Function at 0x10003350
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x328
mov eax, dword [0x1002d00c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x104
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.1000e720
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push 0
call dword [0x1002e178]
call dword [0x1002e134]
push eax
push 0
push 0x1fffff
call dword [0x1002e148]
test eax, eax
je 0x100033c8
lea ecx, [ebp - 0x324]
mov dword [ebp - 0x324], 0x104
push ecx
lea ecx, [ebp - 0x218]
push ecx
push 0
push eax
call dword [0x1002e158]
lea eax, [ebp - 0x218]
push eax
call dword [0x1002e2bc]
push 0
push 0x1c
lea eax, [ebp - 0x110]
push eax
push 0
call dword [0x1002e2a4]
push 0
push 0x1c
lea eax, [ebp - 0x320]
push eax
push 0
call dword [0x1002e2a4]
lea eax, [ebp - 0x110]
push eax
call dword [0x1002e2b0]
test eax, eax
lea eax, [ebp - 0x110]
push eax
je 0x1000345b
call dword [0x1002e2b8]
lea eax, [ebp - 0x320]
push eax
call dword [0x1002e2b8]
lea edx, [ebp - 0x218]
mov esi, edx
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x10003430
lea edi, [ebp - 0x110]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10003440
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x100034f1
call dword [0x1002e2c0]
lea ecx, [ebp - 0x110]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x10003468
mov eax, dword [str.Windows_]
lea edx, [ebp - 0x218]
mov dword [ecx], eax
mov esi, edx
mov eax, dword [0x10028218]
mov dword [ecx + 4], eax
mov al, byte [0x1002821c]
mov byte [ecx + 8], al
mov al, byte [edx]
inc edx
test al, al
jne 0x10003491
lea edi, [ebp - 0x110]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x100034a1
mov ecx, edx
lea eax, [ebp - 0x320]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push eax
call dword [0x1002e2c0]
lea ecx, [ebp - 0x320]
dec ecx
nop dword [eax + eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x100034d0
mov eax, dword [str.Windows_]
mov dword [ecx], eax
mov eax, dword [0x10028218]
mov dword [ecx + 4], eax
mov al, byte [0x1002821c]
mov byte [ecx + 8], al
lea eax, [ebp - 0x110]
push eax
call dword [0x1002e2b0]
test eax, eax
jne 0x100035d0
cmp dword [0x1002dbdc], 1
jne 0x10003519
push 0x1002db1d
call fcn.10005280
lea ecx, [ebp - 0x320]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x10003520
mov eax, dword [str.nw_elf.dll]
mov dword [ecx], eax
mov eax, dword [0x10028224]
mov dword [ecx + 4], eax
mov ax, word [0x10028228]
mov word [ecx + 8], ax
mov al, byte [0x1002822a]
mov byte [ecx + 0xa], al
lea eax, [ebp - 0x320]
push 0
push eax
push str.nw_elf.dll
call dword [0x1002e124]
push 0
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [0x1002e124]
test eax, eax
je 0x100035d0
cmp dword [0x1002dbc8], 1
jne 0x10003587
call fcn.10009d20
movzx eax, word [0x1002d99a]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [0x1002e168]
movzx eax, word [0x1002d99a]
push eax
lea eax, [ebp - 0x110]
push eax
call dword [0x1002e168]
push 0
push 0
push 0
lea eax, [ebp - 0x110]
push eax
push 0
push 0
call dword [0x1002e2a8]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
movzx eax, word [0x1002d99a]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [0x1002e168]
cmp dword [0x1002dbd0], 1
je 0x10003605
call fcn.100032c0
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
xor ecx, ebp
pop esi
call fcn.1000c111
mov esp, ebp
pop ebp
ret
call fcn.1000a800
int3