Function at 0x101006b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x19c
push ebx
push ebp
push esi
push edi
push 0x40
lea eax, [esp + 0x16c]
mov dword [esp + 0x48], 0
mov edi, edx
mov ebx, ecx
push 0
push eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x20], ebx
call sub.VCRUNTIME140.dll_memset
mov ebp, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [esp + 0x24]
add esp, 0xc
push eax
push 0x40
lea eax, [esp + 0x170]
push eax
push edi
push ebx
call ebp
test eax, eax
je 0x101009cc
cmp dword [esp + 0x18], 0x40
jb 0x101009cc
push 0xf8
lea eax, [esp + 0x74]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x18]
push eax
push 0xf8
lea eax, [esp + 0x78]
push eax
mov eax, dword [esp + 0x1b0]
add eax, edi
push eax
push ebx
call ebp
test eax, eax
je 0x101009cc
cmp dword [esp + 0x18], 0xf8
jb 0x101009cc
mov eax, 0x10b
cmp word [esp + 0x88], ax
je 0x1010077a
push 9
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x44]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x19c
ret
movzx ecx, word [esp + 0x84]
xor esi, esi
mov eax, dword [esp + 0x1a4]
add ecx, 0x18
add eax, ecx
mov dword [esp + 0x140], 0
xor ecx, ecx
mov dword [esp + 0x144], 0
cmp cx, word [esp + 0x76]
jae 0x1010082a
add edi, eax
lea eax, [esp + 0x18]
xorps xmm0, xmm0
push eax
push 0x28
lea eax, [esp + 0x50]
movq qword [esp + 0x70], xmm0
push eax
push edi
push ebx
movups xmmword [esp + 0x5c], xmm0
movups xmmword [esp + 0x6c], xmm0
call ebp
test eax, eax
je 0x101009cc
cmp dword [esp + 0x18], 0x28
jb 0x101009cc
cmp dword [esp + 0x148], 0
jne 0x1010081d
mov edx, dword [esp + 0xf0]
mov ecx, dword [esp + 0x54]
cmp edx, ecx
jb 0x1010081d
mov ebx, dword [esp + 0x58]
lea eax, [ebx + ecx]
cmp edx, eax
jae 0x10100819
mov dword [esp + 0x148], ecx
mov dword [esp + 0x14c], ebx
mov ebx, dword [esp + 0x14]
movzx eax, word [esp + 0x76]
inc esi
add edi, 0x28
cmp esi, eax
jb 0x101007b1
mov edi, dword [esp + 0x1b4]
mov eax, 0xcccccccd
mul dword [esp + 0xf4]
mov ecx, edi
mov eax, edx
shl ecx, 4
shr eax, 4
xor edx, edx
mov dword [esp + 0x2c], eax
add eax, edi
lea eax, [eax + eax*4]
lea eax, [eax*4 + 7]
and eax, 0xfffffff8
add ecx, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x1c], ecx
mov ebp, ecx
mov dword [esp + 0x20], ebp
test edi, edi
je 0x1010089e
mov ebx, dword [esp + 0x1b0]
mov ecx, dword [ebx + edx*4]
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10100880
sub ecx, esi
inc edx
lea eax, [ecx + 4]
and eax, 0xfffffffc
add ebp, eax
cmp edx, edi
jb 0x10100877
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x20], ebp
push ebp
call fcn.1006e70d
add esp, 4
mov dword [esp + 0x24], eax
test eax, eax
je 0x101009cc
push ebp
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esp + 0xa0]
lea edx, [esp + 0x54]
add eax, dword [esp + 0x9c]
add esp, 0xc
add eax, dword [esp + 0x8c]
xorps xmm0, xmm0
add eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x38]
add eax, ecx
mov ebp, dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
cmp ecx, eax
push 0x1c
push edx
cmovae eax, ecx
movq qword [esp + 0x60], xmm0
push eax
push ebx
movups xmmword [esp + 0x58], xmm0
mov dword [esp + 0x70], 0
call ebp
test eax, eax
je 0x101009ba
mov edi, dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop dword [eax + eax]
mov edx, dword [esp + 0x54]
mov eax, edx
and eax, 0xfff
cmp eax, 0xfff
je 0x101009c0
cmp dword [esp + 0x58], 0x10000
mov ecx, dword [esp + 0x48]
jne 0x1010098e
lea esi, [ecx + 0xffff]
and esi, 0xffff0000
lea eax, [edx + ecx]
cmp esi, eax
jae 0x1010098e
nop word [eax + eax]
push 4
push 0x3000
push dword [esp + 0x28]
push esi
push ebx
call edi
mov ebx, eax
test ebx, ebx
jne 0x101009db
mov edx, dword [esp + 0x54]
add esi, 0x10000
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x14]
lea eax, [edx + ecx]
cmp esi, eax
jb 0x10100960
lea eax, [edx + ecx]
mov dword [esp + 0x60], 0
push 0x1c
lea ecx, [esp + 0x4c]
xorps xmm0, xmm0
push ecx
push eax
push ebx
movups xmmword [esp + 0x58], xmm0
movq qword [esp + 0x68], xmm0
call ebp
test eax, eax
jne 0x10100920
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [esp + 0x24]
call fcn.1006e708
add esp, 4
mov eax, dword [esp + 0x44]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x19c
ret
mov ebp, dword [esp + 0x38]
mov edi, ebx
mov ecx, dword [esp + 0xf0]
sub edi, ebp
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], 0
test ecx, ecx
je 0x10100a37
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
lea esi, [eax + eax*4]
lea eax, [esp + 0x18]
shl esi, 2
push eax
mov eax, dword [esp + 0x1b8]
push esi
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
push eax
lea eax, [ecx + ebp]
mov ebp, dword [esp + 0x20]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x101009c0
cmp dword [esp + 0x18], esi
jb 0x101009c0
jmp 0x10100a3b
mov ebp, dword [esp + 0x14]
cmp dword [esp + 0x1b4], 0
mov dword [esp + 0x30], 0
jbe 0x10100b88
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
lea edx, [edi + eax]
mov dword [esp + 0x2c], edx
lea ecx, [esi + 4]
lea edx, [esi + 4]
mov dword [esp + 0x34], ecx
add edx, eax
mov dword [esp + 0x28], edx
mov edi, dword [esp + 0x20]
mov eax, 0
mov esi, dword [esp + 0x1c]
sub edi, esi
je 0x10100a89
cmp edi, 0x7fffffff
jbe 0x10100a8e
mov eax, 0x80070057
add esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x14]
test eax, eax
js 0x101009c0
mov ecx, dword [esp + 0x1b0]
mov edx, edi
mov eax, dword [esp + 0x30]
push accept
push dword [ecx + eax*4]
push ecx
mov ecx, esi
call fcn.10101150
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
test eax, eax
js 0x101009c0
test edi, edi
je 0x10100af1
test esi, esi
je 0x10100af1
cmp edi, 2
jb 0x10100af1
cmp byte [esi], 0x3f
jne 0x10100ae3
cmp byte [esi + 1], 0x3f
je 0x10100aec
dec edi
inc esi
cmp edi, 2
jae 0x10100ad8
jmp 0x10100af1
mov word [esi], 0x3233
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
mov dword [ecx - 4], edi
mov dword [edx - 4], 0x80000001
mov dword [edx], 0
lea eax, [edi + 8]
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x40]
add eax, dword [esp + 0x1c]
mov dword [edx + 4], reloc.WS2_32.dll_accept
mov dword [edx + 8], 0
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x1b0]
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov ecx, dword [eax + esi*4]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10100b42
sub ecx, edx
inc esi
mov edx, dword [esp + 0x28]
add edi, 0x10
add edx, 0x10
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], edi
lea eax, [ecx + 4]
mov dword [esp + 0x28], edx
mov ecx, dword [esp + 0x34]
and eax, 0xfffffffc
add dword [esp + 0x1c], eax
add ecx, 0x14
mov dword [esp + 0x34], ecx
cmp esi, dword [esp + 0x1b4]
jb 0x10100a70
mov edi, dword [esp + 0x40]
mov edx, dword [esp + 0x1c]
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push edx
push dword [esp + 0x2c]
push ebx
push ebp
call esi
test eax, eax
je 0x101009c0
cmp dword [esp + 0x148], 0
mov eax, dword [esp + 0x20]
jne 0x10100bc1
mov dword [esp + 0x148], edi
mov dword [esp + 0x14c], eax
mov ebx, dword [esp + 0x38]
mov ecx, ebp
mov dword [esp + 0xf4], eax
mov edx, ebx
lea eax, [esp + 0x3c]
mov dword [esp + 0xf0], edi
push eax
push 0x40
push dword [esp + 0xcc]
call fcn.10102350
test eax, eax
je 0x101009c0
push 0
push 0x40
lea eax, [esp + 0x170]
mov dword [esp + 0xd0], 0
push eax
push ebx
push ebp
call esi
test eax, eax
je 0x101009c0
push 0
push 0xf8
lea eax, [esp + 0x78]
push eax
mov eax, dword [esp + 0x1b0]
add eax, ebx
push eax
push ebp
call esi
test eax, eax
je 0x101009c0
lea eax, [esp + 0x3c]
push eax
push dword [esp + 0x40]
push dword [esp + 0xcc]
push ebx
push ebp
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
xor ecx, ecx
mov edx, 1
test eax, eax
cmovne ecx, edx
mov dword [esp + 0x44], ecx
jmp 0x101009c0