Function at 0x424700
Capabilities:
Disable automatic windows recovery features
Hash data using murmur3

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 0xc]
jbe 0x424db1
sub esp, 0x5c
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x54]
test eax, eax
je 0x424815
mov ecx, dword [esp + 0x64]
cmp ecx, 0x10
jae 0x424819
mov edx, dword [eax + 0x38]
test edx, edx
sete dl
mov ebx, dword [eax + 0x3c]
test ebx, ebx
sete bl
add eax, 0x34
and ebx, edx
test bl, bl
je 0x4247ac
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x60]
test byte [eax], al
nop
mov dword [esp], eax
call fcn.00409140
mov eax, dword [esp + 0x60]
lea ecx, [eax + 4]
mov dword [esp], ecx
call fcn.00428e90
lea edi, [esp + 0x3c]
lea esi, [esp + 4]
call fcn.0045face
mov edi, dword [esp + 0x54]
lea esi, [esp + 0x3c]
call fcn.0045face
nop
nop
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00409340
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004286d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x42480f
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov edx, dword [edx + 0x54]
test edx, edx
je 0x424803
mov ebx, dword [edx + 0x708]
test ebx, ebx
je 0x424803
lea ebp, [ebx - 1]
cmp ebp, 0x80
jae 0x424da4
mov ebx, dword [edx + ebx*4 + 0x708]
mov dword [edx + 0x708], ebp
jmp 0x424805
xor ebx, ebx
test ebx, ebx
jne 0x4249a4
jmp 0x424811
xor ebx, ebx
mov edx, ecx
jmp 0x42481f
mov ecx, dword [esp + 0x64]
xor eax, eax
xor ebx, ebx
xor edx, edx
mov dword [esp + 0x20], edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x60]
test byte [ecx], al
nop
mov dword [esp], ecx
call fcn.00409140
mov eax, dword [esp + 0x30]
test eax, eax
je 0x42484d
xor edx, edx
mov ecx, dword [esp + 0x20]
jmp 0x4248df
mov eax, dword [esp + 0x60]
lea ecx, [eax + 4]
mov dword [esp + 0x58], ecx
mov dword [esp], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
call fcn.00427d40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x424878
xor edx, edx
jmp 0x4248df
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
call fcn.00424dc0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 8]
test al, al
jne 0x4248b3
nop
nop
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00409340
mov dword [esp + 0x6c], 0
add esp, 0x5c
ret
mov dword [esp + 0x2c], ecx
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.00427d40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x424d8e
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], eax
mov ebx, dword [esp + 0x38]
test ebx, ebx
jne 0x424903
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00424610
mov ebx, dword [esp + 4]
mov dword [esp + 0x38], ebx
nop
nop
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00409340
mov eax, dword [esp + 0x2c]
test eax, eax
jbe 0x424998
mov eax, dword [esp + 0x60]
lea ecx, [eax + 0xc8]
mov dword [esp], ecx
call fcn.00401e50
mov eax, dword [esp + 4]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x1c], ecx
call fcn.0041e820
mov eax, dword [esp]
mov ecx, dword [esp + 0x2c]
add eax, ecx
mov edx, dword [esp + 4]
adc edx, 0
mov ebx, dword [esp + 0x1c]
cmp ebx, edx
xchg ebp, ebx
setb bl
xchg ebp, ebx
mov esi, dword [esp + 0x18]
cmp eax, esi
xchg edi, ebx
seta bl
xchg edi, ebx
cmp ebx, edx
sete dl
and edi, edx
or ebp, edi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x424998
sub eax, esi
cmp eax, ecx
jb 0x424985
mov eax, ecx
mov ecx, dword [esp + 0x60]
lea edx, [ecx + 4]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0041f360
mov ebx, dword [esp + 0x38]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x20], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
mov edx, dword [esp + 0x64]
mov dword [esp + 8], edx
call fcn.00425630
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 8], edx
call fcn.004244b0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4249f3
mov edx, dword [esp + 0x24]
mov byte [edx + 0x3c], 1
jmp 0x4249f7
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x64]
shl eax, 0xd
mov dword [esp + 0x28], eax
movzx ebp, byte [esp + 0x68]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x424ae4
movzx esi, byte [esp + 0x69]
xchg esi, eax
mov byte [edx + 0x3a], al
xchg esi, eax
xchg esi, eax
shr al, 1
xchg esi, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x424a3a
mov dword [edx + 0x40], eax
mov dword [edx + 0x1c], 1
mov dword [edx + 0x34], 0
mov ecx, edx
jmp 0x424a74
xchg esi, eax
movsx eax, al
xchg esi, eax
cmp esi, 0x44
jae 0x424d82
lea ecx, [0x619bc0]
movzx ecx, word [ecx + esi*2]
mov dword [edx + 0x40], ecx
test ecx, ecx
je 0x424d7d
xor edx, edx
div ecx
mov ecx, dword [esp + 0x24]
mov dword [ecx + 0x1c], eax
lea edx, [0x61b120]
mov edx, dword [edx + esi*4]
mov dword [ecx + 0x34], edx
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x20], 0xffffffff
mov dword [ecx + 0x24], 0xffffffff
mov eax, dword [ecx + 0x1c]
mov dword [esp], eax
call fcn.004261d0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x24]
mov dword [ecx + 0x2c], eax
mov eax, dword [ecx + 0x1c]
mov dword [esp], eax
call fcn.00426360
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x24]
mov dword [ecx + 0x28], eax
lea eax, [ecx + 0x30]
mov edx, dword [esp + 0x60]
mov ebx, dword [edx + 0x90]
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.00401e20
mov eax, dword [esp + 0x24]
lea ecx, [eax + 0x3b]
mov dword [esp], ecx
mov byte [esp + 4], 1
call fcn.00401ec0
jmp 0x424b0f
mov dword [edx + 0x14], 0
mov dword [edx + 0x1c], 0
mov eax, dword [edx + 0x10]
shl eax, 0xd
add eax, dword [edx + 0xc]
mov dword [edx + 0x44], eax
nop
lea eax, [edx + 0x3b]
mov dword [esp], eax
mov byte [esp + 4], 2
call fcn.00401ec0
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x424b20
movzx ecx, byte [esp + 0x68]
test cl, cl
jmp 0x424b76
xor ecx, ecx
sub ecx, eax
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0x30]
mov dword [esp], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 4], edx
call fcn.00413260
lea eax, [0x658ba0]
mov dword [esp], eax
xor eax, eax
mov ecx, dword [esp + 0x20]
sub eax, ecx
mov eax, 0
sbb eax, 0
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.00401d80
movzx eax, byte [esp + 0x68]
test al, al
mov eax, dword [esp + 0x20]
movzx ecx, byte [esp + 0x68]
jne 0x424ba6
lea eax, [0x658b98]
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00401d80
movzx eax, byte [esp + 0x68]
test al, al
mov eax, dword [esp + 0x20]
movzx ecx, byte [esp + 0x68]
je 0x424bce
xor eax, eax
mov ecx, dword [esp + 0x28]
sub eax, ecx
lea edx, [0x658b90]
mov dword [esp], edx
mov edx, 0
sbb edx, 0
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.0042d110
lea eax, [0x65a190]
mov dword [esp], eax
call fcn.0042d240
mov eax, dword [esp + 4]
mov dword [esp + 0x50], eax
test byte [eax], al
xor ecx, ecx
mov edx, dword [esp + 0x20]
sub ecx, edx
mov dword [esp + 0x34], ecx
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edx
call fcn.00401d00
mov eax, dword [esp + 0x50]
lea ecx, [eax + 8]
mov dword [esp], ecx
xor ecx, ecx
mov edx, dword [esp + 0x20]
sub ecx, edx
mov ecx, 0
sbb ecx, 0
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
call fcn.00401d00
movzx eax, byte [esp + 0x68]
cmp al, 1
ja 0x424c81
test al, al
jne 0x424c60
mov eax, dword [esp + 0x50]
add eax, 0x10
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00401d00
jmp 0x424ccb
mov eax, dword [esp + 0x50]
add eax, 0x18
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00401d00
jmp 0x424ccb
cmp al, 2
je 0x424cac
cmp al, 3
jne 0x424ccb
mov eax, dword [esp + 0x50]
add eax, 0x20
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00401d00
jmp 0x424ccb
mov eax, dword [esp + 0x50]
add eax, 0x28
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00401d00
lea eax, [0x65a190]
mov dword [esp], eax
call fcn.0042d340
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x60]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00424420
movzx eax, byte [esp + 0x68]
test al, al
jne 0x424d6c
mov eax, dword [0x6372dc]
test byte [eax], al
nop
nop
mov edx, dword [esp + 0x24]
mov ecx, dword [edx + 0xc]
nop
mov edx, ecx
shr ecx, 0x16
mov eax, dword [eax + ecx*4]
test byte [eax], al
mov ecx, edx
shr edx, 0x10
and edx, 0x3f
lea eax, [eax + edx + 0x40800]
mov dword [esp], eax
shr ecx, 0xd
and ecx, 7
mov eax, 1
shl eax, cl
mov byte [esp + 4], al
call fcn.00401ea0
mov eax, dword [esp + 0x60]
test byte [eax], al
add eax, 0xa0
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.00401d80
call fcn.0045f080
mov eax, dword [esp + 0x24]
mov dword [esp + 0x6c], eax
add esp, 0x5c
ret
call fcn.004320f0
mov eax, esi
mov ecx, 0x44
call fcn.0045f450
lea eax, [0x551cd4]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00433a00
mov eax, ebp
mov ecx, pe_nt_image_headers32
call fcn.0045f450
nop
call fcn.0045cba0
jmp fcn.00424700