Function at 0x3426ab1f
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x343a7e73
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x34234fcc]
xor eax, esp
mov dword [esp + 0x64], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x34234fcc]
xor eax, esp
push eax
lea eax, [esp + 0x7c]
mov dword fs:[0], eax
mov edx, dword [esp + 0x98]
mov eax, dword [esp + 0x8c]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0xa8]
inc dword [ecx + 0x80]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x5c], ecx
mov eax, dword [eax + 0xc]
xor edi, edi
mov dword [esp + 0x84], edi
mov byte [esp + 0x27], 0
mov dword [esp + 0x18], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x2c], eax
cmp dword [ecx + 0x7b8], edi
je 0x342b7d16
cmp dword [ecx + 0x7f0], edi
je 0x342b7cf2
mov ecx, dword [esp + 0x14]
test byte [ecx], 8
jne 0x3426ac04
mov edx, ecx
mov ecx, dword [esp + 0x1c]
push edx
call fcn.341fcf99
mov eax, dword [esp + 0x14]
test byte [eax], 8
jne 0x3426ac4f
mov ecx, eax
push ecx
mov ecx, dword [esp + 0x30]
push 1
call fcn.341fafc8
mov edx, dword [esp + 0x14]
test byte [edx], 8
jne 0x3426ac4f
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2c]
push eax
add ecx, 0xa8
mov byte [esp + 0x2b], 1
call fcn.341f70a5
test eax, eax
jne 0x3426ac4f
mov ecx, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x20]
call fcn.341fd422
mov ecx, dword [esp + 0x14]
test byte [ecx], 8
jne 0x34283ba2
mov dl, byte [esi + 1]
and byte [esi], 1
push 1
mov eax, ecx
mov ecx, dword [esp + 0x34]
push eax
push 0
push ecx
mov ecx, dword [esp + 0x2c]
and dl, 0xf9
push ebp
or dl, 1
push esi
mov byte [esi + 1], dl
mov edx, dword [esp + 0x4c]
push ebx
push edx
call fcn.341fe436
mov ecx, dword [esp + 0x14]
test byte [ecx], 8
mov dword [esp + 0x18], eax
jne 0x34283ba2
cmp dword [esp + 0xac], 1
jne 0x3426ace5
xor esi, esi
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 8]
cmp esi, dword [eax + 0x20]
jge 0x3426ace5
mov edx, dword [eax + 0x1c]
mov eax, dword [edx + esi*8]
test eax, eax
jl 0x34283b9b
cmp eax, 0xff
ja 0x34283b9b
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + eax*4 + 0xf4]
test byte [eax + 0x22], 6
jne 0x342b7d32
inc esi
test byte [ecx], 8
je 0x3426aca5
test byte [ecx], 8
jne 0x34283ba2
mov ebx, dword [esp + 0x34]
mov esi, dword [esp + 0x1c]
push ebx
mov ecx, esi
call fcn.34209822
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 0xe4]
mov ecx, dword [esi + 4]
mov edx, dword [esi]
mov esi, dword [esp + 0x28]
push esi
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], 0xffffffff
call fcn.341f2ad9
add esp, 4
add eax, eax
push eax
push esi
lea ecx, [esp + 0x54]
call fcn.341fd7bd
mov ebp, dword [esp + 0x14]
test eax, eax
je 0x342b7d56
push 0
push 0
push ebp
push 2
push esi
mov ecx, ebx
call fcn.34208b02
test byte [ebp], 8
mov dword [esp + 0x3c], eax
jne 0x34283ba6
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x3c]
call eax
mov dword [esp + 0x20], eax
mov esi, eax
test byte [ebp], 8
jne 0x3426afbb
mov eax, dword [esp + 0x40]
xor edx, edx
mov dword [esp + 0x44], edx
test eax, eax
jne 0x3426ad9f
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x342b7d65
cmp word [ecx], di
je 0x342b7d65
mov dword [esp + 0x30], edi
test eax, eax
jne 0x342b7de8
push 0xc
call fcn.341f21e0
add esp, 4
mov dword [esp + 0x40], eax
mov byte [esp + 0x84], 1
test eax, eax
je 0x34283bad
mov edx, dword [esp + 0x1c]
mov ecx, dword [edx + 0x28]
mov edx, dword [ecx + 0x48]
dec edx
neg edx
sbb edx, edx
and edx, 0xffffff0b
push ebp
add edx, 0xff
push edx
mov ecx, eax
call fcn.341fe8e1
mov esi, eax
mov ebx, esi
mov byte [esp + 0x84], 0
mov dword [esp + 0x28], ebx
test esi, esi
je 0x342b7df3
mov dword [esp + 0x30], 1
test byte [ebp], 8
jne 0x3426af9c
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x20]
push ebp
push 0
push 0
push esi
push edx
call fcn.341fead3
test byte [ebp], 1
je 0x342b7e06
test byte [ebp], 8
jne 0x3426af9c
mov ecx, dword [esp + 0x18]
mov eax, dword [ebx + 4]
mov edx, dword [ecx + 8]
cmp eax, dword [edx + 0x20]
jne 0x342b7e24
test byte [ebp], 8
jne 0x3426af9c
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x20], eax
je 0x342b7e37
test byte [ebp], 8
jne 0x3426af9c
cmp byte [esp + 0xb8], 0
jne 0x3426af9c
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x44]
add ebx, 0x570
test esi, esi
jl 0x34283bb4
cmp esi, dword [ebp + 0x14]
jge 0x34283bb4
mov eax, dword [ebx]
cmp eax, 0xffffffff
je 0x34283bb4
mov edi, dword [ebp + eax*4 + 0x4f0]
inc esi
add ebx, 4
test edi, edi
je 0x3426af9c
mov eax, dword [edi + 8]
mov ecx, dword [esp + 0x28]
add eax, 0x1c
push eax
call fcn.3426a08e
test al, al
je 0x3426ae94
mov eax, dword [edi + 8]
cmp dword [eax + 0x18], 0
je 0x3426ae94
test byte [eax + 5], 1
je 0x342b7e64
test edi, edi
je 0x3426af9c
mov ecx, dword [esp + 0x14]
call fcn.341f5f2f
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 8]
xor esi, esi
cmp dword [eax + 0x20], esi
jle 0x3426af9c
mov ebp, edx
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x1c]
mov edx, dword [eax + esi*8 + 4]
mov ecx, dword [eax + esi*8]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x48], edx
mov edx, dword [eax + esi*8]
mov eax, dword [eax + esi*8 + 4]
mov dword [esp + 0x48], eax
test ecx, ecx
jl 0x34283bbb
cmp ecx, 0xff
ja 0x34283bbb
mov eax, dword [esp + 0x20]
mov ebx, dword [eax + ecx*4 + 0xf4]
test edx, edx
jl 0x34283bc2
cmp edx, 0xff
ja 0x34283bc2
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx + edx*4 + 0xf4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov edx, dword [ebx]
mov edx, dword [edx + 0x14]
mov ecx, ebx
mov byte [esp + 0x26], al
call edx
mov cl, byte [esp + 0x26]
cmp al, cl
jne 0x342b7e79
mov eax, dword [ebp + 8]
inc esi
cmp esi, dword [eax + 0x20]
jl 0x3426af0f
cmp dword [esp + 0x30], 0
je 0x3426afbb
mov esi, dword [esp + 0x28]
test esi, esi
je 0x3426afbb
mov ecx, esi
call fcn.341ffbcb
push esi
call fcn.341f5892
add esp, 4
mov esi, dword [esp + 0x14]
test byte [esi], 8
jne 0x34283bc9
test edi, edi
je 0x342b7e90
test byte [esi], 8
jne 0x34283bc9
cmp byte [esp + 0xb8], 0
jne 0x34283bc9
mov ebp, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
mov edx, dword [edi + 8]
mov al, byte [ecx + 5]
xor al, byte [edx + 5]
test al, al
js 0x342b7eb1
test byte [esi], 8
jne 0x34283bd9
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x14]
xor ebx, ebx
test eax, eax
jle 0x3426b068
add ecx, 0x570
mov dword [esp + 0x28], ecx
test ebx, ebx
jl 0x34283bd2
cmp ebx, eax
jge 0x34283bd2
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
cmp eax, 0xffffffff
je 0x34283bd2
mov edx, dword [esp + 0x1c]
mov esi, dword [edx + eax*4 + 0x4f0]
cmp byte [esi + 0x29], 2
je 0x34283b6c
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 0x14]
add dword [esp + 0x28], 4
inc ebx
cmp ebx, eax
jl 0x3426b01f
mov esi, dword [esp + 0x14]
test byte [esi], 8
jne 0x34283bd9
and byte [esp + 0x18], 0x9d
cmp byte [esp + 0xb8], 0
jne 0x342b7f1f
mov edi, dword [edi + 8]
mov cl, byte [edi + 5]
mov al, cl
and al, 1
mov byte [esp + 0x26], al
mov bl, cl
mov al, cl
shr al, 3
and al, 1
add al, al
mov dl, cl
shr dl, 1
and dl, 1
shr bl, 2
and dl, 1
and bl, 1
and bl, 1
or al, bl
add al, al
or al, dl
add al, al
mov dl, cl
and dl, 0xc0
or al, dl
mov dl, byte [esp + 0x26]
add al, al
and dl, 1
or al, dl
mov dl, byte [esp + 0x18]
and dl, 0x62
or al, dl
mov dl, byte [edi + 6]
mov byte [esp + 0x18], al
mov al, dl
and al, 1
shr cl, 7
and dl, 2
or al, dl
and cl, 1
add al, al
or al, cl
movzx ecx, byte [esp + 0x19]
and cl, 0xf8
or al, cl
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x34]
push 2
push edx
push 0
push 0
mov byte [esp + 0x29], al
mov eax, dword [esp + 0x48]
push eax
lea ecx, [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x38]
push 0x3426b284
push esi
call fcn.341fe436
mov edi, eax
mov ebx, dword [esp + 0x14]
test byte [ebx], 8
jne 0x3426b1f8
mov eax, dword [edi + 0x24]
mov edx, 0x2e
mov word [esp + 0x60], dx
mov edx, 0x72
mov ecx, 2
mov word [esp + 0x62], dx
test eax, eax
je 0x3426b179
cmp ecx, 0xa
jae 0x34283be2
mov edx, eax
and edx, 0xf
add edx, 0x41
mov word [esp + ecx*2 + 0x60], dx
sar eax, 4
inc ecx
test eax, eax
jne 0x3426b152
cmp ecx, 0xa
jae 0x34283be2
xor eax, eax
mov word [esp + ecx*2 + 0x60], ax
mov ecx, dword [esp + 0x20]
push 0
push ebx
lea edx, [esp + 0x68]
push edx
push 0x3426b284
push esi
call fcn.34269f41
test byte [ebx], 8
jne 0x3426b1f8
mov eax, dword [esp + 0x1c]
cmp byte [esp + 0xb8], 0
mov ebx, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov byte [edi + 0x29], 1
mov eax, dword [eax + 0x2c]
mov dword [edi + 0x30], eax
mov eax, dword [ebp + 0x24]
mov dword [edi + 0x2c], eax
mov eax, dword [esp + 0xb4]
mov dword [edi + 0x34], ebx
mov dword [edi + 0x38], edx
mov dword [edi + 0x3c], eax
setne cl
add cl, 2
mov byte [ebp + 0x29], cl
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx + 0x2c]
mov dword [ebp + 0x30], ecx
mov ecx, dword [edi + 0x24]
mov dword [ebp + 0x2c], ecx
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], edx
mov dword [ebp + 0x3c], eax
mov edx, dword [esp + 0x14]
test byte [edx], 8
mov ebx, dword [esp + 0x1c]
jne 0x3426b217
mov ecx, dword [esp + 0x20]
mov eax, edx
push eax
push ebp
push edi
push ecx
push esi
mov ecx, ebx
call fcn.3426b2ac
cmp byte [esp + 0x27], 0
je 0x3426b252
mov edx, dword [esp + 0x14]
test byte [edx], 8
jne 0x3426b235
mov ecx, dword [esp + 0x2c]
push 0
mov eax, edx
push eax
call fcn.341fdee3
mov ecx, dword [esp + 0x14]
test byte [ecx], 8
jne 0x342b7f31
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x3426b252
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
push esi
mov ecx, ebx
call fcn.341fd343
dec dword [ebx + 0x80]
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.341f1dd1
add esp, 0x74
ret 0x34
mov eax, dword [esi + 0x30]
mov ecx, dword [esp + 0x20]
cmp eax, dword [ecx + 0x2c]
jne 0x3426b053
mov eax, dword [ebp + 8]
mov ecx, dword [esi + 8]
add eax, 0x1c
push eax
add ecx, 0x1c
call fcn.3426a08e
test al, al
je 0x3426b053
jmp 0x342b7ec4
xor eax, eax
jmp 0x3426acd5
mov ebp, dword [esp + 0x14]
mov esi, edi
jmp 0x3426ad72
xor esi, esi
jmp 0x3426adef
xor edi, edi
jmp 0x3426aeb7
xor ebx, ebx
jmp 0x3426af50
xor ecx, ecx
jmp 0x3426af6f
mov ebp, dword [esp + 0x18]
jmp 0x3426afff
xor esi, esi
jmp 0x3426b049
mov esi, dword [esp + 0x34]
jmp 0x3426b125
xor ecx, ecx
mov word [esp + 0x72], cx
jmp 0x3426b180
mov eax, dword [ecx]
push 1
add ecx, 0x7f4
push ecx
push eax
push 0xffffdcfa
push 0xfffff35f
mov ecx, dword [esp + 0x28]
call fcn.34214687
jmp 0x3426abef
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
push 1
add ecx, 0x7bc
push ecx
push eax
push 0xffffdcf9
push 0xfffff35e
jmp 0x342b7d08
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0x14]
push 1
push 0
push eax
push 0xffffdfd5
push 0xfffffbe8
call fcn.34214687
mov ecx, dword [esp + 0x14]
jmp 0x3426acdf
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
mov esi, eax
jmp 0x3426ad72
lea ecx, [esi + 0x570]
test edx, edx
jl 0x342b7d84
cmp edx, dword [esi + 0x14]
jge 0x342b7d84
mov eax, dword [ecx]
cmp eax, 0xffffffff
je 0x342b7d84
mov edi, dword [esi + eax*4 + 0x4f0]
jmp 0x342b7d86
xor edi, edi
inc edx
add ecx, 4
test edi, edi
je 0x342b7d98
test byte [edi + 0x28], 1
je 0x342b7d6b
test edi, edi
jne 0x342b7dab
push 1
push 0xfffffa84
mov ecx, ebp
call fcn.341f8dac
jmp 0x3426afbb
cmp esi, dword [esp + 0x1c]
jne 0x3426afbb
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 8]
mov ecx, dword [edi + 8]
add eax, 0x1c
push eax
add ecx, 0x1c
call fcn.3426a08e
test al, al
je 0x3426afbb
push 1
push 0xfffffa81
mov ecx, ebp
call fcn.341f8dac
xor edi, edi
jmp 0x3426afbb
mov ebx, eax
mov dword [esp + 0x28], ebx
jmp 0x3426ae35
push 1
push 0xfffffc0d
mov ecx, ebp
call fcn.341f8dac
jmp 0x3426ae0d
cmp dword [ebp + 4], 0xfffffa82
jne 0x3426ae35
push 0xfffffa84
mov ecx, ebp
call fcn.3420b880
jmp 0x3426ae35
push 1
push 0xfffffc15
mov ecx, ebp
call fcn.341f8dac
jmp 0x3426ae52
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 8]
add eax, 0x1c
push eax
mov ecx, ebx
call fcn.3426a08e
test al, al
je 0x3426ae6a
push 1
push 0xfffffa81
mov ecx, ebp
call fcn.341f8dac
jmp 0x3426ae6a
mov ecx, dword [esp + 0x14]
push 1
push 0xfffffa0e
call fcn.341f8dac
jmp 0x3426ae94
mov ecx, dword [esp + 0x14]
push 1
push 0xfffff218
call fcn.341f8dac
xor edi, edi
jmp 0x3426af9c
cmp byte [esp + 0xb8], 0
jne 0x3426afd0
push 1
push 0xfffffa0e
mov ecx, esi
call fcn.341f8dac
jmp 0x3426afd0
push 1
push 0xfffffa0e
mov ecx, esi
call fcn.341f8dac
jmp 0x3426afff
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x38]
cmp eax, 4
je 0x342b7edf
mov edx, dword [esp + 0xac]
cmp edx, 4
je 0x342b7edf
cmp eax, edx
jne 0x342b7f00
cmp ecx, 4
je 0x3426b053
mov eax, dword [esp + 0xb0]
cmp eax, 4
je 0x3426b053
cmp ecx, eax
je 0x3426b053
mov esi, dword [esi]
mov ecx, dword [esp + 0x14]
push 1
push 0
push esi
push 0xffffdf92
push 0xfffffa08
call fcn.34214687
jmp 0x3426b053
mov al, byte [esp + 0x19]
and byte [esp + 0x18], 0x62
and al, 0xf9
or al, 1
jmp 0x3426b0f7
mov dword [esp + 0x60], 1
mov dword [esp + 0x74], 0
mov ecx, dword [esp + 0x2c]
push 0
lea edx, [esp + 0x64]
push edx
mov byte [esp + 0x8c], 2
call fcn.34263e73
test dword [esp + 0x60], 0xfffffffe
mov byte [esp + 0x84], 0
je 0x3426b252
lea ecx, [esp + 0x60]
call fcn.341ffba8
jmp 0x3426b252