, edx
xchg ebx, esi
sub ebx, 0x297ffc96
mov ebx, esi
jmp 0x46bdf6
push 0x277a1cd7
add esi, ebx
mov esi, ecx
xor esi, ebx
rol esi, 0x18
xor ebx, ecx
or edx, ecx
add ebx, 0x299313d8
jmp 0x469ba7
pop edi
not edx
ror edx, 0x17
rol ebx, 0x16
xor ebx, ecx
inc ebx
not edx
add edx, 0x29974ee6
mov edx, ecx
or ebx, ecx
xchg ebx, esi
mov ebx, esi
ror ebx, 2
shl esi, 0x1e
add edx, ecx
jmp 0x46a11c
call edi
ror ecx, 0x1e
sub ecx, 0x299e50ae
not esi
or ebx, esi
and ecx, ebx
ror ebx, 0x19
bswap ecx
add esi, ebx
not ecx
mov esi, ecx
xchg esi, edx
jmp 0x46a23c
pop edi
mov ebx, esi
shl ebx, 0x17
not ecx
xor edx, ecx
add ecx, esi
xor ebx, edx
dec edx
xchg esi, ecx
and esi, ebx
and esi, ecx
jmp 0x46c14a
push 0x2764e1be
dec ecx
xor edx, esi
shl ecx, 0x19
xor edx, 0x29aededd
add ebx, esi
xor edx, 0x29af5331
rol esi, 0xb
jmp 0x46bfac
call fcn.0046bfcb
sub esi, edx
or edx, ebx
bswap edx
rol ecx, 0xb
mov esi, ebx
xchg ebx, esi
rol esi, 0xb
or ecx, esi
xchg edx, ecx
sub ebx, 0x29b7e5d5
inc ebx
ror ecx, 8
sub esi, ecx
or ecx, edx
xor ecx, edx
jmp 0x469826
push 0x277cd4e0
not ebx
rol ecx, 0x18
xchg ebx, ecx
xor esi, edx
neg ecx
inc ebx
or ecx, edx
shr ecx, 0x1f
nop
and ebx, esi
xchg edx, esi
jmp 0x469cbe
push 0x2767d326
add edx, 0x29e03929
sub ebx, esi
or esi, edx
add ebx, 0x29e0e544
or ecx, ebx
or ecx, ebx
mov ecx, ebx
bswap edx
or ebx, 0x29e20e5c
sub edx, 0x29e248a4
or ecx, 0x29e2843d
xor esi, ecx
jmp 0x46a043
pop edi
xor esi, 0x29f1e230
and edx, ecx
xchg ecx, esi
shr ecx, 0xe
sub ebx, edx
mov ecx, edx
sub ebx, esi
ror esi, 4
xor esi, ebx
sub ebx, ecx
xor edx, esi
not ecx
xor edx, 0x29f4a7e7
jmp 0x46c249
push 0x27606a6d
sub esi, ebx
sub esi, ebx
jmp 0x46b474
push 0x2764153b
sub ebx, 0x29ffbf2d
mov esi, edx
add ebx, edx
add edx, ebx
and esi, edx
mov ecx, esi
xchg ecx, esi
or ecx, 0x2a015434
sub ebx, esi
add esi, 0x2a01c8b6
xor edx, 0x2a020713
mov ecx, edx
add esi, ebx
mov ebx, 0x2a02b198
dec esi
jmp 0x46b38f
push 0x276b0c06
xchg ebx, ecx
add ecx, ebx
mov esi, edx
xchg ecx, esi
bswap edx
xor ecx, esi
and ecx, ebx
dec esi
dec ebx
jmp 0x46b03c
pop edi
sub ebx, edx
add ecx, ebx
xchg esi, edx
sub ecx, ebx
and ecx, edx
ror ebx, 0xc
not edx
jmp 0x46ad78
push 0x27649c47
and edx, 0x2a1827af
dec esi
xchg ecx, esi
mov ebx, 0x2a18e0b4
add esi, 0x2a191d23
xchg ebx, ecx
or ebx, 0x2a199097
and ebx, esi
jmp 0x46a73d
mov edi, 0x2809144b
sub ecx, 0x2a1bd609
bswap ecx
or ebx, edx
or esi, ecx
xchg esi, ecx
xchg edx, ebx
jmp 0x46b567
push 0x401400
sub esi, ecx
neg esi
add ebx, 0x2a22775d
and ecx, esi
add esi, edx
and ecx, ebx
dec edx
and ebx, esi
neg esi
not esi
xor esi, ecx
jmp 0x46c2d9
mov edi, 0x4132136a
mov ecx, ebx
sub ebx, edx
add ecx, ebx
xor ecx, esi
or esi, edx
add esi, 0x2a2a2c3e
or esi, edx
and ecx, 0x2a2aa0a6
mov esi, ebx
jmp 0x4696c0
pop edi
mov edx, ecx
bswap ecx
add ecx, edx
xor ebx, edx
or ecx, ebx
jmp 0x469d98
pop edi
xor esi, ebx
ror ecx, 0xd
neg esi
xchg ebx, ecx
and esi, ebx
add ebx, 0x2a34fa4e
add ebx, ecx
inc esi
shr esi, 8
sub edx, 0x2a35e7ca
xor ebx, ecx
or esi, ebx
jmp 0x46a615
pop edi
add ecx, 0x2a36ad7a
nop
xchg edx, esi
not ebx
or esi, 0x2a379bfe
or esi, ebx
xor ecx, edx
not ecx
shl esi, 0x17
add ebx, ecx
xor ebx, 0x2a390386
and ecx, edx
xchg ebx, edx
or ebx, 0x2a39aec9
xchg esi, ebx
jmp 0x46adfd
push 0x277761c6
xchg ecx, esi
mov edx, ecx
shl ecx, 0x14
or ecx, edx
xor ecx, ebx
shl edx, 1
jmp 0x46c0ea
call edi
mov ebx, esi
not ecx
mov esi, edx
add ecx, ebx
or edx, ebx
dec ecx
or edx, ebx
and ecx, esi
jmp 0x46b93a
mov edi, 0x6440607e
and edx, ebx
shr ecx, 0xb
rol ecx, 3
mov ebx, 0x2a44720e
add ecx, esi
neg ebx
inc ecx
not ebx
xor edx, ebx
shr edx, 8
shr esi, 0xb
xor ebx, ecx
xchg edx, ecx
ror esi, 1
shl edx, 0x14
jmp 0x46afaa
mov edi, 0x6440607e
sub edx, ebx
xor edx, ecx
shr esi, 0x13
or esi, ebx
and edx, 0x2a4849f4
jmp 0x469505
pop edi
sub edx, ecx
or ebx, esi
jmp 0x4698c7
call fcn.0046bfcb
mov edx, ecx
or edx, ecx
add ecx, esi
xor ecx, 0x2a51575d
add ecx, 0x2a519010
sub ecx, esi
jmp 0x46965d
push 0x2763d177
mov esi, edx
dec esi
xchg edx, ecx
rol ecx, 0xb
shr edx, 0x1d
shl ebx, 5
and edx, ecx
jmp 0x46ab1e
mov edi, 0x2809144b
inc ebx
sub ebx, 0x2a594bdc
shl edx, 0x12
bswap edx
xchg ecx, edx
or esi, 0x2a5a43a2
and ecx, 0x2a5a7f64
mov edx, ebx
jmp 0x46b865
call edi
and ecx, edx
mov edx, esi
or ecx, esi
or esi, 0x2a5e920d
sub edx, ebx
neg edx
xor ebx, esi
jmp 0x4694d2
push 0x276a3fc3
rol esi, 0x13
and ebx, esi
jmp 0x46a403
pop edi
and ecx, esi
and esi, edx
neg edx
mov ecx, ebx
nop
bswap esi
and ebx, edx
inc esi
nop
jmp 0x469db9
pop edi
or ebx, ecx
and ebx, 0x2a78334d
add esi, ebx
mov edx, 0x2a78a5c1
ror esi, 0x14
jmp 0x46ba91
pop edi
sub esi, ebx
mov ebx, edx
and ebx, edx
xor ecx, ebx
shr edx, 0x12
not edx
sub ecx, ebx
bswap esi
bswap ecx
mov ecx, esi
xor edx, ebx
jmp 0x469f01
push 0x2786445a
xor edx, 0x2a8f0cfd
or ecx, edx
mov ecx, ebx
or ebx, ecx
and ecx, edx
bswap esi
jmp fcn.0046be32
push 0x276459ec
mov ecx, ebx
sub esi, ebx
sub ecx, ebx
or edx, ebx
shl edx, 8
or esi, edx
xor ecx, edx
or edx, 0x2a96f5a8
add ecx, edx
xor esi, ecx
mov edx, esi
and edx, ebx
or ecx, edx
jmp 0x46ac66
push 0x2785b641
xchg esi, ebx
and edx, ebx
sub edx, 0x2a9c38a4
and esi, 0x2a9c7ea8
mov edx, 0x2a9cbbf5
shl ebx, 0x11
sub edx, ecx
xchg esi, ebx
jmp 0x469e15
push 0x2760e0da
shr ebx, 0x13
add ebx, esi
shl edx, 0x16
and esi, edx
shr ebx, 0xb
and ecx, edx
mov esi, 0x2aa4a551
shr esi, 0x16
sub edx, ecx
add ecx, ebx
sub edx, ebx
jmp 0x46b4bf
push 0x40
sub ecx, edx
dec ecx
or ecx, 0x2aa66448
xchg esi, edx
jmp 0x469fd3
push 0x27614fbd
rol edx, 0x12
and ebx, ecx
and ebx, 0x2aa87607
and esi, edx
xchg esi, edx
inc edx
xor ebx, esi
shl ecx, 0x11
jmp 0x469752
call fcn.0046bfcb
xchg esi, ebx
xchg edx, ecx
shr ecx, 0x17
xor ecx, esi
neg edx
and edx, ebx
or edx, esi
mov esi, ecx
xchg ecx, ebx
jmp 0x46b089
call fcn.0046bfcb
mov esi, ecx
xchg esi, ecx
and ecx, 0x2ab5c700
xchg ecx, esi
dec esi
mov ebx, 0x2ab677eb
mov ebx, edx
add ebx, edx
mov ecx, esi
bswap ebx
jmp 0x46bc18
call fcn.0046bfcb
not ebx
or ebx, esi
or ecx, esi
or ebx, edx
add edx, esi
mov ecx, edx
add esi, 0x2adb2ca7
xor edx, esi
jmp 0x46bb5b
push 0x27771bfb
rol esi, 0xc
shl esi, 0xe
sub edx, 0x2ade21c6
add ecx, edx
dec ecx
ror edx, 0x10
add ecx, ebx
shl edx, 0xa
add edx, 0x2adf8760
xor ebx, edx
xchg ebx, ecx
jmp 0x46ae58
push 0x276d7ba9
mov ebx, 0x2ae046a5
dec esi
and ebx, 0x2ae0bff7
or ebx, esi
mov ecx, ebx
xor ecx, edx
or ecx, esi
xchg ebx, ecx
not edx
jmp 0x469ec0
push 0x277fa8ed
shl esi, 8
mov ebx, esi
mov ebx, edx
sub ecx, 0x2ae4e2ce
shr edx, 6
ror edx, 0x1b
or ecx, ebx
jmp 0x469ab1
call fcn.0046bfcb
mov ecx, 0x2ae5e336
add edx, ebx
or esi, ebx
xor edx, esi
xchg edx, ebx
shl esi, 2
xor ebx, edx
sub ecx, esi
dec esi
sub edx, ecx
add edx, ecx
inc ecx
jmp 0x46a69b
pop edi
xchg edx, ebx
not esi
mov ebx, 0x2af000d1
ror ebx, 0x18
and esi, ecx
jmp 0x46a143
call edi
not ecx
neg ebx
jmp 0x46af31
pop edi
bswap ecx
shr edx, 6
xor ebx, ecx
jmp 0x469973
pop edi
or esi, ebx
mov edx, ebx
sub ebx, ecx
jmp 0x46a379
pop edi
dec ecx
mov esi, edx
sub ebx, esi
inc ecx
add esi, ecx
xchg ebx, ecx
bswap ecx
sub edx, 0x2afa9421
or ebx, esi
and ebx, esi
or ebx, esi
xor ecx, ebx
or ebx, 0x2afbb240
jmp 0x46be9c
push 0x276f1d83
shl esi, 0x13
mov edx, esi
shl edx, 4
xor ecx, 0x2b0a5546
xor esi, edx
rol edx, 0x17
rol ecx, 0x1e
and ecx, edx
rol edx, 0x15
or esi, 0x2b0bbcf0
add ebx, 0x2b0bf9ce
jmp 0x46992d
call edi
shl ecx, 5
and esi, 0x2b16fbfa
xchg esi, ecx
mov edx, ebx
sub edx, ebx
xor edx, 0x2b17e11c
ror ebx, 0xd
inc edx
jmp 0x46bba6
pop edi
mov ecx, esi
rol ebx, 2
add edx, ebx
shr ecx, 0x1a
xor esi, 0x2b1ca2fd
mov esi, ebx
shl esi, 0x11
sub esi, ecx
or ebx, edx
jmp 0x46b96d
call edi
xor edx, ecx
xchg edx, esi
add esi, 0x2b23f497
inc edx
bswap edx
xor ebx, edx
sub edx, 0x2b24eac6
add ecx, esi
mov ebx, 0x2b255f60
jmp 0x469c69
pop edi
add esi, ecx
sub ecx, edx
mov esi, 0x2b276970
and ecx, 0x2b27a217
add ebx, esi
mov ecx, ebx
dec esi
xor edx, esi
shr ecx, 8
add ecx, 0x2b290688
neg esi
or esi, ecx
jmp 0x46c105
push 0x276ac90f
or ebx, ecx
not edx
or edx, ecx
mov ecx, edx
xchg ebx, esi
rol ebx, 0x13
dec ecx
xor esi, edx
sub ecx, esi
sub edx, esi
shr edx, 0xc
xchg ebx, edx
jmp 0x46ab58
pop edi
and ecx, edx
xchg edx, ebx
sub esi, edx
mov esi, edx
xchg esi, edx
rol ebx, 0x11
add edx, ebx
add ecx, 0x2b32d392
or esi, 0x2b330c3c
add ebx, 0x2b334925
and ecx, edx
sub esi, 0x2b33bb82
or edx, ecx
jmp 0x4695f5
call fcn.0046bfcb
xor edx, ebx
sub esi, 0x2b394b6e
xor ecx, esi
mov esi, ebx
mov esi, 0x2b3a00fd
mov ebx, 0x2b3a3d40
mov ecx, ebx
xor ebx, esi
bswap esi
xor esi, ecx
and esi, edx
jmp 0x46c412
mov edi, 0x2809144b
xor edx, ecx
xor ecx, edx
not edx
inc ecx
and ebx, edx
and edx, ecx
jmp 0x46bd4c
call edi
add ebx, edx
neg ebx
sub esi, edx
sub ecx, ebx
sub esi, 0x2b479d70
sub ecx, edx
inc esi
sub esi, ebx
mov esi, 0x2b488e42
jmp 0x46aa40
push 0x27857170
bswap edx
add ebx, ecx
or edx, esi
mov ecx, 0x2b5214d2
mov edx, ecx
or ecx, ebx
shr esi, 5
jmp 0x46b3eb
push 0x27674838
sub ecx, 0x2b57f786
and esi, edx
xor esi, 0x2b5868fd
sub ebx, ecx
sub esi, ebx
not esi
jmp 0x469b50
mov edi, 0x2809144b
xchg esi, ecx
sub edx, ecx
dec ebx
and ebx, esi
and edx, ecx
xor esi, 0x2b62ffdb
xor ebx, esi
xchg ebx, edx
not edx
jmp 0x46a1d7
push 0x276d348f
sub ebx, 0x2b66326d
mov esi, ebx
xor ebx, ecx
xor ecx, edx
sub ecx, ebx
ror edx, 0x12
xchg ebx, ecx
neg esi
xchg ebx, edx
or ecx, edx
or edx, ecx
add esi, edx
bswap edx
dec ebx
jmp 0x46b807
push 0x2777a70d
bswap ecx
shr edx, 9
shl esi, 0xd
inc edx
and esi, 0x2b790436
add esi, ebx
jmp 0x46a456
push 0x277f2f7b
bswap esi
or esi, ecx
xor edx, ecx
bswap ebx
mov ecx, edx
xor edx, ecx
and esi, 0x2b7afe55
xor ecx, ebx
or ecx, edx
xchg ebx, esi
jmp 0x46b846
pop edi
xchg ecx, edx
xor ecx, 0x2b7f1774
xor ebx, ecx
xchg edx, ebx
xchg edx, esi
or ecx, ebx
ror edx, 0xb
mov ecx, esi
xor esi, ecx
jmp 0x46c3a0
mov edi, 0x6440607e
xor ecx, esi
xor ebx, edx
neg ebx
inc esi
and ecx, edx
sub edx, ebx
or ebx, esi
xor edx, 0x2b87da8e
jmp 0x469afb
pop edi
sub ecx, esi
mov ebx, ecx
xor ebx, edx
shl edx, 0xe
rol esi, 0xa
or edx, esi
mov esi, 0x2b90f3be
add ebx, edx
inc edx
or ebx, esi
add ecx, edx
xchg edx, ebx
and edx, ebx
and ebx, edx
jmp 0x469f87
pop edi
mov edx, 0x2b92cef9
dec ecx
and ecx, ebx
xchg esi, edx
and esi, edx
or esi, ecx
shl ecx, 9
and esi, ecx
add ebx, ecx
and ebx, edx
bswap ebx
jmp 0x46bff4
call edi
rol ecx, 0x15
xor ecx, 0x2b99f2cd
dec esi
xchg ebx, edx
ror ebx, 0xa
bswap edx
and edx, ebx
or ebx, esi
mov esi, ebx
mov ecx, ebx
mov ebx, ecx
jmp 0x46b8e5
pop edi
add ebx, edx
or esi, ecx
add edx, 0x2b9ccc74
rol ecx, 0x11
jmp 0x46b0ec
pop edi
and edx, ebx
inc ecx
bswap ebx
xor ecx, ebx
mov esi, ebx
sub edx, ecx
xor edx, 0x2ba7d5ea
not esi
add ebx, ecx
jmp 0x46ae24
call edi
xor ecx, esi
sub ebx, 0x2baf0981
and ebx, edx
jmp 0x46b177