Function at 0x100bdb70
Capabilities:
Create thread
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10346b10
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
mov eax, dword [0x1040706c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 9
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.WinAssist
mov word [ecx], ax
call fcn.10002560
push 0
push dword [0x1041caf0]
call fcn.100b3170
mov ecx, eax
call fcn.1019e80c
mov esi, dword [0x1041d2e0]
test esi, esi
jne 0x100bdc53
push 0x1041d2e4
call fcn.100f64be
add esp, 4
test eax, eax
je 0x100bdc02
push eax
call fcn.100f5d86
add esp, 4
mov esi, dword [0x1041d2e0]
test esi, esi
jne 0x100bdc2b
push 8
call fcn.100f99e9
mov esi, eax
add esp, 4
mov dword [esi], vtable.CPublicParamUtil.1.0
mov dword [esi + 4], vtable.CPublicParamUtil.0
mov dword [0x1041d2e0], esi
push 0x1041d2e4
mov dword [ebp - 4], 0
call fcn.100f64e3
add esp, 4
test eax, eax
je 0x100bdc4c
push eax
call fcn.100f5d86
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.100bd000
call fcn.100bde00
mov esi, eax
mov byte [esi], 1
call fcn.1001c650
cmp dword [esi + 4], 0
jne 0x100bdc93
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push esi
push 0
push 0x1001c160
mov dword [esi + 8], eax
call fcn.101e49b9
add esp, 0xc
mov dword [esi + 4], eax
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
push esp
call fcn.100b5920
mov ecx, eax
call fcn.1019d66a
push esi
call fcn.1019c48d
add esp, 8
mov ecx, esp
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.from
mov byte [ecx], 0
call fcn.10006700
call fcn.100bded0
mov ecx, eax
call fcn.101ad5d0
mov esi, dword [0x1041d244]
test esi, esi
jne 0x100bdd50
push 0x1041d248
call fcn.100f64be
add esp, 4
test eax, eax
je 0x100bdd05
push eax
call fcn.100f5d86
add esp, 4
mov esi, dword [0x1041d244]
test esi, esi
jne 0x100bdd28
push 0x3c
call fcn.100f99e9
add esp, 4
mov ecx, eax
call fcn.10198c84
mov esi, eax
mov dword [0x1041d244], esi
push 0x1041d248
mov dword [ebp - 4], 1
call fcn.100f64e3
add esp, 4
test eax, eax
je 0x100bdd49
push eax
call fcn.100f5d86
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0
push 0
mov ecx, esi
call fcn.10199403
push 4
call fcn.101a3b05
push dword [0x1041caf0]
call fcn.1010fcf0
push 0
push 0
push 0
call fcn.101a30d7
add esp, 0x14
call fcn.100bde00
mov esi, eax
mov dl, 1
lea ecx, [esi + 0xc]
xchg byte [ecx], dl
push dword [esi + 8]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [esi + 4]
test eax, eax
je 0x100bddd3
push 0x1388
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x100bddcc
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0
push eax
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
push dword [ebp - 0x10]
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov dword [esi + 4], 0
call dword [sym.imp.ole32.dll_OleUninitialize]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret