Function at 0x401000
Capabilities:
Encrypt data using chaskey
Modify service

Disassembly:
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xfffffef5
jne 0x40109d
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.oleaut32.dll_VarAbs
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.kernel32.dll_CreateEventW
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.oleaut32.dll_VarAbs
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.kernel32.dll_CreateEventW
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xfffffee9
jne 0x401135
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
ret
call sub.user32.dll_GetDoubleClickTime
cmp eax, 0xfffffeeb
jne 0x40119b
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.oleaut32.dll_VarAbs
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xffffff0e
jne 0x401215
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.kernel32.dll_CreateEventW
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.oleaut32.dll_VarAbs
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.oleaut32.dll_VarAbs
call sub.oleaut32.dll_VarAbs
call sub.kernel32.dll_CreateEventW
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.advapi32.dll_ChangeServiceConfig2A
call sub.advapi32.dll_ChangeServiceConfig2A
ret
jmp 0x4785a4
shl edx, 0xd
jmp 0x478bab
push esp
sub ecx, edi
xor ebx, edi
and edi, ecx
or ecx, 0x9ed7f46c
xor edi, edx
add ecx, ebx
and edi, ecx
mov edx, ecx
mov edi, ebx
or ebx, edx
neg edi
jmp 0x4789c9
push 0x9a10778a
shr edx, 1
or ecx, ebx
shr ecx, 0x1a
mov edx, 0x9eea47e5
dec ebx
or ebx, edx
add edi, ecx
mov ecx, 0x9eec2be3
or edi, edx
mov ecx, 0x9eed2dcc
not ecx
shr edx, 2
jmp 0x47a79a
jmp loc.0047f000
push 0x99e7f77e
sub ebx, 0x9f08a8ab
ror edx, 0xe
add ecx, edx
rol edi, 0x10
jmp 0x47a9fc
pop esi
sub ebx, edx
xor ebx, edx
add ebx, 0x9f0b97fc
inc edx
xor edi, edx
ror edi, 0x19
xchg ebx, ecx
inc edi
add edi, ecx
or ebx, 0x9f0f2bca
xor ecx, 0x9f0f88d9
or edx, edi
rol ecx, 0xe
and edi, edx
jmp 0x47a68e
mov esi, 0x123b2f04
xchg ecx, edi
dec ecx
xor ecx, edi
shl edx, 0x1a
mov edi, ebx
xor edx, 0x9f2145a6
or edi, edx
sub edx, ebx
and edi, ecx
xor edx, 0x9f230566
xor ebx, edx
not ecx
ror edx, 0x10
shl ecx, 0x19
sub ebx, 0x9f279e21
jmp 0x47ab26
pop esi
neg ebx
xchg edi, ecx
bswap edi
jmp 0x479484
push 0x9a007f7c
and ebx, edi
xchg ecx, edx
or ebx, edi
ror ecx, 0x1a
bswap edx
and edx, ecx
shr edx, 8
jmp 0x478d65
push 0x99e9908b
add edi, edx
mov edi, ebx
mov ecx, edi
xchg edx, edi
rol edx, 0x1c
add edi, ebx
and edx, ebx
mov edi, ebx
jmp 0x479e3b
push 0x99ed4518
xchg ebx, edi
dec ecx
add edx, ecx
and edx, edi
neg ebx
xchg edx, edi
sub edx, ebx
ror ecx, 0x13
jmp 0x478e24
pop esi
or ecx, edx
neg ecx
xchg edx, ebx
bswap ecx
xchg edx, ebx
nop
jmp 0x4795a4
push esp
ror edx, 3
sub edi, ebx
shr ecx, 0x11
or edx, ebx
mov edx, 0x9f610b98
and ebx, ecx
or ecx, 0x9f61fb35
add edx, 0x9f6268c7
and edx, edi
xor edx, 0x9f63722f
jmp 0x4799b2
pop esi
xchg ecx, ebx
or ebx, edx
or edi, ebx
sub ebx, 0x9f763929
or edi, 0x9f76a354
shl ecx, 0x16
xor edx, ecx
xchg ebx, edx
sub ecx, edx
mov edx, 0x9f78bfe3
and ebx, edi
jmp 0x47a390
push 0x99ff1652
mov ebx, ecx
nop
ror edi, 0x16
add edi, 0x9f889375
not edi
or edi, ecx
sub ebx, ecx
mov ebx, ecx
or ecx, edi
add edx, ebx
jmp 0x47965a
mov esi, 0x123b2f04
bswap edx
dec ecx
or edi, edx
neg edx
sub ecx, 0x9f90e312
ror ecx, 0x10
or ebx, edi
shl edx, 0x13
xor edi, ecx
not edx
jmp 0x4786d4
push 0x99e5eb99
mov edi, ebx
add edx, ebx
add edx, edi
mov ecx, ebx
or edi, edx
add edx, ecx
add edi, ecx
shr ebx, 8
add edi, ebx
and ebx, ecx
xor edx, 0x9fa02358
jmp 0x4793c4
pop esi
xchg ecx, edx
mov edx, edi
shl edx, 0x16
add edx, 0x9fa8490a
or ecx, 0x9fa8bd55
sub edx, ecx
xor ebx, ecx
and ecx, 0x9fa9f87a
neg ebx
bswap edx
dec edx
add edi, 0x9fabcedf
jmp 0x47a340
mov esi, 0x123b2f04
mov edi, ecx
sub edx, ebx
xchg edi, ebx
xchg edi, ecx
xor edi, ecx
xor edx, 0x9fae90c0
bswap ebx
jmp 0x479ed5
pop esi
neg ebx
add ebx, edi
xchg edi, edx
xor ebx, 0x9fafced2
mov ebx, 0x9fb00287
mov ecx, ebx
bswap ebx
dec edi
inc ecx
jmp 0x47897b
pop esi
xor edx, 0x9fb2fbf5
or ebx, 0x9fb332b0
bswap ebx
xor ecx, 0x9fb39f26
xor edi, ebx
mov ebx, ecx
add edx, 0x9fb442f7
ror edi, 0xf
sub ebx, ecx
mov ebx, 0x9fb4de30
jmp 0x478bfd
push 0x99e78d97
xor ecx, edi
and edi, edx
add ecx, ebx
or edi, ecx
or ebx, ecx
and edi, edx
sub ecx, ebx
and ebx, 0x9ff52395
xor ecx, edi
xor edi, edx
jmp 0x479d08
push 0x9a0bf22c
shr edx, 4
sub ecx, edi
bswap ebx
xor edx, edi
add ebx, ecx
sub edx, ecx
xchg edi, ebx
xchg edx, ecx
jmp 0x4796a1
call esi
add ecx, 0x9ffc231b
inc edx
or edx, edi
xor edi, edx
mov edx, ebx
or edx, 0x9ffd254c
xchg edx, edi
bswap ecx
and edi, edx
xor ecx, 0x9ffe012e
add ecx, 0x9ffe3418
and ecx, edx
xchg ecx, ebx
and ebx, ecx
xor edi, ebx
jmp 0x47977d
push 0x99eb6b88
xchg ebx, edx
bswap edi
shr edi, 0xa
or edi, edx
not ebx
sub edx, edi
dec ecx
or ecx, edi
or edi, ecx
xchg ebx, ecx
jmp 0x47a5cc
push 0x99ed71e5
mov edi, 0xa011524d
add ebx, ecx
xor ecx, 0xa011b80a
or edi, ebx
shl edx, 0x1a
xor edi, ecx
add edx, ebx
neg edx
jmp 0x47922e
call esi
shl edx, 4
mov edx, ecx
add ebx, edi
or edx, ebx
sub ecx, ebx
bswap ebx
neg edi
neg ecx
jmp 0x47a506
mov esi, 0x2774562b
add edx, edi
bswap ecx
or edx, ecx
xchg ebx, edx
or edi, edx
dec ecx
mov edx, ecx
or ecx, edx
mov edx, edi
shr edi, 0x19
inc edx
or edx, ebx
mov ecx, edx
bswap edx
sub edx, edi
jmp 0x479f39
mov esi, 0x123b2f04
xchg edx, edi
mov edi, ebx
add ecx, ebx
ror ebx, 0x12
mov ebx, 0xa0b9a4ec
sub ecx, edx
xor edi, ecx
add edi, ebx
jmp 0x479615
push 0x99eb4100
sub edx, ecx
or edx, ebx
sub edx, 0xa0cc1b62
sub ecx, ebx
sub ecx, edi
sub ebx, ecx
sub edi, ebx
sub edx, ecx
and ebx, edx
jmp 0x478db4
call fcn.0047ac09
or edi, ecx
neg edx
and edi, ecx
mov ecx, ebx
shl edi, 8
jmp 0x479944
pop esi
mov edi, edx
neg ebx
or ecx, edi
add ecx, edi
sub ecx, edi
or edx, edi
sub edi, edx
or ecx, 0xa0f7e70d
or edi, 0xa0f81a1e
and edx, ecx
mov ebx, edi
or ebx, edx
shr edx, 0x1d
or edx, edi
dec edi
jmp 0x478b18
push 0x99e6244d
mov ebx, edi
and ecx, ebx
sub ebx, edi
sub ecx, edi
sub ecx, edi
xor ecx, 0xa105f16d
sub edi, 0xa1063392
jmp 0x478c2b
pop esi
or edx, edi
xchg ebx, ecx
shl ebx, 0x1d
mov edx, 0xa13e51bb
xchg edx, ecx
add ecx, ebx
sub edx, ebx
xor ecx, ebx
or ecx, ebx
sub ebx, edi
jmp 0x47a5e2
pop esi
shr edx, 2
bswap edx
add edx, edi
xor edi, 0xa147ea16
xor edx, edi
and edi, 0xa148cb80
rol edx, 0x1c
shr ebx, 0xa
or ecx, edx
jmp 0x4789b8
pop esi
or edx, ecx
sub ebx, edi
xchg edx, ecx
or ecx, edi
add ebx, 0xa18f324f
xchg edi, ecx
xchg edx, ecx
sub ebx, 0xa18ff08c
xor edi, ebx
mov ebx, 0xa1905818
or edx, edi
shl ecx, 3
mov edx, 0xa1910afc
jmp 0x47a8e1
push 0x99e9672d
inc ebx
xchg edx, edi
add ecx, ebx
xor edx, 0xa19f6af0
not edx
mov edx, ecx
add ebx, edi
add edx, 0xa1a036ac
jmp 0x4788fa
call fcn.0047ac09
and ecx, 0xa1a2bcee
inc ebx
or edx, edi
add edx, 0xa1a35926
xor edx, ecx
sub ecx, edx
or edi, edx
bswap edx
sub edi, 0xa1a496bb
neg edi
and ebx, ecx
add edx, 0xa1a5332b
jmp 0x47861f
call fcn.0047ac09
mov ebx, edx
xor edi, ecx
or ecx, ebx
or ebx, edx
xchg ebx, ecx
not ecx
or edi, ecx
mov edi, edx
xchg ecx, edx
sub ecx, ebx
xor ebx, ecx
add edi, ebx
and edx, ebx
and edx, ebx
or edx, ecx
jmp 0x479f1b
mov esi, 0x2774562b
add ecx, edi
shl edx, 0x17
sub ebx, edi
or ebx, edi
neg ebx
or ebx, ecx
and edx, ecx
and ebx, ecx
jmp 0x4792fe
push 0x9a0c2e78
mov edi, 0xa1e8f45f
and ebx, 0xa1e959c3
add ebx, ecx
shr ebx, 5
xor ebx, edi
add edi, edx
jmp 0x47a562
pop esi
xor ebx, 0xa2043d32
xor ebx, edi
bswap ecx
shr ecx, 3
jmp 0x47879d
pop esi
sub edi, ecx
rol edx, 0xa
xchg ebx, ecx
neg ecx
ror ecx, 6
neg edi
mov edx, 0xa2081518
sub ebx, 0xa2084844
jmp 0x47ab79
pop esi
add edx, ebx
not ecx
or ebx, edx
or edi, ecx
and edx, 0xa212fbc1
xor edx, 0xa2132f1d
not ecx
or ebx, edi
inc ebx
add edx, edi
add edx, edi
jmp 0x47a66b
call esi
add ecx, 0xa21480b2
shl ecx, 0xd
bswap ebx
sub ebx, edx
and edi, edx
or ecx, 0xa21586ca
xor edx, 0xa215bdd4
mov edi, ecx
shl ebx, 4
mov ecx, 0xa216632d
jmp 0x478a5c
call esi
ror ebx, 3
sub edx, ecx
and edi, ebx
xor edx, 0xa268984c
xor ecx, edi
rol ecx, 0x1b
xor ecx, ebx
xor ecx, 0xa2696be0
or edi, edx
add edx, 0xa269edd1
jmp 0x47a583
push 0x40
mov edi, 0xa26e9f44
xchg ecx, edi
sub ecx, edi
and ebx, edi
dec edx
sub edi, edx
xor edx, ecx
jmp 0x47a00d
push 0x401400
and edi, ebx
dec ebx
xchg ecx, ebx
and edx, 0xa29f2600
xchg ecx, edx
add edx, ecx
jmp 0x4797a0
push 0x99e7b467
add edx, edi
or edx, ecx
shl ebx, 0x18
sub ebx, edi
inc edi
jmp 0x478785
call esi
xor ebx, edi
or ebx, edx
and ecx, 0xa2fbef6b
and ecx, edx
sub ebx, edx
mov ecx, 0xa2fc9e5b
mov edi, ebx
and edx, edi
or ecx, edi
mov edx, edi
sub edi, ebx
xor ebx, edx
xor edx, 0xa2fe88e7
or ecx, ebx
sub ecx, 0xa2ff6e30
jmp 0x4796f9
push 0x99e9bd46
add edi, 0xa30edebc
xor edi, 0xa30f156b
ror edi, 6
ror edi, 0x13
or ebx, edx
xor edx, ebx
xchg ecx, edx
sub ecx, 0xa31081d3
bswap ebx
jmp 0x47907a
call fcn.0047ac09
rol ebx, 0x19
add edx, edi
mov ecx, edx
xor edi, 0xa31d9102
not ebx
ror ecx, 0xf
or edx, ecx
add ebx, 0xa31e651b
xor ecx, 0xa31ed03d
mov ebx, 0xa31f0731
jmp 0x478e8f
call esi
and ecx, ebx
bswap edx
ror ecx, 0x11
not ebx
add ebx, 0xa32792bf
shl ecx, 0x1a
ror edx, 5
not ecx
jmp 0x479f98
call fcn.0047ac09
bswap edx
sub edi, ecx
sub edi, 0xa32924ac
shr edx, 7
xchg edx, ecx
mov edx, ecx
and ecx, edx
bswap edi
mov edx, ecx
jmp 0x478d80
call esi
or ebx, edx
shl ebx, 0x11
jmp 0x47a98e
pop esi
mov edx, 0xa32e93f6
shr ecx, 0xe
rol ebx, 0xf
ror ecx, 0x19
bswap ecx
and ecx, edi
and edi, edx
xchg edi, ebx
or edx, edi
xchg edx, edi
neg ebx
xchg ebx, edx
and edi, edx
jmp 0x479398
push 0x771a4
add ebx, ecx
mov edi, edx
or ebx, 0xa3491a38
mov ecx, edx
and edi, ebx
nop
add edi, 0xa34a315a
sub ecx, 0xa34a6491
xchg ebx, edi
ror ecx, 0x13
dec ebx
mov ebx, edx
shl edi, 0x1c
and edx, edi
sub edx, 0xa34bf9c4
jmp 0x479a4c
call fcn.0047ac09
rol ebx, 0xa
or ebx, 0xa34c796a
and ecx, ebx
and edx, ecx
bswap edx
add edx, 0xa34d471a
mov ebx, edi
ror edi, 0xf
xor edx, edi
jmp 0x47a30b
push 0x9a0031fe
or edx, 0xa3d84f06
xor ecx, edi
sub ebx, ecx
and ebx, 0xa3d8fc50
mov edx, ecx
mov edx, edi
add ebx, ecx
xchg edx, edi
jmp 0x4788e0
call esi
xor edi, 0xa3ea75ef
or edx, ebx
add ebx, ecx
sub ebx, edx
xchg ebx, edi
sub edi, ecx
add edi, ebx
add edi, edx
add ebx, edi
xchg ecx, ebx
sub ecx, edi
xor ebx, 0xa3ecac6b
jmp 0x47a446
pop esi
add edx, edi
shl edx, 0x1c
or ebx, edi
and edi, ebx
and ecx, ebx
xor edx, 0xa3eeebe0
add edx, ebx
sub ecx, ebx
shl edx, 4
rol edi, 7
mov edi, 0xa3efedb7
sub ebx, edx
jmp 0x478c47
push 0x9a104b6e
add edx, ebx
xor ebx, ecx
add ebx, edi
mov ebx, ecx
or edx, edi
and ecx, 0xa3f3ba5f
mov edx, edi
not edx
xchg ebx, ecx
and edi, edx
inc edx
mov ebx, edx
jmp 0x4786a7
pop esi
and ecx, edi
xchg edi, ecx
sub edi, 0xa4051fff
ror edi, 0xe
shl edx, 1
add ebx, edx
add ebx, edi
xchg edi, edx
or ecx, edx
jmp 0x4788d4
pop esi
or edi, ebx
not edi
inc ebx
sub edi, 0xa4160c0f
xchg edi, ecx
mov ecx, ebx
xchg edi, ecx
mov ecx, edx
jmp 0x47972b
pop esi
sub edi, edx
shl edx, 0x1b
mov ecx, edx
mov ebx, 0xa4229c48
shl edx, 0x15
or ecx, edx
add ecx, edi
xor edx, ecx
mov ebx, 0xa423ae4e
or edx, edi
sub edx, ecx
not ecx
shr ecx, 0xc
jmp 0x479466
push 0x99eb14d5
rol ebx, 0x14
xor edx, edi
add edi, ecx
ror edi, 0x18
xchg edi, ecx
add ebx, edx
xchg edi, ecx
or edi, ecx
add edi, ecx
or ecx, ebx
xor edi, 0xa427a662
and edx, edi
shl edi, 0xb
xchg ebx, edi
and edi, 0xa428c42d
jmp 0x4792c4
push 0x9a0c5b74
shl ebx, 0x17
mov edi, ebx
sub edi, ecx
xor ecx, edx
neg ebx
sub edi, ecx
or edx, ecx
sub ebx, edi
mov edi, ebx
sub ebx, edi
or edx, ecx
jmp 0x47ab5c
pop esi
sub ecx, 0xa42ba620
or ecx, edi
or ecx, edx
xchg ecx, edx
or ecx, edx
mov edx, edi
jmp 0x47a23a
push 0x99eb9231
neg edx
xor edx, edi
mov ebx, edi
mov ecx, ebx
mov ebx, edi
add ecx, edi
jmp 0x47882f
push 0x99e763d0
and edi, 0xa4395b45
add edx, edi
add edi, ebx
bswap edi
sub edi, 0xa43a4fbe
jmp 0x478d43
pop esi
mov edx, edi
mov ebx, edi
rol edi, 0x1c
add ebx, edi
xchg edi, ebx
or edi, ebx
or ecx, 0xa443e800
mov ecx, edi
xor edx, ecx
add edi, edx
and edx, ebx
bswap edi
jmp 0x47951c
pop esi
or edx, 0xa4456bc2
shl ebx, 0x13
and edi, ecx
xor edi, ecx
sub ebx, ecx
not ebx
and edx, 0xa446cb61
ror edx, 0x12
add edi, ecx
xor edx, ebx
jmp 0x47a4ed
push 0x9a10a3c8
and edx, edi
bswap edi
and ecx, edx
and edi, ebx
and edx, ecx
jmp 0x47ab39
call fcn.0047ac09
sub edx, ecx
mov edx, 0xa4cc1c83
or edi, edx
xor edx, ecx
sub ecx, 0xa4ccc3bd
or ebx, edi
jmp 0x479de7
push 0x99eae8f2
ror edx, 0xb
mov ecx, ebx
mov edx, edi
or edx, 0xa4d6a604
xchg ebx, edx
mov ecx, 0xa4d71a93
or ebx, ecx
neg edx
mov edi, 0xa4d7b9be
or edx, ecx
sub ecx, edi
ror ecx, 0x13
jmp 0x47a52f
pop esi
and ecx, 0xa53da280
sub ebx, edx
xor edi, edx
ror edi, 2
jmp 0x478c64
mov esi, 0x2774562b
or ebx, edi
add ebx, ecx
neg ecx
and edi, edx
and edi, ecx
xor edx, ecx
add edi, edx
sub edx, ecx
xchg ecx, ebx
mov edi, 0xa55073f7
jmp 0x47a045
call fcn.0047ac09
rol ecx, 0x18
add edx, ebx
and edi, ecx
add edx, ebx
jmp 0x479f5a
push 0x9a10ca03
and edx, ecx
and ebx, edx
or ebx, ecx
and edx, ecx
mov edi, edx
xchg ecx, edi
sub edi, ecx
sub edi, edx
xor edx, ebx
and edi, ebx
xor edx, edi
inc ebx
mov edx, edi
jmp 0x478b6b
mov esi, 0x123b2f04
shr ecx, 5
or ecx, edx
xchg edx, ecx
sub ecx, edi
xor edx, ecx
add ebx, ecx
xor ecx, edi
add ebx, ecx
xchg ecx, ebx
jmp 0x47a82e
mov esi, 0x4132136a
add ebx, edx
inc ebx
and ecx, edi
add edi, ecx
ror ebx, 0xb
mov edi, edx
jmp 0x4795e4