Function at 0x10037720
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x29c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x284], eax
mov ecx, eax
mov dword [ebp - 0x280], ecx
mov ecx, dword fs:[0x30]
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], 0
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 0xa4]
mov dword [eax], ecx
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 0xa8]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 8]
movzx ecx, word [ecx + 0xac]
mov dword [eax + 8], ecx
xor eax, eax
lea eax, [ebp - 0xc]
mov dword [esp], 6
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.10038610
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov dword [ebp - 0x27c], 0x7bbe0e06
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x288], eax
nop dword [eax + eax]
sub eax, 0x81cb4617
je 0x100383b1
jmp 0x100377d0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x84d9a077
je 0x1003820b
jmp 0x100377f0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x8d8229f2
je 0x10037d6b
jmp 0x10037810
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x8f9c2cfe
je 0x10038251
jmp 0x10037830
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x98ad896a
je 0x10037f45
jmp 0x10037850
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x9bc3351d
je 0x100383f7
jmp 0x10037870
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xa89f8c8f
je 0x10038325
jmp 0x10037890
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xac4a50c0
je 0x10037ea5
jmp 0x100378b0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xae5ae109
je 0x1003836b
jmp 0x100378d0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xb2618e3b
je 0x10037e65
jmp 0x100378f0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xb4b5eab2
je 0x10037f65
jmp 0x10037910
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xb69165d6
je 0x10038025
jmp 0x10037930
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xb77ca073
je 0x1003844c
jmp 0x10037950
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xbc0a3af8
je 0x10037f05
jmp 0x10037970
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xbd759828
je 0x10037f25
jmp 0x10037990
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xc2f923b0
je 0x10037e85
jmp 0x100379b0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xc7ccdd89
je 0x10037fa5
jmp 0x100379d0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xcc596514
je 0x10038137
jmp 0x100379f0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xce442fb7
je 0x10038065
jmp 0x10037a10
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xd93e8d76
je 0x10037e05
jmp 0x10037a30
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xda2739f9
je 0x10037e45
jmp 0x10037a50
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xde75fb3b
je 0x10038406
jmp 0x10037a70
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xe6e0885a
je 0x100380ab
jmp 0x10037a90
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xfb77f535
je 0x10037ec5
jmp 0x10037ab0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x30a851d
je 0x10037fe5
jmp 0x10037ad0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x12289d6e
je 0x10037d89
jmp 0x10037af0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x2b2c7a33
je 0x1003817d
jmp 0x10037b10
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x2ddf970e
je 0x100380f1
jmp 0x10037b30
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x2e08da4f
je 0x10037d4d
jmp 0x10037b50
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x2e915ecb
je 0x10037cf3
jmp 0x10037b70
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x31aba521
je 0x100381c5
jmp 0x10037b90
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x3be9f4d4
je 0x10037d2f
jmp 0x10037bb0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x4c05d3a7
je 0x10038297
jmp 0x10037bd0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x4fa7a0d2
je 0x10037de5
jmp 0x10037bf0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x52d13a98
je 0x100382dd
jmp 0x10037c10
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x59aa164d
je 0x10037da7
jmp 0x10037c30
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x7bbe0e06
je 0x10037cd5
jmp 0x10037c50
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x7c017c67
je 0x10037ee5
jmp 0x10037c70
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x7c265a27
je 0x10037e25
jmp 0x10037c90
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x7cad6f88
je 0x10037d11
jmp 0x10037cb0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x7e21fb66
je 0x10037dc5
jmp 0x10037cd0
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x2e915ecb
mov ecx, 0xda2739f9
cmp edx, 0xa
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x7cad6f88
mov ecx, 0x4fa7a0d2
cmp edx, 0xe
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x3be9f4d4
mov ecx, 0x59aa164d
cmp edx, 0x11
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x2e08da4f
mov ecx, 0x81cb4617
cmp edx, 0x12
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x8d8229f2
mov ecx, 0x12289d6e
cmp edx, 0x19
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x9bc3351d
mov ecx, 0x52d13a98
cmp edx, 0x19
cmove eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x9bc3351d
mov ecx, 0x2ddf970e
cmp edx, 0x12
cmove eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x7e21fb66
mov ecx, 0x84d9a077
cmp edx, 0xf
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x9bc3351d
mov ecx, 0x8f9c2cfe
cmp edx, 0xf
cmove eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0xd93e8d76
mov ecx, 0x7c265a27
cmp edx, 0xc
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0xae5ae109
mov ecx, 0x2b2c7a33
cmp edx, 0xd
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0xe6e0885a
mov ecx, 0x31aba521
cmp edx, 0xb
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0xb2618e3b
mov ecx, 0xfb77f535
cmp edx, 6
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0xc2f923b0
mov ecx, 0xac4a50c0
cmp edx, 8
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x4c05d3a7
mov ecx, 0xcc596514
cmp edx, 9
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0xa89f8c8f
mov ecx, 0xce442fb7
cmp edx, 7
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x7c017c67
mov ecx, 0xbd759828
cmp edx, 3
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0xbc0a3af8
mov ecx, 0xc7ccdd89
cmp edx, 4
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x9bc3351d
mov ecx, 0xb69165d6
cmp edx, 4
cmove eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x30a851d
mov ecx, 0x98ad896a
cmp edx, 2
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
mov edx, dword [ebp - 4]
mov eax, 0x9bc3351d
mov ecx, 0xb4b5eab2
cmp edx, 1
cmove eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10038474
lea ecx, [ebp - 0x28]
lea eax, [ebp - 0x24]
mov dword [esp], eax
call fcn.100386d0
sub esp, 4
lea ecx, [ebp - 0x24]
call fcn.10019880
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
nop dword [eax]
jmp 0x10038474
lea ecx, [ebp - 0x48]
lea eax, [ebp - 0x44]
mov dword [esp], eax
call fcn.10038710
sub esp, 4
lea ecx, [ebp - 0x44]
call fcn.1000f600
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
nop dword [eax]
jmp 0x10038474
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x60]
mov dword [esp], eax
call fcn.10038750
sub esp, 4
lea ecx, [ebp - 0x60]
call fcn.10017d80
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
nop dword [eax]
jmp 0x10038474
lea ecx, [ebp - 0x80]
lea eax, [ebp - 0x7c]
mov dword [esp], eax
call fcn.10038790
sub esp, 4
lea ecx, [ebp - 0x7c]
call fcn.10017d80
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
nop dword [eax]
jmp 0x10038474
lea ecx, [ebp - 0x94]
lea eax, [ebp - 0x90]
mov dword [esp], eax
call fcn.100387d0
sub esp, 4
lea ecx, [ebp - 0x90]
call fcn.1000f020
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
lea ecx, [ebp - 0xac]
lea eax, [ebp - 0xa8]
mov dword [esp], eax
call fcn.10038810
sub esp, 4
lea ecx, [ebp - 0xa8]
call fcn.100170a0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
lea ecx, [ebp - 0xcc]
lea eax, [ebp - 0xc8]
mov dword [esp], eax
call fcn.10038850
sub esp, 4
lea ecx, [ebp - 0xc8]
call fcn.10017880
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0xe4]
mov dword [esp], eax
call fcn.10038890
sub esp, 4
lea ecx, [ebp - 0xe4]
call fcn.10017d80
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0x114]
mov dword [esp], eax
call fcn.100388d0
sub esp, 4
lea ecx, [ebp - 0x114]
call fcn.10038920
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
nop
jmp 0x10038474
lea ecx, [ebp - 0x134]
lea eax, [ebp - 0x130]
mov dword [esp], eax
call fcn.10038a40
sub esp, 4
lea ecx, [ebp - 0x130]
call fcn.10017d80
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
lea ecx, [ebp - 0x164]
lea eax, [ebp - 0x160]
mov dword [esp], eax
call fcn.10038a80
sub esp, 4
lea ecx, [ebp - 0x160]
call fcn.10038920
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
lea ecx, [ebp - 0x19c]
lea eax, [ebp - 0x198]
mov dword [esp], eax
call fcn.10038ac0
sub esp, 4
lea ecx, [ebp - 0x198]
call fcn.10038b00
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
lea ecx, [ebp - 0x1bc]
lea eax, [ebp - 0x1b8]
mov dword [esp], eax
call fcn.10038c20
sub esp, 4
lea ecx, [ebp - 0x1b8]
call fcn.10019e60
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
lea ecx, [ebp - 0x1ec]
lea eax, [ebp - 0x1e8]
mov dword [esp], eax
call fcn.10038c60
sub esp, 4
lea ecx, [ebp - 0x1e8]
call fcn.10038ca0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
nop
jmp 0x10038474
lea ecx, [ebp - 0x208]
lea eax, [ebp - 0x204]
mov dword [esp], eax
call fcn.10038f90
sub esp, 4
lea ecx, [ebp - 0x204]
call fcn.10019880
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
lea ecx, [ebp - 0x238]
lea eax, [ebp - 0x234]
mov dword [esp], eax
call fcn.10038fd0
sub esp, 4
lea ecx, [ebp - 0x234]
call fcn.10018300
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
lea ecx, [ebp - 0x254]
lea eax, [ebp - 0x250]
mov dword [esp], eax
call fcn.10039010
sub esp, 4
lea ecx, [ebp - 0x250]
call fcn.10017d80
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
mov dword [ebp - 0x27c], 0xde75fb3b
jmp 0x10038474
lea ecx, [ebp - 0x278]
lea eax, [ebp - 0x274]
mov dword [esp], eax
call fcn.10039050
sub esp, 4
lea ecx, [ebp - 0x274]
call fcn.10018640
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038680
mov dword [ebp - 0x27c], 0xb77ca073
jmp 0x10038474
mov eax, dword [ebp - 0x284]
add eax, 0xc
mov ecx, 0xffffffff
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10039090
mov eax, dword [ebp - 0x280]
add esp, 0x29c
pop ebp
ret
jmp 0x100377ac