Function at 0x1003bbe6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1005f63a
push eax
mov dword fs:[0], esp
sub esp, 0xb0
cmp byte [ebp + 0xc], 0
push ebx
push esi
push edi
mov esi, edx
je 0x1003bc38
xor ebx, ebx
mov byte [esp + 0x23], bl
cmp byte [esp + 0x23], bl
je 0x1003c065
push ebx
mov edx, 0x1ff5
mov ecx, 0x2e94
call fcn.1003b7b6
pop ecx
jmp 0x1003c065
push dword [ebp + 8]
lea ecx, [esp + 0x4c]
call fcn.1000fefd
xor ebx, ebx
xor edx, edx
mov dword [esp + 0xc4], ebx
inc edx
mov dword [esp + 0x14], 0xfffffffb
mov dword [esp + 0x18], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x34], 3
mov dword [esp + 0x1c], 0xdc6f79b3
mov dword [esp + 0x10], 0x197cbb40
mov dword [esp + 0x10], 0x8a88acc1
mov dword [esp + 0x10], 0xddfdaf0b
mov dword [esp + 0x10], edx
mov dword [esp + 0x10], ebx
jmp 0x1003bca2
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x2c], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x1003bc92
mov eax, dword [esp + 0x14]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], ebx
jne 0x1003bcca
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x2c], edx
xor ecx, ecx
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
cmp eax, edx
setl cl
add ecx, dword [esp + 0x18]
jne 0x1003bcef
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
neg ecx
sbb ecx, ecx
neg ecx
imul eax, ecx
xor ecx, ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
sub edx, eax
mov eax, dword [esp + 0x14]
cmp eax, edx
setl cl
push ecx
mov dword [esp + 0x14], ecx
push ecx
call fcn.1003d40e
pop ecx
push esi
lea ecx, [esp + 0x50]
call fcn.10040149
mov dword [esp + 0x28], eax
lea edx, [esp + 0x48]
lea eax, [esp + 0x28]
push eax
push ecx
call fcn.1003d3f2
pop ecx
push esi
lea ecx, [esp + 0x50]
call fcn.100400c5
mov dword [esp + 0x28], eax
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x1c], 0x2971c1e
mov dword [esp + 0x10], 0x4146
cmp dword [esp + 0x10], 0x43a0
jle 0x1003be28
push ebx
push 0x155b
push 0x16f6
push 0xfd1
push 0xe32
call dword [sym.imp.GDI32.dll_CreateBitmap]
mov esi, ebx
mov edi, ebx
mov eax, ebx
mov dword [esp + 0x14], ebx
mov ecx, ebx
mov dword [esp + 0x18], ebx
cdq
idiv ecx
lea ecx, [esp + 0x70]
lea eax, [edi + edx]
or eax, esi
cdq
push edx
push eax
call fcn.10001b3f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003bdd0
mov eax, dword [eax]
push eax
call fcn.10047293
pop ecx
push ebx
push 1
lea ecx, [esp + 0x78]
call fcn.1001084f
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
inc ecx
mov dword [esp + 0x18], ecx
cmp ecx, 0x1b14
jl 0x1003bdb2
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x5f72
jl 0x1003bdac
inc edi
cmp edi, 0xcdd
jl 0x1003bda6
inc esi
cmp esi, 0x3838
jl 0x1003bda4
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov dword [esp + 0x1c], 0x124f84b8
cmp dword [esp + 0x10], 0x400d
jge 0x1003be45
push str.kocc_jieyb_emvjm_xjfq_yepbtg_iqfnenvjl_owfk_exzgvxnk_mtwcee_nhlmaahc_dqcdpkuq_onaw_krj_pqa
call fcn.10047293
pop ecx
mov dword [esp + 0xc4], ebx
mov dword [esp + 0x18], 0x7f14
cmp dword [esp + 0x18], 0x82d6
jle 0x1003beb1
mov esi, ebx
mov dword [esp + 0x14], ebx
mov edi, esi
mov esi, 0x569
mov eax, edi
lea ecx, [esp + 0x88]
cdq
push edx
push eax
call fcn.10001b3f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003be86
mov eax, dword [eax]
push eax
call fcn.10047293
pop ecx
push ebx
push 1
lea ecx, [esp + 0x90]
call fcn.1001084f
dec edi
dec esi
jne 0x1003be6b
mov esi, dword [esp + 0x14]
inc esi
mov dword [esp + 0x14], esi
cmp esi, 0x4062
jl 0x1003be64
mov dword [esp + 0x1c], 4
cmp dword [esp + 0x18], 0x7da5
jge 0x1003bece
push str.wqvdadbag_piqvhae_wbwp_fqgvmkxym_ljoodx_etm_bzhcb_bdel
call fcn.10047293
pop ecx
push 2
mov dword [esp + 0xc8], ebx
xor esi, esi
pop edi
mov dword [esp + 0x1c], edi
inc esi
mov dword [esp + 0x38], 0xfffffff8
mov dword [esp + 0x14], ebx
jmp 0x1003befd
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x6c], 0x9978f3c
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1003beed
push ecx
push ecx
push 0x1374
push esi
lea edx, [esp + 0x48]
call fcn.1003b5c8
lea eax, [esp + 0x38]
mov edx, 0x752a
push eax
push ebx
lea ecx, [esp + 0x60]
call fcn.1003bb26
mov dword [esp + 0x3c], 0x8ade19d2
add esp, 0x18
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x14], ebx
jmp 0x1003bf51
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x60], 0xfffffff6
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x1003bf41
mov dword [esp + 0x24], ebx
jmp 0x1003bfbe
mov dword [esp + 0x10], ebx
lea ecx, [esp + 0x3c]
push esi
call fcn.100100c6
mov dword [esp + 0x14], ebx
jmp 0x1003bf85
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1003bf72
mov dword [esp + 0x10], edi
cmp dword [esp + 0x10], ebx
jl 0x1003bfb1
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + eax*4 + 0x60]
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x60], ecx
mov eax, dword [esp + 0x3c]
mov dword [eax], ecx
dec dword [esp + 0x10]
jns 0x1003bf95
lea ecx, [esp + 0x3c]
call fcn.10010128
inc dword [esp + 0x24]
cmp dword [esp + 0x24], edi
jle 0x1003bf5e
push 0x648d
lea eax, [esp + 0x34]
push eax
push 0x5c4a
push ecx
lea edx, [esp + 0x34]
mov ecx, 0x70c0
call fcn.1003d08f
mov dword [esp + 0x2c], 0x4e81
add esp, 0x10
cmp dword [esp + 0x1c], 0x4f26
jle 0x1003c046
mov esi, ebx
mov edi, ebx
mov eax, esi
lea ecx, [esp + 0xa0]
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001b3f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003c01b
mov eax, dword [eax]
push eax
call fcn.10047293
pop ecx
push ebx
push 1
lea ecx, [esp + 0xa8]
call fcn.1001084f
inc edi
cmp edi, 0x3c19
jl 0x1003bffb
inc esi
cmp esi, 0x219d
jl 0x1003bff9
xor esi, esi
inc esi
mov ecx, dword [ebp + 0x14]
lea eax, [esp + 0x48]
cmp ecx, eax
je 0x1003c05a
push 0xffffffffffffffff
push ebx
push eax
call fcn.100108e1
push ebx
push esi
lea ecx, [esp + 0x50]
call fcn.10010a23
mov ecx, dword [esp + 0xbc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret