Anonymous

signed int __cdecl sub_10017A40(int a1,HANDLE hFile,LONG lDistanceToMove){  int v3; // eax@3  int v4; // edi@3  void *v5; // ebx@6  int v6; // ebp@6  int v7; // eax@8  int v9; // eax@6  signed int v10; // [sp+14h] [bp-10Ch]@1  CHAR String1; // [sp+20h] [bp-100h]@6  int v12; // [sp+1Ch] [bp-104h]@6  signed int v13; // [sp+18h] [bp-108h]@10  __int16 Buffer; // [sp+12h] [bp-10Eh]@14  v10 = 0;  if ( (unsigned int)dword_10087E04 > 4864 )  {    if ( (unsigned int)dword_10087E04 < 6144 )    {      v4 = lstrcmpA(String1, ".text");      v3 = lstrcmpA(byte_10085F08, ".idata");      if ( dword_10088024 == 2 )      {        if ( !v4 )        {          if ( !v3 )          {            v5 = hFile;            SetFilePointer(hFile, dword_10085EF8 + 64, (PLONG)v3, v3);            ReadFile(v5, byte_10081860, 512u, &NumberOfBytesRead, (LPOVERLAPPED)v4);            lstrcpyA(&String1, byte_10081860);            v12 = lstrcmpA(&String1, "kernel32.dll");            lstrcpyA(&String1, byte_1008186E);            v9 = lstrcmpA(&String1, "GetProcAddress");            v6 = v9;            if ( v9 )            {              lstrcpyA(&String1, byte_10081870);              v6 = lstrcmpA(&String1, "GetProcAddress");            }            lstrcpyA(&String1, byte_1008187E);            v7 = lstrcmpA(&String1, "LoadLibraryA");            if ( v7 )            {              lstrcpyA(&String1, byte_10081882);              v7 = lstrcmpA(&String1, "LoadLibraryA");            }            v13 = 1234;            LOWORD(v13) = word_1008188E;            if ( !v13 )            {              if ( !v12 )              {                if ( !v6 )                {                  if ( !v7 )                  {                    SetFilePointer(v5, lDistanceToMove, (PLONG)v7, v7);                    ReadFile(v5, &Buffer, 2u, &NumberOfBytesRead, (LPOVERLAPPED)v6);                    if ( Buffer != -29867 )                      v10 = 1;                  }                }              }            }          }        }      }    }  }  return v10;}