Function at 0x10011370
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push edi
call fcn.10011060
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
test al, al
je 0x100113b4
push 0
push 0
push 0
push 0x100112d0
push 0
push 0
call esi
mov esi, eax
push 0x3e8
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 1]
mov byte [ebp - 1], 0xe9
push eax
push 0x513508
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call ebx
mov eax, 0x100112b0
sub eax, 0x51350d
mov dword [ebp - 0xc], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x513509
call edi
push eax
call ebx
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x51c5ca
call edi
push eax
call ebx
mov eax, 0x10010ef0
sub eax, 0x51c5cf
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x51c5cb
call edi
push eax
call ebx
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x51c611
call edi
push eax
call ebx
mov eax, 0x10010f10
sub eax, 0x51c616
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x51c612
call edi
push eax
call ebx
call fcn.10011060
test al, al
je 0x100114ad
call fcn.10010f80
test al, al
jne 0x100114ad
push 0
push 0
push 0
push 0x10011140
push 0
push 0
mov dword [0x10052014], 1
call esi
mov esi, eax
push 0x3e8
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x520a8f
call edi
push eax
call ebx
mov eax, 0x10010c30
sub eax, 0x520a94
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x520a90
call edi
push eax
call ebx
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x602d69
call edi
push eax
call ebx
mov eax, 0x10010b90
sub eax, 0x602d6e
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x602d6a
call edi
push eax
call ebx
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x519389
call edi
push eax
call ebx
mov eax, 0x10010da0
sub eax, 0x51938e
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x51938a
call edi
push eax
call ebx
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44231b
call edi
push eax
call ebx
mov eax, 0x10010a90
sub eax, 0x442320
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44231c
call edi
push eax
call ebx
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x521f23
call edi
push eax
call ebx
mov eax, 0x10010ab0
sub eax, 0x521f28
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x521f24
call edi
push eax
call ebx
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x452914
call edi
push eax
call ebx
mov eax, 0x10010b50
sub eax, 0x452919
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x452915
call edi
push eax
call ebx
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44023f
call edi
push eax
call ebx
mov eax, 0x10010d70
sub eax, 0x440244
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x440240
call edi
push eax
call ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret