Function at 0x10034cd3
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1005c415
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x130
cmp byte [ebp + 0x14], 0
push ebx
push esi
push edi
mov edi, edx
mov byte [esp + 0x3c], cl
mov dword [esp + 0x14], edi
je 0x10034e51
cmp byte [ebp + 0x24], 0
je 0x10034e46
sub esp, 0x18
mov ecx, esp
push dword [ebp + 8]
call fcn.100046fa
lea ecx, [esp + 0x88]
call fcn.100347d9
add esp, 0x18
xor ebx, ebx
mov dword [esp + 0x144], ebx
mov eax, dword [esp + 0x74]
cmp dword [esp + 0x70], eax
je 0x10034dbf
push dword [esp + 0x40]
xor ecx, ecx
mov dword [esp + 0xdc], 7
push eax
push dword [esp + 0x78]
mov word [esp + 0xd0], cx
lea ecx, [esp + 0xd0]
mov dword [esp + 0xe0], ebx
call fcn.1003148c
mov ecx, dword [ebp + 0x20]
lea edx, [esp + 0xc4]
mov byte [esp + 0x144], 1
call fcn.10034c73
lea ecx, [esp + 0xc4]
push ebx
push 1
test eax, eax
jns 0x10034db3
mov eax, dword [ebp + 0x10]
mov byte [eax], 1
call fcn.10004d85
lea ecx, [esp + 0x70]
call fcn.10037aae
jmp 0x10035512
mov byte [esp + 0x14c], bl
call fcn.10004d85
mov dword [esp + 0x10], 0x52d5
cmp dword [esp + 0x10], 0x559d
jle 0x10034e3c
mov esi, ebx
mov dword [esp + 0x28], ebx
mov edi, ebx
mov dword [esp + 0x20], ebx
mov eax, ebx
mov ecx, edi
mov ebx, esi
mov dword [esp + 0x14], eax
sar ebx, cl
mov esi, eax
mov edi, 0x475a
mov ecx, esi
mov eax, ebx
sar eax, cl
mov ecx, 0x10076fd8
cdq
push edx
push eax
call fcn.100045e5
dec esi
dec edi
jne 0x10034df0
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x3fe0
jl 0x10034de9
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x28]
inc edi
mov dword [esp + 0x20], edi
push 0
pop ebx
cmp edi, 0x2bdb
jl 0x10034ddd
inc esi
mov dword [esp + 0x28], esi
cmp esi, 0x1d5f
jl 0x10034dd7
mov eax, dword [ebp + 0x10]
mov byte [eax], bl
jmp 0x10034da5
call dword [sym.imp.USER32.dll_CreatePopupMenu]
jmp 0x10035512
test cl, cl
je 0x10035506
xor ebx, ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
push 3
lea ecx, [esp + 0xb0]
mov dword [esp + 0x148], 4
call fcn.10004886
mov byte [esp + 0x144], 5
lea ecx, [esp + 0xa0]
mov dword [esp + 0x2c], 1
mov dword [esp + 0x6c], 0x2456160c
push 3
call fcn.10004886
push ecx
push ecx
mov byte [esp + 0x14c], 6
lea edx, [esp + 0x6c]
mov dword [esp + 0x88], 0x448110cb
lea ecx, [esp + 0xb4]
push 1
call fcn.100365f8
add esp, 0xc
lea eax, [esp + 0x64]
mov edx, 0x6c4
push eax
push 0x4731
push ecx
lea ecx, [esp + 0xac]
call fcn.10036542
add esp, 0xc
mov dword [esp + 0x2c], ebx
jmp 0x10034f7b
xor eax, eax
mov dword [esp + 0x7c], ebx
inc eax
push ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x64], eax
push eax
lea eax, [esp + 0x50]
push eax
call fcn.10034157
add esp, 0xc
lea eax, [esp + 0xa0]
mov edx, 0x7fc8
lea ecx, [esp + 0x60]
push 1
push 0x7a07
push eax
lea eax, [esp + 0x38]
push eax
push 1
lea eax, [esp + 0x94]
push eax
push 0x3fa4
push 0x5799
lea eax, [esp + 0x8c]
push eax
push 0x14a1
push ebx
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0xb0]
push eax
push 0x1888
call fcn.10035ad0
add esp, 0x3c
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], 2
jle 0x10034ef8
lea ecx, [esp + 0xa0]
call fcn.10004909
lea ecx, [esp + 0xac]
mov byte [esp + 0x144], 4
call fcn.10004909
mov esi, dword [ebp + 0xc]
mov eax, dword [edi + 0x10]
mov dword [esp + 0x68], eax
cmp dword [esi + 0x14], 8
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x44], ecx
jb 0x10034fc1
mov eax, dword [esi]
jmp 0x10034fc3
mov eax, esi
push ecx
push ebx
push eax
mov ecx, edi
call fcn.1003321c
mov edi, ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x30], edi
cmp edi, dword [esp + 0x68]
jae 0x10035325
cmp eax, 0xffffffff
je 0x100351d9
cmp eax, edi
je 0x100351a3
push 3
lea ecx, [esp + 0x88]
call fcn.10004886
mov dword [esp + 0xc], 0xcdf98a59
mov dword [esp + 0x18], 0x1b870004
mov dword [esp + 0x34], ebx
mov dword [esp + 0x10], 1
mov dword [esp + 0x38], 7
mov dword [esp + 0xc], ebx
jmp 0x10035040
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x84]
mov dword [eax + ecx*4], 0x3b4e1a36
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x1003502a
mov dword [esp + 0xc], 2
cmp dword [esp + 0xc], ebx
jl 0x1003514c
mov dword [esp + 0x28], 0xe994
xor edx, edx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x38], 0x65296947
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x84]
mov eax, dword [eax + ecx*4]
add eax, 0xffff
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], eax
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x84]
cmp eax, dword [ecx + esi*4]
mov eax, dword [esp + 0x84]
setg dl
xor ebx, ebx
cmp edx, dword [eax + edi*4]
mov eax, dword [esp + 0xc]
setne bl
xor ecx, ecx
cmp ebx, eax
setne cl
xor eax, eax
add ecx, 6
cmp ecx, 0x457
mov ecx, 0xfff8
setl al
imul eax, dword [esp + 0x28]
sub eax, 0x3c3fa3c9
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x38]
sub ecx, eax
jne 0x1003512d
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x94]
dec dword [esp + 0xc]
push 0
pop ebx
jns 0x10035059
mov esi, dword [ebp + 0xc]
lea ecx, [esp + 0x84]
call fcn.10004909
mov eax, dword [esp + 0x20]
sub eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x14]
push eax
push dword [esp + 0x34]
lea eax, [esp + 0x100]
push eax
call fcn.10037387
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x148], 0xa
call fcn.1003743a
push ebx
push 1
lea ecx, [esp + 0x100]
mov byte [esp + 0x14c], 4
call fcn.10004d85
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x44]
add edi, eax
cmp dword [esi + 0x14], 8
mov dword [esp + 0x30], edi
jb 0x100351b7
mov eax, dword [esi]
jmp 0x100351b9
mov eax, esi
push dword [esi + 0x10]
mov ecx, dword [esp + 0x18]
push edi
push eax
call fcn.1003321c
mov dword [esp + 0x20], eax
cmp edi, 0xffffffff
jne 0x10034fd7
jmp 0x10035325
xor eax, eax
lea ecx, [esp + 0xb8]
inc eax
mov dword [esp + 0x40], eax
push eax
call fcn.10004886
push 0x61fe
push 0x5461
push ebx
lea eax, [esp + 0xe8]
mov byte [esp + 0x150], 7
push eax
lea eax, [esp + 0xc8]
mov edx, 0x27f2
push eax
push 0x5d48
push 1
push 0x20b1
mov cl, 1
call fcn.100356e5
lea eax, [esp + 0x60]
mov edx, 0x1534
push eax
push 1
push 0x60c8
push 0x6f10
lea eax, [esp + 0xe8]
xor cl, cl
push eax
push ebx
push 0x7238
push 0x45f3
push 0x5f69
call fcn.10034cd3
mov dword [esp + 0x64], 0x5aef
add esp, 0x44
cmp dword [esp + 0x20], 0x5bbb
jle 0x100352c5
mov esi, ebx
mov dword [esp + 0x10], ebx
mov edi, esi
mov esi, 0x6351
mov eax, edi
lea ecx, [esp + 0x110]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003529a
mov eax, dword [eax]
push eax
call fcn.10042b33
pop ecx
push ebx
push 1
lea ecx, [esp + 0x118]
call fcn.10004c13
dec edi
dec esi
jne 0x1003527f
mov esi, dword [esp + 0x10]
inc esi
mov dword [esp + 0x10], esi
cmp esi, 0x75bb
jl 0x10035278
lea eax, [esp + 0x27]
mov byte [esp + 0x27], bl
push eax
push ecx
mov edx, 0x528a
mov cl, 1
call fcn.10033f52
cmp dword [esp + 0x28], 0x5768
pop ecx
pop ecx
jge 0x100352f2
push str.qdmz_thckna_orqeu_mdshq_euwcrdt_eun_wdqvqm_hsprjwxv_veq_dwhozkcka_kvh
call fcn.10042b33
pop ecx
lea ecx, [esp + 0xb8]
mov dword [esp + 0x144], 4
call fcn.10004909
push 0x3eca
push dword [esp + 0x18]
lea eax, [esp + 0x5c]
push eax
push 1
lea edx, [esp + 0x40]
call fcn.100340e9
add esp, 0x10
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], ebx
jmp 0x1003534b
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x4c], 0x477862fd
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x1003533b
mov dword [esp + 0xc], ebx
jmp 0x1003536b
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x128], 3
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x10035358
mov dword [esp + 0x1c], ebx
cmp dword [esp + 0x1c], 1
jg 0x1003545e
push 5
pop esi
mov dword [esp + 0x10], 0x649f6d4a
xor ecx, ecx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], esi
mov dword [esp + 0x44], esi
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
test eax, eax
mov eax, dword [esp + 0x50]
setle cl
imul eax, ecx
imul edx, eax, 0xffff
mov eax, dword [esp + 0x18]
add edx, 0x936a6c96
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, eax
mov eax, dword [esp + 0x18]
cmp edx, eax
setg cl
xor eax, eax
inc ecx
cmp ecx, 0xffffffff
setne al
cmp eax, 1
ja 0x100353e8
cmp dword [esp + 0x14], ebx
jne 0x100353e8
mov ecx, ebx
jmp 0x100353eb
xor ecx, ecx
inc ecx
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + eax*4 + 0x4c]
mov dword [esp + 0x10], eax
lea eax, [ecx + 0xf816]
imul eax, dword [esp + 0x10]
xor ecx, ecx
add eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
test eax, eax
mov eax, dword [esp + 0x14]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x1c]
setle dl
xor ecx, ecx
mov eax, dword [esp + eax*4 + 0x4c]
cmp edx, eax
mov eax, dword [esp + 0x50]
setne cl
xor edx, edx
add ecx, eax
mov eax, dword [esp + 0x18]
cmp ecx, eax
mov eax, dword [esp + 0x50]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [esp + 0x44], ecx
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 1
jle 0x10035384
push ecx
lea eax, [esp + 0x20]
mov dl, 1
push eax
push ecx
push ecx
call fcn.100341a2
mov dword [esp + 0x20], 0x35ef
add esp, 0x10
cmp dword [esp + 0x10], 0x3940
jle 0x100354ce
mov esi, ebx
mov edi, ebx
mov eax, esi
lea ecx, [esp + 0xe0]
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100354a6
mov eax, dword [eax]
push eax
call fcn.10042b33
pop ecx
push ebx
push 1
lea ecx, [esp + 0xe8]
call fcn.10004c13
inc edi
cmp edi, 0x652b
jl 0x10035486
inc esi
cmp esi, 0x3b0e
jl 0x10035484
cmp dword [esp + 0x10], 0x33b9
jge 0x100354e3
push str.ncseenqoe_tgn_brag_oozpqcaq_bavvb_nmx_aczmtk_qlfuwvrb_godrxbp_rwegnhkab_xijmu_dcdytqxn
call fcn.10042b33
pop ecx
mov ecx, dword [ebp + 0x1c]
lea eax, [esp + 0x54]
push eax
mov dword [esp + 0x148], 4
call fcn.100374aa
lea ecx, [esp + 0x54]
call fcn.10037935
jmp 0x10035512
mov eax, dword [ebp + 0x28]
mov ecx, dword [eax]
mov eax, dword [ebp + 0x18]
mov eax, dword [eax]
mov dword [eax], ecx
mov ecx, dword [esp + 0x13c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret