Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3

Disassembly:
neg ebx
add edi, esi
xchg esi, ebx
xor ebx, 0x4ee89e95
sub edi, edx
xchg esi, edx
call sub.user32.dll_GetMessagePos
xor edi, edx
and edx, edi
cmp eax, 0xfffffede
jne 0x401098
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
ret
sub ebx, 0x4ef1957b
sub edx, ebx
call sub.user32.dll_GetMessagePos
add edx, ebx
mov edx, esi
sub ebx, edi
or edi, edx
or ebx, esi
neg edx
cmp eax, 0xfffffef3
jne 0x401158
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
ret
rol edx, 1
sub edi, edx
sub ebx, edx
call sub.user32.dll_GetMenuCheckMarkDimensions
and edx, esi
bswap esi
sub ebx, edi
mov esi, edx
or edx, esi
mov ebx, esi
xor ebx, edi
cmp eax, 0xffffff05
jne 0x4011e2
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
ret
dec ebx
xchg esi, ebx
call sub.user32.dll_GetFocus
mov ebx, 0x4f18c9c3
xor ebx, 0x4f192bd7
xor edx, ebx
inc edi
sub esi, 0x4f1a4d1e
cmp eax, 0xfffffef8
jne 0x401287
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
call sub.ole32.dll_SNB_UserSize
ret
jmp 0x494833
mov ebx, edi
xchg edi, ebx
and edx, 0x53077430
add ebx, edx
jmp 0x495914
mov ecx, 0x2774562b
xor edi, esi
shr esi, 0xf
or edi, 0x55aabf4c
xor edi, esi
or edx, ebx
sub ebx, edi
ror edx, 0xa
sub edi, esi
add ebx, 0x55ac5a8a
jmp 0x496dc9
pop ecx
neg ebx
or edi, esi
or esi, edx
inc esi
xor edi, ebx
xchg ebx, edx
and edi, esi
xchg edi, ebx
dec ebx
add edi, esi
jmp 0x4959a8
pop ecx
or edi, 0x55dbec6b
add edx, esi
or edi, esi
xchg edx, ebx
add esi, edi
and ebx, edx
rol edx, 0x1a
add esi, 0x55dda558
mov ebx, 0x55dde2b0
dec edx
sub esi, edi
or edi, edx
mov edx, ebx
jmp 0x495cdf
pop ecx
and ebx, esi
mov edi, 0x55f9548e
rol edx, 0x17
mov edi, esi
sub edi, edx
xor ebx, edx
shl esi, 0x11
or edi, edx
inc ebx
shl edi, 0x16
inc edx
and ebx, esi
add ebx, edx
jmp 0x496018
pop ecx
xchg esi, edx
xor edi, edx
mov edx, edi
neg edx
add esi, edx
add edx, 0x5638131c
rol edi, 0x1e
or edx, 0x56388777
or edx, ebx
sub esi, 0x5638f676
jmp 0x4952d6
pop ecx
and esi, ebx
xor edi, ebx
or ebx, edi
add ebx, esi
and esi, edx
xor edx, edi
sub edi, edx
add ebx, edx
xor ebx, edx
xor edi, esi
or edx, ebx
add esi, 0x5664196f
bswap edi
jmp 0x496e62
pop ecx
sub edx, ebx
and edi, 0x5680a162
and esi, ebx
mov esi, 0x56815006
sub edx, edi
xchg esi, edi
bswap edx
jmp 0x497bfa
push 0x531f8dd1
inc esi
ror ebx, 0x13
or edx, 0x56912faf
mov edi, 0x569165b9
neg ebx
and ebx, edx
rol edx, 0xd
jmp 0x495339
push 0x53134542
or esi, ebx
nop
mov edi, 0x56947fc2
neg ebx
rol edi, 0xf
xchg esi, edx
and edi, esi
jmp 0x4977cb
push 0x5314e4c0
shr edi, 1
or edx, ebx
add ebx, esi
mov esi, 0x569a33ef
add edi, esi
shr edi, 2
rol ebx, 1
mov edi, edx
xchg edi, esi
or esi, edx
or edi, 0x569fe6c7
jmp 0x496fcd
call fcn.0049651b
mov ebx, 0x56d398b6
xor edi, ebx
and ebx, edi
and edx, 0x56d439ee
not edi
dec edx
rol edi, 0x13
xchg ebx, esi
and ebx, esi
sub ebx, edx
mov edx, esi
jmp 0x495240
call fcn.0049651b
inc edi
inc ebx
add esi, ebx
add esi, 0x56e807b0
not edx
shr ebx, 0x18
jmp 0x49710b
pop ecx
mov ebx, esi
rol edx, 0xd
xchg edx, ebx
add edx, ebx
add edx, 0x56e9c79c
or edx, edi
ror ebx, 0x10
inc edx
or esi, edi
ror esi, 0x12
or edx, edi
jmp 0x496992
push 0x531f635f
and edx, ebx
or esi, edx
mov esi, 0x56f734e6
sub esi, 0x56f79349
add esi, 0x56f80644
xchg esi, ebx
add esi, edx
neg edx
and edx, 0x56f9cb49
sub ebx, esi
add ebx, 0x56fad985
inc ebx
mov edi, ebx
sub ebx, edx
jmp 0x494e70
call fcn.0049651b
mov edi, 0x571ab22b
and esi, ebx
xor esi, edx
sub esi, edi
dec ebx
xor esi, edi
xor edi, esi
sub edi, 0x571c5901
mov esi, ebx
sub edx, ebx
jmp 0x4963f9
call ecx
add ebx, edi
add edx, ebx
sub edx, esi
or esi, edx
rol edx, 0x1d
nop
inc esi
mov ebx, edx
shr esi, 7
jmp 0x49707e
pop ecx
and esi, ebx
add edi, ebx
and edi, edx
sub edx, edi
and edx, 0x57423fa4
jmp 0x497749
push 0x531fb486
xor ebx, 0x574883fd
add edi, ebx
sub ebx, 0x57491b83
neg esi
mov edi, 0x5749ade4
or edi, ebx
add esi, edx
neg edx
and edi, 0x574e7fed
jmp 0x496748
call fcn.0049651b
or esi, 0x5755992d
add edi, edx
xor esi, edx
ror edx, 5
sub edi, edx
xchg edx, ebx
sub esi, ebx
xor esi, edx
or edi, esi
jmp 0x4970f9
call ecx
and esi, ebx
mov edi, esi
sub edx, ebx
sub esi, edi
or edx, 0x575eec25
add edi, esi
or edx, 0x575fcafa
jmp 0x4966c4
pop ecx
and ebx, 0x57976d05
sub esi, 0x5797a2b5
and edi, 0x5797d88f
xchg edi, ebx
add edi, esi
or ebx, edx
or ebx, edx
jmp 0x4968f3
call fcn.0049651b
mov edi, ebx
xor ebx, 0x57df03c0
nop
and esi, 0x57df6ee8
and ebx, edi
rol esi, 0x18
neg edi
sub edi, ebx
mov ebx, 0x57e08389
sub edi, edx
or edx, esi
not edx
nop
jmp 0x496619
push 0x5311380e
mov edx, 0x57ec4d4a
xor ebx, esi
add edx, ebx
xor edx, ebx
shl ebx, 0x13
xor esi, edx
and edi, 0x57ed9295
add edx, 0x57edc892
neg esi
mov esi, ebx
jmp 0x496891
pop ecx
mov ebx, edx
sub edx, 0x57f7795a
rol ebx, 0xf
mov esi, edi
and edi, ebx
add esi, edi
rol edx, 0xd
and edx, esi
and edi, 0x57f8f3a5
sub edi, 0x57f94793
jmp 0x496111
pop ecx
shl edi, 1
add edx, esi
neg edx
mov edi, edx
or edi, esi
xor esi, edi
mov edi, 0x57ffb750
xchg ebx, esi
ror edi, 4
jmp 0x4974ea
call ecx
or esi, ebx
mov edi, ebx
xor esi, ebx
mov esi, 0x580534b5
mov ebx, esi
sub edi, 0x58059f19
add ebx, esi
rol edx, 0xc
shl ebx, 0x1c
or edi, 0x58078bf8
rol esi, 0x12
jmp 0x4975a5
pop ecx
or ebx, edx
mov ebx, esi
sub edx, esi
mov esi, edx
or edi, edx
rol edx, 9
sub esi, edx
or edi, ebx
dec edi
and edx, esi
shr ebx, 0x14
jmp 0x4960cf
pop ecx
add edx, 0x58432b50
mov edx, esi
xchg edi, esi
add edx, edi
or esi, edx
xchg esi, edx
and edi, esi
xor ebx, esi
jmp 0x494be8
call fcn.0049651b
mov esi, 0x58a54efa
sub edi, edx
mov edi, ebx
jmp 0x495a2b
call ecx
bswap edx
xor ebx, esi
rol ebx, 0x18
sub esi, edx
add ebx, 0x58c260c8
bswap esi
jmp 0x496350
jmp loc.0049a000
push 0x53171373
bswap edx
not edi
mov esi, edx
mov esi, ebx
sub edx, esi
not edx
and esi, edx
rol ebx, 0x1e
and esi, edi
ror esi, 0xf
sub edi, ebx
jmp 0x4972e7
push 0x531814c3
neg ebx
sub ebx, edx
sub esi, ebx
mov edx, ebx
sub esi, edi
jmp 0x496eeb
pop ecx
ror edx, 0xa
and edx, ebx
neg edx
or edx, 0x58e2e8b6
jmp 0x494ef8
push 0x5319922a
neg ebx
dec ebx
dec edi
or edi, esi
add esi, edi
neg ebx
rol edx, 0xb
or edx, edi
neg edx
jmp 0x4969fe
mov ecx, 0x123b2f04
and esi, 0x5910864e
mov edx, edi
add ebx, edx
or ebx, edi
add ebx, esi
ror esi, 4
sub esi, edi
ror ebx, 0x16
dec edx
or ebx, esi
neg edi
xor edx, 0x59156e99
sub esi, ebx
jmp 0x495eba
push 0x531a109d
rol edx, 9
sub esi, 0x5916a836
xchg ebx, esi
add edi, esi
xor ebx, edi
and ebx, 0x591c0526
or edi, ebx
not edx
or edx, esi
and edx, 0x591d8311
jmp 0x49793c
push 0x5319e9af
rol edi, 0xa
add ebx, 0x592c11d6
xchg edi, edx
bswap esi
add edx, 0x592cb34f
sub edi, 0x592ce914
ror esi, 0x11
or ebx, edi
xor edx, 0x592d8ba5
jmp 0x496275
pop ecx
mov esi, edx
or edx, esi
add edi, ebx
shr ebx, 1
and ebx, edi
neg ebx
mov edi, 0x5931ff98
and edx, esi
shl edi, 8
shl esi, 0x1d
jmp 0x494b01
call ecx
neg esi
add ebx, edx
sub edi, esi
or ebx, edx
sub esi, edx
or edx, esi
or esi, ebx
and ebx, edi
sub edi, edx
jmp 0x494e47
mov ecx, 0x123b2f04
xor edi, edx
or edi, ebx
xchg ebx, esi
and esi, ebx
rol ebx, 0x1e
and esi, 0x594d6ab0
rol esi, 0xe
or edx, ebx
add esi, 0x594e0db8
xchg edi, ebx
mov ebx, 0x594eae4a
jmp 0x49521c
push 0x5315e76b
xchg ebx, edx
or ebx, 0x5970a896
mov esi, edx
or esi, ebx
nop
or ebx, 0x59717c53
neg ebx
ror edx, 0x1e
and esi, edi
jmp 0x496248
call ecx
inc esi
and edx, ebx
sub ebx, edi
shr edi, 0x14
inc edx
dec edi
dec ebx
jmp 0x4950c7
mov ecx, 0x2774562b
mov edi, 0x5989b30a
xor ebx, 0x598a12a0
sub edx, esi
not edx
sub esi, ebx
xchg edx, esi
add edx, esi
shl edi, 0x12
jmp 0x495069
push 0x531b6418
xchg ebx, edi
or esi, edx
or ebx, esi
and esi, ebx
mov esi, edi
add esi, 0x59a6b33b
and ebx, edi
jmp 0x496d61
pop ecx
rol ebx, 0x11
or edx, ebx
bswap edi
inc edx
mov edi, ebx
and edx, 0x59aad53d
add edi, edx
nop
mov esi, edx
neg edi
xor ebx, esi
jmp 0x494a7b
mov ecx, 0x123b2f04
shl ebx, 9
inc ebx
or esi, 0x59bfb515
shl edx, 0x11
mov esi, ebx
sub edi, ebx
jmp 0x495fb5
push 0x53118fb1
xor ebx, edx
bswap esi
or esi, ebx
shr edx, 0x1f
mov esi, edx
xor edx, esi
or esi, edx
jmp 0x49767a
push 0x5316e95e
xchg ebx, edi
or edx, 0x59f84e06
xchg edx, edi
not edx
jmp 0x495fc3
pop ecx
bswap edi
mov esi, 0x5a0f9293
sub edi, ebx
sub ebx, esi
ror edi, 0x17
dec ebx
inc edi
xchg esi, ebx
bswap edx
or edi, esi
shr edx, 0x12
mov ebx, edi
shr edx, 0x1a
neg edi
sub edi, esi
xor ebx, edx
jmp 0x497917
call ecx
and edi, edx
dec edx
add edi, edx
xor edi, esi
inc edi
and edi, 0x5a233d96
mov ebx, edx
or ebx, edi
xor esi, ebx
xchg edi, esi
mov ebx, edi
sub edx, edi
xchg ebx, edi
shl esi, 4
jmp 0x495cfc
push 0x5319bfda
xor esi, ebx
shl edx, 0xa
mov edx, esi
and edi, edx
xor ebx, edi
inc ebx
sub edi, edx
add edx, 0x5a27de77
xor esi, edi
jmp 0x4962ff
push 0x5313945f
sub ebx, 0x5b11539a
bswap esi
neg ebx
inc esi
rol ebx, 0x15
add esi, 0x5b12ae12
jmp 0x497aa6
push 0x531de3db
add edx, edi
and edx, esi
dec esi
xor edx, ebx
neg edx
or esi, ebx
xchg edi, ebx
or edx, ebx
xor ebx, 0x5b1db270
ror esi, 6
mov edi, esi
jmp 0x496f4f
push 0x531db72e
xor ebx, edi
and esi, edx
sub esi, edx
ror edx, 0xa
shr edi, 2
and edi, edx
and edx, esi
and ebx, edi
jmp 0x496d17
push 0x531b9185
xor edi, ebx
xchg esi, edx
mov edi, 0x5b2104a9
neg edi
neg ebx
add edx, 0x5b21bd43
and edi, 0x5b21f890
xor edx, esi
neg edi
jmp 0x49648e
call fcn.0049651b
nop
and edi, esi
or ebx, edx
and ebx, edx
and edi, edx
shl edx, 6
xor edi, 0x5b28071c
mov edx, 0x5b284d47
add edx, esi
sub edi, ebx
xchg edi, ebx
mov edx, 0x5b2ac4b1
jmp 0x4953b9
pop ecx
or edx, ebx
xor esi, edi
sub edx, esi
xchg edx, edi
add edi, edx
sub esi, ebx
dec edx
mov edi, esi
not esi
jmp 0x4959f5
push 0x53183eea
and edx, ebx
xor edx, ebx
add esi, edx
nop
xor ebx, esi
sub edx, esi
not ebx
add esi, edi
xchg ebx, edi
xor ebx, 0x5b498109
xchg edx, edi
rol edi, 0x19
jmp 0x4979c6
call fcn.0049651b
xchg edx, ebx
inc edi
and edi, edx
sub edi, ebx
and edi, edx
bswap edi
xchg esi, edx
add edi, edx
and esi, ebx
add edx, 0x5b4f9200
and esi, ebx
jmp 0x495f9d
push 0x531e0a6d
shr edi, 0x12
sub ebx, edi
xor edx, esi
xor esi, ebx
neg esi
neg edx
nop
sub esi, 0x5b575bbe
mov ebx, edx
shl ebx, 0xd
add edi, 0x5b581a05
sub ebx, esi
xchg ebx, esi
jmp 0x49662b
mov ecx, 0x123b2f04
or ebx, edx
add esi, edi
or ebx, esi
sub edi, 0x5b5ede35
rol edi, 0x18
and esi, 0x5b5fc466
xchg edi, edx
and ebx, edx
or edx, ebx
shl edx, 0x14
xor edx, esi
mov ebx, 0x5b627664
jmp 0x495398
call fcn.0049651b
rol edx, 0x19
or esi, 0x5b719ac7
xor edx, esi
or edx, 0x5b729c88
mov edi, 0x5b730daa
not edi
jmp 0x4969d8
pop ecx
shr ebx, 5
sub ebx, edi
or esi, ebx
xchg esi, ebx
xchg ebx, edx
neg esi
add ebx, edi
mov ebx, edi
jmp 0x494cc7
call ecx
mov edi, esi
or edx, edi
and edx, ebx
and edi, esi
dec ebx
bswap edx
jmp 0x497a47
call ecx
shl ebx, 0x15
sub edi, ebx
or esi, 0x5b8dd9c5
or edx, ebx
not edi
inc edx
ror edx, 0xb
or ebx, esi
xor edi, edx
add esi, ebx
sub edx, esi
xor esi, edx
or edi, edx
and esi, edi
jmp 0x494d27
mov ecx, 0x2774562b
xor ebx, 0x5bdb3f37
neg edi
xor edi, edx
and edi, ebx
neg ebx
nop
add edi, ebx
sub edi, 0x5bde8a26
add ebx, 0x5bdef861
mov ebx, esi
and esi, edi
jmp 0x49705c
pop ecx
and edi, esi
or edx, esi
add edi, esi
xor esi, 0x5c599bfb
and edi, edx
xor edx, ebx
jmp 0x49668f
pop ecx
xchg edx, ebx
rol ebx, 0x12
mov esi, ebx
and ebx, 0x5c7b5820
shl esi, 0x10
sub ebx, edx
mov edx, ebx
xchg esi, ebx
mov ebx, esi
jmp 0x4955b6
mov ecx, 0x123b2f04
shl esi, 0xd
add edx, ebx
and ebx, esi
add edx, 0x5ca6b647
xor edi, 0x5ca72764
xor edi, 0x5ca79b65
xor edx, ebx
and esi, ebx
jmp 0x495882
push 0x531f39f0
mov edi, 0x5ce27602
not esi
rol esi, 0x16
or edi, edx
sub ebx, 0x5ce36e17
mov esi, edx
xor ebx, edi
add esi, edi
jmp 0x49512c
push 0x53136cce
add ebx, esi
neg edx
xchg edx, edi
xchg ebx, edx
mov edx, edi
or edi, 0x5cee69ca
and esi, 0x5ceea4e6
jmp 0x496cb0
push 0x53131ad9
xchg esi, ebx
not edi
rol ebx, 0x1e
rol esi, 0xf
shl edi, 0xf
sub edx, ebx
bswap esi
sub edi, esi
or edi, 0x5d383f9a
sub edi, esi
jmp 0x494eaf
mov ecx, 0x2774562b
inc edi
add esi, edi
sub esi, ebx
rol esi, 1
shr edx, 2
and esi, edx
xor ebx, edi
or edx, ebx
xchg edi, esi
xor edx, esi
not esi
or edx, ebx
jmp 0x4950ae
push 0x53186896
add edi, ebx
and edx, ebx
mov esi, 0x5d50b496
or esi, 0x5d512f1d
xchg esi, edx
xchg esi, edx
mov edx, edi
jmp 0x49486c
push 0x5315bd38
mov edx, esi
shr edi, 5
xor edi, esi
rol ebx, 4
dec esi
mov ebx, edx
xchg ebx, edx
mov esi, ebx
jmp 0x496564
pop ecx
neg edi
sub edx, edi
sub edx, esi
sub esi, edi
xchg edi, edx
and ebx, edx
and edi, esi
sub ebx, edx
sub edx, esi
shl edx, 0xf
sub edx, edi
add ebx, esi
add edx, ebx
jmp 0x497a2c
mov ecx, 0x2774562b
xor ebx, esi
ror esi, 0x15
rol esi, 0x17
xor esi, edx
xor edx, 0x5d822b6d
jmp 0x496f11
pop ecx
sub esi, ebx
and edi, esi
xchg esi, ebx
sub esi, ebx
mov edi, esi
inc ebx
and esi, ebx
bswap edi
mov edi, edx
jmp 0x496d3b