Function at 0x426cb0
Capabilities:
Check for software breakpoints

Disassembly:
sub esp, 0x54
push ebx
mov ebx, ecx
mov byte [esp + 0x2c], 0xe8
push ebp
xor cl, cl
mov dword [esp + 0x10], ebx
push esi
mov eax, dword [ebx + 8]
lea edx, [esp + 0x44]
mov byte [esp + 0xf], cl
xor ebp, ebp
xor ecx, ecx
mov dword [esp + 0x35], 0
push edi
mov edi, dword [ebx]
mov esi, edi
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], ecx
mov ecx, esi
mov byte [esp + 0x30], 0xe9
mov dword [esp + 0x31], 0
mov word [esp + 0x40], 0x800f
mov dword [esp + 0x42], 0
mov byte [esp + 0x12], 0
mov dword [esp + 0x20], ebp
mov dword [ebx + 0xc], ebp
mov dword [ebx + 0x10], ebp
mov dword [esp + 0x1c], eax
call fcn.00426180
test dword [esp + 0x60], 0x1000
mov edx, eax
mov dword [esp + 0x2c], edx
jne 0x426f38
cmp byte [esp + 0x12], 5
mov dword [esp + 0x14], esi
jb 0x426d63
mov eax, esi
mov dword [esp + 0x20], 1
sub eax, dword [esp + 0x1c]
lea ecx, [esp + 0x30]
sub eax, 5
mov dword [esp + 0x14], ecx
mov dword [esp + 0x31], eax
mov edx, 5
jmp 0x426e9e
mov bl, byte [esp + 0x4e]
cmp bl, 0xe8
jne 0x426d90
movzx eax, byte [esp + 0x48]
lea ecx, [esp + 0x38]
sub eax, dword [esp + 0x1c]
mov edx, 5
add eax, 0xfffffffb
add eax, dword [esp + 0x58]
add eax, esi
mov dword [esp + 0x39], eax
jmp 0x426e96
mov al, bl
and al, 0xfd
cmp al, 0xe9
jne 0x426dee
movzx ecx, byte [esp + 0x48]
add ecx, esi
cmp bl, 0xeb
jne 0x426dad
movsx eax, byte [esp + 0x58]
add ecx, eax
jmp 0x426db1
add ecx, dword [esp + 0x58]
cmp edi, ecx
ja 0x426dcc
lea eax, [edi + 5]
cmp ecx, eax
jae 0x426dcc
cmp dword [esp + 0x24], ecx
mov ebp, ecx
cmovae ebp, dword [esp + 0x24]
jmp 0x426e9a
sub ecx, dword [esp + 0x1c]
mov edx, 5
sub ecx, 5
cmp esi, ebp
mov dword [esp + 0x31], ecx
lea ecx, [esp + 0x30]
sbb edi, edi
inc edi
mov dword [esp + 0x20], edi
jmp 0x426e96
mov ch, byte [esp + 0x4f]
mov cl, bl
and cl, 0xf0
cmp cl, 0x70
je 0x426e23
mov al, bl
and al, 0xfc
cmp al, 0xe0
je 0x426e23
mov al, ch
and al, 0xf0
cmp al, 0x80
je 0x426e23
and bl, 0xfe
cmp bl, 0xc2
jne 0x426e9a
cmp esi, ebp
sbb edi, edi
inc edi
mov dword [esp + 0x20], edi
jmp 0x426e9a
movzx edx, byte [esp + 0x48]
add edx, esi
cmp cl, 0x70
je 0x426e3d
mov al, bl
and al, 0xfc
cmp al, 0xe0
je 0x426e3d
add edx, dword [esp + 0x58]
jmp 0x426e44
movsx eax, byte [esp + 0x58]
add edx, eax
cmp edi, edx
ja 0x426e60
lea eax, [edi + 5]
cmp edx, eax
jae 0x426e60
cmp dword [esp + 0x24], edx
mov ebp, edx
mov edx, dword [esp + 0x2c]
cmovae ebp, dword [esp + 0x24]
jmp 0x426e9a
mov al, bl
and al, 0xfc
cmp al, 0xe0
je 0x426f38
cmp bl, 0xf
movzx ecx, ch
movzx eax, bl
cmovne ecx, eax
sub edx, dword [esp + 0x1c]
and cl, 0xf
or cl, 0x80
sub edx, 6
mov byte [esp + 0x41], cl
lea ecx, [esp + 0x40]
mov dword [esp + 0x42], edx
mov edx, 6
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0x18]
cmp esi, ebp
jae 0x426eaf
movzx eax, byte [esp + 0x48]
cmp edx, eax
jne 0x426f38
mov eax, dword [esp + 0x28]
add eax, edx
cmp eax, 0x20
ja 0x426f38
mov eax, dword [ebx + 0x10]
cmp eax, 8
jae 0x426f38
mov cl, byte [esp + 0x12]
mov esi, dword [esp + 0x14]
mov byte [eax + ebx + 0x14], cl
mov eax, dword [ebx + 0x10]
mov cl, byte [esp + 0x13]
add byte [esp + 0x13], dl
movzx edi, cl
mov byte [eax + ebx + 0x1c], cl
mov ecx, edx
mov dl, byte [esp + 0x12]
mov eax, dword [ebx + 8]
add edi, eax
add dl, byte [esp + 0x48]
inc dword [ebx + 0x10]
cmp dword [esp + 0x20], 0
rep movsb byte es:[edi], byte [esi]
mov byte [esp + 0x12], dl
jne 0x426f42
movzx ecx, byte [esp + 0x13]
mov edi, dword [ebx]
add eax, ecx
movzx esi, dl
lea edx, [esp + 0x48]
add esi, edi
mov dword [esp + 0x28], ecx
mov ecx, esi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x1c], eax
call fcn.00426180
test dword [esp + 0x60], 0x1000
mov edx, eax
mov dword [esp + 0x2c], edx
je 0x426d31
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x54
ret
cmp dl, 5
jae 0x426fc3
mov edi, dword [ebx]
movzx esi, dl
mov edx, 5
sub edx, esi
lea ecx, [edi + esi]
call fcn.00426c70
test eax, eax
jne 0x426fc3
cmp byte [esp + 0x12], 2
jae 0x426f76
mov edx, 2
sub edx, esi
call fcn.00426c70
test eax, eax
je 0x426f38
push 0x1c
lea eax, [esp + 0x4c]
push eax
lea eax, [edi - 5]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [esp + 0x58], 0x1000
jne 0x426f38
test byte [esp + 0x5c], 0xf0
je 0x426f38
mov edx, dword [ebx]
mov cl, byte [edx - 5]
test cl, cl
je 0x426fab
cmp cl, 0x90
je 0x426fab
cmp cl, 0xcc
jne 0x426f38
mov eax, 1
cmp byte [edx + eax - 5], cl
jne 0x426f38
inc eax
cmp eax, 5
jb 0x426fb0
mov dword [ebx + 0xc], 1
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x54
ret