Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xfffffedf
jne 0x401070
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xfffffefa
jne 0x4010f4
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
ret
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xfffffed9
jne 0x401173
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
ret
call sub.user32.dll_GetMenuCheckMarkDimensions
cmp eax, 0xfffffeee
jne 0x4011f2
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
ret
call sub.kernel32.dll_GetSystemDefaultLangID
cmp eax, 0xfffffee7
jne 0x401276
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
call sub.ole32.dll_HPALETTE_UserUnmarshal
ret
jmp 0x4dbf65
and edi, ebx
xor edx, ebx
sub ebx, ecx
jmp 0x4ddfb0
pop esi
xor ebx, 0xa5d1c95f
xor edi, 0xa5d2430b
and edi, edx
add ecx, edi
mov edi, ebx
and ebx, ecx
rol edx, 6
add edx, ebx
xchg ecx, ebx
sub ebx, edx
add ecx, 0xa5d60a80
jmp 0x4dd939
mov esi, 0x123b2f04
or ecx, edi
mov edx, 0xa5dc2683
or edi, ebx
ror edx, 5
not edi
jmp 0x4ddfc1
call fcn.004dc578
mov edi, ebx
sub ebx, edi
and edx, ecx
sub ebx, ecx
or ecx, ebx
or ebx, edi
mov ebx, ecx
sub edx, ecx
shr ecx, 9
sub ebx, edx
or ecx, edx
jmp 0x4dd429
push 0xa1ce5968
and ecx, edx
mov edi, ecx
or ecx, edx
shl ecx, 0x1e
rol edx, 0x16
add ecx, 0xa6067e14
xor ebx, edx
neg edx
and ebx, edx
jmp 0x4dc2b1
pop esi
xchg edi, edx
sub ebx, ecx
or ecx, edi
sub edx, ecx
mov edi, ebx
jmp 0x4dd750
push 0xa1ce8266
sub ebx, edx
or ebx, 0xa60b4cca
inc edi
add edx, edi
not ebx
xchg ecx, edx
xchg edx, edi
mov edx, edi
xor ebx, ecx
jmp 0x4de045
push 0xa1d59bf8
mov ebx, edi
and ebx, ecx
mov edi, ecx
rol ecx, 0x1c
sub edx, edi
add ecx, edx
or ebx, ecx
mov edi, ebx
xor edi, edx
mov edi, ecx
sub ebx, edi
jmp 0x4df10e
pop esi
ror edx, 4
add edx, edi
xchg ecx, edi
sub ebx, edx
or ebx, edi
dec ebx
ror edx, 1
xor ebx, edi
bswap ebx
jmp 0x4dce6e
call fcn.004dc578
dec ecx
mov edi, ecx
xor edi, 0xa63933b0
mov ecx, ebx
add edx, 0xa63a0bed
or edi, ecx
and ecx, edi
inc edx
neg ecx
dec ebx
or edx, edi
jmp 0x4dcc73
pop esi
mov ebx, 0xa6598667
sub edi, 0xa659c907
sub ebx, edx
mov edi, ecx
sub ebx, 0xa65a638d
shl edi, 3
mov ecx, edx
xchg edx, edi
mov ecx, ebx
and ebx, 0xa65bfac8
or edi, ebx
or edx, 0xa65cd750
dec ecx
jmp 0x4de8ea
push 0xa1d26a57
sub edi, edx
xchg edx, edi
or edi, edx
add edi, ebx
shl edi, 0xe
jmp 0x4dd310
call esi
mov ecx, ebx
rol ecx, 0xa
or ebx, edx
and edx, ebx
xor ecx, 0xa6774f66
dec edi
ror edx, 0x14
rol ecx, 8
sub ebx, ecx
jmp 0x4dc2a1
call fcn.004dc578
mov edx, ecx
xor edx, edi
rol edx, 0x1f
sub edx, ebx
and ebx, 0xa67aabac
and edx, ebx
xchg ecx, ebx
or ebx, ecx
add edx, edi
or edi, ecx
and edx, ebx
not edx
or edx, 0xa67cf00a
jmp 0x4de6f1
pop esi
add edx, ecx
neg edx
add ebx, edx
and edi, ebx
or ebx, 0xa688261d
sub ecx, edi
dec edi
and edi, ebx
inc ebx
xor edi, ebx
sub ecx, ebx
inc ebx
jmp 0x4dd7bf
mov esi, 0x123b2f04
shl ecx, 3
mov ebx, edi
mov ebx, edi
shl ebx, 3
xor ecx, ebx
jmp 0x4dc21b
pop esi
or edi, ecx
inc edi
sub ebx, 0xa6acbe7f
xor edi, ebx
jmp 0x4dc682
mov esi, 0x2774562b
bswap ecx
sub edx, edi
xchg ebx, edi
sub ecx, ebx
xor edx, ebx
add ebx, edx
sub ebx, edi
dec edx
and ebx, ecx
xor ebx, 0xa6cd4376
xchg ecx, edx
add edi, edx
bswap ebx
add ebx, edi
add edx, 0xa6cf4ef2
jmp 0x4dc4be
pop esi
xchg ecx, edi
xor ecx, edx
shl edi, 0x1f
xchg edi, ecx
xor ebx, edx
sub ecx, ebx
xchg ecx, ebx
bswap ecx
bswap edx
inc ebx
xchg edi, ebx
jmp 0x4dd22b
mov esi, 0x2774562b
xchg edx, ebx
neg edi
or edx, ecx
and ecx, 0xa6f44ea0
mov ebx, edx
xchg edi, ebx
or edx, ecx
neg edi
xor edi, 0xa6f5723d
or edx, 0xa6f5a97c
sub edx, edi
or edx, ecx
sub ecx, 0xa6f66c97
jmp 0x4dcf42
call esi
bswap edx
or ebx, edx
jmp 0x4de086
push 0xa1cb579d
add ebx, edi
or edx, edi
and edi, 0xa70d46ae
sub edi, ebx
and edi, 0xa70dc599
and edi, ebx
or edi, ebx
or ecx, edx
xor ebx, ecx
xor edx, 0xa70ee9e7
add ecx, ebx
add ecx, edx
and ebx, edx
jmp 0x4def4a
push 0xa1c9805f
and ebx, edx
or ebx, ecx
dec edi
shr ecx, 0x15
jmp 0x4de819
push 0xa1d803ea
mov edx, edi
mov ebx, ecx
or edx, edi
xchg ebx, edi
add ebx, ecx
sub ebx, ecx
mov ecx, edi
and edx, ecx
inc edx
xor edx, ecx
sub edx, ebx
mov ebx, edi
jmp 0x4dcfe4
push 0xa1cb2ad0
xchg ebx, edi
add edx, ebx
xor edi, edx
add ebx, edx
inc edx
or ebx, ecx
sub edx, edi
and edx, ebx
jmp 0x4dccc5
mov esi, 0x2774562b
shl ebx, 0xa
or edx, ecx
or edi, ecx
xchg ebx, edi
xor edx, ecx
xor ebx, edi
rol ecx, 0x14
jmp 0x4dde76
call fcn.004dc578
or edi, edx
and edx, edi
and ecx, ebx
add edx, edi
jmp 0x4de547
push 0xa1d82fcd
xor ecx, 0xa745c54e
mov ecx, edx
xchg ebx, ecx
rol ecx, 0xe
inc edx
sub edx, ebx
bswap ebx
add ebx, edi
xor edx, ecx
jmp 0x4ddb29
pop esi
add edx, edi
and ebx, ecx
add ecx, 0xa77739ad
add edi, edx
add ecx, edi
xor ebx, ecx
mov edx, ecx
add ecx, 0xa7785ef0
jmp 0x4de372
push 0xa1d2cf78
mov edi, 0xa7870f5b
sub ebx, edi
mov edi, ebx
or ebx, edx
add edi, ebx
add ecx, edx
sub edi, ebx
jmp 0x4df018
call esi
not edx
shl ebx, 0xf
or edx, ebx
mov ebx, ecx
add ecx, 0xa79e8645
or edi, 0xa79ebd64
jmp 0x4df273
call fcn.004dc578
xchg edi, ecx
mov edi, ecx
and edi, ebx
mov edi, edx
xor ecx, ebx
or edx, 0xa7bd8a45
and edi, ebx
jmp 0x4ddeb7
pop esi
xchg edx, edi
and ecx, edi
inc edi
xor edx, ebx
shl ebx, 0x11
mov ecx, 0xa7db1733
and edx, ecx
xchg edi, edx
xor edx, ecx
jmp 0x4dc7db
push 0xa1d4bedb
sub edi, ecx
or ecx, 0xa7e10e5b
jmp 0x4de774
push 0xa1cde6c5
and ecx, 0xa805cdca
or edi, ebx
not ecx
xor ebx, edi
inc edx
neg ecx
or ebx, edi
and edx, edi
rol edi, 8
or edi, ecx
and ecx, ebx
shr edx, 4
xchg edi, edx
jmp 0x4dd9f6
push 0xa1ce108e
mov ecx, edx
add edx, ebx
sub edi, ecx
xor edx, 0xa81affdd
jmp 0x4dc25c
push 0xa1d85af7
xchg ecx, ebx
add ecx, edx
sub ebx, edi
add ebx, 0xa832fba0
add edi, ecx
sub ecx, edi
or ebx, 0xa8339272
or ecx, 0xa833c608
or edi, edx
jmp 0x4dc0cc
push 0xa1d61d07
or edi, 0xa84da352
sub edi, 0xa84e155e
shr ebx, 0xa
sub edi, ebx
add ecx, ebx
mov edx, 0xa84fa73a
xchg ebx, edx
not edi
xor ecx, edi
jmp 0x4df0ac
call fcn.004dc578
shr edi, 4
sub edx, 0xa851d6d5
and edi, ebx
mov ebx, 0xa8529f79
xor edi, ecx
mov edi, edx
mov edx, 0xa8540991
rol edi, 8
sub ebx, edi
mov ecx, edi
mov edi, ebx
sub edx, ebx
or ebx, edi
shl edx, 0x12
sub ecx, ebx
jmp 0x4dc70c
pop esi
neg ecx
add ebx, edi
or ecx, edi
xor edx, 0xa866bf9f
mov edx, edi
sub edi, ebx
xchg ecx, ebx
inc ebx
sub ecx, edx
xchg edi, edx
xchg ecx, ebx
jmp 0x4dc91b
push 0xa1c95694
or ecx, 0xa873d367
add edx, edi
inc ebx
add edx, ebx
xor ecx, 0xa874c13b
xchg edx, ebx
shl edx, 1
add edx, ebx
bswap ebx
jmp 0x4dccf5
call fcn.004dc578
not ecx
mov ebx, ecx
or edi, ecx
or edx, edi
jmp 0x4deaae
call esi
mov ecx, 0xa881e24d
bswap ecx
add ecx, ebx
add ebx, edi
mov edx, ebx
sub edx, 0xa8841093
inc ebx
xchg edi, ecx
jmp 0x4df053
push 0xa1c869b4
mov edx, ebx
sub ebx, edx
shr edi, 0x10
jmp 0x4de7fd
jmp loc.004e4000
pop esi
add ebx, 0xa8a32364
and edi, edx
sub edi, 0xa8a4c5ea
rol ebx, 2
sub edx, ebx
xchg ebx, edx
jmp 0x4df03a
mov esi, 0x123b2f04
shr edx, 5
mov ecx, ebx
or ebx, 0xa8ab02a7
sub edi, edx
xor ebx, edi
mov edi, edx
or ecx, edx
jmp 0x4dc72b
push 0xa1d5f14c
rol ebx, 0xa
and ecx, edi
xor edi, ebx
xchg edx, ecx
mov ecx, 0xa8ad466a
add ecx, ebx
add ebx, edi
dec edi
mov ecx, 0xa8ae43cd
or ebx, edi
jmp 0x4ddc95
pop esi
add ebx, edi
shr ebx, 8
mov edi, 0xa8afb560
bswap ebx
xor edi, ecx
xor ebx, edx
xchg ecx, edx
dec ecx
xchg edx, ecx
rol edi, 3
xchg edx, edi
ror edx, 0xf
jmp 0x4de2f3
pop esi
xor ebx, edi
inc ecx
mov ebx, edi
and edi, edx
shl edi, 7
add edx, 0xa8b53ba7
sub ebx, edx
add edi, 0xa8b5b57a
add ebx, edi
add edi, edx
sub edx, edi
or edx, ebx
mov ecx, edx
xor edx, ecx
sub ebx, edx
jmp 0x4ddff0
pop esi
xor edi, 0xa8c95da0
bswap edx
and edx, ebx
neg ebx
or ebx, edx
mov edx, 0xa8caaef7
xor ebx, 0xa8cae517
or edi, ebx
bswap edx
jmp 0x4de0a9
pop esi
rol edi, 0xa
ror edx, 9
sub edx, ebx
add ecx, ebx
dec ebx
add ecx, 0xa8f89bd4
add edx, ebx
jmp 0x4dc459
push 0xa1ccdfbd
mov edi, ebx
add ecx, edi
shl ebx, 0x10
xchg edx, ebx
shl edx, 0x1c
shl ebx, 0x1e
or edi, ebx
not ecx
not edi
jmp 0x4dceff
pop esi
shl edx, 0x13
or ecx, edx
add ebx, ecx
or ebx, ecx
inc ebx
and ebx, edx
add edi, ebx
xchg ecx, edx
or edi, ecx
jmp 0x4dc438
call esi
mov ecx, edx
mov ecx, 0xa92abf5e
mov edi, ebx
add ebx, 0xa92b3d02
sub ecx, edx
sub edi, ebx
and edx, ebx
and ebx, edx
or edi, 0xa92c4a81
or edi, edx
add edi, ecx
xchg edi, ecx
shr edx, 0x1e
add ebx, ecx
xor edx, 0xa92ee3f3
jmp 0x4de183
pop esi
and ebx, edi
and ecx, edi
or ebx, edx
shr edi, 0x12
bswap edx
add edx, ecx
add edx, 0xa93f85e9
sub edx, 0xa93fbbed
or edx, 0xa940032d
jmp 0x4ddd69
call esi
sub edx, ebx
inc ecx
dec ebx
or edx, 0xa94bb2e2
xchg edx, ebx
xor edx, edi
xor ecx, edi
and edi, ecx
jmp 0x4de866
mov esi, 0x123b2f04
xor ecx, ebx
add edx, ecx
or ecx, edx
shr ebx, 6
ror edi, 0x15
xor edx, edi
and ecx, edi
rol ecx, 9
or edx, ecx
or ecx, 0xa95b65df
mov edi, edx
bswap edx
jmp 0x4df2dd
mov esi, 0x123b2f04
sub edx, ebx
and ecx, ebx
bswap ebx
xor ecx, ebx
not edi
xor edx, edi
xchg edx, edi
or ecx, edx
not edi
jmp 0x4dd5bc
push 0xa1c9ab02
inc ecx
add ebx, ecx
add ebx, edx
add edx, edi
jmp 0x4dc9fc
pop esi
xor edi, ecx
xor edx, ecx
add ebx, edi
dec edx
jmp 0x4de631
push 0xa1d7d774
xor edx, ebx
add ecx, ebx
sub ebx, edx
and ebx, ecx
shr ecx, 0xc
rol edx, 0xc
sub edx, edi
xchg ecx, edi
bswap edx
or edi, edx
dec ebx
xor edi, ecx
sub ebx, edi
sub edi, edx
rol edi, 0x1b
jmp 0x4dcd80
mov esi, 0x2774562b
and edi, edx
add ebx, edi
neg ecx
sub ecx, edi
xchg edi, ebx
xchg edx, edi
xor ebx, edi
and ecx, 0xa99393de
xor ecx, ebx
jmp 0x4ddcbd
call esi
or edx, ecx
shr edi, 0xc
add edi, edx
mov edi, ecx
xor edx, ebx
ror edi, 3
bswap edi
xchg edx, edi
and edx, ecx
jmp 0x4dc065
push 0xa1cb7e16
xor edi, edx
mov ecx, ebx
and edi, ebx
and edi, 0xa9fc94e7
sub ecx, 0xa9fccba6
dec edi
xor ebx, ecx
add ecx, ebx
rol ebx, 0x1d
jmp 0x4dc905
push 0xa1d33918
inc edx
rol edi, 4
or edx, ebx
or ecx, 0xaa13a0bb
sub ebx, edx
xor ecx, 0xaa1476cd
or edi, edx
bswap ecx
jmp 0x4dea18
pop esi
or edx, edi
xor ecx, edi
inc ecx
or edi, edx
xor edx, ebx
sub ecx, edi
dec edi
and ebx, 0xaa17735d
dec edi
jmp 0x4dc5f5
pop esi
add ecx, 0xaa18022d
xor edx, ebx
add ecx, ebx
xor edi, 0xaa18a8e6
jmp 0x4dde23
push 0xa1d648d4
or edi, edx
shr ebx, 0xa
and edi, 0xaa1e90b7
or edi, edx
sub ebx, 0xaa1ef863
xor edx, ebx
mov edx, 0xaa1f6fe3
or edi, ebx
jmp 0x4dcbaf
call esi
and ecx, edi
mov edx, edi
or ecx, ebx
not edi
xor edx, ecx
xchg ebx, ecx
dec edx
xor edx, edi
inc edi
add ebx, 0xaabdca9a
inc edx
or ebx, edi
jmp 0x4de4b3
push 0xa1d5c7ea
sub edi, edx
mov ecx, edi
and edx, ecx
mov ebx, 0xaabf5df5
mov ebx, edx
mov ecx, edx
sub edi, 0xaac001f5
sub ebx, edx
jmp 0x4de062
pop esi
not edi
mov ecx, edi
bswap ebx
inc ecx
and edi, 0xaafeba97
shr ebx, 4
xor ebx, ecx
sub edi, edx
sub ecx, 0xab01d2df
mov ebx, edx
jmp 0x4dcb07
call fcn.004dc578
ror ebx, 0x1f
xor ebx, edx
shl edi, 0xe
add edi, ecx
shl ebx, 0x1a
jmp 0x4df0ee