Function at 0x100115d0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
mov eax, dword [0x1001b00c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push edi
push 0
push 0
push 0
push 0x100028e0
push 0
push 0
call esi
mov dword [0x1001c1fc], eax
test eax, eax
je 0x100118eb
push 0
push 0
push 0
push 0x100111a0
push 0
push 0
call esi
test eax, eax
je 0x100118eb
push 0
push 0
push 0
push 0x1000c360
push 0
push 0
call esi
mov dword [0x1001c204], eax
test eax, eax
je 0x100118eb
push 0
push 0
push 0
push 0x10011ea0
push 0
push 0
call esi
test eax, eax
je 0x100118eb
push 0
push 0
push 0
push 0x10010060
push 0
push 0
call esi
test eax, eax
je 0x100118eb
push 0
push 0
push 0
push 0x10003660
push 0
push 0
call esi
mov dword [0x1001c200], eax
test eax, eax
je 0x100118eb
push 0
push 0
push 0
push 0x10004bb0
push 0
push 0
call esi
mov dword [0x1001c1e4], eax
test eax, eax
je 0x100118eb
push 0
push 0
push 0
push 0x1000aa20
push 0
push 0
call esi
mov dword [0x1001c1e8], eax
test eax, eax
je 0x100118eb
push 0
push 0
push 0
push 0x100060e0
push 0
push 0
call esi
mov dword [0x1001c1f8], eax
test eax, eax
je 0x100118eb
push 0
push 0
push 0
push 0x10010490
push 0
push 0
call esi
mov dword [0x1001c1f4], eax
test eax, eax
je 0x100118eb
push 0
push 0
push 0
push 0x10008fc0
push 0
push 0
call esi
mov dword [0x1001c1ec], eax
test eax, eax
je 0x100118eb
push 0x100
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x120], 0x11c
push 0
push eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
call sub.VCRUNTIME140.dll_memset
mov edi, dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
add esp, 0xc
xor eax, eax
mov word [ebp - 0xa], ax
mov dword [ebp - 8], eax
push 3
push 0x20
push 3
push 1
push 3
push 2
push eax
push eax
call edi
push edx
push eax
call edi
push edx
push eax
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
xor ecx, ecx
push edx
push eax
push 0x23
lea eax, [ebp - 0x120]
mov dword [ebp - 0x11c], 6
push eax
mov dword [ebp - 0x118], 3
mov word [ebp - 0xc], cx
call ebx
test eax, eax
je 0x100118be
push 0x100
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x120], 0x11c
push 0
push eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor eax, eax
mov word [ebp - 0xa], ax
mov dword [ebp - 8], eax
push 3
push 0x20
push 3
push 1
push 3
push 2
push eax
push eax
call edi
push edx
push eax
call edi
push edx
push eax
call edi
push edx
push eax
push 0x23
lea eax, [ebp - 0x120]
mov dword [ebp - 0x11c], 6
mov ecx, 1
mov dword [ebp - 0x118], 1
push eax
mov word [ebp - 0xc], cx
call ebx
test eax, eax
je 0x100118be
push 0x100
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x120], 0x11c
push 0
push eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor eax, eax
mov word [ebp - 0xa], ax
mov dword [ebp - 8], eax
push 3
push 0x20
push 3
push 1
push 3
push 2
push eax
push eax
call edi
push edx
push eax
call edi
push edx
push eax
call edi
push edx
push eax
push 0x23
lea eax, [ebp - 0x120]
mov dword [ebp - 0x11c], 6
xor ecx, ecx
mov dword [ebp - 0x118], 1
push eax
mov word [ebp - 0xc], cx
call ebx
test eax, eax
jne 0x100118d8
push 0
push 0
push 0
push 0x1000d080
push 0
push 0
call esi
mov dword [0x1001c1f0], eax
test eax, eax
je 0x100118eb
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10012545
mov esp, ebp
pop ebp
ret
call fcn.10008b90
int3