Function at 0x100c936
Capabilities:
Add user account

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x23c
and dword [ebp - 0xc], 0
push 0x40
push dword [ebp + 8]
call dword [sym.imp.msvcrt.dll_wcschr]
test eax, eax
pop ecx
pop ecx
je 0x100c95e
push 0x89a
call fcn.0100e881
push ebx
push esi
push edi
push 0
push 0x202
mov ebx, 0x101dbf0
push ebx
call fcn.010047c9
mov esi, dword [0x1019360]
push 0x1d
xor eax, eax
pop ecx
mov edi, esi
rep stosd dword es:[edi], eax
or dword [esi + 0x3c], 0xffffffff
or dword [esi + 0x40], 0xffffffff
mov eax, dword [ebp + 8]
xor edi, edi
inc edi
cmp dword [ebp + 0xc], 0
mov dword [esi + 0xc], edi
mov dword [esi + 0x18], edi
mov dword [esi + 0x24], 0x100153c
mov dword [esi + 0x54], 0x101a7c4
mov dword [esi + 0x64], 0x201
mov dword [esi], eax
jne 0x100c9b9
and dword [esi + 4], 0
jmp 0x100ca24
push dword [ebp + 0xc]
push 0x100192c
call dword [sym.imp.msvcrt.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
jne 0x100c9e5
push edi
push eax
push 0x1106
push edi
push 0x100
push ebx
call fcn.0100e8be
mov dword [esi + 4], ebx
jmp 0x100ca24
push dword [ebp + 0xc]
call fcn.0101070a
test ax, ax
je 0x100c9fb
movzx eax, ax
push eax
call fcn.0100e881
mov eax, dword [ebp + 0xc]
push eax
mov dword [esi + 4], eax
call dword [sym.imp.msvcrt.dll_wcslen]
cmp eax, 0xe
pop ecx
jbe 0x100ca24
push edi
push 0x14a0
call fcn.0100e88f
test eax, eax
jne 0x100ca24
push 2
call fcn.0100e405
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push edi
push esi
call fcn.0100c423
cmp dword [ebp + 0xc], 0
jne 0x100ca4b
cmp dword [ebp - 0xc], 0
je 0x100ca4b
push dword [ebp - 0xc]
push ebx
call fcn.0100b773
mov dword [esi + 4], ebx
cmp dword [ebp - 8], edi
jne 0x100ca6c
push 0
push edi
push 0x100153c
push esi
call fcn.0100dc8d
test eax, eax
je 0x100ca6c
push 0xf7f
call fcn.0100e881
push edi
push 0x10
lea eax, [ebp - 0x30]
push eax
push 0x105
lea eax, [ebp - 0x23c]
push eax
call fcn.0100d443
test eax, eax
je 0x100ca8e
push eax
call fcn.0100e881
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
mov dword [ebp - 4], eax
mov eax, dword [0x1019360]
mov eax, dword [eax + 0x48]
test eax, eax
pop ecx
je 0x100cabb
push edi
push 0xa8
push eax
call fcn.01012f01
test al, al
je 0x100cae2
push 0
push dword [0x1019360]
lea eax, [ebp - 0x23c]
push 3
push eax
call sub.NETAPI32.dll_NetUserAdd
test eax, eax
mov dword [ebp - 0x10], eax
je 0x100cb02
cmp eax, 0x35
je 0x100cae9
cmp eax, 0x57
jne 0x100cafa
push 0xeba
jmp 0x100cafd
lea eax, [ebp - 0x23c]
push eax
push 0xe81
call fcn.0100e791
push dword [ebp - 0x10]
call fcn.0100e881
call fcn.010070e9
cmp eax, edi
jne 0x100cb39
cmp dword [ebp - 4], 0
jne 0x100cb39
push dword [esi]
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.0100b63e
test eax, eax
je 0x100cb39
push 0
push eax
call fcn.0100e35c
push 0xebe
call fcn.0100e881
cmp dword [ebp - 8], edi
jne 0x100cbbd
call fcn.010070e9
test eax, eax
jne 0x100cb50
call fcn.01007102
test eax, eax
je 0x100cb5c
cmp dword [ebp - 4], 0
ja 0x100cb5c
and dword [ebp - 4], 0
jmp 0x100cb5f
mov dword [ebp - 4], edi
lea eax, [ebp - 8]
push eax
push 3
push dword [ebp + 8]
lea eax, [ebp - 0x23c]
push eax
call sub.NETAPI32.dll_NetUserGetInfo
test eax, eax
mov edi, 0xf7d
je 0x100cb83
push edi
call fcn.0100e881
push dword [ebp - 4]
push 0
push dword [esi + 4]
push dword [ebp - 8]
call fcn.0100dc8d
test eax, eax
je 0x100cb9d
push edi
call fcn.0100e881
push 0
push dword [ebp - 8]
lea eax, [ebp - 0x23c]
push 3
push dword [ebp + 8]
push eax
call sub.NETAPI32.dll_NetUserSetInfo
test eax, eax
je 0x100cbbd
push edi
call fcn.0100e881
cmp dword [ebp + 0xc], 0
jne 0x100cbe3
cmp dword [ebp - 0xc], 0
je 0x100cbe3
mov eax, dword [ebp + 8]
push 2
push 0xf80
mov dword [0x101d820], eax
mov dword [0x101d824], ebx
call fcn.0100e83c
call fcn.0100e815
pop edi
pop esi
pop ebx
leave
ret 8