Function at 0x4e4925
Capabilities:
Hash data using murmur3

Disassembly:
jmp 0x63ee50
push es
or al, byte [ebx - 0x77]
cmp eax, 0x79a9e2
call fcn.00664fe5
inc edi
xor ecx, 0x3f2f11f8
add edx, dword [0x79ad16]
call fcn.00673a84
inc eax
dec esi
and dword [0x79a77e], esi
sub edi, eax
ror edi, 3
or esi, dword [0x79ac60]
or dword [0x79a621], esi
call fcn.005dbb5f
dec ebx
call fcn.005ba6ce
neg ecx
call fcn.005e2493
call fcn.005da8f3
neg ecx
inc ebx
call fcn.005fca8f
and dword [0x79a9fb], edi
rol edi, 3
add edi, eax
and dword [0x79a76e], eax
inc esi
dec eax
call fcn.005ab1ae
xor ecx, 0x3f2f11f8
dec edi
or dword [0x79a9a4], edi
dec ebx
push ebx
rol edx, 0xd
xor dword [0x79a9c9], esi
sub edx, ebp
xor ecx, 0x57f95cbe
or dword [0x79a528], eax
sub eax, 0x9c3ae99a
dec edi
or dword [0x79a966], ecx
mov dword [0x79a5f5], edx
not esi
sub ecx, esi
call fcn.006081a1
call fcn.0059a6c9
add ecx, esi
not esi
mov dword [0x79a6e6], edi
mov dword [0x79a8ff], edx
inc edi
add eax, 0x9c3ae99a
xor ecx, 0x57f95cbe
add edx, ebp
xor dword [0x79a8c2], eax
ror edx, 0xd
mov edi, 0x6f10a492
xor eax, esi
xchg edi, esi
xor eax, ecx
not eax
xchg esi, edx
add ecx, dword [0x79ad74]
inc esi
call fcn.006165d8
inc ebx
sub edx, ecx
xchg esi, edx
call fcn.00645ceb
rol ecx, 0x13
xchg ebx, edx
xor edx, 0x8727ef96
call fcn.006771e4
inc edi
add dword [0x79a54e], ebx
add edi, 0xe757692d
add dword [0x79a895], ebx
inc ebx
call fcn.00599f45
call fcn.005d989b
dec ebx
or dword [0x79a722], edi
sub edi, 0xe757692d
dec edi
call fcn.0050b10f
xor edx, 0x8727ef96
xchg ebx, edx
ror ecx, 0x13
call fcn.0055f7f6
xchg esi, edx
add edx, ecx
dec ebx
dec esi
xchg esi, edx
not eax
xor eax, ecx
xchg edi, esi
xor eax, esi
xor edi, 0x1e883b08
xchg ecx, esi
inc edx
call fcn.006507c5
not esi
add edx, dword [0x79ab25]
ror edi, 0x1a
sub ecx, dword [0x79aeff]
or dword [0x79a95d], esi
neg edi
add ebx, dword [0x79ac45]
sub dword [0x79aa00], ecx
call fcn.006697d7
neg edi
xchg ebx, eax
inc edi
inc ebx
call fcn.005c669d
sub ecx, dword [0x79abed]
add dword [0x79a855], edx
or dword [0x79a6f8], ebx
mov dword [0x79a940], edi
and dword [0x79a5bc], edx
call fcn.0056e70d
dec ebx
dec edi
xchg ebx, eax
neg edi
neg edi
rol edi, 0x1a
not esi
call fcn.00555eaa
dec edx
xchg ecx, esi
xor edi, 0x43abf3ff
call fcn.00520a35
rol ebx, 0x18
add ebx, 0xe9300951
neg edi
call fcn.004f5d9e
ror edx, 0x1c
xor eax, esi
mov dword [0x79a842], edx
sub edi, ebx
add eax, 0x73ad6f65
call fcn.0050c70f
sub eax, 0x73ad6f65
add edi, ebx
sub dword [0x79a7cb], edi
xor eax, esi
rol edx, 0x1c
call fcn.005aab2f
neg edi
sub ebx, 0xe9300951
ror ebx, 0x18
call fcn.005100c6
push edi
not ecx
add dword [0x79a9e8], edi
or dword [0x79a87d], ebx
xor eax, 0x14942655
neg esi
xor edi, eax
xor ebx, dword [0x79afae]
neg ecx
ror ebx, 0x1c
neg esi
inc esi
xor dword [0x79a947], ebx
xor eax, dword [0x79aac1]
call fcn.0053a1e2
xchg esi, edx
xor edx, 0x922b5171
add esi, ebp
mov dword [0x79a854], ebx
or ecx, dword [0x79ab99]
call fcn.004f3111
add eax, 0xa5955e59
call fcn.00657d47
call fcn.005dbb5f
sub eax, 0xa5955e59
call fcn.0063b4da
sub esi, ebp
xor edx, 0x922b5171
xchg esi, edx
dec esi
neg esi
rol ebx, 0x1c
neg ecx
xor edi, eax
neg esi
xor eax, 0x14942655
xor dword [0x79a694], eax
not ecx
mov edx, 0x2b8fcbb7
add edx, ebp
sub dword [0x79aa0a], edx
xchg ecx, eax
neg esi
call fcn.005456c0
or edi, dword [0x79ac2f]
ror eax, 3
xchg eax, esi
add esi, dword [0x79ad0e]
call fcn.004f33b7
call fcn.005de600
xchg eax, esi
rol eax, 3
call fcn.0059a203
neg esi
xchg ecx, eax
mov dword [0x79a939], edx
sub edx, ebp
and edx, 0xe7a399d7
and dword [0x79a71b], edx
ror ecx, 5
dec eax
xor dword [0x79a52e], 0x41a7a460
mov dword [0x79a9a3], ecx
neg ebx
or edi, dword [0x79aa5f]
sub eax, 0x70e1f050
xor ecx, dword [0x79aada]
ror edx, 0x1a
xor edi, edx
inc ebx
inc edx
sub dword [0x79a7a1], 0xff0ba2ac
add dword [0x79a970], ecx
call fcn.0065b59a
or dword [0x79a4d9], esi
xor eax, edx
add edi, 0x16e0f69d
call fcn.00528bd3
call fcn.005de197
sub edi, 0x16e0f69d
xor eax, edx
add dword [0x79a5ae], esi
call fcn.005d80f8
sub dword [0x79a645], ecx
add dword [0x79a6bb], 0x6c50fd18
dec edx
dec ebx
xor edi, edx
rol edx, 0x1a
add eax, 0x70e1f050
neg ebx
or dword [0x79a7ee], ebx
inc eax
rol ecx, 5
sub edx, 0xb511242c
xor eax, dword [0x79acee]
inc eax
xchg edi, edx
not ecx
xor dword [0x79a71f], eax
inc edi
sub ebx, eax
call fcn.0060b379
xor dword [0x79a953], ecx
call fcn.0063692e
xor eax, 0x962eada9
call fcn.005d0b3b
xchg edx, eax
mov dword [0x79a8d4], 0x72e945c2
add dword [0x79a69c], 0x91daedb1
xchg edx, eax
call fcn.004f21fe
xor eax, 0x962eada9
call fcn.005d88ff
xor dword [0x79a573], eax
call fcn.0065c8b9
add ebx, eax
dec edi
xor dword [0x79a60c], esi
not ecx
xchg edi, edx
dec eax
push edx
neg esi
ror esi, 0x14
not edx
xchg esi, edx
rol edx, 0x13
inc eax
neg eax
or dword [0x79a8d4], edx
ror edi, 0x19
call fcn.0062133a
xor ecx, esp
or esi, dword [0x79ad60]
inc esi
dec edi
not ecx
dec ecx
rol esi, 8
xor ebx, eax
call fcn.006620a0
call fcn.005d7a42
xor ebx, eax
ror esi, 8
inc ecx
not ecx
inc edi
dec esi
xor ecx, esp
call fcn.005ea97d
rol edi, 0x19
mov dword [0x79a504], esi
neg eax
dec eax
ror edx, 0x13
xchg esi, edx
not edx
rol esi, 0x14
neg esi
push esp
add edi, dword [0x79ab7c]
and dword [0x79aa43], esi
xchg esi, edx
add dword [0x79a510], edi
dec ebx
add eax, ebp
call fcn.00608324
rol eax, 0x15
or dword [0x79a670], ecx
call fcn.005f8c0f
call fcn.005f8879
and dword [0x79aa2e], ebx
ror eax, 0x15
call fcn.004f9e49
sub eax, ebp
inc ebx
or dword [0x79aa18], eax
xchg esi, edx
xor dword [0x79a690], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
neg esi
call fcn.005488ec
neg eax
xor esi, ebp
add ecx, dword [0x79ae77]
or dword [0x79a908], 0x4a943079
sub ebx, 0x98e4978f
call fcn.0052df40
mov dword [0x79a562], esi
xor ecx, 0x8ba4edd
sub edx, eax
xor dword [0x79a75e], edx
call fcn.00614fee
ror edx, 0xb
call fcn.00656806
xor esi, 0x504c6adf
neg esi
rol ebx, 9
xor esi, edx
call fcn.004f753c
xor esi, edx
ror ebx, 9
neg esi
xor esi, 0x504c6adf
call fcn.00637634
rol edx, 0xb
mov dword [0x79a892], ebx
add edx, eax
xor ecx, 0x8ba4edd
add dword [0x79a99d], edx
call fcn.005f0bbf
add ebx, 0x98e4978f
xor esi, ebp
neg eax
call fcn.004e45d9
neg esi
add esp, 0xc
rol ecx, 0x13
neg edi
or edi, dword [0x79aae3]
mov dword [0x79a6a8], ecx
xor ebx, edx
dec eax
call fcn.0060a81d
inc ebx
neg ecx
xor edi, ecx
and dword [0x79a9ae], ecx
add ebx, dword [0x79ab68]
add edx, ebp
sub dword [0x79a9c0], eax
dec esi
and dword [0x79a96a], eax
call fcn.004df129
call fcn.0062e86b
inc esi
mov dword [0x79a936], ecx
sub edx, ebp
or dword [0x79a59f], esi
xor edi, ecx
neg ecx
dec ebx
call fcn.005e198e
inc eax
xor ebx, edx
xor dword [0x79a4ea], ebx
neg edi
ror ecx, 0x13
mov edx, 0x496dd4dc
add ebx, dword [0x79ab79]
xchg ebx, eax
rol esi, 1
xor dword [0x79a54a], esi
xor dword [0x79a774], eax
xor ebx, 0x6d197ddc
add edx, dword [0x79acb3]
dec edi
sub edi, 0x5968469d
xchg edi, edx
sub esi, edx
xor edi, dword [0x79ace3]
add esi, edx
xchg edi, edx
add edi, 0x5968469d
inc edi
xor ebx, 0x6d197ddc
mov dword [0x79a703], edx
ror esi, 1
xchg ebx, eax
and edx, 0xddf199d2
dec edi
xor ebx, 0x65dc9186
xor edx, dword [0x79aae4]
and dword [0x79a620], eax
dec edi
and dword [0x79a6f3], esi
inc edi
xor edx, 0x45ebc9b6
add eax, ecx
xor dword [0x79a699], ecx
ror edi, 0x1d
xor ebx, 0x89cf8fb9
sub dword [0x79a807], esi
xor eax, dword [0x79acbb]
dec ebx
xor esi, esp
add edx, esi
call fcn.005cc62b
xor ebx, 0x23f20782
neg edx
xor edx, 0x8ef7edc7
call fcn.005d3412
xor edx, 0x8ef7edc7
neg edx
xor ebx, 0x23f20782
sub edx, esi
xor esi, esp
inc ebx
xor ebx, 0x89cf8fb9
rol edi, 0x1d
sub eax, ecx
xor edx, 0x45ebc9b6
dec edi
inc edi
xor ebx, 0x65dc9186
inc edi
add edx, 0xb69e6f30
xor dword [0x79a611], ecx
ror edx, 0x19
xor ebx, esp
xor dword [0x79a9a8], edi
xor ebx, 0x4327127d
mov dword [0x79a56e], eax
neg esi
xor esi, dword [0x79ad89]
call fcn.005619f8
mov dword [0x79a4da], 0x9e494a28
or dword [0x79a7e0], edx
dec esi
add eax, dword [0x79aeb2]
call fcn.0066b171
call fcn.00513eb2
inc esi
or dword [0x79a94e], 0x682ab829
call fcn.0056fef5
neg esi
or dword [0x79a698], ecx
xor ebx, 0x4327127d
xor ebx, esp
rol edx, 0x19
sub dword [0x79a9ce], esi
push edx
xor ecx, eax
dec esi
xchg eax, edx
and dword [0x79a978], esi
xor eax, edi
sub eax, dword [0x79ad55]
call fcn.00570c5c
dec esi
sub esi, dword [0x79ab2b]
or ecx, dword [0x79ac2c]
rol esi, 0xe
xchg ecx, eax
sub eax, 0x5534226a
rol eax, 0xb
xor dword [0x79a94a], ebx
ror edx, 0xd
xor dword [0x79a686], 0x6478ee8c
neg ecx
call fcn.00593501
call fcn.00504a1d
call fcn.0058ee99
neg ecx
or dword [0x79a54d], 0x6a619a1e
rol edx, 0xd
ror eax, 0xb
add eax, 0x5534226a
xchg ecx, eax
ror esi, 0xe
inc esi
call fcn.00518452
xor eax, edi
xor dword [0x79a5b5], edx
xchg eax, edx
inc esi
xor ecx, eax
mov edi, 0xbc6c3acc
add esi, 0x51ff264c
add eax, dword [0x79ab1e]
xchg edi, eax
rol eax, 0x1d
mov dword [0x79a7f2], eax
add dword [0x79a513], 0x96fa5599
or ebx, dword [0x79addb]
not ecx
or esi, dword [0x79ae50]
xchg edx, esi
add edi, esp
xor eax, 0x8987caac
ror ebx, 7
mov dword [0x79a4e9], ecx
rol ecx, 0x16
add edx, dword [0x79aef8]
dec eax
sub eax, 0xa64b6e35
add eax, 0xa64b6e35
inc eax
ror ecx, 0x16
rol ebx, 7
xor eax, 0x8987caac
sub edi, esp
xchg edx, esi
not ecx
ror eax, 0x1d
xchg edi, eax
sub esi, 0x51ff264c
or edi, 0x6f68ece8
rol esi, 2
neg esi
mov dword [0x79a576], esi
or dword [0x79a6e0], edi
add ecx, dword [0x79af71]
sub esi, ebx
inc ebx
xor ecx, ebp
call fcn.00577b85
xor ebx, edx
not esi
xchg ebx, esi
xor edi, 0x96e94597
xor ecx, eax
inc esi
dec esi
add eax, dword [0x79ad4c]
add dword [0x79a618], esi
xchg ebx, eax
sub dword [0x79a74f], esi
or dword [0x79a8fb], edx
xchg ebx, eax
and dword [0x79a842], edx
inc esi
dec esi
xor ecx, eax
xor edi, 0x96e94597
xchg ebx, esi
not esi
xor ebx, edx
call fcn.0051a135
xor ecx, ebp
dec ebx
add esi, ebx
neg esi
ror esi, 2
add edi, 0x64026d80
xchg eax, esi
xor ecx, 0xfaaaf4b4
or ebx, dword [0x79af59]
rol edi, 0xa
add dword [0x79a883], 0xb19ec1eb
sub ebx, dword [0x79ad33]
not edx
rol ebx, 0x1a
and dword [0x79a8d9], ebx
mov dword [0x79a9dd], ebx
not esi
add edx, 0x64ec521f
and dword [0x79a631], edi
xor ebx, ecx
dec edi
add ebx, esi
call fcn.0051e012
call fcn.0052df40
sub ebx, esi
inc edi
xor ebx, ecx
sub edx, 0x64ec521f
not esi
sub dword [0x79a58f], eax
mov dword [0x79aa1f], eax
ror ebx, 0x1a
not edx
add dword [0x79a916], 0xcf2ee8c4
ror edi, 0xa
xor ecx, 0xfaaaf4b4
xchg eax, esi
push edi
xor edx, dword [0x79ad40]
xchg ebx, esi
xor edi, ecx
xor edi, edx
call fcn.0065a8ae
sub edx, 0x9b06705e
xor eax, esi
inc eax
or ebx, dword [0x79aafc]
and dword [0x79a61d], edx
and dword [0x79a702], 0x2dfeabf8
neg esi
sub edi, 0xfc611661
call fcn.0062cd2f
add dword [0x79a85f], ebx
neg ecx
sub eax, 0x33b21a3a
add ebx, 0x71a272c8
and dword [0x79a9c1], ebx
rol eax, 0xf
not ebx
call fcn.005b5deb
call fcn.00645ceb
not ebx
ror eax, 0xf
sub ebx, 0x71a272c8
add eax, 0x33b21a3a
neg ecx
or dword [0x79a951], edx
call fcn.004fc74a
add edi, 0xfc611661
neg esi
sub dword [0x79a57b], 0x8267efbf
and dword [0x79a909], eax
dec eax
xor eax, esi
add edx, 0x9b06705e
call fcn.005a1e34
xor edi, edx
xor edi, ecx
xchg ebx, esi
mov edx, 0x5ee13e1e
neg eax
xor edx, 0x4be62fd3
and dword [0x79a89a], esi
not esi
call fcn.0061fbb7
or dword [0x79a535], ebx
mov dword [0x79a818], edx
add edi, dword [0x79adce]
xor edi, dword [0x79ab23]
call fcn.005e115a
and dword [0x79a661], edi
inc edx
xor edx, 0x83af45bf
neg edx
add esi, 0x6f512222
xor dword [0x79a822], 0xe4a7cf8d
xor ecx, 0xf903bfce
call fcn.0052362b
call fcn.005f11d2
xor ecx, 0xf903bfce
and dword [0x79a507], 0x6999849f
sub esi, 0x6f512222
neg edx
xor edx, 0x83af45bf
dec edx
call fcn.0059d362
xor dword [0x79a9a1], ecx
call fcn.00562881
not esi
xor edx, 0x4be62fd3
neg eax
add edx, 0x8c0894b3
sub dword [0x79a7d5], eax
call fcn.005b3f94
xor dword [0x79a617], ecx
add eax, dword [0x79ab08]
xchg eax, edx
dec edx
add ebx, dword [0x79acae]
mov dword [0x79a721], eax
dec ebx
and dword [0x79aa05], edx
not eax
ror edx, 5
xor edi, 0x487af552
xchg edx, eax
call fcn.0057d66f
not esi
add ecx, eax
xchg ebx, esi
xor ebx, dword [0x79aba8]
ror edi, 2
rol edi, 2
xchg ebx, esi
sub ecx, eax
not esi
xchg edx, eax
xor edi, 0x487af552
rol edx, 5
not eax
or dword [0x79a972], ebx
inc ebx
add dword [0x79a4fe], eax
inc edx
xchg eax, edx
add dword [0x79a8f5], ebx
mov dword [0x79a609], eax
xor edx, 0xab85b3a4
xor edx, dword [0x79ad90]
call fcn.0053c04b
add eax, 0xe7bd6b00
not esi
mov dword [0x79a82a], ebx
xor ebx, esp
add esi, ebp
sub dword [0x79a772], ebx
mov dword [0x79a771], esi
ror esi, 0x1d
or edi, dword [0x79aec3]
add dword [0x79a9d3], 0xf07f76bb
xor edx, ecx
sub dword [0x79a746], ecx
rol edi, 0xa
inc edi
call fcn.00529dd5
ror eax, 6
call fcn.00599f45
call fcn.0061dd73
rol eax, 6
call fcn.00501f0b
dec edi
ror edi, 0xa
add dword [0x79a559], esi
xor edx, ecx
rol esi, 0x1d
mov dword [0x79a8fb], edx
and dword [0x79a679], esi
sub esi, ebp
xor ebx, esp
not esi
sub eax, 0xe7bd6b00
call fcn.0059d362
push edx
ror eax, 0x17
add eax, 0xca1d4379
call fcn.005298e5
rol ebx, 8
dec eax
call fcn.005e3f13
sub dword [0x79a559], edi
xchg esi, eax
mov dword [0x79a8e5], ebx
xchg ebx, esi
xor edx, 0x7e190112
xor ecx, dword [0x79aa94]
sub edx, esi
xor ecx, edi
ror ebx, 0x1a
inc ecx
sub ebx, edx
call fcn.00551b6c
call fcn.00612ed8
add ebx, edx
dec ecx
rol ebx, 0x1a
xor ecx, edi
add edx, esi
xor edx, 0x7e190112
xchg ebx, esi
and dword [0x79a912], ecx
xchg esi, eax
inc eax
ror ebx, 8
call fcn.00672d6c
sub eax, 0xca1d4379
rol eax, 0x17
mov edi, 0x768f79ed
xchg ecx, esi
or dword [0x79a9e0], ebx
sub eax, dword [0x79ac4f]
xor ecx, dword [0x79af2f]
call fcn.005e0b39
xor ecx, dword [0x79acf6]
add dword [0x79a99b], ebx
or edx, dword [0x79ae90]
inc esi
sub dword [0x79aa2b], ecx
rol ecx, 0x1d
call fcn.005230db
not edx
or ebx, dword [0x79abb8]
dec ebx
call fcn.004e1389
or esi, dword [0x79adc5]
sub ecx, dword [0x79ab3c]
call fcn.004f849f
inc ebx
not edx
call fcn.0065011a
ror ecx, 0x1d
and dword [0x79a9f3], eax
dec esi
call fcn.005a1675
sub dword [0x79a66b], eax
xchg ecx, esi
xor edi, 0xe02eb7c0
sub dword [0x79a531], edx
not edi
or eax, dword [0x79adf2]
rol esi, 9
dec esi
neg eax
and dword [0x79a8b5], 0x39ebb02e
or ebx, dword [0x79ae05]
xchg edx, esi
inc edx
sub ebx, dword [0x79ac9b]
inc edx
mov dword [0x79aa1e], ecx
rol edx, 0x12
not esi
call fcn.00567f65
call fcn.00628aed
call fcn.00611a90
call fcn.005ba6ce
not esi
ror edx, 0x12
xor dword [0x79a519], ebx
dec edx
dec edx
xchg edx, esi
neg eax
inc esi
ror esi, 9
not edi
xor dword [0x79a6f9], edx
sub edi, 0x222f64d7
neg edi
xchg eax, esi
dec edx
xor ebx, esp
dec edx
or edx, dword [0x79aad1]
dec ecx
and dword [0x79a77f], ecx
ror esi, 0x13
sub ecx, ebp
xor edx, 0xed06d5c
sub dword [0x79a961], eax
neg esi
dec edx
xchg ecx, edx
not eax
dec edi
rol ecx, 0x14
xchg esi, edx
add dword [0x79a57f], edi
xchg esi, edx
ror ecx, 0x14
inc edi
not eax
xchg ecx, edx
inc edx
neg esi
add dword [0x79a608], edi
xor edx, 0xed06d5c
add ecx, ebp
rol esi, 0x13
xor dword [0x79a7b1], eax
inc ecx
inc edx
xor ebx, esp
inc edx
xchg eax, esi
neg edi
push edi
rol ecx, 7
sub dword [0x79a6bb], 0x80792521
sub ecx, dword [0x79acd7]
rol ecx, 0x1a
xchg ecx, edx
xor eax, dword [0x79ad78]
not edx
call fcn.005ee95b
xchg ebx, eax
xor edx, ebp
sub eax, dword [0x79ad88]
and dword [0x79a4e0], ecx
neg edx
xchg ebx, eax
xor ebx, eax
xor ebx, 0xe89717f5
rol eax, 0xb
add ecx, eax
call fcn.005467ee
call fcn.005593df
sub ecx, eax
ror eax, 0xb
xor ebx, 0xe89717f5
xor ebx, eax
xchg ebx, eax
neg edx
and dword [0x79a58a], ebx
xor edx, ebp
xchg ebx, eax
call fcn.005544b5
not edx
xchg ecx, edx
ror ecx, 0x1a
ror ecx, 7
push esp
neg esi
add ecx, dword [0x79acbe]
xor dword [0x79a9a3], ebx
sub eax, dword [0x79abb5]
sub dword [0x79a6ac], edx
add edx, dword [0x79afac]
add dword [0x79a767], edi
call fcn.004f2faf
or ebx, dword [0x79aedf]
xor esi, edi
inc edx
call fcn.005aaee3
xor ebx, dword [0x79ac35]
call fcn.005ba6ce
call fcn.005c74f2
call fcn.005642d9
dec edx
xor esi, edi
xor dword [0x79a802], eax
mov dword [0x79a923], ecx
add dword [0x79aa13], esi
neg esi
push eax
sub ebx, ebp
xchg ecx, edx
ror edi, 0xe
call fcn.0065c15e
rol edi, 8
xor ebx, dword [0x79abd0]
xor esi, 0x603e5b40
ror esi, 0xa
or eax, dword [0x79ad0b]
ror edx, 0xc
call fcn.004f8e5b
call fcn.005b6931
rol edx, 0xc
rol esi, 0xa
xor esi, 0x603e5b40
ror edi, 8
call fcn.00671561
rol edi, 0xe
xchg ecx, edx
add ebx, ebp
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
rol esi, 0x1b
or esi, dword [0x79ae40]
xchg edi, esi
dec esi
xor esi, 0x2707dc95
sub dword [0x79a98c], edi
xchg edx, eax
call fcn.0052df40
inc edx
sub esi, esp
call fcn.00544e54
call fcn.0066f1ad
add esi, esp
dec edx
call fcn.0058d0ee
xchg edx, eax
mov dword [0x79a8c9], edx
xor esi, 0x2707dc95
inc esi
xchg edi, esi
ror esi, 0x1b
add esp, 0x10
ror ecx, 7
inc esi
dec ecx
ror eax, 1
xchg eax, edx
xor eax, ebx
and dword [0x79a892], esi
xor edx, 0x4e200f53
ror esi, 1
or eax, dword [0x79abfa]
sub ecx, esp
ror ebx, 0xc
mov dword [0x79a83b], edi
call fcn.0057e847
call fcn.0054221f
mov dword [0x79a6d7], eax
rol ebx, 0xc
add ecx, esp
rol esi, 1
xor edx, 0x4e200f53
xor eax, ebx
xchg eax, edx
rol eax, 1
inc ecx
dec esi
rol ecx, 7
mov edi, 0x9bd4e848
rol edx, 0x15
neg ebx
rol eax, 0x1b
mov dword [0x79a6df], ecx
xor dword [0x79a7ed], esi
add esi, 0x73b04a3c
inc edi
and dword [0x79a773], esi
ror esi, 0xa
xor ecx, 0xd491912f
sub dword [0x79a698], eax
call fcn.0056f995
call fcn.005f3ea1
and dword [0x79a801], esi
xor ecx, 0xd491912f
rol esi, 0xa
dec edi
sub esi, 0x73b04a3c
sub dword [0x79a4f2], edi
ror eax, 0x1b
neg ebx
ror edx, 0x15
or edi, 0x5317f8ee
xor eax, dword [0x79adec]
inc esi
or dword [0x79a586], esi
sub esi, dword [0x79ae13]
call fcn.00549a30
dec edi
not esi
sub eax, ebp
and dword [0x79a64f], edi
call fcn.00674062
rol esi, 5
inc ebx
xor edx, ecx
sub eax, dword [0x79aaae]
rol ecx, 0x13
xor ebx, dword [0x79ac71]
ror eax, 0x17
or dword [0x79a906], ecx
or dword [0x79a599], eax
and dword [0x79a85f], eax
and dword [0x79a649], ebx
rol eax, 0x17
ror ecx, 0x13
xor edx, ecx
dec ebx
ror esi, 5
call fcn.006367a3
mov dword [0x79a8cc], eax
add eax, ebp
not esi
inc edi
call fcn.005100c6
xor dword [0x79a6b4], edx
dec esi
sub edi, 0xdbd7f8ae
xor edx, dword [0x79ad0e]
call fcn.005aab2f
not esi
xor esi, edx
xchg ebx, edx
add edx, esp
not ecx
xor esi, edi
xor esi, dword [0x79aadb]
call fcn.005f8879
dec ecx
add ecx, esi
call fcn.005ba84e
not eax
call fcn.005dbb5f
ror edx, 0xb
sub ebx, dword [0x79ad77]
dec edx
xor edi, dword [0x79ac33]
xchg esi, edx
call fcn.00659dd0
call fcn.005bb410
xchg esi, edx
inc edx
rol edx, 0xb
not eax
call fcn.005096cb
sub ecx, esi
inc ecx
xor esi, edi
not ecx
sub edx, esp
xchg ebx, edx
xor esi, edx
not esi
push edi
add ebx, dword [0x79aacc]
mov dword [0x79a7b9], eax
rol edi, 0x1d
or esi, dword [0x79ae0b]
rol edi, 0xd
call fcn.005205f9
sub edx, 0xf4f53
sub edi, dword [0x79aca9]
rol edi, 0x17
call fcn.00633a01
ror edi, 0x17
add edx, 0xf4f53
call fcn.00614340
ror edi, 0xd
ror edi, 0x1d
mov dword [0x79a99e], ebx
mov esi, 0x5ccc1469
mov dword [0x79a67f], ecx
inc edi
dec ecx
sub eax, dword [0x79aaac]
not esi
sub esi, 0x8d3a9326
xchg ebx, esi
xor esi, ebp
xor edx, 0x806077ff
and dword [0x79a61b], 0xd7c2d591
ror esi, 0x19
and dword [0x79a722], esi
ror ebx, 3
sub esi, dword [0x79af51]
ror edx, 0xc
rol edx, 0xc
rol ebx, 3
rol esi, 0x19
xor dword [0x79a70b], 0x90e42096
xor edx, 0x806077ff
xor esi, ebp
xchg ebx, esi
add esi, 0x8d3a9326
not esi
inc ecx
dec edi
and dword [0x79a7b3], eax
and esi, 0x6102fc42
add esi, edi
neg esi
mov dword [0x79a6b1], eax
call fcn.0061eec6
xor ebx, dword [0x79af19]
mov dword [0x79a72c], ecx
sub esi, dword [0x79aa8c]
sub eax, dword [0x79aaf8]
sub edx, ebp
or ebx, dword [0x79ad2e]
xor esi, esp
sub edx, 0x15c99bfb
rol edx, 0x18
call fcn.0065e29e
call fcn.005c3004
ror edx, 0x18
add edx, 0x15c99bfb
xor esi, esp
add edx, ebp
or dword [0x79a5ed], ecx
neg esi
sub esi, edi
add esi, 0xc0001bc0
add ebx, dword [0x79ab33]
rol ebx, 0xe
xor dword [0x79a674], eax
call fcn.005ce325
xor edx, dword [0x79aac2]
dec eax
not esi
xor edi, 0x52642d59
xchg edi, esi
dec ebx
rol edx, 0x1f
xchg ebx, esi
neg esi
ror ebx, 0xc
call fcn.004ddff9
call fcn.005ac01f
rol ebx, 0xc
neg esi
xchg ebx, esi
ror edx, 0x1f
inc ebx
xchg edi, esi
xor edi, 0x52642d59
not esi
inc eax
call fcn.0066f1ad
or dword [0x79a96a], ecx
ror ebx, 0xe
push esi
add ebx, dword [0x79aec2]
call fcn.005bd82c
add edi, dword [0x79abdb]
xor edi, dword [0x79ae05]
add dword [0x79a593], edi
dec ebx
not esi
or ebx, dword [0x79aba0]
or dword [0x79a519], eax
xor ebx, 0x8763a999
add ecx, 0xe24f5d1
ror ecx, 0xc
or ebx, dword [0x79aed0]
xor dword [0x79a608], ebx
sub ebx, 0x3dfc9bae
rol edi, 4
inc esi
xor ebx, 0x64e7bc5c
dec esi
neg ebx
inc ecx
mov dword [0x79a65a], eax
and dword [0x79a577], ecx
dec ecx
neg ebx
inc esi
xor ebx, 0x64e7bc5c
dec esi
ror edi, 4
add ebx, 0x3dfc9bae
rol ecx, 0xc
sub ecx, 0xe24f5d1
xor ebx, 0x8763a999
and dword [0x79a6da], edx
not esi
inc ebx
or dword [0x79a75c], esi
push 0x4c431
or ecx, dword [0x79ae3e]
dec ecx
xchg eax, esi
inc edx
call fcn.005cf5c6
and dword [0x79a7b8], edx
xor edx, dword [0x79abb5]
sub edi, 0x80724d98
call fcn.00670792
ror ecx, 4
dec ebx
mov dword [0x79a917], ecx
xor dword [0x79a91d], 0xa28ff868
call fcn.00593501
xor ebx, 0x1bf82cc6
sub esi, 0x9c23a8dc
sub dword [0x79a5ef], ebx
add esi, 0x9c23a8dc
xor ebx, 0x1bf82cc6
call fcn.00620030
mov dword [0x79a582], eax
inc ebx
rol ecx, 4
call fcn.006670f4
add edi, 0x80724d98
mov dword [0x79a64e], ecx
dec edx
xchg eax, esi
inc ecx
mov ebx, 0x40e0167
call fcn.005e4f1b
xor esi, dword [0x79ae53]
call fcn.004f690d
not ebx
add edi, 0xe483d20a
add dword [0x79a7ce], edx
or dword [0x79a6b7], esi
xchg ecx, esi
sub ecx, dword [0x79adda]
and dword [0x79a779], 0x90ee5d73
xor ebx, 0x775165de
xchg edi, edx
sub eax, esi
xor edi, dword [0x79ada1]
add eax, esi
xchg edi, edx
xor ebx, 0x775165de
xchg ecx, esi
add dword [0x79a80e], edi
xor dword [0x79a5f1], eax
sub edi, 0xe483d20a
not ebx
call fcn.005d3412
sub ebx, 0xc192967c
xor ecx, eax
add esi, dword [0x79af43]
not eax
sub edx, ecx
call fcn.005a88e2
xchg edi, esi
inc eax
sub dword [0x79a673], 0x9f203b8c
xor ecx, 0x2144b4ff
ror edi, 0x13
call fcn.0064b713
add eax, edx
xor esi, 0xcac1e021
or edi, dword [0x79aaa5]
xor esi, 0xcac1e021
sub eax, edx
rol edi, 0x13
xor ecx, 0x2144b4ff
xor dword [0x79a5fe], 0xf28dfcb3
dec eax
xchg edi, esi
add edx, ecx
not eax
xor ecx, eax
xor ebx, 0x427b6aeb
inc ebx
rol esi, 0xa
or esi, dword [0x79ad26]
or eax, dword [0x79af09]
call fcn.005d7a42
add dword [0x79a627], edi
and dword [0x79a809], eax
or dword [0x79a8e2], ecx
sub esi, 0x1901ce4b
neg edx
call fcn.0051c3ec
neg edx
add esi, 0x1901ce4b
and dword [0x79a60d], ecx
mov dword [0x79a9a6], eax
add dword [0x79a780], ecx
ror esi, 0xa
dec ebx
push ebx
sub ebx, 0xe24c5e6d
xchg edx, esi
add ecx, dword [0x79acc0]
xor edi, dword [0x79ae7a]
neg esi
or dword [0x79a6a0], 0xfb1dc599
add dword [0x79a9c0], eax
xor edi, 0xb89a4946
not edx
sub ebx, dword [0x79ab1a]
ror edi, 0x1d
sub ecx, dword [0x79ace9]
mov dword [0x79a9c4], 0xc50080c
rol ecx, 0x11
xchg eax, esi
xchg eax, esi
ror ecx, 0x11
or dword [0x79a891], 0x822fe3e2
rol edi, 0x1d
not edx
xor edi, 0xb89a4946
add dword [0x79a682], esi
neg esi
xchg edx, esi
add ebx, 0xe24c5e6d
call eax
sub dword [0x79a8fc], eax
add eax, esi
ror ecx, 9
xor edx, dword [0x79ab90]
neg edi
or dword [0x79a8f6], esi
xor esi, dword [0x79af69]
call fcn.0062e456
xor edx, 0x8b42bd14
or dword [0x79a8ad], edi
neg edi
or dword [0x79a622], 0x979a2897
add dword [0x79a99e], edi
add edx, ecx
sub dword [0x79a7dc], ecx
xchg ecx, edx
call fcn.005d9f78
sub edx, dword [0x79aba0]
xchg edi, eax
xchg esi, edx
xchg esi, edx
xchg edi, eax
call fcn.006165d8
xchg ecx, edx
sub dword [0x79a93b], ecx
sub edx, ecx
xor dword [0x79aa27], 0x98c3b17f
neg edi
xor edx, 0x8b42bd14
call fcn.0065c8b9
neg edi
rol ecx, 9
sub eax, esi
or dword [0x79a923], ebx
lea esi, [0x26072565]
ror esi, 0xa
dec ebx
sub edi, 0x7639db62
ror edx, 0x11
add edi, 0x8821d220
xor ebx, ecx
inc edx
call fcn.005a2b92
dec ebx
add dword [0x79aa19], edi
xor edi, ecx
rol eax, 1
sub ebx, edi
xor eax, ebp
or ebx, dword [0x79ab24]
add eax, ecx
call fcn.00508708
or edx, dword [0x79aec0]
call fcn.00526775
sub eax, ecx
xor eax, ebp
add ebx, edi
ror eax, 1
xor edi, ecx
xor dword [0x79a629], esi
inc ebx
dec edx
xor ebx, ecx
sub edi, 0x8821d220
rol edx, 0x11
add edi, 0x7639db62
inc ebx
rol esi, 0xa
or esi, 0x8a1bb0ec
call fcn.004de8dd
rol edi, 0xc
xor ecx, ebx
rol edx, 0x14
neg edi
dec esi
or eax, dword [0x79ac1c]
neg esi
add edx, dword [0x79acd3]
neg esi
xor ecx, 0xd4e81045
inc ecx
rol edi, 6
sub eax, dword [0x79ac15]
call fcn.0050bab7
call fcn.004f21fe
call fcn.00551b6c
ror edi, 6
dec ecx
xor ecx, 0xd4e81045
neg esi
neg esi
inc esi
neg edi
ror edx, 0x14
xor ecx, ebx
ror edi, 0xc
call fcn.005f9c0c
add esi, 0x525aca13
mov dword [0x79a59c], 0x984042ad
xchg edi, edx
xor ecx, 0x92f2995d
add esi, 0x886b6fec
neg esi
sub eax, ebp
and dword [0x79a4cb], ebx
xor edx, eax
add dword [0x79a86a], 0xed7a4e4a
call fcn.005bab7c
xor edx, eax
mov dword [0x79a8ce], esi
add eax, ebp
neg esi
sub esi, 0x886b6fec
xor ecx, 0x92f2995d
xchg edi, edx
xor dword [0x79a78d], 0xfbfed846
mov edi, eax
sub dword [0x79a727], 0xb8785e89
dec edx
xor edx, 0x4d8e8db2
call fcn.0051e012
xor ecx, dword [0x79ad6e]
rol eax, 3
xor edi, ebp
ror edi, 0x1f
call fcn.0052a9b5
xor edi, esp
neg eax
dec esi
xor esi, dword [0x79ab46]
or dword [0x79a794], ebx
sub eax, dword [0x79ae4b]
add eax, dword [0x79ae86]
dec ebx
add edi, 0xdda2d8e5
add ebx, dword [0x79af6d]
call fcn.005bed78
sub ebx, 0xc605d0bc
ror edx, 7
rol edx, 7
add ebx, 0xc605d0bc
call fcn.0056c20b
sub edi, 0xdda2d8e5
inc ebx
or dword [0x79a528], ecx
inc esi
neg eax
xor edi, esp
rol edi, 0x1f
xor edi, ebp
ror eax, 3
call fcn.004e0a39
xor edx, 0x4d8e8db2
inc edx
add dword [0x79a934], 0x7dab1182
mov ecx, 0x4c431
neg esi
sub ebx, dword [0x79abd7]
xchg esi, eax
not esi
sub ebx, ebp
add dword [0x79a97b], edi
add eax, 0xc3c9e923
not ecx
add ecx, edi
or dword [0x79a82f], edx
call fcn.005ff5fb
sub ecx, edi
not ecx
sub eax, 0xc3c9e923
mov dword [0x79a6c5], eax
add ebx, ebp
not esi
xchg esi, eax
neg esi
rep movsb byte es:[edi], byte [esi]
xchg ebx, esi
call fcn.0056be48
not edi
rol eax, 6
xchg esi, eax
or eax, dword [0x79ab77]
sub edi, 0x376b6a2a
inc edi
add dword [0x79a95b], 0x6c9d8e9e
neg edx
inc esi
or dword [0x79a89c], esi
inc eax
sub ebx, dword [0x79aefb]
add esi, dword [0x79af87]
add dword [0x79a8ad], edi
or edi, dword [0x79aaf4]
call fcn.00634f38
ror eax, 2
not esi
add ecx, dword [0x79ac39]
not esi
rol eax, 2
call fcn.00551b6c
dec eax
dec esi
neg edx
and dword [0x79a91c], 0xe4df3cf9
dec edi
add edi, 0x376b6a2a
xchg esi, eax
ror eax, 6
not edi
call fcn.00512ab9
xchg ebx, esi
jmp eax