Function at 0x1003e014
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1006385f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf0
mov dword [esp + 0x38], edx
push ebx
push esi
push edi
test cl, cl
je 0x1003e60b
cmp byte [ebp + 0x10], 0
je 0x1003e077
mov edx, dword [ebp + 0x14]
push 2
pop esi
mov dword [edx], 0
cmp dword [edx], esi
jge 0x1003e642
mov edi, dword [ebp + 0x20]
mov ecx, dword [edx]
mov eax, dword [edi]
mov dword [eax + ecx*4], 1
inc dword [edx]
cmp dword [edx], esi
jl 0x1003e061
jmp 0x1003e642
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x34], eax
mov dword [esp + 0xc], 0x53d3
cmp dword [esp + 0xc], 0x5743
push 0
pop ebx
jle 0x1003e106
mov esi, ebx
mov dword [esp + 0x18], ebx
mov edi, ebx
mov dword [esp + 0x1c], ebx
mov eax, esi
mov esi, ebx
cdq
idiv edi
mov edi, edx
mov eax, edi
lea ecx, [esp + 0xc8]
xor eax, esi
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e0c5
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [esp + 0xd0]
call fcn.10002ff9
inc esi
cmp esi, 0xf68
jl 0x1003e0a8
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
inc edi
mov dword [esp + 0x1c], edi
cmp edi, 0x748f
jl 0x1003e09f
inc esi
mov dword [esp + 0x18], esi
cmp esi, 0x7553
jl 0x1003e099
mov dword [esp + 0x64], 0xfffffff8
cmp dword [esp + 0xc], 0x501f
jge 0x1003e123
push str.elgja_kfoe_dbn_ztsplt_ytdeuqx_fcs_dkrpk
call fcn.10049a06
pop ecx
or dword [esp + 0x104], 0xffffffff
lea ecx, [esp + 0x84]
push 2
pop esi
push esi
call fcn.10001ed7
mov dword [esp + 0x104], esi
mov dword [esp + 0x14], 0x400f
cmp dword [esp + 0x14], 0x4224
jle 0x1003e1df
mov edi, ebx
mov dword [esp + 0x18], ebx
mov ecx, edi
mov dword [esp + 0x1c], 0x6723
mov dword [esp + 0xc], ecx
mov esi, ebx
mov edi, ebx
mov eax, esi
cdq
idiv edi
mov eax, ecx
mov ecx, edx
sar eax, cl
lea ecx, [esp + 0xe0]
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e194
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [esp + 0xe8]
call fcn.10002ff9
mov ecx, dword [esp + 0xc]
inc edi
cmp edi, 0x7c4e
jl 0x1003e170
inc esi
cmp esi, 0x5cb
jl 0x1003e16e
dec ecx
dec dword [esp + 0x1c]
mov dword [esp + 0xc], ecx
jne 0x1003e16c
mov edi, dword [esp + 0x18]
inc edi
mov dword [esp + 0x18], edi
cmp edi, 0x4415
jl 0x1003e15e
push 2
pop esi
mov dword [esp + 0x24], 0x1320f2d6
cmp dword [esp + 0x14], 0x3e5d
jge 0x1003e1fc
push str.hqnpz_lylov_udqkofmq_qetqs_xaxuix_zqagkym_aekge_dbsfor_gvvdogj_uttbath_zuldv_dccksc
call fcn.10049a06
pop ecx
mov dword [esp + 0x104], esi
lea ecx, [esp + 0x78]
mov dword [esp + 0x68], 0xa37d7c86
push 3
call fcn.10001ed7
push 0x2cac
push 0x5a25
lea eax, [esp + 0x30]
mov byte [esp + 0x10c], 5
push eax
push 0x52c1
push 1
lea eax, [esp + 0x98]
mov edx, 0x612d
push eax
push ebx
xor cl, cl
call fcn.1003e014
add esp, 0x1c
mov dword [esp + 0x28], ebx
jmp 0x1003e265
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x78]
mov dword [eax + ecx*4], 0xff444262
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 3
jl 0x1003e252
push 0x6eea
push 0x70c7
lea eax, [esp + 0x8c]
mov edx, 0x4892
push eax
push 0x510a
push ebx
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0x80]
push eax
push 0x29a2
push 0x761e
push ebx
push 0x118f
push 0x6293
push 0x3d3b
lea eax, [esp + 0xac]
push eax
push 0x177a
lea ecx, [esp + 0x60]
call fcn.1003da70
add esp, 0x3c
mov dword [esp + 0x24], 0x1a
jmp 0x1003e2ec
lea eax, [esp + 0x22]
mov byte [esp + 0x22], bl
push eax
push ecx
push ecx
mov dl, 1
call fcn.1003a2e3
add esp, 0xc
dec dword [esp + 0x24]
cmp dword [esp + 0x24], 0xfffffff4
jge 0x1003e2d3
lea ecx, [esp + 0x78]
call fcn.10001f5a
or dword [esp + 0x104], 0xffffffff
lea ecx, [esp + 0x84]
call fcn.10001f5a
mov ecx, dword [ebp + 0x1c]
mov eax, dword [ecx]
xor ecx, ecx
mov dword [esp + 0x3c], eax
inc ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
jmp 0x1003e335
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xc0], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x1003e326
mov dword [esp + 0xc], ebx
jmp 0x1003e41a
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x1c], ecx
cmp dword [esp + 0x1c], ebx
jl 0x1003e416
mov dword [esp + 0x14], 0xfffffff7
mov dword [esp + 0x14], ebx
jmp 0x1003e402
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x2c], ebx
jmp 0x1003e3e6
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x10], ebx
jmp 0x1003e3dc
mov dword [esp + 0x18], ebx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x18], ecx
cmp dword [esp + 0x18], ebx
jl 0x1003e3d8
lea edx, [esp + 0x58]
call fcn.1003ee20
push 0x504b
push 1
push 0x4bca
push 1
push 0x45d
push 0x718c
lea eax, [esp + 0x3b]
mov byte [esp + 0x3b], bl
push 0x3a3a
push eax
mov edx, 0x2422
xor cl, cl
call fcn.1003bd02
add esp, 0x20
dec dword [esp + 0x18]
jns 0x1003e391
xor ecx, ecx
inc ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ecx
jle 0x1003e37f
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], ecx
jle 0x1003e371
push ecx
push 0x24db
push ecx
call fcn.1003dfb7
add esp, 0xc
xor ecx, ecx
inc dword [esp + 0x14]
inc ecx
cmp dword [esp + 0x14], ecx
jle 0x1003e367
dec dword [esp + 0x1c]
jns 0x1003e356
inc dword [esp + 0xc]
cmp dword [esp + 0xc], ecx
jle 0x1003e344
push ecx
push 0x45cf
push ecx
push ecx
push 0x3c1e
push ecx
lea edx, [esp + 0x4c]
lea ecx, [esp + 0x54]
call fcn.1003c99e
add esp, 0x18
lea ecx, [esp + 0x6c]
push esi
call fcn.10001ed7
push 0xafd
push ebx
mov dword [esp + 0x10c], 6
lea eax, [esp + 0x74]
push ebx
mov dword [esp + 0x3c], 8
lea edx, [esp + 0x6c]
push 0x1e2e
mov dword [esp + 0x6c], 0x37f20bab
mov cl, 1
mov dword [esp + 0x50], 0xfffffffc
push 0x662a
mov dword [esp + 0x4c], 0xffffffff
push eax
mov dword [esp + 0x60], ebx
call fcn.1003ad8a
push 0x39aa
push 0x4fe3
lea eax, [esp + 0x58]
mov cl, 1
push eax
lea eax, [esp + 0x90]
push eax
push 0x56ee
push ebx
lea eax, [esp + 0x70]
push eax
push ebx
lea eax, [esp + 0x94]
push eax
push 0x7b6
lea eax, [esp + 0x88]
push 0x759f
push eax
lea edx, [esp + 0x78]
call fcn.1003dbff
add esp, 0x48
lea eax, [esp + 0x30]
lea edx, [esp + 0x38]
push eax
push ecx
mov cl, 1
call fcn.1003f0d2
or dword [esp + 0x10c], 0xffffffff
pop ecx
pop ecx
lea ecx, [esp + 0x6c]
call fcn.10001f5a
mov esi, dword [esp + 0x34]
mov edi, ebx
push 0x64cf
push ecx
push ecx
xor dl, dl
call fcn.1003a2e3
mov cl, byte [edi + esi]
add esp, 0xc
mov dl, 0x15
call fcn.10043446
mov byte [edi + esi], al
inc edi
cmp edi, 4
jb 0x1003e511
push dword [esp + 0x60]
movdqa xmm0, xmmword [0x10070e60]
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x54], ebx
push eax
push ebx
lea ecx, [esp + 0x5c]
mov dword [esp + 0x60], ebx
movdqu xmmword [esp + 0xc0], xmm0
mov dword [esp + 0x64], ebx
call fcn.10001fc0
push 7
pop eax
push 2
pop esi
mov dword [esp + 0x104], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 0x98], eax
push esi
call fcn.10001ed7
lea eax, [esp + 0xa0]
mov byte [esp + 0x104], 8
push eax
push 0x7d54
push ebx
push 0x696a
mov dword [esp + 0xbc], 0x307976b5
lea edx, [esp + 0xa4]
push 1
mov dword [esp + 0xb0], 0x214c259d
mov ecx, 0x2381
push 0x379a
mov dword [esp + 0xa8], ebx
call fcn.1003ab63
mov eax, dword [esp + 0x64]
lea ecx, [esp + 0xb8]
add esp, 0x18
mov dword [eax], ebx
call fcn.10001f5a
lea ecx, [esp + 0x4c]
call fcn.10001f5a
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
mov dword [ecx], eax
jmp 0x1003e642
cmp byte [ebp + 8], 0
je 0x1003e61e
xor ebx, ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
jmp 0x1003e642
mov edx, dword [ebp + 0x18]
push 2
pop esi
mov dword [edx], 0
cmp dword [edx], esi
jge 0x1003e642
mov edi, dword [ebp + 0xc]
mov ecx, dword [edx]
mov eax, dword [edi]
mov dword [eax + ecx*4], 0x61780eec
inc dword [edx]
cmp dword [edx], esi
jl 0x1003e631
mov ecx, dword [esp + 0xfc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret