Function at 0x1003dfa0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x234
mov eax, dword [0x100a7914]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x124], 0xa
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov dword [eax + 4], 0
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0xffffffff
mov edx, dword [ebp + 0x10]
mov dword [edx], 0xffffffff
mov eax, dword [ebp + 0x14]
mov dword [eax], 0xffffffff
mov dword [ebp - 0x124], 0xffff
mov dword [ebp - 0x11c], 0
jmp 0x1003e00d
mov ecx, dword [ebp - 0x11c]
add ecx, 1
mov dword [ebp - 0x11c], ecx
mov edx, dword [ebp - 0x11c]
cmp edx, dword [ebp - 0x124]
jae 0x1003e248
xor eax, eax
mov word [ebp - 0x116], ax
mov ecx, dword [ebp - 0x11c]
push ecx
push str..Usbscan_d
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x230]
push eax
push str._s0
lea ecx, [ebp - 0x110]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 4
push 3
push 0
push 3
push 0xc0000000
lea edx, [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
cmp dword [edx], 0xffffffff
je 0x1003e23e
push 0
lea eax, [ebp - 0x120]
push eax
push 8
lea ecx, [ebp - 0x118]
push ecx
push 0
push 0
push 0x80002018
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1003e222
movzx ecx, word [ebp - 0x118]
cmp ecx, dword [ebp + 0x20]
jne 0x1003e206
movzx edx, word [ebp - 0x116]
cmp edx, dword [ebp + 0x1c]
jne 0x1003e206
cmp dword [ebp + 0x24], 0
jne 0x1003e0ee
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov dword [eax], edx
jmp 0x1003e12f
mov eax, dword [ebp + 0x24]
push eax
lea ecx, [ebp - 0x230]
push ecx
push str._s_d
lea edx, [ebp - 0x110]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0
push 4
push 3
push 0
push 3
push 0xc0000000
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov edx, dword [ebp + 0x28]
push edx
lea eax, [ebp - 0x230]
push eax
push str._s_d
lea ecx, [ebp - 0x110]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0
push 4
push 3
push 0
push 3
push 0xc0000000
lea edx, [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
cmp dword [ebp + 0x2c], 0
je 0x1003e1c5
push 0
call dword [ebp + 0x2c]
add esp, 4
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
cdq
mov dword [0x100bdb78], eax
mov dword [0x100bdb7c], edx
mov eax, dword [ebp + 0x2c]
xor ecx, ecx
mov dword [0x100bdb80], eax
mov dword [0x100bdb84], ecx
lea edx, [ebp - 0x234]
push edx
push 0
push 0x100bdb78
push 0x1003dea0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cdq
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0
push 0
push 2
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
push eax
call fcn.1003e3b0
add esp, 0x10
test eax, eax
jne 0x1003e1fb
push 0
push 0
push 2
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
push edx
call fcn.1003e3b0
add esp, 0x10
test eax, eax
jne 0x1003e1fb
xor eax, eax
xor edx, edx
jmp 0x1003e24c
mov eax, 1
xor edx, edx
jmp 0x1003e24c
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp + 0xc]
mov dword [edx], 0xffffffff
jmp 0x1003dffe
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp + 0xc]
mov dword [edx], 0xffffffff
jmp 0x1003dffe
jmp 0x1003dffe
xor eax, eax
xor edx, edx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10029d6b
mov esp, ebp
pop ebp
ret