Function at 0x426270
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x49dbe8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
mov ecx, dword [0x4fe0c0]
mov edx, dword [0x4fe0c4]
mov eax, dword [0x4fe0bc]
mov dword [esp + 0x18], ecx
lea ecx, [esp]
push ecx
mov dword [esp + 0x18], eax
mov eax, dword [0x4fe0c8]
mov dword [esp + 0x20], edx
push 0x10
lea edx, [esp + 0x1c]
push edx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x40]
push str._attributes_
push eax
call fcn.0044dbb0
add esp, 0x14
test eax, eax
jne 0x4262e0
xor al, al
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
add esp, 0x30
ret
mov ecx, dword [esp]
mov edx, dword [ecx]
mov edx, dword [edx + 0x10]
push ebx
push ebp
push edi
lea eax, [esp + 0x18]
xor ebp, ebp
push eax
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebp
call edx
test al, al
jne 0x426305
or edi, 0xffffffff
jmp 0x426312
mov edi, dword [esp + 0x18]
cmp edi, 8
jb 0x4264e1
mov ebx, dword [esp + 0x48]
mov eax, ebx
shl eax, 9
add eax, 8
cmp edi, eax
ja 0x4264e1
cmp edi, ebp
push esi
mov dword [esp + 0x24], edi
ja 0x426333
xor esi, esi
jmp 0x42633e
push edi
call fcn.004655f9
add esp, 4
mov esi, eax
mov dword [esp + 0x28], esi
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push ebp
push edi
push ebp
push ebp
push esi
mov dword [esp + 0x50], ebp
call eax
test al, al
mov ecx, dword [esp + 0x10]
jne 0x426385
call fcn.00425b20
cmp esi, ebp
je 0x426370
push esi
call fcn.004655fe
add esp, 4
pop esi
pop edi
pop ebp
xor al, al
pop ebx
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
add esp, 0x30
ret
call fcn.00425b20
mov ecx, dword [esi]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esi + 4]
mov ebp, ecx
sub edi, 8
xor edx, edx
and ebp, 1
lea eax, [esi + 8]
mov esi, ecx
je 0x4263ae
lea edx, [ebx*4]
and esi, 0xfffffffe
mov ebx, ecx
and ebx, 2
mov dword [esp + 0x14], ebx
je 0x4263c3
mov ebx, dword [esp + 0x4c]
lea edx, [edx + ebx*8]
and esi, 0xfffffffd
mov ebx, ecx
and ebx, 4
mov dword [esp + 0x18], ebx
je 0x4263da
mov ebx, dword [esp + 0x4c]
shl ebx, 4
add edx, ebx
and esi, 0xfffffffb
mov ebx, dword [esp + 0x4c]
and ecx, 8
mov dword [esp + 0x1c], ecx
je 0x4263ed
lea edx, [edx + ebx*4]
and esi, 0xfffffff7
cmp edi, edx
jae 0x4263fb
mov edx, dword [esp + 0x28]
push edx
jmp 0x426368
test esi, esi
jne 0x42640d
cmp edi, edx
je 0x42640d
mov eax, dword [esp + 0x28]
push eax
jmp 0x426368
test ebp, ebp
mov esi, dword [esp + 0x48]
je 0x42642f
test ebx, ebx
jbe 0x42642f
lea ecx, [esi + 0x1c]
mov edx, ebx
mov edi, edi
mov edi, dword [eax]
mov dword [ecx], edi
add ecx, 0x35
add eax, 4
sub edx, 1
jne 0x426420
cmp dword [esp + 0x14], 0
je 0x426455
test ebx, ebx
jbe 0x426455
lea ecx, [esi + 0x14]
mov edx, ebx
nop
mov edi, dword [eax]
mov dword [ecx], edi
mov edi, dword [eax + 4]
mov dword [ecx + 4], edi
add ecx, 0x35
add eax, 8
sub edx, 1
jne 0x426440
cmp dword [esp + 0x18], 0
je 0x426486
test ebx, ebx
jbe 0x42649b
lea ecx, [esi + 0x20]
mov edx, ebx
mov edi, dword [eax]
mov dword [ecx], edi
mov edi, dword [eax + 4]
mov dword [ecx + 4], edi
mov edi, dword [eax + 8]
mov dword [ecx + 8], edi
mov edi, dword [eax + 0xc]
mov dword [ecx + 0xc], edi
add ecx, 0x35
add eax, 0x10
sub edx, 1
jne 0x426465
test ebx, ebx
jbe 0x42649b
lea ecx, [esi + 0x30]
mov edx, ebx
nop
mov byte [ecx], 0
add ecx, 0x35
sub edx, 1
jne 0x426490
cmp dword [esp + 0x1c], 0
je 0x4264bf
test ebx, ebx
jbe 0x4264bf
lea ecx, [esi + 0x31]
mov edx, ebx
jmp 0x4264b0
mov esi, dword [eax]
mov dword [ecx], esi
add ecx, 0x35
add eax, 4
sub edx, 1
jne 0x4264b0
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004655fe
add esp, 4
pop esi
pop edi
pop ebp
mov al, 1
pop ebx
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
add esp, 0x30
ret
mov ecx, dword [esp + 0xc]
call fcn.00425b20
mov ecx, dword [esp + 0x30]
pop edi
pop ebp
xor al, al
pop ebx
mov dword fs:[0], ecx
add esp, 0x30
ret