Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get common file path
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff07
jne 0x4010ac
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.ntdll.dll_ZwSetInformationObject
call sub.ntdll.dll_ZwSetInformationObject
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwSetInformationObject
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwSetInformationObject
call sub.ntdll.dll_ZwSetInformationObject
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff25
jne 0x40114e
call sub.ntdll.dll_ZwSetInformationObject
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.advapi32.dll_CredMarshalCredentialA
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff15
jne 0x4011d2
call sub.advapi32.dll_CredMarshalCredentialA
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.advapi32.dll_CredMarshalCredentialA
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffedf
jne 0x401238
call sub.ntdll.dll_ZwSetInformationObject
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwSetInformationObject
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.advapi32.dll_CredMarshalCredentialA
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
call sub.kernel32.dll_GetWindowsDirectoryW
call sub.ntdll.dll_ZwSetInformationObject
call sub.ntdll.dll_ZwSetInformationObject
call sub.advapi32.dll_CredMarshalCredentialA
call sub.advapi32.dll_CredMarshalCredentialA
ret
jmp 0x46c816
mov ecx, esi
shl ecx, 5
and ebx, esi
and ebx, 0x49ca9f79
jmp 0x46e937
push 0x49e9c585
dec edx
neg esi
not edx
and esi, 0x4ad8ae73
and edx, esi
and edi, edx
add ebx, edi
sub edx, 0x4ad9ce27
add esi, edi
mov esi, edx
jmp 0x46f2a7
call fcn.004703e3
or esi, edi
sub ebx, edi
xor edx, esi
xor edi, edx
xor edx, edi
or ebx, 0x4add4279
sub ebx, edi
not edx
and edi, ebx
sub esi, edi
neg edi
mov ebx, edx
jmp 0x46f7e4
push 0x49d93387
or ebx, edx
neg edi
add edi, esi
dec esi
xor ebx, edx
add edx, edi
shr esi, 0x13
mov esi, ebx
jmp 0x46d658
pop ecx
or edi, 0x4b03ec9d
xchg esi, edx
mov esi, edi
add edx, esi
jmp 0x46f992
push 0x4a01fb5d
sub edi, ebx
add ebx, edi
xor esi, edi
mov ebx, esi
and edx, ebx
or edx, ebx
jmp 0x46e648
pop ecx
xchg edx, edi
xchg edx, edi
mov edi, esi
ror esi, 0x1e
sub edi, 0x4b1d9e97
dec edx
mov edx, edi
sub edi, 0x4b1f3e8f
xchg ebx, esi
mov ebx, edi
mov edx, edi
xor esi, 0x4b214953
jmp 0x46f4ea
push 0x49f6e813
sub esi, edi
and edx, esi
sub edx, ebx
xor edx, esi
jmp 0x47000b
push 0x49d4f355
xchg edi, esi
xor edx, ebx
xor edi, edx
dec edx
shr edx, 0x1f
sub edi, ebx
mov edi, 0x4b2b8d73
neg esi
mov esi, 0x4b2c8d31
xchg edi, edx
rol ebx, 0x12
mov esi, edi
jmp 0x46d3af
mov ecx, 0x3f4d7907
xor esi, 0x4b384143
and esi, 0x4b38aac1
or esi, 0x4b3911c1
not ebx
not edi
shr edi, 6
mov ebx, 0x4b3ab683
shl edx, 0x1e
bswap esi
xchg esi, edx
dec edx
neg edi
sub edi, ebx
or esi, edx
jmp 0x46ddb1
call ecx
or ebx, edx
add edi, 0x4b4af139
and esi, edi
sub edi, ebx
sub edx, 0x4b4c3a03
sub edi, edx
jmp 0x46ff7b
mov ecx, 0x3f4d7907
inc ebx
inc edx
xor edx, esi
xor ebx, edi
mov esi, 0x4b61e1a1
mov edi, esi
sub esi, ebx
or edx, 0x4b630a45
xchg edi, esi
xor edx, esi
dec esi
xor esi, 0x4b6493d5
jmp 0x46e4b2
push 0x49e43e55
and esi, edx
xor edx, ebx
add edi, ebx
add edx, edi
add ebx, edi
and edx, 0x4b7004a9
jmp 0x46e10a
push 0x49ef1973
or ebx, edi
shr edx, 0x1c
sub edx, 0x4b75dac5
xchg ebx, edi
sub esi, edx
ror esi, 0x15
bswap edi
mov edx, 0x4b77146f
mov edi, 0x4b775047
or edx, edi
jmp 0x46d0bb
call ecx
sub esi, edx
or ebx, edi
or edi, ebx
shl edx, 8
xor ebx, esi
xchg esi, ebx
or esi, edx
or edx, edi
xor ebx, edx
dec esi
inc edi
bswap edx
or esi, 0x4b7e8bdd
sub edi, esi
jmp 0x46cb1d
push 0x49f2f55d
mov esi, edx
mov edx, ebx
and ebx, edi
dec esi
or edx, 0x4b84e4c5
add esi, edi
bswap esi
mov edi, 0x4b85a44b
rol esi, 0x16
xor esi, ebx
jmp 0x46cbd3
push 0x49e35373
add esi, edi
add esi, edi
mov edx, edi
sub esi, edi
rol edi, 4
xchg esi, ebx
xor ebx, esi
and esi, edi
xor esi, ebx
inc edi
jmp 0x46d2da
pop ecx
shr edx, 3
and edx, 0x4b8ce511
sub edx, esi
mov ebx, 0x4b8d5a63
xor esi, 0x4b8da5bd
xor ebx, 0x4b8de163
mov ebx, edi
and edx, 0x4b8e551f
jmp 0x46dbd3
pop ecx
xor ebx, esi
mov ebx, edi
sub esi, edx
xor edi, esi
add ebx, edx
and edi, esi
sub edx, edi
and edx, 0x4b95f23f
shr esi, 0xa
xor edx, ebx
jmp 0x46d565
call ecx
xor edx, edi
or ebx, edx
mov edx, esi
xor edi, esi
shl esi, 4
mov ebx, edi
or esi, edx
add edx, esi
sub edi, edx
and edx, esi
not edi
mov edx, ebx
jmp 0x46d488
pop ecx
add edi, 0x4ba84a43
sub ebx, edi
xor ebx, 0x4ba92c3f
dec edx
and ebx, esi
ror esi, 0x18
jmp 0x46d391
mov ecx, 0x3f4d7907
ror esi, 0x16
sub esi, 0x4bab5329
inc edi
xor esi, edi
xchg edi, edx
ror edi, 0x14
jmp 0x46f64a
push 0x49f7d84d
xor edi, esi
bswap edi
xor ebx, edi
xor esi, ebx
add ebx, esi
and edx, 0x4bb23ffb
mov ebx, edi
shl ebx, 9
mov esi, edx
xchg edx, ebx
jmp 0x46f733
pop ecx
sub edi, edx
or esi, 0x4bccd3a5
and esi, 0x4bcd0f7d
add edi, esi
mov ebx, esi
and edx, esi
xchg edi, ebx
and esi, edx
sub edi, 0x4bce79b9
xor esi, 0x4bceb57d
mov esi, ebx
xchg edx, esi
jmp 0x46e601
push 0x49decd0f
or edx, edi
xchg edx, ebx
add edx, 0x4bcfef29
or ebx, 0x4bd02a9d
mov esi, edx
not ebx
and edx, edi
inc edx
add edx, esi
not edx
jmp 0x46f5de
pop ecx
or edx, edi
shl ebx, 0x16
xchg edi, ebx
ror edi, 4
and ebx, 0x4bd2e47f
or ebx, esi
rol edx, 6
inc edi
and esi, ebx
shl edi, 0x1c
jmp 0x46d0a1
call fcn.004703e3
or edx, 0x4bd76bbd
add edx, edi
dec edi
or edi, 0x4bd8a11d
sub esi, edi
add edx, esi
xor ebx, 0x4bd9ea21
xor edx, ebx
jmp 0x46f34c
push 0x49e3ca71
and edx, edi
or edi, esi
xor ebx, 0x4bdbadd5
or ebx, edx
or edx, 0x4bdc80af
dec edx
xor edi, edx
or edi, 0x4bddb5a5
mov esi, edi
rol esi, 0x18
jmp 0x46cdcc
pop ecx
sub edi, edx
rol ebx, 0x1c
xor edi, ebx
mov ebx, 0x4be07325
xchg ebx, edi
rol edx, 0x1c
add edx, ebx
mov ebx, edi
jmp 0x46ea42
pop ecx
and esi, 0x4bf35d85
mov edx, edi
xor esi, 0x4bf48619
mov edx, ebx
sub edi, esi
xor edi, 0x4bf5cfd5
jmp 0x46edc6
mov ecx, 0x3f4d7907
or esi, ebx
xchg edi, esi
neg esi
or esi, edi
or ebx, 0x4bf863af
sub edx, ebx
add edi, ebx
sub edx, 0x4bf9c0b5
sub esi, edi
xchg edi, edx
jmp 0x46ddf7
pop ecx
xchg edx, edi
add ebx, edi
add esi, edx
add edi, ebx
add ebx, edi
sub esi, 0x4bfd9221
sub edi, 0x4bfe01a1
sub edi, edx
or edi, edx
mov edx, 0x4bffaf9b
mov esi, edi
xor edi, ebx
or esi, edi
neg edx
jmp 0x46ff66
pop ecx
or edx, edi
ror esi, 0x10
inc edx
xchg ebx, edx
mov edx, 0x4c037541
mov ebx, edi
bswap esi
ror ebx, 0xa
sub ebx, edi
or esi, ebx
add esi, edi
add edx, edi
jmp 0x46da08
pop ecx
inc edx
add edx, 0x4c14fa5f
shr esi, 0x1c
add edx, esi
jmp 0x46d304
pop ecx
and edi, 0x4c16d31f
sub ebx, edi
mov ebx, 0x4c17e26f
bswap edi
xor edi, esi
ror ebx, 0x15
not ebx
bswap edx
add edi, edx
xchg esi, edx
jmp 0x46ff28
pop ecx
ror edi, 8
rol ebx, 0xa
add esi, edi
not edi
sub edi, edx
or edx, 0x4c1dec11
dec edi
bswap esi
mov ebx, 0x4c1fecd3
rol edx, 0x12
jmp 0x46f12f
pop ecx
rol edx, 0xd
mov edx, esi
inc esi
neg ebx
shl edi, 0x16
mov esi, edi
neg edx
add edx, edi
xor edx, 0x4c2480c5
ror esi, 4
shl edi, 0x17
and edx, edi
jmp 0x46df67
push 0x4a03f5d1
inc ebx
or edi, ebx
or esi, edx
xchg ebx, edi
xor edi, edx
xor ebx, esi
mov ebx, edx
rol edi, 0x11
jmp 0x46eff4
pop ecx
xor ebx, edx
or edx, edi
rol edx, 4
xor edi, 0x4c322241
add esi, 0x4c328bff
and edx, edi
jmp 0x46efab
call ecx
bswap edi
bswap edx
shr ebx, 0x1c
or ebx, esi
rol edx, 2
mov edi, esi
sub edx, ebx
or edx, edi
jmp 0x46e3b0
pop ecx
bswap esi
and edx, 0x4c43486b
sub edx, edi
or edi, ebx
mov edx, edi
mov ebx, edi
shr esi, 0x18
dec ebx
jmp 0x4702b5
push 0x49d9aa5f
not ebx
not edx
and ebx, esi
and edx, edi
mov edx, esi
and ebx, edi
xchg ebx, edi
and edi, ebx
bswap esi
add esi, edx
or ebx, edi
shl edi, 0x1a
jmp 0x46fc9b
call ecx
xor edi, edx
or edi, 0x4c88af3f
ror ebx, 1
sub edx, 0x4c8a1e7d
or edx, ebx
xchg edi, esi
mov esi, 0x4c8dfb79
xor esi, edi
mov ebx, 0x4c8f81bb
xchg edi, esi
add ebx, edi
sub edi, ebx
and edi, 0x4c99d00b
xor ebx, edi
jmp 0x46d3d5
pop ecx
sub edx, edi
shl ebx, 0xd
ror edi, 3
neg ebx
mov edx, edi
bswap ebx
mov edx, ebx
xchg edi, esi
sub esi, ebx
add edx, edi
jmp 0x4701c6
call ecx
or edx, ebx
ror ebx, 0x1f
xor edx, 0x4ce5b13b
sub edx, edi
dec esi
xor edi, edx
sub edi, 0x4ce74133
shr edi, 0xe
and ebx, edi
or ebx, edi
shl ebx, 0xf
xchg edx, edi
jmp 0x46f3f6
push 0x4a03ad93
xor edi, 0x4ce93029
add edi, esi
and edi, edx
or edi, 0x4cea9ac9
dec ebx
and edx, edi
jmp 0x46d54b
call ecx
sub edx, ebx
xor esi, 0x4ced6027
sub edi, ebx
add esi, 0x4cee57d7
and edx, edi
or esi, edx
xor edx, edi
rol ebx, 0x1a
and edi, 0x4cef7ce3
add ebx, 0x4cf09583
jmp 0x46cf5b
push 0x40
rol edi, 0x10
or edi, edx
neg edx
mov edx, 0x4d193595
sub esi, ebx
and esi, edi
add esi, edi
or edx, edi
shl esi, 0x11
and esi, ebx
mov edx, edi
or ebx, edx
jmp 0x46ecc2
call ecx
xchg edi, edx
and ebx, esi
add ebx, esi
xchg esi, edi
xor edi, edx
or esi, ebx
jmp 0x46f5ca
pop ecx
add esi, ebx
sub edi, edx
xor ebx, edi
mov edx, 0x4d366ab1
ror edx, 8
xchg ebx, esi
and esi, 0x4d375bbb
mov esi, 0x4d37c275
add esi, 0x4d38822b
or edx, 0x4d39fa29
jmp 0x4700fc
pop ecx
and esi, edi
xchg esi, edi
add edi, esi
mov edx, ebx
rol edi, 0xe
mov edx, ebx
jmp 0x46cae0
call fcn.004703e3
inc esi
sub edx, 0x4d5666b5
xor ebx, 0x4d571101
sub esi, edi
and edi, ebx
xor edi, ebx
and edx, edi
neg edx
inc edi
or edi, ebx
mov edi, 0x4d5a999f
add edx, edi
not edx
or edi, 0x4d5bcecd
jmp 0x46fc3a
mov ecx, 0x3f4d7907
sub edx, esi
mov edx, esi
add esi, ebx
shl edi, 0xd
and edx, edi
sub edi, esi
xor edi, esi
mov edi, esi
mov edx, edi
dec edx
and esi, edx
xor ebx, edx
jmp 0x46f8a0
pop ecx
sub esi, 0x4d6ded05
xor edx, ebx
xor edi, edx
add edi, esi
and edi, ebx
and edi, edx
sub ebx, 0x4d6fbe27
and edi, 0x4d707573
or esi, edx
sub esi, edx
and ebx, edi
xchg edx, esi
xor edx, edi
not ebx
jmp 0x46e222
push 0x49f66df9
add edx, ebx
add edi, esi
neg edx
xor edi, esi
bswap ebx
and ebx, edi
add edi, esi
mov esi, ebx
not ebx
shr ebx, 0x1f
xor edx, 0x4d907b79
rol edx, 0xa
jmp 0x46cb5d
pop ecx
or esi, ebx
and ebx, edx
or edx, 0x4da362db
or ebx, edx
add ebx, edx
mov ebx, edi
and esi, ebx
xor ebx, edx
xchg edi, edx
xchg edx, esi
add edx, edi
or edi, esi
shl edx, 2
add esi, 0x4da76695
jmp 0x46d613
call fcn.004703e3
add edi, 0x4dac7c7b
mov ebx, edi
rol edi, 0x12
add edi, 0x4dad6a8d
jmp 0x46d03d
call fcn.004703e3
sub edx, ebx
ror ebx, 1
shr edi, 0x11
add edi, ebx
mov esi, 0x4db54431
not edi
mov edi, ebx
add ebx, edx
sub edx, 0x4db670cd
add edi, edx
sub ebx, esi
neg edi
not edi
xchg edi, esi
rol edx, 0x18
shl edi, 0x17
jmp 0x46cc72
push 0x49e950f7
xchg edi, edx
sub ebx, edi
or edi, 0x4dc40f07
xor edi, ebx
and esi, ebx
bswap ebx
jmp 0x46c8cb
pop ecx
xor esi, edx
add esi, 0x4dc60563
xchg ebx, esi
mov esi, edi
xchg ebx, esi
or edi, 0x4dc7a343
sub ebx, esi
not edi
jmp 0x46fd69
pop ecx
sub edi, ebx
and ebx, edi
xor edx, edi
add esi, edi
neg edi
sub ebx, 0x4de3a793
or esi, edi
add edi, edx
bswap edi
add edx, edi
jmp 0x46d49a
call fcn.004703e3
add ebx, edi
xchg edi, ebx
or edx, edi
and edi, esi
mov esi, edx
inc edi
or edi, 0x4de85b61
mov edx, 0x4de8972d
xor edi, edx
and edx, ebx
xchg ebx, edi
xor edi, 0x4deadf01
jmp 0x46d80f
push 0x4a0680d3
shl edx, 8
xor edx, esi
and edi, 0x4df632e9
xchg edi, esi
or edi, esi
mov edi, 0x4df71fb9
inc ebx
mov edi, ebx
xor edi, esi
inc esi
jmp 0x46f71e
push 0x49eaad69
sub ebx, edi
bswap edx
shr edi, 4
ror ebx, 3
sub edi, edx
add esi, edi
xor ebx, edi
xchg edi, ebx
sub esi, ebx
shl edx, 0x15
xor esi, edx
bswap edx
jmp 0x46cd24
push 0x49e4b0d7
and edx, edi
dec edx
and edi, esi
sub esi, ebx
sub ebx, edi
and edx, edi
and ebx, esi
xchg ebx, esi
inc edi
mov edi, 0x4e19ebc9
jmp 0x46facb
push 0x49ddd4a9
and edx, 0x4e36105d
and esi, edx
rol esi, 5
xor edx, ebx
and edi, edx
xchg ebx, edi
or esi, ebx
rol edx, 0x1b
jmp 0x46ebc1
pop ecx
mov ebx, edx
mov ebx, edi
shl ebx, 0x17
or edi, esi
xor ebx, 0x4e3b05bd
xor edx, 0x4e3b433b
sub esi, ebx
or edx, esi
add esi, ebx
add edx, 0x4e3d90a3
add ebx, esi
xchg edi, esi
shl ebx, 0xc
neg esi
jmp 0x46f202
call fcn.004703e3
dec esi
sub edi, edx
bswap esi
add esi, 0x4e566dfd
dec ebx
or ebx, 0x4e577a8b
inc edx
xor edi, ebx
mov ebx, 0x4e586d43
dec esi
mov edi, ebx
sub edi, esi
jmp 0x46f516
push 0x401400
sub edi, 0x4e6852a7
add ebx, edx
xor edi, ebx
xor edi, edx
and esi, ebx
add esi, 0x4e6a791f
neg edi
xor edx, ebx
rol edi, 5
xor ebx, edi
jmp 0x46faa3
pop ecx
rol esi, 0x18
xor esi, 0x4e6d331f
and ebx, edx
bswap ebx
sub edi, 0x4e6e64a3
or edi, 0x4e6ea0a9
or edx, ebx
shr edx, 0xc
dec edi
sub esi, edi
xchg ebx, esi
add ebx, esi
mov ebx, esi
mov edx, esi
jmp 0x46d211
mov ecx, 0x3f4d7907
shr edi, 1
bswap edx
neg edx
sub ebx, edx
and edx, 0x4e7e138b
mov ebx, edx
jmp 0x46c913
call fcn.004703e3
bswap ebx
and edx, ebx
ror edx, 3
add edx, 0x4e8ca9af
and esi, 0x4e8d6977
sub edx, ebx
and edi, esi
and ebx, edx
and edi, edx
mov esi, 0x4e8f519b
sub ebx, edi
or edx, esi
xor ebx, esi
xchg edi, esi
xchg esi, edi
add edi, edx
jmp 0x46d9c6
mov ecx, 0x3f4d7907
rol edx, 0x13
shl edi, 4
inc edi
xchg edx, edi
xchg edi, edx
add edx, esi
mov edx, ebx
add esi, edx
sub edx, ebx
shl edi, 0xa
xchg esi, edi
not esi
bswap esi
and edi, esi
jmp 0x46fc7e
push 0x49f1f729
add edx, ebx
add ebx, 0x4eb698c9
ror edx, 4
shl ebx, 0xc
sub edx, edi
ror esi, 7
add edx, esi
inc edx
sub edi, edx
ror ebx, 0x17
xor edx, ebx
and edx, ebx
jmp 0x46f57f
mov ecx, 0x3f4d7907
not ebx
sub ebx, edi
shl esi, 0x19
sub edx, esi
or edx, 0x4ec1cee5
xor edx, esi
ror esi, 5
and edx, 0x4ec282c3
shl edi, 9
mov edx, 0x4ec3c41f
and edx, esi
add esi, edi
jmp 0x46db18
push 0x49d0e5a7
neg edx
and ebx, esi
shl ebx, 0x13
xor edx, ebx
inc ebx
inc esi
jmp 0x46f6a8
push 0x49d409b1
add edx, ebx
inc ebx
neg ebx
or esi, edi
xchg ebx, esi
not edx
jmp 0x46ef2d
pop ecx
or edx, esi
inc ebx
and edx, 0x4f3d5567
xor ebx, edi
xor edx, edi
mov edx, esi
add edx, 0x4f3eebc3
xor ebx, edx
mov ebx, esi
xor esi, ebx
neg ebx
rol ebx, 0x13
jmp 0x46dcbc
call ecx
and edi, edx
add ebx, edx
xor ebx, esi
dec edx
sub edi, ebx
shl ebx, 9
and ebx, 0x4f4c11bf
mov edx, ebx
jmp 0x46cfd8
push 0x49de4b59
rol edx, 0x10
or edx, 0x4f6cdb93
mov ebx, 0x4f6d46cf
sub edx, 0x4f6d8399
or ebx, esi
or edx, ebx
or ebx, 0x4f6e6db9
not edx
jmp 0x46d23f
push 0x6b416
add edi, edx
dec ebx
sub edi, edx
inc edi
mov edx, edi
shr ebx, 0x12
or edi, 0x4f90da37
xchg edx, edi
add esi, edx
xor esi, ebx
bswap esi
bswap ebx
jmp 0x46e389
push 0x49d8bbc3
sub esi, edi
sub edx, 0x4fafd085
and edi, ebx
mov ebx, esi
add esi, edx
xchg esi, edx
not edx
add edx, 0x4fb30599
and ebx, edx
shr edx, 6
jmp 0x46c9b1
push 0x49d48019
xor esi, edi
mov edx, 0x4fdbc55b
and esi, edi
xchg esi, ebx
or edx, ebx
ror esi, 0xd
inc esi
and esi, edx
bswap ebx
neg ebx
add edx, ebx
xchg ebx, esi
jmp 0x46cb6f
pop ecx
mov edi, esi
or edx, esi
not edi
shr ebx, 5
xor edx, ebx
xor esi, edi
mov edx, ebx
mov edi, ebx
sub edi, ebx
or edi, 0x4ff1e601
sub edx, 0x4ff2c46d
or edx, esi
sub ebx, esi
add ebx, edi
jmp 0x46de8f
push 0x4a043efb
sub edi, esi
or edi, edx
neg edx
and edx, edi
and edx, 0x4ff92097
bswap edi
add edi, ebx
xchg edi, edx
mov ebx, esi
and edi, edx
jmp 0x46e421
mov ecx, 0x4132136a
sub ebx, edx
xchg edi, ebx
or edi, ebx
shl edi, 7
not esi
inc ebx
rol esi, 0xd
shl edx, 0xc
xor edx, esi
add edx, esi
or ebx, edi
add edi, ebx
jmp 0x46e2fc
pop ecx
xor ebx, edi
xchg edx, ebx
mov edi, 0x502348ab
and esi, edi
xchg edi, ebx
xor edx, esi
and ebx, 0x5024e473
sub edx, 0x5025204d
dec esi
or ebx, edx
jmp 0x46e003
pop ecx
mov esi, edi
shr esi, 0x15
not esi
sub edx, edi
add edi, edx
xor ebx, esi
or edi, 0x503fe79d
xor edi, edx
xor edi, 0x5040c2b5
and ebx, esi
xchg edi, edx
mov esi, edx
jmp 0x46faff
push 0x49d39509
not esi
xor edi, edx
neg esi
and ebx, esi
and esi, edi
and esi, ebx
mov edi, 0x504ecedb
sub edi, edx
neg edi
rol edx, 0x1c
jmp 0x46e9d5
push 0x49ea3839
inc esi
and edi, ebx
or ebx, 0x50550515
ror esi, 7
and edx, edi
inc edx
add edi, 0x5056b577
rol esi, 0xd
jmp 0x46e027
call ecx
neg esi
mov esi, 0x5068c32b
or edx, esi
not edi
xchg esi, edx
add edx, ebx
shr edx, 0x1c
xor ebx, edi
add ebx, 0x506a7105
or esi, ebx
jmp 0x46ffbd
pop ecx
sub esi, 0x50753d99
or edi, esi
xor esi, 0x5075c351
mov esi, edx
and esi, edi
and esi, edx
jmp 0x46f26f
pop ecx
add edi, 0x50870305
add esi, edi
or edx, edi
or edx, ebx
mov esi, 0x5087eaf7
and edx, 0x50882681
mov esi, 0x508871d1
mov edi, ebx
or esi, edx
add edx, ebx
xchg esi, edi
sub esi, edx
jmp 0x46d402
push esp
xor edx, ebx
bswap ebx
and esi, edx
xor esi, 0x508a9b3b
xor esi, 0x508ad731
mov ebx, esi
xor edi, 0x508b65a9
or ebx, edi
or esi, 0x508c191d
or edi, esi
or ebx, esi
xor esi, 0x508cc855
xchg esi, edx
sub edx, esi
jmp 0x46fa8f
push 0x49f273d1
neg edi
mov edi, ebx
ror esi, 8
inc edx
add ebx, edi
xchg ebx, esi
sub edx, ebx
xor esi, ebx
mov esi, ebx
or esi, ebx
and ebx, edx
xor esi, edx
jmp 0x46cee5
pop ecx
and edi, ebx
shr edi, 9
shl edx, 0x12
neg edx
bswap ebx
or esi, ebx
jmp 0x46d4df
mov ecx, 0x3f4d7907
xor edx, edi
and edx, edi
and edi, ebx
add edx, 0x509acffb
add esi, edi
shl ebx, 6
jmp 0x46df85
call fcn.004703e3
xchg edi, edx
or edx, 0x50a2b7e1
mov edx, edi
xchg ebx, esi
xor esi, 0x50a3676f
or ebx, 0x50a3a32f
and esi, edx
add esi, 0x50a427bd
mov esi, edi
and edi, edx
shl edx, 0xd
or edx, edi
dec esi
not edx
jmp 0x46d5b2
mov ecx, 0x3f4d7907
add edi, 0x50a85d19
xchg ebx, esi
and edi, esi
and ebx, edx
not edi
xor esi, edi
ror edx, 0x1c
bswap esi
xchg edx, ebx
add edi, edx
jmp 0x46fa5e
push 0x4a06c93f
nop
and ebx, 0x50b11fcf
xor edi, esi
sub esi, edx
jmp fcn.0046eb4e
mov ecx, 0x3f4d7907
and esi, edx
bswap ebx
sub edi, 0x50b26ef5
mov edx, 0x50b2aa69
sub edx, ebx
xor edx, edi
dec edi
sub esi, 0x50b397c9
ror edi, 0x19
and edi, edx
mov edi, 0x50b458c9
xor ebx, 0x50b494f7
jmp 0x46f850
call ecx
add edi, 0x50bdfd0d
xor edi, edx
mov edi, 0x50be82d3
and ebx, 0x50bebebd
or esi, edi
add edi, edx
dec ebx
add ebx, esi
jmp 0x46ca7e
call fcn.004703e3
and esi, edi
mov edx, esi
mov esi, edx
mov edi, esi
xor edi, edx
xchg ebx, edi
add edx, edi
rol edx, 0x11
xchg esi, edx
and esi, edi
jmp 0x46eaab
call fcn.004703e3
and ebx, esi
inc edx
add esi, edi
sub edi, edx
and edi, edx
shr edi, 0x13
ror ebx, 0xd
add edx, edi
not edx
sub ebx, esi
and esi, edx
dec esi
add edi, 0x50cee10d
xor esi, ebx
jmp 0x46d6e8
pop ecx
add edx, esi
xchg edx, edi
and esi, 0x50e02aed
xchg edi, ebx
and edi, edx
mov ebx, esi
mov ebx, 0x50e112b3
mov edx, edi
add ebx, edi
ror edx, 0x19
and esi, 0x50e20b03
mov esi, edi
mov esi, edi
xchg edi, edx
sub edx, 0x50e2f32d
inc edx
jmp 0x46d4bc
call fcn.004703e3
and esi, 0x50ef3187
sub esi, edi
xchg edi, ebx
sub esi, ebx
sub edx, ebx
xchg ebx, edi
or edx, 0x50f091e5
sub edx, 0x50f0cdcf
dec edi
add ebx, edi
or esi, ebx
xor esi, ebx
xchg edx, esi
and esi, ebx
jmp 0x46d7c9
push esp
ror edi, 0x11
not ebx
shr edx, 8
add ebx, edx
or esi, edx
add edx, edi
jmp 0x46d935
call ecx
mov esi, ebx
xor edi, 0x50f451a9
sub ebx, edx
and ebx, edx
or edx, ebx
ror ebx, 0x12
or esi, ebx
xchg esi, edx
or edi, edx
add esi, edx
add ebx, esi
or edi, esi
not edi
xor edx, esi
jmp 0x46da5b
push 0x49e52a45
inc edi
and edi, edx
xor esi, edi
sub esi, edi
sub esi, edx
xchg ebx, edx
jmp 0x46e58a
pop ecx
bswap ebx
xchg ebx, edi
mov esi, ebx
and esi, ebx
and edi, ebx
ror esi, 0x15
mov ebx, esi
or ebx, edi
shl edx, 0x1f
sub edi, edx
inc edx
dec esi
xor edi, 0x50fddbaf
sub edx, 0x50fe174f
jmp 0x46cf0a
call ecx
bswap edi
or ebx, 0x51100e6d
add esi, edx
not edi
shl ebx, 7
mov esi, 0x5110fb8d
inc ebx
or edx, ebx
and esi, edx
and edi, edx
mov esi, ebx
xor edx, ebx
nop
sub ebx, 0x5112dfb7
jmp 0x46d75d
call fcn.004703e3
or esi, edi
mov edi, ebx
xchg ebx, edi
not edx
add esi, edi
inc esi
xor ebx, esi
xchg edi, ebx
or edi, edx
sub ebx, edx
jmp 0x46ce86
mov ecx, 0x3f4d7907
rol esi, 0x14
or edx, 0x51176145
neg ebx
xor edx, esi
xchg ebx, edi
or edx, 0x51184f5b
and esi, edx
or edi, ebx
mov edi, edx
xor esi, ebx
xchg ebx, edi
and edi, 0x5119bc3b
jmp 0x46d2b5
push 0x49fba371
sub edx, edi
or edi, esi
mov esi, edx
xor esi, edx
neg edx
xchg edi, ebx
or ebx, edx
not edi
jmp 0x470068
push 0x49eea245
inc esi
add esi, edi
mov ebx, edi
or edi, 0x5148617d
jmp 0x46ce2e
pop ecx
mov esi, 0x514ac04b
xor edi, esi
and edi, esi
neg edi
or esi, edi
or edi, esi
jmp 0x46f016
pop ecx
add esi, ebx
inc ebx
and esi, edx
xchg ebx, esi
rol esi, 4
add edx, 0x514d6b73
add ebx, esi
xchg edi, ebx
add esi, 0x514e90db
and edi, esi
xchg esi, ebx
inc ebx
mov edi, ebx
add esi, edi
jmp 0x46d264
pop ecx
neg ebx
add edi, 0x5151c4e9
or esi, edx
or ebx, esi
or ebx, 0x51527393
rol edx, 8
mov edx, esi
xchg ebx, edi
add edi, esi
add ebx, edx
xor edx, 0x5153e00f
mov edx, edi
jmp 0x46dd63
push 0x49f7626d
mov ebx, edx
ror esi, 0xa
mov ebx, 0x5158f173
xchg esi, edx
xor edx, esi
or edi, 0x515a29b3
or edi, ebx
add ebx, edi
rol ebx, 1
mov edi, edx
or edx, ebx
and esi, 0x515bf6bf
jmp 0x46d0ef
push 0x49fc1fd7
and ebx, edi
add edx, ebx
xchg esi, edi
or edx, 0x5163e087
and edi, edx
inc esi
sub edi, edx
neg edi
mov edi, esi
or ebx, edx
or ebx, esi
xor edx, edi
shr edi, 0x14
and edx, 0x51679689
jmp 0x46db91
pop ecx
mov edi, edx
or esi, ebx
and edi, edx
mov edx, esi
xor ebx, 0x5177c697
shr edi, 0xf
bswap edx
add ebx, edi
xor ebx, esi
mov ebx, edi
ror edi, 0xd
and edx, 0x517a9cdf
jmp 0x46de75
push 0x4a03651d
rol esi, 0xc
shr edx, 0x1c
add edi, esi
and esi, edx
mov edx, ebx
sub esi, 0x51929243
nop
or ebx, esi
dec esi
or edx, esi
mov edx, ebx
and ebx, edx
xor ebx, 0x51961587
xor ebx, 0x51965371
jmp 0x46d7f2
push 0x49dcdd17
and ebx, 0x51acd205
not esi
xor edx, 0x51ad7aa7
add edx, 0x51adb5c9
xor ebx, 0x51adf1c9
xchg edx, esi
rol ebx, 4
xchg ebx, esi
shl edx, 0x16
ror esi, 0x12
jmp 0x47031e
push 0x49dd5b1f
shr esi, 6
mov esi, edx
add edi, esi
and esi, edx
and edx, edi
xchg ebx, edi
neg esi
mov edx, edi
or esi, ebx
sub ebx, edi
jmp 0x46e202