Function at 0x10003440
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10029ccb
mov eax, dword fs:[0]
push eax
sub esp, 0xa40
mov eax, dword [0x10034008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
xor edx, edx
mov dword [ebp - 0xa44], edi
mov dword [ebp - 0xa3c], 0x22c
lea ecx, [edi + 2]
call fcn.1000fc50
lea edx, [ebp - 0xa3c]
mov dword [ebp - 0xa48], eax
mov ecx, eax
call fcn.1000fd20
cmp eax, 1
jne 0x10003b11
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov eax, 0x72
mov byte [ebp - 0x54], 0x32
mov word [ebp - 0x2c], ax
xor edi, edi
lea eax, [ebp - 0x30]
mov byte [ebp - 0x50], 0x74
push eax
mov byte [ebp - 0x57], 0x73
mov word [ebp - 0x4f], 0x57
mov word [ebp - 0x5c], 0x7250
mov word [ebp - 0x56], 0x3373
mov word [ebp - 0x59], 0x6563
mov word [ebp - 0x52], 0x7865
mov byte [ebp - 0x53], 0x4e
mov byte [ebp - 0x5a], 0x6f
mov dword [ebp - 0x22], 0x2e0032
mov dword [ebp - 0x1a], 0x6c
mov dword [ebp - 0x30], 0x65004b
mov dword [ebp - 0x26], 0x33006c
mov dword [ebp - 0x1e], 0x6c0064
mov dword [ebp - 0x2a], 0x65006e
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea ecx, [ebp - 0x5c]
push ecx
push eax
call ebx
test eax, eax
je 0x1000353c
lea ecx, [ebp - 0xa3c]
push ecx
push dword [ebp - 0xa48]
call eax
mov edi, eax
cmp edi, 1
jne 0x10003b0b
mov edi, dword [ebp - 0xa34]
mov eax, 0x72
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0xa40], 0
mov word [ebp - 0x70], 0x7250
mov word [ebp - 0x73], 0x6570
mov word [ebp - 0x6b], 0x7373
mov byte [ebp - 0x69], 0
mov word [ebp - 0x6e], 0x636f
mov byte [ebp - 0x74], 0x4f
mov byte [ebp - 0x71], 0x6e
mov byte [ebp - 0x6c], 0x65
mov dword [ebp - 0x22], 0x2e0032
mov dword [ebp - 0x1a], 0x6c
mov dword [ebp - 0x30], 0x65004b
mov dword [ebp - 0x26], 0x33006c
mov dword [ebp - 0x1e], 0x6c0064
mov dword [ebp - 0x2a], 0x65006e
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea ecx, [ebp - 0x74]
push ecx
push eax
call ebx
test eax, eax
je 0x100035d9
push edi
push 0
push 0x400
call eax
mov edi, eax
mov dword [ebp - 0xa40], edi
jmp 0x100035db
xor edi, edi
mov eax, 0x33
mov dword [ebp - 0x3d8], 0x184
mov word [ebp - 0xc0], ax
xor eax, eax
mov word [ebp - 0xb4], ax
mov eax, 0x4b
mov word [ebp - 0xcc], ax
mov eax, 0x6e
mov word [ebp - 0xc6], ax
mov eax, 0x64
mov word [ebp - 0xba], ax
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0xca], 0x720065
mov dword [ebp - 0xc4], 0x6c0065
mov dword [ebp - 0xbe], 0x2e0032
mov dword [ebp - 0xb8], 0x6c006c
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0xa4c], eax
test edi, edi
je 0x100034af
xor bl, bl
test eax, eax
je 0x10003a95
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xad], 0x75467972
push ecx
push eax
mov dword [ebp - 0xa4], 0x73736563
mov dword [ebp - 0xa0], 0x67616d49
mov dword [ebp - 0x9c], 0x6d614e65
mov word [ebp - 0xaf], 0x6575
mov byte [ebp - 0xb0], 0x51
mov dword [ebp - 0xa9], 0x72506c6c
mov word [ebp - 0x97], 0x57
mov byte [ebp - 0xa5], 0x6f
mov byte [ebp - 0x98], 0x65
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10003869
lea ecx, [ebp - 0x3d8]
push ecx
lea ecx, [ebp - 0x3d4]
push ecx
push 0
push edi
call eax
test eax, eax
je 0x10003a24
xor eax, eax
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], 0
mov word [ebp - 0x30], ax
cmp word [ebp - 0x3d4], ax
je 0x10003721
lea eax, [ebp - 0x3d4]
push eax
call fcn.10013294
add esp, 4
push eax
lea eax, [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x30]
call fcn.1000e590
mov dword [ebp - 4], 0
cmp dword [esi + 0x14], 8
jb 0x10003742
mov eax, dword [esi]
jmp 0x10003744
mov eax, esi
push dword [esi + 0x10]
push eax
push dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x30]
call fcn.1000d150
test eax, eax
jne 0x1000375f
mov bl, 1
jmp 0x10003a0c
mov edx, dword [ebp - 0xa34]
mov ecx, 8
call fcn.1000fc50
mov edi, eax
mov dword [ebp - 0x80c], 0x428
lea edx, [ebp - 0x80c]
mov ecx, edi
call fcn.100104e0
test eax, eax
je 0x100039ff
cmp word [ebp - 0x5ec], 0
jne 0x1000379e
xor eax, eax
jmp 0x100037ad
lea eax, [ebp - 0x5ec]
push eax
call fcn.10013294
add esp, 4
push eax
lea eax, [ebp - 0x5ec]
push eax
lea ecx, [ebp - 0x30]
call fcn.1000e590
cmp dword [esi + 0x14], 8
jb 0x100037c7
mov eax, dword [esi]
jmp 0x100037c9
mov eax, esi
push dword [esi + 0x10]
push eax
push dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x30]
call fcn.1000d150
test eax, eax
je 0x100039fd
mov eax, 0x72
mov dword [ebp - 0x7a], 0x577478
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x84], 0x75646f4d
mov dword [ebp - 0x80], 0x3233656c
mov word [ebp - 0x7c], 0x654e
mov dword [ebp - 0x3e], 0x2e0032
mov dword [ebp - 0x36], 0x6c
mov dword [ebp - 0x4c], 0x65004b
mov dword [ebp - 0x42], 0x33006c
mov dword [ebp - 0x3a], 0x6c0064
mov dword [ebp - 0x46], 0x65006e
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea ecx, [ebp - 0x84]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100039ff
lea ecx, [ebp - 0x80c]
push ecx
push edi
call eax
test eax, eax
jne 0x10003790
jmp 0x100039ff
push dword [ebp - 0x3d8]
lea edx, [ebp - 0x3d4]
mov ecx, edi
call fcn.10010200
add esp, 4
test eax, eax
je 0x10003a24
xor eax, eax
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], 0
mov word [ebp - 0x30], ax
cmp word [ebp - 0x3d4], ax
je 0x100038b3
lea eax, [ebp - 0x3d4]
push eax
call fcn.10013294
add esp, 4
push eax
lea eax, [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x30]
call fcn.1000e590
mov dword [ebp - 4], 1
cmp dword [esi + 0x14], 8
jb 0x100038d4
mov eax, dword [esi]
jmp 0x100038d6
mov eax, esi
push dword [esi + 0x10]
push eax
push dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x30]
call fcn.1000d150
test eax, eax
jne 0x100038f1
mov bl, 1
jmp 0x10003a0c
mov edx, dword [ebp - 0xa34]
mov ecx, 8
call fcn.1000fc50
mov edi, eax
mov dword [ebp - 0x80c], 0x428
lea edx, [ebp - 0x80c]
mov ecx, edi
call fcn.100104e0
test eax, eax
je 0x100039ff
cmp word [ebp - 0x5ec], 0
jne 0x10003930
xor eax, eax
jmp 0x1000393f
lea eax, [ebp - 0x5ec]
push eax
call fcn.10013294
add esp, 4
push eax
lea eax, [ebp - 0x5ec]
push eax
lea ecx, [ebp - 0x30]
call fcn.1000e590
cmp dword [esi + 0x14], 8
jb 0x10003959
mov eax, dword [esi]
jmp 0x1000395b
mov eax, esi
push dword [esi + 0x10]
push eax
push dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x30]
call fcn.1000d150
test eax, eax
je 0x100039fd
mov eax, 0x72
mov dword [ebp - 0x8a], 0x577478
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x94], 0x75646f4d
mov dword [ebp - 0x90], 0x3233656c
mov word [ebp - 0x8c], 0x654e
mov dword [ebp - 0x3e], 0x2e0032
mov dword [ebp - 0x36], 0x6c
mov dword [ebp - 0x4c], 0x65004b
mov dword [ebp - 0x42], 0x33006c
mov dword [ebp - 0x3a], 0x6c0064
mov dword [ebp - 0x46], 0x65006e
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea ecx, [ebp - 0x94]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100039ff
lea ecx, [ebp - 0x80c]
push ecx
push edi
call eax
test eax, eax
jne 0x10003922
jmp 0x100039ff
mov bl, 1
mov ecx, edi
call fcn.1000ed90
mov edi, dword [ebp - 0xa40]
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1c], 8
jb 0x10003a24
push dword [ebp - 0x30]
call fcn.10011e4f
add esp, 4
push dword [ebp - 0xa4c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test bl, bl
je 0x10003a95
xorps xmm0, xmm0
mov dword [ebp - 0x3dc], 0
movq qword [ebp - 0x3e4], xmm0
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x3e0], 0
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 4], 2
mov ecx, 1
push dword [ebp - 0xa34]
call fcn.1000ffe0
add esp, 4
mov ecx, eax
call fcn.100100a0
mov dword [ebp - 0xa44], eax
mov dword [ebp - 4], 0xffffffff
mov eax, 0x72
mov word [ebp - 0x5f], 0x656c
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x64], 0x6e614865
mov dword [ebp - 0x68], 0x736f6c43
mov byte [ebp - 0x60], 0x64
mov byte [ebp - 0x5d], 0
mov dword [ebp - 0x3e], 0x2e0032
mov dword [ebp - 0x36], 0x6c
mov dword [ebp - 0x4c], 0x65004b
mov dword [ebp - 0x42], 0x33006c
mov dword [ebp - 0x3a], 0x6c0064
mov dword [ebp - 0x46], 0x65006e
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x68]
push ecx
push eax
call ebx
test eax, eax
je 0x100034af
push edi
call eax
jmp 0x100034af
mov edi, dword [ebp - 0xa44]
mov ecx, dword [ebp - 0xa48]
call fcn.1000ed90
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10011e54
mov esp, ebp
pop ebp
ret 4