Function at 0x1100c530
Capabilities:
Create thread
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1117e2fc
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x111ec774]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 0x464
call fcn.111101b0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
mov esi, eax
mov eax, dword [ebp + 8]
mov dword [edi + 4], esi
mov dword [esi + 4], eax
add esp, 4
lea eax, [esi + 0x10]
mov dword [esi], edi
mov edi, dword [sym.imp.KeRneL32.DLl_InitializeCriticalSection]
push eax
mov dword [esi + 8], ecx
mov dword [esi + 0xc], edx
call edi
lea ecx, [esi + 0x28]
push ecx
call edi
lea edx, [esi + 0x40]
push edx
call edi
lea eax, [esi + 0x58]
push eax
call edi
push 0
push 0
push 0
push 0
call dword [sym.imp.KeRneL32.DLl_CreateEventA]
mov dword [esi + 0x88], eax
test eax, eax
jne 0x1100c5ca
push 0x15d
push 0x11196028
push 0x111966b8
call fcn.11029a70
add esp, 0xc
push 4
call fcn.111101b0
add esp, 4
mov dword [ebp + 8], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x1100c5f4
mov ecx, dword [esi + 0x88]
push ecx
push 1
mov ecx, eax
call fcn.11110de0
jmp 0x1100c5f6
xor eax, eax
or edi, 0xffffffff
push 4
mov dword [ebp - 4], edi
mov dword [esi + 0x8c], eax
call fcn.111101b0
add esp, 4
mov dword [ebp + 8], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x1100c62c
mov edx, dword [esi + 0x88]
push edx
push 1
mov ecx, eax
call fcn.11110de0
jmp 0x1100c62e
xor eax, eax
push 4
mov dword [ebp - 4], edi
mov dword [esi + 0x90], eax
call fcn.111101b0
add esp, 4
mov dword [ebp + 8], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x1100c661
mov ecx, dword [esi + 0x88]
push ecx
push 1
mov ecx, eax
call fcn.11110de0
jmp 0x1100c663
xor eax, eax
push 4
mov dword [ebp - 4], edi
mov dword [esi + 0x1e8], eax
call fcn.111101b0
add esp, 4
mov dword [ebp + 8], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x1100c696
mov edx, dword [esi + 0x88]
push edx
push 1
mov ecx, eax
call fcn.11110de0
jmp 0x1100c698
xor eax, eax
mov dword [esi + 0x1ec], eax
mov dword [esi + 0x210], 0xfffffffe
mov dword [esi + 0x23c], edi
call dword [sym.imp.KeRneL32.DLl_GetVersion]
push 0x111966ac
mov byte [esi + 0x239], al
call dword [sym.imp.KeRneL32.DLl_LoadLibraryA]
mov dword [esi + 0x214], eax
test eax, eax
je 0x1100c747
mov edi, dword [sym.imp.KeRneL32.DLl_GetProcAddress]
push 0x1119669c
push eax
call edi
mov dword [esi + 0x218], eax
mov eax, dword [esi + 0x214]
push 0x1119668c
push eax
call edi
mov ecx, dword [esi + 0x214]
push 0x1119667c
push ecx
mov dword [esi + 0x21c], eax
call edi
mov edx, dword [esi + 0x214]
push 0x11196664
push edx
mov dword [esi + 0x220], eax
call edi
mov dword [esi + 0x224], eax
mov eax, dword [esi + 0x214]
push 0x11196650
push eax
call edi
mov ecx, dword [esi + 0x214]
push 0x11196634
push ecx
mov dword [esi + 0x228], eax
call edi
mov dword [esi + 0x22c], eax
lea edx, [ebp - 0x10]
push edx
push 0
push esi
push 0x1100c0f0
push 0x2000
push 0
call dword [sym.imp.KeRneL32.DLl_CreateThread]
mov esi, eax
test esi, esi
jne 0x1100c77d
push 0x174
push 0x11196028
push 0x1119662c
call fcn.11029a70
add esp, 0xc
push 1
push esi
call dword [sym.imp.KeRneL32.DLl_SetThreadPriority]
push esi
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc