Function at 0x1030db5
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x244
mov eax, dword [0x103d004]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x224], eax
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
xor esi, esi
lea eax, [ebp - 0x20a]
push esi
push eax
mov dword [ebp - 0x21c], edi
call sub.msvcrt.dll_memset
add esp, 0xc
call dword [sym.imp.SETUPAPI.dll_SetupGetThreadLogToken]
push esi
push esi
push 1
push esi
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], edx
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x238], edi
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], edx
call dword [sym.imp.API_MS_Win_Core_Synch_L1_1_0.dll_CreateEventW]
push 0x1007ea8
push esi
push 0x100000
mov dword [ebp - 0x234], eax
call dword [sym.imp.API_MS_Win_Core_Synch_L1_1_0.dll_OpenEventW]
cmp dword [ebp - 0x234], esi
mov esi, dword [sym.imp.SETUPAPI.dll_SetupWriteTextLog]
mov dword [ebp - 0x230], eax
mov edi, 0x1000000
jne 0x1030e92
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError]
push eax
push 0x101d0c8
push 1
push edi
push dword [ebp - 0x214]
mov dword [ebp - 0x210], eax
push dword [ebp - 0x218]
call esi
add esp, 0x18
jmp 0x103104e
xor ecx, ecx
cmp eax, ecx
jne 0x1030ea6
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError]
push eax
push 0x101d09c
jmp 0x1030e73
push ecx
push ecx
lea eax, [ebp - 0x23c]
push eax
push 0x102d51c
push ecx
push ecx
call dword [sym.imp.API_MS_Win_Core_ProcessThreads_L1_1_0.dll_CreateThread]
mov dword [ebp - 0x220], eax
xor eax, eax
cmp dword [ebp - 0x220], eax
jne 0x1030eda
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError]
push eax
push 0x101d078
jmp 0x1030e73
test byte [ebp + 0x14], 0x20
jne 0x1030f44
push eax
push eax
push 4
mov dword [ebp - 0x210], eax
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x240]
push eax
push 0x101534c
push dword [ebp - 0x21c]
push ebx
call dword [sym.imp.SETUPAPI.dll_SetupDiGetDevicePropertyW]
test eax, eax
je 0x1030f17
cmp dword [ebp - 0x240], 7
je 0x1030f1e
and dword [ebp - 0x210], 0
and dword [ebp - 0x210], 0xffffffdf
push 0
push 4
lea eax, [ebp - 0x210]
push eax
push 7
push 0x101534c
push dword [ebp - 0x21c]
push ebx
call dword [sym.imp.SETUPAPI.dll_SetupDiSetDevicePropertyW]
lea eax, [ebp - 0x20c]
push eax
push dword [ebp + 0x14]
push dword [ebp - 0x21c]
push ebx
call fcn.0103082a
push dword [ebp - 0x234]
mov dword [ebp - 0x210], eax
call dword [sym.imp.API_MS_Win_Core_Synch_L1_1_0.dll_SetEvent]
push 0
push 0x2710
push dword [ebp - 0x220]
call dword [sym.imp.API_MS_Win_Core_Synch_L1_1_0.dll_WaitForSingleObjectEx]
push dword [ebp - 0x220]
call dword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
push dword [ebp - 0x234]
call dword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
push dword [ebp - 0x230]
and dword [ebp - 0x234], 0
call dword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x210], 0
je 0x1030fcc
cmp dword [ebp - 0x210], 0xe0000228
jne 0x103104e
jmp 0x1031033
lea eax, [ebp - 0x244]
push eax
mov dword [ebp - 0x244], 0x3c
call fcn.0102e017
lea eax, [ebp - 0x224]
push eax
push dword [ebp - 0x21c]
push ebx
call fcn.01030ce9
mov dword [ebp - 0x210], eax
test eax, eax
je 0x103101a
push 0x101d048
push 1
push edi
push dword [ebp - 0x214]
push dword [ebp - 0x218]
call esi
add esp, 0x14
jmp 0x103104e
push 0x101d01c
push 4
push edi
push dword [ebp - 0x214]
push dword [ebp - 0x218]
call esi
add esp, 0x14
push dword [ebp + 0x14]
push dword [ebp - 0x21c]
push ebx
push dword [ebp - 0x224]
call fcn.0102ed54
mov dword [ebp - 0x210], eax
cmp word [ebp - 0x20c], 0
je 0x103109e
mov eax, dword [0x103d0a8]
test eax, eax
je 0x1031095
push 0x101d008
push eax
call dword [sym.imp.API_MS_Win_Core_LibraryLoader_L1_1_0.dll_GetProcAddress]
test eax, eax
je 0x103107c
lea ecx, [ebp - 0x20c]
push ecx
call eax
jmp 0x1031095
push 0x101cfd4
push 2
push edi
push dword [ebp - 0x214]
push dword [ebp - 0x218]
call esi
add esp, 0x14
xor eax, eax
mov word [ebp - 0x20c], ax
cmp dword [ebp - 0x234], 0
pop edi
pop esi
pop ebx
je 0x10310b6
push dword [ebp - 0x234]
call dword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
cmp dword [ebp - 0x230], 0
je 0x10310cb
push dword [ebp - 0x230]
call dword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
mov eax, dword [0x103d0a8]
test eax, eax
je 0x10310db
push eax
call dword [sym.imp.API_MS_Win_Core_LibraryLoader_L1_1_0.dll_FreeLibrary]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x210]
xor ecx, ebp
call fcn.01034b90
leave
ret 0x10