Function at 0x10101c10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xb0
mov ebx, ecx
test edx, edx
je 0x10101fa9
mov edi, 1
lock xadd dword [0x10551ec4], edi
push 0
push 0
push 0
push 0xffffffffffffffff
call sub.KERNEL32.dll_CreateIoCompletionPort
test eax, eax
mov dword [esp + 0x5c], ebx
je 0x10102042
mov esi, eax
call sub.KERNEL32.dll_GetProcessHeap
push 0xc00
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [esp + 0xc], eax
je 0x10102667
call sub.KERNEL32.dll_GetProcessHeap
push 4
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102652
mov dword [eax], 0
mov ebx, eax
mov al, byte [esp + 0x12]
mov byte [esp + 0xa], al
movzx eax, word [esp + 0x10]
mov word [esp + 8], ax
call sub.KERNEL32.dll_GetProcessHeap
push 0x24
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x1010266e
inc edi
mov dword [eax], 1
mov dword [eax + 4], 1
mov edx, dword [esp + 0xc]
xorps xmm0, xmm0
mov dword [esp + 0xc], eax
mov dword [eax + 8], edi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], ebx
mov byte [eax + 0x14], 0
movzx ecx, word [esp + 8]
mov word [eax + 0x15], cx
mov cl, byte [esp + 0xa]
mov byte [eax + 0x17], cl
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], 0x100
mov dword [eax + 0x20], 0
mov dword [esp + 0x24], 0
movaps xmmword [esp + 0x10], xmm0
mov dword [esp + 0x20], 0
mov dword [esp + 0x29], 0
mov dword [esp + 0x25], 0
call sub.KERNEL32.dll_GetProcessHeap
push 0x20
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102659
movsd xmm0, qword [esp + 0x28]
mov esi, eax
movsd qword [eax + 0x18], xmm0
movsd xmm0, qword [esp + 0x20]
movsd qword [eax + 0x10], xmm0
movsd xmm0, qword [esp + 0x10]
movsd xmm1, qword [esp + 0x18]
movsd qword [eax], xmm0
xorps xmm0, xmm0
movsd qword [eax + 8], xmm1
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x29], 0
mov dword [esp + 0x25], 0
movaps xmmword [esp + 0x10], xmm0
call sub.KERNEL32.dll_GetProcessHeap
push 0x20
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102659
movsd xmm0, qword [esp + 0x28]
mov ebx, eax
movsd qword [eax + 0x18], xmm0
movsd xmm0, qword [esp + 0x20]
movsd qword [eax + 0x10], xmm0
movsd xmm0, qword [esp + 0x10]
movsd xmm1, qword [esp + 0x18]
movsd qword [eax], xmm0
xorps xmm0, xmm0
movsd qword [eax + 8], xmm1
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x29], 0
mov dword [esp + 0x25], 0
movaps xmmword [esp + 0x10], xmm0
call sub.KERNEL32.dll_GetProcessHeap
push 0x20
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102659
movsd xmm0, qword [esp + 0x28]
mov edi, eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], esi
movsd qword [eax + 0x18], xmm0
movsd xmm0, qword [esp + 0x20]
movsd qword [eax + 0x10], xmm0
movsd xmm0, qword [esp + 0x10]
movsd xmm1, qword [esp + 0x18]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
call sub.KERNEL32.dll_GetProcessHeap
push 4
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102652
mov esi, eax
mov dword [eax], 0
call sub.KERNEL32.dll_GetProcessHeap
push 0x2c
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102675
mov dword [eax], 1
mov dword [eax + 4], 1
mov ebx, eax
mov dword [eax + 8], esi
mov dword [eax + 0xc], 0
mov dword [eax + 0x14], 0
mov eax, dword [esp + 0x3c]
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], eax
mov eax, dword [esp + 0x38]
mov dword [ebx + 0x24], eax
mov dword [ebx + 0x28], edi
call sub.KERNEL32.dll_GetProcessHeap
push 4
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102652
mov esi, eax
mov dword [eax], 0
call sub.KERNEL32.dll_GetProcessHeap
push 4
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102652
mov ecx, dword [esp + 0xc]
mov dword [eax], 0
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], esi
mov byte [esp + 0x50], 0
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], 0
lock inc dword [ecx]
jle 0x1010267c
lea esi, [ebx + 8]
mov ecx, dword [esi]
call fcn.100f4af0
mov eax, dword [0x10551f14]
test eax, eax
jne 0x1010262d
xor edx, edx
mov al, byte [ebx + 0xc]
test al, al
jne 0x10102680
mov ecx, ebx
add ecx, 0x14
mov eax, dword [ecx]
test eax, eax
je 0x10101f5f
lock dec dword [eax]
jne 0x10101f5f
mov edi, edx
call fcn.10048d70
mov edx, edi
mov eax, dword [esp + 0xc]
test dl, dl
mov dword [ebx + 0x10], 0xffffffff
mov dword [ebx + 0x14], eax
jne 0x10101f7e
mov eax, dword [0x10551f14]
test eax, eax
jne 0x1010263c
mov esi, dword [esi]
mov eax, dword [0x10551f24]
test eax, eax
je 0x10102050
cmp eax, 0x100f3390
jne 0x10102079
mov eax, dword [esi]
mov byte [eax + 0x18], 0
push eax
call sub.KERNEL32.dll_LeaveCriticalSection
jmp 0x101020a3
call sub.KERNEL32.dll_GetProcessHeap
push 4
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102652
mov esi, eax
mov dword [eax], 0
call sub.KERNEL32.dll_GetProcessHeap
push 4
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102652
mov edi, eax
mov dword [eax], 0
call sub.KERNEL32.dll_GetProcessHeap
push 0x1c
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102660
mov dword [eax], 1
mov dword [eax + 4], 1
mov dword [eax + 8], 0
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], edi
mov dword [eax + 0x18], 0
mov dword [ebx + 4], 1
mov dword [ebx + 8], eax
mov dword [ebx + 0x24], 0
mov dword [ebx], 0
jmp 0x10102625
call sub.KERNEL32.dll_GetLastError
mov edi, eax
xor ebx, ebx
jmp 0x10102615
mov ecx, 0x103a03b9
mov edx, 0x17
call fcn.100f2fc0
test eax, eax
mov eax, 0x100f3390
cmovne eax, edx
mov dword [0x10551f24], eax
cmp eax, 0x100f3390
je 0x10101f98
mov eax, dword [0x10551f3c]
test eax, eax
jne 0x101020a0
mov ecx, str.ReleaseSRWLockExclusive
mov edx, 0x17
call fcn.100f2fc0
test eax, eax
mov eax, 0x100f51d0
cmovne eax, edx
mov dword [0x10551f3c], eax
push esi
call eax
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x58]
movsd xmm0, qword [esp + 0x50]
movsd xmm1, qword [esp + 0x48]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x60], eax
movsd qword [esp + 0x68], xmm1
movsd qword [esp + 0x70], xmm0
mov dword [esp + 0x78], edx
call sub.KERNEL32.dll_GetProcessHeap
push 0x20
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102659
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [eax + 0x18], 2
mov byte [eax + 0x1c], 0
mov cl, byte [esp + 0x12]
mov byte [eax + 0x1f], cl
movzx ecx, word [esp + 0x10]
mov word [eax + 0x1d], cx
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov eax, dword [0x10551ebc]
cmp eax, 5
jb 0x1010214b
mov eax, dword [0x10551ec0]
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
lea edx, [esp + 0x80]
push 2
push 1
push bind
push eax
call fcn.10049420
add esp, 0x10
mov ebx, dword [esp + 0x10]
cmp bl, 3
jne 0x10102500
xorps xmm0, xmm0
movaps xmmword [esp + 0x40], xmm0
call sub.KERNEL32.dll_GetProcessHeap
push 0x4000
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x101026ab
movaps xmm0, xmmword [esp + 0x40]
mov edi, eax
mov eax, 0xffffc010
movaps xmmword [esp + 0x10], xmm0
nop dword [eax]
movsd xmm0, qword [esp + 0x10]
movsd xmm1, qword [esp + 0x18]
movsd qword [edi + eax + 0x3ff8], xmm1
movsd qword [edi + eax + 0x3ff0], xmm0
add eax, 0x10
jne 0x101021b0
movsd xmm0, qword [esp + 0x10]
movsd xmm1, qword [esp + 0x18]
movsd qword [edi + eax + 0x3ff8], xmm1
movsd qword [edi + eax + 0x3ff0], xmm0
call sub.KERNEL32.dll_GetProcessHeap
push 0x2000
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x101026b2
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x80]
movsd xmm0, qword [esp + 0x70]
movsd xmm1, qword [esp + 0x68]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x78]
movsd qword [esp + 0x20], xmm0
movsd xmm0, qword [esp + 0x60]
movsd qword [esp + 0x18], xmm1
mov dword [esp + 0x28], eax
movsd qword [esp + 0x10], xmm0
call sub.KERNEL32.dll_GetProcessHeap
push 0xa0
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x101026b9
mov dword [eax], bind
mov dword [eax + 4], 0x20
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x14], bind
mov dword [eax + 0x18], 0x40
mov dword [eax + 0x1c], 0x20
mov dword [eax + 0x20], 0
mov dword [eax + 0x28], bind
mov dword [eax + 0x2c], 0x80
mov dword [eax + 0x30], 0x60
mov dword [eax + 0x34], 0
mov dword [eax + 0x3c], bind
mov dword [eax + 0x40], 0x100
mov dword [eax + 0x44], 0xe0
mov dword [eax + 0x48], 0
mov dword [eax + 0x50], bind
mov dword [eax + 0x54], 0x200
mov dword [eax + 0x58], 0x1e0
mov dword [eax + 0x5c], 0
mov dword [eax + 0x64], bind
mov dword [eax + 0x68], 0x400
mov dword [eax + 0x6c], 0x3e0
mov dword [eax + 0x70], 0
mov dword [eax + 0x78], bind
mov dword [eax + 0x7c], 0x800
mov dword [eax + 0x80], 0x7e0
mov dword [eax + 0x84], 0
mov dword [eax + 0x8c], bind
mov dword [eax + 0x90], 0x1000
mov dword [eax + 0x94], 0xfe0
mov ebx, eax
mov dword [eax + 0x98], 0
call sub.KERNEL32.dll_GetProcessHeap
push 0x20
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102659
mov esi, eax
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
call sub.KERNEL32.dll_GetProcessHeap
push 4
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10102652
mov dword [eax], 0
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x84]
movsd xmm0, qword [esp + 0x10]
movsd xmm1, qword [esp + 0x18]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x28]
movsd qword [esp + 0x40], xmm0
movsd xmm0, qword [esp + 0x20]
movsd qword [esp + 0x48], xmm1
mov dword [esp + 0x58], eax
movzx eax, word [esp + 0x98]
movsd qword [esp + 0x50], xmm0
mov word [esp + 8], ax
mov al, byte [esp + 0x9a]
mov byte [esp + 0xa], al
call sub.KERNEL32.dll_GetProcessHeap
push 0x44
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x101026c0
mov dword [eax], 1
mov dword [eax + 4], 1
mov ecx, eax
movsd xmm0, qword [esp + 0x40]
movsd xmm1, qword [esp + 0x48]
movsd qword [eax + 8], xmm0
movsd qword [eax + 0x10], xmm1
movsd xmm0, qword [esp + 0x50]
movsd qword [eax + 0x18], xmm0
mov eax, dword [esp + 0x58]
mov dword [ecx + 0x20], eax
mov eax, dword [esp + 0x38]
mov dword [ecx + 0x24], esi
mov dword [ecx + 0x28], 8
mov dword [ecx + 0x2c], ebx
mov dword [ecx + 0x30], 8
mov dword [ecx + 0x34], eax
mov byte [ecx + 0x38], 0
movzx eax, word [esp + 8]
mov word [ecx + 0x39], ax
mov al, byte [esp + 0xa]
mov byte [ecx + 0x3b], al
mov eax, dword [esp + 0x7c]
mov dword [ecx + 0x3c], 0
mov dword [ecx + 0x40], eax
mov eax, dword [ecx + 4]
mov esi, dword [esp + 0x5c]
jmp 0x101024b3
mov eax, dword [ecx + 4]
cmp eax, 0xffffffff
je 0x101024b0
lea edx, [eax + 1]
lock cmpxchg dword [ecx + 4], edx
jne 0x101024b3
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x3c]
mov dword [esi + 4], 0
mov dword [esi + 8], edi
mov dword [esi + 0xc], 0x400
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0x400
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], ecx
mov dword [esi], 0
jmp 0x10102625
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x80]
lea ecx, [esp + 0x80]
call fcn.10049880
lock dec dword [esi + 0x18]
jne 0x10102544
mov eax, dword [esi + 0x14]
test eax, eax
je 0x10102536
mov dword [esp + 0x10], eax
lock dec dword [eax]
jne 0x10102536
lea ecx, [esp + 0x10]
call fcn.10048f30
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
mov esi, dword [esp + 0x84]
lock dec dword [esi + 0x18]
jne 0x10102578
mov eax, dword [esi + 0x14]
test eax, eax
je 0x1010256a
mov dword [esp + 0x10], eax
lock dec dword [eax]
jne 0x1010256a
lea ecx, [esp + 0x10]
call fcn.10048f30
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esp + 0x60]
lock dec dword [eax]
jne 0x1010258a
lea ecx, [esp + 0x60]
call fcn.10048d70
lea esi, [esp + 0x64]
mov ecx, esi
call fcn.10048e70
mov eax, dword [esp + 0x64]
lock dec dword [eax]
jne 0x101025a5
mov ecx, esi
call fcn.10048f30
mov esi, dword [esp + 0x6c]
mov eax, dword [0x10551f24]
test eax, eax
jne 0x101025d0
mov ecx, 0x103a03b9
mov edx, 0x17
call fcn.100f2fc0
test eax, eax
mov eax, 0x100f3390
cmovne eax, edx
mov dword [0x10551f24], eax
cmp eax, 0x100f3390
jne 0x101025f1
mov esi, dword [esi]
test esi, esi
je 0x101025f1
push esi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
mov esi, dword [esp + 0x6c]
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
mov esi, dword [esp + 0x74]
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esp + 0x5c]
mov dword [eax + 4], ebx
mov dword [eax + 8], edi
mov dword [eax], 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.100faaa0
mov edx, eax
xor dl, 1
jmp 0x10101f3b
call fcn.100faaa0
test al, al
jne 0x10101f7e
mov byte [ebx + 0xc], 1
jmp 0x10101f7e
mov ecx, 4
jmp 0x101026c5
mov ecx, 0x20
jmp 0x101026c5
mov ecx, 0x1c
jmp 0x101026c5
mov ecx, 0xc00
jmp 0x101026c5
mov ecx, 0x24
jmp 0x101026c5
mov ecx, 0x2c
jmp 0x101026c5
ud2
mov dword [esp + 0x10], esi
mov byte [esp + 0x14], dl
lea eax, [esp + 0x10]
mov ecx, 0x103c93eb
mov edx, 0x2b
push 0x10397184
push 0x10397174
push eax
call fcn.1000aa20
add esp, 0xc
ud2
mov ecx, 0x4000
jmp 0x101026c5
mov ecx, 0x2000
jmp 0x101026c5
mov ecx, 0xa0
jmp 0x101026c5
mov ecx, 0x44
mov edx, 4
call fcn.100067d0
ud2