Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Shutdown system

Disassembly:
call sub.user32.dll_GetMessageExtraInfo
cmp eax, 0xffffff38
jne 0x401089
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
ret
call sub.user32.dll_GetMessageExtraInfo
cmp eax, 0xfffffedb
jne 0x4010ef
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
ret
call sub.user32.dll_GetMessageExtraInfo
cmp eax, 0xfffffeec
jne 0x40118c
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
ret
call sub.user32.dll_GetForegroundWindow
cmp eax, 0xfffffeeb
jne 0x401233
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.oleaut32.dll_OleLoadPictureFileEx
call sub.advapi32.dll_InitiateSystemShutdownA
call sub.advapi32.dll_InitiateSystemShutdownA
ret
jmp 0x47ebcf
dec esi
jmp 0x48013a
call fcn.00481d4d
xchg ecx, ebx
xor ecx, ebx
xor esi, ebx
or edi, ecx
sub ebx, edi
shr ebx, 6
and ecx, 0x443ffee
mov ebx, 0x445da3d
sub esi, 0x447b954
jmp 0x48111c
push 0xfb6eaa44
xor esi, ecx
or ecx, esi
xchg ecx, edi
xor ebx, esi
xchg esi, ecx
xchg esi, edi
add ecx, ebx
xor ecx, edi
add esi, 0x50ebd92
add esi, ecx
xor esi, edi
not ebx
jmp 0x47edb4
pop edx
inc esi
ror esi, 8
mov edi, 0x54099ae
jmp 0x480007
pop edx
inc ecx
sub ebx, edi
inc edi
jmp 0x481ac4
pop edx
not esi
add ebx, esi
mov edi, esi
xor ecx, 0x566521a
xchg ecx, ebx
or ecx, edi
bswap ebx
neg ecx
mov ecx, ebx
bswap ecx
jmp 0x47fb67
mov edx, 0x73716341
add ecx, 0x5826e3f
mov edi, 0x5845359
sub edi, 0x586332b
dec ebx
xor esi, edi
add edi, 0x58c7880
xchg edi, esi
and ebx, edi
jmp 0x47fb48
pop edx
xchg edi, esi
sub esi, ecx
xor esi, ecx
neg edi
and esi, ebx
inc edi
add ebx, esi
bswap edi
jmp 0x480b7e
call edx
nop
sub ecx, edi
add edi, esi
or esi, ecx
mov ecx, esi
not ebx
sub edi, esi
jmp 0x480223
pop edx
and esi, ebx
or ecx, 0x60ba86c
and edi, ebx
and edi, ebx
sub edi, esi
jmp 0x481a4a
push 0xfb02f6de
mov edi, ebx
xchg edi, ecx
rol ebx, 4
add ebx, ecx
rol ecx, 6
jmp 0x4808f7
push 0xfb565040
and ecx, ebx
and ebx, edi
mov ecx, ebx
xor ecx, ebx
jmp 0x481148
push 0xfb6972a2
sub ebx, esi
sub esi, ecx
xor edi, ebx
add ecx, ebx
or esi, ebx
xor esi, edi
or ebx, 0x908bb81
not esi
sub esi, edi
jmp 0x48004e
push 0xfc4a8cdb
add esi, edi
or ebx, edi
rol ecx, 3
or esi, 0xa139e64
or ecx, ebx
add edi, ebx
jmp 0x48009c
push 0x40
or ecx, ebx
mov ecx, 0xa375c5d
add esi, 0xa3941c8
bswap ebx
rol ebx, 1
add edi, 0xa3f2fd7
xor ecx, esi
neg edi
and ecx, ebx
jmp 0x47f6d4
call fcn.00481d4d
or ecx, edi
or esi, edi
and esi, 0xacb2beb
xor edi, ecx
mov esi, 0xaceea6a
shl ebx, 0x17
jmp 0x481930
pop edx
bswap esi
inc esi
xor ecx, edi
ror ebx, 0x11
rol ebx, 0x1a
or ebx, 0xadcb9fc
xchg ecx, esi
jmp 0x4818b9
pop edx
add esi, 0xae0d32e
or esi, ecx
ror ecx, 0x18
bswap edi
jmp 0x4803ab
call fcn.00481d4d
and edi, 0xb394420
xor edi, 0xb3b6077
jmp 0x47f72c
push 0xfb59c51d
xchg ecx, esi
mov ebx, esi
and edi, ebx
or edi, ebx
sub ecx, esi
or ebx, ecx
ror ecx, 0xa
xchg esi, edi
and edi, esi
xchg esi, ecx
neg esi
mov esi, edi
add esi, ecx
jmp 0x480d3a
pop edx
xor esi, 0xb752ad7
add ecx, edi
mov ebx, 0xb78c464
and esi, 0xb7a987e
or ebx, esi
dec esi
jmp 0x47ed37
push 0xfb1a16f8
mov edi, esi
mov esi, edi
add ebx, 0xb843eda
xor ebx, ecx
and ebx, esi
jmp 0x47f5dc
call edx
rol edi, 8
sub edi, ecx
and edi, esi
mov esi, edi
bswap ecx
mov ebx, ecx
add ebx, edi
and esi, ebx
shr esi, 8
xchg ebx, ecx
and ecx, esi
jmp 0x47f39f
mov edx, 0x40495727
add ebx, edi
not ecx
not ebx
mov edi, esi
sub ebx, 0xc0095a0
add edi, ecx
neg ecx
ror edi, 0x10
and ebx, 0xc083469
mov ebx, 0xc0a0463
neg esi
jmp 0x480a0c
push 0x7d7cf
sub esi, ecx
xor edi, 0xc8299f4
ror edi, 2
xchg ecx, esi
and edi, 0xc885c1d
neg ebx
jmp 0x481360
pop edx
sub ebx, ecx
sub edi, esi
shr edi, 0x1b
xchg edi, ebx
or ecx, esi
xor ebx, edi
ror ecx, 0x1a
shl esi, 0x14
neg ecx
jmp 0x48107c
call edx
rol edi, 0x15
ror esi, 6
or ebx, edi
or esi, 0xcaea901
shr edi, 0xa
or esi, 0xcb26c22
xor ebx, 0xcb48481
jmp 0x47f7a4
call fcn.00481d4d
sub edi, ebx
inc ebx
or edi, esi
xor edi, 0xcc4fbdb
sub edi, ebx
sub edi, ebx
and edi, ecx
or esi, 0xce2acef
or ecx, esi
shr ebx, 2
and ebx, edi
jmp 0x47ee2e
pop edx
xor ebx, ecx
mov ecx, esi
xchg edi, ecx
xor ecx, 0xd1f9254
inc esi
ror ebx, 0x1c
or ebx, esi
or ebx, ecx
jmp 0x481a2b
push 0xfbb00a9d
xor ecx, edi
xchg ebx, ecx
mov edi, esi
xor edi, ecx
xor esi, 0xd7608c7
and esi, edi
or ebx, 0xd79bbaf
mov esi, ebx
mov ecx, ebx
jmp 0x47f8a2
pop edx
xor esi, ecx
xchg edi, ecx
xor ebx, 0xe009ab1
and ecx, 0xe0278bc
add esi, edi
mov edi, ecx
and esi, ebx
mov ecx, ebx
mov ebx, edi
and ecx, esi
jmp 0x4803db
push 0xfbb1c9ab
mov edi, esi
rol ebx, 0xc
xchg ecx, edi
or esi, 0xe2d7b23
xchg ecx, edi
mov edi, ecx
and ecx, ebx
mov ecx, ebx
sub ecx, ebx
add ecx, esi
add ecx, edi
and ebx, 0xe3ce58f
and esi, ecx
rol ecx, 0xf
jmp 0x481741
push 0xfc312080
sub esi, ecx
or esi, edi
xor edi, ebx
or ecx, 0xed38ad5
or esi, 0xed56cb8
jmp 0x480f23
pop edx
and edi, ebx
mov edi, ebx
and esi, 0xf58ae15
dec esi
mov esi, 0xf5c6897
xor edi, ebx
and edi, ecx
add ebx, ecx
add ebx, 0xf63c579
jmp 0x47f386
push esp
and edi, 0xf66226d
or edi, 0xf68054c
or ebx, ecx
add esi, ecx
add esi, edi
xor ecx, 0xf6f9185
add edi, ecx
dec esi
nop
add ecx, 0xf7713aa
mov ecx, ebx
add ecx, 0xf7abf2c
xchg esi, edi
jmp 0x47f2c9
push 0xfc052734
xor edi, ecx
xor ecx, edi
sub ebx, 0xf82b03e
sub ecx, esi
inc esi
dec esi
mov ecx, 0xf8b382e
xor edi, 0xf8d1aea
xchg esi, ecx
xchg ecx, ebx
jmp 0x481b4b
call fcn.00481d4d
sub esi, 0xf931eb5
or ebx, 0xf95015c
xor edi, 0xf96dc91
xchg edi, ebx
dec ebx
jmp 0x4810ff
pop edx
or esi, ecx
inc esi
add ebx, esi
or ecx, edi
ror esi, 0x10
not edi
and edi, esi
neg edi
neg ecx
inc ecx
and ecx, ebx
neg ecx
add esi, edi
jmp 0x47fb86
pop edx
not esi
or ebx, ecx
xor ebx, 0xfb9d128
sub ebx, esi
mov edi, esi
add esi, 0xfbf510d
add esi, 0xfc16121
or ebx, edi
rol ebx, 0x11
or esi, 0xfc6f83b
sub ebx, edi
jmp 0x47ee96
push 0xfbfd64e2
sub esi, edi
sub edi, ebx
shr edi, 0x1c
or esi, edi
xchg ecx, esi
neg edi
bswap esi
or esi, ecx
xor ecx, esi
sub ecx, esi
mov ecx, 0xfddebb1
jmp 0x47fb21
mov edx, 0x4132136a
or esi, edi
and esi, edi
inc ecx
or esi, 0x10209a82
xor edi, esi
inc esi
add ecx, 0x10263c42
rol edi, 0x14
xor esi, ebx
add ebx, edi
jmp 0x47ff6f
pop edx
add ebx, 0x1064fb98
mov edi, ebx
add esi, edi
or ebx, 0x106ab01d
or edi, ecx
mov ecx, ebx
sub edi, 0x10702978
mov ecx, esi
or esi, 0x1073c5bb
jmp 0x4802c6
push esp
add ecx, ebx
mov edi, esi
inc ebx
bswap ecx
or edi, ecx
jmp 0x47faef
pop edx
ror ecx, 0x1b
ror ecx, 0xd
inc esi
add ebx, esi
and esi, ebx
inc ecx
xor edi, ebx
mov ebx, esi
or ecx, ebx
jmp 0x47f866
pop edx
xor edi, 0x10fb24d0
shr esi, 0x1d
xchg edi, ebx
ror esi, 0x1d
xor esi, edi
shr ecx, 0xe
xor esi, ebx
jmp 0x48118e
mov edx, 0x73716341
sub ebx, esi
not edi
and esi, edi
xor edi, esi
sub ecx, ebx
mov edi, 0x11312653
or esi, edi
xchg esi, edi
jmp 0x4817b1
push 0xfb2ed5ed
ror esi, 6
sub ecx, ebx
dec ebx
and esi, ebx
add ebx, esi
rol ecx, 0x1c
mov ebx, edi
add ebx, esi
inc ebx
add ebx, edi
or edi, ebx
mov esi, ebx
add esi, edi
jmp 0x48033d
push 0xfb324944
inc esi
mov ebx, esi
not ebx
add ecx, 0x1171beac
and ecx, 0x11742a45
or ecx, 0x1176008c
shr ecx, 0x1b
ror ebx, 4
dec esi
or ecx, esi
and ebx, ecx
jmp 0x480d0a
call fcn.00481d4d
mov esi, ebx
mov ebx, ecx
mov esi, 0x11eedbe1
shr ebx, 0xe
and esi, ecx
xor esi, edi
add ebx, ecx
dec ebx
dec esi
not ecx
xchg esi, ebx
neg ecx
not ebx
sub edi, ecx
dec edi
or esi, ecx
jmp 0x47fd02
call edx
xchg ebx, edi
shr ebx, 0x17
bswap ebx
rol edi, 0x17
sub ebx, esi
and esi, ebx
jmp 0x4802ab
pop edx
sub edi, ecx
xchg esi, ecx
xchg esi, ecx
not esi
add ebx, 0x124a5648
not ecx
and ebx, edi
ror ecx, 3
neg esi
and esi, edi
xor esi, ebx
xor edi, esi
jmp 0x480af8
push 0xfb6b2ed9
dec esi
mov ecx, edi
mov ebx, ecx
or ebx, esi
add ecx, edi
sub edi, 0x127aa0bd
not edi
shl ecx, 0x10
add ebx, edi
mov esi, edi
mov ecx, ebx
jmp 0x480cb8
push 0xfc4c4d02
neg esi
shr ecx, 0xa
jmp 0x48183f
pop edx
or edi, esi
add edi, ecx
xchg ecx, esi
xor esi, edi
add ebx, esi
xor edi, 0x12aebb03
xor edi, 0x12b09473
and edi, esi
mov edi, ebx
and edi, 0x12b610f8
jmp 0x47edfd
mov edx, 0x73716341
xor esi, ecx
or ecx, edi
or ecx, ebx
add ecx, esi
mov edi, ecx
xchg ecx, edi
xor esi, edi
bswap ecx
jmp 0x47ebd5
push 0xfaff8faa
or esi, ecx
or esi, edi
or esi, ecx
shr esi, 2
mov edi, ebx
sub edi, esi
mov ebx, esi
add ebx, 0x12fea983
jmp 0x480234
call edx
mov ecx, ebx
shl ecx, 0x19
rol ebx, 0x10
xchg esi, ebx
dec ecx
and esi, ecx
sub ecx, ebx
sub ecx, edi
jmp 0x481498
call fcn.00481d4d
not esi
sub ecx, 0x13474bc5
or esi, edi
jmp 0x481054
pop edx
sub esi, 0x134fafc4
and edi, esi
and ebx, esi
rol ecx, 0x18
add ecx, esi
mov ecx, edi
xor edi, esi
mov esi, ecx
neg ebx
shl ebx, 0x10
xor ecx, ebx
jmp 0x47facd
pop edx
shr esi, 0x16
or ecx, esi
sub ecx, ebx
xor ebx, edi
and ecx, esi
jmp 0x480bd2
push 0xfb0143fd
shl ebx, 0xa
sub ebx, ecx
jmp 0x47ef2d
pop edx
shl ecx, 6
mov esi, ebx
xor esi, ecx
xchg edi, ecx
and esi, edi
and ebx, 0x13c10859
mov esi, ecx
and ebx, edi
jmp 0x481132
push 0xfbc22e4e
mov ecx, ebx
and ebx, ecx
neg edi
shr ecx, 0xb
neg esi
jmp 0x4810d4
pop edx
add ebx, 0x13dbcab6
or esi, edi
inc ebx
and edi, ebx
xchg edi, esi
sub edi, ecx
jmp 0x480bf3
push 0xfb308f8c
or esi, ecx
or ecx, edi
xchg esi, ecx
or edi, ecx
jmp 0x47fe88
call fcn.00481d4d
mov esi, ecx
xchg edi, ebx
mov ecx, esi
xchg ecx, esi
mov esi, edi
add edi, esi
neg esi
xor esi, ecx
and ebx, 0x1534f2dc
or esi, ecx
neg ebx
or ecx, esi
jmp 0x48018c
pop edx
sub ebx, 0x153cc383
or esi, 0x15478004
xor ebx, edi
xchg ebx, esi
neg ebx
mov edi, ebx
sub ecx, ebx
or ecx, edi
and ecx, 0x1554b7a7
xor esi, 0x15834a1c
mov edi, ecx
add ecx, esi
add ebx, ecx
jmp 0x47fd3f
pop edx
and esi, 0x158d9649
neg ecx
not edi
sub ecx, edi
shl ebx, 8
sub esi, 0x159723c8
neg esi
xor esi, 0x159e5a81
add edi, ebx
and esi, ebx
jmp 0x4818ee
mov edx, 0x73716341
and esi, ecx
or ecx, esi
add ebx, 0x15bc5ec1
add ebx, 0x15be3f44
add ecx, ebx
shr ecx, 0x1a
and ecx, 0x15c79450
dec ecx
jmp 0x480385
pop edx
add ecx, esi
mov ebx, edi
or edi, ecx
neg ebx
neg ecx
mov ecx, edi
ror ecx, 0x18
rol ebx, 6
and esi, ebx
and edi, esi
shl ecx, 0x16
jmp 0x47f9b3
push 0xfc4fcd6b
sub edi, esi
nop
sub esi, 0x173167f9
shl edi, 0x13
nop
mov edi, esi
shr esi, 0x11
mov ebx, 0x173aff08
jmp 0x480c14
call fcn.00481d4d
and edi, ebx
xor ecx, ebx
mov edi, esi
xor esi, edi
jmp 0x48163d
call fcn.00481d4d
nop
shr esi, 0x15
dec esi
jmp 0x47f533
mov edx, 0x40495727
add edi, ecx
shl ebx, 0x1d
inc esi
sub ebx, esi
xor ecx, 0x1941ff04
xchg edi, ecx
xor esi, ecx
sub ebx, 0x1947905c
and ebx, 0x1949a6f8
xor ebx, 0x194b8a4d
neg ebx
xor edi, ebx
or esi, 0x19512937
neg esi
jmp 0x480716
call edx
nop
dec ecx
mov edi, ecx
and esi, ecx
jmp 0x4805d4
pop edx
sub esi, edi
sub esi, 0x19c11b52
xor esi, ecx
rol esi, 0xd
jmp 0x47fe64
push 0xfb18607c
or esi, ebx
sub esi, ecx
rol esi, 0xe
not ebx
inc edi
not ebx
nop
add ecx, 0x19fc1eea
shl edi, 0xa
add ecx, edi
mov edi, ecx
inc esi
jmp 0x47f4fa
push 0xfb04a64e
xchg edi, ebx
shr ebx, 0x11
and ebx, ecx
add ebx, ecx
xor edi, ecx
mov edi, 0x1a5c3fb2
sub ecx, esi
jmp 0x4819bc
call fcn.00481d4d
xor ebx, 0x1ab5a65a
and ebx, 0x1abc433d
or esi, edi
xor esi, edi
add ebx, esi
and ecx, ebx
dec ebx
jmp 0x481320
call fcn.00481d4d
not ebx
and ecx, esi
shl ebx, 0x1c
xchg edi, ebx
or edi, ebx
or edi, ebx
add ebx, ecx
add esi, edi
jmp 0x481952
push 0xfb43a514
mov esi, 0x1b390472
neg ecx
or edi, 0x1b43d25d
or ecx, edi
inc esi
mov edi, 0x1b497d45
shl ecx, 0x1c
jmp 0x481716
push 0xfc6675c9
neg ebx
xor ecx, esi
xchg ecx, esi
xchg esi, edi
or edi, 0x1ba3cc28
not ebx
add ecx, 0x1ba7c034
mov edi, ecx
xor ecx, esi
jmp 0x47fe1a
pop edx
and ebx, ecx
xchg ebx, ecx
sub ebx, esi
or edi, ebx
sub ecx, edi
add edi, ecx
xchg edi, esi
neg esi
or ebx, esi
xor ebx, esi
or esi, edi
add esi, ecx
mov ebx, 0x1bf40305
jmp 0x47f0a9
pop edx
sub ecx, esi
sub ebx, 0x1c0c23f1
neg ebx
add ecx, esi
xor esi, ebx
shl esi, 0x17
xchg ecx, ebx
or ecx, 0x1c17c66e
add edi, ebx
jmp 0x47fc94
push 0xfb2630d2
and ecx, ebx
sub esi, edi
and edi, ecx
or edi, esi
rol ebx, 0x11
or edi, esi
or esi, ebx
sub ebx, 0x1c291071
add ecx, esi
jmp 0x480737
mov edx, 0x73716341
xchg ebx, edi
mov ebx, 0x1c2f1bec
neg edi
add edi, ebx
sub esi, ecx
xchg esi, ebx
and ecx, esi
add esi, ecx
sub edi, esi
sub ecx, ebx
jmp 0x480989
push 0xfb6cedad
add ecx, ebx
and ecx, edi
shl esi, 0xd
sub esi, edi
jmp 0x47ecce
push 0xfb340771
neg ecx
xor edi, 0x1d032694
shr ebx, 0x1f
xchg esi, ebx
xchg edi, ecx
xchg ebx, ecx
dec ebx
mov ecx, ebx
jmp 0x4800e9
push 0xfb5b8397
dec esi
nop
or ecx, 0x1d2efbe1
bswap edi
jmp 0x481a08
mov edx, 0x40495727
mov edi, ebx
and esi, ecx
add edi, esi
and esi, ecx
bswap edi
jmp 0x481170
call edx
and ecx, edi
sub esi, edi
sub esi, ebx
mov esi, edi
add ecx, esi
not esi
and ecx, ebx
jmp 0x47ed46
pop edx
xor edi, esi
rol ebx, 0x16
or ecx, esi
and edi, ebx
xchg edi, ecx
xchg edi, esi
sub edi, esi
xchg ecx, ebx
xchg ecx, esi
xor edi, ebx
jmp 0x47f4de
push 0xfbc3ebdb
shr edi, 0x1d
sub ecx, ebx
bswap ecx
sub esi, 0x1f6e2b64
sub esi, ecx
xor ecx, 0x1f722a3a
and esi, ebx
and ecx, ebx
and edi, 0x1f77a6c9
or edi, ebx
jmp 0x481b05
call edx
or ebx, esi
and esi, 0x1f7db809
or esi, 0x1f7fa358
bswap ecx
xor esi, ecx
or esi, edi
sub ebx, edi
jmp 0x480201
call edx
sub ecx, 0x1f89d6fe
xor esi, ecx
dec ebx
xor ecx, 0x1f8fbd1e
jmp 0x47ed7e
push 0xfc39e218
add ebx, esi
or ebx, edi
bswap esi
bswap esi
dec edi
dec ebx
bswap edi
jmp 0x47f28c
push 0xfb580d76
xor ebx, ecx
and ecx, 0x1fa2b549
add ecx, ebx
dec ebx
jmp 0x47f49f
pop edx
or ebx, edi
and ebx, ecx
and ecx, esi
neg edi
or edi, ecx
shl esi, 0x16
jmp 0x47fbb3
call fcn.00481d4d
xchg ecx, esi
ror ecx, 0x1e
or ebx, esi
sub esi, ebx
xchg esi, ecx
sub ecx, 0x1fbe90e0
shl esi, 2
jmp 0x47ff9a
pop edx
mov esi, ecx
sub edi, esi
add ecx, edi
neg edi
add ebx, ecx
or ecx, 0x1fd62a4c
mov esi, ecx
neg esi
mov ecx, esi
add esi, 0x1fdde11f
neg ecx
not esi
xor esi, edi
mov esi, 0x1fe580f0
ror esi, 0x1e
jmp 0x4802ef
pop edx
or esi, edi
add edi, 0x2017929a
add esi, 0x20197777
xor edi, esi
sub ebx, edi
xor edi, ebx
or esi, 0x20210016
dec ecx
sub esi, ebx
xor ebx, edi
shl esi, 8
xor ecx, ebx
mov edi, esi
xor ebx, ecx
jmp 0x48115d
call edx
shl ebx, 0x1c
shl esi, 0x1d
sub esi, edi
mov ebx, edi
ror ecx, 0xf
xchg ecx, esi
sub ebx, ecx
shl ebx, 6
jmp fcn.0047f552
call edx
dec ebx
shl ecx, 0x10
ror esi, 9
xchg esi, ebx
shr ecx, 0x15
rol ecx, 0x17
add ecx, ebx
shr ebx, 0x16
jmp 0x47f6f3
push 0x401400
sub ebx, ecx
mov esi, 0x20be0179
add ecx, edi
mov esi, edi
sub ebx, edi
jmp 0x480830
pop edx
xchg ebx, esi
mov ebx, edi
xor edi, ebx
xchg ecx, ebx
jmp 0x48121f
mov edx, 0x73716341
not esi
add ecx, 0x21e10aa0
neg edi
or edi, ecx
sub edi, esi
add edi, ecx
and esi, ebx
shr esi, 6
dec ebx
mov ebx, edi
jmp 0x480728
call edx
or edi, 0x22371cfd
and ebx, ecx
add ecx, esi
shr esi, 7
xchg esi, ebx
and edi, ebx
add ecx, esi
dec edi
sub ecx, ebx
jmp 0x48085f
mov edx, 0x73716341
rol ebx, 1
or edi, esi
shl edi, 0x16
xchg esi, edi
xchg edi, ecx
inc ebx
add edi, esi
shl ecx, 0xc
mov ecx, esi
bswap ecx
rol edi, 0xd
xchg ecx, esi
add esi, 0x22c75760
jmp 0x4801dc
mov edx, 0x73716341
xchg edi, ecx
rol esi, 0x13
xor edi, ecx
and edi, 0x22cf4f04
mov ebx, esi
inc ebx
xor esi, ebx
sub ecx, esi
xchg ebx, esi
shr esi, 0x1b
jmp 0x47f750
call fcn.00481d4d
add edi, ecx
or edi, esi
xchg esi, ebx
rol ecx, 0xe
mov edi, ebx
or ecx, edi
xor edi, 0x230fd735
add ecx, esi
mov ecx, esi
jmp 0x4812cb
push 0xfc4e0ff4
mov ebx, edi
xor ebx, 0x2356ae35
mov ebx, 0x23588fc9
add edi, esi
xchg ecx, edi
sub esi, ecx
add ebx, ecx
add ecx, edi
xor ecx, 0x2363c29c
jmp 0x4806e2
pop edx
xor ecx, esi
mov ecx, esi
shr edi, 4
xchg ecx, esi
shl edi, 0x1d
xor ebx, edi
shr ecx, 0xa
jmp 0x481bcc
push 0xfb16aa5a
and ebx, edi
xchg ecx, edi
mov edi, ecx
xchg edi, esi
or edi, ebx
ror edi, 0x1a
or ecx, ebx
jmp 0x4808a7
call edx
mov ebx, esi
and ecx, edi
or ebx, esi
or esi, ecx
nop
dec ecx
jmp 0x481b93
call edx
mov ecx, edi
mov edi, ecx
sub ebx, esi
or ecx, esi
mov edi, 0x23fc677e
sub ecx, esi
jmp 0x47fdc3
push 0xfb065660
shl ecx, 0x18
xor esi, 0x242e48fd
and edi, ebx
or ecx, 0x243235e2
jmp 0x481593
mov edx, 0x73716341
add esi, 0x24513c3a
xor ebx, edi
xchg esi, edi
shl edi, 0x19
and ecx, 0x2458dfe7
add edi, esi
xchg ecx, edi
neg esi
jmp 0x47f368
pop edx
or ecx, ebx
mov esi, 0x2462d2b0
shl esi, 0x16
add ecx, 0x2466ac09
ror esi, 0x1e
add edi, ecx
bswap ebx
xchg ecx, edi
jmp 0x47fc40
push 0xfb41e9a6
bswap esi
sub ecx, 0x247375bd
inc ecx
shl ebx, 5
mov ebx, edi
dec ebx
mov esi, ebx
sub edi, 0x247f590b
jmp 0x480a55
pop edx
xor ecx, esi
shr ebx, 0x1b
jmp 0x47f072
push 0xfbca7798
or edi, ecx
ror edi, 0x14
mov ebx, ecx
shl ebx, 5
neg ecx
and esi, 0x24da0a20
mov ecx, edi
xor edi, 0x24ddb43c
rol ecx, 0x15
jmp 0x480423
mov edx, 0x73716341
sub edi, 0x24f166a3
mov ebx, ecx
xchg esi, ecx
sub edi, ebx
and ecx, esi
mov ecx, edi
not ebx
and ebx, ecx
and esi, 0x25013c57
mov esi, edi
and esi, ebx
jmp 0x47f462
pop edx
and ebx, edi
sub edi, ebx
add edi, esi
sub ebx, edi
shl ecx, 3
not ebx
and edi, ebx
xchg ebx, ecx
jmp 0x4800ab
push 0xfbae4fb0
add edi, ebx
mov esi, edi
bswap ebx
bswap esi
neg edi
xor edi, ebx
or ebx, edi
ror edi, 0x18
or esi, 0x2553b6ea
or esi, ebx
mov edi, 0x255771a4
bswap esi
neg esi
bswap esi
jmp 0x47f7f5