Function at 0x10100ba
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
xor ebx, ebx
push esi
push edi
xor eax, eax
lea edi, [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
stosd dword es:[edi], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
cmp eax, ebx
je 0x101033e
cmp word [eax], bx
je 0x101033e
push eax
push 0x1001940
push 0x20000
call fcn.01011548
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
add esp, 0xc
push ebx
push ebx
push 1
push ebx
call esi
mov dword [0x10496f8], eax
cmp eax, ebx
jne 0x1010146
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1010133
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x101013e
mov esi, 0x80004005
push esi
push 0x65
jmp 0x1010346
push ebx
push ebx
push 1
push ebx
call esi
mov edi, eax
mov dword [ebp - 0x10], edi
cmp edi, ebx
jne 0x101017d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x101016a
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x1010175
mov esi, 0x80004005
push esi
push 0x6b
jmp 0x1010346
lea eax, [ebp - 8]
push eax
call fcn.010116c7
mov esi, eax
cmp esi, ebx
jge 0x1010194
push esi
push 0x6f
jmp 0x1010346
lea eax, [ebp - 0x18]
push eax
push ebx
push ebx
push 0x1010049
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xc], eax
cmp eax, ebx
jne 0x10101d5
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x10101c2
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x10101cd
mov esi, 0x80004005
push esi
push 0x7b
jmp 0x1010346
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x10]
call fcn.01011a22
mov esi, eax
cmp esi, ebx
jge 0x10101ef
push esi
push 0x7f
jmp 0x1010346
push edi
push dword [0x10496f8]
push dword [ebp + 0x10]
call fcn.0100fe87
mov esi, eax
cmp esi, ebx
jge 0x101020f
push esi
push 0x85
jmp 0x1010346
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
jne 0x1010246
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1010230
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x101023b
mov esi, 0x80004005
push esi
push 0x8f
jmp 0x1010346
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10496f8]
push 0x493e0
mov dword [ebp - 0x20], eax
push ebx
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x1c], edi
mov edi, dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
push 2
mov dword [ebp - 4], ebx
call edi
cmp eax, 1
je 0x10102bf
cmp eax, ebx
je 0x1010355
cmp eax, 0x102
jne 0x1010295
mov esi, 0x800705b4
push esi
push 0xb0
jmp 0x1010346
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x10102a9
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x10102b4
mov esi, 0x80004005
push esi
push 0xb4
jmp 0x1010346
mov eax, dword [0x10496f8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x20]
push eax
push 2
call edi
cmp eax, ebx
je 0x1010355
cmp eax, 1
jne 0x1010317
lea eax, [ebp - 0x14]
push eax
push dword [ebp + 0x10]
call fcn.01014851
mov esi, eax
cmp esi, ebx
jl 0x101030f
cmp dword [ebp - 0x14], ebx
jne 0x10102cd
push dword [ebp + 0x10]
push 0x10018d0
push 0x20000
call fcn.01011548
add esp, 0xc
jmp 0x1010355
push esi
push 0xce
jmp 0x1010346
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x101032b
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
cmp esi, ebx
jne 0x1010336
mov esi, 0x80004005
push esi
push 0xda
jmp 0x1010346
mov esi, 0x80070057
push esi
push 0x5a
push 0x1001848
push 0x1001830
call fcn.0101159d
call fcn.0100ffdc
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0xc], ebx
je 0x101036a
push dword [ebp - 0xc]
call edi
cmp dword [ebp - 4], ebx
je 0x1010374
push dword [ebp - 4]
call edi
cmp dword [ebp - 8], ebx
je 0x101037e
push dword [ebp - 8]
call edi
cmp dword [ebp - 0x10], ebx
je 0x1010388
push dword [ebp - 0x10]
call edi
push dword [0x10496f8]
call edi
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0x10