Function at 0x402680
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push edi
push esi
sub esp, 2
mov eax, dword [0x423fec]
mov ecx, dword [0x423ff0]
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
and edx, 0x61fb4114
not eax
mov esi, eax
and esi, 0x9e04beeb
or edx, esi
xor edx, 0x61fb4115
xor eax, edx
test eax, edx
mov eax, 0x1643c6
sete byte [esp]
cmp ecx, 0xa
setl byte [esp + 1]
cmp eax, 0x1643c5
jg 0x4026eb
jmp 0x4027b0
test cl, cl
cmovne eax, esi
nop word cs:[eax + eax]
cmp eax, 0x1643c5
jle 0x4027b0
cmp eax, 0x57831ac2
jle 0x4027f0
cmp eax, 0x57831ac3
je 0x4028c7
cmp eax, 0x58bb024d
je 0x4028dc
cmp eax, 0x67ed4d1a
jne 0x4026e0
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x423fc8], eax
mov esi, 0x8646ab2d
mov edi, 0x8646ab2d
mov eax, dword [0x423fec]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
and ecx, 0x87f13c58
not eax
mov edx, eax
and edx, 0x780ec3a7
or ecx, edx
xor ecx, 0x780ec3a6
or ecx, eax
cmp ecx, 0xffffffff
sete al
setne dl
cmp dword [0x423ff0], 0xa
setl cl
mov ah, cl
xor dl, cl
or cl, al
xor ah, al
xor cl, 1
or cl, ah
mov eax, 0xde701efb
jne 0x402789
mov edi, 0xde701efb
xor cl, dl
test dl, dl
jne 0x402791
mov esi, edi
test cl, cl
jne 0x4026e0
mov eax, esi
cmp eax, 0x1643c5
jg 0x4026eb
nop word cs:[eax + eax]
cmp eax, 0xcdad72bc
jle 0x402870
cmp eax, 0xcdad72bd
je 0x402972
cmp eax, 0xde701efb
je 0x402990
cmp eax, 0xe46f475e
jne 0x4026e0
jmp 0x402a78
cmp eax, 0x1643c6
je 0x4029fc
cmp eax, 0x1349ce69
jne 0x4026e0
mov eax, dword [0x423fec]
mov esi, 0x8a68a1ef
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
and ecx, 0x7fe70f30
not eax
mov edx, eax
and edx, 0x8018f0cf
or ecx, edx
xor ecx, 0x8018f0ce
or ecx, eax
cmp ecx, 0xffffffff
sete dl
cmp dword [0x423ff0], 0xa
setl al
xor dl, al
mov ecx, edx
not cl
and cl, al
mov eax, ecx
xor al, dl
mov eax, 0x8a68a1ef
jne 0x40285a
mov eax, 0x57831ac3
test dl, dl
jne 0x4026d1
mov esi, eax
jmp 0x4026d1
cmp eax, 0x8646ab2d
je 0x402a4a
cmp eax, 0x8a68a1ef
jne 0x4026e0
mov eax, dword [0x423fec]
mov esi, 0xe46f475e
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
xor ecx, 1
not eax
and eax, 0xfffffffe
or ecx, eax
cmp ecx, 0xffffffff
sete dl
cmp dword [0x423ff0], 0xa
setl al
xor dl, al
mov ecx, edx
not cl
and cl, al
mov eax, ecx
xor al, dl
mov eax, 0xe46f475e
je 0x402855
jmp 0x40285a
mov eax, 0x8a68a1ef
cmp eax, 0x1643c5
jg 0x4026eb
jmp 0x4027b0
mov eax, dword [0x423fec]
mov edx, dword [0x423ff0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
and ecx, 0xa206859b
not eax
mov esi, eax
and eax, 0xfffffffe
and esi, 0x5df97a64
or esi, ecx
xor esi, 0x5df97a65
or eax, esi
mov ecx, eax
and eax, 0x5c4585dd
not ecx
and ecx, 0xa3ba7a22
or eax, ecx
xor eax, 0x5c4585dd
setne al
sete ah
cmp edx, 0xa
setl cl
cmp edx, 9
setg dl
and cl, al
and ah, dl
or cl, ah
mov ah, dl
xor dl, al
and ah, al
or dl, ah
mov eax, edx
xor al, cl
mov eax, 0x8646ab2d
jne 0x402952
mov eax, 0x67ed4d1a
test dl, dl
mov edx, eax
jne 0x40295d
mov edx, 0x67ed4d1a
test cl, cl
cmovne eax, edx
cmp eax, 0x1643c5
jg 0x4026eb
jmp 0x4027b0
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x423fc8], eax
jmp 0x402a35
mov eax, dword [0x423fec]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
and ecx, 1
not eax
mov edx, eax
and edx, 0xfffffffe
or ecx, edx
not ecx
or ecx, eax
cmp ecx, 0xffffffff
sete al
cmp dword [0x423ff0], 0xa
mov edx, eax
setl cl
xor dl, cl
or cl, al
mov eax, 0xcdad72bd
xor cl, 1
or cl, dl
jne 0x4029d4
mov eax, 0x1349ce69
xor cl, dl
test dl, dl
jne 0x4029df
mov eax, 0xcdad72bd
test cl, cl
jne 0x4026e0
mov eax, 0x1349ce69
cmp eax, 0x1643c5
jg 0x4026eb
jmp 0x4027b0
mov al, byte [esp]
mov ah, byte [esp + 1]
mov esi, 0xcdad72bd
xor al, 1
xor ah, 1
mov ecx, eax
or cl, ah
xor ah, al
mov edx, ecx
xor dl, ah
test ah, 1
mov eax, 0x58bb024d
jne 0x402a26
mov eax, 0xcdad72bd
test cl, 1
cmovne eax, esi
test dl, 1
jne 0x4026e0
mov eax, 0x58bb024d
cmp eax, 0x1643c5
jg 0x4026eb
jmp 0x4027b0
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x423fc8], eax
mov eax, 0x67ed4d1a
cmp eax, 0x1643c5
jg 0x4026eb
jmp 0x4027b0
add esp, 2
pop esi
pop edi
ret