Function at 0x1011b650
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10196fa5
mov eax, dword fs:[0]
push eax
sub esp, 0x348
mov eax, dword [0x101d8724]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x80
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
call fcn.101166e0
push 0x38
call fcn.1014c6a4
add esp, 4
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x2a4], 0
je 0x1011b6c9
push 0
push 1
mov ecx, dword [ebp - 0x2a4]
call fcn.101679a0
mov dword [ebp - 0x34c], eax
jmp 0x1011b6d3
mov dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2a0]
mov dword [0x101e73e4], ecx
xor edx, edx
mov word [0x101e71ac], dx
jmp 0x1011b70d
mov ax, word [0x101e71ac]
add ax, 1
mov word [0x101e71ac], ax
movzx ecx, word [0x101e71ac]
cmp ecx, 3
jge 0x1011b7da
movzx edx, word [0x101e71ac]
movzx eax, word [edx*2 + 0x101e71b4]
push eax
push 0
mov ecx, dword [0x101e73e4]
call fcn.10167ea0
movzx ecx, al
test ecx, ecx
je 0x1011b746
jmp 0x1011b7da
movzx edx, word [0x101e71ac]
movzx eax, word [edx*2 + 0x101e71b4]
push eax
push 0x101a1054
lea ecx, [ebp - 0x29c]
push ecx
call fcn.1014ea28
add esp, 0xc
lea edx, [ebp - 0x29c]
push edx
lea ecx, [ebp - 0x74]
call fcn.100e1250
mov dword [ebp - 4], 1
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
lea eax, [ebp - 0x74]
push eax
push 0x49
call fcn.1008ebf0
add esp, 0x28
push eax
mov ecx, dword [0x101e73d0]
push ecx
call fcn.10117d50
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74]
call fcn.10063f10
jmp 0x1011b6fd
movzx edx, word [0x101e71ac]
cmp edx, 3
jge 0x1011b884
movzx eax, word [0x101e71ac]
movzx ecx, word [eax*2 + 0x101e71b4]
push ecx
push 0x101a1054
lea edx, [ebp - 0x29c]
push edx
call fcn.1014ea28
add esp, 0xc
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0xd4]
call fcn.100e1250
mov dword [ebp - 4], 2
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
lea ecx, [ebp - 0xd4]
push ecx
push 0x4b
call fcn.1008ebf0
add esp, 0x28
push eax
mov edx, dword [0x101e73d0]
push edx
call fcn.10117d50
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd4]
call fcn.10063f10
jmp 0x1011b8d1
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x4d
call fcn.1008ebf0
add esp, 0x28
push eax
mov eax, dword [0x101e73d0]
push eax
call fcn.10117d50
add esp, 8
xor al, al
jmp 0x1011bba9
xor ecx, ecx
mov word [0x101e71b0], cx
jmp 0x1011b8ee
mov dx, word [0x101e71b0]
add dx, 1
mov word [0x101e71b0], dx
movzx eax, word [0x101e71b0]
cmp eax, 3
jge 0x1011ba8d
push 0x38
call fcn.1014c6a4
add esp, 4
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 4], 3
cmp dword [ebp - 0x2ac], 0
je 0x1011b943
movzx ecx, word [0x101e71b0]
movzx edx, word [ecx*2 + 0x101e71bc]
push edx
push 2
mov ecx, dword [ebp - 0x2ac]
call fcn.101679a0
mov dword [ebp - 0x350], eax
jmp 0x1011b94d
mov dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x198]
mov eax, dword [edx + 0x34]
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0
jne 0x1011b989
jmp 0x1011ba8d
mov ecx, dword [ebp - 0x198]
mov dword [ebp - 0x2b4], ecx
mov edx, dword [ebp - 0x2b4]
mov dword [ebp - 0x2b0], edx
cmp dword [ebp - 0x2b0], 0
je 0x1011b9dc
mov ecx, dword [ebp - 0x2b0]
call fcn.10167d50
mov eax, 1
and eax, 1
je 0x1011b9ce
mov ecx, dword [ebp - 0x2b0]
push ecx
call fcn.1014c699
add esp, 4
mov edx, dword [ebp - 0x2b0]
mov dword [ebp - 0x354], edx
jmp 0x1011b9e6
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x198], 0
movzx eax, word [0x101e71b0]
movzx ecx, word [eax*2 + 0x101e71bc]
push ecx
push 0x101a1054
lea edx, [ebp - 0x29c]
push edx
call fcn.1014ea28
add esp, 0xc
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x134]
call fcn.100e1250
mov dword [ebp - 4], 4
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
lea ecx, [ebp - 0x134]
push ecx
push 0x4a
call fcn.1008ebf0
add esp, 0x28
push eax
mov edx, dword [0x101e73d0]
push edx
call fcn.10117d50
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x134]
call fcn.10063f10
jmp 0x1011b8dc
movzx eax, word [0x101e71b0]
cmp eax, 3
jge 0x1011bb36
movzx ecx, word [0x101e71b0]
movzx edx, word [ecx*2 + 0x101e71bc]
push edx
push 0x101a1054
lea eax, [ebp - 0x29c]
push eax
call fcn.1014ea28
add esp, 0xc
lea ecx, [ebp - 0x29c]
push ecx
lea ecx, [ebp - 0x194]
call fcn.100e1250
mov dword [ebp - 4], 5
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
lea edx, [ebp - 0x194]
push edx
push 0x4c
call fcn.1008ebf0
add esp, 0x28
push eax
mov eax, dword [0x101e73d0]
push eax
call fcn.10117d50
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x194]
call fcn.10063f10
jmp 0x1011bb81
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x101e57b0
push 0x4e
call fcn.1008ebf0
add esp, 0x28
push eax
mov ecx, dword [0x101e73d0]
push ecx
call fcn.10117d50
add esp, 8
xor al, al
jmp 0x1011bba9
lea edx, [ebp - 0x19c]
push edx
push 0
mov eax, dword [ebp - 0x198]
push eax
push 0x1011bbd0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1014c68a
mov esp, ebp
pop ebp
ret