Function at 0x401000
Capabilities:
Create process on windows
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
call sub.kernel32.dll_GetVersion
cmp eax, 0xffffff38
jne 0x401061
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xfffffee7
jne 0x401103
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xffffff16
jne 0x40116e
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xffffff0e
jne 0x401215
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.kernel32.dll_SetSystemTimeAdjustment
call sub.advapi32.dll_CreateProcessWithLogonW
call sub.advapi32.dll_CreateProcessWithLogonW
ret
jmp 0x46aece
add edi, edx
add ecx, ebx
and ecx, edx
or ebx, ecx
add ecx, edi
rol ecx, 4
xor edi, edx
jmp 0x46c87e
mov esi, 0x246e6c30
xchg ecx, ebx
mov edi, edx
xchg ecx, edx
dec ecx
mov ebx, ecx
ror edx, 0xc
and ecx, 0x326911e
and edi, edx
and ecx, edx
xor edx, edi
jmp 0x46c6ef
push 0x24173ef
rol edx, 0xa
add ecx, edi
sub ecx, edi
sub edx, edi
xor ecx, edi
not ebx
dec ecx
sub ecx, edi
jmp 0x46b86b
call fcn.0046c8fc
mov ebx, edx
or edx, ebx
add edx, ecx
xchg edx, ecx
shl edx, 0xb
xor edx, ebx
mov edi, ebx
sub edx, 0x32c2eb6
xor ecx, ebx
mov ebx, ecx
xor edx, ebx
or edx, edi
jmp 0x46c8d9
pop esi
add edx, ecx
add ecx, ebx
jmp 0x46ddd8
push 0x236a983
ror ecx, 0xf
add edi, ecx
xor ebx, edx
xor ecx, 0x3338378
or edi, ecx
mov ecx, 0x3340c87
jmp 0x46d436
call esi
xor edx, edi
dec edx
shl ebx, 0x1f
not ebx
not edx
mov edi, ecx
or ecx, 0x335e752
mov ecx, 0x336386e
add edi, 0x3367bbd
or edi, edx
xchg edi, ecx
sub ebx, 0x3374379
dec edi
xor edi, edx
jmp 0x46c5dc
pop esi
neg ebx
mov edi, edx
xor ecx, edx
xor edx, 0x338e473
xchg edi, ebx
xchg ebx, edi
xor edx, edi
jmp 0x46c5ae
pop esi
xchg edx, edi
bswap ecx
or edx, edi
or edi, edx
add edx, edi
not ebx
sub edx, edi
mov edx, 0x343714b
sub ebx, 0x343b15e
jmp 0x46dc90
push 0x22ad5d5
inc ebx
neg edx
and edx, ebx
mov edx, ebx
xchg ecx, ebx
add edi, ecx
ror ebx, 0xd
or ecx, ebx
mov edx, ebx
bswap edx
jmp 0x46c662
push 0x2365f0d
xor edi, ecx
xor edi, ebx
and ecx, 0x3520322
shr edi, 0x19
xor ecx, ebx
and edi, 0x352bee7
xchg ecx, ebx
add edi, ebx
rol edi, 0x1e
add ebx, edi
xor edi, edx
xchg edx, ebx
jmp 0x46b0ba
push 0x24414b6
rol edx, 0xd
shl ebx, 0xe
bswap edx
xor ecx, edx
xchg edi, ebx
jmp 0x46dbf1
pop esi
not edx
xor edi, edx
sub edi, ebx
mov ecx, edx
add ebx, 0x452425e
add edx, ecx
and edi, edx
inc edi
bswap ecx
ror edi, 0x1c
jmp 0x46c067
pop esi
shl ebx, 0xe
mov edx, ecx
add edi, ecx
mov ebx, edx
xchg ebx, edi
or edi, ebx
add ecx, edx
shr edx, 0x17
sub edx, ebx
mov ebx, ecx
xor edx, ebx
inc ebx
sub edi, ebx
or ebx, ecx
jmp 0x46de1a
call fcn.0046c8fc
sub ecx, ebx
and edi, 0x46a6ea1
not ecx
inc edx
sub edi, edx
and ecx, edi
xchg edx, edi
and ebx, ecx
or edi, 0x46c2d15
jmp 0x46c15c
call esi
shl edx, 0x10
sub ecx, edi
xor ebx, edi
ror ebx, 0xc
rol ebx, 0x10
or edi, ebx
neg ebx
not ebx
or ebx, 0x48a6850
jmp 0x46df1f
pop esi
xor ebx, ecx
not edx
shl edi, 0xe
xor ecx, edi
xor edx, 0x48f2ac0
or edx, 0x48f69fd
or edx, ecx
mov edi, 0x48fe14c
nop
add ecx, 0x4905893
not edi
jmp 0x46c822
mov esi, 0x2809144b
sub ecx, edi
neg ebx
and edx, ebx
add edi, 0x4997255
sub edx, 0x49a1a99
and ecx, ebx
and ebx, ecx
jmp 0x46b3f6
push 0x227671b
xor edx, ecx
mov edi, ebx
bswap edi
and edx, 0x49b9844
sub ecx, 0x49bd766
or ecx, edx
xor ebx, edx
shr ecx, 0x12
add edi, ecx
add ebx, edx
xchg edi, ebx
sub ecx, edi
mov edi, 0x49e00ad
xchg ecx, ebx
inc edx
jmp 0x46c381
mov esi, 0x246e6c30
or ebx, edx
ror ecx, 0x15
or edi, 0x4a3c576
nop
xor edi, ecx
or ecx, 0x4a478cc
not ecx
add edx, ecx
jmp 0x46be01
push 0x230de51
xchg ecx, edi
and edx, ecx
add edx, 0x4a92c50
ror ebx, 7
or edi, ecx
jmp 0x46c047
mov esi, 0x246e6c30
inc edi
mov edi, ebx
sub ebx, edi
and edx, ebx
sub ebx, edx
rol ecx, 0x1b
jmp 0x46d006
push 0x23094ec
add ebx, ecx
shr ecx, 0x11
sub edx, 0x4b197ab
xor ecx, ebx
or ebx, 0x4b20fe2
xor ecx, ebx
jmp 0x46b76b
push 0x223aa8c
add edx, 0x4b29d13
or ecx, 0x4b2e850
sub edx, edi
mov ecx, edi
sub edi, edx
jmp 0x46b96d
push 0x241bc93
xor ebx, edx
or ecx, 0x4b927b4
or ecx, ebx
xchg edx, ebx
xor edx, edi
sub ecx, edx
shl edx, 0x13
mov ecx, edi
or ecx, ebx
xchg edx, ecx
or ecx, edi
jmp 0x46ded8
call esi
add edi, ecx
ror ebx, 0x13
and ebx, edi
add edi, ecx
shl ecx, 0x15
and ebx, edx
xchg ecx, edi
nop
sub ebx, edx
jmp 0x46deb9
mov esi, 0x4132136a
sub edi, edx
shl ebx, 0x1c
xor ecx, 0x4c39811
shl edi, 0x1c
shr edi, 0x1f
and edx, edi
mov ebx, edx
xor ecx, 0x4c4d45a
rol edx, 0x1b
or ecx, 0x4c54faf
add ebx, edi
bswap ecx
or ebx, edi
jmp 0x46ba56
push 0x223f5a1
add edi, 0x4cb6207
add ebx, edi
or ecx, edi
add ecx, edx
or ebx, ecx
xor ecx, edi
neg edi
jmp 0x46bbfd
pop esi
rol edi, 0x13
or edx, 0x4d4d298
xchg ebx, ecx
xchg ecx, ebx
xchg ebx, ecx
xchg edx, ebx
mov ebx, edi
mov ecx, 0x4d64607
jmp 0x46d953
call fcn.0046c8fc
sub edi, 0x4d9547a
rol edx, 0x17
and edx, 0x4d9cf8c
sub edi, 0x4da0ab4
add edi, ecx
xor ecx, edi
mov ebx, 0x4dabc16
xor ebx, edx
bswap edx
mov ecx, edx
xchg ebx, edx
xor edi, edx
jmp 0x46dea3
call fcn.0046c8fc
neg edi
ror ebx, 7
mov edx, 0x4dcc9ed
xchg edi, ecx
xchg edx, ecx
or ecx, ebx
shr ebx, 0x1c
xor edx, edi
bswap ebx
xor ecx, 0x4de7c12
jmp 0x46d4cf
pop esi
xor edx, ecx
not edi
mov edx, ecx
bswap edi
dec ebx
xor edi, edx
and ecx, 0x4ecce30
or edx, 0x4ed0d7e
add ebx, edi
add ebx, edi
or edx, 0x4edcd2e
or ecx, edi
xor ebx, ecx
not ebx
mov ebx, 0x4eebaaa
or edx, edi
jmp 0x46b03b
push 0x2332f06
mov edi, ebx
not edi
and ebx, edx
mov ebx, edx
xor edx, ebx
dec edx
jmp 0x46d5e2
push 0x224891c
xchg edi, ecx
xor edx, 0x4f89c0b
bswap ebx
xor edi, ebx
add ebx, edi
xchg ebx, edi
or edx, edi
and ecx, 0x4fa02cd
nop
jmp 0x46d099
push 0x40
and edi, ecx
sub edi, 0x4fae213
or ebx, edi
add ebx, 0x4fb6bc4
xor edi, ebx
add edx, ebx
jmp 0x46d5fe
push 0x22a8aac
sub ecx, edx
xchg ebx, ecx
not edx
mov ecx, edi
xor edi, ebx
ror ecx, 0x18
rol edx, 4
and ebx, 0x506b7c3
and edi, ecx
not edx
shl ecx, 0x13
ror edi, 4
jmp 0x46b22d
push 0x227f61e
rol edx, 0xc
mov ebx, 0x5124648
and edi, 0x51284a6
sub edx, 0x512d580
ror ebx, 0x10
and ebx, edx
and edi, 0x5138e3e
neg edx
sub edx, 0x5144efa
sub edi, ecx
mov edi, ebx
jmp 0x46c6c2
push 0x23b99a6
or edx, 0x51a2bfa
xor edi, 0x51a6874
xchg edx, ebx
neg ebx
mov ecx, edi
mov ebx, 0x51b6cb8
add edi, edx
neg edi
jmp 0x46d349
call fcn.0046c8fc
xor edi, ecx
and ecx, 0x51c7f9b
and ecx, edi
mov edx, ecx
and edx, 0x51d4219
xor edx, ecx
or ecx, 0x51dbfd6
add ecx, 0x51dfc7a
or ebx, ecx
sub edi, 0x51e77ad
bswap edx
and ecx, edx
jmp 0x46b0d8
push 0x23615ff
xchg ecx, edx
sub edx, ecx
xor edi, ebx
rol edi, 0x1f
shr edx, 0x1f
jmp 0x46b24b
push 0x401400
xor ecx, edx
mov ecx, edx
xchg edx, ecx
xor edi, 0x53347a5
or edi, 0x533859e
xchg ebx, edx
sub ebx, ecx
xor edi, 0x5343c33
sub ecx, edi
sub ebx, ecx
jmp 0x46cb8d
push 0x231296e
rol ebx, 0x11
rol ecx, 7
add ebx, edi
or edi, 0x54623e4
xchg ebx, ecx
xchg edx, edi
and edx, ebx
add edi, ecx
jmp 0x46d980
pop esi
and edx, ebx
sub edx, ecx
add ecx, ebx
add edx, edi
inc edx
or ecx, 0x5489bc5
xor ecx, 0x548e72b
sub edx, ebx
not ebx
jmp 0x46dba0
push 0x22f22bd
and edi, ecx
add ecx, 0x54baa21
add edx, ecx
xor edi, ecx
shr edi, 0xc
shr edi, 0x15
rol ebx, 3
inc edi
jmp 0x46b7d1
pop esi
mov edx, 0x54d795d
add ebx, ecx
xor ebx, edi
add edi, edx
dec ecx
sub ecx, 0x54eae9c
xor ecx, ebx
add ecx, edi
jmp 0x46c0a4
pop esi
or ebx, edi
or edi, 0x55312fd
xchg edx, ebx
neg ecx
add edi, ebx
jmp 0x46b109
call esi
sub ebx, ecx
or edi, edx
sub edi, ecx
xor ebx, 0x55811cd
dec edi
xor edx, 0x5588a71
or ebx, 0x558d7b2
xor ebx, 0x5591274
jmp 0x46c0c4
push 0x23c2c53
or ebx, 0x561f9c4
sub edx, ecx
sub ecx, 0x5627182
neg ebx
add ebx, edx
or ebx, edx
or edx, ecx
and ebx, ecx
bswap ebx
bswap ebx
bswap ecx
add ebx, edx
mov ebx, 0x564d5b3
jmp 0x46c27c
mov esi, 0x246e6c30
dec ecx
mov edi, ecx
jmp 0x46d517
pop esi
or ecx, edi
xchg ebx, edx
or ecx, 0x5733635
sub edx, 0x5737282
add ebx, 0x573b1e4
sub edx, 0x573fc11
xor ecx, 0x5743b12
sub edx, ecx
and edx, ecx
jmp 0x46df96
push 0x227ae42
or ebx, 0x57b1fdf
sub ebx, 0x57b5ac2
add ebx, ecx
or ecx, edx
neg ecx
or edx, 0x57c48a0
and edx, edi
sub ebx, edx
add edx, ebx
not edx
ror ecx, 0x14
or edx, edi
xor edi, ebx
jmp 0x46bd74
push esp
and ebx, edi
xor edx, edi
and edi, edx
xchg ebx, ecx
mov edx, ebx
sub ebx, 0x58ac5a8
or edx, ecx
add edi, 0x58b4aae
and ebx, ecx
sub edi, edx
add edx, 0x58bfcad
sub ebx, edx
xor ecx, edx
and ebx, 0x58cb076
dec edx
jmp 0x46bc20
pop esi
not edx
inc ebx
jmp 0x46c5cd
pop esi
sub edi, 0x59073a2
ror edx, 0x1c
neg edi
shr edi, 0xe
xor ebx, 0x5925a4e
sub edi, ebx
or ebx, edi
add ebx, edx
jmp 0x46b7e7
mov esi, 0x246e6c30
sub edi, 0x5943c98
dec ebx
or edi, edx
xchg edi, ebx
and edi, ecx
and edx, ebx
xchg edi, edx
xchg ebx, edx
add ebx, edi
jmp 0x46da98
mov esi, 0x2809144b
neg edx
or ebx, ecx
neg ecx
and edi, 0x5a035a1
rol ebx, 0xa
sub ecx, ebx
or ebx, 0x5a0fdd0
add ecx, ebx
sub ecx, 0x5a1741c
and edi, 0x5a1b382
and edi, ecx
sub ecx, 0x5a22d6e
jmp 0x46d202
pop esi
sub edx, 0x5aa47c3
sub edi, ebx
rol ecx, 0x14
not ecx
sub ebx, edx
rol ebx, 3
mov ecx, edx
add ecx, ebx
rol ebx, 6
jmp 0x46b69c
pop esi
add edx, ebx
mov ebx, ecx
xor ecx, edx
shr ecx, 0xb
jmp 0x46b277
pop esi
or ecx, ebx
xchg edx, ebx
and edi, 0x5ae3f09
jmp 0x46cf48
mov esi, 0x2809144b
and edx, ebx
xor edi, ecx
mov edx, 0x5b348e1
mov edi, ebx
and edx, ebx
xchg ecx, ebx
or edx, edi
jmp 0x46df5c
push 0x22b1cdb
xor edi, ebx
mov ebx, 0x5b62069
sub ecx, ebx
xchg ebx, ecx
dec ebx
sub edi, ebx
bswap ecx
neg ebx
mov ebx, ecx
xchg edx, edi
add ecx, edx
sub ebx, edi
jmp 0x46c629
mov esi, 0x246e6c30
and ebx, ecx
xchg edx, ebx
mov edi, ecx
sub edi, 0x5bef9d3
add ecx, edi
and ebx, edi
inc ebx
sub ebx, ecx
sub ecx, ebx
not ecx
xor ecx, edx
mov edi, edx
xor edi, edx
xor ebx, 0x5c1693c
jmp 0x46db44
call fcn.0046c8fc
mov ebx, ecx
xor edi, edx
neg edx
add edx, 0x5c28444
mov ecx, ebx
xchg edi, ecx
and edx, ecx
sub edx, edi
jmp 0x46cc8a
call esi
add ebx, ecx
neg edi
or ebx, edi
mov ecx, edi
and edx, 0x5c4c017
add edx, ecx
add ebx, ecx
add edi, edx
and ebx, 0x5c5c379
xor ecx, 0x5c5fe9c
not ecx
or edi, 0x5c67d84
shl edi, 1
add ecx, edx
jmp 0x46c499
push 0x2398cbf
sub edi, ecx
xor edi, 0x5cb1dd6
and ecx, ebx
sub edx, ebx
sub edx, ecx
xchg edi, ecx
not ecx
xchg ecx, edx
or edx, 0x5ccdbc6
sub ebx, 0x5cd1814
or edi, ecx
xor ebx, edx
ror edx, 2
jmp 0x46ce9a
push 0x22363a0
or ebx, ecx
xor edi, ebx
not ebx
jmp 0x46b806
push 0x221e78e
mov ecx, edx
xor edx, ebx
sub edx, edi
add ecx, edx
xor ebx, edx
sub edx, edi
and ebx, edi
add edx, ebx
xor edi, ecx
and edx, 0x5e5f09a
jmp 0x46c50c
call esi
xchg edi, edx
and edx, ebx
sub ecx, edi
dec ebx
and edx, 0x5ec79c0
dec edx
and edi, edx
or ecx, edi
xchg edi, edx
xchg ecx, edx
add ebx, edx
and ebx, edx
sub edi, edx
jmp 0x46d14d
pop esi
xor ebx, 0x5f6ebb9
or edx, 0x5f72982
add ecx, ebx
not edi
or edx, edi
inc ecx
xchg ecx, edi
add ebx, ecx
and ecx, ebx
jmp 0x46cecd
push 0x233c00b
add edx, ecx
sub edx, 0x604fc64
not ecx
not edx
bswap edx
mov edx, 0x60611cb
and edi, ebx
shr ecx, 0xe
sub edi, ebx
ror edx, 3
and edi, edx
jmp 0x46c4b9
call esi
neg edi
sub ecx, edx
and ecx, edi
and ecx, ebx
xor ebx, edi
ror ecx, 0xd
add ebx, 0x63229ee
shr ecx, 2
add edi, ecx
xchg ebx, edx
jmp 0x46bb4b
call esi
and ecx, edi
xchg edx, edi
add ecx, edi
neg edi
and ecx, edi
mov ebx, edx
sub ecx, ebx
or ecx, edi
xchg ecx, edx
ror ebx, 0x18
jmp 0x46c302
pop esi
shr ebx, 9
and edx, 0x64c35f6
mov edx, 0x64c72dd
mov ecx, ebx
or ebx, 0x64d0141
mov edx, ebx
jmp 0x46b8f6
pop esi
mov edx, edi
xchg ebx, ecx
sub ecx, ebx
sub ebx, ecx
xor ecx, edx
or ebx, edx
mov ecx, ebx
bswap edx
xchg edx, ecx
add edi, ebx
bswap edi
jmp 0x46d284
pop esi
shl edx, 9
and ebx, edx
add edi, edx
xchg ecx, ebx
sub edx, ebx
or ebx, edx
neg edx
mov edx, 0x653d445
jmp 0x46bbca
mov esi, 0x246e6c30
sub edx, ebx
or edi, edx
and ecx, edx
add ebx, edx
xchg edi, ebx
and edx, edi
jmp 0x46deee
pop esi
or edi, edx
shr ecx, 0x19
and ebx, edx
and ebx, ecx
sub ecx, 0x67420b1
xor ebx, edx
jmp 0x46ccfd
push 0x22a42f0
xor ecx, edx
mov edi, 0x674f53a
xchg edx, ebx
mov edx, edi
xor ecx, 0x675baf0
shr ebx, 0xd
and edx, 0x67639b1
add ebx, edx
jmp 0x46bcc3
pop esi
or ecx, edi
and edx, edi
and edx, ecx
xor ecx, edx
add edx, 0x67cb789
rol edx, 0x16
sub edx, ebx
or edx, edi
add ecx, 0x67dbcfd
mov edx, edi
bswap edx
xor edx, 0x67e77a0
jmp 0x46b319
call fcn.0046c8fc
shr ecx, 7
xor ecx, edx
shr ebx, 0x11
xor ecx, edi
and edi, ecx
dec edx
xor edx, ebx
or ebx, 0x68af58e
bswap edx
mov edx, ebx
dec ebx
rol edx, 4
jmp 0x46c70d
pop esi
xor ecx, edx
mov edx, ecx
xor ebx, ecx
add ebx, 0x68cf65b
or edi, edx
and ebx, edi
not ebx
mov ebx, 0x68ded02
and edx, edi
add ebx, edx
neg ecx
and ebx, ecx
inc edx
or ecx, 0x68f6d06
jmp 0x46db6f
push 0x224d37a
add edi, ebx
mov edx, 0x6951135
nop
and ebx, 0x6958c09
shl ecx, 8
xchg ebx, ecx
neg edi
or edi, edx
jmp 0x46b019
pop esi
xor ebx, 0x6a1d854
add ecx, edi
sub ecx, edi
xor edx, 0x6a29ebd
rol edi, 0x13
xor ecx, 0x6a31c43
xchg edx, ebx
or ebx, ecx
jmp 0x46c47e
call fcn.0046c8fc
mov edx, edi
mov ecx, edi
add edx, edi
xor edx, 0x6b36ddb
mov ecx, edx
add edi, ecx
add edi, ebx
and edx, ecx
and ebx, ecx
or ebx, edi
inc ecx
shr edx, 4
add edx, ebx
xor ecx, ebx
bswap ecx
jmp 0x46d649
push 0x235cb16
xor ebx, edx
shr ecx, 3
xchg ebx, edi
xor edx, ebx
jmp 0x46bf09
push 0x23be2b9
inc ebx
or ecx, ebx
xor ecx, edi
xor ebx, edi
shl edx, 9
mov edi, ecx
jmp 0x46c207
push 0x236f3d8
xor edx, ecx
shr ecx, 0x14
or edx, 0x6dd57f3
mov edi, 0x6dd94c7
mov ecx, ebx
ror ebx, 0x16
mov ebx, edi
jmp 0x46b714
pop esi
inc ecx
or ebx, ecx
neg ebx
and ebx, edx
not ebx
mov edx, ecx
neg edi
bswap edi
mov ecx, edi
jmp 0x46c92a
pop esi
add edi, ecx
or edx, 0x6e159dd
sub edx, 0x6e1b34f
and ebx, 0x6e24412
sub edi, 0x6e2ba0c
xor ebx, edx
ror edi, 0x1e
xchg ecx, edx
jmp 0x46dd3a
call esi
shl edi, 0x1e
mov edx, ecx
sub ecx, ebx
xchg ebx, edx
or edx, 0x6e57fd2
jmp 0x46b9e6
push esp
or edi, ecx
rol edi, 0x16
xor edi, edx
mov ebx, 0x6e96e1e
and ebx, 0x6e9af80
or edx, ecx
or edi, 0x6ea3abf
not edx
add ecx, ebx
xor ecx, ebx
dec ecx
jmp 0x46c44b
call fcn.0046c8fc
ror edx, 0x16
or edx, edi
shr ecx, 0x1b
ror edi, 2
or ebx, ecx
shl edx, 0x1d
xchg ebx, edi
shr ecx, 0xb
jmp 0x46d71a
push 0x2337929
xchg edx, edi
not edi
sub edx, 0x6fef6ad
mov edx, ebx
and ebx, 0x6ff7468
jmp 0x46c9bc
push 0x69ace
neg edi
sub ebx, edx
or edi, ebx
or edx, ebx
nop
xor edx, edi
or ebx, 0x70165cb
jmp 0x46bf3f
call esi
mov edx, edi
and edx, ebx
mov ecx, edi
or edi, ecx
mov edx, edi
bswap edx
mov edi, ebx
add ecx, 0x7073141
neg ecx
add ebx, ecx
add edi, ecx
sub ecx, 0x708288d
or edi, ebx
or edx, ecx
or ebx, ecx
jmp 0x46b5ee
pop esi
shl edi, 0x16
or edi, 0x7097a9f
and edi, 0x709baa2
rol edi, 0x1f
xchg edi, edx
mov edx, edi
mov edx, 0x70ac6b6
ror edx, 0x1d
dec edx
ror edx, 0x1e
jmp 0x46b07c
call esi
sub edi, 0x7163d4c
xor ebx, edi
mov edi, 0x716c884
mov ecx, edi
add edi, ecx
rol ebx, 0x14
mov ecx, ebx
add ecx, edx
add ebx, edi
jmp 0x46de63
call esi
add ebx, edx
shl ecx, 7
xor ecx, 0x725b126
or edi, ebx
mov edi, 0x7267f58
and edx, edi
shl edx, 0x13
or ebx, edi
sub edi, edx
and ecx, 0x727cb04
add edx, edi
jmp 0x46d46e
push 0x23b4f41
not ebx
xor edi, edx
jmp 0x46bddc
pop esi
and edi, edx
and edx, 0x73b4967
and edi, edx
shr edi, 0x15
and ecx, edi
inc ecx
and ecx, edi
xor edx, edi
sub edx, ebx
jmp 0x46d02d
push 0x23b0571
mov ebx, ecx
mov edx, ecx
xor ecx, edi
xor edx, ebx
ror ebx, 0xe
mov edi, ecx
ror edx, 0x19
xchg ebx, edx
sub ecx, edx
add ecx, edi
and edx, ecx
mov edx, ebx
add ebx, 0x746056d
ror edx, 0x10
jmp 0x46d808
mov esi, 0x2809144b
inc edi
sub ecx, edx
sub edx, 0x7471b50
add edx, ecx
or ebx, edi
add ebx, edi
nop
dec ebx
or edi, ecx
xor ebx, edi
xor ebx, edx
sub ecx, ebx
and edx, edi
shl ecx, 0xa
xchg ecx, ebx
or ebx, edi
jmp 0x46ba24
mov esi, 0x246e6c30
or ecx, edx
or ebx, ecx
or edx, ebx
neg edx
and ebx, 0x751721c
shl ebx, 0xd
add edi, ebx
and ebx, ecx
mov edi, ebx
jmp 0x46b055
call fcn.0046c8fc
shl edi, 0xa
neg ebx
and ecx, edi
mov edx, 0x75bbe8a
sub edx, ebx
add ecx, ebx
xor edx, edi
add edi, 0x75d32bd
nop
mov edi, ebx
jmp 0x46dd02
call fcn.0046c8fc
mov edx, ecx
add edx, edi
mov edi, ebx
xchg ebx, edi
not ecx
mov edx, 0x768f2bc
not edx
and ebx, 0x7697278
shr ecx, 0x1f
rol ebx, 0x19
mov ecx, ebx
sub ebx, edi
jmp 0x46b5ab
push 0x22db3b3
xor ebx, edi
inc edi
not edi
jmp 0x46b67c
pop esi
xor edi, ecx
or ecx, edi
mov ebx, edi
sub ecx, 0x76e9622
xchg edx, ecx
mov edx, edi
dec ebx
sub ebx, edx
xor ecx, 0x76fcf41
jmp 0x46c76b
mov esi, 0x2809144b
not edx
and ebx, ecx
and edx, ebx
mov edi, edx
or ecx, edi
xor ecx, edx
sub edi, ecx
bswap ebx
mov edx, edi
xor ebx, 0x7766412
add edi, ecx
shl ecx, 8
add ebx, edi
rol ebx, 0x14
jmp 0x46dd53
pop esi
xchg edx, ebx
xor ebx, ecx
shr ebx, 0xd
ror ebx, 0x1f
mov ecx, edx
sub edi, ebx
mov ebx, edx
sub ebx, edi
jmp 0x46cd31
call esi
or edx, 0x787eb8d
ror ebx, 8
add edi, ebx
neg edi
jmp 0x46b188
pop esi
sub edx, ebx
neg edi
xchg edi, ebx
add edx, edi
jmp 0x46df4a
call fcn.0046c8fc
or edx, ebx
sub edi, edx
dec edi
and ecx, edx
and ebx, edi
xchg edi, ecx
and ecx, ebx
and edi, ecx
or ecx, ebx
or edx, ebx
and edi, edx
xor ebx, 0x791de2e
xor ebx, edx
jmp 0x46b8dc
push 0x229fb02
mov edi, 0x798d843
or edx, 0x799194a
xor edx, 0x79956d6
add edx, 0x79999e3
and ecx, ebx
xor edi, edx
jmp 0x46cee4
pop esi
xchg ecx, edi
or edi, ebx
mov edi, ebx
mov edi, 0x79da71a
jmp 0x46cd4d
push 0x2458e82
xchg edi, ecx
and ecx, edx
xor edi, 0x79e7db5
not ebx
mov edi, 0x79efd54
nop
mov ecx, 0x79f7d82
xor edx, 0x79fcd4c
xor ebx, 0x7a00a4e
xchg ebx, edi
dec ebx
mov ecx, ebx
or ecx, ebx
xchg ecx, edi
or ebx, edx
jmp fcn.0046c599
pop esi
sub edx, ebx
bswap edx
sub edi, ebx
bswap edi
sub ebx, ecx
mov ebx, ecx
neg edx
rol ecx, 7
shr edi, 0x1b
xor edx, 0x7a41fd2
mov edi, ecx
mov ecx, ebx
xchg edx, ebx
xchg edi, ebx
jmp 0x46d457
call esi
mov ecx, ebx
inc ecx
or edi, ecx
xchg edx, ecx
not edx
sub ecx, ebx
xor edi, ecx
xchg edx, ebx
jmp 0x46b35b
pop esi
sub edx, ecx
xor ebx, ecx
rol ebx, 0x15
xor edx, edi
and ecx, edi
add ecx, ebx
xor ebx, ecx
xor ecx, edi
xor ebx, ecx
xor edx, ebx
and ecx, ebx
not ebx
jmp 0x46de2b
push 0x2420912
inc ebx
or edi, edx
add ecx, ebx
and edi, ebx
ror ecx, 6
mov ecx, ebx
jmp 0x46d9fd
call fcn.0046c8fc
shr edi, 6
sub edx, ebx
sub edi, edx
or ecx, 0x7b08a7a
rol ecx, 0xb
mov edi, 0x7b11a41
add edi, ecx
and edi, ebx
xchg edx, edi
or ecx, 0x7b210bc
xor ecx, 0x7b2503e
jmp 0x46d495
pop esi
or ebx, ecx
xchg edi, edx
dec edx
rol edx, 8
ror ebx, 1
xor edi, ebx
shr edi, 0x14
xchg ebx, edx
add edx, 0x7b4b0e6
xor edi, ebx
rol edx, 0xd
or edi, 0x7b56e66
or edx, ebx
jmp 0x46d676
pop esi
mov ecx, edx
mov edi, ebx
shl ebx, 0x18
rol ecx, 0x11
bswap ebx
jmp 0x46d8ed
call fcn.0046c8fc
and ebx, edx
mov ecx, 0x7b7bac4
mov ecx, edx
or edi, 0x7b83fca
dec ebx
mov edx, 0x7b8c0da
jmp 0x46d7cc
pop esi
mov edx, 0x7bb06b4
or ebx, ecx
mov ecx, ebx
xchg ecx, edx
add ecx, edx
add edx, ebx
xchg edx, ecx
add ebx, ecx
and edx, edi
xchg ecx, edi
xchg ebx, ecx
jmp 0x46c11c