Function at 0x1003e10c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10065518
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd0
and dword [esp + 0x20], 0
push ebx
push esi
mov dword [esp + 0x1c], 0x69c3
mov esi, edx
cmp dword [esp + 0x1c], 0x6a69
push edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x38], ecx
jle 0x1003e1c9
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
xor esi, esi
mov dword [esp + 0x18], esi
xor edi, edi
mov ecx, edi
mov dword [esp + 0x28], esi
xor ebx, ebx
sar esi, cl
mov eax, esi
lea ecx, [esp + 0x78]
and eax, ebx
cdq
push edx
push eax
call fcn.10002b5c
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e18b
mov eax, dword [eax]
push eax
call fcn.1004d49f
pop ecx
push 0
push 1
lea ecx, [esp + 0x80]
call fcn.10016e75
inc ebx
cmp ebx, 0x79b8
jl 0x1003e171
mov esi, dword [esp + 0x18]
inc edi
cmp edi, 0x233e
jl 0x1003e167
inc esi
mov dword [esp + 0x18], esi
cmp esi, 0x550a
jl 0x1003e165
mov esi, dword [esp + 0x24]
push 3
pop edi
push edi
lea ecx, [esp + 0x58]
call fcn.10001f5e
mov dword [esp + 0x14], 0xaeef20fe
mov dword [esp + 0x30], 0
mov dword [esp + 0x14], 0
jmp 0x1003e203
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x54]
mov dword [eax + ecx*4], 0x7571177e
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jl 0x1003e1f0
push 2
mov dword [esp + 0x18], 0
pop ebx
jmp 0x1003e244
mov byte [esp + 0x13], 0
cmp byte [esp + 0x13], 0
je 0x1003e22a
push 0
call dword [sym.imp.KERNEL32.dll_EncodePointer]
mov byte [esp + 0x13], 0
cmp byte [esp + 0x13], 0
je 0x1003e240
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ebx
jle 0x1003e216
lea ecx, [esp + 0x54]
call fcn.10001fe1
cmp dword [esp + 0x20], 0x6757
jge 0x1003e268
push str.kedhxz_mjoy_hodu_hmq_ohqghed_rfvolsvgu_xltdlynit_ondv_yas_xqlsa_jhdbabnlt_jincnant_uivc
call fcn.1004d49f
pop ecx
or dword [esp + 0xe4], 0xffffffff
call fcn.1003aa73
push ecx
push eax
lea ecx, [esp + 0x44]
call fcn.1003e6ce
mov dword [esp + 0xe4], ebx
add esi, 0xffffe5e7
mov edx, dword [esp + 0x3c]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x1003e2c3
cmp dword [eax + 0x10], esi
jge 0x1003e2a6
mov eax, dword [eax + 8]
jmp 0x1003e2aa
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x1003e29c
cmp ecx, edx
je 0x1003e2c3
cmp esi, dword [ecx + 0x10]
jl 0x1003e2c3
mov dword [esp + 0x44], ecx
lea esi, [esp + 0x44]
jmp 0x1003e2cb
mov dword [esp + 0x34], edx
lea esi, [esp + 0x34]
mov eax, dword [0x10338b70]
mov esi, dword [esi]
mov dword [esp + 0x24], esi
test al, 1
jne 0x1003e306
and dword [0x10338b84], 0
or eax, 1
mov dword [0x10338b70], eax
xor eax, eax
push 0x10065bd7
mov dword [0x10338b88], 7
mov word [0x10338b74], ax
call fcn.1004d475
pop ecx
mov dword [esp + 0x28], 0x48b5
cmp dword [esp + 0x28], 0x4beb
jle 0x1003e3a2
xor edi, edi
and dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0x1a11
xor ebx, ebx
mov dword [esp + 0x18], 0x3b4f
xor esi, esi
mov eax, ebx
lea ecx, [esp + 0xa8]
cdq
idiv esi
mov eax, edx
cdq
push edx
push eax
call fcn.10002b5c
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e357
mov eax, dword [eax]
push eax
call fcn.1004d49f
pop ecx
push 0
push 1
lea ecx, [esp + 0xb0]
call fcn.10016e75
inc esi
cmp esi, 0x7744
jl 0x1003e337
mov eax, dword [esp + 0x20]
add ebx, eax
dec dword [esp + 0x18]
jne 0x1003e335
add eax, edi
dec dword [esp + 0x1c]
mov dword [esp + 0x20], eax
jne 0x1003e32b
inc edi
cmp edi, 0x1de
jl 0x1003e31e
mov esi, dword [esp + 0x24]
push 2
pop ebx
push 3
pop edi
xor ecx, ecx
inc ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0xa062b000
mov dword [esp + 0x18], 0xa61fc2da
cmp dword [esp + 0x20], 0xdfe4
jne 0x1003e3e0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x20], 0
jne 0x1003e3e0
xor ecx, ecx
mov eax, dword [esp + 0x20]
imul eax, ecx
mov ecx, 0x809d0107
dec eax
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x18], 5
cmp dword [esp + 0x14], 0
je 0x1003e50d
mov dword [esp + 0x14], edi
cmp dword [esp + 0x14], 0xfffffff3
jge 0x1003e5a0
mov byte [esp + 0x13], 0
mov dword [esp + 0x18], 0x13bb
cmp dword [esp + 0x18], 0x164a
jle 0x1003e4a0
xor edx, edx
mov dword [esp + 0x1c], edx
xor esi, esi
xor edi, edi
xor ebx, ebx
mov ecx, ebx
mov eax, edi
shl eax, cl
lea ecx, [esi + edx]
and eax, ecx
lea ecx, [esp + 0x60]
cdq
push edx
push eax
call fcn.10002b5c
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e45d
mov eax, dword [eax]
push eax
call fcn.1004d49f
pop ecx
push 0
push 1
lea ecx, [esp + 0x68]
call fcn.10016e75
mov edx, dword [esp + 0x1c]
inc ebx
cmp ebx, 0x3603
jl 0x1003e43c
inc edi
cmp edi, 0xe29
jl 0x1003e43a
inc esi
cmp esi, 0x5db7
jl 0x1003e438
inc edx
mov dword [esp + 0x1c], edx
cmp edx, 0x6e80
jl 0x1003e436
push 2
pop ebx
cmp byte [esp + 0x13], 0
je 0x1003e4bc
push 0x11ce
push 0x25ee
push 0x2054
call dword [sym.imp.USER32.dll_CheckDlgButton]
cmp dword [esp + 0x18], 0x1310
jge 0x1003e4d1
push str.vmesml_xmcdmledt_wxfw_nrp_spikmur_hdy_yra_dil_brn_ahxaj_gsgxfq_hkslpv_ekmrgs_rpntj
call fcn.1004d49f
pop ecx
mov dword [esp + 0xe4], ebx
mov byte [esp + 0x13], 0
cmp byte [esp + 0x13], 0
je 0x1003e4f5
push 0
push 0x24a6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0xfffffff3
jl 0x1003e419
mov esi, dword [esp + 0x24]
jmp 0x1003e5a0
mov dword [esp + 0x30], 0xfff7
lea ecx, [esp + 0x48]
mov dword [esp + 0x24], 0x700168aa
push edi
call fcn.10001f5e
mov dword [esp + 0x24], 1
mov dword [esp + 0x1c], 0
jmp 0x1003e54c
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov dword [eax + ecx*4], 7
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jl 0x1003e539
mov eax, dword [esp + 0x30]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x48]
mov eax, dword [edx + 4]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x24], 0
mov ecx, dword [esp + 0x24]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, dword [edx + 4]
lea ecx, [esp + 0x48]
setl al
mov dword [esp + 0x24], eax
call fcn.10001fe1
cmp dword [esp + 0x28], 0x4629
jge 0x1003e5b5
push str.uez_gazdipif_jzl_vqv_jmp_nfxtit_mjshkcg_rbi_gfp_wvranals_qmzntz_cenprdv_gqjrpbuin
call fcn.1004d49f
pop ecx
mov dword [esp + 0xe4], ebx
cmp esi, dword [esp + 0x3c]
je 0x1003e5e2
push dword [esi + 0x18]
mov edx, dword [esi + 0x14]
lea ecx, [esp + 0xc4]
call fcn.100354ae
pop ecx
xor ebx, ebx
mov byte [esp + 0xe4], 7
inc ebx
jmp 0x1003e5fe
push 0x10338b74
lea ecx, [esp + 0x94]
call fcn.10016714
mov dword [esp + 0xe4], 8
mov esi, dword [esp + 0x38]
mov ecx, esi
push eax
mov dword [esp + 0x30], ebx
call fcn.10016714
or ebx, 4
test bl, 2
je 0x1003e629
push 0
push 1
lea ecx, [esp + 0x98]
and ebx, 0xfffffffd
call fcn.1001714d
test bl, 1
je 0x1003e63e
push 0
push 1
lea ecx, [esp + 0xc8]
call fcn.1001714d
lea ecx, [esp + 0x3c]
call fcn.1002e8c3
mov ecx, dword [esp + 0xdc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret