Function at 0x401000
Capabilities:
Encrypt data using chaskey
Get file attributes
Hash data using murmur3

Disassembly:
call sub.user32.dll_GetMessageTime
cmp eax, 0xfffffed6
jne 0x401098
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_MapVirtualKeyExA
call sub.ntdll.dll_ZwQueryInformationFile
call sub.kernel32.dll_GetTapeParameters
call sub.kernel32.dll_GetTapeParameters
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_MapVirtualKeyExA
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_PostThreadMessageW
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_MapVirtualKeyExA
call sub.kernel32.dll_GetTapeParameters
call sub.ntdll.dll_ZwQueryInformationFile
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_PostThreadMessageW
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_MapVirtualKeyExA
call sub.kernel32.dll_GetTapeParameters
call sub.kernel32.dll_GetTapeParameters
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xffffff12
jne 0x401126
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_MapVirtualKeyExA
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_PostThreadMessageW
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_PostThreadMessageW
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_PostThreadMessageW
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_MapVirtualKeyExA
call sub.kernel32.dll_GetTapeParameters
call sub.kernel32.dll_GetTapeParameters
call sub.kernel32.dll_GetTapeParameters
call sub.ntdll.dll_ZwQueryInformationFile
call sub.ntdll.dll_ZwQueryInformationFile
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_MapVirtualKeyExA
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_PostThreadMessageW
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_MapVirtualKeyExA
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xfffffefb
jne 0x4011a5
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_PostThreadMessageW
call sub.kernel32.dll_GetTapeParameters
call sub.ntdll.dll_ZwQueryInformationFile
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_PostThreadMessageW
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_PostThreadMessageW
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_MapVirtualKeyExA
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_PostThreadMessageW
ret
call sub.user32.dll_GetShellWindow
cmp eax, 0xffffff22
jne 0x401247
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_PostThreadMessageW
call sub.ntdll.dll_ZwQueryInformationFile
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_PostThreadMessageW
call sub.user32.dll_MapVirtualKeyExA
call sub.ntdll.dll_ZwQueryInformationFile
call sub.kernel32.dll_GetTapeParameters
call sub.ntdll.dll_ZwQueryInformationFile
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_MapVirtualKeyExA
call sub.kernel32.dll_GetTapeParameters
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_PostThreadMessageW
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_PostThreadMessageW
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_MapVirtualKeyExA
call sub.user32.dll_MapVirtualKeyExA
call sub.ntdll.dll_ZwQueryInformationFile
call sub.kernel32.dll_GetTapeParameters
call sub.user32.dll_MapVirtualKeyExA
call sub.kernel32.dll_GetTapeParameters
ret
jmp 0x475649
xchg ecx, edi
sub edi, edx
sub ebx, ecx
sub ebx, 0xcce854c9
xor edx, ecx
sub edi, ebx
add ebx, 0xcce8e7d8
xor edi, 0xcce91a73
jmp 0x4774b3
mov esi, 0x183c2e20
neg ecx
or ecx, edx
sub edx, ecx
mov edi, 0xced8a16c
xor edx, 0xced8d213
ror ebx, 0x1c
sub edi, edx
sub ebx, edx
jmp 0x4773e4
pop esi
xor edx, 0xced9a771
inc edi
xor ebx, 0xceda0a38
sub ebx, 0xceda3bea
dec edx
dec ecx
shl ecx, 0x14
or ebx, 0xcedb0cbb
or edx, ebx
sub edx, edi
and edi, edx
xor ecx, edx
jmp 0x47741d
push 0xccf1cdf2
add ebx, edi
xor edx, ecx
not edi
sub edi, ebx
sub ecx, 0xcee88c0b
inc edi
or edi, ecx
bswap ecx
ror edi, 3
jmp 0x47894a
mov esi, 0x43370267
inc ecx
or edi, ebx
or ebx, edx
and ecx, ebx
xor ebx, ecx
or edx, edi
shl edi, 0x18
jmp 0x4776e6
push 0xccf7285b
inc ebx
or ebx, 0xcef5f7ee
or edi, ebx
sub ebx, ecx
and ebx, edi
and edi, edx
and edx, 0xcef6f149
and ebx, edi
jmp 0x476dc9
push 0xccecf3ae
xchg edi, edx
ror ecx, 0x18
inc edi
mov ecx, ebx
not ebx
or ecx, ebx
sub ecx, ebx
or edi, ecx
jmp 0x476a19
mov esi, 0x43370267
inc edx
shr edi, 0x17
shl ebx, 0x1a
sub ebx, edi
mov edi, ecx
or ebx, 0xcf029fed
shr edi, 0x1c
sub edi, ecx
or edi, 0xcf033251
jmp 0x479023
pop esi
mov edx, 0xcf090bb3
add edx, ebx
ror ebx, 0x15
ror edx, 4
and edx, ebx
mov ebx, 0xcf09fc00
add edi, ecx
ror edx, 7
dec ecx
mov edx, ecx
xor ebx, 0xcf0af727
and edi, ecx
and edx, edi
ror edi, 3
jmp 0x4778a1
pop esi
mov edx, 0xcf0dc78d
neg edx
add edi, 0xcf0e2b51
and edx, ebx
nop
add ecx, 0xcf0eba9f
nop
add ecx, edx
ror edi, 0x1a
or ecx, edi
sub ecx, ebx
jmp 0x47696b
push 0xccf3bebd
rol ecx, 0x17
and ecx, edi
inc edx
neg ecx
or edx, ecx
sub edi, edx
neg ecx
sub edx, edi
xor ebx, ecx
or ebx, edi
or ecx, edi
or ebx, edi
add edi, 0xcf124396
jmp 0x47948b
push 0xccf396ac
shr ebx, 0x11
xchg ebx, ecx
xor edi, ebx
and ecx, edi
xor ebx, edi
or edi, ecx
shl ebx, 0x17
add edx, edi
shl ecx, 0x11
shr ebx, 0x14
jmp 0x475a58
call fcn.00476d42
xor ebx, 0xcf1cf11d
and ebx, edi
xor edx, ebx
and edx, ecx
xchg ebx, edi
mov edi, 0xcf1dde8a
xor edi, ebx
shl edi, 0x10
rol ecx, 0x1a
and ebx, edi
sub ecx, edi
xor edi, edx
xor edx, edi
jmp 0x4797a6
pop esi
xor ecx, edi
mov edi, edx
sub edi, ebx
or ecx, 0xcf200e40
xor edi, 0xcf203f6e
and edx, 0xcf206fba
mov edx, 0xcf20a165
or edi, edx
and edx, ecx
add edx, ebx
or ecx, edi
or ecx, edi
jmp 0x4762de
pop esi
or edx, ebx
xchg ebx, edx
mov edi, edx
xchg ebx, ecx
rol ebx, 0x17
and ebx, ecx
add ecx, edi
jmp 0x47846d
push 0xcced4453
shl edx, 0xf
or edx, ebx
not edx
xor edi, 0xcf2ad11e
or edi, ecx
xchg ebx, edi
xor edi, ebx
mov edi, edx
mov edx, 0xcf2bca40
xchg edx, ecx
jmp 0x4756ba
call fcn.00476d42
xor ecx, edx
or edx, ecx
xchg edx, ecx
inc edi
sub ecx, ebx
and ecx, ebx
mov ecx, edi
and edx, ebx
bswap edx
jmp 0x47756c
mov esi, 0x43370267
and ecx, ebx
neg edi
jmp 0x4786f7
pop esi
add edi, 0xcf444116
mov ebx, edx
or ebx, 0xcf44a9a0
jmp 0x476c34
call esi
bswap ecx
xchg edx, ebx
xchg edx, edi
not ecx
or edx, 0xcf57e542
add ebx, edi
jmp 0x4778e4
push 0xccf17e7f
and edx, edi
mov edi, edx
xor edx, 0xcf58b311
xor ecx, edi
or ebx, edx
shl edx, 8
inc ecx
or ebx, edx
and edx, ecx
sub edx, 0xcf5a0eda
jmp 0x476baf
pop esi
mov ebx, ecx
shr ecx, 0x17
xor ebx, 0xcf5adefc
jmp 0x47683f
push 0xccf56155
mov edi, 0xcf63fa5b
dec edi
xchg ecx, edx
mov edi, ecx
mov ecx, 0xcf64c586
xor ebx, ecx
dec ebx
shl ecx, 3
or edx, edi
jmp 0x4786ba
push 0xccf6fee5
and edx, ecx
xor ebx, 0xcf8cde07
dec edx
nop
or ebx, 0xcf8d7335
ror edi, 0x16
xchg ebx, edx
and edx, 0xcf8e1256
xchg edx, ebx
sub ecx, edx
jmp 0x47586e
jmp loc.0047c000
call esi
xor edi, 0xcfccb4fb
sub ecx, edx
or edx, ecx
sub edx, ecx
sub edx, ebx
add ecx, edi
mov edi, ecx
sub ebx, edx
bswap ecx
xor ebx, ecx
mov ecx, edi
and ebx, 0xcfcec575
xchg edx, ecx
jmp 0x475e02
pop esi
xor edx, ecx
and ecx, ebx
xor edx, ebx
or ebx, 0xcfd641d7
not ebx
xor edx, edi
sub edi, 0xcfd6dff2
not edx
xor ebx, 0xcfd74229
mov edx, edi
jmp 0x47980c
push 0xcceec32e
xchg ecx, ebx
ror edx, 6
add edi, edx
xor ebx, ecx
not edx
xor edi, ecx
xor edi, ebx
rol edx, 0x16
add ecx, edx
add edx, ecx
jmp 0x476923
pop esi
xor edx, edi
xchg edx, ebx
nop
add edx, ecx
or ebx, edi
and edi, ecx
and ecx, ebx
and ebx, edx
add edi, ecx
xor ebx, edi
jmp 0x478aae
push 0xcceeed33
sub edx, 0xcfe4cecb
or edi, ebx
mov edi, 0xcfe52fd5
bswap edx
mov edi, ecx
xchg edi, ebx
xor edi, ecx
jmp 0x477d19
pop esi
shl edx, 0xe
mov ebx, ecx
sub edx, ebx
and edx, ebx
xor ebx, edi
ror edx, 0x15
sub edi, ecx
dec ebx
inc ecx
sub ebx, ecx
sub ecx, edi
sub edx, ecx
or edx, ebx
jmp 0x4756dc
pop esi
not edi
xchg edi, edx
sub edx, ebx
bswap edi
add ebx, edi
xchg edx, ecx
inc edi
jmp 0x477301
push 0xcced1bb4
shr ecx, 1
mov edi, edx
rol edx, 3
mov edi, ecx
xor edi, 0xcff5ba6b
not edi
mov edx, 0xcff6279e
xor ebx, ecx
shr edx, 0x14
or ebx, edx
sub ebx, edx
jmp 0x475c21
call esi
and ecx, ebx
xor ebx, edx
mov edx, edi
xor ecx, 0xcffa8576
and ebx, ecx
sub ecx, ebx
sub ebx, edx
jmp 0x47713b
push 0xccf1a643
or ebx, ecx
sub ebx, ecx
add ecx, edx
jmp 0x47577e
pop esi
not edi
xor edi, 0xd041ae0f
dec edi
shl ecx, 0x1c
add edi, edx
xor edx, edi
add ecx, edx
or ebx, edi
and edx, ebx
xchg ebx, edi
sub ebx, ecx
shl edx, 0x1d
shr edx, 0x1e
shr ecx, 0x1a
add edx, ecx
jmp 0x4759d9
push 0xccf155ea
xchg ebx, edx
xor edx, ebx
not ecx
sub ecx, ebx
xchg edi, ebx
sub edx, 0xd04568c0
inc ecx
or ebx, ecx
and edx, ebx
mov edx, ecx
add edx, ebx
jmp 0x475f5d
push 0xccfc1f1a
xor edx, ecx
sub edx, ecx
sub edi, ecx
mov ebx, ecx
and ecx, edi
or edi, ecx
and ebx, edx
jmp 0x47734b
push 0xccf750f7
mov edi, ebx
mov edx, 0xd0585466
mov edx, ebx
mov edi, ecx
xor edx, 0xd058e0fe
nop
mov ecx, edi
dec ebx
xchg ecx, ebx
jmp 0x475db7
push 0xccfacaee
shl ecx, 0xc
xor edi, ebx
not edi
rol edx, 0xa
xor edx, ecx
and edx, ebx
bswap ecx
jmp 0x477149
pop esi
mov edx, ebx
inc ecx
mov edx, 0xd071db4c
jmp 0x47921c
push 0xccef3b00
sub ebx, edx
xchg edi, ebx
neg edi
shr edi, 0xe
shr ecx, 0xd
xor ebx, edi
jmp 0x47579e
call esi
xor edx, edi
neg ebx
not ebx
shl edi, 0x1f
xor ecx, 0xd07e5afb
mov ebx, ecx
and edi, ebx
and edi, ebx
xor edi, ebx
jmp 0x4788b0
pop esi
dec ecx
shr ebx, 0x13
sub edi, ebx
not ebx
jmp 0x475bb5
mov esi, 0x183c2e20
shr ecx, 0x1e
sub edx, 0xd08db31b
xor edi, ecx
neg ebx
nop
xor ecx, edi
xchg edx, ebx
add edi, edx
and ecx, ebx
mov ecx, ebx
shl ecx, 0xa
jmp 0x47869c
pop esi
sub edx, edi
and edi, 0xd0a746f8
sub edx, ebx
shr ebx, 0xc
xor ecx, ebx
sub ebx, edi
xor ebx, edi
sub ebx, 0xd0a8723c
sub edx, ebx
jmp 0x47829f
pop esi
sub ecx, 0xd0a8e80e
shr edx, 0xf
sub edi, ebx
and ebx, edi
neg ebx
sub ecx, edx
and ecx, edi
xchg ebx, edx
shr edi, 9
bswap edx
jmp 0x4792b5
push 0xccfc481a
add edx, ebx
and edi, ecx
sub edx, 0xd0abe255
mov ebx, edi
sub edx, 0xd0ac411b
sub ebx, ecx
jmp 0x478bbc
push 0xccf875b5
bswap edi
or ecx, edi
and edx, ebx
sub edx, ebx
or edi, 0xd0af2ee6
neg edi
sub edx, edi
jmp 0x477ed8
call fcn.00476d42
shl ebx, 0x12
xchg edx, ebx
mov ebx, ecx
and ebx, 0xd0b540fc
add edi, ebx
jmp 0x4775aa
pop esi
neg ebx
and ebx, ecx
add edi, ecx
and ecx, edi
neg ecx
and ecx, 0xd0b857a0
add edi, edx
jmp 0x477322
push 0xccec95cf
and ebx, ecx
shr ebx, 0xb
add edx, 0xd0c122e6
mov ebx, edi
mov ecx, ebx
jmp 0x4792a0
pop esi
or edx, 0xd0c4428b
dec ebx
sub ebx, ecx
xor edi, edx
or edi, 0xd0c5069a
add ecx, edi
sub ecx, 0xd0c566ef
sub edx, ebx
mov ebx, 0xd0c5d3ea
xor ebx, edi
dec edx
mov edi, ebx
jmp 0x478ebc
call esi
or edx, ebx
mov ecx, ebx
sub edx, 0xd0cad00c
or ecx, 0xd0cb0baa
add ebx, ecx
jmp 0x4769d1
call esi
or edx, edi
add edx, edi
shl edx, 0x1b
jmp 0x4779b4
push 0xccf53842
add edx, edi
shr ecx, 2
add ecx, edi
or edi, edx
ror ecx, 0x1b
xor edx, ecx
mov ecx, ebx
jmp 0x476011
call fcn.00476d42
xor edx, ebx
sub ecx, edi
or edx, edi
add ecx, edx
and edx, edi
add edi, edx
inc edi
jmp 0x477855
call esi
and edi, edx
xchg edi, ecx
add edx, ebx
not edx
xor ecx, ebx
add ecx, edx
add ecx, ebx
rol edi, 0xb
mov edi, ebx
jmp 0x47972b
push 0xccfbf3eb
xor ebx, edx
bswap edi
sub edi, ecx
and edi, 0xd0f92358
add ecx, edi
or ecx, edx
jmp 0x476d00
pop esi
neg edx
add edx, 0xd0fc0023
xchg edx, edi
sub ecx, 0xd0fc6361
bswap ecx
xor ebx, 0xd0fcc590
jmp 0x479543
mov esi, 0x43370267
add ecx, edi
add ebx, edi
dec edx
xchg edx, edi
and edi, edx
and edx, edi
nop
add edx, ebx
add edx, 0xd1025aff
xchg ecx, edx
dec ecx
mov ecx, 0xd102ed9c
sub edi, ebx
jmp 0x4781c2
pop esi
shl ebx, 0x1f
ror ecx, 9
or ebx, edx
neg edx
xor edx, ecx
add edx, edi
jmp 0x4774f3
mov esi, 0x183c2e20
xchg ecx, ebx
and ecx, edx
mov ebx, 0xd11b0a06
sub edi, 0xd11b3b98
and ecx, 0xd11b6ce3
mov ebx, edi
and edx, edi
xchg edx, ebx
mov edi, ecx
sub edi, ecx
jmp 0x477e60
mov esi, 0x43370267
add ecx, ebx
sub ecx, edx
and edx, ecx
and ebx, 0xd11eb9d6
xchg edx, edi
jmp 0x479846
pop esi
and ecx, edi
xchg ebx, edx
mov ebx, edi
or ebx, edx
or edx, edi
sub edx, edi
mov ebx, ecx
mov edx, ebx
xor edx, edi
shl edi, 0x1f
mov edx, 0xd12f3cdd
add ebx, edx
add edi, ecx
mov edx, ebx
or ecx, ebx
mov ebx, edi
jmp 0x477383
push 0xccef140a
or ecx, edi
dec edi
sub ebx, ecx
sub edi, 0xd13d2c3a
inc edi
xchg ebx, edi
mov edi, edx
and edi, edx
jmp 0x47700a
call fcn.00476d42
not ecx
sub edx, ebx
xor edi, ebx
sub edx, ebx
and edi, ebx
xor ebx, edi
add ecx, edi
sub ecx, ebx
jmp 0x477037
push 0xccf8a0e1
mov edi, ecx
inc edx
neg ebx
rol ecx, 0x1b
xchg edi, ecx
mov ebx, edi
jmp 0x477940
call fcn.00476d42
xchg edi, edx
mov ebx, edi
add ebx, edx
and edi, ebx
sub edi, edx
xchg ebx, edi
mov edi, ecx
or ebx, edi
neg ecx
jmp 0x478d69
pop esi
rol edi, 0x1e
add ecx, ebx
rol edx, 6
add edx, 0xd1a80afc
and edx, ebx
xor edx, ecx
mov edx, edi
xchg ebx, ecx
and edx, edi
or edi, edx
xchg ebx, edi
add edx, 0xd1a99377
sub ebx, ecx
not ebx
jmp 0x479397
push 0xccf9a0a3
xchg edx, edi
or ebx, ecx
xchg ecx, ebx
neg edx
shr ecx, 0x11
xor edx, edi
sub ecx, ebx
bswap edx
shl edx, 0x14
jmp 0x477b44
pop esi
and ebx, edi
add edx, ebx
sub edx, edi
nop
add edx, ebx
add ebx, edi
or edx, ebx
add edx, ebx
sub ebx, edi
or ebx, ecx
jmp 0x475b63
pop esi
xchg edi, ebx
sub ecx, edi
xchg edx, edi
mov edx, ecx
sub edx, edi
jmp 0x475f83
call fcn.00476d42
bswap edx
sub edi, 0xd1e39997
and ecx, edi
xchg edx, ecx
mov ecx, ebx
ror edi, 0xd
ror edx, 0x1d
jmp 0x47677d
push 0xccf58add
xor edx, ebx
add edx, ebx
or edi, ecx
inc ecx
add ecx, ebx
xor ecx, ebx
mov edi, edx
xor edi, ebx
jmp 0x478993
call fcn.00476d42
inc edi
or edi, 0xd1e87aee
neg ebx
not edx
xor edx, 0xd1e90f93
and edx, 0xd1e940e3
ror ebx, 0xb
mov edx, edi
or edx, 0xd1e9dbce
jmp 0x475f46
pop esi
sub edx, 0xd200c4dc
mov edi, ecx
mov edx, ecx
and ecx, 0xd2015b82
and ebx, ecx
mov ecx, ebx
xchg edx, edi
xor edi, ecx
jmp 0x476c5f
push 0xccf1f62e
or edx, ebx
xchg edx, ecx
xchg edx, ecx
xchg edx, ecx
or edx, ebx
inc ecx
dec ebx
and ecx, ebx
and ebx, ecx
ror edi, 0xd
or edi, ecx
or edi, ecx
dec ebx
jmp 0x478e2e
push 0xccf5b3df
dec ebx
shl edi, 2
and ebx, edi
and ebx, ecx
xor edi, 0xd20edfbf
mov edi, edx
shr ecx, 5
rol ecx, 0xc
jmp 0x47593b
push 0xccfa769a
mov edi, ebx
xchg ecx, edx
xor edx, edi
or edi, ecx
sub ecx, 0xd21f5653
dec edi
inc edx
inc edx
jmp 0x4791ff
mov esi, 0x183c2e20
sub edi, 0xd22e0c9c
add edx, edi
add edx, ecx
add edx, 0xd22e99d7
add ecx, 0xd22eca00
xchg edx, edi
or edi, edx
or ebx, edx
mov ebx, ecx
sub edx, ebx
or edi, 0xd22ff0bb
sub edi, 0xd23021a7
jmp 0x47642b
call esi
mov edi, ebx
xor edx, 0xd24658fd
sub ecx, ebx
or ebx, edx
sub ebx, ecx
or edi, ebx
nop
rol ebx, 0xc
add edi, edx
jmp 0x476819
call esi
shl edx, 0x16
add ecx, 0xd2482102
or edx, 0xd2485208
mov edx, ecx
add ecx, ebx
and ebx, ecx
sub ecx, edx
not ecx
ror edi, 0x19
ror edi, 0x12
add ebx, edi
jmp 0x47685f
mov esi, 0x183c2e20
or ecx, ebx
add edx, 0xd24f4c5a
or edx, edi
mov ebx, 0xd24face4
xchg edi, ecx
xchg edi, edx
mov edx, ebx
xchg ecx, ebx
or edx, ecx
and ebx, edi
xchg edi, ebx
jmp 0x475d2b
mov esi, 0x183c2e20
or ecx, 0xd251489b
add edx, ecx
rol ebx, 6
sub edi, ecx
sub ebx, 0xd2521566
neg ebx
or edx, edi
bswap edi
ror ebx, 5
inc ebx
shr ecx, 0x13
shr edx, 6
jmp 0x475b36
pop esi
sub ebx, ecx
mov edi, 0xd259d144
sub edx, ecx
sub ecx, edx
sub edx, edi
neg edi
add edx, ecx
rol edx, 0x15
and edx, ebx
jmp 0x478519
call fcn.00476d42
rol edi, 0xc
mov edi, edx
add edx, 0xd26c9f60
dec edx
add ebx, ecx
xor ebx, 0xd26d3b0d
dec ecx
xchg ecx, edx
or edx, edi
shr ecx, 1
shl edi, 0x19
and ecx, edi
jmp 0x476a6a
pop esi
bswap ecx
or edx, ebx
xor edx, ebx
add edx, edi
add edi, edx
shl ecx, 0x15
and edx, 0xd278327d
sub ebx, edx
rol edi, 6
and edx, edi
mov edx, edi
sub edi, ecx
jmp 0x4796f1
push 0xccfaa24d
xchg ecx, edx
or ecx, edi
mov ecx, ebx
xor edx, ecx
sub ebx, ecx
mov edx, 0xd28e3c8b
mov ecx, edx
or edx, ecx
jmp 0x476f4a
push 0xccf0852d
xor ecx, edx
xchg ebx, edi
xchg edi, edx
sub edx, ebx
mov edx, 0xd28f9e7b
ror edx, 0x11
or edx, ecx
bswap edx
add edx, edi
shl edx, 0x13
jmp 0x477afe
push 0xcceccaae
or edx, ebx
sub ecx, edx
neg edx
rol ebx, 0x1b
xchg ebx, edx
jmp 0x475921
push 0xccf36e0a
add edi, edx
and ebx, ecx
add ebx, edx
and ebx, ecx
or ebx, edx
or ecx, edx
or ebx, edx
dec ecx
jmp 0x475a9a
pop esi
xchg edx, edi
xor ebx, edx
shr edx, 0x14
or edi, ebx
mov edx, 0xd2a3e0be
mov ecx, 0xd2a4127f
or edx, edi
not edi
or edx, ecx
or ecx, edx
bswap edx
add edx, 0xd2a568fe
add ebx, edx
mov edx, edi
not edi
jmp 0x47761e
push 0xccf3e8b0
xor edi, edx
xchg edx, ecx
and ecx, ebx
sub ecx, edx
ror edx, 8
sub edx, ecx
add edi, ebx
xor ebx, edi
mov ecx, edx
or ecx, ebx
jmp 0x478e07
pop esi
rol edx, 0x12
xor ebx, 0xd2bdaddb
or ebx, edx
mov edi, edx
dec edx
xor ebx, edx
sub edi, edx
shl edi, 5
mov edx, ebx
mov ebx, ecx
add edi, ecx
bswap edi
sub edi, edx
mov ebx, edi
mov ebx, edx
mov edi, ebx
jmp 0x477c2f
pop esi
dec edx
rol edx, 4
mov ebx, 0xd2d63861
add edx, ecx
sub edi, ecx
sub edi, ebx
mov edi, edx
and edi, edx
or edi, ecx
ror edi, 1
jmp 0x476f86
pop esi
or edi, ebx
xor ebx, ecx
add edx, 0xd2d9b01a
or ecx, 0xd2d9e113
dec ebx
xchg ecx, edx
neg ecx
jmp 0x4790e2
call esi
shl edx, 0xf
mov ecx, edx
dec ecx
xor ecx, 0xd2dffd2f
xor edi, ebx
jmp 0x475a32
pop esi
add edx, 0xd2e52668
sub edx, ecx
mov ebx, edi
ror ebx, 0x11
sub ecx, 0xd2e5e63a
xor ebx, ecx
mov edx, 0xd2e64738
and ebx, edx
xchg ecx, ebx
jmp 0x478340
call fcn.00476d42
xor edi, edx
ror ecx, 0x18
ror ecx, 0x1d
mov edi, 0xd2e870e8
mov ebx, edx
add ecx, edx
sub ebx, ecx
mov ebx, edi
jmp 0x478d86