Function at 0x10037380
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x29c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x284], eax
mov ecx, eax
mov dword [ebp - 0x280], ecx
mov ecx, dword fs:[0x30]
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], 0
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 0xa4]
mov dword [eax], ecx
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 0xa8]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 8]
movzx ecx, word [ecx + 0xac]
mov dword [eax + 8], ecx
xor eax, eax
lea eax, [ebp - 0xc]
mov dword [esp], 6
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.10038270
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov dword [ebp - 0x27c], 0xeec4c947
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x288], eax
nop dword [eax + eax]
sub eax, 0x80c3c7f2
je 0x10037d97
jmp 0x10037430
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x81ab4b93
je 0x10038066
jmp 0x10037450
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x8a3d4283
je 0x10037c05
jmp 0x10037470
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x9bca5f56
je 0x10037ef7
jmp 0x10037490
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x9d5d1f21
je 0x10037a25
jmp 0x100374b0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x9fbd69b1
je 0x10037971
jmp 0x100374d0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xa11cbd62
je 0x100379ad
jmp 0x100374f0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xb4bd368b
je 0x10038011
jmp 0x10037510
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xb7cb4362
je 0x10037e25
jmp 0x10037530
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xbfd0546c
je 0x10037bc5
jmp 0x10037550
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xc6e612a8
je 0x10037c45
jmp 0x10037570
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xded9e692
je 0x10037f3d
jmp 0x10037590
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xe5be7bed
je 0x10037ba5
jmp 0x100375b0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xe7d2b250
je 0x10037b45
jmp 0x100375d0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xeb138d81
je 0x100379e9
jmp 0x100375f0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xeec4c947
je 0x10037935
jmp 0x10037610
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xf91541d9
je 0x10037953
jmp 0x10037630
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xfb8b224a
je 0x10037b85
jmp 0x10037650
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xfb8f87a5
je 0x1003798f
jmp 0x10037670
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xfc158a13
je 0x10037fcb
jmp 0x10037690
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x655b9cd
je 0x10037a85
jmp 0x100376b0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x658021f
je 0x100380ac
jmp 0x100376d0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x9ca4ff5
je 0x100379cb
jmp 0x100376f0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x10dead6a
je 0x10037ae5
jmp 0x10037710
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x2552ec80
je 0x10038057
jmp 0x10037730
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x2f3919d7
je 0x10037b65
jmp 0x10037750
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x36b8b094
je 0x10037aa5
jmp 0x10037770
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x382717d2
je 0x10037d51
jmp 0x10037790
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x5450c1ec
je 0x10037c85
jmp 0x100377b0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x5b59434c
je 0x10037b05
jmp 0x100377d0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x60fa3f95
je 0x10037a45
jmp 0x100377f0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x6260110f
je 0x10037a65
jmp 0x10037810
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x63496a89
je 0x10037eb1
jmp 0x10037830
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x654bdb69
je 0x10037cc5
jmp 0x10037850
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x65ac0b44
je 0x10037d0b
jmp 0x10037870
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x6dd72f38
je 0x10037b25
jmp 0x10037890
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x6f53b934
je 0x10037ddd
jmp 0x100378b0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x728a802f
je 0x10037ac5
jmp 0x100378d0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x7dfcabf3
je 0x10037a07
jmp 0x100378f0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x7e8538ee
je 0x10037e6b
jmp 0x10037910
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x7f43508f
je 0x10037f85
jmp 0x10037930
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0xf91541d9
mov ecx, 0x36b8b094
cmp edx, 0xa
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x9fbd69b1
mov ecx, 0x60fa3f95
cmp edx, 0xe
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0xfb8f87a5
mov ecx, 0x7dfcabf3
cmp edx, 0x11
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0xa11cbd62
mov ecx, 0xb4bd368b
cmp edx, 0x12
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x9ca4ff5
mov ecx, 0xeb138d81
cmp edx, 0x19
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x2552ec80
mov ecx, 0xded9e692
cmp edx, 0x19
cmove eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x2552ec80
mov ecx, 0x382717d2
cmp edx, 0x12
cmove eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x9d5d1f21
mov ecx, 0x7e8538ee
cmp edx, 0xf
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x2552ec80
mov ecx, 0x63496a89
cmp edx, 0xf
cmove eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x6260110f
mov ecx, 0x655b9cd
cmp edx, 0xc
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0xfc158a13
mov ecx, 0x6f53b934
cmp edx, 0xd
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x65ac0b44
mov ecx, 0xb7cb4362
cmp edx, 0xb
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x728a802f
mov ecx, 0x6dd72f38
cmp edx, 6
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x10dead6a
mov ecx, 0x5b59434c
cmp edx, 8
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x9bca5f56
mov ecx, 0x80c3c7f2
cmp edx, 9
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x7f43508f
mov ecx, 0x654bdb69
cmp edx, 7
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0xe7d2b250
mov ecx, 0xfb8b224a
cmp edx, 3
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x2f3919d7
mov ecx, 0x8a3d4283
cmp edx, 4
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x2552ec80
mov ecx, 0x5450c1ec
cmp edx, 4
cmove eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0xc6e612a8
mov ecx, 0xe5be7bed
cmp edx, 2
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
mov edx, dword [ebp - 4]
mov eax, 0x2552ec80
mov ecx, 0xbfd0546c
cmp edx, 1
cmove eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x100380d4
lea ecx, [ebp - 0x28]
lea eax, [ebp - 0x24]
mov dword [esp], eax
call fcn.100382e0
sub esp, 4
lea ecx, [ebp - 0x24]
call fcn.10019b20
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
nop dword [eax]
jmp 0x100380d4
lea ecx, [ebp - 0x48]
lea eax, [ebp - 0x44]
mov dword [esp], eax
call fcn.10038320
sub esp, 4
lea ecx, [ebp - 0x44]
call fcn.1000f680
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
nop dword [eax]
jmp 0x100380d4
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x60]
mov dword [esp], eax
call fcn.10038360
sub esp, 4
lea ecx, [ebp - 0x60]
call fcn.10018060
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
nop dword [eax]
jmp 0x100380d4
lea ecx, [ebp - 0x80]
lea eax, [ebp - 0x7c]
mov dword [esp], eax
call fcn.100383a0
sub esp, 4
lea ecx, [ebp - 0x7c]
call fcn.10018060
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
nop dword [eax]
jmp 0x100380d4
lea ecx, [ebp - 0x94]
lea eax, [ebp - 0x90]
mov dword [esp], eax
call fcn.100383e0
sub esp, 4
lea ecx, [ebp - 0x90]
call fcn.1000f0c0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
lea ecx, [ebp - 0xac]
lea eax, [ebp - 0xa8]
mov dword [esp], eax
call fcn.10038420
sub esp, 4
lea ecx, [ebp - 0xa8]
call fcn.10017320
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
lea ecx, [ebp - 0xcc]
lea eax, [ebp - 0xc8]
mov dword [esp], eax
call fcn.10038460
sub esp, 4
lea ecx, [ebp - 0xc8]
call fcn.10017b40
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0xe4]
mov dword [esp], eax
call fcn.100384a0
sub esp, 4
lea ecx, [ebp - 0xe4]
call fcn.10018060
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0x114]
mov dword [esp], eax
call fcn.100384e0
sub esp, 4
lea ecx, [ebp - 0x114]
call fcn.10038520
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
nop
jmp 0x100380d4
lea ecx, [ebp - 0x134]
lea eax, [ebp - 0x130]
mov dword [esp], eax
call fcn.10038640
sub esp, 4
lea ecx, [ebp - 0x130]
call fcn.10018060
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
lea ecx, [ebp - 0x164]
lea eax, [ebp - 0x160]
mov dword [esp], eax
call fcn.10038680
sub esp, 4
lea ecx, [ebp - 0x160]
call fcn.10038520
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
lea ecx, [ebp - 0x19c]
lea eax, [ebp - 0x198]
mov dword [esp], eax
call fcn.100386c0
sub esp, 4
lea ecx, [ebp - 0x198]
call fcn.10038700
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
lea ecx, [ebp - 0x1bc]
lea eax, [ebp - 0x1b8]
mov dword [esp], eax
call fcn.10038820
sub esp, 4
lea ecx, [ebp - 0x1b8]
call fcn.10019f60
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
lea ecx, [ebp - 0x1ec]
lea eax, [ebp - 0x1e8]
mov dword [esp], eax
call fcn.10038860
sub esp, 4
lea ecx, [ebp - 0x1e8]
call fcn.100388a0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
nop
jmp 0x100380d4
lea ecx, [ebp - 0x208]
lea eax, [ebp - 0x204]
mov dword [esp], eax
call fcn.10038ad0
sub esp, 4
lea ecx, [ebp - 0x204]
call fcn.10019b20
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
lea ecx, [ebp - 0x238]
lea eax, [ebp - 0x234]
mov dword [esp], eax
call fcn.10038b10
sub esp, 4
lea ecx, [ebp - 0x234]
call fcn.100185e0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
lea ecx, [ebp - 0x254]
lea eax, [ebp - 0x250]
mov dword [esp], eax
call fcn.10038b50
sub esp, 4
lea ecx, [ebp - 0x250]
call fcn.10018060
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
mov dword [ebp - 0x27c], 0x81ab4b93
jmp 0x100380d4
lea ecx, [ebp - 0x278]
lea eax, [ebp - 0x274]
mov dword [esp], eax
call fcn.10038b90
sub esp, 4
lea ecx, [ebp - 0x274]
call fcn.10018a60
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10037170
mov dword [ebp - 0x27c], 0x658021f
jmp 0x100380d4
mov eax, dword [ebp - 0x284]
add eax, 0xc
mov ecx, 0xffffffff
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10038bd0
mov eax, dword [ebp - 0x280]
add esp, 0x29c
pop ebp
ret
jmp 0x1003740c