Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Query service configuration

Disassembly:
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xffffff1a
jne 0x401075
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.user32.dll_OpenDesktopA
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xfffffef8
jne 0x4010f4
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.user32.dll_OpenDesktopA
call sub.advapi32.dll_QueryServiceConfigA
call sub.user32.dll_OpenDesktopA
call sub.user32.dll_OpenDesktopA
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xffffff14
jne 0x401173
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
call sub.user32.dll_OpenDesktopA
call sub.advapi32.dll_QueryServiceConfigA
call sub.user32.dll_OpenDesktopA
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
call sub.advapi32.dll_QueryServiceConfigA
call sub.user32.dll_OpenDesktopA
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.user32.dll_OpenDesktopA
call sub.advapi32.dll_QueryServiceConfigA
call sub.user32.dll_OpenDesktopA
call sub.user32.dll_OpenDesktopA
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xfffffeee
jne 0x4011d4
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.user32.dll_OpenDesktopA
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xffffff2c
jne 0x401267
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.user32.dll_OpenDesktopA
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
call sub.advapi32.dll_QueryServiceConfigA
call sub.user32.dll_OpenDesktopA
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
call sub.advapi32.dll_QueryServiceConfigA
call sub.advapi32.dll_QueryServiceConfigA
call sub.ntdll.dll_RtlCreateTimer
call sub.user32.dll_OpenDesktopA
ret
jmp 0x46a9bc
neg esi
shl edx, 0x15
and esi, 0x76d7d4ac
xor ebx, edx
xchg edx, ecx
jmp 0x46ab4f
pop ebx
add edx, edi
or edx, 0x78092c68
or ecx, edi
or edx, edi
jmp 0x46c39b
call ebx
sub edx, esi
shr edx, 1
or ecx, 0x780c1472
and ecx, edx
ror edi, 0x16
inc edx
and ecx, 0x780ca130
mov ecx, 0x780cc008
xor esi, edi
add esi, 0x780d0100
xchg ecx, edx
xor esi, edi
jmp 0x46bca9
pop ebx
mov edi, ecx
shl edi, 0x1a
bswap ecx
and esi, ecx
dec edx
sub edx, 0x780fbcc0
neg ecx
or ecx, edi
jmp 0x46ba92
pop ebx
shl esi, 0xa
add esi, edx
add edx, edi
xor edx, ecx
xor esi, edx
neg edi
sub esi, edi
add esi, 0x781377c6
nop
sub esi, 0x7813c360
jmp 0x46d229
push 0x76da2694
sub edi, edx
xor ecx, edi
dec edx
shr ecx, 0xf
dec esi
shr esi, 0xc
shl esi, 0xe
and edx, ecx
jmp 0x46bf34
pop ebx
and edi, esi
or esi, edx
or edx, edi
or edi, ecx
or esi, 0x78192362
xchg esi, edi
dec edi
add edx, 0x7819931a
jmp 0x46d7a8
mov ebx, 0x43370267
add ecx, edx
xor ecx, edx
neg esi
inc ecx
mov esi, ecx
neg ecx
or edi, ecx
rol edi, 4
xchg edx, ecx
shr ecx, 0xa
jmp 0x46af76
pop ebx
or esi, edi
mov esi, 0x7825fe4c
sub edx, esi
xor edx, 0x7826462a
dec ecx
rol esi, 0x15
shl edx, 2
xchg ecx, edx
or esi, 0x7827076c
xor edi, edx
jmp 0x46b5bc
pop ebx
xor ecx, edi
add edi, edx
add ecx, edx
or esi, edx
or edx, edi
sub esi, edx
jmp 0x46aa8f
call ebx
mov esi, edx
or edx, edi
dec edx
add esi, edx
mov edi, ecx
mov esi, edx
shl edx, 0x15
xchg edx, edi
sub ecx, edx
xchg edx, edi
sub ecx, edx
sub edx, 0x784175b6
xchg ecx, edx
or edx, edi
jmp 0x46c485
call ebx
mov ecx, edx
or edi, esi
or edi, ecx
or edi, esi
shl ecx, 0xf
and edx, 0x7843e64a
xor edi, edx
and ecx, 0x784436d8
xor edx, esi
and ecx, edx
jmp 0x46b869
call fcn.0046da92
inc edi
inc ecx
add esi, 0x7844fdb2
add esi, edx
inc edi
xor edi, 0x7845712e
jmp 0x46bf05
call fcn.0046da92
add esi, edi
sub esi, edi
add ecx, edi
and ecx, edx
or edi, esi
add esi, ecx
rol edx, 0x1a
add edx, 0x7846a3fc
mov edi, esi
sub edx, edi
jmp 0x46af0d
mov ebx, 0x43370267
ror edi, 9
xchg ecx, edi
mov edx, ecx
or edi, ecx
or esi, 0x785c5582
rol ecx, 0x12
add edx, edi
sub edx, esi
add esi, ecx
sub edi, esi
and ecx, esi
xor ecx, esi
or ecx, edi
xchg edi, esi
jmp 0x46da37
call ebx
add esi, 0x7861e53a
mov esi, edx
neg ecx
and ecx, edi
and edi, esi
bswap ecx
shr ecx, 0xd
sub edx, esi
add esi, ecx
shl edx, 0x18
or ecx, esi
bswap esi
sub ecx, 0x7863a0dc
shl esi, 2
jmp 0x46cf63
push 0x76dbd46e
or edx, 0x7870028e
add ecx, 0x78702776
mov edi, edx
or esi, edi
xor edx, 0x78709240
xor edi, esi
and esi, 0x7870dcc0
dec ecx
rol edi, 0x1b
or edi, esi
xchg ecx, edi
mov edx, 0x78719d58
jmp 0x46ac40
pop ebx
xchg edx, edi
mov edx, esi
xor edx, edi
not ecx
and edi, ecx
or esi, ecx
add esi, 0x7874328a
add esi, edx
mov edi, ecx
or edi, ecx
xor esi, 0x7874c436
add edx, 0x7874eaf0
jmp 0x46c3b4
pop ebx
and esi, edx
mov edx, 0x78790054
jmp 0x46aca1
push 0x76e7c027
sub ecx, edx
sub edi, 0x78796270
and ecx, esi
or edx, 0x7879abce
jmp 0x46d675
pop ebx
mov esi, ecx
sub edi, 0x787bf10e
not ecx
not esi
add ecx, esi
xchg ecx, esi
mov ecx, edx
add edi, esi
not edx
add edi, esi
bswap edx
xor edx, 0x787d66a0
jmp 0x46da12
pop ebx
not edx
add edi, esi
xchg ecx, esi
or esi, edi
or edx, 0x787e2c24
xor edi, ecx
mov ecx, edi
sub esi, edi
xor ecx, 0x787ec340
mov ecx, edi
and edx, esi
not edx
jmp 0x46b9c2
call fcn.0046da92
sub edi, 0x7880b3e6
add edx, 0x7880da46
xchg edi, esi
sub ecx, 0x78812fee
mov esi, 0x78815674
sub ecx, edi
xor esi, edi
mov esi, edx
mov edx, edi
shl esi, 0xf
jmp 0x46d010
push 0x76da6ef0
bswap ecx
add edx, ecx
not edx
dec esi
or ecx, 0x7887e64e
mov edi, 0x78880b36
xor edx, esi
and ecx, edx
jmp 0x46c4c9
pop ebx
nop
add edx, edi
and ecx, edi
or esi, ecx
not esi
xchg ecx, edx
add ecx, edi
mov edx, esi
jmp 0x46cf00
push 0x76e034fe
xor edx, esi
shr edx, 0x17
xor ecx, 0x788c53d0
not edx
xchg ecx, esi
mov ecx, edx
or edi, esi
or edi, ecx
jmp 0x46c129
call fcn.0046da92
xor ecx, edx
xor edi, ecx
inc edx
inc edi
or edi, 0x78934f46
or edi, edx
xor ecx, esi
xchg esi, edi
or esi, edx
sub edx, edi
jmp 0x46d726
call ebx
xor esi, edx
ror edx, 4
and ecx, edx
xchg ecx, esi
jmp 0x46bae4
push 0x76ead672
and edi, 0x789766d0
ror esi, 0x1f
shr edx, 0x1b
or esi, 0x7897d9d6
and ecx, edi
xor esi, edi
xor edx, esi
add edi, esi
ror esi, 0x1f
add ecx, edx
xor edx, edi
add ecx, edx
jmp 0x46cc30
push 0x76e5df70
add edi, 0x789ca678
xor edx, ecx
add edi, esi
and edi, ecx
jmp 0x46c887
pop ebx
xor edi, esi
and edx, 0x789e30e4
jmp 0x46d078
call fcn.0046da92
not ecx
mov edx, edi
shr edi, 0x1a
mov edx, edi
or edx, edi
or edi, ecx
or esi, 0x78a0352c
inc esi
jmp 0x46d1e1
pop ebx
dec edi
add edx, 0x78a673d6
bswap edi
xor edx, esi
mov edi, esi
add ecx, edi
jmp 0x46baa8
push 0x76e494b6
xor edi, edx
and ecx, 0x78ab5ce2
jmp 0x46c8b2
push 0x76e00f38
mov esi, edi
xor esi, edi
jmp 0x46b5ed
call ebx
not edx
dec edx
xor edx, ecx
and edi, esi
jmp 0x46c936
pop ebx
inc ecx
sub edi, 0x78b38f60
jmp 0x46d3c0
push 0x76df355e
xchg edx, edi
xor edi, esi
and ecx, edi
add esi, 0x78bbd90a
jmp 0x46bac2
pop ebx
or ecx, edx
or ecx, 0x78bc392e
xor edi, edx
or edi, esi
or edi, ecx
xor ecx, edx
add esi, edi
mov edx, edi
jmp 0x46c0bb
mov ebx, 0x43370267
xor edx, esi
and esi, ecx
inc edi
xchg esi, ecx
mov edx, 0x78bddab8
shr ecx, 0x12
sub edx, edi
add esi, edx
shl esi, 9
or esi, edi
jmp 0x46af91
pop ebx
or edi, esi
inc edx
mov edi, ecx
and ecx, edi
xor esi, edi
add esi, 0x78bf8282
dec esi
ror edx, 0xc
mov edi, esi
add edi, 0x78c017fa
dec edi
ror esi, 0x1e
jmp 0x46ca12
push 0x76ddf084
nop
shl ecx, 0x10
neg edx
add esi, 0x78c10de4
sub esi, edi
ror edi, 0xa
add ecx, esi
mov edi, edx
or edi, edx
or edi, 0x78c1ea34
mov ecx, edx
and ecx, esi
jmp 0x46c0d2
call fcn.0046da92
add edi, esi
xor edi, edx
and esi, ecx
mov edi, esi
bswap edx
or ecx, edx
and edi, edx
and esi, 0x78c6062c
jmp 0x46d655
push 0x76e2da34
or edi, edx
xchg edi, esi
or edi, edx
xor esi, 0x78c6b0aa
add edi, 0x78c6d538
rol esi, 5
xor edx, edi
sub edi, edx
rol edx, 0x16
mov ecx, esi
jmp 0x46d0e7
push 0x76ddcc40
shl esi, 0x12
or edi, 0x78c89b5e
or edx, esi
and ecx, esi
and edi, edx
add ecx, edi
mov edx, esi
xchg ecx, esi
jmp 0x46bb09
pop ebx
add edi, esi
or edi, edx
add edx, edi
shr edi, 2
jmp 0x46c4ed
push 0x76e292dc
or esi, ecx
neg edi
add esi, ecx
xor edi, esi
mov edx, esi
mov edx, 0x78cb014a
xor ecx, edi
add edx, edi
jmp 0x46c829
pop ebx
xor edx, ecx
mov edx, ecx
neg esi
ror edi, 2
jmp 0x46d8fe
pop ebx
neg edi
add edi, 0x78cd910a
sub edi, ecx
add edi, esi
and esi, edi
mov edi, esi
mov edi, ecx
shl edi, 8
jmp 0x46beb4
push 0x76e13270
add edi, ecx
mov esi, ecx
add edi, 0x78d11a28
and ecx, edi
add esi, 0x78d1681a
add ecx, edx
jmp 0x46d3f8
pop ebx
sub edi, 0x78d1c324
shr edx, 8
shr edi, 0x11
xor edx, ecx
ror esi, 0x17
shr edx, 0x10
jmp 0x46b426
pop ebx
shr esi, 0x12
not ecx
bswap ecx
dec edi
mov edi, ecx
mov esi, edx
or edx, edi
sub edi, ecx
shl edi, 4
bswap ecx
sub ecx, esi
sub edx, edi
add esi, ecx
ror edi, 7
jmp 0x46d586
push 0x76dbb07c
inc esi
xor esi, ecx
or ecx, esi
or esi, 0x78d72dfc
and ecx, edi
mov edx, edi
sub edx, esi
xor edx, ecx
rol ecx, 1
xor edi, ecx
mov ecx, edi
and esi, ecx
mov esi, 0x78d875f6
not ecx
jmp 0x46b358
pop ebx
add ecx, edi
sub ecx, 0x78d8fda2
bswap edi
add ecx, esi
jmp 0x46bc8f
pop ebx
xor edi, edx
mov edx, ecx
and edx, esi
or ecx, edx
jmp 0x46b79d
call ebx
xchg esi, ecx
mov esi, ecx
dec esi
and edi, ecx
inc ecx
xor edi, edx
and ecx, esi
xor ecx, esi
or ecx, edi
xchg edi, esi
mov ecx, edi
dec edi
jmp 0x46b4aa
push 0x76da4a2e
inc edx
mov edx, esi
and edi, 0x78eeca5c
add edx, esi
add ecx, edi
or edi, 0x78ef39f0
jmp 0x46b57f
mov ebx, 0x43370267
add ecx, 0x78f21012
xor ecx, edx
rol edi, 0x14
xor ecx, 0x78f281f0
not edx
xchg edx, esi
jmp 0x46c5f4
call fcn.0046da92
sub edx, ecx
ror edi, 6
xchg esi, edx
mov edi, 0x78f84266
not edx
add edx, edi
mov esi, edx
mov edi, 0x78f8d272
jmp 0x46aa35
pop ebx
dec ecx
add edi, esi
xor edi, esi
and esi, edx
ror esi, 0x18
and ecx, edx
and edx, esi
shr esi, 3
jmp 0x46d3a1
push 0x76de134e
shl edx, 6
neg esi
bswap ecx
add esi, edi
jmp 0x46c201
mov ebx, 0x43370267
xor ecx, 0x7902ef86
xor edx, ecx
and ecx, edx
shr edi, 0x11
nop
add edx, 0x79039b9c
sub edx, 0x7903c032
add edi, 0x7903ec82
jmp 0x46b4e7
mov ebx, 0x43370267
mov ecx, esi
sub ecx, edx
or edx, edi
or edx, ecx
and edx, edi
sub ecx, 0x790c0d74
shr ecx, 0x1b
neg edi
dec esi
add ecx, 0x790ca50e
jmp 0x46c01c
push 0x76e6281c
bswap edx
mov edi, 0x790d09a0
jmp 0x46c817
call ebx
add ecx, edi
mov edx, esi
shl edi, 0x13
sub esi, 0x790dabb8
bswap esi
shr esi, 0xb
sub esi, edx
and ecx, esi
sub esi, edi
dec ecx
jmp 0x46d62a
mov ebx, 0x43370267
shr esi, 0x18
or edi, 0x79124dea
and edx, ecx
rol esi, 0x17
shl edx, 0x1e
and esi, ecx
and edx, esi
xchg ecx, edi
dec edx
xchg esi, edx
jmp 0x46b688
push 0x76db8de6
add ecx, 0x79174856
sub esi, ecx
mov esi, edi
xor ecx, edi
xor esi, ecx
or esi, edx
and edx, esi
xor edx, esi
jmp 0x46bd00
pop ebx
or esi, edi
mov edx, esi
add edi, ecx
dec edi
add edi, ecx
mov ecx, edx
neg edx
and esi, 0x791cc7d4
jmp 0x46c61d
pop ebx
and edx, edi
ror ecx, 0x17
dec ecx
neg edx
neg edi
xchg esi, ecx
dec ecx
add edx, edi
jmp 0x46b484
call fcn.0046da92
and ecx, edi
and edx, edi
mov ecx, 0x7928476c
mov esi, ecx
dec esi
neg esi
jmp 0x46b6a8
mov ebx, 0x43370267
sub edx, ecx
xor ecx, edi
jmp 0x46c987
pop ebx
and edi, 0x79294a7e
rol esi, 0x16
mov esi, edi
xor edx, 0x7929bab4
sub edx, esi
xor edi, ecx
neg ecx
sub ecx, 0x792a5734
jmp 0x46d4a7
push 0x76e85646
and edi, ecx
xchg ecx, edx
sub edx, esi
rol edi, 0xa
mov edi, ecx
add edx, 0x792b4572
shl esi, 5
shr edx, 5
jmp 0x46c2b7
mov ebx, 0x43370267
or edx, ecx
nop
add edi, esi
not edx
xchg esi, ecx
or esi, edi
sub ecx, edx
xor edx, esi
xchg edi, ecx
mov esi, edx
mov edx, edi
mov edx, 0x792d5dc4
jmp 0x46c6b3
push 0x76db69ce
sub esi, edx
xor edi, esi
or ecx, esi
sub edx, esi
sub esi, 0x792e263e
dec edx
mov edi, 0x792e725c
mov edx, esi
jmp 0x46c330
mov ebx, 0x43370267
xchg ecx, edx
bswap esi
sub edx, ecx
rol edx, 7
sub esi, edi
rol edx, 0x14
and edi, 0x792fb3f0
rol esi, 7
jmp 0x46b7c0
push 0x76e67270
and edi, esi
sub esi, edi
mov edx, ecx
xor edx, ecx
inc edx
sub edx, ecx
inc ecx
ror edx, 0x1b
mov edx, ecx
or edx, 0x7936c492
jmp 0x46c50d
call fcn.0046da92
inc ecx
add ecx, edi
add esi, ecx
mov edi, edx
not esi
xchg edx, esi
add ecx, edi
shl esi, 1
mov ecx, 0x7939fad8
xor edx, 0x793a20c2
xchg edx, esi
add esi, ecx
jmp 0x46af52
pop ebx
xor edx, esi
or esi, edx
add edi, 0x793ae4a0
and ecx, edx
and edx, esi
shr edi, 0x13
and edx, ecx
add ecx, edi
xor esi, edx
dec ecx
jmp 0x46bc71
call fcn.0046da92
mov edx, esi
dec ecx
add edi, esi
xor edx, edi
bswap edi
not esi
xor edi, edx
bswap esi
not edx
inc ecx
inc esi
or esi, 0x79428bb6
jmp 0x46b97d
push 0x76e831de
mov edx, ecx
mov esi, ecx
mov edx, esi
xchg esi, edi
sub ecx, esi
ror edx, 0xe
mov edi, esi
xor edx, esi
jmp 0x46c4a8
push 0x76e64d30
xor ecx, edi
or ecx, edi
neg edx
mov ecx, edx
jmp 0x46c59b
push 0x76e2b648
sub esi, ecx
sub esi, 0x7950290a
and edi, esi
and edx, esi
xor edx, esi
sub edx, edi
shr ecx, 0x19
and edx, edi
add ecx, 0x79512bca
shl edi, 0x17
shr edx, 0x14
neg edx
jmp 0x46bb76
mov ebx, 0x43370267
add esi, edx
dec esi
add esi, edi
shl edi, 0x15
not edi
or ecx, edx
jmp 0x46bb58
push 0x76e60336
shr edi, 0x16
add edx, esi
sub esi, 0x7953b158
or esi, ecx
and edi, 0x795400f2
shr edx, 4
mov esi, edi
xor edx, 0x79546e84
not esi
inc edx
jmp 0x46c227
push 0x76e4b822
or ecx, 0x7954f214
sub edx, ecx
xchg edi, edx
add edx, 0x79556000
rol ecx, 0x17
add esi, edx
sub esi, edx
and esi, edx
add esi, ecx
mov esi, edi
add ecx, 0x79565ffa
and edx, ecx
xchg edx, edi
mov edx, esi
jmp 0x46b187
pop ebx
add esi, 0x795acb82
neg ecx
and ecx, edi
xor esi, edi
dec edx
neg ecx
inc edi
mov ecx, edx
dec edx
add esi, edx
rol esi, 0xc
ror ecx, 5
jmp 0x46d256
call fcn.0046da92
shl esi, 0xc
add ecx, 0x795e5dd6
xchg esi, ecx
mov esi, edx
or edx, edi
sub esi, 0x795ef2a2
and esi, ecx
ror edx, 0xb
shr ecx, 8
bswap edx
jmp 0x46b213
push 0x76ea6512
or ecx, esi
xor esi, ecx
mov ecx, edx
sub edx, edi
and edx, ecx
xor ecx, 0x79659748
jmp 0x46d487
push 0x76e80b1c
mov esi, 0x79671c9c
xor ecx, 0x796742d8
not edx
add edi, esi
xchg esi, edx
or edi, esi
and edi, 0x7967f848
neg ecx
not edx
add edi, esi
jmp 0x46c76d
push 0x76eab1dc
xchg ecx, esi
bswap edi
and edi, ecx
or esi, edx
not edi
neg edi
mov ecx, 0x7974114e
mov ecx, esi
sub ecx, edx
sub edx, 0x79747cf2
jmp 0x46b6ef
mov ebx, 0x43370267
rol edx, 0x1c
add esi, edx
xor edx, 0x797c182e
or ecx, edi
mov esi, 0x797c61b2
inc esi
jmp 0x46d9d4
push 0x76e9a9e7
bswap edi
sub esi, edi
ror edi, 0x12
sub edx, ecx
neg edx
mov ecx, 0x799b5dc8
mov esi, ecx
or edx, esi
jmp 0x46da00
pop ebx
not esi
and ecx, edx
and edi, ecx
add ecx, edx
add edi, ecx
sub edi, ecx
xor ecx, esi
xchg esi, edi
sub ecx, esi
sub edx, edi
and ecx, edx
and edx, esi
jmp 0x46d875
pop ebx
sub edx, ecx
add edi, ecx
ror ecx, 0x12
shl edi, 0x15
jmp 0x46b433
call ebx
sub edx, ecx
xor esi, edx
bswap ecx
or edx, edi
jmp 0x46a9ee
pop ebx
xchg edx, ecx
mov edi, esi
inc edi
mov esi, edx
nop
shl edx, 0xf
mov edi, 0x79ab4622
shl esi, 0x13
mov edi, 0x79ab9144
xchg edx, ecx
jmp 0x46cfbb
push 0x76e2ff74
sub esi, edx
shl edx, 0x12
neg esi
dec edx
xchg esi, edx
not edi
or esi, edi
xor ecx, edx
add esi, edi
mov edi, edx
not esi
or ecx, esi
jmp 0x46c477
call ebx
add edi, ecx
mov esi, ecx
mov edi, ecx
add edx, 0x79ba4b6c
xor ecx, esi
and ecx, edi
and ecx, edx
and edx, ecx
jmp 0x46bc28
pop ebx
and edx, 0x79bcf320
shr esi, 3
bswap edi
or edx, esi
or ecx, edi
add edi, 0x79bdb176
jmp 0x46d7fe
pop ebx
xor esi, 0x79be92e6
not edx
neg esi
sub edx, edi
dec edi
and edi, edx
and esi, ecx
add edi, esi
mov ecx, edx
or edi, esi
jmp 0x46bbce
call ebx
add esi, edi
sub ecx, 0x79cbbf5a
xchg edi, edx
neg esi
or edx, ecx
nop
xchg edx, ecx
neg esi
jmp 0x46aad9
push 0x76e26d4a
add ecx, esi
neg edi
and edx, edi
add esi, edx
add edx, edi
shl edx, 4
or ecx, esi
or ecx, 0x79cdd658
jmp 0x46bbdd
pop ebx
shr ecx, 0x1d
sub edi, edx
shl edi, 2
bswap ecx
xchg edi, ecx
or edx, 0x79ceca78
add esi, edx
mov edi, ecx
jmp 0x46ab6a
push 0x76e157dc
sub edx, 0x79d115d4
inc ecx
sub esi, 0x79d160a6
inc edx
rol ecx, 8
shl edi, 7
and edx, esi
or ecx, esi
and edx, edi
inc esi
mov edx, edi
or ecx, 0x79d2ab60
jmp 0x46d6a3
push 0x76ea8b4e
inc ecx
shl edx, 0x1a
mov edi, edx
sub esi, 0x79d73102
dec edi
xor edi, esi
not ecx
xor edi, esi
neg esi
dec edx
jmp 0x46cb68
push 0x76dfeb7a
mov esi, 0x79d84966
sub edx, ecx
mov edx, edi
dec edx
ror ecx, 0x14
xor edx, 0x79d90692
and edi, ecx
bswap edi
jmp 0x46b919
pop ebx
mov ecx, esi
or edi, 0x79e05a9c
ror esi, 0x1b
inc ecx
jmp 0x46b776
pop ebx
add edx, 0x79e0da3c
rol esi, 0xa
sub edi, ecx
neg ecx
shl ecx, 3
xchg edx, edi
xor edi, edx
neg edx
mov edi, edx
sub edx, 0x79e22c34
jmp 0x46addf
pop ebx
neg ecx
ror edx, 0x18
ror edi, 0x11
mov esi, edx
xchg esi, edx
or esi, 0x79e881aa
sub ecx, edx
xchg edx, esi
sub esi, 0x79e8efc2
dec edx
xchg esi, edx
add edi, 0x79e95e52
jmp fcn.0046b4d0
call ebx
sub edi, edx
rol edx, 0xd
xor edx, esi
xchg edx, esi
add edx, 0x79ea26d2
xor esi, edx
jmp 0x46bbfa
push 0x76e7e68e
sub edx, 0x79ea8938
and edx, edi
xor edi, esi
mov edx, esi
not edx
mov esi, 0x79eb3e5e
not esi
add ecx, 0x79eb91e0
or ecx, 0x79ebb8ec
shr esi, 0x14
jmp 0x46ca48
push 0x76e17b48
sub esi, 0x79ec18ea
add edi, ecx
xor edi, esi
sub esi, ecx
xchg edx, ecx
shr ecx, 0x15
jmp 0x46bf8c
call ebx
or edi, ecx
or esi, edx
sub edx, esi
sub ecx, 0x79f1fd70
bswap ecx
shr ecx, 0x1d
sub edx, edi
sub ecx, 0x79f298aa
mov edx, 0x79f2bdea
sub esi, edi
jmp 0x46bd2d
push 0x76dcf458
mov ecx, edx
mov edi, 0x79f7291a
shl ecx, 0x19
xchg edi, esi
sub edi, esi
xor esi, 0x79f7c2ae
add edi, 0x79f7e7ee
add ecx, esi
bswap esi
not edx
xchg edi, esi
mov ecx, edx
jmp 0x46c871
pop ebx
mov ecx, 0x79fa32c4
shr edx, 5
or edi, edx
xor ecx, esi
mov edi, edx
mov ecx, esi
dec esi
inc edi
sub ecx, esi
xor edx, esi
jmp 0x46d574
pop ebx
add ecx, esi
sub ecx, 0x79ff3aaa
xchg edi, edx
mov edx, edi
jmp 0x46b3a8
push 0x76dda87c
not edi
xchg edx, edi
mov esi, 0x7a055a46
shr edi, 4
or esi, edx
bswap ecx
dec edi
xchg edi, edx
xor esi, 0x7a06404a
sub esi, 0x7a0666d8
and ecx, edx
xor ecx, 0x7a06ac38
jmp 0x46bbaf
call fcn.0046da92
sub esi, edx
not edx
xor edx, 0x7a0daa7e
or edi, edx
or edi, 0x7a0df3d4
xor edi, esi
ror edx, 0x11
or edx, esi
and edx, 0x7a0e8cbe
shl edi, 0x1f
jmp 0x46c238
mov ebx, 0x43370267
and esi, ecx
add esi, 0x7a0f1176
jmp 0x46c45f
push 0x76e44a08
and esi, ecx
and ecx, edi
inc edx
mov edi, ecx
neg esi
rol esi, 0x19
sub edi, ecx
rol edx, 0x16
shl ecx, 0xe
rol esi, 0x15
xor edx, edi
or esi, ecx
jmp 0x46da4c
call fcn.0046da92
sub esi, 0x7a111374
mov esi, 0x7a113f98
jmp 0x46d387
push 0x76e46f76
mov edi, 0x7a11756a
dec ecx
add ecx, edx
and edx, edi
and edx, ecx
rol esi, 0x19
shl edx, 0x1e
rol edi, 6
jmp 0x46b8f0