Function at 0x424920
Capabilities:
Hash data using murmur3

Disassembly:
mov ecx, dword [0x78bd58]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x424bec
sub esp, 0x1c
mov eax, dword [esp + 0x20]
test eax, 3
jne 0x424bd5
movzx edx, byte [0x78bc2e]
mov ebx, dword [esp + 0x2c]
mov ebp, dword [ebx + 0x2c]
test byte [ebp], al
mov ecx, dword [esp + 0x34]
mov esi, ecx
shr esi, 3
mov edi, ecx
and edi, 7
nop
mov ecx, edi
mov eax, 1
shl eax, cl
lea edi, [ebp + esi]
test dl, dl
jne 0x424a46
mov ecx, dword [0x78c134]
test ecx, ecx
jle 0x4249a3
movzx ecx, word [ebx + 0x1c]
mov edx, dword [esp + 0x34]
cmp edx, ecx
jb 0x4249a3
mov ecx, dword [ebx + 0x28]
test byte [ecx], al
movzx ecx, byte [ecx + esi]
nop
test al, cl
je 0x424ac0
movzx ecx, byte [ebp + esi]
test al, cl
jne 0x424a42
nop
mov dword [esp], edi
mov byte [esp + 4], al
call fcn.00406b00
nop
nop
nop
mov edx, dword [esp + 0x2c]
mov ecx, dword [edx + 0xc]
mov ebx, dword [0x753b74]
test byte [ebx], al
mov ebp, ecx
shr ebp, 0x10
and ebp, 0x3f
mov esi, ecx
shr esi, 0xd
and esi, 7
mov eax, ecx
mov ecx, esi
mov edi, 1
shl edi, cl
shr eax, 0x16
mov ebx, dword [ebx + eax*4]
test byte [ebx], al
movzx esi, byte [ebx + ebp + 0x840]
lea ebx, [ebx + ebp + 0x840]
xchg esi, eax
xchg edi, ebx
test bl, al
xchg edi, ebx
xchg esi, eax
jne 0x424a1d
mov dword [esp], ebx
xchg edi, eax
mov byte [esp + 4], al
xchg edi, eax
call fcn.00406b00
mov edx, dword [esp + 0x2c]
movzx ebx, byte [edx + 0x3e]
test bl, 1
je 0x424a7b
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 0xc]
mov edx, dword [edx + 0x44]
add ecx, edx
mov dword [eax + 8], ecx
adc ebx, 0
mov dword [eax + 0xc], ebx
add esp, 0x1c
ret
add esp, 0x1c
ret
mov ecx, dword [esp + 0x20]
mov dword [esp], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov byte [esp + 0x10], al
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
call fcn.004193b0
movzx eax, byte [esp + 0x18]
test al, al
jne 0x424ab2
mov edx, dword [esp + 0x30]
mov ebx, dword [edx]
test ebx, ebx
je 0x424a9e
mov eax, dword [ebx + 0xc]
cmp eax, 0x1fc
je 0x424a9e
jae 0x424ab6
mov ecx, dword [esp + 0x20]
mov dword [ebx + eax*4 + 0x10], ecx
inc dword [ebx + 0xc]
jmp 0x424aae
mov dword [esp], edx
mov eax, dword [esp + 0x20]
mov dword [esp + 4], eax
call fcn.0042cbe0
add esp, 0x1c
ret
add esp, 0x1c
ret
mov ecx, 0x1fc
call fcn.0046ff60
call fcn.0043fbd0
lea eax, [0x5e3c40]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00440440
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004402d0
lea eax, [0x5dc4b6]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00440440
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004402d0
lea eax, str.___SM____CZyi_____tvrRuUeEaAlLsS01bBoOxX_nNiIfFpP:_01__.2500xd__M___________n__s____Pn___n__n___n__t__LlLtLuMnCcCfCoCsLmLoMcMeNdNlNoPcPdPePfPiPoPsScSkSmSoZlZpZsYiip53_:____nid___q_vjsoreqgegtleltne_sif__dD_sSwWE:__inil01_______.__125625nanNaNSunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDecUTCEET0001CATWATEATGMTHSTHDT_03_04_05ESTCSTCDTMSTMDT_02EDTASTADTPSTPDTNSTNDT06030407IST0908IDT12PKT11KST05JST10_01_11_12_08_0913CETBSTMSK_0614_mStdDltzeddiegdbkdbHxDdbghxdSAEmdbdbxtcpgetregNUL:_EOFintmapptr...finobjgc__:_gp___in__n___n_____P__MPC___end___and_:_npc__GHanLaoMroNkoVaicgodnsudpftpssh::1setadxaesshaavxfmanet_:_TTLlennot:_____.exe.lnkFPStrueeEpPopenreadfileseeksyncpipeStat3125Atoi_InfInfJuneJulyEESTSASTAKSTAKDTACSTACDTAESTAEDTAWSTCESTNZSTNZDT_as_hour_in_dumppeekhttpkgdbmdbgwmicpathname.com.bat.cmdboolint8uintchanfunccallkindArgs_on_Callallgallprootitabsbrkidledead_is_LEAFbase_of______GOGC____pc:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp_gp_mp__mquitbindAhomChamKawiLisuMiaoModiNewaThaiTotoicmpigmpftpspop3smtpmdnsdial__r_t_nunix.ps1ermssse3avx2bmi1bmi2bitsNameTypehtmlelsewith__s___t_r_n_s_scap_____failErrorfalse_nil_svqxXchdirwritechmodchowncloseLstat1562578125MarchApril053004300545063003300845103012451345_0930monthLocaldnspyilspydebugILSpypizzacrackida__brutejamesproxymodelqueryvirusBrunoint16int32int64uint8arrayslice_and_kinddefersweeptestRtestWexecWexecRschedhchansudoggscanmheaptracepanicsleepgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_tab_top_...___fp:ntohsGreekAdlamBamumBatakBuhidDograKhmerLatinLimbuNushuOghamOriyaOsageRunicTakriTamilfileshttpsimap2imap3imapspop3shoststoastshort_FileInts:Ptrs:sse41sse42ssse3__at_no_IPClassbreak.eEpPindexprintblockrangeinputmatchrune_Hello_StringFormat__byte_for_stringreadatremove390625SundayMondayFridayAugustUTC_11UTC_02UTC_08UTC_09UTC12UTC13minutesecondx32dbgpc_retCentoswindbgdbgclrde4dotpepperghidrahackerx96dbgfolderprl_sfprl_tgMillergeorgevmwareERROR:exec:_uint16uint32uint64structchan____chan_Valuesysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_mnil_base_GetACPhangupkilledlistensocketCommonArabicBrahmiCarianChakmaCopticGothicHangulHatranHebrewKaithiKhojkiLepchaLycianLydianRejangSyriacTai_LeTangsaTangutTeluguThaanaWanchoYezidinetdnsdomaingophertelnet.localreturn.onionsendtoBypass__val_rdtscppopcntcmd_goheaderAnswerLengthprintf___
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00440440
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004402d0
lea eax, [0x5da0e8]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00440440
call fcn.0043fc30
lea eax, [0x5da43c]
mov dword [esp], eax
mov dword [esp + 4], 4
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
call fcn.00424c00
lea eax, [0x5da2bf]
mov dword [esp], eax
mov dword [esp + 4], 3
mov eax, dword [esp + 0x20]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xffffffff
call fcn.00424c00
mov eax, dword [0x78bd58]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov byte [eax + 0x95], 2
lea eax, [0x5df0df]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.0043dfe0
lea eax, [0x5e5e7b]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0043dfe0
nop
call fcn.0046eae0
jmp fcn.00424920