Function at 0x115aaa0
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, dword [esi]
push edi
xor edi, edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], ebx
cmp ebx, edi
je 0x115ae9e
mov eax, dword [ebx + 4]
push eax
call fcn.01159060
cmp dword [esi + 8], edi
je 0x115ab13
mov ecx, dword [ebx]
push 1
add ecx, 0x129d4
push ecx
call dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
push ebx
call fcn.011244d0
test eax, eax
je 0x115ae9e
push ebx
call fcn.011277e0
test eax, eax
je 0x115ae9e
mov eax, dword [ebx]
lea edx, [eax + 0x129dc]
push edx
push eax
call fcn.0111b1b0
mov dword [ebp - 0xc], 1
jmp 0x115ab83
push ebx
call fcn.01127790
test eax, eax
je 0x115ae9e
push ebx
call fcn.010f45a0
test eax, eax
je 0x115ae9e
mov eax, dword [ebx]
mov ecx, dword [eax + 0x3550]
push 0x23
push 0x1021c8c
add ecx, 0x1cc
push ecx
call fcn.010295e0
mov edx, dword [ebx]
mov eax, dword [edx + 0x3550]
push eax
push ebx
call fcn.01097d40
mov eax, dword [ebx]
mov ecx, dword [eax + 0x3550]
push ecx
push eax
call fcn.010d3e60
mov edx, dword [ebx]
mov dword [edx + 0x129d4], 1
mov eax, dword [ebx]
mov eax, dword [eax + 0x3550]
and dword [eax + 0x228], 0xffffffef
mov esi, dword [ebx]
mov ecx, dword [ebx + 4]
mov edx, dword [esi + 0x2a4]
mov dword [ebp - 4], ecx
call edx
mov dword [ebp - 8], eax
cmp dword [esi + 0x8298], edi
je 0x115abaa
cmp dword [esi + 0x82a8], edi
jne 0x115acd1
lea eax, [esi + 0x8444]
push 0
push eax
call dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
cmp dword [esi + 0x82a8], edi
jne 0x115abcb
push esi
call fcn.010ea1f0
test eax, eax
je 0x115ac20
cmp dword [esi + 0x8298], edi
jne 0x115acd1
push esi
call fcn.0110e850
mov eax, dword [ebp - 4]
push eax
push esi
call fcn.011539c0
mov edi, eax
cmp edi, 1
jne 0x115abff
push 0
lea eax, [esi + 0x8444]
push eax
call dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
jmp 0x115ac17
mov ecx, dword [esi]
push ecx
call fcn.01123a10
test eax, eax
je 0x115ac17
mov edx, dword [ebp - 4]
push edx
push esi
call fcn.011539c0
mov edi, eax
cmp edi, 1
je 0x115acd1
cmp dword [esi + 0x8450], 0
jne 0x115acd1
mov ecx, dword [esi + 0x13d0c]
mov eax, dword [ebp - 8]
add ecx, 0x927c0
cmp eax, ecx
jbe 0x115ac76
mov dword [esi + 0x13d0c], eax
mov eax, 1
mov dword [esi + 0x13d08], eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x115ac76
push esi
call fcn.0110e850
mov edx, dword [ebp - 4]
push edx
push esi
call fcn.011539c0
dec dword [ebp - 8]
mov edi, eax
cmp edi, 1
jne 0x115ac54
jmp 0x115acd1
cmp edi, 1
je 0x115acd1
mov eax, dword [esi + 0x3550]
test eax, eax
je 0x115ac9a
test dword [eax + 0x138], 0x20000000
jne 0x115acd1
cmp dword [eax + 0x270], 0
jne 0x115acd1
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, 0x927c0
ja 0x115acb0
cmp dword [esi + 0x1d780], 0
jne 0x115acbc
mov eax, dword [ebp - 4]
push eax
push esi
call fcn.01153fc0
mov edi, eax
cmp edi, 1
je 0x115acd1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x14]
push 6
push 0
push 0
push eax
push esi
call ecx
push 1
add esi, 0x829c
push esi
call dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
mov edi, dword [ebp + 8]
cmp dword [edi + 8], 0
jne 0x115ad15
mov edx, dword [edi + 0x30968]
mov eax, dword [edx + 0x2b594]
cmp dword [eax + 0x444], 0
jne 0x115ad15
mov ecx, dword [ebx]
mov edx, dword [ecx + 0x3550]
cmp dword [edx + 0x924], 0
je 0x115ad15
push edi
call fcn.0110d2f0
mov eax, dword [ebx]
push 0
push 0
push eax
call fcn.01101690
mov esi, eax
test esi, esi
je 0x115ae73
push 2
mov dword [edi + 0x3095c], esi
push 0
push esi
mov dword [esi + 0x490], edi
mov dword [esi + 0x48c], 0x1079720
mov dword [esi + 0x430], 1
call fcn.0103ee30
lea ecx, [ebp - 8]
push ecx
push 0
push esi
push 0x114edf0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateThread]
mov edi, eax
test edi, edi
je 0x115ade6
cmp edi, 0xffffffff
je 0x115ade6
mov ebx, dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
push 0x4e20
push edi
call ebx
cmp eax, 0x102
jne 0x115addc
push 1
lea edx, [esi + 0x14]
push edx
call dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
push 0x9c40
push edi
call ebx
cmp eax, 0x102
jne 0x115addc
push 0x7530
push edi
mov dword [esi + 0x43c], 1
call ebx
cmp eax, 0x102
jne 0x115addc
cmp dword [esi + 0xa0], 0
je 0x115add0
push 0x7530
push edi
call ebx
push 0xffffffffffffffff
push edi
mov dword [esi + 0x10], 1
call ebx
push edi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov ebx, dword [ebp - 0x10]
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov eax, dword [esi + 0x498]
mov edi, dword [ebp + 8]
mov dword [edi + 0x30398], eax
mov ecx, dword [esi + 0x47c]
mov dword [edi + 0x3039c], ecx
mov edx, dword [esi + 0x480]
mov dword [edi + 0x303a0], edx
mov eax, dword [esi + 0x40c]
mov dword [edi + 0x30428], eax
mov ecx, dword [esi + 0xb4]
push 1
lea edx, [edi + 0x30960]
mov dword [edi + 0x3042c], ecx
push edx
mov dword [esi + 0x498], 0
call dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
cmp dword [edi + 0x30964], 0
je 0x115ae63
push 0xa
call dword [sym.imp.KERNEL32.DLL_Sleep]
cmp dword [edi + 0x30964], 0
jne 0x115ae52
push esi
call fcn.01083900
mov dword [edi + 0x3095c], 0
cmp dword [ebp - 0xc], 0
je 0x115ae9e
push 0
push ebx
call fcn.01093a30
mov eax, dword [ebx]
mov dword [eax + 0x3550], 0
mov ebx, dword [ebx]
mov ecx, dword [ebx + 0x3538]
push 0
push ecx
push ebx
call fcn.010934f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4