Function at 0x100431d0
Capabilities:
Create thread

Disassembly:
sub esp, 0x11c
mov dword [esp + 8], 0xa8c0
push ebx
mov eax, 0xa
mov dword [esp + 0x18], eax
push esi
mov dword [esp + 0x20], eax
push edi
push ebp
xor ebx, ebx
lea edi, [esp + 0x2d]
mov byte [esp + 0x2c], bl
xor eax, eax
mov ecx, 0x3f
mov dword [esp + 0x1c], 0x12c
mov dword [esp + 0x20], 1
mov dword [esp + 0x14], 3
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [esp + 0x10], 0xc8001006
cmp dword [0x1003c960], ebx
jne 0x10043237
mov eax, 1
jmp 0x100434e2
cmp byte [0x1000f3e4], 0
jne 0x1004324d
cmp byte [0x1000f364], 0
je 0x100434dd
mov eax, dword [esp + 0x130]
mov esi, dword [esp + 0x134]
mov eax, dword [eax]
cmp eax, 0xc8001006
je 0x10043270
cmp dword [esi], 0xc8001006
jne 0x100434dd
test byte [0x1000f361], 1
je 0x100434dd
cmp byte [0x1000f3e4], 0
mov ebp, dword [esi]
je 0x10043329
cmp eax, 0xc8001006
jne 0x10043329
mov eax, dword [0x1000f358]
lea ecx, [esp + 0x14]
lea edx, [esp + 0x18]
push ecx
mov edi, dword [esp + 0x13c]
push edx
push edi
mov dword [0x1003cbcc], eax
push 0
push 0
push 0x1003cbcc
push 0x1000f424
push 0x1000f3e4
push 0x1000f030
push 0
call fcn.10050942
mov dword [esp + 0x38], eax
add esp, 0x28
test eax, eax
jne 0x10043311
cmp dword [esp + 0x14], 1
jne 0x10043311
mov eax, dword [edi]
push eax
call fcn.100504af
add esp, 4
cmp eax, 0x29
jne 0x10043311
mov eax, dword [esp + 0x130]
mov dword [eax], 0
mov eax, 1
mov dword [esi], 0
jmp 0x100434e2
cmp dword [esp + 0x10], 0
je 0x100433c1
cmp ebp, 0xc8001006
je 0x10043330
jmp 0x100434dd
mov edi, dword [esp + 0x138]
cmp dword [esp + 0x10], 0
je 0x100433c1
cmp byte [0x1000f364], 0
je 0x100433c1
cmp ebp, 0xc8001006
jne 0x100433c1
mov eax, dword [0x1000f358]
lea ecx, [esp + 0x14]
lea edx, [esp + 0x18]
push ecx
push edx
mov dword [0x1003cbcc], eax
push edi
push 0
push 0
push 0x1003cbcc
push 0x1000f3a4
push 0x1000f364
push 0x1000f030
push 0
call fcn.10050942
add esp, 0x28
mov ebx, eax
test ebx, ebx
jne 0x100434dd
cmp dword [esp + 0x14], 1
jne 0x100433b4
mov eax, dword [edi]
push eax
call fcn.100504af
add esp, 4
cmp eax, 0x29
jne 0x100433b4
mov eax, 1
mov dword [esi], 0
jmp 0x100434e2
test ebx, ebx
jne 0x100434dd
mov ebx, 1
call fcn.10042f20
mov dword [0x10015988], eax
test eax, eax
je 0x10043417
push 0x1003cfb0
push 0x1003cbd0
push 0x1000f46c
call dword [0x10015990]
push 0x10015984
mov eax, dword [0x1001599c]
push 0
push 0
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10015980], eax
test eax, eax
jne 0x1004340d
call fcn.10042fd0
jmp 0x10043417
mov dword [0x1001598c], 1
test ebx, ebx
jne 0x1004348a
mov eax, dword [0x1000f358]
push edi
push 0x1003cbcc
mov dword [0x1003cbcc], eax
push 0x1000f424
push 0x1000f3e4
call fcn.10043050
test eax, eax
jne 0x1004346c
cmp dword [0x10015988], 0
je 0x10043452
call dword [0x10015998]
call fcn.10042fd0
mov eax, dword [esp + 0x130]
mov dword [eax], 0
mov eax, 1
mov dword [esi], 0
jmp 0x100434e2
cmp ebp, 0xc8001006
je 0x1004348a
cmp dword [0x10015988], 0
je 0x100434dd
call dword [0x10015998]
call fcn.10042fd0
jmp 0x100434dd
cmp byte [0x1000f364], 0
je 0x100434bc
mov eax, dword [0x1000f358]
push edi
push 0x1003cbcc
mov dword [0x1003cbcc], eax
push 0x1000f3a4
push 0x1000f364
call fcn.10043050
test eax, eax
jne 0x100434bc
mov dword [esi], 0
cmp dword [0x10015988], 0
je 0x100434d0
call dword [0x10015998]
call fcn.10042fd0
cmp dword [esi], 1
sbb eax, eax
and eax, 0xfffffffd
add eax, 4
jmp 0x100434e2
mov eax, 4
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x11c
ret 0xc