Function at 0x1003ce98
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x1008aa24
call fcn.10089d9c
sub esp, 0x3c
push ebx
push esi
push edi
push 0x104
mov edi, ecx
mov esi, 0x100e0930
push esi
xor ebx, ebx
push ebx
mov dword [edi], vtable.MySteam.0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
push esi
call dword [sym.imp.msvcrt.dll_wcsrchr]
pop ecx
pop ecx
push 0x21
pop esi
push 0x72
xor ecx, ecx
mov word [eax + 2], cx
mov dword [ebp - 0x48], esi
pop eax
mov word [ebp - 0x44], ax
push 0x55
pop edx
mov word [ebp - 0x42], dx
push 0x44
pop eax
mov word [ebp - 0x40], ax
push 0x40
pop ecx
mov word [ebp - 0x3e], cx
push 0x4c
pop eax
mov word [ebp - 0x3c], ax
push 0x65
pop eax
mov word [ebp - 0x3a], ax
mov ax, word [0x100a40dc]
xor ax, si
mov word [ebp - 0x38], cx
mov word [ebp - 0x36], dx
mov edx, ebx
mov word [ebp - 0x34], cx
mov word [ebp - 0x32], si
mov word [ebp - 0x30], ax
mov ax, word [0x100a40de]
xor ax, si
mov word [ebp - 0x2e], ax
mov ax, word [0x100a40e0]
xor ax, si
mov word [ebp - 0x2c], ax
mov ax, word [0x100a40e2]
xor ax, si
mov word [ebp - 0x2a], ax
mov ax, word [vtable.IMySteamFriends.4.0]
xor ax, si
mov word [ebp - 0x28], ax
mov ax, word [0x100a40e6]
xor ax, si
mov word [ebp - 0x26], ax
mov ax, word [0x100a40e8]
xor ax, si
mov word [ebp - 0x24], ax
mov ax, word [0x100a40ea]
xor ax, si
mov word [ebp - 0x22], ax
mov ax, word [0x100a40ec]
xor ax, si
mov word [ebp - 0x20], ax
xor eax, eax
mov word [ebp - 0x1e], ax
mov ax, word [ebp - 0x44]
movzx eax, word [ebp + edx*2 - 0x44]
mov ecx, dword [ebp - 0x48]
xor ecx, eax
mov word [ebp + edx*2 - 0x44], cx
inc edx
cmp edx, 0x13
jb 0x1003cf96
xor eax, eax
mov word [ebp - 0x1e], ax
lea eax, [ebp - 0x44]
push eax
push 0x100e0930
call dword [sym.imp.msvcrt.dll_wcscat]
pop ecx
pop ecx
push 0x104
mov esi, 0x100e0828
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
push esi
call dword [sym.imp.msvcrt.dll_strrchr]
pop ecx
pop ecx
mov byte [eax + 1], bl
mov byte [ebp - 0x1a], 0x5d
mov byte [ebp - 0x19], 0x7e
mov byte [ebp - 0x18], 0x6f
mov byte [ebp - 0x17], 0x6b
mov byte [ebp - 0x16], 0x77
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x14], 0x6b
mov byte [ebp - 0x13], 0x7e
mov byte [ebp - 0x12], 0x6b
mov byte [ebp - 0x11], bl
mov al, byte [ebp - 0x1a]
mov eax, ebx
sub byte [ebp + eax - 0x1a], 0xa
inc eax
cmp eax, 9
jb 0x1003d00e
lea eax, [ebp - 0x1a]
push eax
push esi
call dword [sym.imp.msvcrt.dll_strcat]
push 4
call fcn.1007a79d
push 0x20
mov dword [eax], vtable.IMySteamAppList.0
mov dword [edi + 4], eax
call fcn.1007a79d
push 0x34
mov dword [eax], vtable.IMySteamApps.2.0
mov dword [eax + 4], vtable.IMySteamApps.7.0
mov dword [eax + 8], vtable.IMySteamApps.5.0
mov dword [eax + 0xc], vtable.IMySteamApps.3.0
mov dword [eax + 0x10], vtable.IMySteamApps.6.0
mov dword [eax + 0x14], vtable.IMySteamApps.1.0
mov dword [eax + 0x18], vtable.IMySteamApps.0
mov dword [eax + 0x1c], vtable.IMySteamApps.4.0
mov dword [edi + 8], eax
call fcn.1007a79d
push 0x1c
mov dword [eax], vtable.IMySteamClient.8.0
mov dword [eax + 4], vtable.IMySteamClient.5.0
mov dword [eax + 8], vtable.IMySteamClient.3.0
mov dword [eax + 0xc], vtable.IMySteamClient.6.0
mov dword [eax + 0x10], vtable.IMySteamClient.7.0
mov dword [eax + 0x14], vtable.IMySteamClient.10.0
mov dword [eax + 0x18], vtable.IMySteamClient.0
mov dword [eax + 0x1c], vtable.IMySteamClient.9.0
mov dword [eax + 0x20], vtable.IMySteamClient.11.0
mov dword [eax + 0x24], vtable.IMySteamClient.12.0
mov dword [eax + 0x28], vtable.IMySteamClient.1.0
mov dword [eax + 0x2c], vtable.IMySteamClient.2.0
mov dword [eax + 0x30], vtable.IMySteamClient.4.0
mov dword [edi + 0xc], eax
call fcn.1007a79d
mov dword [ebp - 0x10], eax
push 0x30
mov dword [eax + 4], vtable.ISteamController004.0
mov dword [eax + 8], vtable.ISteamController005.0
mov dword [eax + 0xc], vtable.ISteamController006.0
mov dword [eax + 0x10], vtable.ISteamController007.0
mov dword [eax + 0x14], vtable.ISteamController008.0
mov dword [eax], vtable.IMySteamController.3.0
mov dword [eax + 4], vtable.IMySteamController.4.0
mov dword [eax + 8], vtable.IMySteamController.2.0
mov dword [eax + 0xc], vtable.IMySteamController.0
mov dword [eax + 0x10], vtable.IMySteamController.1.0
mov dword [eax + 0x14], vtable.IMySteamController.5.0
mov dword [eax + 0x18], ebx
mov dword [edi + 0x10], eax
call fcn.1007a79d
push 0x28
mov dword [eax], vtable.IMySteamFriends.0
mov dword [eax + 4], vtable.IMySteamFriends.10.0
mov dword [eax + 8], vtable.IMySteamFriends.11.0
mov dword [eax + 0xc], vtable.IMySteamFriends.9.0
mov dword [eax + 0x10], vtable.IMySteamFriends.1.0
mov dword [eax + 0x14], vtable.IMySteamFriends.5.0
mov dword [eax + 0x18], vtable.IMySteamFriends.3.0
mov dword [eax + 0x1c], vtable.IMySteamFriends.8.0
mov dword [eax + 0x20], vtable.IMySteamFriends.2.0
mov dword [eax + 0x24], vtable.IMySteamFriends.7.0
mov dword [eax + 0x28], vtable.IMySteamFriends.6.0
mov dword [eax + 0x2c], vtable.IMySteamFriends.4.0
mov dword [edi + 0x14], eax
call fcn.1007a79d
push 4
mov dword [eax], vtable.IMySteamGameServer.0
mov dword [eax + 4], vtable.IMySteamGameServer.1.0
mov dword [eax + 8], vtable.IMySteamGameServer.3.0
mov dword [eax + 0xc], vtable.IMySteamGameServer.2.0
mov dword [eax + 0x10], vtable.IMySteamGameServer.6.0
mov dword [eax + 0x14], vtable.IMySteamGameServer.9.0
mov dword [eax + 0x18], vtable.IMySteamGameServer.8.0
mov dword [eax + 0x1c], vtable.IMySteamGameServer.7.0
mov dword [eax + 0x20], vtable.IMySteamGameServer.5.0
mov dword [eax + 0x24], vtable.IMySteamGameServer.4.0
mov dword [edi + 0x18], eax
call fcn.1007a79d
mov dword [eax], vtable.IMySteamGameServerStats.0
push 0x10
mov dword [edi + 0x1c], eax
call fcn.1007a79d
push 0xc
mov dword [eax], vtable.IMySteamHTMLSurface.1.0
mov dword [eax + 4], vtable.IMySteamHTMLSurface.0
mov dword [eax + 8], vtable.IMySteamHTMLSurface.2.0
mov dword [eax + 0xc], vtable.IMySteamHTMLSurface.3.0
mov dword [edi + 0x20], eax
call fcn.1007a79d
push 0x30
mov dword [eax], vtable.IMySteamHTTP.0
mov dword [eax + 4], vtable.IMySteamHTTP.1.0
mov dword [eax + 8], vtable.IMySteamHTTP.2.0
mov dword [edi + 0x24], eax
call fcn.1007a79d
add esp, 0x30
mov dword [ebp - 0x10], eax
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.1003649c
or dword [ebp - 4], 0xffffffff
push 4
mov dword [edi + 0x28], eax
call fcn.1007a79d
push 0x38
pop ebx
push ebx
mov dword [eax], vtable.IMySteamMasterServerUpdater.0
mov dword [edi + 0x2c], eax
call fcn.1007a79d
mov esi, eax
mov dword [ebp - 0x10], esi
push ebx
push 0
push esi
mov dword [ebp - 4], 1
call sub.msvcrt.dll_memset
add esp, 0x14
mov ecx, esi
call fcn.1003d5c2
or esi, 0xffffffff
mov dword [ebp - 4], esi
push 8
mov dword [edi + 0x30], eax
call fcn.1007a79d
push 4
mov dword [eax], vtable.IMySteamMatchmakingServers.1.0
mov dword [eax + 4], vtable.IMySteamMatchmakingServers.0
mov dword [edi + 0x34], eax
call fcn.1007a79d
push 4
mov dword [eax], vtable.IMySteamMusic.0
mov dword [edi + 0x38], eax
call fcn.1007a79d
push ebx
mov dword [eax], vtable.IMySteamMusicRemote.0
mov dword [edi + 0x3c], eax
call fcn.1007a79d
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ecx, eax
mov dword [ebp - 4], 2
call fcn.1003c965
mov dword [ebp - 4], esi
push 0x88
mov dword [edi + 0x40], eax
call fcn.1007a79d
pop ecx
mov dword [ebp - 0x10], eax
mov ecx, eax
mov dword [ebp - 4], 3
call fcn.100384e8
mov dword [ebp - 4], esi
mov dword [edi + 0x44], eax
push 0xc
call fcn.1007a79d
push 0x3c
mov dword [eax], vtable.IMySteamScreenshots.1.0
mov dword [eax + 4], vtable.IMySteamScreenshots.2.0
mov dword [eax + 8], vtable.IMySteamScreenshots.0
mov dword [edi + 0x48], eax
call fcn.1007a79d
push 4
mov dword [eax], vtable.IMySteamUGC.0
mov dword [eax + 4], vtable.IMySteamUGC.4.0
mov dword [eax + 8], vtable.IMySteamUGC.9.0
mov dword [eax + 0xc], vtable.IMySteamUGC.13.0
mov dword [eax + 0x10], vtable.IMySteamUGC.7.0
mov dword [eax + 0x14], vtable.IMySteamUGC.2.0
mov dword [eax + 0x18], vtable.IMySteamUGC.8.0
mov dword [eax + 0x1c], vtable.IMySteamUGC.14.0
mov dword [eax + 0x20], vtable.IMySteamUGC.6.0
mov dword [eax + 0x24], vtable.IMySteamUGC.3.0
mov dword [eax + 0x28], vtable.IMySteamUGC.11.0
mov dword [eax + 0x2c], vtable.IMySteamUGC.1.0
mov dword [eax + 0x30], vtable.IMySteamUGC.5.0
mov dword [eax + 0x34], vtable.IMySteamUGC.12.0
mov dword [eax + 0x38], vtable.IMySteamUGC.10.0
mov dword [edi + 0x4c], eax
call fcn.1007a79d
push ebx
mov dword [eax], vtable.IMySteamUnifiedMessages.0
mov dword [edi + 0x50], eax
call fcn.1007a79d
push 0x2ec
mov dword [eax], vtable.IMySteamUser.12.0
mov dword [eax + 4], vtable.IMySteamUser.9.0
mov dword [eax + 8], vtable.IMySteamUser.13.0
mov dword [eax + 0xc], vtable.IMySteamUser.0
mov dword [eax + 0x10], vtable.IMySteamUser.4.0
mov dword [eax + 0x14], vtable.IMySteamUser.7.0
mov dword [eax + 0x18], vtable.IMySteamUser.6.0
mov dword [eax + 0x1c], vtable.IMySteamUser.3.0
mov dword [eax + 0x20], vtable.IMySteamUser.11.0
mov dword [eax + 0x24], vtable.IMySteamUser.1.0
mov dword [eax + 0x28], vtable.IMySteamUser.2.0
mov dword [eax + 0x2c], vtable.IMySteamUser.8.0
mov dword [eax + 0x30], vtable.IMySteamUser.5.0
mov dword [eax + 0x34], vtable.IMySteamUser.10.0
mov dword [edi + 0x54], eax
call fcn.1007a79d
add esp, 0x14
mov dword [ebp - 0x10], eax
push 4
pop ebx
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.1003a823
mov dword [ebp - 4], esi
push 0x20
mov dword [edi + 0x58], eax
call fcn.1007a79d
push 8
mov dword [eax], vtable.IMySteamUtils.4.0
mov dword [eax + 4], vtable.IMySteamUtils.6.0
mov dword [eax + 8], vtable.IMySteamUtils.2.0
mov dword [eax + 0xc], vtable.IMySteamUtils.7.0
mov dword [eax + 0x10], vtable.IMySteamUtils.1.0
mov dword [eax + 0x14], vtable.IMySteamUtils.5.0
mov dword [eax + 0x18], vtable.IMySteamUtils.0
mov dword [eax + 0x1c], vtable.IMySteamUtils.3.0
mov dword [edi + 0x5c], eax
call fcn.1007a79d
push ebx
mov dword [eax], vtable.IMySteamVideo.1.0
mov dword [eax + 4], vtable.IMySteamVideo.0
mov dword [edi + 0x60], eax
call fcn.1007a79d
push ebx
mov dword [eax], vtable.IMySteamParentalSettings.0
mov dword [edi + 0x64], eax
call fcn.1007a79d
push 0x58
mov dword [eax], vtable.IMySteamAppTicket.0
mov dword [edi + 0x68], eax
call fcn.1007a79d
push 0x58
mov esi, eax
push 0
push esi
call sub.msvcrt.dll_memset
mov dword [esi], vtable.IMySteamInput.1.0
mov dword [esi + 4], vtable.IMySteamInput.3.0
mov dword [esi + 8], vtable.IMySteamInput.0
mov dword [esi + 0xc], vtable.IMySteamInput.2.0
push ebx
mov dword [edi + 0x6c], esi
call fcn.1007a79d
push ebx
mov dword [eax], vtable.IMySteamGameSearch.0
mov dword [edi + 0x70], eax
call fcn.1007a79d
push 8
mov dword [eax], vtable.IMySteamParties.0
mov dword [edi + 0x74], eax
call fcn.1007a79d
push ebx
mov dword [eax], vtable.IMySteamRemotePlay.0
mov dword [eax + 4], vtable.IMySteamRemotePlay.1.0
mov dword [edi + 0x78], eax
call fcn.1007a79d
push 0x1c
mov dword [eax], vtable.IMySteamNetworkingMessages.0
mov dword [edi + 0x7c], eax
call fcn.1007a79d
push 0x10
mov dword [eax], vtable.IMySteamNetworkingSockets.4.0
mov dword [eax + 4], vtable.IMySteamNetworkingSockets.6.0
mov dword [eax + 8], vtable.IMySteamNetworkingSockets.1.0
mov dword [eax + 0xc], vtable.IMySteamNetworkingSockets.0
mov dword [eax + 0x10], vtable.IMySteamNetworkingSockets.2.0
mov dword [eax + 0x14], vtable.IMySteamNetworkingSockets.5.0
mov dword [eax + 0x18], vtable.IMySteamNetworkingSockets.3.0
mov dword [edi + 0x80], eax
call fcn.1007a79d
mov ecx, dword [ebp - 0xc]
add esp, 0x38
mov dword [eax], vtable.IMySteamNetworkingUtils.3.0
mov dword [eax + 4], vtable.IMySteamNetworkingUtils.2.0
mov dword [eax + 8], vtable.IMySteamNetworkingUtils.1.0
mov dword [eax + 0xc], vtable.IMySteamNetworkingUtils.0
mov dword [edi + 0x84], eax
mov eax, edi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret