Function at 0x10003535
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
push 0x10009394
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
xor ebx, ebx
mov dword [edi], ebx
mov dword [edi + 4], 0x10001080
mov dword [edi + 8], ebx
mov dword [edi + 0x64], ebx
mov dword [edi + 0x68], ebx
mov dword [edi + 0x6c], ebx
mov dword [edi + 0x70], ebx
mov dword [edi + 0x74], ebx
mov dword [edi + 0x78], ebx
mov dword [edi + 0x7c], ebx
mov dword [edi + 0x80], ebx
mov dword [edi + 0x84], 7
mov dword [edi + 0x88], ebx
mov dword [edi + 0x8c], ebx
mov dword [edi + 0x90], ebx
mov dword [edi + 0x94], ebx
push 0x34c
mov dword [ebp - 0x10], eax
mov byte [edi + 0x98], bl
mov dword [edi + 0xb4], ebx
mov dword [edi + 0xb8], ebx
mov dword [edi + 0xbc], ebx
mov dword [edi + 0xc0], ebx
mov dword [edi + 0xc4], ebx
mov byte [edi + 0xc8], bl
mov byte [edi + 0xc9], bl
mov dword [ebp - 8], ebx
call sub.MSVCR90.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
cmp eax, ebx
je 0x100035ec
push dword [ebp + 0xc]
mov esi, eax
push dword [edi + 0x78]
call fcn.100056af
mov esi, eax
mov dword [ebp - 4], esi
jmp 0x100035f1
mov dword [ebp - 4], ebx
mov esi, ebx
cmp esi, ebx
je 0x10003640
mov dword [ebp - 8], esi
cmp dword [esi + 0x2c], ebx
jne 0x10003625
mov eax, esi
call fcn.1000570f
mov dword [ebp - 0xc], eax
cmp eax, ebx
je 0x10003640
push eax
call fcn.100057a8
push dword [ebp - 0xc]
mov byte [ebp + 0xf], al
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [ebp + 0xf], bl
je 0x10003640
mov esi, dword [ebp - 4]
mov eax, dword [edi + 0xc]
mov dword [ebp - 8], ebx
cmp esi, eax
je 0x10003640
cmp eax, ebx
je 0x1000363d
mov esi, eax
call fcn.1000441e
mov esi, dword [ebp - 4]
mov dword [edi + 0xc], esi
cmp dword [edi + 0xc], ebx
jne 0x1000370a
lea eax, [edi + 0x9c]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov esi, dword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
push ebx
push 1
push ebx
push ebx
call esi
push ebx
push 1
push ebx
push ebx
mov dword [edi + 0xb4], eax
call esi
mov dword [edi + 0xb8], eax
cmp eax, ebx
je 0x1000369f
cmp dword [edi + 0xb4], ebx
je 0x1000369f
lea eax, [ebp - 0x14]
push eax
push ebx
push edi
push 0x10003a5b
push 0x10000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0x94], eax
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push str.dbghelp.dll
call esi
mov dword [edi + 0x70], eax
cmp eax, ebx
je 0x100036c2
push str.MiniDumpWriteDump
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [edi + 0x74], eax
push str.rpcrt4.dll
call esi
mov dword [edi + 0x7c], eax
cmp eax, ebx
je 0x100036e2
push str.UuidCreate
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [edi + 0x80], eax
push dword [ebp + 8]
lea esi, [edi + 0x10]
mov ecx, esi
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
cmp dword [esi + 0x18], 8
jb 0x100036fb
mov esi, dword [esi + 4]
jmp 0x100036fe
add esi, 4
mov ebx, edi
mov dword [edi + 0x64], esi
call fcn.10004248
xor ebx, ebx
lea eax, [edi + 0xcc]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax]
lea esi, [ebp - 0x28]
push esi
push ecx
push edx
push eax
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
call fcn.10004456
cmp dword [ebp - 0x10], 1
jne 0x1000373b
push 0x1000935c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x1000935c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x1000938c], ebx
jne 0x10003787
push 0x18
call sub.MSVCR90.dll_void____cdecl_operator_new_unsigned_int_
mov esi, eax
pop ecx
cmp esi, ebx
je 0x10003781
push 4
call sub.MSVCR90.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
cmp eax, ebx
je 0x1000376c
mov dword [eax], esi
jmp 0x1000376e
xor eax, eax
mov dword [esi], eax
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [0x1000938c], esi
jmp 0x10003787
mov dword [0x1000938c], ebx
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0xc], edi
call fcn.10004392
push 0x10003b89
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0x10003c0e
mov dword [edi + 0x88], eax
call dword [sym.imp.MSVCR90.dll__set_invalid_parameter_handler]
mov dword [edi + 0x8c], eax
mov dword [esp], 0x10003d9d
call dword [sym.imp.MSVCR90.dll__set_purecall_handler]
mov dword [edi + 0x90], eax
mov dword [esp], 0x1000935c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [ebp - 8]
cmp esi, ebx
je 0x100037e1
call fcn.1000441e
pop esi
pop ebx
leave
ret 8