Function at 0x100168e0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ac047
mov eax, dword fs:[0]
push eax
mov eax, 0x166c
call fcn.100785e0
mov eax, dword [0x100e2524]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x1398], esi
lea edi, [esi + 0x38]
mov dword [ebp - 0x139c], 0
mov dword [ebp - 0x13ac], edi
test edi, edi
je 0x10016937
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [esi + 0x60], 0
mov dword [ebp - 4], 0
jne 0x10017687
mov eax, dword [esi + 0x80]
sub eax, dword [esi + 0x7c]
sar eax, 2
cmp eax, dword [esi + 0x8c]
jbe 0x1001744b
mov ecx, esi
call fcn.100180c0
mov ecx, dword [esi + 0x8c]
lea eax, [ecx + 1]
mov dword [esi + 0x8c], eax
mov eax, dword [esi + 0x7c]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x138c], eax
test eax, eax
je 0x10017687
mov ecx, eax
call fcn.10011f90
mov dword [ebp - 0x1388], eax
test eax, eax
je 0x10017687
mov eax, dword [ebp - 0x138c]
mov ecx, eax
push 2
mov dword [esi + 0x88], eax
call fcn.10029d80
mov ecx, dword [ebp - 0x1388]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov ecx, dword [ebp - 0x138c]
mov dword [esi + 0x54], eax
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov ecx, dword [ebp - 0x1388]
mov dword [esi + 0x58], eax
call fcn.10012490
test eax, eax
je 0x10016a98
push 0x1c
call fcn.1007816a
add esp, 4
mov dword [ebp - 0x138c], eax
mov byte [ebp - 4], 1
test eax, eax
je 0x10016a62
push 0x100ba088
lea ecx, [ebp - 0x1390]
call fcn.10012b10
mov dword [ebp - 0x139c], 1
mov ecx, dword [ebp - 0x138c]
mov eax, dword [esi + 0x54]
mov byte [ebp - 4], 2
mov dword [ecx + 4], eax
lea eax, [ebp - 0x1390]
mov dword [ecx], 2
mov dword [ecx + 8], 0xffffffff
mov dword [ecx + 0xc], 0xffffffff
mov dword [ecx + 0x10], 2
mov dword [ecx + 0x14], 0xffffffff
add ecx, 0x18
push eax
call fcn.10011780
mov eax, dword [ebp - 0x138c]
jmp 0x10016a64
xor eax, eax
push eax
mov ecx, esi
mov dword [ebp - 4], 3
call fcn.10013890
mov eax, dword [ebp - 0x139c]
mov dword [ebp - 4], 0
test al, 1
je 0x10016a98
and eax, 0xfffffffe
lea ecx, [ebp - 0x1390]
mov dword [ebp - 0x139c], eax
call fcn.10009500
lea ecx, [ebp - 0x1394]
call fcn.10012bc0
mov ecx, dword [ebp - 0x1388]
lea edx, [ebp - 0x1384]
push edx
mov byte [ebp - 4], 4
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
push dword [eax]
lea eax, [ebp - 0x1394]
mov byte [ebp - 4], 5
push 0x100ba088
push dword [0x100e1080]
push dword [esi + 0x58]
push dword [0x100e1088]
push dword [esi + 0x54]
push dword [0x100e1084]
push dword [esi + 4]
push dword [0x100e107c]
push str.__s_d__s_d__s_d__s__s___s
push eax
call fcn.10014060
mov edx, dword [ebp - 0x1384]
add esp, 0x2c
mov byte [ebp - 4], 4
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10016b1d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi + 0x54], 2
jne 0x10016f43
call fcn.1000b3f0
mov al, byte [eax + 0xa4]
test al, al
je 0x10016e5b
lea eax, [ebp - 0x13c4]
push eax
call fcn.1000b3f0
mov ecx, eax
call fcn.1001e430
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 6
call fcn.10067080
test al, al
je 0x10016e3b
lea ecx, [ebp - 0x13c4]
call fcn.10067890
mov edi, eax
mov dword [ebp - 0x1220], 0
mov dword [ebp - 0x121c], 0xf
mov byte [ebp - 0x1230], 0
mov dword [ebp - 0x1238], 0
mov dword [ebp - 0x1234], 0xf
mov byte [ebp - 0x1248], 0
xor esi, esi
mov byte [ebp - 4], 8
test edi, edi
jle 0x10016ca0
nop word [eax + eax]
lea eax, [ebp - 0x1320]
push eax
push str.is_primary
push esi
lea ecx, [ebp - 0x13c4]
call fcn.100653e0
mov ecx, eax
call fcn.100656d0
mov ecx, eax
call fcn.10066410
mov ecx, eax
cmp dword [eax + 0x14], 0x10
jb 0x10016bf0
mov ecx, dword [eax]
push 1
push 0x100b9c20
push dword [eax + 0x10]
push ecx
call fcn.100081e0
add esp, 0x10
mov byte [ebp - 0x139d], al
lea ecx, [ebp - 0x1320]
call fcn.100096c0
cmp byte [ebp - 0x139d], 0
je 0x10016c97
lea eax, [ebp - 0x1338]
push eax
push 0x100ba21c
push esi
lea ecx, [ebp - 0x13c4]
call fcn.100653e0
mov ecx, eax
call fcn.100656d0
mov ecx, eax
call fcn.10066410
push eax
lea ecx, [ebp - 0x1230]
call fcn.10012f90
lea ecx, [ebp - 0x1338]
call fcn.100096c0
lea eax, [ebp - 0x1350]
push eax
push 0x100ba228
push esi
lea ecx, [ebp - 0x13c4]
call fcn.100653e0
mov ecx, eax
call fcn.100656d0
mov ecx, eax
call fcn.10066410
push eax
lea ecx, [ebp - 0x1248]
call fcn.10012f90
lea ecx, [ebp - 0x1350]
call fcn.100096c0
inc esi
cmp esi, edi
jl 0x10016bc0
lea ecx, [ebp - 0x13a8]
call fcn.10012bc0
cmp dword [ebp - 0x1234], 0x10
lea eax, [ebp - 0x1248]
push 0xfde9
cmovae eax, dword [ebp - 0x1248]
push eax
lea eax, [ebp - 0x1380]
mov byte [ebp - 4], 9
push eax
call fcn.1005fb70
mov esi, eax
cmp dword [ebp - 0x121c], 0x10
lea ecx, [ebp - 0x1230]
push 0xfde9
cmovae ecx, dword [ebp - 0x1230]
lea eax, [ebp - 0x1368]
push ecx
push eax
mov byte [ebp - 4], 0xa
call fcn.1005fb70
add esp, 0x18
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 0xb
jb 0x10016d10
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x10016d18
mov eax, dword [eax]
push esi
push eax
lea eax, [ebp - 0x13a8]
push str.___vendor_id_s___device_id_s
push eax
call fcn.10014060
add esp, 0x10
lea ecx, [ebp - 0x1368]
call fcn.10009710
lea ecx, [ebp - 0x1380]
mov byte [ebp - 4], 9
call fcn.10009710
mov ecx, dword [ebp - 0x13a8]
mov eax, ecx
mov esi, dword [ebp - 0x1394]
sub eax, esi
sar eax, 1
mov dword [ebp - 0x1384], eax
mov edx, dword [ecx - 0xc]
mov edi, dword [esi - 0xc]
mov dword [ebp - 0x1390], edi
test edx, edx
js 0x100176ad
push edx
push ecx
call fcn.1008669d
mov ecx, 0x7fffffff
mov dword [ebp - 0x1388], eax
sub ecx, eax
add esp, 8
cmp ecx, edi
jl 0x100176b7
add edi, eax
js 0x100176c1
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, edi
or eax, ecx
jge 0x10016dbe
push edi
lea ecx, [ebp - 0x1394]
call fcn.1000c6a0
mov esi, dword [ebp - 0x1394]
mov eax, dword [ebp - 0x1384]
mov edx, dword [ebp - 0x1390]
lea ecx, [esi + eax*2]
cmp eax, edx
jbe 0x10016dd7
mov ecx, dword [ebp - 0x13a8]
mov eax, dword [ebp - 0x1388]
add eax, eax
push eax
push ecx
push eax
lea eax, [esi + edx*2]
push eax
call fcn.10018700
add esp, 0x10
cmp edi, dword [esi - 8]
jg 0x100176ad
xor eax, eax
mov dword [esi - 0xc], edi
lea ecx, [ebp - 0x13a8]
mov word [esi + edi*2], ax
call fcn.10009500
lea ecx, [ebp - 0x1248]
call fcn.100096c0
lea ecx, [ebp - 0x1230]
call fcn.100096c0
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 4
call fcn.10065140
mov edi, dword [ebp - 0x13ac]
jmp 0x10016f49
mov esi, dword [ebp - 0x1394]
lea ecx, [ebp - 0x13c4]
mov byte [ebp - 4], 4
call fcn.10065140
mov edi, dword [ebp - 0x13ac]
jmp 0x10016f49
call fcn.10063090
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10016f3d
push 0x86
push str.d:jenkins.jenkinsworkspacemaster_lu_benchmark_suite_benchmark_suite_aimarkbenchmarksuite_benchmarksuite_benchmark_engine_proxy.cpp
lea ecx, [ebp - 0x12c0]
mov dword [ebp - 0x12b0], eax
mov dword [ebp - 0x12ac], 0xf
mov byte [ebp - 0x12c0], al
call fcn.1000f000
push 3
push 0x100b9b00
lea ecx, [ebp - 0x12a8]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1298], 0
mov dword [ebp - 0x1294], 0xf
mov byte [ebp - 0x12a8], 0
call fcn.1000f000
mov byte [ebp - 4], 0xd
call fcn.10063090
mov edi, eax
lea ecx, [ebp - 0x14b0]
push 0xca
lea eax, [ebp - 0x12c0]
push eax
lea eax, [ebp - 0x12a8]
push eax
call fcn.10008c30
mov esi, eax
push str.gpu_info_not_ready_
push esi
mov byte [ebp - 4], 0xe
call fcn.10009db0
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x14b0]
call fcn.10009fe0
lea ecx, [ebp - 0x12a8]
call fcn.100096c0
lea ecx, [ebp - 0x12c0]
mov byte [ebp - 4], 4
call fcn.100096c0
mov edi, dword [ebp - 0x13ac]
mov esi, dword [ebp - 0x1394]
mov eax, dword [ebp - 0x1398]
mov ecx, dword [eax + 0x88]
mov dword [eax + 0x78], 0
call fcn.10029ba0
mov dword [ebp - 0x1384], eax
mov byte [ebp - 4], 0xf
call fcn.1000b090
mov ecx, eax
test ecx, ecx
je 0x100176cb
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x138c], eax
cmp dword [ebp - 0x1384], 0
mov byte [ebp - 4], 0x10
je 0x10016fc3
mov edx, dword [str.BenchmarkLauncher_x64.exe]
test edx, edx
jne 0x10016fa5
xor ecx, ecx
jmp 0x10016ff3
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x1384], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10016fb0
sub ecx, dword [ebp - 0x1384]
jmp 0x10016ff1
mov edx, dword [str.BenchmarkLauncher.exe]
test edx, edx
jne 0x10016fd1
xor ecx, ecx
jmp 0x10016ff3
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x1384], eax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10016fe0
sub ecx, dword [ebp - 0x1384]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x138c]
call fcn.10017b00
call fcn.1000b090
mov ecx, eax
test ecx, ecx
je 0x100176d5
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
or dword [ebp - 0x139c], 4
add eax, 0x10
push 0x208
mov dword [ebp - 0x13a4], eax
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.100832e0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push dword [0x100e484c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push dword [ebp - 0x138c]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10017080
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x13a4]
call fcn.10017b00
mov edx, dword [ebp - 0x138c]
or eax, 0xffffffff
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100170c4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x13a4]
call fcn.100576f0
add esp, 4
test eax, eax
je 0x100171e0
xorps xmm0, xmm0
mov dword [ebp - 0x1418], 0x44
lea eax, [ebp - 0x1418]
movlpd qword [ebp - 0x1414], xmm0
push eax
movlpd qword [ebp - 0x140c], xmm0
movlpd qword [ebp - 0x1404], xmm0
movlpd qword [ebp - 0x13fc], xmm0
movlpd qword [ebp - 0x13f4], xmm0
movlpd qword [ebp - 0x13ec], xmm0
movlpd qword [ebp - 0x13e4], xmm0
movlpd qword [ebp - 0x13dc], xmm0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov eax, 1
mov dword [ebp - 0x13ec], 1
push 0x1000
mov word [ebp - 0x13e8], ax
xorps xmm0, xmm0
lea eax, [ebp - 0x1218]
push 0
push eax
movups xmmword [ebp - 0x13d4], xmm0
call fcn.100832e0
add esp, 0xc
lea eax, [ebp - 0x1218]
test esi, esi
je 0x1001718b
push esi
push dword [ebp - 0x13a4]
push str.__s___s
push eax
call fcn.10012ae0
add esp, 0x10
jmp 0x1001719f
push dword [ebp - 0x13a4]
push str.__s_
push eax
call fcn.10012ae0
add esp, 0xc
lea eax, [ebp - 0x13d4]
push eax
lea eax, [ebp - 0x1418]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x1218]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x100171e0
push dword [ebp - 0x13d0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x13d4]
jmp 0x100171e2
xor ecx, ecx
mov eax, dword [ebp - 0x1398]
mov edx, dword [ebp - 0x13a4]
mov byte [ebp - 4], 4
add edx, 0xfffffff0
mov dword [eax + 0x74], ecx
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001720d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.10063090
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1001732a
push 0x86
push str.d:jenkins.jenkinsworkspacemaster_lu_benchmark_suite_benchmark_suite_aimarkbenchmarksuite_benchmarksuite_benchmark_engine_proxy.cpp
lea ecx, [ebp - 0x12f0]
mov dword [ebp - 0x12e0], eax
mov dword [ebp - 0x12dc], 0xf
mov byte [ebp - 0x12f0], al
call fcn.1000f000
push 3
push 0x100b9b00
lea ecx, [ebp - 0x12d8]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x12c8], 0
mov dword [ebp - 0x12c4], 0xf
mov byte [ebp - 0x12d8], 0
call fcn.1000f000
mov byte [ebp - 4], 0x12
call fcn.10063090
mov dword [ebp - 0x1384], eax
lea ecx, [ebp - 0x1548]
push 0xd0
lea eax, [ebp - 0x12f0]
push eax
lea eax, [ebp - 0x12d8]
push eax
call fcn.10008c30
mov dword [ebp - 0x1388], eax
test esi, esi
mov byte [ebp - 4], 0x13
mov ecx, 0x100b990c
cmovne ecx, esi
push ecx
push eax
call fcn.10007090
push 0x100ba288
push dword [ebp - 0x1388]
call fcn.10009db0
mov eax, dword [ebp - 0x1398]
add esp, 0x10
mov ecx, dword [ebp - 0x1388]
push dword [eax + 0x74]
call fcn.10012fd0
mov ecx, dword [ebp - 0x1384]
push dword [ebp - 0x1388]
mov eax, dword [ecx]
call dword [eax + 0x1c]
lea ecx, [ebp - 0x1548]
call fcn.10009fe0
lea ecx, [ebp - 0x12d8]
call fcn.100096c0
lea ecx, [ebp - 0x12f0]
mov byte [ebp - 4], 4
call fcn.100096c0
mov eax, dword [ebp - 0x1398]
cmp dword [eax + 0x74], 0
jne 0x1001742b
call fcn.10063090
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1001742b
push 0x86
push str.d:jenkins.jenkinsworkspacemaster_lu_benchmark_suite_benchmark_suite_aimarkbenchmarksuite_benchmarksuite_benchmark_engine_proxy.cpp
lea ecx, [ebp - 0x1260]
mov dword [ebp - 0x1250], eax
mov dword [ebp - 0x124c], 0xf
mov byte [ebp - 0x1260], al
call fcn.1000f000
push 3
push 0x100b9b00
lea ecx, [ebp - 0x1308]
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x12f8], 0
mov dword [ebp - 0x12f4], 0xf
mov byte [ebp - 0x1308], 0
call fcn.1000f000
mov byte [ebp - 4], 0x15
call fcn.10063090
mov dword [ebp - 0x1384], eax
lea ecx, [ebp - 0x15e0]
push 0xd3
lea eax, [ebp - 0x1260]
push eax
lea eax, [ebp - 0x1308]
push eax
call fcn.10008c30
mov dword [ebp - 0x1390], eax
push str.RunApp_failed
push eax
mov byte [ebp - 4], 0x16
call fcn.10009db0
mov eax, dword [ebp - 0x1384]
add esp, 8
mov ecx, eax
mov edx, dword [eax]
push dword [ebp - 0x1390]
call dword [edx + 0x1c]
lea ecx, [ebp - 0x15e0]
call fcn.10009fe0
lea ecx, [ebp - 0x1308]
call fcn.100096c0
lea ecx, [ebp - 0x1260]
call fcn.100096c0
mov byte [ebp - 4], 0
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x10017687
mov ecx, dword [esi]
push esi
jmp 0x10017682
call fcn.10063090
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x1001756c
push 0x86
push str.d:jenkins.jenkinsworkspacemaster_lu_benchmark_suite_benchmark_suite_aimarkbenchmarksuite_benchmarksuite_benchmark_engine_proxy.cpp
lea ecx, [ebp - 0x1290]
mov dword [ebp - 0x1280], eax
mov dword [ebp - 0x127c], 0xf
mov byte [ebp - 0x1290], al
call fcn.1000f000
push 3
push 0x100b9b00
lea ecx, [ebp - 0x1278]
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x1268], 0
mov dword [ebp - 0x1264], 0xf
mov byte [ebp - 0x1278], 0
call fcn.1000f000
mov byte [ebp - 4], 0x18
call fcn.10063090
mov dword [ebp - 0x1384], eax
lea ecx, [ebp - 0x1678]
push 0xd8
lea eax, [ebp - 0x1290]
push eax
lea eax, [ebp - 0x1278]
push eax
call fcn.10008c30
mov esi, eax
push str.callback___OnEnd_is_cancel_:
push esi
mov byte [ebp - 4], 0x19
call fcn.10009db0
mov eax, dword [ebp - 0x1398]
add esp, 8
mov ecx, esi
push dword [eax + 0x60]
call fcn.10009b20
push str._current_benchmark_item_
push esi
call fcn.10009db0
mov eax, dword [ebp - 0x1398]
add esp, 8
mov ecx, esi
push dword [eax + 0x8c]
call fcn.100119b0
mov ecx, dword [ebp - 0x1384]
push esi
mov eax, dword [ecx]
call dword [eax + 0x1c]
lea ecx, [ebp - 0x1678]
call fcn.10009fe0
lea ecx, [ebp - 0x1278]
call fcn.100096c0
lea ecx, [ebp - 0x1290]
mov byte [ebp - 4], 0
call fcn.100096c0
mov esi, dword [ebp - 0x1398]
mov eax, dword [esi + 0x8c]
neg eax
push 0x1c
sbb eax, eax
and eax, 3
mov dword [ebp - 0x1384], eax
call fcn.1007816a
add esp, 4
mov dword [ebp - 0x1390], eax
mov byte [ebp - 4], 0x1a
test eax, eax
je 0x10017648
call fcn.1000b090
mov ecx, eax
test ecx, ecx
je 0x100176df
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1388], eax
mov eax, 0x100ba088
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1388]
test eax, 0xffff0000
jne 0x100175db
movzx eax, ax
push eax
call fcn.1000bf50
jmp 0x100175e7
push 0
push 0x100ba088
call fcn.10017b00
mov dword [ebp - 0x139c], 2
mov eax, 4
cmp dword [esi + 0x60], 0
mov ecx, dword [ebp - 0x1390]
mov edx, dword [ebp - 0x1384]
cmovne edx, eax
mov byte [ebp - 4], 0x1c
mov eax, dword [esi + 0x54]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x1388]
mov dword [ecx], 0xa
mov dword [ecx + 8], 0xffffffff
mov dword [ecx + 0xc], 0xffffffff
mov dword [ecx + 0x10], edx
mov dword [ecx + 0x14], 0xffffffff
add ecx, 0x18
push eax
call fcn.10011780
mov eax, dword [ebp - 0x1390]
jmp 0x1001764a
xor eax, eax
push eax
mov ecx, esi
mov dword [ebp - 4], 0x1d
call fcn.10013890
test byte [ebp - 0x139c], 2
mov dword [ebp - 4], 0
je 0x10017687
mov edx, dword [ebp - 0x1388]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10017687
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test edi, edi
je 0x10017692
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007850b
mov esp, ebp
pop ebp
ret
push 0x80070057
call fcn.1000aa20
push 0x80070057
call fcn.1000aa20
push 0x80070057
call fcn.1000aa20
push 0x80004005
call fcn.1000aa20
push 0x80004005
call fcn.1000aa20
push 0x80004005
call fcn.1000aa20
int3