Function at 0x4246d0
Capabilities:
Disable automatic windows recovery features
Hash data using murmur3

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 0xc]
jbe 0x424d81
sub esp, 0x5c
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x54]
test eax, eax
je 0x4247e5
mov ecx, dword [esp + 0x64]
cmp ecx, 0x10
jae 0x4247e9
mov edx, dword [eax + 0x38]
test edx, edx
sete dl
mov ebx, dword [eax + 0x3c]
test ebx, ebx
sete bl
add eax, 0x34
and ebx, edx
test bl, bl
je 0x42477c
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x60]
test byte [eax], al
nop
mov dword [esp], eax
call fcn.00409110
mov eax, dword [esp + 0x60]
lea ecx, [eax + 4]
mov dword [esp], ecx
call fcn.00428e60
lea edi, [esp + 0x3c]
lea esi, [esp + 4]
call fcn.0045fb5e
mov edi, dword [esp + 0x54]
lea esi, [esp + 0x3c]
call fcn.0045fb5e
nop
nop
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00409310
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004286a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x4247df
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov edx, dword [edx + 0x54]
test edx, edx
je 0x4247d3
mov ebx, dword [edx + 0x708]
test ebx, ebx
je 0x4247d3
lea ebp, [ebx - 1]
cmp ebp, 0x80
jae 0x424d74
mov ebx, dword [edx + ebx*4 + 0x708]
mov dword [edx + 0x708], ebp
jmp 0x4247d5
xor ebx, ebx
test ebx, ebx
jne 0x424974
jmp 0x4247e1
xor ebx, ebx
mov edx, ecx
jmp 0x4247ef
mov ecx, dword [esp + 0x64]
xor eax, eax
xor ebx, ebx
xor edx, edx
mov dword [esp + 0x20], edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x60]
test byte [ecx], al
nop
mov dword [esp], ecx
call fcn.00409110
mov eax, dword [esp + 0x30]
test eax, eax
je 0x42481d
xor edx, edx
mov ecx, dword [esp + 0x20]
jmp 0x4248af
mov eax, dword [esp + 0x60]
lea ecx, [eax + 4]
mov dword [esp + 0x58], ecx
mov dword [esp], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
call fcn.00427d10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x424848
xor edx, edx
jmp 0x4248af
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
call fcn.00424d90
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 8]
test al, al
jne 0x424883
nop
nop
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00409310
mov dword [esp + 0x6c], 0
add esp, 0x5c
ret
mov dword [esp + 0x2c], ecx
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.00427d10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x424d5e
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], eax
mov ebx, dword [esp + 0x38]
test ebx, ebx
jne 0x4248d3
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.004245e0
mov ebx, dword [esp + 4]
mov dword [esp + 0x38], ebx
nop
nop
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00409310
mov eax, dword [esp + 0x2c]
test eax, eax
jbe 0x424968
mov eax, dword [esp + 0x60]
lea ecx, [eax + 0xc8]
mov dword [esp], ecx
call fcn.00401e20
mov eax, dword [esp + 4]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x1c], ecx
call fcn.0041e7f0
mov eax, dword [esp]
mov ecx, dword [esp + 0x2c]
add eax, ecx
mov edx, dword [esp + 4]
adc edx, 0
mov ebx, dword [esp + 0x1c]
cmp ebx, edx
xchg ebp, ebx
setb bl
xchg ebp, ebx
mov esi, dword [esp + 0x18]
cmp eax, esi
xchg edi, ebx
seta bl
xchg edi, ebx
cmp ebx, edx
sete dl
and edi, edx
or ebp, edi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x424968
sub eax, esi
cmp eax, ecx
jb 0x424955
mov eax, ecx
mov ecx, dword [esp + 0x60]
lea edx, [ecx + 4]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0041f330
mov ebx, dword [esp + 0x38]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x20], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
mov edx, dword [esp + 0x64]
mov dword [esp + 8], edx
call fcn.00425600
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 8], edx
call fcn.00424480
movzx eax, byte [esp + 0xc]
test al, al
je 0x4249c3
mov edx, dword [esp + 0x24]
mov byte [edx + 0x3c], 1
jmp 0x4249c7
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x64]
shl eax, 0xd
mov dword [esp + 0x28], eax
movzx ebp, byte [esp + 0x68]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x424ab4
movzx esi, byte [esp + 0x69]
xchg esi, eax
mov byte [edx + 0x3a], al
xchg esi, eax
xchg esi, eax
shr al, 1
xchg esi, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x424a0a
mov dword [edx + 0x40], eax
mov dword [edx + 0x1c], 1
mov dword [edx + 0x34], 0
mov ecx, edx
jmp 0x424a44
xchg esi, eax
movsx eax, al
xchg esi, eax
cmp esi, 0x44
jae 0x424d52
lea ecx, [0x63fe80]
movzx ecx, word [ecx + esi*2]
mov dword [edx + 0x40], ecx
test ecx, ecx
je 0x424d4d
xor edx, edx
div ecx
mov ecx, dword [esp + 0x24]
mov dword [ecx + 0x1c], eax
lea edx, [0x6414e0]
mov edx, dword [edx + esi*4]
mov dword [ecx + 0x34], edx
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x20], 0xffffffff
mov dword [ecx + 0x24], 0xffffffff
mov eax, dword [ecx + 0x1c]
mov dword [esp], eax
call fcn.004261a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x24]
mov dword [ecx + 0x2c], eax
mov eax, dword [ecx + 0x1c]
mov dword [esp], eax
call fcn.00426330
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x24]
mov dword [ecx + 0x28], eax
lea eax, [ecx + 0x30]
mov edx, dword [esp + 0x60]
mov ebx, dword [edx + 0x90]
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.00401df0
mov eax, dword [esp + 0x24]
lea ecx, [eax + 0x3b]
mov dword [esp], ecx
mov byte [esp + 4], 1
call fcn.00401e90
jmp 0x424adf
mov dword [edx + 0x14], 0
mov dword [edx + 0x1c], 0
mov eax, dword [edx + 0x10]
shl eax, 0xd
add eax, dword [edx + 0xc]
mov dword [edx + 0x44], eax
nop
lea eax, [edx + 0x3b]
mov dword [esp], eax
mov byte [esp + 4], 2
call fcn.00401e90
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x424af0
movzx ecx, byte [esp + 0x68]
test cl, cl
jmp 0x424b46
xor ecx, ecx
sub ecx, eax
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0x30]
mov dword [esp], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 4], edx
call fcn.00413230
lea eax, [0x67fac0]
mov dword [esp], eax
xor eax, eax
mov ecx, dword [esp + 0x20]
sub eax, ecx
mov eax, 0
sbb eax, 0
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.00401d50
movzx eax, byte [esp + 0x68]
test al, al
mov eax, dword [esp + 0x20]
movzx ecx, byte [esp + 0x68]
jne 0x424b76
lea eax, [0x67fab8]
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00401d50
movzx eax, byte [esp + 0x68]
test al, al
mov eax, dword [esp + 0x20]
movzx ecx, byte [esp + 0x68]
je 0x424b9e
xor eax, eax
mov ecx, dword [esp + 0x28]
sub eax, ecx
lea edx, [0x67fab0]
mov dword [esp], edx
mov edx, 0
sbb edx, 0
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.0042d0e0
lea eax, [0x6810b0]
mov dword [esp], eax
call fcn.0042d210
mov eax, dword [esp + 4]
mov dword [esp + 0x50], eax
test byte [eax], al
xor ecx, ecx
mov edx, dword [esp + 0x20]
sub ecx, edx
mov dword [esp + 0x34], ecx
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edx
call fcn.00401cd0
mov eax, dword [esp + 0x50]
lea ecx, [eax + 8]
mov dword [esp], ecx
xor ecx, ecx
mov edx, dword [esp + 0x20]
sub ecx, edx
mov ecx, 0
sbb ecx, 0
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
call fcn.00401cd0
movzx eax, byte [esp + 0x68]
cmp al, 1
ja 0x424c51
test al, al
jne 0x424c30
mov eax, dword [esp + 0x50]
add eax, 0x10
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00401cd0
jmp 0x424c9b
mov eax, dword [esp + 0x50]
add eax, 0x18
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00401cd0
jmp 0x424c9b
cmp al, 2
je 0x424c7c
cmp al, 3
jne 0x424c9b
mov eax, dword [esp + 0x50]
add eax, 0x20
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00401cd0
jmp 0x424c9b
mov eax, dword [esp + 0x50]
add eax, 0x28
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.00401cd0
lea eax, [0x6810b0]
mov dword [esp], eax
call fcn.0042d310
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x60]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004243f0
movzx eax, byte [esp + 0x68]
test al, al
jne 0x424d3c
mov eax, dword [0x65e1dc]
test byte [eax], al
nop
nop
mov edx, dword [esp + 0x24]
mov ecx, dword [edx + 0xc]
nop
mov edx, ecx
shr ecx, 0x16
mov eax, dword [eax + ecx*4]
test byte [eax], al
mov ecx, edx
shr edx, 0x10
and edx, 0x3f
lea eax, [eax + edx + 0x40800]
mov dword [esp], eax
shr ecx, 0xd
and ecx, 7
mov eax, 1
shl eax, cl
mov byte [esp + 4], al
call fcn.00401e70
mov eax, dword [esp + 0x60]
test byte [eax], al
add eax, 0xa0
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.00401d50
call fcn.0045f100
mov eax, dword [esp + 0x24]
mov dword [esp + 0x6c], eax
add esp, 0x5c
ret
call fcn.00432170
mov eax, esi
mov ecx, 0x44
call fcn.0045f4d0
lea eax, [0x566648]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00433a80
mov eax, ebp
mov ecx, pe_nt_image_headers32
call fcn.0045f4d0
nop
call fcn.0045cc20
jmp fcn.004246d0