Function at 0x10011a50
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x78
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x100155e0
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
push eax
sub esp, 0x30
mov edi, esp
xorps xmm0, xmm0
movups xmmword [edi + 4], xmm0
mov dword [edi + 0x18], 0
mov dword [edi + 0x14], 0
mov ecx, dword [esi + 0x10]
cmp dword [esi + 0x14], 8
jb 0x10011aa6
mov esi, dword [esi]
cmp ecx, 0x7fffffff
jae 0x1001220f
lea eax, [edi + 4]
cmp ecx, 7
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], ecx
ja 0x10011ad9
mov dword [edi + 0x14], ecx
mov dword [edi + 0x18], 7
movups xmm0, xmmword [esi]
movups xmmword [eax], xmm0
mov dword [ebp - 0x28], 7
jmp 0x10011b54
mov eax, ecx
or eax, 7
cmp eax, 0x7ffffffe
ja 0x10012276
cmp eax, 0xb
mov edx, 0xa
cmovae edx, eax
lea eax, [edx + edx]
cmp edx, 0x7ff
mov dword [ebp - 0x28], edx
jb 0x10011b29
cmp edx, 0x7fffffee
jae 0x10012276
mov ebx, ecx
add eax, 0x25
push eax
call fcn.100177b6
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x10011b37
mov ebx, ecx
add eax, 2
push eax
call fcn.100177b6
add esp, 4
mov dword [edi + 4], eax
mov dword [edi + 0x14], ebx
mov ecx, dword [ebp - 0x28]
mov dword [edi + 0x18], ecx
lea ecx, [ebx + ebx]
add ecx, 2
push ecx
push esi
push eax
call fcn.1001a590
add esp, 0xc
mov edx, dword [ebp + 0x10]
xorps xmm0, xmm0
movups xmmword [edi + 0x1c], xmm0
mov dword [edi + 0x30], 0
mov dword [edi + 0x2c], 0
mov ebx, dword [edx + 0x10]
cmp dword [edx + 0x14], 8
jb 0x10011b77
mov edx, dword [edx]
cmp ebx, 0x7fffffff
jae 0x10012214
mov eax, edi
add eax, 0x1c
cmp ebx, 7
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x40], eax
ja 0x10011baf
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], 7
movups xmm0, xmmword [edx]
movups xmmword [eax], xmm0
mov dword [ebp - 0x20], 7
jmp 0x10011c57
mov dword [edi + 0x30], 7
mov eax, ebx
or eax, 7
cmp eax, 0x7ffffffe
ja 0x1001227b
cmp eax, 0xb
mov ecx, 0xa
cmovae ecx, eax
lea eax, [ecx + ecx]
cmp ecx, 0x7ff
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], edx
jb 0x10011c20
cmp ecx, 0x7fffffee
jae 0x1001227b
add eax, 0x25
mov dword [ebp - 0x10], 7
push eax
call fcn.100177b6
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
mov edi, dword [ebp - 0x30]
mov ecx, dword [edi + 0x14]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x28], ecx
jmp 0x10011c36
add eax, 2
mov dword [ebp - 0x10], 7
push eax
call fcn.100177b6
add esp, 4
mov edi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x38]
mov dword [edi + 0x1c], eax
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], ecx
lea ecx, [ebx + ebx + 2]
push ecx
push edx
push eax
call fcn.1001a590
add esp, 0xc
mov esi, dword [ebp + 8]
mov dword [edi], esi
sub esp, 0x10
xorps xmm0, xmm0
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [ebp - 0x78], esi
xorps xmm0, xmm0
movups xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
mov esi, dword [ebp - 0x3c]
cmp dword [ebp - 0x28], 8
jb 0x10011c90
mov esi, dword [edi + 4]
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x7fffffff
jae 0x10012220
lea edx, [ebp - 0x74]
cmp ecx, 7
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x38], eax
ja 0x10011ce7
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], 7
movups xmm0, xmmword [esi]
movups xmmword [edx], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov edx, dword [ebp - 0x40]
cmp dword [ebp - 0x20], 8
jb 0x10011db0
mov edx, dword [edi + 0x1c]
jmp 0x10011db0
mov dword [ebp - 0x60], 7
or ecx, 7
cmp ecx, 0x7ffffffe
ja 0x10012287
cmp ecx, 0xb
mov edx, 0xa
cmovae edx, ecx
lea ecx, [edx + edx]
cmp edx, 0x7ff
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x24], edx
jb 0x10011d45
mov dword [ebp - 0x10], 0
cmp edx, 0x7fffffee
jae 0x10012287
add ecx, 0x25
push ecx
call fcn.100177b6
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x10011d58
add ecx, 2
mov dword [ebp - 0x10], 0
push ecx
call fcn.100177b6
add esp, 4
mov esi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], edx
lea ecx, [ecx + ecx + 2]
push ecx
push dword [ebp - 0x34]
push eax
call fcn.1001a590
add esp, 0xc
mov ebx, dword [esi + 0x2c]
mov eax, dword [esi + 0x30]
xorps xmm0, xmm0
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov edx, dword [ebp - 0x40]
cmp eax, 8
jb 0x10011da1
mov edx, dword [esi + 0x1c]
cmp ebx, 0x7fffffff
mov eax, dword [ebp - 0x38]
jae 0x100122b7
lea ecx, [ebp - 0x5c]
cmp ebx, 7
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], ecx
ja 0x10011de1
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 7
movups xmm0, xmmword [edx]
movups xmmword [ecx], xmm0
mov dword [ebp - 0x10], 2
mov dword [ebp - 0x34], 7
jmp 0x10011e77
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x48], 7
mov edx, ebx
or edx, 7
cmp edx, 0x7ffffffe
ja 0x10012293
cmp edx, 0xb
mov esi, 0xa
cmovae esi, edx
lea edx, [esi + esi]
cmp esi, 0x7ff
mov dword [ebp - 0x34], esi
jb 0x10011e41
mov dword [ebp - 0x10], 6
cmp esi, 0x7fffffee
jae 0x10012293
add edx, 0x25
push edx
call fcn.100177b6
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x10011e54
add edx, 2
mov dword [ebp - 0x10], 6
push edx
call fcn.100177b6
add esp, 4
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], edx
lea ecx, [ecx + ecx + 2]
push ecx
push dword [ebp - 0x20]
push eax
call fcn.1001a590
add esp, 0xc
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 2
push 0x38
call fcn.100177b6
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x78]
mov dword [esi], eax
xorps xmm0, xmm0
movups xmmword [esi + 4], xmm0
mov dword [esi + 0x18], 0
mov dword [esi + 0x14], 0
mov edx, dword [ebp - 0x64]
cmp dword [ebp - 0x60], 8
jb 0x10011eb6
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x28], eax
cmp edx, 0x7fffffff
mov edi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x20], esi
jae 0x1001222c
lea ebx, [esi + 4]
cmp edx, 7
mov dword [ebp - 0x38], ebx
ja 0x10011f13
mov dword [esi + 0x14], edx
mov dword [esi + 0x18], 7
mov eax, dword [ebp - 0x28]
movups xmm0, xmmword [eax]
movups xmmword [ebx], xmm0
xorps xmm0, xmm0
movups xmmword [esi + 0x1c], xmm0
mov dword [esi + 0x30], 0
mov dword [esi + 0x2c], 0
cmp dword [ebp - 0x34], 8
jb 0x10011fdd
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2c], eax
jmp 0x10011fdd
mov dword [esi + 0x18], 7
mov eax, edx
or eax, 7
cmp eax, 0x7ffffffe
ja 0x1001229f
cmp eax, 0xb
mov ecx, 0xa
cmovae ecx, eax
lea eax, [ecx + ecx]
cmp ecx, 0x7ff
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x24], ecx
jb 0x10011f72
cmp ecx, 0x7fffffee
jae 0x1001229f
add eax, 0x25
mov dword [ebp - 0x10], 4
push eax
call fcn.100177b6
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x10011f85
add eax, 2
mov dword [ebp - 0x10], 4
push eax
call fcn.100177b6
add esp, 4
mov edi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x7c]
mov esi, dword [ebp - 0x20]
mov dword [esi + 4], eax
mov dword [esi + 0x14], ecx
mov edx, dword [ebp - 0x24]
mov dword [esi + 0x18], edx
lea ecx, [ecx + ecx + 2]
push ecx
push dword [ebp - 0x28]
push eax
call fcn.1001a590
add esp, 0xc
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
xorps xmm0, xmm0
movups xmmword [esi + 0x1c], xmm0
mov dword [esi + 0x30], 0
mov dword [esi + 0x2c], 0
cmp eax, 8
jb 0x10011fd1
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2c], eax
cmp ecx, 0x7fffffff
jae 0x100122c3
mov edx, esi
add edx, 0x1c
cmp ecx, 7
mov dword [ebp - 0x28], edx
ja 0x10012002
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x30], 7
mov eax, dword [ebp - 0x2c]
movups xmm0, xmmword [eax]
movups xmmword [edx], xmm0
jmp 0x1001209a
mov dword [esi + 0x30], 7
mov eax, ecx
or eax, 7
cmp eax, 0x7ffffffe
ja 0x100122ab
cmp eax, 0xb
mov esi, 0xa
cmovae esi, eax
lea eax, [esi + esi]
cmp esi, 0x7ff
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x34], esi
jb 0x10012061
mov dword [ebp - 0x10], 5
cmp esi, 0x7fffffee
jae 0x100122ab
add eax, 0x25
push eax
call fcn.100177b6
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x10012074
add eax, 2
mov dword [ebp - 0x10], 5
push eax
call fcn.100177b6
add esp, 4
mov edi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
mov dword [esi + 0x1c], eax
mov dword [esi + 0x2c], ecx
mov edx, dword [ebp - 0x34]
mov dword [esi + 0x30], edx
lea ecx, [ecx + ecx + 2]
push ecx
push dword [ebp - 0x2c]
push eax
call fcn.1001a590
add esp, 0xc
mov eax, dword [ebp - 0x44]
mov dword [esi + 0x34], eax
lea eax, [ebp - 0x80]
push eax
push 0
push esi
push 0x10015460
push 0
push 0
call fcn.1001af4f
add esp, 0x18
mov dword [ebp - 0x84], eax
test eax, eax
je 0x10012238
mov eax, dword [ebp - 0x48]
cmp eax, 8
jb 0x10012103
mov ecx, dword [ebp - 0x5c]
lea esi, [eax + eax]
add esi, 2
cmp esi, 0x1000
jb 0x100120f9
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x10012261
add eax, eax
add eax, 0x25
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.100177eb
add esp, 8
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov eax, dword [ebp - 0x60]
cmp eax, 8
jb 0x1001214e
mov ecx, dword [ebp - 0x74]
lea esi, [eax + eax]
add esi, 2
cmp esi, 0x1000
jb 0x10012144
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x10012261
add eax, eax
add eax, 0x25
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.100177eb
add esp, 8
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x10012250
push eax
push dword [ebp - 0x84]
call fcn.10018463
add esp, 8
test eax, eax
jne 0x10012266
mov eax, dword [edi + 0x30]
cmp eax, 8
jb 0x100121af
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
lea esi, [eax + eax]
add esi, 2
cmp esi, 0x1000
jb 0x100121a5
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x10012261
add eax, eax
add eax, 0x25
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.100177eb
add esp, 8
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 7
mov word [edi + 0x1c], 0
mov eax, dword [edi + 0x18]
cmp eax, 8
jb 0x100121fe
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ecx]
lea esi, [eax + eax]
add esi, 2
cmp esi, 0x1000
jb 0x100121f4
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x10012261
add eax, eax
add eax, 0x25
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.100177eb
add esp, 8
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.100063f0
mov dword [ebp - 0x10], 7
call fcn.100063f0
mov dword [ebp - 0x10], 0
call fcn.100063f0
mov dword [ebp - 0x10], 4
call fcn.100063f0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x10], 3
push 6
call fcn.100180e1
add esp, 4
mov dword [ebp - 0x10], 1
push 1
call fcn.100180e1
add esp, 4
call fcn.1001bda3
mov dword [ebp - 0x10], 1
push eax
call fcn.100180b4
add esp, 4
call fcn.10006400
mov dword [ebp - 0x10], 7
call fcn.10006400
mov dword [ebp - 0x10], 0
call fcn.10006400
mov dword [ebp - 0x10], 6
call fcn.10006400
mov dword [ebp - 0x10], 4
call fcn.10006400
mov dword [ebp - 0x10], 5
call fcn.10006400
mov dword [ebp - 0x10], 6
call fcn.100063f0
mov dword [ebp - 0x10], 5
call fcn.100063f0
nop
push ebp
sub esp, 0x18
add ebp, 0xc
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x18]
cmp eax, 8
jb 0x10012315
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
lea esi, [eax + eax]
add esi, 2
cmp esi, 0x1000
jb 0x1001230b
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x10012330
add eax, eax
add eax, 0x25
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.100177eb
add esp, 8
movsd xmm0, qword [0x10029070]
mov eax, dword [ebp - 0x20]
movsd qword [eax + 0x14], xmm0
mov word [eax + 4], 0
add esp, 0x18
pop ebp
ret
call fcn.1001bda3
nop word cs:[eax + eax]
push ebp
sub esp, 0x18
add ebp, 0xc
push dword [ebp - 0x20]
call fcn.100177e6
add esp, 0x1c
pop ebp
ret