Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get uefi variable
Initialize hashing via wincrypt

Disassembly:
call sub.kernel32.dll_GetUserDefaultLCID
cmp eax, 0xfffffeed
jne 0x401084
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xfffffeda
jne 0x4010fe
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
call sub.user32.dll_DestroyMenu
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
ret
call sub.kernel32.dll_GetProcessHeap
cmp eax, 0xfffffee0
jne 0x40119b
call sub.user32.dll_DestroyMenu
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.user32.dll_DestroyMenu
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff34
jne 0x4011fc
call sub.user32.dll_DestroyMenu
call sub.user32.dll_DestroyMenu
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.user32.dll_DestroyMenu
call sub.user32.dll_DestroyMenu
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
ret
call sub.kernel32.dll_GetCurrentThread
cmp eax, 0xffffff1e
jne 0x40127b
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.advapi32.dll_CryptCreateHash
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
call sub.user32.dll_DestroyMenu
call sub.advapi32.dll_CryptCreateHash
call sub.ntdll.dll_NtQuerySystemEnvironmentValue
ret
jmp 0x46948b
or esi, ebx
neg ebx
mov edx, edi
jmp 0x46ae1e
push 0x2497c982
or edx, edi
ror ebx, 0xc
sub edi, edx
and edx, edi
sub edi, ebx
mov edi, ebx
neg edx
mov edi, 0x2531c72b
xor ecx, ebx
add ecx, edi
jmp 0x46b513
xor dword [esi], 0x611258b2
xor edx, edi
xor edx, ebx
and ecx, ebx
xchg ebx, edi
or edi, ebx
or edx, 0x25773bc6
and ecx, ebx
sub edi, ecx
mov ecx, 0x2577e6c5
jmp 0x46acb7
push 0x24a45f5a
sub ebx, ecx
sub edi, edx
xor ecx, 0x2578a09e
xor edx, 0x2578d928
dec edi
ror edi, 0x17
mov ebx, 0x25798d57
inc ecx
not edi
not ebx
jmp 0x46b3bb
pop esi
add ebx, ecx
and edx, ecx
add edx, ebx
mov edx, ecx
mov ecx, 0x257dcbbb
sub ecx, 0x257e0eaf
dec ecx
jmp 0x46ae33
pop esi
mov ecx, edi
add ebx, 0x257ec6e4
and ecx, ebx
or edx, ecx
mov ecx, 0x257f7413
not edi
inc ecx
sub edx, ecx
sub ebx, edi
and ebx, edi
and ebx, ecx
jmp 0x469960
call fcn.0046b246
bswap ecx
xchg ecx, edx
and edx, 0x258175e4
sub ecx, ebx
xor ebx, 0x2581e030
or ebx, ecx
rol ebx, 6
sub edx, edi
mov ebx, edi
inc ecx
sub edi, edx
and edx, 0x25836d6d
jmp 0x46a5c2
xor eax, eax
ror ebx, 7
sub ebx, ecx
and edx, ebx
sub ecx, edx
dec edi
mov edx, edi
or ecx, edx
and edx, 0x258739e1
or ecx, edx
jmp 0x46b6da
pop esi
xor edx, ecx
sub ebx, edx
mov ebx, 0x2588324a
nop
xor ecx, edi
add edi, ecx
dec edi
dec edi
dec ebx
jmp 0x46a0e6
push 0x40
xor edx, edi
xor edx, ecx
xchg ebx, edi
and edi, ebx
neg edx
not ebx
add ebx, edx
add edi, edx
jmp 0x46b03a
pop esi
shr edi, 3
add ecx, edx
dec ebx
inc edi
ror edi, 9
and edi, edx
shl ecx, 0x1d
mov edx, ecx
or edi, ecx
add edx, edi
and ebx, 0x259477dd
bswap edi
xchg edx, edi
shl edx, 7
shr ebx, 0xd
jmp 0x469b3d
pop esi
xchg ecx, edx
or edx, ebx
jmp 0x46a64a
push 0x249527c0
xor edx, 0x2599c4d1
mov ebx, 0x2599fcda
sub ecx, 0x259a37cf
and ecx, 0x259af832
xor ebx, ecx
xchg edx, ecx
sub ecx, edx
mov ecx, ebx
and edx, ebx
and edx, 0x259cc4dd
xor ebx, 0x259cf8cd
jmp 0x46b1ba
pop esi
xchg edx, edi
mov ecx, ebx
or edi, edx
sub ebx, 0x25a25817
shr edi, 6
jmp 0x4696f8
call fcn.0046b246
xchg ebx, ecx
add edx, ebx
neg ecx
mov edx, ebx
add ecx, ebx
jmp 0x46a30a
rol dword [esi], 0x19
xchg ebx, edi
xchg ebx, ecx
sub edx, ebx
jmp 0x46adfd
pop esi
add edx, ebx
shl edi, 7
xchg ebx, ecx
xchg edx, ebx
and edx, ebx
jmp 0x46a40b
xor dword [esi], 0x409258b2
sub ecx, edi
sub ecx, 0x25b7ba62
shr ecx, 0x16
not ecx
xchg ecx, edx
add ebx, edi
xor ebx, edx
mov ecx, 0x25b8ec9f
bswap ecx
bswap edx
mov ecx, ebx
xor edx, ecx
xchg edi, ebx
add edi, ebx
mov edx, ebx
sub ecx, edx
jmp 0x46a66b
pop esi
mov edi, 0x25bad2f6
and ebx, 0x25bb069e
mov ecx, edx
or ebx, edi
not ebx
not edi
inc edx
jmp 0x469d32
pop esi
or ecx, 0x25bc5a0f
or edx, edi
inc ebx
add ebx, ecx
sub edx, 0x25bd32fa
rol edi, 0x14
xor edi, edx
shr ebx, 0x16
shr ebx, 0x1f
jmp 0x46af00
call esi
sub edi, edx
nop
or edi, edx
mov ecx, edx
and ecx, edx
add edx, edi
xor edx, 0x25c3ca83
shl edi, 0xa
jmp 0x46aa98
push 0x24a78bf6
sub edx, ecx
shr ebx, 0x18
xor edi, edx
xchg edx, edi
add ebx, edi
xor ecx, edi
dec edx
shr edi, 5
ror ebx, 0x1b
jmp 0x46b0d3
mov esi, 0x6332a2e
bswap edx
sub edx, ecx
xor edx, edi
sub edi, 0x25c6d1dc
xchg ecx, edi
shr edx, 6
sub edi, ecx
sub edi, ecx
jmp 0x46ad62
pop esi
mov ecx, edi
add ebx, ecx
add ecx, 0x25caa503
xor ebx, edx
not edi
mov edi, 0x25cb4117
mov ecx, edi
sub edx, 0x25cbb041
and edx, ebx
shr edx, 0xc
or edi, ebx
sub edi, ebx
mov edx, ecx
jmp 0x469d17
call fcn.0046b246
bswap ecx
xor ebx, edi
ror edi, 0x14
xor edx, 0x25d13c9a
ror ecx, 0x11
mov ebx, 0x25d1b3f2
mov ecx, 0x25d1e7bf
and edi, 0x25d2186b
mov edi, ebx
jmp 0x46a319
call esi
and edi, ecx
or edx, edi
dec ebx
bswap edi
xor ecx, ebx
rol edi, 9
mov ecx, edi
xchg edi, ecx
mov edx, edi
shr ecx, 0xc
jmp 0x469c9b
mov esi, 0x6e447c44
xchg edx, ebx
mov edi, ecx
and ebx, edx
jmp 0x469c53
call fcn.0046b246
or ecx, ebx
sub ecx, edx
or ebx, 0x25dd0165
mov edi, ecx
shr edx, 0x15
xchg ebx, edi
dec edx
xchg edi, edx
and edi, ebx
xchg ecx, edx
sub ebx, edi
sub edi, edx
mov edx, ebx
shl edi, 0xb
jmp 0x46a9e4
pop esi
and ebx, 0x25e1804c
xor ecx, 0x25e1c8b8
add edi, ebx
jmp 0x46afad
push 0x249f173a
xor ecx, 0x25e263cc
xor edx, edi
nop
sub edi, 0x25e30dc5
and ebx, 0x25e341b1
and edi, ebx
and edi, ebx
xchg edx, ebx
jmp 0x46a09c
pop esi
ror ebx, 0x1f
neg edi
xchg edi, ebx
xchg edx, ebx
xchg ebx, edx
xor ebx, edi
add ebx, ecx
xchg edi, edx
or edi, ebx
ror ebx, 0x1e
xchg ecx, ebx
jmp 0x46a507
pop esi
xor edi, edx
or edi, edx
ror ebx, 4
xor edi, edx
mov ebx, 0x25e93364
add edi, edx
xor ebx, ecx
rol ecx, 0x19
jmp 0x46a5d2
push 0x249cba37
shl ebx, 0x1a
not edi
ror ebx, 1
add ebx, edx
mov edi, ecx
shl ebx, 1
mov ecx, ebx
bswap edx
xor ebx, ecx
xchg edi, ecx
jmp 0x46a1e9
call fcn.0046b246
mov ecx, edi
xchg edi, ecx
xor edi, ecx
xchg ebx, edx
or ebx, edi
mov edx, ecx
neg ecx
jmp 0x46aad1
mov esi, 0x6e447c44
or ebx, 0x25f8134f
xchg ebx, ecx
xchg ecx, edx
mov ebx, edi
xchg ebx, edi
and ebx, 0x3057bc4b
xor edi, 0x3057f630
mov edi, ebx
mov edi, ebx
add edx, ebx
and edi, 0x3058ddb4
jmp 0x469df3
push 0x24a41da7
sub edx, ebx
and edi, 0x30596247
and ecx, edi
or edx, ecx
shr ecx, 0xf
ror edi, 0x1c
sub ebx, ecx
inc edi
sub edi, ecx
xor edi, ebx
sub edi, 0x305b6063
and edi, ebx
xchg ebx, edi
ror edi, 0x1e
jmp 0x469603
pop esi
or edx, ebx
sub edi, ecx
add ecx, edx
mov ecx, edx
inc ecx
xchg ebx, ecx
mov edi, ebx
or ebx, edx
sub edx, edi
and edx, ecx
jmp 0x46af71
call fcn.0046b246
xor ebx, edi
or ebx, edi
mov edx, ecx
or ecx, ebx
and edi, 0x305f77f6
ror ecx, 7
inc edi
inc ecx
shl edi, 0x11
add ebx, edi
jmp 0x46b1d0
push 0x24a352e0
xor edi, ecx
neg ecx
add edi, ecx
sub edx, ecx
xor edi, ebx
xchg edx, ebx
or edx, 0x3063834b
and ebx, edx
jmp 0x469ed7
push 0x24a39704
mov edx, edi
mov ebx, 0x30643a71
sub ecx, edi
sub ebx, ecx
ror ecx, 0x15
not ecx
sub ebx, edi
not edx
sub edx, edi
jmp 0x46a581
push 0x24aa2f55
or edi, ebx
and ebx, edi
rol ebx, 0x18
inc edx
jmp 0x46aff2
mov esi, 0x6e447c44
neg ecx
xchg edi, edx
or ebx, ecx
or edx, 0x3067c7e7
add ebx, 0x3067feb4
xor edi, ebx
xor edx, ebx
ror ebx, 0x19
mov ebx, 0x3068ef74
or ebx, 0x30692737
ror ebx, 0x19
xor ecx, edx
jmp 0x4698b0
pop esi
xchg edx, ecx
xor edi, ebx
shr ecx, 0x10
add ecx, 0x306a964b
jmp 0x469caf
push 0x24a6be56
or edi, ecx
or ecx, ebx
mov edx, ecx
sub edi, ebx
add edx, 0x306de464
xor edi, 0x306e1e95
add ecx, 0x306e5657
dec edx
xor edi, ebx
sub ecx, edx
jmp 0x469ff7
pop esi
sub edi, ecx
xor edi, ecx
or ebx, 0x3071e4a3
add ecx, ebx
mov ecx, 0x307253e6
xchg edx, ecx
jmp 0x46b2ef
push 0x24a70213
bswap ebx
and ebx, edx
xor edi, ebx
sub ebx, 0x30763afb
sub ecx, edx
sub edx, 0x3076aa07
nop
and edx, ebx
and ecx, edi
sub ecx, edx
or edi, edx
dec edi
or edx, 0x30783ef9
or ecx, edx
xchg edx, ebx
jmp 0x46a959
pop esi
sub ebx, ecx
sub ecx, edx
shl ebx, 7
and ecx, edx
bswap edx
add edx, ebx
jmp 0x469eb9
push 0x249f58d1
not edx
inc edx
dec ecx
mov edx, 0x30816181
rol ebx, 0xf
add ecx, ebx
and ebx, 0x308215ab
inc edx
rol edx, 0x1f
xor ecx, 0x3082c15e
jmp 0x469c2f
push 0x24ac97b9
mov ebx, edx
xor ebx, 0x3084e375
and ecx, 0x30851b08
rol ebx, 0xf
and edx, 0x30859aa9
nop
nop
shl edi, 0x15
ror ebx, 2
or ecx, edx
or edi, ecx
mov edi, ebx
jmp 0x46b0c1
call esi
and edi, ebx
add ecx, edi
neg ebx
add ebx, edx
bswap edi
jmp 0x469a1b
push 0x249cffed
and ebx, 0x3095fa19
mov ebx, edi
neg ecx
sub ecx, edi
sub ebx, 0x3096d913
and ebx, 0x30971ec9
neg ecx
xchg edi, ecx
or ebx, edi
add ecx, edx
jmp 0x46ada3
pop esi
and edx, edi
add ecx, edx
neg edx
mov edx, edi
sub edx, 0x309f7611
xor ecx, 0x309fae56
not ebx
sub ebx, ecx
bswap ebx
mov edi, edx
sub ebx, edi
jmp 0x46a4a9
mov esi, 0x4132136a
mov edx, 0x30a11561
mov ebx, ecx
bswap edx
mov ecx, edx
shl ebx, 0x12
bswap edx
add ecx, ebx
add ecx, ebx
jmp 0x46aba9
rol edx, 0x14
shl ecx, 0x1f
sub ecx, edi
xor edx, ecx
jmp 0x46a9cc
pop esi
sub ebx, edi
mov edi, ebx
mov edx, ebx
sub ebx, 0x30a4a483
or ebx, 0x30a4dd4a
ror edx, 5
sub ebx, 0x30a54f1b
add ecx, 0x30a58633
jmp 0x46a68b
call esi
add ebx, edx
and edi, edx
xor ecx, edi
mov ecx, ebx
jmp 0x46af4c
call esi
ror ecx, 3
add edi, 0x30a879c6
not ecx
sub ebx, edi
and edx, 0x30a92ea9
and ebx, edi
sub edi, edx
and edx, ecx
sub edi, edx
mov ebx, edx
sub ebx, edx
jmp 0x46a2c7
push 0x24aeb971
xchg edi, edx
and ebx, edi
xor ecx, edx
mov ecx, edi
ror edx, 2
mov edi, edx
xchg edi, edx
xor ecx, 0x30acc09a
not edx
jmp 0x46b2a9
mov esi, 0x6e447c44
add edx, 0x30b06f2c
ror edx, 0x16
add edi, ebx
mov edi, 0x30b1209c
and ecx, edi
add ebx, edi
mov edx, ebx
jmp 0x469e84
pop esi
sub edi, ecx
rol ecx, 1
add ecx, edx
or edi, 0x30b99598
or edi, 0x30b9cc9f
xor ebx, ecx
xchg edi, ebx
xchg ecx, edx
or ebx, ecx
neg edx
mov ebx, edi
xchg edi, ecx
xor ebx, ecx
jmp 0x469ef7
push 0x2497873d
mov ebx, 0x30c077fd
add ebx, edx
or edx, 0x30c0f0f6
xor ebx, 0x30c128fb
inc ecx
not ebx
mov ebx, 0x30c1d500
add edi, ebx
jmp 0x469496
push 0x24999be4
shl edi, 0x1d
ror ebx, 0x1f
shl ecx, 5
add edx, ebx
bswap ebx
neg edi
or ebx, ecx
shl edx, 0x1d
sub ecx, 0x30c4276e
xchg edi, ecx
sub edi, ecx
dec ebx
add ebx, 0x30c508e3
jmp 0x46b378
call fcn.0046b246
or edi, ebx
sub ecx, edx
shl ebx, 0x14
ror ecx, 0x17
add ebx, 0x30c642c4
mov ecx, edi
or edi, 0x30c6ae7b
mov ecx, ebx
shr edi, 0x12
and ecx, 0x30c759f8
mov ebx, edx
jmp 0x469c13
pop esi
inc ebx
mov edi, 0x30c81958
bswap ecx
ror edx, 1
or edi, ecx
add ecx, edi
dec edi
xor edx, 0x30c9768a
add ebx, edx
jmp 0x46977d
pop esi
inc edx
dec edx
xor edi, 0x30cd9c63
mov edx, edi
and edx, ebx
add ecx, edx
ror ebx, 0xb
add ebx, edi
rol edi, 5
inc ecx
not ebx
mov edx, 0x30cf9fda
bswap edx
sub ecx, edi
xor ebx, edi
add edx, ebx
jmp 0x46966b
push 0x24a3d83a
add ebx, edx
add ebx, ecx
bswap ecx
xor ebx, 0x30d16e4e
xor ecx, ebx
inc edi
bswap ebx
and ebx, ecx
or ecx, edi
and ecx, ebx
or ecx, ebx
jmp 0x469e3b
call esi
or ecx, ebx
xor edi, edx
mov edx, 0x30d5e00a
jmp 0x46b16a
mov esi, 0x401400
neg edx
xor edx, ecx
not ebx
or edx, ebx
sub ebx, edi
or ecx, 0x30d74d19
xchg edx, ecx
and ebx, ecx
and ebx, edi
add ebx, edi
mov ecx, edx
not ebx
sub ecx, edx
and edi, 0x30d9111c
sub edi, 0x30d94851
jmp 0x4696db
push 0x24ae3119
sub edx, ebx
sub ecx, ebx
shr edx, 0xa
mov ecx, ebx
mov ecx, 0x30dc53cb
sub ebx, edi
and ebx, edx
sub edx, ecx
shr ecx, 0x1b
xchg ebx, ecx
jmp 0x46a769
push 0x249745f2
xchg edi, ecx
shl edx, 0x15
and edi, ecx
shr ebx, 0x17
xor edi, edx
sub edi, ebx
and ecx, 0x30dfa52f
shl ecx, 0x1e
jmp 0x46a482
xor dword [esi], 0x521258b2
xor ecx, ebx
or ecx, ebx
xchg ebx, edx
sub edi, edx
mov edi, 0x30e126e4
mov edx, ebx
or edx, ebx
xor edx, edi
xor ecx, edi
jmp 0x4695df
pop esi
neg edi
and edx, edi
add edi, ecx
or ecx, edi
and ecx, edi
jmp 0x469f3c
pop esi
add edx, 0x30e90cfe
or edi, ecx
mov edx, edi
or edx, 0x30e9b19c
add ebx, 0x30e9e94d
dec edi
rol edx, 9
inc ebx
nop
ror edi, 6
jmp 0x469f6a
push 0x24ae7513
sub ecx, edi
shr ebx, 0xf
dec ebx
sub edx, ecx
or edx, 0x30f1b52c
add ebx, 0x30f1ec22
shr edi, 0x1c
xor edi, edx
xchg edi, ecx
jmp 0x46a33f
push esp
nop
add ecx, edx
xchg ebx, edi
mov edx, 0x30f42aad
mov edx, ecx
xchg edi, edx
or edx, ecx
add ecx, edx
and ebx, 0x30f54816
inc ebx
rol ecx, 0x1e
rol ebx, 0xc
jmp 0x46ac89
push 0x24aab728
xor ecx, 0x30fa6772
xor edx, ecx
neg ecx
or edi, ecx
xchg edx, edi
mov edx, ecx
or edx, ebx
add edi, edx
and edi, ebx
mov ecx, ebx
mov edi, 0x30fc9643
jmp 0x469f09
mov esi, 0x6332a2e
add edi, edx
mov ecx, 0x3100e6ea
xor edi, ebx
xor ebx, ecx
jmp 0x469b96
call esi
xor ebx, ecx
or ebx, edx
or ecx, edx
inc ecx
bswap edx
and edx, ebx
and edi, edx
xchg edi, ecx
sub edi, ebx
jmp 0x469651
push 0x24a746dc
shl edi, 0x1d
mov ecx, ebx
ror edx, 0x13
or edi, ebx
and ecx, ebx
nop
or ebx, edi
add ebx, ecx
and ebx, edi
neg edx
xor ebx, edx
add edx, edi
xchg edx, edi
jmp 0x469ad1
rol dword [esi], 0x16
or ecx, edx
mov ebx, 0x311837e8
shr edx, 0x18
mov edi, ebx
add edx, edi
xor edi, ebx
jmp 0x46aeb3
call esi
sub edx, ebx
not edx
add edi, 0x3119dbd7
not edx
and ecx, edx
xor ebx, ecx
mov ecx, edi
xchg edi, ecx
xchg edx, ecx
and ebx, ecx
sub ecx, edx
shr edx, 4
jmp 0x469e6b
call fcn.0046b246
or edx, ecx
and edx, edi
sub ecx, ebx
dec ebx
sub ebx, 0x311d2dcb
and ecx, 0x311d64eb
shl ebx, 0x19
xchg edi, ebx
jmp 0x46a887
pop esi
shl ebx, 0xc
and ecx, ebx
xchg ebx, edx
or ebx, ecx
or ecx, 0x31261295
or edi, edx
or ecx, edx
inc edx
add edi, ecx
jmp 0x46a555
call esi
xor edx, edi
and ebx, edx
add ebx, edx
bswap edi
dec edx
ror edx, 0x12
mov ecx, ebx
sub ecx, ebx
ror edx, 0x12
shr edx, 3
xor edi, ebx
not edx
not ebx
shr ebx, 0x1a
jmp 0x469a35
call fcn.0046b246
or ebx, ecx
shr edi, 0x1e
mov edi, edx
xchg ebx, ecx
sub ecx, ebx
shr ecx, 0x1f
jmp 0x46a798
mov edx, edi
and edi, ebx
shr ecx, 0x1a
xchg edi, ecx
or ecx, ebx
sub ebx, ecx
xor ebx, edx
sub ecx, ebx
neg ecx
xchg ebx, ecx
jmp 0x469902
push esp
bswap edi
dec edi
shr ecx, 7
mov edi, ebx
not edi
inc edx
or edi, edx
ror ecx, 0x15
xor ebx, 0x3149080e
add ebx, 0x31493e19
xor ecx, edi
neg edx
or ebx, ecx
rol edx, 0x18
add ebx, edx
inc edi
jmp 0x469724
xor dword [esi], 0x6d1258b2
mov ecx, edx
and ebx, 0x314b04db
add edx, edi
mov ecx, 0x314b6f84
xor edx, ebx
add ecx, edx
xor ecx, edx
add edi, 0x314c4f0d
mov edi, edx
bswap edx
xchg edx, ecx
sub edi, ebx
jmp 0x46abc1
call fcn.0046b246
add edx, edi
xchg edx, edi
add edi, ebx
sub edi, edx
or ebx, edi
and edi, edx
sub ecx, 0x314eb4cc
ror edi, 0x12
sub edi, 0x314f233b
rol edx, 0xe
ror edx, 7
xor edx, edi
ror edx, 0xb
jmp 0x46b5e2
mov esi, 0x6332a2e
xchg ecx, edx
or ecx, edi
xor ebx, ecx
or ecx, 0x3150e351
inc ebx
add ecx, ebx
shr edx, 8
or edx, edi
add edx, ebx
xor ebx, 0x3152305a
not ebx
mov ebx, 0x31529eca
jmp 0x46ace5
call fcn.0046b246
and edx, ecx
xor ebx, edx
bswap edx
jmp 0x469ab6
push 0x249d4099
and edx, ebx
add edx, ebx
xchg edx, edi
bswap ecx
and edx, ebx
jmp 0x46a872
inc ecx
add edi, 0x315ea5e4
rol edi, 0x1e
mov ebx, edx
xor edx, ecx
bswap ecx
or edx, 0x315fbf47
inc ecx
shl edx, 0xc
mov ecx, ebx
jmp loc.0046a04c
push 0x2494da7f
add edx, ecx
add ebx, ecx
dec edx
and ebx, ecx
mov ebx, ecx
neg ebx
jmp 0x4697e7
push 0x24adedc5
add edx, edi
sub ebx, edi
mov ebx, edx
not ebx
shr edi, 7
add edi, ebx
xchg ebx, ecx
and edi, ecx
jmp 0x46a627
xor dword [esi], 0x1a1258b2
xor ebx, 0x316aab1f
neg edx
or edi, edx
add ebx, edi
xor ecx, 0x316b81a4
xchg ecx, ebx
sub edx, ebx
sub edx, 0x316c2d55
bswap edi
add edi, ecx
jmp 0x4699e8
pop esi
xor ecx, ebx
shr ecx, 0x18
or ecx, ebx
or edi, ecx
and ebx, ecx
jmp 0x4697a8
push 0x401400
sub ebx, edi
ror edx, 0x18
mov ecx, edi
and ecx, ebx
mov ecx, 0x3170ebfc
rol ebx, 0x1c
jmp 0x46b647
pop esi
xor edi, ebx
rol ecx, 9
mov ecx, ebx
sub edx, ebx
inc edx
inc edx
and ecx, 0x31742c79
shr ebx, 8
and edx, edi
add ecx, edx
neg edx
shr edi, 0x13
xchg ecx, edx
jmp 0x469876
pop esi
xchg ebx, edx
or ecx, ebx
xor ecx, ebx
sub edi, ebx
shl edi, 0x12
xchg ecx, edi
xchg edi, edx
mov ecx, edi
jmp 0x46a29a
pop esi
xchg ebx, ecx
sub ebx, ecx
mov ebx, edi
add edx, 0x317b09a7
and ecx, edi
xchg edi, edx
xchg edx, ecx
xor edi, ebx
not edi
sub edi, ecx
xchg edi, ecx
mov edx, 0x317cc4fc
jmp 0x46a276
push 0x24aa7368
and ebx, ecx
or edi, 0x317f7fdd
mov ebx, edi
or edx, edi
xor ebx, edx
sub edx, edi
sub edi, 0x3180941f
sub ebx, edi
ror edi, 4
ror ecx, 0x17
rol edx, 0x19
or ebx, edi
and edx, ecx
jmp 0x46a7fe
push 0x6808b
sub edi, edx
xor ecx, edx
add ecx, ebx
and ecx, edx
or edi, ecx
xchg edi, ebx
jmp 0x46af11
mov esi, 0x6332a2e
xor edx, ecx
xor edi, ebx
and ebx, edx
xchg edx, edi
jmp 0x46aa08
push 0x24a7ccf2
mov edi, edx
or edi, edx
shr edx, 0x18
xor ecx, edi
xchg edi, ecx
add edi, edx
and ebx, 0x318f5f4e
not ebx
xor edi, edx
xchg edi, ecx
sub edi, edx
mov ebx, edx
shr ecx, 7
jmp 0x469aef
pop esi
and edi, ecx
bswap edx
xchg edi, edx
xchg edx, ecx
and edi, edx
xor edi, 0x3199aea4
shr ecx, 5
mov edx, ebx
xor edi, edx
not ecx
shr ecx, 0x14
bswap edx
mov edi, 0x319b3892
and edx, ebx
mov edx, ecx
jmp 0x46b5d0
push 0x249568d3
xor ebx, edx
or edi, ecx
and edx, ebx
mov ecx, edx
xchg edx, ebx
or edi, ecx
jmp 0x469e0b
call esi
xor edx, ecx
and ebx, edi
sub edi, edx
xor edi, ecx
mov edx, 0x31a0369b
sub edi, ebx
bswap ebx
jmp 0x469ce8
rol dword [esi], 0xa
sub ecx, edi
shr ecx, 3
sub ecx, edx
and ecx, 0x31a25b23
inc ebx
shl edx, 0xe
and ebx, ecx
xchg edx, ebx
jmp 0x46a2b8
pop esi
xchg ecx, edi
and ebx, ecx
or ecx, edi
add edx, ecx
add edx, 0x31a47b7d
add ecx, edx
jmp 0x469fb2
pop esi
add ecx, 0x31ac0025
or edx, ebx
ror edx, 0xc
xor edi, ecx
add ebx, 0x31acca98
xchg edx, ebx
xchg edx, edi
mov ecx, 0x31ad6240
shr ebx, 0xa
sub edi, edx
or edi, edx
add edx, 0x31ae394d
mov edx, edi
jmp 0x46a6fe
push 0x24aefa6f
and edi, ecx
or ebx, edi
or ecx, ebx
bswap edx
inc edx
xor ecx, edx
shr ebx, 8
or edx, 0x31b01a35
bswap edi
xchg ebx, edi
nop
sub edx, edi
xor edi, ebx
sub ebx, edx
jmp 0x46a385
push 0x249b6d27
mov edx, 0x31b365f1
xor ebx, 0x31b396a9
xchg edi, edx
shl edi, 0x16
add ecx, ebx
sub ebx, ecx
add ecx, ebx
xor ecx, ebx
jmp 0x46b49d
push 0x2499dae4
xor ebx, 0x31bb0e0a
or ebx, ecx
or edi, ecx
mov edx, ebx
inc edx
neg edi
add ecx, 0x31bc3d0a
or edi, ebx
and ebx, 0x31bcaff6
or ebx, ecx
jmp 0x46ad15
mov esi, 0x6332a2e
mov edi, 0x31be7707
xchg edi, edx
xor ecx, ebx
sub ebx, edx
mov edi, ebx
inc edx
and ebx, edi
or ecx, 0x31bfdedf
jmp 0x46968d
mov esi, 0x6e447c44
shl ecx, 0x13
xor edx, ecx
not ecx
sub edi, ebx
xor ebx, edi
inc ebx
sub ecx, 0x31cb6fa2
jmp 0x46b6b9
pop esi
or edx, ebx
not edi
ror ebx, 0xf
and ecx, edx
mov ebx, edi
add edx, ecx
rol ebx, 0x12
xchg ecx, edi
not ecx
shr edx, 4
mov ebx, 0x31cdb570
jmp 0x46b278
mov esi, 0x6332a2e
ror ebx, 8
add ecx, edi
and edi, ebx
xor ecx, edi
sub ecx, ebx
jmp 0x46a4d8
pop esi
sub ecx, edi
and edx, edi
not ecx
mov edx, edi
mov ecx, edx
or ecx, edx
jmp 0x46b4b9
call esi
sub ecx, edx
xor ebx, edx
sub edx, ecx
sub edx, 0x31dd28e6
mov edi, edx
shl ecx, 4
xor edi, edx
add ebx, edx
or ecx, 0x31de2fad
sub edi, ecx
xchg ebx, edi
or ebx, edi
jmp 0x46b205
call esi
add ebx, 0x31e28cdf
mov edi, edx
or edx, ebx
or ecx, ebx
mov edi, ecx
mov ebx, edx
and ecx, ebx
and edi, edx
and edi, 0x31e41f82
shr ecx, 0x1a
xchg edi, edx
jmp 0x46a067
call fcn.0046b246
and ecx, ebx
neg edx
or ebx, 0x31e989a1
xchg ebx, ecx
sub edi, ecx
rol edx, 0x15
xor edi, edx
mov ebx, ecx
not edi
jmp 0x46a16b
not edi
or edi, edx
xor ebx, ecx
xchg ebx, edi
xchg edx, ebx
neg ecx
inc edx
add ebx, ecx
jmp 0x46b1e8