Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff0d
jne 0x401070
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
ret
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, 0xffffff29
jne 0x4010f4
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff25
jne 0x40118c
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
ret
call sub.kernel32.dll_GetUserDefaultLangID
cmp eax, 0xffffff19
jne 0x401210
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.shell32.dll_SHReplaceFromPropSheetExtArray
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
call sub.ntdll.dll_ZwCreatePort
ret
jmp 0x4696a7
not edx
jmp 0x46aca6
pop esi
add edi, ecx
inc edx
xor edi, edx
neg edx
mov edi, 0x677e67ba
and ebx, edi
and ecx, 0x677ede3a
not ecx
xchg edi, ebx
jmp 0x46bbe4
push 0x66ae9d1a
ror ebx, 9
add edi, 0x677fd421
add edx, edi
mov edx, edi
sub edx, 0x6780836c
mov ebx, 0x6780bab5
or ebx, edx
shr ecx, 0x14
shl ebx, 9
jmp 0x46a395
call esi
neg edx
bswap edi
add ebx, edi
and edx, 0x678bc5bc
and edi, edx
shr edx, 0xe
add ecx, ebx
or ecx, 0x678cad23
sub ebx, 0x678ce42d
add edx, edi
jmp 0x46bafa
pop esi
add edi, edx
and edx, 0x678fefd0
sub ebx, edi
and edi, ecx
add ebx, edi
or ecx, edi
dec edx
sub ebx, 0x67914202
sub ecx, edi
xor ecx, edx
and ebx, edi
jmp 0x46af2f
mov esi, 0x73716341
xor edx, ebx
add ecx, edi
rol ebx, 0xe
xchg edx, ecx
xchg ebx, ecx
shr edi, 0x10
or ecx, edx
or ecx, 0x6794f6e2
mov ebx, edi
jmp 0x46abf0
pop esi
or ebx, 0x67957b30
xchg ecx, ebx
xchg ecx, ebx
jmp 0x46bda9
pop esi
xchg ebx, edi
and ebx, ecx
and edi, 0x67a28a66
dec edi
mov ebx, edx
mov ecx, edi
mov ecx, ebx
dec ebx
ror ecx, 0x13
and ebx, ecx
sub edi, edx
xor edx, ebx
jmp 0x46ce33
pop esi
add ecx, edx
add edx, ecx
neg ebx
xor edx, ecx
or edi, ecx
neg edx
dec ebx
mov ecx, edi
neg edx
and ebx, edi
add edi, edx
inc ebx
shr edx, 0x1e
jmp 0x46adb7
mov esi, 0x73716341
and edi, ecx
and edx, ecx
sub edx, edi
bswap ecx
mov ebx, edx
mov edx, edi
bswap ebx
inc ecx
neg ecx
or edx, ecx
jmp 0x46bb27
push 0x401400
add edx, 0x67d28ff2
xor edi, ebx
shr edi, 0x1a
ror ebx, 0x19
and ebx, 0x67d37b09
jmp 0x46a11a
mov esi, 0x4132136a
dec ebx
neg ebx
and ecx, edx
xor ecx, edx
sub ebx, ecx
xchg ebx, edi
inc edi
shr edx, 7
xor edi, ecx
nop
jmp 0x46a975
pop esi
mov ebx, edi
or ebx, edx
shr ebx, 0x1b
sub ecx, 0x67ef0d3d
add edx, 0x67ef440c
xor ebx, edi
xchg edx, ebx
and ecx, 0x67eff9a5
and edx, edi
xor edx, ecx
jmp 0x46c774
pop esi
add edi, ebx
and ebx, 0x67f217c2
xor edx, ecx
xor ebx, edx
add ecx, 0x67f2bc34
mov ebx, edx
nop
sub edx, ebx
not edx
or ecx, 0x67f3e129
add ecx, edx
add edi, edx
and edi, ebx
not edx
sub ecx, ebx
add ebx, ecx
jmp 0x46b571
push 0x66c3454b
sub ebx, edx
xor edi, 0x67f5ae09
sub edi, edx
rol edx, 0x13
dec ecx
add edi, ecx
sub ebx, 0x67f6d306
mov ebx, ecx
jmp 0x46a023
push 0x66b1ec20
mov edi, ebx
and edx, 0x67fc6e8d
add edx, ebx
or ecx, 0x67fce61d
sub edx, ebx
mov edx, edi
bswap edi
ror edi, 0x1f
neg ebx
xchg edx, ecx
jmp 0x46c290
push 0x66c3cabd
inc ebx
bswap edi
mov ebx, edx
shl edx, 7
sub ecx, ebx
or ecx, edi
xor ecx, 0x67ffd9c7
or ecx, 0x68001009
add ebx, ecx
sub edx, 0x6800885c
xor edx, 0x6800c2af
bswap ebx
mov ebx, edi
jmp 0x46aff1
push 0x66b4bf1e
mov edi, ecx
sub edx, ecx
bswap edx
dec edi
inc ecx
or ebx, edx
or edi, 0x681078ea
mov ebx, edi
shr ebx, 0x1c
xor ebx, ecx
sub edx, ecx
or ecx, ebx
and ecx, 0x6811cfd2
xchg ebx, edx
xor edx, ebx
and edi, ecx
jmp 0x46aaed
push 0x66c389a2
and edx, ebx
xchg ebx, ecx
nop
xor ecx, edi
mov edi, edx
xor ebx, 0x68168d36
not ecx
xchg ecx, edx
add edx, edi
xor ebx, ecx
jmp 0x469eb7
call esi
add edi, ebx
shl edx, 0x1c
and edx, ecx
jmp 0x469df8
push 0x66ab9164
add edx, ecx
xor ebx, edx
xor edx, edi
sub ebx, edi
sub ebx, ecx
mov edi, ecx
jmp 0x46b409
mov esi, 0x183c2e20
neg edi
bswap edi
xchg edx, edi
sub edi, ebx
add edi, ecx
sub edx, ebx
ror ecx, 0x1c
mov ebx, edx
mov ebx, edi
xor edx, edi
add ecx, edi
jmp 0x46a34e
call esi
or ecx, 0x6824dd98
ror ecx, 0x13
xor ecx, 0x68254f26
sub edi, 0x682593be
shr ebx, 0xb
inc edx
and ebx, edx
xchg edx, ebx
xor ebx, edx
add ebx, 0x6826e390
add ecx, edx
jmp 0x469937
call esi
neg edi
and ecx, 0x68321680
and edx, ecx
xor edx, ebx
shr ebx, 0xc
xor edi, 0x6832f71d
or ecx, 0x683331b8
and ecx, ebx
jmp 0x46cd42
pop esi
xchg edx, ebx
xor edi, edx
shl ebx, 0x1d
sub ebx, edx
xchg edi, ecx
xor ebx, 0x683809d1
shr edx, 4
not edi
add edx, 0x6838bf95
not edi
or edi, ecx
jmp 0x46c9b7
mov esi, 0x183c2e20
inc edx
and ebx, ecx
or edx, edi
dec edx
or ebx, ecx
dec edi
jmp 0x46bde0
pop esi
sub ecx, ebx
xchg edi, ebx
sub edx, edi
neg edx
add edx, ebx
mov ecx, ebx
sub edx, 0x684595ec
rol edx, 0x14
mov ebx, edx
jmp 0x46cdb6
mov esi, 0x73716341
neg edx
or ebx, edx
mov edx, edi
rol edx, 0x13
sub edi, ecx
xchg ebx, edx
and edx, ecx
xchg ebx, edi
mov edi, edx
xor ebx, 0x684949f0
jmp 0x46b6bf
call fcn.0046c308
ror edi, 0xe
sub edi, 0x684acb4c
xchg edi, ebx
xor edi, ebx
jmp 0x46ab2e
push 0x66b12881
sub edi, edx
add ecx, edx
mov edx, edi
add ecx, ebx
or ecx, edi
mov edx, ebx
inc edi
jmp 0x46b63b
push 0x66aedc78
sub ebx, 0x684ec462
ror edi, 0x13
shl ebx, 0x17
ror edx, 2
xor edi, 0x684faae2
inc edx
mov edi, 0x685029af
mov ebx, 0x685061e5
neg edi
sub edi, edx
rol ebx, 0xd
sub ebx, 0x68514263
and edi, 0x68517d53
and ecx, ebx
jmp 0x46c7ec
call fcn.0046c308
rol edi, 0x12
not edx
sub ebx, 0x6856e637
neg ebx
jmp 0x46b943
pop esi
mov ecx, 0x686196f4
xor ebx, edx
or ecx, edi
xor ebx, edx
ror edi, 0x1f
or edx, ecx
xor edi, 0x6862ee0b
inc ecx
sub ecx, 0x68636314
jmp 0x46a7d1
call esi
xchg ebx, ecx
shr ecx, 4
shr edx, 0x14
sub edx, edi
sub edx, 0x6866b770
neg edi
xor ebx, ecx
neg edx
jmp 0x46bf1c
pop esi
sub edx, edi
xor edi, ebx
dec ecx
jmp 0x46b479
push 0x682a7
mov edi, ecx
sub ecx, ebx
xor ebx, edx
xchg edx, edi
add edx, ebx
sub edi, ecx
xor ebx, edx
bswap edx
sub edx, ebx
xchg edi, ebx
not edi
and edx, edi
sub edx, ebx
jmp 0x469c02
push esp
xor edx, ecx
xchg ebx, edi
neg ebx
and ecx, edx
xchg edx, ecx
shr ebx, 0x16
or edi, ebx
not ecx
or edi, ebx
sub ebx, edx
jmp 0x46cd98
push 0x66a80404
sub edx, 0x688ca534
xchg edx, ebx
mov edi, 0x688d1fc6
sub edi, edx
not ecx
xor edi, edx
add edx, ecx
or ebx, ecx
sub edx, 0x688e6a7d
jmp 0x469bb4
push 0x66bbf8c7
neg edi
mov edx, ecx
xor edx, 0x689093a7
mov ecx, edi
ror edx, 0xc
or edi, ebx
mov edx, 0x68917114
sub edi, 0x6891b5e1
rol ebx, 0x1b
dec ecx
xor edx, ebx
xchg edx, ebx
jmp 0x46b883
push 0x66ab0f41
bswap edx
rol ebx, 4
mov edi, 0x6893579c
or ecx, edx
dec ebx
or edi, ebx
xor ecx, edx
or edi, ebx
or edx, edi
xor ebx, edi
dec ecx
xor edi, ebx
jmp 0x46c86c
push 0x66a948a9
sub edx, edi
sub edi, 0x689b1501
add ecx, 0x689b4cf5
add ecx, edx
add edx, edi
mov ebx, edi
add ebx, edi
or ecx, edx
jmp 0x46b91a
push 0x66be0cbd
or ecx, 0x689f3e96
ror ecx, 0x12
bswap ebx
sub edi, ebx
shr ebx, 0x14
or ebx, ecx
or edi, ebx
and edi, edx
mov edi, edx
mov ecx, edi
jmp 0x46bf41
call fcn.0046c308
xchg ebx, edx
mov edi, 0x68c7680c
inc edx
rol ebx, 0xa
mov ecx, edx
inc edi
neg ebx
add edi, edx
jmp 0x46a631
call fcn.0046c308
xor ebx, ecx
xor ebx, 0x68cc2a86
rol ecx, 0x1c
mov edx, ebx
or ecx, edx
neg edx
sub ebx, 0x68cd8db3
jmp 0x46a1dd
call esi
ror edi, 0x1b
not ecx
not ebx
sub edi, edx
shr edi, 0x15
sub ecx, edx
neg edx
sub ebx, edx
and edx, ecx
sub edx, edi
or ebx, edx
jmp 0x46b4aa
pop esi
and edx, ebx
add edi, ecx
xchg edi, ecx
xor ecx, edi
xor ecx, edx
ror edi, 0x16
mov ecx, ebx
ror edi, 0x1f
mov ecx, edi
jmp 0x46be44
push 0x66b50124
add ebx, edi
mov ebx, 0x68e33c65
sub edi, ebx
add ecx, edx
xor edi, edx
shl ecx, 6
add edi, ebx
xor edx, 0x68e4d1b1
mov ecx, ebx
and edi, ebx
jmp 0x46c937
call esi
xor edx, ecx
xor edi, ebx
jmp 0x469824
call fcn.0046c308
add ecx, ebx
not ecx
xor edx, ebx
xor ecx, edx
add ebx, edx
or ecx, ebx
or edx, ebx
shr edi, 5
jmp 0x46aa18
call fcn.0046c308
add edi, ebx
xor edx, ecx
shl ecx, 0x16
xchg edx, edi
sub ebx, 0x68f61605
inc ecx
bswap edx
neg edx
jmp 0x4697d8
call esi
xor ebx, 0x68f7e112
xchg ecx, ebx
and edx, ecx
jmp 0x46c858
call fcn.0046c308
or edi, edx
bswap ecx
not ebx
xchg ecx, edx
bswap edx
mov edx, ebx
add ebx, edi
ror ecx, 0x19
neg ecx
sub ebx, ecx
xor edx, ecx
jmp 0x46c987
mov esi, 0x183c2e20
inc ecx
not edi
or ebx, edi
xchg ebx, edi
mov ebx, edi
neg ebx
and edx, edi
add edx, ecx
or ecx, ebx
jmp 0x46bb0f
push 0x66a57a2a
bswap edx
and ebx, 0x6904573d
shr edi, 0x1d
sub edi, edx
sub ebx, edx
add ecx, edx
sub edx, edi
xchg edx, edi
jmp 0x46a318
mov esi, 0x183c2e20
inc edi
dec edi
mov ebx, edx
add edi, ebx
xor edi, 0x6915f5e6
jmp 0x46b321
pop esi
add edi, 0x6916400b
and ebx, edx
or ecx, 0x6916b1bb
neg edx
mov edx, ecx
ror ecx, 0x16
jmp 0x46ba56
pop esi
mov edx, 0x691cf05a
and ebx, 0x691d2a9e
mov edx, ebx
not ebx
xchg ecx, edx
xor edi, 0x691e141f
xor edx, ecx
add ebx, ecx
inc edx
jmp 0x46c80c
mov esi, 0x73716341
mov edx, 0x6922fc0d
inc ecx
mov edx, 0x69237bfd
add edi, 0x6923b29b
sub ebx, edi
mov edi, ebx
jmp 0x46c194
pop esi
add edi, 0x692c8a40
inc edx
and ecx, edx
and ecx, 0x692d32db
add ecx, 0x692d6dd1
xchg ecx, edx
xor edx, ecx
not edi
add ecx, ebx
dec edx
jmp 0x46b2ae
push 0x66c06496
and edi, ebx
sub edx, edi
xchg ebx, edi
shl edi, 0x15
xor ecx, edx
mov ecx, edi
mov edi, ebx
neg ebx
dec edi
add ebx, edx
inc ecx
jmp 0x46b029
push 0x66c40f93
xor ebx, edi
mov edx, ebx
or ebx, ecx
or ebx, edx
add edi, edx
sub edi, edx
jmp 0x46b1dc
push 0x66c0a64b
or ebx, edx
or edx, 0x693bb310
and ebx, edx
dec ebx
rol ecx, 0x1f
shr ecx, 3
mov ecx, edi
or ebx, 0x693d0cfb
jmp 0x46baa5
pop esi
mov ecx, ebx
add edx, edi
inc ecx
mov ebx, edi
not edi
xchg edi, ecx
sub ecx, 0x69517caf
ror ebx, 0xf
mov edi, ebx
or edi, edx
and ecx, 0x69525b13
jmp 0x46a22b
mov esi, 0x73716341
add edx, 0x6957bafd
xchg ebx, ecx
neg ebx
mov edx, 0x69586471
add ecx, ebx
inc ecx
shl ebx, 0x1a
jmp 0x46a421
pop esi
sub edx, edi
xor edi, 0x6965c85a
not edi
and edx, edi
xchg ecx, ebx
xor ecx, 0x6966b56e
not edx
xchg ebx, ecx
or ecx, ebx
and ecx, edi
xor edx, edi
dec ebx
xchg ebx, ecx
jmp 0x46b5bb
call fcn.0046c308
add edi, ebx
xor edi, edx
or edi, ecx
xchg ebx, edx
sub edi, ebx
shr edi, 5
sub ebx, edx
and edx, ebx
ror edi, 0xc
sub ebx, 0x696fdd0a
xor edx, ebx
and edx, edi
bswap edi
nop
jmp 0x46a51b
push 0x66abd03a
or ebx, edx
and edi, 0x697aaacf
or edx, edi
not ebx
sub edx, ecx
sub edi, 0x697b952d
inc ecx
inc edx
xor ecx, 0x697c4034
shl ebx, 0x1c
jmp 0x46c953
pop esi
mov edx, edi
and edi, ebx
or ebx, edi
xor edi, ebx
mov edx, edi
xor edi, 0x697fc5c5
add edx, ecx
mov ebx, ecx
jmp 0x46aa75
pop esi
xor edi, ecx
neg ecx
bswap edx
and edi, edx
dec ebx
shr ebx, 1
and ecx, edx
jmp 0x469d8b
pop esi
neg edx
add ebx, ecx
or edx, 0x6985de82
or ecx, 0x698619cf
mov edx, edi
xchg ecx, ebx
inc edi
add ecx, 0x698700b5
sub edx, ebx
neg edi
add edx, ebx
mov edi, ebx
sub ebx, edi
jmp 0x46c738
pop esi
sub ebx, edx
sub ecx, edx
add ebx, edi
and edi, edx
add ebx, ecx
or ecx, edx
xor edi, 0x6993fa5f
jmp 0x46bdb7
pop esi
or edi, ecx
add edx, ebx
or ecx, edx
sub edx, edi
add edi, ecx
xchg ebx, edx
mov edi, ebx
dec edi
xor edx, edi
or ebx, edx
add edi, edx
jmp 0x46a365
push 0x66b16b28
sub edi, ebx
neg edx
or ebx, edx
xor edx, ebx
not ebx
rol edx, 5
mov edi, ecx
xchg edi, ecx
xor ebx, edi
jmp 0x46c7bd
pop esi
add ebx, edx
mov ecx, 0x69a5c277
sub edi, ebx
mov edi, ecx
or edx, ebx
xor ecx, ebx
mov edx, ecx
inc ebx
or ebx, ecx
or edi, edx
mov edx, ebx
jmp 0x46bc00
call fcn.0046c308
bswap edx
neg ecx
and edi, ebx
sub ebx, edx
ror ecx, 1
bswap ecx
sub ecx, edx
xor edi, ecx
neg edi
jmp 0x46c701
mov esi, 0x183c2e20
mov ebx, ecx
xor ecx, 0x69ade989
or ecx, 0x69ae20d1
neg ebx
mov edi, 0x69ae9531
add edi, edx
neg ebx
sub ecx, ebx
add edx, ecx
mov ecx, edi
add edx, ebx
or edi, edx
jmp 0x46a9ae
call fcn.0046c308
mov ebx, edi
add edi, ebx
mov ebx, 0x69b0d44c
or edi, ecx
xor edi, edx
or edx, edi
inc edi
add ebx, 0x69b1f75e
not edi
xchg ecx, edi
and ebx, edx
mov edx, ebx
jmp 0x46c454
pop esi
and edi, edx
sub ebx, edx
or edx, 0x69b97dc8
bswap ebx
and edx, ebx
add edx, ebx
add edx, ebx
mov ebx, edi
neg ebx
xor edi, ecx
dec ebx
mov ebx, edx
jmp 0x4696ef
push 0x66bc3a1e
bswap edx
shl ebx, 4
xchg edx, edi
dec edx
xchg ecx, ebx
and ecx, edx
xor edx, ecx
neg ebx
mov ecx, edi
shr edx, 0x15
jmp 0x46a251
push 0x66a9887c
sub ebx, edi
xchg edx, ebx
xor edx, 0x69cf1da7
xor edi, 0x69cf5405
inc ebx
and ebx, edi
sub edi, edx
sub edi, ebx
mov ecx, 0x69d0741e
dec ecx
bswap edi
jmp 0x46985e
call esi
sub ecx, edi
and edx, 0x69d172ad
xor ecx, 0x69d1ad85
mov edi, 0x69d1eeab
sub edx, 0x69d229ab
sub edi, ecx
and edx, 0x69d29990
jmp fcn.0046caf3
mov esi, 0x73716341
bswap ebx
sub edx, edi
xchg ecx, edx
add edi, 0x69d3907d
add edx, ebx
add edx, edi
add ecx, edi
neg edi
mov edi, ebx
sub ebx, edi
bswap ebx
and ebx, ecx
jmp 0x46ab39
pop esi
and ecx, edi
and ebx, edi
add edi, edx
add edx, 0x69e2bb76
shl ecx, 9
add edi, ecx
xor edx, edi
and ebx, ecx
shr ecx, 2
jmp 0x46b168
push 0x66c0eb1a
sub edx, ebx
shr ecx, 0x11
and ecx, ebx
jmp 0x46ac60
pop esi
xchg ecx, edi
not ecx
sub ecx, edx
or ebx, 0x69edb3c7
shr edi, 0x1b
jmp 0x46a4d7
call fcn.0046c308
add edx, 0x69ee3cb3
or ebx, edx
mov ecx, edx
add edx, edi
xor edi, ecx
jmp 0x46c554
call fcn.0046c308
rol edi, 2
mov ebx, edi
dec edx
jmp 0x46ac0e
push 0x40
mov ebx, 0x69f50072
add ebx, edx
xor edx, edi
ror edx, 0xd
xor edi, ecx
shr edi, 0xc
add edx, ecx
add edi, ecx
jmp 0x46a5ec
pop esi
add ebx, 0x69fe0cad
add ebx, edi
and edx, ebx
add edx, edi
and edx, ebx
mov edx, ebx
xor edx, 0x69ff4e5c
jmp 0x46b44c
pop esi
mov edi, ecx
xchg ecx, edx
add ebx, 0x6a0007a2
or ecx, 0x6a003c42
xor ecx, edi
xor edi, edx
xor edx, 0x6a00e032
xchg edi, edx
xchg edx, ecx
xor ecx, edi
or ebx, 0x6a0218df
shr ebx, 0x1e
add edx, edi
or edx, ecx
ror ecx, 0x19
jmp 0x46a7a3
pop esi
xchg ecx, edx
and ecx, ebx
sub edx, ecx
inc edi
and edi, 0x6a152430
add ebx, edi
sub ecx, ebx
and edx, edi
or ecx, edx
jmp 0x46c792
pop esi
rol edx, 4
and edi, ecx
rol ebx, 0x16
jmp 0x46a2ed
push 0x66bdcb37
sub edx, 0x6a1d35ba
ror edx, 0x19
mov edx, edi
xor edx, 0x6a1dd6d4
and edi, edx
shl edx, 9
sub ebx, 0x6a1e8234
ror ecx, 6
jmp 0x46a88d
call fcn.0046c308
xor ecx, edx
add ebx, edi
rol ecx, 2
xor edi, edx
not edx
jmp 0x46a07a
push 0x66b47cbe
mov ecx, 0x6a240916
xor ebx, 0x6a244b2a
xchg edx, ebx
mov ebx, 0x6a24b77c
or ecx, 0x6a24ef2c
or edi, edx
jmp 0x469fc9
pop esi
xchg edx, ecx
xchg ebx, ecx
dec ebx
jmp 0x46a75b
push 0x66be4e11
mov edx, 0x6a331bfa
xor ecx, 0x6a335051
xor edi, edx
mov ebx, 0x6a33bf22
mov ecx, edx
and ecx, 0x6a34288e
and edx, edi
add ebx, ecx
xor edx, ebx
jmp 0x46b96b
call fcn.0046c308
add edx, ebx
add ebx, edx
add edx, 0x6a55b0bd
xor edi, ebx
not edi
rol ecx, 0x1a
and edi, 0x6a568f37
add edi, edx
sub edx, 0x6a5705c9
or ebx, 0x6a573a0c
or ebx, edx
jmp 0x46c895
push 0x66b22f59
shr edx, 0x18
inc edi
xchg ebx, edi
ror ebx, 4
rol edx, 3
dec edx
rol edx, 0xa
ror ecx, 0x1b
nop
sub edi, 0x6a653871
xor edx, ebx
xchg edi, ebx
jmp 0x46c644
call esi
neg edi
and edi, ebx
xor edx, edi
shl edi, 0x18
add ecx, edi
bswap ebx
or ebx, edi
shl ecx, 2
xor edi, edx
or ecx, 0x6a814842
mov ebx, edi
mov edi, 0x6a81b5a2
jmp 0x46b691
call esi
add ebx, ecx
mov ecx, edx
dec edx
sub edx, ebx
mov edi, ebx
mov edi, 0x6a918cdd
sub edi, edx
and edi, ebx
add edi, edx
sub ebx, 0x6a926a1b
not ecx
sub ebx, 0x6a92daa8
jmp 0x469880
push 0x66ba6acf
mov edx, ebx
add edx, ecx
or edi, 0x6a9c4be1
and ebx, 0x6a9c80fd
or ebx, edi
dec ebx
or edx, ecx
mov ecx, 0x6a9d592a
jmp 0x46ca4f
mov esi, 0x73716341
bswap edx
or edx, ecx
rol edx, 2
xchg edi, ecx
and ecx, 0x6aa05a72
nop
add ebx, edx
or ecx, edx
xchg ecx, edi
add edi, 0x6aa1724d
add ebx, 0x6aa1ab12
mov ecx, 0x6aa1e0ff
jmp 0x46ac3f
call esi
or ebx, ecx
shl ecx, 0x19
rol edi, 0x1a
and edi, edx
rol edi, 0x17
bswap edi
jmp 0x469dbb
pop esi
mov ebx, 0x6aafb99e
sub ecx, edx
inc edx
xchg ecx, edx
xchg edi, ecx
xchg ecx, ebx
ror edx, 5
or ebx, edi
mov ecx, edx
add edi, 0x6ab1a7f2
xor ebx, edi
bswap ecx
not ebx
jmp 0x46bd2b
push 0x66a6c31a
xor edi, ecx
sub ebx, 0x6ab3a148
and edx, 0x6ab3d9a8
sub edx, ebx
xor ebx, edi
neg ebx
jmp 0x46ada1
push 0x66c023fe
xor edx, edi
bswap edx
or ecx, edi
sub edx, edi
ror edx, 2
add edi, edx
or edi, 0x6ab60bc1
or edx, 0x6ab64385
and ecx, edi
mov edi, ebx
sub edi, edx
not ecx
jmp 0x46af7c
push 0x66b1aa5d
and edx, 0x6ab76db9
add edx, edi
inc edi
add ebx, edx
add edi, edx
xor ebx, 0x6ab8775d
add ebx, 0x6ab8afc0
dec edi
sub edx, ebx
dec ecx
sub edi, ebx
xchg ecx, ebx
neg ecx
xchg ecx, ebx
jmp 0x469e90
push 0x66af1ebd
or ebx, ecx
xchg edx, ebx
not ebx
jmp 0x46a0bb
pop esi
and edi, 0x6abc0cd6
neg ebx
xchg edx, ecx
add edx, 0x6abcb3c1
add ecx, edi
xor edx, ebx
mov ebx, ecx
or ecx, edi
or ecx, 0x6abdc244
rol ebx, 0xe
or ebx, ecx
inc edi
jmp 0x46a5c5
pop esi
xor edi, ebx
rol edi, 0x1c
add edi, ecx
shl ecx, 0x11
xchg edx, edi
xchg edx, ebx
jmp 0x46a849
push 0x66ab4e75
and ecx, ebx
xchg edx, ecx
xchg ecx, edx
ror edx, 5
or ebx, 0x6ac36acd
mov edi, ebx
or edx, ebx
ror edi, 6
mov ebx, 0x6ac44171
mov ecx, edx
xchg ecx, edi
jmp 0x46a088
call esi
rol edx, 5
or ebx, edx
rol ebx, 4
shl ecx, 0x14
xor ecx, edx
or edi, ebx
xor edi, ecx
jmp 0x469a3b
push 0x66b585ba
sub edx, 0x6acc4a1e
add edi, edx
and ecx, ebx
sub edx, 0x6accebe0
sub edx, 0x6acd2389
mov edi, ebx
or ecx, ebx
sub ecx, 0x6acdca14
mov ebx, edi
shl edi, 0x1e
sub edx, edi
xor ebx, 0x6acea004
mov ebx, edi
nop
jmp 0x46b70b
push 0x66b543ea
and edi, 0x6acf58fa
dec edi
rol edi, 0x1d
xor ebx, edx
and ecx, 0x6ad03f6b
jmp 0x46c8fd
push 0x66ac13d5
add ecx, ebx
xchg ecx, ebx
mov ebx, 0x6ad0f0b1
mov ebx, edi
ror edi, 0x13
xchg ebx, edi
or edi, ebx
jmp 0x46ae94
call esi
and edi, edx
mov ebx, edx
and ebx, edi
mov ebx, 0x6ad530be
add edx, ecx
mov edi, edx
add ebx, ecx
add edi, ebx
xchg edi, edx
jmp 0x46b7c0
push 0x66ae5a32
and ebx, 0x6ad811be
xchg edi, ecx
add edi, 0x6ad87d56
add edi, 0x6ad8b5e0
mov ebx, ecx
add ecx, 0x6ad91f74
or ebx, edi
sub ecx, ebx
and ecx, 0x6ad9cbf6
sub edx, 0x6ada0018
add edx, edi
sub ebx, ecx
not ecx
add ecx, edx
xchg ecx, edx
or ecx, ebx
jmp 0x46970d
mov esi, 0x183c2e20
sub ecx, 0x6ae1c2e6
mov ecx, 0x6ae1fb95
xchg edi, edx
add edi, ebx
ror edi, 0x1f
add edi, 0x6ae2d387
not edx
add ecx, 0x6ae34ab1
sub ebx, edi
and ebx, edx
xor edi, 0x6ae42aee
shr ebx, 5
or ecx, 0x6ae4c279
jmp 0x46b738
push 0x66c30048
mov ecx, 0x6b06366e
xchg ecx, ebx
sub edx, 0x6b06a570
add ecx, edi
mov ecx, edi
xor edi, edx
add ecx, ebx
xor edx, ebx
jmp 0x469e29
pop esi
add edi, 0x6b19acc6
mov ecx, ebx
xor edx, edi
jmp 0x46ae25
push esp
and edx, edi
inc edi
add ebx, edi
sub edx, edi
add ebx, ecx
and edx, 0x6b231f4d
sub ecx, edx
xor ecx, 0x6b238db1
inc ebx
jmp 0x46bb87
pop esi
mov edx, edi
mov edx, ecx
add edx, edi
dec ebx
mov edi, ecx
or ecx, edi
jmp 0x46cc47
push 0x66ba2817
shl edx, 0xa
not ecx
or edx, ecx
xor ecx, 0x6b3ab568
or ecx, edx
dec edi
or edx, ebx
xchg edi, edx
or ebx, edi
sub ebx, 0x6b3c0093
mov ebx, edx
add edi, ebx
mov ebx, ecx
add ecx, 0x6b3cd34b
and ecx, edx
jmp 0x46c605