Function at 0x101019a
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
xor ebx, ebx
push esi
push edi
xor eax, eax
lea edi, [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
stosd dword es:[edi], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
cmp eax, ebx
je 0x101041e
cmp word [eax], bx
je 0x101041e
push eax
push 0x1001940
push 0x20000
call fcn.01011628
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
add esp, 0xc
push ebx
push ebx
push 1
push ebx
call esi
mov dword [0x10496f8], eax
cmp eax, ebx
jne 0x1010226
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1010213
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x101021e
mov esi, 0x80004005
push esi
push 0x65
jmp 0x1010426
push ebx
push ebx
push 1
push ebx
call esi
mov edi, eax
mov dword [ebp - 0x10], edi
cmp edi, ebx
jne 0x101025d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x101024a
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x1010255
mov esi, 0x80004005
push esi
push 0x6b
jmp 0x1010426
lea eax, [ebp - 8]
push eax
call fcn.010117a7
mov esi, eax
cmp esi, ebx
jge 0x1010274
push esi
push 0x6f
jmp 0x1010426
lea eax, [ebp - 0x18]
push eax
push ebx
push ebx
push 0x1010129
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xc], eax
cmp eax, ebx
jne 0x10102b5
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x10102a2
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x10102ad
mov esi, 0x80004005
push esi
push 0x7b
jmp 0x1010426
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x10]
call fcn.01011b02
mov esi, eax
cmp esi, ebx
jge 0x10102cf
push esi
push 0x7f
jmp 0x1010426
push edi
push dword [0x10496f8]
push dword [ebp + 0x10]
call fcn.0100ff67
mov esi, eax
cmp esi, ebx
jge 0x10102ef
push esi
push 0x85
jmp 0x1010426
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
jne 0x1010326
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1010310
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x101031b
mov esi, 0x80004005
push esi
push 0x8f
jmp 0x1010426
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10496f8]
push 0x493e0
mov dword [ebp - 0x20], eax
push ebx
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x1c], edi
mov edi, dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
push 2
mov dword [ebp - 4], ebx
call edi
cmp eax, 1
je 0x101039f
cmp eax, ebx
je 0x1010435
cmp eax, 0x102
jne 0x1010375
mov esi, 0x800705b4
push esi
push 0xb0
jmp 0x1010426
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1010389
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x1010394
mov esi, 0x80004005
push esi
push 0xb4
jmp 0x1010426
mov eax, dword [0x10496f8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x20]
push eax
push 2
call edi
cmp eax, ebx
je 0x1010435
cmp eax, 1
jne 0x10103f7
lea eax, [ebp - 0x14]
push eax
push dword [ebp + 0x10]
call fcn.01014931
mov esi, eax
cmp esi, ebx
jl 0x10103ef
cmp dword [ebp - 0x14], ebx
jne 0x10103ad
push dword [ebp + 0x10]
push 0x10018d0
push 0x20000
call fcn.01011628
add esp, 0xc
jmp 0x1010435
push esi
push 0xce
jmp 0x1010426
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x101040b
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x1010416
mov esi, 0x80004005
push esi
push 0xda
jmp 0x1010426
mov esi, 0x80070057
push esi
push 0x5a
push 0x1001848
push 0x1001830
call fcn.0101167d
call fcn.010100bc
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0xc], ebx
je 0x101044a
push dword [ebp - 0xc]
call edi
cmp dword [ebp - 4], ebx
je 0x1010454
push dword [ebp - 4]
call edi
cmp dword [ebp - 8], ebx
je 0x101045e
push dword [ebp - 8]
call edi
cmp dword [ebp - 0x10], ebx
je 0x1010468
push dword [ebp - 0x10]
call edi
push dword [0x10496f8]
call edi
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0x10