Function at 0x100038d7
Capabilities:
Create thread

Disassembly:
mov eax, 0x1001101f
call fcn.1000c7ac
sub esp, 0x440
push ebx
push esi
push edi
xor ebx, ebx
push 0x10c
lea eax, [ebp - 0x34c]
push ebx
push eax
call sub.MSVCRT.dll_memset
mov ax, word [0x10019be4]
add esp, 0xc
mov word [ebp - 0x240], ax
xor eax, eax
push 0x3f
lea edi, [ebp - 0x23e]
pop ecx
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ax, word [0x10019be8]
push 0x3f
mov word [ebp - 0x140], ax
pop ecx
xor eax, eax
lea edi, [ebp - 0x13e]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ax, word [0x10019bec]
push 0x3f
mov word [ebp - 0x44c], ax
pop ecx
xor eax, eax
lea edi, [ebp - 0x44a]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0xf]
lea ecx, [ebp - 0x20]
push eax
call fcn.10003ca8
mov esi, 0xff
lea eax, [ebp - 0x44c]
push esi
push eax
push ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0xd]
lea ecx, [ebp - 0x40]
push eax
push 0x10017508
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
lea eax, [ebp - 0xe]
lea ecx, [ebp - 0x30]
push eax
lea eax, [ebp - 0x44c]
push eax
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.100034cb
add esp, 0xc
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [ebp - 0x20]
call fcn.10003cf2
dec eax
lea ecx, [ebp - 0x20]
push eax
call fcn.10003d05
mov ecx, eax
call dword [sym.imp.MSVCP60.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea eax, [ebp - 0x140]
push esi
push eax
call fcn.10003c48
push str.notepad.exe
lea eax, [ebp - 0x240]
push esi
push eax
call fcn.10003c48
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x140]
push esi
push eax
call fcn.10003c48
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x34c]
push esi
push eax
call fcn.10003c48
lea eax, [ebp - 0x240]
push eax
call fcn.100035b9
mov esi, eax
lea eax, [ebp - 0x140]
push eax
call fcn.100035b9
pop ecx
mov dword [ebp - 0x24c], eax
pop ecx
lea eax, [ebp - 0x34c]
push ebx
push ebx
push eax
push 0x10003820
push ebx
push ebx
mov dword [ebp - 0x248], esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push ebx
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1000a301
jmp 0x10003a70