Function at 0x10032ba
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x42c
mov eax, dword [0x1006010]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
or dword [ebp - 0x418], 0xffffffff
push ebx
push esi
xor ebx, ebx
push ebx
push 0x40000080
push 3
push ebx
push ebx
push 0xc0000000
push 0x1001dbc
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x428], ebx
mov dword [ebp - 0x40c], eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [section..data], eax
jne 0x100333b
mov esi, dword [sym.imp.msvcrt.dll_printf]
push 0x1001d84
call esi
mov dword [esp], 0x1001d30
call esi
pop ecx
push 0xfffffffffffffff4
pop eax
jmp 0x1003795
push edi
call fcn.01002226
test eax, eax
je 0x100335e
push 0x1001d18
call fcn.01002416
mov dword [ebp - 0x408], 0xfffffff5
jmp 0x10036e6
push 2
pop edi
push edi
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov eax, dword [0x100694c]
cmp eax, ebx
je 0x10033d4
lea ecx, [ebp - 0x428]
push ecx
push 1
lea ecx, [ebp - 0x42c]
push ecx
lea ecx, [ebp - 0x424]
push ecx
lea ecx, [ebp - 0x414]
push ecx
call eax
push 4
push dword [ebp - 0x414]
call dword [sym.imp.msvcrt.dll_calloc]
pop ecx
xor esi, esi
cmp dword [ebp - 0x414], ebx
pop ecx
mov dword [ebp - 0x40c], eax
jle 0x10033df
mov eax, dword [ebp - 0x424]
push dword [eax + esi*4]
call fcn.01001f75
mov ecx, dword [ebp - 0x40c]
mov dword [ecx + esi*4], eax
inc esi
cmp esi, dword [ebp - 0x414]
jl 0x10033b2
jmp 0x10033df
push 0x1001cec
call fcn.01002416
pop ecx
cmp dword [ebp - 0x414], edi
jge 0x1003407
mov eax, dword [ebp - 0x40c]
push dword [eax]
push 0x1001cd4
call dword [sym.imp.msvcrt.dll_printf]
push 0x1001cb8
call fcn.01002416
add esp, 0xc
mov eax, dword [ebp - 0x40c]
mov eax, dword [eax + 4]
push eax
push 0x1001ca4
mov dword [ebp - 0x410], eax
call fcn.01002416
pop ecx
pop ecx
push ebx
lea eax, [ebp - 0x204]
push eax
mov esi, 0x200
push esi
push 0x1001ca0
call fcn.0100204f
cmp eax, ebx
je 0x10036d2
cmp eax, esi
ja 0x10036d2
lea eax, [ebp - 0x204]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1003454
mov esi, 0x1ff
sub eax, edx
mov ecx, esi
sub ecx, eax
cmp ecx, edi
jbe 0x100346e
mov ecx, edi
jmp 0x1003484
lea eax, [ebp - 0x204]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1003477
sub eax, edx
mov ecx, esi
sub ecx, eax
mov edi, dword [sym.imp.msvcrt.dll_strncat]
push ecx
lea eax, [ebp - 0x204]
push 0x1001c9c
push eax
call edi
mov eax, dword [ebp - 0x410]
add esp, 0xc
cmp eax, ebx
jne 0x10034aa
xor ecx, ecx
jmp 0x10034b8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10034ad
sub eax, edx
mov ecx, eax
lea eax, [ebp - 0x204]
lea edx, [eax + 1]
mov dword [ebp - 0x418], edx
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x10034c7
sub eax, dword [ebp - 0x418]
mov edx, esi
sub edx, eax
inc ecx
cmp ecx, edx
jae 0x10034fc
mov eax, dword [ebp - 0x410]
cmp eax, ebx
jne 0x10034eb
xor eax, eax
jmp 0x10034f7
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10034ee
sub eax, edx
lea ecx, [eax + 1]
jmp 0x1003512
lea eax, [ebp - 0x204]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1003505
sub eax, edx
mov ecx, esi
sub ecx, eax
push ecx
push dword [ebp - 0x410]
lea eax, [ebp - 0x204]
push eax
call edi
add esp, 0xc
push 2
call fcn.0100259c
push 3
mov dword [ebp - 0x41c], eax
call fcn.0100259c
push 4
mov dword [ebp - 0x410], eax
call fcn.0100259c
push 0x1006950
push eax
call sub.ADVAPI32.dll_ConvertStringSidToSidA
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventA]
push ebx
push ebx
xor edi, edi
inc edi
push edi
push ebx
call esi
push ebx
push ebx
push edi
push ebx
mov dword [0x1006004], eax
call esi
push ebx
push ebx
push 0x1002a45
mov dword [0x1006008], eax
call dword [sym.imp.msvcrt.dll__beginthread]
add esp, 0xc
cmp eax, 0xffffffff
mov dword [ebp - 0x418], eax
je 0x10035a0
push 0x7d0
push dword [0x1006004]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x10035b7
push 0x1001c74
call fcn.01002416
pop ecx
push dword [0x1006008]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push edi
call fcn.01002f7d
push 5
call fcn.0100242e
cmp dword [ebp - 0x410], ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
je 0x100364b
push dword [ebp - 0x410]
push 0x1001c48
call fcn.01002416
pop ecx
pop ecx
push ebx
push edi
lea eax, [ebp - 0x204]
push eax
push dword [ebp - 0x410]
push ebx
call fcn.010020f8
push 6
mov dword [ebp - 0x408], eax
call fcn.0100242e
cmp dword [ebp - 0x408], edi
jne 0x100362f
push 0x1001c30
call fcn.01002416
pop ecx
push dword [ebp - 0x41c]
call fcn.01002641
mov dword [ebp - 0x408], ebx
jmp 0x10036e7
lea eax, [ebp - 0x204]
push eax
call esi
call fcn.01002dd4
cmp eax, ebx
mov dword [ebp - 0x408], eax
jne 0x10036e7
push 0x1001be8
call fcn.01002416
pop ecx
push 5
call fcn.0100242e
push ebx
push ebx
push 0x200
lea eax, [ebp - 0x404]
push eax
push ebx
push edi
push ebx
lea eax, [ebp - 0x204]
push eax
call fcn.0100215e
push 6
mov edi, eax
call fcn.0100242e
cmp edi, ebx
je 0x10036ad
lea eax, [ebp - 0x404]
push eax
push 0x1001bd0
call fcn.01002416
pop ecx
pop ecx
push dword [ebp - 0x41c]
mov dword [ebp - 0x408], ebx
call fcn.01002641
jmp 0x10036e7
lea eax, [ebp - 0x204]
push eax
call esi
call fcn.01002dd4
cmp eax, ebx
mov dword [ebp - 0x408], eax
jne 0x10036e7
push dword [ebp - 0x410]
call fcn.010026c8
jmp 0x10036e7
push 0x1001b98
call fcn.01002416
mov dword [ebp - 0x408], 0xfffffffd
pop ecx
push 8
call fcn.0100242e
push dword [ebp - 0x408]
call fcn.01002455
push ebx
call fcn.01002f7d
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [0x1006008]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [ebp - 0x420]
cmp dword [ebp - 0x40c], eax
je 0x1003768
mov esi, dword [sym.imp.msvcrt.dll_free]
xor edi, edi
cmp dword [ebp - 0x414], ebx
jle 0x1003757
mov eax, dword [ebp - 0x40c]
mov eax, dword [eax + edi*4]
cmp eax, ebx
je 0x100374e
push eax
call esi
mov eax, dword [ebp - 0x40c]
pop ecx
mov dword [eax + edi*4], ebx
inc edi
cmp edi, dword [ebp - 0x414]
jl 0x1003734
cmp dword [ebp - 0x40c], ebx
je 0x1003768
push dword [ebp - 0x40c]
call esi
pop ecx
push dword [0x1006004]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [0x1006008]
call esi
push dword [ebp - 0x418]
call esi
push dword [section..data]
call esi
mov eax, dword [ebp - 0x408]
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.01003a5f
leave
ret