Function at 0x42d2af
Capabilities:
Resolve function by hash
Resolve function by parsing pe exports

Disassembly:
cld
xor edx, edx
mov dl, 0x30
push dword fs:[edx]
pop edx
mov edx, dword [edx + 0xc]
mov edx, dword [edx + 0x14]
mov esi, dword [edx + 0x28]
xor ecx, ecx
mov cl, 0x18
xor edi, edi
xor eax, eax
lodsb al, byte [esi]
cmp al, 0x61
jl 0x42d2d0
sub al, 0x20
ror edi, 0xd
add edi, eax
loop 0x42d2c7
cmp edi, 0x6a4abc5b
mov ebx, dword [edx + 0x10]
mov edx, dword [edx]
jne 0x42d2be
mov edx, dword [ebx + 0x3c]
add edx, ebx
push dword [edx + 0x34]
mov edx, dword [edx + 0x78]
add edx, ebx
mov esi, dword [edx + 0x20]
add esi, ebx
xor ecx, ecx
inc ecx
lodsd eax, dword [esi]
add eax, ebx
cmp dword [eax], 0x50746547
jne 0x42d2f8
cmp dword [eax + 4], 0x41636f72
jne 0x42d2f8
cmp dword [eax + 8], 0x65726464
jne 0x42d2f8
dec ecx
mov esi, dword [edx + 0x24]
add esi, ebx
mov cx, word [esi + ecx*2]
mov esi, dword [edx + 0x1c]
add esi, ebx
mov edx, dword [esi + ecx*4]
add edx, ebx
push edx
push 0x1636578
dec byte [esp + 3]
push 0x456e6957
push esp
push ebx
call edx
push 0x1646d63
dec byte [esp + 3]
push 5
xor ecx, ecx
lea ecx, [esp + 4]
push ecx
call eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, 0x4dd64a
nop
nop
nop
call eax
mov eax, 0x4030fb
nop
call eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al
inc dword [eax]
add byte [eax], al