Function at 0x42a620
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Parse pe header
Reference sql statements

Disassembly:
jmp fcn.0040e590
jmp fcn.0040aef0
push dword [ecx + 0xbc]
call fcn.00412b90
ret
jmp fcn.0041a850
jmp fcn.00418780
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
push esi
test eax, eax
jne 0x42a854
mov eax, dword [ebp + 0x10]
cmp eax, 0x21
ja case.default.0x42a63b
jmp dword [eax*4 + 0x42a898]
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.00419c50
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.00416320
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
push dword [eax]
call fcn.004271a0
pop esi
pop ebp
ret
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.004175c0
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp 0x416260
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp 0x416260
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp 0x417520
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp 0x417520
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.00415ec0
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.00416880
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx + 8]
push dword [eax]
mov eax, dword [ecx + 4]
mov ecx, dword [ebp + 8]
push dword [eax]
call fcn.00417530
pop esi
pop ebp
ret
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.00416270
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx + 8]
push dword [eax]
mov eax, dword [ecx + 4]
mov ecx, dword [ebp + 8]
push dword [eax]
call fcn.00416910
pop esi
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
push dword [eax]
call fcn.0041b1f0
pop esi
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
push dword [eax]
call fcn.00420830
pop esi
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
push dword [eax]
call fcn.00418cb0
pop esi
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
push dword [eax]
call fcn.004161a0
pop esi
pop ebp
ret
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp 0x416900
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp 0x4168f0
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [esi + 4]
push dword [eax]
call fcn.004161e0
mov ecx, dword [esi]
test ecx, ecx
je case.default.0x42a63b
mov dword [ecx], eax
pop esi
pop ebp
ret
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [esi + 4]
push dword [eax]
call fcn.00416190
mov ecx, dword [esi]
test ecx, ecx
je case.default.0x42a63b
mov dword [ecx], eax
pop esi
pop ebp
ret
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [esi + 4]
push dword [eax]
call fcn.00416180
mov ecx, dword [esi]
test ecx, ecx
je case.default.0x42a63b
mov dword [ecx], eax
pop esi
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
push dword [eax + 4]
push dword [eax]
call fcn.00416680
pop esi
pop ebp
ret
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp 0x416260
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.00421130
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp 0x417520
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp 0x423230
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.00421390
mov esi, dword [ebp + 0x14]
mov eax, dword [esi + 0x10]
push dword [eax]
push ecx
mov ecx, esp
push dword [esi + 0xc]
call dword [0x43540c]
mov eax, dword [esi + 8]
mov ecx, dword [ebp + 8]
push dword [eax]
mov eax, dword [esi + 4]
push dword [eax]
call fcn.00413a70
pop esi
pop ebp
ret
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.00422be0
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.00423240
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.004222a0
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
movzx eax, byte [eax]
push eax
call fcn.00415e20
pop esi
pop ebp
ret
mov ecx, dword [ebp + 8]
pop esi
pop ebp
jmp fcn.00416d10
cmp eax, 0xc
jne case.default.0x42a63b
mov eax, dword [ebp + 0x10]
sub eax, 0xd
je 0x42a875
dec eax
je 0x42a875
dec eax
je 0x42a875
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov dword [eax], 0xffffffff
pop esi
pop ebp
ret
mov esi, dword [ebp + 0x14]
mov eax, dword [esi + 4]
cmp dword [eax], 0
je 0x42a88b
mov eax, dword [esi]
mov dword [eax], 0xffffffff
pop esi
pop ebp
ret
call fcn.0042a540
mov ecx, dword [esi]
mov dword [ecx], eax
pop esi
pop ebp
ret