Function at 0x1010dd88
Capabilities:
Create thread

Disassembly:
push 0xc
mov eax, 0x1012637d
call fcn.100604ea
mov esi, dword [ebp + 8]
test esi, esi
je 0x1010e066
cmp dword [esi], 0x21c
jne 0x1010e066
cmp dword [esi + 0xc], 0x69
jne 0x1010ddc5
call fcn.1010e698
xor ecx, ecx
test al, al
setne cl
mov dword [esi + 4], ecx
jmp 0x1010e066
cmp dword [esi + 0xc], 0x6a
jne 0x1010ddeb
push 1
push dword [0x10193040]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub eax, 0x102
neg eax
sbb eax, eax
inc eax
mov dword [esi + 4], eax
jmp 0x1010e066
call fcn.1010e698
test al, al
jne 0x1010ddfd
and dword [esi + 4], 0
jmp 0x1010e066
xor edi, edi
cmp dword [0x10193048], edi
jne 0x1010de28
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push eax
mov ecx, 0x10193048
call int.1000afb7
cmp dword [0x10193048], edi
je 0x1010e066
mov eax, dword [0x10193040]
mov ebx, dword [sym.imp.USER32.dll_IsWindow]
mov dword [ebp + 8], eax
test eax, eax
jne 0x1010df2f
cmp dword [esi + 0xc], 0x64
je 0x1010e066
push edi
push edi
push edi
push 0x1010e176
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
mov ecx, 0x10193040
call int.1000afb7
push 0xffffffffffffffff
push dword [0x10193048]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [0x10193080]
call ebx
test eax, eax
jne 0x1010df1f
push dword [0x10193080]
call ebx
mov edi, 0x40b
test eax, eax
je 0x1010deb3
push 0
push 0xfffffffffffffff8
push dword [0x10193080]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0
push 0
push edi
push dword [0x10193080]
call dword [sym.imp.USER32.dll_PostMessageW]
push dword [0x10193370]
call ebx
test eax, eax
je 0x1010dee0
push 0
push 0xfffffffffffffff8
push dword [0x10193370]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0
push 0
push edi
push dword [0x10193370]
call dword [sym.imp.USER32.dll_PostMessageW]
push dword [0x101934d0]
call ebx
xor ebx, ebx
test eax, eax
je 0x1010df0c
push ebx
push 0xfffffffffffffff8
push dword [0x101934d0]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push ebx
push ebx
push edi
push dword [0x101934d0]
call dword [sym.imp.USER32.dll_PostMessageW]
push ebx
mov ecx, 0x10193040
call int.1000afb7
mov dword [esi + 4], ebx
jmp 0x1010e066
mov eax, dword [0x10193040]
mov dword [ebp + 8], eax
test eax, eax
je 0x1010e066
cmp dword [esi + 0xc], 0x64
jne 0x1010e052
push dword [0x10193080]
mov dword [0x10194dbc], 1
call ebx
mov edi, 0x40b
test eax, eax
je 0x1010df65
push 0
push 0
push edi
push dword [0x10193080]
call dword [sym.imp.USER32.dll_PostMessageW]
push dword [0x10193370]
call ebx
test eax, eax
je 0x1010df92
push 0
push 0xfffffffffffffff8
push dword [0x10193370]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0
push 0
push edi
push dword [0x10193370]
call dword [sym.imp.USER32.dll_PostMessageW]
push dword [0x101934d0]
call ebx
xor ebx, ebx
test eax, eax
je 0x1010dfbe
push ebx
push 0xfffffffffffffff8
push dword [0x101934d0]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push ebx
push ebx
push edi
push dword [0x101934d0]
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebp + 8]
test eax, eax
je 0x1010dfd1
push 0x4e20
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ebx
mov ecx, 0x10193040
call int.1000afb7
push ebx
xor eax, eax
inc eax
push ebx
push eax
push ebx
mov dword [esi + 4], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov esi, eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], ebx
test esi, esi
je 0x1010e014
push ebx
push ebx
push 0x10194db4
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
test eax, eax
jle 0x1010e014
push 0xa
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x1010dff8
push 0x10193328
lea ecx, [ebp - 0x10]
call fcn.10002155
mov byte [ebp - 4], 1
mov eax, dword [0x10194db8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x10], 0
mov dword [0x10194db8], ebx
je 0x1010e045
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test esi, esi
je 0x1010e066
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1010e066
mov eax, dword [esi + 8]
sub eax, 1
je 0x1010e05f
mov dword [esi + 4], edi
jmp 0x1010e066
mov ecx, esi
call fcn.1010e06e
call fcn.100604b3
ret 4