Function at 0x401000
Capabilities:
Accept command line arguments
Encrypt data using chaskey

Disassembly:
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xfffffef7
jne 0x401075
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.shell32.dll_ExtractIconExA
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xfffffeee
jne 0x4010ea
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_RtlUnicodeToCustomCPN
ret
call sub.kernel32.dll_GetCommandLineW
cmp eax, 0xfffffefb
jne 0x40117d
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.shell32.dll_SheChangeDirExW
ret
call sub.kernel32.dll_GetVersion
cmp eax, 0xfffffefe
jne 0x40121f
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_ExtractIconExA
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.ntdll.dll_NtQuerySymbolicLinkObject
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_SheChangeDirExW
call sub.ntdll.dll_RtlUnicodeToCustomCPN
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_SheChangeDirExW
call sub.shell32.dll_ExtractIconExA
call sub.shell32.dll_SheChangeDirExW
ret
jmp 0x47538e
add edi, ecx
and ecx, 0xcda30982
ror ecx, 9
and ecx, 0xcda3d8dd
add esi, 0xcda441c6
or esi, edx
add ecx, edi
jmp 0x476f80
mov edx, 0x2774562b
sub esi, ecx
xchg esi, ecx
xchg ebx, ecx
sub ecx, edi
xor esi, ebx
xchg ebx, ecx
not ebx
and ebx, edi
add edi, ebx
jmp 0x475d2a
pop edx
add ebx, ecx
or edi, 0xd3a11fef
bswap edi
rol ebx, 4
xor edi, ebx
or ebx, 0xd3a29ec5
sub esi, edi
xor ecx, esi
or ebx, 0xd3a3d370
or esi, ebx
sub esi, edi
xor ecx, edi
jmp 0x476382
mov edx, 0x2774562b
rol ebx, 0x16
or esi, ebx
bswap ebx
mov esi, 0xd3aac5e0
xor esi, edi
jmp 0x477599
push 0xcde221ab
mov edi, ecx
neg edi
add ebx, ecx
and ebx, edi
not edi
and ecx, esi
sub ecx, esi
add edi, 0xd3cc034f
sub ebx, edi
jmp 0x476ee4
call fcn.00477704
sub esi, ebx
add esi, ebx
mov ecx, 0xd3e56c1a
mov edi, 0xd3e5ccca
add ebx, ecx
or ebx, esi
and esi, edi
nop
mov ebx, esi
jmp 0x4770f8
call fcn.00477704
xor edi, 0xd3ecf5a8
neg ecx
xchg edi, ecx
xor ecx, edi
add ebx, edi
or ebx, 0xd3ef11cb
add edi, ecx
dec edi
sub ebx, ecx
not edi
mov edi, ebx
jmp 0x475e21
pop edx
bswap edi
mov esi, ecx
mov ebx, esi
xor ebx, 0xd3fad597
add ebx, esi
dec ebx
or ebx, edi
xor edi, ecx
xor esi, 0xd3fce872
mov ecx, esi
jmp 0x475b41
call edx
or esi, edi
or ecx, ebx
not esi
and esi, ebx
sub esi, 0xd4136fdf
sub edi, esi
xchg edi, esi
jmp 0x476156
push 0xcdd9e64b
rol esi, 1
sub ebx, ecx
or ebx, edi
dec ecx
xor ebx, edi
bswap edi
xchg esi, ecx
add edi, ebx
shr ecx, 0x1d
and ebx, edi
add ebx, 0xd41d3650
dec edi
or esi, 0xd41dfdcb
jmp 0x4774d4
push 0xcde1cc6c
and ebx, esi
bswap esi
xor edi, 0xd41f4f35
and esi, ecx
add edi, ebx
and ecx, 0xd4207169
and ecx, ebx
add ebx, 0xd4214946
mov edi, ebx
jmp 0x4755ff
call fcn.00477704
or edi, 0xd42cf9c0
and ecx, ebx
sub ebx, 0xd42dd194
sub ecx, edi
jmp 0x476ff6
pop edx
or ebx, edi
mov ecx, esi
mov ecx, ebx
neg esi
sub ebx, ecx
or edi, 0xd4479115
add esi, edi
jmp 0x4776cc
pop edx
ror ecx, 0x1c
or ecx, ebx
shr ecx, 0xf
xor esi, edi
and edi, ecx
rol ecx, 0x19
xchg edi, ebx
mov esi, ebx
mov esi, 0xd4641404
xchg ebx, edi
jmp 0x476b71
pop edx
mov edi, ebx
dec ebx
add ecx, ebx
xor edi, ebx
jmp 0x475ca0
push 0xcdcc6201
neg edi
add ebx, esi
add edi, ecx
neg esi
bswap esi
and ebx, esi
xchg edi, ecx
jmp 0x476fe4
call edx
sub edi, 0xd48c3196
mov ecx, esi
shr ecx, 3
or esi, edi
mov esi, edi
neg ebx
and esi, ebx
sub ebx, ecx
ror ecx, 3
xor ebx, 0xd48fa7d6
dec edi
add edi, ecx
or ebx, ecx
neg ebx
jmp 0x475c22
pop edx
mov ecx, 0xd49839ce
or ecx, ebx
or esi, 0xd4991fff
and ecx, esi
jmp 0x477015
pop edx
dec edi
sub esi, ecx
and edi, ebx
jmp 0x4759ec
pop edx
and esi, ebx
neg edi
and esi, ebx
shr ebx, 0x1e
and ebx, edi
xchg edi, esi
xor ebx, edi
ror ecx, 0x12
bswap ecx
or ebx, 0xd4d7b72c
sub ecx, ebx
jmp 0x475ece
push 0xcdc81046
xchg esi, edi
add esi, ecx
sub ecx, ebx
add ebx, 0xd4eddb02
mov ecx, ebx
mov ecx, ebx
mov ebx, esi
xchg esi, ecx
mov ecx, edi
or edi, 0xd4f0c8c4
and ecx, esi
and ebx, esi
sub edi, ebx
jmp 0x47622d
pop edx
xchg edi, esi
and edi, esi
mov edi, esi
xchg ecx, edi
neg ebx
sub ecx, ebx
add ecx, edi
neg esi
or esi, ecx
or edi, esi
sub esi, ecx
or edi, ecx
neg ecx
ror esi, 6
jmp 0x476250
call fcn.00477704
xchg ecx, ebx
mov ecx, ebx
xor esi, ecx
sub edi, ebx
and esi, edi
rol ecx, 0xa
jmp 0x477273
push 0xcde1221b
inc ecx
mov ebx, ecx
xchg ebx, ecx
mov edi, ecx
sub ecx, ebx
mov esi, ecx
add edi, ebx
xor ebx, esi
mov ebx, ecx
mov ecx, ebx
xor edi, ecx
xor edi, ecx
jmp 0x476565
push 0x401400
add esi, edi
rol esi, 7
add esi, edi
or esi, 0xd51f8732
sub esi, 0xd51fec4b
add edi, ebx
xchg edi, esi
shl ebx, 0x12
ror edi, 0x15
sub edi, ebx
jmp 0x476eac
push 0x73f8e
mov ecx, esi
mov edi, ecx
and edi, ebx
xor ecx, edi
jmp 0x475d90
call edx
sub ebx, edi
shl esi, 5
ror ebx, 0x16
sub esi, 0xd5334bdd
or ecx, edi
add ecx, esi
sub esi, ecx
or esi, edi
mov esi, ecx
rol edi, 9
xor esi, 0xd5362d5e
mov esi, ecx
jmp 0x476cc4
push 0xcdc9db34
and ecx, edi
neg edi
and ebx, 0xd54a7f5c
sub ecx, ebx
and ecx, edi
jmp 0x477727
pop edx
neg edi
and esi, 0xd55f7af6
add esi, 0xd55fdde4
or ecx, edi
mov edi, ecx
add ecx, 0xd561023b
xor edi, ebx
and ecx, esi
jmp 0x476ab9
mov edx, 0x2774562b
and esi, 0xd5868590
add ecx, 0xd586ef8b
mov ecx, 0xd5875240
sub edi, ecx
xor ecx, ebx
xchg esi, ecx
add edi, ecx
and ecx, edi
rol edi, 0x11
jmp 0x47569d
push 0xcddae2e0
sub ecx, esi
mov edi, ebx
add edi, esi
or ebx, edi
bswap esi
or esi, ebx
or edi, ebx
and esi, ecx
jmp 0x476414
pop edx
xor esi, edi
and ecx, edi
add ecx, ebx
inc ecx
and edi, 0xd5d8d125
jmp 0x476923
push 0xcdda88e2
add edi, esi
or ecx, edi
sub ebx, edi
and edi, ebx
not ecx
xor ecx, esi
shr esi, 0x14
xchg esi, ebx
and ebx, ecx
jmp 0x476035
push 0x40
add esi, ecx
bswap esi
or ebx, ecx
xor ebx, 0xd5e7b80d
neg esi
add ebx, 0xd5f4c694
xor edi, ecx
mov ebx, 0xd5f5ada7
jmp 0x475db9
pop edx
add esi, ebx
and ecx, ebx
sub esi, 0xd5f6ee49
xor ecx, ebx
rol edi, 7
mov edi, ebx
mov ebx, esi
mov edi, ebx
add edi, ecx
shr ecx, 0xe
mov ecx, ebx
add ecx, esi
and edi, esi
xor ebx, edi
jmp 0x475e8e
push 0xcdd997e4
add ebx, 0xd60e7a56
dec edi
xor ecx, edi
jmp 0x4757c6
pop edx
xor edi, ecx
mov esi, 0xd61036ec
not ebx
add ecx, 0xd61146c8
xchg edi, ecx
mov esi, ebx
shl edi, 6
and edi, esi
and ecx, 0xd6133fa2
sub ebx, edi
or ecx, 0xd6143c24
add ecx, esi
jmp 0x476616
mov edx, 0x123b2f04
xor edi, esi
and esi, edi
rol esi, 0xe
add esi, 0xd62154ba
mov ecx, 0xd621b25a
or edi, ebx
or edi, ebx
shr esi, 0x15
jmp 0x47674a
push 0xcdd5dc52
shl ebx, 0x18
rol ecx, 0xc
sub edi, esi
or edi, 0xd624a8c5
xchg edi, esi
xor ebx, esi
mov esi, 0xd625e9fd
mov esi, 0xd6265075
jmp 0x475f7e
mov edx, 0x2774562b
add esi, 0xd634b6bc
sub esi, ecx
add esi, edi
and edi, 0xd6361010
ror ecx, 0xe
xor ebx, ecx
dec ecx
mov ebx, 0xd637ced3
mov ecx, 0xd63831a4
or ebx, esi
mov ebx, edi
mov edi, esi
add ecx, ebx
jmp 0x4768cb
pop edx
xor esi, 0xd64d4dc8
or ebx, esi
add esi, 0xd652f5d4
not ecx
dec ebx
or edi, 0xd65443ba
and ebx, ecx
add esi, ebx
dec ecx
jmp 0x475962
mov edx, 0x2774562b
mov edi, ecx
or esi, ecx
mov esi, 0xd668f21e
jmp 0x476511
call fcn.00477704
xchg esi, ecx
sub ebx, ecx
mov ecx, 0xd695825d
add edi, esi
xor ebx, 0xd6966779
jmp 0x475a5f
push 0xcde56768
dec edi
sub ebx, esi
shl esi, 0x18
mov ecx, 0xd6b17c9e
xor ecx, ebx
add edi, 0xd6b2786f
xchg edi, ebx
not esi
jmp 0x475535
push 0xcde17a7d
sub esi, ebx
add edi, 0xd6b44916
sub ebx, 0xd6b4b37d
add ecx, esi
sub edi, ecx
mov edi, esi
add edi, 0xd6b65d5c
not ebx
shl ebx, 8
mov esi, ebx
bswap edi
jmp 0x4757f2
pop edx
xor ecx, 0xd6d13b4e
shr edi, 0x10
or ecx, ebx
mov esi, ecx
neg edi
add ebx, ecx
mov edi, ebx
rol esi, 0x14
sub ecx, ebx
jmp 0x475a9b
pop edx
or edi, esi
mov esi, ecx
sub ecx, edi
mov ebx, edi
shl edi, 0xc
add edi, esi
not ebx
rol esi, 0x12
ror ecx, 0x18
xor ecx, esi
mov ebx, ecx
and ecx, ebx
and esi, ecx
jmp 0x4758e1
pop edx
mov edi, 0xd6dec7df
and ebx, esi
or esi, ebx
xor ecx, edi
ror ecx, 0x11
xchg esi, ecx
shl ecx, 0x1c
xchg edi, esi
inc esi
jmp 0x4774fa
call fcn.00477704
xor ecx, esi
or ecx, esi
sub esi, ecx
neg ecx
and esi, ebx
mov edi, esi
add edi, esi
xchg edi, ecx
jmp 0x477694
push 0xcdd76ee5
inc edi
and edi, esi
sub edi, ecx
mov ebx, ecx
mov edi, ebx
xor edi, ebx
and ecx, ebx
jmp 0x476b2b
call fcn.00477704
sub ebx, edi
neg ecx
or esi, ebx
rol ecx, 0x1b
xor ecx, esi
xor ecx, edi
sub edi, ecx
ror esi, 9
sub ecx, ebx
neg ebx
sub edi, esi
or ecx, edi
nop
mov ebx, ecx
jmp 0x47578e
pop edx
and ecx, edi
mov esi, ebx
and edi, ebx
sub ebx, edi
sub esi, ebx
and ecx, esi
or esi, 0xd721f392
mov ecx, ebx
or ecx, ebx
nop
or esi, ebx
bswap ebx
xor esi, edi
jmp 0x475ce6
pop edx
and edi, ecx
and edi, 0xd727c77c
mov ecx, ebx
and ecx, esi
sub ecx, 0xd728de2b
mov esi, ecx
and esi, edi
add edi, esi
jmp 0x4773f6
call fcn.00477704
shr edi, 7
mov esi, ebx
bswap ecx
sub edi, ecx
xor esi, 0xd752c5fa
and ecx, 0xd75328ec
and ecx, edi
rol esi, 0x16
mov ecx, ebx
mov esi, ebx
rol ebx, 0x1d
jmp 0x47732c
pop edx
shr esi, 0xc
mov edi, esi
and esi, ebx
add edi, ecx
and edi, ebx
or ecx, esi
mov ebx, ecx
xchg ebx, ecx
sub ecx, edi
mov esi, edi
mov esi, 0xd769cd42
xchg esi, ebx
dec esi
sub esi, 0xd76f049b
jmp 0x4761ec
call edx
or esi, 0xd789792c
add ecx, 0xd789d881
add ecx, ebx
mov ecx, ebx
xor ecx, edi
dec esi
xor ebx, edi
or ecx, ebx
sub ecx, esi
xchg esi, edi
mov esi, edi
and edi, ecx
mov edi, 0xd78eaf1a
and esi, 0xd78f155a
jmp 0x4759df
push 0xcdd24a21
xchg edi, ebx
sub edi, 0xd79f187a
sub edi, ecx
sub esi, edi
xchg ebx, ecx
shl ebx, 0x10
jmp 0x476c37
pop edx
sub esi, ecx
xor esi, ebx
xchg ebx, edi
dec ebx
xchg ecx, esi
xchg ecx, ebx
not ebx
add edi, 0xd7b417e2
or ebx, edi
add ebx, ecx
jmp 0x4765f8
push 0xcdd7c113
sub esi, ecx
add ecx, esi
and edi, ebx
or edi, ecx
mov esi, 0xd7d7a11b
jmp 0x4770d7
pop edx
rol ecx, 6
add esi, ecx
not edi
and edi, ecx
or ebx, edi
add esi, 0xd7dfa627
or edi, 0xd7e0213e
or edi, esi
not ebx
jmp 0x4773cc
push 0xcdd29d47
inc edi
xchg ecx, ebx
add esi, edi
neg esi
mov ecx, 0xd80f3136
and edi, esi
xchg ebx, esi
xor esi, ecx
xor esi, ebx
or edi, esi
or edi, esi
xor esi, ebx
sub esi, edi
jmp 0x4754d5
push 0xcdad0df3
ror ecx, 0x1e
or edi, ebx
inc edi
xchg edi, ecx
sub ecx, esi
sub esi, 0xd81bf15f
or edi, 0xd81c52bb
rol ebx, 0x14
ror ecx, 0x17
mov ecx, 0xd81d9ca2
mov esi, ecx
and esi, ecx
xor ebx, esi
jmp 0x4762e2
pop edx
and ebx, ecx
neg ecx
or edi, ebx
shr ecx, 0x19
not esi
add ebx, esi
bswap ecx
shl ebx, 0xc
jmp 0x476733
call edx
mov edi, esi
or ecx, ebx
mov ebx, ecx
xor esi, ecx
add ecx, 0xd86dcead
mov esi, edi
xchg edi, esi
sub ebx, 0xd86effe1
shl ecx, 0x13
or ebx, 0xd86fe312
add esi, ebx
sub ecx, 0xd870a508
and ecx, 0xd87103a6
inc ebx
xchg ebx, esi
sub ecx, esi
jmp 0x4760bd
push 0xcdcd1541
xor ecx, 0xd8888060
or ebx, 0xd888ec03
add edi, ecx
not ebx
sub ebx, ecx
shr edi, 1
or esi, ecx
or esi, edi
jmp 0x476a59
mov edx, 0x2774562b
and ebx, esi
or esi, ebx
rol ecx, 3
add esi, ebx
jmp 0x47714c
call edx
xor esi, ebx
or ebx, 0xd893121c
xor edi, esi
sub ecx, esi
xor ebx, ecx
add edi, ebx
and ecx, edi
xchg esi, ecx
or esi, edi
shl edi, 8
or ebx, edi
jmp 0x476639
mov edx, 0x2774562b
not ecx
add esi, ecx
xor ecx, ebx
add ecx, 0xd89bbd7d
xor esi, edi
not edi
jmp 0x4766b8
pop edx
xor ebx, ecx
shl edi, 0x11
or edi, 0xd8b76a8a
xchg ebx, ecx
mov esi, 0xd8b831b7
and ecx, esi
jmp 0x477344
push 0xcdabff2b
shl ebx, 0x12
add esi, ecx
sub ebx, ecx
shr edi, 0x14
and ebx, edi
or ecx, 0xd8c078d4
jmp 0x47765b
push 0xcdccbc04
bswap edi
sub ecx, edi
sub ebx, edi
or edi, ebx
jmp 0x476e4d
push esp
or edi, 0xd8d64153
sub ebx, ecx
xchg esi, edi
ror ecx, 0x1b
xor edi, ebx
xchg esi, edi
shr esi, 4
xchg esi, ecx
dec edi
and edi, ebx
jmp 0x477030
mov edx, 0x4132136a
mov esi, ecx
not ebx
mov ebx, ecx
xchg ecx, edi
and ebx, edi
shl esi, 0x13
sub esi, ecx
and edi, ebx
jmp 0x47581a
push esp
xor esi, 0xd8e087c3
not ecx
add ebx, ecx
xor ecx, 0xd8e1a5e7
mov esi, ebx
and edi, ecx
xchg esi, edi
shr edi, 8
xchg ebx, ecx
mov ebx, ecx
add edi, esi
rol edi, 0x1c
jmp 0x476131
push 0xcdacb3c3
sub esi, ebx
add ecx, 0xd8ece299
or edi, 0xd8ed5ae7
or ebx, edi
and ecx, esi
or esi, 0xd8ee773f
or edi, esi
add edi, ecx
jmp 0x476c6f
mov edx, 0x2774562b
sub ecx, edi
add ebx, edi
inc edi
xor ecx, 0xd8f5dca2
add ecx, ebx
not ebx
shr edi, 0x13
ror esi, 0x11
or esi, ebx
jmp 0x47756c
call edx
xor edi, 0xd8f8702c
mov esi, ecx
and ebx, 0xd8f92eda
and edi, ebx
sub ecx, edi
xchg ecx, esi
jmp 0x475709
call fcn.00477704
shr ebx, 0x1c
and edi, 0xd9038c67
bswap ecx
add ebx, ecx
not ebx
shl edi, 0x19
or esi, edi
xor edi, ebx
and edi, ecx
mov ecx, ebx
xor ecx, ebx
sub edi, ebx
jmp 0x476a10
pop edx
not ecx
and edi, esi
xchg ecx, esi
xchg ebx, edi
sub ecx, esi
shr ecx, 0xb
and edi, esi
neg ecx
jmp 0x476797
call edx
or ecx, ebx
mov ebx, ecx
add ebx, esi
mov ebx, ecx
or esi, 0xd92f9b24
mov ecx, esi
and ecx, edi
and edi, ebx
jmp 0x476f45
mov edx, 0x2774562b
xor ecx, edi
bswap ebx
bswap ebx
rol edi, 0x14
xor esi, 0xd93d1478
jmp 0x47567c
call edx
sub esi, ecx
rol ecx, 0x1c
sub edi, ebx
add ebx, esi
xchg edi, esi
mov ebx, edi
bswap edi
or ecx, edi
jmp 0x4754f1
pop edx
xchg esi, ebx
and edi, ebx
xchg ecx, ebx
and esi, ebx
or ecx, 0xd9565356
jmp 0x47725c
push 0xcdafaeb8
sub ecx, 0xd971dbd4
mov ebx, edi
mov ebx, ecx
or esi, ecx
sub esi, ebx
mov ecx, 0xd973f3ad
shl edi, 3
sub ebx, ecx
and ebx, 0xd975308a
xor esi, edi
jmp 0x476e99
push 0xcde5147e
and ecx, 0xd976256f
sub edi, 0xd9768d6a
or ecx, esi
or esi, ebx
or edi, esi
or esi, ecx
or ecx, esi
or edi, ebx
and ebx, edi
inc esi
xchg ebx, edi
jmp 0x476544
push 0xcdda36da
mov ecx, ebx
add edi, ebx
shr ebx, 0x11
add ecx, esi
xchg ebx, edi
jmp 0x4760d0
push 0xcde0d252
and ebx, ecx
mov ebx, esi
rol esi, 0x1c
xor esi, ecx
bswap ebx
and ecx, 0xd9a9ef8f
sub edi, ecx
rol ecx, 0x1f
and ebx, esi
or esi, edi
not ebx
not ebx
sub ecx, edi
jmp 0x475d41
call fcn.00477704
neg esi
shl ecx, 5
or edi, ecx
add ebx, 0xd9bbbb0a
and edi, esi
and ebx, 0xd9bcb5f0
bswap ecx
and esi, 0xd9bd7dfa
or ebx, 0xd9be2920
jmp 0x476dd7
jmp loc.0047aa36
push 0xcdac60da
and ebx, esi
xchg ebx, edi
or ecx, esi
xchg ecx, esi
jmp 0x47709b
call edx
or edi, 0xda0a936d
or ebx, edi
jmp 0x4761ff
pop edx
add esi, ebx
mov ecx, edi
shl esi, 4
or ecx, 0xda1448c6
sub esi, edi
mov ecx, ebx
jmp 0x4767d3
push 0xcdca3349
shr esi, 0x1d
nop
mov edi, ecx
dec edi
add esi, ecx
add esi, ecx
sub ecx, 0xda297ab7
shr esi, 0x12
or ebx, ecx
mov ebx, esi
shl edi, 0x10
mov edi, esi
xchg ecx, edi
jmp 0x4772c4