Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
xor edi, 0x299ec590
xor esi, ecx
sub esi, edi
add edi, esi
nop
inc ecx
call sub.user32.dll_GetCaretBlinkTime
shl ecx, 0xd
mov ecx, edi
or esi, 0x29a1aecb
rol edx, 0xd
add esi, 0x29a297e8
and edi, edx
cmp eax, 0xffffff2c
jne 0x4010cb
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
ret
or edx, edi
mov edi, esi
shl ecx, 9
and edx, 0x29a8c55d
and edi, esi
xchg ecx, edx
and edi, ecx
ror edx, 0xb
call sub.user32.dll_GetCaretBlinkTime
mov esi, edi
and edi, edx
cmp eax, 0xffffff0b
jne 0x401187
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
ret
mov edi, ecx
xor esi, edx
xchg edx, edi
neg edx
call sub.user32.dll_GetDesktopWindow
xor esi, edx
xor edx, 0x29b1802b
sub ecx, edi
cmp eax, 0xffffff1f
jne 0x401245
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
call sub.kernel32.dll_DeactivateActCtx
call sub.user32.dll_SetWindowPos
ret
jmp 0x494434
xchg edi, edx
neg edx
or ecx, edi
inc edx
mov ecx, esi
jmp 0x495945
push 0x2cd60b13
mov edx, ebx
or ebx, edi
not ebx
shl edi, 0x1e
dec ecx
ror ecx, 9
mov ecx, ebx
rol edi, 0xc
xor edx, ebx
xor ecx, 0x307da276
bswap ecx
jmp 0x497048
pop esi
xor ecx, ebx
xchg ecx, edi
shl ecx, 0x15
and ecx, edx
and ecx, 0x30808112
xor edx, 0x3080f00b
rol edi, 0x18
neg ecx
sub ebx, 0x30825b01
jmp 0x496905
push 0x2cda2564
and edi, ebx
sub edx, ecx
and edi, ebx
sub edx, ecx
xor ecx, edi
and ebx, edx
not edx
xor ecx, edx
inc ebx
rol edx, 0xb
and ecx, edx
xchg ebx, ecx
jmp 0x4962f7
pop esi
ror ebx, 0x10
and edx, edi
mov ecx, ebx
shr ebx, 0xe
xor ebx, edi
and edi, ebx
shr ecx, 3
or ebx, edi
rol edx, 0x13
nop
sub edi, edx
jmp 0x496460
call fcn.00497098
or edi, ebx
shl edi, 0x18
inc ebx
add edx, ecx
or ecx, edi
xchg ecx, edx
bswap ebx
sub edx, edi
jmp 0x494d78
push 0x2cd32746
mov edi, 0x30db311a
or ecx, edx
sub edi, 0x30dbadaf
or edi, edx
xor ebx, ecx
xchg edx, edi
jmp 0x496626
push 0x2cebf539
xchg ecx, edi
and ebx, edx
sub edx, 0x30dd380b
xchg edx, ecx
shl ebx, 6
dec edi
or edx, ecx
xor edi, edx
xor ecx, 0x30deb918
jmp 0x495f54
push 0x2cdd54f9
mov edx, 0x30e611fe
shr ecx, 0xe
xchg ecx, edi
and ebx, ecx
add edi, ebx
and ecx, edi
and edi, ebx
not ebx
rol edx, 0xc
or ecx, edi
jmp 0x495a19
push 0x2cd9d27a
ror ecx, 0x10
mov edx, edi
or ecx, ebx
dec ebx
or edi, ebx
rol edx, 0x12
sub ecx, edi
or ebx, ecx
shr ecx, 0xf
xor ecx, ebx
or edi, 0x30f46b87
add ecx, edi
jmp 0x494570
pop esi
sub edi, ecx
xchg ecx, edi
add ecx, 0x310eb6a5
mov ecx, ebx
or ebx, 0x310f93a0
add edi, ecx
xor ebx, edi
and edx, 0x31107a57
sub edx, edi
neg ebx
jmp 0x49673e
push 0x2cd5b505
ror edi, 1
add edi, edx
bswap edi
shl edi, 0x14
or edx, 0x311e108d
add ecx, edi
sub edx, ebx
xchg edi, ebx
jmp 0x494524
push 0x2cec9baf
dec ebx
ror ebx, 0x15
add ebx, edx
xor edi, 0x3128570b
add edx, edi
jmp 0x49584c
push 0x2cd93391
shr ecx, 3
rol edx, 0xa
xchg edi, edx
jmp 0x496332
mov esi, 0x2774562b
add ecx, ebx
shl edx, 0xc
shl edx, 0x1e
inc ecx
add ecx, edx
xor ebx, edx
xor edi, ebx
or edx, ecx
jmp 0x496a95
push 0x2cd2864f
dec ebx
or edx, ebx
add edx, ebx
xor edx, ebx
add edx, ecx
xor ecx, 0x3145c059
or edx, edi
sub edi, edx
and ebx, 0x314677b5
sub ebx, ecx
add ebx, 0x3146ef34
jmp 0x496281
call esi
or edx, 0x3147419f
mov ebx, edx
sub ecx, edx
xor edx, 0x3147f2c9
xchg ebx, edx
or edx, 0x31486cca
ror ebx, 0x1d
and ebx, edi
add ecx, 0x31492f42
xor ebx, ecx
shr ebx, 0xf
xchg edx, edi
jmp 0x496d53
call fcn.00497098
xor ecx, edi
dec ebx
and edi, ebx
xor edi, 0x314f28c4
mov ebx, 0x314f67cd
mov ebx, ecx
add ebx, ecx
add ebx, edi
jmp 0x49577f
pop esi
xor edx, edi
xor ecx, 0x31774acd
or edi, 0x3177894b
xchg ecx, ebx
sub edx, ecx
and edx, ecx
or edi, ecx
jmp 0x496e2c
pop esi
rol edx, 0x18
add edi, edx
inc ebx
jmp 0x494fb3
pop esi
xor edx, ecx
shr ecx, 5
shr ecx, 0xc
rol ecx, 0xa
and edx, 0x3187510d
mov ecx, ebx
xor ecx, 0x3187c950
mov edx, 0x3188043f
rol ecx, 3
jmp 0x4945cc
push 0x2cddf15e
xor edi, ecx
add edi, edx
sub ebx, 0x31890f5e
dec edi
sub ecx, edx
mov edx, 0x3189c775
sub edi, ecx
xchg edx, ebx
add ebx, ecx
xor edx, edi
xor edx, ecx
inc edx
add edx, ecx
mov edi, edx
jmp 0x4961f1
pop esi
shl ebx, 0x1c
xor edi, 0x319a421c
sub edx, ecx
mov edx, edi
xchg edx, ecx
add edx, edi
xor ebx, ecx
rol edx, 0xa
shr edi, 4
inc ecx
jmp 0x4963a5
pop esi
neg ecx
sub ecx, 0x31adf2b7
add ecx, ebx
or ebx, 0x31ae76cb
inc edi
sub ecx, edx
jmp 0x496e99
mov esi, 0x123b2f04
neg edi
rol ebx, 0x1b
add edi, edx
mov ecx, 0x31b40e0a
mov ebx, 0x31b44cda
dec edi
inc edx
xchg edi, ecx
bswap edi
and edx, edi
sub edx, edi
mov ecx, 0x31b60346
ror ebx, 0xb
rol ecx, 7
jmp 0x4946ec
pop esi
neg ecx
xchg ebx, edi
bswap edx
add ebx, 0x31d72879
xor ecx, edi
xor edx, 0x31d7dd55
jmp 0x494b48
pop esi
xchg edx, edi
mov ebx, 0x32162454
and ecx, ebx
xor ecx, edx
xor edi, ecx
and ecx, ebx
or edi, 0x3218a097
shl edx, 0xa
xor edx, ebx
sub ebx, ecx
or edx, ebx
mov ebx, edi
jmp 0x49509b
call esi
shr ecx, 0x10
add edi, ecx
add ecx, edx
xor edi, 0x32282b47
mov edi, ebx
add edi, 0x3228a320
mov edi, 0x3228e1b4
shr edx, 0xa
or ebx, ecx
sub edx, 0x3229a03b
jmp 0x4955cf
pop esi
add ebx, 0x3262466e
add ecx, edx
and edi, 0x32633525
and edx, 0x3263a41b
bswap edx
jmp 0x49503e
call esi
mov edx, 0x328bf00e
shr ecx, 0x17
add edx, ecx
ror edx, 0x11
sub edi, ebx
mov ebx, edx
mov edi, ebx
add edi, ecx
inc edi
jmp 0x495fe7
call esi
shl edi, 0xf
sub ebx, edi
sub ebx, 0x32909231
sub ecx, 0x3290d3fd
ror ebx, 5
shl ebx, 4
bswap ebx
and ecx, ebx
not edx
or ebx, 0x32924c23
rol edx, 0x12
xchg ebx, edi
mov edx, ebx
jmp 0x4958a9
push 0x2cecf012
neg ecx
add edi, ebx
bswap edx
shl ebx, 0xb
jmp 0x494cb7
pop esi
ror edx, 2
nop
sub edx, 0x32a0dffa
sub ecx, edi
sub ecx, 0x32a15864
jmp 0x495960
push 0x2ce12b3b
neg ecx
ror ecx, 0x1e
sub edi, edx
or ebx, ecx
or ebx, edi
add ebx, edx
xor ebx, edx
or ebx, 0x32a7b2de
ror ecx, 0xf
or edi, ebx
ror edx, 0x10
jmp 0x4950de
push 0x2ce89ade
add edi, 0x32aff2f5
neg edx
mov ebx, edi
not edx
and edx, ebx
neg edi
or edi, ebx
jmp 0x496ab4
push 0x2cc9a117
or ebx, 0x32b1ed8f
mov edi, 0x32b2357c
mov edx, edi
sub ebx, ecx
xor edx, edi
jmp 0x49622c
pop esi
xchg edx, ebx
xchg ecx, ebx
or ecx, ebx
not ebx
add edx, 0x32b42a74
xor edi, 0x32b46859
add ecx, edi
shl edx, 2
xor edx, ebx
jmp 0x496b36
push 0x2cdda22b
and ebx, edx
not edx
inc ebx
xchg edi, ecx
add edi, ebx
xchg edx, ebx
add edi, ecx
sub ecx, edi
or ebx, ecx
jmp 0x494fda
pop esi
xchg ebx, edi
shl edx, 0xc
dec edx
mov ecx, 0x32e0e539
and ebx, ecx
mov ebx, edx
sub ebx, edi
xchg edi, ebx
sub ecx, edi
sub edx, ecx
add ecx, edi
jmp 0x494eee
push 0x2cdd03fb
mov edx, ecx
xchg ecx, edi
and edi, ebx
or ebx, ecx
add edi, edx
xchg edi, ecx
sub ebx, edi
neg ebx
or ebx, 0x32f5e6d2
sub edx, 0x32f63f4d
rol edx, 0x10
jmp 0x4949b3
mov esi, 0x123b2f04
sub ecx, ebx
or edx, ebx
or ebx, edx
sub edx, ecx
mov ecx, edi
inc edi
mov ebx, edi
xor edx, ecx
jmp 0x495dd1
call fcn.00497098
rol edi, 0x13
xor ecx, edi
dec edi
xchg edx, ebx
neg edx
add edi, ecx
dec edi
sub ecx, ebx
ror edx, 0x11
bswap ecx
jmp 0x496e7f
call fcn.00497098
and ecx, edi
ror edi, 0x11
add ebx, edx
xor ecx, ebx
bswap edx
sub edi, 0x332b9c99
xor edi, 0x332be520
shl edx, 0x1d
and ecx, edi
bswap edi
add ecx, edx
or edi, ebx
jmp 0x4957b6
pop esi
rol edi, 0x13
xchg edx, edi
or ecx, edi
xor ecx, ebx
or ebx, edx
xchg ecx, ebx
sub ebx, edx
xor edx, 0x332f173c
sub edx, ebx
xor edi, edx
add ecx, edi
or ecx, edi
bswap ecx
jmp 0x494c15
pop esi
inc edi
add ebx, edi
add ecx, 0x333ef956
xchg ebx, edi
xor edi, ebx
mov edi, 0x33407d9b
jmp 0x4965e2
push 0x2ceba689
add ecx, edx
or edi, ecx
jmp 0x49491d
push 0x2cec4800
add edi, ecx
xor edi, ebx
mov ecx, edx
mov ebx, edi
not edi
add edx, 0x33501ed8
mov ecx, 0x33506455
jmp 0x494bb9
mov esi, 0x2774562b
and ebx, 0x3353f373
rol edi, 7
inc edx
inc edx
shl edi, 5
mov edi, 0x33591f4a
or edi, ebx
or ecx, edi
mov ebx, 0x3359d26c
jmp 0x497079
pop esi
and ebx, edx
add ecx, 0x335a6978
and edi, 0x335aa40a
xchg ebx, ecx
rol edx, 0x19
xchg edx, ecx
xchg edx, ebx
add ebx, ecx
and ecx, edi
jmp 0x49521f
pop esi
xor ecx, 0x335c5ee4
ror edi, 8
mov ebx, edi
xor ebx, edx
sub edx, ecx
dec ebx
add ecx, edx
neg edi
bswap ebx
add edx, edi
bswap ecx
mov edi, 0x335f3fb1
xchg ecx, ebx
sub ecx, edi
jmp 0x496b70
push 0x2ce84870
and ebx, edx
and ecx, ebx
xchg ebx, edi
add edx, ebx
and edi, ebx
or edi, ebx
jmp 0x495929
push 0x2ce37de9
and ecx, 0x336e4b31
and ecx, edx
shr ecx, 0x11
neg edi
xchg ebx, edi
or edx, ecx
xchg ecx, edx
shr edi, 9
jmp 0x496579
mov esi, 0x2774562b
xor ecx, ebx
or edx, ebx
mov edx, edi
not ebx
sub edx, ecx
and edi, 0x338ba824
sub edx, edi
jmp 0x496407
push 0x2cd6b06e
and ebx, 0x338c4392
not edx
inc ebx
xor ecx, edx
or edx, ebx
mov edi, edx
not edx
sub edi, ecx
add ebx, edx
jmp 0x495cf5
mov esi, 0x123b2f04
ror edx, 0xe
not ebx
shr ecx, 0x1d
or ebx, ecx
add ecx, edi
not edx
inc ebx
or edi, edx
and ebx, edx
mov edx, 0x3390b4f5
jmp 0x494de9
push 0x2cd2d258
or edi, 0x3394a267
sub edi, ecx
mov ebx, ecx
neg edi
xchg ecx, edx
jmp 0x494900
mov esi, 0x2774562b
add edx, 0x339d85e7
xchg edx, ebx
xor ecx, 0x339dfd31
and edi, ecx
add edi, 0x339e7432
shl edi, 5
mov ebx, ecx
xor ebx, edx
add edi, edx
xor ecx, ebx
jmp 0x495d49
push 0x2cd982cc
not edx
shr edx, 6
and ecx, 0x33a183a8
and ebx, edx
and ebx, edx
or edi, edx
xor edi, edx
rol edx, 0x15
ror ebx, 0xe
or ecx, edi
xor ecx, edx
sub edx, edi
jmp 0x494a03
push 0x2ce7fba6
sub ebx, ecx
sub edi, 0x33aa762a
mov ebx, edx
and edx, ecx
add edi, 0x33ab36f7
not ebx
jmp 0x49606a
call esi
and edi, 0x33ad7082
mov edx, 0x33adb1f0
dec ebx
not edx
ror ecx, 0x13
add edx, 0x33aeb38d
sub edi, 0x33aef13e
sub edx, edi
inc edx
mov edx, ebx
sub edx, ecx
jmp 0x494ae2
call fcn.00497098
or ecx, 0x33b03305
and ebx, edi
inc ecx
mov edi, ebx
and ebx, edx
mov ebx, edi
xor edi, ecx
xchg ecx, ebx
and edx, ecx
jmp 0x4967c2
pop esi
neg edi
neg edi
mov edx, ecx
not edi
sub ebx, 0x33c9822a
jmp 0x495f46
mov esi, 0x2774562b
or ebx, edx
add ebx, ecx
add edi, ecx
xor edx, edi
xor ecx, edi
xor ebx, edi
mov ebx, ecx
add edx, ecx
inc ebx
jmp 0x497064
call esi
and edx, 0x3409e869
neg edx
xchg edi, ebx
shl edx, 0x19
mov ecx, 0x340bf147
or ecx, edi
and edx, ecx
sub edx, ebx
or ecx, edx
and ebx, edi
not ebx
or edx, ebx
sub edi, ecx
jmp 0x494f0a
pop esi
mov edx, ebx
mov ecx, 0x34150da6
or ebx, ecx
and ecx, ebx
xor edi, ecx
sub ebx, edx
bswap edi
bswap ecx
shr edx, 0x17
shl ecx, 0x17
xchg ecx, edi
sub edi, edx
or edi, edx
add ebx, 0x341a7b71
shr ecx, 0x15
xchg edx, edi
jmp 0x4967e4
mov esi, 0x2774562b
bswap ebx
or ebx, edx
shl ebx, 2
xor ecx, 0x341f4c3a
xchg edi, edx
rol ebx, 4
add ecx, 0x3420c17c
xchg ecx, edx
or ecx, ebx
add ecx, edx
jmp 0x497013
push 0x2ce328c4
or ecx, 0x343795ae
or ebx, 0x34381f5c
mov ebx, edi
mov ebx, edx
bswap edx
mov edx, edi
xchg ebx, edi
or edx, 0x343d3d04
jmp 0x4960df
pop esi
ror edi, 0xf
sub edi, edx
bswap ecx
dec ecx
sub edx, ebx
xchg edi, ebx
neg edi
xchg edx, ecx
mov edi, 0x3450c2a7
add edx, ebx
xchg ebx, edx
or edi, 0x345238ed
xor edx, edi
and edx, edi
jmp 0x495fc6
call esi
neg edi
mov edx, ecx
neg ecx
xor edi, ecx
add ecx, edx
mov ebx, 0x3461318c
add edi, ebx
mov ebx, edi
sub edx, ebx
or edi, edx
add edi, ebx
sub edx, ebx
jmp 0x495ae4
pop esi
shl ecx, 3
and edx, ecx
add ebx, edi
mov ebx, 0x3465e15e
shl edx, 0x15
or ebx, 0x3466c8fd
and ebx, ecx
xchg edi, ebx
shl edi, 0x17
jmp 0x49454a
push 0x2cdcad48
xor ecx, 0x348e0157
shl edi, 5
xchg ebx, edi
add ebx, 0x348f5eb1
neg ecx
and edi, ebx
xchg edi, ebx
neg ecx
jmp 0x495bb6
jmp loc.0049a505
push 0x2ce8ede2
add edi, edx
or ebx, edi
xchg edi, ebx
and edi, 0x34d9c464
shr ebx, 0x1d
xchg edx, edi
rol edi, 0x19
xchg edx, ebx
ror edi, 0x18
add edi, ebx
sub edi, ebx
mov edx, 0x34dd7e9d
dec ecx
xor edx, ebx
and edi, ebx
jmp 0x495fa0
pop esi
and ebx, edx
xchg edi, edx
mov edx, ecx
add edx, edi
dec edx
shl ebx, 0x11
sub edi, ecx
ror ebx, 0x17
add ebx, edi
jmp 0x495dfd
push 0x2cd23141
or edx, ebx
xchg edx, ecx
xchg ecx, edi
or ecx, 0x34f289f3
xor ebx, ecx
neg ebx
sub edi, edx
jmp 0x494d4d
pop esi
xchg ecx, edx
sub ecx, ebx
shr edx, 0xa
add edx, 0x35ce4026
and edi, ebx
jmp 0x496df2
pop esi
and edx, edi
xchg ecx, ebx
neg edx
mov edx, ebx
or edx, 0x35ecdad8
xor edi, ebx
mov edi, edx
add ecx, ebx
jmp 0x4966b2
pop esi
add ecx, ebx
xor ebx, edx
or ecx, ebx
sub edi, 0x35f2af31
not ecx
mov ebx, 0x35f3ab47
sub edx, ebx
or edi, 0x35f4a85a
mov ebx, 0x35f52278
sub ebx, edx
jmp 0x49531c
call esi
xchg edx, ecx
xor edi, 0x35fb48c2
xchg ebx, edi
sub edx, ebx
ror edx, 0x1e
not edi
not ebx
jmp 0x495e8f
push 0x2ce0d577
shl edx, 0x18
not ebx
or ecx, edi
not edi
shl ecx, 0xd
shl ebx, 8
mov ebx, 0x36025701
mov edx, edi
add edx, ebx
xor ebx, edx
dec ecx
and edx, edi
add ecx, ebx
or edx, edi
dec edi
jmp 0x4958dd
call fcn.00497098
inc edi
add edi, edx
not ebx
mov edi, ecx
not ebx
jmp 0x4963dc
push 0x2cd65e6c
xor edi, 0x362ce862
sub edi, ecx
sub ecx, edi
sub ebx, 0x362db198
xchg edi, ecx
jmp 0x49620d
call fcn.00497098
mov ebx, edi
xor edi, ebx
xor edx, ebx
mov edi, 0x362f4a01
jmp 0x4953b0
call fcn.00497098
add ecx, edi
xor ebx, edi
inc ebx
xor edx, ebx
bswap ecx
rol edi, 0x15
mov ecx, edx
rol ebx, 0x17
add ecx, ebx
mov ebx, ecx
jmp 0x4965ad