Function at 0x10007fd0
Capabilities:
Check for software breakpoints

Disassembly:
sub esp, 0x14
push ebx
mov ebx, dword [esp + 0x1c]
push esi
mov esi, dword [esp + 0x24]
push 0x1c
push esi
mov byte [esp + 0x13], 0
mov dword [esp + 0x18], 0x1000d1a8
mov byte [esp + 0x14], 0
call sub.NTDLL.dll_RtlZeroMemory
mov dh, byte [esp + 0xb]
mov cl, 0x10
nop dword [eax]
mov dl, byte [ebx]
inc ebx
movzx eax, dl
sub eax, 0x26
cmp eax, 0xcd
ja case.0x10008017.39
movzx eax, byte [eax + 0x100085d4]
jmp dword [eax*4 + 0x100085b8]
mov byte [esi + 1], dl
mov al, 4
jmp 0x10008046
mov byte [esi + 1], dl
mov al, 2
jmp 0x10008046
mov byte [esi + 2], dl
mov al, 0x20
jmp 0x10008046
mov byte [esi + 3], dl
mov al, 0x40
jmp 0x10008046
mov byte [esi + 4], dl
mov al, 8
jmp 0x10008046
mov byte [esi + 5], dl
mov al, 0x10
or dh, al
add cl, 0xff
jne 0x10008000
movzx ecx, dh
shl ecx, 0x17
test dh, dh
push ebp
push edi
movzx eax, dh
mov edi, 1
cmovne edi, eax
mov dword [esi + 0x18], ecx
mov dword [esp + 0x2c], edi
mov byte [esi + 6], dl
cmp dl, 0xf
jne 0x10008085
mov dl, byte [ebx]
inc ebx
mov dh, byte [esp + 0x2c]
mov byte [esi + 7], dl
mov dword [esp + 0x18], 0x1000d1f2
jmp 0x100080a1
mov eax, dword [esp + 0x2c]
mov dh, al
cmp dl, 0xa0
jb 0x100080a1
cmp dl, 0xa3
ja 0x100080a1
test al, 0x10
je 0x1000809e
or dh, 8
jmp 0x100080a1
and dh, 0xf7
movzx eax, dl
mov ebp, eax
mov dword [esp + 0x1c], eax
mov edi, eax
shr ebp, 2
mov eax, dword [esp + 0x18]
and edi, 3
mov dword [esp + 0x2c], edi
movzx eax, byte [eax + ebp]
add eax, edi
mov edi, dword [esp + 0x18]
mov al, byte [eax + edi]
mov dword [esp + 0x18], eax
cmp al, 0xff
jne 0x100080f6
xor al, al
or ecx, 0x3000
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
and eax, 0xfffffffd
mov dword [esi + 0x18], ecx
cmp eax, 0x24
jne 0x100080f2
mov al, 1
mov dword [esp + 0x18], eax
jmp 0x100080f6
mov eax, dword [esp + 0x18]
mov byte [esp + 0x20], 0
test al, al
jns 0x10008114
movzx eax, al
and eax, 0x7f
movzx eax, word [eax + edi]
mov dword [esp + 0x18], eax
shr eax, 8
mov dword [esp + 0x20], eax
mov al, byte [esi + 7]
mov edi, ecx
mov byte [esp + 0x12], al
test al, al
je 0x1000813e
movzx eax, byte [ebp + str.JJJJKRJJJJOLJJJJJJJJUE_JJJEYMFJ_JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ]
mov ebp, dword [esp + 0x2c]
test byte [eax + ebp + str.JJJJKRJJJJOLJJJJJJJJUE_JJJEYMFJ_JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ], dh
je 0x1000813e
or edi, 0x3000
mov dword [esi + 0x18], edi
mov ecx, dword [esp + 0x18]
test cl, 1
je 0x100084b4
or edi, 1
mov dword [esi + 0x18], edi
mov ebp, edi
mov al, byte [ebx]
mov cl, al
mov byte [esi + 8], al
shr cl, 6
mov byte [esp + 0x11], cl
mov byte [esi + 9], cl
mov cl, al
and cl, 7
shr al, 3
and al, 7
mov byte [esp + 0x13], cl
mov byte [esi + 0xb], cl
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x2c], al
mov byte [esi + 0xa], al
test cl, cl
je 0x1000819c
movzx eax, cl
mov cl, byte [esp + 0x2c]
shl eax, cl
test al, al
mov al, cl
jns 0x1000819c
or ebp, 0x3000
mov dword [esi + 0x18], ebp
mov ah, byte [esp + 0x12]
mov ecx, ebp
test ah, ah
jne 0x100081ef
cmp dl, 0xd9
jb 0x100081ef
cmp dl, 0xdf
ja 0x100081ef
mov al, dl
add al, 0x27
cmp byte [esp + 0x11], 3
movzx ecx, al
mov al, byte [esp + 0x2c]
movzx edi, al
jne 0x100081d2
mov ah, byte [edi + ecx*8 + 0x1000d2a0]
mov cl, byte [esp + 0x13]
jmp 0x100081da
mov ah, byte [ecx + 0x1000d299]
mov ecx, edi
shl ah, cl
mov ecx, ebp
test ah, ah
mov ah, byte [esp + 0x12]
jns 0x100081ef
or ecx, 0x3000
mov dword [esi + 0x18], ecx
test dh, 0x20
je 0x1000826a
cmp byte [esp + 0x11], 3
jne 0x10008206
or ecx, 0x9000
mov dword [esi + 0x18], ecx
jmp 0x1000826a
test ah, ah
mov ecx, 0x1000d373
mov edi, 0x1000d361
mov al, dl
cmovne edi, ecx
and al, 0xfe
cmp byte [esp + 0x12], 0
movzx eax, al
movzx ecx, dl
cmove ecx, eax
mov eax, 0x1000d361
mov dword [esp + 0x20], ecx
mov ecx, 0x1000d349
cmovne ecx, eax
cmp ecx, edi
je 0x1000825f
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [esp + 0x20]
je 0x10008251
add ecx, 2
cmp ecx, edi
jne 0x10008240
jmp 0x1000825f
movzx eax, byte [ecx + 1]
mov cl, byte [esp + 0x2c]
shl eax, cl
test al, al
jns 0x10008266
or dword [esi + 0x18], 0x9000
mov al, byte [esp + 0x2c]
mov ah, byte [esp + 0x12]
mov ebp, dword [esp + 0x1c]
test ah, ah
je 0x100082c1
lea ecx, [ebp - 0x20]
cmp ecx, 3
ja case.default.0x1000827e
jmp dword [ecx*4 + 0x100086a4]
mov cl, byte [esp + 0x2c]
mov byte [esp + 0x11], 3
cmp al, 4
ja 0x100083b4
cmp al, 1
jne 0x10008312
or dword [esi + 0x18], 0x11000
jmp 0x10008312
mov cl, byte [esp + 0x2c]
mov byte [esp + 0x11], 3
cmp al, 4
je 0x100083b4
cmp al, 5
jne 0x10008312
or dword [esi + 0x18], 0x11000
jmp 0x10008312
mov ecx, ebp
sub ecx, 0x8c
je 0x10008398
sub ecx, 2
je 0x10008380
cmp byte [esp + 0x11], 3
jne 0x1000834e
test ah, ah
mov ecx, str.rfusclient.exe
mov edi, 0x1000d382
mov ebp, 0x1000d382
cmovne edi, ecx
mov ecx, 0x1000d373
cmovne ecx, ebp
cmp ecx, edi
je case.0x10008363.81
nop
mov al, byte [ecx]
inc ecx
cmp al, dl
je 0x1000833a
add ecx, 2
cmp ecx, edi
jne 0x10008300
mov cl, byte [esp + 0x2c]
mov al, byte [ebx + 1]
add ebx, 2
cmp cl, 1
mov byte [esp + 0x2c], al
mov ecx, dword [esp + 0x18]
ja 0x100083c8
cmp dl, 0xf6
jne 0x100083c0
or cl, 2
jmp 0x100083c8
test byte [ecx], dh
je case.0x10008363.81
movzx eax, byte [ecx + 1]
mov cl, byte [esp + 0x2c]
shl eax, cl
test al, al
jns 0x100083b4
jmp 0x10008312
test ah, ah
je case.0x10008363.81
lea eax, [ebp - 0x50]
cmp eax, 0xa7
ja case.0x10008363.81
movzx eax, byte [eax + 0x100086c4]
jmp dword [eax*4 + 0x100086b4]
mov cl, byte [esp + 0x2c]
test dh, 9
jne 0x100083b4
jmp 0x10008312
mov cl, byte [esp + 0x2c]
test dh, 6
jne 0x100083b4
jmp 0x10008312
mov cl, byte [esp + 0x2c]
cmp al, 1
je 0x100083b4
cmp al, 5
jbe 0x10008312
or dword [esi + 0x18], 0x11000
jmp 0x10008312
mov cl, byte [esp + 0x2c]
cmp al, 5
jbe 0x10008312
or dword [esi + 0x18], 0x11000
jmp 0x10008312
mov cl, byte [esp + 0x2c]
or dword [esi + 0x18], 0x11000
jmp 0x10008312
cmp dl, 0xf7
jne 0x100083c8
or cl, 0x10
mov dl, byte [esp + 0x11]
mov edi, 4
movzx eax, dl
sub eax, 0
je 0x100083fb
sub eax, 1
je 0x100083f4
sub eax, 1
jne 0x10008424
mov byte [esp + 0x14], 2
test dh, 0x10
jne 0x10008424
mov byte [esp + 0x14], 4
jmp 0x10008424
mov byte [esp + 0x14], 1
jmp 0x10008424
test dh, 0x10
je 0x10008411
cmp byte [esp + 0x13], 6
setne al
sub al, 1
and eax, 0xffffff02
jmp 0x10008420
mov eax, dword [esp + 0x14]
cmp byte [esp + 0x13], 5
movzx eax, al
cmove eax, edi
mov dword [esp + 0x14], eax
cmp dl, 3
je 0x1000846f
cmp byte [esp + 0x13], 4
jne 0x1000846f
test dh, 0x10
jne 0x1000846f
mov dl, byte [esp + 0x2c]
inc ebx
or dword [esi + 0x18], 2
mov al, dl
shr al, 6
mov byte [esi + 0xd], al
mov al, dl
shr al, 3
and al, 7
mov byte [esi + 0xc], dl
and dl, 7
mov byte [esi + 0xe], al
mov eax, dword [esp + 0x14]
mov byte [esi + 0xf], dl
cmp dl, 5
jne 0x10008473
test byte [esp + 0x11], 1
movzx eax, al
cmove eax, edi
jmp 0x10008473
mov eax, dword [esp + 0x14]
movzx edi, al
dec ebx
mov eax, edi
sub eax, 1
je 0x100084a7
sub eax, 1
je 0x10008498
sub eax, 2
jne 0x100084b0
or dword [esi + 0x18], 0x80
mov eax, dword [ebx]
add ebx, edi
mov dword [esi + 0x14], eax
jmp 0x100084c2
or dword [esi + 0x18], 0x40
mov ax, word [ebx]
add ebx, edi
mov word [esi + 0x14], ax
jmp 0x100084c2
or dword [esi + 0x18], 0x20
mov al, byte [ebx]
mov byte [esi + 0x14], al
add ebx, edi
jmp 0x100084c2
test dh, 0x20
je 0x100084c2
or edi, 0x9000
mov dword [esi + 0x18], edi
pop edi
pop ebp
test cl, 0x10
je 0x10008516
and dh, 8
test cl, 0x40
je 0x100084ef
test dh, dh
je 0x1000856a
or dword [esi + 0x18], 0x108
mov ax, word [ebx]
add ebx, 2
mov word [esi + 0x10], ax
jmp 0x1000858d
mov eax, dword [esi + 0x18]
test dh, dh
je 0x10008508
or eax, 8
mov dword [esi + 0x18], eax
mov ax, word [ebx]
add ebx, 2
mov word [esi + 0x10], ax
jmp 0x10008516
or eax, 0x10
mov dword [esi + 0x18], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [esi + 0x10], eax
test cl, 4
je 0x10008556
mov eax, dword [esi + 0x18]
test al, 0x10
je 0x10008531
or eax, 8
mov dword [esi + 0x18], eax
mov ax, word [ebx]
mov word [esi + 0x14], ax
jmp 0x10008553
test al, 8
je 0x10008546
or eax, 0x800
mov dword [esi + 0x18], eax
mov ax, word [ebx]
mov word [esi + 0x14], ax
jmp 0x10008553
or eax, 8
mov dword [esi + 0x18], eax
mov ax, word [ebx]
mov word [esi + 0x10], ax
add ebx, 2
test cl, 2
je 0x10008565
or dword [esi + 0x18], 4
mov al, byte [ebx]
inc ebx
mov byte [esi + 0x10], al
test cl, 0x40
je 0x1000857b
or dword [esi + 0x18], 0x110
mov eax, dword [ebx]
add ebx, 4
mov dword [esi + 0x10], eax
jmp 0x1000858d
test cl, 0x20
je 0x1000858d
or dword [esi + 0x18], 0x104
mov al, byte [ebx]
inc ebx
mov byte [esi + 0x10], al
sub bl, byte [esp + 0x20]
mov byte [esi], bl
cmp bl, 0xf
jbe 0x100085ad
or dword [esi + 0x18], 0x5000
mov al, 0xf
mov byte [esi], 0xf
pop esi
movzx eax, al
pop ebx
add esp, 0x14
ret
pop esi
movzx eax, bl
pop ebx
add esp, 0x14
ret