Function at 0x10003500
Capabilities:
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov byte [0x1004c541], 1
cmp dword [0x1004c54c], 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, ecx
je 0x1000354c
mov eax, dword [0x1004c54c]
push 0x1388
push eax
call ebx
test eax, eax
je 0x10003542
mov eax, dword [0x1004c54c]
push 0
push eax
call esi
mov dword [0x1004c54c], 0
cmp dword [0x1004c548], 0
je 0x1000357a
mov eax, dword [0x1004c548]
push 0x898
push eax
call ebx
test eax, eax
je 0x10003570
mov eax, dword [0x1004c548]
push 0
push eax
call esi
mov dword [0x1004c548], 0
cmp dword [0x1004c544], 0
je 0x100035a8
mov eax, dword [0x1004c544]
push 0xc8
push eax
call ebx
test eax, eax
je 0x1000359e
mov eax, dword [0x1004c544]
push 0
push eax
call esi
mov dword [0x1004c544], 0
mov eax, dword [edi + 0x416c]
test eax, eax
je 0x100035d2
push 0xc8
push eax
call ebx
test eax, eax
je 0x100035c8
push 0
push dword [edi + 0x416c]
call esi
mov dword [edi + 0x416c], 0
cmp dword [0x1006a684], 0
mov ecx, dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x10003628
lea eax, [ebp - 0xc]
push eax
mov eax, dword [0x1006a684]
push eax
call ecx
test eax, eax
je 0x10003606
cmp dword [ebp - 0xc], 0x103
jne 0x10003610
mov eax, dword [0x1006a684]
push 0
push eax
call ebx
mov eax, dword [0x1006a684]
push eax
call esi
mov ecx, dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [0x1006a684], 0
cmp dword [0x1004c554], 0
je 0x10003666
lea eax, [ebp - 0x10]
push eax
mov eax, dword [0x1004c554]
push eax
call ecx
test eax, eax
je 0x1000364a
cmp dword [ebp - 0x10], 0x103
jne 0x10003654
mov eax, dword [0x1004c554]
push 0
push eax
call ebx
mov eax, dword [0x1004c554]
push eax
call esi
mov dword [0x1004c554], 0
mov eax, dword [edi + 8]
test eax, eax
je 0x10003677
push eax
call esi
mov dword [edi + 8], 0
mov eax, dword [edi + 0xc]
test eax, eax
je 0x10003688
push eax
call esi
mov dword [edi + 0xc], 0
mov eax, dword [edi + 0x10]
test eax, eax
je 0x10003699
push eax
call esi
mov dword [edi + 0x10], 0
cmp dword [0x1004c550], 0
je 0x100036b4
mov eax, dword [0x1004c550]
push eax
call esi
mov dword [0x1004c550], 0
cmp dword [edi + 0x41b0], 8
jb 0x100036cb
push dword [edi + 0x419c]
call fcn.1000c900
add esp, 4
xor eax, eax
mov dword [edi + 0x41b0], 7
mov dword [edi + 0x41ac], 0
mov word [edi + 0x419c], ax
mov edx, dword [edi + 0x4198]
sub edx, 0x10
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10003708
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [edi + 0x4194], 8
jb 0x1000371f
push dword [edi + 0x4180]
call fcn.1000c900
add esp, 4
xor eax, eax
mov dword [edi + 0x4194], 7
mov dword [edi + 0x4190], 0
mov word [edi + 0x4180], ax
mov eax, dword [edi + 0x413c]
test eax, eax
je 0x10003785
push dword [ebp - 0x10]
lea ecx, [ebp - 1]
push ecx
push dword [edi + 0x4140]
push eax
call fcn.10001610
push dword [edi + 0x413c]
call fcn.1000c900
add esp, 0x14
mov dword [edi + 0x413c], 0
mov dword [edi + 0x4140], 0
mov dword [edi + 0x4144], 0
mov eax, dword [edi + 0x4130]
test eax, eax
je 0x100037ce
push dword [ebp - 0x10]
lea ecx, [ebp - 2]
push ecx
push dword [edi + 0x4134]
push eax
call fcn.10001610
push dword [edi + 0x4130]
call fcn.1000c900
add esp, 0x14
mov dword [edi + 0x4130], 0
mov dword [edi + 0x4134], 0
mov dword [edi + 0x4138], 0
mov eax, dword [edi + 0x4124]
test eax, eax
je 0x10003817
push dword [ebp - 0x10]
lea ecx, [ebp - 3]
push ecx
push dword [edi + 0x4128]
push eax
call fcn.10001610
push dword [edi + 0x4124]
call fcn.1000c900
add esp, 0x14
mov dword [edi + 0x4124], 0
mov dword [edi + 0x4128], 0
mov dword [edi + 0x412c], 0
cmp dword [edi + 0x4120], 8
jb 0x1000382e
push dword [edi + 0x410c]
call fcn.1000c900
add esp, 4
xor eax, eax
mov dword [edi + 0x4120], 7
mov dword [edi + 0x411c], 0
mov word [edi + 0x410c], ax
cmp dword [edi + 0x40f4], 8
jb 0x10003862
push dword [edi + 0x40e0]
call fcn.1000c900
add esp, 4
xor eax, eax
mov dword [edi + 0x40f4], 7
mov dword [edi + 0x40f0], 0
mov word [edi + 0x40e0], ax
mov eax, dword [edi + 0x40d0]
push eax
push dword [eax]
lea eax, [ebp - 0x14]
push eax
lea ecx, [edi + 0x40d0]
call fcn.10009d70
push dword [edi + 0x40d0]
call fcn.1000c900
add esp, 4
cmp dword [edi + 0x40bc], 8
jb 0x100038bc
push dword [edi + 0x40a8]
call fcn.1000c900
add esp, 4
xor eax, eax
mov dword [edi + 0x40bc], 7
mov dword [edi + 0x40b8], 0
lea ecx, [edi + 0x4090]
mov word [edi + 0x40a8], ax
call fcn.100089e0
push dword [edi + 0x4090]
call fcn.1000c900
add esp, 4
lea ecx, [edi + 0x407c]
mov dword [edi + 0x4090], 0
call fcn.100089e0
push dword [edi + 0x407c]
call fcn.1000c900
mov dword [edi + 0x407c], 0
mov eax, dword [edi + 0x60]
add esp, 4
test eax, eax
je 0x10003956
push dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push dword [edi + 0x64]
push eax
call fcn.10001610
push dword [edi + 0x60]
call fcn.1000c900
add esp, 0x14
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov eax, dword [edi + 0x54]
test eax, eax
je 0x1000398d
push dword [ebp - 0x14]
lea ecx, [ebp - 5]
push ecx
push dword [edi + 0x58]
push eax
call fcn.10001610
push dword [edi + 0x54]
call fcn.1000c900
add esp, 0x14
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov eax, dword [edi + 0x48]
test eax, eax
je 0x100039c4
push dword [ebp - 0x14]
lea ecx, [ebp - 6]
push ecx
push dword [edi + 0x4c]
push eax
call fcn.10001610
push dword [edi + 0x48]
call fcn.1000c900
add esp, 0x14
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0
cmp dword [edi + 0x44], 8
jb 0x100039d5
push dword [edi + 0x30]
call fcn.1000c900
add esp, 4
mov dword [edi + 0x44], 7
mov dword [edi + 0x40], 0
xor eax, eax
mov word [edi + 0x30], ax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret