Function at 0x426462
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x320
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
add eax, 0x1c
mov dword [esp + 0x1c], eax
mov dword [esp], 0x39c0947c
mov esi, dword [esp + 0x18]
mov ebp, 0xff00ff00
lea edi, [esp + 0x54]
mov eax, dword [esp]
cmp eax, 0xde56de58
jle 0x426517
cmp eax, 0x37d0246a
jg 0x426588
cmp eax, 0xbe5b6ea
jle 0x42663e
cmp eax, 0x26cf674c
jg 0x42678a
cmp eax, 0x10c6cb06
jg 0x42697f
cmp eax, 0xbe5b6eb
je 0x426bf8
cmp eax, 0xc252d93
jne 0x426490
mov eax, dword [esp + 8]
mov ecx, 0x84
add eax, ecx
shr eax, 6
lea ecx, [eax - 0x1e]
imul ecx, ecx
add eax, 0xffffffdb
imul edx, ecx, 0x539d
dec edx
shr eax, 8
and eax, 0xffffff80
mov dword [esp + 8], eax
mov eax, 0x39c0947c
cmp ecx, edx
je 0x426fba
mov eax, 0xd6ff24ad
jmp 0x426fba
cmp eax, 0xb227df7d
jle 0x4265dc
cmp eax, 0xcac22c0e
jle 0x4266a4
cmp eax, 0xd6ff24ac
jg 0x4267cf
cmp eax, 0xcc04b0b2
jg 0x4269bf
cmp eax, 0xcac22c0f
je 0x426c28
cmp eax, 0xcb79465d
jne 0x426490
imul ebx, dword [esp + 4], 0x1098000
add ebx, 0xb5ace000
mov dword [esp + 4], ebx
call fcn.00426462
mov eax, 0x4890566c
cmp ebx, 0x39
jge 0x426fba
mov eax, 0xbdbdeae8
jmp 0x426fba
cmp eax, 0x5770dfe3
jle 0x4266dc
cmp eax, 0x70ca823c
jle 0x426821
cmp eax, 0x79fe424a
jg 0x4269eb
cmp eax, 0x70ca823d
je 0x426c3c
cmp eax, 0x79ab1069
jne 0x426490
imul eax, dword [esp + 8], 0x71960
add eax, 0xf8435860
mov dword [esp + 8], eax
mov dword [esp], 0xf04bccf1
jmp 0x426490
cmp eax, 0x9986a12f
jg 0x42673c
cmp eax, 0x8b38ceec
jle 0x426847
cmp eax, 0x95a43c8a
jg 0x426a0d
cmp eax, 0x8b38ceed
je 0x426c4f
cmp eax, 0x8fdab2e2
jne 0x426490
mov eax, dword [esp + 8]
shr eax, 1
lea ecx, [eax + eax*4]
lea ecx, [ecx + ecx*4]
add eax, ecx
add eax, 0xffffff9a
shr eax, 6
add eax, 0xffffffc9
mov dword [esp + 8], eax
mov dword [esp], 0x70430d17
mov esi, dword [esp + 0x50]
jmp 0x426490
cmp eax, 0xf04bccf0
jle 0x426894
cmp eax, 0xf519bfdf
jg 0x426a48
cmp eax, 0xf04bccf1
je 0x426c64
cmp eax, 0xf0a6a98d
jne 0x426490
mov eax, dword [esp + 8]
lea ecx, [eax + 0xec]
imul ecx, ecx
imul edx, ecx, 0x5f5f
imul eax, eax, 0x34
add eax, 0x1b6c
dec edx
shr eax, 0xe
mov dword [esp + 8], eax
mov eax, 0x39c0947c
cmp ecx, edx
je 0x426fba
mov eax, 0x8b38ceed
jmp 0x426fba
cmp eax, 0xbdbdeae7
jle 0x4268cc
cmp eax, 0xc2d7da3d
jg 0x426a94
cmp eax, 0xbdbdeae8
je 0x426c7a
cmp eax, 0xbe8dfb6c
jne 0x426490
mov dword [esp], 0x5e69fb01
jmp 0x426490
cmp eax, 0x3acddb48
jle 0x426903
cmp eax, 0x4890566b
jg 0x426acc
cmp eax, 0x3acddb49
je 0x426ca3
cmp eax, 0x41584ebd
jne 0x426490
imul eax, dword [esp + 8], 0x3d
add eax, 0xffffff1d
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x40a5
dec edx
shl eax, 0xd
mov dword [esp + 8], eax
mov eax, 0xcc04b0b3
cmp ecx, edx
je 0x426fba
mov eax, 0x4890566c
jmp 0x426fba
cmp eax, 0xa63a7ff4
jle 0x42693a
cmp eax, 0xa74d9549
jg 0x426b05
cmp eax, 0xa63a7ff5
je 0x426cc5
cmp eax, 0xa6b01961
jne 0x426490
mov al, byte [esp + 0x10]
or al, byte [esp + 0x11]
and al, 1
mov byte [esp + 0x12], al
mov eax, dword [esp + 0x64]
mov dword [esp + 0x4c], eax
mov dword [esp], 0x9986a130
jmp 0x426490
cmp eax, 0x3206c629
jg 0x426b41
cmp eax, 0x26cf674d
je 0x426ce0
cmp eax, 0x2e480e9e
jne 0x426490
imul eax, dword [esp + 8], 0x2d000
or eax, 0xa40
mov ecx, eax
shl ecx, 5
sub ecx, eax
mov dword [esp + 8], ecx
mov dword [esp], 0xd5aac676
jmp 0x426490
cmp eax, 0xdb446d52
jg 0x426b76
cmp eax, 0xd6ff24ad
je 0x426d1e
cmp eax, 0xd7c8a04a
jne 0x426490
mov eax, dword [esp + 4]
shr eax, 6
imul ebx, eax, 0x93e74000
add ebx, 0xfffffffd
mov dword [esp + 4], ebx
call fcn.0042e90f
call fcn.00427233
mov eax, 0xc66ca107
cmp ebx, 0xe
jl 0x426c1e
jmp 0x426fba
cmp eax, 0x6d5d6c03
jg 0x426bb6
cmp eax, 0x5770dfe4
je 0x426d2a
cmp eax, 0x5e69fb01
je 0x426f37
jmp 0x426490
cmp eax, 0x81aacd54
je 0x426d3f
cmp eax, 0x83db9c68
je 0x426d55
cmp eax, 0x85d40766
jne 0x426490
mov eax, dword [esp + 4]
and eax, 0xfffffff8
shl eax, 0x12
lea eax, [eax + eax*4]
or eax, 0x720
mov dword [esp + 4], eax
call fcn.0042a9d7
call fcn.0042a91f
mov dword [esp], 0x81aacd54
jmp 0x426490
cmp eax, 0xde56de59
je 0x426d6b
cmp eax, 0xe7eb6c88
je 0x426d86
cmp eax, 0xed35f764
jne 0x426490
mov eax, dword [esp + 0x20]
add eax, 8
mov dword [esp + 0x24], eax
mov dword [esp], 0x81aacd54
jmp 0x426490
cmp eax, 0xb227df7e
je 0x426dba
cmp eax, 0xb9ce6b7e
je 0x426def
cmp eax, 0xba26994b
jne 0x426490
mov eax, dword [esp + 0x3c]
mov dword [eax], 0xff00ff00
mov dword [esp], 0xf0a6a98d
jmp 0x426490
cmp eax, 0x37d0246b
je 0x426e0c
cmp eax, 0x389c77e9
je 0x426e34
cmp eax, 0x39c0947c
jne 0x426490
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
mov dword [esp + 0x20], eax
mov dword [esp], 0xb9ce6b7e
jmp 0x426490
cmp eax, 0x9986a130
je 0x426e48
cmp eax, 0xa14ee690
je 0x426e6a
cmp eax, 0xa42e8fd6
jne 0x426490
mov dword [esp + 0x54], 0x10010
cmp byte [0x471b30], 0
mov eax, 0x3206c62a
je 0x426fba
mov eax, 0xa63a7ff5
jmp 0x426fba
cmp eax, 0x10c6cb07
je 0x426e85
cmp eax, 0x19d996fb
jne 0x426490
mov ecx, dword [esp + 4]
mov eax, 0xfffffec4
add ecx, eax
mov dword [esp + 4], ecx
mov eax, 0xc2d7da3e
cmp ecx, 0x83
je 0x426fba
mov eax, 0xd5aac676
jmp 0x426fba
cmp eax, 0xcc04b0b3
je 0x426eb3
cmp eax, 0xd5aac676
jne 0x426490
mov eax, dword [esp + 0x38]
mov dword [eax], 0xff00ff00
mov dword [esp], 0xb227df7e
jmp 0x426490
cmp eax, 0x79fe424b
je 0x426ecf
cmp eax, 0x7c26b309
jne 0x426490
mov dword [esp], 0x70ca823d
jmp 0x426490
cmp eax, 0x95a43c8b
je 0x426ee3
cmp eax, 0x95c88730
jne 0x426490
mov ecx, dword [esp + 4]
mov eax, 0xffffff04
add ecx, eax
mov dword [esp + 4], ecx
mov eax, 0xd7c8a04a
cmp ecx, 0xf7
jae 0x426c1e
jmp 0x426fba
cmp eax, 0xf519bfe0
je 0x426eff
cmp eax, 0xfc344944
jne 0x426490
mov dword [esp + 0x54], 0x10010
push 0x97baff8d
push 0x5451bdca
push dword [esp + 0x1c]
call fcn.0042ea0c
push edi
push 0xfffffffffffffffe
call eax
mov ecx, 0x41584ebd
test eax, eax
jns 0x426a8c
mov ecx, 0x34319415
mov dword [esp], ecx
jmp 0x426490
cmp eax, 0xc2d7da3e
je 0x426f26
cmp eax, 0xc66ca107
jne 0x426490
mov eax, dword [esp + 4]
add eax, 0x12
shr eax, 0xa
and eax, 0xfffffff0
add eax, 0xe10
mov dword [esp + 4], eax
mov dword [esp], 0x81aacd54
jmp 0x426490
cmp eax, 0x4890566c
je 0x426f43
cmp eax, 0x55681dea
jne 0x426490
push 0x30a1d552
push 0x1bf1bb26
push dword [esp + 0x1c]
call fcn.0042ea0c
mov dword [esp + 0x2c], eax
mov dword [esp], 0x95a43c8b
jmp 0x426490
cmp eax, 0xa74d954a
je 0x426f57
cmp eax, 0xad3225e8
jne 0x426490
imul eax, dword [esp + 8], 0x2b400
add eax, 0x1166c00
shr eax, 8
add eax, 0xffffff86
shr eax, 4
mov dword [esp + 8], eax
mov dword [esp], 0x389c77e9
jmp 0x426490
cmp eax, 0x3206c62a
je 0x426f73
cmp eax, 0x34319415
jne 0x426490
imul eax, dword [esp + 8], 0x50a600
add eax, 0x51e8980
mov dword [esp + 8], eax
mov dword [esp], 0x70430d17
xor esi, esi
jmp 0x426490
cmp eax, 0xdb446d53
je 0x426f8f
cmp eax, 0xde4c00bc
jne 0x426490
imul eax, dword [esp + 4], 0x5bbc0000
mov ebx, 0x39c0947c
add eax, 0xddc00000
mov dword [esp + 4], eax
je 0x426ba9
mov ebx, 0xa42e8fd6
call fcn.0042e8ea
mov dword [esp], ebx
jmp 0x426490
cmp eax, 0x6d5d6c04
jne 0x426fc2
mov ebx, dword [esp + 4]
mov eax, 0x9e
add ebx, eax
mov eax, ebx
shr eax, 8
add eax, 0x2d
mov dword [esp + 4], eax
call fcn.004263b6
mov eax, 0xa42e8fd6
cmp ebx, 0x8c00
jb 0x426fba
mov eax, 0xbe5b6eb
jmp 0x426fba
mov ebx, dword [esp + 4]
mov eax, ebx
shr eax, 7
add eax, 0x47
mov dword [esp + 4], eax
call fcn.004271a5
mov eax, 0xfc344944
cmp ebx, 0x3900
jae 0x426fba
mov eax, 0xa42e8fd6
jmp 0x426fba
lea eax, [esp + 0x64]
mov dword [esp + 0x3c], eax
mov dword [esp], 0x10c6cb07
jmp 0x426490
mov byte [0x471b30], 1
mov dword [esp], 0xfc344944
jmp 0x426490
mov eax, dword [esp + 0x30]
push edi
push 0xfffffffffffffffe
call eax
mov dword [esp], 0xe7eb6c88
jmp 0x426490
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
mov dword [esp + 0x44], eax
mov dword [esp], 0x3acddb49
jmp 0x426490
mov eax, dword [esp + 4]
shr eax, 9
imul eax, eax, 0x3a
add eax, 0xf7
mov dword [esp + 4], eax
call fcn.0042a257
call fcn.0042a257
mov dword [esp], 0x39c0947c
jmp 0x426490
mov eax, dword [esp + 0x44]
cmp eax, 0xff00ff00
setne byte [esp + 0xf]
lea eax, [esp + 0x5c]
mov dword [esp + 0x48], eax
mov dword [esp], 0x37d0246b
jmp 0x426490
mov eax, dword [esp + 8]
lea eax, [eax*8 - 0xd3]
mov dword [esp + 8], eax
mov dword [esp], 0xfc344944
jmp 0x426490
mov eax, dword [esp + 4]
lea eax, [eax*4 - 0x6c064]
and eax, 0xffffe000
imul eax, eax, 0xf6
mov dword [esp + 4], eax
push 0x3c94
push 0x3c75
push eax
call fcn.0042639b
add esp, 0xc
call fcn.00426fde
mov dword [esp], 0x4890566c
jmp 0x426490
mov dword [esp], 0xbe8dfb6c
jmp 0x426490
movzx eax, byte [esp + 0x13]
mov dword [esp + 0x50], eax
mov dword [esp], 0x8fdab2e2
jmp 0x426490
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
mov dword [esp], 0xad3225e8
jmp 0x426490
mov eax, dword [esp + 0x34]
mov dword [eax], ebp
mov dword [esp + 0x5c], ebp
mov dword [esp], 0x79fe424b
jmp 0x426490
imul eax, dword [esp + 4], 0x11a00
or eax, 0x32
mov dword [esp + 4], eax
mov dword [esp], 0xde4c00bc
jmp 0x426490
mov eax, dword [esp + 8]
shr eax, 0x12
add eax, 0xfffffff8
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0xead
shr eax, 7
dec edx
mov dword [esp + 8], eax
mov eax, 0xdb446d53
cmp ecx, edx
je 0x426fba
mov eax, 0x7c26b309
jmp 0x426fba
imul eax, dword [esp + 8], 0x5b
lea ecx, [eax - 0x2442]
imul ecx, ecx
add eax, 0xffffdc11
imul edx, ecx, 0x4c61
dec edx
mov dword [esp + 8], eax
mov eax, 0x389c77e9
cmp ecx, edx
je 0x426fba
mov eax, 0xcac22c0f
jmp 0x426fba
imul eax, dword [esp + 8], 0xb7000000
add eax, 0xff2ea800
mov dword [esp + 8], eax
mov dword [esp], 0xed35f764
jmp 0x426490
mov eax, dword [esp + 0x48]
cmp dword [eax], ebp
setne al
or al, byte [esp + 0xf]
and al, 1
mov byte [esp + 0x10], al
cmp dword [esp + 0x60], ebp
setne byte [esp + 0x11]
mov dword [esp], 0xa14ee690
jmp 0x426490
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
mov dword [esp], 0xc252d93
jmp 0x426490
mov eax, dword [esp + 0x4c]
cmp eax, 0xff00ff00
setne al
or al, byte [esp + 0x12]
and al, 1
mov byte [esp + 0x13], al
mov dword [esp], 0x5770dfe4
jmp 0x426490
imul eax, dword [esp + 8], 0xb1000
or eax, 0x11
mov dword [esp + 8], eax
mov dword [esp], 0xa6b01961
jmp 0x426490
mov eax, dword [esp + 8]
shr eax, 0xb
imul eax, eax, 0x1c0
shr eax, 9
lea ecx, [eax + eax*2]
lea eax, [eax + ecx*4]
add eax, 0x208
shr eax, 0xb
mov dword [esp + 8], eax
mov dword [esp], 0xba26994b
jmp 0x426490
mov eax, dword [esp + 4]
shr eax, 3
and eax, 0x1ffffc00
mov dword [esp + 4], eax
mov dword [esp], 0xed35f764
jmp 0x426490
lea eax, [esp + 0x60]
mov dword [esp + 0x38], eax
mov dword [esp], 0x2e480e9e
jmp 0x426490
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x58]
mov dword [esp + 0x34], eax
mov dword [esp], 0x83db9c68
jmp 0x426490
mov ecx, dword [esp + 4]
mov eax, 0x1f3
add ecx, eax
mov dword [esp + 4], ecx
mov eax, 0x85d40766
cmp ecx, 0x2a
jge 0x426fba
mov eax, 0x6d5d6c04
jmp 0x426fba
imul eax, dword [esp + 4], 0x117d0000
add eax, 0x9f58bf55
mov dword [esp + 4], eax
mov dword [esp], 0xa42e8fd6
jmp 0x426490
lea eax, [esp + 0x58]
mov dword [esp + 0x40], eax
mov dword [esp], 0x79ab1069
jmp 0x426490
mov eax, dword [esp + 4]
shl eax, 0xa
add eax, 0x5902f
mov dword [esp + 4], eax
mov dword [esp], 0x37d0246b
jmp 0x426490
mov eax, dword [esp + 8]
shl eax, 0x16
or eax, 0xab
mov dword [esp + 8], eax
mov dword [esp], 0x55681dea
jmp 0x426490
imul ebx, dword [esp + 4], 0x79
add ebx, 0xffffe6f3
mov dword [esp + 4], ebx
call fcn.0042a257
call fcn.0042995d
mov eax, 0x19d996fb
cmp ebx, 0x96
jae 0x426fba
mov eax, 0x83db9c68
mov dword [esp], eax
jmp 0x426490
cmp eax, 0x70430d17
jne 0x426490
mov dword [esp + 0x18], esi
mov eax, esi
add esp, 0x320
pop esi
pop edi
pop ebx
pop ebp
ret