Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetMessagePos
cmp eax, 0xfffffef8
jne 0x4010a7
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
ret
call sub.user32.dll_GetMessagePos
cmp eax, 0xffffff02
jne 0x401144
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xfffffedc
jne 0x4011af
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
ret
call sub.user32.dll_GetFocus
cmp eax, 0xffffff0e
jne 0x40124c
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
call sub.ntdll.dll_NtFilterToken
ret
jmp 0x46a37e
and edi, 0x8d3c62a8
shr ecx, 0x13
mov esi, edi
add edx, 0x8d3cb986
or edi, 0x8d3cd588
and edi, esi
add ecx, 0x8d3d0908
jmp 0x46b270
pop esi
shl ecx, 0x15
xor edi, 0x8d915972
or edi, ecx
mov ecx, ebx
sub edx, edi
xor edi, edx
or ecx, edx
mov edi, ecx
add edi, 0x8d9215d6
rol ecx, 0x13
or ebx, edx
xor ebx, 0x8d9267aa
jmp 0x46bd57
pop esi
sub ecx, edx
xor ecx, edx
xor edi, 0x8d9cd744
xor ebx, ecx
add edi, 0x8d9d0d16
mov ecx, edx
and edx, ebx
xchg ebx, edx
jmp 0x46c4a3
push 0x8d4ac4ee
xor ecx, 0x8d9d8942
or ebx, 0x8d9da5f8
mov ebx, 0x8d9dbe08
mov ebx, edx
and ebx, 0x8d9df5e2
xchg edx, ecx
xchg edx, edi
or edx, 0x8d9e4a84
inc ecx
or ebx, edx
jmp 0x46cd14
mov esi, 0x75624153
xchg ebx, edx
xchg edx, ecx
and ecx, edi
add edi, ecx
shr ecx, 0x10
add edx, ebx
add edx, 0x8d9f4fbc
mov edx, ecx
xchg ecx, edx
sub ebx, ecx
and ebx, edx
inc ecx
jmp 0x46d116
push 0x8d424fc8
rol ebx, 6
xor ecx, 0x8da0d534
sub edi, ecx
xchg edx, ebx
or edx, ebx
add edx, 0x8da141d2
xor ebx, edi
or ecx, edi
jmp 0x46ced7
pop esi
sub ebx, edx
or edx, ebx
dec ebx
add ebx, 0x8e2001f4
dec edi
sub ecx, edi
jmp 0x46b5db
push 0x8d40c11a
sub ebx, edi
sub ebx, edi
rol ecx, 0x1b
sub edx, edi
jmp 0x46b3f7
pop esi
add edx, ebx
xor edx, ebx
and edi, edx
or edi, ebx
mov ecx, edi
or edx, 0x8e2371d6
jmp 0x46ce37
pop esi
not ecx
xor edi, 0x8e27cd10
or edx, 0x8e27e922
and edx, ebx
dec edx
ror edi, 7
add ebx, 0x8e285a54
mov edx, 0x8e2876e4
jmp 0x46a50d
push 0x8d4c7df6
add edi, ecx
shr ecx, 0xa
neg edi
xor edx, edi
or edi, edx
sub edx, ecx
shr ebx, 0x1c
sub edi, 0x8e2d23ec
shr ecx, 0x1b
add ebx, edi
jmp 0x46c530
pop esi
shl edi, 0xd
and ecx, edx
shr ebx, 0x16
mov edx, edi
add ecx, 0x8e2e6a80
bswap edx
and edi, edx
not edi
jmp 0x46d27b
mov esi, 0x75624153
dec ecx
dec edi
mov edi, 0x8e2f21fa
mov ecx, edx
xchg edx, ecx
rol edi, 0x1c
dec ecx
sub ecx, edi
and edx, ebx
or edx, ebx
sub edx, ebx
and edx, ecx
or edx, ecx
sub edx, edi
jmp 0x46c6eb
pop esi
xchg ecx, edi
xchg edx, ebx
bswap ebx
rol edi, 0x19
sub edi, ecx
and ecx, ebx
jmp 0x46b988
push 0x8d46fc68
ror edi, 4
and edi, ebx
xchg ebx, edi
not edx
rol ecx, 6
add edx, ebx
xchg edx, ebx
and ecx, 0x8e333cc0
mov edi, ecx
add edi, 0x8e337076
xchg ecx, edx
add edi, edx
jmp 0x46af44
push 0x8d436198
sub ecx, 0x8e34e780
nop
ror ecx, 0x1f
sub edx, 0x8e353aaa
sub edi, 0x8e355696
mov ebx, edx
sub ecx, 0x8e358a3c
xor ebx, 0x8e35ad32
not ecx
not ecx
shl edx, 1
and ecx, ebx
shl edi, 0x11
mov edi, edx
jmp 0x46b389
call fcn.0046b3aa
or ecx, edx
sub edi, ebx
xor ecx, 0x8e39394a
and ebx, edx
shl ebx, 0x10
or edi, 0x8e39882a
jmp 0x46bb5b
pop esi
mov ecx, edx
sub ebx, 0x8e402160
sub edx, ecx
bswap ecx
add ecx, 0x8e4075ee
mov edx, ebx
not ecx
xor ecx, edx
jmp 0x46d3b2
push 0x8d4aa46f
sub edi, 0x8e41aa26
or ecx, ebx
xor edx, 0x8e41e344
or ecx, 0x8e41ff56
and edi, ebx
or ebx, 0x8e42393e
ror edx, 9
add edi, edx
jmp 0x46a52b
pop esi
and edi, ebx
sub ebx, 0x8e468ca6
xor ebx, edi
shl ebx, 0x1d
neg ecx
mov ecx, 0x8e47039c
sub edx, ebx
add ebx, 0x8e47396e
shr ebx, 2
bswap ecx
jmp 0x46a65d
push 0x68f7e
and edx, edi
xor ebx, edx
xor ebx, 0x8e48fcbe
sub ecx, edx
jmp 0x46affa
mov esi, 0x4132136a
xchg edi, ebx
xchg edi, ecx
ror ebx, 0x1a
ror edi, 0x13
xchg ebx, edx
sub ebx, edi
jmp 0x46cbd9
mov esi, 0x75624153
shl edx, 0x1a
or ebx, ecx
neg edi
neg ecx
not ecx
not ecx
shl edx, 6
sub ecx, 0x8e53b756
nop
xchg ebx, ecx
jmp 0x46af66
push 0x8d45c8d2
add ebx, ecx
sub edi, 0x8e54ecb0
sub edi, 0x8e550868
or ecx, ebx
sub ecx, edx
and edi, 0x8e555f46
jmp 0x46bb3d
push 0x8d408594
and edi, edx
and edx, ecx
or ecx, edi
and edi, ecx
ror ebx, 5
xor edx, edi
jmp 0x46d378
mov esi, 0x75624153
rol edi, 3
rol edi, 0x1c
sub edx, ecx
mov edi, 0x8e598a1a
and edx, 0x8e59a6aa
add edi, edx
and ebx, ecx
xchg ecx, ebx
or ecx, edi
mov ebx, edx
xchg ecx, edi
not edi
jmp 0x46c78a
call esi
mov edx, ecx
not edx
or edi, ecx
or ecx, ebx
xor edx, 0x8e65e59a
rol ebx, 0x16
xor edi, 0x8e661dbe
dec ecx
neg edi
xor edx, 0x8e667772
jmp 0x46d51b
push 0x8d471cc2
not ecx
rol ebx, 3
xor edi, 0x8e66d9ba
or ecx, ebx
mov edi, 0x8e6713fa
mov ecx, edx
xchg edx, ecx
xchg ebx, edi
jmp 0x46accf
call fcn.0046b3aa
and edi, ecx
or edi, ecx
add edi, edx
neg ecx
ror ecx, 0xb
mov ecx, edi
jmp 0x46bbff
push 0x401400
add edi, 0x8e6c28fe
xor edx, 0x8e6c4480
and ebx, edi
add edx, 0x8e6c7b5e
or edx, 0x8e6c97ee
inc ebx
xchg ecx, edi
xor edx, ebx
xor edi, edx
or ecx, edx
xor edi, 0x8e6d3e0a
xchg ebx, edi
jmp 0x46af1d
pop esi
sub edx, edi
shr ecx, 4
and edi, ebx
add ecx, edi
and ecx, ebx
ror edx, 3
add edi, edx
xor edx, 0x8e6e4340
not ecx
or ebx, ecx
sub edi, 0x8e6e94a6
mov ebx, edx
jmp 0x46d65d
push 0x8d4d9676
not ebx
mov ecx, edx
dec edi
mov ecx, edi
xor ebx, ecx
xor ecx, edi
or edi, 0x8e6f7f10
xor edi, edx
jmp fcn.0046bfc7
call esi
and edx, ebx
or ebx, edi
xor edx, ecx
shl edx, 0xa
mov edx, edi
and ecx, edx
shl edi, 0x11
neg edx
jmp 0x46c5ed
call fcn.0046b3aa
mov ecx, ebx
inc ecx
xchg edx, ebx
add ebx, 0x8e743356
jmp 0x46d0e0
mov esi, 0x75624153
sub edx, edi
xor ebx, 0x8e755f0a
shr edx, 0x10
sub ebx, edi
xchg ecx, edi
nop
or ebx, edx
or edi, ebx
add edi, ebx
and edx, ecx
jmp 0x46d071
pop esi
xor edx, 0x8e7daf9a
and ebx, edi
add edx, 0x8e7de268
mov ecx, ebx
add edx, edi
xor ecx, edi
jmp 0x46cf1e
push 0x8d3edb78
or edi, edx
shr edx, 4
shr edx, 1
xor ecx, 0x8e7eac3e
add ebx, edx
add ecx, edx
mov edi, ebx
add edx, 0x8e7f1882
sub ecx, edi
mov ecx, ebx
jmp 0x46bea8
push 0x8d494d88
rol ebx, 0x12
and edi, 0x8e84f068
xchg edx, edi
or edi, ecx
jmp 0x46ba8d
call esi
neg ecx
mov ecx, edx
and edi, ebx
xor ebx, edi
add ecx, ebx
mov edx, edi
or edi, 0x8e85f0e6
and edx, 0x8e8610b4
jmp 0x46d14a
push 0x8d437f7e
xor edi, 0x8e863914
or edx, ecx
sub edi, ecx
xor ebx, ecx
dec edx
add edi, edx
not ecx
and ecx, 0x8e86fdfe
jmp 0x46d462
mov esi, 0x75624153
ror ecx, 0xe
add ecx, edi
jmp 0x46b0f5
mov esi, 0x75624153
ror edx, 6
ror edx, 0x1c
add edi, edx
mov edi, ebx
rol edi, 0x1c
xchg edi, ebx
and ecx, ebx
inc edi
bswap ebx
add ebx, edi
jmp 0x46b89a
call esi
bswap ebx
and edi, 0x8e8b7a5a
sub edi, ecx
xor ecx, ebx
mov ecx, edx
and edx, ebx
sub ebx, edi
rol ecx, 0x13
jmp 0x46a6ff
push 0x8d492c8a
xor ebx, edx
bswap edi
xchg ecx, ebx
xor edx, 0x8e9026e4
or edx, ebx
sub edx, ebx
jmp 0x46b353
push 0x8d4b0246
not edi
mov ebx, ecx
xor ebx, edi
mov ecx, ebx
or ecx, ebx
mov edi, 0x8e923bcc
shl edi, 0xe
shr edx, 3
jmp 0x46c0b7
push 0x8d3f5596
dec ecx
add edi, ecx
or edx, ebx
or ecx, edx
xor edi, 0x8e964142
or edx, 0x8e965dae
jmp 0x46ccae
push 0x8d46df6a
xor ebx, edx
sub edi, ebx
xchg ebx, edi
mov edi, ecx
ror ebx, 0xd
shl edi, 4
xor ecx, edx
sub ecx, edx
xor edx, ecx
xor ecx, ebx
jmp 0x46a858
mov esi, 0x75624153
mov edx, ebx
add edi, edx
xchg ebx, edx
neg edx
xor ecx, 0x8e99aa66
or ecx, edi
shl ebx, 9
dec edx
bswap ebx
add ebx, 0x8e9a3dc6
mov ecx, edi
shr edi, 0x1a
jmp 0x46bd0d
push 0x8d428b04
and ecx, ebx
inc edi
ror ecx, 0x11
and edi, 0x8e9c0db0
and ecx, edi
add edi, ecx
mov edx, ebx
xor ecx, ebx
jmp 0x46b129
call esi
sub edx, edi
ror edi, 0x1f
xchg ebx, edx
and edx, ecx
xchg ecx, edx
xor ebx, ecx
jmp 0x46d532
call fcn.0046b3aa
rol edx, 0x1f
or ecx, 0x8eae9e16
mov ecx, 0x8eaebaf0
mov ebx, 0x8eaed7b4
jmp 0x46c4b8
pop esi
sub ebx, ecx
and ecx, edi
jmp 0x46b02f
push 0x8d41b496
sub edx, ebx
add ebx, edi
and edi, 0x8eb5c9d6
add ebx, ecx
mov ebx, 0x8eb5fdfa
ror ebx, 0x16
and edx, 0x8eb6398e
and ecx, edx
sub edi, ebx
inc ebx
shr edi, 0x19
add ecx, 0x8eb6be30
jmp 0x46d2c0
pop esi
add ebx, 0x8eb92a32
shl edx, 0x1f
xor ecx, ebx
not ecx
or ecx, 0x8eb99e8c
mov ecx, edi
and edx, ecx
sub ecx, ebx
jmp 0x46c13e
push 0x8d496a3e
neg ebx
mov ebx, edx
sub ecx, 0x8ebd39ea
sub edx, ebx
mov ecx, 0x8ebd6fe0
sub ebx, edi
xor ebx, edi
or ecx, ebx
inc ecx
rol ebx, 0x11
sub ecx, edx
xchg ebx, edi
jmp 0x46d2ad
push 0x8d45e65e
xor edx, edi
mov edi, ebx
bswap edx
or edi, ebx
sub edi, ecx
and edx, ebx
add edi, edx
xor ebx, 0x8ec3ca34
jmp 0x46b3e8
call esi
xor ebx, edi
mov ecx, ebx
mov edi, ecx
and edx, 0x8ec44356
sub ecx, 0x8ec45f58
dec ebx
xchg edx, edi
or ebx, ecx
mov ebx, 0x8ec4caa2
xchg ecx, edi
jmp 0x46cf5d
push 0x8d45a82e
ror edi, 0x1b
shr edx, 0x15
xor ecx, 0x8ec546de
dec edi
not edx
xor edx, edi
add edx, ebx
add edx, 0x8ec5d568
rol ecx, 3
bswap edi
mov ebx, edx
shl ebx, 0x10
jmp 0x46ad0a
call esi
shl ecx, 0x1e
or ecx, edi
bswap edi
rol edx, 0x1a
sub edx, ebx
xchg ebx, edx
jmp 0x46d1b9
pop esi
sub ebx, edi
xchg ecx, edx
add ecx, ebx
mov edi, 0x8eca21fc
shl edi, 2
ror ecx, 0x1e
shr ebx, 0x18
shr edi, 1
bswap ecx
add edx, ebx
add edx, 0x8ecae7ac
shr edx, 0xd
jmp 0x46aa69
pop esi
mov edx, 0x8ecb2bea
add ecx, 0x8ecb4bec
shr ecx, 9
mov edi, 0x8ecb800e
shl edi, 6
and edx, ecx
jmp 0x46be16
call fcn.0046b3aa
nop
xchg edx, ebx
xor edi, ebx
sub edi, ebx
and edi, ecx
and ecx, ebx
rol edx, 4
add edi, edx
or edx, ecx
xor edi, 0x8ed22f3a
not edx
add ecx, 0x8ed266de
mov edx, ebx
ror edi, 3
jmp 0x46b36a
pop esi
add edi, edx
xor ecx, edx
mov ecx, edi
xor ecx, 0x8ed42a2e
xchg edi, ecx
or ebx, edx
mov ecx, 0x8ed47a3e
sub edx, ebx
jmp 0x46c7d7
push 0x8d47f64a
mov edx, ebx
mov edi, 0x8eda262a
mov ecx, edx
add ebx, 0x8eda611c
mov ecx, edi
shr ebx, 0x16
sub edi, ecx
and edi, ecx
or edx, edi
ror ecx, 0x17
jmp 0x46c345
push 0x8d4834fa
ror ecx, 0x1f
shr ebx, 6
and edx, edi
add edx, ebx
jmp 0x46a7fc
pop esi
rol ebx, 0xa
add edx, 0x8edbbe34
xor ebx, edi
mov ecx, ebx
shl edi, 8
shl edi, 9
mov ecx, 0x8edc468a
add ebx, edi
bswap ecx
sub ecx, edi
or edi, ecx
shr ecx, 5
xor ebx, 0x8edcef62
shr edx, 5
jmp 0x46c227
push 0x8d3efb54
or edx, ebx
dec ebx
sub ebx, 0x8ede5fe2
sub edx, ecx
sub edi, 0x8ede95b4
xchg ebx, ecx
sub edx, ebx
add edx, 0x8edee804
and ebx, ecx
xor ebx, ecx
neg edi
or edx, ebx
jmp 0x46d2f5
pop esi
neg ecx
and edi, 0x8ee8936a
xor edx, ecx
mov edx, edi
add ecx, 0x8ee8e02c
mov edx, ebx
add edi, edx
and ecx, edx
sub edi, ebx
and edi, ecx
jmp 0x46c5cd
push 0x8d4b239e
xor ebx, ecx
mov edx, ebx
add edi, edx
bswap edx
sub ebx, 0x8eedc304
bswap edi
or edi, ecx
ror edx, 0x16
jmp 0x46b5fb
pop esi
add ebx, 0x8ef19b3e
shr ebx, 1
sub edi, 0x8ef1d2d2
shr ecx, 0x14
xor ebx, 0x8ef20af6
or ecx, edx
bswap edi
sub ebx, ecx
jmp 0x46c806
call esi
xor ebx, edi
xchg ecx, edx
xor ebx, edx
mov edi, edx
jmp 0x46cbbf
pop esi
and edi, edx
sub edx, 0x8ef89704
sub edx, ecx
add edi, 0x8ef8d092
nop
sub edx, edi
jmp 0x46a600
call fcn.0046b3aa
mov ecx, ebx
mov ebx, 0x8efcb052
xchg ecx, edi
mov edi, edx
and ebx, 0x8efd07d4
xor ecx, edx
mov ecx, edi
and edx, ecx
xor edx, 0x8efd6f2e
not ebx
jmp 0x46ca22
push 0x8d4817fc
sub ebx, edi
mov edx, 0x8f01468e
sub ecx, 0x8f0162ea
add edi, ebx
sub edx, 0x8f0199ec
and ecx, 0x8f01b5c8
mov edi, ecx
xchg ecx, edi
jmp 0x46be3d
pop esi
dec ebx
xchg edx, edi
or ebx, ecx
add edi, ecx
jmp 0x46cabe
call esi
xchg ecx, edi
xchg edi, edx
and edi, ebx
or ecx, 0x8f0c9dd4
inc ebx
not edx
mov edx, edi
mov ecx, edx
add edi, ebx
add ebx, ecx
dec edi
bswap ecx
jmp 0x46ab21
call esi
sub edi, edx
mov edi, ebx
not ecx
or ecx, edi
add ecx, ebx
inc ecx
jmp 0x46d018
push 0x8d4c9a40
shl edi, 6
xor edi, 0x8f107a12
or edx, 0x8f109648
mov edx, 0x8f10b2d8
jmp 0x46d4ae
pop esi
xor edi, ecx
ror ebx, 6
sub edi, edx
rol ebx, 0x16
mov ebx, ecx
xor ecx, edi
add ecx, ebx
and edi, edx
xchg edx, edi
sub ecx, edx
add ebx, ecx
mov ecx, ebx
jmp 0x46ac79
pop esi
and ebx, edx
inc ecx
xchg edi, edx
sub ebx, 0x8f163b16
inc edx
ror ebx, 0x11
or edi, ecx
or edx, ebx
jmp 0x46c013
push 0x8d3f378c
ror ebx, 1
sub ecx, edx
rol edi, 0x1d
mov ebx, ecx
sub ecx, edi
xor ecx, edi
jmp 0x46b58d
call fcn.0046b3aa
sub ebx, 0x8f1e1300
xchg ecx, ebx
add ebx, edx
or ecx, ebx
sub ebx, edx
inc edx
inc edx
or ecx, ebx
mov edi, 0x8f1eea6c
sub edx, edi
ror edi, 0xa
or ecx, 0x8f1f3c74
jmp 0x46b43c
call fcn.0046b3aa
neg edx
dec edi
inc ecx
sub ecx, ebx
or edi, edx
add edi, ebx
and ecx, 0x8f23cf96
mov ecx, ebx
mov ebx, edx
or ebx, edx
or edi, edx
and edi, 0x8f2453c8
sub edx, 0x8f246c0e
xor ecx, edi
jmp 0x46b09a
push 0x8d406409
and ecx, edi
mov ecx, ebx
add edx, ebx
and edi, edx
xchg edi, edx
mov ebx, ecx
and ebx, ecx
xchg ecx, ebx
add ebx, edx
xor edx, edi
jmp 0x46ad88
pop esi
mov edx, ecx
mov ecx, 0x8f26eea8
rol edi, 0x13
dec edi
jmp 0x46a8b0
pop esi
ror ebx, 6
sub edx, edi
ror edi, 0x14
shr edx, 0x1a
bswap ecx
or ebx, 0x8f27e0de
add ebx, edx
inc ecx
rol ebx, 0x13
bswap edi
or edx, 0x8f286f9c
add ecx, ebx
and edx, edi
or edx, ebx
jmp 0x46b057
push esp
mov ebx, 0x8f2a6bb2
and edx, edi
not ebx
ror edi, 0x18
shr edx, 0x1a
inc ebx
shr edi, 0xe
add ebx, edx
jmp 0x46cdd0
call esi
ror edi, 0xb
mov edx, ecx
bswap ebx
xchg ecx, edx
shr ecx, 0xd
mov edi, edx
shl edi, 0x13
or ecx, edx
add ebx, 0x8f3858ea
sub ebx, ecx
mov edx, ebx
shr ecx, 0xd
jmp 0x46d3f2
pop esi
add edi, edx
add edi, ebx
sub edx, 0x8f390046
xor edi, ebx
jmp 0x46bc3e
push 0x8d490fb2
xor ebx, edx
mov ecx, 0x8f3cbace
or edi, ebx
mov ecx, ebx
mov ebx, edx
xor ecx, ebx
mov ecx, edx
bswap edx
add ecx, edx
bswap edi
add ecx, edi
xchg ecx, ebx
xor edx, edi
and ebx, 0x8f3df862
jmp 0x46b4cc
pop esi
xchg edi, edx
and ecx, edx
dec ebx
rol edi, 0x1f
or ecx, ebx
add edi, edx
xor ebx, 0x8f3fddbc
and ebx, 0x8f3ff626
jmp 0x46be51
pop esi
mov ecx, 0x8f450ca4
or edi, ebx
dec edi
sub ecx, edi
ror ebx, 0x11
shl edi, 0xb
neg ecx
xchg edx, ecx
jmp 0x46aa31
call fcn.0046b3aa
and edi, ecx
or edx, edi
and ebx, 0x8f462d92
or edi, 0x8f464622
add ecx, edx
sub ebx, 0x8f468114
inc ebx
or edx, 0x8f46b9b6
and edx, edi
or edi, 0x8f46eca8
sub edi, edx
sub ebx, 0x8f4722f8
jmp 0x46d30e
push 0x8d458b7a
not edi
sub ecx, edx
sub ebx, ecx
xchg ecx, ebx
add edi, ecx
add edi, edx
xor ebx, 0x8f48dc7e
dec edx
ror ecx, 5
xchg edi, ebx
jmp 0x46bb80
pop esi
sub edx, ebx
xchg edx, edi
rol ecx, 0x1a
sub ecx, edi
sub ebx, edx
rol ebx, 6
rol ebx, 0x1c
sub ebx, 0x8f4afe7e
jmp 0x46c7f5
mov esi, 0x75624153
xchg edx, edi
rol ecx, 0xe
bswap edi
or edi, 0x8f4c933a
xor edx, 0x8f4caf4a
xchg ebx, edx
xchg edi, ebx
xchg edi, ebx
jmp 0x46ccd1
call fcn.0046b3aa
shl ebx, 0x11
xchg edi, edx
ror edi, 2
add edi, ebx
and ecx, 0x8f4d957c
sub ebx, 0x8f4db1e6
add ecx, edi
mov ecx, 0x8f4de97c
nop
neg edx
jmp 0x46c1ec
push 0x8d4ae514
mov edi, ebx
and ebx, edi
neg ebx
mov ebx, 0x8f4f109c
mov edx, ebx
xor edx, 0x8f4f4476
add ebx, edi
xor edi, 0x8f4f7f58
xchg ecx, edx
sub edi, ecx
mov edi, 0x8f4fcf1e
and edx, 0x8f4febf8
sub edx, 0x8f500408
add edx, ecx
jmp 0x46b50f
push 0x40
neg edi
mov ecx, edx
sub edi, ebx
or ebx, edi
rol edi, 0xa
dec ecx
jmp 0x46ab79
pop esi
mov ebx, 0x8f57f772
xchg ecx, ebx
xchg edi, ecx
shl edi, 0xc
xchg edx, edi
and edx, ecx
and ecx, 0x8f589cd6
add edi, 0x8f58b9b0
jmp 0x46a823
pop esi
and edi, ebx
not ecx
add ebx, 0x8f5a7770
add edi, 0x8f5a9718
xor ecx, ebx
shl edi, 0x11
or edi, edx
mov ecx, edi
jmp 0x46bc14
push 0x8d426d54
xor ebx, ecx
add edx, edi
mov ebx, edi
xchg edi, edx
sub edi, edx
inc edx
and ecx, ebx
xor edx, 0x8f5def34
and edx, 0x8f5e0be8
sub edx, 0x8f5e242e
jmp 0x46b646
push 0x8d4c3cf7
bswap ecx
or ebx, 0x8f5f4836
and edx, ebx
add ebx, 0x8f5f7f5c
sub edi, ebx
or edi, ecx
not ebx
shr ecx, 0xc
sub ebx, edx
or edi, ebx
shr ebx, 0x18
sub ebx, ecx
jmp 0x46cf9f
pop esi
sub ebx, ecx
add edi, ecx
or edx, ebx
sub edx, 0x8f6152c6
jmp 0x46a599
push 0x8d4c5d76
add edx, edi
sub ebx, edx
shr ecx, 4
bswap ebx
mov ecx, edi
or ecx, edi
add ecx, 0x8f63a74a
inc ecx
rol ebx, 0x1b
inc edx
rol ecx, 0x1e
add ecx, ebx
not edx
add ecx, 0x8f646df8
jmp 0x46a7a9
pop esi
add edi, 0x8f66c4f2
xor ecx, ebx
add ebx, edx
mov ecx, 0x8f67158e
sub edx, ebx
and edx, ecx
shr edx, 0x14
sub ecx, 0x8f678546
add edx, ebx
add ecx, edx
jmp 0x46cc72
call fcn.0046b3aa
xor edx, ecx
inc ebx
or edx, edi
mov ebx, edx
shl ecx, 0x19
sub edi, ebx
jmp 0x46c51e
call esi
xor ebx, 0x8f6d7f26
and ebx, 0x8f6d9bb6
sub ebx, 0x8f6db7c6
mov ebx, 0x8f6dd412
sub ecx, edi
ror ebx, 0x10
jmp 0x46cb12
call fcn.0046b3aa
and edi, ebx
not ecx
xchg ecx, ebx
xchg edi, ecx
shl edi, 0x13
or edi, 0x8f6f73b4
xor edi, edx
or edx, 0x8f6facc2
add ecx, ebx
or ebx, 0x8f6fe09c
and edx, 0x8f6ffd06
rol edx, 0x18
jmp 0x46b6e6
pop esi
xor edx, ebx
sub edx, ecx
ror edx, 5
shr ecx, 7
ror edi, 0xb
shr edx, 0x1d
shr edx, 0x1a
sub ebx, edi
jmp 0x46b8d5
pop esi
mov ecx, edi
sub edi, ebx
inc ebx
mov ebx, 0x8f747486
and ecx, edx
dec ebx
xchg edx, edi
inc edx
and ecx, ebx
xchg ecx, ebx
jmp 0x46ca49
pop esi
and ebx, edi
ror edx, 0x15
shr ecx, 0xf
mov edi, 0x8f7a518c
shl edi, 3
and ecx, edx
jmp 0x46ce7e
push 0x8d498b3c
sub ebx, ecx
shl edi, 7
neg ecx
or edi, edx
jmp 0x46a55b
mov esi, 0x75624153
and ebx, edi
inc edx
rol ecx, 0x17
inc edi
rol edx, 0xe
shl ecx, 5
mov edx, ecx
add edx, edi
neg edi
and edx, 0x8f7cdbbe
or edi, edx
add edi, ebx
jmp 0x46a939
push 0x8d3f19a8
xchg ecx, edi
or edi, edx
sub edi, edx
or ebx, ecx
and ecx, edi
mov ecx, ebx
mov ebx, edx
inc ecx
jmp 0x46c6bb
push esp
not ecx
add ecx, edi
or edx, ecx
add edi, 0x8f7eaa84
xor edx, 0x8f7ec6e0
xchg ebx, edx
mov ecx, 0x8f7efc0e
xor ecx, 0x8f7f1fdc
add edi, ecx
sub edi, ecx
jmp 0x46c85e
push 0x8d40a36a
xchg ebx, edi
mov ebx, 0x8f81c7be
sub ecx, edi
ror ebx, 6
or ecx, edx
xor ebx, 0x8f823384
jmp 0x46a629
pop esi
dec ecx
rol ebx, 0x18
add ebx, edi
or ecx, edx
jmp 0x46a3a2
pop esi
xor ecx, edx
or ecx, edi
add ecx, 0x8f85bc1c
add edx, ebx
or edi, edx
shr edx, 0x14
sub ebx, edi
and ecx, ebx
shl edx, 0xe
mov edx, edi
jmp 0x46ba04
push 0x8d439c56
add ebx, 0x8f894a52
sub ebx, ecx
not edx
shl edx, 0x14
jmp 0x46ad9f
mov esi, 0x75624153
rol ecx, 0xf
sub ecx, edi
ror ebx, 1
or ecx, edx
xor edi, ebx
sub edi, ebx
xor ecx, 0x8f8c138a
inc edi
rol edx, 0xc
sub edx, ebx
and edx, ecx
mov ecx, edi
add edi, ecx
sub edi, 0x8f8cce32
jmp 0x46c2b8
pop esi
ror ebx, 8
xchg edx, ebx
add edi, edx
sub edx, 0x8f8f1058
mov ebx, ecx
bswap edi
jmp 0x46cc34
pop esi
or ecx, ebx
add ebx, edx
mov ecx, 0x8f8fa3ee
add ebx, 0x8f8fc014
sub edi, ebx
and edi, ecx
jmp 0x46a7e0
pop esi
inc edx
rol ecx, 0x1b
nop
or edi, 0x8f992ec2
add ecx, edx
or ecx, 0x8f99629c
mov ecx, edi
xchg ecx, edx
shr ecx, 0x13
mov ecx, 0x8f99d384
sub edx, ebx
xor edx, ebx
or edx, 0x8f9a23ba
add ecx, ebx
jmp 0x46b256