Function at 0x10005148
Capabilities:
Access peb ldr_data
Check os version
Inspect section memory permissions
Parse pe header
Resolve function by hash
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
xor eax, eax
push ebx
push esi
push edi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], eax
call fcn.10005140
mov esi, eax
mov eax, 0x5a4d
cmp word [esi], ax
jne 0x1000518d
mov edx, dword [esi + 0x3c]
lea ecx, [edx - 0x40]
cmp ecx, 0x3bf
ja 0x1000518d
cmp dword [edx + esi], 0x4550
je 0x10005190
dec esi
jmp 0x1000516c
mov eax, dword fs:[0x30]
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x34], 1
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x14]
mov dword [ebp - 4], ebx
test ebx, ebx
je 0x10005381
mov edx, dword [ebx + 0x28]
xor ecx, ecx
movzx edi, word [ebx + 0x24]
movzx ebx, byte [edx]
ror ecx, 0xd
cmp byte [edx], 0x61
jb 0x100051cf
add ecx, 0xffffffe0
add ecx, ebx
add edi, 0xffff
inc edx
test di, di
jne 0x100051c1
cmp ecx, 0x6a4abc5b
jne 0x100052d5
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], 5
mov edi, dword [ebx + 0x10]
mov eax, dword [edi + 0x3c]
mov eax, dword [eax + edi + 0x78]
add eax, edi
mov dword [ebp - 0x30], eax
mov esi, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
add esi, edi
add eax, edi
mov dword [ebp - 0x2c], eax
mov ebx, eax
mov eax, dword [esi]
xor edx, edx
lea ecx, [edi + eax]
mov al, byte [ecx]
ror edx, 0xd
movsx eax, al
add edx, eax
inc ecx
mov al, byte [ecx]
test al, al
jne 0x1000521a
cmp edx, 0xec0e4e8e
je 0x10005251
cmp edx, 0x7c0dfcaa
je 0x10005251
cmp edx, 0x91afca54
je 0x10005251
cmp edx, 0x7946c61b
je 0x10005251
cmp edx, 0xef632f2
jne 0x100052bf
mov eax, dword [ebp - 0x30]
movzx ecx, word [ebx]
mov eax, dword [eax + 0x1c]
lea eax, [eax + ecx*4]
add eax, edi
cmp edx, 0xec0e4e8e
jne 0x10005270
mov eax, dword [eax]
add eax, edi
mov dword [ebp - 0x1c], eax
jmp 0x100052b2
cmp edx, 0x7c0dfcaa
jne 0x10005281
mov eax, dword [eax]
add eax, edi
mov dword [ebp - 0x20], eax
jmp 0x100052b2
cmp edx, 0x91afca54
jne 0x10005292
mov eax, dword [eax]
add eax, edi
mov dword [ebp - 0x14], eax
jmp 0x100052b2
cmp edx, 0x7946c61b
jne 0x100052a3
mov eax, dword [eax]
add eax, edi
mov dword [ebp - 0x28], eax
jmp 0x100052b2
cmp edx, 0xef632f2
jne 0x100052b2
mov eax, dword [eax]
add eax, edi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
add eax, 0xffff
mov dword [ebp - 0x10], eax
jmp 0x100052c2
mov eax, dword [ebp - 0x10]
push 2
pop ecx
add esi, 4
add ebx, ecx
test ax, ax
jne 0x10005211
jmp 0x10005350
cmp ecx, 0x3cfa685d
jne 0x10005350
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x10]
mov eax, dword [edx + 0x3c]
mov eax, dword [eax + edx + 0x78]
add eax, edx
mov dword [ebp - 0x30], eax
mov ebx, dword [eax + 0x20]
mov edi, dword [eax + 0x24]
add ebx, edx
xor eax, eax
add edi, edx
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebx]
xor ecx, ecx
lea esi, [edx + eax]
mov al, byte [esi]
ror ecx, 0xd
movsx eax, al
add ecx, eax
inc esi
mov al, byte [esi]
test al, al
jne 0x10005308
cmp ecx, 0x534c0ab8
jne 0x10005340
mov eax, dword [ebp - 0x30]
movzx ecx, word [edi]
mov eax, dword [eax + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
add eax, 0xffff
mov dword [ebp - 0x10], eax
jmp 0x10005343
mov eax, dword [ebp - 0x10]
push 2
pop ecx
add ebx, 4
add edi, ecx
test ax, ax
jne 0x100052ff
cmp dword [ebp - 0x1c], 0
mov ebx, dword [ebp - 4]
je 0x10005371
cmp dword [ebp - 0x20], 0
je 0x10005371
cmp dword [ebp - 0x14], 0
je 0x10005371
cmp dword [ebp - 0x18], 0
je 0x10005371
cmp dword [ebp - 0x24], 0
jne 0x1000537e
mov ebx, dword [ebx]
mov dword [ebp - 4], ebx
test ebx, ebx
jne 0x100051b8
mov esi, dword [ebp - 0xc]
mov edi, dword [esi + 0x3c]
push 4
add edi, esi
push 0x3000
mov dword [ebp - 0x10], edi
push dword [edi + 0x50]
push 0
call dword [ebp - 0x14]
push dword [edi + 0x50]
mov ebx, eax
push ebx
mov dword [ebp - 0x3c], ebx
call dword [ebp - 0x18]
mov edx, dword [edi + 0x54]
mov ecx, esi
test edx, edx
je 0x100053bd
mov esi, ebx
sub esi, dword [ebp - 0xc]
mov al, byte [ecx]
mov byte [esi + ecx], al
inc ecx
sub edx, 1
jne 0x100053b2
movzx ecx, word [edi + 0x14]
movzx eax, word [edi + 6]
add ecx, 0x2c
test eax, eax
je 0x100053fb
add ecx, edi
mov edx, dword [ecx - 8]
dec eax
mov esi, dword [ecx]
add edx, ebx
add esi, dword [ebp - 0xc]
mov edi, dword [ecx - 4]
mov dword [ebp - 0x30], eax
test edi, edi
je 0x100053f1
mov al, byte [esi]
mov byte [edx], al
inc edx
inc esi
sub edi, 1
jne 0x100053e3
mov eax, dword [ebp - 0x30]
add ecx, 0x28
test eax, eax
jne 0x100053ce
mov edi, dword [ebp - 0x10]
mov esi, dword [edi + 0x80]
add esi, ebx
mov dword [ebp - 0x14], esi
cmp dword [esi], 0
je 0x1000548f
mov eax, dword [esi + 0xc]
add eax, ebx
push eax
call dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
test eax, eax
je 0x10005481
mov edi, dword [esi + 0x10]
mov edx, dword [esi]
add edi, ebx
add edx, ebx
mov dword [ebp - 0x18], edx
cmp dword [edi], 0
je 0x10005481
mov esi, eax
test edx, edx
je 0x10005458
mov ecx, dword [edx]
test ecx, ecx
jns 0x10005458
mov eax, dword [esi + 0x3c]
movzx ecx, cx
mov eax, dword [eax + esi + 0x78]
sub ecx, dword [eax + esi + 0x10]
mov eax, dword [eax + esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
jmp 0x10005467
mov eax, dword [edi]
add eax, 2
add eax, ebx
push eax
push esi
call dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov dword [edi], eax
add edi, 4
test edx, edx
lea eax, [edx + 4]
cmove eax, edx
cmp dword [edi], 0
mov edx, eax
mov dword [ebp - 0x18], edx
jne 0x10005432
mov esi, dword [ebp - 0x14]
add esi, 0x14
mov dword [ebp - 0x14], esi
cmp dword [esi], 0
jne 0x1000540f
mov edi, dword [ebp - 0x10]
mov ecx, dword [edi + 0xa4]
mov eax, ebx
sub eax, dword [edi + 0x34]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x10005561
mov esi, dword [edi + 0xa0]
add esi, ebx
mov dword [ebp - 0x18], esi
mov eax, dword [esi + 4]
test eax, eax
je 0x1000555e
mov edx, dword [esi]
lea edi, [esi + 8]
mov dword [ebp - 0x2c], edi
add edx, ebx
lea edi, [eax - 8]
shr edi, 1
mov dword [ebp - 0x30], edi
mov edi, dword [ebp - 0x20]
je 0x1000554c
mov ebx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x2c]
movzx eax, word [esi]
dec ebx
mov word [ebp - 2], ax
mov ecx, eax
shr word [ebp - 2], 0xc
cmp word [ebp - 2], 0xa
jne 0x100054fb
and eax, 0xfff
add dword [eax + edx], edi
jmp 0x10005537
mov ax, word [ebp - 2]
cmp ax, 3
jne 0x10005510
and ecx, 0xfff
add dword [ecx + edx], edi
jmp 0x10005537
cmp ax, word [ebp - 0x34]
jne 0x10005527
and ecx, 0xfff
mov eax, edi
shr eax, 0x10
add word [ecx + edx], ax
jmp 0x10005537
cmp ax, word [ebp - 0x38]
jne 0x10005537
and ecx, 0xfff
add word [ecx + edx], di
push 2
pop eax
add esi, eax
test ebx, ebx
jne 0x100054db
mov esi, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [esi + 4]
sub ecx, eax
add esi, eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], esi
test ecx, ecx
jne 0x100054b3
mov edi, dword [ebp - 0x10]
movzx esi, word [edi + 0x14]
movzx eax, word [edi + 6]
add esi, 0x3c
test eax, eax
je 0x10005637
add esi, edi
mov edi, dword [ebp - 0x28]
dec eax
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [esi - 0x18]
add eax, ebx
mov dword [ebp - 8], ecx
mov edx, dword [esi]
mov dword [ebp - 0x3c], eax
test edx, edx
jns 0x10005598
push 8
pop ecx
mov dword [ebp - 8], ecx
mov edx, dword [esi]
test edx, 0x40000000
je 0x100055aa
push 2
pop eax
mov ecx, eax
mov dword [ebp - 8], ecx
mov edx, dword [esi]
mov eax, edx
and eax, 0xc0000000
cmp eax, 0xc0000000
jne 0x100055c0
push 4
pop ecx
mov dword [ebp - 8], ecx
mov edx, dword [esi]
test edx, 0x20000000
je 0x100055d0
push 0x10
pop ecx
mov dword [ebp - 8], ecx
mov edx, dword [esi]
mov eax, edx
and eax, 0xa0000000
cmp eax, 0xa0000000
jne 0x100055e8
mov ecx, 0x80
mov dword [ebp - 8], ecx
mov edx, dword [esi]
mov eax, edx
and eax, 0x60000000
cmp eax, 0x60000000
jne 0x100055fe
push 0x20
pop ecx
mov dword [ebp - 8], ecx
mov edx, dword [esi]
and edx, 0xe0000000
push 0x40
cmp edx, 0xe0000000
pop eax
cmove ecx, eax
mov dword [ebp - 8], ecx
cmp dword [esi - 0x14], 0
je 0x10005626
lea eax, [ebp - 8]
push eax
push ecx
push dword [esi - 0x14]
push dword [ebp - 0x3c]
call edi
mov eax, dword [ebp - 0x38]
add esi, 0x28
test eax, eax
jne 0x10005579
mov edi, dword [ebp - 0x10]
mov esi, dword [edi + 0x28]
xor edi, edi
push edi
push edi
push 0xffffffffffffffff
add esi, ebx
call dword [ebp - 0x24]
xor eax, eax
push edi
inc eax
push eax
push ebx
call esi
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret