Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get file size
Query environment variable

Disassembly:
call sub.kernel32.dll_GetLastError
cmp eax, 0xffffff38
jne 0x40106b
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetEnvironmentVariableA
call main
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetEnvironmentVariableA
call main
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetFileSize
call main
call sub.kernel32.dll_GetFileSize
call sub.oleaut32.dll_VarNumFromParseNum
call sub.oleaut32.dll_VarNumFromParseNum
call main
call sub.kernel32.dll_GetFileSize
call sub.oleaut32.dll_VarNumFromParseNum
call main
ret
call sub.kernel32.dll_GetLastError
cmp eax, 0xffffff18
jne 0x4010f4
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetFileSize
call main
call main
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetEnvironmentVariableA
call main
call main
call sub.oleaut32.dll_VarNumFromParseNum
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetFileSize
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetFileSize
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetFileSize
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetEnvironmentVariableA
ret
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xfffffeed
jne 0x40115a
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetEnvironmentVariableA
call main
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetFileSize
call sub.oleaut32.dll_VarNumFromParseNum
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetFileSize
call main
call sub.oleaut32.dll_VarNumFromParseNum
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.oleaut32.dll_VarNumFromParseNum
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetFileSize
ret
call sub.user32.dll_GetClipboardOwner
cmp eax, 0xfffffef9
jne 0x4011ca
call sub.kernel32.dll_GetFileSize
call main
call sub.oleaut32.dll_VarNumFromParseNum
call main
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetFileSize
call sub.oleaut32.dll_VarNumFromParseNum
call sub.oleaut32.dll_VarNumFromParseNum
call sub.oleaut32.dll_VarNumFromParseNum
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetEnvironmentVariableA
call main
call sub.kernel32.dll_GetEnvironmentVariableA
call main
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetEnvironmentVariableA
call main
ret
call sub.user32.dll_GetDesktopWindow
cmp eax, 0xffffff0f
jne 0x401249
call sub.oleaut32.dll_VarNumFromParseNum
call main
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetFileSize
call sub.oleaut32.dll_VarNumFromParseNum
call main
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetEnvironmentVariableA
call main
call sub.oleaut32.dll_VarNumFromParseNum
call sub.kernel32.dll_GetFileSize
call sub.oleaut32.dll_VarNumFromParseNum
call main
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetEnvironmentVariableA
call main
call sub.kernel32.dll_GetFileSize
call sub.kernel32.dll_GetEnvironmentVariableA
call sub.kernel32.dll_GetEnvironmentVariableA
call main
ret
jmp 0x475799
or edx, ecx
jmp 0x476fe7
mov ebx, 0x2d734e3d
shl ecx, 0x10
not edi
shr esi, 0xf
add esi, edi
not edx
jmp 0x4784e3
mov ebx, 0x33274000
xor edi, 0x28b31d5e
xor esi, 0x28b37766
add edx, ecx
mov esi, 0x28b426dc
shl esi, 0x12
xor ecx, edx
inc ecx
ror edx, 8
or esi, edi
xor edx, esi
or edx, edi
ror ecx, 0x1f
rol edx, 0x14
jmp 0x4782e0
pop ebx
add ecx, 0x28e9d406
add edx, ecx
xchg esi, edi
xchg edi, esi
sub edx, 0x28f84de9
xchg ecx, edi
bswap esi
mov edi, esi
ror esi, 0xd
ror ecx, 0xb
jmp 0x477a4a
push 0x26d3b1a3
shl edi, 0x1d
xor esi, ecx
dec edi
inc edi
mov ecx, edx
and esi, ecx
and ecx, edx
xor edi, ecx
shr ecx, 8
xchg ecx, edx
sub edx, ecx
or edi, edx
jmp 0x477aa9
call ebx
or edx, ecx
dec ecx
or esi, ecx
xchg edx, esi
xor esi, 0x292c84ea
and ecx, 0x292cf3c8
neg esi
xor edi, edx
mov edi, ecx
add edx, edi
xor edx, edi
jmp 0x47821e
call ebx
sub esi, edx
mov edi, esi
shl edx, 0x17
xchg edi, esi
sub edx, 0x29427ed7
and edi, 0x294335af
rol edx, 0x16
rol edi, 0x15
and ecx, 0x2945312c
add edi, 0x2945cbcd
jmp 0x4776c3
call fcn.004763b0
mov ecx, edx
or edx, ecx
xchg edi, ecx
inc edx
or edx, ecx
ror esi, 0xb
jmp 0x47705f
pop ebx
or esi, edi
xor edx, ecx
or edx, 0x29704566
xor edx, esi
mov edi, 0x2970d779
shr edi, 0xf
xor esi, ecx
rol ecx, 0xf
sub edi, esi
or ecx, esi
dec edx
shl edi, 4
inc esi
jmp 0x47740a
mov ebx, 0x4132136a
xchg ecx, edi
shr ecx, 0x15
xor edi, ecx
sub ecx, edx
or ecx, 0x297def89
dec edi
jmp 0x4789d2
push 0x26ec349e
and edx, 0x29835193
or ecx, 0x29839bf9
xchg edx, edi
or edi, 0x2984422b
or edi, ecx
neg edx
xchg ecx, edi
mov edi, ecx
dec ecx
shr edx, 2
jmp 0x47610a
push 0x26e51860
mov edi, ecx
and esi, edx
sub edx, edi
xor edx, edi
mov edx, edi
shl edx, 0x19
jmp 0x4757ae
call ebx
mov ecx, 0x298c210c
or edx, 0x298c6be5
rol ecx, 0xe
add ecx, edx
rol edx, 0x14
xor edi, esi
dec edx
xchg edx, ecx
add esi, edx
bswap edx
xor edi, edx
mov ecx, 0x298f5776
sub edi, esi
jmp 0x4772b3
pop ebx
sub ecx, edx
sub ecx, edx
and edx, 0x299098c4
and ecx, esi
xor edx, ecx
xchg edi, edx
and esi, ecx
xchg ecx, edi
mov edx, edi
mov ecx, esi
jmp 0x4777e3
push 0x26e43650
xor edi, esi
and edx, ecx
xchg edx, edi
xor ecx, 0x2998928e
shl esi, 0x1d
dec edx
and edx, edi
add esi, edx
jmp 0x4765d1
mov ebx, 0x2d734e3d
xor ecx, edx
inc edx
add edx, edi
or edi, edx
jmp 0x4768e9
push 0x26ed1645
mov esi, ecx
mov ecx, 0x29a676c7
mov ecx, 0x29a6bf80
add ecx, esi
or edx, edi
sub edi, 0x29a79696
ror esi, 2
xor esi, ecx
xor edi, edx
xchg ecx, edx
dec esi
jmp 0x47883d
pop ebx
xchg ecx, esi
and edx, ecx
xor edi, edx
mov ecx, 0x29aca0c1
mov ecx, edx
jmp 0x47773f
push 0x26d60afa
inc esi
not edi
bswap edx
dec edi
add esi, edi
ror ecx, 0xc
xor esi, edi
sub ecx, edx
neg edx
xchg ecx, edi
inc esi
mov ecx, 0x29b9875c
not edx
mov edx, esi
or edi, ecx
jmp 0x476257
push 0x26eccb8a
or edi, 0x29bdc947
xor edx, edi
mov edx, ecx
or edx, esi
jmp 0x475d35
pop ebx
xchg esi, ecx
bswap ecx
or edx, edi
mov edx, 0x29c8bd51
add ecx, 0x29c90785
xchg esi, edx
xchg edi, edx
xor esi, ecx
xchg edi, ecx
shl edx, 0x1c
jmp 0x478d51
call ebx
neg edi
mov edx, esi
rol ecx, 0x1e
and ecx, edi
mov edx, ecx
jmp 0x47678b
push 0x26d31b0d
sub ecx, 0x29cfce54
sub esi, ecx
shr edx, 0xc
not ecx
jmp 0x4761b6
call ebx
shl edx, 0xb
inc edx
dec edi
xchg edx, ecx
xor edi, edx
xchg esi, ecx
and ecx, 0x29ec6cd5
or ecx, 0x29ecb6f2
jmp 0x477655
push 0x26e3eb29
xor edx, edi
and ecx, edi
sub edx, ecx
sub esi, edx
sub edi, ecx
jmp 0x475c8e
push esp
mov ecx, 0x29f6ef49
sub edi, ecx
xchg edi, ecx
xchg ecx, edx
add edx, 0x29f81065
or edi, edx
xchg edi, esi
add edx, edi
add ecx, esi
and edi, 0x29f98779
jmp 0x477622
push 0x26ec7f6b
mov edi, edx
shl edi, 0x13
add edx, edi
xchg edx, edi
jmp 0x475e43
pop ebx
add ecx, esi
or esi, ecx
xchg edi, esi
xor edx, 0x29fc1312
sub edx, esi
dec esi
mov edi, edx
or edi, edx
jmp 0x4776f9
push 0x26d3667d
not edi
add ecx, edx
or ecx, edx
mov ecx, 0x2a0ad469
jmp 0x4758a9
pop ebx
or edi, esi
not esi
mov edx, esi
neg edx
not ecx
or edi, ecx
shr esi, 9
mov ecx, edi
rol edx, 1
inc edx
jmp 0x4789a1
mov ebx, 0x2d734e3d
inc edx
rol esi, 0x16
and esi, ecx
and esi, 0x2a1de231
add edx, 0x2a1e2b07
xor edx, esi
xor edi, ecx
inc edi
sub edx, esi
inc edx
sub ecx, esi
xor esi, 0x2a20399d
add ecx, edx
jmp 0x478a2d
pop ebx
rol edx, 0xb
bswap esi
and ecx, edi
mov ecx, 0x2a239b72
ror edx, 0x1d
and esi, edx
dec ecx
and ecx, 0x2a257574
mov edx, ecx
ror edi, 0xd
dec edx
jmp 0x47900a
pop ebx
or edi, ecx
and edi, esi
not edx
neg ecx
inc edx
shl ecx, 9
nop
jmp 0x4786d0
call fcn.004763b0
rol edx, 0x1e
sub edi, esi
and esi, edx
sub edi, esi
xor ecx, esi
dec esi
jmp 0x477a93
pop ebx
xchg ecx, esi
rol edx, 0x12
mov edx, ecx
xor edi, edx
or edx, edi
nop
or ecx, edx
dec edx
jmp 0x47686f
push 0x26e48231
sub ecx, esi
xchg ecx, edi
sub esi, ecx
xor edx, edi
xor edi, ecx
xor edi, 0x2a6e025e
xor ecx, edi
nop
xor edi, 0x2a6edf04
xchg esi, edx
jmp 0x476f5e
pop ebx
xor edx, esi
dec edx
add esi, edx
and ecx, edi
xchg edx, edi
and edx, esi
nop
jmp 0x4762bc
mov ebx, 0x33274000
and edi, esi
add edi, esi
xor edi, edx
sub edx, ecx
add ecx, 0x2a983cfe
jmp 0x4788bf
push 0x26dfca2f
shl edx, 2
not ecx
or ecx, esi
add ecx, edi
or edx, 0x2aa61230
and edi, 0x2aa66fb6
xor ecx, edi
dec ecx
xor edi, ecx
bswap edi
and edi, 0x2aa7dc53
dec edi
jmp 0x4757ec
call fcn.004763b0
xchg esi, edi
or ecx, edx
mov ecx, edx
mov edi, ecx
sub edx, edi
sub esi, ecx
and edx, ecx
sub edi, 0x2ab0e307
xor ecx, esi
xchg ecx, esi
sub ecx, edi
shr edx, 0x16
or ecx, esi
jmp 0x478a91
call ebx
inc edx
and ecx, 0x2ac38473
neg edx
or edx, ecx
dec ecx
sub ecx, edi
bswap edx
sub edi, ecx
jmp 0x476aa4
push 0x26cf047b
neg ecx
add edi, ecx
or esi, ecx
add edi, ecx
xor edx, 0x2acd3c1c
add edi, ecx
bswap edi
or esi, edx
neg edi
inc esi
or esi, 0x2acff444
or esi, edi
rol ecx, 0xf
add edx, ecx
jmp 0x477297
pop ebx
and ecx, edi
and ecx, edi
add ecx, esi
dec ecx
and esi, ecx
or edx, 0x2ad82ee4
sub edi, 0x2ad87785
mov edi, ecx
xchg esi, ecx
bswap edx
jmp 0x478d95
push 0x26ebe86a
xchg ecx, edx
xor esi, edi
xor edx, esi
neg ecx
or edi, 0x2b0467e1
sub edx, edi
shl edx, 4
mov edx, edi
or ecx, edx
or edx, 0x2b05df40
sub ecx, 0x2b0629d1
jmp 0x475b9e
call ebx
and esi, 0x2b06941e
dec edx
and esi, ecx
xor ecx, edx
xchg edx, esi
rol esi, 0xe
shl esi, 0xc
jmp 0x478533
push 0x26cb7f00
xor esi, edx
xchg esi, edi
nop
xchg ecx, esi
xor esi, 0x2b0d366c
ror esi, 0x17
ror esi, 9
mov edx, edi
or esi, edi
sub esi, edi
xor edi, 0x2b0f011e
jmp 0x47790f
push 0x26e4cd3a
mov esi, ecx
bswap ecx
xchg esi, edi
rol edx, 0x12
ror edi, 2
neg edi
or edx, edi
jmp 0x475bfa
call fcn.004763b0
or ecx, edi
mov ecx, 0x2b4505d1
and edx, ecx
or esi, edx
bswap ecx
bswap edi
sub esi, 0x2b464d60
or esi, ecx
sub edi, esi
sub edi, ecx
add edi, 0x2b4746ff
shl edi, 0x18
rol ecx, 5
mov ecx, edi
jmp 0x4758cb
push 0x26cb2ac3
add esi, edi
inc edx
or ecx, edx
sub edx, edi
shl edx, 7
jmp 0x476cc7
call fcn.004763b0
xor esi, ecx
sub edi, ecx
inc edx
add esi, 0x2b4d9855
or esi, edi
sub edx, edi
shl esi, 9
or edx, ecx
add edx, ecx
sub edx, 0x2b4f1107
sub edi, 0x2b4f518d
jmp 0x475c11
push 0x26e93ff8
mov edi, ecx
add edx, ecx
or esi, ecx
or edi, ecx
xor edx, ecx
xchg esi, ecx
add ecx, edi
or esi, edi
xor ecx, edx
sub ecx, edx
mov esi, edx
jmp 0x4779fb
call ebx
mov ecx, edi
add ecx, edx
bswap edi
and edi, edx
xchg edx, esi
xor edx, 0x2b588019
and edx, edi
sub ecx, edx
shr edx, 9
xchg edi, ecx
sub esi, 0x2b59bb9d
jmp 0x475ab0
push 0x26e9d6f8
xor esi, ecx
sub ecx, 0x2b686c1d
xor ecx, 0x2b68ab74
add edi, ecx
xchg esi, ecx
and edx, 0x2b6965fc
xor esi, 0x2b69a318
jmp 0x478662
push 0x26cc1580
shr edi, 0x13
xchg edi, edx
xor edx, ecx
or esi, edx
mov ecx, 0x2b6b0629
add esi, ecx
mov edi, esi
jmp 0x475cf4
mov ebx, 0x33274000
add esi, 0x2b9cc04a
sub edx, esi
and ecx, 0x2b9d4c6b
not esi
mov esi, ecx
jmp 0x4778ee
pop ebx
shr ecx, 0xe
sub edi, edx
xchg edi, edx
add ecx, edx
ror ecx, 0x11
xchg edx, edi
jmp 0x4761cb
push 0x26d111bd
and edx, 0x2bab200a
shl edx, 9
ror edx, 7
and edx, esi
shl esi, 9
jmp 0x477b99
pop ebx
xchg edx, esi
add esi, edx
and esi, ecx
add edx, ecx
and edi, 0x2bb4d008
and ecx, edi
add edi, edx
jmp 0x47735a
pop ebx
rol edi, 0x10
add esi, ecx
shr esi, 4
bswap esi
shl edx, 0x17
or edi, edx
sub ecx, edi
jmp 0x475f14
mov ebx, 0x33274000
xchg esi, ecx
and ecx, edi
mov edx, edi
dec ecx
xchg edx, edi
mov edi, esi
sub edi, 0x2bdcc3c4
jmp 0x476ffb
push esp
sub esi, edi
add edx, ecx
or esi, 0x2be165be
and esi, edx
xchg edx, edi
ror edi, 6
shr edi, 2
add edx, esi
sub edi, esi
sub edx, 0x2be325d6
xor ecx, 0x2be3649d
inc esi
and ecx, edx
and edx, 0x2be41d03
jmp 0x47902b
pop ebx
add edi, esi
and ecx, edx
mov esi, 0x2be4ec43
xchg ecx, edi
shl ecx, 0x10
sub ecx, 0x2be5b928
and esi, edi
mov edx, esi
xchg edi, edx
or edx, esi
sub ecx, 0x2be731a9
sub edi, ecx
jmp 0x478594
pop ebx
mov edx, esi
neg esi
xor edi, edx
xor edi, edx
add esi, 0x2be8d303
mov edx, ecx
sub ecx, edi
neg ecx
add edx, edi
jmp 0x47812b
pop ebx
sub edx, edi
sub edx, esi
or ecx, edi
sub esi, edi
ror esi, 0x1e
jmp 0x476298
push 0x26ce6e44
xor ecx, 0x2bf13a56
xor esi, edx
or edx, esi
or edi, ecx
rol edi, 0x1f
add esi, edi
xchg edi, ecx
xor esi, edx
inc edi
jmp 0x477ae8
push 0x401400
inc ecx
mov ecx, edi
inc edx
mov edx, ecx
rol ecx, 0x1a
or ecx, edi
not edi
sub edx, esi
mov edi, ecx
add edi, ecx
sub esi, 0x2bf60611
inc esi
and edx, edi
jmp 0x477f3d
pop ebx
or edi, ecx
shr edi, 2
xor esi, edi
or esi, 0x2bf799ef
rol esi, 0xb
ror edi, 0x15
sub edi, esi
mov edx, ecx
sub ecx, edx
jmp fcn.00476b66
push 0x26e1436b
mov edi, 0x2c03db45
xor ecx, edi
xor edx, edi
and edi, edx
or esi, edi
mov edi, esi
xor edx, esi
or ecx, esi
add esi, ecx
jmp 0x4779dd
mov ebx, 0x33274000
mov esi, 0x2c09f89b
inc esi
or esi, 0x2c0a7612
xor ecx, 0x2c0ab503
sub esi, 0x2c0af4eb
sub esi, edi
add edi, 0x2c0b7f49
xchg edi, edx
mov edx, esi
jmp 0x476f88
call fcn.004763b0
xchg esi, edx
add ecx, 0x2c137ad2
sub esi, edx
xor edx, 0x2c13f60d
add edi, edx
add ecx, edx
ror edi, 0xa
mov edi, esi
mov edi, 0x2c153ada
jmp 0x4769d5
call fcn.004763b0
or edx, edi
add edx, edi
xchg esi, edx
and ecx, 0x2c164bd9
rol esi, 0x1e
add ecx, 0x2c16d943
not edi
jmp 0x476054
push 0x26cbcb82
inc esi
xor edx, ecx
xor esi, edi
xchg esi, edx
xor esi, edi
sub edi, ecx
shl esi, 7
add edi, ecx
and edx, ecx
jmp 0x47715a
pop ebx
mov edi, ecx
or esi, ecx
or edx, 0x2c22b578
xor edi, ecx
add ecx, edx
mov edi, ecx
jmp 0x477f8d
call ebx
bswap edi
and ecx, edx
and edx, ecx
and esi, ecx
xor edx, edi
bswap edi
xor esi, ecx
neg edx
shl edi, 0xf
and edi, ecx
mov edx, 0x2c264cef
shl edi, 0x19
or esi, edi
jmp 0x475837
push 0x26e190b7
neg edi
inc edi
xor esi, edi
and ecx, edx
xchg edi, esi
not edi
and ecx, esi
ror ecx, 0x14
and esi, ecx
sub esi, edi
jmp 0x4784b7
push 0x26e98a2d
mov edx, esi
or esi, 0x2c2da3b7
neg esi
and ecx, 0x2c2e217a
xchg edx, esi
bswap edi
add esi, edi
not ecx
mov esi, edx
xor edx, 0x2c2fa58e
and esi, ecx
or edi, edx
mov ecx, esi
sub esi, ecx
jmp 0x477132
pop ebx
xor esi, edi
or ecx, edi
xchg edi, ecx
not esi
not ecx
add esi, edx
or edi, esi
mov ecx, 0x2c34d5a3
jmp 0x478c00
call ebx
inc edi
and esi, edi
sub edx, ecx
mov edi, edx
add ecx, edi
add esi, edi
or ecx, esi
xor edx, ecx
jmp 0x477ed7
mov ebx, 0x2d734e3d
neg esi
mov edi, 0x2c3b4385
sub esi, ecx
inc edi
and esi, ecx
mov edi, ecx
sub esi, ecx
xchg esi, ecx
jmp 0x478cd1
push 0x26ceb9d3
xchg ecx, esi
xchg esi, ecx
inc edx
ror edi, 0xf
and edx, 0x2c3f844c
rol edx, 0xa
xchg edi, edx
add edx, ecx
mov esi, edi
sub ecx, 0x2c40c764
add esi, 0x2c410512
or edx, ecx
add edi, edx
jmp 0x476a37
push 0x26d15ad5
or edx, ecx
xchg ecx, edx
jmp 0x477e67
push 0x74399
rol esi, 3
rol ecx, 0x13
nop
dec edi
or esi, edi
xchg esi, ecx
rol edi, 0xf
xchg esi, edi
jmp 0x477719
mov ebx, 0x33274000
or ecx, edx
and edi, esi
and esi, 0x2c7bd261
mov edx, edi
and ecx, 0x2c7c4d45
and edi, 0x2c7c8dfd
and esi, edi
and edi, 0x2c7d0904
and edi, 0x2c7d552b
xor ecx, edi
jmp 0x4759ad
pop ebx
xor ecx, esi
xor edi, 0x2c8201b7
add edx, 0x2c824162
sub edx, ecx
sub ecx, edi
jmp 0x475b46
call ebx
xor esi, edi
mov esi, edi
add ecx, edi
add esi, 0x2c893ea1
mov edx, ecx
shr esi, 0x1f
and edx, esi
mov edi, edx
sub edi, ecx
sub edx, 0x2c8ac5b9
jmp 0x476445
pop ebx
shl edi, 0xd
add edx, edi
or edi, edx
xchg esi, edx
neg ecx
not edi
mov ecx, esi
xor edx, ecx
or edx, edi
add esi, edi
xchg edi, esi
ror esi, 0x1f
and edi, esi
ror ecx, 6
and edx, ecx
jmp 0x47611d
pop ebx
xchg ecx, edi
sub esi, edi
or edx, 0x2c9a4a9a
add esi, edi
sub ecx, 0x2c9ac42d
add esi, 0x2c9b1319
sub esi, edi
bswap esi
xchg ecx, edx
jmp 0x478b5f
pop ebx
and edi, edx
mov esi, edi
or edi, ecx
not edx
shl edi, 0x1c
sub esi, edx
xor edi, esi
or edi, esi
mov esi, ecx
and edx, edi
xchg esi, ecx
sub edi, ecx
mov esi, edi
jmp 0x47840e
call ebx
bswap ecx
add edi, 0x2cb80436
or esi, edi
and ecx, esi
ror ecx, 0x1e
shr esi, 0x19
jmp 0x478c35
pop ebx
sub edi, edx
add ecx, edi
add edi, esi
xor edi, edx
sub esi, edi
xor esi, edx
mov edx, edi
xor edi, 0x2cc0655a
jmp 0x478025
call fcn.004763b0
xchg esi, ecx
xchg ecx, esi
xor ecx, edi
add esi, edx
sub edx, 0x2cce4834
and edi, esi
mov edi, edx
or edi, 0x2ccf1044
or edi, edx
ror edx, 0xa
add edx, 0x2ccfd0bc
mov edx, 0x2cd00fff
sub ecx, esi
jmp 0x478d17
pop ebx
and ecx, edi
add ecx, esi
sub esi, edi
sub esi, edx
xor esi, 0x2cd48377
neg esi
add edx, ecx
or edx, ecx
or edi, edx
sub esi, 0x2cd5bc44
sub edx, esi
jmp 0x475ec2
push 0x26d5bf56
rol ecx, 0x18
xor esi, edx
xor edi, 0x2cdd072b
inc edi
neg ecx
dec ecx
add esi, ecx
and edx, ecx
add edx, ecx
mov ecx, edi
jmp 0x475df9
push 0x26e7c5d6
dec edx
add ecx, esi
sub edx, 0x2ce5d9be
mov ecx, edi
xchg ecx, edi
add esi, ecx
xor edi, ecx
add ecx, edi
jmp 0x4767ba
push 0x26e1db9d
shl ecx, 7
not edi
neg edi
xor ecx, edi
ror edx, 0x14
sub ecx, 0x2d1003cf
mov esi, edi
xchg edx, esi
xor esi, ecx
and ecx, edx
and esi, edi
and edi, 0x2d1185a1
jmp 0x477844
call fcn.004763b0
and edi, edx
shl ecx, 0x1d
shl edx, 0x18
mov edi, esi
or ecx, esi
not ecx
jmp 0x47595a
push 0x26d86424
and edx, edi
shl ecx, 2
xor edx, ecx
xor esi, ecx
sub esi, 0x2d52a2f8
sub ecx, 0x2d52e266
and ecx, edi
and ecx, edx
jmp 0x478800
pop ebx
sub ecx, edi
rol ecx, 0x1a
add edi, esi
xchg edi, edx
add esi, edx
or edi, 0x2d5500f1
dec ecx
jmp 0x475d76
pop ebx
or edi, edx
sub esi, 0x2d5b3c38
or esi, edi
xor ecx, edx
shl edi, 0x13
mov ecx, edx
shl ecx, 8
xchg ecx, edx
mov edi, 0x2d5d0491
add ecx, edx
mov edi, ecx
jmp 0x4773da
push 0x26d8f8f6
xchg edx, esi
and edx, edi
not edx
and edi, esi
or esi, edx
inc ecx
jmp 0x4775d9
mov ebx, 0x33274000
nop
nop
neg ecx
or ecx, edx
shl ecx, 5
jmp 0x4778c6
pop ebx
mov esi, ecx
xor esi, edx
xor esi, edx
shl ecx, 0x10
xchg ecx, esi
or ecx, esi
xchg esi, edi
sub ecx, 0x2d74a6b1
and ecx, 0x2d74f51c
or ecx, 0x2d7534dd
sub esi, 0x2d7573cc
xchg edi, edx
jmp 0x4783ac
call fcn.004763b0
mov edx, 0x2d7ffc64
shr edi, 0xf
not ecx
xor edi, edx
mov esi, edi
or ecx, edx
sub edx, 0x2d83aa11
add ecx, esi
mov edx, 0x2d849e24
xor edx, 0x2d84dd3d
jmp 0x476c84
push 0x26d8ae39
or ecx, edx
shr edi, 2
mov edx, edi
bswap ecx
and edx, esi
or ecx, 0x2d8afd5b
xchg ecx, edi
xor edx, esi
add esi, edx
xor edi, 0x2d8bf379
jmp 0x4785da
mov ebx, 0x2d734e3d
mov esi, edx
rol esi, 9
or esi, ecx
and ecx, esi
inc edi
mov esi, edi
sub edx, edi
mov edx, esi
and edi, ecx
nop
add edx, edi
sub edi, edx
bswap ecx
mov esi, edx
mov edi, ecx
jmp 0x478792
call fcn.004763b0
mov ecx, 0x2d98999d
add edi, 0x2d98d8be
or edi, 0x2d99178b
or esi, edx
add ecx, edx
xor edx, ecx
or esi, edx
and ecx, edx
add edi, edx
dec edi
neg edx
jmp 0x4781d6
pop ebx
sub ecx, 0x2db0457f
and edi, 0x2db0b2da
and edx, edi
mov edi, 0x2db19d27
or esi, edx
mov edi, esi
shl edx, 9
xor ecx, 0x2db35865
or esi, edi
dec edi
ror edi, 0x19
rol edx, 0x1d
xor edi, edx
jmp 0x478340
call fcn.004763b0
sub ecx, esi
add ecx, edx
xchg ecx, edi
add edx, esi
or esi, edx
sub ecx, esi
mov edx, 0x2db6e797
sub ecx, edx
sub edx, esi
xchg edx, edi
add esi, 0x2db7e0e6
jmp 0x4760e5
call fcn.004763b0
add edi, ecx
sub esi, 0x2dbc3487
rol esi, 3
xchg edi, ecx
add edx, 0x2dbcffcf
and ecx, esi
add esi, 0x2dbd796c
jmp 0x477987
call ebx
rol edx, 0x11
dec edx
sub ecx, edx
xor ecx, edx
sub esi, edx
mov edi, edx
mov edi, ecx
jmp 0x478f84
pop ebx
xor edi, ecx
sub esi, ecx
mov edx, edi
mov ecx, edx
or edx, 0x2dd04b19
sub edi, ecx
sub edx, esi
neg ecx
xor edx, ecx
or ecx, 0x2dd1939f
add edx, ecx
xchg edi, esi
dec ecx
add edi, edx
bswap edi
jmp 0x4760ba
push 0x26d7cf39
and esi, edi
and edx, ecx
sub edi, 0x2ddcf6de
and edi, ecx
and esi, ecx
inc ecx
xchg ecx, esi
xchg ecx, edx
or edi, esi
inc esi
jmp 0x478edd
pop ebx
xor edi, 0x2de031d9
ror edi, 0x16
ror edi, 0x1a
bswap ecx
shl edi, 0x12
xor edx, ecx
inc edx
jmp 0x47703f
call fcn.004763b0
xor esi, edi
nop
and edi, esi
shr ecx, 9
and esi, ecx
dec ecx
shl edx, 0x1b
jmp 0x475ee4
call ebx
inc edi
xor ecx, esi
add esi, edi
add esi, ecx
sub edi, ecx
add ecx, edx
jmp 0x475c3d
push 0x26dba5a7
neg esi
sub edx, edi
inc edx
xor edx, 0x2df79f95
add esi, ecx
and ecx, edx
and esi, edx
xor ecx, esi
add esi, 0x2df8df44
or edi, esi
xor edx, edi
jmp 0x478e75
pop ebx
and esi, ecx
mov edx, edi
and edi, 0x2dfc9e0f
shl edx, 8
bswap ecx
not ecx
mov esi, edx
xchg ecx, edx
or ecx, edi
jmp 0x478db2
pop ebx
and edx, ecx
add ecx, esi
sub edx, edi
xor esi, edi
or ecx, 0x2dff6001
xor edi, edx
add edi, esi
or edi, 0x2e0029f4
jmp 0x476c57
mov ebx, 0x33274000
mov edx, edi
add esi, ecx
mov edx, edi
xor esi, 0x2e0c6175
rol edi, 0x1a
add edi, edx
rol edx, 0x19
xor ecx, 0x2e0d6b27
inc ecx
xor edi, ecx
and esi, edi
or edi, ecx
or edx, edi
jmp 0x476413
push 0x26d81ad6
inc edx
sub esi, edi
xor ecx, edi
or edx, 0x2e144d70
and edx, edi
xor edi, ecx
sub esi, 0x2e1507ee
sub edi, edx
nop
add esi, edx
dec edi
shl edi, 0x1c
jmp 0x478510
pop ebx
sub esi, 0x2e1dd484
dec esi
xor edi, esi
mov edi, 0x2e1e8f76
xchg edi, edx
inc esi
mov edx, 0x2e1f5c60
add edi, edx
and ecx, esi
xor ecx, edi
or edx, edi
jmp 0x477971
pop ebx
or edx, esi
xor edx, ecx
and ecx, edi
xor edi, 0x2e2830c8
or ecx, edx
rol edi, 0x16
dec edx
dec esi
bswap esi
and edi, 0x2e29bda2
jmp 0x47767f
push 0x40
mov ecx, esi
add edx, ecx
jmp 0x477d45