Function at 0x100352ba
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x9c
cmp byte [ebp + 0x10], 0
push ebx
push esi
push edi
mov edi, edx
mov dword [esp + 0x60], ecx
je 0x100353dd
mov dword [esp + 0xc], 0x602
cmp dword [esp + 0xc], 0x9b5
push 0
pop esi
jle 0x10035386
mov edi, esi
mov dword [esp + 0x18], esi
mov ebx, esi
mov dword [esp + 0x24], esi
mov eax, edi
mov ecx, esi
cdq
idiv ebx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x10], edx
mov edi, ecx
mov ebx, 0x75e5
mov eax, edi
lea ecx, [esp + 0x90]
or eax, edx
cdq
push edx
push eax
call fcn.10001a21
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10035331
mov eax, dword [eax]
push eax
call fcn.10041a06
pop ecx
push esi
push 1
lea ecx, [esp + 0x98]
call fcn.10001e51
mov edx, dword [esp + 0x10]
dec edi
dec ebx
jne 0x10035314
mov ecx, dword [esp + 0x38]
inc ecx
mov dword [esp + 0x38], ecx
cmp ecx, 0x1388
jl 0x1003530d
mov ebx, dword [esp + 0x24]
mov edi, dword [esp + 0x18]
inc ebx
mov dword [esp + 0x24], ebx
cmp ebx, 0x5054
jl 0x100352fe
inc edi
mov dword [esp + 0x18], edi
cmp edi, 0x6983
jl 0x100352f8
mov eax, dword [ebp + 0xc]
cmp byte [eax], 0
je 0x100353bf
push esi
push 0x1a8a
push 0x524
push 0x789
push 0x1fc6
push 0x903
push 0x42b
push 0x24b4
push 0x635
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
cmp dword [esp + 0xc], 0x579
jge 0x10035828
push str.orlztv_bls_mrxqaks_grhgpeq_cidvxex
call fcn.10041a06
pop ecx
jmp 0x10035828
mov dword [esp + 0x40], edi
xor ebx, ebx
mov dword [esp + 0x20], 0xfffffffe
mov dword [esp + 0x58], 0x9b76eea5
mov dword [esp + 0x5c], 0xffffffff
mov dword [esp + 0x28], 0xd68c
mov dword [esp + 0x18], 0x7f45b6d4
mov dword [esp + 0x10], 0xa6575e0a
push 1
mov dword [esp + 0x30], 0x6636227f
mov dword [esp + 0x24], ebx
pop esi
jmp 0x1003554e
lea eax, [esp + 0x28]
mov dword [esp + 0x4c], 0xfffffff7
push eax
lea eax, [esp + 0x38]
mov dword [esp + 0x38], 0xffffffff
push eax
push 0x2d85
lea eax, [esp + 0x68]
mov dword [esp + 0x60], ebx
push eax
lea eax, [esp + 0x64]
mov dword [esp + 0x48], ebx
push eax
lea eax, [esp + 0x34]
mov dword [esp + 0x30], 0xffffffff
push eax
push 0x6794
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x58]
push ebx
push eax
lea edx, [esp + 0x40]
lea ecx, [esp + 0x80]
call fcn.10036f39
add esp, 0x28
mov dword [esp + 0x34], ebx
jmp 0x1003553f
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x3c], 0x694a98a1
mov dword [esp + 0xc], ebx
jmp 0x100354bf
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x64], 0x669d
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x100354af
mov eax, dword [esp + 0x10]
xor ecx, ecx
test eax, eax
setns cl
sub ecx, 0x57feb941
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x3c]
imul eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x68], ebx
jne 0x100354fe
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x28]
xor edx, edx
mov eax, dword [esp + 0x4c]
cmp eax, 0x634c5d19
mov eax, dword [esp + 0x1c]
setge dl
xor ecx, ecx
cmp eax, esi
setle cl
cmp edx, ecx
jle 0x10035523
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x68]
mov dword [esp + 0x1c], eax
inc dword [esp + 0x34]
cmp dword [esp + 0x34], 0x2e
jne 0x10035491
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 6
jg 0x10035427
mov dword [esp + 0x28], 0xfffffffc
jmp 0x100355b6
push 0x34ca
push 0x131a
push esi
push 0x43b7
push 0x3da6
push 0x7d53
push 0x194f
mov dword [esp + 0x48], ebx
mov edx, 0x2a1
push ebx
xor cl, cl
call fcn.10034ac7
mov dword [esp + 0x38], esi
add esp, 0x20
mov dword [esp + 0x20], esi
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
neg ecx
sbb ecx, ecx
inc ecx
imul eax, ecx
mov dword [esp + 0x2c], eax
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 0x21
jle 0x10035563
mov eax, dword [edi]
push ecx
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x4c]
push eax
push ecx
lea ecx, [esp + 0x4c]
call fcn.10035070
add esp, 0xc
push 0xfffffffffffffff6
pop edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x10], 0xe125d16d
mov dword [esp + 0x2c], 0x9f4288a1
mov dword [esp + 0x1c], 0xf782a183
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x14], 0x1dfe4b28
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x14], 0xcb61d225
mov dword [esp + 0x44], ebx
mov dword [esp + 0x1c], 0xdfec
mov dword [esp + 0xc], ebx
jmp 0x1003563a
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x84], 0xfffffffe
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x10035627
lea eax, [esp + 0x44]
mov edx, 0x5e36
push eax
push ebx
push 0x183e
push ecx
push ecx
mov ecx, 0x489
call fcn.10034411
add esp, 0x14
cmp dword [esp + 0x2c], ebx
jne 0x100356b1
mov ecx, dword [esp + 0x1c]
xor edx, edx
mov eax, dword [esp + 0x3c]
cmp ecx, eax
setne dl
xor ebx, ebx
add edx, 3
imul edx, dword [esp + 0x44]
mov eax, dword [esp + 0x10]
cmp edx, 0x3927
setne bl
xor ecx, ecx
cmp eax, ebx
setge cl
xor ebx, ebx
mov dword [esp + 0x1c], ecx
cmp dword [esp + 0x1c], ebx
jne 0x100356a7
mov eax, ebx
cmp dword [esp + 0x14], ebx
je 0x100356a9
mov eax, esi
cmp dword [esp + 0x3c], eax
mov eax, ebx
jl 0x100356b3
mov eax, esi
xor ecx, ecx
cmp eax, 0xfffe
mov eax, dword [esp + 0x10]
setne cl
xor edx, edx
cmp ecx, eax
setne dl
add edx, 7
mov dword [esp + 0x8c], edx
je 0x100356e6
mov dword [esp + 0x14], edi
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
jmp 0x10035716
mov dword [esp + 0x14], 5
mov dword [esp + 0xc], ebx
jmp 0x10035704
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x7c], 0xb6f
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x100356f4
mov eax, dword [esp + 0x80]
mov dword [esp + 0x14], eax
mov edi, ebx
mov dword [esp + 0x10], 0x97f6af11
mov dword [esp + 0x10], 0xfffffffe
jmp 0x1003579b
or eax, 0xffffffff
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0xc], ebx
jmp 0x10035753
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x24], 0x1e29ea41
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x10035743
mov dword [esp + 0x70], 0xfffffffd
mov dword [esp + 0x24], ebx
jmp 0x10035790
mov dword [esp + 0xc], 0x1dfe0091
mov dword [esp + 0xc], ebx
jmp 0x10035785
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x6c], 0xfffffffc
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x10035775
inc dword [esp + 0x24]
cmp dword [esp + 0x24], 0xd
jne 0x10035767
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xffffffed
je 0x1003572a
mov esi, dword [esp + 0x40]
mov dl, 0x9a
mov cl, byte [edi + esi]
call fcn.1003b5cf
mov byte [edi + esi], al
inc edi
push 1
pop esi
cmp edi, 4
jb 0x10035718
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x14], ebx
mov dword [esp + 0x14], 7
mov dword [esp + 0xc], 0x1c
jmp 0x10035817
mov dword [esp + 0x50], 0xffffffff
cmp dword [esp + 0xc], ebx
je 0x10035801
lea eax, [esp + 0x50]
push eax
push ecx
push ebx
call fcn.10035287
mov eax, dword [esp + 0x18]
add esp, 0xc
jmp 0x10035813
mov byte [esp + 0x33], bl
cmp byte [esp + 0x33], 0
je 0x10035813
push ebx
call fcn.10035d91
pop ecx
dec dword [esp + 0xc]
cmp dword [esp + 0xc], 0x14
jle 0x100357de
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x48]
mov dword [ecx], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret