Function at 0x20261000
Capabilities:
Execute anti-debugging instructions
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov dword [0x2027a004], esp
push 0x20261032
jmp 0x20261010
push dword fs:[0]
jmp 0x2026101a
mov dword fs:[0], esp
jmp 0x20261025
jmp 0x20261029
jmp 0x202614e2
ret
push ebp
jmp 0x202614e7
mov ebp, esp
jmp 0x202614ee
sub esp, 0x64
jmp 0x202614f7
mov dword [ebp - 8], 0x10
jmp 0x20261501
mov dword [ebp - 4], 5
mov dword [ebp - 0x28], 1
jle 0x20261517
nop
jle 0x202614de
jg 0x20261517
mov ch, 0xeb
add ebp, esp
jmp 0x2026151a
mov byte [ebp - 0x10], 1
jmp 0x20261522
mov dword [ebp - 0x1c], 0
jmp 0x20261543
mov eax, dword [ebp - 0x1c]
jmp 0x20261532
add eax, 1
jmp 0x2026153c
mov dword [ebp - 0x1c], eax
jmp 0x20261543
cmp dword [ebp - 0x1c], 0x81
jmp 0x2026154e
jge 0x2026156b
mov ecx, dword [ebp - 0x1c]
jg 0x2026155a
nop
lea edi, [edi]
jle 0x2026155e
jmp 0x2026155e
mov byte [ecx + 0x20279186], 0
jmp 0x2026152b
mov dword [ebp - 0xc], 1
mov edx, dword [ebp - 4]
jmp 0x20261579
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
jmp 0x20261582
imul eax, dword [ebp - 0x14]
jmp 0x20261589
mov dword [ebp - 0x14], eax
jmp 0x20261590
jmp 0x20261594
mov dword [ebp - 0x24], 0
jmp 0x2026159f
mov ecx, dword [ebp - 8]
jmp 0x202615a6
jmp 0x202615aa
imul ecx, dword [ebp - 4]
jmp 0x202615b1
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x10]
and edx, 0xff
test edx, edx
jmp 0x202615c3
je 0x20261a26
jmp 0x202615cd
mov eax, dword [ebp - 0x24]
jmp 0x202615d4
mov dword [ebp - 0x1c], eax
jmp 0x202615f4
mov ecx, dword [ebp - 0x1c]
jge 0x202615e3
mov ecx, ecx
jl 0x202615e3
add byte [ecx + 0x1c1], 0
add ecx, 1
jmp 0x202615ed
mov dword [ebp - 0x1c], ecx
jmp 0x202615f4
cmp dword [ebp - 0x1c], 0x81
jmp 0x202615ff
jge 0x20261687
mov edx, dword [ebp - 0x1c]
jmp 0x2026160d
xor eax, eax
jmp 0x20261613
mov al, byte [edx + 0x20279186]
jmp 0x2026161d
add eax, dword [ebp - 0x20]
jmp 0x20261624
mov dword [ebp - 0x18], eax
jmp 0x2026162d
jmp 0x20261631
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x14]
jmp 0x2026163c
mov ecx, dword [ebp - 0x1c]
jmp 0x20261644
jmp 0x20261647
mov byte [ecx + 0x20279186], al
jmp 0x20261651
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx + 0x20279186]
mov ecx, dword [ebp - 0x14]
jmp 0x20261665
imul ecx, eax
jmp 0x2026166c
mov edx, dword [ebp - 0x18]
sub edx, ecx
imul edx, edx, 0x64
jmp 0x2026167b
mov dword [ebp - 0x20], edx
jmp 0x202615d9
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x24]
jmp 0x20261697
jmp 0x2026169b
mov dword [ebp - 0x1c], eax
jmp 0x202616b7
mov ecx, dword [ebp - 0x1c]
add ecx, 1
jb 0x202616b0
nop
lea esi, [esi]
jae 0x202616b4
jmp 0x202616b4
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0x81
jmp 0x202616c2
jge 0x2026176c
jmp 0x202616ce
jmp 0x202616d2
mov edx, dword [ebp - 0x1c]
jmp 0x202616d9
xor eax, eax
jmp 0x202616e0
mov al, byte [edx + 0x20279186]
jmp 0x202616ea
add eax, dword [ebp - 0x20]
jmp 0x202616f1
mov dword [ebp - 0x18], eax
jmp 0x202616f8
jmp 0x202616fb
mov eax, dword [ebp - 0x18]
jmp 0x20261702
cdq
idiv dword [ebp - 0xc]
jmp 0x2026170a
mov ecx, dword [ebp - 0x1c]
jmp 0x20261712
mov byte [ecx + 0x20279207], al
jmp 0x2026171c
jmp 0x2026171f
mov edx, dword [ebp - 0x1c]
jmp 0x20261727
xor eax, eax
jmp 0x2026172d
mov al, byte [edx + 0x20279207]
jmp 0x2026173a
jmp 0x2026173d
jmp 0x20261737
mov ecx, dword [ebp - 0xc]
imul ecx, eax
jmp 0x20261747
mov edx, dword [ebp - 0x18]
jmp 0x2026174d
sub edx, ecx
jmp 0x20261755
imul edx, edx, 0x64
jmp 0x20261760
mov dword [ebp - 0x20], edx
jmp 0x202616a0
mov dword [ebp - 0x20], 0
jmp 0x20261776
cmp dword [ebp - 0x28], 0
jmp 0x20261782
jmp 0x20261789
jmp 0x20261786
jmp 0x20261780
jle 0x20261867
jmp 0x20261794
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x1c], 0x80
jmp 0x202617a6
jmp 0x202617c7
mov eax, dword [ebp - 0x1c]
jmp 0x202617b2
jmp 0x202617b0
jmp 0x202617b5
jmp 0x202617ae
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x202617c3
jmp 0x202617c7
cmp dword [ebp - 0x1c], 0
jl 0x20261862
jmp 0x202617d8
mov ecx, dword [ebp - 0x1c]
jmp 0x202617df
xor edx, edx
jmp 0x202617e5
mov dl, byte [ecx + 0x20279105]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
jmp 0x202617f4
mov cl, byte [eax + 0x20279207]
jmp 0x202617fd
mov eax, dword [ebp - 0x30]
add eax, edx
jmp 0x20261806
add ecx, eax
mov dword [ebp - 0x2c], ecx
jmp 0x2026180e
mov dword [ebp - 0x30], 0
jmp 0x20261819
cmp dword [ebp - 0x2c], 0x64
jmp 0x20261824
jl 0x20261847
mov dword [ebp - 0x30], 1
jmp 0x20261831
mov ecx, dword [ebp - 0x2c]
jmp 0x20261839
sub ecx, 0x64
mov dword [ebp - 0x2c], ecx
jmp 0x20261847
mov edx, dword [ebp - 0x1c]
mov al, byte [ebp - 0x2c]
mov byte [edx + 0x20279105], al
jmp 0x202617a8
jmp 0x2026193f
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x1c], 0x80
jmp 0x2026187b
jmp 0x2026187f
jmp 0x202618a2
mov ecx, dword [ebp - 0x1c]
jmp 0x2026188b
sub ecx, 1
jmp 0x20261895
mov dword [ebp - 0x1c], ecx
jmp 0x2026189e
jmp 0x202618a2
cmp dword [ebp - 0x1c], 0
jne 0x202618b0
mov ebx, ebx
je 0x202618b0
or byte [edi], 0x8c
mov dword [eax], eax
add byte [eax], al
jl 0x2026193f
mov edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx + 0x20279105]
mov ecx, dword [ebp - 0x1c]
xor edx, edx
jmp 0x202618ca
mov dl, byte [ecx + 0x20279207]
sub eax, edx
jmp 0x202618d6
sub eax, dword [ebp - 0x38]
jmp 0x202618dc
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 0
jmp 0x202618ea
cmp dword [ebp - 0x34], 0
jge 0x2026191c
jo 0x202618fa
mov ebx, ebx
jno 0x202618fa
add bh, 0x45
enter 1, 0
add bl, ch
add eax, dword [ecx + 0x458bfcd6]
int3
mov dword [ebp - 0x38], 1
jmp 0x20261906
mov eax, dword [ebp - 0x34]
jmp 0x2026190d
add eax, 0x64
jmp 0x20261916
mov dword [ebp - 0x34], eax
jmp 0x2026191c
mov ecx, dword [ebp - 0x1c]
jmp 0x20261923
mov dl, byte [ebp - 0x34]
jmp 0x2026192a
mov byte [ecx + 0x20279105], dl
jmp 0x20261937
jmp 0x2026193a
jmp 0x20261934
jmp 0x20261884
mov eax, dword [ebp - 0x28]
neg eax
jmp 0x20261949
mov dword [ebp - 0x28], eax
jmp 0x20261950
mov ecx, dword [ebp - 0xc]
add ecx, 2
jmp 0x2026195f
jmp 0x20261963
mov dword [ebp - 0xc], ecx
jmp 0x2026196b
mov byte [ebp - 0x10], 0
mov edx, dword [ebp - 0x24]
jmp 0x20261976
mov dword [ebp - 0x1c], edx
jmp 0x20261992
mov eax, dword [ebp - 0x1c]
jmp 0x20261982
add eax, 1
jmp 0x2026198c
jmp 0x2026198f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x81
jmp 0x2026199d
jge 0x202619cf
mov ecx, dword [ebp - 0x1c]
jmp 0x202619a6
xor edx, edx
jmp 0x202619ac
mov dl, byte [ecx + 0x20279186]
jmp 0x202619b6
test edx, edx
jmp 0x202619bc
jmp 0x202619c0
je 0x202619cd
mov byte [ebp - 0x10], 1
jmp 0x202619cf
jmp 0x2026197b
mov eax, dword [ebp - 0x10]
and eax, 0xff
jmp 0x202619db
test eax, eax
jmp 0x202619e1
jmp 0x202619e5
je 0x20261a1c
jmp 0x202619ea
mov ecx, dword [ebp - 0x24]
xor edx, edx
ja 0x202619f7
lea ecx, [ecx]
jbe 0x202619f7
jmp 0x202619f6
dec dword [edx + 0x27918691]
and byte [ebp - 0x14e48a2e], al
add ebp, ebx
cli
mov dh, 0x8b
inc ebp
fadd qword [1]
mov dl, byte [ecx + 0x20279186]
test edx, edx
jne 0x20261a1c
jmp 0x20261a06
mov eax, dword [ebp - 0x24]
add eax, 1
jmp 0x20261a13
mov dword [ebp - 0x24], eax
jmp 0x202619ea
jmp 0x202615b4
mov esp, ebp
jmp 0x20261a2b
pop ebp
jmp 0x20261a30
mov eax, dword [0x2027a004]
jmp 0x20261a3a
mov edi, dword [eax]
and edi, 0xfffff000
jmp 0x20261a47
jmp 0x20261a53
sub edi, 0x1000
jmp 0x20261a53
cmp word [edi], 0x5a4d
jmp 0x20261a5c
jne 0x20261a49
jmp 0x20261a62
mov eax, edi
jmp 0x20261a68
add eax, dword [edi + 0x3c]
jmp 0x20261a6f
cmp word [eax], 0x4550
jne 0x20261a49
jmp 0x20261a7a
xor ecx, ecx
jmp 0x20261a80
mov cx, word [eax + 6]
jmp 0x20261a89
cmp ecx, 1
jl 0x20261a49
xor ecx, ecx
jmp 0x20261a96
mov cx, word [eax + 0x16]
and ecx, 0x2000
test ecx, ecx
je 0x20261a49
xor ecx, ecx
mov cx, word [eax + 0x14]
jmp 0x20261aaf
cmp ecx, 0x60
jl 0x20261a49
jmp 0x20261abf
jmp 0x20261ac2
cmp ecx, 0xe0
jmp 0x20261ace
ja 0x20261a49
cmp dword [eax + 0x78], 0
jmp 0x20261adf
je 0x20261a49
jmp 0x20261ae9
jmp 0x20261aed
cmp dword [eax + 0x7c], 0
jmp 0x20261af8
je 0x20261a49
jmp 0x20261b03
mov eax, dword [eax + 0x78]
mov dword [0x2027a008], eax
jmp 0x20261b0e
mov dword [0x2027a00c], edi
jmp 0x20261b18
mov ax, 0x8c
jmp 0x20261b20
verr ax
jmp 0x20261b26
jne 0x20261b7d
jmp 0x20261b2b
mov eax, dword [0x2027a004]
mov eax, dword [eax + 8]
jmp 0x20261b37
mov eax, dword [eax + 0x40]
jmp 0x20261b3f
mov esi, dword [eax + 8]
mov edi, esi
jmp 0x20261b4b
jmp 0x20261b4e
jmp 0x20261b46
xor eax, eax
jmp 0x20261b54
xor ecx, ecx
jmp 0x20261b5d
jmp 0x20261b5a
jmp 0x20261b60
jmp 0x20261b58
dec ecx
jmp 0x20261b64
repne scasb al, byte es:[edi]
mov edi, section..bss_1
jmp 0x20261b70
neg ecx
jmp 0x20261b75
dec ecx
rep movsb byte es:[edi], byte [esi]
jmp 0x20261c17
xor eax, eax
mov edi, 0x20498
xor ecx, ecx
jmp 0x20261b8a
dec ecx
repne scasw ax, word es:[edi]
jmp 0x20261b97
jmp 0x20261b9a
jmp 0x20261b91
test edi, 3
je 0x20261bb5
jmp 0x20261ba6
and edi, 0xfffffffc
add edi, 4
jmp 0x20261bb5
xor ecx, ecx
dec ecx
jmp 0x20261bbc
repne scasw ax, word es:[edi]
jg 0x20261bc7
lea edx, [edx]
jle 0x20261bc7
jmp 0x20261bc6
inc dword [eax + 0x2eb003f]
call dword [esi*2 + 0x3203eb11]
shl byte [edx - 0xfd14b9], 0x14
cmp byte [edi], 0
jmp 0x20261bce
jne 0x20261be1
jmp 0x20261bd5
inc edi
jmp 0x20261bda
inc edi
jmp 0x20261be1
mov esi, section..bss_1
jmp 0x20261bea
mov ax, word [edi]
jmp 0x20261bf2
mov byte [esi], al
jmp 0x20261bf9
jmp 0x20261bfc
inc edi
jmp 0x20261c04
jmp 0x20261c07
jmp 0x20261c01
inc edi
inc esi
test ax, ax
jmp 0x20261c10
jne 0x20261bea
jmp 0x20261c17
mov ecx, 0x2027a020
jmp 0x20261c20
mov dl, byte [ecx]
jmp 0x20261c26
mov edi, section..bss_1
jmp 0x20261c2f
jmp 0x20261c33
test dl, dl
jmp 0x20261c3a
je 0x20261d25
mov dh, byte [ecx + 1]
jmp 0x20261c47
test dh, dh
je 0x20261d25
mov esi, edi
mov ecx, 0x2027a020
jmp 0x20261c59
mov al, byte [edi]
jmp 0x20261c5f
inc esi
jmp 0x20261c66
jmp 0x20261c6a
cmp al, dl
jmp 0x20261c70
je 0x20261c94
test al, al
je 0x20261c85
mov al, byte [esi]
inc esi
cmp al, dl
je 0x20261c94
jmp 0x20261c81
test al, al
jne 0x20261c76
xor eax, eax
jne 0x20261c8f
lea ebx, [ebx]
je 0x20261c8f
jmp 0x20261c8e
invalid
jmp 0x20261d2b
mov al, byte [esi]
jmp 0x20261c9b
inc esi
jmp 0x20261c9f
cmp al, dh
jmp 0x20261ca4
jne 0x20261c79
jmp 0x20261ca9
lea edi, [esi - 1]
jmp 0x20261cb0
mov ah, byte [ecx + 2]
jmp 0x20261cb7
test ah, ah
je 0x20261d0b
mov al, byte [esi]
jmp 0x20261cc2
add esi, 2
cmp al, ah
jne 0x20261c4f
jmp 0x20261cd5
mov al, byte [ecx + 3]
jmp 0x20261cdc
test al, al
jmp 0x20261ce3
je 0x20261d0b
jmp 0x20261cea
mov ah, byte [esi - 1]
add ecx, 2
cmp al, ah
jmp 0x20261cf8
je 0x20261cb0
jmp 0x20261cfe
jmp 0x20261c4f
lea eax, [edi - 1]
jmp 0x20261d14
jmp 0x20261d18
jmp 0x20261d2b
mov eax, edi
jmp 0x20261d2b
test eax, eax
jmp 0x20261d31
je 0x20261fc7
push ebp
jmp 0x20261d3c
mov edx, dword [0x2027a008]
mov edi, dword [0x2027a00c]
add edx, edi
jmp 0x20261d4f
mov ebp, dword [edx + 0x20]
add ebp, edi
jmp 0x20261d58
xor ecx, ecx
jmp 0x20261d5e
jmp 0x20261d65
inc ecx
cmp ecx, dword [edx + 0x18]
jmp 0x20261d6d
jae 0x20261e88
jmp 0x20261d79
jmp 0x20261d7d
mov eax, ebp
mov ebx, dword [eax + ecx*4]
add ebx, edi
jmp 0x20261d89
cmp dword [ebx], 0x64616f4c
jmp 0x20261d92
jne 0x20261e00
cmp dword [ebx + 4], 0x7262694c
jmp 0x20261da0
jmp 0x20261da3
jne 0x20261e00
cmp dword [ebx + 8], 0x41797261
jmp 0x20261db1
jne 0x20261e00
jmp 0x20261db7
cmp byte [ebx + 0xc], 0
jmp 0x20261dc0
jne 0x20261e00
jmp 0x20261dc6
mov eax, dword [edx + 0x1c]
add eax, edi
mov ebx, dword [edx + 0x24]
jmp 0x20261dd3
add ebx, edi
jl 0x20261ddd
nop
jl 0x20261de0
jge 0x20261de0
leave
jmp 0x20261dd8
xor esi, esi
mov si, word [ebx + ecx*2]
mov eax, dword [eax + esi*4]
jmp 0x20261dec
add eax, edi
mov dword [0x202792d8], eax
jmp 0x20261df7
jmp 0x20261d64
cmp dword [ebx], 0x50746547
jmp 0x20261e0a
jne 0x20261d64
cmp dword [ebx + 4], 0x41636f72
jne 0x20261d64
jl 0x20261e24
mov eax, eax
jge 0x20261e24
add byte [ecx + 0x6464087b], 0x72
jmp 0x20261e30
cmp dword [ebx + 8], 0x65726464
jmp 0x20261e30
jne 0x20261d64
cmp word [ebx + 0xc], 0x7373
jmp 0x20261e40
jne 0x20261d64
cmp byte [ebx + 0xe], 0
jne 0x20261d64
jmp 0x20261e55
mov eax, dword [edx + 0x1c]
add eax, edi
jmp 0x20261e5e
mov ebx, dword [edx + 0x24]
jmp 0x20261e66
add ebx, edi
jmp 0x20261e6c
xor esi, esi
jmp 0x20261e71
mov si, word [ebx + ecx*2]
jmp 0x20261e79
mov eax, dword [eax + esi*4]
add eax, edi
mov dword [0x202792e0], eax
jmp 0x20261d64
xor eax, eax
jmp 0x20261e8d
cmp dword [0x202792d8], eax
je 0x20261efc
jmp 0x20261e99
cmp dword [0x202792e0], eax
je 0x20261efc
jmp 0x20261ea5
push 0x2027a02e
call dword [0x202792d8]
jmp 0x20261eb6
jmp 0x20261eba
test eax, eax
jmp 0x20261ebf
je 0x20261efc
push 0x2027a039
jmp 0x20261eca
push eax
call dword [0x202792e0]
jmp 0x20261ed5
test eax, eax
je 0x20261efc
jmp 0x20261edf
jmp 0x20261ee3
push 0x10
jmp 0x20261eea
push 0x2027a0bd
push 0x2027a045
push 0
jmp 0x20261efa
call eax
xor eax, eax
jmp 0x20261f02
mov edi, entry0
jl 0x20261f0a
nop
lea esi, [esi]
jge 0x20261f12
jmp 0x20261f12
mov ecx, 0x20261b18
jmp 0x20261f1b
sub ecx, edi
jmp 0x20261f21
cld
rep stosb byte es:[edi], al
pop ebp
jmp 0x20261f2b
jmp 0x20261f2f
mov ebx, dword [0x2027a010]
jmp 0x20261f3a
cmp ebx, 0
jmp 0x20261f44
je 0x20261f56
jmp 0x20261f4b
mov eax, dword [0x2027a014]
mov dword [ebx], eax
jmp 0x20261f56
mov ebx, dword [0x2027a018]
jmp 0x20261f61
cmp ebx, 0
jmp 0x20261f6b
je 0x20261f7c
jmp 0x20261f71
mov eax, dword [0x2027a01c]
jmp 0x20261f7a
mov dword [ebx], eax
cld
xor eax, eax
jmp 0x20261f83
mov edi, 0x20261fc7
jmp 0x20261f8c
mov ecx, 0x20278b3f
sub ecx, edi
jmp 0x20261f97
rep stosb byte es:[edi], al
jmp 0x20261f9e
jmp 0x20261fa1
mov edi, entry0
mov ecx, 0x20261fb9
jmp 0x20261faf
sub ecx, edi
jmp 0x20261fb5
jmp 0x20261fb9
rep stosb byte es:[edi], al
jmp 0x20261fc0
mov esp, dword [0x2027a004]
ret
mov edi, section..bss_1
jmp 0x20261fcf
xor eax, eax
jmp 0x20261fd5
xor ecx, ecx
jmp 0x20261fdc
dec ecx
jmp 0x20261fe4
jmp 0x20261fe7
jmp 0x20261fe1
repne scasb al, byte es:[edi]
dec edi
jl 0x20261ff2
nop
jl 0x20262021
jge 0x20261ff2
aam 0xeb
add dword [edi + 0x57], ebp
jmp 0x20261ff5
push edi
jmp 0x20261ffb
mov esi, 0x2027a020
jmp 0x20262003
mov edi, esi
jmp 0x20262009
xor ecx, ecx
jmp 0x2026200f
dec ecx
jmp 0x20262015
repne scasb al, byte es:[edi]
pop edi
jmp 0x2026201d
neg ecx
jmp 0x20262023
mov ebx, dword [esi + 0x49]
dec ecx
rep movsb byte es:[edi], byte [esi]
mov eax, 0xcd7e587d
mov ebx, 0xcd7e587d
jmp 0x20262033
ror ebx, 0xb
xor eax, ebx
jmp 0x2026203c
sub ebx, 0xcd7e587d
jmp 0x20262047
mov esi, 0x20262a80
jmp 0x2026204f
mov ecx, 0x20278b40
sub ecx, esi
js 0x2026205b
nop
lea edx, [edx]
jns 0x20262061
jmp 0x20262061
dec esi
xor byte [esi + ecx], al
ror eax, 3
inc eax
jmp 0x2026206e
add eax, ebx
test eax, 0x4000
jmp 0x20262079
jne 0x20262090
jmp 0x20262081
jmp 0x20262085
xchg ebx, eax
jmp 0x2026208c
jmp 0x20262090
test eax, 2
jmp 0x20262099
jne 0x202620a7
xchg ah, al
jmp 0x202620a1
xchg bh, bl
jmp 0x202620a7
dec ecx
jne 0x20262062
rdtsc
jmp 0x202620b0
jmp 0x202620b4
mov ebx, eax
mov ecx, edx
jmp 0x202620bd
rdtsc
jmp 0x202620c4
sub eax, ebx
jmp 0x202620ca
sbb edx, ecx
jmp 0x202620d0
rdtsc
add eax, ebx
adc edx, ecx
jmp 0x202620da
rdtsc
jmp 0x202620e0
sub eax, ebx
jmp 0x202620e7
jmp 0x202620ea
sbb edx, ecx
not edx
jmp 0x202620f2
mov edx, edx
jmp 0x202620f9
xor edx, 0xd9f4f16e
jmp 0x20262102