Function at 0x1035781
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x18
push esi
push edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
lea edi, [ebp - 0x10]
stosd dword es:[edi], eax
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
call fcn.01035538
mov edi, eax
cmp edi, esi
jge 0x10357ca
push edi
push 0x3b
push 0x1009224
push 0x100189c
push 1
call fcn.01014247
add esp, 0x14
jmp 0x1035a48
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edi, 0x800
push edi
push esi
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
call esi
mov dword [ebp - 4], eax
test eax, eax
jne 0x10357f7
mov edi, 0x8007000e
push edi
push 0x3d
jmp 0x1035a19
push edi
push 0
call ebx
push eax
call esi
xor ebx, ebx
mov dword [0x104e1b0], eax
cmp eax, ebx
jne 0x1035817
mov edi, 0x8007000e
push edi
push 0x3e
jmp 0x1035a19
push dword [ebp + 8]
xor ecx, ecx
push 0x100920c
push 0x1009200
mov esi, 0x400
mov word [eax], cx
push esi
push dword [0x104e1b0]
call fcn.0100dd8e
mov edi, eax
add esp, 0x14
cmp edi, ebx
jge 0x103584b
push edi
push 0x45
jmp 0x1035a19
lea eax, [ebp - 0xc]
push eax
call fcn.0102e866
mov edi, eax
cmp edi, ebx
jge 0x1035862
push edi
push 0x48
jmp 0x1035a19
cmp dword [ebp - 0xc], ebx
jne 0x1035903
mov eax, dword [0x104e188]
cmp dword [eax], ebx
jne 0x1035903
push dword [0x104e1b0]
push esi
push dword [ebp - 4]
call fcn.0100d999
mov edi, eax
cmp edi, ebx
jge 0x1035895
push edi
push 0x52
jmp 0x1035a19
push 0x10091fc
push esi
push dword [ebp - 4]
call fcn.01014151
mov edi, eax
cmp edi, ebx
jge 0x10358b1
push edi
push 0x55
jmp 0x1035a19
push dword [ebp - 4]
push ebx
push 2
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x1035922
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_AllowSetForegroundWindow]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
jne 0x1035991
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x10358f1
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jge 0x1035991
push edi
push 0x5f
jmp 0x1035a19
push 0x10091fc
push esi
push dword [0x104e1b0]
call fcn.01014151
mov edi, eax
cmp edi, ebx
jge 0x1035922
push edi
push 0x4c
jmp 0x1035a19
push dword [0x104e1b0]
lea eax, [ebp - 0x18]
push ebx
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateEventW]
push eax
call ebx
mov dword [0x104e1a4], eax
test eax, eax
je 0x1035a00
cmp eax, 0xffffffff
je 0x1035a00
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 0xb7
jne 0x1035999
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_AllowSetForegroundWindow]
push dword [0x104e1a4]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
jne 0x1035991
call esi
test eax, eax
jle 0x1035983
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
test edi, edi
jge 0x1035991
push edi
push 0x74
jmp 0x1035a19
xor edi, edi
inc edi
jmp 0x1035a2d
xor eax, eax
push eax
push eax
push eax
push eax
call ebx
xor ebx, ebx
mov dword [0x104e1a8], eax
cmp eax, ebx
je 0x10359e9
cmp eax, 0xffffffff
je 0x10359e9
push ebx
push ebx
push ebx
push 0x10355df
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x104e1ac], eax
cmp eax, ebx
je 0x10359cf
cmp eax, 0xffffffff
jne 0x1035a2d
call esi
cmp eax, ebx
jle 0x10359df
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
push edi
push 0x81
jmp 0x1035a19
call esi
cmp eax, ebx
jle 0x10359f9
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
push edi
push 0x7b
jmp 0x1035a19
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1035a14
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
push edi
push 0x6b
push 0x1009224
push 0x100189c
push 1
call fcn.01014247
add esp, 0x14
cmp dword [ebp - 4], 0
pop ebx
je 0x1035a46
push dword [ebp - 4]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
cmp dword [ebp - 0x14], esi
je 0x1035a59
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x14], esi
cmp dword [ebp - 8], esi
je 0x1035a6d
cmp dword [ebp - 8], 0xffffffff
je 0x1035a6d
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
pop edi
pop esi
leave
ret 4