Function at 0x100032fa
Capabilities:
Link many functions at runtime

Disassembly:
mov eax, 0x12
mov ebx, dword [0x10005775]
push eax
push 0x10005d6d
call sub.user32.dll_CharUpperBuffA
mov dword [0x10005d75], ebx
dec eax
push 0x2c5
push 0x10005d6d
call sub.kernel32.dll_WaitForDebugEvent
push edi
push 0
call sub.kernel32.dll_InitAtomTable
pop ecx
lea eax, [esp + 4]
mov edi, eax
mov eax, 3
sub eax, 2
dec esi
shl eax, 3
lea edi, [eax + edi]
mov dword [0x10005035], edi
mov ecx, dword [0x10005035]
dec esi
mov esi, ecx
xchg esi, ebx
or ebx, ebx
je 0x1000337c
mov eax, dword [ebx]
cmp eax, 0
je 0x1000337c
cmp byte [eax], 0
je 0x1000337c
mov eax, 0x100079ce
inc eax
push 0x3e0
push dword [ebx]
push eax
call fcn.1000168a
mov ecx, eax
jmp 0x10003382
push ebx
call fcn.10003255
mov eax, 0x1000339e
mov ecx, 1
mov edx, 0
add edx, 0xd
add edx, ecx
add eax, edx
cmp eax, 0xffffffff
je 0x100033a2
mov edx, eax
push edx
mov edx, esp
mov ecx, edx
xchg esi, ecx
mov edx, dword [esi]
xchg edx, eax
dec esi
mov ecx, eax
sub edx, edx
mov dword [0x100077f4], edx
sub edx, 0x2455e79
dec edx
sub edx, 0x51
dec edx
dec edx
lea eax, [0x10004fc9]
mov edx, 0
add edx, 1
shl edx, 1
add edx, 0x394f34
sub eax, edx
mov edx, 1
dec edx
lea eax, [edx - 0x447024f5]
add eax, 0x54707503
mov ecx, 0x8d7e2460
push eax
push eax
pop edx
pop dword [eax]
inc eax
mov dword [edx + 4], 0x9c5880be
dec eax
sub dword [edx + 4], 3
inc dword [edx + 4]
push dword [edx + 4]
pop ecx
sub ecx, 0x6a251456
mov dword [edx + 4], ecx
sub dword [edx + 4], 1
mov eax, 1
dec eax
mov ecx, 0x100050a8
add ecx, 1
mov byte [ecx], 0x72
mov byte [ecx + 1], 0x62
sub byte [ecx], 1
dec byte [ecx]
inc byte [ecx + 1]
dec byte [ecx]
inc byte [ecx + 1]
inc byte [ecx + 1]
dec byte [ecx]
inc byte [ecx + 3]
dec byte [ecx + 5]
dec byte [ecx]
mov byte [ecx + 7], 0x32
inc byte [ecx + 3]
mov byte [ecx + 6], 0x35
dec byte [ecx + 2]
dec byte [ecx + 6]
dec byte [ecx]
dec byte [ecx + 6]
sub byte [ecx], 1
push 0
push 0
push ecx
call sub.kernel32.dll_LoadLibraryExA
mov edi, eax
jmp 0x100034a3
push 0x1000346a
push edi
call sub.kernel32.dll_GetProcAddress
mov dword [0x10005061], eax
push 0x10003476
push edi
call sub.kernel32.dll_GetProcAddress
mov dword [0x10005069], eax
push 0x1000347e
push edi
call sub.kernel32.dll_GetProcAddress
mov dword [0x1000506d], eax
push 0x10003489
push edi
call sub.kernel32.dll_GetProcAddress
mov dword [0x10005071], eax
push 0x10003496
push edi
call sub.kernel32.dll_GetProcAddress
mov dword [0x10005075], eax
mov eax, edi
mov ecx, 0x2008718
mov edi, 0x1200d751
mov esi, 0x1200d779
sub edi, ecx
sub esi, ecx
mov ecx, 0x5cbc8ef0
xor ecx, 0x14ef73d5
mov dword [edi], ecx
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov edx, 0xfc37eaa
add edx, 0x3cb258
or edx, edx
je 0x10003558
push 0
push 0
push edx
call sub.kernel32.dll_LoadLibraryExA
mov ecx, 0x1e2dd8
mov esi, 0x101ea577
mov edi, 0x101e6830
sub esi, ecx
sub edi, ecx
call fcn.10002f07
mov ecx, 0xfe9e18a
dec ecx
add ecx, 0x16588d
call fcn.100035f3
or eax, 0xb7
xchg edx, eax
mov ecx, 0xffe2a0a
add ecx, 0x22613
push ecx
add byte [ecx], 2
inc byte [ecx + 1]
inc byte [ecx + 2]
call sub.kernel32.dll_GetModuleHandleA
mov esi, 0x10007793
mov edi, 0x10003a06
mov ecx, fcn.10002f07
call ecx
call fcn.100035d5
cmp byte [0x100079cf], 0x39
jbe 0x100035c9
mov byte [0x10005770], 1
jmp 0x100035d0
mov byte [0x10005770], 0
jmp 0x1000385f
mov eax, 0x100031d4
call eax
cmp esp, 1
jne 0x10003873
call 0x1000385f
ret
nop
cmp byte [0x1000104f], 1
jne 0x10003886
add dword [0x10005219], 1
jmp 0x1000389f
cmp byte [0x1000104f], 0x86
jne 0x10003898
add dword [0x10005219], 0
jmp 0x1000389f
add dword [0x10005219], 0
cmp byte [0x10001052], 8
jne 0x100038b4
sub dword [0x10005219], 0x2710
jmp 0x100038c7
cmp byte [0x10001052], 5
jne 0x100038c7
add dword [0x10005219], 0x2710
push 0x44c
push 0x10005859
call 0x100038d6
pop eax
mov ax, 0
push 0
or ax, ax
jne 0x100038e7
call sub.kernel32.dll_GetModuleFileNameA
pushal
mov edi, 0x1000585d
mov eax, 0x5c
mov ecx, 0x3e8
repne scasb al, byte es:[edi]
test ecx, ecx
jne 0x10003904
mov byte [0x100076f4], 1
popal
neg eax
popal
cld
mov eax, 0x1000311b
jmp eax