Function at 0x10034bf8
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005af3a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x70
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10034e32
lea eax, [ebp + 8]
mov dword [ebp - 0x2c], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [eax]
test eax, eax
je 0x10034dfa
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
mov eax, dword [0x1007c56c]
and eax, 1
jne 0x10034c8c
mov eax, dword [0x1007c56c]
or eax, 1
mov dword [0x1007c56c], eax
and dword [ebp - 4], 0
mov ecx, 0x1007c5dc
call fcn.1001df9e
push 0x1005b48a
call fcn.10042cdc
pop ecx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x1007c5dc
call fcn.1001e055
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x60]
push eax
mov ecx, 0x1007c5dc
call fcn.1001e06c
mov ecx, eax
call fcn.1001df8b
movzx eax, al
test eax, eax
je 0x10034ce7
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x1007c5dc
call fcn.100353e1
mov ecx, dword [ebp - 0x28]
mov ax, word [eax]
mov word [ecx], ax
jmp 0x10034e6c
mov eax, dword [ebp - 0x20]
push dword [eax]
lea eax, [ebp - 0x80]
push eax
call fcn.10033c43
pop ecx
pop ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x44]
call fcn.10005560
mov ax, word [eax]
mov word [ebp - 0x14], ax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.10005556
mov dword [ebp - 0x24], 0x531e
mov dword [ebp - 0x48], str.vhqxcesnp_rrircsps_ffjbz_zwwol_vjggz_gxze
cmp dword [ebp - 0x24], 0x54ab
jle 0x10034d87
and dword [ebp - 0x18], 0
jmp 0x10034d46
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x73f2
jge 0x10034d87
and dword [ebp - 0x1c], 0
jmp 0x10034d5c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x7d53
jge 0x10034d85
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x1c]
cdq
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], edx
push dword [ebp - 0x64]
push dword [ebp - 0x68]
mov ecx, 0x10075ef8
call fcn.10001a90
jmp 0x10034d55
jmp 0x10034d3f
push 0x7e7f
push dword [ebp - 0x20]
push 0x428f
push 0x1007c5dc
push 1
push 1
lea eax, [ebp - 0x14]
push eax
call fcn.100341b1
add esp, 0x1c
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x52eb
jge 0x10034dc6
mov edx, dword [ebp - 0x48]
mov ecx, 0x10075ef8
call fcn.1000350c
jmp 0x10034de2
or dword [ebp - 4], 0xffffffff
jmp 0x10034dec
mov eax, dword [ebp - 0x28]
mov cx, word [ebp - 0x14]
mov word [eax], cx
jmp 0x10034e6c
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
movzx eax, byte [eax]
test eax, eax
je 0x10034e30
push 0
push 0x1c50
push 0x11a0
push 0
push 0xbd8
push 0x1c3
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
jmp 0x10034e6c
lea eax, [ebp + 0x14]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
movzx eax, byte [eax]
test eax, eax
je 0x10034e51
push 0xcba
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x10034e6c
push 0x80f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret