Function at 0x1000d0f0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x30
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x100519a0
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov eax, dword [0x1027f934]
and eax, dword [0x1027f938]
mov ecx, 0x2fae69d3
xor edx, edx
div ecx
imul ecx, eax, 0x39c842a9
mov eax, ecx
xor eax, 0xffffffff
or eax, 0xae9684a3
xor eax, 0xffffffff
or ecx, 0x51697b5c
xor ecx, 0xffffffff
or eax, ecx
xor eax, 0xffffffff
cmp eax, 0xe3c304b7
jae 0x1000d5ed
mov eax, dword [0x1027f93c]
mov ecx, dword [0x1027f940]
imul eax, ecx
xor eax, 0x93d84fd5
imul eax, eax, 0x96b8cfee
xor eax, 0x7b39f89a
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x28], eax
call fcn.1000ace0
mov cl, al
mov eax, dword [ebp - 0x24]
mov byte [ebp - 0x1d], cl
cmp eax, 0x82bbf899
jbe 0x1000d5ed
mov al, byte [ebp - 0x1d]
test al, 1
jne 0x1000d1be
jmp 0x1000d25e
mov eax, dword [0x1027f944]
mov edx, dword [0x1027f948]
mov esi, eax
xor esi, edx
xor esi, 0xffffffff
mov ecx, edx
and ecx, esi
shl ecx, 1
sub ecx, edx
sub eax, ecx
sub eax, 0x6284fe4
add eax, 0x60f60d87
add eax, 0x6284fe4
mov edx, eax
and edx, 0x67e0d8be
mov ecx, eax
or ecx, 0x67e0d8be
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x981f2741
or eax, 0x981f2741
imul eax, edx
add eax, ecx
sub eax, 0xbe86a818
cmp eax, 0x4a13a026
jb 0x1000d5f7
xor eax, eax
lea eax, [0x1025dad8]
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.1020023e
mov eax, dword [0x1027f954]
xor edx, edx
div dword [0x1027f958]
and eax, 0x7913c86b
xor eax, 0x95622918
xor eax, 0xffffffff
or eax, 0x8599b219
xor eax, 0xffffffff
mov dword [ebp - 0x10], 0xffffffff
cmp eax, 0x11773ff3
jae 0x1000d634
call fcn.10009970
lea ecx, [0x10295c2c]
call fcn.1000d720
and al, 1
movzx eax, al
cmp eax, 0
jne 0x1000d31c
mov ecx, dword [0x1027f964]
sub ecx, dword [0x1027f968]
mov eax, ecx
and eax, 0xd0b4054
shl eax, 1
add ecx, 0xd0b4054
sub ecx, eax
mov eax, ecx
xor eax, 0xffffffff
and eax, 0xe91131c0
xor eax, 0xffffffff
xor ecx, 0xffffffff
or ecx, 0xe91131c0
and eax, ecx
xor eax, 0xffffffff
mov ecx, eax
and ecx, 0x44a38ccb
xor ecx, 0xffffffff
add eax, 0x44a38ccb
add eax, 1
add eax, ecx
cmp eax, 0x2bc60b20
jb 0x1000d649
lea eax, [0x10295c2c]
sub esp, 4
mov dword [esp], eax
call fcn.1000b3b0
add esp, 4
mov eax, dword [0x1027f974]
mov ecx, dword [0x1027f978]
sub eax, 0xd495a940
add eax, ecx
add eax, 0xd495a940
mov ecx, eax
and ecx, 0x35e2683c
mov edx, eax
xor edx, 0xca1d97c3
add eax, edx
sub eax, ecx
mov ecx, eax
xor ecx, 0x5321dd77
xor ecx, 0xffffffff
and ecx, 0x5321dd77
shl ecx, 1
sub ecx, 0x5321dd77
sub eax, ecx
sub eax, 0x83aef383
cmp eax, 0x971b18ab
ja 0x1000d662
mov eax, dword [0x1027f97c]
mov esi, dword [0x1027f980]
mov edx, esi
xor edx, 0xffffffff
mov ecx, eax
and ecx, edx
mov edx, eax
xor edx, esi
add eax, edx
sub eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0xafbe8b39
mov ecx, eax
and ecx, 0x504174c6
imul ecx, edx
mov edx, eax
and edx, 0xafbe8b39
or eax, 0xafbe8b39
imul eax, edx
add eax, ecx
or eax, 0x737d6817
imul eax, eax, 0x526ce9f0
mov dword [ebp - 0x38], eax
xor eax, eax
lea eax, [0x1000b210]
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, eax
mov eax, dword [ebp - 0x30]
mov dword [eax], ecx
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x11170
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, eax
mov eax, dword [ebp - 0x38]
cmp ecx, 0x102
setne cl
mov byte [ebp - 0x31], cl
cmp eax, 0x6d57d941
jbe 0x1000d662
mov al, byte [ebp - 0x31]
test al, 1
jne 0x1000d449
jmp 0x1000d472
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
sub esp, 4
mov eax, esp
mov dword [eax], ecx
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, 2
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [0x1027f984]
mov esi, dword [0x1027f988]
mov ecx, eax
xor ecx, 0xffffffff
mov edx, esi
and edx, ecx
mov edi, esi
xor edi, 0xffffffff
mov ecx, eax
and ecx, edi
imul ecx, edx
mov edx, eax
and edx, esi
or eax, esi
imul eax, edx
add eax, ecx
imul eax, eax, 0x17a03c70
mov ecx, 0xa1406c45
xor edx, edx
div ecx
add eax, 0x371f2411
mov dword [ebp - 0x10], 0xffffffff
cmp eax, 0x79e4015
jb 0x1000d6c0
mov eax, dword [0x1027f98c]
mov ecx, dword [0x1027f990]
add eax, 0x579008f6
add eax, ecx
sub eax, 0x579008f6
imul eax, eax, 0x2b4d56a4
mov ecx, 0x7c9e8adb
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x2c]
sub ecx, 0x4b914625
mov dword [ebp - 0x3c], ecx
sub esp, 4
mov dword [esp], eax
call fcn.1000c9d0
mov eax, dword [ebp - 0x3c]
add esp, 4
cmp eax, 0xae804210
jbe 0x1000d6c0
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0
sub esp, 4
mov eax, esp
mov dword [eax], ecx
call fcn.1000c820
add esp, 4
jmp 0x1000d531
mov eax, dword [0x1027f994]
mov ecx, dword [0x1027f998]
sub eax, 0x2f6a7858
add eax, ecx
add eax, 0x2f6a7858
xor eax, 0xae1e94bb
xor eax, 0x470f38bd
mov ecx, eax
xor ecx, 0x6969bc98
xor ecx, 0xffffffff
or eax, 0x6969bc98
and eax, ecx
cmp eax, 0xe98100f1
ja 0x1000d6d6
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x10], 1
sub esp, 8
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.1009ade0
add esp, 8
jmp 0x1000d593
call fcn.1000a1f0
jmp 0x1000d59d
sub esp, 0x18
mov eax, esp
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0x1000aaf0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
call fcn.10006fe0
jmp 0x1000d5dc
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.1020023e
call fcn.1000ace0
jmp 0x1000d15f
xor eax, eax
lea eax, [0x1025dad8]
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.1020023e
call fcn.10009970
lea ecx, [0x10295c2c]
call fcn.1000d720
jmp 0x1000d292
lea eax, [0x10295c2c]
sub esp, 4
mov dword [esp], eax
call fcn.1000b3b0
add esp, 4
jmp 0x1000d308
xor eax, eax
lea eax, [0x1000b210]
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, eax
mov eax, dword [ebp - 0x30]
mov dword [eax], ecx
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x11170
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x1000d372
mov eax, dword [ebp - 0x2c]
sub esp, 4
mov dword [esp], eax
call fcn.1000c9d0
add esp, 4
jmp 0x1000d4c3
jmp 0x1000d56f