Function at 0x100097aa
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
push ebx
push esi
push edi
push dword [ebp + 0x10]
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], ebx
call fcn.100189b6
push dword [ebp + 0x1c]
mov dword [ebp - 0x24], eax
push dword [ebp + 0xc]
push dword [ebp + 0x24]
push dword [ebp + 8]
call fcn.10009d85
mov esi, eax
push esi
push dword [ebp + 0x20]
mov dword [ebp - 8], esi
push dword [ebp + 0x10]
call fcn.1000a36c
push esi
call fcn.10009de7
add esp, 0x24
test eax, eax
jne 0x1000981d
movzx eax, word [esi + 8]
push eax
call fcn.1000938d
pop ecx
test eax, eax
je 0x1000981d
mov eax, dword [eax + 4]
test eax, eax
je 0x1000981d
push dword [ebp + 0x10]
lea ecx, [ebp - 4]
push ecx
push dword [esi + 0x14]
call eax
add esp, 0xc
lea eax, [ebp - 8]
push eax
call fcn.10009ea4
mov eax, dword [ebp - 4]
mov edi, dword [ebp + 0x18]
pop ecx
test eax, eax
je 0x100099b8
push 1
push eax
call fcn.10015369
push dword [ebp - 4]
mov dword [edi + 4], eax
push dword [ebp + 8]
call fcn.10009d58
add esp, 0x10
mov dword [ebp - 0x10], eax
xor edx, edx
mov dword [ebp - 0x18], ebx
mov esi, eax
push 5
pop ecx
div ecx
push ebx
push ebx
push ebx
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x28], eax
cmp esi, 5
ja 0x1000987f
xor ecx, ecx
xor edx, edx
inc ecx
inc edx
mov dword [ebp - 8], ecx
jmp 0x1000988d
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
add edx, ecx
push 5
pop esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], ebx
test esi, esi
je 0x10009948
push dword [ebp + 8]
call fcn.10009d37
mov dword [ebp - 0x2c], eax
add esp, 4
lea eax, [ebp - 0xfe]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 4
lea esi, [eax - 0x16]
mov edi, dword [ebp - 0x18]
cmove ecx, edx
lea edx, [ebp - 0x28]
mov dword [esi], edx
add edi, ecx
mov edx, dword [ebp + 0xc]
mov dword [eax - 4], edx
mov edx, dword [ebp + 0x24]
mov dword [eax], edx
mov edx, dword [ebp - 0x24]
mov dword [eax - 8], edx
mov edx, dword [ebp + 0x1c]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x2c]
imul eax, ecx
push 1
push eax
call fcn.10015369
pop ecx
pop ecx
mov ecx, dword [ebp - 0x20]
push ebx
push ebx
push esi
push 0x10009720
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x18]
push ebx
mov dword [ecx - 0x12], eax
mov eax, dword [ebp + 8]
push ebx
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], 1
mov dword [ecx - 0xe], edi
mov word [ecx - 0xa], ax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x18], edi
mov dword [ebp + ecx*4 - 0x40], eax
inc ecx
mov eax, dword [ebp - 0x20]
add eax, 0x2a
mov dword [ebp - 0x1c], ecx
cmp ecx, esi
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 8]
jb 0x100098b2
mov edi, dword [ebp + 0x18]
push 0xffffffffffffffff
push 1
lea eax, [ebp - 0x40]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test esi, esi
je 0x100099b5
lea esi, [ebp - 0xfe]
cmp dword [esi + 0xc], ebx
jne 0x10009989
cmp dword [esi + 8], ebx
jbe 0x10009989
push dword [esi + 8]
mov eax, dword [edi + 4]
push dword [esi + 0x10]
add eax, dword [ebp - 0x14]
push eax
call fcn.10011ee0
mov eax, dword [ebp - 0x14]
add esp, 0xc
add eax, dword [esi + 8]
mov dword [ebp - 0x14], eax
mov dword [esi - 4], ebx
mov dword [esi], ebx
mov dword [esi - 8], ebx
mov dword [esi + 0xc], 1
cmp dword [esi + 0x10], ebx
je 0x100099a9
push dword [esi + 0x10]
call fcn.10015359
pop ecx
mov dword [esi + 0x10], ebx
mov dword [esi + 8], ebx
add esi, 0x2a
sub dword [ebp - 0x10], 1
jne 0x10009961
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x100099c9
push ecx
call fcn.10015359
mov eax, dword [ebp - 4]
pop ecx
cmp eax, dword [ebp - 0x14]
jne 0x100099e6
test eax, eax
jne 0x100099db
mov dword [edi], ebx
mov ebx, 0x251d
jmp 0x100099dd
mov dword [edi], eax
xor eax, eax
mov word [edi + 8], bx
inc eax
jmp 0x10009a02
cmp dword [edi + 4], ebx
je 0x100099f7
push dword [edi + 4]
call fcn.10015359
pop ecx
mov dword [edi + 4], ebx
push 0x1e
pop eax
mov word [edi + 8], ax
xor eax, eax
mov dword [edi], ebx
pop edi
pop esi
pop ebx
leave
ret